CVE-2024-50218

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

KVM: SVM: WARN on vNMI + NMI window iff NMIs are outright masked

When requesting an NMI window, WARN on vNMI support being enabled if and only if NMIs are actually masked, i.e. if the vCPU is already handling an NMI. KVM's ABI for NMIs that arrive simultanesouly (from KVM's point of view) is to inject one NMI and pend the other. When using vNMI, KVM pends the second NMI simply by setting V_NMI_PENDING, and lets the CPU do the rest (hardware automatically sets V_NMI_BLOCKING when an NMI is injected).

However, if KVM can't immediately inject an NMI, e.g. because the vCPU is in an STI shadow or is running with GIF=0, then KVM will request an NMI window and trigger the WARN (but still function correctly).

Whether or not the GIF=0 case makes sense is debatable, as the intent of KVM's behavior is to provide functionality that is as close to real hardware as possible. E.g. if two NMIs are sent in quick succession, the probability of both NMIs arriving in an STI shadow is infinitesimally low on real hardware, but significantly larger in a virtual environment, e.g. if the vCPU is preempted in the STI shadow. For GIF=0, the argument isn't as clear cut, because the window where two NMIs can collide is much larger in bare metal (though still small).

That said, KVM should not have divergent behavior for the GIF=0 case based on whether or not vNMI support is enabled. And KVM has allowed simultaneous NMIs with GIF=0 for over a decade, since commit 7460fb4a3400 ("KVM: Fix simultaneous NMIs"). I.e. KVM's GIF=0 handling shouldn't be modified without a really good reason to do so, and if KVM's behavior were to be modified, it should be done irrespective of vNMI support.(CVE-2024-39483)

In the Linux kernel, the following vulnerability has been resolved:

serial: sc16is7xx: fix invalid FIFO access with special register set

When enabling access to the special register set, Receiver time-out and RHR interrupts can happen. In this case, the IRQ handler will try to read from the FIFO thru the RHR register at address 0x00, but address 0x00 is mapped to DLL register, resulting in erroneous FIFO reading.

Call graph example: sc16is7xx_startup(): entry sc16is7xx_ms_proc(): entry sc16is7xx_set_termios(): entry sc16is7xx_set_baud(): DLH/DLL = $009C --> access special register set sc16is7xx_port_irq() entry --> IIR is 0x0C sc16is7xx_handle_rx() entry sc16is7xx_fifo_read(): --> unable to access FIFO (RHR) because it is mapped to DLL (LCR=LCR_CONF_MODE_A) sc16is7xx_set_baud(): exit --> Restore access to general register set

Fix the problem by claiming the efr_lock mutex when accessing the Special register set.(CVE-2024-44950)

In the Linux kernel, the following vulnerability has been resolved:

s390/dasd: fix error recovery leading to data corruption on ESE devices

Extent Space Efficient (ESE) or thin provisioned volumes need to be formatted on demand during usual IO processing.

The dasd_ese_needs_format function checks for error codes that signal the non existence of a proper track format.

The check for incorrect length is to imprecise since other error cases leading to transport of insufficient data also have this flag set. This might lead to data corruption in certain error cases for example during a storage server warmstart.

Fix by removing the check for incorrect length and replacing by explicitly checking for invalid track format in transport mode.

Also remove the check for file protected since this is not a valid ESE handling case.(CVE-2024-45026)

In the Linux kernel, the following vulnerability has been resolved:

drm/amd/display: Add missing NULL pointer check within dpcd_extend_address_range

[Why & How]…

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

dmaengine: idxd: Let probe fail when workqueue cannot be enabled

The workqueue is enabled when the appropriate driver is loaded and disabled when the driver is removed. When the driver is removed it assumes that the workqueue was enabled successfully and proceeds to free allocations made during workqueue enabling.

Failure during workqueue enabling does not prevent the driver from being loaded. This is because the error path within drv_enable_wq() returns success unless a second failure is encountered during the error path. By returning success it is possible to load the driver even if the workqueue cannot be enabled and allocations that do not exist are attempted to be freed during driver remove.

Some examples of problematic flows: (a)

idxd_dmaengine_drv_probe() -> drv_enable_wq() -> idxd_wq_request_irq(): In above flow, if idxd_wq_request_irq() fails then idxd_wq_unmap_portal() is called on error exit path, but drv_enable_wq() returns 0 because idxd_wq_disable() succeeds. The driver is thus loaded successfully.

idxd_dmaengine_drv_remove()->drv_disable_wq()->idxd_wq_unmap_portal() Above flow on driver unload triggers the WARN in devm_iounmap() because the device resource has already been removed during error path of drv_enable_wq().

(b)

idxd_dmaengine_drv_probe() -> drv_enable_wq() -> idxd_wq_request_irq(): In above flow, if idxd_wq_request_irq() fails then idxd_wq_init_percpu_ref() is never called to initialize the percpu counter, yet the driver loads successfully because drv_enable_wq() returns 0.

idxd_dmaengine_drv_remove()->__idxd_wq_quiesce()->percpu_ref_kill(): Above flow on driver unload triggers a BUG when attempting to drop the initial ref of the uninitialized percpu ref: BUG: kernel NULL pointer dereference, address: 0000000000000010

Fix the drv_enable_wq() error path by returning the original error that indicates failure of workqueue enabling. This ensures that the probe fails when an error is encountered and the driver remove paths are only attempted when the workqueue was enabled successfully.(CVE-2022-48868)

In the Linux kernel, the following vulnerability has been resolved:

smb: client: fix potential OOBs in smb2_parse_contexts()

Validate offsets and lengths before dereferencing create contexts in smb2_parse_contexts().

This fixes following oops when accessing invalid create contexts from server:

BUG: unable to handle page fault for address: ffff8881178d8cc3 #PF: supervisor read access in kernel mode #PF: error_code(0x0000) - not-present page PGD 4a01067 P4D 4a01067 PUD 0 Oops: 0000 [#1] PREEMPT SMP NOPTI CPU: 3 PID: 1736 Comm: mount.cifs Not tainted 6.7.0-rc4 #1 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.16.2-3-gd478f380-rebuilt.opensuse.org 04/01/2014 RIP: 0010:smb2_parse_contexts+0xa0/0x3a0 [cifs] Code: f8 10 75 13 48 b8 93 ad 25 50 9c b4 11 e7 49 39 06 0f 84 d2 00 00 00 8b 45 00 85 c0 74 61 41 29 c5 48 01 c5 41 83 fd 0f 76 55 <0f> b7 7d 04 0f b7 45 06 4c 8d 74 3d 00 66 83 f8 04 75 bc ba 04 00 RSP: 0018:ffffc900007939e0 EFLAGS: 00010216 RAX: ffffc90000793c78 RBX: ffff8880180cc000 RCX: ffffc90000793c90 RDX: ffffc90000793cc0 RSI: ffff8880178d8cc0 RDI: ffff8880180cc000 RBP: ffff8881178d8cbf R08: ffffc90000793c22 R09: 0000000000000000 R10: ffff8880180cc000 R11: 0000000000000024 R12: 0000000000000000 R13: 0000000000000020 R14: 0000000000000000 R15: ffffc90000793c22 FS: 00007f873753cbc0(0000) GS:ffff88806bc00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffff8881178d8cc3 CR3: 00000000181ca000 CR4: 0000000000750ef0 PKRU: 55555554 Call Trace: <TASK> ? __die+0x23/0x70 ? page_fault_oops+0x181/0x480 ? search_module_extables+0x19/0x60 ?…

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

dmaengine: idxd: Let probe fail when workqueue cannot be enabled

The workqueue is enabled when the appropriate driver is loaded and disabled when the driver is removed. When the driver is removed it assumes that the workqueue was enabled successfully and proceeds to free allocations made during workqueue enabling.

Failure during workqueue enabling does not prevent the driver from being loaded. This is because the error path within drv_enable_wq() returns success unless a second failure is encountered during the error path. By returning success it is possible to load the driver even if the workqueue cannot be enabled and allocations that do not exist are attempted to be freed during driver remove.

Some examples of problematic flows: (a)

idxd_dmaengine_drv_probe() -> drv_enable_wq() -> idxd_wq_request_irq(): In above flow, if idxd_wq_request_irq() fails then idxd_wq_unmap_portal() is called on error exit path, but drv_enable_wq() returns 0 because idxd_wq_disable() succeeds. The driver is thus loaded successfully.

idxd_dmaengine_drv_remove()->drv_disable_wq()->idxd_wq_unmap_portal() Above flow on driver unload triggers the WARN in devm_iounmap() because the device resource has already been removed during error path of drv_enable_wq().

(b)

idxd_dmaengine_drv_probe() -> drv_enable_wq() -> idxd_wq_request_irq(): In above flow, if idxd_wq_request_irq() fails then idxd_wq_init_percpu_ref() is never called to initialize the percpu counter, yet the driver loads successfully because drv_enable_wq() returns 0.

idxd_dmaengine_drv_remove()->__idxd_wq_quiesce()->percpu_ref_kill(): Above flow on driver unload triggers a BUG when attempting to drop the initial ref of the uninitialized percpu ref: BUG: kernel NULL pointer dereference, address: 0000000000000010

Fix the drv_enable_wq() error path by returning the original error that indicates failure of workqueue enabling. This ensures that the probe fails when an error is encountered and the driver remove paths are only attempted when the workqueue was enabled successfully.(CVE-2022-48868)

In the Linux kernel, the following vulnerability has been resolved: xhci: Handle TD clearing for multiple streams case When multiple streams are in use, multiple TDs might be in flight when an endpoint is stopped. We need to issue a Set TR Dequeue Pointer for each, to ensure everything is reset properly and the caches cleared. Change the logic so that any N>1 TDs found active for different streams are deferred until after the first one is processed, calling xhci_invalidate_cancelled_tds() again from xhci_handle_cmd_set_deq() to queue another command until we are done with all of them. Also change the error/"should never happen" paths to ensure we at least clear any affected TDs, even if we can't issue a command to clear the hardware cache, and complain loudly with an xhci_warn() if this ever happens. This problem case dates back to commit e9df17eb1408 ("USB: xhci: Correct assumptions about number of rings per endpoint.") early on in the XHCI driver's life, when stream support was first added. It was then identified but not fixed nor made into a warning in commit 674f8438c121 ("xhci: split handling halted endpoints into two steps"), which added a FIXME comment for the problem case (without materially changing the behavior as far as I can tell, though the new logic made the problem more obvious). Then later, in commit 94f339147fc3 ("xhci: Fix failure to give back some cached cancelled URBs."), it was acknowledged again. [Mathias: commit 94f339147fc3 ("xhci: Fix failure to give back some cached cancelled URBs.") was a targeted regression fix to the previously mentioned patch. Users reported issues with usb stuck after…

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

io_uring/io-wq: Use set_bit() and test_bit() at worker->flags

Utilize set_bit() and test_bit() on worker->flags within io_uring/io-wq to address potential data races.

The structure io_worker->flags may be accessed through various data paths, leading to concurrency issues. When KCSAN is enabled, it reveals data races occurring in io_worker_handle_work and io_wq_activate_free_worker functions.

 BUG: KCSAN: data-race in io_worker_handle_work / io_wq_activate_free_worker
 write to 0xffff8885c4246404 of 4 bytes by task 49071 on cpu 28:
 io_worker_handle_work (io_uring/io-wq.c:434 io_uring/io-wq.c:569)
 io_wq_worker (io_uring/io-wq.c:?)

<snip>

 read to 0xffff8885c4246404 of 4 bytes by task 49024 on cpu 5:
 io_wq_activate_free_worker (io_uring/io-wq.c:? io_uring/io-wq.c:285)
 io_wq_enqueue (io_uring/io-wq.c:947)
 io_queue_iowq (io_uring/io_uring.c:524)
 io_req_task_submit (io_uring/io_uring.c:1511)
 io_handle_tw_list (io_uring/io_uring.c:1198)

<snip>

Line numbers against commit 18daea77cca6 ("Merge tag 'for-linus' of git://git.kernel.org/pub/scm/virt/kvm/kvm").

These races involve writes and reads to the same memory location by different tasks running on different CPUs. To mitigate this, refactor the code to use atomic operations such as set_bit(), test_bit(), and clear_bit() instead of basic "and" and "or" operations. This ensures thread-safe manipulation of worker flags.

Also, move create_index to avoid holes in the structure.(CVE-2024-39508)

In the Linux kernel, the following vulnerability has been resolved:

btrfs: fix qgroup reserve leaks in cow_file_range

In the buffered write path, the dirty page owns the qgroup reserve until it creates an ordered_extent.

Therefore, any errors that occur before the ordered_extent is created must free that reservation, or else the space is leaked. The fstest generic/475 exercises various IO error paths, and is able to trigger errors in cow_file_range where we fail to get to allocating the ordered extent. Note that because we do clear delalloc, we are likely to remove the inode from the delalloc list, so the inodes/pages to not have invalidate/launder called on them in the commit abort path.

This results in failures at the unmount stage of the test that look like:

BTRFS: error (device dm-8 state EA) in cleanup_transaction:2018: errno=-5 IO failure BTRFS: error (device dm-8 state EA) in btrfs_replace_file_extents:2416: errno=-5 IO failure BTRFS warning (device dm-8 state EA): qgroup 0/5 has unreleased space, type 0 rsv 28672 ------------[ cut here ]------------ WARNING: CPU: 3 PID: 22588 at fs/btrfs/disk-io.c:4333 close_ctree+0x222/0x4d0 [btrfs] Modules linked in: btrfs blake2b_generic libcrc32c xor zstd_compress raid6_pq CPU: 3 PID: 22588 Comm: umount Kdump: loaded Tainted: G W 6.10.0-rc7-gab56fde445b8 #21 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS Arch Linux 1.16.3-1-1 04/01/2014 RIP: 0010:close_ctree+0x222/0x4d0 [btrfs] RSP: 0018:ffffb4465283be00 EFLAGS: 00010202 RAX: 0000000000000001 RBX: ffffa1a1818e1000 RCX: 0000000000000001 RDX: 0000000000000000 RSI: ffffb4465283bbe0 RDI: ffffa1a19374fcb8 RBP: ffffa1a1818e13c0 R08: 0000000100028b16 R09: 0000000000000000 R10: 0000000000000003 R11: 0000000000000003 R12: ffffa1a18ad7972c R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 FS: 00007f9168312b80(0000) GS:ffffa1a4afcc0000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f91683c9140 CR3: 000000010acaa000 CR4: 00000000000006f0 Call Trace: <TASK> ? close_ctree+0x222/0x4d0 [btrfs] ? __warn.cold+0x8e/0xea ? close_ctree+0x222/0x4d0 [btrfs] ? report_bug+0xff/0x140 ? handle_bug+0x3b/0x70 ?…

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

dmaengine: idxd: Let probe fail when workqueue cannot be enabled

The workqueue is enabled when the appropriate driver is loaded and disabled when the driver is removed. When the driver is removed it assumes that the workqueue was enabled successfully and proceeds to free allocations made during workqueue enabling.

Failure during workqueue enabling does not prevent the driver from being loaded. This is because the error path within drv_enable_wq() returns success unless a second failure is encountered during the error path. By returning success it is possible to load the driver even if the workqueue cannot be enabled and allocations that do not exist are attempted to be freed during driver remove.

Some examples of problematic flows: (a)

idxd_dmaengine_drv_probe() -> drv_enable_wq() -> idxd_wq_request_irq(): In above flow, if idxd_wq_request_irq() fails then idxd_wq_unmap_portal() is called on error exit path, but drv_enable_wq() returns 0 because idxd_wq_disable() succeeds. The driver is thus loaded successfully.

idxd_dmaengine_drv_remove()->drv_disable_wq()->idxd_wq_unmap_portal() Above flow on driver unload triggers the WARN in devm_iounmap() because the device resource has already been removed during error path of drv_enable_wq().

(b)

idxd_dmaengine_drv_probe() -> drv_enable_wq() -> idxd_wq_request_irq(): In above flow, if idxd_wq_request_irq() fails then idxd_wq_init_percpu_ref() is never called to initialize the percpu counter, yet the driver loads successfully because drv_enable_wq() returns 0.

idxd_dmaengine_drv_remove()->__idxd_wq_quiesce()->percpu_ref_kill(): Above flow on driver unload triggers a BUG when attempting to drop the initial ref of the uninitialized percpu ref: BUG: kernel NULL pointer dereference, address: 0000000000000010

Fix the drv_enable_wq() error path by returning the original error that indicates failure of workqueue enabling. This ensures that the probe fails when an error is encountered and the driver remove paths are only attempted when the workqueue was enabled successfully.(CVE-2022-48868)

In the Linux kernel, the following vulnerability has been resolved: igb: Initialize mailbox message for VF reset When a MAC address is not assigned to the VF, that portion of the message sent to the VF is not set. The memory, however, is allocated from the stack meaning that information may be leaked to the VM. Initialize the message buffer to 0 so that no information is passed to the VM in this case.(CVE-2022-48949)

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix not cleanup led when bt_init fails bt_init() calls bt_leds_init() to register led, but if it fails later, bt_leds_cleanup() is not called to unregister it. This can cause panic if the argument "bluetooth-power" in text is freed and then another led_trigger_register() tries to access it: BUG: unable to handle page fault for address: ffffffffc06d3bc0 RIP: 0010:strcmp+0xc/0x30 Call Trace: <TASK> led_trigger_register+0x10d/0x4f0 led_trigger_register_simple+0x7d/0x100 bt_init+0x39/0xf7 [bluetooth] do_one_initcall+0xd0/0x4e0(CVE-2022-48971)

In the Linux kernel, the following vulnerability has been resolved: net: tun: Fix use-after-free in tun_detach() syzbot reported use-after-free in tun_detach() [1]. This causes call trace like below: ================================================================== BUG: KASAN: use-after-free in notifier_call_chain+0x1ee/0x200 kernel/notifier.c:75 Read of size 8 at addr ffff88807324e2a8 by task syz-executor.0/3673 CPU: 0 PID: 3673 Comm: syz-executor.0 Not tainted 6.1.0-rc5-syzkaller-00044-gcc675d22e422 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 Call Trace: …

In the Linux kernel, the following vulnerability has been resolved: ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow Syzbot reported a kernel BUG in ocfs2_truncate_inline. There are two reasons for this: first, the parameter value passed is greater than ocfs2_max_inline_data_with_xattr, second, the start and end parameters of ocfs2_truncate_inline are "unsigned int". So, we need to add a sanity check for byte_start and byte_len right before ocfs2_truncate_inline() in ocfs2_remove_inode_range(), if they are greater than ocfs2_max_inline_data_with_xattr return -EINVAL.

In the Linux kernel, the following vulnerability has been resolved:

ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow

Syzbot reported a kernel BUG in ocfs2_truncate_inline. There are two reasons for this: first, the parameter value passed is greater than ocfs2_max_inline_data_with_xattr, second, the start and end parameters of ocfs2_truncate_inline are "unsigned int".

So, we need to add a sanity check for byte_start and byte_len right before ocfs2_truncate_inline() in ocfs2_remove_inode_range(), if they are greater than ocfs2_max_inline_data_with_xattr return -EINVAL.

Vanilla upstream kernel version 6.6.61 fixes bugs and vulnerabilities. For information about the vulnerabilities see the links.

Upstream kernel version 6.6.61 fixes bugs and vulnerabilities. The bluez, kmod-virtualbox and kmod-xtables-addons packages have been updated to work with this new kernel. For information about the vulnerabilities see the links.

These are all security issues fixed in the kernel-devel-6.11.8-1.1 package on the GA media of openSUSE Tumbleweed.

These are all security issues fixed in the kernel-devel-longterm-6.12.11-1.1 package on the GA media of openSUSE Tumbleweed.

