CVE-2024-54680

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix TCP timers...

5.5 MediumFix availableRejected

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

Attack profile

How easy it is to exploit

Attack vector: Local
Complexity: Low
Privileges needed: Low
User interaction: None

What an attacker can affect

Confidentiality: None
Integrity: None
Availability: High

What each source reports

GitHub Advisories Score usedGHSA-xfp4-237c-chrm 5.5

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix TCP timers...

In the Linux kernel, the following vulnerability has been resolved:

smb: client: fix TCP timers deadlock after rmmod

Commit ef7134c7fc48 ("smb: client: Fix use-after-free of network namespace.") fixed a netns UAF by manually enabled socket refcounting (sk->sk_net_refcnt=1 and sock_inuse_add(net, 1)).

The reason the patch worked for that bug was because we now hold references to the netns (get_net_track() gets a ref internally) and they're properly released (internally, on __sk_destruct()), but only because sk->sk_net_refcnt was set.

Problem: (this happens regardless of CONFIG_NET_NS_REFCNT_TRACKER and regardless if init_net or other)

Setting sk->sk_net_refcnt=1 manually and after socket creation is not only out of cifs scope, but also technically wrong -- it's set conditionally based on user (=1) vs kernel (=0) sockets. And net/ implementations seem to base their user vs kernel space operations on it.

e.g. upon TCP socket close, the TCP timers are not cleared because sk->sk_net_refcnt=1: (cf. commit 151c9c724d05 ("tcp: properly terminate timers for kernel sockets"))

net/ipv4/tcp.c: void tcp_close(struct sock *sk, long timeout) { lock_sock(sk); __tcp_close(sk, timeout); release_sock(sk); if (!sk->sk_net_refcnt) inet_csk_clear_xmit_timers_sync(sk); sock_put(sk); }

Which will throw a lockdep warning and then, as expected, deadlock on tcp_write_timer().

A way to reproduce this is by running the reproducer from ef7134c7fc48 and then 'rmmod cifs'. A few seconds later, the deadlock/lockdep warning shows up.

Fix: We shouldn't mess with socket internals ourselves, so do not set sk_net_refcnt manually.

Also change __sock_create() to sock_create_kern() for explicitness.

As for non-init_net network namespaces, we deal with it the best way we can -- hold an extra netns reference for server->ssocket and drop it when it's released. This ensures that the netns still exists whenever we need to create/destroy server->ssocket, but is not directly tied to it.

Record: GHSA-xfp4-237c-chrm
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness: CWE-416, CWE-667
Updated: 2026-11-02

CVE List No score

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

Record: CVE-2024-54680
Updated: 2026-11-02

EUVDEUVD-2024-52651 0.0

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

Record: EUVD-2024-52651
CVSS: 0.0 NoneCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

NVD No score

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

Record: CVE-2024-54680
Updated: 2026-11-02

OSVOESA-2025-1204 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

bpf: Prevent tailcall infinite loop caused by freplace

There is a potential infinite loop issue that can occur when using a combination of tail calls and freplace.

In an upcoming selftest, the attach target for entry_freplace of tailcall_freplace.c is subprog_tc of tc_bpf2bpf.c, while the tail call in entry_freplace leads to entry_tc. This results in an infinite loop:

entry_tc -> subprog_tc -> entry_freplace --tailcall-> entry_tc.

The problem arises because the tail_call_cnt in entry_freplace resets to zero each time entry_freplace is executed, causing the tail call mechanism to never terminate, eventually leading to a kernel panic.

To fix this issue, the solution is twofold:

Prevent updating a program extended by an freplace program to a prog_array map.
Prevent extending a program that is already part of a prog_array map with an freplace program.

This ensures that:

If a program or its subprogram has been extended by an freplace program, it can no longer be updated to a prog_array map.
If a program has been added to a prog_array map, neither it nor its subprograms can be extended by an freplace program.

Moreover, an extension program should not be tailcalled. As such, return -EINVAL if the program has a type of BPF_PROG_TYPE_EXT when adding it to a prog_array map.

Additionally, fix a minor code style issue by replacing eight spaces with a tab for proper formatting.(CVE-2024-47794)

In the Linux kernel, the following vulnerability has been resolved:

mm/thp: fix deferred split unqueue naming and locking

Recent changes are putting more pressure on THP deferred split queues: under load revealing long-standing races, causing list_del corruptions, "Bad page state"s and worse (I keep BUGs in both of those, so usually don't get to see how badly they end up without). The relevant recent changes being 6.8's mTHP, 6.10's mTHP swapout, and 6.12's mTHP swapin, improved swap allocation, and underused THP splitting.

Before fixing locking: rename misleading folio_undo_large_rmappable(), which does not undo large_rmappable, to folio_unqueue_deferred_split(), which is what it does. But that and its out-of-line __callee are mm internals of very limited usability: add comment and WARN_ON_ONCEs to check usage; and return a bool to say if a deferred split was unqueued, which can then be used in WARN_ON_ONCEs around safety checks (sparing callers the arcane conditionals in __folio_unqueue_deferred_split()).

Just omit the folio_unqueue_deferred_split() from free_unref_folios(), all of whose callers now call it beforehand (and if any forget then bad_page() will tell) - except for its caller put_pages_list(), which itself no longer has any callers (and will be deleted separately).

Swapout: mem_cgroup_swapout() has been resetting folio->memcg_data 0 without checking and unqueueing a THP folio from deferred split list; which is unfortunate, since the split_queue_lock depends on the memcg (when memcg is enabled); so swapout has been unqueueing such THPs later, when freeing the folio, using the pgdat's lock instead: potentially corrupting the memcg's list. __remove_mapping() has frozen refcount to 0 here, so no problem with calling folio_unqueue_deferred_split() before resetting memcg_data.

That goes back to 5.4 commit 87eaceb3faa5 ("mm: thp: make deferred split shrinker memcg aware"): which included a check on swapcache before adding to deferred queue, but no check on deferred queue before adding THP to swapcache. That worked fine with the usual sequence of events in reclaim (though there were a couple of rare ways in which a THP on deferred queue could have been swapped out), but 6.12 commit dafff3f4c850 ("mm: split underused THPs") avoids splitting underused THPs in reclaim, which makes swapcache THPs…

Record: OESA-2025-1204
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVOESA-2025-1205 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

bpf: Prevent tailcall infinite loop caused by freplace

There is a potential infinite loop issue that can occur when using a combination of tail calls and freplace.

entry_tc -> subprog_tc -> entry_freplace --tailcall-> entry_tc.

To fix this issue, the solution is twofold:

Prevent updating a program extended by an freplace program to a prog_array map.
Prevent extending a program that is already part of a prog_array map with an freplace program.

This ensures that:

If a program or its subprogram has been extended by an freplace program, it can no longer be updated to a prog_array map.
If a program has been added to a prog_array map, neither it nor its subprograms can be extended by an freplace program.

Moreover, an extension program should not be tailcalled. As such, return -EINVAL if the program has a type of BPF_PROG_TYPE_EXT when adding it to a prog_array map.

Additionally, fix a minor code style issue by replacing eight spaces with a tab for proper formatting.(CVE-2024-47794)

In the Linux kernel, the following vulnerability has been resolved:

mm/thp: fix deferred split unqueue naming and locking

Record: OESA-2025-1205
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

Show 24 moreShow less

OSVOESA-2025-1282 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

ARM: davinci: da850-evm: Avoid NULL pointer dereference

With newer versions of GCC, there is a panic in da850_evm_config_emac() when booting multi_v5_defconfig in QEMU under the palmetto-bmc machine:

Unable to handle kernel NULL pointer dereference at virtual address 00000020 pgd = (ptrval) [00000020] *pgd=00000000 Internal error: Oops: 5 [#1] PREEMPT ARM Modules linked in: CPU: 0 PID: 1 Comm: swapper Not tainted 5.15.0 #1 Hardware name: Generic DT based system PC is at da850_evm_config_emac+0x1c/0x120 LR is at do_one_initcall+0x50/0x1e0

The emac_pdata pointer in soc_info is NULL because davinci_soc_info only gets populated on davinci machines but da850_evm_config_emac() is called on all machines via device_initcall().

Move the rmii_en assignment below the machine check so that it is only dereferenced when running on a supported SoC.(CVE-2021-47631)

In the Linux kernel, the following vulnerability has been resolved:

video: fbdev: nvidiafb: Use strscpy() to prevent buffer overflow

Coverity complains of a possible buffer overflow. However, given the 'static' scope of nvidia_setup_i2c_bus() it looks like that can't happen after examiniing the call sites.

CID 19036 (#1 of 1): Copy into fixed size buffer (STRING_OVERFLOW)

fixed_size_dest: You might overrun the 48-character fixed-size string chan->adapter.name by copying name without checking the length.
parameter_as_source: Note: This defect has an elevated risk because the source argument is a parameter of the current function. 89 strcpy(chan->adapter.name, name);

Fix this warning by using strscpy() which will silence the warning and prevent any future buffer overflows should the names used to identify the channel become much longer.(CVE-2021-47642)

In the Linux kernel, the following vulnerability has been resolved:

dm integrity: fix memory corruption when tag_size is less than digest size

It is possible to set up dm-integrity in such a way that the "tag_size" parameter is less than the actual digest size. In this situation, a part of the digest beyond tag_size is ignored.

In this case, dm-integrity would write beyond the end of the ic->recalc_tags array and corrupt memory. The corruption happened in integrity_recalc->integrity_sector_checksum->crypto_shash_final.

Fix this corruption by increasing the tags array so that it has enough padding at the end to accomodate the loop in integrity_recalc() being able to write a full digest size for the last member of the tags array.(CVE-2022-49044)

In the Linux kernel, the following vulnerability has been resolved:

drm/amdkfd: Check for potential null return of kmalloc_array()

As the kmalloc_array() may return null, the 'event_waiters[i].wait' would lead to null-pointer dereference. Therefore, it is better to check the return value of kmalloc_array() to avoid this confusion.(CVE-2022-49055)

In the Linux kernel, the following vulnerability has been resolved:

scsi: libfc: Fix use after free in fc_exch_abts_resp()

fc_exch_release(ep) will decrease the ep's reference count. When the reference count reaches zero, it is freed. But ep is still used in the following code, which will lead to a use after free.

Return after the fc_exch_release() call to avoid use after free.(CVE-2022-49114)

In the Linux kernel, the following vulnerability has been resolved:

drm/amd/amdgpu/amdgpu_cs: fix refcount leak of a dma_fence obj

This issue takes place in an error path in amdgpu_cs_fence_to_handle_ioctl(). When info->in.what falls into default case, the function simply returns -EINVAL, forgetting to decrement the reference count of a dma_fence obj, which is bumped earlier by amdgpu_cs_get_fence(). This may result in reference count leaks.

Fix it by decreasing the refcount of specific object before returning the error…

Record: OESA-2025-1282
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVOESA-2025-1283 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

net: sfc: add missing xdp queue reinitialization

After rx/tx ring buffer size is changed, kernel panic occurs when it acts XDP_TX or XDP_REDIRECT.

When tx/rx ring buffer size is changed(ethtool -G), sfc driver reallocates and reinitializes rx and tx queues and their buffer (tx_queue->buffer). But it misses reinitializing xdp queues(efx->xdp_tx_queues). So, while it is acting XDP_TX or XDP_REDIRECT, it uses the uninitialized tx_queue->buffer.

A new function efx_set_xdp_channels() is separated from efx_set_channels() to handle only xdp queues.

Splat looks like: BUG: kernel NULL pointer dereference, address: 000000000000002a #PF: supervisor write access in kernel mode #PF: error_code(0x0002) - not-present page PGD 0 P4D 0 Oops: 0002 [#4] PREEMPT SMP NOPTI RIP: 0010:efx_tx_map_chunk+0x54/0x90 [sfc] CPU: 2 PID: 0 Comm: swapper/2 Tainted: G D 5.17.0+ #55 e8beeee8289528f11357029357cf Code: 48 8b 8d a8 01 00 00 48 8d 14 52 4c 8d 2c d0 44 89 e0 48 85 c9 74 0e 44 89 e2 4c 89 f6 48 80 RSP: 0018:ffff92f121e45c60 EFLAGS: 00010297 RIP: 0010:efx_tx_map_chunk+0x54/0x90 [sfc] RAX: 0000000000000040 RBX: ffff92ea506895c0 RCX: ffffffffc0330870 RDX: 0000000000000001 RSI: 00000001139b10ce RDI: ffff92ea506895c0 RBP: ffffffffc0358a80 R08: 00000001139b110d R09: 0000000000000000 R10: 0000000000000001 R11: ffff92ea414c0088 R12: 0000000000000040 R13: 0000000000000018 R14: 00000001139b10ce R15: ffff92ea506895c0 FS: 0000000000000000(0000) GS:ffff92f121ec0000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 Code: 48 8b 8d a8 01 00 00 48 8d 14 52 4c 8d 2c d0 44 89 e0 48 85 c9 74 0e 44 89 e2 4c 89 f6 48 80 CR2: 000000000000002a CR3: 00000003e6810004 CR4: 00000000007706e0 RSP: 0018:ffff92f121e85c60 EFLAGS: 00010297 PKRU: 55555554 RAX: 0000000000000040 RBX: ffff92ea50689700 RCX: ffffffffc0330870 RDX: 0000000000000001 RSI: 00000001145a90ce RDI: ffff92ea50689700 RBP: ffffffffc0358a80 R08: 00000001145a910d R09: 0000000000000000 R10: 0000000000000001 R11: ffff92ea414c0088 R12: 0000000000000040 R13: 0000000000000018 R14: 00000001145a90ce R15: ffff92ea50689700 FS: 0000000000000000(0000) GS:ffff92f121e80000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000000000000002a CR3: 00000003e6810005 CR4: 00000000007706e0 PKRU: 55555554 Call Trace: <IRQ> efx_xdp_tx_buffers+0x12b/0x3d0 [sfc 84c94b8e32d44d296c17e10a634d3ad454de4ba5] __efx_rx_packet+0x5c3/0x930 [sfc 84c94b8e32d44d296c17e10a634d3ad454de4ba5] efx_rx_packet+0x28c/0x2e0 [sfc 84c94b8e32d44d296c17e10a634d3ad454de4ba5] efx_ef10_ev_process+0x5f8/0xf40 [sfc 84c94b8e32d44d296c17e10a634d3ad454de4ba5] ? enqueue_task_fair+0x95/0x550 efx_poll+0xc4/0x360 sfc 84c94b8e32d44d296c17e10a634d3ad454de4ba5

In the Linux kernel, the following vulnerability has been resolved:

crypto: qat - add param check for DH

Reject requests with a source buffer that is bigger than the size of the key. This is to prevent a possible integer underflow that might happen when copying the source scatterlist into a linear buffer.(CVE-2022-49564)

In the Linux kernel, the following vulnerability has been resolved:

srcu: Tighten cleanup_srcu_struct() GP checks

Currently, cleanup_srcu_struct() checks for a grace period in progress, but it does not check for a grace period that has not yet started but which might start at any time. Such a situation could result in a use-after-free bug, so this commit adds a check for a grace period that is needed but not yet started to cleanup_srcu_struct().(CVE-2022-49651)

In the Linux kernel, the following vulnerability has been resolved:

cifs: Fix UAF in cifs_demultiplex_thread()

There is a UAF when xfstests on cifs:

BUG: KASAN:…

Record: OESA-2025-1283
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVOESA-2025-1284 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

net: sfc: add missing xdp queue reinitialization

After rx/tx ring buffer size is changed, kernel panic occurs when it acts XDP_TX or XDP_REDIRECT.

A new function efx_set_xdp_channels() is separated from efx_set_channels() to handle only xdp queues.

In the Linux kernel, the following vulnerability has been resolved:

crypto: qat - add param check for DH

In the Linux kernel, the following vulnerability has been resolved:

srcu: Tighten cleanup_srcu_struct() GP checks

In the Linux kernel, the following vulnerability has been resolved:

smb: client: fix TCP timers deadlock after rmmod

Commit ef7134c7fc48 ("smb: client: Fix…

Record: OESA-2025-1284
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2025:6966 7.8

Red Hat Security Advisory: kernel security update

Record: RHSA-2025:6966
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVUBUNTU-CVE-2024-54680 5.5

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

Record: UBUNTU-CVE-2024-54680
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSV No score

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

Record: CVE-2024-54680
Updated: 2026-11-02

OSVMGASA-2025-0030 No score

Updated kernel, kmod-virtualbox, kmod-xtables-addons & dwarves packages fix security vulnerabilities

Upstream kernel version 6.6.74 fixes bugs and vulnerabilities. The kmod-virtualbox and kmod-xtables-addons packages have been updated to work with this new kernel. For information about the vulnerabilities see the links.

Record: MGASA-2025-0030
Updated: 2026-11-02

OSVMGASA-2025-0032 No score

Updated kernel-linus packages fix security vulnerabilities

Vanilla upstream kernel version 6.6.74 fixes bugs and vulnerabilities. For information about the vulnerabilities see the links.

