CVE-2021-47497

nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells

7.8 HighFix available

In the Linux kernel, the following vulnerability has been resolved:

nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells

If a cell has 'nbits' equal to a multiple of BITS_PER_BYTE the logic

*p &= GENMASK((cell->nbits%BITS_PER_BYTE) - 1, 0);

will become undefined behavior because nbits modulo BITS_PER_BYTE is 0, and we subtract one from that making a large number that is then shifted more than the number of bits that fit into an unsigned long.

UBSAN reports this problem:

UBSAN: shift-out-of-bounds in drivers/nvmem/core.c:1386:8 shift exponent 64 is too large for 64-bit type 'unsigned long' CPU: 6 PID: 7 Comm: kworker/u16:0 Not tainted 5.15.0-rc3+ #9 Hardware name: Google Lazor (rev3+) with KB Backlight (DT) Workqueue: events_unbound deferred_probe_work_func Call trace: dump_backtrace+0x0/0x170 show_stack+0x24/0x30 dump_stack_lvl+0x64/0x7c dump_stack+0x18/0x38 ubsan_epilogue+0x10/0x54 __ubsan_handle_shift_out_of_bounds+0x180/0x194 __nvmem_cell_read+0x1ec/0x21c nvmem_cell_read+0x58/0x94 nvmem_cell_read_variable_common+0x4c/0xb0 nvmem_cell_read_variable_le_u32+0x40/0x100 a6xx_gpu_init+0x170/0x2f4 adreno_bind+0x174/0x284 component_bind_all+0xf0/0x264 msm_drm_bind+0x1d8/0x7a0 try_to_bring_up_master+0x164/0x1ac __component_add+0xbc/0x13c component_add+0x20/0x2c dp_display_probe+0x340/0x384 platform_probe+0xc0/0x100 really_probe+0x110/0x304 __driver_probe_device+0xb8/0x120 driver_probe_device+0x4c/0xfc __device_attach_driver+0xb0/0x128 bus_for_each_drv+0x90/0xdc __device_attach+0xc8/0x174 device_initial_probe+0x20/0x2c bus_probe_device+0x40/0xa4 deferred_probe_work_func+0x7c/0xb8 process_one_work+0x128/0x21c process_scheduled_works+0x40/0x54 worker_thread+0x1ec/0x2a8 kthread+0x138/0x158 ret_from_fork+0x10/0x20

Fix it by making sure there are any bits to mask out.

Attack profile

How easy it is to exploit

Attack vector: Local
Complexity: Low
Privileges needed: Low
User interaction: None

What an attacker can affect

Confidentiality: High
Integrity: High
Availability: High

Exploit likelihood

0.22%Up 0.2 points since May 23, 2024

What each source reports

NVD Score used 7.8

In the Linux kernel, the following vulnerability has been resolved:

nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells

If a cell has 'nbits' equal to a multiple of BITS_PER_BYTE the logic

*p &= GENMASK((cell->nbits%BITS_PER_BYTE) - 1, 0);

UBSAN reports this problem:

Fix it by making sure there are any bits to mask out.

Record: CVE-2021-47497
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-787
Updated: 2026-11-02

CVE List No score

nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells

In the Linux kernel, the following vulnerability has been resolved:

nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells

If a cell has 'nbits' equal to a multiple of BITS_PER_BYTE the logic

*p &= GENMASK((cell->nbits%BITS_PER_BYTE) - 1, 0);

UBSAN reports this problem:

Fix it by making sure there are any bits to mask out.

Record: CVE-2021-47497
Updated: 2026-11-02

EUVDEUVD-2021-34501 No score

In the Linux kernel, the following vulnerability has been resolved:

nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells

If a cell has 'nbits' equal to a multiple of BITS_PER_BYTE the logic

*p &= GENMASK((cell->nbits%BITS_PER_BYTE) - 1, 0);

UBSAN reports this problem:

Fix it by making sure there are any bits to mask out.

Record: EUVD-2021-34501
Updated: 2026-11-02

GitHub AdvisoriesGHSA-vgjx-6ccw-c3f6 7.8

In the Linux kernel, the following vulnerability has been resolved: nvmem: Fix shift-out-of...

In the Linux kernel, the following vulnerability has been resolved:

nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells

If a cell has 'nbits' equal to a multiple of BITS_PER_BYTE the logic

*p &= GENMASK((cell->nbits%BITS_PER_BYTE) - 1, 0);

UBSAN reports this problem:

Fix it by making sure there are any bits to mask out.

Record: GHSA-vgjx-6ccw-c3f6
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-787
Updated: 2026-11-02

OSV 7.8

In the Linux kernel, the following vulnerability has been resolved:

nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells

If a cell has 'nbits' equal to a multiple of BITS_PER_BYTE the logic

*p &= GENMASK((cell->nbits%BITS_PER_BYTE) - 1, 0);

UBSAN reports this problem:

Fix it by making sure there are any bits to mask out.

Record: CVE-2021-47497
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVDEBIAN-CVE-2021-47497 7.8

In the Linux kernel, the following vulnerability has been resolved: nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells If a cell has 'nbits' equal to a multiple of BITS_PER_BYTE the logic *p &= GENMASK((cell->nbits%BITS_PER_BYTE) - 1, 0); will become undefined behavior because nbits modulo BITS_PER_BYTE is 0, and we subtract one from that making a large number that is then shifted more than the number of bits that fit into an unsigned long. UBSAN reports this problem: UBSAN: shift-out-of-bounds in drivers/nvmem/core.c:1386:8 shift exponent 64 is too large for 64-bit type 'unsigned long' CPU: 6 PID: 7 Comm: kworker/u16:0 Not tainted 5.15.0-rc3+ #9 Hardware name: Google Lazor (rev3+) with KB Backlight (DT) Workqueue: events_unbound deferred_probe_work_func Call trace: dump_backtrace+0x0/0x170 show_stack+0x24/0x30 dump_stack_lvl+0x64/0x7c dump_stack+0x18/0x38 ubsan_epilogue+0x10/0x54 __ubsan_handle_shift_out_of_bounds+0x180/0x194 __nvmem_cell_read+0x1ec/0x21c nvmem_cell_read+0x58/0x94 nvmem_cell_read_variable_common+0x4c/0xb0 nvmem_cell_read_variable_le_u32+0x40/0x100 a6xx_gpu_init+0x170/0x2f4 adreno_bind+0x174/0x284 component_bind_all+0xf0/0x264 msm_drm_bind+0x1d8/0x7a0 try_to_bring_up_master+0x164/0x1ac __component_add+0xbc/0x13c component_add+0x20/0x2c dp_display_probe+0x340/0x384 platform_probe+0xc0/0x100 really_probe+0x110/0x304 __driver_probe_device+0xb8/0x120 driver_probe_device+0x4c/0xfc __device_attach_driver+0xb0/0x128 bus_for_each_drv+0x90/0xdc __device_attach+0xc8/0x174 device_initial_probe+0x20/0x2c bus_probe_device+0x40/0xa4 deferred_probe_work_func+0x7c/0xb8 process_one_work+0x128/0x21c process_scheduled_works+0x40/0x54 worker_thread+0x1ec/0x2a8 kthread+0x138/0x158 ret_from_fork+0x10/0x20 Fix it by making sure there are any bits to mask out.

Record: DEBIAN-CVE-2021-47497
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

Show 30 moreShow less

OSVOESA-2024-1677 0.0

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

usb: dwc3: ep0: fix NULL pointer exception

There is no validation of the index from dwc3_wIndex_to_dep() and we might be referring a non-existing ep and trigger a NULL pointer exception. In certain configurations we might use fewer eps and the index might wrongly indicate a larger ep index than existing.

By adding this validation from the patch we can actually report a wrong index back to the caller.

In our usecase we are using a composite device on an older kernel, but upstream might use this fix also. Unfortunately, I cannot describe the hardware for others to reproduce the issue as it is a proprietary implementation.

[ 82.958261] Unable to handle kernel NULL pointer dereference at virtual address 00000000000000a4 [ 82.966891] Mem abort info: [ 82.969663] ESR = 0x96000006 [ 82.972703] Exception class = DABT (current EL), IL = 32 bits [ 82.978603] SET = 0, FnV = 0 [ 82.981642] EA = 0, S1PTW = 0 [ 82.984765] Data abort info: [ 82.987631] ISV = 0, ISS = 0x00000006 [ 82.991449] CM = 0, WnR = 0 [ 82.994409] user pgtable: 4k pages, 39-bit VAs, pgdp = 00000000c6210ccc [ 83.000999] [00000000000000a4] pgd=0000000053aa5003, pud=0000000053aa5003, pmd=0000000000000000 [ 83.009685] Internal error: Oops: 96000006 [#1] PREEMPT SMP [ 83.026433] Process irq/62-dwc3 (pid: 303, stack limit = 0x000000003985154c) [ 83.033470] CPU: 0 PID: 303 Comm: irq/62-dwc3 Not tainted 4.19.124 #1 [ 83.044836] pstate: 60000085 (nZCv daIf -PAN -UAO) [ 83.049628] pc : dwc3_ep0_handle_feature+0x414/0x43c [ 83.054558] lr : dwc3_ep0_interrupt+0x3b4/0xc94

...

[ 83.141788] Call trace: [ 83.144227] dwc3_ep0_handle_feature+0x414/0x43c [ 83.148823] dwc3_ep0_interrupt+0x3b4/0xc94 [ 83.181546] ---[ end trace aac6b5267d84c32f ]---(CVE-2021-47269)

In the Linux kernel, the following vulnerability has been resolved:

isdn: mISDN: netjet: Fix crash in nj_probe:

'nj_setup' in netjet.c might fail with -EIO and in this case 'card->irq' is initialized and is bigger than zero. A subsequent call to 'nj_release' will free the irq that has not been requested.

Fix this bug by deleting the previous assignment to 'card->irq' and just keep the assignment before 'request_irq'.