The SUSE Linux Enterprise 15 SP6 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

• CVE-2023-52778: mptcp: deal with large GSO size (bsc#1224948).
• CVE-2023-52920: bpf: support non-r10 register spill/fill to/from stack in precision tracking (bsc#1232823).
• CVE-2024-26596: net: dsa: fix netdev_priv() dereference before check on non-DSA netdevice events (bsc#1220355).
• CVE-2024-26741: dccp/tcp: Unhash sk from ehash for tb2 alloc failure after check_estalblished() (bsc#1222587).
• CVE-2024-26782: mptcp: fix double-free on socket dismantle (bsc#1222590).
• CVE-2024-26953: net: esp: fix bad handling of pages from page_pool (bsc#1223656).
• CVE-2024-27017: netfilter: nft_set_pipapo: walk over current view on netlink dump (bsc#1223733).
• CVE-2024-35888: erspan: make sure erspan_base_hdr is present in skb->head (bsc#1224518).
• CVE-2024-36000: mm/hugetlb: fix missing hugetlb_lock for resv uncharge (bsc#1224548).
• CVE-2024-36883: net: fix out-of-bounds access in ops_init (bsc#1225725).
• CVE-2024-36886: tipc: fix UAF in error path (bsc#1225730).
• CVE-2024-36905: tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets (bsc#1225742).
• CVE-2024-36927: ipv4: Fix uninit-value access in __ip_make_skb() (bsc#1225813).
• CVE-2024-36954: tipc: fix a possible memleak in tipc_buf_append (bsc#1225764).
• CVE-2024-36968: Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init() (bsc#1226130).
• CVE-2024-38589: netrom: fix possible dead-lock in nr_rt_ioctl() (bsc#1226748).
• CVE-2024-40914: mm/huge_memory: do not unpoison huge_zero_folio (bsc#1227842).
• CVE-2024-41023: sched/deadline: Fix task_struct reference leak (bsc#1228430).
• CVE-2024-42102: Revert 'mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again' (bsc#1233132).
• CVE-2024-44995: net: hns3: fix a deadlock problem when config TC during resetting (bsc#1230231).
• CVE-2024-46680: Bluetooth: btnxpuart: Fix random crash seen while removing driver (bsc#1230557).
• CVE-2024-46681: pktgen: use cpus_read_lock() in pg_net_init() (bsc#1230558).
• CVE-2024-46765: ice: protect XDP configuration with a mutex (bsc#1230807).
• CVE-2024-46800: sch/netem: fix use after free in netem_dequeue (bsc#1230827).
• CVE-2024-47679: vfs: fix race between evice_inodes() and find_inode()&iput() (bsc#1231930).
• CVE-2024-47701: ext4: avoid OOB when system.data xattr changes underneath the filesystem (bsc#1231920).
• CVE-2024-47703: bpf, lsm: add check for BPF LSM return value (bsc#1231946).
• CVE-2024-49852: scsi: elx: libefc: Fix potential use after free in efc_nport_vport_del() (bsc#1232819).
• CVE-2024-49868: btrfs: fix a NULL pointer dereference when failed to start a new trasacntion (bsc#1232272).
• CVE-2024-49881: ext4: update orig_path in ext4_find_extent() (bsc#1232201).
• CVE-2024-49883: ext4: aovid use-after-free in ext4_ext_insert_extent() (bsc#1232199).
• CVE-2024-49894: drm/amd/display: Fix index out of bounds in degamma hardware format translation (bsc#1232354).
• CVE-2024-49895: drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation (bsc#1232352).
• CVE-2024-49897: drm/amd/display: Check phantom_stream before it is used (bsc#1232355).
• CVE-2024-49899: drm/amd/display: Initialize denominators' default to 1 (bsc#1232358).
• CVE-2024-49901: drm/msm/adreno: Assign msm_gpu->pdev earlier to avoid nullptrs (bsc#1232305).
• CVE-2024-49909: drm/amd/display: Add NULL check for function pointer in dcn32_set_output_transfer_func (bsc#1232337).
• CVE-2024-49911: drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func (bsc#1232366).
• CVE-2024-49912: drm/amd/display: Handle null 'stream_status' in 'planes_changed_for_existing_stream' (bsc#1232367).
• CVE-2024-49913: drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream (bsc#1232307).
• CVE-2024-49921: drm/amd/display: Check null pointers before used (bsc#1232371).
• CVE-2024-49922:…

The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

• CVE-2021-47594: mptcp: never allow the PM to close a listener subflow (bsc#1226560).
• CVE-2022-48983: io_uring: Fix a null-ptr-deref in io_tctx_exit_cb() (bsc#1231959).
• CVE-2024-26782: mptcp: fix double-free on socket dismantle (bsc#1222590).
• CVE-2024-26906: Fixed invalid vsyscall page read for copy_from_kernel_nofault() (bsc#1223202).
• CVE-2024-26953: net: esp: fix bad handling of pages from page_pool (bsc#1223656).
• CVE-2024-35888: erspan: make sure erspan_base_hdr is present in skb->head (bsc#1224518).
• CVE-2024-35937: wifi: cfg80211: check A-MSDU format more carefully (bsc#1224526).
• CVE-2024-36883: net: fix out-of-bounds access in ops_init (bsc#1225725).
• CVE-2024-36886: tipc: fix UAF in error path (bsc#1225730).
• CVE-2024-36905: tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets (bsc#1225742).
• CVE-2024-36954: tipc: fix a possible memleak in tipc_buf_append (bsc#1225764).
• CVE-2024-38589: netrom: fix possible dead-lock in nr_rt_ioctl() (bsc#1226748).
• CVE-2024-38615: cpufreq: exit() callback is optional (bsc#1226592).
• CVE-2024-40997: cpufreq: amd-pstate: fix memory leak on CPU EPP exit (bsc#1227853).
• CVE-2024-41023: sched/deadline: Fix task_struct reference leak (bsc#1228430).
• CVE-2024-44932: idpf: fix UAFs when destroying the queues (bsc#1229808).
• CVE-2024-44964: idpf: fix memory leaks and crashes while performing a soft reset (bsc#1230220).
• CVE-2024-44995: net: hns3: fix a deadlock problem when config TC during resetting (bsc#1230231).
• CVE-2024-46681: pktgen: use cpus_read_lock() in pg_net_init() (bsc#1230558).
• CVE-2024-46800: sch/netem: fix use after free in netem_dequeue (bsc#1230827).
• CVE-2024-47679: vfs: fix race between evice_inodes() and find_inode()&iput() (bsc#1231930).
• CVE-2024-47701: ext4: avoid OOB when system.data xattr changes underneath the filesystem (bsc#1231920).
• CVE-2024-47745: mm: call the security_mmap_file() LSM hook in remap_file_pages() (bsc#1232135).
• CVE-2024-47757: nilfs2: fix potential oob read in nilfs_btree_check_delete() (bsc#1232187).
• CVE-2024-49868: btrfs: fix a NULL pointer dereference when failed to start a new trasacntion (bsc#1232272).
• CVE-2024-49921: drm/amd/display: Check null pointers before used (bsc#1232371).
• CVE-2024-49925: fbdev: efifb: Register sysfs groups through driver core (bsc#1232224)
• CVE-2024-49934: fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name (bsc#1232387).
• CVE-2024-49945: net/ncsi: Disable the ncsi work before freeing the associated structure (bsc#1232165).
• CVE-2024-49950: Bluetooth: L2CAP: Fix uaf in l2cap_connect (bsc#1232159).
• CVE-2024-49968: ext4: filesystems without casefold feature cannot be mounted with siphash (bsc#1232264).
• CVE-2024-49983: ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free (bsc#1232096).
• CVE-2024-49989: drm/amd/display: fix double free issue during amdgpu module unload (bsc#1232483).
• CVE-2024-50009: cpufreq: amd-pstate: add check for cpufreq_cpu_get's return value (bsc#1232318).
• CVE-2024-50073: tty: n_gsm: Fix use-after-free in gsm_cleanup_mux (bsc#1232520).
• CVE-2024-50082: blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (bsc#1232500).
• CVE-2024-50089: unicode: Do not special case ignorable code points (bsc#1232860).
• CVE-2024-50093: thermal: intel: int340x: processor: Fix warning during module unload (bsc#1232877).
• CVE-2024-50098: scsi: ufs: core: Set SDEV_OFFLINE when UFS is shut down (bsc#1232881).
• CVE-2024-50108: drm/amd/display: Disable PSR-SU on Parade 08-01 TCON too (bsc#1232884).
• CVE-2024-50110: xfrm: fix one more kernel-infoleak in algo dumping (bsc#1232885).
• CVE-2024-50115: KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory (bsc#1232919).
• CVE-2024-50125: Bluetooth: SCO: Fix UAF on sco_sock_timeout (bsc#1232928).
• CVE-2024-50127: net: sched: fix…

The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

• CVE-2023-52778: mptcp: deal with large GSO size (bsc#1224948).
• CVE-2023-52920: bpf: support non-r10 register spill/fill to/from stack in precision tracking (bsc#1232823).
• CVE-2024-26596: net: dsa: fix netdev_priv() dereference before check on non-DSA netdevice events (bsc#1220355).
• CVE-2024-26741: dccp/tcp: Unhash sk from ehash for tb2 alloc failure after check_estalblished() (bsc#1222587).
• CVE-2024-26782: mptcp: fix double-free on socket dismantle (bsc#1222590).
• CVE-2024-26953: net: esp: fix bad handling of pages from page_pool (bsc#1223656).
• CVE-2024-27017: netfilter: nft_set_pipapo: walk over current view on netlink dump (bsc#1223733).
• CVE-2024-35888: erspan: make sure erspan_base_hdr is present in skb->head (bsc#1224518).
• CVE-2024-36000: mm/hugetlb: fix missing hugetlb_lock for resv uncharge (bsc#1224548).
• CVE-2024-36883: net: fix out-of-bounds access in ops_init (bsc#1225725).
• CVE-2024-36886: tipc: fix UAF in error path (bsc#1225730).
• CVE-2024-36905: tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets (bsc#1225742).
• CVE-2024-36927: ipv4: Fix uninit-value access in __ip_make_skb() (bsc#1225813).
• CVE-2024-36954: tipc: fix a possible memleak in tipc_buf_append (bsc#1225764).
• CVE-2024-36968: Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init() (bsc#1226130).
• CVE-2024-38589: netrom: fix possible dead-lock in nr_rt_ioctl() (bsc#1226748).
• CVE-2024-40914: mm/huge_memory: do not unpoison huge_zero_folio (bsc#1227842).
• CVE-2024-41023: sched/deadline: Fix task_struct reference leak (bsc#1228430).
• CVE-2024-42102: Revert 'mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again' (bsc#1233132).
• CVE-2024-44995: net: hns3: fix a deadlock problem when config TC during resetting (bsc#1230231).
• CVE-2024-46680: Bluetooth: btnxpuart: Fix random crash seen while removing driver (bsc#1230557).
• CVE-2024-46681: pktgen: use cpus_read_lock() in pg_net_init() (bsc#1230558).
• CVE-2024-46765: ice: protect XDP configuration with a mutex (bsc#1230807).
• CVE-2024-46800: sch/netem: fix use after free in netem_dequeue (bsc#1230827).
• CVE-2024-47679: vfs: fix race between evice_inodes() and find_inode()&iput() (bsc#1231930).
• CVE-2024-47701: ext4: avoid OOB when system.data xattr changes underneath the filesystem (bsc#1231920).
• CVE-2024-47703: bpf, lsm: add check for BPF LSM return value (bsc#1231946).
• CVE-2024-49868: btrfs: fix a NULL pointer dereference when failed to start a new trasacntion (bsc#1232272).
• CVE-2024-49888: bpf: Fix a sdiv overflow issue (bsc#1232208).
• CVE-2024-49899: drm/amd/display: Initialize denominators' default to 1 (bsc#1232358).
• CVE-2024-49911: drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func (bsc#1232366).
• CVE-2024-49912: drm/amd/display: Handle null 'stream_status' in 'planes_changed_for_existing_stream' (bsc#1232367).
• CVE-2024-49921: drm/amd/display: Check null pointers before used (bsc#1232371).
• CVE-2024-49922: drm/amd/display: Check null pointers before using them (bsc#1232374).
• CVE-2024-49923: drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags (bsc#1232361).
• CVE-2024-49925: fbdev: efifb: Register sysfs groups through driver core (bsc#1232224)
• CVE-2024-49933: blk_iocost: fix more out of bound shifts (bsc#1232368).
• CVE-2024-49934: fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name (bsc#1232387).
• CVE-2024-49944: sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start (bsc#1232166).
• CVE-2024-49945: net/ncsi: Disable the ncsi work before freeing the associated structure (bsc#1232165).
• CVE-2024-49952: netfilter: nf_tables: prevent nf_skb_duplicated corruption (bsc#1232157).
• CVE-2024-49968: ext4: filesystems without casefold feature cannot be mounted with siphash (bsc#1232264).
• CVE-2024-49983:…

The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

• CVE-2024-53095: smb: client: Fix use-after-free of network namespace (bsc#1233642).
• CVE-2023-52778: mptcp: deal with large GSO size (bsc#1224948).
• CVE-2023-52920: bpf: support non-r10 register spill/fill to/from stack in precision tracking (bsc#1232823).
• CVE-2023-6270: aoe: fix the potential use-after-free problem in more places (bsc#1218562).
• CVE-2024-26596: net: dsa: fix netdev_priv() dereference before check on non-DSA netdevice events (bsc#1220355).
• CVE-2024-26741: dccp/tcp: Unhash sk from ehash for tb2 alloc failure after check_estalblished() (bsc#1222587).
• CVE-2024-26782: mptcp: fix double-free on socket dismantle (bsc#1222590).
• CVE-2024-26953: net: esp: fix bad handling of pages from page_pool (bsc#1223656).
• CVE-2024-27017: netfilter: nft_set_pipapo: walk over current view on netlink dump (bsc#1223733).
• CVE-2024-35888: erspan: make sure erspan_base_hdr is present in skb->head (bsc#1224518).
• CVE-2024-36000: mm/hugetlb: fix missing hugetlb_lock for resv uncharge (bsc#1224548).
• CVE-2024-36244: net/sched: taprio: extend minimum interval restriction to entire cycle too (bsc#1226797).
• CVE-2024-36883: net: fix out-of-bounds access in ops_init (bsc#1225725).
• CVE-2024-36886: tipc: fix UAF in error path (bsc#1225730).
• CVE-2024-36905: tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets (bsc#1225742).
• CVE-2024-36927: ipv4: Fix uninit-value access in __ip_make_skb() (bsc#1225813).
• CVE-2024-36954: tipc: fix a possible memleak in tipc_buf_append (bsc#1225764).
• CVE-2024-36968: Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init() (bsc#1226130).
• CVE-2024-38589: netrom: fix possible dead-lock in nr_rt_ioctl() (bsc#1226748).
• CVE-2024-40914: mm/huge_memory: do not unpoison huge_zero_folio (bsc#1227842).
• CVE-2024-41023: sched/deadline: Fix task_struct reference leak (bsc#1228430).
• CVE-2024-41031: mm/filemap: skip to create PMD-sized page cache if needed (bsc#1228454).
• CVE-2024-41082: nvme-fabrics: use reserved tag for reg read/write command (bsc#1228620).
• CVE-2024-42102: Revert 'mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again' (bsc#1233132).
• CVE-2024-44958: sched/smt: Fix unbalance sched_smt_present dec/inc (bsc#1230179).
• CVE-2024-44995: net: hns3: fix a deadlock problem when config TC during resetting (bsc#1230231).
• CVE-2024-45016: netem: fix return value if duplicate enqueue fails (bsc#1230429).
• CVE-2024-45025: fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE (bsc#1230456).
• CVE-2024-46678: bonding: change ipsec_lock from spin lock to mutex (bsc#1230550).
• CVE-2024-46680: Bluetooth: btnxpuart: Fix random crash seen while removing driver (bsc#1230557).
• CVE-2024-46681: pktgen: use cpus_read_lock() in pg_net_init() (bsc#1230558).
• CVE-2024-46721: pparmor: fix possible NULL pointer dereference (bsc#1230710)
• CVE-2024-46754: bpf: Remove tst_run from lwt_seg6local_prog_ops (bsc#1230801).
• CVE-2024-46765: ice: protect XDP configuration with a mutex (bsc#1230807).
• CVE-2024-46766: ice: move netif_queue_set_napi to rtnl-protected sections (bsc#1230762).
• CVE-2024-46770: ice: Add netif_device_attach/detach into PF reset flow (bsc#1230763).
• CVE-2024-46775: drm/amd/display: Validate function returns (bsc#1230774).
• CVE-2024-46777: udf: Avoid excessive partition lengths (bsc#1230773).
• CVE-2024-46800: sch/netem: fix use after free in netem_dequeue (bsc#1230827).
• CVE-2024-46813: drm/amd/display: Check link_index before accessing dc->links (bsc#1231191).
• CVE-2024-46816: drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links (bsc#1231197).
• CVE-2024-46826: ELF: fix kernel.randomize_va_space double read (bsc#1231115).
• CVE-2024-46828: sched: sch_cake: fix bulk flow accounting logic for host fairness (bsc#1231114).
• CVE-2024-46831: net: microchip: vcap: Fix use-after-free…

The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

• CVE-2021-47594: mptcp: never allow the PM to close a listener subflow (bsc#1226560).
• CVE-2022-48879: efi: fix NULL-deref in init error path (bsc#1229556).
• CVE-2022-48956: ipv6: avoid use-after-free in ip6_fragment() (bsc#1231893).
• CVE-2022-48957: dpaa2-switch: Fix memory leak in dpaa2_switch_acl_entry_add() and dpaa2_switch_acl_entry_remove() (bsc#1231973).
• CVE-2022-48958: ethernet: aeroflex: fix potential skb leak in greth_init_rings() (bsc#1231889).
• CVE-2022-48959: net: dsa: sja1105: fix memory leak in sja1105_setup_devlink_regions() (bsc#1231976).
• CVE-2022-48960: net: hisilicon: Fix potential use-after-free in hix5hd2_rx() (bsc#1231979).
• CVE-2022-48962: net: hisilicon: Fix potential use-after-free in hisi_femac_rx() (bsc#1232286).
• CVE-2022-48966: net: mvneta: Fix an out of bounds check (bsc#1232191).
• CVE-2022-48980: net: dsa: sja1105: avoid out of bounds access in sja1105_init_l2_policing() (bsc#1232233).
• CVE-2022-48983: io_uring: Fix a null-ptr-deref in io_tctx_exit_cb() (bsc#1231959).
• CVE-2022-48991: mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (bsc#1232070).
• CVE-2022-49015: net: hsr: Fix potential use-after-free (bsc#1231938).
• CVE-2022-49017: tipc: re-fetch skb cb after tipc_msg_validate (bsc#1232004).
• CVE-2022-49020: net/9p: Fix a potential socket leak in p9_socket_open (bsc#1232175).
• CVE-2024-26782: mptcp: fix double-free on socket dismantle (bsc#1222590).
• CVE-2024-26906: Fixed invalid vsyscall page read for copy_from_kernel_nofault() (bsc#1223202).
• CVE-2024-26953: net: esp: fix bad handling of pages from page_pool (bsc#1223656).
• CVE-2024-35888: erspan: make sure erspan_base_hdr is present in skb->head (bsc#1224518).
• CVE-2024-35937: wifi: cfg80211: check A-MSDU format more carefully (bsc#1224526).
• CVE-2024-36244: net/sched: taprio: extend minimum interval restriction to entire cycle too (bsc#1226797).
• CVE-2024-36883: net: fix out-of-bounds access in ops_init (bsc#1225725).
• CVE-2024-36886: tipc: fix UAF in error path (bsc#1225730).
• CVE-2024-36905: tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets (bsc#1225742).
• CVE-2024-36954: tipc: fix a possible memleak in tipc_buf_append (bsc#1225764).
• CVE-2024-36957: octeontx2-af: avoid off-by-one read from userspace (bsc#1225762).
• CVE-2024-38589: netrom: fix possible dead-lock in nr_rt_ioctl() (bsc#1226748).
• CVE-2024-38615: cpufreq: exit() callback is optional (bsc#1226592).
• CVE-2024-39476: md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING (bsc#1227437).
• CVE-2024-40965: i2c: lpi2c: Avoid calling clk_get_rate during transfer (bsc#1227885).
• CVE-2024-40997: cpufreq: amd-pstate: fix memory leak on CPU EPP exit (bsc#1227853).
• CVE-2024-41023: sched/deadline: Fix task_struct reference leak (bsc#1228430).
• CVE-2024-42226: Prevent potential failure in handle_tx_event() for Transfer events without TRB (bsc#1228709).
• CVE-2024-42253: gpio: pca953x: fix pca953x_irq_bus_sync_unlock race (bsc#1229005).
• CVE-2024-44931: gpio: prevent potential speculation leaks in gpio_device_get_desc() (bsc#1229837).
• CVE-2024-44932: idpf: fix UAFs when destroying the queues (bsc#1229808).
• CVE-2024-44958: sched/smt: Fix unbalance sched_smt_present dec/inc (bsc#1230179).
• CVE-2024-44964: idpf: fix memory leaks and crashes while performing a soft reset (bsc#1230220).
• CVE-2024-44995: net: hns3: fix a deadlock problem when config TC during resetting (bsc#1230231).
• CVE-2024-45016: netem: fix return value if duplicate enqueue fails (bsc#1230429).
• CVE-2024-45025: fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE (bsc#1230456).
• CVE-2024-46678: bonding: change ipsec_lock from spin lock to mutex (bsc#1230550).
• CVE-2024-46681: pktgen: use cpus_read_lock() in pg_net_init() (bsc#1230558).
• CVE-2024-46716: dmaengine: altera-msgdma:…

