Every CVE Search/ Get API key

CVE-2021-47069

ipc/mqueue, msg, sem: avoid relying on a stack reference past its expiry

7.8 HighFix available

In the Linux kernel, the following vulnerability has been resolved:

ipc/mqueue, msg, sem: avoid relying on a stack reference past its expiry

do_mq_timedreceive calls wq_sleep with a stack local address. The sender (do_mq_timedsend) uses this address to later call pipelined_send.

This leads to a very hard to trigger race where a do_mq_timedreceive call might return and leave do_mq_timedsend to rely on an invalid address, causing the following crash:

RIP: 0010:wake_q_add_safe+0x13/0x60 Call Trace: __x64_sys_mq_timedsend+0x2a9/0x490 do_syscall_64+0x80/0x680 entry_SYSCALL_64_after_hwframe+0x44/0xa9 RIP: 0033:0x7f5928e40343

The race occurs as:

  1. do_mq_timedreceive calls wq_sleep with the address of struct ext_wait_queue on function stack (aliased as ewq_addr here) - it holds a valid struct ext_wait_queue * as long as the stack has not been overwritten.

  2. ewq_addr gets added to info->e_wait_q[RECV].list in wq_add, and do_mq_timedsend receives it via wq_get_first_waiter(info, RECV) to call __pipelined_op.

  3. Sender calls __pipelined_op::smp_store_release(&this->state, STATE_READY). Here is where the race window begins. (this is ewq_addr.)

  4. If the receiver wakes up now in do_mq_timedreceive::wq_sleep, it will see state == STATE_READY and break.

  5. do_mq_timedreceive returns, and ewq_addr is no longer guaranteed to be a struct ext_wait_queue * since it was on do_mq_timedreceive's stack. (Although the address may not get overwritten until another function happens to touch it, which means it can persist around for an indefinite time.)

  6. do_mq_timedsend::__pipelined_op() still believes ewq_addr is a struct ext_wait_queue *, and uses it to find a task_struct to pass to the wake_q_add_safe call. In the lucky case where nothing has overwritten ewq_addr yet, ewq_addr->task is the right task_struct. In the unlucky case, __pipelined_op::wake_q_add_safe gets handed a bogus address as the receiver's task_struct causing the crash.

do_mq_timedsend::__pipelined_op() should not dereference this after setting STATE_READY, as the receiver counterpart is now free to return. Change __pipelined_op to call wake_q_add_safe on the receiver's task_struct returned by get_task_struct, instead of dereferencing this which sits on the receiver's stack.

As Manfred pointed out, the race potentially also exists in ipc/msg.c::expunge_all and ipc/sem.c::wake_up_sem_queue_prepare. Fix those in the same way.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

0.26%Up 0.2 points since Mar 2, 2024
90%50%10%1%

What each source reports

CVE List Score used 7.8

ipc/mqueue, msg, sem: avoid relying on a stack reference past its expiry

In the Linux kernel, the following vulnerability has been resolved:

ipc/mqueue, msg, sem: avoid relying on a stack reference past its expiry

do_mq_timedreceive calls wq_sleep with a stack local address. The sender (do_mq_timedsend) uses this address to later call pipelined_send.

This leads to a very hard to trigger race where a do_mq_timedreceive call might return and leave do_mq_timedsend to rely on an invalid address, causing the following crash:

RIP: 0010:wake_q_add_safe+0x13/0x60 Call Trace: __x64_sys_mq_timedsend+0x2a9/0x490 do_syscall_64+0x80/0x680 entry_SYSCALL_64_after_hwframe+0x44/0xa9 RIP: 0033:0x7f5928e40343

The race occurs as:

  1. do_mq_timedreceive calls wq_sleep with the address of struct ext_wait_queue on function stack (aliased as ewq_addr here) - it holds a valid struct ext_wait_queue * as long as the stack has not been overwritten.

  2. ewq_addr gets added to info->e_wait_q[RECV].list in wq_add, and do_mq_timedsend receives it via wq_get_first_waiter(info, RECV) to call __pipelined_op.

  3. Sender calls __pipelined_op::smp_store_release(&this->state, STATE_READY). Here is where the race window begins. (this is ewq_addr.)

  4. If the receiver wakes up now in do_mq_timedreceive::wq_sleep, it will see state == STATE_READY and break.

  5. do_mq_timedreceive returns, and ewq_addr is no longer guaranteed to be a struct ext_wait_queue * since it was on do_mq_timedreceive's stack. (Although the address may not get overwritten until another function happens to touch it, which means it can persist around for an indefinite time.)

  6. do_mq_timedsend::__pipelined_op() still believes ewq_addr is a struct ext_wait_queue *, and uses it to find a task_struct to pass to the wake_q_add_safe call. In the lucky case where nothing has overwritten ewq_addr yet, ewq_addr->task is the right task_struct. In the unlucky case, __pipelined_op::wake_q_add_safe gets handed a bogus address as the receiver's task_struct causing the crash.

do_mq_timedsend::__pipelined_op() should not dereference this after setting STATE_READY, as the receiver counterpart is now free to return. Change __pipelined_op to call wake_q_add_safe on the receiver's task_struct returned by get_task_struct, instead of dereferencing this which sits on the receiver's stack.

As Manfred pointed out, the race potentially also exists in ipc/msg.c::expunge_all and ipc/sem.c::wake_up_sem_queue_prepare. Fix those in the same way.

Record
CVE-2021-47069
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
EUVDEUVD-2021-33717 7.8

In the Linux kernel, the following vulnerability has been resolved:

ipc/mqueue, msg, sem: avoid relying on a stack reference past its expiry

do_mq_timedreceive calls wq_sleep with a stack local address. The sender (do_mq_timedsend) uses this address to later call pipelined_send.

This leads to a very hard to trigger race where a do_mq_timedreceive call might return and leave do_mq_timedsend to rely on an invalid address, causing the following crash:

RIP: 0010:wake_q_add_safe+0x13/0x60 Call Trace: __x64_sys_mq_timedsend+0x2a9/0x490 do_syscall_64+0x80/0x680 entry_SYSCALL_64_after_hwframe+0x44/0xa9 RIP: 0033:0x7f5928e40343

The race occurs as:

  1. do_mq_timedreceive calls wq_sleep with the address of struct ext_wait_queue on function stack (aliased as ewq_addr here) - it holds a valid struct ext_wait_queue * as long as the stack has not been overwritten.

  2. ewq_addr gets added to info->e_wait_q[RECV].list in wq_add, and do_mq_timedsend receives it via wq_get_first_waiter(info, RECV) to call __pipelined_op.

  3. Sender calls __pipelined_op::smp_store_release(&this->state, STATE_READY). Here is where the race window begins. (this is ewq_addr.)

  4. If the receiver wakes up now in do_mq_timedreceive::wq_sleep, it will see state == STATE_READY and break.

  5. do_mq_timedreceive returns, and ewq_addr is no longer guaranteed to be a struct ext_wait_queue * since it was on do_mq_timedreceive's stack. (Although the address may not get overwritten until another function happens to touch it, which means it can persist around for an indefinite time.)

  6. do_mq_timedsend::__pipelined_op() still believes ewq_addr is a struct ext_wait_queue *, and uses it to find a task_struct to pass to the wake_q_add_safe call. In the lucky case where nothing has overwritten ewq_addr yet, ewq_addr->task is the right task_struct. In the unlucky case, __pipelined_op::wake_q_add_safe gets handed a bogus address as the receiver's task_struct causing the crash.

do_mq_timedsend::__pipelined_op() should not dereference this after setting STATE_READY, as the receiver counterpart is now free to return. Change __pipelined_op to call wake_q_add_safe on the receiver's task_struct returned by get_task_struct, instead of dereferencing this which sits on the receiver's stack.

As Manfred pointed out, the race potentially also exists in ipc/msg.c::expunge_all and ipc/sem.c::wake_up_sem_queue_prepare. Fix those in the same way.

Record
EUVD-2021-33717
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-47fv-c4cg-c767 7.0

In the Linux kernel, the following vulnerability has been resolved: ipc/mqueue, msg, sem: avoid...

In the Linux kernel, the following vulnerability has been resolved:

ipc/mqueue, msg, sem: avoid relying on a stack reference past its expiry

do_mq_timedreceive calls wq_sleep with a stack local address. The sender (do_mq_timedsend) uses this address to later call pipelined_send.

This leads to a very hard to trigger race where a do_mq_timedreceive call might return and leave do_mq_timedsend to rely on an invalid address, causing the following crash:

RIP: 0010:wake_q_add_safe+0x13/0x60 Call Trace: __x64_sys_mq_timedsend+0x2a9/0x490 do_syscall_64+0x80/0x680 entry_SYSCALL_64_after_hwframe+0x44/0xa9 RIP: 0033:0x7f5928e40343

The race occurs as:

  1. do_mq_timedreceive calls wq_sleep with the address of struct ext_wait_queue on function stack (aliased as ewq_addr here) - it holds a valid struct ext_wait_queue * as long as the stack has not been overwritten.

  2. ewq_addr gets added to info->e_wait_q[RECV].list in wq_add, and do_mq_timedsend receives it via wq_get_first_waiter(info, RECV) to call __pipelined_op.

  3. Sender calls __pipelined_op::smp_store_release(&this->state, STATE_READY). Here is where the race window begins. (this is ewq_addr.)

  4. If the receiver wakes up now in do_mq_timedreceive::wq_sleep, it will see state == STATE_READY and break.

  5. do_mq_timedreceive returns, and ewq_addr is no longer guaranteed to be a struct ext_wait_queue * since it was on do_mq_timedreceive's stack. (Although the address may not get overwritten until another function happens to touch it, which means it can persist around for an indefinite time.)

  6. do_mq_timedsend::__pipelined_op() still believes ewq_addr is a struct ext_wait_queue *, and uses it to find a task_struct to pass to the wake_q_add_safe call. In the lucky case where nothing has overwritten ewq_addr yet, ewq_addr->task is the right task_struct. In the unlucky case, __pipelined_op::wake_q_add_safe gets handed a bogus address as the receiver's task_struct causing the crash.

do_mq_timedsend::__pipelined_op() should not dereference this after setting STATE_READY, as the receiver counterpart is now free to return. Change __pipelined_op to call wake_q_add_safe on the receiver's task_struct returned by get_task_struct, instead of dereferencing this which sits on the receiver's stack.

As Manfred pointed out, the race potentially also exists in ipc/msg.c::expunge_all and ipc/sem.c::wake_up_sem_queue_prepare. Fix those in the same way.

Record
GHSA-47fv-c4cg-c767
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-672
Updated
2026-11-02
NVD 7.8

In the Linux kernel, the following vulnerability has been resolved:

ipc/mqueue, msg, sem: avoid relying on a stack reference past its expiry

do_mq_timedreceive calls wq_sleep with a stack local address. The sender (do_mq_timedsend) uses this address to later call pipelined_send.

This leads to a very hard to trigger race where a do_mq_timedreceive call might return and leave do_mq_timedsend to rely on an invalid address, causing the following crash:

RIP: 0010:wake_q_add_safe+0x13/0x60 Call Trace: __x64_sys_mq_timedsend+0x2a9/0x490 do_syscall_64+0x80/0x680 entry_SYSCALL_64_after_hwframe+0x44/0xa9 RIP: 0033:0x7f5928e40343

The race occurs as:

  1. do_mq_timedreceive calls wq_sleep with the address of struct ext_wait_queue on function stack (aliased as ewq_addr here) - it holds a valid struct ext_wait_queue * as long as the stack has not been overwritten.

  2. ewq_addr gets added to info->e_wait_q[RECV].list in wq_add, and do_mq_timedsend receives it via wq_get_first_waiter(info, RECV) to call __pipelined_op.

  3. Sender calls __pipelined_op::smp_store_release(&this->state, STATE_READY). Here is where the race window begins. (this is ewq_addr.)

  4. If the receiver wakes up now in do_mq_timedreceive::wq_sleep, it will see state == STATE_READY and break.

  5. do_mq_timedreceive returns, and ewq_addr is no longer guaranteed to be a struct ext_wait_queue * since it was on do_mq_timedreceive's stack. (Although the address may not get overwritten until another function happens to touch it, which means it can persist around for an indefinite time.)

  6. do_mq_timedsend::__pipelined_op() still believes ewq_addr is a struct ext_wait_queue *, and uses it to find a task_struct to pass to the wake_q_add_safe call. In the lucky case where nothing has overwritten ewq_addr yet, ewq_addr->task is the right task_struct. In the unlucky case, __pipelined_op::wake_q_add_safe gets handed a bogus address as the receiver's task_struct causing the crash.

do_mq_timedsend::__pipelined_op() should not dereference this after setting STATE_READY, as the receiver counterpart is now free to return. Change __pipelined_op to call wake_q_add_safe on the receiver's task_struct returned by get_task_struct, instead of dereferencing this which sits on the receiver's stack.

As Manfred pointed out, the race potentially also exists in ipc/msg.c::expunge_all and ipc/sem.c::wake_up_sem_queue_prepare. Fix those in the same way.

Record
CVE-2021-47069
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-672
Updated
2026-11-02
OSV 7.0

In the Linux kernel, the following vulnerability has been resolved:

ipc/mqueue, msg, sem: avoid relying on a stack reference past its expiry

do_mq_timedreceive calls wq_sleep with a stack local address. The sender (do_mq_timedsend) uses this address to later call pipelined_send.

This leads to a very hard to trigger race where a do_mq_timedreceive call might return and leave do_mq_timedsend to rely on an invalid address, causing the following crash:

RIP: 0010:wake_q_add_safe+0x13/0x60 Call Trace: __x64_sys_mq_timedsend+0x2a9/0x490 do_syscall_64+0x80/0x680 entry_SYSCALL_64_after_hwframe+0x44/0xa9 RIP: 0033:0x7f5928e40343

The race occurs as:

  1. do_mq_timedreceive calls wq_sleep with the address of struct ext_wait_queue on function stack (aliased as ewq_addr here) - it holds a valid struct ext_wait_queue * as long as the stack has not been overwritten.

  2. ewq_addr gets added to info->e_wait_q[RECV].list in wq_add, and do_mq_timedsend receives it via wq_get_first_waiter(info, RECV) to call __pipelined_op.

  3. Sender calls __pipelined_op::smp_store_release(&this->state, STATE_READY). Here is where the race window begins. (this is ewq_addr.)

  4. If the receiver wakes up now in do_mq_timedreceive::wq_sleep, it will see state == STATE_READY and break.

  5. do_mq_timedreceive returns, and ewq_addr is no longer guaranteed to be a struct ext_wait_queue * since it was on do_mq_timedreceive's stack. (Although the address may not get overwritten until another function happens to touch it, which means it can persist around for an indefinite time.)

  6. do_mq_timedsend::__pipelined_op() still believes ewq_addr is a struct ext_wait_queue *, and uses it to find a task_struct to pass to the wake_q_add_safe call. In the lucky case where nothing has overwritten ewq_addr yet, ewq_addr->task is the right task_struct. In the unlucky case, __pipelined_op::wake_q_add_safe gets handed a bogus address as the receiver's task_struct causing the crash.

do_mq_timedsend::__pipelined_op() should not dereference this after setting STATE_READY, as the receiver counterpart is now free to return. Change __pipelined_op to call wake_q_add_safe on the receiver's task_struct returned by get_task_struct, instead of dereferencing this which sits on the receiver's stack.

As Manfred pointed out, the race potentially also exists in ipc/msg.c::expunge_all and ipc/sem.c::wake_up_sem_queue_prepare. Fix those in the same way.