The KASAN's log reveals it:

[ 3.354615 ] WARNING: CPU: 0 PID: 1 at kernel/irq/manage.c:1826 free_irq+0x100/0x480 [ 3.355112 ] Modules linked in: [ 3.355310 ] CPU: 0 PID: 1 Comm: swapper/0 Not tainted 5.13.0-rc1-00144-g25a1298726e #13 [ 3.355816 ] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.12.0-59-gc9ba5276e321-prebuilt.qemu.org 04/01/2014 [ 3.356552 ] RIP: 0010:free_irq+0x100/0x480 [ 3.356820 ] Code: 6e 08 74 6f 4d 89 f4 e8 5e ac 09 00 4d 8b 74 24 18 4d 85 f6 75 e3 e8 4f ac 09 00 8b 75 c8 48 c7 c7 78 c1 2e 85 e8 e0 cf f5 ff <0f> 0b 48 8b 75 c0 4c 89 ff e8 72 33 0b 03 48 8b 43 40 4c 8b a0 80 [ 3.358012 ] RSP: 0000:ffffc90000017b48 EFLAGS: 00010082 [ 3.358357 ] RAX: 0000000000000000 RBX: ffff888104dc8000 RCX: 0000000000000000 [ 3.358814 ] RDX: ffff8881003c8000 RSI: ffffffff8124a9e6 RDI: 00000000ffffffff [ 3.359272 ] RBP: ffffc90000017b88 R08: 0000000000000000 R09: 0000000000000000 [ 3.359732 ] R10: ffffc900000179f0 R11: 0000000000001d04 R12: 0000000000000000 [ 3.360195 ] R13: ffff888107dc6000 R14: ffff888107dc6928 R15: ffff888104dc80a8 [ 3.360652 ] FS: 0000000000000000(0000) GS:ffff88817bc00000(0000) knlGS:0000000000000000 [ 3.361170 ] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3.361538 ] CR2: 0000000000000000 CR3: 000000000582e000 CR4: 00000000000006f0 [ 3.362003 ] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 3.362175 ] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 3.362175 ] Call Trace: [ …

Record: OESA-2024-1677
CVSS 3.1: 0.0 NoneCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:N
Updated: 2026-11-02

OSVOESA-2024-1678 0.0

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

usb: dwc3: ep0: fix NULL pointer exception

By adding this validation from the patch we can actually report a wrong index back to the caller.

...

[ 83.141788] Call trace: [ 83.144227] dwc3_ep0_handle_feature+0x414/0x43c [ 83.148823] dwc3_ep0_interrupt+0x3b4/0xc94 [ 83.181546] ---[ end trace aac6b5267d84c32f ]---(CVE-2021-47269)

In the Linux kernel, the following vulnerability has been resolved:

isdn: mISDN: netjet: Fix crash in nj_probe:

'nj_setup' in netjet.c might fail with -EIO and in this case 'card->irq' is initialized and is bigger than zero. A subsequent call to 'nj_release' will free the irq that has not been requested.

Fix this bug by deleting the previous assignment to 'card->irq' and just keep the assignment before 'request_irq'.

The KASAN's log reveals it:

Record: OESA-2024-1678
CVSS 3.1: 0.0 NoneCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:N
Updated: 2026-11-02

OSVRHSA-2024:7000 7.8

Red Hat Security Advisory: kernel security update

Record: RHSA-2024:7000
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2024:7001 7.8

Red Hat Security Advisory: kernel-rt security update

Record: RHSA-2024:7001
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2024:9315 7.8

Red Hat Security Advisory: kernel security update

Record: RHSA-2024:9315
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2025:2490 7.8

Red Hat Security Advisory: kernel security update

Record: RHSA-2025:2490
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRLSA-2024:7000 7.8

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):

CVE-2023-6040 CVE-2024-26595 CVE-2024-26600 CVE-2021-46984 CVE-2023-52478 CVE-2023-52476 CVE-2023-52522 CVE-2021-47101 CVE-2021-47097 CVE-2023-52605 CVE-2024-26638 CVE-2024-26645 CVE-2024-26665 CVE-2024-26720 CVE-2024-26717 CVE-2024-26769 CVE-2024-26846 CVE-2024-26894 CVE-2024-26880 CVE-2024-26855 CVE-2024-26923 CVE-2024-26939 CVE-2024-27013 CVE-2024-27042 CVE-2024-35809 CVE-2023-52683 CVE-2024-35884 CVE-2024-35877 CVE-2024-35944 CVE-2024-35989 CVE-2021-47412 CVE-2021-47393 CVE-2021-47386 CVE-2021-47385 CVE-2021-47384 CVE-2021-47383 CVE-2021-47432 CVE-2021-47352 CVE-2021-47338 CVE-2021-47321 CVE-2021-47289 CVE-2021-47287 CVE-2023-52798 CVE-2023-52809 CVE-2023-52817 CVE-2023-52840 CVE-2023-52800 CVE-2021-47441 CVE-2021-47466 CVE-2021-47455 CVE-2021-47497 CVE-2021-47560 CVE-2021-47527 CVE-2024-36883 CVE-2024-36922 CVE-2024-36920 CVE-2024-36902 CVE-2024-36953 CVE-2024-36939 CVE-2024-36919 CVE-2024-36901 CVE-2021-47582 CVE-2021-47609 CVE-2024-38619 CVE-2022-48754 CVE-2022-48760 CVE-2024-38581 CVE-2024-38579 CVE-2024-38570 CVE-2024-38559 CVE-2024-38558 CVE-2024-37356 CVE-2024-39471 CVE-2024-39499 CVE-2024-39501 CVE-2024-39506 CVE-2024-40904 CVE-2024-40911 CVE-2024-40912 CVE-2024-40929 CVE-2024-40931 CVE-2024-40941 CVE-2024-40954 CVE-2024-40958 CVE-2024-40959 CVE-2024-40960 CVE-2024-40972 CVE-2024-40977 CVE-2024-40978 CVE-2024-40988 CVE-2024-40989 CVE-2024-40995 CVE-2024-40997 CVE-2024-40998 CVE-2024-41005 CVE-2024-40901 CVE-2024-41007 CVE-2024-41008 CVE-2022-48804 CVE-2022-48836 CVE-2022-48866 CVE-2024-41090 CVE-2024-41091 CVE-2024-41012 CVE-2024-41013 CVE-2024-41014 CVE-2024-41023 CVE-2024-41035 CVE-2024-41038 CVE-2024-41039 CVE-2024-41040 CVE-2024-41041 CVE-2024-41044 CVE-2024-41055 CVE-2024-41056 CVE-2024-41060 CVE-2024-41064 CVE-2024-41065 CVE-2024-41071 CVE-2024-41076 CVE-2024-41097 CVE-2024-42084 CVE-2024-42090 CVE-2024-42094 CVE-2024-42096 CVE-2024-42114 CVE-2024-42124 CVE-2024-42131 CVE-2024-42152 CVE-2024-42154 CVE-2024-42225 CVE-2024-42226 CVE-2024-42228 CVE-2024-42237 CVE-2024-42238 CVE-2024-42240 CVE-2024-42246 CVE-2024-42322 CVE-2024-43830 CVE-2024-43871 For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: RLSA-2024:7000
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVUBUNTU-CVE-2021-47497 7.8

Record: UBUNTU-CVE-2021-47497
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVALSA-2024:7000 No score

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):

Record: ALSA-2024:7000
Updated: 2026-11-02

OSVALSA-2024:7001 No score

Important: kernel-rt security update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.
Security Fix(es):

CVE-2023-6040 CVE-2024-26595 CVE-2021-46984 CVE-2023-52478 CVE-2023-52476 CVE-2023-52522 CVE-2021-47101 CVE-2021-47097 CVE-2023-52605 CVE-2024-26645 CVE-2024-26665 CVE-2024-26720 CVE-2024-26717 CVE-2024-26769 CVE-2024-26894 CVE-2024-26880 CVE-2024-26855 CVE-2024-26923 CVE-2024-26939 CVE-2024-27013 CVE-2024-27042 CVE-2024-35809 CVE-2023-52683 CVE-2024-35884 CVE-2024-35877 CVE-2024-35944 CVE-2024-35989 CVE-2021-47412 CVE-2021-47393 CVE-2021-47386 CVE-2021-47385 CVE-2021-47384 CVE-2021-47383 CVE-2021-47432 CVE-2021-47352 CVE-2021-47338 CVE-2021-47321 CVE-2021-47289 CVE-2021-47287 CVE-2023-52817 CVE-2023-52840 CVE-2021-47441 CVE-2021-47466 CVE-2021-47455 CVE-2021-47497 CVE-2021-47560 CVE-2021-47527 CVE-2024-36883 CVE-2024-36920 CVE-2024-36902 CVE-2024-36953 CVE-2024-36939 CVE-2024-36901 CVE-2021-47582 CVE-2021-47609 CVE-2024-38619 CVE-2022-48754 CVE-2022-48760 CVE-2024-38581 CVE-2024-38570 CVE-2024-38559 CVE-2024-38558 CVE-2024-37356 CVE-2024-39471 CVE-2024-39499 CVE-2024-39501 CVE-2024-39506 CVE-2024-40904 CVE-2024-40911 CVE-2024-40912 CVE-2024-40929 CVE-2024-40931 CVE-2024-40941 CVE-2024-40954 CVE-2024-40958 CVE-2024-40959 CVE-2024-40960 CVE-2024-40972 CVE-2024-40977 CVE-2024-40978 CVE-2024-40988 CVE-2024-40989 CVE-2024-40995 CVE-2024-40997 CVE-2024-40998 CVE-2024-41005 CVE-2024-40901 CVE-2024-41007 CVE-2024-41008 CVE-2022-48804 CVE-2022-48836 CVE-2022-48866 CVE-2024-41090 CVE-2024-41091 CVE-2024-41012 CVE-2024-41013 CVE-2024-41014 CVE-2024-41035 CVE-2024-41038 CVE-2024-41039 CVE-2024-41040 CVE-2024-41041 CVE-2024-41044 CVE-2024-41055 CVE-2024-41056 CVE-2024-41060 CVE-2024-41071 CVE-2024-41076 CVE-2024-41097 CVE-2024-42084 CVE-2024-42090 CVE-2024-42096 CVE-2024-42114 CVE-2024-42124 CVE-2024-42131 CVE-2024-42152 CVE-2024-42154 CVE-2024-42226 CVE-2024-42228 CVE-2024-42237 CVE-2024-42238 CVE-2024-42240 CVE-2024-42246 CVE-2024-42322 CVE-2024-43871 For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: ALSA-2024:7001
Updated: 2026-11-02

