CVE-2024-42154

tcp_metrics: validate source addr length

4.4 MediumFix available

In the Linux kernel, the following vulnerability has been resolved:

tcp_metrics: validate source addr length

I don't see anything checking that TCP_METRICS_ATTR_SADDR_IPV4 is at least 4 bytes long, and the policy doesn't have an entry for this attribute at all (neither does it for IPv6 but v6 is manually validated).

Attack profile

How easy it is to exploit

Attack vector: Local
Complexity: Low
Privileges needed: Low
User interaction: None

What an attacker can affect

Confidentiality: Low
Integrity: Low
Availability: None

Exploit likelihood

0.26%Up 0.2 points since Jul 30, 2024

What each source reports

NVD Score used 4.4

In the Linux kernel, the following vulnerability has been resolved:

tcp_metrics: validate source addr length

Record: CVE-2024-42154
CVSS 3.1: 4.4 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Weakness: CWE-754
Updated: 2026-11-02

CVE List No score

tcp_metrics: validate source addr length

In the Linux kernel, the following vulnerability has been resolved:

tcp_metrics: validate source addr length

Record: CVE-2024-42154
Updated: 2026-11-02

EUVDEUVD-2024-39985 No score

In the Linux kernel, the following vulnerability has been resolved:

tcp_metrics: validate source addr length

Record: EUVD-2024-39985
Updated: 2026-11-02

GitHub AdvisoriesGHSA-q75j-p4r8-37x7 9.8

In the Linux kernel, the following vulnerability has been resolved: tcp_metrics: validate source...

In the Linux kernel, the following vulnerability has been resolved:

tcp_metrics: validate source addr length

Record: GHSA-q75j-p4r8-37x7
CVSS 3.1: 9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-754
Updated: 2026-11-02

OSVAZL-47522 4.4

CVE-2024-42154 affecting package kernel for versions less than 6.6.43.1-7

In the Linux kernel, the following vulnerability has been resolved:

tcp_metrics: validate source addr length

Record: AZL-47522
CVSS 3.1: 4.4 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Updated: 2026-11-02

OSVAZL-47598 4.4

CVE-2024-42154 affecting package kernel for versions less than 5.15.164.1-1

In the Linux kernel, the following vulnerability has been resolved:

tcp_metrics: validate source addr length

Record: AZL-47598
CVSS 3.1: 4.4 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Updated: 2026-11-02

Show 46 moreShow less

OSVBELL-CVE-2024-42154 4.4

Record: BELL-CVE-2024-42154
CVSS 3.1: 4.4 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Updated: 2026-11-02

OSVDEBIAN-CVE-2024-42154 4.4

In the Linux kernel, the following vulnerability has been resolved: tcp_metrics: validate source addr length I don't see anything checking that TCP_METRICS_ATTR_SADDR_IPV4 is at least 4 bytes long, and the policy doesn't have an entry for this attribute at all (neither does it for IPv6 but v6 is manually validated).

Record: DEBIAN-CVE-2024-42154
CVSS 3.1: 4.4 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Updated: 2026-11-02

OSVOESA-2024-1992 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

USB: core: Make do_proc_control() and do_proc_bulk() killable

The USBDEVFS_CONTROL and USBDEVFS_BULK ioctls invoke usb_start_wait_urb(), which contains an uninterruptible wait with a user-specified timeout value. If timeout value is very large and the device being accessed does not respond in a reasonable amount of time, the kernel will complain about "Task X blocked for more than N seconds", as found in testing by syzbot:

INFO: task syz-executor.0:8700 blocked for more than 143 seconds. Not tainted 5.14.0-rc7-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.0 state:D stack:23192 pid: 8700 ppid: 8455 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:4681 [inline] __schedule+0xc07/0x11f0 kernel/sched/core.c:5938 schedule+0x14b/0x210 kernel/sched/core.c:6017 schedule_timeout+0x98/0x2f0 kernel/time/timer.c:1857 do_wait_for_common+0x2da/0x480 kernel/sched/completion.c:85 __wait_for_common kernel/sched/completion.c:106 [inline] wait_for_common kernel/sched/completion.c:117 [inline] wait_for_completion_timeout+0x46/0x60 kernel/sched/completion.c:157 usb_start_wait_urb+0x167/0x550 drivers/usb/core/message.c:63 do_proc_bulk+0x978/0x1080 drivers/usb/core/devio.c:1236 proc_bulk drivers/usb/core/devio.c:1273 [inline] usbdev_do_ioctl drivers/usb/core/devio.c:2547 [inline] usbdev_ioctl+0x3441/0x6b10 drivers/usb/core/devio.c:2713 ...

To fix this problem, this patch replaces usbfs's calls to usb_control_msg() and usb_bulk_msg() with special-purpose code that does essentially the same thing (as recommended in the comment for usb_start_wait_urb()), except that it always uses a killable wait and it uses GFP_KERNEL rather than GFP_NOIO.(CVE-2021-47582)

In the Linux kernel, the following vulnerability has been resolved:

NFSD: Fix the behavior of READ near OFFSET_MAX

Dan Aloni reports: > Due to commit 8cfb9015280d ("NFS: Always provide aligned buffers to > the RPC read layers") on the client, a read of 0xfff is aligned up > to server rsize of 0x1000. > > As a result, in a test where the server has a file of size > 0x7fffffffffffffff, and the client tries to read from the offset > 0x7ffffffffffff000, the read causes loff_t overflow in the server > and it returns an NFS code of EINVAL to the client. The client as > a result indefinitely retries the request.

The Linux NFS client does not handle NFS?ERR_INVAL, even though all NFS specifications permit servers to return that status code for a READ.

Instead of NFS?ERR_INVAL, have out-of-range READ requests succeed and return a short result. Set the EOF flag in the result to prevent the client from retrying the READ request. This behavior appears to be consistent with Solaris NFS servers.

Note that NFSv3 and NFSv4 use u64 offset values on the wire. These must be converted to loff_t internally before use -- an implicit type cast is not adequate for this purpose. Otherwise VFS checks against sb->s_maxbytes do not work properly.(CVE-2022-48827)

In the Linux kernel, the following vulnerability has been resolved:

media: mediatek: vcodec: Only free buffer VA that is not NULL

In the MediaTek vcodec driver, while mtk_vcodec_mem_free() is mostly called only when the buffer to free exists, there are some instances that didn't do the check and triggered warnings in practice.

We believe those checks were forgotten unintentionally. Add the checks back to fix the warnings.(CVE-2023-52888)

In the Linux kernel, the following vulnerability has been resolved:

HID: core: remove unnecessary WARN_ON() in implement()

Syzkaller hit a warning [1] in a call to implement() when trying to write a value into a field of smaller size in an output report.

Since implement()…

Record: OESA-2024-1992
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVOESA-2024-1994 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

USB: core: Make do_proc_control() and do_proc_bulk() killable

In the Linux kernel, the following vulnerability has been resolved:

media: mediatek: vcodec: Only free buffer VA that is not NULL

In the MediaTek vcodec driver, while mtk_vcodec_mem_free() is mostly called only when the buffer to free exists, there are some instances that didn't do the check and triggered warnings in practice.

We believe those checks were forgotten unintentionally. Add the checks back to fix the warnings.(CVE-2023-52888)

In the Linux kernel, the following vulnerability has been resolved:

HID: core: remove unnecessary WARN_ON() in implement()

Syzkaller hit a warning [1] in a call to implement() when trying to write a value into a field of smaller size in an output report.

Since implement() already has a warn message printed out with the help of hid_warn() and value in question gets trimmed with: ... value &= m; ... WARN_ON may be considered superfluous. Remove it to suppress future syzkaller triggers.

[1] WARNING: CPU: 0 PID: 5084 at drivers/hid/hid-core.c:1451 implement drivers/hid/hid-core.c:1451 [inline] WARNING: CPU: 0 PID: 5084 at drivers/hid/hid-core.c:1451 hid_output_report+0x548/0x760 drivers/hid/hid-core.c:1863 Modules linked in: CPU: 0 PID: 5084 Comm: syz-executor424 Not tainted 6.9.0-rc7-syzkaller-00183-gcf87f46fd34d #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 RIP: 0010:implement drivers/hid/hid-core.c:1451 [inline] RIP: 0010:hid_output_report+0x548/0x760 drivers/hid/hid-core.c:1863 ... Call Trace: <TASK> __usbhid_submit_report drivers/hid/usbhid/hid-core.c:591 [inline] usbhid_submit_report+0x43d/0x9e0 drivers/hid/usbhid/hid-core.c:636 hiddev_ioctl+0x138b/0x1f00 drivers/hid/usbhid/hiddev.c:726 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:904 [inline] __se_sys_ioctl+0xfc/0x170 fs/ioctl.c:890 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf5/0x240 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f ...(CVE-2024-39509)

In the Linux kernel, the…

Record: OESA-2024-1994
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVOESA-2024-1995 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

USB: core: Make do_proc_control() and do_proc_bulk() killable

In the Linux kernel, the following vulnerability has been resolved:

media: mediatek: vcodec: Only free buffer VA that is not NULL

In the MediaTek vcodec driver, while mtk_vcodec_mem_free() is mostly called only when the buffer to free exists, there are some instances that didn't do the check and triggered warnings in practice.

We believe those checks were forgotten unintentionally. Add the checks back to fix the warnings.(CVE-2023-52888)

A race condition was found in the Linux kernel's drm/exynos device driver in exynos_drm_crtc_atomic_disable() function. This can result in a null pointer dereference issue, possibly leading to a kernel panic or denial of service issue.

(CVE-2024-22386)

In the Linux kernel, the following vulnerability has been resolved:

HID: core: remove unnecessary WARN_ON() in implement()

Syzkaller hit a warning [1] in a call to implement() when trying to write a value into a field of smaller size in an output report.

Record: OESA-2024-1995
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVOESA-2024-1996 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

ethernet: Fix error handling in xemaclite_of_probe

This node pointer is returned by of_parse_phandle() with refcount incremented in this function. Calling of_node_put() to avoid the refcount leak. As the remove function do.(CVE-2022-48860)

In the Linux kernel, the following vulnerability has been resolved:

HID: core: remove unnecessary WARN_ON() in implement()

Syzkaller hit a warning [1] in a call to implement() when trying to write a value into a field of smaller size in an output report.

In the Linux kernel, the following vulnerability has been resolved:

filelock: Remove locks reliably when fcntl/close race is detected

When fcntl_setlk() races with close(), it removes the created lock with do_lock_file_wait(). However, LSMs can allow the first do_lock_file_wait() that created the lock while denying the second do_lock_file_wait() that tries to remove the lock. Separately, posix_lock_file() could also fail to remove a lock due to GFP_KERNEL allocation failure (when splitting a range in the middle).

After the bug has been triggered, use-after-free reads will occur in lock_get_status() when userspace reads /proc/locks. This can likely be used to read arbitrary kernel memory, but can't corrupt kernel memory.

Fix it by calling locks_remove_posix() instead, which is designed to reliably get rid of POSIX locks associated with the given file and files_struct and is also used by filp_flush().(CVE-2024-41012)

In the Linux kernel, the following vulnerability has been resolved:

nilfs2: fix kernel bug on rename operation of broken directory

Syzbot reported that in rename directory operation on broken directory on nilfs2, __block_write_begin_int() called to prepare block write may fail BUG_ON check for access exceeding the folio/page size.

This is because nilfs_dotdot(), which gets parent directory reference entry ("..") of the directory to be moved or renamed, does not check consistency enough, and may return location exceeding folio/page size for broken directories.

Fix this issue by checking required directory entries ("." and "..") in the first chunk of the directory in nilfs_dotdot().(CVE-2024-41034)

In the Linux kernel, the following vulnerability has been resolved:

USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor

Syzbot has identified a bug in usbcore (see the Closes: tag below) caused by our assumption that the reserved bits in an endpoint descriptor's bEndpointAddress field will…

Record: OESA-2024-1996
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVOESA-2025-2882 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:tcp_metrics: validate source addr lengthI don t see anything checking that TCP_METRICS_ATTR_SADDR_IPV4is at least 4 bytes long, and the policy doesn t have an entryfor this attribute at all (neither does it for IPv6 but v6 ismanually validated).(CVE-2024-42154)

In the Linux kernel, the following vulnerability has been resolved:resource: fix region_intersects() vs add_memory_driver_managed()On a system with CXL memory, the resource tree (/proc/iomem) related toCXL memory may look like something as follows.490000000-50fffffff : CXL Window 0 490000000-50fffffff : region0 490000000-50fffffff : dax0.0 490000000-50fffffff : System RAM (kmem)Because drivers/dax/kmem.c calls add_memory_driver_managed() duringonlining CXL memory, which makes System RAM (kmem) a descendant of CXLWindow X . This confuses region_intersects(), which expects all SystemRAM resources to be at the top level of iomem_resource. This can lead tobugs.For example, when the following command line is executed to write somememory in CXL memory range via /dev/mem, $ dd if=data of=/dev/mem bs=$((1 << 10)) seek=$((0x490000000 >> 10)) count=1 dd: error writing /dev/mem : Bad address 1+0 records in 0+0 records out 0 bytes copied, 0.0283507 s, 0.0 kB/sthe command fails as expected. However, the error code is wrong. Itshould be Operation not permitted instead of Bad address . Moreseriously, the /dev/mem permission checking in devmem_is_allowed() passesincorrectly. Although the accessing is prevented later because ioremap()isn t allowed to map system RAM, it is a potential security issue. Duringcommand executing, the following warning is reported in the kernel log forcalling ioremap() on system RAM. ioremap on RAM at 0x0000000490000000 - 0x0000000490000fff WARNING: CPU: 2 PID: 416 at arch/x86/mm/ioremap.c:216 __ioremap_caller.constprop.0+0x131/0x35d Call Trace: memremap+0xcb/0x184 xlate_dev_mem_ptr+0x25/0x2f write_mem+0x94/0xfb vfs_write+0x128/0x26d ksys_write+0xac/0xfe do_syscall_64+0x9a/0xfd entry_SYSCALL_64_after_hwframe+0x4b/0x53The details of command execution process are as follows. In the aboveresource tree, System RAM is a descendant of CXL Window 0 instead of atop level resource. So, region_intersects() will report no System RAMresources in the CXL memory region incorrectly, because it only checks thetop level resources. Consequently, devmem_is_allowed() will return 1(allow access via /dev/mem) for CXL memory region incorrectly. Fortunately, ioremap() doesn t allow to map System RAM and reject theaccess.So, region_intersects() needs to be fixed to work correctly with theresource tree with System RAM not at top level as above. To fix it, ifwe found a unmatched resource in the top level, we will continue to searchmatched resources in its descendant resources. So, we will not miss anymatched resources in resource tree anymore.In the new implementation, an example resource tree|------------- CXL Window 0 ------------||-- System RAM --|will behave similar as the following fake resource tree forregion_intersects(, IORESOURCE_SYSTEM_RAM, ),|-- System RAM --||-- CXL Window 0a --|Where CXL Window 0a is part of the original CXL Window 0 thatisn t covered by System RAM .(CVE-2024-49878)

In the Linux kernel, the following vulnerability has been resolved:

wifi: ath10k: avoid NULL pointer error during sdio remove

When running 'rmmod ath10k', ath10k_sdio_remove() will free sdio workqueue by destroy_workqueue(). But if CONFIG_INIT_ON_FREE_DEFAULT_ON is set to yes, kernel panic will happen: Call trace: destroy_workqueue+0x1c/0x258 ath10k_sdio_remove+0x84/0x94 sdio_bus_remove+0x50/0x16c device_release_driver_internal+0x188/0x25c device_driver_detach+0x20/0x2c

This is because during 'rmmod ath10k', ath10k_sdio_remove() will call ath10k_core_destroy()…

Record: OESA-2025-2882
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2024:10771 7.8

Red Hat Security Advisory: kernel security update

Record: RHSA-2024:10771
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2024:10772 7.0

Red Hat Security Advisory: kernel security update

Record: RHSA-2024:10772
CVSS 3.1: 7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2024:10773 7.0

Red Hat Security Advisory: kernel-rt security update

Record: RHSA-2024:10773
CVSS 3.1: 7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2024:6993 7.1

Red Hat Security Advisory: kernel security update

Record: RHSA-2024:6993
CVSS 3.1: 7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated: 2026-11-02

OSVRHSA-2024:7000 7.8

Red Hat Security Advisory: kernel security update

Record: RHSA-2024:7000
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2024:7001 7.8

Red Hat Security Advisory: kernel-rt security update

Record: RHSA-2024:7001
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2024:9315 7.8

Red Hat Security Advisory: kernel security update

Record: RHSA-2024:9315
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRLSA-2024:7000 7.8

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):

CVE-2023-6040 CVE-2024-26595 CVE-2024-26600 CVE-2021-46984 CVE-2023-52478 CVE-2023-52476 CVE-2023-52522 CVE-2021-47101 CVE-2021-47097 CVE-2023-52605 CVE-2024-26638 CVE-2024-26645 CVE-2024-26665 CVE-2024-26720 CVE-2024-26717 CVE-2024-26769 CVE-2024-26846 CVE-2024-26894 CVE-2024-26880 CVE-2024-26855 CVE-2024-26923 CVE-2024-26939 CVE-2024-27013 CVE-2024-27042 CVE-2024-35809 CVE-2023-52683 CVE-2024-35884 CVE-2024-35877 CVE-2024-35944 CVE-2024-35989 CVE-2021-47412 CVE-2021-47393 CVE-2021-47386 CVE-2021-47385 CVE-2021-47384 CVE-2021-47383 CVE-2021-47432 CVE-2021-47352 CVE-2021-47338 CVE-2021-47321 CVE-2021-47289 CVE-2021-47287 CVE-2023-52798 CVE-2023-52809 CVE-2023-52817 CVE-2023-52840 CVE-2023-52800 CVE-2021-47441 CVE-2021-47466 CVE-2021-47455 CVE-2021-47497 CVE-2021-47560 CVE-2021-47527 CVE-2024-36883 CVE-2024-36922 CVE-2024-36920 CVE-2024-36902 CVE-2024-36953 CVE-2024-36939 CVE-2024-36919 CVE-2024-36901 CVE-2021-47582 CVE-2021-47609 CVE-2024-38619 CVE-2022-48754 CVE-2022-48760 CVE-2024-38581 CVE-2024-38579 CVE-2024-38570 CVE-2024-38559 CVE-2024-38558 CVE-2024-37356 CVE-2024-39471 CVE-2024-39499 CVE-2024-39501 CVE-2024-39506 CVE-2024-40904 CVE-2024-40911 CVE-2024-40912 CVE-2024-40929 CVE-2024-40931 CVE-2024-40941 CVE-2024-40954 CVE-2024-40958 CVE-2024-40959 CVE-2024-40960 CVE-2024-40972 CVE-2024-40977 CVE-2024-40978 CVE-2024-40988 CVE-2024-40989 CVE-2024-40995 CVE-2024-40997 CVE-2024-40998 CVE-2024-41005 CVE-2024-40901 CVE-2024-41007 CVE-2024-41008 CVE-2022-48804 CVE-2022-48836 CVE-2022-48866 CVE-2024-41090 CVE-2024-41091 CVE-2024-41012 CVE-2024-41013 CVE-2024-41014 CVE-2024-41023 CVE-2024-41035 CVE-2024-41038 CVE-2024-41039 CVE-2024-41040 CVE-2024-41041 CVE-2024-41044 CVE-2024-41055 CVE-2024-41056 CVE-2024-41060 CVE-2024-41064 CVE-2024-41065 CVE-2024-41071 CVE-2024-41076 CVE-2024-41097 CVE-2024-42084 CVE-2024-42090 CVE-2024-42094 CVE-2024-42096 CVE-2024-42114 CVE-2024-42124 CVE-2024-42131 CVE-2024-42152 CVE-2024-42154 CVE-2024-42225 CVE-2024-42226 CVE-2024-42228 CVE-2024-42237 CVE-2024-42238 CVE-2024-42240 CVE-2024-42246 CVE-2024-42322 CVE-2024-43830 CVE-2024-43871 For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: RLSA-2024:7000
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVUBUNTU-CVE-2024-42154 4.8

Record: UBUNTU-CVE-2024-42154
CVSS 4.0: 4.8 MediumCVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
CVSS 3.1: 4.4 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Updated: 2026-11-02

OSVALSA-2024:7000 No score

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):

Record: ALSA-2024:7000
Updated: 2026-11-02

OSVALSA-2024:7001 No score

Important: kernel-rt security update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.
Security Fix(es):

CVE-2023-6040 CVE-2024-26595 CVE-2021-46984 CVE-2023-52478 CVE-2023-52476 CVE-2023-52522 CVE-2021-47101 CVE-2021-47097 CVE-2023-52605 CVE-2024-26645 CVE-2024-26665 CVE-2024-26720 CVE-2024-26717 CVE-2024-26769 CVE-2024-26894 CVE-2024-26880 CVE-2024-26855 CVE-2024-26923 CVE-2024-26939 CVE-2024-27013 CVE-2024-27042 CVE-2024-35809 CVE-2023-52683 CVE-2024-35884 CVE-2024-35877 CVE-2024-35944 CVE-2024-35989 CVE-2021-47412 CVE-2021-47393 CVE-2021-47386 CVE-2021-47385 CVE-2021-47384 CVE-2021-47383 CVE-2021-47432 CVE-2021-47352 CVE-2021-47338 CVE-2021-47321 CVE-2021-47289 CVE-2021-47287 CVE-2023-52817 CVE-2023-52840 CVE-2021-47441 CVE-2021-47466 CVE-2021-47455 CVE-2021-47497 CVE-2021-47560 CVE-2021-47527 CVE-2024-36883 CVE-2024-36920 CVE-2024-36902 CVE-2024-36953 CVE-2024-36939 CVE-2024-36901 CVE-2021-47582 CVE-2021-47609 CVE-2024-38619 CVE-2022-48754 CVE-2022-48760 CVE-2024-38581 CVE-2024-38570 CVE-2024-38559 CVE-2024-38558 CVE-2024-37356 CVE-2024-39471 CVE-2024-39499 CVE-2024-39501 CVE-2024-39506 CVE-2024-40904 CVE-2024-40911 CVE-2024-40912 CVE-2024-40929 CVE-2024-40931 CVE-2024-40941 CVE-2024-40954 CVE-2024-40958 CVE-2024-40959 CVE-2024-40960 CVE-2024-40972 CVE-2024-40977 CVE-2024-40978 CVE-2024-40988 CVE-2024-40989 CVE-2024-40995 CVE-2024-40997 CVE-2024-40998 CVE-2024-41005 CVE-2024-40901 CVE-2024-41007 CVE-2024-41008 CVE-2022-48804 CVE-2022-48836 CVE-2022-48866 CVE-2024-41090 CVE-2024-41091 CVE-2024-41012 CVE-2024-41013 CVE-2024-41014 CVE-2024-41035 CVE-2024-41038 CVE-2024-41039 CVE-2024-41040 CVE-2024-41041 CVE-2024-41044 CVE-2024-41055 CVE-2024-41056 CVE-2024-41060 CVE-2024-41071 CVE-2024-41076 CVE-2024-41097 CVE-2024-42084 CVE-2024-42090 CVE-2024-42096 CVE-2024-42114 CVE-2024-42124 CVE-2024-42131 CVE-2024-42152 CVE-2024-42154 CVE-2024-42226 CVE-2024-42228 CVE-2024-42237 CVE-2024-42238 CVE-2024-42240 CVE-2024-42246 CVE-2024-42322 CVE-2024-43871 For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: ALSA-2024:7001
Updated: 2026-11-02

OSVCLSA-2024-1723494706 No score

Fix of 19 CVEs

CVE-url: https://ubuntu.com/security/CVE-2024-42068
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
CVE-url: https://ubuntu.com/security/CVE-2024-42079
- gfs2: Fix NULL pointer dereference in gfs2_log_flush
CVE-url: https://ubuntu.com/security/CVE-2024-42226
- usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB
CVE-url: https://ubuntu.com/security/CVE-2022-48790
- nvme: introduce a controller state machine
- nvme: move namespace scanning to core
- nvme: move AER handling to common code
- nvme: fix a possible use-after-free in controller reset during load
- nvme-pci: fix multiple ctrl removal scheduling
CVE-url: https://ubuntu.com/security/CVE-2024-42236
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
CVE-url: https://ubuntu.com/security/CVE-2024-41095
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
CVE-url: https://ubuntu.com/security/CVE-2024-41098
- ata: libata-core: Fix null pointer dereference on error
CVE-url: https://ubuntu.com/security/CVE-2024-42244
- tty: Define ASYNC_ replacement bits
- tty: Replace ASYNC_CTS_FLOW bit and update atomically
- tty: Remove ASYNC_CLOSING
- tty: mxser: Remove ASYNC_CLOSING
- isdn: Remove ASYNC_CLOSING
- tty: Replace TTY_IO_ERROR bit tests with tty_io_error()
- tty: Replace ASYNC_NORMAL_ACTIVE bit and update atomically
- tty: Replace ASYNC_CHECK_CD and update atomically
- tty: Replace ASYNC_SUSPENDED bit and update atomically
- tty: Replace ASYNC_INITIALIZED bit and update atomically
- USB: serial: mos7840: fix crash on resume
CVE-url: https://ubuntu.com/security/CVE-2024-41089
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
CVE-url: https://ubuntu.com/security/CVE-2024-42232
- libceph: fix race between delayed_work() and ceph_monc_stop()
Bionic update: upstream stable patchset 2022-03-29 (LP: #1967013) // CVE- url: https://ubuntu.com/security/CVE-2022-48809
- net: fix a memleak when uncloning an skb dst and its metadata
CVE-url: https://ubuntu.com/security/CVE-2024-42153
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
CVE-url: https://ubuntu.com/security/CVE-2022-48791
- scsi: pm80xx: Fix TMF task completion race condition
- scsi: pm8001: Fix use-after-free for aborted TMF sas_task
CVE-url: https://ubuntu.com/security/CVE-2022-48792
- scsi: pm8001: Fix use-after-free for aborted SSP/STP sas_task
CVE-url: https://ubuntu.com/security/CVE-2024-42154
- tcp_metrics: validate source addr length
CVE-url: https://ubuntu.com/security/CVE-2024-38570
- gfs2: Rename sd_{ glock => kill }_wait
- gfs2: Fix potential glock use-after-free on unmount
CVE-url: https://ubuntu.com/security/CVE-2024-38583
- timers: Use del_timer_sync() even on UP
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Rename del_timer() to timer_delete()
- timers: Split [try_to_]del_timer_sync to prepare for shutdown mode
- timers: Add shutdown mechanism to the internal functions
- timers: Provide timer_shutdown_sync
- nilfs2: fix use-after-free of timer for log writer thread
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
CVE-url: https://ubuntu.com/security/CVE-2024-42070
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
CVE-url: https://ubuntu.com/security/CVE-2024-42228
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc

Record: CLSA-2024-1723494706
Updated: 2026-11-02

OSVCLSA-2024-1723495305 No score

Fix of 19 CVEs

CVE-url: https://ubuntu.com/security/CVE-2024-42068
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
CVE-url: https://ubuntu.com/security/CVE-2024-42079
- gfs2: Fix NULL pointer dereference in gfs2_log_flush
CVE-url: https://ubuntu.com/security/CVE-2024-42226
- usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB
CVE-url: https://ubuntu.com/security/CVE-2022-48790
- nvme: introduce a controller state machine
- nvme: move namespace scanning to core
- nvme: move AER handling to common code
- nvme: fix a possible use-after-free in controller reset during load
- nvme-pci: fix multiple ctrl removal scheduling
CVE-url: https://ubuntu.com/security/CVE-2024-42236
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
CVE-url: https://ubuntu.com/security/CVE-2024-41095
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
CVE-url: https://ubuntu.com/security/CVE-2024-41098
- ata: libata-core: Fix null pointer dereference on error
CVE-url: https://ubuntu.com/security/CVE-2024-42244
- tty: Define ASYNC_ replacement bits
- tty: Replace ASYNC_CTS_FLOW bit and update atomically
- tty: Remove ASYNC_CLOSING
- tty: mxser: Remove ASYNC_CLOSING
- isdn: Remove ASYNC_CLOSING
- tty: Replace TTY_IO_ERROR bit tests with tty_io_error()
- tty: Replace ASYNC_NORMAL_ACTIVE bit and update atomically
- tty: Replace ASYNC_CHECK_CD and update atomically
- tty: Replace ASYNC_SUSPENDED bit and update atomically
- tty: Replace ASYNC_INITIALIZED bit and update atomically
- USB: serial: mos7840: fix crash on resume
CVE-url: https://ubuntu.com/security/CVE-2024-41089
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
CVE-url: https://ubuntu.com/security/CVE-2024-42232
- libceph: fix race between delayed_work() and ceph_monc_stop()
Bionic update: upstream stable patchset 2022-03-29 (LP: #1967013) // CVE- url: https://ubuntu.com/security/CVE-2022-48809
- net: fix a memleak when uncloning an skb dst and its metadata
CVE-url: https://ubuntu.com/security/CVE-2024-42153
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
CVE-url: https://ubuntu.com/security/CVE-2022-48791
- scsi: pm80xx: Fix TMF task completion race condition
- scsi: pm8001: Fix use-after-free for aborted TMF sas_task
CVE-url: https://ubuntu.com/security/CVE-2022-48792
- scsi: pm8001: Fix use-after-free for aborted SSP/STP sas_task
CVE-url: https://ubuntu.com/security/CVE-2024-42154
- tcp_metrics: validate source addr length
CVE-url: https://ubuntu.com/security/CVE-2024-38570
- gfs2: Rename sd_{ glock => kill }_wait
- gfs2: Fix potential glock use-after-free on unmount
CVE-url: https://ubuntu.com/security/CVE-2024-38583
- timers: Use del_timer_sync() even on UP
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Rename del_timer() to timer_delete()
- timers: Split [try_to_]del_timer_sync to prepare for shutdown mode
- timers: Add shutdown mechanism to the internal functions
- timers: Provide timer_shutdown_sync
- nilfs2: fix use-after-free of timer for log writer thread
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
CVE-url: https://ubuntu.com/security/CVE-2024-42070
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
CVE-url: https://ubuntu.com/security/CVE-2024-42228
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc

Record: CLSA-2024-1723495305
Updated: 2026-11-02

OSVCLSA-2024-1723622106 No score

Fix of 29 CVEs

[ Ubuntu: 4.15.0-234.245 ]

CVE-url: https://ubuntu.com/security/CVE-2024-42236
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
CVE-url: https://ubuntu.com/security/CVE-2024-41095
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
CVE-url: https://ubuntu.com/security/CVE-2024-41098
- ata: libata-core: Fix null pointer dereference on error
CVE-url: https://ubuntu.com/security/CVE-2024-42244
- USB: serial: mos7840: fix crash on resume
CVE-url: https://ubuntu.com/security/CVE-2024-41089
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
CVE-url: https://ubuntu.com/security/CVE-2024-42232
- libceph: fix race between delayed_work() and ceph_monc_stop()
CVE-url: https://ubuntu.com/security/CVE-2024-42153
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
CVE-url: https://ubuntu.com/security/CVE-2022-48791
- scsi: pm80xx: Fix TMF task completion race condition
- scsi: pm8001: Fix use-after-free for aborted TMF sas_task
CVE-url: https://ubuntu.com/security/CVE-2022-48788
- nvme-rdma: fix possible use-after-free in transport error_recovery work
CVE-url: https://ubuntu.com/security/CVE-2022-48792
- scsi: pm8001: Fix use-after-free for aborted SSP/STP sas_task
CVE-url: https://ubuntu.com/security/CVE-2022-48790
- nvme: fix a possible use-after-free in controller reset during load
CVE-url: https://ubuntu.com/security/CVE-2024-42154
- tcp_metrics: validate source addr length
CVE-url: https://ubuntu.com/security/CVE-2024-38596
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
CVE-url: https://ubuntu.com/security/CVE-2024-36270
- netfilter: tproxy: bail out if IP has been disabled on the device
CVE-url: https://ubuntu.com/security/CVE-2024-38780
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
CVE-url: https://ubuntu.com/security/CVE-2024-36886
- tipc: fix UAF in error path
CVE-url: https://ubuntu.com/security/CVE-2024-42068
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
CVE-url: https://ubuntu.com/security/CVE-2024-42156
- s390/pkey: Wipe copies of clear-key structures on failure
CVE-url: https://ubuntu.com/security/CVE-2024-42079
- gfs2: Fix NULL pointer dereference in gfs2_log_flush
CVE-url: https://ubuntu.com/security/CVE-2024-42223
- media: dvb-frontends: tda10048: Fix integer overflow
CVE-url: https://ubuntu.com/security/CVE-2024-42157
- s390/pkey: Wipe sensitive data on failure
CVE-url: https://ubuntu.com/security/CVE-2024-42160
- f2fs: indicate shutdown f2fs to allow unmount successfully
- f2fs: support fault_type mount option
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
CVE-url: https://ubuntu.com/security/CVE-2024-42224
- net: dsa: mv88e6xxx: Correct check for empty list
CVE-url: https://ubuntu.com/security/CVE-2024-38570
- gfs2: Rename sd_{ glock => kill }_wait
- gfs2: Fix potential glock use-after-free on unmount
CVE-url: https://ubuntu.com/security/CVE-2024-38583
- nilfs2: fix use-after-free of timer for log writer thread
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
CVE-url: https://ubuntu.com/security/CVE-2024-42070
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
CVE-url: https://ubuntu.com/security/CVE-2024-42077
- ocfs2: fix DIO failure due to insufficient transaction credits
CVE-url: https://ubuntu.com/security/CVE-2024-42226
- usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB
CVE-url: https://ubuntu.com/security/CVE-2024-42228
- drm/amdgpu: Using uninitialized value *size when…

Record: CLSA-2024-1723622106
Updated: 2026-11-02

OSVCLSA-2024-1723622576 No score

Fix of 29 CVEs

CVE-url: https://ubuntu.com/security/CVE-2024-42236
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
CVE-url: https://ubuntu.com/security/CVE-2024-41095
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
CVE-url: https://ubuntu.com/security/CVE-2024-41098
- ata: libata-core: Fix null pointer dereference on error
CVE-url: https://ubuntu.com/security/CVE-2024-42244
- USB: serial: mos7840: fix crash on resume
CVE-url: https://ubuntu.com/security/CVE-2024-41089
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
CVE-url: https://ubuntu.com/security/CVE-2024-42232
- libceph: fix race between delayed_work() and ceph_monc_stop()
CVE-url: https://ubuntu.com/security/CVE-2024-42153
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
CVE-url: https://ubuntu.com/security/CVE-2022-48791
- scsi: pm80xx: Fix TMF task completion race condition
- scsi: pm8001: Fix use-after-free for aborted TMF sas_task
CVE-url: https://ubuntu.com/security/CVE-2022-48788
- nvme-rdma: fix possible use-after-free in transport error_recovery work
CVE-url: https://ubuntu.com/security/CVE-2022-48792
- scsi: pm8001: Fix use-after-free for aborted SSP/STP sas_task
CVE-url: https://ubuntu.com/security/CVE-2022-48790
- nvme: fix a possible use-after-free in controller reset during load
CVE-url: https://ubuntu.com/security/CVE-2024-42154
- tcp_metrics: validate source addr length
CVE-url: https://ubuntu.com/security/CVE-2024-38596
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
CVE-url: https://ubuntu.com/security/CVE-2024-36270
- netfilter: tproxy: bail out if IP has been disabled on the device
CVE-url: https://ubuntu.com/security/CVE-2024-38780
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
CVE-url: https://ubuntu.com/security/CVE-2024-36886
- tipc: fix UAF in error path
CVE-url: https://ubuntu.com/security/CVE-2024-42068
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
CVE-url: https://ubuntu.com/security/CVE-2024-42156
- s390/pkey: Wipe copies of clear-key structures on failure
CVE-url: https://ubuntu.com/security/CVE-2024-42079
- gfs2: Fix NULL pointer dereference in gfs2_log_flush
CVE-url: https://ubuntu.com/security/CVE-2024-42223
- media: dvb-frontends: tda10048: Fix integer overflow
CVE-url: https://ubuntu.com/security/CVE-2024-42157
- s390/pkey: Wipe sensitive data on failure
CVE-url: https://ubuntu.com/security/CVE-2024-42160
- f2fs: indicate shutdown f2fs to allow unmount successfully
- f2fs: support fault_type mount option
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
CVE-url: https://ubuntu.com/security/CVE-2024-42224
- net: dsa: mv88e6xxx: Correct check for empty list
CVE-url: https://ubuntu.com/security/CVE-2024-38570
- gfs2: Rename sd_{ glock => kill }_wait
- gfs2: Fix potential glock use-after-free on unmount
CVE-url: https://ubuntu.com/security/CVE-2024-38583
- nilfs2: fix use-after-free of timer for log writer thread
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
CVE-url: https://ubuntu.com/security/CVE-2024-42070
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
CVE-url: https://ubuntu.com/security/CVE-2024-42077
- ocfs2: fix DIO failure due to insufficient transaction credits
CVE-url: https://ubuntu.com/security/CVE-2024-42226
- usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB
CVE-url: https://ubuntu.com/security/CVE-2024-42228
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc

Record: CLSA-2024-1723622576
Updated: 2026-11-02

OSVCLSA-2024-1723622869 No score

Fix of 29 CVEs

CVE-url: https://ubuntu.com/security/CVE-2024-42236
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
CVE-url: https://ubuntu.com/security/CVE-2024-41095
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
CVE-url: https://ubuntu.com/security/CVE-2024-41098
- ata: libata-core: Fix null pointer dereference on error
CVE-url: https://ubuntu.com/security/CVE-2024-42244
- USB: serial: mos7840: fix crash on resume
CVE-url: https://ubuntu.com/security/CVE-2024-41089
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
CVE-url: https://ubuntu.com/security/CVE-2024-42232
- libceph: fix race between delayed_work() and ceph_monc_stop()
CVE-url: https://ubuntu.com/security/CVE-2024-42153
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
CVE-url: https://ubuntu.com/security/CVE-2022-48791
- scsi: pm80xx: Fix TMF task completion race condition
- scsi: pm8001: Fix use-after-free for aborted TMF sas_task
CVE-url: https://ubuntu.com/security/CVE-2022-48788
- nvme-rdma: fix possible use-after-free in transport error_recovery work
CVE-url: https://ubuntu.com/security/CVE-2022-48792
- scsi: pm8001: Fix use-after-free for aborted SSP/STP sas_task
CVE-url: https://ubuntu.com/security/CVE-2022-48790
- nvme: fix a possible use-after-free in controller reset during load
CVE-url: https://ubuntu.com/security/CVE-2024-42154
- tcp_metrics: validate source addr length
CVE-url: https://ubuntu.com/security/CVE-2024-38596
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
CVE-url: https://ubuntu.com/security/CVE-2024-36270
- netfilter: tproxy: bail out if IP has been disabled on the device
CVE-url: https://ubuntu.com/security/CVE-2024-38780
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
CVE-url: https://ubuntu.com/security/CVE-2024-36886
- tipc: fix UAF in error path
CVE-url: https://ubuntu.com/security/CVE-2024-42068
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
CVE-url: https://ubuntu.com/security/CVE-2024-42156
- s390/pkey: Wipe copies of clear-key structures on failure
CVE-url: https://ubuntu.com/security/CVE-2024-42079
- gfs2: Fix NULL pointer dereference in gfs2_log_flush
CVE-url: https://ubuntu.com/security/CVE-2024-42223
- media: dvb-frontends: tda10048: Fix integer overflow
CVE-url: https://ubuntu.com/security/CVE-2024-42157
- s390/pkey: Wipe sensitive data on failure
CVE-url: https://ubuntu.com/security/CVE-2024-42160
- f2fs: indicate shutdown f2fs to allow unmount successfully
- f2fs: support fault_type mount option
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
CVE-url: https://ubuntu.com/security/CVE-2024-42224
- net: dsa: mv88e6xxx: Correct check for empty list
CVE-url: https://ubuntu.com/security/CVE-2024-38570
- gfs2: Rename sd_{ glock => kill }_wait
- gfs2: Fix potential glock use-after-free on unmount
CVE-url: https://ubuntu.com/security/CVE-2024-38583
- nilfs2: fix use-after-free of timer for log writer thread
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
CVE-url: https://ubuntu.com/security/CVE-2024-42070
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
CVE-url: https://ubuntu.com/security/CVE-2024-42077
- ocfs2: fix DIO failure due to insufficient transaction credits
CVE-url: https://ubuntu.com/security/CVE-2024-42226
- usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB
CVE-url: https://ubuntu.com/security/CVE-2024-42228
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc

Record: CLSA-2024-1723622869
Updated: 2026-11-02

OSVCLSA-2024-1725293298 No score

kernel: Fix of 37 CVEs

tun: add missing verification for short frame {CVE-2024-41091}
tap: add missing verification for short frame {CVE-2024-41090}
drm/amd/display: Fix potential index out of bounds in color transformation function {CVE-2024-38552}
net: fix __dst_negative_advice() race {CVE-2024-36971}
net: annotate data-races around sk->sk_dst_pending_confirm {CVE-2024-36971}
net: fix out-of-bounds access in ops_init {CVE-2024-36883}
net/sched: flower: Fix chain template offload {CVE-2024-26669}
netfilter: nf_tables: use timestamp to check for set element timeout {CVE-2024-27397}
netfilter: nft_set_rbtree: Remove unused variable nft_net {CVE-2024-27397}
netfilter: nft_set_rbtree: prefer sync gc to async worker {CVE-2024-27397}
netfilter: nft_set_rbtree: rename gc deactivate+erase function {CVE-2024-27397}
netfilter: nf_tables: de-constify set commit ops function argument {CVE-2024-27397}
netfilter: nft_set_rbtree: .deactivate fails if element has expired {CVE-2024-27397}
sched/membarrier: reduce the ability to hammer on sys_membarrier {CVE-2024-26602}
drm/vmwgfx: Fix possible null pointer derefence with invalid contexts {CVE-2022-38096}
sched/psi: Fix use-after-free in ep_remove_wait_queue() {CVE-2023-52707}
wait: add wake_up_pollfree() {CVE-2023-52707}
x86/sev: Check for user-space IOIO pointing to kernel space {CVE-2023-46813}
x86/sev: Check IOBM for IOIO exceptions from user-space {CVE-2023-46813}
x86/sev: Disable MMIO emulation from user mode {CVE-2023-46813}
tcp: Fix shift-out-of-bounds in dctcp_update_alpha(). {CVE-2024-37356}
blk-cgroup: fix list corruption from reorder of WRITE ->lqueued {CVE-2024-38384}
netfilter: complete validation of user input {CVE-2024-35962}
SUNRPC: Fix UAF in svc_tcp_listen_data_ready() {CVE-2023-52885}
PM / devfreq: Synchronize devfreq_monitor_[start/stop] {CVE-2023-52635}
netfilter: validate user input for expected length {CVE-2024-35896}
virtio: delete vq in vp_find_vqs_msix() when request_irq() fails {CVE-2024-37353}
bnxt: prevent skb UAF after handing over to PTP worker {CVE-2022-48637}
net: openvswitch: fix overwriting ct original tuple for ICMPv6 {CVE-2024-38558}
net: core: reject skb_copy(_expand) for fraglist GSO skbs {CVE-2024-36929}
rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation {CVE-2024-36017}
ipvlan: Dont Use skb->sk in ipvlan_process_v{4,6}_outbound {CVE-2024-33621}
drm/vmwgfx: Fix invalid reads in fence signaled events {CVE-2024-36960}
gro: fix ownership transfer {CVE-2024-35890}
mlxbf_gige: stop interface during shutdown {CVE-2024-35885}
scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup() {CVE-2023-52809}
wifi: mt76: replace skb_put with skb_put_zero {CVE-2024-42225}
drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc {CVE-2024-42228}
scsi: mpi3mr: Sanitise num_phys {CVE-2024-42159}
bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD {CVE-2024-42161}
drm/amdgpu/mes: fix use-after-free issue {CVE-2024-38581}
i40e: fix vf may be used uninitialized in this function warning {CVE-2024-36020}
vt: fix unicode buffer corruption when deleting characters {CVE-2024-35823}
ata: libata-core: Fix double free on error {CVE-2024-41087}
netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path {CVE-2024-26925}
tcp_metrics: validate source addr length {CVE-2024-42154}

Record: CLSA-2024-1725293298
Updated: 2026-11-02

OSVCLSA-2024-1725871927 No score

kernel: Fix of 31 CVEs

gfs2: Fix potential glock use-after-free on unmount {CVE-2024-38570}
gfs2: Remove ill-placed consistency check {CVE-2024-38570}
gfs2: introduce new gfs2_glock_assert_withdraw {CVE-2024-38570}
gfs2: simplify gdlm_put_lock with out_free label {CVE-2024-38570}
wifi: mt76: replace skb_put with skb_put_zero {CVE-2024-42225}
bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD {CVE-2024-42161}
drm/amdgpu/mes: fix use-after-free issue {CVE-2024-38581}
drm/amd/display: Fix potential index out of bounds in color transformation function {CVE-2024-38552}
net: bridge: mst: fix suspicious rcu usage in br_mst_set_state {CVE-2024-36979}
net: bridge: mst: pass vlan group directly to br_mst_vlan_set_state {CVE-2024-36979}
net: bridge: mst: fix vlan use-after-free {CVE-2024-36979}
netfilter: nft_limit: reject configurations that cause integer overflow {CVE-2024-26668}
ima: Fix use-after-free on a dentry's dname.name {CVE-2024-39494}
ima: define ima_max_digest_data struct without a flexible array variable
ima: detect changes to the backing overlay file
drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc {CVE-2024-42228}
dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list {CVE-2024-40956}
drm/amdgpu: add error handle to avoid out-of-bounds {CVE-2024-39471}
net/sched: flower: Fix chain template offload {CVE-2024-26669}
userfaultfd: fix a race between writeprotect and exit_mmap() {CVE-2021-47461}
scsi: mpi3mr: Sanitise num_phys {CVE-2024-42159}
ata: libata-core: Fix double free on error {CVE-2024-41087}
net/mlx5: Discard command completions in internal error {CVE-2024-38555}
net: bridge: xmit: make sure we have at least eth header len bytes {CVE-2024-38538}
net: sched: sch_multiq: fix possible OOB write in multiq_tune() {CVE-2024-36978}
drm/vmwgfx: Fix invalid reads in fence signaled events {CVE-2024-36960}
tcp: Use refcount_inc_not_zero() in tcp_twsk_unique(). {CVE-2024-36904}
tipc: fix UAF in error path {CVE-2024-36886}
net: fix out-of-bounds access in ops_init {CVE-2024-36883}
tap: add missing verification for short frame {CVE-2024-41090}
tun: add missing verification for short frame {CVE-2024-41091}
netfilter: nf_tables: use timestamp to check for set element timeout {CVE-2024-27397}
netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path {CVE-2024-26925}
netfilter: nf_tables: release batch on table validation from abort path {CVE-2024-26925}
netfilter: nf_tables: discard table flag update with pending basechain deletion {CVE-2024-26925}
netfilter: nf_tables: reject table flag and netdev basechain updates {CVE-2024-26925}
af_unix: Fix garbage collector racing against connect() {CVE-2024-26923}
net/ipv6: avoid possible UAF in ip6_route_mpath_notify() {CVE-2024-26852}
sched/psi: Fix use-after-free in ep_remove_wait_queue() {CVE-2023-52707}
wait: add wake_up_pollfree() {CVE-2023-52707}
tcp_metrics: validate source addr length {CVE-2024-42154}

Record: CLSA-2024-1725871927
Updated: 2026-11-02

OSVCLSA-2024-1725872696 No score

kernel: Fix of 43 CVEs

netfilter: nf_tables: use timestamp to check for set element timeout {CVE-2024-27397}
x86/sev: Harden #VC instruction emulation somewhat {CVE-2024-25742}
bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD {CVE-2024-42161}
selftests/bpf: Fix BPF_CORE_READ_BITFIELD() macro {CVE-2024-42161}
pinctrl: core: delete incorrect free in pinctrl_enable() {CVE-2024-36940}
pinctrl: core: fix possible memory leak in pinctrl_enable() {CVE-2024-36940}
net: fix information leakage in /proc/net/ptype {CVE-2022-48757}
wifi: mt76: replace skb_put with skb_put_zero {CVE-2024-42225}
ata: libata-core: Fix double free on error {CVE-2024-41087}
drm/amdgpu: add error handle to avoid out-of-bounds {CVE-2024-39471}
drm/amd/display: Fix potential index out of bounds in color transformation function {CVE-2024-38552}
net: sched: sch_multiq: fix possible OOB write in multiq_tune() {CVE-2024-36978}
drm/vmwgfx: Fix invalid reads in fence signaled events {CVE-2024-36960}
net/sched: flower: Fix chain template offload {CVE-2024-26669}
ipv6: Remove extra counter pull before gc {CVE-2023-52340}
ipv6: remove max_size check inline with ipv4 {CVE-2023-52340}
net/dst: use a smaller percpu_counter batch for dst entries accounting {CVE-2023-52340}
net: add a route cache full diagnostic message {CVE-2023-52340}
Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg {CVE-2023-51779}
tcp_metrics: validate source addr length {CVE-2024-42154}
net: fix out-of-bounds access in ops_init {CVE-2024-36883}
tap: add missing verification for short frame {CVE-2024-41090}
tun: add missing verification for short frame {CVE-2024-41091}
iommu: Fix potential use-after-free during probe {CVE-2022-48796}
nvme: fix a possible use-after-free in controller reset during load {CVE-2022-48790}
nvme-tcp: fix possible use-after-free in transport error_recovery work {CVE-2022-48789}
nvme-rdma: fix possible use-after-free in transport error_recovery work {CVE-2022-48788}
ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found() {CVE-2024-26773}
ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal() {CVE-2024-26772}
ext4: fix double-free of blocks due to wrong extents moved_len {CVE-2024-26704}
hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove {CVE-2024-26698}
ubi: Check for too small LEB size in VTBL code {CVE-2024-25739}
scsi: ibmvfc: Remove BUG_ON in the case of an empty event pool {CVE-2023-52811}
arp: Prevent overflow in arp_req_get(). {CVE-2024-26733}
SUNRPC: Fix a suspicious RCU usage warning {CVE-2023-52623}
ext4: avoid online resizing failures due to oversized flex bg {CVE-2023-52622}
pstore/ram: Fix crash when setting number of cpus to an odd number {CVE-2023-52619}
wifi: mac80211: fix potential key use-after-free {CVE-2023-52530}
drm: Don't unref the same fb many times by mistake due to deadlock handling {CVE-2023-52486}
net: amd-xgbe: Fix skb data length underflow {CVE-2022-48743}
tracing: Restructure trace_clock_global() to never block {CVE-2021-46939}
tcp: make sure init the accept_queue's spinlocks once {CVE-2024-26614}
drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc {CVE-2024-42228}
gfs2: Fix potential glock use-after-free on unmount {CVE-2024-38570}
gfs2: Rename sd_{ glock => kill }_wait {CVE-2024-38570}
gfs2: Use container_of() for gfs2_glock(aspace) {CVE-2024-38570}
gfs2: Wake up when sd_glock_disposal becomes zero {CVE-2024-38570}
gfs2: Remove ill-placed consistency check {CVE-2024-38570}
gfs2: introduce new gfs2_glock_assert_withdraw {CVE-2024-38570}
gfs2: simplify gdlm_put_lock with out_free label {CVE-2024-38570}
gfs2: Expect -EBUSY after canceling dlm locking requests {CVE-2024-38570}
gfs2: Don't call dlm after protocol is unmounted {CVE-2024-38570}
gfs2: Don't skip dlm unlock if glock has an lvb {CVE-2024-38570}
netfilter: nf_tables: release mutex after nft_gc_seq_end…

Record: CLSA-2024-1725872696
Updated: 2026-11-02

OSVCLSA-2024-1725876080 No score

kernel: Fix of 45 CVEs

dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list {CVE-2024-40956}
userfaultfd: fix a race between writeprotect and exit_mmap() {CVE-2021-47461}
netfilter: nf_tables: use timestamp to check for set element timeout {CVE-2024-27397}
x86/sev: Harden #VC instruction emulation somewhat {CVE-2024-25742}
bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD {CVE-2024-42161}
selftests/bpf: Fix BPF_CORE_READ_BITFIELD() macro {CVE-2024-42161}
pinctrl: core: delete incorrect free in pinctrl_enable() {CVE-2024-36940}
pinctrl: core: fix possible memory leak in pinctrl_enable() {CVE-2024-36940}
net: fix information leakage in /proc/net/ptype {CVE-2022-48757}
wifi: mt76: replace skb_put with skb_put_zero {CVE-2024-42225}
ata: libata-core: Fix double free on error {CVE-2024-41087}
drm/amdgpu: add error handle to avoid out-of-bounds {CVE-2024-39471}
drm/amd/display: Fix potential index out of bounds in color transformation function {CVE-2024-38552}
net: sched: sch_multiq: fix possible OOB write in multiq_tune() {CVE-2024-36978}
drm/vmwgfx: Fix invalid reads in fence signaled events {CVE-2024-36960}
net/sched: flower: Fix chain template offload {CVE-2024-26669}
ipv6: Remove extra counter pull before gc {CVE-2023-52340}
ipv6: remove max_size check inline with ipv4 {CVE-2023-52340}
net/dst: use a smaller percpu_counter batch for dst entries accounting {CVE-2023-52340}
net: add a route cache full diagnostic message {CVE-2023-52340}
Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg {CVE-2023-51779}
tcp_metrics: validate source addr length {CVE-2024-42154}
net: fix out-of-bounds access in ops_init {CVE-2024-36883}
tap: add missing verification for short frame {CVE-2024-41090}
tun: add missing verification for short frame {CVE-2024-41091}
iommu: Fix potential use-after-free during probe {CVE-2022-48796}
nvme: fix a possible use-after-free in controller reset during load {CVE-2022-48790}
nvme-tcp: fix possible use-after-free in transport error_recovery work {CVE-2022-48789}
nvme-rdma: fix possible use-after-free in transport error_recovery work {CVE-2022-48788}
ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found() {CVE-2024-26773}
ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal() {CVE-2024-26772}
ext4: fix double-free of blocks due to wrong extents moved_len {CVE-2024-26704}
hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove {CVE-2024-26698}
ubi: Check for too small LEB size in VTBL code {CVE-2024-25739}
scsi: ibmvfc: Remove BUG_ON in the case of an empty event pool {CVE-2023-52811}
arp: Prevent overflow in arp_req_get(). {CVE-2024-26733}
SUNRPC: Fix a suspicious RCU usage warning {CVE-2023-52623}
ext4: avoid online resizing failures due to oversized flex bg {CVE-2023-52622}
pstore/ram: Fix crash when setting number of cpus to an odd number {CVE-2023-52619}
wifi: mac80211: fix potential key use-after-free {CVE-2023-52530}
drm: Don't unref the same fb many times by mistake due to deadlock handling {CVE-2023-52486}
net: amd-xgbe: Fix skb data length underflow {CVE-2022-48743}
tracing: Restructure trace_clock_global() to never block {CVE-2021-46939}
tcp: make sure init the accept_queue's spinlocks once {CVE-2024-26614}
drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc {CVE-2024-42228}
gfs2: Fix potential glock use-after-free on unmount {CVE-2024-38570}
gfs2: Rename sd_{ glock => kill }_wait {CVE-2024-38570}
gfs2: Use container_of() for gfs2_glock(aspace) {CVE-2024-38570}
gfs2: Remove ill-placed consistency check {CVE-2024-38570}
gfs2: introduce new gfs2_glock_assert_withdraw {CVE-2024-38570}
gfs2: simplify gdlm_put_lock with out_free label {CVE-2024-38570}
gfs2: Expect -EBUSY after canceling dlm locking requests {CVE-2024-38570}
netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path {CVE-2024-26925} -…

Record: CLSA-2024-1725876080
Updated: 2026-11-02

OSV No score

tcp_metrics: validate source addr length

In the Linux kernel, the following vulnerability has been resolved:

tcp_metrics: validate source addr length

Record: CVE-2024-42154
Updated: 2026-11-02

OSVMGASA-2024-0277 No score

Updated kernel, kmod-xtables-addons & kmod-virtualbox packages fix security vulnerabilities

Upstream kernel version 6.6.43 fix bugs and vulnerabilities. The kmod-virtualbox and kmod-xtables-addons packages have been updated to work with this new kernel. For information about the vulnerabilities see the links.