Record
CVE-2021-47069
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2021-47069 7.0

In the Linux kernel, the following vulnerability has been resolved: ipc/mqueue, msg, sem: avoid relying on a stack reference past its expiry do_mq_timedreceive calls wq_sleep with a stack local address. The sender (do_mq_timedsend) uses this address to later call pipelined_send. This leads to a very hard to trigger race where a do_mq_timedreceive call might return and leave do_mq_timedsend to rely on an invalid address, causing the following crash: RIP: 0010:wake_q_add_safe+0x13/0x60 Call Trace: __x64_sys_mq_timedsend+0x2a9/0x490 do_syscall_64+0x80/0x680 entry_SYSCALL_64_after_hwframe+0x44/0xa9 RIP: 0033:0x7f5928e40343 The race occurs as: 1. do_mq_timedreceive calls wq_sleep with the address of struct ext_wait_queue on function stack (aliased as ewq_addr here) - it holds a valid struct ext_wait_queue * as long as the stack has not been overwritten. 2. ewq_addr gets added to info->e_wait_q[RECV].list in wq_add, and do_mq_timedsend receives it via wq_get_first_waiter(info, RECV) to call __pipelined_op. 3. Sender calls __pipelined_op::smp_store_release(&this->state, STATE_READY). Here is where the race window begins. (this is ewq_addr.) 4. If the receiver wakes up now in do_mq_timedreceive::wq_sleep, it will see state == STATE_READY and break. 5. do_mq_timedreceive returns, and ewq_addr is no longer guaranteed to be a struct ext_wait_queue * since it was on do_mq_timedreceive's stack. (Although the address may not get overwritten until another function happens to touch it, which means it can persist around for an indefinite time.) 6. do_mq_timedsend::__pipelined_op() still believes ewq_addr is a struct ext_wait_queue *, and uses it to find a task_struct to pass to the wake_q_add_safe call. In the lucky case where nothing has overwritten ewq_addr yet, ewq_addr->task is the right task_struct. In the unlucky case, __pipelined_op::wake_q_add_safe gets handed a bogus address as the receiver's task_struct causing the crash. do_mq_timedsend::__pipelined_op() should not dereference this after setting STATE_READY, as the receiver counterpart is now free to return. Change __pipelined_op to call wake_q_add_safe on the receiver's task_struct returned by get_task_struct, instead of dereferencing this which sits on the receiver's stack. As Manfred pointed out, the race potentially also exists in ipc/msg.c::expunge_all and ipc/sem.c::wake_up_sem_queue_prepare. Fix those in the same way.

Record
DEBIAN-CVE-2021-47069
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 17 moreShow less
OSVRHSA-2024:4211 7.3

Red Hat Security Advisory: kernel security and bug fix update

Record
RHSA-2024:4211
CVSS 3.1
7.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H
Updated
2026-11-02
OSVRHSA-2024:4352 7.0

Red Hat Security Advisory: kernel-rt security and bug fix update

Record
RHSA-2024:4352
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2024:5692 7.0

Red Hat Security Advisory: kernel security update

Record
RHSA-2024:5692
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2024:6206 7.1

Red Hat Security Advisory: kernel security update

Record
RHSA-2024:6206
CVSS 3.1
7.1 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
Updated
2026-11-02
OSVRLSA-2024:4211 7.0

Important: kernel security and bug fix update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: Bluetooth BR/EDR PIN Pairing procedure is vulnerable to an impersonation attack (CVE-2020-26555)

  • kernel: TCP-spoofed ghost ACKs and leak leak initial sequence number (CVE-2023-52881,RHV-2024-1001)

  • kernel: ovl: fix leaked entry (CVE-2021-46972)

  • kernel: platform/x86: dell-smbios-wmi: Fix oops on rmmod dell_smbios (CVE-2021-47073)

  • kernel: gro: fix ownership transfer (CVE-2024-35890)

  • kernel: tls: (CVE-2024-26584, CVE-2024-26583, CVE-2024-26585)

  • kernel: wifi: (CVE-2024-35789, CVE-2024-27410, CVE-2024-35838, CVE-2024-35845)

  • kernel: mlxsw: (CVE-2024-35855, CVE-2024-35854, CVE-2024-35853, CVE-2024-35852, CVE-2024-36007)

  • kernel: PCI interrupt mapping cause oops [rhel-8] (CVE-2021-46909)

  • kernel: ipc/mqueue, msg, sem: avoid relying on a stack reference past its expiry (CVE-2021-47069)

  • kernel: hwrng: core - Fix page fault dead lock on mmap-ed hwrng [rhel-8] (CVE-2023-52615)

  • kernel: net/mlx5e: (CVE-2023-52626, CVE-2024-35835, CVE-2023-52667, CVE-2024-35959)

  • kernel: drm/amdgpu: use-after-free vulnerability (CVE-2024-26656)

  • kernel: Bluetooth: Avoid potential use-after-free in hci_error_reset [rhel-8] (CVE-2024-26801)

  • kernel: Squashfs: check the inode number is not the invalid value of zero (CVE-2024-26982)

  • kernel: netfilter: nf_tables: use timestamp to check for set element timeout [rhel-8.10] (CVE-2024-27397)

  • kernel: mm/damon/vaddr-test: memory leak in damon_do_test_apply_three_regions() (CVE-2023-52560)

  • kernel: ppp_async: limit MRU to 64K (CVE-2024-26675)

  • kernel: x86/mm/swap: (CVE-2024-26759, CVE-2024-26906)

  • kernel: tipc: fix kernel warning when sending SYN message [rhel-8] (CVE-2023-52700)

  • kernel: RDMA/mlx5: Fix fortify source warning while accessing Eth segment (CVE-2024-26907)

  • kernel: erspan: make sure erspan_base_hdr is present in skb->head (CVE-2024-35888)

  • kernel: powerpc/imc-pmu/powernv: (CVE-2023-52675, CVE-2023-52686)

  • kernel: KVM: SVM: improper check in svm_set_x2apic_msr_interception allows direct access to host x2apic msrs (CVE-2023-5090)

  • kernel: EDAC/thunderx: Incorrect buffer size in drivers/edac/thunderx_edac.c (CVE-2023-52464)

  • kernel: ipv6: sr: fix possible use-after-free and null-ptr-deref (CVE-2024-26735)

  • kernel: mptcp: fix data re-injection from stale subflow (CVE-2024-26826)

  • kernel: crypto: (CVE-2024-26974, CVE-2023-52669, CVE-2023-52813)

  • kernel: net/mlx5/bnx2x/usb: (CVE-2024-35960, CVE-2024-35958, CVE-2021-47310, CVE-2024-26804, CVE-2021-47311, CVE-2024-26859, CVE-2021-47236, CVE-2023-52703)

  • kernel: i40e: Do not use WQ_MEM_RECLAIM flag for workqueue (CVE-2024-36004)

  • kernel: perf/core: Bail out early if the request AUX area is out of bound (CVE-2023-52835)

  • kernel: USB/usbnet: (CVE-2023-52781, CVE-2023-52877, CVE-2021-47495)

  • kernel: can: (CVE-2023-52878, CVE-2021-47456)

  • kernel: mISDN: fix possible use-after-free in HFC_cleanup() (CVE-2021-47356)

  • kernel: udf: Fix NULL pointer dereference in udf_symlink function (CVE-2021-47353)

Bug Fix(es):

  • Kernel panic - kernel BUG at mm/slub.c:376! (JIRA:Rocky Linux-29783)

  • Temporary values in FIPS integrity test should be zeroized [rhel-8.10.z] (JIRA:Rocky Linux-35361)

  • Rocky Linux8.6 - kernel: s390/cpum_cf: make crypto counters upward compatible (JIRA:Rocky Linux-36048)

  • [Rocky Linux8] blktests block/024 failed (JIRA:Rocky Linux-8130)

  • Rocky Linux8.9: EEH injections results Error: Power fault on Port 0 and other call traces(Everest/1050/Shiner) (JIRA:Rocky Linux-14195)

  • Latency spikes with Matrox G200 graphic cards (JIRA:Rocky Linux-36172)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2024:4211
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2024:4352 7.0

Important: kernel-rt security and bug fix update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

  • kernel: tls (CVE-2024-26585,CVE-2024-26584, CVE-2024-26583

  • kernel-rt: kernel: PCI interrupt mapping cause oops [rhel-8] (CVE-2021-46909)

  • kernel: ipc/mqueue, msg, sem: avoid relying on a stack reference past its expiry (CVE-2021-47069)

  • kernel: hwrng: core - Fix page fault dead lock on mmap-ed hwrng (CVE-2023-52615)

  • kernel-rt: kernel: drm/amdgpu: use-after-free vulnerability (CVE-2024-26656)

  • kernel: Bluetooth: Avoid potential use-after-free in hci_error_reset CVE-2024-26801)

  • kernel: Squashfs: check the inode number is not the invalid value of zero (CVE-2024-26982)

  • kernel: netfilter: nf_tables: use timestamp to check for set element timeout (CVE-2024-27397)

  • kernel: wifi: mac80211: (CVE-2024-35789, CVE-2024-35838, CVE-2024-35845)

  • kernel: wifi: nl80211: reject iftype change with mesh ID change (CVE-2024-27410)

  • kernel: perf/core: Bail out early if the request AUX area is out of bound (CVE-2023-52835)

  • kernel:TCP-spoofed ghost ACKs and leak initial sequence number (CVE-2023-52881)

  • kernel: Bluetooth BR/EDR PIN Pairing procedure is vulnerable to an impersonation attack (CVE-2020-26555)

  • kernel: ovl: fix leaked dentry (CVE-2021-46972)

  • kernel: platform/x86: dell-smbios-wmi: Fix oops on rmmod dell_smbios (CVE-2021-47073)

  • kernel: mm/damon/vaddr-test: memory leak in damon_do_test_apply_three_regions() (CVE-2023-52560)

  • kernel: ppp_async: limit MRU to 64K (CVE-2024-26675)

  • kernel: mm/swap: fix race when skipping swapcache (CVE-2024-26759)

  • kernel: RDMA/mlx5: Fix fortify source warning while accessing Eth segment (CVE-2024-26907)

  • kernel: x86/mm: Disallow vsyscall page read for copy_from_kernel_nofault() (CVE-2024-26906)

  • kernel: net: ip_tunnel: prevent perpetual headroom growth (CVE-2024-26804)

  • kernel: net/usb: kalmia: avoid printing uninitialized value on error path (CVE-2023-52703)

  • kernel: KVM: SVM: improper check in svm_set_x2apic_msr_interception allows direct access to host x2apic msrs (CVE-2023-5090)

  • kernel: EDAC/thunderx: Incorrect buffer size in drivers/edac/thunderx_edac.c (CVE-2023-52464)

  • kernel: ipv6: sr: fix possible use-after-free and null-ptr-deref (CVE-2024-26735)

  • kernel: mptcp: fix data re-injection from stale subflow (CVE-2024-26826)

  • kernel: net/bnx2x: Prevent access to a freed page in page_pool (CVE-2024-26859)

  • kernel: crypto: (CVE-2024-26974, CVE-2023-52813)

  • kernel: can: (CVE-2023-52878, CVE-2021-47456)

  • kernel: usb: (CVE-2023-52781, CVE-2023-52877)

  • kernel: net/mlx5e: fix a potential double-free in fs_any_create_groups (CVE-2023-52667)

  • kernel: usbnet: sanity check for maxpacket (CVE-2021-47495)

  • kernel: gro: fix ownership transfer (CVE-2024-35890)

  • kernel: erspan: make sure erspan_base_hdr is present in skb->head (CVE-2024-35888)

  • kernel: tipc: fix kernel warning when sending SYN message (CVE-2023-52700)

  • kernel: net/mlx5/mlxsw: (CVE-2024-35960, CVE-2024-36007, CVE-2024-35855)

  • kernel: net/mlx5e: (CVE-2024-35959, CVE-2023-52626, CVE-2024-35835)

  • kernel: mlxsw: (CVE-2024-35854, CVE-2024-35853, CVE-2024-35852)

  • kernel: net: (CVE-2024-35958, CVE-2021-47311, CVE-2021-47236, CVE-2021-47310)

  • kernel: i40e: Do not use WQ_MEM_RECLAIM flag for workqueue (CVE-2024-36004)

  • kernel: mISDN: fix possible use-after-free in HFC_cleanup() (CVE-2021-47356)

  • kernel: udf: Fix NULL pointer dereference in udf_symlink function (CVE-2021-47353)

Bug Fix(es):

  • kernel-rt: update RT source tree to the latest Rocky Linux-8.10.z kernel (JIRA:Rocky Linux-40882)

  • [rhel8.9][cxgb4]BUG: using smp_processor_id() in preemptible [00000000] code: ethtool/54735 (JIRA:Rocky Linux-8779)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2024:4352
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRXSA-2024:4211 7.0

Important: kernel security and bug fix update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: Bluetooth BR/EDR PIN Pairing procedure is vulnerable to an impersonation attack (CVE-2020-26555)

  • kernel: TCP-spoofed ghost ACKs and leak leak initial sequence number (CVE-2023-52881,RHV-2024-1001)

  • kernel: ovl: fix leaked entry (CVE-2021-46972)

  • kernel: platform/x86: dell-smbios-wmi: Fix oops on rmmod dell_smbios (CVE-2021-47073)

  • kernel: gro: fix ownership transfer (CVE-2024-35890)

  • kernel: tls: (CVE-2024-26584, CVE-2024-26583, CVE-2024-26585)

  • kernel: wifi: (CVE-2024-35789, CVE-2024-27410, CVE-2024-35838, CVE-2024-35845)

  • kernel: mlxsw: (CVE-2024-35855, CVE-2024-35854, CVE-2024-35853, CVE-2024-35852, CVE-2024-36007)

  • kernel: PCI interrupt mapping cause oops [rhel-8] (CVE-2021-46909)

  • kernel: ipc/mqueue, msg, sem: avoid relying on a stack reference past its expiry (CVE-2021-47069)

  • kernel: hwrng: core - Fix page fault dead lock on mmap-ed hwrng [rhel-8] (CVE-2023-52615)

  • kernel: net/mlx5e: (CVE-2023-52626, CVE-2024-35835, CVE-2023-52667, CVE-2024-35959)

  • kernel: drm/amdgpu: use-after-free vulnerability (CVE-2024-26656)

  • kernel: Bluetooth: Avoid potential use-after-free in hci_error_reset [rhel-8] (CVE-2024-26801)

  • kernel: Squashfs: check the inode number is not the invalid value of zero (CVE-2024-26982)

  • kernel: netfilter: nf_tables: use timestamp to check for set element timeout [rhel-8.10] (CVE-2024-27397)

  • kernel: mm/damon/vaddr-test: memory leak in damon_do_test_apply_three_regions() (CVE-2023-52560)

  • kernel: ppp_async: limit MRU to 64K (CVE-2024-26675)

  • kernel: x86/mm/swap: (CVE-2024-26759, CVE-2024-26906)

  • kernel: tipc: fix kernel warning when sending SYN message [rhel-8] (CVE-2023-52700)

  • kernel: RDMA/mlx5: Fix fortify source warning while accessing Eth segment (CVE-2024-26907)

  • kernel: erspan: make sure erspan_base_hdr is present in skb->head (CVE-2024-35888)

  • kernel: powerpc/imc-pmu/powernv: (CVE-2023-52675, CVE-2023-52686)

  • kernel: KVM: SVM: improper check in svm_set_x2apic_msr_interception allows direct access to host x2apic msrs (CVE-2023-5090)

  • kernel: EDAC/thunderx: Incorrect buffer size in drivers/edac/thunderx_edac.c (CVE-2023-52464)

  • kernel: ipv6: sr: fix possible use-after-free and null-ptr-deref (CVE-2024-26735)

  • kernel: mptcp: fix data re-injection from stale subflow (CVE-2024-26826)

  • kernel: crypto: (CVE-2024-26974, CVE-2023-52669, CVE-2023-52813)

  • kernel: net/mlx5/bnx2x/usb: (CVE-2024-35960, CVE-2024-35958, CVE-2021-47310, CVE-2024-26804, CVE-2021-47311, CVE-2024-26859, CVE-2021-47236, CVE-2023-52703)

  • kernel: i40e: Do not use WQ_MEM_RECLAIM flag for workqueue (CVE-2024-36004)

  • kernel: perf/core: Bail out early if the request AUX area is out of bound (CVE-2023-52835)

  • kernel: USB/usbnet: (CVE-2023-52781, CVE-2023-52877, CVE-2021-47495)

  • kernel: can: (CVE-2023-52878, CVE-2021-47456)

  • kernel: mISDN: fix possible use-after-free in HFC_cleanup() (CVE-2021-47356)

  • kernel: udf: Fix NULL pointer dereference in udf_symlink function (CVE-2021-47353)

Bug Fix(es):

  • Kernel panic - kernel BUG at mm/slub.c:376! (JIRA:Rocky Linux SIG Cloud-29783)

  • Temporary values in FIPS integrity test should be zeroized [rhel-8.10.z] (JIRA:Rocky Linux SIG Cloud-35361)

  • Rocky Linux SIG Cloud8.6 - kernel: s390/cpum_cf: make crypto counters upward compatible (JIRA:Rocky Linux SIG Cloud-36048)

  • [Rocky Linux SIG Cloud8] blktests block/024 failed (JIRA:Rocky Linux SIG Cloud-8130)

  • Rocky Linux SIG Cloud8.9: EEH injections results Error: Power fault on Port 0 and other call traces(Everest/1050/Shiner) (JIRA:Rocky Linux SIG Cloud-14195)

  • Latency spikes with Matrox G200 graphic cards (JIRA:Rocky Linux SIG Cloud-36172)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RXSA-2024:4211
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2021-47069 7.0

In the Linux kernel, the following vulnerability has been resolved: ipc/mqueue, msg, sem: avoid relying on a stack reference past its expiry do_mq_timedreceive calls wq_sleep with a stack local address. The sender (do_mq_timedsend) uses this address to later call pipelined_send. This leads to a very hard to trigger race where a do_mq_timedreceive call might return and leave do_mq_timedsend to rely on an invalid address, causing the following crash: RIP: 0010:wake_q_add_safe+0x13/0x60 Call Trace: __x64_sys_mq_timedsend+0x2a9/0x490 do_syscall_64+0x80/0x680 entry_SYSCALL_64_after_hwframe+0x44/0xa9 RIP: 0033:0x7f5928e40343 The race occurs as: 1. do_mq_timedreceive calls wq_sleep with the address of struct ext_wait_queue on function stack (aliased as ewq_addr here) - it holds a valid struct ext_wait_queue * as long as the stack has not been overwritten. 2. ewq_addr gets added to info->e_wait_q[RECV].list in wq_add, and do_mq_timedsend receives it via wq_get_first_waiter(info, RECV) to call __pipelined_op. 3. Sender calls __pipelined_op::smp_store_release(&this->state, STATE_READY). Here is where the race window begins. (this is ewq_addr.) 4. If the receiver wakes up now in do_mq_timedreceive::wq_sleep, it will see state == STATE_READY and break. 5. do_mq_timedreceive returns, and ewq_addr is no longer guaranteed to be a struct ext_wait_queue * since it was on do_mq_timedreceive's stack. (Although the address may not get overwritten until another function happens to touch it, which means it can persist around for an indefinite time.) 6. do_mq_timedsend::__pipelined_op() still believes ewq_addr is a struct ext_wait_queue *, and uses it to find a task_struct to pass to the wake_q_add_safe call. In the lucky case where nothing has overwritten ewq_addr yet, ewq_addr->task is the right task_struct. In the unlucky case, __pipelined_op::wake_q_add_safe gets handed a bogus address as the receiver's task_struct causing the crash. do_mq_timedsend::__pipelined_op() should not dereference this after setting STATE_READY, as the receiver counterpart is now free to return. Change __pipelined_op to call wake_q_add_safe on the receiver's task_struct returned by get_task_struct, instead of dereferencing this which sits on the receiver's stack. As Manfred pointed out, the race potentially also exists in ipc/msg.c::expunge_all and ipc/sem.c::wake_up_sem_queue_prepare. Fix those in the same way.