OSVCLSA-2024-1727690025 No score

kernel: Fix of 80 CVEs

sch/netem: fix use after free in netem_dequeue {CVE-2024-46800}
VMCI: Fix use-after-free when removing resource in vmci_resource_remove() {CVE-2024-46738}
drm/amdgpu: Fix out-of-bounds write warning {CVE-2024-46725}
drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number {CVE-2024-46724}
drm/amdgpu: fix ucode out-of-bounds read warning {CVE-2024-46723}
drm/amdgpu: fix mc_data out-of-bounds read warning {CVE-2024-46722}
scsi: aacraid: Fix double-free on probe failure {CVE-2024-46673}
ipv6: prevent UAF in ip6_send_skb() {CVE-2024-44987}
exec: Fix ToCToU between perm check and set-uid/gid usage {CVE-2024-43882}
dev/parport: fix the array out-of-bounds risk {CVE-2024-42301}
RDMA/iwcm: Fix a use-after-free related to destroying CM IDs {CVE-2024-42285}
tipc: Return non-zero value from tipc_udp_addr2str() on error {CVE-2024-42284}
mISDN: Fix a use after free in hfcmulti_tx() {CVE-2024-42280}
nvme: avoid double free special payload {CVE-2024-41073}
wifi: mac80211: Avoid address calculations via out of bounds array indexing {CVE-2024-41071}
xfs: don't walk off the end of a directory data block {CVE-2024-41013}
tunnels: fix out of bounds access when building IPv6 PMTU error {CVE-2024-26665}
KVM: x86/mmu: make apf token non-zero to fix bug {CVE-2022-48943}
cifs: fix double free race when mount fails in cifs_get_root() {CVE-2022-48919}
netfilter: fix use-after-free in __nf_register_net_hook() {CVE-2022-48912}
rtnetlink: make sure to refresh master_dev/m_ops in __rtnl_newlink() {CVE-2022-48742}
selinux: fix double free of cond_list on error paths {CVE-2022-48740}
ALSA: hda: Fix UAF of leds class devs at unbinding {CVE-2022-48735}
drm/nouveau: fix off by one in BIOS boundary checking {CVE-2022-48732}
mm, slub: fix potential memoryleak in kmem_cache_open() {CVE-2021-47466}
x86/coco: Disable 32-bit emulation by default on TDX and SEV {CVE-2024-25744}
x86: Make IA32_EMULATION boot time configurable {CVE-2024-25744}
x86/entry: Make IA32 syscalls' availability depend on ia32_enabled() {CVE-2024-25744}
x86/elf: Make loading of 32bit processes depend on ia32_enabled() {CVE-2024-25744}
x86/entry: Rename ignore_sysret() {CVE-2024-25744}
x86/cpu: Don't write CSTAR MSR on Intel CPUs {CVE-2024-25744}
x86: Introduce ia32_enabled() {CVE-2024-25744}
scsi: qedf: Make qedf_execute_tmf() non-preemptible {CVE-2024-42124}
ftruncate: pass a signed offset {CVE-2024-42084}
USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor {CVE-2024-41035}
xfs: add bounds checking to xlog_recover_process_data {CVE-2024-41014}
drm/radeon: fix UBSAN warning in kv_dpm.c {CVE-2024-40988}
ring-buffer: Fix a race between readers and resize checks {CVE-2024-38601}
Input: cyapa - add missing input core locking to suspend/resume functions {CVE-2023-52884}
Input: synaptics-rmi4 - fix use after free in rmi_unregister_function() {CVE-2023-52840}
wifi: ath11k: fix htt pktlog locking {CVE-2023-52800}
wifi: ath11k: fix dfs radar event locking {CVE-2023-52798}
ACPI: LPIT: Avoid u32 multiplication overflow {CVE-2023-52683}
ACPI: extlog: fix NULL pointer dereference check {CVE-2023-52605}
HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect {CVE-2023-52478}
USB: core: Fix hang in usb_kill_urb by adding memory barriers {CVE-2022-48760}
phylib: fix potential use-after-free {CVE-2022-48754}
serial: core: fix transmit-buffer reset and memleak {CVE-2021-47527}
nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells {CVE-2021-47497}
mlxsw: thermal: Fix out-of-bounds memory accesses {CVE-2021-47441}
hwmon: (mlxreg-fan) Return non-zero value when fan current state is enforced from sysfs {CVE-2021-47393}
hwmon: (w83791d) Fix NULL pointer dereference by removing unnecessary structure field {CVE-2021-47386}
hwmon: (w83792d) Fix NULL pointer dereference by removing unnecessary structure field {CVE-2021-47385}
hwmon: (w83793) Fix NULL pointer…

Record: CLSA-2024-1727690025
Updated: 2026-11-02

OSVCLSA-2024-1727690947 No score

kernel: Fix of 80 CVEs

sch/netem: fix use after free in netem_dequeue {CVE-2024-46800}
VMCI: Fix use-after-free when removing resource in vmci_resource_remove() {CVE-2024-46738}
drm/amdgpu: Fix out-of-bounds write warning {CVE-2024-46725}
drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number {CVE-2024-46724}
drm/amdgpu: fix ucode out-of-bounds read warning {CVE-2024-46723}
drm/amdgpu: fix mc_data out-of-bounds read warning {CVE-2024-46722}
scsi: aacraid: Fix double-free on probe failure {CVE-2024-46673}
ipv6: prevent UAF in ip6_send_skb() {CVE-2024-44987}
exec: Fix ToCToU between perm check and set-uid/gid usage {CVE-2024-43882}
dev/parport: fix the array out-of-bounds risk {CVE-2024-42301}
RDMA/iwcm: Fix a use-after-free related to destroying CM IDs {CVE-2024-42285}
tipc: Return non-zero value from tipc_udp_addr2str() on error {CVE-2024-42284}
mISDN: Fix a use after free in hfcmulti_tx() {CVE-2024-42280}
nvme: avoid double free special payload {CVE-2024-41073}
wifi: mac80211: Avoid address calculations via out of bounds array indexing {CVE-2024-41071}
xfs: don't walk off the end of a directory data block {CVE-2024-41013}
tunnels: fix out of bounds access when building IPv6 PMTU error {CVE-2024-26665}
KVM: x86/mmu: make apf token non-zero to fix bug {CVE-2022-48943}
cifs: fix double free race when mount fails in cifs_get_root() {CVE-2022-48919}
netfilter: fix use-after-free in __nf_register_net_hook() {CVE-2022-48912}
rtnetlink: make sure to refresh master_dev/m_ops in __rtnl_newlink() {CVE-2022-48742}
selinux: fix double free of cond_list on error paths {CVE-2022-48740}
ALSA: hda: Fix UAF of leds class devs at unbinding {CVE-2022-48735}
drm/nouveau: fix off by one in BIOS boundary checking {CVE-2022-48732}
mm, slub: fix potential memoryleak in kmem_cache_open() {CVE-2021-47466}
x86/coco: Disable 32-bit emulation by default on TDX and SEV {CVE-2024-25744}
x86: Make IA32_EMULATION boot time configurable {CVE-2024-25744}
x86/entry: Make IA32 syscalls' availability depend on ia32_enabled() {CVE-2024-25744}
x86/elf: Make loading of 32bit processes depend on ia32_enabled() {CVE-2024-25744}
x86/entry: Rename ignore_sysret() {CVE-2024-25744}
x86/cpu: Don't write CSTAR MSR on Intel CPUs {CVE-2024-25744}
x86: Introduce ia32_enabled() {CVE-2024-25744}
x86/asm/64: Change all ENTRY+END to SYM_CODE_* {CVE-2024-25744}
x86/head/64: Annotate start_cpu0() as non-callable {CVE-2024-25744}
x86/asm: Do not annotate functions with GLOBAL {CVE-2024-25744}
kprobes/x86/xen: blacklist non-attachable xen interrupt functions {CVE-2024-25744}
x86/asm/64: Add ENDs to some functions and relabel with SYM_CODE_* {CVE-2024-25744}
x86/asm: Use SYM_INNER_LABEL instead of GLOBAL {CVE-2024-25744}
x86/asm: Annotate aliases {CVE-2024-25744}
x86/asm/crypto: Annotate local functions {CVE-2024-25744}
scsi: qedf: Make qedf_execute_tmf() non-preemptible {CVE-2024-42124}
ftruncate: pass a signed offset {CVE-2024-42084}
USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor {CVE-2024-41035}
xfs: add bounds checking to xlog_recover_process_data {CVE-2024-41014}
drm/radeon: fix UBSAN warning in kv_dpm.c {CVE-2024-40988}
ring-buffer: Fix a race between readers and resize checks {CVE-2024-38601}
Input: cyapa - add missing input core locking to suspend/resume functions {CVE-2023-52884}
Input: synaptics-rmi4 - fix use after free in rmi_unregister_function() {CVE-2023-52840}
wifi: ath11k: fix htt pktlog locking {CVE-2023-52800}
wifi: ath11k: fix dfs radar event locking {CVE-2023-52798}
ACPI: LPIT: Avoid u32 multiplication overflow {CVE-2023-52683}
ACPI: extlog: fix NULL pointer dereference check {CVE-2023-52605}
HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect {CVE-2023-52478}
USB: core: Fix hang in usb_kill_urb by adding memory barriers {CVE-2022-48760}
phylib: fix potential use-after-free {CVE-2022-48754}
serial: core: fix transmit-buffer…

Record: CLSA-2024-1727690947
Updated: 2026-11-02

OSVCLSA-2024-1727815919 No score

kernel: Fix of 73 CVEs

firmware: cs_dsp: Return error if block header overflows file {CVE-2024-42238}
scsi: qedf: Make qedf_execute_tmf() non-preemptible {CVE-2024-42124}
ftruncate: pass a signed offset {CVE-2024-42084}
firmware: cs_dsp: Use strnlen() on name fields in V1 wmfw files {CVE-2024-41056}
firmware: cs_dsp: Prevent buffer overrun when processing V2 alg headers {CVE-2024-41038}
USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor {CVE-2024-41035}
xfs: add bounds checking to xlog_recover_process_data {CVE-2024-41014}
netpoll: Fix race condition in netpoll_owner_active {CVE-2024-41005}
drm/radeon: fix UBSAN warning in kv_dpm.c {CVE-2024-40988}
ring-buffer: Fix a race between readers and resize checks {CVE-2024-38601}
scsi: mpi3mr: Avoid memcpy field-spanning write WARNING {CVE-2024-36920}
dmaengine: idxd: Fix oops during rmmod on single-CPU platforms {CVE-2024-35989}
udp: do not accept non-tunnel GSO skbs landing in a tunnel {CVE-2024-35884}
nvme-fc: do not wait in vain when unloading module {CVE-2024-26846}
drm/amdgpu: Fix the null pointer when load rlc firmware {CVE-2024-26649}
Input: cyapa - add missing input core locking to suspend/resume functions {CVE-2023-52884}
Input: synaptics-rmi4 - fix use after free in rmi_unregister_function() {CVE-2023-52840}
wifi: ath11k: fix htt pktlog locking {CVE-2023-52800}
wifi: ath11k: fix dfs radar event locking {CVE-2023-52798}
ACPI: LPIT: Avoid u32 multiplication overflow {CVE-2023-52683}
ACPI: extlog: fix NULL pointer dereference check {CVE-2023-52605}
HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect {CVE-2023-52478}
USB: core: Fix hang in usb_kill_urb by adding memory barriers {CVE-2022-48760}
phylib: fix potential use-after-free {CVE-2022-48754}
serial: core: fix transmit-buffer reset and memleak {CVE-2021-47527}
nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells {CVE-2021-47497}
mlxsw: thermal: Fix out-of-bounds memory accesses {CVE-2021-47441}
hwmon: (mlxreg-fan) Return non-zero value when fan current state is enforced from sysfs {CVE-2021-47393}
hwmon: (w83791d) Fix NULL pointer dereference by removing unnecessary structure field {CVE-2021-47386}
hwmon: (w83792d) Fix NULL pointer dereference by removing unnecessary structure field {CVE-2021-47385}
hwmon: (w83793) Fix NULL pointer dereference by removing unnecessary structure field {CVE-2021-47384}
virtio-net: Add validation for used length {CVE-2021-47352}
fbmem: Do not delete the mode that is still in use {CVE-2021-47338}
watchdog: Fix possible use-after-free by calling del_timer_sync() {CVE-2021-47321}
ACPI: fix NULL pointer dereference {CVE-2021-47289}
driver core: auxiliary bus: Fix memory leak when driver_register() fail {CVE-2021-47287}
Input: elantech - fix stack out of bound access in elantech_change_report_id() {CVE-2021-47097}
HID: hid-thrustmaster: fix OOB read in thrustmaster_interrupts {CVE-2022-48866}
ipv6: prevent possible NULL dereference in rt6_probe() {CVE-2024-40960}
xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr() {CVE-2024-40959}
wifi: iwlwifi: mvm: don't read past the mfuart notifcation {CVE-2024-40941}
wifi: iwlwifi: mvm: check n_ssids before accessing the ssids {CVE-2024-40929}
wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup() {CVE-2024-40912}
wifi: cfg80211: Lock wiphy in cfg80211_get_station {CVE-2024-40911}
USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages {CVE-2024-40904}
scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory {CVE-2024-40901}
liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet {CVE-2024-39506}
vmci: prevent speculation leaks by sanitizing event in event_deliver() {CVE-2024-39499}
crypto: bcm - Fix pointer arithmetic {CVE-2024-38579}
scsi: qedf: Ensure the copied buf is NUL terminated {CVE-2024-38559}
net: openvswitch: fix overwriting ct original tuple for ICMPv6…