The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

• CVE-2022-48853: swiotlb: fix info leak with DMA_FROM_DEVICE (bsc#1228015).
• CVE-2024-26801: Bluetooth: Avoid potential use-after-free in hci_error_reset (bsc#1222413).
• CVE-2024-26852: Fixed use-after-free in ip6_route_mpath_notify() (bsc#1223057).
• CVE-2024-26886: Bluetooth: af_bluetooth: Fix deadlock (bsc#1223044).
• CVE-2024-27051: cpufreq: brcmstb-avs-cpufreq: add check for cpufreq_cpu_get's return value (bsc#1223769).
• CVE-2024-35937: wifi: cfg80211: check A-MSDU format more carefully (bsc#1224526).
• CVE-2024-36905: tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets (bsc#1225742).
• CVE-2024-42098: crypto: ecdh - explicitly zeroize private_key (bsc#1228779).
• CVE-2024-42229: crypto: aead,cipher - zeroize key buffer after use (bsc#1228708).
• CVE-2024-44995: net: hns3: fix a deadlock problem when config TC during resetting (bsc#1230231).
• CVE-2024-45016: netem: fix return value if duplicate enqueue fails (bsc#1230429).
• CVE-2024-46771: can: bcm: Remove proc entry when dev is unregistered (bsc#1230766).
• CVE-2024-46777: udf: Avoid excessive partition lengths (bsc#1230773).
• CVE-2024-46800: sch/netem: fix use after free in netem_dequeue (bsc#1230827).
• CVE-2024-47660: fsnotify: clear PARENT_WATCHED flags lazily (bsc#1231439).
• CVE-2024-47679: vfs: fix race between evice_inodes() and find_inode()&iput() (bsc#1231930).
• CVE-2024-47701: ext4: avoid OOB when system.data xattr changes underneath the filesystem (bsc#1231920).
• CVE-2024-49858: efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption (bsc#1232251).
• CVE-2024-49868: btrfs: fix a NULL pointer dereference when failed to start a new trasacntion (bsc#1232272).
• CVE-2024-49921: drm/amd/display: Check null pointers before used (bsc#1232371).
• CVE-2024-49925: fbdev: efifb: Register sysfs groups through driver core (bsc#1232224)
• CVE-2024-49938: wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit (bsc#1232552).
• CVE-2024-49945: net/ncsi: Disable the ncsi work before freeing the associated structure (bsc#1232165).
• CVE-2024-49950: Bluetooth: L2CAP: Fix uaf in l2cap_connect (bsc#1232159).
• CVE-2024-49952: netfilter: nf_tables: prevent nf_skb_duplicated corruption (bsc#1232157).
• CVE-2024-50044: Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change (bsc#1231904).
• CVE-2024-50055: driver core: bus: Fix double free in driver API bus_register() (bsc#1232329).
• CVE-2024-50073: tty: n_gsm: Fix use-after-free in gsm_cleanup_mux (bsc#1232520).
• CVE-2024-50074: parport: Proper fix for array out-of-bounds access (bsc#1232507).
• CVE-2024-50095: RDMA/mad: Improve handling of timed out WRs of mad agent (bsc#1232873).
• CVE-2024-50115: KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory (bsc#1232919).
• CVE-2024-50117: drm/amd: Guard against bad data for ATIF ACPI method (bsc#1232897).
• CVE-2024-50125: Bluetooth: SCO: Fix UAF on sco_sock_timeout (bsc#1232928).
• CVE-2024-50135: nvme-pci: fix race condition between reset and nvme_dev_disable() (bsc#1232888).
• CVE-2024-50148: Bluetooth: bnep: fix wild-memory-access in proto_unregister (bsc#1233063).
• CVE-2024-50150: usb: typec: altmode should keep reference to parent (bsc#1233051).
• CVE-2024-50154: tcp/dccp: Do not use timer_pending() in reqsk_queue_unlink() (bsc#1233070).
• CVE-2024-50167: be2net: fix potential memory leak in be_xmit() (bsc#1233049).
• CVE-2024-50171: net: systemport: fix potential memory leak in bcm_sysport_xmit() (bsc#1233057).
• CVE-2024-50183: scsi: lpfc: Ensure DA_ID handling completion before deleting an NPIV instance (bsc#1233130).
• CVE-2024-50187: drm/vc4: Stop the active perfmon before being destroyed (bsc#1233108).
• CVE-2024-50195: posix-clock: Fix missing timespec64 check in pc_clock_settime() (bsc#1233103).
• CVE-2024-50218: ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow…

The SUSE Linux Enterprise 15 SP5 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

• CVE-2021-47594: mptcp: never allow the PM to close a listener subflow (bsc#1226560).
• CVE-2022-48983: io_uring: Fix a null-ptr-deref in io_tctx_exit_cb() (bsc#1231959).
• CVE-2024-26782: mptcp: fix double-free on socket dismantle (bsc#1222590).
• CVE-2024-26906: Fixed invalid vsyscall page read for copy_from_kernel_nofault() (bsc#1223202).
• CVE-2024-26953: net: esp: fix bad handling of pages from page_pool (bsc#1223656).
• CVE-2024-35888: erspan: make sure erspan_base_hdr is present in skb->head (bsc#1224518).
• CVE-2024-35937: wifi: cfg80211: check A-MSDU format more carefully (bsc#1224526).
• CVE-2024-36883: net: fix out-of-bounds access in ops_init (bsc#1225725).
• CVE-2024-36886: tipc: fix UAF in error path (bsc#1225730).
• CVE-2024-36905: tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets (bsc#1225742).
• CVE-2024-36954: tipc: fix a possible memleak in tipc_buf_append (bsc#1225764).
• CVE-2024-38589: netrom: fix possible dead-lock in nr_rt_ioctl() (bsc#1226748).
• CVE-2024-38615: cpufreq: exit() callback is optional (bsc#1226592).
• CVE-2024-40997: cpufreq: amd-pstate: fix memory leak on CPU EPP exit (bsc#1227853).
• CVE-2024-41023: sched/deadline: Fix task_struct reference leak (bsc#1228430).
• CVE-2024-44932: idpf: fix UAFs when destroying the queues (bsc#1229808).
• CVE-2024-44964: idpf: fix memory leaks and crashes while performing a soft reset (bsc#1230220).
• CVE-2024-44995: net: hns3: fix a deadlock problem when config TC during resetting (bsc#1230231).
• CVE-2024-46681: pktgen: use cpus_read_lock() in pg_net_init() (bsc#1230558).
• CVE-2024-46800: sch/netem: fix use after free in netem_dequeue (bsc#1230827).
• CVE-2024-47679: vfs: fix race between evice_inodes() and find_inode()&iput() (bsc#1231930).
• CVE-2024-47701: ext4: explicitly exit when ext4_find_inline_entry returns an error (bsc#1231920).
• CVE-2024-47745: mm: split critical region in remap_file_pages() and invoke LSMs in between (bsc#1232135).
• CVE-2024-47757: nilfs2: fix potential oob read in nilfs_btree_check_delete() (bsc#1232187).
• CVE-2024-49868: btrfs: fix a NULL pointer dereference when failed to start a new trasacntion (bsc#1232272).
• CVE-2024-49921: drm/amd/display: Check null pointers before used (bsc#1232371).
• CVE-2024-49925: fbdev: efifb: Register sysfs groups through driver core (bsc#1232224)
• CVE-2024-49934: fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name (bsc#1232387).
• CVE-2024-49945: net/ncsi: Disable the ncsi work before freeing the associated structure (bsc#1232165).
• CVE-2024-49950: Bluetooth: L2CAP: Fix uaf in l2cap_connect (bsc#1232159).
• CVE-2024-49968: ext4: fix error message when rejecting the default hash (bsc#1232264).
• CVE-2024-49983: ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free (bsc#1232096).
• CVE-2024-49989: drm/amd/display: fix double free issue during amdgpu module unload (bsc#1232483).
• CVE-2024-50009: cpufreq: amd-pstate: add check for cpufreq_cpu_get's return value (bsc#1232318).
• CVE-2024-50073: tty: n_gsm: Fix use-after-free in gsm_cleanup_mux (bsc#1232520).
• CVE-2024-50082: blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (bsc#1232500).
• CVE-2024-50089: unicode: Do not special case ignorable code points (bsc#1232860).
• CVE-2024-50093: thermal: intel: int340x: processor: Fix warning during module unload (bsc#1232877).
• CVE-2024-50098: scsi: ufs: core: Set SDEV_OFFLINE when UFS is shut down (bsc#1232881).
• CVE-2024-50108: drm/amd/display: Disable PSR-SU on Parade 08-01 TCON too (bsc#1232884).
• CVE-2024-50110: xfrm: fix one more kernel-infoleak in algo dumping (bsc#1232885).
• CVE-2024-50115: KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory (bsc#1232919).
• CVE-2024-50125: Bluetooth: SCO: Fix UAF on sco_sock_timeout (bsc#1232928).
• CVE-2024-50127: net: sched: fix…

The SUSE Linux Enterprise 15 SP6 Confidential Computing kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

• CVE-2023-52778: mptcp: deal with large GSO size (bsc#1224948).
• CVE-2023-52920: bpf: support non-r10 register spill/fill to/from stack in precision tracking (bsc#1232823).
• CVE-2023-6270: aoe: fix the potential use-after-free problem in more places (bsc#1218562).
• CVE-2024-26741: dccp/tcp: Unhash sk from ehash for tb2 alloc failure after check_estalblished() (bsc#1222587).
• CVE-2024-26782: mptcp: fix double-free on socket dismantle (bsc#1222590).
• CVE-2024-26953: net: esp: fix bad handling of pages from page_pool (bsc#1223656).
• CVE-2024-27017: netfilter: nft_set_pipapo: walk over current view on netlink dump (bsc#1223733).
• CVE-2024-35888: erspan: make sure erspan_base_hdr is present in skb->head (bsc#1224518).
• CVE-2024-36000: mm/hugetlb: fix missing hugetlb_lock for resv uncharge (bsc#1224548).
• CVE-2024-36244: net/sched: taprio: extend minimum interval restriction to entire cycle too (bsc#1226797).
• CVE-2024-36883: net: fix out-of-bounds access in ops_init (bsc#1225725).
• CVE-2024-36886: tipc: fix UAF in error path (bsc#1225730).
• CVE-2024-36905: tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets (bsc#1225742).
• CVE-2024-36927: ipv4: Fix uninit-value access in __ip_make_skb() (bsc#1225813).
• CVE-2024-36954: tipc: fix a possible memleak in tipc_buf_append (bsc#1225764).
• CVE-2024-36968: Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init() (bsc#1226130).
• CVE-2024-38589: netrom: fix possible dead-lock in nr_rt_ioctl() (bsc#1226748).
• CVE-2024-40914: mm/huge_memory: do not unpoison huge_zero_folio (bsc#1227842).
• CVE-2024-41023: sched/deadline: Fix task_struct reference leak (bsc#1228430).
• CVE-2024-41031: mm/filemap: skip to create PMD-sized page cache if needed (bsc#1228454).
• CVE-2024-41082: nvme-fabrics: use reserved tag for reg read/write command (bsc#1228620).
• CVE-2024-42102: Revert 'mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again' (bsc#1233132).
• CVE-2024-44958: sched/smt: Fix unbalance sched_smt_present dec/inc (bsc#1230179).
• CVE-2024-44995: net: hns3: fix a deadlock problem when config TC during resetting (bsc#1230231).
• CVE-2024-45016: netem: fix return value if duplicate enqueue fails (bsc#1230429).
• CVE-2024-45025: fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE (bsc#1230456).
• CVE-2024-46678: bonding: change ipsec_lock from spin lock to mutex (bsc#1230550).
• CVE-2024-46681: pktgen: use cpus_read_lock() in pg_net_init() (bsc#1230558).
• CVE-2024-46721: pparmor: fix possible NULL pointer dereference (bsc#1230710)
• CVE-2024-46754: bpf: Remove tst_run from lwt_seg6local_prog_ops (bsc#1230801).
• CVE-2024-46766: ice: move netif_queue_set_napi to rtnl-protected sections (bsc#1230762).
• CVE-2024-46770: ice: Add netif_device_attach/detach into PF reset flow (bsc#1230763).
• CVE-2024-46775: drm/amd/display: Validate function returns (bsc#1230774).
• CVE-2024-46777: udf: Avoid excessive partition lengths (bsc#1230773).
• CVE-2024-46813: drm/amd/display: Check link_index before accessing dc->links (bsc#1231191).
• CVE-2024-46816: drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links (bsc#1231197).
• CVE-2024-46826: ELF: fix kernel.randomize_va_space double read (bsc#1231115).
• CVE-2024-46828: sched: sch_cake: fix bulk flow accounting logic for host fairness (bsc#1231114).
• CVE-2024-46831: net: microchip: vcap: Fix use-after-free error in kunit test (bsc#1231117).
• CVE-2024-46834: ethtool: fail closed if we can't get max channel used in indirection tables (bsc#1231096).
• CVE-2024-46840: btrfs: clean up our handling of refs == 0 in snapshot delete (bsc#1231105).
• CVE-2024-46841: btrfs: do not BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc() (bsc#1231094).
• CVE-2024-46843: scsi: ufs: core: Remove SCSI host only if added…

The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

• CVE-2022-48853: swiotlb: fix info leak with DMA_FROM_DEVICE (bsc#1228015).
• CVE-2024-26801: Bluetooth: Avoid potential use-after-free in hci_error_reset (bsc#1222413).
• CVE-2024-26852: Fixed use-after-free in ip6_route_mpath_notify() (bsc#1223057).
• CVE-2024-26886: Bluetooth: af_bluetooth: Fix deadlock (bsc#1223044).
• CVE-2024-27051: cpufreq: brcmstb-avs-cpufreq: add check for cpufreq_cpu_get's return value (bsc#1223769).
• CVE-2024-35937: wifi: cfg80211: check A-MSDU format more carefully (bsc#1224526).
• CVE-2024-36905: tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets (bsc#1225742).
• CVE-2024-42098: crypto: ecdh - explicitly zeroize private_key (bsc#1228779).
• CVE-2024-42229: crypto: aead,cipher - zeroize key buffer after use (bsc#1228708).
• CVE-2024-44995: net: hns3: fix a deadlock problem when config TC during resetting (bsc#1230231).
• CVE-2024-45016: netem: fix return value if duplicate enqueue fails (bsc#1230429).
• CVE-2024-46771: can: bcm: Remove proc entry when dev is unregistered (bsc#1230766).
• CVE-2024-46777: udf: Avoid excessive partition lengths (bsc#1230773).
• CVE-2024-46800: sch/netem: fix use after free in netem_dequeue (bsc#1230827).
• CVE-2024-47660: fsnotify: clear PARENT_WATCHED flags lazily (bsc#1231439).
• CVE-2024-47679: vfs: fix race between evice_inodes() and find_inode()&iput() (bsc#1231930).
• CVE-2024-47701: ext4: avoid OOB when system.data xattr changes underneath the filesystem (bsc#1231920).
• CVE-2024-49858: efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption (bsc#1232251).
• CVE-2024-49868: btrfs: fix a NULL pointer dereference when failed to start a new trasacntion (bsc#1232272).
• CVE-2024-49921: drm/amd/display: Check null pointers before used (bsc#1232371).
• CVE-2024-49925: fbdev: efifb: Register sysfs groups through driver core (bsc#1232224)
• CVE-2024-49938: wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit (bsc#1232552).
• CVE-2024-49945: net/ncsi: Disable the ncsi work before freeing the associated structure (bsc#1232165).
• CVE-2024-49950: Bluetooth: L2CAP: Fix uaf in l2cap_connect (bsc#1232159).
• CVE-2024-49952: netfilter: nf_tables: prevent nf_skb_duplicated corruption (bsc#1232157).
• CVE-2024-50044: Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change (bsc#1231904).
• CVE-2024-50055: driver core: bus: Fix double free in driver API bus_register() (bsc#1232329).
• CVE-2024-50073: tty: n_gsm: Fix use-after-free in gsm_cleanup_mux (bsc#1232520).
• CVE-2024-50074: parport: Proper fix for array out-of-bounds access (bsc#1232507).
• CVE-2024-50095: RDMA/mad: Improve handling of timed out WRs of mad agent (bsc#1232873).
• CVE-2024-50115: KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory (bsc#1232919).
• CVE-2024-50117: drm/amd: Guard against bad data for ATIF ACPI method (bsc#1232897).
• CVE-2024-50125: Bluetooth: SCO: Fix UAF on sco_sock_timeout (bsc#1232928).
• CVE-2024-50135: nvme-pci: fix race condition between reset and nvme_dev_disable() (bsc#1232888).
• CVE-2024-50148: Bluetooth: bnep: fix wild-memory-access in proto_unregister (bsc#1233063).
• CVE-2024-50150: usb: typec: altmode should keep reference to parent (bsc#1233051).
• CVE-2024-50154: tcp/dccp: Do not use timer_pending() in reqsk_queue_unlink() (bsc#1233070).
• CVE-2024-50167: be2net: fix potential memory leak in be_xmit() (bsc#1233049).
• CVE-2024-50171: net: systemport: fix potential memory leak in bcm_sysport_xmit() (bsc#1233057).
• CVE-2024-50183: scsi: lpfc: Ensure DA_ID handling completion before deleting an NPIV instance (bsc#1233130).
• CVE-2024-50187: drm/vc4: Stop the active perfmon before being destroyed (bsc#1233108).
• CVE-2024-50195: posix-clock: Fix missing timespec64 check in pc_clock_settime() (bsc#1233103).
• CVE-2024-50218: ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow…

The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

• CVE-2023-52778: mptcp: deal with large GSO size (bsc#1224948).
• CVE-2023-52920: bpf: support non-r10 register spill/fill to/from stack in precision tracking (bsc#1232823).
• CVE-2024-26596: net: dsa: fix netdev_priv() dereference before check on non-DSA netdevice events (bsc#1220355).
• CVE-2024-26741: dccp/tcp: Unhash sk from ehash for tb2 alloc failure after check_estalblished() (bsc#1222587).
• CVE-2024-26782: mptcp: fix double-free on socket dismantle (bsc#1222590).
• CVE-2024-26953: net: esp: fix bad handling of pages from page_pool (bsc#1223656).
• CVE-2024-27017: netfilter: nft_set_pipapo: walk over current view on netlink dump (bsc#1223733).
• CVE-2024-35888: erspan: make sure erspan_base_hdr is present in skb->head (bsc#1224518).
• CVE-2024-36000: mm/hugetlb: fix missing hugetlb_lock for resv uncharge (bsc#1224548).
• CVE-2024-36244: net/sched: taprio: extend minimum interval restriction to entire cycle too (bsc#1226797).
• CVE-2024-36883: net: fix out-of-bounds access in ops_init (bsc#1225725).
• CVE-2024-36886: tipc: fix UAF in error path (bsc#1225730).
• CVE-2024-36905: tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets (bsc#1225742).
• CVE-2024-36927: ipv4: Fix uninit-value access in __ip_make_skb() (bsc#1225813).
• CVE-2024-36954: tipc: fix a possible memleak in tipc_buf_append (bsc#1225764).
• CVE-2024-36968: Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init() (bsc#1226130).
• CVE-2024-38589: netrom: fix possible dead-lock in nr_rt_ioctl() (bsc#1226748).
• CVE-2024-40914: mm/huge_memory: do not unpoison huge_zero_folio (bsc#1227842).
• CVE-2024-41023: sched/deadline: Fix task_struct reference leak (bsc#1228430).
• CVE-2024-41031: mm/filemap: skip to create PMD-sized page cache if needed (bsc#1228454).
• CVE-2024-41082: nvme-fabrics: use reserved tag for reg read/write command (bsc#1228620).
• CVE-2024-42102: Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again" (bsc#1233132).
• CVE-2024-44958: sched/smt: Fix unbalance sched_smt_present dec/inc (bsc#1230179).
• CVE-2024-44995: net: hns3: fix a deadlock problem when config TC during resetting (bsc#1230231).
• CVE-2024-45016: netem: fix return value if duplicate enqueue fails (bsc#1230429).
• CVE-2024-45025: fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE (bsc#1230456).
• CVE-2024-46678: bonding: change ipsec_lock from spin lock to mutex (bsc#1230550).
• CVE-2024-46680: Bluetooth: btnxpuart: Fix random crash seen while removing driver (bsc#1230557).
• CVE-2024-46681: pktgen: use cpus_read_lock() in pg_net_init() (bsc#1230558).
• CVE-2024-46721: pparmor: fix possible NULL pointer dereference (bsc#1230710)
• CVE-2024-46754: bpf: Remove tst_run from lwt_seg6local_prog_ops (bsc#1230801).
• CVE-2024-46765: ice: protect XDP configuration with a mutex (bsc#1230807).
• CVE-2024-46766: ice: move netif_queue_set_napi to rtnl-protected sections (bsc#1230762).
• CVE-2024-46770: ice: Add netif_device_attach/detach into PF reset flow (bsc#1230763).
• CVE-2024-46775: drm/amd/display: Validate function returns (bsc#1230774).
• CVE-2024-46777: udf: Avoid excessive partition lengths (bsc#1230773).
• CVE-2024-46800: sch/netem: fix use after free in netem_dequeue (bsc#1230827).
• CVE-2024-46813: drm/amd/display: Check link_index before accessing dc->links (bsc#1231191).
• CVE-2024-46816: drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links (bsc#1231197).
• CVE-2024-46826: ELF: fix kernel.randomize_va_space double read (bsc#1231115).
• CVE-2024-46831: net: microchip: vcap: Fix use-after-free error in kunit test (bsc#1231117).
• CVE-2024-46834: ethtool: fail closed if we can't get max channel used in indirection tables (bsc#1231096).
• CVE-2024-46840: btrfs: clean up our handling of refs == 0 in snapshot delete (bsc#1231105).
• CVE-2024-46841: btrfs:…