Record: MGASA-2025-0032
Updated: 2026-11-02

OSVSUSE-SU-2025:0289-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 Confidential Computing kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2023-52489: mm/sparsemem: fix race in accessing memory_section->usage (bsc#1221326).
CVE-2024-26596: net: dsa: fix netdev_priv() dereference before check on non-DSA netdevice events (bsc#1220355).
CVE-2024-26924: scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (bsc#1225820).
CVE-2024-27397: netfilter: nf_tables: use timestamp to check for set element timeout (bsc#1224095).
CVE-2024-35839: kABI fix for netfilter: bridge: replace physindev with physinif in nf_bridge_info (bsc#1224726).
CVE-2024-36915: nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies (bsc#1225758).
CVE-2024-41042: Prefer nft_chain_validate (bsc#1228526).
CVE-2024-44934: net: bridge: mcast: wait for previous gc cycles when removing port (bsc#1229809).
CVE-2024-44996: vsock: fix recursive ->recvmsg calls (bsc#1230205).
CVE-2024-45828: i3c: mipi-i3c-hci: Mask ring interrupts before ring stop request (bsc#1235705).
CVE-2024-46680: Bluetooth: btnxpuart: Fix random crash seen while removing driver (bsc#1230557).
CVE-2024-46765: ice: protect XDP configuration with a mutex (bsc#1230807).
CVE-2024-46800: sch/netem: fix use after free in netem_dequeue (bsc#1230827).
CVE-2024-47678: icmp: change the order of rate limits (bsc#1231854).
CVE-2024-48881: bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again (bsc#1235727).
CVE-2024-49944: sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start (bsc#1232166).
CVE-2024-49951: Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (bsc#1232158).
CVE-2024-49952: netfilter: nf_tables: prevent nf_skb_duplicated corruption (bsc#1232157).
CVE-2024-49998: net: dsa: improve shutdown sequence (bsc#1232087).
CVE-2024-50018: net: napi: Prevent overflow of napi_defer_hard_irqs (bsc#1232419).
CVE-2024-50039: kABI: Restore deleted EXPORT_SYMBOL(__qdisc_calculate_pkt_len) (bsc#1231909).
CVE-2024-50143: udf: fix uninit-value use in udf_get_fileshortad (bsc#1233038).
CVE-2024-50151: smb: client: fix OOBs when building SMB2_IOCTL request (bsc#1233055).
CVE-2024-50199: mm/swapfile: skip HugeTLB pages for unuse_vma (bsc#1233112).
CVE-2024-50202: nilfs2: propagate directory read errors from nilfs_find_entry() (bsc#1233324).
CVE-2024-50252: mlxsw: spectrum_ipip: Fix memory leak when changing remote IPv6 address (bsc#1233201).
CVE-2024-50256: netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (bsc#1233200).
CVE-2024-50262: bpf: Fix out-of-bounds write in trie_get_next_key() (bsc#1233239).
CVE-2024-50278, CVE-2024-50280: dm cache: fix flushing uninitialized delayed_work on cache_ctr error (bsc#1233467 bsc#1233469).
CVE-2024-50278: dm cache: fix potential out-of-bounds access on the first resume (bsc#1233467).
CVE-2024-50279: dm cache: fix out-of-bounds access to the dirty bitset when resizing (bsc#1233468).
CVE-2024-50296: net: hns3: fix kernel crash when uninstalling driver (bsc#1233485).
CVE-2024-50299: sctp: properly validate chunk size in sctp_sf_ootb() (bsc#1233488).
CVE-2024-53043: mctp i2c: handle NULL header address (bsc#1233523).
CVE-2024-53050: drm/i915/hdcp: Add encoder check in hdcp2_get_capability (bsc#1233546).
CVE-2024-53051: drm/i915/hdcp: Add encoder check in intel_hdcp_get_capability (bsc#1233547).
CVE-2024-53055: wifi: iwlwifi: mvm: fix 6 GHz scan construction (bsc#1233550).
CVE-2024-53056: drm/mediatek: Fix potential NULL dereference in mtk_crtc_destroy() (bsc#1233568).
CVE-2024-53064: idpf: fix idpf_vc_core_init error path (bsc#1233558 bsc#1234464).
CVE-2024-53090: afs: Fix lock recursion (bsc#1233637).
CVE-2024-53091: bpf: Add sk_is_inet and IS_ICSK check in tls_sw_has_ctx_tx/rx (bsc#1233638).
CVE-2024-53099: bpf: Check validity of link->type in bpf_link_show_fdinfo() (bsc#1233772).
CVE-2024-53105: mm: page_alloc: move mlocked flag…

Record: SUSE-SU-2025:0289-1
Updated: 2026-11-02

OSVSUSE-SU-2025:0428-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2023-52489: mm/sparsemem: fix race in accessing memory_section->usage (bsc#1221326).
CVE-2024-45828: i3c: mipi-i3c-hci: Mask ring interrupts before ring stop request (bsc#1235705).
CVE-2024-48881: bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again (bsc#1235727).
CVE-2024-49948: net: add more sanity checks to qdisc_pkt_len_init() (bsc#1232161).
CVE-2024-49951: Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (bsc#1232158).
CVE-2024-49978: gso: fix udp gso fraglist segmentation after pull from frag_list (bsc#1232101).
CVE-2024-49998: net: dsa: improve shutdown sequence (bsc#1232087).
CVE-2024-50151: smb: client: fix OOBs when building SMB2_IOCTL request (bsc#1233055).
CVE-2024-50199: mm/swapfile: skip HugeTLB pages for unuse_vma (bsc#1233112).
CVE-2024-50251: netfilter: nft_payload: sanitize offset and length before calling skb_checksum() (bsc#1233248).
CVE-2024-50258: net: fix crash when config small gso_max_size/gso_ipv4_max_size (bsc#1233221).
CVE-2024-50299: sctp: properly validate chunk size in sctp_sf_ootb() (bsc#1233488).
CVE-2024-50304: ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find() (bsc#1233522).
CVE-2024-53091: bpf: Add sk_is_inet and IS_ICSK check in tls_sw_has_ctx_tx/rx (bsc#1233638).
CVE-2024-53164: net: sched: fix ordering of qlen adjustment (bsc#1234863).
CVE-2024-53170: block: fix uaf for flush rq while iterating tags (bsc#1234888).
CVE-2024-53172: ubi: fastmap: Fix duplicate slab cache names while attaching (bsc#1234898).
CVE-2024-53175: ipc: fix memleak if msg_init_ns failed in create_ipc_ns (bsc#1234893).
CVE-2024-53185: smb: client: fix NULL ptr deref in crypto_aead_setkey() (bsc#1234901).
CVE-2024-53187: io_uring: check for overflows in io_pin_pages (bsc#1234947).
CVE-2024-53195: KVM: arm64: Get rid of userspace_irqchip_in_use (bsc#1234957).
CVE-2024-53196: KVM: arm64: Do not retire aborted MMIO instruction (bsc#1234906).
CVE-2024-53198: xen: Fix the issue of resource not being properly released in xenbus_dev_probe() (bsc#1234923).
CVE-2024-53203: usb: typec: fix potential array underflow in ucsi_ccg_sync_control() (bsc#1235001).
CVE-2024-53227: scsi: bfa: Fix use-after-free in bfad_im_module_exit() (bsc#1235011).
CVE-2024-53232: iommu/s390: Implement blocking domain (bsc#1235050).
CVE-2024-53236: xsk: Free skb when TX metadata options are invalid (bsc#1235000).
CVE-2024-53685: ceph: give up on paths longer than PATH_MAX (bsc#1235720).
CVE-2024-55639: net: renesas: rswitch: avoid use-after-put for a device tree node (bsc#1235737).
CVE-2024-55881: KVM: x86: Play nice with protected guests in complete_hypercall_exit() (bsc#1235745).
CVE-2024-56372: net: tun: fix tun_napi_alloc_frags() (bsc#1235753).
CVE-2024-56568: iommu/arm-smmu: Defer probe of clients after smmu device bound (bsc#1235032).
CVE-2024-56569: ftrace: Fix regression with module command in stack_trace_filter (bsc#1235031).
CVE-2024-56570: ovl: Filter invalid inodes with missing lookup function (bsc#1235035).
CVE-2024-56588: scsi: hisi_sas: Create all dump files during debugfs initialization (bsc#1235123).
CVE-2024-56589: scsi: hisi_sas: Add cond_resched() for no forced preemption model (bsc#1235241).
CVE-2024-56600: net: inet6: do not leave a dangling sk pointer in inet6_create() (bsc#1235217).
CVE-2024-56601: net: inet: do not leave a dangling sk pointer in inet_create() (bsc#1235230).
CVE-2024-56602: net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (bsc#1235521).
CVE-2024-56603: net: af_can: do not leave a dangling sk pointer in can_create() (bsc#1235415).
CVE-2024-56605: Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create() (bsc#1235061).
CVE-2024-56608: drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'…

Record: SUSE-SU-2025:0428-1
Updated: 2026-11-02

OSVSUSE-SU-2025:0499-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2025-21682: eth: bnxt: always recalculate features after XDP clearing, fix null-deref (bsc#1236703).
CVE-2025-21678: gtp: Destroy device along with udp socket's netns dismantle (bsc#1236698).
CVE-2025-21676: net: fec: handle page_pool_dev_alloc_pages error (bsc#1236696).
CVE-2025-21675: net/mlx5: Clear port select structure when fail to create (bsc#1236694).
CVE-2025-21674: net/mlx5e: Fix inversion dependency warning while enabling IPsec tunnel (bsc#1236688).
CVE-2025-21670: vsock/bpf: return early if transport is not assigned (bsc#1236685).
CVE-2025-21669: vsock/virtio: discard packets if the transport changes (bsc#1236683).
CVE-2025-21666: vsock: prevent null-ptr-deref in vsock_*[has_data|has_space] (bsc#1236680).
CVE-2025-21664: dm thin: make get_first_thin use rcu-safe list first function (bsc#1236262).
CVE-2025-21663: net: stmmac: dwmac-tegra: Read iommu stream id from device tree (bsc#1236260).
CVE-2025-21662: net/mlx5: Fix variable not being completed when function returns (bsc#1236198).
CVE-2025-21655: io_uring/eventfd: ensure io_eventfd_signal() defers another RCU period (bsc#1236163).
CVE-2025-21653: net_sched: cls_flow: validate TCA_FLOW_RSHIFT attribute (bsc#1236161).
CVE-2025-21652: ipvlan: Fix use-after-free in ipvlan_get_iflink() (bsc#1236160).
CVE-2025-21651: net: hns3: do not auto enable misc vector (bsc#1236145).
CVE-2025-21650: net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue (bsc#1236144).
CVE-2025-21649: net: hns3: fix kernel crash when 1588 is sent on HIP08 devices (bsc#1236143).
CVE-2025-21632: x86/fpu: Ensure shadow stack is active before 'getting' registers (bsc#1236106).
CVE-2024-57946: virtio-blk: do not keep queue frozen during system suspend (bsc#1236247).
CVE-2024-57938: net/sctp: Prevent autoclose integer overflow in sctp_association_init() (bsc#1236182).
CVE-2024-57933: gve: guard XSK operations on the existence of queues (bsc#1236178).
CVE-2024-57932: gve: guard XDP xmit NDO on existence of xdp queues (bsc#1236190).
CVE-2024-57931: selinux: ignore unknown extended permissions (bsc#1236192).
CVE-2024-57929: dm array: fix releasing a faulty array block twice in dm_array_cursor_end (bsc#1236096).
CVE-2024-57917: topology: Keep the cpumask unchanged when printing cpumap (bsc#1236127).
CVE-2024-57903: net: restrict SO_REUSEPORT to inet sockets (bsc#1235967).
CVE-2024-57896: btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount (bsc#1235965).
CVE-2024-57892: ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv (bsc#1235964).
CVE-2024-57884: mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (bsc#1235948).
CVE-2024-57882: mptcp: fix TCP options overflow. (bsc#1235914).
CVE-2024-57857: RDMA/siw: Remove direct link to net_device (bsc#1235946).
CVE-2024-57838: s390/entry: Mark IRQ entries to fix stack depot warnings (bsc#1235798).
CVE-2024-57809: PCI: imx6: Fix suspend/resume support on i.MX6QDL (bsc#1235793).
CVE-2024-57804: scsi: mpi3mr: Fix corrupt config pages PHY state is switched in sysfs (bsc#1235779).
CVE-2024-57802: netrom: check buffer length before accessing it (bsc#1235941).
CVE-2024-57801: net/mlx5e: Skip restore TC rules for vport rep without loaded flag (bsc#1235940).
CVE-2024-57795: RDMA/rxe: Remove the direct link to net_device (bsc#1235906).
CVE-2024-57793: virt: tdx-guest: Just leak decrypted memory on unrecoverable errors (bsc#1235768).
CVE-2024-57791: net/smc: check return value of sock_recvmsg when draining clc data (bsc#1235759).
CVE-2024-56775: drm/amd/display: Fix handling of plane refcount (bsc#1235657).
CVE-2024-56774: btrfs: add a sanity check for btrfs root in btrfs_search_slot() (bsc#1235653).
CVE-2024-56763: tracing: Prevent bad count for…

Record: SUSE-SU-2025:0499-1
Updated: 2026-11-02

OSVSUSE-SU-2025:0555-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-50199: mm/swapfile: skip HugeTLB pages for unuse_vma (bsc#1233112).
CVE-2024-53104: media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (bsc#1234025).
CVE-2024-53166: block, bfq: fix bfqq uaf in bfq_limit_depth() (bsc#1234884).
CVE-2024-53177: smb: prevent use-after-free due to open_cached_dir error paths (bsc#1234896).
CVE-2024-56600: net: inet6: do not leave a dangling sk pointer in inet6_create() (bsc#1235217).
CVE-2024-56601: net: inet: do not leave a dangling sk pointer in inet_create() (bsc#1235230).
CVE-2024-56602: net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (bsc#1235521).
CVE-2024-56623: scsi: qla2xxx: Fix use after free on unload (bsc#1235466).
CVE-2024-56631: scsi: sg: Fix slab-use-after-free read in sg_release() (bsc#1235480).
CVE-2024-56642: tipc: Fix use-after-free of kernel socket in cleanup_bearer() (bsc#1235433).
CVE-2024-56645: can: j1939: j1939_session_new(): fix skb reference counting (bsc#1235134).
CVE-2024-56648: net: hsr: avoid potential out-of-bound access in fill_frame_info() (bsc#1235451).
CVE-2024-56650: netfilter: x_tables: fix LED ID check in led_tg_check() (bsc#1235430).
CVE-2024-56658: net: defer final 'struct net' free in netns dismantle (bsc#1235441).
CVE-2024-56664: bpf, sockmap: Fix race between element replace and close() (bsc#1235249).
CVE-2024-56704: 9p/xen: fix release of IRQ (bsc#1235584).
CVE-2024-56759: btrfs: fix use-after-free when COWing tree bock and tracing is enabled (bsc#1235645).
CVE-2024-57791: net/smc: check return value of sock_recvmsg when draining clc data (bsc#1235759).
CVE-2024-57792: power: supply: gpio-charger: Fix set charge current limits (bsc#1235764).
CVE-2024-57798: drm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req() (bsc#1235818).
CVE-2024-57849: s390/cpum_sf: Handle CPU hotplug remove during sampling (bsc#1235814).
CVE-2024-57893: ALSA: seq: oss: Fix races at processing SysEx messages (bsc#1235920).
CVE-2024-57897: drm/amdkfd: Correct the migration DMA map direction (bsc#1235969).

The following non-security bugs were fixed:

NFS: Adjust the amount of readahead performed by NFS readdir (bsc#1231847).
NFS: Do not flush the readdir cache in nfs_dentry_iput() (bsc#1231847).
NFS: Improve heuristic for readdirplus (bsc#1231847).
NFS: Trigger the 'ls -l' readdir heuristic sooner (bsc#1231847).
tipc: fix NULL deref in cleanup_bearer() (bsc#1235433).
x86/static-call: Remove early_boot_irqs_disabled check to fix Xen PVH dom0 (git-fixes).

Record: SUSE-SU-2025:0555-1
Updated: 2026-11-02

OSVSUSE-SU-2025:0556-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-57897: drm/amdkfd: Correct the migration DMA map direction (bsc#1235969).
CVE-2024-57893: ALSA: seq: oss: Fix races at processing SysEx messages (bsc#1235920).
CVE-2024-57876: drm/dp_mst: Fix resetting msg rx state after topology removal (bsc#1235806).
CVE-2024-57849: s390/cpum_sf: Handle CPU hotplug remove during sampling (bsc#1235814).
CVE-2024-57798: drm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req() (bsc#1235818).
CVE-2024-57793: virt: tdx-guest: Just leak decrypted memory on unrecoverable errors (bsc#1235768).
CVE-2024-57792: power: supply: gpio-charger: Fix set charge current limits (bsc#1235764).
CVE-2024-57791: net/smc: check return value of sock_recvmsg when draining clc data (bsc#1235759).
CVE-2024-56759: btrfs: fix use-after-free when COWing tree bock and tracing is enabled (bsc#1235645).
CVE-2024-56747: scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb() (bsc#1234934).
CVE-2024-56704: 9p/xen: fix release of IRQ (bsc#1235584).
CVE-2024-56664: bpf, sockmap: Fix race between element replace and close() (bsc#1235249).
CVE-2024-56658: net: defer final 'struct net' free in netns dismantle (bsc#1235441).
CVE-2024-56650: netfilter: x_tables: fix LED ID check in led_tg_check() (bsc#1235430).
CVE-2024-56648: net: hsr: avoid potential out-of-bound access in fill_frame_info() (bsc#1235451).
CVE-2024-56642: tipc: Fix use-after-free of kernel socket in cleanup_bearer() (bsc#1235433).
CVE-2024-56631: scsi: sg: Fix slab-use-after-free read in sg_release() (bsc#1235480).
CVE-2024-56623: scsi: qla2xxx: Fix use after free on unload (bsc#1235466).
CVE-2024-56602: net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (bsc#1235521).
CVE-2024-56601: net: inet: do not leave a dangling sk pointer in inet_create() (bsc#1235230).
CVE-2024-56600: net: inet6: do not leave a dangling sk pointer in inet6_create() (bsc#1235217).
CVE-2024-56588: scsi: hisi_sas: Create all dump files during debugfs initialization (bsc#1235123).
CVE-2024-53227: scsi: bfa: Fix use-after-free in bfad_im_module_exit() (bsc#1235011).
CVE-2024-53209: bnxt_en: Fix receive ring space parameters when XDP is active (bsc#1235002).
CVE-2024-53177: smb: prevent use-after-free due to open_cached_dir error paths (bsc#1234896).
CVE-2024-53166: block, bfq: fix bfqq uaf in bfq_limit_depth() (bsc#1234884).
CVE-2024-53141: netfilter: ipset: add missing range check in bitmap_ip_uadt (bsc#1234381).
CVE-2024-53104: media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (bsc#1234025).
CVE-2024-50299: sctp: properly validate chunk size in sctp_sf_ootb() (bsc#1233488).
CVE-2024-50199: mm/swapfile: skip HugeTLB pages for unuse_vma (bsc#1233112).
CVE-2024-50151: smb: client: fix OOBs when building SMB2_IOCTL request (bsc#1233055).
CVE-2024-50142: xfrm: validate new SA's prefixlen using SA family when sel.family is unset (bsc#1233028).
CVE-2024-46858: mptcp: pm: Fix uaf in __timer_delete_sync (bsc#1231088).
CVE-2024-36898: gpiolib: cdev: fix uninitialised kfifo (bsc#1225736).