Record: MGASA-2024-0277
Updated: 2026-11-02

OSVMGASA-2024-0278 No score

Updated kernel-linus packages fix security vulnerabilities

Vanilla upstream kernel version 6.6.43 fix bugs and vulnerabilities. For information about the vulnerabilities see the links.

Record: MGASA-2024-0278
Updated: 2026-11-02

OSVRLSA-2024:7001 No score

Important: kernel-rt security update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.
Security Fix(es):

Record: RLSA-2024:7001
Updated: 2026-11-02

OSVSUSE-SU-2024:3551-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2023-52610: net/sched: act_ct: fix skb leak and crash on ooo frags (bsc#1221610).
CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225487).
CVE-2023-52916: media: aspeed: Fix memory overwrite if timing is 1600x900 (bsc#1230269).
CVE-2024-26640: tcp: add sanity checks to rx zerocopy (bsc#1221650).
CVE-2024-26759: mm/swap: fix race when skipping swapcache (bsc#1230340).
CVE-2024-26804: net: ip_tunnel: prevent perpetual headroom growth (bsc#1222629).
CVE-2024-38538: net: bridge: xmit: make sure we have at least eth header len bytes (bsc#1226606).
CVE-2024-38596: af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg (bsc#1226846).
CVE-2024-40965: i2c: lpi2c: Avoid calling clk_get_rate during transfer (bsc#1227885).
CVE-2024-40973: media: mtk-vcodec: potential null pointer deference in SCP (bsc#1227890).
CVE-2024-40983: tipc: force a dst refcount before doing decryption (bsc#1227819).
CVE-2024-42154: tcp_metrics: validate source addr length (bsc#1228507).
CVE-2024-42243: mm/filemap: make MAX_PAGECACHE_ORDER acceptable to xarray (bsc#1229001).
CVE-2024-42252: closures: Change BUG_ON() to WARN_ON() (bsc#1229004).
CVE-2024-42265: protect the fetch of ->fd[fd] in do_dup2() from mispredictions (bsc#1229334).
CVE-2024-42294: block: fix deadlock between sd_remove & sd_release (bsc#1229371).
CVE-2024-42304: ext4: make sure the first directory block is not a hole (bsc#1229364).
CVE-2024-42305: ext4: check dot and dotdot of dx_root before making dir indexed (bsc#1229363).
CVE-2024-42306: udf: Avoid using corrupted block bitmap buffer (bsc#1229362).
CVE-2024-43828: ext4: fix infinite loop when replaying fast_commit (bsc#1229394).
CVE-2024-43832: s390/uv: Do not call folio_wait_writeback() without a folio reference (bsc#1229380).
CVE-2024-43845: udf: Fix bogus checksum computation in udf_rename() (bsc#1229389).
CVE-2024-43890: tracing: Fix overflow in get_free_elt() (bsc#1229764).
CVE-2024-43898: ext4: sanity check for NULL pointer after ext4_force_shutdown (bsc#1229753).
CVE-2024-43914: md/raid5: avoid BUG_ON() while continue reshape after reassembling (bsc#1229790).
CVE-2024-44935: sctp: Fix null-ptr-deref in reuseport_add_sock() (bsc#1229810).
CVE-2024-44944: netfilter: ctnetlink: use helper function to calculate expect ID (bsc#1229899).
CVE-2024-44946: kcm: Serialise kcm_sendmsg() for the same socket (bsc#1230015).
CVE-2024-44950: serial: sc16is7xx: fix invalid FIFO access with special register set (bsc#1230180).
CVE-2024-44951: serial: sc16is7xx: fix TX fifo corruption (bsc#1230181).
CVE-2024-44970: net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (bsc#1230209).
CVE-2024-44971: net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register() (bsc#1230211).
CVE-2024-44984: bnxt_en: Fix double DMA unmapping for XDP_REDIRECT (bsc#1230240).
CVE-2024-44985: ipv6: prevent possible UAF in ip6_xmit() (bsc#1230206).
CVE-2024-44987: ipv6: prevent UAF in ip6_send_skb() (bsc#1230185).
CVE-2024-44988: net: dsa: mv88e6xxx: Fix out-of-bound access (bsc#1230192).
CVE-2024-44989: bonding: fix xfrm real_dev null pointer dereference (bsc#1230193).
CVE-2024-44990: bonding: fix null pointer deref in bond_ipsec_offload_ok (bsc#1230194).
CVE-2024-44991: tcp: prevent concurrent execution of tcp_sk_exit_batch (bsc#1230195).
CVE-2024-44998: atm: idt77252: prevent use after free in dequeue_rx() (bsc#1230171).
CVE-2024-44999: gtp: pull network headers in gtp_dev_xmit() (bsc#1230233).
CVE-2024-45002: rtla/osnoise: Prevent NULL dereference in error handling (bsc#1230169).
CVE-2024-45003: Don't evict inode under the inode lru traversing context (bsc#1230245).
CVE-2024-45013: nvme: move stopping keep-alive into nvme_uninit_ctrl() (bsc#1230442).
CVE-2024-45017: net/mlx5: Fix…

Record: SUSE-SU-2024:3551-1
Updated: 2026-11-02

OSVSUSE-SU-2024:3553-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 CoCo kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225487).
CVE-2023-52916: media: aspeed: Fix memory overwrite if timing is 1600x900 (bsc#1230269).
CVE-2024-26759: mm/swap: fix race when skipping swapcache (bsc#1230340).
CVE-2024-26804: net: ip_tunnel: prevent perpetual headroom growth (bsc#1222629).
CVE-2024-38538: net: bridge: xmit: make sure we have at least eth header len bytes (bsc#1226606).
CVE-2024-40965: i2c: lpi2c: Avoid calling clk_get_rate during transfer (bsc#1227885).
CVE-2024-40973: media: mtk-vcodec: potential null pointer deference in SCP (bsc#1227890).
CVE-2024-40983: tipc: force a dst refcount before doing decryption (bsc#1227819).
CVE-2024-42154: tcp_metrics: validate source addr length (bsc#1228507).
CVE-2024-42252: closures: Change BUG_ON() to WARN_ON() (bsc#1229004).
CVE-2024-43832: s390/uv: Do not call folio_wait_writeback() without a folio reference (bsc#1229380).
CVE-2024-43890: tracing: Fix overflow in get_free_elt() (bsc#1229764).
CVE-2024-43914: md/raid5: avoid BUG_ON() while continue reshape after reassembling (bsc#1229790).
CVE-2024-44946: kcm: Serialise kcm_sendmsg() for the same socket (bsc#1230015).
CVE-2024-44970: net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (bsc#1230209).
CVE-2024-44971: net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register() (bsc#1230211).
CVE-2024-44984: bnxt_en: Fix double DMA unmapping for XDP_REDIRECT (bsc#1230240).
CVE-2024-44987: ipv6: prevent UAF in ip6_send_skb() (bsc#1230185).
CVE-2024-44988: net: dsa: mv88e6xxx: Fix out-of-bound access (bsc#1230192).
CVE-2024-44989: bonding: fix xfrm real_dev null pointer dereference (bsc#1230193).
CVE-2024-44990: bonding: fix null pointer deref in bond_ipsec_offload_ok (bsc#1230194).
CVE-2024-44991: tcp: prevent concurrent execution of tcp_sk_exit_batch (bsc#1230195).
CVE-2024-44999: gtp: pull network headers in gtp_dev_xmit() (bsc#1230233).
CVE-2024-45002: rtla/osnoise: Prevent NULL dereference in error handling (bsc#1230169).
CVE-2024-45013: nvme: move stopping keep-alive into nvme_uninit_ctrl() (bsc#1230442).
CVE-2024-45017: net/mlx5: Fix IPsec RoCE MPV trace call (bsc#1230430).
CVE-2024-45018: netfilter: flowtable: initialise extack before use (bsc#1230431).
CVE-2024-45019: net/mlx5e: Take state lock during tx timeout reporter (bsc#1230432).
CVE-2024-45021: memcg_write_event_control(): fix a user-triggerable oops (bsc#1230434).
CVE-2024-45022: mm/vmalloc: fix page mapping if vm_area_alloc_pages() with high order fallback to order 0 (bsc#1230435).
CVE-2024-45023: md/raid1: Fix data corruption for degraded array with slow disk (bsc#1230455).
CVE-2024-45029: i2c: tegra: Do not mark ACPI devices as irq safe (bsc#1230451).
CVE-2024-45030: igb: cope with large MAX_SKB_FRAGS (bsc#1230457).
CVE-2024-46673: scsi: aacraid: Fix double-free on probe failure (bsc#1230506).
CVE-2024-46677: gtp: fix a potential NULL pointer dereference (bsc#1230549).
CVE-2024-46679: ethtool: check device is present when getting link settings (bsc#1230556).
CVE-2024-46686: smb/client: avoid dereferencing rdata=NULL in smb2_new_read_req() (bsc#1230517).
CVE-2024-46687: btrfs: fix a use-after-free when hitting errors inside btrfs_submit_chunk() (bsc#1230518).
CVE-2024-46691: usb: typec: ucsi: Move unregister out of atomic section (bsc#1230526).
CVE-2024-46692: firmware: qcom: scm: Mark get_wq_ctx() as atomic call (bsc#1230520).
CVE-2024-46693: kABI workaround for soc-qcom pmic_glink changes (bsc#1230521).
CVE-2024-46710: drm/vmwgfx: Prevent unmapping active read buffers (bsc#1230540).
CVE-2024-46717: net/mlx5e: SHAMPO, Fix incorrect page release (bsc#1230719).
CVE-2024-46727: Fixed NULL pointer dereference in resource_log_pipe_topology_update (bsc#1230707).
CVE-2024-46729:…

Record: SUSE-SU-2024:3553-1
Updated: 2026-11-02

OSVSUSE-SU-2024:3559-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2021-47387: cpufreq: schedutil: Destroy mutex before kobject_put() frees the memory (bsc#1225316).
CVE-2022-48788: nvme-rdma: fix possible use-after-free in transport error_recovery work (bsc#1227952).
CVE-2022-48789: nvme-tcp: fix possible use-after-free in transport error_recovery work (bsc#1228000).
CVE-2022-48790: nvme: fix a possible use-after-free in controller reset during load (bsc#1227941).
CVE-2022-48791: Fix use-after-free for aborted TMF sas_task (bsc#1228002)
CVE-2022-48799: perf: Fix list corruption in perf_cgroup_switch() (bsc#1227953).
CVE-2022-48844: Bluetooth: hci_core: Fix leaking sent_cmd skb (bsc#1228068).
CVE-2022-48911: kabi: add __nf_queue_get_refs() for kabi compliance. (bsc#1229633).
CVE-2022-48943: KVM: x86/mmu: make apf token non-zero to fix bug (bsc#1229645).
CVE-2022-48945: media: vivid: fix compose size exceed boundary (bsc#1230398).
CVE-2023-52915: media: dvb-usb-v2: af9035: fix missing unlock (bsc#1230270).
CVE-2024-38596: af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg (bsc#1226846).
CVE-2024-41073: nvme: avoid double free special payload (bsc#1228635).
CVE-2024-41079: nvmet: always initialize cqe.result (bsc#1228615).
CVE-2024-41082: nvme-fabrics: use reserved tag for reg read/write command (bsc#1228620 CVE-2024-41082).
CVE-2024-42154: tcp_metrics: validate source addr length (bsc#1228507).
CVE-2024-42265: protect the fetch of ->fd[fd] in do_dup2() from mispredictions (bsc#1229334).
CVE-2024-42305: ext4: check dot and dotdot of dx_root before making dir indexed (bsc#1229363).
CVE-2024-42306: udf: Avoid using corrupted block bitmap buffer (bsc#1229362).
CVE-2024-43884: Add error handling to pair_device() (bsc#1229739)
CVE-2024-43890: tracing: Fix overflow in get_free_elt() (bsc#1229764).
CVE-2024-43898: ext4: sanity check for NULL pointer after ext4_force_shutdown (bsc#1229753).
CVE-2024-43912: wifi: nl80211: disallow setting special AP channel widths (bsc#1229830)
CVE-2024-43914: md/raid5: avoid BUG_ON() while continue reshape after reassembling (bsc#1229790).
CVE-2024-44946: kcm: Serialise kcm_sendmsg() for the same socket (bsc#1230015).
CVE-2024-44948: x86/mtrr: Check if fixed MTRRs exist before saving them (bsc#1230174).
CVE-2024-44950: serial: sc16is7xx: fix invalid FIFO access with special register set (bsc#1230180).
CVE-2024-44952: driver core: Fix uevent_show() vs driver detach race (bsc#1230178).
CVE-2024-44954: ALSA: line6: Fix racy access to midibuf (bsc#1230176).
CVE-2024-44969: s390/sclp: Prevent release of buffer in I/O (bsc#1230200).
CVE-2024-44982: drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails (bsc#1230204).
CVE-2024-44987: ipv6: prevent UAF in ip6_send_skb() (bsc#1230185).
CVE-2024-44998: atm: idt77252: prevent use after free in dequeue_rx() (bsc#1230171).
CVE-2024-44999: gtp: pull network headers in gtp_dev_xmit() (bsc#1230233).
CVE-2024-45008: Input: MT - limit max slots (bsc#1230248).
CVE-2024-46673: scsi: aacraid: Fix double-free on probe failure (bsc#1230506).
CVE-2024-46675: usb: dwc3: core: Prevent USB core invalid event buffer address access (bsc#1230533).
CVE-2024-46676: nfc: pn533: Add poll mod list filling check (bsc#1230535).
CVE-2024-46677: gtp: fix a potential NULL pointer dereference (bsc#1230549).
CVE-2024-46679: ethtool: check device is present when getting link settings (bsc#1230556).
CVE-2024-46685: pinctrl: single: fix potential NULL dereference in pcs_get_function() (bsc#1230515)
CVE-2024-46686: smb/client: avoid dereferencing rdata=NULL in smb2_new_read_req() (bsc#1230517).
CVE-2024-46702: thunderbolt: Mark XDomain as unplugged when router is removed (bsc#1230589)
CVE-2024-46707: KVM: arm64: Make ICC_SGI_EL1 undef in the absence of a vGICv3 (bsc#1230582).
CVE-2024-46715: driver: iio: add…

Record: SUSE-SU-2024:3559-1
Updated: 2026-11-02

OSVSUSE-SU-2024:3561-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2023-52610: net/sched: act_ct: fix skb leak and crash on ooo frags (bsc#1221610).
CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225487).
CVE-2023-52916: media: aspeed: Fix memory overwrite if timing is 1600x900 (bsc#1230269).
CVE-2024-26640: tcp: add sanity checks to rx zerocopy (bsc#1221650).
CVE-2024-26759: mm/swap: fix race when skipping swapcache (bsc#1230340).
CVE-2024-26804: net: ip_tunnel: prevent perpetual headroom growth (bsc#1222629).
CVE-2024-38538: net: bridge: xmit: make sure we have at least eth header len bytes (bsc#1226606).
CVE-2024-38596: af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg (bsc#1226846).
CVE-2024-40965: i2c: lpi2c: Avoid calling clk_get_rate during transfer (bsc#1227885).
CVE-2024-40973: media: mtk-vcodec: potential null pointer deference in SCP (bsc#1227890).
CVE-2024-40983: tipc: force a dst refcount before doing decryption (bsc#1227819).
CVE-2024-42154: tcp_metrics: validate source addr length (bsc#1228507).
CVE-2024-42243: mm/filemap: make MAX_PAGECACHE_ORDER acceptable to xarray (bsc#1229001).
CVE-2024-42252: closures: Change BUG_ON() to WARN_ON() (bsc#1229004).
CVE-2024-42265: protect the fetch of ->fd[fd] in do_dup2() from mispredictions (bsc#1229334).
CVE-2024-42294: block: fix deadlock between sd_remove & sd_release (bsc#1229371).
CVE-2024-42304: ext4: make sure the first directory block is not a hole (bsc#1229364).
CVE-2024-42305: ext4: check dot and dotdot of dx_root before making dir indexed (bsc#1229363).
CVE-2024-42306: udf: Avoid using corrupted block bitmap buffer (bsc#1229362).
CVE-2024-43828: ext4: fix infinite loop when replaying fast_commit (bsc#1229394).
CVE-2024-43832: s390/uv: Do not call folio_wait_writeback() without a folio reference (bsc#1229380).
CVE-2024-43845: udf: Fix bogus checksum computation in udf_rename() (bsc#1229389).
CVE-2024-43890: tracing: Fix overflow in get_free_elt() (bsc#1229764).
CVE-2024-43898: ext4: sanity check for NULL pointer after ext4_force_shutdown (bsc#1229753).
CVE-2024-43914: md/raid5: avoid BUG_ON() while continue reshape after reassembling (bsc#1229790).
CVE-2024-44935: sctp: Fix null-ptr-deref in reuseport_add_sock() (bsc#1229810).
CVE-2024-44944: netfilter: ctnetlink: use helper function to calculate expect ID (bsc#1229899).
CVE-2024-44946: kcm: Serialise kcm_sendmsg() for the same socket (bsc#1230015).
CVE-2024-44950: serial: sc16is7xx: fix invalid FIFO access with special register set (bsc#1230180).
CVE-2024-44951: serial: sc16is7xx: fix TX fifo corruption (bsc#1230181).
CVE-2024-44970: net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (bsc#1230209).
CVE-2024-44971: net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register() (bsc#1230211).
CVE-2024-44984: bnxt_en: Fix double DMA unmapping for XDP_REDIRECT (bsc#1230240).
CVE-2024-44985: ipv6: prevent possible UAF in ip6_xmit() (bsc#1230206).
CVE-2024-44987: ipv6: prevent UAF in ip6_send_skb() (bsc#1230185).
CVE-2024-44988: net: dsa: mv88e6xxx: Fix out-of-bound access (bsc#1230192).
CVE-2024-44989: bonding: fix xfrm real_dev null pointer dereference (bsc#1230193).
CVE-2024-44990: bonding: fix null pointer deref in bond_ipsec_offload_ok (bsc#1230194).
CVE-2024-44991: tcp: prevent concurrent execution of tcp_sk_exit_batch (bsc#1230195).
CVE-2024-44998: atm: idt77252: prevent use after free in dequeue_rx() (bsc#1230171).
CVE-2024-44999: gtp: pull network headers in gtp_dev_xmit() (bsc#1230233).
CVE-2024-45002: rtla/osnoise: Prevent NULL dereference in error handling (bsc#1230169).
CVE-2024-45003: Don't evict inode under the inode lru traversing context (bsc#1230245).
CVE-2024-45013: nvme: move stopping keep-alive into nvme_uninit_ctrl() (bsc#1230442).
CVE-2024-45017: net/mlx5: Fix IPsec…

Record: SUSE-SU-2024:3561-1
Updated: 2026-11-02

OSVSUSE-SU-2024:3564-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2023-52610: net/sched: act_ct: fix skb leak and crash on ooo frags (bsc#1221610).
CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225487).
CVE-2023-52916: media: aspeed: Fix memory overwrite if timing is 1600x900 (bsc#1230269).
CVE-2024-26640: tcp: add sanity checks to rx zerocopy (bsc#1221650).
CVE-2024-26759: mm/swap: fix race when skipping swapcache (bsc#1230340).
CVE-2024-26804: net: ip_tunnel: prevent perpetual headroom growth (bsc#1222629).
CVE-2024-38538: net: bridge: xmit: make sure we have at least eth header len bytes (bsc#1226606).
CVE-2024-38596: af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg (bsc#1226846).
CVE-2024-40965: i2c: lpi2c: Avoid calling clk_get_rate during transfer (bsc#1227885).
CVE-2024-40973: media: mtk-vcodec: potential null pointer deference in SCP (bsc#1227890).
CVE-2024-40983: tipc: force a dst refcount before doing decryption (bsc#1227819).
CVE-2024-42154: tcp_metrics: validate source addr length (bsc#1228507).
CVE-2024-42243: mm/filemap: make MAX_PAGECACHE_ORDER acceptable to xarray (bsc#1229001).
CVE-2024-42252: closures: Change BUG_ON() to WARN_ON() (bsc#1229004).
CVE-2024-42265: protect the fetch of ->fd[fd] in do_dup2() from mispredictions (bsc#1229334).
CVE-2024-42294: block: fix deadlock between sd_remove & sd_release (bsc#1229371).
CVE-2024-42304: ext4: make sure the first directory block is not a hole (bsc#1229364).
CVE-2024-42305: ext4: check dot and dotdot of dx_root before making dir indexed (bsc#1229363).
CVE-2024-42306: udf: Avoid using corrupted block bitmap buffer (bsc#1229362).
CVE-2024-43828: ext4: fix infinite loop when replaying fast_commit (bsc#1229394).
CVE-2024-43832: s390/uv: Do not call folio_wait_writeback() without a folio reference (bsc#1229380).
CVE-2024-43845: udf: Fix bogus checksum computation in udf_rename() (bsc#1229389).
CVE-2024-43890: tracing: Fix overflow in get_free_elt() (bsc#1229764).
CVE-2024-43898: ext4: sanity check for NULL pointer after ext4_force_shutdown (bsc#1229753).
CVE-2024-43914: md/raid5: avoid BUG_ON() while continue reshape after reassembling (bsc#1229790).
CVE-2024-44935: sctp: Fix null-ptr-deref in reuseport_add_sock() (bsc#1229810).
CVE-2024-44944: netfilter: ctnetlink: use helper function to calculate expect ID (bsc#1229899).
CVE-2024-44946: kcm: Serialise kcm_sendmsg() for the same socket (bsc#1230015).
CVE-2024-44950: serial: sc16is7xx: fix invalid FIFO access with special register set (bsc#1230180).
CVE-2024-44951: serial: sc16is7xx: fix TX fifo corruption (bsc#1230181).
CVE-2024-44970: net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (bsc#1230209).
CVE-2024-44971: net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register() (bsc#1230211).
CVE-2024-44984: bnxt_en: Fix double DMA unmapping for XDP_REDIRECT (bsc#1230240).
CVE-2024-44985: ipv6: prevent possible UAF in ip6_xmit() (bsc#1230206).
CVE-2024-44987: ipv6: prevent UAF in ip6_send_skb() (bsc#1230185).
CVE-2024-44988: net: dsa: mv88e6xxx: Fix out-of-bound access (bsc#1230192).
CVE-2024-44989: bonding: fix xfrm real_dev null pointer dereference (bsc#1230193).
CVE-2024-44990: bonding: fix null pointer deref in bond_ipsec_offload_ok (bsc#1230194).
CVE-2024-44991: tcp: prevent concurrent execution of tcp_sk_exit_batch (bsc#1230195).
CVE-2024-44998: atm: idt77252: prevent use after free in dequeue_rx() (bsc#1230171).
CVE-2024-44999: gtp: pull network headers in gtp_dev_xmit() (bsc#1230233).
CVE-2024-45002: rtla/osnoise: Prevent NULL dereference in error handling (bsc#1230169).
CVE-2024-45003: Don't evict inode under the inode lru traversing context (bsc#1230245).
CVE-2024-45013: nvme: move stopping keep-alive into nvme_uninit_ctrl() (bsc#1230442).
CVE-2024-45017: net/mlx5: Fix IPsec…

Record: SUSE-SU-2024:3564-1
Updated: 2026-11-02

OSVSUSE-SU-2024:3566-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-46854: net: dpaa: Pad packets to ETH_ZLEN (bsc#1231084).
CVE-2024-46770: ice: Add netif_device_attach/detach into PF reset flow (bsc#1230763).
CVE-2024-41073: nvme: avoid double free special payload (bsc#1228635).
CVE-2024-41079: nvmet: always initialize cqe.result (bsc#1228615).
CVE-2024-46859: platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses (bsc#1231089).
CVE-2024-46853: spi: nxp-fspi: fix the KASAN report out-of-bounds bug (bsc#1231083).
CVE-2022-48945: media: vivid: fix compose size exceed boundary (bsc#1230398).
CVE-2024-41082: nvme-fabrics: use reserved tag for reg read/write command (bsc#1228620 CVE-2024-41082).
CVE-2024-46822: arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry (bsc#1231120).
CVE-2024-43890: tracing: Fix overflow in get_free_elt() (bsc#1229764).
CVE-2024-46731: drm/amd/pm: fix the Out-of-bounds read warning (bsc#1230709).
CVE-2024-46772: drm/amd/display: Check denominator crb_pipes before used (bsc#1230772).
CVE-2024-46722: drm/amdgpu: fix mc_data out-of-bounds read warning (bsc#1230712).
CVE-2024-46787: userfaultfd: fix checks for huge PMDs (bsc#1230815).
CVE-2022-48911: kabi: add __nf_queue_get_refs() for kabi compliance. (bsc#1229633).
CVE-2024-46753: btrfs: handle errors from btrfs_dec_ref() properly (bsc#1230796).
CVE-2024-46761: pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv (bsc#1230761).
CVE-2024-46759: hwmon: (adc128d818) Fix underflows seen when writing limit attributes (bsc#1230814).
CVE-2024-46745: Input: uinput - reject requests with unreasonable number of slots (bsc#1230748).
CVE-2024-46738: VMCI: Fix use-after-free when removing resource in vmci_resource_remove() (bsc#1230731).
CVE-2024-46783: tcp_bpf: fix return value of tcp_bpf_sendmsg() (bsc#1230810).
CVE-2024-44982: drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails (bsc#1230204).
CVE-2024-46723: drm/amdgpu: fix ucode out-of-bounds read warning (bsc#1230702).
CVE-2024-46750: PCI: Add missing bridge lock to pci_bus_lock() (bsc#1230783).
CVE-2024-46717: net/mlx5e: SHAMPO, Fix incorrect page release (bsc#1230719).
CVE-2024-40973: media: mtk-vcodec: potential null pointer deference in SCP (bsc#1227890).
CVE-2024-46744: Squashfs: sanity check symbolic link size (bsc#1230747).
CVE-2024-46743: of/irq: Prevent device address out-of-bounds read in interrupt map walk (bsc#1230756).
CVE-2024-46715: driver: iio: add missing checks on iio_info's callback access (bsc#1230700).
CVE-2024-46685: pinctrl: single: fix potential NULL dereference in pcs_get_function() (bsc#1230515)
CVE-2024-46675: usb: dwc3: core: Prevent USB core invalid event buffer address access (bsc#1230533).
CVE-2024-46702: thunderbolt: Mark XDomain as unplugged when router is removed (bsc#1230589)
CVE-2024-46686: smb/client: avoid dereferencing rdata=NULL in smb2_new_read_req() (bsc#1230517).
CVE-2024-46673: scsi: aacraid: Fix double-free on probe failure (bsc#1230506).
CVE-2024-46721: pparmor: fix possible NULL pointer dereference (bsc#1230710)
CVE-2024-46677: gtp: fix a potential NULL pointer dereference (bsc#1230549).
CVE-2024-46676: nfc: pn533: Add poll mod list filling check (bsc#1230535).
CVE-2024-46679: ethtool: check device is present when getting link settings (bsc#1230556).
CVE-2024-43914: md/raid5: avoid BUG_ON() while continue reshape after reassembling (bsc#1229790).
CVE-2024-44946: kcm: Serialise kcm_sendmsg() for the same socket (bsc#1230015).
CVE-2024-46707: KVM: arm64: Make ICC_SGI_EL1 undef in the absence of a vGICv3 (bsc#1230582).
CVE-2022-48799: perf: Fix list corruption in perf_cgroup_switch() (bsc#1227953).
CVE-2022-48789: nvme-tcp: fix possible use-after-free in transport error_recovery work (bsc#1228000).
CVE-2022-48790: nvme: fix a possible use-after-free in…