Record
UBUNTU-CVE-2021-47069
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVALSA-2024:4211 No score

Important: kernel security and bug fix update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: Bluetooth BR/EDR PIN Pairing procedure is vulnerable to an impersonation attack (CVE-2020-26555)
  • kernel:TCP-spoofed ghost ACKs and leak leak initial sequence number (CVE-2023-52881,RHV-2024-1001)
  • kernel: ovl: fix leaked dentry (CVE-2021-46972)
  • kernel: platform/x86: dell-smbios-wmi: Fix oops on rmmod dell_smbios (CVE-2021-47073)
  • kernel: mm/damon/vaddr-test: memory leak in damon_do_test_apply_three_regions() (CVE-2023-52560)
  • kernel: ppp_async: limit MRU to 64K (CVE-2024-26675)
  • kernel: mm/swap: fix race when skipping swapcache (CVE-2024-26759)
  • kernel: net: ip_tunnel: prevent perpetual headroom growth (CVE-2024-26804)
  • kernel: RDMA/mlx5: Fix fortify source warning while accessing Eth segment (CVE-2024-26907)
  • kernel: x86/mm: Disallow vsyscall page read for copy_from_kernel_nofault() (CVE-2024-26906)
  • kernel: powerpc/powernv: Add a null pointer check in opal_event_init() (CVE-2023-52686)
  • kernel: powerpc/imc-pmu: Add a null pointer check in update_events_in_group() (CVE-2023-52675)
  • kernel: KVM: SVM: improper check in svm_set_x2apic_msr_interception allows direct access to host x2apic msrs (CVE-2023-5090)
  • kernel: EDAC/thunderx: Incorrect buffer size in drivers/edac/thunderx_edac.c (CVE-2023-52464)
  • kernel: ipv6: sr: fix possible use-after-free and null-ptr-deref (CVE-2024-26735)
  • kernel: mptcp: fix data re-injection from stale subflow (CVE-2024-26826)
  • kernel: net/bnx2x: Prevent access to a freed page in page_pool (CVE-2024-26859)
  • kernel: crypto: qat - resolve race condition during AER recovery (CVE-2024-26974)
  • kernel: net/mlx5e: fix a potential double-free in fs_any_create_groups (CVE-2023-52667)
  • kernel: net/mlx5: Properly link new fs rules into the tree (CVE-2024-35960)
  • kernel: net/mlx5e: Fix mlx5e_priv_init() cleanup flow (CVE-2024-35959)
  • kernel: net: ena: Fix incorrect descriptor free behavior (CVE-2024-35958)
  • kernel: i40e: Do not use WQ_MEM_RECLAIM flag for workqueue (CVE-2024-36004)
  • kernel: mISDN: fix possible use-after-free in HFC_cleanup() (CVE-2021-47356)
  • kernel: udf: Fix NULL pointer dereference in udf_symlink function (CVE-2021-47353)
  • kernel: net: ti: fix UAF in tlan_remove_one (CVE-2021-47310)

Bug Fix(es):

  • Kernel panic - kernel BUG at mm/slub.c:376! (JIRA:AlmaLinux-29783)
  • Temporary values in FIPS integrity test should be zeroized [almalinux-8.10.z] (JIRA:AlmaLinux-35361)
  • AlmaLinux8.6 - kernel: s390/cpum_cf: make crypto counters upward compatible (JIRA:AlmaLinux-36048)
  • [AlmaLinux8] blktests block/024 failed (JIRA:AlmaLinux-8130)
  • AlmaLinux8.9: EEH injections results Error: Power fault on Port 0 and other call traces(Everest/1050/Shiner) (JIRA:AlmaLinux-14195)
  • Latency spikes with Matrox G200 graphic cards (JIRA:AlmaLinux-36172)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2024:4211
Updated
2026-11-02
OSVALSA-2024:4352 No score

Important: kernel-rt security and bug fix update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

  • kernel: tls (CVE-2024-26585,CVE-2024-26584, CVE-2024-26583
  • kernel-rt: kernel: PCI interrupt mapping cause oops [almalinux-8] (CVE-2021-46909)
  • kernel: ipc/mqueue, msg, sem: avoid relying on a stack reference past its expiry (CVE-2021-47069)
  • kernel: hwrng: core - Fix page fault dead lock on mmap-ed hwrng (CVE-2023-52615)
  • kernel-rt: kernel: drm/amdgpu: use-after-free vulnerability (CVE-2024-26656)
  • kernel: Bluetooth: Avoid potential use-after-free in hci_error_reset CVE-2024-26801)
  • kernel: Squashfs: check the inode number is not the invalid value of zero (CVE-2024-26982)
  • kernel: netfilter: nf_tables: use timestamp to check for set element timeout (CVE-2024-27397)
  • kernel: wifi: mac80211: (CVE-2024-35789, CVE-2024-35838, CVE-2024-35845)
  • kernel: wifi: nl80211: reject iftype change with mesh ID change (CVE-2024-27410)
  • kernel: perf/core: Bail out early if the request AUX area is out of bound (CVE-2023-52835)
  • kernel:TCP-spoofed ghost ACKs and leak initial sequence number (CVE-2023-52881)
  • kernel: Bluetooth BR/EDR PIN Pairing procedure is vulnerable to an impersonation attack (CVE-2020-26555)
  • kernel: ovl: fix leaked dentry (CVE-2021-46972)
  • kernel: platform/x86: dell-smbios-wmi: Fix oops on rmmod dell_smbios (CVE-2021-47073)
  • kernel: mm/damon/vaddr-test: memory leak in damon_do_test_apply_three_regions() (CVE-2023-52560)
  • kernel: ppp_async: limit MRU to 64K (CVE-2024-26675)
  • kernel: mm/swap: fix race when skipping swapcache (CVE-2024-26759)
  • kernel: RDMA/mlx5: Fix fortify source warning while accessing Eth segment (CVE-2024-26907)
  • kernel: x86/mm: Disallow vsyscall page read for copy_from_kernel_nofault() (CVE-2024-26906)
  • kernel: net: ip_tunnel: prevent perpetual headroom growth (CVE-2024-26804)
  • kernel: net/usb: kalmia: avoid printing uninitialized value on error path (CVE-2023-52703)
  • kernel: KVM: SVM: improper check in svm_set_x2apic_msr_interception allows direct access to host x2apic msrs (CVE-2023-5090)
  • kernel: EDAC/thunderx: Incorrect buffer size in drivers/edac/thunderx_edac.c (CVE-2023-52464)
  • kernel: ipv6: sr: fix possible use-after-free and null-ptr-deref (CVE-2024-26735)
  • kernel: mptcp: fix data re-injection from stale subflow (CVE-2024-26826)
  • kernel: net/bnx2x: Prevent access to a freed page in page_pool (CVE-2024-26859)
  • kernel: crypto: (CVE-2024-26974, CVE-2023-52813)
  • kernel: can: (CVE-2023-52878, CVE-2021-47456)
  • kernel: usb: (CVE-2023-52781, CVE-2023-52877)
  • kernel: net/mlx5e: fix a potential double-free in fs_any_create_groups (CVE-2023-52667)
  • kernel: usbnet: sanity check for maxpacket (CVE-2021-47495)
  • kernel: gro: fix ownership transfer (CVE-2024-35890)
  • kernel: erspan: make sure erspan_base_hdr is present in skb->head (CVE-2024-35888)
  • kernel: tipc: fix kernel warning when sending SYN message (CVE-2023-52700)
  • kernel: net/mlx5/mlxsw: (CVE-2024-35960, CVE-2024-36007, CVE-2024-35855)
  • kernel: net/mlx5e: (CVE-2024-35959, CVE-2023-52626, CVE-2024-35835)
  • kernel: mlxsw: (CVE-2024-35854, CVE-2024-35853, CVE-2024-35852)
  • kernel: net: (CVE-2024-35958, CVE-2021-47311, CVE-2021-47236, CVE-2021-47310)
  • kernel: i40e: Do not use WQ_MEM_RECLAIM flag for workqueue (CVE-2024-36004)
  • kernel: mISDN: fix possible use-after-free in HFC_cleanup() (CVE-2021-47356)
  • kernel: udf: Fix NULL pointer dereference in udf_symlink function (CVE-2021-47353)

Bug Fix(es):