Record: CLSA-2024-1727815919
Updated: 2026-11-02

OSVCLSA-2025-1759431860 No score

kernel: Fix of 39 CVEs

ASoC: topology: Clean up route loading {CVE-2024-41069}
ASoC: topology: Fix references to freed memory {CVE-2024-41069}
drm/dp_mst: Fix MST sideband message body length check {CVE-2024-56616}
Bluetooth: L2CAP: Fix not validating setsockopt user input {CVE-2024-35965}
Bluetooth: L2CAP: uninitialized variables in l2cap_sock_setsockopt() {CVE-2024-35965}
usb: cdc-acm: Check control transfer buffer size before access {CVE-2025-21704}
igb: Fix potential invalid memory access in igb_init_module() {CVE-2024-52332}
vfio/pci: Properly hide first-in-list PCIe extended capability {CVE-2024-53214}
Bluetooth: RFCOMM: Fix not validating setsockopt user input {CVE-2024-35966}
Bluetooth: SCO: Fix not validating setsockopt user input {CVE-2024-35966}
media: stk1160: fix bounds checking in stk1160_copy_video() {CVE-2024-38621}
net/sched: Always pass notifications when child class becomes empty {CVE-2025-38350}
sch_htb: make htb_qlen_notify() idempotent {CVE-2025-37932}
codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() {CVE-2025-37798}
sch_qfq: make qfq_qlen_notify() idempotent {CVE-2025-38350}
sch_drr: make drr_qlen_notify() idempotent {CVE-2025-38350}
sch_htb: make htb_deactivate() idempotent {CVE-2025-38350}
sch_cbq: make cbq_qlen_notify() idempotent {CVE-2025-38000}
inet: fully convert sk->sk_rx_dst to RCU rules {CVE-2021-47103}
scsi: mpt3sas: Fix use-after-free warning {CVE-2022-48695}
scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory {CVE-2024-40901}
vmci: prevent speculation leaks by sanitizing event in event_deliver() {CVE-2024-39499}
USB: core: Fix hang in usb_kill_urb by adding memory barriers {CVE-2022-48760}
nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells {CVE-2021-47497}
virtio-net: Add validation for used length {CVE-2021-47352}
watchdog: Fix possible use-after-free by calling del_timer_sync() {CVE-2021-47321}
scsi: qedi: Fix crash while reading debugfs attribute {CVE-2024-40978}
wifi: iwlwifi: mvm: check n_ssids before accessing the ssids {CVE-2024-40929}
wifi: iwlwifi: mvm: guard against invalid STA ID on removal {CVE-2024-36921}
mac802154: fix llsec key resources release in mac802154_llsec_key_del {CVE-2024-26961}
platform/x86: wmi: Fix opening of char device {CVE-2023-52864}
media: gspca: cpia1: shift-out-of-bounds in set_flicker {CVE-2023-52764}
wifi: mac80211: fix potential key use-after-free {CVE-2023-52530}
net: fix information leakage in /proc/net/ptype {CVE-2022-48757}
crypto: qat - resolve race condition during AER recovery {CVE-2024-26974}
perf/core: Bail out early if the request AUX area is out of bound {CVE-2023-52835}
net: ti: fix UAF in tlan_remove_one {CVE-2021-47310}
wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() {CVE-2023-52594}
net: bridge: use DEV_STATS_INC() {CVE-2023-52578}
net: add atomic_long_t to net_device_stats fields {CVE-2023-52578}
media: dvb-core: Fix use-after-free due to race at dvb_register_device() {CVE-2022-45884}
media: dvb-core: Fix use-after-free on race condition at dvb_frontend {CVE-2022-45885}
xen/gntalloc: don't use gnttab_query_foreign_access() {CVE-2022-23039}
xen/netfront: don't use gnttab_query_foreign_access() for mapped status {CVE-2022-23037}
xen/grant-table: add gnttab_try_end_foreign_access() {CVE-2022-23038}
ovl: fail on invalid uid/gid mapping at copy up {CVE-2023-0386}
ALSA: oss: Fix PCM OSS buffer allocation overflow {CVE-2022-49292}
gfs2: Fix length of holes reported at end-of-file
gfs2: Only do glock put in gfs2_create_inode for free inodes
gfs2: Fix use-after-free in gfs2_logd after withdraw
gfs2: fix use-after-free in trans_drain
gfs2: Clean up revokes on normal withdraws
GFS2: gfs2_free_extlen can return an extent that is too long
gfs2: Wipe jdata and ail1 in gfs2_journal_wipe, formerly gfs2_meta_wipe
GFS2: Refactor gfs2_remove_from_journal
GFS2: Only set PageChecked for jdata…

Record: CLSA-2025-1759431860
Updated: 2026-11-02

OSVCLSA-2025-1759431869 No score

kernel: Fix of 39 CVEs

ASoC: topology: Clean up route loading {CVE-2024-41069}
ASoC: topology: Fix references to freed memory {CVE-2024-41069}
drm/dp_mst: Fix MST sideband message body length check {CVE-2024-56616}
Bluetooth: L2CAP: Fix not validating setsockopt user input {CVE-2024-35965}
Bluetooth: L2CAP: uninitialized variables in l2cap_sock_setsockopt() {CVE-2024-35965}
usb: cdc-acm: Check control transfer buffer size before access {CVE-2025-21704}
igb: Fix potential invalid memory access in igb_init_module() {CVE-2024-52332}
vfio/pci: Properly hide first-in-list PCIe extended capability {CVE-2024-53214}
Bluetooth: RFCOMM: Fix not validating setsockopt user input {CVE-2024-35966}
Bluetooth: SCO: Fix not validating setsockopt user input {CVE-2024-35966}
media: stk1160: fix bounds checking in stk1160_copy_video() {CVE-2024-38621}
net/sched: Always pass notifications when child class becomes empty {CVE-2025-38350}
sch_htb: make htb_qlen_notify() idempotent {CVE-2025-37932}
codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() {CVE-2025-37798}
sch_qfq: make qfq_qlen_notify() idempotent {CVE-2025-38350}
sch_drr: make drr_qlen_notify() idempotent {CVE-2025-38350}
sch_htb: make htb_deactivate() idempotent {CVE-2025-38350}
sch_cbq: make cbq_qlen_notify() idempotent {CVE-2025-38000}
inet: fully convert sk->sk_rx_dst to RCU rules {CVE-2021-47103}
scsi: mpt3sas: Fix use-after-free warning {CVE-2022-48695}
scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory {CVE-2024-40901}
vmci: prevent speculation leaks by sanitizing event in event_deliver() {CVE-2024-39499}
USB: core: Fix hang in usb_kill_urb by adding memory barriers {CVE-2022-48760}
nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells {CVE-2021-47497}
virtio-net: Add validation for used length {CVE-2021-47352}
watchdog: Fix possible use-after-free by calling del_timer_sync() {CVE-2021-47321}
scsi: qedi: Fix crash while reading debugfs attribute {CVE-2024-40978}
wifi: iwlwifi: mvm: check n_ssids before accessing the ssids {CVE-2024-40929}
wifi: iwlwifi: mvm: guard against invalid STA ID on removal {CVE-2024-36921}
mac802154: fix llsec key resources release in mac802154_llsec_key_del {CVE-2024-26961}
platform/x86: wmi: Fix opening of char device {CVE-2023-52864}
media: gspca: cpia1: shift-out-of-bounds in set_flicker {CVE-2023-52764}
wifi: mac80211: fix potential key use-after-free {CVE-2023-52530}
net: fix information leakage in /proc/net/ptype {CVE-2022-48757}
crypto: qat - resolve race condition during AER recovery {CVE-2024-26974}
perf/core: Bail out early if the request AUX area is out of bound {CVE-2023-52835}
net: ti: fix UAF in tlan_remove_one {CVE-2021-47310}
wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() {CVE-2023-52594}
net: bridge: use DEV_STATS_INC() {CVE-2023-52578}
net: add atomic_long_t to net_device_stats fields {CVE-2023-52578}
media: dvb-core: Fix use-after-free due to race at dvb_register_device() {CVE-2022-45884}
media: dvb-core: Fix use-after-free on race condition at dvb_frontend {CVE-2022-45885}
xen/gntalloc: don't use gnttab_query_foreign_access() {CVE-2022-23039}
xen/netfront: don't use gnttab_query_foreign_access() for mapped status {CVE-2022-23037}
xen/grant-table: add gnttab_try_end_foreign_access() {CVE-2022-23038}
ovl: fail on invalid uid/gid mapping at copy up {CVE-2023-0386}
ALSA: oss: Fix PCM OSS buffer allocation overflow {CVE-2022-49292}
gfs2: Fix length of holes reported at end-of-file
gfs2: Only do glock put in gfs2_create_inode for free inodes
gfs2: Fix use-after-free in gfs2_logd after withdraw
gfs2: fix use-after-free in trans_drain
gfs2: Clean up revokes on normal withdraws
GFS2: gfs2_free_extlen can return an extent that is too long
gfs2: Wipe jdata and ail1 in gfs2_journal_wipe, formerly gfs2_meta_wipe
GFS2: Refactor gfs2_remove_from_journal
GFS2: Only set PageChecked for jdata…