Record: SUSE-SU-2024:3566-1
Updated: 2026-11-02

OSVSUSE-SU-2024:3569-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2022-48901: btrfs: do not start relocation until in progress drops are done (bsc#1229607).
CVE-2022-48911: kabi: add __nf_queue_get_refs() for kabi compliance. (bsc#1229633).
CVE-2022-48923: btrfs: prevent copying too big compressed lzo segment (bsc#1229662)
CVE-2022-48935: Fixed an unregister flowtable hooks on netns exit (bsc#1229619)
CVE-2023-52610: net/sched: act_ct: fix skb leak and crash on ooo frags (bsc#1221610).
CVE-2023-52916: media: aspeed: Fix memory overwrite if timing is 1600x900 (bsc#1230269).
CVE-2024-26640: tcp: add sanity checks to rx zerocopy (bsc#1221650).
CVE-2024-26759: mm/swap: fix race when skipping swapcache (bsc#1230340).
CVE-2024-26767: drm/amd/display: fixed integer types and null check locations (bsc#1230339).
CVE-2024-26804: net: ip_tunnel: prevent perpetual headroom growth (bsc#1222629).
CVE-2024-26837: net: bridge: switchdev: race between creation of new group memberships and generation of the list of MDB events to replay (bsc#1222973).
CVE-2024-37353: virtio: fixed a double free in vp_del_vqs() (bsc#1226875).
CVE-2024-38538: net: bridge: xmit: make sure we have at least eth header len bytes (bsc#1226606).
CVE-2024-38596: af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg (bsc#1226846).
CVE-2024-40910: Fix refcount imbalance on inbound connections (bsc#1227832).
CVE-2024-40973: media: mtk-vcodec: potential null pointer deference in SCP (bsc#1227890).
CVE-2024-40983: tipc: force a dst refcount before doing decryption (bsc#1227819).
CVE-2024-41062: Sync sock recv cb and release (bsc#1228576).
CVE-2024-41082: nvme-fabrics: use reserved tag for reg read/write command (bsc#1228620 CVE-2024-41082).
CVE-2024-42154: tcp_metrics: validate source addr length (bsc#1228507).
CVE-2024-42259: Fix Virtual Memory mapping boundaries calculation (bsc#1229156)
CVE-2024-42265: protect the fetch of ->fd[fd] in do_dup2() from mispredictions (bsc#1229334).
CVE-2024-42304: ext4: make sure the first directory block is not a hole (bsc#1229364).
CVE-2024-42305: ext4: check dot and dotdot of dx_root before making dir indexed (bsc#1229363).
CVE-2024-42306: udf: Avoid using corrupted block bitmap buffer (bsc#1229362).
CVE-2024-43828: ext4: fix infinite loop when replaying fast_commit (bsc#1229394).
CVE-2024-43890: tracing: Fix overflow in get_free_elt() (bsc#1229764).
CVE-2024-43898: ext4: sanity check for NULL pointer after ext4_force_shutdown (bsc#1229753).
CVE-2024-43912: wifi: nl80211: disallow setting special AP channel widths (bsc#1229830)
CVE-2024-43914: md/raid5: avoid BUG_ON() while continue reshape after reassembling (bsc#1229790).
CVE-2024-44935: sctp: Fix null-ptr-deref in reuseport_add_sock() (bsc#1229810).
CVE-2024-44944: netfilter: ctnetlink: use helper function to calculate expect ID (bsc#1229899).
CVE-2024-44946: kcm: Serialise kcm_sendmsg() for the same socket (bsc#1230015).
CVE-2024-44950: serial: sc16is7xx: fix invalid FIFO access with special register set (bsc#1230180).
CVE-2024-44952: driver core: Fix uevent_show() vs driver detach race (bsc#1230178).
CVE-2024-44970: net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (bsc#1230209).
CVE-2024-44971: net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register() (bsc#1230211).
CVE-2024-44986: ipv6: fix possible UAF in ip6_finish_output2() (bsc#1230230)
CVE-2024-44987: ipv6: prevent UAF in ip6_send_skb() (bsc#1230185).
CVE-2024-44988: net: dsa: mv88e6xxx: Fix out-of-bound access (bsc#1230192).
CVE-2024-44989: bonding: fix xfrm real_dev null pointer dereference (bsc#1230193).
CVE-2024-44990: bonding: fix null pointer deref in bond_ipsec_offload_ok (bsc#1230194).
CVE-2024-44998: atm: idt77252: prevent use after free in dequeue_rx() (bsc#1230171).
CVE-2024-44999: gtp: pull network headers in gtp_dev_xmit()…

Record: SUSE-SU-2024:3569-1
Updated: 2026-11-02

OSVSUSE-SU-2024:3587-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2022-48901: btrfs: do not start relocation until in progress drops are done (bsc#1229607).
CVE-2022-48911: kabi: add __nf_queue_get_refs() for kabi compliance. (bsc#1229633).
CVE-2022-48923: btrfs: prevent copying too big compressed lzo segment (bsc#1229662)
CVE-2022-48935: Fixed an unregister flowtable hooks on netns exit (bsc#1229619)
CVE-2023-52610: net/sched: act_ct: fix skb leak and crash on ooo frags (bsc#1221610).
CVE-2023-52916: media: aspeed: Fix memory overwrite if timing is 1600x900 (bsc#1230269).
CVE-2024-26640: tcp: add sanity checks to rx zerocopy (bsc#1221650).
CVE-2024-26759: mm/swap: fix race when skipping swapcache (bsc#1230340).
CVE-2024-26767: drm/amd/display: fixed integer types and null check locations (bsc#1230339).
CVE-2024-26804: net: ip_tunnel: prevent perpetual headroom growth (bsc#1222629).
CVE-2024-26837: net: bridge: switchdev: race between creation of new group memberships and generation of the list of MDB events to replay (bsc#1222973).
CVE-2024-37353: virtio: fixed a double free in vp_del_vqs() (bsc#1226875).
CVE-2024-38538: net: bridge: xmit: make sure we have at least eth header len bytes (bsc#1226606).
CVE-2024-38596: af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg (bsc#1226846).
CVE-2024-40910: Fix refcount imbalance on inbound connections (bsc#1227832).
CVE-2024-40973: media: mtk-vcodec: potential null pointer deference in SCP (bsc#1227890).
CVE-2024-40983: tipc: force a dst refcount before doing decryption (bsc#1227819).
CVE-2024-41062: Sync sock recv cb and release (bsc#1228576).
CVE-2024-41082: nvme-fabrics: use reserved tag for reg read/write command (bsc#1228620 CVE-2024-41082).
CVE-2024-42154: tcp_metrics: validate source addr length (bsc#1228507).
CVE-2024-42259: Fix Virtual Memory mapping boundaries calculation (bsc#1229156)
CVE-2024-42265: protect the fetch of ->fd[fd] in do_dup2() from mispredictions (bsc#1229334).
CVE-2024-42304: ext4: make sure the first directory block is not a hole (bsc#1229364).
CVE-2024-42305: ext4: check dot and dotdot of dx_root before making dir indexed (bsc#1229363).
CVE-2024-42306: udf: Avoid using corrupted block bitmap buffer (bsc#1229362).
CVE-2024-43828: ext4: fix infinite loop when replaying fast_commit (bsc#1229394).
CVE-2024-43890: tracing: Fix overflow in get_free_elt() (bsc#1229764).
CVE-2024-43898: ext4: sanity check for NULL pointer after ext4_force_shutdown (bsc#1229753).
CVE-2024-43912: wifi: nl80211: disallow setting special AP channel widths (bsc#1229830)
CVE-2024-43914: md/raid5: avoid BUG_ON() while continue reshape after reassembling (bsc#1229790).
CVE-2024-44935: sctp: Fix null-ptr-deref in reuseport_add_sock() (bsc#1229810).
CVE-2024-44944: netfilter: ctnetlink: use helper function to calculate expect ID (bsc#1229899).
CVE-2024-44946: kcm: Serialise kcm_sendmsg() for the same socket (bsc#1230015).
CVE-2024-44950: serial: sc16is7xx: fix invalid FIFO access with special register set (bsc#1230180).
CVE-2024-44952: driver core: Fix uevent_show() vs driver detach race (bsc#1230178).
CVE-2024-44970: net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (bsc#1230209).
CVE-2024-44971: net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register() (bsc#1230211).
CVE-2024-44986: ipv6: fix possible UAF in ip6_finish_output2() (bsc#1230230)
CVE-2024-44987: ipv6: prevent UAF in ip6_send_skb() (bsc#1230185).
CVE-2024-44988: net: dsa: mv88e6xxx: Fix out-of-bound access (bsc#1230192).
CVE-2024-44989: bonding: fix xfrm real_dev null pointer dereference (bsc#1230193).
CVE-2024-44990: bonding: fix null pointer deref in bond_ipsec_offload_ok (bsc#1230194).
CVE-2024-44998: atm: idt77252: prevent use after free in dequeue_rx() (bsc#1230171).
CVE-2024-44999: gtp: pull network headers in…

Record: SUSE-SU-2024:3587-1
Updated: 2026-11-02

OSVSUSE-SU-2024:3591-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2021-47387: cpufreq: schedutil: Destroy mutex before kobject_put() frees the memory (bsc#1225316).
CVE-2022-48788: nvme-rdma: fix possible use-after-free in transport error_recovery work (bsc#1227952).
CVE-2022-48789: nvme-tcp: fix possible use-after-free in transport error_recovery work (bsc#1228000).
CVE-2022-48790: nvme: fix a possible use-after-free in controller reset during load (bsc#1227941).
CVE-2022-48791: Fix use-after-free for aborted TMF sas_task (bsc#1228002)
CVE-2022-48799: perf: Fix list corruption in perf_cgroup_switch() (bsc#1227953).
CVE-2022-48844: Bluetooth: hci_core: Fix leaking sent_cmd skb (bsc#1228068).
CVE-2022-48911: kabi: add __nf_queue_get_refs() for kabi compliance. (bsc#1229633).
CVE-2022-48943: KVM: x86/mmu: make apf token non-zero to fix bug (bsc#1229645).
CVE-2022-48945: media: vivid: fix compose size exceed boundary (bsc#1230398).
CVE-2023-52915: media: dvb-usb-v2: af9035: fix missing unlock (bsc#1230270).
CVE-2024-38596: af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg (bsc#1226846).
CVE-2024-41073: nvme: avoid double free special payload (bsc#1228635).
CVE-2024-41079: nvmet: always initialize cqe.result (bsc#1228615).
CVE-2024-41082: nvme-fabrics: use reserved tag for reg read/write command (bsc#1228620 CVE-2024-41082).
CVE-2024-42154: tcp_metrics: validate source addr length (bsc#1228507).
CVE-2024-42265: protect the fetch of ->fd[fd] in do_dup2() from mispredictions (bsc#1229334).
CVE-2024-42305: ext4: check dot and dotdot of dx_root before making dir indexed (bsc#1229363).
CVE-2024-42306: udf: Avoid using corrupted block bitmap buffer (bsc#1229362).
CVE-2024-43884: Add error handling to pair_device() (bsc#1229739)
CVE-2024-43890: tracing: Fix overflow in get_free_elt() (bsc#1229764).
CVE-2024-43898: ext4: sanity check for NULL pointer after ext4_force_shutdown (bsc#1229753).
CVE-2024-43912: wifi: nl80211: disallow setting special AP channel widths (bsc#1229830)
CVE-2024-43914: md/raid5: avoid BUG_ON() while continue reshape after reassembling (bsc#1229790).
CVE-2024-44946: kcm: Serialise kcm_sendmsg() for the same socket (bsc#1230015).
CVE-2024-44948: x86/mtrr: Check if fixed MTRRs exist before saving them (bsc#1230174).
CVE-2024-44950: serial: sc16is7xx: fix invalid FIFO access with special register set (bsc#1230180).
CVE-2024-44952: driver core: Fix uevent_show() vs driver detach race (bsc#1230178).
CVE-2024-44954: ALSA: line6: Fix racy access to midibuf (bsc#1230176).
CVE-2024-44969: s390/sclp: Prevent release of buffer in I/O (bsc#1230200).
CVE-2024-44982: drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails (bsc#1230204).
CVE-2024-44987: ipv6: prevent UAF in ip6_send_skb() (bsc#1230185).
CVE-2024-44998: atm: idt77252: prevent use after free in dequeue_rx() (bsc#1230171).
CVE-2024-44999: gtp: pull network headers in gtp_dev_xmit() (bsc#1230233).
CVE-2024-45008: Input: MT - limit max slots (bsc#1230248).
CVE-2024-46673: scsi: aacraid: Fix double-free on probe failure (bsc#1230506).
CVE-2024-46675: usb: dwc3: core: Prevent USB core invalid event buffer address access (bsc#1230533).
CVE-2024-46676: nfc: pn533: Add poll mod list filling check (bsc#1230535).
CVE-2024-46677: gtp: fix a potential NULL pointer dereference (bsc#1230549).
CVE-2024-46679: ethtool: check device is present when getting link settings (bsc#1230556).
CVE-2024-46685: pinctrl: single: fix potential NULL dereference in pcs_get_function() (bsc#1230515)
CVE-2024-46686: smb/client: avoid dereferencing rdata=NULL in smb2_new_read_req() (bsc#1230517).
CVE-2024-46702: thunderbolt: Mark XDomain as unplugged when router is removed (bsc#1230589)
CVE-2024-46707: KVM: arm64: Make ICC_SGI_EL1 undef in the absence of a vGICv3 (bsc#1230582).
CVE-2024-46715: driver: iio: add…

Record: SUSE-SU-2024:3591-1
Updated: 2026-11-02

OSVSUSE-SU-2024:3592-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2022-48901: btrfs: do not start relocation until in progress drops are done (bsc#1229607).
CVE-2022-48911: kabi: add __nf_queue_get_refs() for kabi compliance. (bsc#1229633).
CVE-2022-48923: btrfs: prevent copying too big compressed lzo segment (bsc#1229662)
CVE-2022-48935: Fixed an unregister flowtable hooks on netns exit (bsc#1229619)
CVE-2023-52610: net/sched: act_ct: fix skb leak and crash on ooo frags (bsc#1221610).
CVE-2023-52916: media: aspeed: Fix memory overwrite if timing is 1600x900 (bsc#1230269).
CVE-2024-26640: tcp: add sanity checks to rx zerocopy (bsc#1221650).
CVE-2024-26759: mm/swap: fix race when skipping swapcache (bsc#1230340).
CVE-2024-26767: drm/amd/display: fixed integer types and null check locations (bsc#1230339).
CVE-2024-26804: net: ip_tunnel: prevent perpetual headroom growth (bsc#1222629).
CVE-2024-26837: net: bridge: switchdev: race between creation of new group memberships and generation of the list of MDB events to replay (bsc#1222973).
CVE-2024-37353: virtio: fixed a double free in vp_del_vqs() (bsc#1226875).
CVE-2024-38538: net: bridge: xmit: make sure we have at least eth header len bytes (bsc#1226606).
CVE-2024-38596: af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg (bsc#1226846).
CVE-2024-40910: Fix refcount imbalance on inbound connections (bsc#1227832).
CVE-2024-40973: media: mtk-vcodec: potential null pointer deference in SCP (bsc#1227890).
CVE-2024-40983: tipc: force a dst refcount before doing decryption (bsc#1227819).
CVE-2024-41062: Sync sock recv cb and release (bsc#1228576).
CVE-2024-41082: nvme-fabrics: use reserved tag for reg read/write command (bsc#1228620 CVE-2024-41082).
CVE-2024-42154: tcp_metrics: validate source addr length (bsc#1228507).
CVE-2024-42259: Fix Virtual Memory mapping boundaries calculation (bsc#1229156)
CVE-2024-42265: protect the fetch of ->fd[fd] in do_dup2() from mispredictions (bsc#1229334).
CVE-2024-42304: ext4: make sure the first directory block is not a hole (bsc#1229364).
CVE-2024-42305: ext4: check dot and dotdot of dx_root before making dir indexed (bsc#1229363).
CVE-2024-42306: udf: Avoid using corrupted block bitmap buffer (bsc#1229362).
CVE-2024-43828: ext4: fix infinite loop when replaying fast_commit (bsc#1229394).
CVE-2024-43890: tracing: Fix overflow in get_free_elt() (bsc#1229764).
CVE-2024-43898: ext4: sanity check for NULL pointer after ext4_force_shutdown (bsc#1229753).
CVE-2024-43912: wifi: nl80211: disallow setting special AP channel widths (bsc#1229830)
CVE-2024-43914: md/raid5: avoid BUG_ON() while continue reshape after reassembling (bsc#1229790).
CVE-2024-44935: sctp: Fix null-ptr-deref in reuseport_add_sock() (bsc#1229810).
CVE-2024-44944: netfilter: ctnetlink: use helper function to calculate expect ID (bsc#1229899).
CVE-2024-44946: kcm: Serialise kcm_sendmsg() for the same socket (bsc#1230015).
CVE-2024-44950: serial: sc16is7xx: fix invalid FIFO access with special register set (bsc#1230180).
CVE-2024-44952: driver core: Fix uevent_show() vs driver detach race (bsc#1230178).
CVE-2024-44954: ALSA: line6: Fix racy access to midibuf (bsc#1230176).
CVE-2024-44970: net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (bsc#1230209).
CVE-2024-44971: net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register() (bsc#1230211).
CVE-2024-44986: ipv6: fix possible UAF in ip6_finish_output2() (bsc#1230230)
CVE-2024-44987: ipv6: prevent UAF in ip6_send_skb() (bsc#1230185).
CVE-2024-44988: net: dsa: mv88e6xxx: Fix out-of-bound access (bsc#1230192).
CVE-2024-44989: bonding: fix xfrm real_dev null pointer dereference (bsc#1230193).
CVE-2024-44990: bonding: fix null pointer deref in bond_ipsec_offload_ok (bsc#1230194).
CVE-2024-44998: atm: idt77252: prevent use after free in dequeue_rx()…

Record: SUSE-SU-2024:3592-1
Updated: 2026-11-02

OSVSUSE-SU-2025:20073-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2023-52610: net/sched: act_ct: fix skb leak and crash on ooo frags (bsc#1221610).
CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225487).
CVE-2023-52916: media: aspeed: Fix memory overwrite if timing is 1600x900 (bsc#1230269).
CVE-2024-26640: tcp: add sanity checks to rx zerocopy (bsc#1221650).
CVE-2024-26759: mm/swap: fix race when skipping swapcache (bsc#1230340).
CVE-2024-26804: net: ip_tunnel: prevent perpetual headroom growth (bsc#1222629).
CVE-2024-38538: net: bridge: xmit: make sure we have at least eth header len bytes (bsc#1226606).
CVE-2024-38596: af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg (bsc#1226846).
CVE-2024-40965: i2c: lpi2c: Avoid calling clk_get_rate during transfer (bsc#1227885).
CVE-2024-40973: media: mtk-vcodec: potential null pointer deference in SCP (bsc#1227890).
CVE-2024-40983: tipc: force a dst refcount before doing decryption (bsc#1227819).
CVE-2024-42154: tcp_metrics: validate source addr length (bsc#1228507).
CVE-2024-42243: mm/filemap: make MAX_PAGECACHE_ORDER acceptable to xarray (bsc#1229001).
CVE-2024-42252: closures: Change BUG_ON() to WARN_ON() (bsc#1229004).
CVE-2024-42265: protect the fetch of ->fd[fd] in do_dup2() from mispredictions (bsc#1229334).
CVE-2024-42294: block: fix deadlock between sd_remove & sd_release (bsc#1229371).
CVE-2024-42304: ext4: make sure the first directory block is not a hole (bsc#1229364).
CVE-2024-42305: ext4: check dot and dotdot of dx_root before making dir indexed (bsc#1229363).
CVE-2024-42306: udf: Avoid using corrupted block bitmap buffer (bsc#1229362).
CVE-2024-43828: ext4: fix infinite loop when replaying fast_commit (bsc#1229394).
CVE-2024-43832: s390/uv: Do not call folio_wait_writeback() without a folio reference (bsc#1229380).
CVE-2024-43845: udf: Fix bogus checksum computation in udf_rename() (bsc#1229389).
CVE-2024-43890: tracing: Fix overflow in get_free_elt() (bsc#1229764).
CVE-2024-43898: ext4: sanity check for NULL pointer after ext4_force_shutdown (bsc#1229753).
CVE-2024-43914: md/raid5: avoid BUG_ON() while continue reshape after reassembling (bsc#1229790).
CVE-2024-44935: sctp: Fix null-ptr-deref in reuseport_add_sock() (bsc#1229810).
CVE-2024-44944: netfilter: ctnetlink: use helper function to calculate expect ID (bsc#1229899).
CVE-2024-44946: kcm: Serialise kcm_sendmsg() for the same socket (bsc#1230015).
CVE-2024-44950: serial: sc16is7xx: fix invalid FIFO access with special register set (bsc#1230180).
CVE-2024-44951: serial: sc16is7xx: fix TX fifo corruption (bsc#1230181).
CVE-2024-44970: net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (bsc#1230209).
CVE-2024-44971: net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register() (bsc#1230211).
CVE-2024-44984: bnxt_en: Fix double DMA unmapping for XDP_REDIRECT (bsc#1230240).
CVE-2024-44985: ipv6: prevent possible UAF in ip6_xmit() (bsc#1230206).
CVE-2024-44987: ipv6: prevent UAF in ip6_send_skb() (bsc#1230185).
CVE-2024-44988: net: dsa: mv88e6xxx: Fix out-of-bound access (bsc#1230192).
CVE-2024-44989: bonding: fix xfrm real_dev null pointer dereference (bsc#1230193).
CVE-2024-44990: bonding: fix null pointer deref in bond_ipsec_offload_ok (bsc#1230194).
CVE-2024-44991: tcp: prevent concurrent execution of tcp_sk_exit_batch (bsc#1230195).
CVE-2024-44998: atm: idt77252: prevent use after free in dequeue_rx() (bsc#1230171).
CVE-2024-44999: gtp: pull network headers in gtp_dev_xmit() (bsc#1230233).
CVE-2024-45002: rtla/osnoise: Prevent NULL dereference in error handling (bsc#1230169).
CVE-2024-45003: Don't evict inode under the inode lru traversing context (bsc#1230245).
CVE-2024-45013: nvme: move stopping keep-alive into nvme_uninit_ctrl() (bsc#1230442).
CVE-2024-45017: net/mlx5: Fix IPsec…

Record: SUSE-SU-2025:20073-1
Updated: 2026-11-02

OSVSUSE-SU-2025:20077-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2023-52610: net/sched: act_ct: fix skb leak and crash on ooo frags (bsc#1221610).
CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225487).
CVE-2023-52916: media: aspeed: Fix memory overwrite if timing is 1600x900 (bsc#1230269).
CVE-2024-26640: tcp: add sanity checks to rx zerocopy (bsc#1221650).
CVE-2024-26759: mm/swap: fix race when skipping swapcache (bsc#1230340).
CVE-2024-26804: net: ip_tunnel: prevent perpetual headroom growth (bsc#1222629).
CVE-2024-38538: net: bridge: xmit: make sure we have at least eth header len bytes (bsc#1226606).
CVE-2024-38596: af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg (bsc#1226846).
CVE-2024-40965: i2c: lpi2c: Avoid calling clk_get_rate during transfer (bsc#1227885).
CVE-2024-40973: media: mtk-vcodec: potential null pointer deference in SCP (bsc#1227890).
CVE-2024-40983: tipc: force a dst refcount before doing decryption (bsc#1227819).
CVE-2024-42154: tcp_metrics: validate source addr length (bsc#1228507).
CVE-2024-42243: mm/filemap: make MAX_PAGECACHE_ORDER acceptable to xarray (bsc#1229001).
CVE-2024-42252: closures: Change BUG_ON() to WARN_ON() (bsc#1229004).
CVE-2024-42265: protect the fetch of ->fd[fd] in do_dup2() from mispredictions (bsc#1229334).
CVE-2024-42294: block: fix deadlock between sd_remove & sd_release (bsc#1229371).
CVE-2024-42304: ext4: make sure the first directory block is not a hole (bsc#1229364).
CVE-2024-42305: ext4: check dot and dotdot of dx_root before making dir indexed (bsc#1229363).
CVE-2024-42306: udf: Avoid using corrupted block bitmap buffer (bsc#1229362).
CVE-2024-43828: ext4: fix infinite loop when replaying fast_commit (bsc#1229394).
CVE-2024-43832: s390/uv: Do not call folio_wait_writeback() without a folio reference (bsc#1229380).
CVE-2024-43845: udf: Fix bogus checksum computation in udf_rename() (bsc#1229389).
CVE-2024-43890: tracing: Fix overflow in get_free_elt() (bsc#1229764).
CVE-2024-43898: ext4: sanity check for NULL pointer after ext4_force_shutdown (bsc#1229753).
CVE-2024-43914: md/raid5: avoid BUG_ON() while continue reshape after reassembling (bsc#1229790).
CVE-2024-44935: sctp: Fix null-ptr-deref in reuseport_add_sock() (bsc#1229810).
CVE-2024-44944: netfilter: ctnetlink: use helper function to calculate expect ID (bsc#1229899).
CVE-2024-44946: kcm: Serialise kcm_sendmsg() for the same socket (bsc#1230015).
CVE-2024-44950: serial: sc16is7xx: fix invalid FIFO access with special register set (bsc#1230180).
CVE-2024-44951: serial: sc16is7xx: fix TX fifo corruption (bsc#1230181).
CVE-2024-44970: net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (bsc#1230209).
CVE-2024-44971: net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register() (bsc#1230211).
CVE-2024-44984: bnxt_en: Fix double DMA unmapping for XDP_REDIRECT (bsc#1230240).
CVE-2024-44985: ipv6: prevent possible UAF in ip6_xmit() (bsc#1230206).
CVE-2024-44987: ipv6: prevent UAF in ip6_send_skb() (bsc#1230185).
CVE-2024-44988: net: dsa: mv88e6xxx: Fix out-of-bound access (bsc#1230192).
CVE-2024-44989: bonding: fix xfrm real_dev null pointer dereference (bsc#1230193).
CVE-2024-44990: bonding: fix null pointer deref in bond_ipsec_offload_ok (bsc#1230194).
CVE-2024-44991: tcp: prevent concurrent execution of tcp_sk_exit_batch (bsc#1230195).
CVE-2024-44998: atm: idt77252: prevent use after free in dequeue_rx() (bsc#1230171).
CVE-2024-44999: gtp: pull network headers in gtp_dev_xmit() (bsc#1230233).
CVE-2024-45002: rtla/osnoise: Prevent NULL dereference in error handling (bsc#1230169).
CVE-2024-45003: Don't evict inode under the inode lru traversing context (bsc#1230245).
CVE-2024-45013: nvme: move stopping keep-alive into nvme_uninit_ctrl() (bsc#1230442).
CVE-2024-45017: net/mlx5: Fix…