  • kernel-rt: update RT source tree to the latest AlmaLinux-8.10.z kernel (JIRA:AlmaLinux-40882)
  • [almalinux8.9][cxgb4]BUG: using smp_processor_id() in preemptible [00000000] code: ethtool/54735 (JIRA:AlmaLinux-8779)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2024:4352
Updated
2026-11-02
OSVSUSE-SU-2024:0856-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP3 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2021-47078: Fixed a bug by clearing all QP fields if creation failed (bsc#1220863)
  • CVE-2021-47076: Fixed a bug by returning CQE error if invalid lkey was supplied (bsc#1220860)
  • CVE-2023-52605: Fixed a NULL pointer dereference check (bsc#1221039)
  • CVE-2023-28746: Fixed Register File Data Sampling (bsc#1213456).
  • CVE-2023-52502: Fixed a race condition in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn() (bsc#1220831).
  • CVE-2023-52569: Fixed a bug in btrfs by remoning BUG() after failure to insert delayed dir index item (bsc#1220918).
  • CVE-2023-52482: Fixed a bug by adding SRSO mitigation for Hygon processors (bsc#1220735).
  • CVE-2023-52597: Fixed a setting of fpc register in KVM (bsc#1221040).
  • CVE-2022-48627: Fixed a memory overlapping when deleting chars in the buffer (bsc#1220845).
  • CVE-2023-52574: Fixed a bug by hiding new member header_ops (bsc#1220870).
  • CVE-2021-46934: Fixed a bug by validating user data in compat ioctl (bsc#1220469).
  • CVE-2023-35827: Fixed a use-after-free issue in ravb_tx_timeout_work() (bsc#1212514).
  • CVE-2023-52532: Fixed a bug in TX CQE error handling (bsc#1220932).
  • CVE-2023-52530: Fixed a potential key use-after-free in wifi mac80211 (bsc#1220930).
  • CVE-2023-52531: Fixed a memory corruption issue in iwlwifi (bsc#1220931).
  • CVE-2021-47083: Fixed a global-out-of-bounds issue in mediatek: (bsc#1220917).
  • CVE-2024-26607: Fixed a probing race issue in sii902x: (bsc#1220736).
  • CVE-2024-26589: Fixed out of bounds read due to variable offset alu on PTR_TO_FLOW_KEYS (bsc#1220255).
  • CVE-2021-47005: Fixed a NULL pointer dereference for ->get_features() (bsc#1220660).
  • CVE-2024-26585: Fixed race between tx work scheduling and socket close (bsc#1220187).
  • CVE-2023-52340: Fixed ICMPv6 “Packet Too Big” packets force a DoS of the Linux kernel by forcing 100% CPU (bsc#1219295).
  • CVE-2024-0607: Fixed 64-bit load issue in nft_byteorder_eval() (bsc#1218915).
  • CVE-2021-47060: Fixed a bug in KVM by stop looking for coalesced MMIO zones if the bus is destroyed (bsc#1220742).
  • CVE-2023-6817: Fixed use-after-free in nft_pipapo_walk (bsc#1218195).
  • CVE-2024-26622: Fixed UAF write bug in tomoyo_write_control() (bsc#1220825).
  • CVE-2023-52451: Fixed access beyond end of drmem array (bsc#1220250).
  • CVE-2021-46932: Fixed missing work initialization before device registration (bsc#1220444)
  • CVE-2023-52463: Fixed null pointer dereference in efivarfs (bsc#1220328).
  • CVE-2021-47012: Fixed a use after free in siw_alloc_mr (bsc#1220627).
  • CVE-2023-52449: Fixed gluebi NULL pointer dereference caused by ftl notifier (bsc#1220238).
  • CVE-2023-52475: Fixed use-after-free in powermate_config_complete (bsc#1220649)
  • CVE-2023-52478: Fixed kernel crash on receiver USB disconnect (bsc#1220796)
  • CVE-2021-46989: Fixed a bug by preventing corruption in shrinking truncate in hfsplus (bsc#1220737).
  • CVE-2021-46915: Fixed a bug to avoid possible divide error in nft_limit_init (bsc#1220436).
  • CVE-2021-46924: Fixed fix memory leak in device probe and remove (bsc#1220459)
  • CVE-2019-25162: Fixed a potential use after free (bsc#1220409).
  • CVE-2020-36784: Fixed reference leak when pm_runtime_get_sync fails (bsc#1220570).
  • CVE-2021-47061: Fixed a bug in KVM by destroy I/O bus devices on unregister failure after sync'ing SRCU (bsc#1220745).
  • CVE-2023-52445: Fixed use after free on context disconnection (bsc#1220241).
  • CVE-2023-46343: Fixed a NULL pointer dereference in send_acknowledge() (CVE-2023-46343).
  • CVE-2023-52439: Fixed use-after-free in uio_open (bsc#1220140).
  • CVE-2023-52443: Fixed crash when parsed profile name is empty (bsc#1220240).
  • CVE-2024-26602: Fixed overall slowdowns with sys_membarrier (bsc1220398).
  • CVE-2024-26593: Fixed block process call transactions (bsc#1220009).
  • CVE-2021-47013: Fixed a use after free in emac_mac_tx_buf_send (bsc#1220641).…
Record
SUSE-SU-2024:0856-1
Updated
2026-11-02
OSVSUSE-SU-2024:0857-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2023-28746: Fixed Register File Data Sampling (bsc#1213456).
  • CVE-2023-52502: Fixed a race condition in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn() (bsc#1220831).
  • CVE-2024-26589: Fixed out of bounds read due to variable offset alu on PTR_TO_FLOW_KEYS (bsc#1220255).
  • CVE-2024-26585: Fixed race between tx work scheduling and socket close (bsc#1220187).
  • CVE-2023-52340: Fixed ICMPv6 “Packet Too Big” packets force a DoS of the Linux kernel by forcing 100% CPU (bsc#1219295).
  • CVE-2024-0607: Fixed 64-bit load issue in nft_byteorder_eval() (bsc#1218915).
  • CVE-2023-6817: Fixed use-after-free in nft_pipapo_walk (bsc#1218195).
  • CVE-2024-26622: Fixed UAF write bug in tomoyo_write_control() (bsc#1220825).
  • CVE-2023-52451: Fixed access beyond end of drmem array (bsc#1220250).
  • CVE-2021-46932: Fixed missing work initialization before device registration (bsc#1220444)
  • CVE-2023-52463: Fixed null pointer dereference in efivarfs (bsc#1220328).
  • CVE-2023-52449: Fixed gluebi NULL pointer dereference caused by ftl notifier (bsc#1220238).
  • CVE-2023-52475: Fixed use-after-free in powermate_config_complete (bsc#1220649)
  • CVE-2023-52478: Fixed kernel crash on receiver USB disconnect (bsc#1220796)
  • CVE-2021-46915: Fixed a bug to avoid possible divide error in nft_limit_init (bsc#1220436).
  • CVE-2021-46924: Fixed fix memory leak in device probe and remove (bsc#1220459)
  • CVE-2019-25162: Fixed a potential use after free (bsc#1220409).
  • CVE-2020-36784: Fixed reference leak when pm_runtime_get_sync fails (bsc#1220570).
  • CVE-2023-52445: Fixed use after free on context disconnection (bsc#1220241).
  • CVE-2023-46343: Fixed a NULL pointer dereference in send_acknowledge() (CVE-2023-46343).
  • CVE-2023-52439: Fixed use-after-free in uio_open (bsc#1220140).
  • CVE-2023-52443: Fixed crash when parsed profile name is empty (bsc#1220240).
  • CVE-2024-26602: Fixed overall slowdowns with sys_membarrier (bsc1220398).
  • CVE-2024-26593: Fixed block process call transactions (bsc#1220009).
  • CVE-2021-47013: Fixed a use after free in emac_mac_tx_buf_send (bsc#1220641).
  • CVE-2024-26586: Fixed stack corruption (bsc#1220243).
  • CVE-2024-26595: Fixed NULL pointer dereference in error path (bsc#1220344).
  • CVE-2023-52448: Fixed kernel NULL pointer dereference in gfs2_rgrp_dump (bsc#1220253).
  • CVE-2024-1151: Fixed unlimited number of recursions from action sets (bsc#1219835).
  • CVE-2024-23849: Fixed array-index-out-of-bounds in rds_cmsg_recv (bsc#1219127).
  • CVE-2024-0340: Fixed information disclosure in vhost/vhost.c:vhost_new_msg() (bsc#1218689).
  • CVE-2023-51042: Fixed use-after-free in amdgpu_cs_wait_all_fences in drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c (bsc#1219128).
  • CVE-2021-47078: Fixed a bug by clearing all QP fields if creation failed (bsc#1220863)
  • CVE-2021-47076: Fixed a bug by returning CQE error if invalid lkey was supplied (bsc#1220860)
  • CVE-2023-52605: Fixed a NULL pointer dereference check (bsc#1221039)
  • CVE-2023-52569: Fixed a bug in btrfs by remoning BUG() after failure to insert delayed dir index item (bsc#1220918).
  • CVE-2023-52482: Fixex a bug by adding SRSO mitigation for Hygon processors (bsc#1220735).
  • CVE-2023-52597: Fixed a setting of fpc register in KVM (bsc#1221040).
  • CVE-2022-48627: Fixed a memory overlapping when deleting chars in the buffer (bsc#1220845).
  • CVE-2023-52574: Fixed a bug by hiding new member header_ops (bsc#1220870).
  • CVE-2021-46934: Fixed a bug by validating user data in compat ioctl (bsc#1220469).
  • CVE-2023-35827: Fixed a use-after-free issue in ravb_tx_timeout_work() (bsc#1212514).
  • CVE-2023-52532: Fixed a bug in TX CQE error handling (bsc#1220932).
  • CVE-2023-52530: Fixed a potential key use-after-free in wifi mac80211 (bsc#1220930).
  • CVE-2023-52531: Fixed a memory corruption issue in iwlwifi (bsc#1220931).
  • CVE-2021-47083: Fixed a…
Record
SUSE-SU-2024:0857-1
Updated
2026-11-02
OSVSUSE-SU-2024:0926-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP2 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2021-47078: Fixed a bug by clearing all QP fields if creation failed (bsc#1220863)
  • CVE-2021-47076: Fixed a bug by returning CQE error if invalid lkey was supplied (bsc#1220860)
  • CVE-2023-52605: Fixed a NULL pointer dereference check (bsc#1221039)
  • CVE-2023-28746: Fixed Register File Data Sampling (bsc#1213456).
  • CVE-2023-52502: Fixed a race condition in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn() (bsc#1220831).
  • CVE-2023-52569: Fixed a bug in btrfs by remoning BUG() after failure to insert delayed dir index item (bsc#1220918).
  • CVE-2023-52482: Fixed a bug by adding SRSO mitigation for Hygon processors (bsc#1220735).
  • CVE-2023-52597: Fixed a setting of fpc register in KVM (bsc#1221040).
  • CVE-2022-48627: Fixed a memory overlapping when deleting chars in the buffer (bsc#1220845).
  • CVE-2023-52574: Fixed a bug by hiding new member header_ops (bsc#1220870).
  • CVE-2021-46934: Fixed a bug by validating user data in compat ioctl (bsc#1220469).
  • CVE-2023-35827: Fixed a use-after-free issue in ravb_tx_timeout_work() (bsc#1212514).
  • CVE-2023-52532: Fixed a bug in TX CQE error handling (bsc#1220932).
  • CVE-2023-52530: Fixed a potential key use-after-free in wifi mac80211 (bsc#1220930).
  • CVE-2023-52531: Fixed a memory corruption issue in iwlwifi (bsc#1220931).
  • CVE-2021-47083: Fixed a global-out-of-bounds issue in mediatek: (bsc#1220917).
  • CVE-2024-26607: Fixed a probing race issue in sii902x: (bsc#1220736).
  • CVE-2024-26589: Fixed out of bounds read due to variable offset alu on PTR_TO_FLOW_KEYS (bsc#1220255).
  • CVE-2021-47005: Fixed a NULL pointer dereference for ->get_features() (bsc#1220660).
  • CVE-2024-26585: Fixed race between tx work scheduling and socket close (bsc#1220187).
  • CVE-2023-52340: Fixed ICMPv6 “Packet Too Big” packets force a DoS of the Linux kernel by forcing 100% CPU (bsc#1219295).
  • CVE-2024-0607: Fixed 64-bit load issue in nft_byteorder_eval() (bsc#1218915).
  • CVE-2021-47060: Fixed a bug in KVM by stop looking for coalesced MMIO zones if the bus is destroyed (bsc#1220742).
  • CVE-2024-26622: Fixed UAF write bug in tomoyo_write_control() (bsc#1220825).
  • CVE-2023-52451: Fixed access beyond end of drmem array (bsc#1220250).
  • CVE-2021-46932: Fixed missing work initialization before device registration (bsc#1220444)
  • CVE-2023-52463: Fixed null pointer dereference in efivarfs (bsc#1220328).
  • CVE-2021-47012: Fixed a use after free in siw_alloc_mr (bsc#1220627).
  • CVE-2023-52449: Fixed gluebi NULL pointer dereference caused by ftl notifier (bsc#1220238).
  • CVE-2023-52475: Fixed use-after-free in powermate_config_complete (bsc#1220649)
  • CVE-2023-52478: Fixed kernel crash on receiver USB disconnect (bsc#1220796)
  • CVE-2021-46989: Fixed a bug by preventing corruption in shrinking truncate in hfsplus (bsc#1220737).
  • CVE-2021-46915: Fixed a bug to avoid possible divide error in nft_limit_init (bsc#1220436).
  • CVE-2021-46924: Fixed fix memory leak in device probe and remove (bsc#1220459)
  • CVE-2019-25162: Fixed a potential use after free (bsc#1220409).
  • CVE-2020-36784: Fixed reference leak when pm_runtime_get_sync fails (bsc#1220570).
  • CVE-2021-47061: Fixed a bug in KVM by destroy I/O bus devices on unregister failure after sync'ing SRCU (bsc#1220745).
  • CVE-2023-52445: Fixed use after free on context disconnection (bsc#1220241).
  • CVE-2023-46343: Fixed a NULL pointer dereference in send_acknowledge() (CVE-2023-46343).
  • CVE-2023-52439: Fixed use-after-free in uio_open (bsc#1220140).
  • CVE-2023-52443: Fixed crash when parsed profile name is empty (bsc#1220240).
  • CVE-2024-26602: Fixed overall slowdowns with sys_membarrier (bsc1220398).
  • CVE-2024-26593: Fixed block process call transactions (bsc#1220009).
  • CVE-2021-47013: Fixed a use after free in emac_mac_tx_buf_send (bsc#1220641).
  • CVE-2024-26586: Fixed stack corruption (bsc#1220243).
  • CVE-2024-26595:…
Record
SUSE-SU-2024:0926-1
Updated
2026-11-02
OSVSUSE-SU-2024:1454-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP2 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2020-36780: Fixed a reference leak when pm_runtime_get_sync fails in i2c (bsc#1220556).
  • CVE-2020-36782: Fixed a reference leak when pm_runtime_get_sync fails in i2c imx-lpi2c (bsc#1220560).
  • CVE-2020-36783: Fixed a reference leak when pm_runtime_get_sync fails in i2c img-scb (bsc#1220561).
  • CVE-2021-23134: Fixed a use-after-free issue in nfc sockets (bsc#1186060).
  • CVE-2021-46909: Fixed a PCI interrupt mapping in ARM footbridge (bsc#1220442).
  • CVE-2021-46921: Fixed ordering in queued_write_lock_slowpath (bsc#1220468).
  • CVE-2021-46930: Fixed a list_head check warning caused by uninitialization of list_head in usb mtu3 (bsc#1220484).
  • CVE-2021-46938: Fixed a double free of blk_mq_tag_set in dev remove after table load fails in dm rq (bsc#1220554).
  • CVE-2021-46939: Fixed a denial of service in trace_clock_global() in tracing (bsc#1220580).
  • CVE-2021-46943: Fixed an oops in set_fmt error handling in media: staging/intel-ipu3 (bsc#1220583).
  • CVE-2021-46944: Fixed a memory leak in imu_fmt in media staging/intel-ipu3 (bsc#1220566).
  • CVE-2021-46950: Fixed a data corruption bug in raid1 arrays using bitmaps in md/raid1 (bsc#1220662).
  • CVE-2021-46951: Fixed an integer underflow of efi_tpm_final_log_size in tpm_read_log_efi in tpm efi (bsc#1220615).
  • CVE-2021-46958: Fixed a race between transaction aborts and fsyncs leading to use-after-free in btrfs (bsc#1220521).
  • CVE-2021-46960: Fixed a warning on smb2_get_enc_key in cifs (bsc#1220528).
  • CVE-2021-46961: Fixed an error on not enabling irqs when handling spurious interrups in irqchip/gic-v3 (bsc#1220529).
  • CVE-2021-46962: Fixed a resource leak in the remove function in mmc uniphier-sd (bsc#1220532).
  • CVE-2021-46963: Fixed a denial of service in qla2xxx_mqueuecommand() in scsi qla2xxx (bsc#1220536)
  • CVE-2021-46971: Fixed unconditional security_locked_down() call in perf/core (bsc#1220697).
  • CVE-2021-46981: Fixed a NULL pointer in flush_workqueue in nbd (bsc#1220611).
  • CVE-2021-46984: Fixed an out of bounds access in kyber_bio_merge() in kyber (bsc#1220631).
  • CVE-2021-46988: Fixed release page in error path to avoid BUG_ON in userfaultfd (bsc#1220706).
  • CVE-2021-46990: Fixed a denial of service when toggling entry flush barrier in powerpc/64s (bsc#1220743).
  • CVE-2021-46991: Fixed a use-after-free in i40e_client_subtask (bsc#1220575).
  • CVE-2021-46992: Fixed a bug to avoid overflows in nft_hash_buckets (bsc#1220638).
  • CVE-2021-46998: Fixed an use after free bug in enic_hard_start_xmit in ethernet/enic (bsc#1220625).
  • CVE-2021-47000: Fixed an inode leak on getattr error in __fh_to_dentry in ceph (bsc#1220669).
  • CVE-2021-47006: Fixed wrong check in overflow_handler hook in ARM 9064/1 hw_breakpoint (bsc#1220751).
  • CVE-2021-47013: Fixed a use after free in emac_mac_tx_buf_send (bsc#1220641).
  • CVE-2021-47015: Fixed a RX consumer index logic in the error path in bnxt_rx_pkt() in bnxt_en (bsc#1220794).
  • CVE-2021-47020: Fixed a memory leak in stream config error path in soundwire stream (bsc#1220785).
  • CVE-2021-47034: Fixed a kernel memory fault for pte update on radix in powerpc/64s (bsc#1220687).
  • CVE-2021-47045: Fixed a null pointer dereference in lpfc_prep_els_iocb() in scsi lpfc (bsc#1220640).
  • CVE-2021-47049: Fixed an after free in __vmbus_open() in hv vmbus (bsc#1220692).
  • CVE-2021-47051: Fixed a PM reference leak in lpspi_prepare_xfer_hardware() in spi fsl-lpspi (bsc#1220764).
  • CVE-2021-47055: Fixed missing permissions for locking and badblock ioctls in mtd (bsc#1220768).
  • CVE-2021-47056: Fixed a user-memory-access error on vf2pf_lock in crypto (bsc#1220769).
  • CVE-2021-47058: Fixed a possible user-after-free in set debugfs_name in regmap (bsc#1220779).
  • CVE-2021-47061: Fixed a bug in KVM by destroy I/O bus devices on unregister failure after sync'ing SRCU (bsc#1220745).
  • CVE-2021-47063: Fixed a potential…
Record
SUSE-SU-2024:1454-1
Updated
2026-11-02
OSVSUSE-SU-2024:1489-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP3 LTSS kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2020-36781: Fixed reference leak when pm_runtime_get_sync fails in i2c/imx (bsc#1220557).
  • CVE-2021-46911: Fixed kernel panic (bsc#1220400).
  • CVE-2021-46914: Fixed unbalanced device enable/disable in suspend/resume in pci_disable_device() (bsc#1220465).
  • CVE-2021-46917: Fixed wq cleanup of WQCFG registers in idxd (bsc#1220432).
  • CVE-2021-46918: Fixed not clearing MSIX permission entry on shutdown in idxd (bsc#1220429).
  • CVE-2021-46919: Fixed wq size store permission state in idxd (bsc#1220414).
  • CVE-2021-46920: Fixed clobbering of SWERR overflow bit on writeback (bsc#1220426).
  • CVE-2021-46922: Fixed TPM reservation for seal/unseal (bsc#1220475).
  • CVE-2021-46930: Fixed usb/mtu3 list_head check warning (bsc#1220484).
  • CVE-2021-46931: Fixed wrong type casting in mlx5e_tx_reporter_dump_sq() (bsc#1220486).
  • CVE-2021-46933: Fixed possible underflow in ffs_data_clear() (bsc#1220487).
  • CVE-2021-46956: Fixed memory leak in virtio_fs_probe() (bsc#1220516).
  • CVE-2021-46959: Fixed use-after-free with devm_spi_alloc_* (bsc#1220734).
  • CVE-2021-46961: Fixed spurious interrup handling (bsc#1220529).
  • CVE-2021-46971: Fixed unconditional security_locked_down() call (bsc#1220697).
  • CVE-2021-46976: Fixed crash in auto_retire in drm/i915 (bsc#1220621).
  • CVE-2021-46980: Fixed not retrieving all the PDOs instead of just the first 4 in usb/typec/ucsi (bsc#1220663).
  • CVE-2021-46983: Fixed NULL pointer dereference when SEND is completed with error (bsc#1220639).
  • CVE-2021-46988: Fixed release page in error path to avoid BUG_ON (bsc#1220706).
  • CVE-2021-47001: Fixed cwnd update ordering in xprtrdma (bsc#1220670).
  • CVE-2021-47003: Fixed potential null dereference on pointer status in idxd_cmd_exec (bsc#1220677).
  • CVE-2021-47009: Fixed memory leak on object td (bsc#1220733).
  • CVE-2021-47014: Fixed wild memory access when clearing fragments in net/sched/act_ct (bsc#1220630).
  • CVE-2021-47017: Fixed use after free in ath10k_htc_send_bundle (bsc#1220678).
  • CVE-2021-47026: Fixed not destroying sysfs after removing session from active list (bsc#1220685).
  • CVE-2021-47035: Fixed wrong WO permissions on second-level paging entries in iommu/vt-d (bsc#1220688).
  • CVE-2021-47038: Fixed deadlock between hci_dev->lock and socket lock in bluetooth (bsc#1220753).
  • CVE-2021-47044: Fixed shift-out-of-bounds in load_balance() in sched/fair (bsc#1220759).
  • CVE-2021-47046: Fixed off by one in hdmi_14_process_transaction() (bsc#1220758).
  • CVE-2021-47087: Fixed incorrect page free bug in tee/optee (bsc#1220954).
  • CVE-2021-47095: Fixed missing initialization in ipmi/ssif (bsc#1220979).
  • CVE-2021-47097: Fixed stack out of bound access in elantech_change_report_id() (bsc#1220982).
  • CVE-2021-47100: Fixed UAF when uninstall in ipmi (bsc#1220985).
  • CVE-2021-47101: Fixed uninit-value in asix_mdio_read() (bsc#1220987).
  • CVE-2021-47109: Fixed NUD_NOARP entries to be forced GCed (bsc#1221534).
  • CVE-2021-47130: Fixed freeing unallocated p2pmem in nvmet (bsc#1221552).
  • CVE-2021-47137: Fixed memory corruption in RX ring in net/lantiq (bsc#1221932).
  • CVE-2021-47150: Fixed the potential memory leak in fec_enet_init() (bsc#1221973).
  • CVE-2021-47160: Fixed VLAN traffic leaks in dsa: mt7530 (bsc#1221974).
  • CVE-2021-47164: Fixed null pointer dereference accessing lag dev in net/mlx5e (bsc#1221978).
  • CVE-2021-47174: Fixed missing check in irq_fpu_usable() (bsc#1221990).
  • CVE-2021-47175: Fixed OOB access in net/sched/fq_pie (bsc#1222003).
  • CVE-2021-47181: Fixed a null pointer dereference caused by calling platform_get_resource() (bsc#1222660).
  • CVE-2021-47183: Fixed a null pointer dereference during link down processing in scsi lpfc (bsc#1192145, bsc#1222664).
  • CVE-2021-47185: Fixed a softlockup issue in flush_to_ldisc in tty tty_buffer (bsc#1222669).
  • CVE-2021-47189: Fixed denial of service due to memory…
Record
SUSE-SU-2024:1489-1
Updated
2026-11-02
OSVSUSE-SU-2024:3565-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP2 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2022-48911: kabi: add __nf_queue_get_refs() for kabi compliance. (bsc#1229633).
  • CVE-2022-48945: media: vivid: fix compose size exceed boundary (bsc#1230398).
  • CVE-2024-36971: net: fix __dst_negative_advice() race (bsc#1226145).
  • CVE-2024-41087: Fix double free on error (bsc#1228466).
  • CVE-2024-44946: kcm: Serialise kcm_sendmsg() for the same socket (bsc#1230015).
  • CVE-2024-45003: Don't evict inode under the inode lru traversing context (bsc#1230245).
  • CVE-2024-45021: memcg_write_event_control(): fix a user-triggerable oops (bsc#1230434).
  • CVE-2024-46695: selinux,smack: do not bypass permissions check in inode_setsecctx hook (bsc#1230519).