The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

• CVE-2023-52778: mptcp: deal with large GSO size (bsc#1224948).
• CVE-2023-52920: bpf: support non-r10 register spill/fill to/from stack in precision tracking (bsc#1232823).
• CVE-2024-26596: net: dsa: fix netdev_priv() dereference before check on non-DSA netdevice events (bsc#1220355).
• CVE-2024-26741: dccp/tcp: Unhash sk from ehash for tb2 alloc failure after check_estalblished() (bsc#1222587).
• CVE-2024-26782: mptcp: fix double-free on socket dismantle (bsc#1222590).
• CVE-2024-26953: net: esp: fix bad handling of pages from page_pool (bsc#1223656).
• CVE-2024-27017: netfilter: nft_set_pipapo: walk over current view on netlink dump (bsc#1223733).
• CVE-2024-35888: erspan: make sure erspan_base_hdr is present in skb->head (bsc#1224518).
• CVE-2024-36000: mm/hugetlb: fix missing hugetlb_lock for resv uncharge (bsc#1224548).
• CVE-2024-36244: net/sched: taprio: extend minimum interval restriction to entire cycle too (bsc#1226797).
• CVE-2024-36883: net: fix out-of-bounds access in ops_init (bsc#1225725).
• CVE-2024-36886: tipc: fix UAF in error path (bsc#1225730).
• CVE-2024-36905: tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets (bsc#1225742).
• CVE-2024-36927: ipv4: Fix uninit-value access in __ip_make_skb() (bsc#1225813).
• CVE-2024-36954: tipc: fix a possible memleak in tipc_buf_append (bsc#1225764).
• CVE-2024-36968: Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init() (bsc#1226130).
• CVE-2024-38589: netrom: fix possible dead-lock in nr_rt_ioctl() (bsc#1226748).
• CVE-2024-40914: mm/huge_memory: do not unpoison huge_zero_folio (bsc#1227842).
• CVE-2024-41023: sched/deadline: Fix task_struct reference leak (bsc#1228430).
• CVE-2024-41031: mm/filemap: skip to create PMD-sized page cache if needed (bsc#1228454).
• CVE-2024-41082: nvme-fabrics: use reserved tag for reg read/write command (bsc#1228620).
• CVE-2024-42102: Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again" (bsc#1233132).
• CVE-2024-44958: sched/smt: Fix unbalance sched_smt_present dec/inc (bsc#1230179).
• CVE-2024-44995: net: hns3: fix a deadlock problem when config TC during resetting (bsc#1230231).
• CVE-2024-45016: netem: fix return value if duplicate enqueue fails (bsc#1230429).
• CVE-2024-45025: fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE (bsc#1230456).
• CVE-2024-46678: bonding: change ipsec_lock from spin lock to mutex (bsc#1230550).
• CVE-2024-46680: Bluetooth: btnxpuart: Fix random crash seen while removing driver (bsc#1230557).
• CVE-2024-46681: pktgen: use cpus_read_lock() in pg_net_init() (bsc#1230558).
• CVE-2024-46721: pparmor: fix possible NULL pointer dereference (bsc#1230710)
• CVE-2024-46754: bpf: Remove tst_run from lwt_seg6local_prog_ops (bsc#1230801).
• CVE-2024-46765: ice: protect XDP configuration with a mutex (bsc#1230807).
• CVE-2024-46766: ice: move netif_queue_set_napi to rtnl-protected sections (bsc#1230762).
• CVE-2024-46770: ice: Add netif_device_attach/detach into PF reset flow (bsc#1230763).
• CVE-2024-46775: drm/amd/display: Validate function returns (bsc#1230774).
• CVE-2024-46777: udf: Avoid excessive partition lengths (bsc#1230773).
• CVE-2024-46800: sch/netem: fix use after free in netem_dequeue (bsc#1230827).
• CVE-2024-46813: drm/amd/display: Check link_index before accessing dc->links (bsc#1231191).
• CVE-2024-46816: drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links (bsc#1231197).
• CVE-2024-46826: ELF: fix kernel.randomize_va_space double read (bsc#1231115).
• CVE-2024-46831: net: microchip: vcap: Fix use-after-free error in kunit test (bsc#1231117).
• CVE-2024-46834: ethtool: fail closed if we can't get max channel used in indirection tables (bsc#1231096).
• CVE-2024-46840: btrfs: clean up our handling of refs == 0 in snapshot delete (bsc#1231105).
• CVE-2024-46841: btrfs: do…

The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

• CVE-2023-52778: mptcp: deal with large GSO size (bsc#1224948).
• CVE-2023-52920: bpf: support non-r10 register spill/fill to/from stack in precision tracking (bsc#1232823).
• CVE-2024-26596: net: dsa: fix netdev_priv() dereference before check on non-DSA netdevice events (bsc#1220355).
• CVE-2024-26741: dccp/tcp: Unhash sk from ehash for tb2 alloc failure after check_estalblished() (bsc#1222587).
• CVE-2024-26782: mptcp: fix double-free on socket dismantle (bsc#1222590).
• CVE-2024-26953: net: esp: fix bad handling of pages from page_pool (bsc#1223656).
• CVE-2024-27017: netfilter: nft_set_pipapo: walk over current view on netlink dump (bsc#1223733).
• CVE-2024-35888: erspan: make sure erspan_base_hdr is present in skb->head (bsc#1224518).
• CVE-2024-36000: mm/hugetlb: fix missing hugetlb_lock for resv uncharge (bsc#1224548).
• CVE-2024-36244: net/sched: taprio: extend minimum interval restriction to entire cycle too (bsc#1226797).
• CVE-2024-36883: net: fix out-of-bounds access in ops_init (bsc#1225725).
• CVE-2024-36886: tipc: fix UAF in error path (bsc#1225730).
• CVE-2024-36905: tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets (bsc#1225742).
• CVE-2024-36927: ipv4: Fix uninit-value access in __ip_make_skb() (bsc#1225813).
• CVE-2024-36954: tipc: fix a possible memleak in tipc_buf_append (bsc#1225764).
• CVE-2024-36968: Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init() (bsc#1226130).
• CVE-2024-38589: netrom: fix possible dead-lock in nr_rt_ioctl() (bsc#1226748).
• CVE-2024-40914: mm/huge_memory: do not unpoison huge_zero_folio (bsc#1227842).
• CVE-2024-41023: sched/deadline: Fix task_struct reference leak (bsc#1228430).
• CVE-2024-41031: mm/filemap: skip to create PMD-sized page cache if needed (bsc#1228454).
• CVE-2024-41082: nvme-fabrics: use reserved tag for reg read/write command (bsc#1228620).
• CVE-2024-42102: Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again" (bsc#1233132).
• CVE-2024-44958: sched/smt: Fix unbalance sched_smt_present dec/inc (bsc#1230179).
• CVE-2024-44995: net: hns3: fix a deadlock problem when config TC during resetting (bsc#1230231).
• CVE-2024-45016: netem: fix return value if duplicate enqueue fails (bsc#1230429).
• CVE-2024-45025: fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE (bsc#1230456).
• CVE-2024-46678: bonding: change ipsec_lock from spin lock to mutex (bsc#1230550).
• CVE-2024-46680: Bluetooth: btnxpuart: Fix random crash seen while removing driver (bsc#1230557).
• CVE-2024-46681: pktgen: use cpus_read_lock() in pg_net_init() (bsc#1230558).
• CVE-2024-46721: pparmor: fix possible NULL pointer dereference (bsc#1230710)
• CVE-2024-46754: bpf: Remove tst_run from lwt_seg6local_prog_ops (bsc#1230801).
• CVE-2024-46765: ice: protect XDP configuration with a mutex (bsc#1230807).
• CVE-2024-46766: ice: move netif_queue_set_napi to rtnl-protected sections (bsc#1230762).
• CVE-2024-46770: ice: Add netif_device_attach/detach into PF reset flow (bsc#1230763).
• CVE-2024-46775: drm/amd/display: Validate function returns (bsc#1230774).
• CVE-2024-46777: udf: Avoid excessive partition lengths (bsc#1230773).
• CVE-2024-46800: sch/netem: fix use after free in netem_dequeue (bsc#1230827).
• CVE-2024-46813: drm/amd/display: Check link_index before accessing dc->links (bsc#1231191).
• CVE-2024-46816: drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links (bsc#1231197).
• CVE-2024-46826: ELF: fix kernel.randomize_va_space double read (bsc#1231115).
• CVE-2024-46831: net: microchip: vcap: Fix use-after-free error in kunit test (bsc#1231117).
• CVE-2024-46834: ethtool: fail closed if we can't get max channel used in indirection tables (bsc#1231096).
• CVE-2024-46840: btrfs: clean up our handling of refs == 0 in snapshot delete (bsc#1231105).
• CVE-2024-46841: btrfs:…

The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

• CVE-2023-52778: mptcp: deal with large GSO size (bsc#1224948).
• CVE-2023-52920: bpf: support non-r10 register spill/fill to/from stack in precision tracking (bsc#1232823).
• CVE-2024-26596: net: dsa: fix netdev_priv() dereference before check on non-DSA netdevice events (bsc#1220355).
• CVE-2024-26741: dccp/tcp: Unhash sk from ehash for tb2 alloc failure after check_estalblished() (bsc#1222587).
• CVE-2024-26782: mptcp: fix double-free on socket dismantle (bsc#1222590).
• CVE-2024-26953: net: esp: fix bad handling of pages from page_pool (bsc#1223656).
• CVE-2024-27017: netfilter: nft_set_pipapo: walk over current view on netlink dump (bsc#1223733).
• CVE-2024-35888: erspan: make sure erspan_base_hdr is present in skb->head (bsc#1224518).
• CVE-2024-36000: mm/hugetlb: fix missing hugetlb_lock for resv uncharge (bsc#1224548).
• CVE-2024-36244: net/sched: taprio: extend minimum interval restriction to entire cycle too (bsc#1226797).
• CVE-2024-36883: net: fix out-of-bounds access in ops_init (bsc#1225725).
• CVE-2024-36886: tipc: fix UAF in error path (bsc#1225730).
• CVE-2024-36905: tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets (bsc#1225742).
• CVE-2024-36927: ipv4: Fix uninit-value access in __ip_make_skb() (bsc#1225813).
• CVE-2024-36954: tipc: fix a possible memleak in tipc_buf_append (bsc#1225764).
• CVE-2024-36968: Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init() (bsc#1226130).
• CVE-2024-38589: netrom: fix possible dead-lock in nr_rt_ioctl() (bsc#1226748).
• CVE-2024-40914: mm/huge_memory: do not unpoison huge_zero_folio (bsc#1227842).
• CVE-2024-41023: sched/deadline: Fix task_struct reference leak (bsc#1228430).
• CVE-2024-41031: mm/filemap: skip to create PMD-sized page cache if needed (bsc#1228454).
• CVE-2024-41082: nvme-fabrics: use reserved tag for reg read/write command (bsc#1228620).
• CVE-2024-42102: Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again" (bsc#1233132).
• CVE-2024-44958: sched/smt: Fix unbalance sched_smt_present dec/inc (bsc#1230179).
• CVE-2024-44995: net: hns3: fix a deadlock problem when config TC during resetting (bsc#1230231).
• CVE-2024-45016: netem: fix return value if duplicate enqueue fails (bsc#1230429).
• CVE-2024-45025: fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE (bsc#1230456).
• CVE-2024-46678: bonding: change ipsec_lock from spin lock to mutex (bsc#1230550).
• CVE-2024-46680: Bluetooth: btnxpuart: Fix random crash seen while removing driver (bsc#1230557).
• CVE-2024-46681: pktgen: use cpus_read_lock() in pg_net_init() (bsc#1230558).
• CVE-2024-46721: pparmor: fix possible NULL pointer dereference (bsc#1230710)
• CVE-2024-46754: bpf: Remove tst_run from lwt_seg6local_prog_ops (bsc#1230801).
• CVE-2024-46765: ice: protect XDP configuration with a mutex (bsc#1230807).
• CVE-2024-46766: ice: move netif_queue_set_napi to rtnl-protected sections (bsc#1230762).
• CVE-2024-46770: ice: Add netif_device_attach/detach into PF reset flow (bsc#1230763).
• CVE-2024-46775: drm/amd/display: Validate function returns (bsc#1230774).
• CVE-2024-46777: udf: Avoid excessive partition lengths (bsc#1230773).
• CVE-2024-46800: sch/netem: fix use after free in netem_dequeue (bsc#1230827).
• CVE-2024-46813: drm/amd/display: Check link_index before accessing dc->links (bsc#1231191).
• CVE-2024-46816: drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links (bsc#1231197).
• CVE-2024-46826: ELF: fix kernel.randomize_va_space double read (bsc#1231115).
• CVE-2024-46831: net: microchip: vcap: Fix use-after-free error in kunit test (bsc#1231117).
• CVE-2024-46834: ethtool: fail closed if we can't get max channel used in indirection tables (bsc#1231096).
• CVE-2024-46840: btrfs: clean up our handling of refs == 0 in snapshot delete (bsc#1231105).
• CVE-2024-46841: btrfs: do…

Attila Szász discovered that the HFS+ file system implementation in the Linux Kernel contained a heap overflow vulnerability. An attacker could use a specially crafted file system image that, when mounted, could cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2025-0927)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM64 architecture;
• x86 architecture;
• Block layer subsystem;
• ACPI drivers;
• GPU drivers;
• HID subsystem;
• I2C subsystem;
• IIO ADC drivers;
• IIO subsystem;
• InfiniBand drivers;
• IOMMU subsystem;
• IRQ chip drivers;
• Multiple devices driver;
• Media drivers;
• Network drivers;
• STMicroelectronics network drivers;
• Parport drivers;
• Pin controllers subsystem;
• Direct Digital Synthesis drivers;
• TCM subsystem;
• TTY drivers;
• USB Dual Role (OTG-ready) Controller drivers;
• USB Serial drivers;
• USB Type-C support driver;
• USB Type-C Connector System Software Interface driver;
• BTRFS file system;
• File systems infrastructure;
• Network file system (NFS) client;
• NILFS2 file system;
• NTFS3 file system;
• SMB network file system;
• User-space API (UAPI);
• io_uring subsystem;
• BPF subsystem;
• Timer substystem drivers;
• Tracing infrastructure;
• Closures library;
• Memory management;
• Amateur Radio drivers;
• Bluetooth subsystem;
• Networking core;
• IPv4 networking;
• MAC80211 subsystem;
• Multipath TCP;
• Netfilter;
• Network traffic control;
• SCTP protocol;
• XFRM subsystem;
• Key management;
• FireWire sound drivers;
• HD-audio driver;
• QCOM ASoC drivers;
• STMicroelectronics SoC drivers;
• KVM core; (CVE-2024-50202, CVE-2024-50208, CVE-2024-50265, CVE-2024-41080, CVE-2024-50101, CVE-2024-39497, CVE-2024-50153, CVE-2024-50162, CVE-2024-50150, CVE-2024-50115, CVE-2024-53066, CVE-2024-50279, CVE-2024-50116, CVE-2024-50218, CVE-2024-53104, CVE-2024-50086, CVE-2024-50154, CVE-2024-50244, CVE-2024-50074, CVE-2024-50278, CVE-2024-50262, CVE-2024-50168, CVE-2024-50134, CVE-2024-53063, CVE-2024-50236, CVE-2024-50082, CVE-2024-50234, CVE-2024-50247, CVE-2024-50282, CVE-2024-50267, CVE-2024-40965, CVE-2024-50229, CVE-2024-50110, CVE-2024-35887, CVE-2024-50302, CVE-2024-50036, CVE-2024-50209, CVE-2024-50287, CVE-2024-50245, CVE-2024-50072, CVE-2024-50301, CVE-2024-50201, CVE-2024-53097, CVE-2024-40953, CVE-2024-50085, CVE-2024-50299, CVE-2024-50292, CVE-2024-50269, CVE-2024-50182, CVE-2024-50233, CVE-2024-53088, CVE-2024-50259, CVE-2024-50232, CVE-2024-53055, CVE-2024-50195, CVE-2024-50273, CVE-2024-42291, CVE-2024-50192, CVE-2024-50251, CVE-2024-50193, CVE-2024-50142, CVE-2024-53101, CVE-2024-50205, CVE-2024-26718, CVE-2024-50167, CVE-2024-50010, CVE-2024-50230, CVE-2024-41066, CVE-2024-50194, CVE-2024-50148, CVE-2024-50151, CVE-2024-50127, CVE-2024-50160, CVE-2023-52913, CVE-2024-53052, CVE-2024-50156, CVE-2024-50141, CVE-2024-50103, CVE-2024-50296, CVE-2024-50257, CVE-2024-50199, CVE-2024-50128, CVE-2024-50058, CVE-2024-50099, CVE-2024-50290, CVE-2024-53042, CVE-2024-50295, CVE-2024-50268, CVE-2024-50163, CVE-2024-53058, CVE-2024-50185, CVE-2024-50117, CVE-2024-50237, CVE-2024-50083, CVE-2024-50131, CVE-2024-50196, CVE-2024-42252, CVE-2024-50143, CVE-2024-50171, CVE-2024-50249, CVE-2024-53059, CVE-2024-50198, CVE-2024-53061)