The following non-security bugs were fixed:

NFS: Adjust the amount of readahead performed by NFS readdir (bsc#1231847).
NFS: Do not flush the readdir cache in nfs_dentry_iput() (bsc#1231847).
NFS: Improve heuristic for readdirplus (bsc#1231847).
NFS: Trigger the 'ls -l' readdir heuristic sooner (bsc#1231847).
VFS: use system_unbound_wq for delayed_mntput (bsc#1234683).
ceph: improve error handling and short/overflow-read logic in __ceph_sync_read() (bsc#1228592).
ibmvnic: Free any outstanding tx skbs during scrq reset (bsc#1226980).
netfilter: nf_tables: validate family when identifying table via handle (bsc#1233778 ZDI-24-1454).
powerpc/pseries/vas: Add close() callback in vas_vm_ops struct…

Record: SUSE-SU-2025:0556-1
Updated: 2026-11-02

OSVSUSE-SU-2025:0557-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-45828: i3c: mipi-i3c-hci: Mask ring interrupts before ring stop request (bsc#1235705).
CVE-2024-46858: mptcp: pm: Fix uaf in __timer_delete_sync (bsc#1231088).
CVE-2024-48881: bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again (bsc#1235727).
CVE-2024-49948: net: add more sanity checks to qdisc_pkt_len_init() (bsc#1232161).
CVE-2024-49951: Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (bsc#1232158).
CVE-2024-49978: gso: fix udp gso fraglist segmentation after pull from frag_list (bsc#1232101).
CVE-2024-49998: net: dsa: improve shutdown sequence (bsc#1232087).
CVE-2024-50151: smb: client: fix OOBs when building SMB2_IOCTL request (bsc#1233055).
CVE-2024-50199: mm/swapfile: skip HugeTLB pages for unuse_vma (bsc#1233112).
CVE-2024-50251: netfilter: nft_payload: sanitize offset and length before calling skb_checksum() (bsc#1233248).
CVE-2024-50258: net: fix crash when config small gso_max_size/gso_ipv4_max_size (bsc#1233221).
CVE-2024-50299: sctp: properly validate chunk size in sctp_sf_ootb() (bsc#1233488).
CVE-2024-50304: ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find() (bsc#1233522).
CVE-2024-53091: bpf: Add sk_is_inet and IS_ICSK check in tls_sw_has_ctx_tx/rx (bsc#1233638).
CVE-2024-53164: net: sched: fix ordering of qlen adjustment (bsc#1234863).
CVE-2024-53170: block: fix uaf for flush rq while iterating tags (bsc#1234888).
CVE-2024-53172: ubi: fastmap: Fix duplicate slab cache names while attaching (bsc#1234898).
CVE-2024-53175: ipc: fix memleak if msg_init_ns failed in create_ipc_ns (bsc#1234893).
CVE-2024-53185: smb: client: fix NULL ptr deref in crypto_aead_setkey() (bsc#1234901).
CVE-2024-53187: io_uring: check for overflows in io_pin_pages (bsc#1234947).
CVE-2024-53195: KVM: arm64: Get rid of userspace_irqchip_in_use (bsc#1234957).
CVE-2024-53196: KVM: arm64: Do not retire aborted MMIO instruction (bsc#1234906).
CVE-2024-53198: xen: Fix the issue of resource not being properly released in xenbus_dev_probe() (bsc#1234923).
CVE-2024-53203: usb: typec: fix potential array underflow in ucsi_ccg_sync_control() (bsc#1235001).
CVE-2024-53227: scsi: bfa: Fix use-after-free in bfad_im_module_exit() (bsc#1235011).
CVE-2024-53232: iommu/s390: Implement blocking domain (bsc#1235050).
CVE-2024-53236: xsk: Free skb when TX metadata options are invalid (bsc#1235000).
CVE-2024-53685: ceph: give up on paths longer than PATH_MAX (bsc#1235720).
CVE-2024-55639: net: renesas: rswitch: avoid use-after-put for a device tree node (bsc#1235737).
CVE-2024-55881: KVM: x86: Play nice with protected guests in complete_hypercall_exit() (bsc#1235745).
CVE-2024-56372: net: tun: fix tun_napi_alloc_frags() (bsc#1235753).
CVE-2024-56568: iommu/arm-smmu: Defer probe of clients after smmu device bound (bsc#1235032).
CVE-2024-56569: ftrace: Fix regression with module command in stack_trace_filter (bsc#1235031).
CVE-2024-56570: ovl: Filter invalid inodes with missing lookup function (bsc#1235035).
CVE-2024-56588: scsi: hisi_sas: Create all dump files during debugfs initialization (bsc#1235123).
CVE-2024-56589: scsi: hisi_sas: Add cond_resched() for no forced preemption model (bsc#1235241).
CVE-2024-56592: bpf: Call free_htab_elem() after htab_unlock_bucket() (bsc#1235244).
CVE-2024-56600: net: inet6: do not leave a dangling sk pointer in inet6_create() (bsc#1235217).
CVE-2024-56601: net: inet: do not leave a dangling sk pointer in inet_create() (bsc#1235230).
CVE-2024-56602: net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (bsc#1235521).
CVE-2024-56603: net: af_can: do not leave a dangling sk pointer in can_create() (bsc#1235415).
CVE-2024-56608: drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create' (bsc#1235487).
CVE-2024-56610: kcsan: Turn…

Record: SUSE-SU-2025:0557-1
Updated: 2026-11-02

OSVSUSE-SU-2025:0576-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-50199: mm/swapfile: skip HugeTLB pages for unuse_vma (bsc#1233112).
CVE-2024-53104: media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (bsc#1234025).
CVE-2024-53166: block, bfq: fix bfqq uaf in bfq_limit_depth() (bsc#1234884).
CVE-2024-53177: smb: prevent use-after-free due to open_cached_dir error paths (bsc#1234896).
CVE-2024-56600: net: inet6: do not leave a dangling sk pointer in inet6_create() (bsc#1235217).
CVE-2024-56601: net: inet: do not leave a dangling sk pointer in inet_create() (bsc#1235230).
CVE-2024-56602: net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (bsc#1235521).
CVE-2024-56623: scsi: qla2xxx: Fix use after free on unload (bsc#1235466).
CVE-2024-56631: scsi: sg: Fix slab-use-after-free read in sg_release() (bsc#1235480).
CVE-2024-56642: tipc: Fix use-after-free of kernel socket in cleanup_bearer() (bsc#1235433).
CVE-2024-56645: can: j1939: j1939_session_new(): fix skb reference counting (bsc#1235134).
CVE-2024-56648: net: hsr: avoid potential out-of-bound access in fill_frame_info() (bsc#1235451).
CVE-2024-56650: netfilter: x_tables: fix LED ID check in led_tg_check() (bsc#1235430).
CVE-2024-56658: net: defer final 'struct net' free in netns dismantle (bsc#1235441).
CVE-2024-56664: bpf, sockmap: Fix race between element replace and close() (bsc#1235249).
CVE-2024-56704: 9p/xen: fix release of IRQ (bsc#1235584).
CVE-2024-56759: btrfs: fix use-after-free when COWing tree bock and tracing is enabled (bsc#1235645).
CVE-2024-57791: net/smc: check return value of sock_recvmsg when draining clc data (bsc#1235759).
CVE-2024-57792: power: supply: gpio-charger: Fix set charge current limits (bsc#1235764).
CVE-2024-57798: drm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req() (bsc#1235818).
CVE-2024-57849: s390/cpum_sf: Handle CPU hotplug remove during sampling (bsc#1235814).
CVE-2024-57893: ALSA: seq: oss: Fix races at processing SysEx messages (bsc#1235920).
CVE-2024-57897: drm/amdkfd: Correct the migration DMA map direction (bsc#1235969).

The following non-security bugs were fixed:

NFS: Adjust the amount of readahead performed by NFS readdir (bsc#1231847).
NFS: Do not flush the readdir cache in nfs_dentry_iput() (bsc#1231847).
NFS: Improve heuristic for readdirplus (bsc#1231847).
NFS: Trigger the 'ls -l' readdir heuristic sooner (bsc#1231847).
tipc: fix NULL deref in cleanup_bearer() (bsc#1235433).
x86/static-call: Remove early_boot_irqs_disabled check to fix Xen PVH dom0 (git-fixes).

Record: SUSE-SU-2025:0576-1
Updated: 2026-11-02

OSVSUSE-SU-2025:0577-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-36898: gpiolib: cdev: fix uninitialised kfifo (bsc#1225736).
CVE-2024-46858: mptcp: pm: Fix uaf in __timer_delete_sync (bsc#1231088).
CVE-2024-50142: xfrm: validate new SA's prefixlen using SA family when sel.family is unset (bsc#1233028).
CVE-2024-50151: smb: client: fix OOBs when building SMB2_IOCTL request (bsc#1233055).
CVE-2024-50199: mm/swapfile: skip HugeTLB pages for unuse_vma (bsc#1233112).
CVE-2024-50299: sctp: properly validate chunk size in sctp_sf_ootb() (bsc#1233488).
CVE-2024-53104: media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (bsc#1234025).
CVE-2024-53141: netfilter: ipset: add missing range check in bitmap_ip_uadt (bsc#1234381).
CVE-2024-53166: block, bfq: fix bfqq uaf in bfq_limit_depth() (bsc#1234884).
CVE-2024-53177: smb: prevent use-after-free due to open_cached_dir error paths (bsc#1234896).
CVE-2024-53209: bnxt_en: Fix receive ring space parameters when XDP is active (bsc#1235002).
CVE-2024-53227: scsi: bfa: Fix use-after-free in bfad_im_module_exit() (bsc#1235011).
CVE-2024-56588: scsi: hisi_sas: Create all dump files during debugfs initialization (bsc#1235123).
CVE-2024-56600: net: inet6: do not leave a dangling sk pointer in inet6_create() (bsc#1235217).
CVE-2024-56601: net: inet: do not leave a dangling sk pointer in inet_create() (bsc#1235230).
CVE-2024-56602: net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (bsc#1235521).
CVE-2024-56623: scsi: qla2xxx: Fix use after free on unload (bsc#1235466).
CVE-2024-56631: scsi: sg: Fix slab-use-after-free read in sg_release() (bsc#1235480).
CVE-2024-56642: tipc: Fix use-after-free of kernel socket in cleanup_bearer() (bsc#1235433).
CVE-2024-56645: can: j1939: j1939_session_new(): fix skb reference counting (bsc#1235134).
CVE-2024-56648: net: hsr: avoid potential out-of-bound access in fill_frame_info() (bsc#1235451).
CVE-2024-56650: netfilter: x_tables: fix LED ID check in led_tg_check() (bsc#1235430).
CVE-2024-56658: net: defer final 'struct net' free in netns dismantle (bsc#1235441).
CVE-2024-56664: bpf, sockmap: Fix race between element replace and close() (bsc#1235249).
CVE-2024-56704: 9p/xen: fix release of IRQ (bsc#1235584).
CVE-2024-56747: scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb() (bsc#1234934).
CVE-2024-56759: btrfs: fix use-after-free when COWing tree bock and tracing is enabled (bsc#1235645).
CVE-2024-57791: net/smc: check return value of sock_recvmsg when draining clc data (bsc#1235759).
CVE-2024-57792: power: supply: gpio-charger: Fix set charge current limits (bsc#1235764).
CVE-2024-57793: virt: tdx-guest: Just leak decrypted memory on unrecoverable errors (bsc#1235768).
CVE-2024-57798: drm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req() (bsc#1235818).
CVE-2024-57849: s390/cpum_sf: Handle CPU hotplug remove during sampling (bsc#1235814).
CVE-2024-57876: drm/dp_mst: Fix resetting msg rx state after topology removal (bsc#1235806).
CVE-2024-57893: ALSA: seq: oss: Fix races at processing SysEx messages (bsc#1235920).
CVE-2024-57897: drm/amdkfd: Correct the migration DMA map direction (bsc#1235969).

The following non-security bugs were fixed:

NFS: Adjust the amount of readahead performed by NFS readdir (bsc#1231847).
NFS: Do not flush the readdir cache in nfs_dentry_iput() (bsc#1231847).
NFS: Improve heuristic for readdirplus (bsc#1231847).
NFS: Trigger the 'ls -l' readdir heuristic sooner (bsc#1231847).
VFS: use system_unbound_wq for delayed_mntput (bsc#1234683).
ceph: improve error handling and short/overflow-read logic in __ceph_sync_read() (bsc#1228592).
ibmvnic: Free any outstanding tx skbs during scrq reset (bsc#1226980).
netfilter: nf_tables: validate family when identifying table via handle…

Record: SUSE-SU-2025:0577-1
Updated: 2026-11-02

OSVSUSE-SU-2025:0577-2 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-36898: gpiolib: cdev: fix uninitialised kfifo (bsc#1225736).
CVE-2024-46858: mptcp: pm: Fix uaf in __timer_delete_sync (bsc#1231088).
CVE-2024-50142: xfrm: validate new SA's prefixlen using SA family when sel.family is unset (bsc#1233028).
CVE-2024-50151: smb: client: fix OOBs when building SMB2_IOCTL request (bsc#1233055).
CVE-2024-50199: mm/swapfile: skip HugeTLB pages for unuse_vma (bsc#1233112).
CVE-2024-50299: sctp: properly validate chunk size in sctp_sf_ootb() (bsc#1233488).
CVE-2024-53104: media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (bsc#1234025).
CVE-2024-53141: netfilter: ipset: add missing range check in bitmap_ip_uadt (bsc#1234381).
CVE-2024-53166: block, bfq: fix bfqq uaf in bfq_limit_depth() (bsc#1234884).
CVE-2024-53177: smb: prevent use-after-free due to open_cached_dir error paths (bsc#1234896).
CVE-2024-53209: bnxt_en: Fix receive ring space parameters when XDP is active (bsc#1235002).
CVE-2024-53227: scsi: bfa: Fix use-after-free in bfad_im_module_exit() (bsc#1235011).
CVE-2024-56588: scsi: hisi_sas: Create all dump files during debugfs initialization (bsc#1235123).
CVE-2024-56600: net: inet6: do not leave a dangling sk pointer in inet6_create() (bsc#1235217).
CVE-2024-56601: net: inet: do not leave a dangling sk pointer in inet_create() (bsc#1235230).
CVE-2024-56602: net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (bsc#1235521).
CVE-2024-56623: scsi: qla2xxx: Fix use after free on unload (bsc#1235466).
CVE-2024-56631: scsi: sg: Fix slab-use-after-free read in sg_release() (bsc#1235480).
CVE-2024-56642: tipc: Fix use-after-free of kernel socket in cleanup_bearer() (bsc#1235433).
CVE-2024-56645: can: j1939: j1939_session_new(): fix skb reference counting (bsc#1235134).
CVE-2024-56648: net: hsr: avoid potential out-of-bound access in fill_frame_info() (bsc#1235451).
CVE-2024-56650: netfilter: x_tables: fix LED ID check in led_tg_check() (bsc#1235430).
CVE-2024-56658: net: defer final 'struct net' free in netns dismantle (bsc#1235441).
CVE-2024-56664: bpf, sockmap: Fix race between element replace and close() (bsc#1235249).
CVE-2024-56704: 9p/xen: fix release of IRQ (bsc#1235584).
CVE-2024-56747: scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb() (bsc#1234934).
CVE-2024-56759: btrfs: fix use-after-free when COWing tree bock and tracing is enabled (bsc#1235645).
CVE-2024-57791: net/smc: check return value of sock_recvmsg when draining clc data (bsc#1235759).
CVE-2024-57792: power: supply: gpio-charger: Fix set charge current limits (bsc#1235764).
CVE-2024-57793: virt: tdx-guest: Just leak decrypted memory on unrecoverable errors (bsc#1235768).
CVE-2024-57798: drm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req() (bsc#1235818).
CVE-2024-57849: s390/cpum_sf: Handle CPU hotplug remove during sampling (bsc#1235814).
CVE-2024-57876: drm/dp_mst: Fix resetting msg rx state after topology removal (bsc#1235806).
CVE-2024-57893: ALSA: seq: oss: Fix races at processing SysEx messages (bsc#1235920).
CVE-2024-57897: drm/amdkfd: Correct the migration DMA map direction (bsc#1235969).