Record: CLSA-2025-1759431869
Updated: 2026-11-02

OSVCLSA-2025-1759432250 No score

kernel: Fix of 36 CVEs

ASoC: topology: Clean up route loading {CVE-2024-41069}
ASoC: topology: Fix references to freed memory {CVE-2024-41069}
drm/dp_mst: Fix MST sideband message body length check {CVE-2024-56616}
Bluetooth: L2CAP: Fix not validating setsockopt user input {CVE-2024-35965}
Bluetooth: L2CAP: uninitialized variables in l2cap_sock_setsockopt() {CVE-2024-35965}
usb: cdc-acm: Check control transfer buffer size before access {CVE-2025-21704}
igb: Fix potential invalid memory access in igb_init_module() {CVE-2024-52332}
vfio/pci: Properly hide first-in-list PCIe extended capability {CVE-2024-53214}
Bluetooth: RFCOMM: Fix not validating setsockopt user input {CVE-2024-35966}
Bluetooth: SCO: Fix not validating setsockopt user input {CVE-2024-35966}
media: stk1160: fix bounds checking in stk1160_copy_video() {CVE-2024-38621}
inet: fully convert sk->sk_rx_dst to RCU rules {CVE-2021-47103}
scsi: mpt3sas: Fix use-after-free warning {CVE-2022-48695}
scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory {CVE-2024-40901}
vmci: prevent speculation leaks by sanitizing event in event_deliver() {CVE-2024-39499}
USB: core: Fix hang in usb_kill_urb by adding memory barriers {CVE-2022-48760}
nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells {CVE-2021-47497}
virtio-net: Add validation for used length {CVE-2021-47352}
watchdog: Fix possible use-after-free by calling del_timer_sync() {CVE-2021-47321}
scsi: qedi: Fix crash while reading debugfs attribute {CVE-2024-40978}
wifi: iwlwifi: mvm: check n_ssids before accessing the ssids {CVE-2024-40929}
wifi: iwlwifi: mvm: guard against invalid STA ID on removal {CVE-2024-36921}
mac802154: fix llsec key resources release in mac802154_llsec_key_del {CVE-2024-26961}
platform/x86: wmi: Fix opening of char device {CVE-2023-52864}
media: gspca: cpia1: shift-out-of-bounds in set_flicker {CVE-2023-52764}
wifi: mac80211: fix potential key use-after-free {CVE-2023-52530}
net: fix information leakage in /proc/net/ptype {CVE-2022-48757}
crypto: qat - resolve race condition during AER recovery {CVE-2024-26974}
perf/core: Bail out early if the request AUX area is out of bound {CVE-2023-52835}
net: ti: fix UAF in tlan_remove_one {CVE-2021-47310}
wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() {CVE-2023-52594}
net: bridge: use DEV_STATS_INC() {CVE-2023-52578}
net: add atomic_long_t to net_device_stats fields {CVE-2023-52578}
media: dvb-core: Fix use-after-free due to race at dvb_register_device() {CVE-2022-45884}
media: dvb-core: Fix use-after-free on race condition at dvb_frontend {CVE-2022-45885}
xen/gntalloc: don't use gnttab_query_foreign_access() {CVE-2022-23039}
xen/netfront: don't use gnttab_query_foreign_access() for mapped status {CVE-2022-23037}
xen/grant-table: add gnttab_try_end_foreign_access() {CVE-2022-23038}
ovl: fail on invalid uid/gid mapping at copy up {CVE-2023-0386}
ALSA: oss: Fix PCM OSS buffer allocation overflow {CVE-2022-49292}

Record: CLSA-2025-1759432250
Updated: 2026-11-02

OSVCLSA-2025-1759866837 No score

kernel: Fix of 44 CVEs

mm: zswap: fix missing folio cleanup in writeback race path {CVE-2024-26832}
mm: fix zswap writeback race condition {CVE-2023-53178}
dm array: fix releasing a faulty array block twice in dm_array_cursor_end {CVE-2024-57929}
drm/dp_mst: Fix MST sideband message body length check {CVE-2024-56616}
gpio: davinci: Validate the obtained number of IRQs {CVE-2024-42092}
ASoC: topology: Fix references to freed memory {CVE-2024-41069}
Bluetooth: hci_sock: Fix not validating setsockopt user input {CVE-2024-35963}
Bluetooth: ISO: Fix not validating setsockopt user input {CVE-2024-35964}
Bluetooth: L2CAP: Fix not validating setsockopt user input {CVE-2024-35965}
Bluetooth: RFCOMM: Fix not validating setsockopt user input {CVE-2024-35966}
Bluetooth: SCO: Fix not validating setsockopt user input {CVE-2024-35967}
dma-direct: Leak pages on dma_set_decrypted() failure {CVE-2024-35939}
wifi: mwifiex: avoid possible NULL skb pointer dereference {CVE-2023-53384}
md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request {CVE-2023-53380}
icmp6: Fix null-ptr-deref of ip6_null_entry->rt6i_idev in icmp6_dev(). {CVE-2023-53343}
thermal: core: prevent potential string overflow {CVE-2023-52868}
drm/amdkfd: Fix shift out-of-bounds issue {CVE-2023-52816}
drm/vkms: Fix null-ptr-deref in vkms_release() {CVE-2022-50369}
nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells {CVE-2021-47497}
net/mlx5: Fix tainted pointer delete is case of flow rules creation fail {CVE-2024-40940}
ipvlan: add ipvlan_route_v6_outbound() helper {CVE-2023-52796}
platform/x86: wmi: Fix opening of char device {CVE-2023-52864}
platform/x86: wmi: remove unnecessary initializations
perf/core: Bail out early if the request AUX area is out of bound {CVE-2023-52835}
do_change_type(): refuse to operate on unmounted/not ours mounts {CVE-2025-38498}
net_sched: hfsc: Address reentrant enqueue adding class to eltree twice {CVE-2025-38001}
usb: cdc-acm: Check control transfer buffer size before access {CVE-2025-21704}
vfio/pci: Properly hide first-in-list PCIe extended capability {CVE-2024-53214}
igb: Fix potential invalid memory access in igb_init_module() {CVE-2024-52332}
kobject_uevent: Fix OOB access within zap_modalias_env() {CVE-2024-42292}
mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required() {CVE-2023-53401}
net: usb: smsc75xx: Limit packet length to skb->len {CVE-2023-53125}
drm/radeon: possible buffer overflow {CVE-2023-52867}
media: gspca: cpia1: shift-out-of-bounds in set_flicker {CVE-2023-52764}
wifi: mac80211_hwsim: Fix possible NULL dereference {CVE-2023-53209}
vmci: prevent speculation leaks by sanitizing event in event_deliver() {CVE-2024-39499}
wifi: iwlwifi: fw: fix memory leak in debugfs {CVE-2023-53422}
drm/amdgpu: fix memory leak in mes self test {CVE-2023-53370}
skbuff: skb_segment, Call zero copy functions before using skbuff frags {CVE-2023-53354}
md/raid10: fix leak of 'r10bio->remaining' for recovery {CVE-2023-53299}
nfsd: call op_release, even when op_func returns an error {CVE-2023-53241}
ppdev: Add an error check in register_device {CVE-2024-36015}
wifi: cfg80211: check A-MSDU format more carefully {CVE-2024-35937}
net: bridge: use DEV_STATS_INC() {CVE-2023-52578}
net: add atomic_long_t to net_device_stats fields {CVE-2024-26882}

Record: CLSA-2025-1759866837
Updated: 2026-11-02

OSVCLSA-2025-1760983231 No score

Fix of 25 CVEs

CVE-url: https://ubuntu.com/security/CVE-2024-41069
- ASoC: topology: Fix references to freed memory
- ASoC: topology: Do not assign fields that are already set
- ASoC: topology: Clean up route loading
Bionic update: upstream stable patchset 2021-06-11 (LP: #1931740) // CVE- url: https://ubuntu.com/security/CVE-2021-47149
- net: fujitsu: fix potential null-ptr-deref
CVE-url: https://ubuntu.com/security/CVE-2024-35849
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
CVE-url: https://ubuntu.com/security/CVE-2025-38618
- vsock: Do not allow binding to VMADDR_PORT_ANY
CVE-url: https://ubuntu.com/security/CVE-2025-38617
- net/packet: fix a race in packet_set_ring() and packet_notifier()
CVE-url: https://ubuntu.com/security/CVE-2025-21796
- nfsd: clear acl_access/acl_default after releasing them
Bionic update: upstream stable patchset 2021-08-03 (LP: #1938824) // CVE- url: https://ubuntu.com/security/CVE-2021-47319
- virtio-blk: Fix memory leak among suspend/resume procedure
Focal update: v5.4.285 upstream stable release (LP: #2089233) // CVE-2024-49924 // CVE-url: https://ubuntu.com/security/CVE-2024-49924
- fbdev: pxafb: Fix possible use after free in pxafb_task()
CVE-url: https://ubuntu.com/security/CVE-2022-48827
- NFSD: Fix the behavior of READ near OFFSET_MAX
Bionic update: upstream stable patchset 2022-03-04 (LP: #1963717) // CVE- url: https://ubuntu.com/security/CVE-2022-48737
- ASoC: ops: Reject out of bounds values in snd_soc_put_volsw()
- ASoC: ops: Reject out of bounds values in snd_soc_put_volsw_sx()
Focal update: v5.4.261 upstream stable release (LP: #2049049) // CVE-url: https://ubuntu.com/security/CVE-2023-52868
- thermal: core: prevent potential string overflow
Bionic update: upstream stable patchset 2022-05-17 (LP: #1973831) // CVE- url: https://ubuntu.com/security/CVE-2021-47633
- ath5k: fix OOB in ath5k_eeprom_read_pcal_info_5111
CVE-url: https://ubuntu.com/security/CVE-2021-47391
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
Bionic update: upstream stable patchset 2021-12-03 (LP: #1953202) // CVE- url: https://ubuntu.com/security/CVE-2021-47475
- comedi: vmk80xx: fix transfer-buffer overflows
- comedi: vmk80xx: fix bulk-buffer overflow
- comedi: vmk80xx: fix bulk and interrupt message timeouts
Bionic update: upstream stable patchset 2021-11-12 (LP: #1950816) // CVE- url: https://ubuntu.com/security/CVE-2021-47497
- nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells
CVE-2024-35965 // CVE-url: https://ubuntu.com/security/CVE-2024-35965
- Bluetooth: L2CAP: uninitialized variables in l2cap_sock_setsockopt()
- Bluetooth: L2CAP: Fix not validating setsockopt user input
CVE-url: https://ubuntu.com/security/CVE-2024-56616
- drm/dp_mst: Fix MST sideband message body length check
Bionic update: upstream stable patchset 2022-07-25 (LP: #1982782) // CVE- url: https://ubuntu.com/security/CVE-2022-49407
- dlm: fix plock invalid read
Focal update: v5.4.188 upstream stable release (LP: #1971496) // CVE-url: https://ubuntu.com/security/CVE-2022-49292
- ALSA: oss: Fix PCM OSS buffer allocation overflow
Focal update: v5.4.262 upstream stable release (LP: #2049069) // CVE-url: https://ubuntu.com/security/CVE-2023-52835
- perf/core: Bail out early if the request AUX area is out of bound
Focal update: v5.4.262 upstream stable release (LP: #2049069) // CVE-url: https://ubuntu.com/security/CVE-2023-52764
- media: gspca: cpia1: shift-out-of-bounds in set_flicker
CVE-2024-35966 // CVE-url: https://ubuntu.com/security/CVE-2024-35966
- Bluetooth: RFCOMM: Fix not validating setsockopt user input
CVE-2024-35967 // CVE-url: https://ubuntu.com/security/CVE-2024-35966
- Bluetooth:…