Record: SUSE-SU-2025:20077-1
Updated: 2026-11-02

OSVUSN-7003-1 No score

linux, linux-aws, linux-azure, linux-bluefield, linux-gcp, linux-gkeop, linux-ibm, linux-kvm, linux-oracle vulnerabilities

It was discovered that the JFS file system contained an out-of-bounds read vulnerability when printing xattr debug information. A local attacker could use this to cause a denial of service (system crash). (CVE-2024-40902)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

MIPS architecture;
PowerPC architecture;
x86 architecture;
ACPI drivers;
Serial ATA and Parallel ATA drivers;
Drivers core;
GPIO subsystem;
GPU drivers;
Greybus drivers;
HID subsystem;
I2C subsystem;
IIO subsystem;
InfiniBand drivers;
Media drivers;
VMware VMCI Driver;
Network drivers;
Pin controllers subsystem;
S/390 drivers;
SCSI drivers;
USB subsystem;
JFFS2 file system;
JFS file system;
File systems infrastructure;
NILFS2 file system;
IOMMU subsystem;
Sun RPC protocol;
Netfilter;
Memory management;
B.A.T.M.A.N. meshing protocol;
CAN network layer;
Ceph Core library;
Networking core;
IPv4 networking;
IPv6 networking;
IUCV driver;
MAC80211 subsystem;
NET/ROM layer;
Network traffic control;
SoC Audio for Freescale CPUs drivers; (CVE-2024-40905, CVE-2024-41095, CVE-2024-41035, CVE-2024-36974, CVE-2024-40959, CVE-2024-40978, CVE-2024-42236, CVE-2024-40963, CVE-2024-40916, CVE-2024-41006, CVE-2024-39495, CVE-2023-52803, CVE-2024-42070, CVE-2024-41041, CVE-2024-42157, CVE-2024-36894, CVE-2024-42153, CVE-2024-42127, CVE-2024-42224, CVE-2024-40932, CVE-2024-42105, CVE-2024-40968, CVE-2024-41044, CVE-2024-41046, CVE-2023-52887, CVE-2024-42094, CVE-2024-40960, CVE-2024-41007, CVE-2024-40961, CVE-2024-39487, CVE-2024-39502, CVE-2024-42086, CVE-2024-36978, CVE-2024-39503, CVE-2024-41049, CVE-2024-42090, CVE-2024-42232, CVE-2024-39499, CVE-2024-40902, CVE-2024-37078, CVE-2024-39501, CVE-2024-42119, CVE-2024-40901, CVE-2024-42101, CVE-2024-42104, CVE-2024-42145, CVE-2024-41097, CVE-2024-40942, CVE-2024-41034, CVE-2024-40904, CVE-2024-41089, CVE-2024-42084, CVE-2024-42093, CVE-2024-40945, CVE-2024-40958, CVE-2024-42124, CVE-2024-40987, CVE-2024-40912, CVE-2024-39506, CVE-2024-40941, CVE-2024-39509, CVE-2024-40974, CVE-2024-39505, CVE-2024-42115, CVE-2024-40988, CVE-2024-40995, CVE-2024-42097, CVE-2024-41087, CVE-2024-42106, CVE-2024-40984, CVE-2024-40981, CVE-2024-42102, CVE-2024-42148, CVE-2024-42154, CVE-2024-42096, CVE-2024-40934, CVE-2024-40980, CVE-2024-42076, CVE-2024-40943, CVE-2024-42092, CVE-2024-42089, CVE-2024-42223, CVE-2024-38619, CVE-2024-42087, CVE-2024-39469)

Record: USN-7003-1
Updated: 2026-11-02

OSVUSN-7003-2 No score

linux-aws-5.4, linux-azure-5.4, linux-gcp-5.4, linux-hwe-5.4, linux-ibm-5.4, linux-oracle-5.4 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

MIPS architecture;
PowerPC architecture;
x86 architecture;
ACPI drivers;
Serial ATA and Parallel ATA drivers;
Drivers core;
GPIO subsystem;
GPU drivers;
Greybus drivers;
HID subsystem;
I2C subsystem;
IIO subsystem;
InfiniBand drivers;
Media drivers;
VMware VMCI Driver;
Network drivers;
Pin controllers subsystem;
S/390 drivers;
SCSI drivers;
USB subsystem;
JFFS2 file system;
JFS file system;
File systems infrastructure;
NILFS2 file system;
IOMMU subsystem;
Sun RPC protocol;
Netfilter;
Memory management;
B.A.T.M.A.N. meshing protocol;
CAN network layer;
Ceph Core library;
Networking core;
IPv4 networking;
IPv6 networking;
IUCV driver;
MAC80211 subsystem;
NET/ROM layer;
Network traffic control;
SoC Audio for Freescale CPUs drivers; (CVE-2024-40941, CVE-2024-42086, CVE-2024-41097, CVE-2024-40958, CVE-2024-41089, CVE-2024-40942, CVE-2024-40968, CVE-2024-40934, CVE-2024-40902, CVE-2024-42124, CVE-2023-52887, CVE-2024-42115, CVE-2024-41041, CVE-2024-39501, CVE-2024-40932, CVE-2024-42102, CVE-2024-40960, CVE-2024-39487, CVE-2024-39503, CVE-2024-40945, CVE-2024-40959, CVE-2024-40987, CVE-2024-40995, CVE-2024-40988, CVE-2024-42084, CVE-2024-40943, CVE-2024-42070, CVE-2024-40904, CVE-2024-41049, CVE-2024-41046, CVE-2024-39502, CVE-2024-42097, CVE-2024-42090, CVE-2024-42236, CVE-2024-42223, CVE-2024-42094, CVE-2024-41007, CVE-2024-42105, CVE-2024-41035, CVE-2024-41087, CVE-2024-42157, CVE-2024-39495, CVE-2024-36894, CVE-2024-40916, CVE-2024-39469, CVE-2024-40974, CVE-2024-42153, CVE-2024-36974, CVE-2024-42096, CVE-2024-42232, CVE-2024-40980, CVE-2024-41034, CVE-2024-42087, CVE-2024-42093, CVE-2024-41095, CVE-2024-42145, CVE-2024-42148, CVE-2023-52803, CVE-2024-39499, CVE-2024-42104, CVE-2024-42224, CVE-2024-37078, CVE-2024-42092, CVE-2024-39505, CVE-2024-38619, CVE-2024-42106, CVE-2024-40978, CVE-2024-41044, CVE-2024-42089, CVE-2024-40981, CVE-2024-42154, CVE-2024-36978, CVE-2024-42076, CVE-2024-40984, CVE-2024-42127, CVE-2024-42119, CVE-2024-40961, CVE-2024-39509, CVE-2024-42101, CVE-2024-40901, CVE-2024-40963, CVE-2024-40905, CVE-2024-39506, CVE-2024-40912, CVE-2024-41006)

Record: USN-7003-2
Updated: 2026-11-02

OSVUSN-7003-3 No score

linux-xilinx-zynqmp vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

MIPS architecture;
PowerPC architecture;
x86 architecture;
ACPI drivers;
Serial ATA and Parallel ATA drivers;
Drivers core;
GPIO subsystem;
GPU drivers;
Greybus drivers;
HID subsystem;
I2C subsystem;
IIO subsystem;
InfiniBand drivers;
Media drivers;
VMware VMCI Driver;
Network drivers;
Pin controllers subsystem;
S/390 drivers;
SCSI drivers;
USB subsystem;
JFFS2 file system;
JFS file system;
File systems infrastructure;
NILFS2 file system;
IOMMU subsystem;
Sun RPC protocol;
Netfilter;
Memory management;
B.A.T.M.A.N. meshing protocol;
CAN network layer;
Ceph Core library;
Networking core;
IPv4 networking;
IPv6 networking;
IUCV driver;
MAC80211 subsystem;
NET/ROM layer;
Network traffic control;
SoC Audio for Freescale CPUs drivers; (CVE-2024-42094, CVE-2024-42154, CVE-2024-42101, CVE-2024-40995, CVE-2024-40959, CVE-2024-42076, CVE-2024-40961, CVE-2024-42096, CVE-2024-42092, CVE-2024-39501, CVE-2024-41046, CVE-2024-42087, CVE-2024-39502, CVE-2024-42090, CVE-2024-40974, CVE-2024-40942, CVE-2024-39509, CVE-2024-40934, CVE-2024-42148, CVE-2024-42127, CVE-2024-42115, CVE-2024-39505, CVE-2024-36978, CVE-2024-39503, CVE-2024-40912, CVE-2024-41034, CVE-2024-42119, CVE-2024-41006, CVE-2024-40902, CVE-2024-40968, CVE-2024-39499, CVE-2024-42093, CVE-2024-40941, CVE-2024-42106, CVE-2024-42145, CVE-2024-41097, CVE-2024-36974, CVE-2024-41044, CVE-2024-39495, CVE-2024-40981, CVE-2024-40987, CVE-2024-42232, CVE-2024-40905, CVE-2024-39506, CVE-2024-42153, CVE-2024-41007, CVE-2024-40978, CVE-2024-40960, CVE-2023-52887, CVE-2024-41087, CVE-2024-41049, CVE-2024-42086, CVE-2024-40958, CVE-2024-40980, CVE-2024-42084, CVE-2024-42224, CVE-2024-39487, CVE-2024-40943, CVE-2024-40984, CVE-2024-41095, CVE-2024-41035, CVE-2024-41089, CVE-2024-36894, CVE-2024-42104, CVE-2024-40988, CVE-2024-42105, CVE-2024-39469, CVE-2024-40901, CVE-2024-40963, CVE-2024-42097, CVE-2024-42089, CVE-2024-42124, CVE-2024-42223, CVE-2023-52803, CVE-2024-42070, CVE-2024-42157, CVE-2024-42102, CVE-2024-40916, CVE-2024-40904, CVE-2024-41041, CVE-2024-40932, CVE-2024-40945, CVE-2024-38619, CVE-2024-37078, CVE-2024-42236)

Record: USN-7003-3
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`bpftool` AlmaLinux:8 From an advisory covering 145 CVEs	before 4.18.0-553.22.1.el8_10	4.18.0-553.22.1.el8_10
`kernel` AlmaLinux:8 From an advisory covering 145 CVEs	before 4.18.0-553.22.1.el8_10	4.18.0-553.22.1.el8_10
`kernel-abi-stablelists` AlmaLinux:8 From an advisory covering 145 CVEs	before 4.18.0-553.22.1.el8_10	4.18.0-553.22.1.el8_10
`kernel-core` AlmaLinux:8 From an advisory covering 145 CVEs	before 4.18.0-553.22.1.el8_10	4.18.0-553.22.1.el8_10
`kernel-cross-headers` AlmaLinux:8 From an advisory covering 145 CVEs	before 4.18.0-553.22.1.el8_10	4.18.0-553.22.1.el8_10
`kernel-debug` AlmaLinux:8 From an advisory covering 145 CVEs	before 4.18.0-553.22.1.el8_10	4.18.0-553.22.1.el8_10
`kernel-debug-core` AlmaLinux:8 From an advisory covering 145 CVEs	before 4.18.0-553.22.1.el8_10	4.18.0-553.22.1.el8_10
`kernel-debug-devel` AlmaLinux:8 From an advisory covering 145 CVEs	before 4.18.0-553.22.1.el8_10	4.18.0-553.22.1.el8_10
`kernel-debug-modules` AlmaLinux:8 From an advisory covering 145 CVEs	before 4.18.0-553.22.1.el8_10	4.18.0-553.22.1.el8_10
`kernel-debug-modules-extra` AlmaLinux:8 From an advisory covering 145 CVEs	before 4.18.0-553.22.1.el8_10	4.18.0-553.22.1.el8_10