Attila Szász discovered that the HFS+ file system implementation in the Linux Kernel contained a heap overflow vulnerability. An attacker could use a specially crafted file system image that, when mounted, could cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2025-0927)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM64 architecture;
• x86 architecture;
• Block layer subsystem;
• ACPI drivers;
• GPU drivers;
• HID subsystem;
• I2C subsystem;
• IIO ADC drivers;
• IIO subsystem;
• InfiniBand drivers;
• IOMMU subsystem;
• IRQ chip drivers;
• Multiple devices driver;
• Media drivers;
• Network drivers;
• STMicroelectronics network drivers;
• Parport drivers;
• Pin controllers subsystem;
• Direct Digital Synthesis drivers;
• TCM subsystem;
• TTY drivers;
• USB Dual Role (OTG-ready) Controller drivers;
• USB Serial drivers;
• USB Type-C support driver;
• USB Type-C Connector System Software Interface driver;
• BTRFS file system;
• File systems infrastructure;
• Network file system (NFS) client;
• NILFS2 file system;
• NTFS3 file system;
• SMB network file system;
• User-space API (UAPI);
• io_uring subsystem;
• BPF subsystem;
• Timer substystem drivers;
• Tracing infrastructure;
• Closures library;
• Memory management;
• Amateur Radio drivers;
• Bluetooth subsystem;
• Networking core;
• IPv4 networking;
• MAC80211 subsystem;
• Multipath TCP;
• Netfilter;
• Network traffic control;
• SCTP protocol;
• XFRM subsystem;
• Key management;
• FireWire sound drivers;
• HD-audio driver;
• QCOM ASoC drivers;
• STMicroelectronics SoC drivers;
• KVM core; (CVE-2024-50151, CVE-2024-50195, CVE-2024-50117, CVE-2024-53104, CVE-2024-50171, CVE-2024-53059, CVE-2024-50160, CVE-2024-50163, CVE-2024-50103, CVE-2024-50245, CVE-2024-50282, CVE-2024-50233, CVE-2024-50218, CVE-2024-50201, CVE-2024-53058, CVE-2024-50115, CVE-2024-53101, CVE-2024-50268, CVE-2024-50127, CVE-2024-50182, CVE-2024-50148, CVE-2024-50295, CVE-2024-53061, CVE-2024-50232, CVE-2024-50010, CVE-2024-50273, CVE-2024-50267, CVE-2024-50198, CVE-2024-53097, CVE-2024-50150, CVE-2024-50278, CVE-2024-50301, CVE-2024-50290, CVE-2024-50185, CVE-2024-50036, CVE-2024-50296, CVE-2024-50082, CVE-2024-50058, CVE-2024-53063, CVE-2024-50192, CVE-2024-50208, CVE-2024-53052, CVE-2024-50162, CVE-2024-50247, CVE-2024-50302, CVE-2024-50153, CVE-2024-50143, CVE-2024-41080, CVE-2024-50287, CVE-2024-39497, CVE-2024-50156, CVE-2024-42252, CVE-2024-53055, CVE-2024-50265, CVE-2024-50230, CVE-2024-50269, CVE-2024-50167, CVE-2024-50237, CVE-2024-50168, CVE-2023-52913, CVE-2024-35887, CVE-2024-50299, CVE-2024-53088, CVE-2024-50209, CVE-2024-50234, CVE-2024-50131, CVE-2024-50141, CVE-2024-40965, CVE-2024-41066, CVE-2024-50251, CVE-2024-50292, CVE-2024-50194, CVE-2024-50085, CVE-2024-50154, CVE-2024-50202, CVE-2024-50074, CVE-2024-50199, CVE-2024-50110, CVE-2024-26718, CVE-2024-50205, CVE-2024-53042, CVE-2024-50279, CVE-2024-50101, CVE-2024-50116, CVE-2024-50236, CVE-2024-50083, CVE-2024-50262, CVE-2024-40953, CVE-2024-50142, CVE-2024-50128, CVE-2024-50099, CVE-2024-50086, CVE-2024-42291, CVE-2024-50257, CVE-2024-50229, CVE-2024-50134, CVE-2024-50244, CVE-2024-50249, CVE-2024-50193, CVE-2024-50072, CVE-2024-50259, CVE-2024-50196, CVE-2024-53066)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM64 architecture;
• x86 architecture;
• Block layer subsystem;
• ACPI drivers;
• GPU drivers;
• HID subsystem;
• I2C subsystem;
• IIO ADC drivers;
• IIO subsystem;
• InfiniBand drivers;
• IOMMU subsystem;
• IRQ chip drivers;
• Multiple devices driver;
• Media drivers;
• Network drivers;
• STMicroelectronics network drivers;
• Parport drivers;
• Pin controllers subsystem;
• Direct Digital Synthesis drivers;
• TCM subsystem;
• TTY drivers;
• USB Dual Role (OTG-ready) Controller drivers;
• USB Serial drivers;
• USB Type-C support driver;
• USB Type-C Connector System Software Interface driver;
• BTRFS file system;
• File systems infrastructure;
• Network file system (NFS) client;
• NILFS2 file system;
• NTFS3 file system;
• SMB network file system;
• User-space API (UAPI);
• io_uring subsystem;
• BPF subsystem;
• Timer substystem drivers;
• Tracing infrastructure;
• Closures library;
• Memory management;
• Amateur Radio drivers;
• Bluetooth subsystem;
• Networking core;
• IPv4 networking;
• MAC80211 subsystem;
• Multipath TCP;
• Netfilter;
• Network traffic control;
• SCTP protocol;
• XFRM subsystem;
• Key management;
• FireWire sound drivers;
• HD-audio driver;
• QCOM ASoC drivers;
• STMicroelectronics SoC drivers;
• KVM core; (CVE-2024-50196, CVE-2024-50199, CVE-2024-53055, CVE-2024-53101, CVE-2024-50160, CVE-2024-50257, CVE-2024-50148, CVE-2024-50182, CVE-2024-50162, CVE-2024-50249, CVE-2024-50127, CVE-2024-50115, CVE-2024-50192, CVE-2024-50218, CVE-2024-50086, CVE-2024-50262, CVE-2024-50201, CVE-2024-50082, CVE-2024-50110, CVE-2023-52913, CVE-2024-50290, CVE-2024-50269, CVE-2024-50208, CVE-2024-50103, CVE-2024-50194, CVE-2024-50237, CVE-2024-50245, CVE-2024-50128, CVE-2024-53052, CVE-2024-50117, CVE-2024-42252, CVE-2024-50233, CVE-2024-50058, CVE-2024-50229, CVE-2024-40965, CVE-2024-50265, CVE-2024-50143, CVE-2024-50205, CVE-2024-50131, CVE-2024-50236, CVE-2024-53066, CVE-2024-50268, CVE-2024-41066, CVE-2024-53088, CVE-2024-50209, CVE-2024-40953, CVE-2024-50168, CVE-2024-50010, CVE-2024-50195, CVE-2024-50171, CVE-2024-53058, CVE-2024-50267, CVE-2024-53061, CVE-2024-53042, CVE-2024-53104, CVE-2024-50247, CVE-2024-50101, CVE-2024-53063, CVE-2024-50167, CVE-2024-50273, CVE-2024-50163, CVE-2024-50085, CVE-2024-50154, CVE-2024-50301, CVE-2024-50259, CVE-2024-50292, CVE-2024-50185, CVE-2024-26718, CVE-2024-50116, CVE-2024-50302, CVE-2024-50083, CVE-2024-50299, CVE-2024-50036, CVE-2024-50251, CVE-2024-50202, CVE-2024-50099, CVE-2024-50279, CVE-2024-50232, CVE-2024-53059, CVE-2024-50153, CVE-2024-50156, CVE-2024-41080, CVE-2024-50193, CVE-2024-50287, CVE-2024-50141, CVE-2024-50296, CVE-2024-50230, CVE-2024-50074, CVE-2024-50234, CVE-2024-50142, CVE-2024-42291, CVE-2024-50151, CVE-2024-50295, CVE-2024-50150, CVE-2024-50282, CVE-2024-50278, CVE-2024-50198, CVE-2024-53097, CVE-2024-50244, CVE-2024-50134, CVE-2024-39497, CVE-2024-50072, CVE-2024-35887)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM64 architecture;
• x86 architecture;
• Block layer subsystem;
• ACPI drivers;
• GPU drivers;
• HID subsystem;
• I2C subsystem;
• IIO ADC drivers;
• IIO subsystem;
• InfiniBand drivers;
• IOMMU subsystem;
• IRQ chip drivers;
• Multiple devices driver;
• Media drivers;
• Network drivers;
• STMicroelectronics network drivers;
• Parport drivers;
• Pin controllers subsystem;
• Direct Digital Synthesis drivers;
• TCM subsystem;
• TTY drivers;
• USB Dual Role (OTG-ready) Controller drivers;
• USB Serial drivers;
• USB Type-C support driver;
• USB Type-C Connector System Software Interface driver;
• BTRFS file system;
• File systems infrastructure;
• Network file system (NFS) client;
• NILFS2 file system;
• NTFS3 file system;
• SMB network file system;
• User-space API (UAPI);
• io_uring subsystem;
• BPF subsystem;
• Timer substystem drivers;
• Tracing infrastructure;
• Closures library;
• Memory management;
• Amateur Radio drivers;
• Bluetooth subsystem;
• Networking core;
• IPv4 networking;
• MAC80211 subsystem;
• Multipath TCP;
• Netfilter;
• Network traffic control;
• SCTP protocol;
• XFRM subsystem;
• Key management;
• FireWire sound drivers;
• HD-audio driver;
• QCOM ASoC drivers;
• STMicroelectronics SoC drivers;
• KVM core; (CVE-2024-50269, CVE-2024-50208, CVE-2024-53101, CVE-2024-50257, CVE-2024-50110, CVE-2024-39497, CVE-2024-50116, CVE-2024-50153, CVE-2024-50143, CVE-2023-52913, CVE-2024-53042, CVE-2024-41066, CVE-2024-42252, CVE-2024-50247, CVE-2024-50131, CVE-2024-50182, CVE-2024-50279, CVE-2024-50209, CVE-2024-50163, CVE-2024-50265, CVE-2024-50010, CVE-2024-50171, CVE-2024-50295, CVE-2024-53088, CVE-2024-50142, CVE-2024-50058, CVE-2024-50195, CVE-2024-50232, CVE-2024-50141, CVE-2024-50117, CVE-2024-50229, CVE-2024-53061, CVE-2024-50074, CVE-2024-50282, CVE-2024-50296, CVE-2024-50218, CVE-2024-50259, CVE-2024-26718, CVE-2024-50134, CVE-2024-50150, CVE-2024-50301, CVE-2024-40953, CVE-2024-42291, CVE-2024-50086, CVE-2024-50198, CVE-2024-50194, CVE-2024-50168, CVE-2024-50196, CVE-2024-50262, CVE-2024-50290, CVE-2024-50036, CVE-2024-50156, CVE-2024-53066, CVE-2024-50245, CVE-2024-50278, CVE-2024-50127, CVE-2024-53055, CVE-2024-50287, CVE-2024-53052, CVE-2024-35887, CVE-2024-50199, CVE-2024-50205, CVE-2024-50273, CVE-2024-50185, CVE-2024-50201, CVE-2024-50072, CVE-2024-50234, CVE-2024-50101, CVE-2024-50103, CVE-2024-50302, CVE-2024-50251, CVE-2024-53104, CVE-2024-50083, CVE-2024-50292, CVE-2024-50236, CVE-2024-50230, CVE-2024-50085, CVE-2024-50162, CVE-2024-50193, CVE-2024-50267, CVE-2024-50192, CVE-2024-50148, CVE-2024-50167, CVE-2024-50249, CVE-2024-50268, CVE-2024-53058, CVE-2024-41080, CVE-2024-50233, CVE-2024-53097, CVE-2024-50244, CVE-2024-50160, CVE-2024-50299, CVE-2024-50115, CVE-2024-53059, CVE-2024-50099, CVE-2024-50154, CVE-2024-53063, CVE-2024-50237, CVE-2024-50128, CVE-2024-40965, CVE-2024-50151, CVE-2024-50082, CVE-2024-50202)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM64 architecture;
• x86 architecture;
• Block layer subsystem;
• ACPI drivers;
• GPU drivers;
• HID subsystem;
• I2C subsystem;
• IIO ADC drivers;
• IIO subsystem;
• InfiniBand drivers;
• IOMMU subsystem;
• IRQ chip drivers;
• Multiple devices driver;
• Media drivers;
• Network drivers;
• STMicroelectronics network drivers;
• Parport drivers;
• Pin controllers subsystem;
• Direct Digital Synthesis drivers;
• TCM subsystem;
• TTY drivers;
• USB Dual Role (OTG-ready) Controller drivers;
• USB Serial drivers;
• USB Type-C support driver;
• USB Type-C Connector System Software Interface driver;
• BTRFS file system;
• File systems infrastructure;
• Network file system (NFS) client;
• NILFS2 file system;
• NTFS3 file system;
• SMB network file system;
• User-space API (UAPI);
• io_uring subsystem;
• BPF subsystem;
• Timer substystem drivers;
• Tracing infrastructure;
• Closures library;
• Memory management;
• Amateur Radio drivers;
• Bluetooth subsystem;
• Networking core;
• IPv4 networking;
• MAC80211 subsystem;
• Multipath TCP;
• Netfilter;
• Network traffic control;
• SCTP protocol;
• XFRM subsystem;
• Key management;
• FireWire sound drivers;
• HD-audio driver;
• QCOM ASoC drivers;
• STMicroelectronics SoC drivers;
• KVM core; (CVE-2024-50117, CVE-2024-50230, CVE-2024-50131, CVE-2024-50128, CVE-2024-50142, CVE-2024-50141, CVE-2024-50267, CVE-2024-41066, CVE-2024-50236, CVE-2024-50205, CVE-2024-50202, CVE-2024-50209, CVE-2024-50148, CVE-2024-50171, CVE-2024-50074, CVE-2024-50268, CVE-2024-50265, CVE-2024-50160, CVE-2024-50143, CVE-2024-50296, CVE-2024-50101, CVE-2024-50103, CVE-2024-39497, CVE-2024-50151, CVE-2024-50127, CVE-2024-50150, CVE-2024-50229, CVE-2024-50115, CVE-2024-50058, CVE-2024-50292, CVE-2024-50010, CVE-2024-50247, CVE-2024-50110, CVE-2024-53088, CVE-2024-50116, CVE-2024-26718, CVE-2024-53097, CVE-2024-50192, CVE-2024-50234, CVE-2024-41080, CVE-2024-42291, CVE-2024-50195, CVE-2024-40965, CVE-2024-50278, CVE-2024-50290, CVE-2024-50162, CVE-2024-53066, CVE-2024-50085, CVE-2024-50099, CVE-2024-50237, CVE-2024-50156, CVE-2024-50185, CVE-2024-50273, CVE-2024-50302, CVE-2024-50249, CVE-2024-50208, CVE-2024-50232, CVE-2024-50287, CVE-2024-50262, CVE-2024-50194, CVE-2024-40953, CVE-2024-50083, CVE-2024-50082, CVE-2024-53063, CVE-2024-50086, CVE-2024-50193, CVE-2024-50282, CVE-2024-50201, CVE-2024-50134, CVE-2024-53061, CVE-2024-50299, CVE-2024-50279, CVE-2024-50198, CVE-2024-53104, CVE-2024-50244, CVE-2024-50167, CVE-2024-53052, CVE-2024-50196, CVE-2024-50182, CVE-2024-35887, CVE-2024-53042, CVE-2023-52913, CVE-2024-53055, CVE-2024-50301, CVE-2024-42252, CVE-2024-50259, CVE-2024-50218, CVE-2024-50168, CVE-2024-50245, CVE-2024-50163, CVE-2024-50036, CVE-2024-50154, CVE-2024-53059, CVE-2024-50257, CVE-2024-53101, CVE-2024-50295, CVE-2024-50269, CVE-2024-53058, CVE-2024-50072, CVE-2024-50251, CVE-2024-50153, CVE-2024-50233, CVE-2024-50199)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM64 architecture;
• x86 architecture;
• Block layer subsystem;
• ACPI drivers;
• GPU drivers;
• HID subsystem;
• I2C subsystem;
• IIO ADC drivers;
• IIO subsystem;
• InfiniBand drivers;
• IOMMU subsystem;
• IRQ chip drivers;
• Multiple devices driver;
• Media drivers;
• Network drivers;
• STMicroelectronics network drivers;
• Parport drivers;
• Pin controllers subsystem;
• Direct Digital Synthesis drivers;
• TCM subsystem;
• TTY drivers;
• USB Dual Role (OTG-ready) Controller drivers;
• USB Serial drivers;
• USB Type-C support driver;
• USB Type-C Connector System Software Interface driver;
• BTRFS file system;
• File systems infrastructure;
• Network file system (NFS) client;
• NILFS2 file system;
• NTFS3 file system;
• SMB network file system;
• User-space API (UAPI);
• io_uring subsystem;
• BPF subsystem;
• Timer substystem drivers;
• Tracing infrastructure;
• Closures library;
• Memory management;
• Amateur Radio drivers;
• Bluetooth subsystem;
• Networking core;
• IPv4 networking;
• MAC80211 subsystem;
• Multipath TCP;
• Netfilter;
• Network traffic control;
• SCTP protocol;
• XFRM subsystem;
• Key management;
• FireWire sound drivers;
• HD-audio driver;
• QCOM ASoC drivers;
• STMicroelectronics SoC drivers;
• KVM core; (CVE-2024-50082, CVE-2024-50134, CVE-2024-50142, CVE-2023-52913, CVE-2024-50205, CVE-2024-50127, CVE-2024-50208, CVE-2024-50143, CVE-2024-50163, CVE-2024-53059, CVE-2024-50282, CVE-2024-50279, CVE-2024-50296, CVE-2024-50295, CVE-2024-50010, CVE-2024-53088, CVE-2024-50128, CVE-2024-50290, CVE-2024-50099, CVE-2024-50234, CVE-2024-50154, CVE-2024-53052, CVE-2024-50116, CVE-2024-50168, CVE-2024-50086, CVE-2024-50267, CVE-2024-50156, CVE-2024-50110, CVE-2024-50103, CVE-2024-50192, CVE-2024-40953, CVE-2024-50085, CVE-2024-50247, CVE-2024-50257, CVE-2024-50237, CVE-2024-50185, CVE-2024-50198, CVE-2024-50229, CVE-2024-50171, CVE-2024-50259, CVE-2024-50209, CVE-2024-50233, CVE-2024-35887, CVE-2024-50251, CVE-2024-50141, CVE-2024-53061, CVE-2024-50232, CVE-2024-50167, CVE-2024-50201, CVE-2024-50193, CVE-2024-50269, CVE-2024-39497, CVE-2024-50036, CVE-2024-50299, CVE-2024-50072, CVE-2024-53101, CVE-2024-50262, CVE-2024-50194, CVE-2024-50202, CVE-2024-50101, CVE-2024-50151, CVE-2024-41080, CVE-2024-42291, CVE-2024-50245, CVE-2024-50278, CVE-2024-50195, CVE-2024-50265, CVE-2024-50074, CVE-2024-53063, CVE-2024-50131, CVE-2024-53058, CVE-2024-50160, CVE-2024-50287, CVE-2024-40965, CVE-2024-50273, CVE-2024-50268, CVE-2024-50302, CVE-2024-50218, CVE-2024-50199, CVE-2024-50196, CVE-2024-50083, CVE-2024-50244, CVE-2024-50117, CVE-2024-50058, CVE-2024-53055, CVE-2024-50182, CVE-2024-53097, CVE-2024-50236, CVE-2024-50162, CVE-2024-50301, CVE-2024-50249, CVE-2024-50292, CVE-2024-50150, CVE-2024-50153, CVE-2024-50115, CVE-2024-26718, CVE-2024-53104, CVE-2024-42252, CVE-2024-53066, CVE-2024-50148, CVE-2024-53042, CVE-2024-50230, CVE-2024-41066)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM64 architecture;
• x86 architecture;
• Block layer subsystem;
• ACPI drivers;
• GPU drivers;
• HID subsystem;
• I2C subsystem;
• IIO ADC drivers;
• IIO subsystem;
• InfiniBand drivers;
• IOMMU subsystem;
• IRQ chip drivers;
• Multiple devices driver;
• Media drivers;
• Network drivers;
• STMicroelectronics network drivers;
• Parport drivers;
• Pin controllers subsystem;
• Direct Digital Synthesis drivers;
• TCM subsystem;
• TTY drivers;
• USB Dual Role (OTG-ready) Controller drivers;
• USB Serial drivers;
• USB Type-C support driver;
• USB Type-C Connector System Software Interface driver;
• BTRFS file system;
• File systems infrastructure;
• Network file system (NFS) client;
• NILFS2 file system;
• NTFS3 file system;
• SMB network file system;
• User-space API (UAPI);
• io_uring subsystem;
• BPF subsystem;
• Timer substystem drivers;
• Tracing infrastructure;
• Closures library;
• Memory management;
• Amateur Radio drivers;
• Bluetooth subsystem;
• Networking core;
• IPv4 networking;
• MAC80211 subsystem;
• Multipath TCP;
• Netfilter;
• Network traffic control;
• SCTP protocol;
• XFRM subsystem;
• Key management;
• FireWire sound drivers;
• HD-audio driver;
• QCOM ASoC drivers;
• STMicroelectronics SoC drivers;
• KVM core; (CVE-2024-50083, CVE-2024-50134, CVE-2024-53063, CVE-2024-50131, CVE-2024-53104, CVE-2024-50182, CVE-2024-50279, CVE-2024-50185, CVE-2024-42252, CVE-2024-50247, CVE-2024-50128, CVE-2024-53088, CVE-2024-50082, CVE-2024-50160, CVE-2024-50103, CVE-2024-50259, CVE-2024-35887, CVE-2024-50251, CVE-2024-50150, CVE-2024-53066, CVE-2024-50262, CVE-2024-41066, CVE-2024-50086, CVE-2024-42291, CVE-2024-53061, CVE-2024-50245, CVE-2024-41080, CVE-2024-50244, CVE-2024-50198, CVE-2024-50282, CVE-2024-50074, CVE-2024-50195, CVE-2024-50010, CVE-2024-50202, CVE-2024-50295, CVE-2024-50162, CVE-2024-50273, CVE-2024-50233, CVE-2024-50302, CVE-2024-50201, CVE-2024-50278, CVE-2024-50036, CVE-2024-50296, CVE-2024-53058, CVE-2024-50116, CVE-2024-50163, CVE-2024-50292, CVE-2024-53097, CVE-2024-50196, CVE-2024-50058, CVE-2024-53042, CVE-2024-53059, CVE-2024-50110, CVE-2024-50151, CVE-2024-26718, CVE-2024-50099, CVE-2024-50115, CVE-2024-50171, CVE-2024-50237, CVE-2024-50154, CVE-2024-50199, CVE-2024-50192, CVE-2024-50167, CVE-2024-50127, CVE-2024-50142, CVE-2024-50229, CVE-2024-50269, CVE-2024-53055, CVE-2024-40965, CVE-2024-50265, CVE-2024-50143, CVE-2024-40953, CVE-2024-50117, CVE-2024-50156, CVE-2024-50193, CVE-2024-50072, CVE-2024-50230, CVE-2024-50287, CVE-2024-50148, CVE-2024-50208, CVE-2024-50267, CVE-2024-50290, CVE-2024-50085, CVE-2024-50168, CVE-2024-50205, CVE-2024-50232, CVE-2024-50153, CVE-2024-39497, CVE-2024-50194, CVE-2024-50101, CVE-2024-50257, CVE-2024-50249, CVE-2024-50299, CVE-2024-50234, CVE-2024-50209, CVE-2024-50141, CVE-2023-52913, CVE-2024-50301, CVE-2024-50236, CVE-2024-53052, CVE-2024-53101, CVE-2024-50268, CVE-2024-50218)