Record: CLSA-2025-1760983231
Updated: 2026-11-02

OSVRLSA-2024:7001 No score

Important: kernel-rt security update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.
Security Fix(es):

Record: RLSA-2024:7001
Updated: 2026-11-02

OSVSUSE-SU-2024:1979-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-26921: Preserve kabi for sk_buff (bsc#1223138).
CVE-2022-48686: Fix UAF when detecting digest errors (bsc#1223948). Update blacklist.conf: remove entry
CVE-2021-47074: Fixed memory leak in nvme_loop_create_ctrl() (bsc#1220854).
CVE-2021-47378: Destroy cm id before destroy qp to avoid use after free (bsc#1225201).
CVE-2022-48697: Fix a use-after-free (bsc#1223922). Update blacklist.conf: drop entry from it
CVE-2024-26846: Do not wait in vain when unloading module (bsc#1223023).
CVE-2021-47496: Fix flipped sign in tls_err_abort() calls (bsc#1225354)
CVE-2023-42755: Check user supplied offsets (bsc#1215702).
CVE-2023-52664: Eliminate double free in error handling logic (bsc#1224747).
CVE-2023-52796: Add ipvlan_route_v6_outbound() helper (bsc#1224930).
CVE-2021-47246: Fix page reclaim for dead peer hairpin (bsc#1224831).
CVE-2023-52732: Blocklist the kclient when receiving corrupted snap trace (bsc#1225222 CVE-2023-52732).
CVE-2024-35936: Add missing mutex_unlock in btrfs_relocate_sys_chunks() (bsc#1224644)
CVE-2021-47548: Fixed a possible array out-of=bounds (bsc#1225506)
CVE-2024-36029: Pervent access to suspended controller (bsc#1225708 CVE-2024-36029)
CVE-2024-26625: Call sock_orphan() at release time (bsc#1221086)
CVE-2021-47352: Add validation for used length (bsc#1225124).
CVE-2023-52698: Fixed memory leak in netlbl_calipso_add_pass() (bsc#1224621)
CVE-2021-47431: Fix gart.bo pin_count leak (bsc#1225390).
CVE-2024-35935: Handle path ref underflow in header iterate_inode_ref() (bsc#1224645)
CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223084).
CVE-2021-47423: Fix file release memory leak (bsc#1225366).
CVE-2022-48710: Fix a possible null pointer dereference (bsc#1225230).
CVE-2021-47497: Fixed shift-out-of-bound (UBSAN) with byte size cells (bsc#1225355).
CVE-2024-35932: Do not check if plane->state->fb == state->fb (bsc#1224650).
CVE-2021-47500: Fixed trigger reference couting (bsc#1225360).
CVE-2024-35809: Drain runtime-idle callbacks before driver removal (bsc#1224738).
CVE-2021-47383: Fiedx out-of-bound vmalloc access in imageblit (bsc#1225208).
CVE-2021-47511: Fixed negative period/buffer sizes (bsc#1225411).
CVE-2021-47509: Limit the period size to 16MB (bsc#1225409).
CVE-2024-35877: Fixed VM_PAT handling in COW mappings (bsc#1224525).
CVE-2024-35982: Avoid infinite loop trying to resize local TT (bsc#1224566)
CVE-2024-35969: Fixed race condition between ipv6_get_ifaddr and ipv6_del_addr (bsc#1224580).
CVE-2021-47277: Avoid speculation-based attacks from out-of-range memslot accesses (bsc#1224960, CVE-2021-47277).
CVE-2024-35791: Flush pages under kvm->lock to fix UAF in svm_register_enc_region() (bsc#1224725).
CVE-2021-47401: Fix stack information leak (bsc#1225242).
CVE-2023-52867: Fix possible buffer overflow (bsc#1225009).
CVE-2023-52821: Fix a possible null pointer dereference (bsc#1225022).
CVE-2021-47265: Verify port when creating flow rule (bsc#1224957)
CVE-2021-47362: Update intermediate power state for SI (bsc#1225153).
CVE-2021-47361: Fix error handling in mcb_alloc_bus() (bsc#1225151).
CVE-2023-52864: Fix opening of char device (bsc#1225132).
CVE-2022-48708: Fix potential NULL dereference (bsc#1224942).
CVE-2024-35944: Fixed memcpy() run-time warning in dg_dispatch_as_host() (bsc#1224648).
CVE-2021-47238: Fix memory leak in ip_mc_add1_src (bsc#1224847)
CVE-2023-52730: Fix possible resource leaks in some error paths (bsc#1224956).
CVE-2021-47355: Fix possible use-after-free in nicstar_cleanup() (bsc#1225141).
CVE-2021-47245: Fix out of bounds when parsing TCP options (bsc#1224838)
CVE-2024-35878: Prevent NULL pointer dereference in vsnprintf() (bsc#1224671).
CVE-2023-52747: Restore allocated resources on failed copyout (bsc#1224931) -…

Record: SUSE-SU-2024:1979-1
Updated: 2026-11-02

OSVSUSE-SU-2024:1983-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-26921: Preserve kabi for sk_buff (bsc#1223138).
CVE-2022-48686: Fix UAF when detecting digest errors (bsc#1223948).
CVE-2021-47074: Fixed memory leak in nvme_loop_create_ctrl() (bsc#1220854).
CVE-2021-47378: Destroy cm id before destroy qp to avoid use after free (bsc#1225201).
CVE-2022-48697: Fix a use-after-free (bsc#1223922).
CVE-2024-26846: Do not wait in vain when unloading module (bsc#1223023).
CVE-2021-47496: Fix flipped sign in tls_err_abort() calls (bsc#1225354)
CVE-2023-42755: Check user supplied offsets (bsc#1215702).
CVE-2023-52664: Eliminate double free in error handling logic (bsc#1224747).
CVE-2023-52796: Add ipvlan_route_v6_outbound() helper (bsc#1224930).
CVE-2021-47246: Fix page reclaim for dead peer hairpin (bsc#1224831).
CVE-2023-52732: Blocklist the kclient when receiving corrupted snap trace (bsc#1225222).
CVE-2024-35936: Add missing mutex_unlock in btrfs_relocate_sys_chunks() (bsc#1224644)
CVE-2021-47548: Fixed a possible array out-of-bounds (bsc#1225506)
CVE-2024-36029: Pervent access to suspended controller (bsc#1225708)
CVE-2024-26625: Call sock_orphan() at release time (bsc#1221086)
CVE-2021-47352: Add validation for used length (bsc#1225124).
CVE-2023-52698: Fixed memory leak in netlbl_calipso_add_pass() (bsc#1224621)
CVE-2021-47431: Fix gart.bo pin_count leak (bsc#1225390).
CVE-2024-35935: Handle path ref underflow in header iterate_inode_ref() (bsc#1224645)
CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223084).
CVE-2021-47423: Fix file release memory leak (bsc#1225366).
CVE-2022-48710: Fix a possible null pointer dereference (bsc#1225230).
CVE-2021-47497: Fixed shift-out-of-bound (UBSAN) with byte size cells (bsc#1225355).
CVE-2024-35932: Do not check if plane->state->fb == state->fb (bsc#1224650).
CVE-2021-47500: Fixed trigger reference couting (bsc#1225360).
CVE-2024-35809: Drain runtime-idle callbacks before driver removal (bsc#1224738).
CVE-2021-47383: Fiedx out-of-bound vmalloc access in imageblit (bsc#1225208).
CVE-2021-47511: Fixed negative period/buffer sizes (bsc#1225411).
CVE-2021-47509: Limit the period size to 16MB (bsc#1225409).
CVE-2024-35877: Fixed VM_PAT handling in COW mappings (bsc#1224525).
CVE-2024-35982: Avoid infinite loop trying to resize local TT (bsc#1224566)
CVE-2024-35969: Fixed race condition between ipv6_get_ifaddr and ipv6_del_addr (bsc#1224580).
CVE-2021-47277: Avoid speculation-based attacks from out-of-range memslot accesses (bsc#1224960).
CVE-2024-35791: Flush pages under kvm->lock to fix UAF in svm_register_enc_region() (bsc#1224725).
CVE-2021-47401: Fix stack information leak (bsc#1225242).
CVE-2023-52867: Fix possible buffer overflow (bsc#1225009).
CVE-2023-52821: Fix a possible null pointer dereference (bsc#1225022).
CVE-2021-47265: Verify port when creating flow rule (bsc#1224957)
CVE-2021-47362: Update intermediate power state for SI (bsc#1225153).
CVE-2021-47361: Fix error handling in mcb_alloc_bus() (bsc#1225151).
CVE-2023-52864: Fix opening of char device (bsc#1225132).
CVE-2022-48708: Fix potential NULL dereference (bsc#1224942).
CVE-2024-35944: Fixed memcpy() run-time warning in dg_dispatch_as_host() (bsc#1224648).
CVE-2021-47238: Fix memory leak in ip_mc_add1_src (bsc#1224847)
CVE-2023-52730: Fix possible resource leaks in some error paths (bsc#1224956).
CVE-2021-47355: Fix possible use-after-free in nicstar_cleanup() (bsc#1225141).
CVE-2021-47245: Fix out of bounds when parsing TCP options (bsc#1224838)
CVE-2024-35878: Prevent NULL pointer dereference in vsnprintf() (bsc#1224671).
CVE-2023-52747: Restore allocated resources on failed copyout (bsc#1224931)
CVE-2021-47249: Fix memory leak in rds_recvmsg (bsc#1224880)
CVE-2021-47397: Break out if skb_header_pointer returns NULL in…