The following non-security bugs were fixed:

NFS: Adjust the amount of readahead performed by NFS readdir (bsc#1231847).
NFS: Do not flush the readdir cache in nfs_dentry_iput() (bsc#1231847).
NFS: Improve heuristic for readdirplus (bsc#1231847).
NFS: Trigger the 'ls -l' readdir heuristic sooner (bsc#1231847).
VFS: use system_unbound_wq for delayed_mntput (bsc#1234683).
ceph: improve error handling and short/overflow-read logic in __ceph_sync_read() (bsc#1228592).
ibmvnic: Free any outstanding tx skbs during scrq reset (bsc#1226980).
netfilter: nf_tables: validate family when identifying table via handle…

Record: SUSE-SU-2025:0577-2
Updated: 2026-11-02

OSVSUSE-SU-2025:20165-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-26924: scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (bsc#1225820).
CVE-2024-27397: netfilter: nf_tables: use timestamp to check for set element timeout (bsc#1224095).
CVE-2024-35839: kABI fix for netfilter: bridge: replace physindev with physinif in nf_bridge_info (bsc#1224726).
CVE-2024-41042: Prefer nft_chain_validate (bsc#1228526).
CVE-2024-44934: net: bridge: mcast: wait for previous gc cycles when removing port (bsc#1229809).
CVE-2024-44996: vsock: fix recursive ->recvmsg calls (bsc#1230205).
CVE-2024-45828: i3c: mipi-i3c-hci: Mask ring interrupts before ring stop request (bsc#1235705).
CVE-2024-47678: icmp: change the order of rate limits (bsc#1231854).
CVE-2024-48881: bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again (bsc#1235727).
CVE-2024-49948: net: add more sanity checks to qdisc_pkt_len_init() (bsc#1232161).
CVE-2024-49951: Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (bsc#1232158).
CVE-2024-49978: gso: fix udp gso fraglist segmentation after pull from frag_list (bsc#1232101).
CVE-2024-49998: net: dsa: improve shutdown sequence (bsc#1232087).
CVE-2024-50018: net: napi: Prevent overflow of napi_defer_hard_irqs (bsc#1232419).
CVE-2024-50039: kABI: Restore deleted EXPORT_SYMBOL(__qdisc_calculate_pkt_len) (bsc#1231909).
CVE-2024-50143: udf: fix uninit-value use in udf_get_fileshortad (bsc#1233038).
CVE-2024-50151: smb: client: fix OOBs when building SMB2_IOCTL request (bsc#1233055).
CVE-2024-50199: mm/swapfile: skip HugeTLB pages for unuse_vma (bsc#1233112).
CVE-2024-50202: nilfs2: propagate directory read errors from nilfs_find_entry() (bsc#1233324).
CVE-2024-50256: netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (bsc#1233200).
CVE-2024-50262: bpf: Fix out-of-bounds write in trie_get_next_key() (bsc#1233239).
CVE-2024-50278, CVE-2024-50280: dm cache: fix flushing uninitialized delayed_work on cache_ctr error (bsc#1233467 bsc#1233469).
CVE-2024-50278: dm cache: fix potential out-of-bounds access on the first resume (bsc#1233467).
CVE-2024-50299: sctp: properly validate chunk size in sctp_sf_ootb() (bsc#1233488).
CVE-2024-53050: drm/i915/hdcp: Add encoder check in hdcp2_get_capability (bsc#1233546).
CVE-2024-53064: idpf: fix idpf_vc_core_init error path (bsc#1233558 bsc#1234464).
CVE-2024-53090: afs: Fix lock recursion (bsc#1233637).
CVE-2024-53091: bpf: Add sk_is_inet and IS_ICSK check in tls_sw_has_ctx_tx/rx (bsc#1233638).
CVE-2024-53099: bpf: Check validity of link->type in bpf_link_show_fdinfo() (bsc#1233772).
CVE-2024-53105: mm: page_alloc: move mlocked flag clearance into free_pages_prepare() (bsc#1234069).
CVE-2024-53111: mm/mremap: fix address wraparound in move_page_tables() (bsc#1234086).
CVE-2024-53113: mm: fix NULL pointer dereference in alloc_pages_bulk_noprof (bsc#1234077).
CVE-2024-53117: virtio/vsock: Improve MSG_ZEROCOPY error handling (bsc#1234079).
CVE-2024-53118: vsock: Fix sk_error_queue memory leak (bsc#1234071).
CVE-2024-53119: virtio/vsock: Fix accept_queue memory leak (bsc#1234073).
CVE-2024-53122: mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (bsc#1234076).
CVE-2024-53125: bpf: sync_linked_regs() must preserve subreg_def (bsc#1234156).
CVE-2024-53130: nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint (bsc#1234219).
CVE-2024-53131: nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint (bsc#1234220).
CVE-2024-53133: drm/amd/display: Handle dml allocation failure to avoid crash (bsc#1234221)
CVE-2024-53134: pmdomain: imx93-blk-ctrl: correct remove path (bsc#1234159).
CVE-2024-53141: netfilter: ipset: add missing range check in bitmap_ip_uadt (bsc#1234381).
CVE-2024-53160: rcu/kvfree: Fix data-race in __mod_timer / kvfree_call_rcu (bsc#1234810).
CVE-2024-53161:…

Record: SUSE-SU-2025:20165-1
Updated: 2026-11-02

OSVSUSE-SU-2025:20166-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-26924: scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (bsc#1225820).
CVE-2024-27397: netfilter: nf_tables: use timestamp to check for set element timeout (bsc#1224095).
CVE-2024-35839: kABI fix for netfilter: bridge: replace physindev with physinif in nf_bridge_info (bsc#1224726).
CVE-2024-41042: Prefer nft_chain_validate (bsc#1228526).
CVE-2024-44934: net: bridge: mcast: wait for previous gc cycles when removing port (bsc#1229809).
CVE-2024-44996: vsock: fix recursive ->recvmsg calls (bsc#1230205).
CVE-2024-45828: i3c: mipi-i3c-hci: Mask ring interrupts before ring stop request (bsc#1235705).
CVE-2024-47678: icmp: change the order of rate limits (bsc#1231854).
CVE-2024-48881: bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again (bsc#1235727).
CVE-2024-49948: net: add more sanity checks to qdisc_pkt_len_init() (bsc#1232161).
CVE-2024-49951: Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (bsc#1232158).
CVE-2024-49978: gso: fix udp gso fraglist segmentation after pull from frag_list (bsc#1232101).
CVE-2024-49998: net: dsa: improve shutdown sequence (bsc#1232087).
CVE-2024-50018: net: napi: Prevent overflow of napi_defer_hard_irqs (bsc#1232419).
CVE-2024-50039: kABI: Restore deleted EXPORT_SYMBOL(__qdisc_calculate_pkt_len) (bsc#1231909).
CVE-2024-50143: udf: fix uninit-value use in udf_get_fileshortad (bsc#1233038).
CVE-2024-50151: smb: client: fix OOBs when building SMB2_IOCTL request (bsc#1233055).
CVE-2024-50199: mm/swapfile: skip HugeTLB pages for unuse_vma (bsc#1233112).
CVE-2024-50202: nilfs2: propagate directory read errors from nilfs_find_entry() (bsc#1233324).
CVE-2024-50256: netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (bsc#1233200).
CVE-2024-50262: bpf: Fix out-of-bounds write in trie_get_next_key() (bsc#1233239).
CVE-2024-50278, CVE-2024-50280: dm cache: fix flushing uninitialized delayed_work on cache_ctr error (bsc#1233467 bsc#1233469).
CVE-2024-50278: dm cache: fix potential out-of-bounds access on the first resume (bsc#1233467).
CVE-2024-50299: sctp: properly validate chunk size in sctp_sf_ootb() (bsc#1233488).
CVE-2024-53050: drm/i915/hdcp: Add encoder check in hdcp2_get_capability (bsc#1233546).
CVE-2024-53064: idpf: fix idpf_vc_core_init error path (bsc#1233558 bsc#1234464).
CVE-2024-53090: afs: Fix lock recursion (bsc#1233637).
CVE-2024-53091: bpf: Add sk_is_inet and IS_ICSK check in tls_sw_has_ctx_tx/rx (bsc#1233638).
CVE-2024-53099: bpf: Check validity of link->type in bpf_link_show_fdinfo() (bsc#1233772).
CVE-2024-53105: mm: page_alloc: move mlocked flag clearance into free_pages_prepare() (bsc#1234069).
CVE-2024-53111: mm/mremap: fix address wraparound in move_page_tables() (bsc#1234086).
CVE-2024-53113: mm: fix NULL pointer dereference in alloc_pages_bulk_noprof (bsc#1234077).
CVE-2024-53117: virtio/vsock: Improve MSG_ZEROCOPY error handling (bsc#1234079).
CVE-2024-53118: vsock: Fix sk_error_queue memory leak (bsc#1234071).
CVE-2024-53119: virtio/vsock: Fix accept_queue memory leak (bsc#1234073).
CVE-2024-53122: mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (bsc#1234076).
CVE-2024-53125: bpf: sync_linked_regs() must preserve subreg_def (bsc#1234156).
CVE-2024-53130: nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint (bsc#1234219).
CVE-2024-53131: nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint (bsc#1234220).
CVE-2024-53133: drm/amd/display: Handle dml allocation failure to avoid crash (bsc#1234221)
CVE-2024-53134: pmdomain: imx93-blk-ctrl: correct remove path (bsc#1234159).
CVE-2024-53141: netfilter: ipset: add missing range check in bitmap_ip_uadt (bsc#1234381).
CVE-2024-53160: rcu/kvfree: Fix data-race in __mod_timer / kvfree_call_rcu (bsc#1234810).
CVE-2024-53161:…

Record: SUSE-SU-2025:20166-1
Updated: 2026-11-02

OSVSUSE-SU-2025:20248-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-26924: scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (bsc#1225820).
CVE-2024-27397: netfilter: nf_tables: use timestamp to check for set element timeout (bsc#1224095).
CVE-2024-35839: kABI fix for netfilter: bridge: replace physindev with physinif in nf_bridge_info (bsc#1224726).
CVE-2024-41042: Prefer nft_chain_validate (bsc#1228526).
CVE-2024-44934: net: bridge: mcast: wait for previous gc cycles when removing port (bsc#1229809).
CVE-2024-44996: vsock: fix recursive ->recvmsg calls (bsc#1230205).
CVE-2024-45828: i3c: mipi-i3c-hci: Mask ring interrupts before ring stop request (bsc#1235705).
CVE-2024-47678: icmp: change the order of rate limits (bsc#1231854).
CVE-2024-48881: bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again (bsc#1235727).
CVE-2024-49948: net: add more sanity checks to qdisc_pkt_len_init() (bsc#1232161).
CVE-2024-49951: Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (bsc#1232158).
CVE-2024-49978: gso: fix udp gso fraglist segmentation after pull from frag_list (bsc#1232101).
CVE-2024-49998: net: dsa: improve shutdown sequence (bsc#1232087).
CVE-2024-50018: net: napi: Prevent overflow of napi_defer_hard_irqs (bsc#1232419).
CVE-2024-50039: kABI: Restore deleted EXPORT_SYMBOL(__qdisc_calculate_pkt_len) (bsc#1231909).
CVE-2024-50143: udf: fix uninit-value use in udf_get_fileshortad (bsc#1233038).
CVE-2024-50151: smb: client: fix OOBs when building SMB2_IOCTL request (bsc#1233055).
CVE-2024-50199: mm/swapfile: skip HugeTLB pages for unuse_vma (bsc#1233112).
CVE-2024-50202: nilfs2: propagate directory read errors from nilfs_find_entry() (bsc#1233324).
CVE-2024-50256: netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (bsc#1233200).
CVE-2024-50262: bpf: Fix out-of-bounds write in trie_get_next_key() (bsc#1233239).
CVE-2024-50278, CVE-2024-50280: dm cache: fix flushing uninitialized delayed_work on cache_ctr error (bsc#1233467 bsc#1233469).
CVE-2024-50278: dm cache: fix potential out-of-bounds access on the first resume (bsc#1233467).
CVE-2024-50299: sctp: properly validate chunk size in sctp_sf_ootb() (bsc#1233488).
CVE-2024-53050: drm/i915/hdcp: Add encoder check in hdcp2_get_capability (bsc#1233546).
CVE-2024-53064: idpf: fix idpf_vc_core_init error path (bsc#1233558 bsc#1234464).
CVE-2024-53090: afs: Fix lock recursion (bsc#1233637).
CVE-2024-53091: bpf: Add sk_is_inet and IS_ICSK check in tls_sw_has_ctx_tx/rx (bsc#1233638).
CVE-2024-53099: bpf: Check validity of link->type in bpf_link_show_fdinfo() (bsc#1233772).
CVE-2024-53105: mm: page_alloc: move mlocked flag clearance into free_pages_prepare() (bsc#1234069).
CVE-2024-53111: mm/mremap: fix address wraparound in move_page_tables() (bsc#1234086).
CVE-2024-53113: mm: fix NULL pointer dereference in alloc_pages_bulk_noprof (bsc#1234077).
CVE-2024-53117: virtio/vsock: Improve MSG_ZEROCOPY error handling (bsc#1234079).
CVE-2024-53118: vsock: Fix sk_error_queue memory leak (bsc#1234071).
CVE-2024-53119: virtio/vsock: Fix accept_queue memory leak (bsc#1234073).
CVE-2024-53122: mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (bsc#1234076).
CVE-2024-53125: bpf: sync_linked_regs() must preserve subreg_def (bsc#1234156).
CVE-2024-53130: nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint (bsc#1234219).
CVE-2024-53131: nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint (bsc#1234220).
CVE-2024-53133: drm/amd/display: Handle dml allocation failure to avoid crash (bsc#1234221)
CVE-2024-53134: pmdomain: imx93-blk-ctrl: correct remove path (bsc#1234159).
CVE-2024-53141: netfilter: ipset: add missing range check in bitmap_ip_uadt (bsc#1234381).
CVE-2024-53160: rcu/kvfree: Fix data-race in __mod_timer / kvfree_call_rcu (bsc#1234810).
CVE-2024-53161:…

Record: SUSE-SU-2025:20248-1
Updated: 2026-11-02

OSVSUSE-SU-2025:20249-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-26924: scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (bsc#1225820).
CVE-2024-27397: netfilter: nf_tables: use timestamp to check for set element timeout (bsc#1224095).
CVE-2024-35839: kABI fix for netfilter: bridge: replace physindev with physinif in nf_bridge_info (bsc#1224726).
CVE-2024-41042: Prefer nft_chain_validate (bsc#1228526).
CVE-2024-44934: net: bridge: mcast: wait for previous gc cycles when removing port (bsc#1229809).
CVE-2024-44996: vsock: fix recursive ->recvmsg calls (bsc#1230205).
CVE-2024-45828: i3c: mipi-i3c-hci: Mask ring interrupts before ring stop request (bsc#1235705).
CVE-2024-47678: icmp: change the order of rate limits (bsc#1231854).
CVE-2024-48881: bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again (bsc#1235727).
CVE-2024-49948: net: add more sanity checks to qdisc_pkt_len_init() (bsc#1232161).
CVE-2024-49951: Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (bsc#1232158).
CVE-2024-49978: gso: fix udp gso fraglist segmentation after pull from frag_list (bsc#1232101).
CVE-2024-49998: net: dsa: improve shutdown sequence (bsc#1232087).
CVE-2024-50018: net: napi: Prevent overflow of napi_defer_hard_irqs (bsc#1232419).
CVE-2024-50039: kABI: Restore deleted EXPORT_SYMBOL(__qdisc_calculate_pkt_len) (bsc#1231909).
CVE-2024-50143: udf: fix uninit-value use in udf_get_fileshortad (bsc#1233038).
CVE-2024-50151: smb: client: fix OOBs when building SMB2_IOCTL request (bsc#1233055).
CVE-2024-50199: mm/swapfile: skip HugeTLB pages for unuse_vma (bsc#1233112).
CVE-2024-50202: nilfs2: propagate directory read errors from nilfs_find_entry() (bsc#1233324).
CVE-2024-50256: netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (bsc#1233200).
CVE-2024-50262: bpf: Fix out-of-bounds write in trie_get_next_key() (bsc#1233239).
CVE-2024-50278, CVE-2024-50280: dm cache: fix flushing uninitialized delayed_work on cache_ctr error (bsc#1233467 bsc#1233469).
CVE-2024-50278: dm cache: fix potential out-of-bounds access on the first resume (bsc#1233467).
CVE-2024-50299: sctp: properly validate chunk size in sctp_sf_ootb() (bsc#1233488).
CVE-2024-53050: drm/i915/hdcp: Add encoder check in hdcp2_get_capability (bsc#1233546).
CVE-2024-53064: idpf: fix idpf_vc_core_init error path (bsc#1233558 bsc#1234464).
CVE-2024-53090: afs: Fix lock recursion (bsc#1233637).
CVE-2024-53091: bpf: Add sk_is_inet and IS_ICSK check in tls_sw_has_ctx_tx/rx (bsc#1233638).
CVE-2024-53099: bpf: Check validity of link->type in bpf_link_show_fdinfo() (bsc#1233772).
CVE-2024-53105: mm: page_alloc: move mlocked flag clearance into free_pages_prepare() (bsc#1234069).
CVE-2024-53111: mm/mremap: fix address wraparound in move_page_tables() (bsc#1234086).
CVE-2024-53113: mm: fix NULL pointer dereference in alloc_pages_bulk_noprof (bsc#1234077).
CVE-2024-53117: virtio/vsock: Improve MSG_ZEROCOPY error handling (bsc#1234079).
CVE-2024-53118: vsock: Fix sk_error_queue memory leak (bsc#1234071).
CVE-2024-53119: virtio/vsock: Fix accept_queue memory leak (bsc#1234073).
CVE-2024-53122: mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (bsc#1234076).
CVE-2024-53125: bpf: sync_linked_regs() must preserve subreg_def (bsc#1234156).
CVE-2024-53130: nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint (bsc#1234219).
CVE-2024-53131: nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint (bsc#1234220).
CVE-2024-53133: drm/amd/display: Handle dml allocation failure to avoid crash (bsc#1234221)
CVE-2024-53134: pmdomain: imx93-blk-ctrl: correct remove path (bsc#1234159).
CVE-2024-53141: netfilter: ipset: add missing range check in bitmap_ip_uadt (bsc#1234381).
CVE-2024-53160: rcu/kvfree: Fix data-race in __mod_timer / kvfree_call_rcu (bsc#1234810).
CVE-2024-53161:…