Attila Szász discovered that the HFS+ file system implementation in the Linux Kernel contained a heap overflow vulnerability. An attacker could use a specially crafted file system image that, when mounted, could cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2025-0927)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM64 architecture;
• Block layer subsystem;
• ACPI drivers;
• Drivers core;
• ATA over ethernet (AOE) driver;
• TPM device driver;
• GPIO subsystem;
• GPU drivers;
• HID subsystem;
• I2C subsystem;
• InfiniBand drivers;
• Mailbox framework;
• Multiple devices driver;
• Media drivers;
• Network drivers;
• NTB driver;
• Virtio pmem driver;
• Parport drivers;
• PCI subsystem;
• SPI subsystem;
• Direct Digital Synthesis drivers;
• USB Device Class drivers;
• USB Dual Role (OTG-ready) Controller drivers;
• USB Serial drivers;
• USB Type-C support driver;
• Framebuffer layer;
• BTRFS file system;
• Ceph distributed file system;
• Ext4 file system;
• F2FS file system;
• File systems infrastructure;
• JFS file system;
• Network file system (NFS) client;
• Network file system (NFS) server daemon;
• NILFS2 file system;
• SMB network file system;
• Network traffic control;
• Network sockets;
• TCP network protocol;
• BPF subsystem;
• Perf events;
• Arbitrary resource management;
• Timer substystem drivers;
• Tracing infrastructure;
• Closures library;
• Memory management;
• Amateur Radio drivers;
• Bluetooth subsystem;
• Ethernet bridge;
• CAN network layer;
• Networking core;
• IPv4 networking;
• IPv6 networking;
• MAC80211 subsystem;
• Netfilter;
• Netlink;
• SCTP protocol;
• TIPC protocol;
• Wireless networking;
• XFRM subsystem;
• Key management;
• FireWire sound drivers;
• AudioScience HPI driver;
• Amlogic Meson SoC drivers;
• KVM core; (CVE-2024-50184, CVE-2024-47706, CVE-2024-49962, CVE-2024-35887, CVE-2024-53101, CVE-2024-50199, CVE-2024-47709, CVE-2024-50074, CVE-2024-41066, CVE-2024-42252, CVE-2024-43863, CVE-2024-47685, CVE-2024-47756, CVE-2024-50282, CVE-2024-50143, CVE-2024-50116, CVE-2024-47699, CVE-2024-47698, CVE-2024-50301, CVE-2024-47723, CVE-2024-50296, CVE-2024-50007, CVE-2024-49952, CVE-2024-50233, CVE-2023-52458, CVE-2024-53063, CVE-2024-49975, CVE-2024-50099, CVE-2024-47742, CVE-2024-50033, CVE-2024-50218, CVE-2024-50096, CVE-2024-49981, CVE-2024-40911, CVE-2024-47697, CVE-2024-49894, CVE-2024-49955, CVE-2024-53104, CVE-2024-49963, CVE-2024-49883, CVE-2024-47710, CVE-2024-49959, CVE-2024-49948, CVE-2024-50302, CVE-2024-49867, CVE-2024-50234, CVE-2024-49902, CVE-2024-50006, CVE-2024-47672, CVE-2024-50202, CVE-2024-49851, CVE-2024-35896, CVE-2024-50150, CVE-2024-53061, CVE-2024-46854, CVE-2024-50279, CVE-2024-50278, CVE-2024-50180, CVE-2024-50148, CVE-2024-50194, CVE-2024-50008, CVE-2024-47740, CVE-2024-49938, CVE-2024-46853, CVE-2024-50134, CVE-2024-44931, CVE-2024-46849, CVE-2024-49973, CVE-2024-50142, CVE-2024-49879, CVE-2024-50269, CVE-2024-50230, CVE-2024-49896, CVE-2024-49985, CVE-2024-50151, CVE-2024-40965, CVE-2024-50251, CVE-2024-49995, CVE-2024-47713, CVE-2023-52917, CVE-2024-50205, CVE-2024-49900, CVE-2024-49877, CVE-2024-47679, CVE-2024-50040, CVE-2024-47701, CVE-2024-50168, CVE-2024-49882, CVE-2024-50059, CVE-2024-49958, CVE-2024-50171, CVE-2021-47469, CVE-2024-50024, CVE-2024-47749, CVE-2024-50236, CVE-2024-50127, CVE-2024-50290, CVE-2024-47692, CVE-2024-50167, CVE-2024-49944, CVE-2024-50262, CVE-2024-47674, CVE-2024-49957, CVE-2024-50237, CVE-2024-47712, CVE-2024-49949, CVE-2024-40953, CVE-2024-50267, CVE-2024-53059, CVE-2024-49966, CVE-2024-47737, CVE-2024-49868, CVE-2024-50179, CVE-2024-50035, CVE-2024-49997, CVE-2024-50044, CVE-2024-49903, CVE-2024-46731, CVE-2024-49965, CVE-2024-50287,…

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM64 architecture;
• Block layer subsystem;
• ACPI drivers;
• Drivers core;
• ATA over ethernet (AOE) driver;
• TPM device driver;
• GPIO subsystem;
• GPU drivers;
• HID subsystem;
• I2C subsystem;
• InfiniBand drivers;
• Mailbox framework;
• Multiple devices driver;
• Media drivers;
• Network drivers;
• NTB driver;
• Virtio pmem driver;
• Parport drivers;
• PCI subsystem;
• SPI subsystem;
• Direct Digital Synthesis drivers;
• USB Device Class drivers;
• USB Dual Role (OTG-ready) Controller drivers;
• USB Serial drivers;
• USB Type-C support driver;
• Framebuffer layer;
• BTRFS file system;
• Ceph distributed file system;
• Ext4 file system;
• F2FS file system;
• File systems infrastructure;
• JFS file system;
• Network file system (NFS) client;
• Network file system (NFS) server daemon;
• NILFS2 file system;
• SMB network file system;
• Network traffic control;
• Network sockets;
• TCP network protocol;
• BPF subsystem;
• Perf events;
• Arbitrary resource management;
• Timer substystem drivers;
• Tracing infrastructure;
• Closures library;
• Memory management;
• Amateur Radio drivers;
• Bluetooth subsystem;
• Ethernet bridge;
• CAN network layer;
• Networking core;
• IPv4 networking;
• IPv6 networking;
• MAC80211 subsystem;
• Netfilter;
• Netlink;
• SCTP protocol;
• TIPC protocol;
• Wireless networking;
• XFRM subsystem;
• Key management;
• FireWire sound drivers;
• AudioScience HPI driver;
• Amlogic Meson SoC drivers;
• KVM core; (CVE-2024-40953, CVE-2024-50008, CVE-2024-40911, CVE-2024-47685, CVE-2024-49957, CVE-2024-38544, CVE-2024-49860, CVE-2024-46854, CVE-2024-49882, CVE-2024-44931, CVE-2024-47696, CVE-2021-47469, CVE-2024-41066, CVE-2024-46849, CVE-2024-47671, CVE-2024-49975, CVE-2024-49958, CVE-2024-50006, CVE-2024-50287, CVE-2024-50099, CVE-2024-50035, CVE-2024-46731, CVE-2024-49878, CVE-2024-50045, CVE-2023-52917, CVE-2024-47712, CVE-2024-49883, CVE-2024-50040, CVE-2024-50234, CVE-2024-50184, CVE-2024-50279, CVE-2024-49948, CVE-2024-50044, CVE-2024-50230, CVE-2024-47710, CVE-2024-50233, CVE-2024-49900, CVE-2024-49938, CVE-2024-50236, CVE-2024-47737, CVE-2024-47670, CVE-2024-41016, CVE-2024-50150, CVE-2024-50301, CVE-2024-50116, CVE-2024-47706, CVE-2024-40965, CVE-2024-50205, CVE-2024-49963, CVE-2024-47756, CVE-2024-53066, CVE-2024-49879, CVE-2024-53059, CVE-2024-50229, CVE-2024-50131, CVE-2024-53104, CVE-2024-50167, CVE-2024-47723, CVE-2024-47709, CVE-2024-42252, CVE-2024-50267, CVE-2024-50218, CVE-2024-47698, CVE-2024-50039, CVE-2024-47701, CVE-2024-50202, CVE-2024-50262, CVE-2024-50194, CVE-2024-46853, CVE-2024-47699, CVE-2024-47697, CVE-2024-50117, CVE-2024-49982, CVE-2024-47742, CVE-2024-50127, CVE-2024-50142, CVE-2024-49955, CVE-2024-47747, CVE-2024-49981, CVE-2024-47679, CVE-2024-50237, CVE-2024-43863, CVE-2024-47672, CVE-2024-50273, CVE-2024-49903, CVE-2024-50180, CVE-2024-50148, CVE-2024-50059, CVE-2024-50299, CVE-2024-47740, CVE-2024-47749, CVE-2024-49892, CVE-2024-50074, CVE-2024-49973, CVE-2024-50296, CVE-2024-49962, CVE-2024-50024, CVE-2024-49924, CVE-2024-49877, CVE-2024-49959, CVE-2024-49997, CVE-2024-50168, CVE-2024-47757, CVE-2024-49902, CVE-2024-49868, CVE-2023-52458, CVE-2024-47692, CVE-2024-49894, CVE-2024-50096, CVE-2024-47684, CVE-2024-50143, CVE-2024-35896, CVE-2024-47713, CVE-2024-50151, CVE-2024-50082, CVE-2024-50171, CVE-2024-53063, CVE-2024-50007, CVE-2024-49985, CVE-2024-49944, CVE-2024-50302, CVE-2024-49949, CVE-2024-50033, CVE-2024-49952, CVE-2024-49995, CVE-2024-50278, CVE-2024-53061, CVE-2024-50195, CVE-2024-49966, CVE-2024-50265, CVE-2024-50282, CVE-2024-35887, CVE-2024-49896, CVE-2024-50290, CVE-2024-53101, CVE-2024-49867, CVE-2024-50199, CVE-2024-49965, CVE-2024-50179,…

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM64 architecture;
• Block layer subsystem;
• ACPI drivers;
• Drivers core;
• ATA over ethernet (AOE) driver;
• TPM device driver;
• GPIO subsystem;
• GPU drivers;
• HID subsystem;
• I2C subsystem;
• InfiniBand drivers;
• Mailbox framework;
• Multiple devices driver;
• Media drivers;
• Network drivers;
• NTB driver;
• Virtio pmem driver;
• Parport drivers;
• PCI subsystem;
• SPI subsystem;
• Direct Digital Synthesis drivers;
• USB Device Class drivers;
• USB Dual Role (OTG-ready) Controller drivers;
• USB Serial drivers;
• USB Type-C support driver;
• Framebuffer layer;
• BTRFS file system;
• Ceph distributed file system;
• Ext4 file system;
• F2FS file system;
• File systems infrastructure;
• JFS file system;
• Network file system (NFS) client;
• Network file system (NFS) server daemon;
• NILFS2 file system;
• SMB network file system;
• Network traffic control;
• Network sockets;
• TCP network protocol;
• BPF subsystem;
• Perf events;
• Arbitrary resource management;
• Timer substystem drivers;
• Tracing infrastructure;
• Closures library;
• Memory management;
• Amateur Radio drivers;
• Bluetooth subsystem;
• Ethernet bridge;
• CAN network layer;
• Networking core;
• IPv4 networking;
• IPv6 networking;
• MAC80211 subsystem;
• Netfilter;
• Netlink;
• SCTP protocol;
• TIPC protocol;
• Wireless networking;
• XFRM subsystem;
• Key management;
• FireWire sound drivers;
• AudioScience HPI driver;
• Amlogic Meson SoC drivers;
• KVM core; (CVE-2024-53063, CVE-2024-50236, CVE-2024-47699, CVE-2024-50044, CVE-2024-49877, CVE-2024-47692, CVE-2024-50116, CVE-2024-47679, CVE-2024-50134, CVE-2024-50045, CVE-2024-50301, CVE-2024-40965, CVE-2024-47684, CVE-2024-49944, CVE-2024-43863, CVE-2024-50059, CVE-2024-50007, CVE-2024-49973, CVE-2024-50251, CVE-2024-47674, CVE-2024-49982, CVE-2024-50143, CVE-2024-49883, CVE-2024-49851, CVE-2024-44931, CVE-2024-49949, CVE-2024-47747, CVE-2024-46853, CVE-2024-50233, CVE-2024-49924, CVE-2024-50033, CVE-2024-50024, CVE-2024-49995, CVE-2024-47737, CVE-2024-50194, CVE-2024-47712, CVE-2024-50273, CVE-2024-50229, CVE-2024-49896, CVE-2024-50199, CVE-2024-50202, CVE-2024-49868, CVE-2024-50035, CVE-2024-50184, CVE-2024-49882, CVE-2024-49962, CVE-2024-50299, CVE-2024-35887, CVE-2024-50287, CVE-2024-50265, CVE-2024-50148, CVE-2024-47757, CVE-2024-47742, CVE-2024-49902, CVE-2024-50302, CVE-2024-50096, CVE-2024-49952, CVE-2024-50099, CVE-2024-49963, CVE-2024-49900, CVE-2024-46731, CVE-2024-50131, CVE-2024-47723, CVE-2024-50237, CVE-2024-50269, CVE-2024-50142, CVE-2024-49867, CVE-2024-49985, CVE-2024-47670, CVE-2024-50008, CVE-2024-49938, CVE-2024-49878, CVE-2024-49955, CVE-2024-53104, CVE-2024-49894, CVE-2024-50039, CVE-2024-50279, CVE-2024-50006, CVE-2024-40953, CVE-2024-50180, CVE-2024-49860, CVE-2024-50117, CVE-2024-47701, CVE-2024-47698, CVE-2024-50171, CVE-2024-50151, CVE-2024-50082, CVE-2024-50290, CVE-2024-49975, CVE-2024-49903, CVE-2024-38544, CVE-2024-50218, CVE-2024-49948, CVE-2024-50282, CVE-2024-49965, CVE-2024-49959, CVE-2024-42252, CVE-2024-47749, CVE-2024-47756, CVE-2024-47672, CVE-2024-50127, CVE-2024-46854, CVE-2024-50230, CVE-2024-41066, CVE-2024-49957, CVE-2024-47713, CVE-2023-52458, CVE-2024-50167, CVE-2024-49997, CVE-2024-47685, CVE-2024-49879, CVE-2024-53059, CVE-2024-53101, CVE-2024-49958, CVE-2024-47710, CVE-2024-47706, CVE-2024-50074, CVE-2024-50296, CVE-2024-49892, CVE-2024-46849, CVE-2024-50205, CVE-2024-50168, CVE-2024-50267, CVE-2024-50262, CVE-2024-47709, CVE-2024-50195, CVE-2024-35896, CVE-2024-47696, CVE-2024-47740, CVE-2024-40911, CVE-2024-49966, CVE-2021-47469, CVE-2024-49981, CVE-2024-50234, CVE-2024-50179, CVE-2024-47697, CVE-2024-50150, CVE-2023-52917, CVE-2024-50040,…

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM64 architecture;
• Block layer subsystem;
• ACPI drivers;
• Drivers core;
• ATA over ethernet (AOE) driver;
• TPM device driver;
• GPIO subsystem;
• GPU drivers;
• HID subsystem;
• I2C subsystem;
• InfiniBand drivers;
• Mailbox framework;
• Multiple devices driver;
• Media drivers;
• Network drivers;
• NTB driver;
• Virtio pmem driver;
• Parport drivers;
• PCI subsystem;
• SPI subsystem;
• Direct Digital Synthesis drivers;
• USB Device Class drivers;
• USB Dual Role (OTG-ready) Controller drivers;
• USB Serial drivers;
• USB Type-C support driver;
• Framebuffer layer;
• BTRFS file system;
• Ceph distributed file system;
• Ext4 file system;
• F2FS file system;
• File systems infrastructure;
• JFS file system;
• Network file system (NFS) client;
• Network file system (NFS) server daemon;
• NILFS2 file system;
• SMB network file system;
• Network traffic control;
• Network sockets;
• TCP network protocol;
• BPF subsystem;
• Perf events;
• Arbitrary resource management;
• Timer substystem drivers;
• Tracing infrastructure;
• Closures library;
• Memory management;
• Amateur Radio drivers;
• Bluetooth subsystem;
• Ethernet bridge;
• CAN network layer;
• Networking core;
• IPv4 networking;
• IPv6 networking;
• MAC80211 subsystem;
• Netfilter;
• Netlink;
• SCTP protocol;
• TIPC protocol;
• Wireless networking;
• XFRM subsystem;
• Key management;
• FireWire sound drivers;
• AudioScience HPI driver;
• Amlogic Meson SoC drivers;
• KVM core; (CVE-2024-47698, CVE-2024-49868, CVE-2024-50006, CVE-2024-40965, CVE-2024-50233, CVE-2024-47671, CVE-2024-49944, CVE-2024-47684, CVE-2024-50134, CVE-2024-50279, CVE-2024-50302, CVE-2024-40953, CVE-2024-50234, CVE-2024-41066, CVE-2024-50040, CVE-2024-47701, CVE-2024-50033, CVE-2024-50007, CVE-2024-50143, CVE-2024-41016, CVE-2024-53059, CVE-2024-50195, CVE-2024-50202, CVE-2024-47749, CVE-2024-47685, CVE-2024-50267, CVE-2024-49965, CVE-2024-49903, CVE-2024-49883, CVE-2024-50035, CVE-2024-46849, CVE-2024-53061, CVE-2024-50151, CVE-2024-49995, CVE-2024-49867, CVE-2024-49962, CVE-2024-50218, CVE-2024-50039, CVE-2024-50148, CVE-2024-49900, CVE-2024-50287, CVE-2024-50150, CVE-2024-49879, CVE-2024-47757, CVE-2024-49997, CVE-2024-50045, CVE-2024-47742, CVE-2024-47679, CVE-2024-53063, CVE-2024-49878, CVE-2024-49860, CVE-2024-35896, CVE-2024-40911, CVE-2024-42252, CVE-2024-47723, CVE-2024-47674, CVE-2024-47737, CVE-2024-50282, CVE-2024-44931, CVE-2024-49938, CVE-2024-49963, CVE-2024-50290, CVE-2024-49958, CVE-2021-47469, CVE-2024-47670, CVE-2024-50116, CVE-2024-50262, CVE-2024-50082, CVE-2023-52917, CVE-2024-50117, CVE-2024-50131, CVE-2024-47699, CVE-2024-49896, CVE-2024-49957, CVE-2024-49952, CVE-2024-50273, CVE-2024-50171, CVE-2024-50237, CVE-2024-49955, CVE-2024-50230, CVE-2024-50194, CVE-2024-50278, CVE-2024-50127, CVE-2024-53066, CVE-2024-38544, CVE-2024-49902, CVE-2024-49892, CVE-2024-46854, CVE-2024-49966, CVE-2024-50167, CVE-2024-47697, CVE-2024-49985, CVE-2024-47696, CVE-2024-50024, CVE-2024-50251, CVE-2024-47740, CVE-2024-49882, CVE-2024-49851, CVE-2024-50059, CVE-2024-49973, CVE-2024-35887, CVE-2024-50296, CVE-2024-47706, CVE-2024-50044, CVE-2024-47712, CVE-2024-50301, CVE-2024-47709, CVE-2024-49975, CVE-2024-49877, CVE-2024-47710, CVE-2024-50269, CVE-2024-46731, CVE-2024-50099, CVE-2024-50184, CVE-2024-50299, CVE-2024-50008, CVE-2024-50265, CVE-2024-49948, CVE-2024-50229, CVE-2024-50168, CVE-2024-49894, CVE-2024-47692, CVE-2024-50074, CVE-2024-47713, CVE-2024-49924, CVE-2024-53104, CVE-2024-50205, CVE-2024-47672, CVE-2024-50096, CVE-2024-47747, CVE-2024-50199, CVE-2023-52458, CVE-2024-49959, CVE-2024-50236, CVE-2024-53101, CVE-2024-43863, CVE-2024-46853, CVE-2024-50179, CVE-2024-49981,…