Show 290 moreShow less

Affected packages
Package	Affected	Fixed
`kernel-devel` AlmaLinux:8 From an advisory covering 145 CVEs	before 4.18.0-553.22.1.el8_10	4.18.0-553.22.1.el8_10
`kernel-doc` AlmaLinux:8 From an advisory covering 145 CVEs	before 4.18.0-553.22.1.el8_10	4.18.0-553.22.1.el8_10
`kernel-headers` AlmaLinux:8 From an advisory covering 145 CVEs	before 4.18.0-553.22.1.el8_10	4.18.0-553.22.1.el8_10
`kernel-modules` AlmaLinux:8 From an advisory covering 145 CVEs	before 4.18.0-553.22.1.el8_10	4.18.0-553.22.1.el8_10
`kernel-modules-extra` AlmaLinux:8 From an advisory covering 145 CVEs	before 4.18.0-553.22.1.el8_10	4.18.0-553.22.1.el8_10
`kernel-tools` AlmaLinux:8 From an advisory covering 145 CVEs	before 4.18.0-553.22.1.el8_10	4.18.0-553.22.1.el8_10
`kernel-tools-libs` AlmaLinux:8 From an advisory covering 145 CVEs	before 4.18.0-553.22.1.el8_10	4.18.0-553.22.1.el8_10
`kernel-tools-libs-devel` AlmaLinux:8 From an advisory covering 145 CVEs	before 4.18.0-553.22.1.el8_10	4.18.0-553.22.1.el8_10
`kernel-zfcpdump` AlmaLinux:8 From an advisory covering 145 CVEs	before 4.18.0-553.22.1.el8_10	4.18.0-553.22.1.el8_10
`kernel-zfcpdump-core` AlmaLinux:8 From an advisory covering 145 CVEs	before 4.18.0-553.22.1.el8_10	4.18.0-553.22.1.el8_10
`kernel-zfcpdump-devel` AlmaLinux:8 From an advisory covering 145 CVEs	before 4.18.0-553.22.1.el8_10	4.18.0-553.22.1.el8_10
`kernel-zfcpdump-modules` AlmaLinux:8 From an advisory covering 145 CVEs	before 4.18.0-553.22.1.el8_10	4.18.0-553.22.1.el8_10
`kernel-zfcpdump-modules-extra` AlmaLinux:8 From an advisory covering 145 CVEs	before 4.18.0-553.22.1.el8_10	4.18.0-553.22.1.el8_10
`perf` AlmaLinux:8 From an advisory covering 145 CVEs	before 4.18.0-553.22.1.el8_10	4.18.0-553.22.1.el8_10
`python3-perf` AlmaLinux:8 From an advisory covering 145 CVEs	before 4.18.0-553.22.1.el8_10	4.18.0-553.22.1.el8_10
`kernel-rt` AlmaLinux:8 From an advisory covering 129 CVEs	before 4.18.0-553.22.1.rt7.363.el8_10	4.18.0-553.22.1.rt7.363.el8_10
`kernel-rt-core` AlmaLinux:8 From an advisory covering 129 CVEs	before 4.18.0-553.22.1.rt7.363.el8_10	4.18.0-553.22.1.rt7.363.el8_10
`kernel-rt-debug` AlmaLinux:8 From an advisory covering 129 CVEs	before 4.18.0-553.22.1.rt7.363.el8_10	4.18.0-553.22.1.rt7.363.el8_10
`kernel-rt-debug-core` AlmaLinux:8 From an advisory covering 129 CVEs	before 4.18.0-553.22.1.rt7.363.el8_10	4.18.0-553.22.1.rt7.363.el8_10
`kernel-rt-debug-devel` AlmaLinux:8 From an advisory covering 129 CVEs	before 4.18.0-553.22.1.rt7.363.el8_10	4.18.0-553.22.1.rt7.363.el8_10
`kernel-rt-debug-kvm` AlmaLinux:8 From an advisory covering 129 CVEs	before 4.18.0-553.22.1.rt7.363.el8_10	4.18.0-553.22.1.rt7.363.el8_10
`kernel-rt-debug-modules` AlmaLinux:8 From an advisory covering 129 CVEs	before 4.18.0-553.22.1.rt7.363.el8_10	4.18.0-553.22.1.rt7.363.el8_10
`kernel-rt-debug-modules-extra` AlmaLinux:8 From an advisory covering 129 CVEs	before 4.18.0-553.22.1.rt7.363.el8_10	4.18.0-553.22.1.rt7.363.el8_10
`kernel-rt-devel` AlmaLinux:8 From an advisory covering 129 CVEs	before 4.18.0-553.22.1.rt7.363.el8_10	4.18.0-553.22.1.rt7.363.el8_10
`kernel-rt-kvm` AlmaLinux:8 From an advisory covering 129 CVEs	before 4.18.0-553.22.1.rt7.363.el8_10	4.18.0-553.22.1.rt7.363.el8_10
`kernel-rt-modules` AlmaLinux:8 From an advisory covering 129 CVEs	before 4.18.0-553.22.1.rt7.363.el8_10	4.18.0-553.22.1.rt7.363.el8_10
`kernel-rt-modules-extra` AlmaLinux:8 From an advisory covering 129 CVEs	before 4.18.0-553.22.1.rt7.363.el8_10	4.18.0-553.22.1.rt7.363.el8_10
`kernel` Azure Linux:3	before 6.6.43.1-7	6.6.43.1-7
`kernel` Azure Linux:2	before 5.15.164.1-1	5.15.164.1-1
`linux-lts` Alpaquita:23	6.1.97-r0 up to 6.1.99-r0	6.1.99-r0
`linux-lts` Alpaquita:25	6.6.89-r0 up to 6.12.41-r0	6.12.41-r0
`linux-lts` Alpaquita:stream	6.6.100-r0 up to 6.12.41-r0	6.12.41-r0
`linux-buildinfo-4.4.0-262-tuxcare.els33-generic` TuxCare:Ubuntu:16.04 From an advisory covering 19 CVEs	before 4.4.0-262.296	4.4.0-262.296
`linux-buildinfo-4.4.0-262-tuxcare.els33-lowlatency` TuxCare:Ubuntu:16.04 From an advisory covering 19 CVEs	before 4.4.0-262.296	4.4.0-262.296
`linux-cloud-tools-4.4.0-262-tuxcare.els33` TuxCare:Ubuntu:16.04 From an advisory covering 19 CVEs	before 4.4.0-262.296	4.4.0-262.296
`linux-cloud-tools-4.4.0-262-tuxcare.els33-generic` TuxCare:Ubuntu:16.04 From an advisory covering 19 CVEs	before 4.4.0-262.296	4.4.0-262.296
`linux-cloud-tools-4.4.0-262-tuxcare.els33-lowlatency` TuxCare:Ubuntu:16.04 From an advisory covering 19 CVEs	before 4.4.0-262.296	4.4.0-262.296
`linux-cloud-tools-common` TuxCare:Ubuntu:16.04 From an advisory covering 19 CVEs	before 4.4.0-262.296	4.4.0-262.296
`linux-cloud-tools-generic` TuxCare:Ubuntu:16.04 From an advisory covering 19 CVEs	before 4.4.0.262.296	4.4.0.262.296
`linux-cloud-tools-lowlatency` TuxCare:Ubuntu:16.04 From an advisory covering 19 CVEs	before 4.4.0.262.296	4.4.0.262.296
`linux-crashdump` TuxCare:Ubuntu:16.04 From an advisory covering 19 CVEs	before 4.4.0.262.296	4.4.0.262.296
`linux-doc` TuxCare:Ubuntu:16.04 From an advisory covering 19 CVEs	before 4.4.0-262.296	4.4.0-262.296
`linux-generic` TuxCare:Ubuntu:16.04 From an advisory covering 19 CVEs	before 4.4.0.262.296	4.4.0.262.296
`linux-headers-4.4.0-262-tuxcare.els33` TuxCare:Ubuntu:16.04 From an advisory covering 19 CVEs	before 4.4.0-262.296	4.4.0-262.296
`linux-headers-4.4.0-262-tuxcare.els33-generic` TuxCare:Ubuntu:16.04 From an advisory covering 19 CVEs	before 4.4.0-262.296	4.4.0-262.296
`linux-headers-4.4.0-262-tuxcare.els33-lowlatency` TuxCare:Ubuntu:16.04 From an advisory covering 19 CVEs	before 4.4.0-262.296	4.4.0-262.296
`linux-headers-generic` TuxCare:Ubuntu:16.04 From an advisory covering 19 CVEs	before 4.4.0.262.296	4.4.0.262.296
`linux-headers-lowlatency` TuxCare:Ubuntu:16.04 From an advisory covering 19 CVEs	before 4.4.0.262.296	4.4.0.262.296
`linux-image-generic` TuxCare:Ubuntu:16.04 From an advisory covering 19 CVEs	before 4.4.0.262.296	4.4.0.262.296
`linux-image-lowlatency` TuxCare:Ubuntu:16.04 From an advisory covering 19 CVEs	before 4.4.0.262.296	4.4.0.262.296
`linux-image-unsigned-4.4.0-262-tuxcare.els33-generic` TuxCare:Ubuntu:16.04 From an advisory covering 19 CVEs	before 4.4.0-262.296	4.4.0-262.296
`linux-image-unsigned-4.4.0-262-tuxcare.els33-lowlatency` TuxCare:Ubuntu:16.04 From an advisory covering 19 CVEs	before 4.4.0-262.296	4.4.0-262.296
`linux-libc-dev` TuxCare:Ubuntu:16.04 From an advisory covering 19 CVEs	before 4.4.0-262.296	4.4.0-262.296
`linux-lowlatency` TuxCare:Ubuntu:16.04 From an advisory covering 19 CVEs	before 4.4.0.262.296	4.4.0.262.296
`linux-modules-4.4.0-262-tuxcare.els33-generic` TuxCare:Ubuntu:16.04 From an advisory covering 19 CVEs	before 4.4.0-262.296	4.4.0-262.296
`linux-modules-4.4.0-262-tuxcare.els33-lowlatency` TuxCare:Ubuntu:16.04 From an advisory covering 19 CVEs	before 4.4.0-262.296	4.4.0-262.296
`linux-modules-extra-4.4.0-262-tuxcare.els33-generic` TuxCare:Ubuntu:16.04 From an advisory covering 19 CVEs	before 4.4.0-262.296	4.4.0-262.296
`linux-source` TuxCare:Ubuntu:16.04 From an advisory covering 19 CVEs	before 4.4.0.262.296	4.4.0.262.296
`linux-source-4.4.0` TuxCare:Ubuntu:16.04 From an advisory covering 19 CVEs	before 4.4.0-262.296	4.4.0-262.296
`linux-tools-4.4.0-262-tuxcare.els33` TuxCare:Ubuntu:16.04 From an advisory covering 19 CVEs	before 4.4.0-262.296	4.4.0-262.296
`linux-tools-4.4.0-262-tuxcare.els33-generic` TuxCare:Ubuntu:16.04 From an advisory covering 19 CVEs	before 4.4.0-262.296	4.4.0-262.296
`linux-tools-4.4.0-262-tuxcare.els33-lowlatency` TuxCare:Ubuntu:16.04 From an advisory covering 19 CVEs	before 4.4.0-262.296	4.4.0-262.296
`linux-tools-common` TuxCare:Ubuntu:16.04 From an advisory covering 19 CVEs	before 4.4.0-262.296	4.4.0-262.296
`linux-tools-generic` TuxCare:Ubuntu:16.04 From an advisory covering 19 CVEs	before 4.4.0.262.296	4.4.0.262.296
`linux-tools-host` TuxCare:Ubuntu:16.04 From an advisory covering 19 CVEs	before 4.4.0-262.296	4.4.0-262.296
`linux-tools-lowlatency` TuxCare:Ubuntu:16.04 From an advisory covering 19 CVEs	before 4.4.0.262.296	4.4.0.262.296
`linux-buildinfo-4.15.0-234-tuxcare.els32-generic` TuxCare:Ubuntu:16.04 From an advisory covering 29 CVEs	before 4.15.0-234.245~16.04.1	4.15.0-234.245~16.04.1
`linux-buildinfo-4.15.0-234-tuxcare.els32-lowlatency` TuxCare:Ubuntu:16.04 From an advisory covering 29 CVEs	before 4.15.0-234.245~16.04.1	4.15.0-234.245~16.04.1
`linux-cloud-tools-4.15.0-234-tuxcare.els32-generic` TuxCare:Ubuntu:16.04 From an advisory covering 29 CVEs	before 4.15.0-234.245~16.04.1	4.15.0-234.245~16.04.1
`linux-cloud-tools-4.15.0-234-tuxcare.els32-lowlatency` TuxCare:Ubuntu:16.04 From an advisory covering 29 CVEs	before 4.15.0-234.245~16.04.1	4.15.0-234.245~16.04.1
`linux-headers-4.15.0-234-tuxcare.els32` TuxCare:Ubuntu:16.04 From an advisory covering 29 CVEs	before 4.15.0-234.245~16.04.1	4.15.0-234.245~16.04.1
`linux-headers-4.15.0-234-tuxcare.els32-generic` TuxCare:Ubuntu:16.04 From an advisory covering 29 CVEs	before 4.15.0-234.245~16.04.1	4.15.0-234.245~16.04.1
`linux-headers-4.15.0-234-tuxcare.els32-lowlatency` TuxCare:Ubuntu:16.04 From an advisory covering 29 CVEs	before 4.15.0-234.245~16.04.1	4.15.0-234.245~16.04.1
`linux-hwe-cloud-tools-4.15.0-234-tuxcare.els32` TuxCare:Ubuntu:16.04 From an advisory covering 29 CVEs	before 4.15.0-234.245~16.04.1	4.15.0-234.245~16.04.1
`linux-hwe-tools-4.15.0-234-tuxcare.els32` TuxCare:Ubuntu:16.04 From an advisory covering 29 CVEs	before 4.15.0-234.245~16.04.1	4.15.0-234.245~16.04.1
`linux-image-unsigned-4.15.0-234-tuxcare.els32-generic` TuxCare:Ubuntu:16.04 From an advisory covering 29 CVEs	before 4.15.0-234.245~16.04.1	4.15.0-234.245~16.04.1
`linux-image-unsigned-4.15.0-234-tuxcare.els32-lowlatency` TuxCare:Ubuntu:16.04 From an advisory covering 29 CVEs	before 4.15.0-234.245~16.04.1	4.15.0-234.245~16.04.1
`linux-modules-4.15.0-234-tuxcare.els32-generic` TuxCare:Ubuntu:16.04 From an advisory covering 29 CVEs	before 4.15.0-234.245~16.04.1	4.15.0-234.245~16.04.1
`linux-modules-4.15.0-234-tuxcare.els32-lowlatency` TuxCare:Ubuntu:16.04 From an advisory covering 29 CVEs	before 4.15.0-234.245~16.04.1	4.15.0-234.245~16.04.1
`linux-modules-extra-4.15.0-234-tuxcare.els32-generic` TuxCare:Ubuntu:16.04 From an advisory covering 29 CVEs	before 4.15.0-234.245~16.04.1	4.15.0-234.245~16.04.1
`linux-source-4.15.0` TuxCare:Ubuntu:16.04 From an advisory covering 29 CVEs	before 4.15.0-234.245~16.04.1	4.15.0-234.245~16.04.1
`linux-tools-4.15.0-234-tuxcare.els32-generic` TuxCare:Ubuntu:16.04 From an advisory covering 29 CVEs	before 4.15.0-234.245~16.04.1	4.15.0-234.245~16.04.1
`linux-tools-4.15.0-234-tuxcare.els32-lowlatency` TuxCare:Ubuntu:16.04 From an advisory covering 29 CVEs	before 4.15.0-234.245~16.04.1	4.15.0-234.245~16.04.1
`linux-buildinfo-4.15.0-234-tuxcare.els22-generic` TuxCare:Ubuntu:18.04 From an advisory covering 29 CVEs	before 4.15.0-234.245	4.15.0-234.245
`linux-buildinfo-4.15.0-234-tuxcare.els22-lowlatency` TuxCare:Ubuntu:18.04 From an advisory covering 29 CVEs	before 4.15.0-234.245	4.15.0-234.245
`Kernel` Linux	3.14.0 up to 4.19.318, 4.20.0 up to 5.4.280, 5.5.0 up to 5.10.222, 5.11.0 up to 5.15.163, 5.16.0 up to 6.1.98, 6.2.0 up to 6.6.39, 6.7.0 up to 6.9.9	4.19.3185.4.2805.10.2225.15.1636.1.986.6.396.9.9
`linux` Debian:12	before 6.1.98-1, plus listed versions 6.1.27-16.1.37-16.1.38-16.1.38-26.1.38-2~bpo11+1 Show 19 moreShow less 6.1.38-36.1.38-46.1.38-4~bpo11+16.1.52-16.1.55-16.1.55-1~bpo11+16.1.64-16.1.66-16.1.67-16.1.69-16.1.69-1~bpo11+16.1.76-16.1.76-1~bpo11+16.1.82-16.1.85-16.1.90-16.1.90-1~bpo11+16.1.94-16.1.94-1~bpo11+1	6.1.98-1
`linux` Debian:13	before 6.9.9-1	6.9.9-1
`linux` Debian:14	before 6.9.9-1	6.9.9-1
`linux-6.1` Debian:11 From an advisory covering 838 CVEs	before 6.1.119-1~deb11u1, plus listed versions 6.1.106-3~deb11u16.1.106-3~deb11u26.1.106-3~deb11u36.1.112-1~deb11u1	6.1.119-1~deb11u1
`linux` Debian:11 From an advisory covering 60 CVEs	before 5.10.223-1, plus listed versions 5.10.103-15.10.103-1~bpo10+15.10.106-15.10.113-15.10.120-1 Show 37 moreShow less 5.10.120-1~bpo10+15.10.127-15.10.127-25.10.127-2~bpo10+15.10.136-15.10.140-15.10.148-15.10.149-15.10.149-25.10.158-15.10.158-25.10.162-15.10.178-15.10.178-25.10.178-35.10.179-15.10.179-25.10.179-35.10.179-45.10.179-55.10.191-15.10.197-15.10.205-15.10.205-25.10.209-15.10.209-25.10.216-15.10.218-15.10.221-15.10.46-45.10.46-55.10.70-15.10.70-1~bpo10+15.10.84-15.10.92-15.10.92-1~bpo10+15.10.92-2	5.10.223-1
`kernel` Mageia:9 From an advisory covering 109 CVEs	before 6.6.43-1.mga9	6.6.43-1.mga9
`kmod-xtables-addons` Mageia:9 From an advisory covering 109 CVEs	before 3.24-60.mga9	3.24-60.mga9
`kmod-virtualbox` Mageia:9 From an advisory covering 109 CVEs	before 7.0.20-52.mga9	7.0.20-52.mga9
`kernel-linus` Mageia:9 From an advisory covering 109 CVEs	before 6.6.43-1.mga9	6.6.43-1.mga9
`kernel` openEuler:22.03-LTS-SP1 From an advisory covering 33 CVEs	before 5.10.0-136.89.0.170.oe2203sp1	5.10.0-136.89.0.170.oe2203sp1
`kernel` openEuler:22.03-LTS-SP4 From an advisory covering 34 CVEs	before 5.10.0-223.0.0.122.oe2203sp4	5.10.0-223.0.0.122.oe2203sp4
`kernel` openEuler:22.03-LTS-SP3 From an advisory covering 34 CVEs	before 5.10.0-223.0.0.126.oe2203sp3	5.10.0-223.0.0.126.oe2203sp3
`kernel` openEuler:20.03-LTS-SP4 From an advisory covering 22 CVEs	before 4.19.90-2408.3.0.0290.oe2003sp4	4.19.90-2408.3.0.0290.oe2003sp4
`kernel` openEuler:24.03-LTS From an advisory covering 17 CVEs	before 6.6.0-129.0.0.114.oe2403	6.6.0-129.0.0.114.oe2403
`bpftool-debuginfo` Red Hat:rhel_eus:9.4::appstream From an advisory covering 36 CVEs	before 0:7.3.0-427.47.1.el9_4	0:7.3.0-427.47.1.el9_4
`kernel-64k-debug-debuginfo` Red Hat:rhel_eus:9.4::appstream From an advisory covering 36 CVEs	before 0:5.14.0-427.47.1.el9_4	0:5.14.0-427.47.1.el9_4
`kernel-64k-debug-devel` Red Hat:rhel_eus:9.4::appstream From an advisory covering 36 CVEs	before 0:5.14.0-427.47.1.el9_4	0:5.14.0-427.47.1.el9_4
`kernel-64k-debug-devel-matched` Red Hat:rhel_eus:9.4::appstream From an advisory covering 36 CVEs	before 0:5.14.0-427.47.1.el9_4	0:5.14.0-427.47.1.el9_4
`kernel-64k-debuginfo` Red Hat:rhel_eus:9.4::appstream From an advisory covering 36 CVEs	before 0:5.14.0-427.47.1.el9_4	0:5.14.0-427.47.1.el9_4
`kernel-64k-devel` Red Hat:rhel_eus:9.4::appstream From an advisory covering 36 CVEs	before 0:5.14.0-427.47.1.el9_4	0:5.14.0-427.47.1.el9_4
`kernel-64k-devel-matched` Red Hat:rhel_eus:9.4::appstream From an advisory covering 36 CVEs	before 0:5.14.0-427.47.1.el9_4	0:5.14.0-427.47.1.el9_4
`kernel-debug-debuginfo` Red Hat:rhel_eus:9.4::appstream From an advisory covering 36 CVEs	before 0:5.14.0-427.47.1.el9_4	0:5.14.0-427.47.1.el9_4
`kernel-debug-devel` Red Hat:rhel_eus:9.4::appstream From an advisory covering 36 CVEs	before 0:5.14.0-427.47.1.el9_4	0:5.14.0-427.47.1.el9_4
`kernel-debug-devel-matched` Red Hat:rhel_eus:9.4::appstream From an advisory covering 36 CVEs	before 0:5.14.0-427.47.1.el9_4	0:5.14.0-427.47.1.el9_4
`kernel-debuginfo` Red Hat:rhel_eus:9.4::appstream From an advisory covering 36 CVEs	before 0:5.14.0-427.47.1.el9_4	0:5.14.0-427.47.1.el9_4
`kernel-debuginfo-common-aarch64` Red Hat:rhel_eus:9.4::appstream From an advisory covering 36 CVEs	before 0:5.14.0-427.47.1.el9_4	0:5.14.0-427.47.1.el9_4
`kernel-debuginfo-common-ppc64le` Red Hat:rhel_eus:9.4::appstream From an advisory covering 36 CVEs	before 0:5.14.0-427.47.1.el9_4	0:5.14.0-427.47.1.el9_4
`kernel-debuginfo-common-s390x` Red Hat:rhel_eus:9.4::appstream From an advisory covering 36 CVEs	before 0:5.14.0-427.47.1.el9_4	0:5.14.0-427.47.1.el9_4
`kernel-debuginfo-common-x86_64` Red Hat:rhel_eus:9.4::appstream From an advisory covering 36 CVEs	before 0:5.14.0-427.47.1.el9_4	0:5.14.0-427.47.1.el9_4
`kernel-devel` Red Hat:rhel_eus:9.4::appstream From an advisory covering 36 CVEs	before 0:5.14.0-427.47.1.el9_4	0:5.14.0-427.47.1.el9_4
`kernel-devel-matched` Red Hat:rhel_eus:9.4::appstream From an advisory covering 36 CVEs	before 0:5.14.0-427.47.1.el9_4	0:5.14.0-427.47.1.el9_4
`kernel-doc` Red Hat:rhel_eus:9.4::appstream From an advisory covering 36 CVEs	before 0:5.14.0-427.47.1.el9_4	0:5.14.0-427.47.1.el9_4
`kernel-rt-debug-debuginfo` Red Hat:rhel_eus:9.4::appstream From an advisory covering 36 CVEs	before 0:5.14.0-427.47.1.el9_4	0:5.14.0-427.47.1.el9_4
`kernel-rt-debuginfo` Red Hat:rhel_eus:9.4::appstream From an advisory covering 36 CVEs	before 0:5.14.0-427.47.1.el9_4	0:5.14.0-427.47.1.el9_4
`kernel-tools-debuginfo` Red Hat:rhel_eus:9.4::appstream From an advisory covering 36 CVEs	before 0:5.14.0-427.47.1.el9_4	0:5.14.0-427.47.1.el9_4
`kernel-zfcpdump-debuginfo` Red Hat:rhel_eus:9.4::appstream From an advisory covering 36 CVEs	before 0:5.14.0-427.47.1.el9_4	0:5.14.0-427.47.1.el9_4
`kernel-zfcpdump-devel` Red Hat:rhel_eus:9.4::appstream From an advisory covering 36 CVEs	before 0:5.14.0-427.47.1.el9_4	0:5.14.0-427.47.1.el9_4
`kernel-zfcpdump-devel-matched` Red Hat:rhel_eus:9.4::appstream From an advisory covering 36 CVEs	before 0:5.14.0-427.47.1.el9_4	0:5.14.0-427.47.1.el9_4
`libperf-debuginfo` Red Hat:rhel_eus:9.4::appstream From an advisory covering 36 CVEs	before 0:5.14.0-427.47.1.el9_4	0:5.14.0-427.47.1.el9_4
`perf` Red Hat:rhel_eus:9.4::appstream From an advisory covering 36 CVEs	before 0:5.14.0-427.47.1.el9_4	0:5.14.0-427.47.1.el9_4
`perf-debuginfo` Red Hat:rhel_eus:9.4::appstream From an advisory covering 36 CVEs	before 0:5.14.0-427.47.1.el9_4	0:5.14.0-427.47.1.el9_4
`python3-perf-debuginfo` Red Hat:rhel_eus:9.4::appstream From an advisory covering 36 CVEs	before 0:5.14.0-427.47.1.el9_4	0:5.14.0-427.47.1.el9_4
`rtla` Red Hat:rhel_eus:9.4::appstream From an advisory covering 36 CVEs	before 0:5.14.0-427.47.1.el9_4	0:5.14.0-427.47.1.el9_4
`rv` Red Hat:rhel_eus:9.4::appstream From an advisory covering 36 CVEs	before 0:5.14.0-427.47.1.el9_4	0:5.14.0-427.47.1.el9_4
`bpftool` Red Hat:rhel_eus:9.4::baseos From an advisory covering 36 CVEs	before 0:7.3.0-427.47.1.el9_4	0:7.3.0-427.47.1.el9_4
`bpftool-debuginfo` Red Hat:rhel_eus:9.4::baseos From an advisory covering 36 CVEs	before 0:7.3.0-427.47.1.el9_4	0:7.3.0-427.47.1.el9_4
`kernel` Red Hat:rhel_eus:9.4::baseos From an advisory covering 36 CVEs	before 0:5.14.0-427.47.1.el9_4	0:5.14.0-427.47.1.el9_4
`kernel-64k` Red Hat:rhel_eus:9.4::baseos From an advisory covering 36 CVEs	before 0:5.14.0-427.47.1.el9_4	0:5.14.0-427.47.1.el9_4
`kernel-64k-core` Red Hat:rhel_eus:9.4::baseos From an advisory covering 36 CVEs	before 0:5.14.0-427.47.1.el9_4	0:5.14.0-427.47.1.el9_4
`kernel-64k-debug` Red Hat:rhel_eus:9.4::baseos From an advisory covering 36 CVEs	before 0:5.14.0-427.47.1.el9_4	0:5.14.0-427.47.1.el9_4
`kernel-64k-debug-core` Red Hat:rhel_eus:9.4::baseos From an advisory covering 36 CVEs	before 0:5.14.0-427.47.1.el9_4	0:5.14.0-427.47.1.el9_4
`kernel-64k-debug-debuginfo` Red Hat:rhel_eus:9.4::baseos From an advisory covering 36 CVEs	before 0:5.14.0-427.47.1.el9_4	0:5.14.0-427.47.1.el9_4
`kernel-64k-debug-modules` Red Hat:rhel_eus:9.4::baseos From an advisory covering 36 CVEs	before 0:5.14.0-427.47.1.el9_4	0:5.14.0-427.47.1.el9_4
`kernel-64k-debug-modules-core` Red Hat:rhel_eus:9.4::baseos From an advisory covering 36 CVEs	before 0:5.14.0-427.47.1.el9_4	0:5.14.0-427.47.1.el9_4
`kernel-64k-debug-modules-extra` Red Hat:rhel_eus:9.4::baseos From an advisory covering 36 CVEs	before 0:5.14.0-427.47.1.el9_4	0:5.14.0-427.47.1.el9_4
`kernel-64k-debuginfo` Red Hat:rhel_eus:9.4::baseos From an advisory covering 36 CVEs	before 0:5.14.0-427.47.1.el9_4	0:5.14.0-427.47.1.el9_4
`kernel-64k-modules` Red Hat:rhel_eus:9.4::baseos From an advisory covering 36 CVEs	before 0:5.14.0-427.47.1.el9_4	0:5.14.0-427.47.1.el9_4
`kernel-64k-modules-core` Red Hat:rhel_eus:9.4::baseos From an advisory covering 36 CVEs	before 0:5.14.0-427.47.1.el9_4	0:5.14.0-427.47.1.el9_4
`kernel-64k-modules-extra` Red Hat:rhel_eus:9.4::baseos From an advisory covering 36 CVEs	before 0:5.14.0-427.47.1.el9_4	0:5.14.0-427.47.1.el9_4
`kernel-abi-stablelists` Red Hat:rhel_eus:9.4::baseos From an advisory covering 36 CVEs	before 0:5.14.0-427.47.1.el9_4	0:5.14.0-427.47.1.el9_4
`kernel-core` Red Hat:rhel_eus:9.4::baseos From an advisory covering 36 CVEs	before 0:5.14.0-427.47.1.el9_4	0:5.14.0-427.47.1.el9_4
`kernel-debug` Red Hat:rhel_eus:9.4::baseos From an advisory covering 36 CVEs	before 0:5.14.0-427.47.1.el9_4	0:5.14.0-427.47.1.el9_4
`kernel-debug-core` Red Hat:rhel_eus:9.4::baseos From an advisory covering 36 CVEs	before 0:5.14.0-427.47.1.el9_4	0:5.14.0-427.47.1.el9_4
`kernel-debug-debuginfo` Red Hat:rhel_eus:9.4::baseos From an advisory covering 36 CVEs	before 0:5.14.0-427.47.1.el9_4	0:5.14.0-427.47.1.el9_4
`kernel-debug-modules` Red Hat:rhel_eus:9.4::baseos From an advisory covering 36 CVEs	before 0:5.14.0-427.47.1.el9_4	0:5.14.0-427.47.1.el9_4
`kernel-debug-modules-core` Red Hat:rhel_eus:9.4::baseos From an advisory covering 36 CVEs	before 0:5.14.0-427.47.1.el9_4	0:5.14.0-427.47.1.el9_4
`kernel-debug-modules-extra` Red Hat:rhel_eus:9.4::baseos From an advisory covering 36 CVEs	before 0:5.14.0-427.47.1.el9_4	0:5.14.0-427.47.1.el9_4
`kernel` Rocky Linux:8 From an advisory covering 147 CVEs	before 0:4.18.0-553.22.1.el8_10	0:4.18.0-553.22.1.el8_10
`kernel-rt` Rocky Linux:8 From an advisory covering 129 CVEs	before 0:4.18.0-553.22.1.rt7.363.el8_10	0:4.18.0-553.22.1.rt7.363.el8_10
`kernel-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP6 From an advisory covering 162 CVEs	before 6.4.0-150600.8.14.1	6.4.0-150600.8.14.1
`kernel-source-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP6 From an advisory covering 162 CVEs	before 6.4.0-150600.8.14.1	6.4.0-150600.8.14.1
`kernel-syms-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP6 From an advisory covering 162 CVEs	before 6.4.0-150600.8.14.1	6.4.0-150600.8.14.1
`kernel-azure` openSUSE:Leap 15.6 From an advisory covering 162 CVEs	before 6.4.0-150600.8.14.1	6.4.0-150600.8.14.1
`kernel-source-azure` openSUSE:Leap 15.6 From an advisory covering 162 CVEs	before 6.4.0-150600.8.14.1	6.4.0-150600.8.14.1
`kernel-syms-azure` openSUSE:Leap 15.6 From an advisory covering 162 CVEs	before 6.4.0-150600.8.14.1	6.4.0-150600.8.14.1
`kernel-coco` SUSE:Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6 From an advisory covering 147 CVEs	before 6.4.0-15061.6.coco15sp6.1	6.4.0-15061.6.coco15sp6.1
`kernel-coco_debug` SUSE:Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6 From an advisory covering 147 CVEs	before 6.4.0-15061.6.coco15sp6.1	6.4.0-15061.6.coco15sp6.1
`kernel-source-coco` SUSE:Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6 From an advisory covering 147 CVEs	before 6.4.0-15061.6.coco15sp6.1	6.4.0-15061.6.coco15sp6.1
`kernel-syms-coco` SUSE:Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6 From an advisory covering 147 CVEs	before 6.4.0-15061.6.coco15sp6.1	6.4.0-15061.6.coco15sp6.1