The following non-security bugs were fixed:

  • Revert 'ext4: consolidate checks for resize of bigalloc into ext4_resize_begin' (bsc#1230326).
  • ext4: add check to prevent attempting to resize an fs with sparse_super2 (bsc#1230326).
  • ext4: add reserved GDT blocks check (bsc#1230326).
  • ext4: consolidate checks for resize of bigalloc into ext4_resize_begin (bsc#1230326).
  • ext4: fix bug_on ext4_mb_use_inode_pa (bsc#1230326).
  • kabi: add __nf_queue_get_refs() for kabi compliance.
Record
SUSE-SU-2024:3565-1
Updated
2026-11-02
OSVSUSE-SU-2024:3585-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2021-47069: Fixed a crash due to relying on a stack reference past its expiry in ipc/mqueue, ipc/msg, ipc/sem (bsc#1220826).
  • CVE-2022-48911: kabi: add __nf_queue_get_refs() for kabi compliance. (bsc#1229633).
  • CVE-2022-48945: media: vivid: fix compose size exceed boundary (bsc#1230398).
  • CVE-2024-41087: Fix double free on error (bsc#1228466).
  • CVE-2024-44946: kcm: Serialise kcm_sendmsg() for the same socket (bsc#1230015).
  • CVE-2024-45003: Don't evict inode under the inode lru traversing context (bsc#1230245).
  • CVE-2024-45021: memcg_write_event_control(): fix a user-triggerable oops (bsc#1230434).
  • CVE-2024-46695: selinux,smack: do not bypass permissions check in inode_setsecctx hook (bsc#1230519).
  • CVE-2024-36971: Fixed __dst_negative_advice() race (bsc#1226145).

The following non-security bugs were fixed:

  • ext4: add check to prevent attempting to resize an fs with sparse_super2 (bsc#1230326).
  • ext4: add reserved GDT blocks check (bsc#1230326).
  • ext4: consolidate checks for resize of bigalloc into ext4_resize_begin (bsc#1230326).
  • ext4: fix bug_on ext4_mb_use_inode_pa (bsc#1230326).
  • kabi: add __nf_queue_get_refs() for kabi compliance.
  • PKCS#7: Check codeSigning EKU of certificates in PKCS#7 (bsc#1226666).
  • Revert 'ext4: consolidate checks for resize of bigalloc into ext4_resize_begin' (bsc#1230326).
Record
SUSE-SU-2024:3585-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
bpftool
AlmaLinux:8
 before 4.18.0-553.8.1.el8_10
4.18.0-553.8.1.el8_10
kernel
AlmaLinux:8
 before 4.18.0-553.8.1.el8_10
4.18.0-553.8.1.el8_10
kernel-abi-stablelists
AlmaLinux:8
 before 4.18.0-553.8.1.el8_10
4.18.0-553.8.1.el8_10
kernel-core
AlmaLinux:8
 before 4.18.0-553.8.1.el8_10
4.18.0-553.8.1.el8_10
kernel-cross-headers
AlmaLinux:8
 before 4.18.0-553.8.1.el8_10
4.18.0-553.8.1.el8_10
kernel-debug
AlmaLinux:8
 before 4.18.0-553.8.1.el8_10
4.18.0-553.8.1.el8_10
kernel-debug-core
AlmaLinux:8
 before 4.18.0-553.8.1.el8_10
4.18.0-553.8.1.el8_10
kernel-debug-devel
AlmaLinux:8
 before 4.18.0-553.8.1.el8_10
4.18.0-553.8.1.el8_10
kernel-debug-modules
AlmaLinux:8
 before 4.18.0-553.8.1.el8_10
4.18.0-553.8.1.el8_10
kernel-debug-modules-extra
AlmaLinux:8
 before 4.18.0-553.8.1.el8_10
4.18.0-553.8.1.el8_10
Show 290 moreShow less
Affected packages
PackageAffectedFixed
kernel-devel
AlmaLinux:8
 before 4.18.0-553.8.1.el8_10
4.18.0-553.8.1.el8_10
kernel-doc
AlmaLinux:8
 before 4.18.0-553.8.1.el8_10
4.18.0-553.8.1.el8_10
kernel-headers
AlmaLinux:8
 before 4.18.0-553.8.1.el8_10
4.18.0-553.8.1.el8_10
kernel-modules
AlmaLinux:8
 before 4.18.0-553.8.1.el8_10
4.18.0-553.8.1.el8_10
kernel-modules-extra
AlmaLinux:8
 before 4.18.0-553.8.1.el8_10
4.18.0-553.8.1.el8_10
kernel-tools
AlmaLinux:8
 before 4.18.0-553.8.1.el8_10
4.18.0-553.8.1.el8_10
kernel-tools-libs
AlmaLinux:8
 before 4.18.0-553.8.1.el8_10
4.18.0-553.8.1.el8_10
kernel-tools-libs-devel
AlmaLinux:8
 before 4.18.0-553.8.1.el8_10
4.18.0-553.8.1.el8_10
kernel-zfcpdump
AlmaLinux:8
 before 4.18.0-553.8.1.el8_10
4.18.0-553.8.1.el8_10
kernel-zfcpdump-core
AlmaLinux:8
 before 4.18.0-553.8.1.el8_10
4.18.0-553.8.1.el8_10
kernel-zfcpdump-devel
AlmaLinux:8
 before 4.18.0-553.8.1.el8_10
4.18.0-553.8.1.el8_10
kernel-zfcpdump-modules
AlmaLinux:8
 before 4.18.0-553.8.1.el8_10
4.18.0-553.8.1.el8_10
kernel-zfcpdump-modules-extra
AlmaLinux:8
 before 4.18.0-553.8.1.el8_10
4.18.0-553.8.1.el8_10
perf
AlmaLinux:8
 before 4.18.0-553.8.1.el8_10
4.18.0-553.8.1.el8_10
python3-perf
AlmaLinux:8
 before 4.18.0-553.8.1.el8_10
4.18.0-553.8.1.el8_10
kernel-rt
AlmaLinux:8
 before 4.18.0-553.8.1.rt7.349.el8_10
4.18.0-553.8.1.rt7.349.el8_10
kernel-rt-core
AlmaLinux:8
 before 4.18.0-553.8.1.rt7.349.el8_10
4.18.0-553.8.1.rt7.349.el8_10
kernel-rt-debug
AlmaLinux:8
 before 4.18.0-553.8.1.rt7.349.el8_10
4.18.0-553.8.1.rt7.349.el8_10
kernel-rt-debug-core
AlmaLinux:8
 before 4.18.0-553.8.1.rt7.349.el8_10
4.18.0-553.8.1.rt7.349.el8_10
kernel-rt-debug-devel
AlmaLinux:8
 before 4.18.0-553.8.1.rt7.349.el8_10
4.18.0-553.8.1.rt7.349.el8_10
kernel-rt-debug-kvm
AlmaLinux:8
 before 4.18.0-553.8.1.rt7.349.el8_10
4.18.0-553.8.1.rt7.349.el8_10
kernel-rt-debug-modules
AlmaLinux:8
 before 4.18.0-553.8.1.rt7.349.el8_10
4.18.0-553.8.1.rt7.349.el8_10
kernel-rt-debug-modules-extra
AlmaLinux:8
 before 4.18.0-553.8.1.rt7.349.el8_10
4.18.0-553.8.1.rt7.349.el8_10
kernel-rt-devel
AlmaLinux:8
 before 4.18.0-553.8.1.rt7.349.el8_10
4.18.0-553.8.1.rt7.349.el8_10
kernel-rt-kvm
AlmaLinux:8
 before 4.18.0-553.8.1.rt7.349.el8_10
4.18.0-553.8.1.rt7.349.el8_10
kernel-rt-modules
AlmaLinux:8
 before 4.18.0-553.8.1.rt7.349.el8_10
4.18.0-553.8.1.rt7.349.el8_10
kernel-rt-modules-extra
AlmaLinux:8
 before 4.18.0-553.8.1.rt7.349.el8_10
4.18.0-553.8.1.rt7.349.el8_10
linux
Debian:12
 before 5.10.40-1
5.10.40-1
linux
Debian:13
 before 5.10.40-1
5.10.40-1
linux
Debian:14
 before 5.10.40-1
5.10.40-1
bpftool
Red Hat:enterprise_linux:8::baseos
 before 0:4.18.0-553.8.1.el8_10
0:4.18.0-553.8.1.el8_10
bpftool-debuginfo
Red Hat:enterprise_linux:8::baseos
 before 0:4.18.0-553.8.1.el8_10
0:4.18.0-553.8.1.el8_10
kernel
Red Hat:enterprise_linux:8::baseos
 before 0:4.18.0-553.8.1.el8_10
0:4.18.0-553.8.1.el8_10
kernel-abi-stablelists
Red Hat:enterprise_linux:8::baseos
 before 0:4.18.0-553.8.1.el8_10
0:4.18.0-553.8.1.el8_10
kernel-core
Red Hat:enterprise_linux:8::baseos
 before 0:4.18.0-553.8.1.el8_10
0:4.18.0-553.8.1.el8_10
kernel-debug
Red Hat:enterprise_linux:8::baseos
 before 0:4.18.0-553.8.1.el8_10
0:4.18.0-553.8.1.el8_10
kernel-debug-core
Red Hat:enterprise_linux:8::baseos
 before 0:4.18.0-553.8.1.el8_10
0:4.18.0-553.8.1.el8_10
kernel-debug-debuginfo
Red Hat:enterprise_linux:8::baseos
 before 0:4.18.0-553.8.1.el8_10
0:4.18.0-553.8.1.el8_10
kernel-debug-devel
Red Hat:enterprise_linux:8::baseos
 before 0:4.18.0-553.8.1.el8_10
0:4.18.0-553.8.1.el8_10
kernel-debug-modules
Red Hat:enterprise_linux:8::baseos
 before 0:4.18.0-553.8.1.el8_10
0:4.18.0-553.8.1.el8_10
kernel-debug-modules-extra
Red Hat:enterprise_linux:8::baseos
 before 0:4.18.0-553.8.1.el8_10
0:4.18.0-553.8.1.el8_10
kernel-debuginfo
Red Hat:enterprise_linux:8::baseos
 before 0:4.18.0-553.8.1.el8_10
0:4.18.0-553.8.1.el8_10
kernel-debuginfo-common-aarch64
Red Hat:enterprise_linux:8::baseos
 before 0:4.18.0-553.8.1.el8_10
0:4.18.0-553.8.1.el8_10
kernel-debuginfo-common-ppc64le
Red Hat:enterprise_linux:8::baseos
 before 0:4.18.0-553.8.1.el8_10
0:4.18.0-553.8.1.el8_10
kernel-debuginfo-common-s390x
Red Hat:enterprise_linux:8::baseos
 before 0:4.18.0-553.8.1.el8_10
0:4.18.0-553.8.1.el8_10
kernel-debuginfo-common-x86_64
Red Hat:enterprise_linux:8::baseos
 before 0:4.18.0-553.8.1.el8_10
0:4.18.0-553.8.1.el8_10
kernel-devel
Red Hat:enterprise_linux:8::baseos
 before 0:4.18.0-553.8.1.el8_10
0:4.18.0-553.8.1.el8_10
kernel-doc
Red Hat:enterprise_linux:8::baseos
 before 0:4.18.0-553.8.1.el8_10
0:4.18.0-553.8.1.el8_10
kernel-modules
Red Hat:enterprise_linux:8::baseos
 before 0:4.18.0-553.8.1.el8_10
0:4.18.0-553.8.1.el8_10
kernel-modules-extra
Red Hat:enterprise_linux:8::baseos
 before 0:4.18.0-553.8.1.el8_10
0:4.18.0-553.8.1.el8_10
kernel-tools
Red Hat:enterprise_linux:8::baseos
 before 0:4.18.0-553.8.1.el8_10
0:4.18.0-553.8.1.el8_10
kernel-tools-debuginfo
Red Hat:enterprise_linux:8::baseos
 before 0:4.18.0-553.8.1.el8_10
0:4.18.0-553.8.1.el8_10
kernel-tools-libs
Red Hat:enterprise_linux:8::baseos
 before 0:4.18.0-553.8.1.el8_10
0:4.18.0-553.8.1.el8_10
kernel-zfcpdump
Red Hat:enterprise_linux:8::baseos
 before 0:4.18.0-553.8.1.el8_10
0:4.18.0-553.8.1.el8_10
kernel-zfcpdump-core
Red Hat:enterprise_linux:8::baseos
 before 0:4.18.0-553.8.1.el8_10
0:4.18.0-553.8.1.el8_10
kernel-zfcpdump-debuginfo
Red Hat:enterprise_linux:8::baseos
 before 0:4.18.0-553.8.1.el8_10
0:4.18.0-553.8.1.el8_10
kernel-zfcpdump-devel
Red Hat:enterprise_linux:8::baseos
 before 0:4.18.0-553.8.1.el8_10
0:4.18.0-553.8.1.el8_10
kernel-zfcpdump-modules
Red Hat:enterprise_linux:8::baseos
 before 0:4.18.0-553.8.1.el8_10
0:4.18.0-553.8.1.el8_10
kernel-zfcpdump-modules-extra
Red Hat:enterprise_linux:8::baseos
 before 0:4.18.0-553.8.1.el8_10
0:4.18.0-553.8.1.el8_10
perf
Red Hat:enterprise_linux:8::baseos
 before 0:4.18.0-553.8.1.el8_10
0:4.18.0-553.8.1.el8_10
perf-debuginfo
Red Hat:enterprise_linux:8::baseos
 before 0:4.18.0-553.8.1.el8_10
0:4.18.0-553.8.1.el8_10
python3-perf
Red Hat:enterprise_linux:8::baseos
 before 0:4.18.0-553.8.1.el8_10
0:4.18.0-553.8.1.el8_10
python3-perf-debuginfo
Red Hat:enterprise_linux:8::baseos
 before 0:4.18.0-553.8.1.el8_10
0:4.18.0-553.8.1.el8_10
bpftool-debuginfo
Red Hat:enterprise_linux:8::crb
 before 0:4.18.0-553.8.1.el8_10
0:4.18.0-553.8.1.el8_10
kernel-debug-debuginfo
Red Hat:enterprise_linux:8::crb
 before 0:4.18.0-553.8.1.el8_10
0:4.18.0-553.8.1.el8_10
kernel-debuginfo
Red Hat:enterprise_linux:8::crb
 before 0:4.18.0-553.8.1.el8_10
0:4.18.0-553.8.1.el8_10
kernel-debuginfo-common-aarch64
Red Hat:enterprise_linux:8::crb
 before 0:4.18.0-553.8.1.el8_10
0:4.18.0-553.8.1.el8_10
kernel-debuginfo-common-ppc64le
Red Hat:enterprise_linux:8::crb
 before 0:4.18.0-553.8.1.el8_10
0:4.18.0-553.8.1.el8_10
kernel-debuginfo-common-x86_64
Red Hat:enterprise_linux:8::crb
 before 0:4.18.0-553.8.1.el8_10
0:4.18.0-553.8.1.el8_10
kernel-tools-debuginfo
Red Hat:enterprise_linux:8::crb
 before 0:4.18.0-553.8.1.el8_10
0:4.18.0-553.8.1.el8_10
kernel-tools-libs-devel
Red Hat:enterprise_linux:8::crb
 before 0:4.18.0-553.8.1.el8_10
0:4.18.0-553.8.1.el8_10
perf-debuginfo
Red Hat:enterprise_linux:8::crb
 before 0:4.18.0-553.8.1.el8_10
0:4.18.0-553.8.1.el8_10
python3-perf-debuginfo
Red Hat:enterprise_linux:8::crb
 before 0:4.18.0-553.8.1.el8_10
0:4.18.0-553.8.1.el8_10
kernel-rt
Red Hat:enterprise_linux:8::nfv
 before 0:4.18.0-553.8.1.rt7.349.el8_10
0:4.18.0-553.8.1.rt7.349.el8_10
kernel-rt-core
Red Hat:enterprise_linux:8::nfv
 before 0:4.18.0-553.8.1.rt7.349.el8_10
0:4.18.0-553.8.1.rt7.349.el8_10
kernel-rt-debug
Red Hat:enterprise_linux:8::nfv
 before 0:4.18.0-553.8.1.rt7.349.el8_10
0:4.18.0-553.8.1.rt7.349.el8_10
kernel-rt-debug-core
Red Hat:enterprise_linux:8::nfv
 before 0:4.18.0-553.8.1.rt7.349.el8_10
0:4.18.0-553.8.1.rt7.349.el8_10
kernel-rt-debug-debuginfo
Red Hat:enterprise_linux:8::nfv
 before 0:4.18.0-553.8.1.rt7.349.el8_10
0:4.18.0-553.8.1.rt7.349.el8_10
kernel-rt-debug-devel
Red Hat:enterprise_linux:8::nfv
 before 0:4.18.0-553.8.1.rt7.349.el8_10
0:4.18.0-553.8.1.rt7.349.el8_10
kernel-rt-debug-kvm
Red Hat:enterprise_linux:8::nfv
 before 0:4.18.0-553.8.1.rt7.349.el8_10
0:4.18.0-553.8.1.rt7.349.el8_10
kernel-rt-debug-modules
Red Hat:enterprise_linux:8::nfv
 before 0:4.18.0-553.8.1.rt7.349.el8_10
0:4.18.0-553.8.1.rt7.349.el8_10
kernel-rt-debug-modules-extra
Red Hat:enterprise_linux:8::nfv
 before 0:4.18.0-553.8.1.rt7.349.el8_10
0:4.18.0-553.8.1.rt7.349.el8_10
kernel-rt-debuginfo
Red Hat:enterprise_linux:8::nfv
 before 0:4.18.0-553.8.1.rt7.349.el8_10
0:4.18.0-553.8.1.rt7.349.el8_10
kernel-rt-debuginfo-common-x86_64
Red Hat:enterprise_linux:8::nfv
 before 0:4.18.0-553.8.1.rt7.349.el8_10
0:4.18.0-553.8.1.rt7.349.el8_10
kernel-rt-devel
Red Hat:enterprise_linux:8::nfv
 before 0:4.18.0-553.8.1.rt7.349.el8_10
0:4.18.0-553.8.1.rt7.349.el8_10
kernel-rt-kvm
Red Hat:enterprise_linux:8::nfv
 before 0:4.18.0-553.8.1.rt7.349.el8_10
0:4.18.0-553.8.1.rt7.349.el8_10
kernel-rt-modules
Red Hat:enterprise_linux:8::nfv
 before 0:4.18.0-553.8.1.rt7.349.el8_10
0:4.18.0-553.8.1.rt7.349.el8_10
kernel-rt-modules-extra
Red Hat:enterprise_linux:8::nfv
 before 0:4.18.0-553.8.1.rt7.349.el8_10
0:4.18.0-553.8.1.rt7.349.el8_10
kernel-rt
Red Hat:enterprise_linux:8::realtime
 before 0:4.18.0-553.8.1.rt7.349.el8_10
0:4.18.0-553.8.1.rt7.349.el8_10
kernel-rt-core
Red Hat:enterprise_linux:8::realtime
 before 0:4.18.0-553.8.1.rt7.349.el8_10
0:4.18.0-553.8.1.rt7.349.el8_10
kernel-rt-debug
Red Hat:enterprise_linux:8::realtime
 before 0:4.18.0-553.8.1.rt7.349.el8_10
0:4.18.0-553.8.1.rt7.349.el8_10
kernel-rt-debug-core
Red Hat:enterprise_linux:8::realtime
 before 0:4.18.0-553.8.1.rt7.349.el8_10
0:4.18.0-553.8.1.rt7.349.el8_10
kernel-rt-debug-debuginfo
Red Hat:enterprise_linux:8::realtime
 before 0:4.18.0-553.8.1.rt7.349.el8_10
0:4.18.0-553.8.1.rt7.349.el8_10
kernel-rt-debug-devel
Red Hat:enterprise_linux:8::realtime
 before 0:4.18.0-553.8.1.rt7.349.el8_10
0:4.18.0-553.8.1.rt7.349.el8_10
kernel-rt-debug-modules
Red Hat:enterprise_linux:8::realtime
 before 0:4.18.0-553.8.1.rt7.349.el8_10
0:4.18.0-553.8.1.rt7.349.el8_10
kernel-rt-debug-modules-extra
Red Hat:enterprise_linux:8::realtime
 before 0:4.18.0-553.8.1.rt7.349.el8_10
0:4.18.0-553.8.1.rt7.349.el8_10
kernel-rt-debuginfo
Red Hat:enterprise_linux:8::realtime
 before 0:4.18.0-553.8.1.rt7.349.el8_10
0:4.18.0-553.8.1.rt7.349.el8_10
kernel-rt-debuginfo-common-x86_64
Red Hat:enterprise_linux:8::realtime
 before 0:4.18.0-553.8.1.rt7.349.el8_10
0:4.18.0-553.8.1.rt7.349.el8_10
kernel-rt-devel
Red Hat:enterprise_linux:8::realtime
 before 0:4.18.0-553.8.1.rt7.349.el8_10
0:4.18.0-553.8.1.rt7.349.el8_10
kernel-rt-modules
Red Hat:enterprise_linux:8::realtime
 before 0:4.18.0-553.8.1.rt7.349.el8_10
0:4.18.0-553.8.1.rt7.349.el8_10
kernel-rt-modules-extra
Red Hat:enterprise_linux:8::realtime
 before 0:4.18.0-553.8.1.rt7.349.el8_10
0:4.18.0-553.8.1.rt7.349.el8_10
bpftool
Red Hat:rhel_aus:8.6::baseos
 before 0:4.18.0-372.119.1.el8_6
0:4.18.0-372.119.1.el8_6
bpftool-debuginfo
Red Hat:rhel_aus:8.6::baseos
 before 0:4.18.0-372.119.1.el8_6
0:4.18.0-372.119.1.el8_6
kernel
Red Hat:rhel_aus:8.6::baseos
 before 0:4.18.0-372.119.1.el8_6
0:4.18.0-372.119.1.el8_6
kernel-abi-stablelists
Red Hat:rhel_aus:8.6::baseos
 before 0:4.18.0-372.119.1.el8_6
0:4.18.0-372.119.1.el8_6
kernel-core
Red Hat:rhel_aus:8.6::baseos
 before 0:4.18.0-372.119.1.el8_6
0:4.18.0-372.119.1.el8_6
kernel-debug
Red Hat:rhel_aus:8.6::baseos
 before 0:4.18.0-372.119.1.el8_6
0:4.18.0-372.119.1.el8_6
kernel-debug-core
Red Hat:rhel_aus:8.6::baseos
 before 0:4.18.0-372.119.1.el8_6
0:4.18.0-372.119.1.el8_6
kernel-debug-debuginfo
Red Hat:rhel_aus:8.6::baseos
 before 0:4.18.0-372.119.1.el8_6
0:4.18.0-372.119.1.el8_6
kernel-debug-devel
Red Hat:rhel_aus:8.6::baseos
 before 0:4.18.0-372.119.1.el8_6
0:4.18.0-372.119.1.el8_6
kernel-debug-modules
Red Hat:rhel_aus:8.6::baseos
 before 0:4.18.0-372.119.1.el8_6
0:4.18.0-372.119.1.el8_6
kernel-debug-modules-extra
Red Hat:rhel_aus:8.6::baseos
 before 0:4.18.0-372.119.1.el8_6
0:4.18.0-372.119.1.el8_6
kernel-debuginfo
Red Hat:rhel_aus:8.6::baseos
 before 0:4.18.0-372.119.1.el8_6
0:4.18.0-372.119.1.el8_6
kernel-debuginfo-common-x86_64
Red Hat:rhel_aus:8.6::baseos
 before 0:4.18.0-372.119.1.el8_6
0:4.18.0-372.119.1.el8_6
kernel-devel
Red Hat:rhel_aus:8.6::baseos
 before 0:4.18.0-372.119.1.el8_6
0:4.18.0-372.119.1.el8_6
kernel-modules
Red Hat:rhel_aus:8.6::baseos
 before 0:4.18.0-372.119.1.el8_6
0:4.18.0-372.119.1.el8_6
kernel-modules-extra
Red Hat:rhel_aus:8.6::baseos
 before 0:4.18.0-372.119.1.el8_6
0:4.18.0-372.119.1.el8_6
kernel-tools
Red Hat:rhel_aus:8.6::baseos
 before 0:4.18.0-372.119.1.el8_6
0:4.18.0-372.119.1.el8_6
kernel-tools-debuginfo
Red Hat:rhel_aus:8.6::baseos
 before 0:4.18.0-372.119.1.el8_6
0:4.18.0-372.119.1.el8_6
kernel-tools-libs
Red Hat:rhel_aus:8.6::baseos
 before 0:4.18.0-372.119.1.el8_6
0:4.18.0-372.119.1.el8_6
perf
Red Hat:rhel_aus:8.6::baseos
 before 0:4.18.0-372.119.1.el8_6
0:4.18.0-372.119.1.el8_6
perf-debuginfo
Red Hat:rhel_aus:8.6::baseos
 before 0:4.18.0-372.119.1.el8_6
0:4.18.0-372.119.1.el8_6
python3-perf
Red Hat:rhel_aus:8.6::baseos
 before 0:4.18.0-372.119.1.el8_6
0:4.18.0-372.119.1.el8_6
python3-perf-debuginfo
Red Hat:rhel_aus:8.6::baseos
 before 0:4.18.0-372.119.1.el8_6
0:4.18.0-372.119.1.el8_6
bpftool
Red Hat:rhel_e4s:8.6::baseos
 before 0:4.18.0-372.119.1.el8_6
0:4.18.0-372.119.1.el8_6
bpftool-debuginfo
Red Hat:rhel_e4s:8.6::baseos
 before 0:4.18.0-372.119.1.el8_6
0:4.18.0-372.119.1.el8_6
kernel
Red Hat:rhel_e4s:8.6::baseos
 before 0:4.18.0-372.119.1.el8_6
0:4.18.0-372.119.1.el8_6
kernel
Rocky Linux:8
 before 0:4.18.0-553.8.1.el8_10
0:4.18.0-553.8.1.el8_10
kernel-rt
Rocky Linux:8
 before 0:4.18.0-553.8.1.rt7.349.el8_10
0:4.18.0-553.8.1.rt7.349.el8_10
kernel-rt
SUSE:Linux Enterprise Micro 5.1
 before 5.3.18-150300.161.1
5.3.18-150300.161.1
kernel-source-rt
SUSE:Linux Enterprise Micro 5.1
 before 5.3.18-150300.161.1
5.3.18-150300.161.1
kernel-rt
SUSE:Linux Enterprise Micro 5.2