Record: SUSE-SU-2025:20249-1
Updated: 2026-11-02

OSVUSN-7379-1 No score

linux, linux-aws, linux-azure, linux-gcp, linux-hwe-6.11, linux-oracle, linux-realtime vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
MIPS architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
x86 architecture;
Block layer subsystem;
Compute Acceleration Framework;
ACPI drivers;
Drivers core;
Ublk userspace block driver;
Virtio block driver;
Bluetooth drivers;
Buffer Sharing and Synchronization framework;
DMA engine subsystem;
EFI core;
GPIO subsystem;
GPU drivers;
HID subsystem;
Microsoft Hyper-V drivers;
Hardware monitoring drivers;
I3C subsystem;
IIO ADC drivers;
IIO subsystem;
InfiniBand drivers;
IOMMU subsystem;
LED subsystem;
Multiple devices driver;
Media drivers;
Microchip PCI driver;
MTD block device drivers;
Network drivers;
Mellanox network drivers;
STMicroelectronics network drivers;
NVME drivers;
PCI subsystem;
PHY drivers;
Pin controllers subsystem;
x86 platform drivers;
i.MX PM domains;
Power supply drivers;
Voltage and Current Regulator drivers;
SCSI subsystem;
i.MX SoC drivers;
SPI subsystem;
UFS subsystem;
USB Gadget drivers;
TDX Guest driver;
AFS file system;
BTRFS file system;
Ceph distributed file system;
File systems infrastructure;
F2FS file system;
JFFS2 file system;
JFS file system;
Network file systems library;
Network file system (NFS) server daemon;
NILFS2 file system;
File system notification infrastructure;
Overlay file system;
Diskquota system;
SMB network file system;
DRM display driver;
BPF subsystem;
VLANs driver;
KASAN memory debugging framework;
Memory management;
StackDepot library;
Bluetooth subsystem;
LAPB network protocol;
Netfilter;
io_uring subsystem;
Control group (cgroup);
DMA mapping infrastructure;
KCSAN framework;
Scheduler infrastructure;
Seccomp subsystem;
Tracing infrastructure;
Workqueue subsystem;
KUnit library;
CAN network layer;
Networking core;
DCCP (Datagram Congestion Control Protocol);
HSR network protocol;
IEEE802154.4 network protocol;
IPv4 networking;
IPv6 networking;
MAC80211 subsystem;
Multipath TCP;
NET/ROM layer;
Packet sockets;
RDS protocol;
Network traffic control;
SCTP protocol;
SMC sockets;
TIPC protocol;
Wireless networking;
eXpress Data Path;
SELinux security module;
ALSA framework;
Intel ASoC drivers;
SOF drivers; (CVE-2024-57921, CVE-2024-56614, CVE-2024-56558, CVE-2024-56589, CVE-2024-56662, CVE-2024-56610, CVE-2024-56717, CVE-2024-57890, CVE-2024-55639, CVE-2024-56562, CVE-2025-21633, CVE-2024-56598, CVE-2024-47794, CVE-2024-41935, CVE-2024-57901, CVE-2024-56587, CVE-2024-56581, CVE-2024-56783, CVE-2024-57888, CVE-2024-57809, CVE-2024-57926, CVE-2025-21650, CVE-2024-56634, CVE-2025-21639, CVE-2025-21656, CVE-2024-56578, CVE-2025-21632, CVE-2024-56784, CVE-2025-21644, CVE-2024-56776, CVE-2024-56764, CVE-2024-56652, CVE-2024-56550, CVE-2024-56569, CVE-2024-57904, CVE-2024-49569, CVE-2024-56770, CVE-2024-56606, CVE-2024-57806, CVE-2024-56646, CVE-2024-57895, CVE-2024-57880, CVE-2024-56650, CVE-2024-56591, CVE-2024-56590, CVE-2024-56642, CVE-2024-56713, CVE-2025-21663, CVE-2024-57938, CVE-2024-56760, CVE-2024-56583, CVE-2025-21662, CVE-2024-56629, CVE-2024-47408, CVE-2024-57850, CVE-2024-56777, CVE-2024-56626, CVE-2024-56773, CVE-2024-56647, CVE-2025-21664, CVE-2024-56564, CVE-2024-56597, CVE-2024-56623, CVE-2024-57897, CVE-2024-56670, CVE-2024-56567, CVE-2024-57931, CVE-2024-56761, CVE-2024-57935, CVE-2024-53690, CVE-2025-21640, CVE-2024-56608, CVE-2024-57878, CVE-2025-21648, CVE-2024-57898, CVE-2024-57889, CVE-2024-56644, CVE-2024-56763, CVE-2024-57900,…

Record: USN-7379-1
Updated: 2026-11-02

OSVUSN-7381-1 No score

linux-lowlatency-hwe-6.11 vulnerabilities

Attila Szász discovered that the HFS+ file system implementation in the Linux Kernel contained a heap overflow vulnerability. An attacker could use a specially crafted file system image that, when mounted, could cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2025-0927)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
MIPS architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
x86 architecture;
Block layer subsystem;
Compute Acceleration Framework;
ACPI drivers;
Drivers core;
Ublk userspace block driver;
Virtio block driver;
Bluetooth drivers;
Buffer Sharing and Synchronization framework;
DMA engine subsystem;
EFI core;
GPIO subsystem;
GPU drivers;
HID subsystem;
Microsoft Hyper-V drivers;
Hardware monitoring drivers;
I3C subsystem;
IIO ADC drivers;
IIO subsystem;
InfiniBand drivers;
IOMMU subsystem;
LED subsystem;
Multiple devices driver;
Media drivers;
Microchip PCI driver;
MTD block device drivers;
Network drivers;
Mellanox network drivers;
STMicroelectronics network drivers;
NVME drivers;
PCI subsystem;
PHY drivers;
Pin controllers subsystem;
x86 platform drivers;
i.MX PM domains;
Power supply drivers;
Voltage and Current Regulator drivers;
SCSI subsystem;
i.MX SoC drivers;
SPI subsystem;
UFS subsystem;
USB Gadget drivers;
TDX Guest driver;
AFS file system;
BTRFS file system;
Ceph distributed file system;
File systems infrastructure;
F2FS file system;
JFFS2 file system;
JFS file system;
Network file systems library;
Network file system (NFS) server daemon;
NILFS2 file system;
File system notification infrastructure;
Overlay file system;
Diskquota system;
SMB network file system;
DRM display driver;
BPF subsystem;
VLANs driver;
KASAN memory debugging framework;
Memory management;
StackDepot library;
Bluetooth subsystem;
LAPB network protocol;
Network namespace;
Netfilter;
io_uring subsystem;
Control group (cgroup);
DMA mapping infrastructure;
KCSAN framework;
Scheduler infrastructure;
Seccomp subsystem;
Tracing infrastructure;
Workqueue subsystem;
KUnit library;
CAN network layer;
Networking core;
DCCP (Datagram Congestion Control Protocol);
HSR network protocol;
IEEE802154.4 network protocol;
IPv4 networking;
IPv6 networking;
MAC80211 subsystem;
Multipath TCP;
NET/ROM layer;
Packet sockets;
RDS protocol;
Network traffic control;
SCTP protocol;
SMC sockets;
TIPC protocol;
Wireless networking;
eXpress Data Path;
SELinux security module;
ALSA framework;
Intel ASoC drivers;
SOF drivers; (CVE-2024-56712, CVE-2024-56761, CVE-2025-21661, CVE-2024-56565, CVE-2024-57804, CVE-2024-57887, CVE-2025-21642, CVE-2024-56779, CVE-2025-21656, CVE-2024-57890, CVE-2024-36476, CVE-2024-57843, CVE-2024-56594, CVE-2024-41932, CVE-2025-21653, CVE-2024-56567, CVE-2024-56665, CVE-2024-54191, CVE-2024-57893, CVE-2024-57932, CVE-2024-56656, CVE-2024-57945, CVE-2024-57931, CVE-2024-56599, CVE-2024-57897, CVE-2024-57903, CVE-2024-57918, CVE-2024-57795, CVE-2024-56662, CVE-2025-21639, CVE-2024-55881, CVE-2024-57889, CVE-2024-57884, CVE-2024-57934, CVE-2024-39282, CVE-2024-56718, CVE-2024-56644, CVE-2024-56760, CVE-2024-43098, CVE-2024-47143, CVE-2024-55642, CVE-2024-56634, CVE-2024-56564, CVE-2024-56768, CVE-2024-56649, CVE-2024-57919, CVE-2024-56620, CVE-2024-56625, CVE-2024-56655, CVE-2024-56772, CVE-2025-21637, CVE-2024-56617, CVE-2024-57879, CVE-2024-56715, CVE-2024-56550, CVE-2024-50051, CVE-2024-56673, CVE-2024-51729, CVE-2025-21664,…

Record: USN-7381-1
Updated: 2026-11-02

OSVUSN-7382-1 No score

linux-oem-6.11 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
MIPS architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
x86 architecture;
Block layer subsystem;
Compute Acceleration Framework;
ACPI drivers;
Drivers core;
Ublk userspace block driver;
Virtio block driver;
Bluetooth drivers;
Buffer Sharing and Synchronization framework;
DMA engine subsystem;
EFI core;
GPIO subsystem;
GPU drivers;
HID subsystem;
Microsoft Hyper-V drivers;
Hardware monitoring drivers;
I3C subsystem;
IIO ADC drivers;
IIO subsystem;
InfiniBand drivers;
IOMMU subsystem;
LED subsystem;
Multiple devices driver;
Media drivers;
Microchip PCI driver;
MTD block device drivers;
Network drivers;
Mellanox network drivers;
STMicroelectronics network drivers;
NVME drivers;
PCI subsystem;
PHY drivers;
Pin controllers subsystem;
x86 platform drivers;
i.MX PM domains;
Power supply drivers;
Voltage and Current Regulator drivers;
SCSI subsystem;
i.MX SoC drivers;
SPI subsystem;
UFS subsystem;
USB Gadget drivers;
TDX Guest driver;
AFS file system;
BTRFS file system;
Ceph distributed file system;
File systems infrastructure;
F2FS file system;
JFFS2 file system;
JFS file system;
Network file systems library;
Network file system (NFS) server daemon;
NILFS2 file system;
File system notification infrastructure;
Overlay file system;
Diskquota system;
SMB network file system;
DRM display driver;
BPF subsystem;
VLANs driver;
KASAN memory debugging framework;
Memory management;
StackDepot library;
Bluetooth subsystem;
LAPB network protocol;
Netfilter;
io_uring subsystem;
Control group (cgroup);
DMA mapping infrastructure;
KCSAN framework;
Scheduler infrastructure;
Seccomp subsystem;
Tracing infrastructure;
Workqueue subsystem;
KUnit library;
CAN network layer;
Networking core;
DCCP (Datagram Congestion Control Protocol);
HSR network protocol;
IEEE802154.4 network protocol;
IPv4 networking;
IPv6 networking;
MAC80211 subsystem;
Multipath TCP;
NET/ROM layer;
Packet sockets;
RDS protocol;
Network traffic control;
SCTP protocol;
SMC sockets;
TIPC protocol;
Wireless networking;
eXpress Data Path;
SELinux security module;
ALSA framework;
Intel ASoC drivers;
SOF drivers; (CVE-2024-47794, CVE-2025-21653, CVE-2024-55642, CVE-2024-56580, CVE-2024-36476, CVE-2024-56623, CVE-2024-56773, CVE-2024-48873, CVE-2024-47141, CVE-2024-57910, CVE-2024-56759, CVE-2024-54460, CVE-2024-57839, CVE-2024-56625, CVE-2024-55916, CVE-2025-21664, CVE-2025-21652, CVE-2024-56624, CVE-2024-56574, CVE-2024-50051, CVE-2025-21655, CVE-2024-56578, CVE-2024-56782, CVE-2024-57939, CVE-2024-57935, CVE-2024-56647, CVE-2024-57905, CVE-2024-57921, CVE-2024-56660, CVE-2025-21650, CVE-2025-21631, CVE-2024-56642, CVE-2024-56552, CVE-2024-57934, CVE-2024-56621, CVE-2024-57881, CVE-2024-41932, CVE-2024-56770, CVE-2024-57897, CVE-2024-56785, CVE-2024-56664, CVE-2024-57945, CVE-2024-57938, CVE-2024-56636, CVE-2024-56572, CVE-2024-43098, CVE-2024-56760, CVE-2024-57916, CVE-2024-56714, CVE-2025-21660, CVE-2024-57906, CVE-2025-21638, CVE-2024-53687, CVE-2024-56652, CVE-2024-51729, CVE-2024-49571, CVE-2024-57883, CVE-2024-54191, CVE-2024-56712, CVE-2024-49568, CVE-2024-57932, CVE-2024-57893, CVE-2024-56645, CVE-2024-56719, CVE-2024-56641, CVE-2024-57802, CVE-2024-56775, CVE-2024-56627, CVE-2024-56638, CVE-2024-57929, CVE-2024-56615, CVE-2024-56566, CVE-2024-56620, CVE-2024-56577, CVE-2025-21656, CVE-2024-57887, CVE-2024-52319, CVE-2024-56657, CVE-2024-57872,…

Record: USN-7382-1
Updated: 2026-11-02

Affected products

linux

Affected packages

Affected packages
Package	Affected	Fixed
`kernel` Mageia:9 From an advisory covering 202 CVEs	before 6.6.74-1.mga9	6.6.74-1.mga9
`kmod-virtualbox` Mageia:9 From an advisory covering 202 CVEs	before 7.0.24-64.mga9	7.0.24-64.mga9
`kmod-xtables-addons` Mageia:9 From an advisory covering 202 CVEs	before 3.24-70.mga9	3.24-70.mga9
`dwarves` Mageia:9 From an advisory covering 202 CVEs	before 1.29-1.mga9	1.29-1.mga9
`kernel-linus` Mageia:9 From an advisory covering 202 CVEs	before 6.6.74-1.mga9	6.6.74-1.mga9
`kernel` openEuler:24.03-LTS From an advisory covering 22 CVEs	before 6.6.0-79.0.0.72.oe2403	6.6.0-79.0.0.72.oe2403
`kernel` openEuler:24.03-LTS-SP1 From an advisory covering 22 CVEs	before 6.6.0-79.0.0.84.oe2403sp1	6.6.0-79.0.0.84.oe2403sp1
`kernel` openEuler:20.03-LTS-SP4 From an advisory covering 27 CVEs	before 4.19.90-2503.3.0.0319.oe2003sp4	4.19.90-2503.3.0.0319.oe2003sp4
`kernel` openEuler:22.03-LTS-SP3 From an advisory covering 14 CVEs	before 5.10.0-254.0.0.157.oe2203sp3	5.10.0-254.0.0.157.oe2203sp3
`kernel` openEuler:22.03-LTS-SP4 From an advisory covering 13 CVEs	before 5.10.0-254.0.0.158.oe2203sp4	5.10.0-254.0.0.158.oe2203sp4