Record: SUSE-SU-2024:1983-1
Updated: 2026-11-02

OSVSUSE-SU-2024:2008-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2021-47548: Fixed a possible array out-of=bounds (bsc#1225506)
CVE-2022-48689: Fixed data-race in lru_add_fn (bsc#1223959)
CVE-2022-48691: Fixed memory leak in netfilter (bsc#1223961)
CVE-2023-1829: Fixed a use-after-free vulnerability in the control index filter (tcindex) (bsc#1210335).
CVE-2023-42755: Check user supplied offsets (bsc#1215702).
CVE-2023-52586: Fixed mutex lock in control vblank irq (bsc#1221081).
CVE-2023-52618: Fixed string overflow in block/rnbd-srv (bsc#1221615).
CVE-2023-52656: Dropped any code related to SCM_RIGHTS (bsc#1224187).
CVE-2023-52660: Fiedx IRQ handling due to shared interrupts (bsc#1224443).
CVE-2023-52664: Eliminate double free in error handling logic (bsc#1224747).
CVE-2023-52671: Fixed hang/underflow when transitioning to ODM4:1 (bsc#1224729).
CVE-2023-52674: Add clamp() in scarlett2_mixer_ctl_put() (bsc#1224727).
CVE-2023-52680: Fixed missing error checks to *_ctl_get() (bsc#1224608).
CVE-2023-52692: Fixed missing error check to scarlett2_usb_set_config() (bsc#1224628).
CVE-2023-52698: Fixed memory leak in netlbl_calipso_add_pass() (CVE-2023-52698 bsc#1224621)
CVE-2023-52746: Prevent potential spectre v1 gadget in xfrm_xlate32_attr() (bsc#1225114)
CVE-2023-52757: Fixed potential deadlock when releasing mids (bsc#1225548).
CVE-2023-52795: Fixed use after free in vhost_vdpa_probe() (bsc#1225085).
CVE-2023-52796: Add ipvlan_route_v6_outbound() helper (bsc#1224930).
CVE-2023-52807: Fixed out-of-bounds access may occur when coalesce info is read via debugfs (bsc#1225097).
CVE-2023-52860: Fixed null pointer dereference in hisi_hns3 (bsc#1224936).
CVE-2024-2201: Fixed information leak in x86/BHI (bsc#1217339).
CVE-2024-26643: Fixed mark set as dead when unbinding anonymous set with timeout (bsc#1221829).
CVE-2024-26679: Fixed read sk->sk_family once in inet_recv_error() (bsc#1222385).
CVE-2024-26692: Fixed regression in writes when non-standard maximum write size negotiated (bsc#1222464).
CVE-2024-26715: Fixed NULL pointer dereference in dwc3_gadget_suspend (bsc#1222561).
CVE-2024-26742: Fixed disable_managed_interrupts (git-fixes bsc#1222608).
CVE-2024-26775: Fixed potential deadlock at set_capacity (bsc#1222627).
CVE-2024-26791: Fixed properly validate device names in btrfs (bsc#1222793)
CVE-2024-26822: Set correct id, uid and cruid for multiuser automounts (bsc#1223011).
CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223084).
CVE-2024-26876: Fixed crash on irq during probe (bsc#1223119).
CVE-2024-26900: Fixed kmemleak of rdev->serial (bsc#1223046).
CVE-2024-26915: Reset IH OVERFLOW_CLEAR bit (bsc#1223207)
CVE-2024-26919: Fixed debugfs directory leak (bsc#1223847).
CVE-2024-26921: Preserve kabi for sk_buff (bsc#1223138).
CVE-2024-26925: Release mutex after nft_gc_seq_end from abort path (bsc#1223390).
CVE-2024-26928: Fixed potential UAF in cifs_debug_files_proc_show() (bsc#1223532).
CVE-2024-26939: Fixed UAF on destroy against retire race (bsc#1223679).
CVE-2024-26958: Fixed UAF in direct writes (bsc#1223653).
CVE-2024-27042: Fixed potential out-of-bounds access in 'amdgpu_discovery_reg_base_init()' (bsc#1223823).
CVE-2024-27395: Fixed Use-After-Free in ovs_ct_exit (bsc#1224098).
CVE-2024-27396: Fixed Use-After-Free in gtp_dellink (bsc#1224096).
CVE-2024-27398: Fixed use-after-free bugs caused by sco_sock_timeout (bsc#1224174).
CVE-2024-27401: Fixed user_length taken into account when fetching packet contents (bsc#1224181).
CVE-2024-27417: Fixed potential 'struct net' leak in inet6_rtm_getaddr() (bsc#1224721)
CVE-2024-27419: Fixed data-races around sysctl_net_busy_read (bsc#1224759)
CVE-2024-27431: Fixed Zero-initialise xdp_rxq_info struct before running XDP program (bsc#1224718).
CVE-2024-35791: Flush pages under…

Record: SUSE-SU-2024:2008-1
Updated: 2026-11-02

OSVSUSE-SU-2024:2010-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP3 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-26921: Preserve kabi for sk_buff (bsc#1223138).
CVE-2021-47378: Destroy cm id before destroy qp to avoid use after free (bsc#1225201).
CVE-2021-47496: Fix flipped sign in tls_err_abort() calls (bsc#1225354)
CVE-2021-47402: Protect fl_walk() with rcu (bsc#1225301)
CVE-2022-48673: kABI workarounds for struct smc_link (bsc#1223934).
CVE-2023-52871: Handle a second device without data corruption (bsc#1225534)
CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223084).
CVE-2021-47497: Fixed shift-out-of-bound (UBSAN) with byte size cells (bsc#1225355).
CVE-2021-47500: Fixed trigger reference couting (bsc#1225360).
CVE-2024-27413: Fixed incorrect allocation size (bsc#1224438).
CVE-2021-47383: Fiedx out-of-bound vmalloc access in imageblit (bsc#1225208).
CVE-2021-47511: Fixed negative period/buffer sizes (bsc#1225411).
CVE-2023-52840: Fix use after free in rmi_unregister_function() (bsc#1224928).
CVE-2021-47261: Fix initializing CQ fragments buffer (bsc#1224954)
CVE-2021-47254: Fix use-after-free in gfs2_glock_shrink_scan (bsc#1224888).
CVE-2024-27398: Fixed use-after-free bugs caused by sco_sock_timeout (bsc#1224174).
CVE-2024-26929: Fixed double free of fcport (bsc#1223715).
CVE-2024-26930: Fixed double free of the ha->vp_map pointer (bsc#1223626).
CVE-2023-52655: Check packet for fixup for true limit (bsc#1217169).
CVE-2023-4244: Fixed a use-after-free in the nf_tables component, which could be exploited to achieve local privilege escalation (bsc#1215420).
CVE-2023-1829: Fixed a use-after-free vulnerability in the control index filter (tcindex) (bsc#1210335).
CVE-2023-52686: Fix a null pointer in opal_event_init() (bsc#1065729).

The following non-security bugs were fixed:

af_unix: annote lockless accesses to unix_tot_inflight & gc_in_progress (bsc#1223384).
af_unix: Do not use atomic ops for unix_sk(sk)->inflight (bsc#1223384).
af_unix: Replace BUG_ON() with WARN_ON_ONCE() (bsc#1223384).
btrfs: do not start relocation until in progress drops are done (bsc#1222251).
btrfs: do not start relocation until in progress drops are done (bsc#1222251).
cifs: add missing spinlock around tcon refcount (bsc#1213476).
cifs: avoid dup prefix path in dfs_get_automount_devname() (bsc#1213476).
cifs: avoid race conditions with parallel reconnects (bsc#1213476).
cifs: avoid re-lookups in dfs_cache_find() (bsc#1213476).
cifs: avoid use of global locks for high contention data (bsc#1213476).
cifs: check only tcon status on tcon related functions (bsc#1213476).
cifs: do all necessary checks for credits within or before locking (bsc#1213476).
cifs: do not block in dfs_cache_noreq_update_tgthint() (bsc#1213476).
cifs: do not refresh cached referrals from unactive mounts (bsc#1213476).
cifs: do not take exclusive lock for updating target hints (bsc#1213476).
cifs: fix confusing debug message (bsc#1213476).
cifs: fix missing unload_nls() in smb2_reconnect() (bsc#1213476).
cifs: fix potential deadlock in cache_refresh_path() (bsc#1213476).
cifs: fix refresh of cached referrals (bsc#1213476).
cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (bsc#1213476).
cifs: fix source pathname comparison of dfs supers (bsc#1213476).
cifs: fix status checks in cifs_tree_connect (bsc#1213476).
cifs: fix use-after-free bug in refresh_cache_worker() (bsc#1213476).
cifs: get rid of dns resolve worker (bsc#1213476).
cifs: get rid of mount options string parsing (bsc#1213476).
cifs: handle cache lookup errors different than -ENOENT (bsc#1213476).
cifs: ignore ipc reconnect failures during dfs failover (bsc#1213476).
cifs: match even the scope id for ipv6 addresses (bsc#1213476).
cifs: optimize reconnect of nested links (bsc#1213476).
cifs: prevent data race in smb2_reconnect() (bsc#1213476). -…

Record: SUSE-SU-2024:2010-1
Updated: 2026-11-02

OSVSUSE-SU-2024:2011-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-0639: Fixed a denial-of-service vulnerability due to a deadlock found in sctp_auto_asconf_init in net/sctp/socket.c (bsc#1218917).
CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223084).
CVE-2024-26840: Fixed a memory leak in cachefiles_add_cache() (bsc#1222976).
CVE-2024-26852: Fixed use-after-free in ip6_route_mpath_notify() (bsc#1223057).
CVE-2024-26862: Fixed packet annotate data-races around ignore_outgoing (bsc#1223111).
CVE-2024-26921: Preserve kabi for sk_buff (bsc#1223138).
CVE-2024-26925: Release mutex after nft_gc_seq_end from abort path (bsc#1223390).
CVE-2024-26928: Fixed potential UAF in cifs_debug_files_proc_show() (bsc#1223532).
CVE-2024-26929: Fixed double free of fcport (bsc#1223715).
CVE-2024-26930: Fixed double free of the ha->vp_map pointer (bsc#1223626).
CVE-2024-27398: Fixed use-after-free bugs caused by sco_sock_timeout (bsc#1224174).
CVE-2024-27413: Fixed incorrect allocation size (bsc#1224438).
CVE-2024-35817: Set gtt bound flag in amdgpu_ttm_gart_bind (bsc#1224736).
CVE-2024-35863: Fixed potential UAF in is_valid_oplock_break() (bsc#1224763).
CVE-2024-35867: Fixed potential UAF in cifs_stats_proc_show() (bsc#1224664).
CVE-2024-35868: Fixed potential UAF in cifs_stats_proc_write() (bsc#1224678).
CVE-2024-35904: Fixed dereference of garbage after mount failure (bsc#1224494).
CVE-2024-35905: Fixed int overflow for stack access size (bsc#1224488).
CVE-2024-36926: Fixed LPAR panics during boot up with a frozen PE (bsc#1222011).