 before 5.3.18-150300.161.1
5.3.18-150300.161.1
kernel-source-rt
SUSE:Linux Enterprise Micro 5.2
 before 5.3.18-150300.161.1
5.3.18-150300.161.1
kernel-default
SUSE:Linux Enterprise Live Patching 15 SP3
 before 5.3.18-150300.59.153.2
5.3.18-150300.59.153.2
kernel-livepatch-SLE15-SP3_Update_42
SUSE:Linux Enterprise Live Patching 15 SP3
 before 1-150300.7.3.2
1-150300.7.3.2
kernel-default
SUSE:Linux Enterprise High Availability Extension 15 SP3
 before 5.3.18-150300.59.153.2
5.3.18-150300.59.153.2
kernel-64kb
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
 before 5.3.18-150300.59.153.2
5.3.18-150300.59.153.2
kernel-default
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
 before 5.3.18-150300.59.153.2
5.3.18-150300.59.153.2
kernel-default-base
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
 before 5.3.18-150300.59.153.2.150300.18.90.2
5.3.18-150300.59.153.2.150300.18.90.2
kernel-docs
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
 before 5.3.18-150300.59.153.2
5.3.18-150300.59.153.2
kernel-obs-build
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
 before 5.3.18-150300.59.153.2
5.3.18-150300.59.153.2
kernel-preempt
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
 before 5.3.18-150300.59.153.2
5.3.18-150300.59.153.2
kernel-source
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
 before 5.3.18-150300.59.153.2
5.3.18-150300.59.153.2
kernel-syms
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
 before 5.3.18-150300.59.153.1
5.3.18-150300.59.153.1
kernel-64kb
SUSE:Linux Enterprise Server 15 SP3-LTSS
 before 5.3.18-150300.59.153.2
5.3.18-150300.59.153.2
kernel-default
SUSE:Linux Enterprise Server 15 SP3-LTSS
 before 5.3.18-150300.59.153.2
5.3.18-150300.59.153.2
kernel-default-base
SUSE:Linux Enterprise Server 15 SP3-LTSS
 before 5.3.18-150300.59.153.2.150300.18.90.2
5.3.18-150300.59.153.2.150300.18.90.2
kernel-docs
SUSE:Linux Enterprise Server 15 SP3-LTSS
 before 5.3.18-150300.59.153.2
5.3.18-150300.59.153.2
kernel-obs-build
SUSE:Linux Enterprise Server 15 SP3-LTSS
 before 5.3.18-150300.59.153.2
5.3.18-150300.59.153.2
kernel-preempt
SUSE:Linux Enterprise Server 15 SP3-LTSS
 before 5.3.18-150300.59.153.2
5.3.18-150300.59.153.2
kernel-source
SUSE:Linux Enterprise Server 15 SP3-LTSS
 before 5.3.18-150300.59.153.2
5.3.18-150300.59.153.2
kernel-syms
SUSE:Linux Enterprise Server 15 SP3-LTSS
 before 5.3.18-150300.59.153.1
5.3.18-150300.59.153.1
kernel-zfcpdump
SUSE:Linux Enterprise Server 15 SP3-LTSS
 before 5.3.18-150300.59.153.2
5.3.18-150300.59.153.2
kernel-default
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
 before 5.3.18-150300.59.153.2
5.3.18-150300.59.153.2
kernel-default-base
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
 before 5.3.18-150300.59.153.2.150300.18.90.2
5.3.18-150300.59.153.2.150300.18.90.2
kernel-docs
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
 before 5.3.18-150300.59.153.2
5.3.18-150300.59.153.2
kernel-obs-build
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
 before 5.3.18-150300.59.153.2
5.3.18-150300.59.153.2
kernel-preempt
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
 before 5.3.18-150300.59.153.2
5.3.18-150300.59.153.2
kernel-source
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
 before 5.3.18-150300.59.153.2
5.3.18-150300.59.153.2
kernel-syms
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
 before 5.3.18-150300.59.153.1
5.3.18-150300.59.153.1
kernel-default
SUSE:Linux Enterprise Micro 5.1
 before 5.3.18-150300.59.153.2
5.3.18-150300.59.153.2
kernel-default-base
SUSE:Linux Enterprise Micro 5.1
 before 5.3.18-150300.59.153.2.150300.18.90.2
5.3.18-150300.59.153.2.150300.18.90.2
kernel-default
SUSE:Linux Enterprise Micro 5.2
 before 5.3.18-150300.59.153.2
5.3.18-150300.59.153.2
kernel-default-base
SUSE:Linux Enterprise Micro 5.2
 before 5.3.18-150300.59.153.2.150300.18.90.2
5.3.18-150300.59.153.2.150300.18.90.2
kernel-64kb
SUSE:Enterprise Storage 7.1
 before 5.3.18-150300.59.153.2
5.3.18-150300.59.153.2
kernel-default
SUSE:Enterprise Storage 7.1
 before 5.3.18-150300.59.153.2
5.3.18-150300.59.153.2
kernel-default-base
SUSE:Enterprise Storage 7.1
 before 5.3.18-150300.59.153.2.150300.18.90.2
5.3.18-150300.59.153.2.150300.18.90.2
kernel-docs
SUSE:Enterprise Storage 7.1
 before 5.3.18-150300.59.153.2
5.3.18-150300.59.153.2
kernel-obs-build
SUSE:Enterprise Storage 7.1
 before 5.3.18-150300.59.153.2
5.3.18-150300.59.153.2
kernel-preempt
SUSE:Enterprise Storage 7.1
 before 5.3.18-150300.59.153.2
5.3.18-150300.59.153.2
kernel-source
SUSE:Enterprise Storage 7.1
 before 5.3.18-150300.59.153.2
5.3.18-150300.59.153.2
kernel-syms
SUSE:Enterprise Storage 7.1
 before 5.3.18-150300.59.153.1
5.3.18-150300.59.153.1
kernel-default
SUSE:Linux Enterprise Live Patching 15 SP2
 before 5.3.18-150200.24.183.1
5.3.18-150200.24.183.1
kernel-livepatch-SLE15-SP2_Update_46
SUSE:Linux Enterprise Live Patching 15 SP2
 before 1-150200.5.3.2
1-150200.5.3.2
kernel-default
SUSE:Linux Enterprise High Availability Extension 15 SP2
 before 5.3.18-150200.24.183.1
5.3.18-150200.24.183.1
kernel-default
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
 before 5.3.18-150200.24.183.1
5.3.18-150200.24.183.1
kernel-default-base
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
 before 5.3.18-150200.24.183.1.150200.9.93.2
5.3.18-150200.24.183.1.150200.9.93.2
kernel-docs
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
 before 5.3.18-150200.24.183.1
5.3.18-150200.24.183.1
kernel-obs-build
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
 before 5.3.18-150200.24.183.1
5.3.18-150200.24.183.1
kernel-preempt
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
 before 5.3.18-150200.24.183.1
5.3.18-150200.24.183.1
kernel-source
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
 before 5.3.18-150200.24.183.1
5.3.18-150200.24.183.1
kernel-syms
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
 before 5.3.18-150200.24.183.1
5.3.18-150200.24.183.1
kernel-default
SUSE:Linux Enterprise Server 15 SP2-LTSS
 before 5.3.18-150200.24.183.1
5.3.18-150200.24.183.1
kernel-default-base
SUSE:Linux Enterprise Server 15 SP2-LTSS
 before 5.3.18-150200.24.183.1.150200.9.93.2
5.3.18-150200.24.183.1.150200.9.93.2
kernel-docs
SUSE:Linux Enterprise Server 15 SP2-LTSS
 before 5.3.18-150200.24.183.1
5.3.18-150200.24.183.1
kernel-obs-build
SUSE:Linux Enterprise Server 15 SP2-LTSS
 before 5.3.18-150200.24.183.1
5.3.18-150200.24.183.1
kernel-preempt
SUSE:Linux Enterprise Server 15 SP2-LTSS
 before 5.3.18-150200.24.183.1
5.3.18-150200.24.183.1
kernel-source
SUSE:Linux Enterprise Server 15 SP2-LTSS
 before 5.3.18-150200.24.183.1
5.3.18-150200.24.183.1
kernel-syms
SUSE:Linux Enterprise Server 15 SP2-LTSS
 before 5.3.18-150200.24.183.1
5.3.18-150200.24.183.1
kernel-default
SUSE:Linux Enterprise Server for SAP Applications 15 SP2
 before 5.3.18-150200.24.183.1
5.3.18-150200.24.183.1
kernel-default-base
SUSE:Linux Enterprise Server for SAP Applications 15 SP2
 before 5.3.18-150200.24.183.1.150200.9.93.2
5.3.18-150200.24.183.1.150200.9.93.2
kernel-docs
SUSE:Linux Enterprise Server for SAP Applications 15 SP2
 before 5.3.18-150200.24.183.1
5.3.18-150200.24.183.1
kernel-obs-build
SUSE:Linux Enterprise Server for SAP Applications 15 SP2
 before 5.3.18-150200.24.183.1
5.3.18-150200.24.183.1
kernel-preempt
SUSE:Linux Enterprise Server for SAP Applications 15 SP2
 before 5.3.18-150200.24.183.1
5.3.18-150200.24.183.1
kernel-source
SUSE:Linux Enterprise Server for SAP Applications 15 SP2
 before 5.3.18-150200.24.183.1
5.3.18-150200.24.183.1
kernel-syms
SUSE:Linux Enterprise Server for SAP Applications 15 SP2
 before 5.3.18-150200.24.183.1
5.3.18-150200.24.183.1
kernel-default
SUSE:Linux Enterprise Live Patching 15 SP2
 before 5.3.18-150200.24.188.1
5.3.18-150200.24.188.1
kernel-livepatch-SLE15-SP2_Update_47
SUSE:Linux Enterprise Live Patching 15 SP2
 before 1-150200.5.3.3
1-150200.5.3.3
kernel-default
SUSE:Linux Enterprise High Availability Extension 15 SP2
 before 5.3.18-150200.24.188.1
5.3.18-150200.24.188.1
kernel-default
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
 before 5.3.18-150200.24.188.1
5.3.18-150200.24.188.1
kernel-default-base
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
 before 5.3.18-150200.24.188.1.150200.9.95.3
5.3.18-150200.24.188.1.150200.9.95.3
kernel-docs
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
 before 5.3.18-150200.24.188.1
5.3.18-150200.24.188.1
kernel-obs-build
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
 before 5.3.18-150200.24.188.1
5.3.18-150200.24.188.1
kernel-preempt
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
 before 5.3.18-150200.24.188.1
5.3.18-150200.24.188.1
kernel-source
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
 before 5.3.18-150200.24.188.1
5.3.18-150200.24.188.1
kernel-syms
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
 before 5.3.18-150200.24.188.1
5.3.18-150200.24.188.1
kernel-default
SUSE:Linux Enterprise Server 15 SP2-LTSS
 before 5.3.18-150200.24.188.1
5.3.18-150200.24.188.1
kernel-default-base
SUSE:Linux Enterprise Server 15 SP2-LTSS
 before 5.3.18-150200.24.188.1.150200.9.95.3
5.3.18-150200.24.188.1.150200.9.95.3
kernel-docs
SUSE:Linux Enterprise Server 15 SP2-LTSS
 before 5.3.18-150200.24.188.1
5.3.18-150200.24.188.1
kernel-obs-build
SUSE:Linux Enterprise Server 15 SP2-LTSS
 before 5.3.18-150200.24.188.1
5.3.18-150200.24.188.1
kernel-preempt
SUSE:Linux Enterprise Server 15 SP2-LTSS
 before 5.3.18-150200.24.188.1
5.3.18-150200.24.188.1
kernel-source
SUSE:Linux Enterprise Server 15 SP2-LTSS
 before 5.3.18-150200.24.188.1
5.3.18-150200.24.188.1
kernel-syms
SUSE:Linux Enterprise Server 15 SP2-LTSS
 before 5.3.18-150200.24.188.1
5.3.18-150200.24.188.1
kernel-default
SUSE:Linux Enterprise Server for SAP Applications 15 SP2
 before 5.3.18-150200.24.188.1
5.3.18-150200.24.188.1
kernel-default-base
SUSE:Linux Enterprise Server for SAP Applications 15 SP2
 before 5.3.18-150200.24.188.1.150200.9.95.3
5.3.18-150200.24.188.1.150200.9.95.3
kernel-docs
SUSE:Linux Enterprise Server for SAP Applications 15 SP2
 before 5.3.18-150200.24.188.1
5.3.18-150200.24.188.1
kernel-obs-build
SUSE:Linux Enterprise Server for SAP Applications 15 SP2
 before 5.3.18-150200.24.188.1
5.3.18-150200.24.188.1
kernel-preempt
SUSE:Linux Enterprise Server for SAP Applications 15 SP2
 before 5.3.18-150200.24.188.1
5.3.18-150200.24.188.1
kernel-source
SUSE:Linux Enterprise Server for SAP Applications 15 SP2
 before 5.3.18-150200.24.188.1
5.3.18-150200.24.188.1
kernel-syms
SUSE:Linux Enterprise Server for SAP Applications 15 SP2
 before 5.3.18-150200.24.188.1
5.3.18-150200.24.188.1
kernel-default
SUSE:Linux Enterprise Live Patching 15 SP3
 before 5.3.18-150300.59.158.1
5.3.18-150300.59.158.1
kernel-livepatch-SLE15-SP3_Update_43
SUSE:Linux Enterprise Live Patching 15 SP3
 before 1-150300.7.3.5
1-150300.7.3.5
kernel-default
SUSE:Linux Enterprise High Availability Extension 15 SP3
 before 5.3.18-150300.59.158.1
5.3.18-150300.59.158.1
kernel-64kb
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
 before 5.3.18-150300.59.158.1
5.3.18-150300.59.158.1
kernel-default
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
 before 5.3.18-150300.59.158.1
5.3.18-150300.59.158.1
kernel-default-base
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
 before 5.3.18-150300.59.158.1.150300.18.92.5
5.3.18-150300.59.158.1.150300.18.92.5
linux-hwe-edge
Ubuntu:16.04:LTS
 All versions, plus listed versions
4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1
Show 18 moreShow less
4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1
 None known
linux-aws-5.0
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30
 None known
linux-aws-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1
Show 5 moreShow less
5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37
 None known
linux-azure
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9
Show 39 moreShow less
4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38
 None known
linux-azure-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1
Show 11 moreShow less
5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36
 None known
linux-azure-edge
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2
 None known
linux-gcp
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8
Show 33 moreShow less
4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35
 None known
linux-gcp-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1
Show 8 moreShow less
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1
 None known
linux-gke-4.15
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38
Show 28 moreShow less
4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84
 None known
linux-gke-5.4
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.1
Show 32 moreShow less
5.4.0-1033.35~18.04.15.4.0-1035.37~18.04.15.4.0-1036.38~18.04.15.4.0-1037.39~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1042.44~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.15.4.0-1052.55~18.04.15.4.0-1053.56~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1071.76~18.04.35.4.0-1072.77~18.04.15.4.0-1074.79~18.04.15.4.0-1076.82~18.04.15.4.0-1078.84~18.04.15.4.0-1080.86~18.04.1
 None known
linux-gkeop-5.4
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.4.0-1001.15.4.0-1003.35.4.0-1004.55.4.0-1005.65.4.0-1007.8~18.04.1
Show 32 moreShow less
5.4.0-1008.9~18.04.15.4.0-1009.10~18.04.15.4.0-1010.11~18.04.15.4.0-1011.12~18.04.25.4.0-1012.13~18.04.15.4.0-1013.14~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1016.17~18.04.15.4.0-1018.19~18.04.15.4.0-1021.22~18.04.15.4.0-1022.23~18.04.15.4.0-1023.24~18.04.15.4.0-1024.25~18.04.15.4.0-1025.26~18.04.15.4.0-1026.27~18.04.15.4.0-1027.28~18.04.15.4.0-1029.30~18.04.25.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1033.34~18.04.15.4.0-1034.35~18.04.15.4.0-1036.37~18.04.15.4.0-1037.38~18.04.15.4.0-1038.39~18.04.15.4.0-1039.40~18.04.15.4.0-1040.41~18.04.15.4.0-1043.44~18.04.15.4.0-1046.48~18.04.15.4.0-1048.51~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.1
 None known
linux-hwe
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1
Show 38 moreShow less
4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72
 None known
linux-hwe-edge
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-15.16~18.04.15.0.0-16.17~18.04.15.0.0-17.18~18.04.15.0.0-19.20~18.04.15.0.0-20.21~18.04.1
Show 5 moreShow less
5.3.0-19.20~18.04.25.3.0-22.24~18.04.15.3.0-23.25~18.04.15.3.0-23.25~18.04.25.3.0-24.26~18.04.2
 None known
linux-oem
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12
Show 45 moreShow less
4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114
 None known
linux-oracle-5.0
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19
 None known
linux-oracle-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1
Show 4 moreShow less
5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1
 None known
linux-aws-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1009.9~20.04.25.11.0-1014.15~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1
Show 7 moreShow less
5.11.0-1020.21~20.04.25.11.0-1021.22~20.04.25.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1
 None known
linux-aws-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1008.9~20.04.25.13.0-1011.12~20.04.15.13.0-1012.13~20.04.15.13.0-1014.15~20.04.15.13.0-1017.19~20.04.1
Show 8 moreShow less