Show 290 moreShow less

Affected packages
Package	Affected	Fixed
`kernel-64k-debug-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-64k-debug-devel` Red Hat:enterprise_linux:9::appstream From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-64k-debug-devel-matched` Red Hat:enterprise_linux:9::appstream From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-64k-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-64k-devel` Red Hat:enterprise_linux:9::appstream From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-64k-devel-matched` Red Hat:enterprise_linux:9::appstream From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-debug-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-debug-devel` Red Hat:enterprise_linux:9::appstream From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-debug-devel-matched` Red Hat:enterprise_linux:9::appstream From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-debuginfo-common-aarch64` Red Hat:enterprise_linux:9::appstream From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-debuginfo-common-ppc64le` Red Hat:enterprise_linux:9::appstream From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-debuginfo-common-s390x` Red Hat:enterprise_linux:9::appstream From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-debuginfo-common-x86_64` Red Hat:enterprise_linux:9::appstream From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-devel` Red Hat:enterprise_linux:9::appstream From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-devel-matched` Red Hat:enterprise_linux:9::appstream From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-doc` Red Hat:enterprise_linux:9::appstream From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-rt-64k-debug-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-rt-64k-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-rt-debug-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-rt-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-tools-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-zfcpdump-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-zfcpdump-devel` Red Hat:enterprise_linux:9::appstream From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-zfcpdump-devel-matched` Red Hat:enterprise_linux:9::appstream From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`libperf-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`perf` Red Hat:enterprise_linux:9::appstream From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`perf-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`python3-perf` Red Hat:enterprise_linux:9::appstream From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`python3-perf-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`rtla` Red Hat:enterprise_linux:9::appstream From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`rv` Red Hat:enterprise_linux:9::appstream From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel` Red Hat:enterprise_linux:9::baseos From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-64k` Red Hat:enterprise_linux:9::baseos From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-64k-core` Red Hat:enterprise_linux:9::baseos From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-64k-debug` Red Hat:enterprise_linux:9::baseos From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-64k-debug-core` Red Hat:enterprise_linux:9::baseos From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-64k-debug-debuginfo` Red Hat:enterprise_linux:9::baseos From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-64k-debug-modules` Red Hat:enterprise_linux:9::baseos From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-64k-debug-modules-core` Red Hat:enterprise_linux:9::baseos From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-64k-debug-modules-extra` Red Hat:enterprise_linux:9::baseos From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-64k-debuginfo` Red Hat:enterprise_linux:9::baseos From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-64k-modules` Red Hat:enterprise_linux:9::baseos From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-64k-modules-core` Red Hat:enterprise_linux:9::baseos From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-64k-modules-extra` Red Hat:enterprise_linux:9::baseos From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-abi-stablelists` Red Hat:enterprise_linux:9::baseos From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-core` Red Hat:enterprise_linux:9::baseos From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-debug` Red Hat:enterprise_linux:9::baseos From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-debug-core` Red Hat:enterprise_linux:9::baseos From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-debug-debuginfo` Red Hat:enterprise_linux:9::baseos From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-debug-modules` Red Hat:enterprise_linux:9::baseos From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-debug-modules-core` Red Hat:enterprise_linux:9::baseos From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-debug-modules-extra` Red Hat:enterprise_linux:9::baseos From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-debug-uki-virt` Red Hat:enterprise_linux:9::baseos From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-debuginfo` Red Hat:enterprise_linux:9::baseos From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-debuginfo-common-aarch64` Red Hat:enterprise_linux:9::baseos From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-debuginfo-common-ppc64le` Red Hat:enterprise_linux:9::baseos From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-debuginfo-common-s390x` Red Hat:enterprise_linux:9::baseos From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-debuginfo-common-x86_64` Red Hat:enterprise_linux:9::baseos From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-modules` Red Hat:enterprise_linux:9::baseos From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-modules-core` Red Hat:enterprise_linux:9::baseos From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-modules-extra` Red Hat:enterprise_linux:9::baseos From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-rt-64k-debug-debuginfo` Red Hat:enterprise_linux:9::baseos From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-rt-64k-debuginfo` Red Hat:enterprise_linux:9::baseos From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-rt-debug-debuginfo` Red Hat:enterprise_linux:9::baseos From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-rt-debuginfo` Red Hat:enterprise_linux:9::baseos From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-tools` Red Hat:enterprise_linux:9::baseos From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-tools-debuginfo` Red Hat:enterprise_linux:9::baseos From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-tools-libs` Red Hat:enterprise_linux:9::baseos From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-uki-virt` Red Hat:enterprise_linux:9::baseos From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-uki-virt-addons` Red Hat:enterprise_linux:9::baseos From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-zfcpdump` Red Hat:enterprise_linux:9::baseos From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-zfcpdump-core` Red Hat:enterprise_linux:9::baseos From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-zfcpdump-debuginfo` Red Hat:enterprise_linux:9::baseos From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-zfcpdump-modules` Red Hat:enterprise_linux:9::baseos From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-zfcpdump-modules-core` Red Hat:enterprise_linux:9::baseos From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-zfcpdump-modules-extra` Red Hat:enterprise_linux:9::baseos From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`libperf-debuginfo` Red Hat:enterprise_linux:9::baseos From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`perf-debuginfo` Red Hat:enterprise_linux:9::baseos From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`python3-perf-debuginfo` Red Hat:enterprise_linux:9::baseos From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-64k-debug-debuginfo` Red Hat:enterprise_linux:9::crb From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-64k-debuginfo` Red Hat:enterprise_linux:9::crb From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-debug-debuginfo` Red Hat:enterprise_linux:9::crb From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-debuginfo` Red Hat:enterprise_linux:9::crb From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-debuginfo-common-aarch64` Red Hat:enterprise_linux:9::crb From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-debuginfo-common-ppc64le` Red Hat:enterprise_linux:9::crb From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-debuginfo-common-s390x` Red Hat:enterprise_linux:9::crb From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-debuginfo-common-x86_64` Red Hat:enterprise_linux:9::crb From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-rt-64k-debug-debuginfo` Red Hat:enterprise_linux:9::crb From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-rt-64k-debuginfo` Red Hat:enterprise_linux:9::crb From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-rt-debug-debuginfo` Red Hat:enterprise_linux:9::crb From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-rt-debuginfo` Red Hat:enterprise_linux:9::crb From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-tools-debuginfo` Red Hat:enterprise_linux:9::crb From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-tools-libs-devel` Red Hat:enterprise_linux:9::crb From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-coco` SUSE:Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6 From an advisory covering 343 CVEs	before 6.4.0-15061.12.coco15sp6.1	6.4.0-15061.12.coco15sp6.1
`kernel-coco_debug` SUSE:Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6 From an advisory covering 343 CVEs	before 6.4.0-15061.12.coco15sp6.1	6.4.0-15061.12.coco15sp6.1
`kernel-source-coco` SUSE:Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6 From an advisory covering 343 CVEs	before 6.4.0-15061.12.coco15sp6.1	6.4.0-15061.12.coco15sp6.1
`kernel-syms-coco` SUSE:Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6 From an advisory covering 343 CVEs	before 6.4.0-15061.12.coco15sp6.1	6.4.0-15061.12.coco15sp6.1
`kernel-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP6 From an advisory covering 248 CVEs	before 6.4.0-150600.8.26.1	6.4.0-150600.8.26.1
`kernel-source-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP6 From an advisory covering 248 CVEs	before 6.4.0-150600.8.26.1	6.4.0-150600.8.26.1
`kernel-syms-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP6 From an advisory covering 248 CVEs	before 6.4.0-150600.8.26.1	6.4.0-150600.8.26.1
`kernel-azure` openSUSE:Leap 15.6 From an advisory covering 248 CVEs	before 6.4.0-150600.8.26.1	6.4.0-150600.8.26.1
`kernel-source-azure` openSUSE:Leap 15.6 From an advisory covering 248 CVEs	before 6.4.0-150600.8.26.1	6.4.0-150600.8.26.1
`kernel-syms-azure` openSUSE:Leap 15.6 From an advisory covering 248 CVEs	before 6.4.0-150600.8.26.1	6.4.0-150600.8.26.1
`kernel-64kb` SUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 257 CVEs	before 6.4.0-150600.23.38.1	6.4.0-150600.23.38.1
`kernel-default` SUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 257 CVEs	before 6.4.0-150600.23.38.1	6.4.0-150600.23.38.1
`kernel-default-base` SUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 257 CVEs	before 6.4.0-150600.23.38.1.150600.12.16.2	6.4.0-150600.23.38.1.150600.12.16.2
`kernel-source` SUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 257 CVEs	before 6.4.0-150600.23.38.1	6.4.0-150600.23.38.1
`kernel-zfcpdump` SUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 257 CVEs	before 6.4.0-150600.23.38.1	6.4.0-150600.23.38.1
`kernel-docs` SUSE:Linux Enterprise Module for Development Tools 15 SP6 From an advisory covering 257 CVEs	before 6.4.0-150600.23.38.1	6.4.0-150600.23.38.1
`kernel-obs-build` SUSE:Linux Enterprise Module for Development Tools 15 SP6 From an advisory covering 257 CVEs	before 6.4.0-150600.23.38.1	6.4.0-150600.23.38.1
`kernel-source` SUSE:Linux Enterprise Module for Development Tools 15 SP6 From an advisory covering 257 CVEs	before 6.4.0-150600.23.38.1	6.4.0-150600.23.38.1
`kernel-syms` SUSE:Linux Enterprise Module for Development Tools 15 SP6 From an advisory covering 257 CVEs	before 6.4.0-150600.23.38.1	6.4.0-150600.23.38.1
`kernel-default` SUSE:Linux Enterprise Module for Legacy 15 SP6 From an advisory covering 257 CVEs	before 6.4.0-150600.23.38.1	6.4.0-150600.23.38.1
`kernel-default` SUSE:Linux Enterprise Live Patching 15 SP6 From an advisory covering 257 CVEs	before 6.4.0-150600.23.38.1	6.4.0-150600.23.38.1
`kernel-livepatch-SLE15-SP6_Update_8` SUSE:Linux Enterprise Live Patching 15 SP6 From an advisory covering 257 CVEs	before 1-150600.13.3.2	1-150600.13.3.2
`kernel-default` SUSE:Linux Enterprise High Availability Extension 15 SP6 From an advisory covering 257 CVEs	before 6.4.0-150600.23.38.1	6.4.0-150600.23.38.1
`kernel-default` SUSE:Linux Enterprise Workstation Extension 15 SP6 From an advisory covering 257 CVEs	before 6.4.0-150600.23.38.1	6.4.0-150600.23.38.1
`dtb-aarch64` openSUSE:Leap 15.6 From an advisory covering 257 CVEs	before 6.4.0-150600.23.38.1	6.4.0-150600.23.38.1
`kernel-64kb` openSUSE:Leap 15.6 From an advisory covering 257 CVEs	before 6.4.0-150600.23.38.1	6.4.0-150600.23.38.1
`kernel-debug` openSUSE:Leap 15.6 From an advisory covering 257 CVEs	before 6.4.0-150600.23.38.1	6.4.0-150600.23.38.1
`kernel-default` openSUSE:Leap 15.6 From an advisory covering 257 CVEs	before 6.4.0-150600.23.38.1	6.4.0-150600.23.38.1
`kernel-default-base` openSUSE:Leap 15.6 From an advisory covering 257 CVEs	before 6.4.0-150600.23.38.1.150600.12.16.2	6.4.0-150600.23.38.1.150600.12.16.2
`kernel-docs` openSUSE:Leap 15.6 From an advisory covering 257 CVEs	before 6.4.0-150600.23.38.1	6.4.0-150600.23.38.1
`kernel-kvmsmall` openSUSE:Leap 15.6 From an advisory covering 257 CVEs	before 6.4.0-150600.23.38.1	6.4.0-150600.23.38.1
`kernel-obs-build` openSUSE:Leap 15.6 From an advisory covering 257 CVEs	before 6.4.0-150600.23.38.1	6.4.0-150600.23.38.1
`kernel-obs-qa` openSUSE:Leap 15.6 From an advisory covering 257 CVEs	before 6.4.0-150600.23.38.1	6.4.0-150600.23.38.1
`kernel-source` openSUSE:Leap 15.6 From an advisory covering 257 CVEs	before 6.4.0-150600.23.38.1	6.4.0-150600.23.38.1
`kernel-syms` openSUSE:Leap 15.6 From an advisory covering 257 CVEs	before 6.4.0-150600.23.38.1	6.4.0-150600.23.38.1
`kernel-zfcpdump` openSUSE:Leap 15.6 From an advisory covering 257 CVEs	before 6.4.0-150600.23.38.1	6.4.0-150600.23.38.1
`kernel-rt` SUSE:Linux Enterprise Micro 5.3 From an advisory covering 28 CVEs	before 5.14.21-150400.15.109.1	5.14.21-150400.15.109.1
`kernel-source-rt` SUSE:Linux Enterprise Micro 5.3 From an advisory covering 28 CVEs	before 5.14.21-150400.15.109.1	5.14.21-150400.15.109.1
`kernel-rt` SUSE:Linux Enterprise Micro 5.4 From an advisory covering 28 CVEs	before 5.14.21-150400.15.109.1	5.14.21-150400.15.109.1
`kernel-source-rt` SUSE:Linux Enterprise Micro 5.4 From an advisory covering 28 CVEs	before 5.14.21-150400.15.109.1	5.14.21-150400.15.109.1
`kernel-rt` SUSE:Linux Enterprise Micro 5.5 From an advisory covering 94 CVEs	before 5.14.21-150500.13.85.1	5.14.21-150500.13.85.1
`kernel-source-rt` SUSE:Linux Enterprise Micro 5.5 From an advisory covering 94 CVEs	before 5.14.21-150500.13.85.1	5.14.21-150500.13.85.1
`kernel-livepatch-SLE15-SP6-RT_Update_8` SUSE:Linux Enterprise Live Patching 15 SP6 From an advisory covering 256 CVEs	before 1-150600.1.3.1	1-150600.1.3.1
`kernel-rt` SUSE:Real Time Module 15 SP6 From an advisory covering 256 CVEs	before 6.4.0-150600.10.26.1	6.4.0-150600.10.26.1
`kernel-rt_debug` SUSE:Real Time Module 15 SP6 From an advisory covering 256 CVEs	before 6.4.0-150600.10.26.1	6.4.0-150600.10.26.1
`kernel-source-rt` SUSE:Real Time Module 15 SP6 From an advisory covering 256 CVEs	before 6.4.0-150600.10.26.1	6.4.0-150600.10.26.1
`kernel-syms-rt` SUSE:Real Time Module 15 SP6 From an advisory covering 256 CVEs	before 6.4.0-150600.10.26.1	6.4.0-150600.10.26.1
`kernel-rt` openSUSE:Leap 15.6 From an advisory covering 256 CVEs	before 6.4.0-150600.10.26.1	6.4.0-150600.10.26.1
`kernel-rt_debug` openSUSE:Leap 15.6 From an advisory covering 256 CVEs	before 6.4.0-150600.10.26.1	6.4.0-150600.10.26.1
`kernel-source-rt` openSUSE:Leap 15.6 From an advisory covering 256 CVEs	before 6.4.0-150600.10.26.1	6.4.0-150600.10.26.1
`kernel-syms-rt` openSUSE:Leap 15.6 From an advisory covering 256 CVEs	before 6.4.0-150600.10.26.1	6.4.0-150600.10.26.1
`kernel-default` SUSE:Linux Enterprise Micro 5.3 From an advisory covering 28 CVEs	before 5.14.21-150400.24.150.1	5.14.21-150400.24.150.1
`kernel-default-base` SUSE:Linux Enterprise Micro 5.3 From an advisory covering 28 CVEs	before 5.14.21-150400.24.150.1.150400.24.74.1	5.14.21-150400.24.150.1.150400.24.74.1
`kernel-default` SUSE:Linux Enterprise Micro 5.4 From an advisory covering 28 CVEs	before 5.14.21-150400.24.150.1	5.14.21-150400.24.150.1
`kernel-default-base` SUSE:Linux Enterprise Micro 5.4 From an advisory covering 28 CVEs	before 5.14.21-150400.24.150.1.150400.24.74.1	5.14.21-150400.24.150.1.150400.24.74.1