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM64 architecture;
• Block layer subsystem;
• ACPI drivers;
• Drivers core;
• ATA over ethernet (AOE) driver;
• TPM device driver;
• GPIO subsystem;
• GPU drivers;
• HID subsystem;
• I2C subsystem;
• InfiniBand drivers;
• Mailbox framework;
• Multiple devices driver;
• Media drivers;
• Network drivers;
• NTB driver;
• Virtio pmem driver;
• Parport drivers;
• PCI subsystem;
• SPI subsystem;
• Direct Digital Synthesis drivers;
• USB Device Class drivers;
• USB Dual Role (OTG-ready) Controller drivers;
• USB Serial drivers;
• USB Type-C support driver;
• Framebuffer layer;
• BTRFS file system;
• Ceph distributed file system;
• Ext4 file system;
• F2FS file system;
• File systems infrastructure;
• JFS file system;
• Network file system (NFS) client;
• Network file system (NFS) server daemon;
• NILFS2 file system;
• SMB network file system;
• Network traffic control;
• Network sockets;
• TCP network protocol;
• BPF subsystem;
• Perf events;
• Arbitrary resource management;
• Timer substystem drivers;
• Tracing infrastructure;
• Closures library;
• Memory management;
• Amateur Radio drivers;
• Bluetooth subsystem;
• Ethernet bridge;
• CAN network layer;
• Networking core;
• IPv4 networking;
• IPv6 networking;
• MAC80211 subsystem;
• Netfilter;
• Netlink;
• SCTP protocol;
• TIPC protocol;
• Wireless networking;
• XFRM subsystem;
• Key management;
• FireWire sound drivers;
• AudioScience HPI driver;
• Amlogic Meson SoC drivers;
• KVM core; (CVE-2024-47672, CVE-2024-50273, CVE-2024-49896, CVE-2024-49962, CVE-2024-50007, CVE-2024-47706, CVE-2024-50302, CVE-2024-50299, CVE-2024-49959, CVE-2024-49973, CVE-2024-47674, CVE-2024-50143, CVE-2024-50278, CVE-2024-50184, CVE-2024-49892, CVE-2024-50044, CVE-2024-47701, CVE-2024-49860, CVE-2024-47692, CVE-2024-49948, CVE-2024-50039, CVE-2024-50006, CVE-2024-53066, CVE-2024-49944, CVE-2024-43863, CVE-2024-47756, CVE-2024-50082, CVE-2024-50237, CVE-2024-50262, CVE-2024-49900, CVE-2024-50059, CVE-2024-50194, CVE-2024-53063, CVE-2024-47697, CVE-2024-49975, CVE-2024-50033, CVE-2024-50148, CVE-2024-50116, CVE-2024-50168, CVE-2024-47747, CVE-2024-53104, CVE-2024-50218, CVE-2024-50279, CVE-2024-46853, CVE-2024-46854, CVE-2024-50127, CVE-2024-49995, CVE-2024-50282, CVE-2024-47685, CVE-2024-50296, CVE-2024-50099, CVE-2024-50199, CVE-2024-49879, CVE-2024-50287, CVE-2024-50265, CVE-2024-50269, CVE-2024-47698, CVE-2024-49868, CVE-2024-50035, CVE-2024-47709, CVE-2024-50024, CVE-2024-50301, CVE-2024-50142, CVE-2024-53059, CVE-2024-50008, CVE-2024-49997, CVE-2024-46849, CVE-2024-50290, CVE-2024-40953, CVE-2024-49985, CVE-2024-47737, CVE-2024-49883, CVE-2024-50040, CVE-2024-49958, CVE-2024-50205, CVE-2024-47723, CVE-2024-50180, CVE-2024-50229, CVE-2024-50131, CVE-2024-47713, CVE-2024-49963, CVE-2024-44931, CVE-2024-47742, CVE-2024-49903, CVE-2024-49949, CVE-2024-47684, CVE-2024-35896, CVE-2024-41016, CVE-2024-49955, CVE-2024-50134, CVE-2024-49938, CVE-2024-49877, CVE-2024-49981, CVE-2024-50234, CVE-2024-50096, CVE-2024-49952, CVE-2024-49957, CVE-2024-49982, CVE-2024-47710, CVE-2024-53061, CVE-2024-50267, CVE-2024-47712, CVE-2024-50195, CVE-2024-50236, CVE-2024-47749, CVE-2024-47757, CVE-2024-49894, CVE-2024-50179, CVE-2024-42252, CVE-2024-49851, CVE-2024-53101, CVE-2024-38544, CVE-2024-50117, CVE-2023-52917, CVE-2024-50045, CVE-2024-40911, CVE-2024-49882, CVE-2024-49867, CVE-2024-50202, CVE-2024-49878, CVE-2024-50251, CVE-2024-50151, CVE-2024-50171, CVE-2024-47740, CVE-2024-49965, CVE-2023-52458, CVE-2024-50233, CVE-2024-40965, CVE-2024-49924, CVE-2024-50167, CVE-2024-47670, CVE-2021-47469, CVE-2024-35887, CVE-2024-50074, CVE-2024-46731, CVE-2024-47671, CVE-2024-41066, CVE-2024-49966, CVE-2024-50150,…

Ye Zhang and Nicolas Wu discovered that the io_uring subsystem in the Linux kernel did not properly handle locking for rings with IOPOLL, leading to a double-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2023-21400)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM64 architecture;
• Block layer subsystem;
• ACPI drivers;
• Drivers core;
• ATA over ethernet (AOE) driver;
• TPM device driver;
• GPIO subsystem;
• GPU drivers;
• HID subsystem;
• I2C subsystem;
• InfiniBand drivers;
• Mailbox framework;
• Multiple devices driver;
• Media drivers;
• Network drivers;
• NTB driver;
• Virtio pmem driver;
• Parport drivers;
• PCI subsystem;
• SPI subsystem;
• Direct Digital Synthesis drivers;
• TTY drivers;
• USB Device Class drivers;
• USB Dual Role (OTG-ready) Controller drivers;
• USB Serial drivers;
• USB Type-C support driver;
• Framebuffer layer;
• BTRFS file system;
• Ceph distributed file system;
• Ext4 file system;
• F2FS file system;
• File systems infrastructure;
• JFS file system;
• Network file system (NFS) client;
• Network file system (NFS) server daemon;
• NILFS2 file system;
• SMB network file system;
• Network traffic control;
• Network sockets;
• TCP network protocol;
• BPF subsystem;
• Perf events;
• Arbitrary resource management;
• Timer substystem drivers;
• Tracing infrastructure;
• Closures library;
• Memory management;
• Amateur Radio drivers;
• Bluetooth subsystem;
• Ethernet bridge;
• CAN network layer;
• Networking core;
• IPv4 networking;
• IPv6 networking;
• MAC80211 subsystem;
• Netfilter;
• Netlink;
• SCTP protocol;
• TIPC protocol;
• VMware vSockets driver;
• Wireless networking;
• XFRM subsystem;
• Key management;
• FireWire sound drivers;
• AudioScience HPI driver;
• Amlogic Meson SoC drivers;
• KVM core; (CVE-2024-50116, CVE-2024-43863, CVE-2024-47757, CVE-2024-50236, CVE-2024-53104, CVE-2024-47701, CVE-2024-46854, CVE-2024-50024, CVE-2024-46849, CVE-2024-50035, CVE-2024-50262, CVE-2024-50184, CVE-2023-52458, CVE-2024-47696, CVE-2024-49957, CVE-2024-47692, CVE-2024-50007, CVE-2024-49867, CVE-2024-49900, CVE-2024-50167, CVE-2024-47697, CVE-2024-53164, CVE-2024-50179, CVE-2024-44931, CVE-2024-50301, CVE-2024-50218, CVE-2024-49995, CVE-2024-47742, CVE-2024-47756, CVE-2021-47469, CVE-2024-49982, CVE-2024-50229, CVE-2024-49851, CVE-2024-47685, CVE-2024-50265, CVE-2024-50195, CVE-2024-47747, CVE-2024-50273, CVE-2024-53066, CVE-2024-49924, CVE-2024-49963, CVE-2024-50287, CVE-2024-49948, CVE-2024-47674, CVE-2024-40967, CVE-2024-35887, CVE-2024-50044, CVE-2024-50099, CVE-2024-53059, CVE-2024-50171, CVE-2024-50082, CVE-2024-41066, CVE-2024-50202, CVE-2024-49868, CVE-2024-49952, CVE-2024-49965, CVE-2024-50296, CVE-2024-49903, CVE-2024-50194, CVE-2024-47712, CVE-2024-53101, CVE-2024-40953, CVE-2024-47706, CVE-2024-49958, CVE-2024-50059, CVE-2024-47713, CVE-2024-47737, CVE-2024-49902, CVE-2024-49959, CVE-2024-53103, CVE-2024-49973, CVE-2024-50045, CVE-2024-47710, CVE-2024-50131, CVE-2024-47671, CVE-2024-50205, CVE-2024-47672, CVE-2024-50234, CVE-2024-50233, CVE-2024-49860, CVE-2024-50127, CVE-2024-50168, CVE-2024-49962, CVE-2024-38544, CVE-2024-47749, CVE-2024-49949, CVE-2024-50096, CVE-2024-50033, CVE-2024-49955, CVE-2024-49938, CVE-2024-47698, CVE-2024-50230, CVE-2024-47723, CVE-2024-49877, CVE-2024-50180, CVE-2024-49879, CVE-2024-53061, CVE-2024-47679, CVE-2024-49892, CVE-2024-50299, CVE-2024-49896, CVE-2024-40911, CVE-2024-50134, CVE-2024-47740, CVE-2024-50039, CVE-2024-49985, CVE-2024-41016, CVE-2024-50269, CVE-2024-50290, CVE-2024-49882, CVE-2024-47699, CVE-2023-52917, CVE-2024-50267, CVE-2024-50151, CVE-2024-50251, CVE-2024-49966, CVE-2024-49981,…

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM64 architecture;
• x86 architecture;
• Block layer subsystem;
• ACPI drivers;
• GPU drivers;
• HID subsystem;
• I2C subsystem;
• IIO ADC drivers;
• IIO subsystem;
• InfiniBand drivers;
• IOMMU subsystem;
• IRQ chip drivers;
• Multiple devices driver;
• Media drivers;
• Network drivers;
• STMicroelectronics network drivers;
• Parport drivers;
• Pin controllers subsystem;
• Direct Digital Synthesis drivers;
• TCM subsystem;
• TTY drivers;
• USB Dual Role (OTG-ready) Controller drivers;
• USB Serial drivers;
• USB Type-C support driver;
• USB Type-C Connector System Software Interface driver;
• BTRFS file system;
• File systems infrastructure;
• Network file system (NFS) client;
• NILFS2 file system;
• NTFS3 file system;
• SMB network file system;
• User-space API (UAPI);
• io_uring subsystem;
• BPF subsystem;
• Timer substystem drivers;
• Tracing infrastructure;
• Closures library;
• Memory management;
• Amateur Radio drivers;
• Bluetooth subsystem;
• Networking core;
• IPv4 networking;
• MAC80211 subsystem;
• Multipath TCP;
• Netfilter;
• Network traffic control;
• SCTP protocol;
• XFRM subsystem;
• Key management;
• FireWire sound drivers;
• HD-audio driver;
• QCOM ASoC drivers;
• STMicroelectronics SoC drivers;
• KVM core; (CVE-2024-50128, CVE-2024-50099, CVE-2024-50269, CVE-2024-50287, CVE-2024-42291, CVE-2024-50142, CVE-2024-50085, CVE-2024-50273, CVE-2024-26718, CVE-2024-50143, CVE-2024-50208, CVE-2024-41080, CVE-2024-50101, CVE-2024-50150, CVE-2024-53101, CVE-2024-50141, CVE-2024-50115, CVE-2024-50301, CVE-2024-53104, CVE-2024-41066, CVE-2024-50194, CVE-2024-50167, CVE-2024-53059, CVE-2024-50103, CVE-2024-50110, CVE-2024-50131, CVE-2024-50249, CVE-2024-50196, CVE-2024-50182, CVE-2024-50257, CVE-2024-50148, CVE-2024-50278, CVE-2024-50074, CVE-2024-50296, CVE-2024-50295, CVE-2024-50193, CVE-2024-50195, CVE-2024-42252, CVE-2024-50086, CVE-2024-50072, CVE-2024-50082, CVE-2024-50134, CVE-2024-50163, CVE-2024-50232, CVE-2024-53097, CVE-2024-50127, CVE-2024-50268, CVE-2024-39497, CVE-2024-50116, CVE-2024-50302, CVE-2024-50153, CVE-2024-50185, CVE-2023-52913, CVE-2024-40953, CVE-2024-50209, CVE-2024-53088, CVE-2024-50151, CVE-2024-35887, CVE-2024-53058, CVE-2024-40965, CVE-2024-50198, CVE-2024-50259, CVE-2024-50292, CVE-2024-50267, CVE-2024-50162, CVE-2024-50154, CVE-2024-50083, CVE-2024-50218, CVE-2024-50036, CVE-2024-53066, CVE-2024-50251, CVE-2024-53042, CVE-2024-50234, CVE-2024-50247, CVE-2024-50245, CVE-2024-50201, CVE-2024-50279, CVE-2024-50171, CVE-2024-50156, CVE-2024-50236, CVE-2024-53055, CVE-2024-50229, CVE-2024-50199, CVE-2024-50262, CVE-2024-50058, CVE-2024-53052, CVE-2024-50290, CVE-2024-50168, CVE-2024-50237, CVE-2024-53061, CVE-2024-50282, CVE-2024-50192, CVE-2024-50230, CVE-2024-50233, CVE-2024-50265, CVE-2024-50117, CVE-2024-50202, CVE-2024-50205, CVE-2024-50244, CVE-2024-50299, CVE-2024-53063, CVE-2024-50160, CVE-2024-50010)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM64 architecture;
• x86 architecture;
• Block layer subsystem;
• ACPI drivers;
• GPU drivers;
• HID subsystem;
• I2C subsystem;
• IIO ADC drivers;
• IIO subsystem;
• InfiniBand drivers;
• IOMMU subsystem;
• IRQ chip drivers;
• Multiple devices driver;
• Media drivers;
• Network drivers;
• STMicroelectronics network drivers;
• Parport drivers;
• Pin controllers subsystem;
• Direct Digital Synthesis drivers;
• TCM subsystem;
• TTY drivers;
• USB Dual Role (OTG-ready) Controller drivers;
• USB Serial drivers;
• USB Type-C support driver;
• USB Type-C Connector System Software Interface driver;
• BTRFS file system;
• File systems infrastructure;
• Network file system (NFS) client;
• NILFS2 file system;
• NTFS3 file system;
• SMB network file system;
• User-space API (UAPI);
• io_uring subsystem;
• BPF subsystem;
• Timer substystem drivers;
• Tracing infrastructure;
• Closures library;
• Memory management;
• Amateur Radio drivers;
• Bluetooth subsystem;
• Networking core;
• IPv4 networking;
• MAC80211 subsystem;
• Multipath TCP;
• Netfilter;
• Network traffic control;
• SCTP protocol;
• VMware vSockets driver;
• XFRM subsystem;
• Key management;
• FireWire sound drivers;
• HD-audio driver;
• QCOM ASoC drivers;
• STMicroelectronics SoC drivers;
• KVM core; (CVE-2024-50141, CVE-2024-53101, CVE-2024-50301, CVE-2024-50082, CVE-2024-39497, CVE-2024-50245, CVE-2024-50302, CVE-2024-35887, CVE-2024-50205, CVE-2024-50153, CVE-2024-50154, CVE-2024-50279, CVE-2024-50074, CVE-2024-50168, CVE-2024-50128, CVE-2024-53141, CVE-2024-50290, CVE-2024-50292, CVE-2024-50218, CVE-2024-50193, CVE-2024-50209, CVE-2024-53088, CVE-2024-50058, CVE-2024-50116, CVE-2024-50199, CVE-2024-50083, CVE-2024-50265, CVE-2024-53058, CVE-2024-50244, CVE-2024-50195, CVE-2024-41066, CVE-2024-50151, CVE-2024-50229, CVE-2024-42291, CVE-2024-40965, CVE-2024-50160, CVE-2024-53097, CVE-2024-50134, CVE-2024-53164, CVE-2024-50295, CVE-2024-50267, CVE-2024-50251, CVE-2024-50198, CVE-2024-53042, CVE-2024-40953, CVE-2024-50167, CVE-2024-50010, CVE-2024-42252, CVE-2024-53055, CVE-2024-50259, CVE-2024-50110, CVE-2024-50208, CVE-2024-50249, CVE-2024-50148, CVE-2024-50269, CVE-2024-50182, CVE-2024-50115, CVE-2024-50287, CVE-2024-50142, CVE-2024-53103, CVE-2024-50099, CVE-2024-50234, CVE-2024-50282, CVE-2024-50185, CVE-2024-50247, CVE-2024-50257, CVE-2024-50036, CVE-2024-50268, CVE-2024-50127, CVE-2024-50230, CVE-2024-50278, CVE-2024-50273, CVE-2024-26718, CVE-2024-50086, CVE-2024-50262, CVE-2024-50236, CVE-2024-50117, CVE-2024-50237, CVE-2024-53104, CVE-2024-50194, CVE-2024-50192, CVE-2024-53061, CVE-2024-53052, CVE-2024-50202, CVE-2024-41080, CVE-2024-50143, CVE-2023-52913, CVE-2024-50296, CVE-2024-50085, CVE-2024-50196, CVE-2024-50072, CVE-2024-50171, CVE-2024-50103, CVE-2024-50101, CVE-2024-50156, CVE-2024-50201, CVE-2024-50233, CVE-2024-53059, CVE-2024-53066, CVE-2024-53063, CVE-2024-50150, CVE-2024-50131, CVE-2024-50163, CVE-2024-50162, CVE-2024-50299, CVE-2024-50232)

Attila Szász discovered that the HFS+ file system implementation in the Linux Kernel contained a heap overflow vulnerability. An attacker could use a specially crafted file system image that, when mounted, could cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2025-0927)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM32 architecture;
• ARM64 architecture;
• PowerPC architecture;
• RISC-V architecture;
• S390 architecture;
• SuperH RISC architecture;
• User-Mode Linux (UML);
• x86 architecture;
• Block layer subsystem;
• Cryptographic API;
• Compute Acceleration Framework;
• ACPI drivers;
• Drivers core;
• ATA over ethernet (AOE) driver;
• RAM backed block device driver;
• Network block device driver;
• Ublk userspace block driver;
• Compressed RAM block device driver;
• Bluetooth drivers;
• TPM device driver;
• Clock framework and drivers;
• Data acquisition framework and drivers;
• CPU frequency scaling framework;
• Hardware crypto device drivers;
• CXL (Compute Express Link) drivers;
• DAX dirext access to differentiated memory framework;
• Buffer Sharing and Synchronization framework;
• EDAC drivers;
• FireWire subsystem;
• ARM SCMI message protocol;
• ARM SCPI message protocol;
• EFI core;
• Qualcomm firmware drivers;
• GPIO subsystem;
• GPU drivers;
• HID subsystem;
• I2C subsystem;
• I3C subsystem;
• IIO ADC drivers;
• IIO subsystem;
• InfiniBand drivers;
• Input Device core drivers;
• IOMMU subsystem;
• IRQ chip drivers;
• Mailbox framework;
• Multiple devices driver;
• Media drivers;
• Multifunction device drivers;
• MMC subsystem;
• MTD block device drivers;
• Ethernet bonding driver;
• Network drivers;
• Mellanox network drivers;
• STMicroelectronics network drivers;
• NTB driver;
• Virtio pmem driver;
• NVME drivers;
• Parport drivers;
• PCI subsystem;
• Alibaba DDR Sub-System Driveway PMU driver;
• PHY drivers;
• Pin controllers subsystem;
• x86 platform drivers;
• i.MX PM domains;
• Powercap sysfs driver;
• Voltage and Current Regulator drivers;
• Remote Processor subsystem;
• StarFive reset controller drivers;
• Real Time Clock drivers;
• SCSI subsystem;
• SuperH / SH-Mobile drivers;
• QCOM SoC drivers;
• Xilinx SoC drivers;
• SPI subsystem;
• Direct Digital Synthesis drivers;
• Media staging drivers;
• TCM subsystem;
• Thermal drivers;
• Thunderbolt and USB4 drivers;
• TTY drivers;
• UFS subsystem;
• USB Device Class drivers;
• DesignWare USB3 driver;
• USB Gadget drivers;
• USB Host Controller drivers;
• USB Dual Role (OTG-ready) Controller drivers;
• USB Serial drivers;
• USB Type-C support driver;
• USB Type-C Port Controller Manager driver;
• TI TPS6598x USB Power Delivery controller driver;
• USB Type-C Connector System Software Interface driver;
• vDPA drivers;
• VFIO drivers;
• Virtio Host (VHOST) subsystem;
• Framebuffer layer;
• Virtio drivers;
• Xen hypervisor drivers;
• AFS file system;
• BTRFS file system;
• File systems infrastructure;
• Ceph distributed file system;
• EROFS file system;
• Ext4 file system;
• F2FS file system;
• GFS2 file system;
• JFS file system;
• Network file systems library;
• Network file system (NFS) client;
• Network file system (NFS) server daemon;
• NILFS2 file system;
• File system notification infrastructure;
• NTFS3 file system;
• Proc file system;
• SMB network file system;
• UBI file system;
• BPF subsystem;
• Network file system (NFS) superblock;
• Virtio network driver;
• Bluetooth subsystem;
• Network traffic control;
• Network sockets;
• TCP network protocol;
• Tracing infrastructure;
• User-space API (UAPI);
• Kernel init infrastructure; -…