5.13.0-1019.21~20.04.15.13.0-1021.23~20.04.25.13.0-1022.24~20.04.15.13.0-1023.25~20.04.15.13.0-1025.27~20.04.15.13.0-1028.31~20.04.15.13.0-1029.32~20.04.15.13.0-1031.35~20.04.1
 None known
linux-aws-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1041.43~20.04.15.8.0-1042.44~20.04.1
 None known
linux-azure-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1007.7~20.04.25.11.0-1012.13~20.04.15.11.0-1013.14~20.04.15.11.0-1015.16~20.04.15.11.0-1017.18~20.04.1
Show 8 moreShow less
5.11.0-1019.20~20.04.15.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.2
 None known
linux-azure-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1009.10~20.04.25.13.0-1012.14~20.04.15.13.0-1013.15~20.04.15.13.0-1014.16~20.04.15.13.0-1017.19~20.04.1
Show 7 moreShow less
5.13.0-1021.24~20.04.15.13.0-1022.26~20.04.15.13.0-1023.27~20.04.15.13.0-1025.29~20.04.15.13.0-1028.33~20.04.15.13.0-1029.34~20.04.15.13.0-1031.37~20.04.1
 None known
linux-azure-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1033.35~20.04.15.8.0-1036.38~20.04.15.8.0-1039.42~20.04.15.8.0-1040.43~20.04.15.8.0-1041.44~20.04.15.8.0-1042.45~20.04.15.8.0-1043.46~20.04.1
 None known
linux-azure-fde
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-1063.66+cvm2.25.4.0-1063.66+cvm3.25.4.0-1064.67+cvm1.15.4.0-1065.68+cvm2.15.4.0-1067.70+cvm1.1
Show 21 moreShow less
5.4.0-1068.71+cvm1.15.4.0-1069.72+cvm1.15.4.0-1070.73+cvm1.15.4.0-1072.75+cvm1.15.4.0-1073.76+cvm1.15.4.0-1074.77+cvm1.15.4.0-1076.79+cvm1.15.4.0-1078.81+cvm1.15.4.0-1080.83+cvm1.15.4.0-1083.87+cvm1.15.4.0-1085.90+cvm1.15.4.0-1085.90+cvm2.15.4.0-1086.91+cvm1.15.4.0-1089.94+cvm1.25.4.0-1090.95+cvm1.15.4.0-1091.96+cvm1.15.4.0-1092.97+cvm1.15.4.0-1095.101+cvm1.15.4.0-1098.104+cvm1.15.4.0-1100.106+cvm1.15.4.0-1103.109+cvm1.1
 None known
linux-gcp-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1009.10~20.04.15.11.0-1014.16~20.04.15.11.0-1017.19~20.04.15.11.0-1018.20~20.04.25.11.0-1020.22~20.04.1
Show 7 moreShow less
5.11.0-1021.23~20.04.15.11.0-1022.24~20.04.15.11.0-1023.25~20.04.15.11.0-1024.26~20.04.15.11.0-1026.29~20.04.15.11.0-1028.32~20.04.15.11.0-1029.33~20.04.3
 None known
linux-gcp-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1008.9~20.04.35.13.0-1012.15~20.04.15.13.0-1013.16~20.04.15.13.0-1015.18~20.04.15.13.0-1019.23~20.04.1
Show 8 moreShow less
5.13.0-1021.25~20.04.15.13.0-1023.28~20.04.15.13.0-1024.29~20.04.15.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1030.36~20.04.15.13.0-1031.37~20.04.15.13.0-1033.40~20.04.1
 None known
linux-gcp-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1032.34~20.04.15.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1039.41
 None known
linux-gke
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-1033.355.4.0-1035.375.4.0-1036.385.4.0-1037.395.4.0-1039.41
Show 45 moreShow less
5.4.0-1041.435.4.0-1042.445.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1065.685.4.0-1066.695.4.0-1067.705.4.0-1068.715.4.0-1071.765.4.0-1072.775.4.0-1074.795.4.0-1076.825.4.0-1078.845.4.0-1080.865.4.0-1081.875.4.0-1083.895.4.0-1084.905.4.0-1086.935.4.0-1087.945.4.0-1090.975.4.0-1091.985.4.0-1094.1015.4.0-1095.1025.4.0-1096.1035.4.0-1097.1045.4.0-1098.1055.4.0-1099.1065.4.0-1100.1075.4.0-1101.1085.4.0-1102.1095.4.0-1103.1105.4.0-1104.111
 None known
linux-gke-5.15
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.15.0-1011.14~20.04.15.15.0-1014.17~20.04.15.15.0-1015.18~20.04.15.15.0-1016.19~20.04.15.15.0-1019.23~20.04.1
Show 13 moreShow less
5.15.0-1020.25~20.04.15.15.0-1023.28~20.04.25.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1029.34~20.04.15.15.0-1031.36~20.04.15.15.0-1032.37~20.04.15.15.0-1033.38~20.04.15.15.0-1034.39~20.04.15.15.0-1036.41~20.04.15.15.0-1037.42~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.1
 None known
linux-hwe-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-22.23~20.04.15.11.0-25.27~20.04.15.11.0-27.29~20.04.15.11.0-34.36~20.04.15.11.0-36.40~20.04.1
Show 7 moreShow less
5.11.0-37.41~20.04.25.11.0-38.42~20.04.15.11.0-40.44~20.04.25.11.0-41.45~20.04.15.11.0-43.47~20.04.25.11.0-44.48~20.04.25.11.0-46.51~20.04.1
 None known
linux-hwe-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-21.21~20.04.15.13.0-22.22~20.04.15.13.0-23.23~20.04.25.13.0-25.26~20.04.15.13.0-27.29~20.04.1
Show 11 moreShow less
5.13.0-28.31~20.04.15.13.0-30.33~20.04.15.13.0-35.40~20.04.15.13.0-37.42~20.04.15.13.0-39.44~20.04.15.13.0-40.45~20.04.15.13.0-41.46~20.04.15.13.0-44.49~20.04.15.13.0-48.54~20.04.15.13.0-51.58~20.04.15.13.0-52.59~20.04.1
 None known
linux-hwe-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-23.24~20.04.15.8.0-25.26~20.04.15.8.0-28.30~20.04.15.8.0-29.31~20.04.15.8.0-31.33~20.04.1
Show 16 moreShow less
5.8.0-33.36~20.04.15.8.0-34.37~20.04.25.8.0-36.40~20.04.15.8.0-38.43~20.04.15.8.0-40.45~20.04.15.8.0-41.46~20.04.15.8.0-43.49~20.04.15.8.0-44.50~20.04.15.8.0-45.51~20.04.15.8.0-48.54~20.04.15.8.0-49.55~20.04.15.8.0-50.56~20.04.15.8.0-53.60~20.04.15.8.0-55.62~20.04.15.8.0-59.66~20.04.15.8.0-63.71~20.04.1
 None known
linux-intel-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1007.75.13.0-1008.85.13.0-1009.95.13.0-1010.105.13.0-1011.115.13.0-1014.155.13.0-1017.19
 None known
linux-oem-5.10
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.10.0-1008.95.10.0-1011.125.10.0-1013.145.10.0-1014.155.10.0-1016.17
Show 21 moreShow less
5.10.0-1017.185.10.0-1019.205.10.0-1021.225.10.0-1022.235.10.0-1023.245.10.0-1025.265.10.0-1026.275.10.0-1029.305.10.0-1032.335.10.0-1033.345.10.0-1034.355.10.0-1038.405.10.0-1044.465.10.0-1045.475.10.0-1049.515.10.0-1050.525.10.0-1051.535.10.0-1052.545.10.0-1053.555.10.0-1055.585.10.0-1057.61
 None known
linux-oem-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1009.105.13.0-1010.115.13.0-1012.165.13.0-1014.185.13.0-1017.21
Show 7 moreShow less
5.13.0-1019.235.13.0-1020.245.13.0-1021.255.13.0-1022.265.13.0-1026.325.13.0-1028.355.13.0-1029.36
 None known
linux-oem-5.14
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.14.0-1004.45.14.0-1005.55.14.0-1007.75.14.0-1008.85.14.0-1010.10
Show 30 moreShow less
5.14.0-1011.115.14.0-1013.135.14.0-1018.195.14.0-1020.225.14.0-1022.245.14.0-1024.265.14.0-1027.305.14.0-1029.325.14.0-1031.345.14.0-1032.355.14.0-1033.365.14.0-1034.375.14.0-1036.405.14.0-1038.425.14.0-1042.475.14.0-1044.495.14.0-1045.515.14.0-1046.535.14.0-1047.545.14.0-1048.555.14.0-1049.565.14.0-1050.575.14.0-1051.585.14.0-1052.595.14.0-1054.615.14.0-1055.625.14.0-1056.635.14.0-1057.645.14.0-1058.665.14.0-1059.67
 None known
linux-oem-5.6
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.6.0-1007.75.6.0-1008.85.6.0-1010.105.6.0-1011.115.6.0-1013.13
Show 24 moreShow less
5.6.0-1017.175.6.0-1018.185.6.0-1020.205.6.0-1021.215.6.0-1023.235.6.0-1026.265.6.0-1027.275.6.0-1028.285.6.0-1031.325.6.0-1032.335.6.0-1033.355.6.0-1034.365.6.0-1035.375.6.0-1036.395.6.0-1039.435.6.0-1042.465.6.0-1047.515.6.0-1048.525.6.0-1050.545.6.0-1052.565.6.0-1053.575.6.0-1054.585.6.0-1055.595.6.0-1056.60
 None known
linux-oracle-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1008.8~20.04.15.11.0-1013.14~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1
Show 7 moreShow less
5.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1
 None known
linux-oracle-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1011.13~20.04.25.13.0-1015.19~20.04.15.13.0-1016.20~20.04.15.13.0-1018.22~20.04.15.13.0-1021.26~20.04.1
Show 7 moreShow less
5.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1028.33~20.04.15.13.0-1030.35~20.04.15.13.0-1033.39~20.04.15.13.0-1034.40~20.04.15.13.0-1036.43~20.04.1
 None known
linux-oracle-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1031.32~20.04.25.8.0-1033.34~20.04.15.8.0-1034.35~20.04.25.8.0-1037.38~20.04.15.8.0-1038.39~20.04.1
 None known
linux-raspi2
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.3.0-1007.85.3.0-1014.165.3.0-1015.175.3.0-1017.195.4.0-1004.45.4.0-1006.6
 None known
linux-riscv
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-24.285.4.0-26.305.4.0-27.315.4.0-28.325.4.0-30.34
Show 7 moreShow less
5.4.0-31.355.4.0-33.375.4.0-34.385.4.0-36.415.4.0-37.425.4.0-39.445.4.0-40.45
 None known
linux-riscv-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1015.16~20.04.15.11.0-1017.18~20.04.15.11.0-1018.19~20.04.25.11.0-1020.21~20.04.15.11.0-1021.22~20.04.1
Show 8 moreShow less
5.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1024.25~20.04.15.11.0-1026.28~20.04.15.11.0-1028.31~20.04.15.11.0-1029.32~20.04.15.11.0-1030.345.11.0-1031.35
 None known
linux-riscv-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-14.16~20.04.15.8.0-14.16~20.04.35.8.0-16.18~20.04.15.8.0-17.19~20.04.15.8.0-18.20~20.04.1
Show 5 moreShow less
5.8.0-20.22~20.04.15.8.0-22.24~20.04.15.8.0-25.27~20.04.15.8.0-26.28~20.04.15.8.0-29.31~20.04.1
 None known
linux-allwinner-5.19
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.19.0-1007.7~22.04.15.19.0-1009.9~22.04.15.19.0-1010.10~22.04.15.19.0-1011.11~22.04.15.19.0-1012.12~22.04.15.19.0-1013.13~22.04.15.19.0-1014.14~22.04.15.19.0-1015.15~22.04.1
 None known
linux-aws-5.19
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.19.0-1019.20~22.04.15.19.0-1020.21~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.15.19.0-1024.25~22.04.1
Show 5 moreShow less
5.19.0-1025.26~22.04.15.19.0-1026.27~22.04.15.19.0-1027.28~22.04.15.19.0-1028.29~22.04.15.19.0-1029.30~22.04.1
 None known
linux-aws-6.2
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.2.0-1005.5~22.04.16.2.0-1006.6~22.04.16.2.0-1007.7~22.04.16.2.0-1008.8~22.04.16.2.0-1009.9~22.04.3
Show 9 moreShow less
6.2.0-1010.10~22.04.16.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1013.13~22.04.16.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.1
 None known
linux-azure-5.19
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.19.0-1020.21~22.04.15.19.0-1021.22~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.15.19.0-1025.28~22.04.15.19.0-1026.29~22.04.15.19.0-1027.30~22.04.2
 None known
linux-azure-6.2
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.2.0-1005.5~22.04.16.2.0-1006.6~22.04.16.2.0-1007.7~22.04.16.2.0-1008.8~22.04.16.2.0-1009.9~22.04.3
Show 8 moreShow less
6.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.16.2.0-1019.19~22.04.1
 None known
linux-azure-fde-5.19
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.19.0-1025.28~22.04.1.15.19.0-1026.29~22.04.1.15.19.0-1027.30~22.04.2.1
 None known
linux-azure-fde-6.2
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.2.0-1008.8~22.04.1.16.2.0-1009.9~22.04.3.16.2.0-1011.11~22.04.1.16.2.0-1012.12~22.04.1.16.2.0-1014.14~22.04.1.1
Show 5 moreShow less
6.2.0-1015.15~22.04.1.16.2.0-1016.16~22.04.1.16.2.0-1017.17~22.04.1.16.2.0-1018.18~22.04.1.16.2.0-1019.19~22.04.1.1
 None known
linux-gcp-5.19
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.19.0-1020.22~22.04.25.19.0-1021.23~22.04.15.19.0-1022.24~22.04.15.19.0-1024.26~22.04.15.19.0-1025.27~22.04.15.19.0-1026.28~22.04.15.19.0-1027.29~22.04.15.19.0-1030.32~22.04.1
 None known
linux-gcp-6.2
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.2.0-1009.9~22.04.36.2.0-1010.10~22.04.16.2.0-1011.11~22.04.16.2.0-1011.11~22.04.36.2.0-1012.12~22.04.1
Show 7 moreShow less
6.2.0-1013.13~22.04.16.2.0-1014.14~22.04.16.2.0-1016.18~22.04.16.2.0-1017.19~22.04.16.2.0-1018.20~22.04.16.2.0-1019.21~22.04.16.2.0-1021.23~22.04.1
 None known
linux-hwe-5.19
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.19.0-28.29~22.04.15.19.0-32.33~22.04.15.19.0-35.36~22.04.15.19.0-38.39~22.04.15.19.0-40.41~22.04.1
Show 6 moreShow less
5.19.0-41.42~22.04.15.19.0-42.43~22.04.15.19.0-43.44~22.04.15.19.0-45.46~22.04.15.19.0-46.47~22.04.15.19.0-50.50
 None known
linux-hwe-6.2
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.2.0-25.25~22.04.26.2.0-26.26~22.04.16.2.0-31.31~22.04.16.2.0-32.32~22.04.16.2.0-33.33~22.04.1
Show 5 moreShow less
6.2.0-34.34~22.04.16.2.0-35.35~22.04.16.2.0-36.37~22.04.16.2.0-37.38~22.04.16.2.0-39.40~22.04.1
 None known
linux-lowlatency-hwe-5.19
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.19.0-1017.18~22.04.15.19.0-1018.19~22.04.15.19.0-1021.22~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.1
Show 5 moreShow less
5.19.0-1024.25~22.04.15.19.0-1025.26~22.04.15.19.0-1027.28~22.04.15.19.0-1028.29~22.04.15.19.0-1030.30
 None known
linux-lowlatency-hwe-6.2
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.2.0-1008.8~22.04.16.2.0-1009.9~22.04.16.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1013.13~22.04.1
Show 5 moreShow less
6.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.1
 None known
linux-nvidia-6.2
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.2.0-1003.3~22.04.16.2.0-1009.96.2.0-1010.106.2.0-1011.116.2.0-1012.126.2.0-1013.136.2.0-1015.15
 None known
linux-oem-5.17
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.17.0-1003.35.17.0-1004.45.17.0-1006.65.17.0-1011.125.17.0-1012.13
Show 21 moreShow less
5.17.0-1013.145.17.0-1014.155.17.0-1015.165.17.0-1016.175.17.0-1017.185.17.0-1018.195.17.0-1019.205.17.0-1020.215.17.0-1021.225.17.0-1024.255.17.0-1025.265.17.0-1026.275.17.0-1027.285.17.0-1028.295.17.0-1029.305.17.0-1030.315.17.0-1031.325.17.0-1032.335.17.0-1033.345.17.0-1034.355.17.0-1035.36
 None known
linux-oem-6.0
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.0.0-1006.66.0.0-1007.76.0.0-1008.86.0.0-1009.96.0.0-1010.10
Show 11 moreShow less
6.0.0-1011.116.0.0-1012.126.0.0-1013.136.0.0-1014.146.0.0-1015.156.0.0-1016.166.0.0-1017.176.0.0-1018.186.0.0-1019.196.0.0-1020.206.0.0-1021.21
 None known
linux-oem-6.1
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.1.0-1004.46.1.0-1006.66.1.0-1007.76.1.0-1008.86.1.0-1009.9
Show 22 moreShow less
6.1.0-1010.106.1.0-1012.126.1.0-1013.136.1.0-1014.146.1.0-1015.156.1.0-1016.166.1.0-1017.176.1.0-1019.196.1.0-1020.206.1.0-1021.216.1.0-1022.226.1.0-1023.236.1.0-1024.246.1.0-1025.256.1.0-1026.266.1.0-1027.276.1.0-1028.286.1.0-1029.296.1.0-1033.336.1.0-1034.346.1.0-1035.356.1.0-1036.36
 None known
linux-riscv
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.13.0-1004.45.13.0-1006.6+22.04.15.13.0-1007.7+22.04.15.13.0-1010.11+22.04.15.15.0-1004.4
Show 18 moreShow less
5.15.0-1005.55.15.0-1006.65.15.0-1007.75.15.0-1008.85.15.0-1011.125.15.0-1012.135.15.0-1014.165.15.0-1015.175.15.0-1016.185.15.0-1017.195.15.0-1018.215.15.0-1019.225.15.0-1020.235.15.0-1022.265.15.0-1023.275.15.0-1026.305.15.0-1027.315.15.0-1028.32
 None known
linux-riscv-5.19
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.19.0-1012.13~22.04.15.19.0-1015.16~22.04.15.19.0-1016.17~22.04.15.19.0-1017.18~22.04.15.19.0-1018.19~22.04.15.19.0-1019.21~22.04.15.19.0-1020.22~22.04.15.19.0-1021.23~22.04.1
 None known
linux-starfive-5.19
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.19.0-1014.16~22.04.15.19.0-1015.17~22.04.15.19.0-1016.18~22.04.15.19.0-1017.19~22.04.15.19.0-1018.20~22.04.15.19.0-1019.21~22.04.15.19.0-1020.22~22.04.1
 None known
linux-starfive-6.2
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.2.0-1006.7~22.04.16.2.0-1007.8~22.04.16.2.0-1009.10~22.04.1
 None known

History

History
RecordedChangedSources
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2021-47069 is a high vulnerability (CVSS 7.8) in Linux, published March 1, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.26%, the 18th percentile. Fixed in bpftool 4.18.0-553.8.1.el8_10.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 191 package rows, 1 version, 863 references and the rest of 5 source descriptions. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open