`kernel-default` SUSE:Linux Enterprise Live Patching 15 SP4 From an advisory covering 28 CVEs	before 5.14.21-150400.24.150.1	5.14.21-150400.24.150.1
`kernel-livepatch-SLE15-SP4_Update_36` SUSE:Linux Enterprise Live Patching 15 SP4 From an advisory covering 28 CVEs	before 1-150400.9.3.1	1-150400.9.3.1
`kernel-default` SUSE:Linux Enterprise High Availability Extension 15 SP4 From an advisory covering 28 CVEs	before 5.14.21-150400.24.150.1	5.14.21-150400.24.150.1
`kernel-64kb` SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 28 CVEs	before 5.14.21-150400.24.150.1	5.14.21-150400.24.150.1
`kernel-default` SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 28 CVEs	before 5.14.21-150400.24.150.1	5.14.21-150400.24.150.1
`kernel-default-base` SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 28 CVEs	before 5.14.21-150400.24.150.1.150400.24.74.1	5.14.21-150400.24.150.1.150400.24.74.1
`kernel-docs` SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 28 CVEs	before 5.14.21-150400.24.150.1	5.14.21-150400.24.150.1
`kernel-obs-build` SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 28 CVEs	before 5.14.21-150400.24.150.1	5.14.21-150400.24.150.1
`kernel-source` SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 28 CVEs	before 5.14.21-150400.24.150.1	5.14.21-150400.24.150.1
`kernel-syms` SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 28 CVEs	before 5.14.21-150400.24.150.1	5.14.21-150400.24.150.1
`kernel-64kb` SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 28 CVEs	before 5.14.21-150400.24.150.1	5.14.21-150400.24.150.1
`kernel-default` SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 28 CVEs	before 5.14.21-150400.24.150.1	5.14.21-150400.24.150.1
`kernel-default-base` SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 28 CVEs	before 5.14.21-150400.24.150.1.150400.24.74.1	5.14.21-150400.24.150.1.150400.24.74.1
`kernel-docs` SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 28 CVEs	before 5.14.21-150400.24.150.1	5.14.21-150400.24.150.1
`kernel-obs-build` SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 28 CVEs	before 5.14.21-150400.24.150.1	5.14.21-150400.24.150.1
`kernel-source` SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 28 CVEs	before 5.14.21-150400.24.150.1	5.14.21-150400.24.150.1
`kernel-syms` SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 28 CVEs	before 5.14.21-150400.24.150.1	5.14.21-150400.24.150.1
`kernel-64kb` SUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 28 CVEs	before 5.14.21-150400.24.150.1	5.14.21-150400.24.150.1
`kernel-default` SUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 28 CVEs	before 5.14.21-150400.24.150.1	5.14.21-150400.24.150.1
`kernel-default-base` SUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 28 CVEs	before 5.14.21-150400.24.150.1.150400.24.74.1	5.14.21-150400.24.150.1.150400.24.74.1
`kernel-docs` SUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 28 CVEs	before 5.14.21-150400.24.150.1	5.14.21-150400.24.150.1
`kernel-obs-build` SUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 28 CVEs	before 5.14.21-150400.24.150.1	5.14.21-150400.24.150.1
`kernel-source` SUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 28 CVEs	before 5.14.21-150400.24.150.1	5.14.21-150400.24.150.1
`kernel-syms` SUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 28 CVEs	before 5.14.21-150400.24.150.1	5.14.21-150400.24.150.1
`kernel-zfcpdump` SUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 28 CVEs	before 5.14.21-150400.24.150.1	5.14.21-150400.24.150.1
`kernel-default` SUSE:Linux Enterprise Server for SAP Applications 15 SP4 From an advisory covering 28 CVEs	before 5.14.21-150400.24.150.1	5.14.21-150400.24.150.1
`kernel-default-base` SUSE:Linux Enterprise Server for SAP Applications 15 SP4 From an advisory covering 28 CVEs	before 5.14.21-150400.24.150.1.150400.24.74.1	5.14.21-150400.24.150.1.150400.24.74.1
`kernel-docs` SUSE:Linux Enterprise Server for SAP Applications 15 SP4 From an advisory covering 28 CVEs	before 5.14.21-150400.24.150.1	5.14.21-150400.24.150.1
`kernel-obs-build` SUSE:Linux Enterprise Server for SAP Applications 15 SP4 From an advisory covering 28 CVEs	before 5.14.21-150400.24.150.1	5.14.21-150400.24.150.1
`kernel-source` SUSE:Linux Enterprise Server for SAP Applications 15 SP4 From an advisory covering 28 CVEs	before 5.14.21-150400.24.150.1	5.14.21-150400.24.150.1
`kernel-syms` SUSE:Linux Enterprise Server for SAP Applications 15 SP4 From an advisory covering 28 CVEs	before 5.14.21-150400.24.150.1	5.14.21-150400.24.150.1
`kernel-default` SUSE:Manager Proxy 4.3 From an advisory covering 28 CVEs	before 5.14.21-150400.24.150.1	5.14.21-150400.24.150.1
`kernel-default-base` SUSE:Manager Proxy 4.3 From an advisory covering 28 CVEs	before 5.14.21-150400.24.150.1.150400.24.74.1	5.14.21-150400.24.150.1.150400.24.74.1
`kernel-source` SUSE:Manager Proxy 4.3 From an advisory covering 28 CVEs	before 5.14.21-150400.24.150.1	5.14.21-150400.24.150.1
`kernel-syms` SUSE:Manager Proxy 4.3 From an advisory covering 28 CVEs	before 5.14.21-150400.24.150.1	5.14.21-150400.24.150.1
`kernel-default` SUSE:Manager Server 4.3 From an advisory covering 28 CVEs	before 5.14.21-150400.24.150.1	5.14.21-150400.24.150.1
`kernel-default-base` SUSE:Manager Server 4.3 From an advisory covering 28 CVEs	before 5.14.21-150400.24.150.1.150400.24.74.1	5.14.21-150400.24.150.1.150400.24.74.1
`kernel-source` SUSE:Manager Server 4.3 From an advisory covering 28 CVEs	before 5.14.21-150400.24.150.1	5.14.21-150400.24.150.1
`kernel-syms` SUSE:Manager Server 4.3 From an advisory covering 28 CVEs	before 5.14.21-150400.24.150.1	5.14.21-150400.24.150.1
`kernel-zfcpdump` SUSE:Manager Server 4.3 From an advisory covering 28 CVEs	before 5.14.21-150400.24.150.1	5.14.21-150400.24.150.1
`kernel-default` SUSE:Linux Enterprise Micro 5.5 From an advisory covering 94 CVEs	before 5.14.21-150500.55.94.1	5.14.21-150500.55.94.1
`kernel-default-base` SUSE:Linux Enterprise Micro 5.5 From an advisory covering 94 CVEs	before 5.14.21-150500.55.94.1.150500.6.43.1	5.14.21-150500.55.94.1.150500.6.43.1
`kernel-source` SUSE:Linux Enterprise Micro 5.5 From an advisory covering 94 CVEs	before 5.14.21-150500.55.94.1	5.14.21-150500.55.94.1
`kernel-default` SUSE:Linux Enterprise Live Patching 15 SP5 From an advisory covering 94 CVEs	before 5.14.21-150500.55.94.1	5.14.21-150500.55.94.1
`kernel-livepatch-SLE15-SP5_Update_23` SUSE:Linux Enterprise Live Patching 15 SP5 From an advisory covering 94 CVEs	before 1-150500.11.3.1	1-150500.11.3.1
`kernel-64kb` SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS From an advisory covering 94 CVEs	before 5.14.21-150500.55.94.1	5.14.21-150500.55.94.1
`kernel-default` SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS From an advisory covering 94 CVEs	before 5.14.21-150500.55.94.1	5.14.21-150500.55.94.1
`kernel-default-base` SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS From an advisory covering 94 CVEs	before 5.14.21-150500.55.94.1.150500.6.43.1	5.14.21-150500.55.94.1.150500.6.43.1
`kernel-docs` SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS From an advisory covering 94 CVEs	before 5.14.21-150500.55.94.1	5.14.21-150500.55.94.1
`kernel-obs-build` SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS From an advisory covering 94 CVEs	before 5.14.21-150500.55.94.1	5.14.21-150500.55.94.1
`kernel-source` SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS From an advisory covering 94 CVEs	before 5.14.21-150500.55.94.1	5.14.21-150500.55.94.1
`kernel-syms` SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS From an advisory covering 94 CVEs	before 5.14.21-150500.55.94.1	5.14.21-150500.55.94.1
`kernel-64kb` SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS From an advisory covering 94 CVEs	before 5.14.21-150500.55.94.1	5.14.21-150500.55.94.1
`kernel-default` SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS From an advisory covering 94 CVEs	before 5.14.21-150500.55.94.1	5.14.21-150500.55.94.1
`kernel-default-base` SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS From an advisory covering 94 CVEs	before 5.14.21-150500.55.94.1.150500.6.43.1	5.14.21-150500.55.94.1.150500.6.43.1
`kernel-docs` SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS From an advisory covering 94 CVEs	before 5.14.21-150500.55.94.1	5.14.21-150500.55.94.1
`kernel-obs-build` SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS From an advisory covering 94 CVEs	before 5.14.21-150500.55.94.1	5.14.21-150500.55.94.1
`linux-hwe-edge` Ubuntu:16.04:LTS	All versions, plus listed versions 4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1 Show 18 moreShow less 4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1	None known
`linux-aws-5.0` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30	None known
`linux-aws-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1 Show 5 moreShow less 5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37	None known
`linux-azure` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9 Show 39 moreShow less 4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38	None known
`linux-azure-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1 Show 11 moreShow less 5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36	None known
`linux-azure-edge` Ubuntu:18.04:LTS	All versions, plus listed versions 4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2	None known
`linux-gcp` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8 Show 33 moreShow less 4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35	None known
`linux-gcp-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1 Show 8 moreShow less 5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1	None known
`linux-gke-4.15` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38 Show 28 moreShow less 4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84	None known
`linux-gke-5.4` Ubuntu:18.04:LTS	All versions, plus listed versions 5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.1 Show 32 moreShow less 5.4.0-1033.35~18.04.15.4.0-1035.37~18.04.15.4.0-1036.38~18.04.15.4.0-1037.39~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1042.44~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.15.4.0-1052.55~18.04.15.4.0-1053.56~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1071.76~18.04.35.4.0-1072.77~18.04.15.4.0-1074.79~18.04.15.4.0-1076.82~18.04.15.4.0-1078.84~18.04.15.4.0-1080.86~18.04.1	None known
`linux-gkeop-5.4` Ubuntu:18.04:LTS	All versions, plus listed versions 5.4.0-1001.15.4.0-1003.35.4.0-1004.55.4.0-1005.65.4.0-1007.8~18.04.1 Show 32 moreShow less 5.4.0-1008.9~18.04.15.4.0-1009.10~18.04.15.4.0-1010.11~18.04.15.4.0-1011.12~18.04.25.4.0-1012.13~18.04.15.4.0-1013.14~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1016.17~18.04.15.4.0-1018.19~18.04.15.4.0-1021.22~18.04.15.4.0-1022.23~18.04.15.4.0-1023.24~18.04.15.4.0-1024.25~18.04.15.4.0-1025.26~18.04.15.4.0-1026.27~18.04.15.4.0-1027.28~18.04.15.4.0-1029.30~18.04.25.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1033.34~18.04.15.4.0-1034.35~18.04.15.4.0-1036.37~18.04.15.4.0-1037.38~18.04.15.4.0-1038.39~18.04.15.4.0-1039.40~18.04.15.4.0-1040.41~18.04.15.4.0-1043.44~18.04.15.4.0-1046.48~18.04.15.4.0-1048.51~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.1	None known
`linux-hwe` Ubuntu:18.04:LTS	All versions, plus listed versions 4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1 Show 38 moreShow less 4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72	None known
`linux-hwe-edge` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-15.16~18.04.15.0.0-16.17~18.04.15.0.0-17.18~18.04.15.0.0-19.20~18.04.15.0.0-20.21~18.04.1 Show 5 moreShow less 5.3.0-19.20~18.04.25.3.0-22.24~18.04.15.3.0-23.25~18.04.15.3.0-23.25~18.04.25.3.0-24.26~18.04.2	None known
`linux-oem` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12 Show 45 moreShow less 4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114	None known
`linux-oracle-5.0` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19	None known
`linux-oracle-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1 Show 4 moreShow less 5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1	None known
`linux-aws-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1009.9~20.04.25.11.0-1014.15~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1 Show 7 moreShow less 5.11.0-1020.21~20.04.25.11.0-1021.22~20.04.25.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1	None known
`linux-aws-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1008.9~20.04.25.13.0-1011.12~20.04.15.13.0-1012.13~20.04.15.13.0-1014.15~20.04.15.13.0-1017.19~20.04.1 Show 8 moreShow less 5.13.0-1019.21~20.04.15.13.0-1021.23~20.04.25.13.0-1022.24~20.04.15.13.0-1023.25~20.04.15.13.0-1025.27~20.04.15.13.0-1028.31~20.04.15.13.0-1029.32~20.04.15.13.0-1031.35~20.04.1	None known
`linux-aws-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1041.43~20.04.15.8.0-1042.44~20.04.1	None known
`linux-azure-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1007.7~20.04.25.11.0-1012.13~20.04.15.11.0-1013.14~20.04.15.11.0-1015.16~20.04.15.11.0-1017.18~20.04.1 Show 8 moreShow less 5.11.0-1019.20~20.04.15.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.2	None known
`linux-azure-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1009.10~20.04.25.13.0-1012.14~20.04.15.13.0-1013.15~20.04.15.13.0-1014.16~20.04.15.13.0-1017.19~20.04.1 Show 7 moreShow less 5.13.0-1021.24~20.04.15.13.0-1022.26~20.04.15.13.0-1023.27~20.04.15.13.0-1025.29~20.04.15.13.0-1028.33~20.04.15.13.0-1029.34~20.04.15.13.0-1031.37~20.04.1	None known
`linux-azure-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1033.35~20.04.15.8.0-1036.38~20.04.15.8.0-1039.42~20.04.15.8.0-1040.43~20.04.15.8.0-1041.44~20.04.15.8.0-1042.45~20.04.15.8.0-1043.46~20.04.1	None known
`linux-azure-fde` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-1063.66+cvm2.25.4.0-1063.66+cvm3.25.4.0-1064.67+cvm1.15.4.0-1065.68+cvm2.15.4.0-1067.70+cvm1.1 Show 21 moreShow less 5.4.0-1068.71+cvm1.15.4.0-1069.72+cvm1.15.4.0-1070.73+cvm1.15.4.0-1072.75+cvm1.15.4.0-1073.76+cvm1.15.4.0-1074.77+cvm1.15.4.0-1076.79+cvm1.15.4.0-1078.81+cvm1.15.4.0-1080.83+cvm1.15.4.0-1083.87+cvm1.15.4.0-1085.90+cvm1.15.4.0-1085.90+cvm2.15.4.0-1086.91+cvm1.15.4.0-1089.94+cvm1.25.4.0-1090.95+cvm1.15.4.0-1091.96+cvm1.15.4.0-1092.97+cvm1.15.4.0-1095.101+cvm1.15.4.0-1098.104+cvm1.15.4.0-1100.106+cvm1.15.4.0-1103.109+cvm1.1	None known
`linux-gcp-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1009.10~20.04.15.11.0-1014.16~20.04.15.11.0-1017.19~20.04.15.11.0-1018.20~20.04.25.11.0-1020.22~20.04.1 Show 7 moreShow less 5.11.0-1021.23~20.04.15.11.0-1022.24~20.04.15.11.0-1023.25~20.04.15.11.0-1024.26~20.04.15.11.0-1026.29~20.04.15.11.0-1028.32~20.04.15.11.0-1029.33~20.04.3	None known
`linux-gcp-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1008.9~20.04.35.13.0-1012.15~20.04.15.13.0-1013.16~20.04.15.13.0-1015.18~20.04.15.13.0-1019.23~20.04.1 Show 8 moreShow less 5.13.0-1021.25~20.04.15.13.0-1023.28~20.04.15.13.0-1024.29~20.04.15.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1030.36~20.04.15.13.0-1031.37~20.04.15.13.0-1033.40~20.04.1	None known
`linux-gcp-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1032.34~20.04.15.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1039.41	None known
`linux-gke` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-1033.355.4.0-1035.375.4.0-1036.385.4.0-1037.395.4.0-1039.41 Show 45 moreShow less 5.4.0-1041.435.4.0-1042.445.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1065.685.4.0-1066.695.4.0-1067.705.4.0-1068.715.4.0-1071.765.4.0-1072.775.4.0-1074.795.4.0-1076.825.4.0-1078.845.4.0-1080.865.4.0-1081.875.4.0-1083.895.4.0-1084.905.4.0-1086.935.4.0-1087.945.4.0-1090.975.4.0-1091.985.4.0-1094.1015.4.0-1095.1025.4.0-1096.1035.4.0-1097.1045.4.0-1098.1055.4.0-1099.1065.4.0-1100.1075.4.0-1101.1085.4.0-1102.1095.4.0-1103.1105.4.0-1104.111	None known
`linux-gke-5.15` Ubuntu:20.04:LTS	All versions, plus listed versions 5.15.0-1011.14~20.04.15.15.0-1014.17~20.04.15.15.0-1015.18~20.04.15.15.0-1016.19~20.04.15.15.0-1019.23~20.04.1 Show 13 moreShow less 5.15.0-1020.25~20.04.15.15.0-1023.28~20.04.25.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1029.34~20.04.15.15.0-1031.36~20.04.15.15.0-1032.37~20.04.15.15.0-1033.38~20.04.15.15.0-1034.39~20.04.15.15.0-1036.41~20.04.15.15.0-1037.42~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.1	None known
`linux-gkeop` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-1008.95.4.0-1009.105.4.0-1010.115.4.0-1011.125.4.0-1012.13 Show 45 moreShow less 5.4.0-1013.145.4.0-1014.155.4.0-1015.165.4.0-1016.175.4.0-1018.195.4.0-1021.225.4.0-1022.235.4.0-1023.245.4.0-1024.255.4.0-1025.265.4.0-1026.275.4.0-1027.285.4.0-1029.305.4.0-1031.325.4.0-1032.335.4.0-1033.345.4.0-1034.355.4.0-1036.375.4.0-1037.385.4.0-1038.395.4.0-1039.405.4.0-1040.415.4.0-1043.445.4.0-1046.485.4.0-1048.515.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1056.605.4.0-1057.615.4.0-1060.645.4.0-1061.655.4.0-1062.665.4.0-1064.685.4.0-1065.695.4.0-1066.705.4.0-1067.715.4.0-1068.725.4.0-1069.735.4.0-1070.745.4.0-1071.755.4.0-1072.765.4.0-1073.77	None known