Attila Szász discovered that the HFS+ file system implementation in the Linux Kernel contained a heap overflow vulnerability. An attacker could use a specially crafted file system image that, when mounted, could cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2025-0927)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM64 architecture;
• x86 architecture;
• Block layer subsystem;
• ACPI drivers;
• GPU drivers;
• HID subsystem;
• I2C subsystem;
• IIO ADC drivers;
• IIO subsystem;
• InfiniBand drivers;
• IOMMU subsystem;
• IRQ chip drivers;
• Multiple devices driver;
• Media drivers;
• Network drivers;
• STMicroelectronics network drivers;
• Parport drivers;
• Pin controllers subsystem;
• Direct Digital Synthesis drivers;
• TCM subsystem;
• TTY drivers;
• USB Dual Role (OTG-ready) Controller drivers;
• USB Serial drivers;
• USB Type-C support driver;
• USB Type-C Connector System Software Interface driver;
• BTRFS file system;
• File systems infrastructure;
• Network file system (NFS) client;
• NILFS2 file system;
• NTFS3 file system;
• SMB network file system;
• User-space API (UAPI);
• io_uring subsystem;
• BPF subsystem;
• Timer substystem drivers;
• Tracing infrastructure;
• Closures library;
• Memory management;
• Amateur Radio drivers;
• Bluetooth subsystem;
• Networking core;
• IPv4 networking;
• MAC80211 subsystem;
• Multipath TCP;
• Netfilter;
• Network traffic control;
• SCTP protocol;
• XFRM subsystem;
• Key management;
• FireWire sound drivers;
• HD-audio driver;
• QCOM ASoC drivers;
• STMicroelectronics SoC drivers;
• KVM core; (CVE-2024-50163, CVE-2024-53104, CVE-2024-50287, CVE-2024-41066, CVE-2024-53066, CVE-2024-53097, CVE-2024-50229, CVE-2024-50142, CVE-2024-50182, CVE-2024-50156, CVE-2024-50195, CVE-2024-50232, CVE-2024-53063, CVE-2024-50134, CVE-2024-50103, CVE-2024-50110, CVE-2024-50115, CVE-2024-50233, CVE-2024-50202, CVE-2024-50268, CVE-2024-50171, CVE-2024-50234, CVE-2024-50083, CVE-2024-53061, CVE-2024-50194, CVE-2024-40953, CVE-2024-50143, CVE-2024-50278, CVE-2024-50257, CVE-2024-56672, CVE-2024-50141, CVE-2024-50128, CVE-2024-50117, CVE-2024-50292, CVE-2024-50148, CVE-2024-53055, CVE-2024-35887, CVE-2024-50236, CVE-2024-50249, CVE-2024-50282, CVE-2024-50218, CVE-2023-52913, CVE-2024-50262, CVE-2024-50269, CVE-2024-50010, CVE-2024-50299, CVE-2024-39497, CVE-2024-50296, CVE-2024-53052, CVE-2024-53058, CVE-2024-50201, CVE-2024-42291, CVE-2024-50036, CVE-2024-50154, CVE-2024-50196, CVE-2024-50251, CVE-2024-41080, CVE-2024-50074, CVE-2024-50205, CVE-2024-50131, CVE-2024-42252, CVE-2024-50082, CVE-2024-50273, CVE-2024-50072, CVE-2024-50301, CVE-2024-53088, CVE-2024-50058, CVE-2024-50085, CVE-2024-50167, CVE-2024-50150, CVE-2024-50185, CVE-2024-50208, CVE-2024-50151, CVE-2024-50086, CVE-2024-50127, CVE-2024-50153, CVE-2024-53042, CVE-2024-50162, CVE-2024-50237, CVE-2024-50290, CVE-2024-40965, CVE-2024-50193, CVE-2024-50245, CVE-2024-53059, CVE-2024-53101, CVE-2024-50295, CVE-2024-50259, CVE-2024-50192, CVE-2024-50265, CVE-2024-50279, CVE-2024-50116, CVE-2024-26718, CVE-2024-50101, CVE-2024-50168, CVE-2024-50267, CVE-2024-50198, CVE-2024-50230, CVE-2024-50199, CVE-2024-50099, CVE-2024-50247, CVE-2024-50302, CVE-2024-50160, CVE-2024-50209, CVE-2024-50244)

Attila Szász discovered that the HFS+ file system implementation in the Linux Kernel contained a heap overflow vulnerability. An attacker could use a specially crafted file system image that, when mounted, could cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2025-0927)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM64 architecture;
• MIPS architecture;
• PowerPC architecture;
• RISC-V architecture;
• S390 architecture;
• SuperH RISC architecture;
• User-Mode Linux (UML);
• x86 architecture;
• Block layer subsystem;
• Cryptographic API;
• ACPI drivers;
• Drivers core;
• RAM backed block device driver;
• Virtio block driver;
• Data acquisition framework and drivers;
• Hardware crypto device drivers;
• DMA engine subsystem;
• EDAC drivers;
• ARM SCPI message protocol;
• GPIO subsystem;
• GPU drivers;
• HID subsystem;
• Microsoft Hyper-V drivers;
• I2C subsystem;
• I3C subsystem;
• IIO ADC drivers;
• IIO subsystem;
• InfiniBand drivers;
• IOMMU subsystem;
• IRQ chip drivers;
• LED subsystem;
• Multiple devices driver;
• Media drivers;
• Multifunction device drivers;
• MMC subsystem;
• MTD block device drivers;
• Network drivers;
• Mellanox network drivers;
• Microsoft Azure Network Adapter (MANA) driver;
• STMicroelectronics network drivers;
• NVME drivers;
• Parport drivers;
• PCI subsystem;
• Pin controllers subsystem;
• x86 platform drivers;
• Power supply drivers;
• Real Time Clock drivers;
• SCSI subsystem;
• SuperH / SH-Mobile drivers;
• i.MX SoC drivers;
• QCOM SoC drivers;
• SPI subsystem;
• Direct Digital Synthesis drivers;
• Media staging drivers;
• TCM subsystem;
• TTY drivers;
• UFS subsystem;
• DesignWare USB3 driver;
• USB Gadget drivers;
• USB Dual Role (OTG-ready) Controller drivers;
• USB Serial drivers;
• USB Type-C support driver;
• USB Type-C Port Controller Manager driver;
• USB Type-C Connector System Software Interface driver;
• VFIO drivers;
• Framebuffer layer;
• Xen hypervisor drivers;
• AFS file system;
• BTRFS file system;
• Ceph distributed file system;
• File systems infrastructure;
• F2FS file system;
• GFS2 file system;
• JFFS2 file system;
• JFS file system;
• Network file system (NFS) client;
• Network file system (NFS) server daemon;
• NILFS2 file system;
• NTFS3 file system;
• Overlay file system;
• Proc file system;
• Diskquota system;
• SMB network file system;
• UBI file system;
• Timer subsystem;
• VLANs driver;
• LAPB network protocol;
• User-space API (UAPI);
• Kernel init infrastructure;
• io_uring subsystem;
• BPF subsystem;
• Kernel CPU control infrastructure;
• DMA mapping infrastructure;
• KCSAN framework;
• Tracing infrastructure;
• Closures library;
• Memory management;
• 9P file system network protocol;
• Amateur Radio drivers;
• Bluetooth subsystem;
• CAN network layer;
• Networking core;
• DCCP (Datagram Congestion Control Protocol);
• Distributed Switch Architecture;
• HSR network protocol;
• IEEE802154.4 network protocol;
• IPv4 networking;
• IPv6 networking;
• MAC80211 subsystem;
• IEEE 802.15.4 subsystem;
• Multipath TCP;
• Netfilter;
• Netlink;
• NET/ROM layer;
• Packet sockets;
• Network traffic control;
• SCTP protocol;
• SMC sockets;
• Sun RPC protocol;
• TIPC protocol;
• VMware vSockets driver;
• eXpress Data Path;
• XFRM subsystem;
• Key management;
• SELinux security module;
• ALSA framework;
• FireWire sound drivers;
• HD-audio driver;
• QCOM ASoC drivers;
• STMicroelectronics SoC drivers;
• USB sound devices;
• KVM core; (CVE-2024-56622, CVE-2024-42252, CVE-2024-53101, CVE-2025-21664, CVE-2024-50168, CVE-2024-53214, CVE-2024-56670,…

Attila Szász discovered that the HFS+ file system implementation in the Linux Kernel contained a heap overflow vulnerability. An attacker could use a specially crafted file system image that, when mounted, could cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2025-0927)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM64 architecture;
• MIPS architecture;
• PowerPC architecture;
• RISC-V architecture;
• S390 architecture;
• SuperH RISC architecture;
• User-Mode Linux (UML);
• x86 architecture;
• Block layer subsystem;
• Cryptographic API;
• ACPI drivers;
• Drivers core;
• RAM backed block device driver;
• Virtio block driver;
• Data acquisition framework and drivers;
• Hardware crypto device drivers;
• DMA engine subsystem;
• EDAC drivers;
• ARM SCPI message protocol;
• GPIO subsystem;
• GPU drivers;
• HID subsystem;
• Microsoft Hyper-V drivers;
• I2C subsystem;
• I3C subsystem;
• IIO ADC drivers;
• IIO subsystem;
• InfiniBand drivers;
• IOMMU subsystem;
• IRQ chip drivers;
• LED subsystem;
• Multiple devices driver;
• Media drivers;
• Multifunction device drivers;
• MMC subsystem;
• MTD block device drivers;
• Network drivers;
• Mellanox network drivers;
• Microsoft Azure Network Adapter (MANA) driver;
• STMicroelectronics network drivers;
• NVME drivers;
• Parport drivers;
• PCI subsystem;
• Pin controllers subsystem;
• x86 platform drivers;
• Power supply drivers;
• Real Time Clock drivers;
• SCSI subsystem;
• SuperH / SH-Mobile drivers;
• i.MX SoC drivers;
• QCOM SoC drivers;
• SPI subsystem;
• Direct Digital Synthesis drivers;
• Media staging drivers;
• TCM subsystem;
• TTY drivers;
• UFS subsystem;
• DesignWare USB3 driver;
• USB Gadget drivers;
• USB Dual Role (OTG-ready) Controller drivers;
• USB Serial drivers;
• USB Type-C support driver;
• USB Type-C Port Controller Manager driver;
• USB Type-C Connector System Software Interface driver;
• VFIO drivers;
• Framebuffer layer;
• Xen hypervisor drivers;
• AFS file system;
• BTRFS file system;
• Ceph distributed file system;
• File systems infrastructure;
• F2FS file system;
• GFS2 file system;
• JFFS2 file system;
• JFS file system;
• Network file system (NFS) client;
• Network file system (NFS) server daemon;
• NILFS2 file system;
• NTFS3 file system;
• Overlay file system;
• Proc file system;
• Diskquota system;
• SMB network file system;
• UBI file system;
• Timer subsystem;
• VLANs driver;
• LAPB network protocol;
• User-space API (UAPI);
• Kernel init infrastructure;
• io_uring subsystem;
• BPF subsystem;
• Kernel CPU control infrastructure;
• DMA mapping infrastructure;
• KCSAN framework;
• Tracing infrastructure;
• Closures library;
• Memory management;
• 9P file system network protocol;
• Amateur Radio drivers;
• Bluetooth subsystem;
• CAN network layer;
• Networking core;
• DCCP (Datagram Congestion Control Protocol);
• Distributed Switch Architecture;
• HSR network protocol;
• IEEE802154.4 network protocol;
• IPv4 networking;
• IPv6 networking;
• MAC80211 subsystem;
• IEEE 802.15.4 subsystem;
• Multipath TCP;
• Netfilter;
• Netlink;
• NET/ROM layer;
• Packet sockets;
• Network traffic control;
• SCTP protocol;
• SMC sockets;
• Sun RPC protocol;
• TIPC protocol;
• VMware vSockets driver;
• eXpress Data Path;
• XFRM subsystem;
• Key management;
• SELinux security module;
• ALSA framework;
• FireWire sound drivers;
• HD-audio driver;
• QCOM ASoC drivers;
• STMicroelectronics SoC drivers;
• USB sound devices;
• KVM core; (CVE-2025-21640, CVE-2024-56625, CVE-2024-53104, CVE-2024-53055, CVE-2024-26718, CVE-2024-53180, CVE-2024-50257,…

Attila Szász discovered that the HFS+ file system implementation in the Linux Kernel contained a heap overflow vulnerability. An attacker could use a specially crafted file system image that, when mounted, could cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2025-0927)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM64 architecture;
• MIPS architecture;
• PowerPC architecture;
• RISC-V architecture;
• S390 architecture;
• SuperH RISC architecture;
• User-Mode Linux (UML);
• x86 architecture;
• Block layer subsystem;
• Cryptographic API;
• ACPI drivers;
• Drivers core;
• RAM backed block device driver;
• Virtio block driver;
• Data acquisition framework and drivers;
• Hardware crypto device drivers;
• DMA engine subsystem;
• EDAC drivers;
• ARM SCPI message protocol;
• GPIO subsystem;
• GPU drivers;
• HID subsystem;
• Microsoft Hyper-V drivers;
• I2C subsystem;
• I3C subsystem;
• IIO ADC drivers;
• IIO subsystem;
• InfiniBand drivers;
• IOMMU subsystem;
• IRQ chip drivers;
• LED subsystem;
• Multiple devices driver;
• Media drivers;
• Multifunction device drivers;
• MMC subsystem;
• MTD block device drivers;
• Network drivers;
• Mellanox network drivers;
• Microsoft Azure Network Adapter (MANA) driver;
• STMicroelectronics network drivers;
• NVME drivers;
• Parport drivers;
• PCI subsystem;
• Pin controllers subsystem;
• x86 platform drivers;
• Power supply drivers;
• Real Time Clock drivers;
• SCSI subsystem;
• SuperH / SH-Mobile drivers;
• i.MX SoC drivers;
• QCOM SoC drivers;
• SPI subsystem;
• Direct Digital Synthesis drivers;
• Media staging drivers;
• TCM subsystem;
• TTY drivers;
• UFS subsystem;
• DesignWare USB3 driver;
• USB Gadget drivers;
• USB Dual Role (OTG-ready) Controller drivers;
• USB Serial drivers;
• USB Type-C support driver;
• USB Type-C Port Controller Manager driver;
• USB Type-C Connector System Software Interface driver;
• VFIO drivers;
• Framebuffer layer;
• Xen hypervisor drivers;
• AFS file system;
• BTRFS file system;
• Ceph distributed file system;
• File systems infrastructure;
• F2FS file system;
• GFS2 file system;
• JFFS2 file system;
• JFS file system;
• Network file system (NFS) client;
• Network file system (NFS) server daemon;
• NILFS2 file system;
• NTFS3 file system;
• Overlay file system;
• Proc file system;
• Diskquota system;
• SMB network file system;
• UBI file system;
• Timer subsystem;
• VLANs driver;
• LAPB network protocol;
• User-space API (UAPI);
• Kernel init infrastructure;
• io_uring subsystem;
• BPF subsystem;
• Kernel CPU control infrastructure;
• DMA mapping infrastructure;
• KCSAN framework;
• Tracing infrastructure;
• Closures library;
• Memory management;
• 9P file system network protocol;
• Amateur Radio drivers;
• Bluetooth subsystem;
• CAN network layer;
• Networking core;
• DCCP (Datagram Congestion Control Protocol);
• Distributed Switch Architecture;
• HSR network protocol;
• IEEE802154.4 network protocol;
• IPv4 networking;
• IPv6 networking;
• MAC80211 subsystem;
• IEEE 802.15.4 subsystem;
• Multipath TCP;
• Netfilter;
• Netlink;
• NET/ROM layer;
• Packet sockets;
• Network traffic control;
• SCTP protocol;
• SMC sockets;
• Sun RPC protocol;
• TIPC protocol;
• VMware vSockets driver;
• eXpress Data Path;
• XFRM subsystem;
• Key management;
• SELinux security module;
• ALSA framework;
• FireWire sound drivers;
• HD-audio driver;
• QCOM ASoC drivers;
• STMicroelectronics SoC drivers;
• USB sound devices;
• KVM core; (CVE-2024-50299, CVE-2024-50304, CVE-2024-50196, CVE-2024-56548, CVE-2024-56531, CVE-2024-56720, CVE-2024-58087,…

Chenyuan Yang discovered that the CEC driver driver in the Linux kernel contained a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2024-23848)

Attila Szász discovered that the HFS+ file system implementation in the Linux Kernel contained a heap overflow vulnerability. An attacker could use a specially crafted file system image that, when mounted, could cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2025-0927)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM64 architecture;
• PowerPC architecture;
• S390 architecture;
• SuperH RISC architecture;
• User-Mode Linux (UML);
• x86 architecture;
• Block layer subsystem;
• Cryptographic API;
• ACPI drivers;
• Drivers core;
• ATA over ethernet (AOE) driver;
• Virtio block driver;
• TPM device driver;
• Data acquisition framework and drivers;
• Hardware crypto device drivers;
• DMA engine subsystem;
• EDAC drivers;
• ARM SCPI message protocol;
• GPIO subsystem;
• GPU drivers;
• HID subsystem;
• Microsoft Hyper-V drivers;
• I2C subsystem;
• I3C subsystem;
• IIO ADC drivers;
• IIO subsystem;
• InfiniBand drivers;
• LED subsystem;
• Mailbox framework;
• Multiple devices driver;
• Media drivers;
• Multifunction device drivers;
• MMC subsystem;
• MTD block device drivers;
• Network drivers;
• Mellanox network drivers;
• NTB driver;
• Virtio pmem driver;
• NVME drivers;
• Parport drivers;
• PCI subsystem;
• Pin controllers subsystem;
• x86 platform drivers;
• Real Time Clock drivers;
• SCSI subsystem;
• SuperH / SH-Mobile drivers;
• QCOM SoC drivers;
• SPI subsystem;
• Direct Digital Synthesis drivers;
• USB Device Class drivers;
• USB Gadget drivers;
• USB Dual Role (OTG-ready) Controller drivers;
• USB Serial drivers;
• USB Type-C support driver;
• USB Type-C Port Controller Manager driver;
• VFIO drivers;
• Framebuffer layer;
• Xen hypervisor drivers;
• BTRFS file system;
• Ceph distributed file system;
• Ext4 file system;
• F2FS file system;
• GFS2 file system;
• File systems infrastructure;
• JFFS2 file system;
• JFS file system;
• Network file system (NFS) client;
• Network file system (NFS) server daemon;
• NILFS2 file system;
• Overlay file system;
• Proc file system;
• Diskquota system;
• SMB network file system;
• UBI file system;
• Timer subsystem;
• VLANs driver;
• LAPB network protocol;
• Network traffic control;
• Network sockets;
• TCP network protocol;
• Kernel init infrastructure;
• BPF subsystem;
• Kernel CPU control infrastructure;
• Perf events;
• Arbitrary resource management;
• Tracing infrastructure;
• Closures library;
• Memory management;
• 9P file system network protocol;
• Amateur Radio drivers;
• Bluetooth subsystem;
• Ethernet bridge;
• CAN network layer;
• Networking core;
• DCCP (Datagram Congestion Control Protocol);
• IEEE802154.4 network protocol;
• IPv4 networking;
• IPv6 networking;
• MAC80211 subsystem;
• IEEE 802.15.4 subsystem;
• Netfilter;
• Netlink;
• NET/ROM layer;
• Packet sockets;
• SCTP protocol;
• Sun RPC protocol;
• TIPC protocol;
• Wireless networking;
• eXpress Data Path;
• XFRM subsystem;
• Key management;
• SELinux security module;
• FireWire sound drivers;
• AudioScience HPI driver;
• Amlogic Meson SoC drivers;
• USB sound devices;
• KVM core; (CVE-2024-49938, CVE-2024-41066, CVE-2024-57951, CVE-2024-56779, CVE-2024-50194, CVE-2024-50265, CVE-2024-56596, CVE-2024-57922, CVE-2024-56614, CVE-2024-57912, CVE-2024-50251, CVE-2024-56569, CVE-2024-56587, CVE-2024-57807, CVE-2024-50051, CVE-2024-49997, CVE-2024-57911, CVE-2024-50195,…