`kernel-default` SUSE:Linux Enterprise High Availability Extension 12 SP5 From an advisory covering 71 CVEs	before 4.12.14-122.231.1	4.12.14-122.231.1
`kernel-default` SUSE:Linux Enterprise Live Patching 12 SP5 From an advisory covering 71 CVEs	before 4.12.14-122.231.1	4.12.14-122.231.1
`kgraft-patch-SLE12-SP5_Update_61` SUSE:Linux Enterprise Live Patching 12 SP5 From an advisory covering 71 CVEs	before 1-8.3.1	1-8.3.1
`kernel-docs` SUSE:Linux Enterprise Software Development Kit 12 SP5 From an advisory covering 71 CVEs	before 4.12.14-122.231.1	4.12.14-122.231.1
`kernel-obs-build` SUSE:Linux Enterprise Software Development Kit 12 SP5 From an advisory covering 71 CVEs	before 4.12.14-122.231.1	4.12.14-122.231.1
`kernel-default` SUSE:Linux Enterprise Server 12 SP5 From an advisory covering 71 CVEs	before 4.12.14-122.231.1	4.12.14-122.231.1
`kernel-source` SUSE:Linux Enterprise Server 12 SP5 From an advisory covering 71 CVEs	before 4.12.14-122.231.1	4.12.14-122.231.1
`kernel-syms` SUSE:Linux Enterprise Server 12 SP5 From an advisory covering 71 CVEs	before 4.12.14-122.231.1	4.12.14-122.231.1
`kernel-default` SUSE:Linux Enterprise Server for SAP Applications 12 SP5 From an advisory covering 71 CVEs	before 4.12.14-122.231.1	4.12.14-122.231.1
`kernel-source` SUSE:Linux Enterprise Server for SAP Applications 12 SP5 From an advisory covering 71 CVEs	before 4.12.14-122.231.1	4.12.14-122.231.1
`kernel-syms` SUSE:Linux Enterprise Server for SAP Applications 12 SP5 From an advisory covering 71 CVEs	before 4.12.14-122.231.1	4.12.14-122.231.1
`kernel-default` SUSE:Linux Enterprise Workstation Extension 12 SP5 From an advisory covering 71 CVEs	before 4.12.14-122.231.1	4.12.14-122.231.1
`kernel-64kb` SUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 162 CVEs	before 6.4.0-150600.23.25.1	6.4.0-150600.23.25.1
`kernel-default` SUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 162 CVEs	before 6.4.0-150600.23.25.1	6.4.0-150600.23.25.1
`kernel-default-base` SUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 162 CVEs	before 6.4.0-150600.23.25.1.150600.12.10.2	6.4.0-150600.23.25.1.150600.12.10.2
`kernel-source` SUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 162 CVEs	before 6.4.0-150600.23.25.1	6.4.0-150600.23.25.1
`kernel-zfcpdump` SUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 162 CVEs	before 6.4.0-150600.23.25.1	6.4.0-150600.23.25.1
`kernel-docs` SUSE:Linux Enterprise Module for Development Tools 15 SP6 From an advisory covering 162 CVEs	before 6.4.0-150600.23.25.2	6.4.0-150600.23.25.2
`kernel-obs-build` SUSE:Linux Enterprise Module for Development Tools 15 SP6 From an advisory covering 162 CVEs	before 6.4.0-150600.23.25.2	6.4.0-150600.23.25.2
`kernel-source` SUSE:Linux Enterprise Module for Development Tools 15 SP6 From an advisory covering 162 CVEs	before 6.4.0-150600.23.25.1	6.4.0-150600.23.25.1
`kernel-syms` SUSE:Linux Enterprise Module for Development Tools 15 SP6 From an advisory covering 162 CVEs	before 6.4.0-150600.23.25.1	6.4.0-150600.23.25.1
`kernel-default` SUSE:Linux Enterprise Module for Legacy 15 SP6 From an advisory covering 162 CVEs	before 6.4.0-150600.23.25.1	6.4.0-150600.23.25.1
`kernel-default` SUSE:Linux Enterprise Live Patching 15 SP6 From an advisory covering 162 CVEs	before 6.4.0-150600.23.25.1	6.4.0-150600.23.25.1
`kernel-livepatch-SLE15-SP6_Update_5` SUSE:Linux Enterprise Live Patching 15 SP6 From an advisory covering 162 CVEs	before 1-150600.13.3.1	1-150600.13.3.1
`kernel-default` SUSE:Linux Enterprise High Availability Extension 15 SP6 From an advisory covering 162 CVEs	before 6.4.0-150600.23.25.1	6.4.0-150600.23.25.1
`kernel-default` SUSE:Linux Enterprise Workstation Extension 15 SP6 From an advisory covering 162 CVEs	before 6.4.0-150600.23.25.1	6.4.0-150600.23.25.1
`dtb-aarch64` openSUSE:Leap 15.6 From an advisory covering 162 CVEs	before 6.4.0-150600.23.25.1	6.4.0-150600.23.25.1
`kernel-64kb` openSUSE:Leap 15.6 From an advisory covering 162 CVEs	before 6.4.0-150600.23.25.1	6.4.0-150600.23.25.1
`kernel-debug` openSUSE:Leap 15.6 From an advisory covering 162 CVEs	before 6.4.0-150600.23.25.1	6.4.0-150600.23.25.1
`kernel-default` openSUSE:Leap 15.6 From an advisory covering 162 CVEs	before 6.4.0-150600.23.25.1	6.4.0-150600.23.25.1
`kernel-default-base` openSUSE:Leap 15.6 From an advisory covering 162 CVEs	before 6.4.0-150600.23.25.1.150600.12.10.2	6.4.0-150600.23.25.1.150600.12.10.2
`kernel-docs` openSUSE:Leap 15.6 From an advisory covering 162 CVEs	before 6.4.0-150600.23.25.2	6.4.0-150600.23.25.2
`kernel-kvmsmall` openSUSE:Leap 15.6 From an advisory covering 162 CVEs	before 6.4.0-150600.23.25.1	6.4.0-150600.23.25.1
`kernel-obs-build` openSUSE:Leap 15.6 From an advisory covering 162 CVEs	before 6.4.0-150600.23.25.2	6.4.0-150600.23.25.2
`kernel-obs-qa` openSUSE:Leap 15.6 From an advisory covering 162 CVEs	before 6.4.0-150600.23.25.1	6.4.0-150600.23.25.1
`kernel-source` openSUSE:Leap 15.6 From an advisory covering 162 CVEs	before 6.4.0-150600.23.25.1	6.4.0-150600.23.25.1
`kernel-syms` openSUSE:Leap 15.6 From an advisory covering 162 CVEs	before 6.4.0-150600.23.25.1	6.4.0-150600.23.25.1
`kernel-zfcpdump` openSUSE:Leap 15.6 From an advisory covering 162 CVEs	before 6.4.0-150600.23.25.1	6.4.0-150600.23.25.1
`kernel-livepatch-SLE15-SP6-RT_Update_4` SUSE:Linux Enterprise Live Patching 15 SP6 From an advisory covering 162 CVEs	before 1-150600.1.3.1	1-150600.1.3.1
`kernel-rt` SUSE:Real Time Module 15 SP6 From an advisory covering 162 CVEs	before 6.4.0-150600.10.14.1	6.4.0-150600.10.14.1
`kernel-rt_debug` SUSE:Real Time Module 15 SP6 From an advisory covering 162 CVEs	before 6.4.0-150600.10.14.1	6.4.0-150600.10.14.1
`kernel-source-rt` SUSE:Real Time Module 15 SP6 From an advisory covering 162 CVEs	before 6.4.0-150600.10.14.1	6.4.0-150600.10.14.1
`kernel-syms-rt` SUSE:Real Time Module 15 SP6 From an advisory covering 162 CVEs	before 6.4.0-150600.10.14.1	6.4.0-150600.10.14.1
`kernel-rt` openSUSE:Leap 15.6 From an advisory covering 162 CVEs	before 6.4.0-150600.10.14.1	6.4.0-150600.10.14.1
`kernel-rt_debug` openSUSE:Leap 15.6 From an advisory covering 162 CVEs	before 6.4.0-150600.10.14.1	6.4.0-150600.10.14.1
`kernel-source-rt` openSUSE:Leap 15.6 From an advisory covering 162 CVEs	before 6.4.0-150600.10.14.1	6.4.0-150600.10.14.1
`kernel-syms-rt` openSUSE:Leap 15.6 From an advisory covering 162 CVEs	before 6.4.0-150600.10.14.1	6.4.0-150600.10.14.1
`kernel-rt` SUSE:Linux Enterprise Real Time 12 SP5 From an advisory covering 90 CVEs	before 4.12.14-10.203.1	4.12.14-10.203.1
`kernel-rt_debug` SUSE:Linux Enterprise Real Time 12 SP5 From an advisory covering 90 CVEs	before 4.12.14-10.203.1	4.12.14-10.203.1
`kernel-source-rt` SUSE:Linux Enterprise Real Time 12 SP5 From an advisory covering 90 CVEs	before 4.12.14-10.203.1	4.12.14-10.203.1
`kernel-syms-rt` SUSE:Linux Enterprise Real Time 12 SP5 From an advisory covering 90 CVEs	before 4.12.14-10.203.1	4.12.14-10.203.1
`kernel-default` SUSE:Linux Enterprise Micro 5.5 From an advisory covering 130 CVEs	before 5.14.21-150500.55.83.1	5.14.21-150500.55.83.1
`kernel-default-base` SUSE:Linux Enterprise Micro 5.5 From an advisory covering 130 CVEs	before 5.14.21-150500.55.83.1.150500.6.37.1	5.14.21-150500.55.83.1.150500.6.37.1
`kernel-64kb` SUSE:Linux Enterprise Module for Basesystem 15 SP5 From an advisory covering 130 CVEs	before 5.14.21-150500.55.83.1	5.14.21-150500.55.83.1
`kernel-default` SUSE:Linux Enterprise Module for Basesystem 15 SP5 From an advisory covering 130 CVEs	before 5.14.21-150500.55.83.1	5.14.21-150500.55.83.1
`kernel-default-base` SUSE:Linux Enterprise Module for Basesystem 15 SP5 From an advisory covering 130 CVEs	before 5.14.21-150500.55.83.1.150500.6.37.1	5.14.21-150500.55.83.1.150500.6.37.1
`kernel-source` SUSE:Linux Enterprise Module for Basesystem 15 SP5 From an advisory covering 130 CVEs	before 5.14.21-150500.55.83.1	5.14.21-150500.55.83.1
`kernel-zfcpdump` SUSE:Linux Enterprise Module for Basesystem 15 SP5 From an advisory covering 130 CVEs	before 5.14.21-150500.55.83.1	5.14.21-150500.55.83.1
`kernel-docs` SUSE:Linux Enterprise Module for Development Tools 15 SP5 From an advisory covering 130 CVEs	before 5.14.21-150500.55.83.1	5.14.21-150500.55.83.1
`kernel-obs-build` SUSE:Linux Enterprise Module for Development Tools 15 SP5 From an advisory covering 130 CVEs	before 5.14.21-150500.55.83.1	5.14.21-150500.55.83.1
`kernel-source` SUSE:Linux Enterprise Module for Development Tools 15 SP5 From an advisory covering 130 CVEs	before 5.14.21-150500.55.83.1	5.14.21-150500.55.83.1
`kernel-syms` SUSE:Linux Enterprise Module for Development Tools 15 SP5 From an advisory covering 130 CVEs	before 5.14.21-150500.55.83.1	5.14.21-150500.55.83.1
`kernel-default` openSUSE:Leap Micro 5.5 From an advisory covering 130 CVEs	before 5.14.21-150500.55.83.1	5.14.21-150500.55.83.1
`kernel-default-base` openSUSE:Leap Micro 5.5 From an advisory covering 130 CVEs	before 5.14.21-150500.55.83.1.150500.6.37.1	5.14.21-150500.55.83.1.150500.6.37.1
`kernel-azure` openSUSE:Leap 15.5 From an advisory covering 132 CVEs	before 5.14.21-150500.33.69.1	5.14.21-150500.33.69.1
`kernel-source-azure` openSUSE:Leap 15.5 From an advisory covering 132 CVEs	before 5.14.21-150500.33.69.1	5.14.21-150500.33.69.1
`kernel-syms-azure` openSUSE:Leap 15.5 From an advisory covering 132 CVEs	before 5.14.21-150500.33.69.1	5.14.21-150500.33.69.1
`kernel-rt` openSUSE:Leap Micro 5.5 From an advisory covering 130 CVEs	before 5.14.21-150500.13.73.1	5.14.21-150500.13.73.1
`kernel-rt` openSUSE:Leap 15.5 From an advisory covering 130 CVEs	before 5.14.21-150500.13.73.1	5.14.21-150500.13.73.1
`kernel-rt_debug` openSUSE:Leap 15.5 From an advisory covering 130 CVEs	before 5.14.21-150500.13.73.1	5.14.21-150500.13.73.1
`kernel-source-rt` openSUSE:Leap 15.5 From an advisory covering 130 CVEs	before 5.14.21-150500.13.73.1	5.14.21-150500.13.73.1
`kernel-syms-rt` openSUSE:Leap 15.5 From an advisory covering 130 CVEs	before 5.14.21-150500.13.73.1	5.14.21-150500.13.73.1
`linux-aws` Ubuntu:Pro:14.04:LTS	before 4.4.0-1136.142, plus listed versions 4.4.0-1002.24.4.0-1003.34.4.0-1005.54.4.0-1006.64.4.0-1009.9 Show 45 moreShow less 4.4.0-1010.104.4.0-1011.114.4.0-1012.124.4.0-1014.144.4.0-1016.164.4.0-1017.174.4.0-1019.194.4.0-1022.224.4.0-1023.234.4.0-1024.254.4.0-1025.264.4.0-1027.304.4.0-1028.314.4.0-1029.324.4.0-1031.344.4.0-1032.354.4.0-1034.374.4.0-1036.394.4.0-1037.404.4.0-1038.414.4.0-1039.424.4.0-1040.434.4.0-1042.454.4.0-1044.474.4.0-1045.484.4.0-1046.504.4.0-1048.524.4.0-1050.544.4.0-1052.564.4.0-1054.584.4.0-1055.594.4.0-1056.604.4.0-1058.624.4.0-1059.634.4.0-1060.644.4.0-1061.654.4.0-1062.664.4.0-1064.684.4.0-1065.694.4.0-1066.704.4.0-1067.714.4.0-1073.774.4.0-1074.784.4.0-1075.794.4.0-1076.80	4.4.0-1136.142
`linux-azure` Ubuntu:Pro:14.04:LTS	before 4.15.0-1181.196~14.04.1, plus listed versions 4.15.0-1023.24~14.04.14.15.0-1030.31~14.04.14.15.0-1031.32~14.04.14.15.0-1032.33~14.04.24.15.0-1035.36~14.04.2 Show 45 moreShow less 4.15.0-1036.38~14.04.24.15.0-1037.39~14.04.24.15.0-1039.41~14.04.24.15.0-1040.44~14.04.14.15.0-1041.45~14.04.14.15.0-1042.46~14.04.14.15.0-1045.49~14.04.14.15.0-1046.50~14.04.14.15.0-1047.51~14.04.14.15.0-1049.54~14.04.14.15.0-1050.55~14.04.14.15.0-1051.56~14.04.14.15.0-1052.57~14.04.14.15.0-1055.60~14.04.14.15.0-1056.61~14.04.14.15.0-1057.62~14.04.14.15.0-1059.64~14.04.14.15.0-1060.65~14.04.14.15.0-1061.66~14.04.14.15.0-1063.68~14.04.14.15.0-1064.69~14.04.14.15.0-1066.71~14.04.14.15.0-1067.72~14.04.14.15.0-1069.74~14.04.14.15.0-1071.76~14.04.14.15.0-1074.79~14.04.14.15.0-1077.82~14.04.14.15.0-1082.92~14.04.14.15.0-1083.93~14.04.14.15.0-1089.99~14.04.14.15.0-1091.101~14.04.14.15.0-1092.102~14.04.14.15.0-1093.103~14.04.14.15.0-1095.105~14.04.14.15.0-1096.106~14.04.14.15.0-1098.109~14.04.14.15.0-1100.111~14.04.14.15.0-1102.113~14.04.14.15.0-1103.114~14.04.14.15.0-1106.118~14.04.14.15.0-1108.120~14.04.14.15.0-1109.121~14.04.14.15.0-1110.122~14.04.14.15.0-1111.123~14.04.14.15.0-1112.124~14.04.1	4.15.0-1181.196~14.04.1
`linux-lts-xenial` Ubuntu:Pro:14.04:LTS	before 4.4.0-259.293~14.04.1, plus listed versions 4.4.0-13.29~14.04.14.4.0-14.30~14.04.24.4.0-15.31~14.04.14.4.0-18.34~14.04.14.4.0-21.37~14.04.1 Show 45 moreShow less 4.4.0-22.39~14.04.14.4.0-22.40~14.04.14.4.0-24.43~14.04.14.4.0-28.47~14.04.14.4.0-31.50~14.04.14.4.0-34.53~14.04.14.4.0-36.55~14.04.14.4.0-38.57~14.04.14.4.0-42.62~14.04.14.4.0-45.66~14.04.14.4.0-47.68~14.04.14.4.0-51.72~14.04.14.4.0-53.74~14.04.14.4.0-57.78~14.04.14.4.0-59.80~14.04.14.4.0-62.83~14.04.14.4.0-63.84~14.04.24.4.0-64.85~14.04.14.4.0-66.87~14.04.14.4.0-67.88~14.04.14.4.0-70.91~14.04.14.4.0-71.92~14.04.14.4.0-72.93~14.04.14.4.0-75.96~14.04.14.4.0-78.99~14.04.24.4.0-79.100~14.04.14.4.0-81.104~14.04.14.4.0-83.106~14.04.14.4.0-87.110~14.04.14.4.0-89.112~14.04.14.4.0-91.114~14.04.14.4.0-92.115~14.04.14.4.0-93.116~14.04.14.4.0-96.119~14.04.14.4.0-97.120~14.04.14.4.0-98.121~14.04.14.4.0-101.124~14.04.14.4.0-103.126~14.04.14.4.0-104.127~14.04.14.4.0-108.131~14.04.14.4.0-109.132~14.04.14.4.0-111.134~14.04.14.4.0-112.135~14.04.14.4.0-116.140~14.04.14.4.0-119.143~14.04.1	4.4.0-259.293~14.04.1
`linux` Ubuntu:Pro:16.04:LTS	before 4.4.0-259.293, plus listed versions 4.2.0-16.194.2.0-17.214.2.0-19.234.3.0-1.104.3.0-2.11 Show 45 moreShow less 4.3.0-5.164.3.0-6.174.3.0-7.184.4.0-2.164.4.0-4.194.4.0-6.214.4.0-7.224.4.0-8.234.4.0-9.244.4.0-10.254.4.0-11.264.4.0-12.284.4.0-13.294.4.0-14.304.4.0-15.314.4.0-16.324.4.0-17.334.4.0-18.344.4.0-21.374.4.0-22.394.4.0-22.404.4.0-24.434.4.0-28.474.4.0-31.504.4.0-34.534.4.0-36.554.4.0-38.574.4.0-42.624.4.0-43.634.4.0-45.664.4.0-47.684.4.0-51.724.4.0-53.744.4.0-57.784.4.0-59.804.4.0-62.834.4.0-63.844.4.0-64.854.4.0-65.864.4.0-66.874.4.0-67.884.4.0-70.914.4.0-71.924.4.0-72.934.4.0-75.96	4.4.0-259.293
`linux-aws` Ubuntu:Pro:16.04:LTS	before 4.4.0-1174.189, plus listed versions 4.4.0-1001.104.4.0-1003.124.4.0-1004.134.4.0-1007.164.4.0-1009.18 Show 45 moreShow less 4.4.0-1011.204.4.0-1012.214.4.0-1013.224.4.0-1016.254.4.0-1017.264.4.0-1018.274.4.0-1020.294.4.0-1022.314.4.0-1026.354.4.0-1028.374.4.0-1030.394.4.0-1031.404.4.0-1032.414.4.0-1035.444.4.0-1037.464.4.0-1038.474.4.0-1039.484.4.0-1041.504.4.0-1043.524.4.0-1044.534.4.0-1047.564.4.0-1048.574.4.0-1049.584.4.0-1050.594.4.0-1052.614.4.0-1054.634.4.0-1055.644.4.0-1057.664.4.0-1060.694.4.0-1061.704.4.0-1062.714.4.0-1063.724.4.0-1065.754.4.0-1066.764.4.0-1067.774.4.0-1069.794.4.0-1070.804.4.0-1072.824.4.0-1073.834.4.0-1074.844.4.0-1075.854.4.0-1077.874.4.0-1079.894.4.0-1081.914.4.0-1083.93	4.4.0-1174.189
`linux-aws-hwe` Ubuntu:Pro:16.04:LTS	before 4.15.0-1173.186~16.04.1, plus listed versions 4.15.0-1030.31~16.04.14.15.0-1031.33~16.04.14.15.0-1032.34~16.04.14.15.0-1033.35~16.04.14.15.0-1035.37~16.04.1 Show 45 moreShow less 4.15.0-1036.38~16.04.14.15.0-1039.41~16.04.14.15.0-1040.42~16.04.14.15.0-1041.43~16.04.14.15.0-1043.45~16.04.14.15.0-1044.46~16.04.14.15.0-1045.47~16.04.14.15.0-1047.49~16.04.14.15.0-1048.50~16.04.14.15.0-1050.52~16.04.14.15.0-1051.53~16.04.14.15.0-1052.54~16.04.14.15.0-1054.56~16.04.14.15.0-1056.58~16.04.14.15.0-1057.59~16.04.14.15.0-1058.60~16.04.14.15.0-1060.62~16.04.14.15.0-1063.67~16.04.14.15.0-1065.69~16.04.14.15.0-1066.70~16.04.14.15.0-1067.71~16.04.14.15.0-1073.77~16.04.14.15.0-1074.78~16.04.14.15.0-1079.83~16.04.14.15.0-1080.84~16.04.14.15.0-1082.86~16.04.14.15.0-1083.87~16.04.14.15.0-1085.90~16.04.14.15.0-1088.93~16.04.14.15.0-1090.95~16.04.14.15.0-1091.96~16.04.14.15.0-1093.99~16.04.14.15.0-1094.101~16.04.14.15.0-1095.102~16.04.14.15.0-1096.103~16.04.14.15.0-1097.104~16.04.14.15.0-1098.105~16.04.14.15.0-1099.106~16.04.14.15.0-1102.109~16.04.14.15.0-1103.110~16.04.14.15.0-1106.113~16.04.14.15.0-1109.116~16.04.14.15.0-1110.117~16.04.14.15.0-1111.118~16.04.14.15.0-1112.119~16.04.1	4.15.0-1173.186~16.04.1
`linux-azure` Ubuntu:Pro:16.04:LTS	before 4.15.0-1181.196~16.04.1, plus listed versions 4.11.0-1009.94.11.0-1011.114.11.0-1013.134.11.0-1014.144.11.0-1015.15 Show 45 moreShow less 4.11.0-1016.164.13.0-1005.74.13.0-1006.84.13.0-1007.94.13.0-1009.124.13.0-1011.144.13.0-1012.154.13.0-1014.174.13.0-1016.194.13.0-1018.214.15.0-1013.13~16.04.24.15.0-1014.14~16.04.14.15.0-1018.18~16.04.14.15.0-1019.19~16.04.14.15.0-1021.21~16.04.14.15.0-1022.22~16.04.14.15.0-1023.24~16.04.14.15.0-1025.26~16.04.14.15.0-1028.29~16.04.14.15.0-1030.31~16.04.14.15.0-1031.32~16.04.14.15.0-1032.33~16.04.14.15.0-1035.36~16.04.14.15.0-1036.38~16.04.14.15.0-1037.39~16.04.14.15.0-1039.434.15.0-1040.444.15.0-1041.454.15.0-1042.464.15.0-1045.494.15.0-1046.504.15.0-1047.514.15.0-1049.544.15.0-1050.554.15.0-1051.564.15.0-1052.574.15.0-1055.604.15.0-1056.614.15.0-1057.624.15.0-1059.644.15.0-1060.654.15.0-1061.664.15.0-1063.684.15.0-1064.694.15.0-1066.71	4.15.0-1181.196~16.04.1
`linux-gcp` Ubuntu:Pro:16.04:LTS	before 4.15.0-1166.183~16.04.1, plus listed versions 4.10.0-1004.44.10.0-1006.64.10.0-1007.74.10.0-1008.84.10.0-1009.9 Show 45 moreShow less 4.13.0-1002.54.13.0-1006.94.13.0-1007.104.13.0-1008.114.13.0-1011.154.13.0-1012.164.13.0-1013.174.13.0-1015.194.13.0-1017.214.13.0-1019.234.15.0-1014.14~16.04.14.15.0-1015.15~16.04.14.15.0-1017.18~16.04.14.15.0-1018.19~16.04.24.15.0-1019.20~16.04.14.15.0-1021.22~16.04.14.15.0-1023.24~16.04.14.15.0-1024.25~16.04.24.15.0-1025.26~16.04.14.15.0-1026.27~16.04.14.15.0-1027.28~16.04.14.15.0-1028.29~16.04.14.15.0-1029.31~16.04.14.15.0-1030.32~16.04.14.15.0-1032.34~16.04.14.15.0-1033.35~16.04.14.15.0-1034.36~16.04.14.15.0-1036.38~16.04.14.15.0-1037.39~16.04.14.15.0-1040.42~16.04.14.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1046.494.15.0-1047.504.15.0-1049.524.15.0-1050.534.15.0-1052.564.15.0-1055.594.15.0-1058.624.15.0-1060.644.15.0-1061.654.15.0-1071.81~16.04.14.15.0-1077.87~16.04.14.15.0-1078.88~16.04.1	4.15.0-1166.183~16.04.1
`linux-hwe` Ubuntu:Pro:16.04:LTS	before 4.15.0-229.241~16.04.1, plus listed versions 4.8.0-36.36~16.04.14.8.0-39.42~16.04.14.8.0-41.44~16.04.14.8.0-42.45~16.04.14.8.0-44.47~16.04.1 Show 45 moreShow less 4.8.0-45.48~16.04.14.8.0-46.49~16.04.14.8.0-49.52~16.04.14.8.0-51.54~16.04.14.8.0-52.55~16.04.14.8.0-53.56~16.04.14.8.0-54.57~16.04.14.8.0-56.61~16.04.14.8.0-58.63~16.04.14.10.0-27.30~16.04.24.10.0-28.32~16.04.24.10.0-30.34~16.04.14.10.0-32.36~16.04.14.10.0-33.37~16.04.14.10.0-35.39~16.04.14.10.0-37.41~16.04.14.10.0-38.42~16.04.14.10.0-40.44~16.04.14.10.0-42.46~16.04.14.13.0-26.29~16.04.24.13.0-31.34~16.04.14.13.0-32.35~16.04.14.13.0-36.40~16.04.14.13.0-37.42~16.04.14.13.0-38.43~16.04.14.13.0-39.44~16.04.14.13.0-41.46~16.04.14.13.0-43.48~16.04.14.13.0-45.50~16.04.14.15.0-24.26~16.04.14.15.0-29.31~16.04.14.15.0-30.32~16.04.14.15.0-32.35~16.04.14.15.0-33.36~16.04.14.15.0-34.37~16.04.14.15.0-36.39~16.04.14.15.0-38.41~16.04.14.15.0-39.42~16.04.14.15.0-42.45~16.04.14.15.0-43.46~16.04.14.15.0-45.48~16.04.14.15.0-46.49~16.04.14.15.0-47.50~16.04.14.15.0-48.51~16.04.14.15.0-50.54~16.04.1	4.15.0-229.241~16.04.1
`linux-kvm` Ubuntu:Pro:16.04:LTS	before 4.4.0-1137.147, plus listed versions 4.4.0-1004.94.4.0-1007.124.4.0-1008.134.4.0-1009.144.4.0-1010.15 Show 45 moreShow less 4.4.0-1012.174.4.0-1013.184.4.0-1015.204.4.0-1017.224.4.0-1019.244.4.0-1020.254.4.0-1021.264.4.0-1023.284.4.0-1026.314.4.0-1027.324.4.0-1029.344.4.0-1031.374.4.0-1032.384.4.0-1033.394.4.0-1035.414.4.0-1036.424.4.0-1037.434.4.0-1038.444.4.0-1039.454.4.0-1040.464.4.0-1041.474.4.0-1043.494.4.0-1044.504.4.0-1046.524.4.0-1047.534.4.0-1048.554.4.0-1051.584.4.0-1052.594.4.0-1054.614.4.0-1056.634.4.0-1058.654.4.0-1059.664.4.0-1060.674.4.0-1062.694.4.0-1063.704.4.0-1064.714.4.0-1065.724.4.0-1066.734.4.0-1068.754.4.0-1069.764.4.0-1070.774.4.0-1071.784.4.0-1075.824.4.0-1076.834.4.0-1077.84	4.4.0-1137.147
`linux-oracle` Ubuntu:Pro:16.04:LTS	before 4.15.0-1135.146~16.04.1, plus listed versions 4.15.0-1007.9~16.04.14.15.0-1008.10~16.04.14.15.0-1009.11~16.04.14.15.0-1010.12~16.04.14.15.0-1011.13~16.04.1 Show 45 moreShow less 4.15.0-1013.15~16.04.14.15.0-1014.16~16.04.14.15.0-1015.17~16.04.14.15.0-1017.19~16.04.24.15.0-1018.20~16.04.14.15.0-1021.23~16.04.14.15.0-1022.25~16.04.14.15.0-1023.26~16.04.14.15.0-1025.28~16.04.14.15.0-1026.29~16.04.14.15.0-1027.30~16.04.14.15.0-1029.32~16.04.14.15.0-1030.33~16.04.14.15.0-1031.34~16.04.14.15.0-1033.36~16.04.14.15.0-1035.38~16.04.14.15.0-1037.41~16.04.14.15.0-1038.42~16.04.14.15.0-1039.43~16.04.14.15.0-1045.49~16.04.14.15.0-1046.50~16.04.14.15.0-1050.54~16.04.14.15.0-1051.55~16.04.14.15.0-1053.57~16.04.14.15.0-1054.58~16.04.14.15.0-1056.61~16.04.14.15.0-1058.64~16.04.14.15.0-1059.65~16.04.14.15.0-1061.67~16.04.14.15.0-1062.68~16.04.14.15.0-1064.71~16.04.14.15.0-1065.73~16.04.14.15.0-1066.74~16.04.14.15.0-1067.75~16.04.14.15.0-1068.76~16.04.14.15.0-1069.77~16.04.14.15.0-1070.78~16.04.14.15.0-1071.79~16.04.14.15.0-1072.80~16.04.14.15.0-1075.83~16.04.14.15.0-1078.86~16.04.14.15.0-1079.87~16.04.14.15.0-1080.88~16.04.14.15.0-1081.89~16.04.14.15.0-1082.90~16.04.1	4.15.0-1135.146~16.04.1
`linux-hwe-edge` Ubuntu:16.04:LTS	All versions, plus listed versions 4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1 Show 18 moreShow less 4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1	None known
`linux-fips` Ubuntu:Pro:FIPS-updates:16.04:LTS	before 4.4.0-1105.112, plus listed versions 4.4.0-1003.34.4.0-1005.54.4.0-1006.64.4.0-1008.104.4.0-1010.13 Show 45 moreShow less 4.4.0-1011.144.4.0-1012.164.4.0-1013.174.4.0-1015.204.4.0-1017.224.4.0-1019.244.4.0-1021.264.4.0-1022.274.4.0-1023.284.4.0-1025.304.4.0-1026.314.4.0-1027.324.4.0-1028.334.4.0-1029.344.4.0-1031.364.4.0-1032.374.4.0-1033.384.4.0-1034.394.4.0-1041.464.4.0-1042.474.4.0-1043.484.4.0-1044.494.4.0-1045.504.4.0-1046.514.4.0-1048.534.4.0-1049.554.4.0-1051.574.4.0-1052.584.4.0-1054.604.4.0-1055.614.4.0-1056.624.4.0-1057.634.4.0-1058.644.4.0-1060.664.4.0-1061.674.4.0-1062.684.4.0-1063.694.4.0-1064.704.4.0-1065.714.4.0-1066.724.4.0-1067.734.4.0-1068.744.4.0-1069.754.4.0-1071.774.4.0-1072.78	4.4.0-1105.112
`linux-fips` Ubuntu:Pro:FIPS:16.04:LTS	All versions, plus listed versions 4.4.0-1001.14.4.0-1002.2	None known
`linux` Ubuntu:Pro:18.04:LTS	before 4.15.0-229.241, plus listed versions 4.13.0-16.194.13.0-17.204.13.0-25.294.13.0-32.354.15.0-10.11 Show 45 moreShow less 4.15.0-12.134.15.0-13.144.15.0-15.164.15.0-19.204.15.0-20.214.15.0-22.244.15.0-23.254.15.0-24.264.15.0-29.314.15.0-30.324.15.0-32.354.15.0-33.364.15.0-34.374.15.0-36.394.15.0-38.414.15.0-39.424.15.0-42.454.15.0-43.464.15.0-44.474.15.0-45.484.15.0-46.494.15.0-47.504.15.0-48.514.15.0-50.544.15.0-51.554.15.0-52.564.15.0-54.584.15.0-55.604.15.0-58.644.15.0-60.674.15.0-62.694.15.0-64.734.15.0-65.744.15.0-66.754.15.0-69.784.15.0-70.794.15.0-72.814.15.0-74.844.15.0-76.864.15.0-88.884.15.0-91.924.15.0-96.974.15.0-99.1004.15.0-101.1024.15.0-106.107	4.15.0-229.241