`linux-gkeop-5.15` Ubuntu:20.04:LTS	All versions, plus listed versions 5.15.0-1003.5~20.04.25.15.0-1005.7~20.04.15.15.0-1007.10~20.04.15.15.0-1008.12~20.04.15.15.0-1011.15~20.04.2 Show 40 moreShow less 5.15.0-1012.16~20.04.15.15.0-1013.17~20.04.15.15.0-1015.19~20.04.15.15.0-1016.21~20.04.15.15.0-1017.22~20.04.15.15.0-1018.23~20.04.15.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.28~20.04.15.15.0-1024.29~20.04.15.15.0-1025.30~20.04.15.15.0-1026.31~20.04.15.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1030.35~20.04.15.15.0-1031.37~20.04.15.15.0-1032.38~20.04.15.15.0-1033.39~20.04.15.15.0-1034.40~20.04.15.15.0-1035.41~20.04.15.15.0-1036.42~20.04.15.15.0-1037.43~20.04.15.15.0-1038.44~20.04.15.15.0-1039.45~20.04.15.15.0-1040.46~20.04.15.15.0-1043.50~20.04.15.15.0-1044.51~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.15.15.0-1048.55~20.04.15.15.0-1049.56~20.04.15.15.0-1050.57~20.04.15.15.0-1051.58~20.04.15.15.0-1052.59~20.04.15.15.0-1053.60~20.04.15.15.0-1054.61~20.04.15.15.0-1055.62~20.04.1	None known
`linux-hwe-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-22.23~20.04.15.11.0-25.27~20.04.15.11.0-27.29~20.04.15.11.0-34.36~20.04.15.11.0-36.40~20.04.1 Show 7 moreShow less 5.11.0-37.41~20.04.25.11.0-38.42~20.04.15.11.0-40.44~20.04.25.11.0-41.45~20.04.15.11.0-43.47~20.04.25.11.0-44.48~20.04.25.11.0-46.51~20.04.1	None known
`linux-hwe-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-21.21~20.04.15.13.0-22.22~20.04.15.13.0-23.23~20.04.25.13.0-25.26~20.04.15.13.0-27.29~20.04.1 Show 11 moreShow less 5.13.0-28.31~20.04.15.13.0-30.33~20.04.15.13.0-35.40~20.04.15.13.0-37.42~20.04.15.13.0-39.44~20.04.15.13.0-40.45~20.04.15.13.0-41.46~20.04.15.13.0-44.49~20.04.15.13.0-48.54~20.04.15.13.0-51.58~20.04.15.13.0-52.59~20.04.1	None known
`linux-hwe-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-23.24~20.04.15.8.0-25.26~20.04.15.8.0-28.30~20.04.15.8.0-29.31~20.04.15.8.0-31.33~20.04.1 Show 16 moreShow less 5.8.0-33.36~20.04.15.8.0-34.37~20.04.25.8.0-36.40~20.04.15.8.0-38.43~20.04.15.8.0-40.45~20.04.15.8.0-41.46~20.04.15.8.0-43.49~20.04.15.8.0-44.50~20.04.15.8.0-45.51~20.04.15.8.0-48.54~20.04.15.8.0-49.55~20.04.15.8.0-50.56~20.04.15.8.0-53.60~20.04.15.8.0-55.62~20.04.15.8.0-59.66~20.04.15.8.0-63.71~20.04.1	None known
`linux-intel-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1007.75.13.0-1008.85.13.0-1009.95.13.0-1010.105.13.0-1011.115.13.0-1014.155.13.0-1017.19	None known
`linux-oem-5.10` Ubuntu:20.04:LTS	All versions, plus listed versions 5.10.0-1008.95.10.0-1011.125.10.0-1013.145.10.0-1014.155.10.0-1016.17 Show 21 moreShow less 5.10.0-1017.185.10.0-1019.205.10.0-1021.225.10.0-1022.235.10.0-1023.245.10.0-1025.265.10.0-1026.275.10.0-1029.305.10.0-1032.335.10.0-1033.345.10.0-1034.355.10.0-1038.405.10.0-1044.465.10.0-1045.475.10.0-1049.515.10.0-1050.525.10.0-1051.535.10.0-1052.545.10.0-1053.555.10.0-1055.585.10.0-1057.61	None known
`linux-oem-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1009.105.13.0-1010.115.13.0-1012.165.13.0-1014.185.13.0-1017.21 Show 7 moreShow less 5.13.0-1019.235.13.0-1020.245.13.0-1021.255.13.0-1022.265.13.0-1026.325.13.0-1028.355.13.0-1029.36	None known
`linux-oem-5.14` Ubuntu:20.04:LTS	All versions, plus listed versions 5.14.0-1004.45.14.0-1005.55.14.0-1007.75.14.0-1008.85.14.0-1010.10 Show 30 moreShow less 5.14.0-1011.115.14.0-1013.135.14.0-1018.195.14.0-1020.225.14.0-1022.245.14.0-1024.265.14.0-1027.305.14.0-1029.325.14.0-1031.345.14.0-1032.355.14.0-1033.365.14.0-1034.375.14.0-1036.405.14.0-1038.425.14.0-1042.475.14.0-1044.495.14.0-1045.515.14.0-1046.535.14.0-1047.545.14.0-1048.555.14.0-1049.565.14.0-1050.575.14.0-1051.585.14.0-1052.595.14.0-1054.615.14.0-1055.625.14.0-1056.635.14.0-1057.645.14.0-1058.665.14.0-1059.67	None known
`linux-oem-5.6` Ubuntu:20.04:LTS	All versions, plus listed versions 5.6.0-1007.75.6.0-1008.85.6.0-1010.105.6.0-1011.115.6.0-1013.13 Show 24 moreShow less 5.6.0-1017.175.6.0-1018.185.6.0-1020.205.6.0-1021.215.6.0-1023.235.6.0-1026.265.6.0-1027.275.6.0-1028.285.6.0-1031.325.6.0-1032.335.6.0-1033.355.6.0-1034.365.6.0-1035.375.6.0-1036.395.6.0-1039.435.6.0-1042.465.6.0-1047.515.6.0-1048.525.6.0-1050.545.6.0-1052.565.6.0-1053.575.6.0-1054.585.6.0-1055.595.6.0-1056.60	None known
`linux-oracle-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1008.8~20.04.15.11.0-1013.14~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1 Show 7 moreShow less 5.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1	None known
`linux-oracle-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1011.13~20.04.25.13.0-1015.19~20.04.15.13.0-1016.20~20.04.15.13.0-1018.22~20.04.15.13.0-1021.26~20.04.1 Show 7 moreShow less 5.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1028.33~20.04.15.13.0-1030.35~20.04.15.13.0-1033.39~20.04.15.13.0-1034.40~20.04.15.13.0-1036.43~20.04.1	None known
`linux-oracle-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1031.32~20.04.25.8.0-1033.34~20.04.15.8.0-1034.35~20.04.25.8.0-1037.38~20.04.15.8.0-1038.39~20.04.1	None known
`linux-raspi2` Ubuntu:20.04:LTS	All versions, plus listed versions 5.3.0-1007.85.3.0-1014.165.3.0-1015.175.3.0-1017.195.4.0-1004.45.4.0-1006.6	None known
`linux-riscv` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-24.285.4.0-26.305.4.0-27.315.4.0-28.325.4.0-30.34 Show 7 moreShow less 5.4.0-31.355.4.0-33.375.4.0-34.385.4.0-36.415.4.0-37.425.4.0-39.445.4.0-40.45	None known
`linux-riscv-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1015.16~20.04.15.11.0-1017.18~20.04.15.11.0-1018.19~20.04.25.11.0-1020.21~20.04.15.11.0-1021.22~20.04.1 Show 8 moreShow less 5.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1024.25~20.04.15.11.0-1026.28~20.04.15.11.0-1028.31~20.04.15.11.0-1029.32~20.04.15.11.0-1030.345.11.0-1031.35	None known
`linux-riscv-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-14.16~20.04.15.8.0-14.16~20.04.35.8.0-16.18~20.04.15.8.0-17.19~20.04.15.8.0-18.20~20.04.1 Show 5 moreShow less 5.8.0-20.22~20.04.15.8.0-22.24~20.04.15.8.0-25.27~20.04.15.8.0-26.28~20.04.15.8.0-29.31~20.04.1	None known
`linux-allwinner-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1007.7~22.04.15.19.0-1009.9~22.04.15.19.0-1010.10~22.04.15.19.0-1011.11~22.04.15.19.0-1012.12~22.04.15.19.0-1013.13~22.04.15.19.0-1014.14~22.04.15.19.0-1015.15~22.04.1	None known
`linux-aws-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1019.20~22.04.15.19.0-1020.21~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.15.19.0-1024.25~22.04.1 Show 5 moreShow less 5.19.0-1025.26~22.04.15.19.0-1026.27~22.04.15.19.0-1027.28~22.04.15.19.0-1028.29~22.04.15.19.0-1029.30~22.04.1	None known
`linux-aws-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-1005.5~22.04.16.2.0-1006.6~22.04.16.2.0-1007.7~22.04.16.2.0-1008.8~22.04.16.2.0-1009.9~22.04.3 Show 9 moreShow less 6.2.0-1010.10~22.04.16.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1013.13~22.04.16.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.1	None known
`linux-aws-6.5` Ubuntu:22.04:LTS	All versions, plus listed versions 6.5.0-1008.8~22.04.16.5.0-1010.10~22.04.16.5.0-1011.11~22.04.16.5.0-1012.12~22.04.16.5.0-1014.14~22.04.1 Show 9 moreShow less 6.5.0-1015.15~22.04.16.5.0-1016.16~22.04.16.5.0-1017.17~22.04.26.5.0-1018.18~22.04.16.5.0-1020.20~22.04.16.5.0-1021.21~22.04.16.5.0-1022.22~22.04.16.5.0-1023.23~22.04.16.5.0-1024.24~22.04.1	None known
`linux-azure-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1020.21~22.04.15.19.0-1021.22~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.15.19.0-1025.28~22.04.15.19.0-1026.29~22.04.15.19.0-1027.30~22.04.2	None known
`linux-azure-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-1005.5~22.04.16.2.0-1006.6~22.04.16.2.0-1007.7~22.04.16.2.0-1008.8~22.04.16.2.0-1009.9~22.04.3 Show 8 moreShow less 6.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.16.2.0-1019.19~22.04.1	None known
`linux-azure-6.5` Ubuntu:22.04:LTS	All versions, plus listed versions 6.5.0-1007.7~22.04.16.5.0-1009.9~22.04.16.5.0-1010.10~22.04.16.5.0-1011.11~22.04.16.5.0-1015.15~22.04.1 Show 9 moreShow less 6.5.0-1016.16~22.04.16.5.0-1017.17~22.04.16.5.0-1018.19~22.04.26.5.0-1019.20~22.04.16.5.0-1021.22~22.04.16.5.0-1022.23~22.04.16.5.0-1023.24~22.04.16.5.0-1024.25~22.04.16.5.0-1025.26~22.04.1	None known
`linux-azure-fde-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1025.28~22.04.1.15.19.0-1026.29~22.04.1.15.19.0-1027.30~22.04.2.1	None known
`linux-azure-fde-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-1008.8~22.04.1.16.2.0-1009.9~22.04.3.16.2.0-1011.11~22.04.1.16.2.0-1012.12~22.04.1.16.2.0-1014.14~22.04.1.1 Show 5 moreShow less 6.2.0-1015.15~22.04.1.16.2.0-1016.16~22.04.1.16.2.0-1017.17~22.04.1.16.2.0-1018.18~22.04.1.16.2.0-1019.19~22.04.1.1	None known
`linux-gcp-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1020.22~22.04.25.19.0-1021.23~22.04.15.19.0-1022.24~22.04.15.19.0-1024.26~22.04.15.19.0-1025.27~22.04.15.19.0-1026.28~22.04.15.19.0-1027.29~22.04.15.19.0-1030.32~22.04.1	None known
`linux-gcp-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-1009.9~22.04.36.2.0-1010.10~22.04.16.2.0-1011.11~22.04.16.2.0-1011.11~22.04.36.2.0-1012.12~22.04.1 Show 7 moreShow less 6.2.0-1013.13~22.04.16.2.0-1014.14~22.04.16.2.0-1016.18~22.04.16.2.0-1017.19~22.04.16.2.0-1018.20~22.04.16.2.0-1019.21~22.04.16.2.0-1021.23~22.04.1	None known
`linux-gcp-6.5` Ubuntu:22.04:LTS	All versions, plus listed versions 6.5.0-1010.10~22.04.36.5.0-1011.11~22.04.16.5.0-1013.13~22.04.16.5.0-1014.14~22.04.16.5.0-1015.15~22.04.1 Show 8 moreShow less 6.5.0-1016.16~22.04.16.5.0-1017.17~22.04.16.5.0-1018.18~22.04.16.5.0-1020.20~22.04.16.5.0-1022.24~22.04.16.5.0-1023.25~22.04.16.5.0-1024.26~22.04.16.5.0-1025.27~22.04.1	None known
`linux-hwe-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-28.29~22.04.15.19.0-32.33~22.04.15.19.0-35.36~22.04.15.19.0-38.39~22.04.15.19.0-40.41~22.04.1 Show 6 moreShow less 5.19.0-41.42~22.04.15.19.0-42.43~22.04.15.19.0-43.44~22.04.15.19.0-45.46~22.04.15.19.0-46.47~22.04.15.19.0-50.50	None known
`linux-hwe-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-25.25~22.04.26.2.0-26.26~22.04.16.2.0-31.31~22.04.16.2.0-32.32~22.04.16.2.0-33.33~22.04.1 Show 5 moreShow less 6.2.0-34.34~22.04.16.2.0-35.35~22.04.16.2.0-36.37~22.04.16.2.0-37.38~22.04.16.2.0-39.40~22.04.1	None known
`linux-hwe-6.5` Ubuntu:22.04:LTS	All versions, plus listed versions 6.5.0-14.14~22.04.16.5.0-15.15~22.04.16.5.0-17.17~22.04.16.5.0-18.18~22.04.16.5.0-21.21~22.04.1 Show 8 moreShow less 6.5.0-25.25~22.04.16.5.0-26.26~22.04.16.5.0-27.28~22.04.16.5.0-28.29~22.04.16.5.0-35.35~22.04.16.5.0-41.41~22.04.26.5.0-44.44~22.04.16.5.0-45.45~22.04.1	None known
`linux-intel-iot-realtime` Ubuntu:22.04:LTS	All versions, plus listed versions 5.15.0-1073.75	None known
`linux-lowlatency-hwe-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1017.18~22.04.15.19.0-1018.19~22.04.15.19.0-1021.22~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.1 Show 5 moreShow less 5.19.0-1024.25~22.04.15.19.0-1025.26~22.04.15.19.0-1027.28~22.04.15.19.0-1028.29~22.04.15.19.0-1030.30	None known
`linux-lowlatency-hwe-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-1008.8~22.04.16.2.0-1009.9~22.04.16.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1013.13~22.04.1 Show 5 moreShow less 6.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.1	None known
`linux-lowlatency-hwe-6.5` Ubuntu:22.04:LTS	All versions, plus listed versions 6.5.0-14.14.1~22.04.16.5.0-15.15.1.1~22.04.16.5.0-17.17.1.1.1~22.04.16.5.0-21.21.1~22.04.16.5.0-25.25.1~22.04.1 Show 8 moreShow less 6.5.0-26.26.1~22.04.16.5.0-27.28.1~22.04.16.5.0-28.29.1~22.04.16.5.0-35.35.1~22.04.16.5.0-41.41.1~22.04.16.5.0-42.42.1~22.04.16.5.0-44.44.1~22.04.16.5.0-45.45.1~22.04.1	None known
`linux-nvidia-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-1003.3~22.04.16.2.0-1009.96.2.0-1010.106.2.0-1011.116.2.0-1012.126.2.0-1013.136.2.0-1015.15	None known
`linux-nvidia-6.5` Ubuntu:22.04:LTS	All versions, plus listed versions 6.5.0-1004.46.5.0-1007.76.5.0-1013.136.5.0-1014.146.5.0-1015.15 Show 6 moreShow less 6.5.0-1018.186.5.0-1019.196.5.0-1021.226.5.0-1022.236.5.0-1023.246.5.0-1024.25	None known
`linux-oem-5.17` Ubuntu:22.04:LTS	All versions, plus listed versions 5.17.0-1003.35.17.0-1004.45.17.0-1006.65.17.0-1011.125.17.0-1012.13 Show 21 moreShow less 5.17.0-1013.145.17.0-1014.155.17.0-1015.165.17.0-1016.175.17.0-1017.185.17.0-1018.195.17.0-1019.205.17.0-1020.215.17.0-1021.225.17.0-1024.255.17.0-1025.265.17.0-1026.275.17.0-1027.285.17.0-1028.295.17.0-1029.305.17.0-1030.315.17.0-1031.325.17.0-1032.335.17.0-1033.345.17.0-1034.355.17.0-1035.36	None known
`linux-oem-6.0` Ubuntu:22.04:LTS	All versions, plus listed versions 6.0.0-1006.66.0.0-1007.76.0.0-1008.86.0.0-1009.96.0.0-1010.10 Show 11 moreShow less 6.0.0-1011.116.0.0-1012.126.0.0-1013.136.0.0-1014.146.0.0-1015.156.0.0-1016.166.0.0-1017.176.0.0-1018.186.0.0-1019.196.0.0-1020.206.0.0-1021.21	None known
`linux-oem-6.1` Ubuntu:22.04:LTS	All versions, plus listed versions 6.1.0-1004.46.1.0-1006.66.1.0-1007.76.1.0-1008.86.1.0-1009.9 Show 22 moreShow less 6.1.0-1010.106.1.0-1012.126.1.0-1013.136.1.0-1014.146.1.0-1015.156.1.0-1016.166.1.0-1017.176.1.0-1019.196.1.0-1020.206.1.0-1021.216.1.0-1022.226.1.0-1023.236.1.0-1024.246.1.0-1025.256.1.0-1026.266.1.0-1027.276.1.0-1028.286.1.0-1029.296.1.0-1033.336.1.0-1034.346.1.0-1035.356.1.0-1036.36	None known
`linux-oem-6.5` Ubuntu:22.04:LTS	All versions, plus listed versions 6.5.0-1003.36.5.0-1004.46.5.0-1006.66.5.0-1007.76.5.0-1008.8 Show 14 moreShow less 6.5.0-1009.106.5.0-1011.126.5.0-1013.146.5.0-1014.156.5.0-1015.166.5.0-1016.176.5.0-1018.196.5.0-1019.206.5.0-1020.216.5.0-1022.236.5.0-1023.246.5.0-1024.256.5.0-1025.266.5.0-1027.28	None known
`linux-oracle-6.5` Ubuntu:22.04:LTS	All versions, plus listed versions 6.5.0-1013.13~22.04.46.5.0-1014.14~22.04.16.5.0-1015.15~22.04.16.5.0-1016.16~22.04.16.5.0-1018.18~22.04.1 Show 8 moreShow less 6.5.0-1019.19~22.04.16.5.0-1020.20~22.04.16.5.0-1021.21~22.04.16.5.0-1023.23~22.04.16.5.0-1024.24~22.04.16.5.0-1025.25~22.04.16.5.0-1026.26~22.04.16.5.0-1027.27~22.04.1	None known
`linux-realtime` Ubuntu:22.04:LTS	All versions, plus listed versions 5.15.0-1032.35	None known
`linux-riscv` Ubuntu:22.04:LTS	All versions, plus listed versions 5.13.0-1004.45.13.0-1006.6+22.04.15.13.0-1007.7+22.04.15.13.0-1010.11+22.04.15.15.0-1004.4 Show 18 moreShow less 5.15.0-1005.55.15.0-1006.65.15.0-1007.75.15.0-1008.85.15.0-1011.125.15.0-1012.135.15.0-1014.165.15.0-1015.175.15.0-1016.185.15.0-1017.195.15.0-1018.215.15.0-1019.225.15.0-1020.235.15.0-1022.265.15.0-1023.275.15.0-1026.305.15.0-1027.315.15.0-1028.32	None known
`linux-riscv-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1012.13~22.04.15.19.0-1015.16~22.04.15.19.0-1016.17~22.04.15.19.0-1017.18~22.04.15.19.0-1018.19~22.04.15.19.0-1019.21~22.04.15.19.0-1020.22~22.04.15.19.0-1021.23~22.04.1	None known
`linux-riscv-6.5` Ubuntu:22.04:LTS	All versions, plus listed versions 6.5.0-17.17.1.1~22.04.16.5.0-21.21.1~22.04.16.5.0-25.25.1~22.04.16.5.0-26.26.1~22.04.16.5.0-27.28.1~22.04.1 Show 5 moreShow less 6.5.0-28.29.1~22.04.16.5.0-35.35.1~22.04.16.5.0-40.40.1~22.04.16.5.0-42.42.1~22.04.16.5.0-45.45.1~22.04.1	None known
`linux-starfive-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1014.16~22.04.15.19.0-1015.17~22.04.15.19.0-1016.18~22.04.15.19.0-1017.19~22.04.15.19.0-1018.20~22.04.15.19.0-1019.21~22.04.15.19.0-1020.22~22.04.1	None known
`linux-starfive-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-1006.7~22.04.16.2.0-1007.8~22.04.16.2.0-1009.10~22.04.1	None known
`linux-starfive-6.5` Ubuntu:22.04:LTS	All versions, plus listed versions 6.5.0-1007.8~22.04.16.5.0-1008.9~22.04.16.5.0-1009.10~22.04.16.5.0-1010.11~22.04.16.5.0-1011.12~22.04.1 Show 6 moreShow less 6.5.0-1012.13~22.04.16.5.0-1014.15~22.04.16.5.0-1015.16~22.04.16.5.0-1016.17~22.04.16.5.0-1017.18~22.04.16.5.0-1018.19~22.04.1	None known
`linux-hwe-6.11` Ubuntu:24.04:LTS	before 6.11.0-21.21~24.04.1, plus listed versions 6.11.0-17.17~24.04.26.11.0-19.19~24.04.1	6.11.0-21.21~24.04.1
`linux-oem-6.11` Ubuntu:24.04:LTS	before 6.11.0-1017.17, plus listed versions 6.11.0-1007.76.11.0-1008.86.11.0-1009.96.11.0-1010.106.11.0-1011.11 Show 4 moreShow less 6.11.0-1012.126.11.0-1013.136.11.0-1015.156.11.0-1016.16	6.11.0-1017.17
`linux-raspi-realtime` Ubuntu:24.04:LTS	All versions, plus listed versions 6.8.0-2019.20	None known
`linux-hwe-6.11` Ubuntu:24.04:LTS From an advisory covering 308 CVEs	before 6.11.0-21.21~24.04.1, plus listed versions 6.11.0-17.17~24.04.26.11.0-19.19~24.04.1	6.11.0-21.21~24.04.1
`linux-lowlatency-hwe-6.11` Ubuntu:24.04:LTS From an advisory covering 311 CVEs	before 6.11.0-1011.12~24.04.1, plus listed versions 6.11.0-1009.10~24.04.1	6.11.0-1011.12~24.04.1
`linux-oem-6.11` Ubuntu:24.04:LTS From an advisory covering 307 CVEs	before 6.11.0-1017.17, plus listed versions 6.11.0-1007.76.11.0-1008.86.11.0-1009.96.11.0-1010.106.11.0-1011.11 Show 4 moreShow less 6.11.0-1012.126.11.0-1013.136.11.0-1015.156.11.0-1016.16	6.11.0-1017.17

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected
Nov 3, 2026	facts
Nov 3, 2026	affected
Nov 2, 2026	first indexed	CVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2024-54680 has been rejected by its source and should not be treated as a live vulnerability, published January 11, 2025. Fixed in linux-hwe-6.11 6.11.0-21.21~24.04.1.

References

Show 194 moreShow less

This page doesn't list everything

Left out here: 98 package rows, 29 versions, 3,701 references and the rest of 19 source descriptions. The JSON record has them.