`linux-aws` Ubuntu:Pro:18.04:LTS	before 4.15.0-1173.186, plus listed versions 4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1007.7 Show 45 moreShow less 4.15.0-1009.94.15.0-1010.104.15.0-1011.114.15.0-1016.164.15.0-1017.174.15.0-1019.194.15.0-1020.204.15.0-1021.214.15.0-1023.234.15.0-1025.254.15.0-1027.274.15.0-1029.304.15.0-1031.334.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1035.374.15.0-1037.394.15.0-1039.414.15.0-1040.424.15.0-1041.434.15.0-1043.454.15.0-1044.464.15.0-1045.474.15.0-1047.494.15.0-1048.504.15.0-1050.524.15.0-1051.534.15.0-1052.544.15.0-1054.564.15.0-1056.584.15.0-1057.594.15.0-1058.604.15.0-1060.624.15.0-1063.674.15.0-1065.694.15.0-1066.704.15.0-1067.714.15.0-1073.774.15.0-1076.804.15.0-1077.814.15.0-1079.834.15.0-1080.844.15.0-1082.864.15.0-1083.87	4.15.0-1173.186
`linux-aws-5.0` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30	None known
`linux-aws-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1 Show 5 moreShow less 5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37	None known
`linux-aws-5.4` Ubuntu:Pro:18.04:LTS	before 5.4.0-1132.142~18.04.1, plus listed versions 5.4.0-1018.18~18.04.15.4.0-1020.20~18.04.25.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1 Show 45 moreShow less 5.4.0-1028.29~18.04.15.4.0-1029.30~18.04.15.4.0-1030.31~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.37~18.04.15.4.0-1037.39~18.04.15.4.0-1038.40~18.04.15.4.0-1039.41~18.04.15.4.0-1041.43~18.04.15.4.0-1043.45~18.04.15.4.0-1045.47~18.04.15.4.0-1047.49~18.04.15.4.0-1048.50~18.04.15.4.0-1049.51~18.04.15.4.0-1051.53~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1058.61~18.04.35.4.0-1059.62~18.04.15.4.0-1060.63~18.04.15.4.0-1061.64~18.04.15.4.0-1063.66~18.04.15.4.0-1064.67~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1068.72~18.04.15.4.0-1069.73~18.04.15.4.0-1071.76~18.04.15.4.0-1072.77~18.04.15.4.0-1075.80~18.04.15.4.0-1078.84~18.04.15.4.0-1080.87~18.04.15.4.0-1081.88~18.04.15.4.0-1083.90~18.04.15.4.0-1084.91~18.04.15.4.0-1085.92~18.04.15.4.0-1086.93~18.04.15.4.0-1088.96~18.04.15.4.0-1089.97~18.04.15.4.0-1090.98~18.04.15.4.0-1092.100~18.04.25.4.0-1093.102~18.04.2	5.4.0-1132.142~18.04.1
`linux-azure` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9 Show 39 moreShow less 4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38	None known
`linux-azure-4.15` Ubuntu:Pro:18.04:LTS	before 4.15.0-1181.196, plus listed versions 4.15.0-1082.924.15.0-1083.934.15.0-1089.994.15.0-1091.1014.15.0-1092.102 Show 45 moreShow less 4.15.0-1093.1034.15.0-1095.1054.15.0-1096.1064.15.0-1099.1104.15.0-1100.1114.15.0-1102.1134.15.0-1103.1144.15.0-1104.1164.15.0-1106.1184.15.0-1108.1204.15.0-1109.1214.15.0-1110.1224.15.0-1111.1234.15.0-1112.1254.15.0-1113.1264.15.0-1114.1274.15.0-1115.1284.15.0-1118.1314.15.0-1121.1344.15.0-1122.1354.15.0-1123.1364.15.0-1124.1374.15.0-1125.1384.15.0-1126.1394.15.0-1127.1404.15.0-1129.1424.15.0-1130.1434.15.0-1131.1444.15.0-1133.1464.15.0-1134.1474.15.0-1136.1494.15.0-1137.1504.15.0-1138.1514.15.0-1139.1524.15.0-1142.1564.15.0-1145.1604.15.0-1146.1614.15.0-1149.1644.15.0-1150.1654.15.0-1151.1664.15.0-1153.1684.15.0-1157.1724.15.0-1158.1734.15.0-1159.1744.15.0-1161.176	4.15.0-1181.196
`linux-azure-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1 Show 11 moreShow less 5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36	None known
`linux-azure-5.4` Ubuntu:Pro:18.04:LTS	before 5.4.0-1137.144~18.04.1, plus listed versions 5.4.0-1020.20~18.04.15.4.0-1022.22~18.04.15.4.0-1023.23~18.04.15.4.0-1025.25~18.04.15.4.0-1026.26~18.04.1 Show 45 moreShow less 5.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.36~18.04.15.4.0-1036.38~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1041.43~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1047.49~18.04.15.4.0-1048.50~18.04.15.4.0-1049.51~18.04.15.4.0-1051.53~18.04.15.4.0-1055.57~18.04.15.4.0-1056.58~18.04.15.4.0-1058.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1064.67~18.04.15.4.0-1065.68~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1069.72~18.04.15.4.0-1070.73~18.04.15.4.0-1072.75~18.04.15.4.0-1073.76~18.04.15.4.0-1074.77~18.04.15.4.0-1077.80~18.04.15.4.0-1078.81~18.04.15.4.0-1080.83~18.04.25.4.0-1083.87~18.04.15.4.0-1085.90~18.04.15.4.0-1086.91~18.04.15.4.0-1089.94~18.04.15.4.0-1090.95~18.04.15.4.0-1091.96~18.04.15.4.0-1094.100~18.04.15.4.0-1095.101~18.04.15.4.0-1098.104~18.04.25.4.0-1100.106~18.04.15.4.0-1101.107~18.04.1	5.4.0-1137.144~18.04.1
`linux-azure-edge` Ubuntu:18.04:LTS	All versions, plus listed versions 4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2	None known
`linux-gcp` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8 Show 33 moreShow less 4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35	None known
`linux-gcp-4.15` Ubuntu:Pro:18.04:LTS	before 4.15.0-1166.183, plus listed versions 4.15.0-1071.814.15.0-1077.874.15.0-1078.884.15.0-1080.904.15.0-1081.92 Show 45 moreShow less 4.15.0-1083.944.15.0-1084.954.15.0-1086.984.15.0-1087.1004.15.0-1088.1014.15.0-1090.1034.15.0-1091.1044.15.0-1092.1054.15.0-1093.1064.15.0-1094.1074.15.0-1095.1084.15.0-1096.1094.15.0-1097.1104.15.0-1098.1114.15.0-1099.1124.15.0-1100.1134.15.0-1103.1164.15.0-1106.1204.15.0-1107.1214.15.0-1108.1224.15.0-1109.1234.15.0-1110.1244.15.0-1111.1254.15.0-1112.1264.15.0-1114.1284.15.0-1115.1294.15.0-1116.1304.15.0-1118.1324.15.0-1119.1334.15.0-1120.1344.15.0-1121.1354.15.0-1122.1364.15.0-1124.1384.15.0-1127.1424.15.0-1130.1464.15.0-1131.1474.15.0-1134.1504.15.0-1135.1514.15.0-1136.1524.15.0-1137.1534.15.0-1138.1544.15.0-1141.1574.15.0-1142.1584.15.0-1143.1594.15.0-1145.161	4.15.0-1166.183
`linux-gcp-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1 Show 8 moreShow less 5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1	None known
`linux-gcp-5.4` Ubuntu:Pro:18.04:LTS	before 5.4.0-1136.145~18.04.1, plus listed versions 5.4.0-1019.19~18.04.25.4.0-1021.21~18.04.15.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1 Show 45 moreShow less 5.4.0-1028.29~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.15.4.0-1033.35~18.04.15.4.0-1034.37~18.04.15.4.0-1036.39~18.04.15.4.0-1037.40~18.04.15.4.0-1038.41~18.04.15.4.0-1040.43~18.04.15.4.0-1041.44~18.04.15.4.0-1042.45~18.04.15.4.0-1043.46~18.04.15.4.0-1044.47~18.04.25.4.0-1046.49~18.04.15.4.0-1049.53~18.04.15.4.0-1051.55~18.04.15.4.0-1052.56~18.04.15.4.0-1053.57~18.04.15.4.0-1055.59~18.04.15.4.0-1056.60~18.04.15.4.0-1057.61~18.04.15.4.0-1058.62~18.04.15.4.0-1059.63~18.04.15.4.0-1060.64~18.04.15.4.0-1062.66~18.04.15.4.0-1063.67~18.04.15.4.0-1064.68~18.04.15.4.0-1065.69~18.04.15.4.0-1067.71~18.04.15.4.0-1068.72~18.04.15.4.0-1069.73~18.04.15.4.0-1072.77~18.04.15.4.0-1073.78~18.04.15.4.0-1075.80~18.04.15.4.0-1078.84~18.04.15.4.0-1080.87~18.04.15.4.0-1083.91~18.04.15.4.0-1084.92~18.04.15.4.0-1086.94~18.04.15.4.0-1087.95~18.04.15.4.0-1089.97~18.04.15.4.0-1092.101~18.04.15.4.0-1093.102~18.04.15.4.0-1096.105~18.04.2	5.4.0-1136.145~18.04.1
`linux-gke-4.15` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38 Show 28 moreShow less 4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84	None known
`linux-gke-5.4` Ubuntu:18.04:LTS	All versions, plus listed versions 5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.1 Show 32 moreShow less 5.4.0-1033.35~18.04.15.4.0-1035.37~18.04.15.4.0-1036.38~18.04.15.4.0-1037.39~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1042.44~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.15.4.0-1052.55~18.04.15.4.0-1053.56~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1071.76~18.04.35.4.0-1072.77~18.04.15.4.0-1074.79~18.04.15.4.0-1076.82~18.04.15.4.0-1078.84~18.04.15.4.0-1080.86~18.04.1	None known
`linux-gkeop-5.4` Ubuntu:18.04:LTS	All versions, plus listed versions 5.4.0-1001.15.4.0-1003.35.4.0-1004.55.4.0-1005.65.4.0-1007.8~18.04.1 Show 32 moreShow less 5.4.0-1008.9~18.04.15.4.0-1009.10~18.04.15.4.0-1010.11~18.04.15.4.0-1011.12~18.04.25.4.0-1012.13~18.04.15.4.0-1013.14~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1016.17~18.04.15.4.0-1018.19~18.04.15.4.0-1021.22~18.04.15.4.0-1022.23~18.04.15.4.0-1023.24~18.04.15.4.0-1024.25~18.04.15.4.0-1025.26~18.04.15.4.0-1026.27~18.04.15.4.0-1027.28~18.04.15.4.0-1029.30~18.04.25.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1033.34~18.04.15.4.0-1034.35~18.04.15.4.0-1036.37~18.04.15.4.0-1037.38~18.04.15.4.0-1038.39~18.04.15.4.0-1039.40~18.04.15.4.0-1040.41~18.04.15.4.0-1043.44~18.04.15.4.0-1046.48~18.04.15.4.0-1048.51~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.1	None known
`linux-hwe` Ubuntu:18.04:LTS	All versions, plus listed versions 4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1 Show 38 moreShow less 4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72	None known
`linux-hwe-5.4` Ubuntu:Pro:18.04:LTS	before 5.4.0-195.215~18.04.1, plus listed versions 5.4.0-37.41~18.04.15.4.0-39.43~18.04.15.4.0-40.44~18.04.15.4.0-42.46~18.04.15.4.0-45.49~18.04.2 Show 45 moreShow less 5.4.0-47.51~18.04.15.4.0-48.52~18.04.15.4.0-51.56~18.04.15.4.0-52.57~18.04.15.4.0-53.59~18.04.15.4.0-54.60~18.04.15.4.0-56.62~18.04.15.4.0-58.64~18.04.15.4.0-59.65~18.04.15.4.0-60.67~18.04.15.4.0-62.70~18.04.15.4.0-64.72~18.04.15.4.0-65.73~18.04.15.4.0-66.74~18.04.25.4.0-67.75~18.04.15.4.0-70.78~18.04.15.4.0-71.79~18.04.15.4.0-72.80~18.04.15.4.0-73.82~18.04.15.4.0-74.83~18.04.15.4.0-77.86~18.04.15.4.0-80.90~18.04.15.4.0-81.91~18.04.15.4.0-84.94~18.04.15.4.0-86.97~18.04.15.4.0-87.98~18.04.15.4.0-89.100~18.04.15.4.0-90.101~18.04.15.4.0-91.102~18.04.15.4.0-92.103~18.04.25.4.0-94.106~18.04.15.4.0-96.109~18.04.15.4.0-97.110~18.04.15.4.0-99.112~18.04.15.4.0-100.113~18.04.15.4.0-104.118~18.04.15.4.0-105.119~18.04.15.4.0-107.121~18.04.15.4.0-109.123~18.04.15.4.0-110.124~18.04.15.4.0-113.127~18.04.15.4.0-117.132~18.04.15.4.0-120.136~18.04.15.4.0-121.137~18.04.15.4.0-122.138~18.04.1	5.4.0-195.215~18.04.1
`linux-hwe-edge` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-15.16~18.04.15.0.0-16.17~18.04.15.0.0-17.18~18.04.15.0.0-19.20~18.04.15.0.0-20.21~18.04.1 Show 5 moreShow less 5.3.0-19.20~18.04.25.3.0-22.24~18.04.15.3.0-23.25~18.04.15.3.0-23.25~18.04.25.3.0-24.26~18.04.2	None known
`linux-ibm-5.4` Ubuntu:Pro:18.04:LTS	before 5.4.0-1079.84~18.04.1, plus listed versions 5.4.0-1010.11~18.04.25.4.0-1012.13~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1017.19~18.04.1 Show 45 moreShow less 5.4.0-1018.20~18.04.15.4.0-1019.21~18.04.15.4.0-1020.22~18.04.15.4.0-1021.23~18.04.15.4.0-1023.25~18.04.15.4.0-1026.29~18.04.15.4.0-1028.32~18.04.15.4.0-1029.33~18.04.15.4.0-1031.35~18.04.15.4.0-1032.36~18.04.15.4.0-1033.37~18.04.15.4.0-1034.38~18.04.15.4.0-1036.41~18.04.15.4.0-1037.42~18.04.15.4.0-1040.45~18.04.25.4.0-1041.46~18.04.15.4.0-1042.47~18.04.15.4.0-1044.49~18.04.15.4.0-1045.50~18.04.15.4.0-1046.51~18.04.15.4.0-1047.52~18.04.15.4.0-1048.53~18.04.15.4.0-1049.54~18.04.15.4.0-1050.55~18.04.15.4.0-1051.56~18.04.15.4.0-1052.57~18.04.15.4.0-1053.58~18.04.15.4.0-1054.59~18.04.15.4.0-1056.61~18.04.15.4.0-1057.62~18.04.15.4.0-1058.63~18.04.15.4.0-1059.64~18.04.15.4.0-1060.65~18.04.15.4.0-1061.66~18.04.15.4.0-1063.68~18.04.15.4.0-1064.69~18.04.15.4.0-1065.70~18.04.15.4.0-1066.71~18.04.15.4.0-1067.72~18.04.15.4.0-1068.73~18.04.15.4.0-1069.74~18.04.15.4.0-1070.75~18.04.15.4.0-1071.76~18.04.15.4.0-1072.77~18.04.15.4.0-1073.78~18.04.1	5.4.0-1079.84~18.04.1
`linux-kvm` Ubuntu:Pro:18.04:LTS	before 4.15.0-1156.161, plus listed versions 4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1006.64.15.0-1008.8 Show 45 moreShow less 4.15.0-1010.104.15.0-1011.114.15.0-1012.124.15.0-1016.164.15.0-1017.174.15.0-1019.194.15.0-1020.204.15.0-1021.214.15.0-1023.234.15.0-1025.254.15.0-1026.264.15.0-1027.274.15.0-1028.284.15.0-1029.294.15.0-1030.304.15.0-1031.314.15.0-1032.324.15.0-1034.344.15.0-1035.354.15.0-1036.364.15.0-1038.384.15.0-1039.394.15.0-1042.424.15.0-1043.434.15.0-1044.444.15.0-1046.464.15.0-1047.474.15.0-1048.484.15.0-1050.504.15.0-1051.514.15.0-1052.524.15.0-1053.534.15.0-1056.574.15.0-1058.594.15.0-1059.604.15.0-1060.614.15.0-1067.684.15.0-1069.704.15.0-1071.724.15.0-1072.734.15.0-1074.754.15.0-1075.764.15.0-1077.794.15.0-1079.814.15.0-1081.83	4.15.0-1156.161
`linux-oem` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12 Show 45 moreShow less 4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114	None known
`linux-oracle` Ubuntu:Pro:18.04:LTS	before 4.15.0-1135.146, plus listed versions 4.15.0-1007.94.15.0-1008.104.15.0-1009.114.15.0-1010.124.15.0-1011.13 Show 45 moreShow less 4.15.0-1013.154.15.0-1014.164.15.0-1015.174.15.0-1017.194.15.0-1018.204.15.0-1021.234.15.0-1022.254.15.0-1023.264.15.0-1025.284.15.0-1026.294.15.0-1027.304.15.0-1029.324.15.0-1030.334.15.0-1031.344.15.0-1033.364.15.0-1035.394.15.0-1037.414.15.0-1038.424.15.0-1039.434.15.0-1045.494.15.0-1047.514.15.0-1048.524.15.0-1050.544.15.0-1051.554.15.0-1053.574.15.0-1054.584.15.0-1057.624.15.0-1058.644.15.0-1059.654.15.0-1061.674.15.0-1062.684.15.0-1063.704.15.0-1064.714.15.0-1065.734.15.0-1066.744.15.0-1067.754.15.0-1068.764.15.0-1069.774.15.0-1070.784.15.0-1071.794.15.0-1072.804.15.0-1075.834.15.0-1078.864.15.0-1079.874.15.0-1080.88	4.15.0-1135.146
`linux-oracle-5.0` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19	None known
`linux-oracle-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1 Show 4 moreShow less 5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1	None known
`linux-oracle-5.4` Ubuntu:Pro:18.04:LTS	before 5.4.0-1131.140~18.04.1, plus listed versions 5.4.0-1019.19~18.04.15.4.0-1021.21~18.04.15.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1 Show 45 moreShow less 5.4.0-1028.29~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1033.355.4.0-1034.36~18.04.15.4.0-1035.38~18.04.15.4.0-1037.40~18.04.15.4.0-1038.41~18.04.15.4.0-1039.42~18.04.15.4.0-1041.44~18.04.15.4.0-1042.45~18.04.15.4.0-1043.46~18.04.15.4.0-1044.47~18.04.15.4.0-1046.50~18.04.25.4.0-1048.52~18.04.15.4.0-1049.53~18.04.15.4.0-1052.56~18.04.15.4.0-1053.57~18.04.15.4.0-1054.58~18.04.15.4.0-1055.59~18.04.15.4.0-1056.60~18.04.15.4.0-1057.61~18.04.15.4.0-1058.62~18.04.15.4.0-1059.63~18.04.15.4.0-1061.65~18.04.15.4.0-1062.66~18.04.15.4.0-1063.67~18.04.15.4.0-1064.68~18.04.15.4.0-1066.71~18.04.15.4.0-1067.72~18.04.15.4.0-1069.75~18.04.15.4.0-1070.76~18.04.15.4.0-1071.77~18.04.15.4.0-1073.79~18.04.15.4.0-1076.83~18.04.15.4.0-1078.86~18.04.15.4.0-1079.87~18.04.15.4.0-1081.89~18.04.15.4.0-1082.90~18.04.15.4.0-1083.91~18.04.15.4.0-1084.92~18.04.15.4.0-1086.95~18.04.15.4.0-1087.96~18.04.15.4.0-1090.99~18.04.25.4.0-1091.100~18.04.1	5.4.0-1131.140~18.04.1
`linux-raspi-5.4` Ubuntu:Pro:18.04:LTS	before 5.4.0-1116.128~18.04.1, plus listed versions 5.4.0-1013.13~18.04.15.4.0-1015.15~18.04.15.4.0-1016.17~18.04.15.4.0-1018.20~18.04.15.4.0-1019.21~18.04.1 Show 45 moreShow less 5.4.0-1021.24~18.04.15.4.0-1022.25~18.04.15.4.0-1023.26~18.04.15.4.0-1025.28~18.04.15.4.0-1026.29~18.04.15.4.0-1028.31~18.04.15.4.0-1029.32~18.04.15.4.0-1030.33~18.04.15.4.0-1032.35~18.04.15.4.0-1033.36~18.04.15.4.0-1034.37~18.04.15.4.0-1035.38~18.04.15.4.0-1036.39~18.04.15.4.0-1038.41~18.04.15.4.0-1041.45~18.04.15.4.0-1042.46~18.04.35.4.0-1043.47~18.04.15.4.0-1044.48~18.04.15.4.0-1045.49~18.04.15.4.0-1046.50~18.04.15.4.0-1047.52~18.04.15.4.0-1048.53~18.04.15.4.0-1050.56~18.04.15.4.0-1052.58~18.04.15.4.0-1053.60~18.04.15.4.0-1055.62~18.04.15.4.0-1056.63~18.04.15.4.0-1058.65~18.04.15.4.0-1059.66~18.04.15.4.0-1060.68~18.04.15.4.0-1062.70~18.04.15.4.0-1065.75~18.04.15.4.0-1066.76~18.04.15.4.0-1068.78~18.04.15.4.0-1069.79~18.04.15.4.0-1070.80~18.04.15.4.0-1071.81~18.04.15.4.0-1073.84~18.04.15.4.0-1074.85~18.04.15.4.0-1077.88~18.04.25.4.0-1078.89~18.04.15.4.0-1079.90~18.04.15.4.0-1080.91~18.04.15.4.0-1081.92~18.04.15.4.0-1082.93~18.04.1	5.4.0-1116.128~18.04.1
`linux-aws-fips` Ubuntu:Pro:FIPS-updates:18.04:LTS	before 4.15.0-2111.117, plus listed versions 4.15.0-2000.44.15.0-2018.184.15.0-2021.214.15.0-2022.224.15.0-2024.24 Show 45 moreShow less 4.15.0-2025.254.15.0-2026.264.15.0-2027.274.15.0-2030.314.15.0-2031.324.15.0-2033.344.15.0-2034.354.15.0-2035.374.15.0-2036.384.15.0-2037.394.15.0-2038.404.15.0-2039.414.15.0-2040.424.15.0-2041.434.15.0-2042.444.15.0-2044.464.15.0-2045.474.15.0-2048.504.15.0-2051.534.15.0-2052.544.15.0-2053.554.15.0-2054.564.15.0-2055.574.15.0-2056.584.15.0-2057.594.15.0-2059.614.15.0-2060.624.15.0-2061.634.15.0-2063.664.15.0-2064.674.15.0-2065.684.15.0-2066.694.15.0-2067.704.15.0-2069.724.15.0-2072.764.15.0-2075.804.15.0-2076.814.15.0-2078.834.15.0-2079.844.15.0-2080.854.15.0-2081.874.15.0-2082.884.15.0-2083.894.15.0-2085.914.15.0-2087.93	4.15.0-2111.117
`linux-azure-fips` Ubuntu:Pro:FIPS-updates:18.04:LTS	before 4.15.0-2090.96, plus listed versions 4.15.0-1002.24.15.0-2006.74.15.0-2007.84.15.0-2008.94.15.0-2009.10 Show 45 moreShow less 4.15.0-2012.144.15.0-2013.154.15.0-2015.174.15.0-2016.184.15.0-2017.204.15.0-2018.214.15.0-2020.234.15.0-2021.244.15.0-2022.254.15.0-2023.264.15.0-2024.274.15.0-2025.284.15.0-2026.294.15.0-2027.304.15.0-2030.334.15.0-2033.374.15.0-2034.384.15.0-2035.394.15.0-2036.404.15.0-2037.414.15.0-2038.424.15.0-2039.434.15.0-2041.454.15.0-2042.464.15.0-2043.474.15.0-2045.494.15.0-2046.504.15.0-2047.514.15.0-2048.524.15.0-2049.534.15.0-2050.544.15.0-2053.584.15.0-2056.624.15.0-2057.634.15.0-2059.654.15.0-2060.664.15.0-2062.684.15.0-2066.724.15.0-2067.734.15.0-2068.744.15.0-2070.764.15.0-2071.774.15.0-2072.784.15.0-2073.794.15.0-2074.80	4.15.0-2090.96
`linux-fips` Ubuntu:Pro:FIPS-updates:18.04:LTS	before 4.15.0-1127.138, plus listed versions 4.15.0-1027.324.15.0-1029.344.15.0-1034.394.15.0-1035.404.15.0-1037.42 Show 45 moreShow less 4.15.0-1038.434.15.0-1039.444.15.0-1040.454.15.0-1041.464.15.0-1044.504.15.0-1045.524.15.0-1046.534.15.0-1048.554.15.0-1049.564.15.0-1050.584.15.0-1051.594.15.0-1052.604.15.0-1053.614.15.0-1054.624.15.0-1055.634.15.0-1056.644.15.0-1057.654.15.0-1058.664.15.0-1059.674.15.0-1060.684.15.0-1063.714.15.0-1066.754.15.0-1067.764.15.0-1068.774.15.0-1069.784.15.0-1070.794.15.0-1071.804.15.0-1072.814.15.0-1073.824.15.0-1075.844.15.0-1076.854.15.0-1078.874.15.0-1080.894.15.0-1081.904.15.0-1083.924.15.0-1084.934.15.0-1085.944.15.0-1087.964.15.0-1090.1004.15.0-1093.1044.15.0-1094.1054.15.0-1096.1074.15.0-1097.1084.15.0-1098.1094.15.0-1099.110	4.15.0-1127.138
`linux-gcp-fips` Ubuntu:Pro:FIPS-updates:18.04:LTS	before 4.15.0-2074.79, plus listed versions 4.15.0-2013.144.15.0-2016.184.15.0-2017.194.15.0-2018.204.15.0-2019.21 Show 41 moreShow less 4.15.0-2020.224.15.0-2021.234.15.0-2022.244.15.0-2024.264.15.0-2025.274.15.0-2026.284.15.0-2028.314.15.0-2029.324.15.0-2030.334.15.0-2031.344.15.0-2032.354.15.0-2034.374.15.0-2037.414.15.0-2040.454.15.0-2041.464.15.0-2043.484.15.0-2044.494.15.0-2045.504.15.0-2047.524.15.0-2050.554.15.0-2052.574.15.0-2054.594.15.0-2055.604.15.0-2056.614.15.0-2057.624.15.0-2058.634.15.0-2059.644.15.0-2060.654.15.0-2061.664.15.0-2062.674.15.0-2063.684.15.0-2064.694.15.0-2065.704.15.0-2066.714.15.0-2067.724.15.0-2068.734.15.0-2069.744.15.0-2070.754.15.0-2071.764.15.0-2072.774.15.0-2073.78	4.15.0-2074.79
`linux-aws-fips` Ubuntu:Pro:FIPS:18.04:LTS	All versions, plus listed versions 4.15.0-2000.4	None known
`linux-azure-fips` Ubuntu:Pro:FIPS:18.04:LTS	All versions, plus listed versions 4.15.0-1002.2	None known
`linux-fips` Ubuntu:Pro:FIPS:18.04:LTS	All versions, plus listed versions 4.15.0-1011.12	None known
`linux-gcp-fips` Ubuntu:Pro:FIPS:18.04:LTS	All versions, plus listed versions 4.15.0-1001.1	None known
`linux` Ubuntu:20.04:LTS	before 5.4.0-195.215, plus listed versions 5.3.0-18.195.3.0-24.265.4.0-9.125.4.0-18.225.4.0-21.25 Show 45 moreShow less 5.4.0-24.285.4.0-25.295.4.0-26.305.4.0-28.325.4.0-29.335.4.0-31.355.4.0-33.375.4.0-37.415.4.0-39.435.4.0-40.445.4.0-42.465.4.0-45.495.4.0-47.515.4.0-48.525.4.0-51.565.4.0-52.575.4.0-53.595.4.0-54.605.4.0-56.625.4.0-58.645.4.0-59.655.4.0-60.675.4.0-62.705.4.0-64.725.4.0-65.735.4.0-66.745.4.0-67.755.4.0-70.785.4.0-71.795.4.0-72.805.4.0-73.825.4.0-74.835.4.0-77.865.4.0-80.905.4.0-81.915.4.0-84.945.4.0-86.975.4.0-88.995.4.0-89.1005.4.0-90.1015.4.0-91.1025.4.0-92.1035.4.0-94.1065.4.0-96.1095.4.0-97.110	5.4.0-195.215
`linux-aws` Ubuntu:20.04:LTS	before 5.4.0-1132.142, plus listed versions 5.3.0-1003.35.3.0-1008.95.3.0-1009.105.3.0-1010.115.4.0-1005.5 Show 45 moreShow less 5.4.0-1007.75.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1017.175.4.0-1018.185.4.0-1020.205.4.0-1021.215.4.0-1022.225.4.0-1024.245.4.0-1025.255.4.0-1028.295.4.0-1029.305.4.0-1030.315.4.0-1032.335.4.0-1034.355.4.0-1035.375.4.0-1037.395.4.0-1038.405.4.0-1039.415.4.0-1041.435.4.0-1043.455.4.0-1045.475.4.0-1047.495.4.0-1048.505.4.0-1049.515.4.0-1051.535.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1058.615.4.0-1059.625.4.0-1060.635.4.0-1061.645.4.0-1063.665.4.0-1064.675.4.0-1065.685.4.0-1066.695.4.0-1068.725.4.0-1069.735.4.0-1071.765.4.0-1072.775.4.0-1073.78	5.4.0-1132.142
`linux-aws-5.15` Ubuntu:20.04:LTS	before 5.15.0-1069.75~20.04.1, plus listed versions 5.15.0-1014.18~20.04.15.15.0-1015.19~20.04.15.15.0-1017.21~20.04.15.15.0-1019.23~20.04.15.15.0-1020.24~20.04.1 Show 39 moreShow less 5.15.0-1021.25~20.04.15.15.0-1022.26~20.04.15.15.0-1023.27~20.04.15.15.0-1026.30~20.04.25.15.0-1027.31~20.04.15.15.0-1028.32~20.04.15.15.0-1030.34~20.04.15.15.0-1031.35~20.04.15.15.0-1033.37~20.04.15.15.0-1034.38~20.04.15.15.0-1035.39~20.04.15.15.0-1036.40~20.04.15.15.0-1037.41~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.15.15.0-1040.45~20.04.15.15.0-1041.46~20.04.15.15.0-1043.48~20.04.15.15.0-1044.49~20.04.15.15.0-1045.50~20.04.15.15.0-1047.52~20.04.15.15.0-1048.53~20.04.15.15.0-1049.54~20.04.15.15.0-1050.55~20.04.15.15.0-1051.56~20.04.15.15.0-1052.57~20.04.15.15.0-1053.58~20.04.15.15.0-1055.60~20.04.15.15.0-1056.61~20.04.15.15.0-1057.63~20.04.15.15.0-1058.64~20.04.15.15.0-1061.67~20.04.15.15.0-1062.68~20.04.15.15.0-1063.69~20.04.15.15.0-1064.70~20.04.15.15.0-1065.71~20.04.15.15.0-1066.72~20.04.15.15.0-1067.73~20.04.15.15.0-1068.74~20.04.1	5.15.0-1069.75~20.04.1

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected
Nov 3, 2026	facts
Nov 2, 2026	first indexed	CVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2024-42154 is a medium vulnerability (CVSS 4.4) in Linux, published July 30, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.26%, the 17th percentile. Fixed in kernel 6.6.43.1-7.

References

Show 194 moreShow less

This page doesn't list everything

Left out here: 847 package rows, 1,432 versions, 5,409 references and the rest of 20 source descriptions. The JSON record has them. Left out on purpose, here and in the API, to keep responses small: 18 source records.