The following non-security bugs were fixed:

af_unix: annote lockless accesses to unix_tot_inflight & gc_in_progress (bsc#1223384).
af_unix: Do not use atomic ops for unix_sk(sk)->inflight (bsc#1223384).
af_unix: Replace BUG_ON() with WARN_ON_ONCE() (bsc#1223384).
filemap: remove use of wait bookmarks (bsc#1224085).
idpf: extend tx watchdog timeout (bsc#1224137).
ipvs: Fix checksumming on GSO of SCTP packets (bsc#1221958)
powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt (bsc#1221645 ltc#205739 bsc#1223191).
powerpc/kasan: Do not instrument non-maskable or raw interrupts (bsc#1223191).
powerpc/powernv: Add a null pointer check in opal_event_init() (bsc#1065729).
powerpc/powernv: Add a null pointer check to scom_debug_init_one() (bsc#1194869).
powerpc/pseries/iommu: IOMMU table is not initialized for kdump over SR-IOV (bsc#1220492 ltc#205270).
powerpc/pseries/vio: Do not return ENODEV if node or compatible missing (bsc#1220783).
powerpc: Refactor verification of MSR_RI (bsc#1223191).
supported.conf: support tcp_dctcp module (jsc#PED-8111)

Record: SUSE-SU-2024:2011-1
Updated: 2026-11-02

OSVSUSE-SU-2024:2019-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-35924: Limit read size on v1.2 (bsc#1224657).
CVE-2024-26921: Preserve kabi for sk_buff (bsc#1223138).
CVE-2024-35976: Validate user input for XDP_{UMEM|COMPLETION}_FILL_RING (bsc#1224575).
CVE-2024-36938: Fixed NULL pointer dereference in sk_psock_skb_ingress_enqueue (bsc#1225761).
CVE-2024-35905: Fixed int overflow for stack access size (bsc#1224488).
CVE-2023-52795: Fixed use after free in vhost_vdpa_probe() (bsc#1225085).
CVE-2024-35998: Fixed lock ordering potential deadlock in cifs_sync_mid_result (bsc#1224549).
CVE-2023-52757: Fixed potential deadlock when releasing mids (bsc#1225548).
CVE-2021-47548: Fixed a possible array out-of=bounds (bsc#1225506)
CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223084).
CVE-2024-26822: Set correct id, uid and cruid for multiuser automounts (bsc#1223011).
CVE-2024-35999: Fixed missing lock when picking channel (bsc#1224550).
CVE-2024-35861: Fixed potential UAF in cifs_signal_cifsd_for_reconnect() (bsc#1224766).
CVE-2024-35862: Fixed potential UAF in smb2_is_network_name_deleted() (bsc#1224764).
CVE-2024-35863: Fixed potential UAF in is_valid_oplock_break() (bsc#1224763).
CVE-2024-35865: Fixed potential UAF in smb2_is_valid_oplock_break() (bsc#1224668).
CVE-2024-35864: Fixed potential UAF in smb2_is_valid_lease_break() (bsc#1224765).
CVE-2024-35867: Fixed potential UAF in cifs_stats_proc_show() (bsc#1224664).
CVE-2024-35868: Fixed potential UAF in cifs_stats_proc_write() (bsc#1224678).
CVE-2024-35866: Fixed potential UAF in cifs_dump_full_key() (bsc#1224667).
CVE-2024-26928: Fixed potential UAF in cifs_debug_files_proc_show() (bsc#1223532).
CVE-2024-35869: Guarantee refcounted children from parent session (bsc#1224679).
CVE-2024-35870: Fixed UAF in smb2_reconnect_server() (bsc#1224672).
CVE-2024-26692: Fixed regression in writes when non-standard maximum write size negotiated (bsc#1222464).
CVE-2024-26925: Release mutex after nft_gc_seq_end from abort path (bsc#1223390).
CVE-2023-42755: Check user supplied offsets (bsc#1215702).
CVE-2024-35964: Fixed not validating setsockopt user input (bsc#1224581).
CVE-2023-52698: Fixed memory leak in netlbl_calipso_add_pass() (CVE-2023-52698 bsc#1224621)
CVE-2023-52664: Eliminate double free in error handling logic (bsc#1224747).
CVE-2023-52807: Fixed out-of-bounds access may occur when coalesce info is read via debugfs (bsc#1225097).
CVE-2024-27431: Fixed Zero-initialise xdp_rxq_info struct before running XDP program (bsc#1224718).
CVE-2024-35860: struct bpf_link and bpf_link_ops kABI workaround (bsc#1224531).
CVE-2023-52671: Fixed hang/underflow when transitioning to ODM4:1 (bsc#1224729).
CVE-2024-35799: Prevent crash when disable stream (bsc#1224740).
CVE-2024-35951: Fixed the error path in panfrost_mmu_map_fault_addr() (bsc#1224701).
CVE-2024-27413: Fixed incorrect allocation size (bsc#1224438).
CVE-2024-35817: Set gtt bound flag in amdgpu_ttm_gart_bind (bsc#1224736).
CVE-2024-35877: Fixed VM_PAT handling in COW mappings (bsc#1224525).
CVE-2024-35969: Fixed race condition between ipv6_get_ifaddr and ipv6_del_addr (bsc#1224580).
CVE-2023-52746: Prevent potential spectre v1 gadget in xfrm_xlate32_attr() (bsc#1225114)
CVE-2024-35872: Fixed GUP-fast succeeding on secretmem folios (bsc#1224530).
CVE-2024-35852: Fixed memory leak when canceling rehash work (bsc#1224502).
CVE-2024-36006: Fixed incorrect list API usage (bsc#1224541).
CVE-2024-36007: Fixed warning during rehash (bsc#1224543).
CVE-2024-35885: Stop interface during shutdown (bsc#1224519).
CVE-2024-35907: Call request_irq() after NAPI initialized (bsc#1224492).
CVE-2023-52796: Add ipvlan_route_v6_outbound() helper (bsc#1224930).
CVE-2024-35939: Fixed leak pages on dma_set_decrypted() failure…

Record: SUSE-SU-2024:2019-1
Updated: 2026-11-02

OSVSUSE-SU-2024:2183-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP2 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2021-47497: Fixed shift-out-of-bound (UBSAN) with byte size cells (bsc#1225355).
CVE-2021-47500: Fixed trigger reference couting (bsc#1225360).
CVE-2021-47383: Fiedx out-of-bound vmalloc access in imageblit (bsc#1225208).
CVE-2021-47511: Fixed negative period/buffer sizes (bsc#1225411).
CVE-2024-27398: Fixed use-after-free bugs caused by sco_sock_timeout (bsc#1224174).
CVE-2023-4244: Fixed a use-after-free in the nf_tables component, which could be exploited to achieve local privilege escalation (bsc#1215420).
CVE-2023-4244: Fixed a use-after-free in the nf_tables component, which could be exploited to achieve local privilege escalation (bsc#1215420).
CVE-2023-1829: Fixed a use-after-free vulnerability in the control index filter (tcindex) (bsc#1210335).
CVE-2021-47378: Destroy cm id before destroy qp to avoid use after free (bsc#1225201).
CVE-2021-47496: Fix flipped sign in tls_err_abort() calls (bsc#1225354)
CVE-2021-47402: Protect fl_walk() with rcu (bsc#1225301)
CVE-2022-48673: kABI workarounds for struct smc_link (bsc#1223934).
CVE-2023-52871: Handle a second device without data corruption (bsc#1225534)
CVE-2024-26828: Fix underflow in parse_server_interfaces() (bsc#1223084).
CVE-2024-27413: Fix incorrect allocation size (bsc#1224438).
CVE-2023-52840: Fix use after free in rmi_unregister_function() (bsc#1224928).
CVE-2021-47261: Fix initializing CQ fragments buffer (bsc#1224954)
CVE-2021-47254: Fix use-after-free in gfs2_glock_shrink_scan (bsc#1224888).
CVE-2023-52655: Check packet for fixup for true limit (bsc#1217169).
CVE-2023-52686: Fix a null pointer in opal_event_init() (bsc#1065729).

The following non-security bugs were fixed:

NFC: nxp: add NXP1002 (bsc#1185589).
PCI: rpaphp: Add MODULE_DESCRIPTION (bsc#1176869 ltc#188243).
af_unix: Do not use atomic ops for unix_sk(sk)->inflight (bsc#1223384).
af_unix: Replace BUG_ON() with WARN_ON_ONCE() (bsc#1223384).
af_unix: annote lockless accesses to unix_tot_inflight & gc_in_progress (bsc#1223384).
btrfs: do not start relocation until in progress drops are done (bsc#1222251).
md: Replace snprintf with scnprintf (git-fixes).
netfilter: nf_tables: GC transaction race with abort path (git-fixes).
netfilter: nf_tables: GC transaction race with netns dismantle (git-fixes).
netfilter: nf_tables: defer gc run if previous batch is still pending (git-fixes).
netfilter: nf_tables: fix GC transaction races with netns and netlink event exit path (git-fixes).
netfilter: nf_tables: fix kdoc warnings after gc rework (git-fixes).
netfilter: nf_tables: fix memleak when more than 255 elements expired (git-fixes).
netfilter: nf_tables: mark newset as dead on transaction abort (git-fixes).
netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout (git-fixes).
netfilter: nf_tables: nft_set_rbtree: fix spurious insertion failure (git-fixes).
netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path (git-fixes).
netfilter: nf_tables: skip dead set elements in netlink dump (git-fixes).
netfilter: nf_tables: use correct lock to protect gc_list (git-fixes).
netfilter: nft_set_hash: try later when GC hits EAGAIN on iteration (git-fixes).
netfilter: nft_set_rbtree: Add missing expired checks (git-fixes).
netfilter: nft_set_rbtree: Detect partial overlap with start endpoint match (git-fixes).
netfilter: nft_set_rbtree: Detect partial overlaps on insertion (git-fixes).
netfilter: nft_set_rbtree: Do not account for expired elements on insertion (git-fixes).
netfilter: nft_set_rbtree: Drop spurious condition for overlap detection on insertion (git-fixes).
netfilter: nft_set_rbtree: Handle outcomes of tree rotations in overlap detection (git-fixes).
netfilter: nft_set_rbtree: Introduce and use nft_rbtree_interval_start() (git-fixes). -…

Record: SUSE-SU-2024:2183-1
Updated: 2026-11-02

OSVSUSE-SU-2024:2184-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2021-46933: Fixed possible underflow in ffs_data_clear() (bsc#1220487).
CVE-2021-46955: Fixed an out-of-bounds read with openvswitch, when fragmenting IPv4 packets (bsc#1220513).
CVE-2021-47074: Fixed memory leak in nvme_loop_create_ctrl() (bsc#1220854).
CVE-2021-47113: Abort btrfs rename_exchange if we fail to insert the second ref (bsc#1221543).
CVE-2021-47131: Fixed a use-after-free after the TLS device goes down and up (bsc#1221545).
CVE-2021-47206: Check return value after calling platform_get_resource() (bsc#1222894).
CVE-2021-47238: Fixed memory leak in ip_mc_add1_src (bsc#1224847)
CVE-2021-47245: Fixed out of bounds when parsing TCP options (bsc#1224838)
CVE-2021-47246: Fixed page reclaim for dead peer hairpin (CVE-2021-47246 bsc#1224831).
CVE-2021-47249: Fixed memory leak in rds_recvmsg (bsc#1224880)
CVE-2021-47250: Fixed memory leak in netlbl_cipsov4_add_std (bsc#1224827)
CVE-2021-47265: Verify port when creating flow rule (bsc#1224957)
CVE-2021-47277: Avoid speculation-based attacks from out-of-range memslot accesses (bsc#1224960).
CVE-2021-47281: Fixed race of snd_seq_timer_open() (bsc#1224983).
CVE-2021-47334: Fixed two use after free in ibmasm_init_one (bsc#1225112).
CVE-2021-47352: Add validation for used length (bsc#1225124).
CVE-2021-47355: Fixed possible use-after-free in nicstar_cleanup() (bsc#1225141).
CVE-2021-47357: Fixed possible use-after-free in ia_module_exit() (bsc#1225144).
CVE-2021-47361: Fixed error handling in mcb_alloc_bus() (bsc#1225151).
CVE-2021-47362: Update intermediate power state for SI (bsc#1225153).
CVE-2021-47378: Destroy cm id before destroy qp to avoid use after free (bsc#1225201).
CVE-2021-47383: Fixed out-of-bound vmalloc access in imageblit (bsc#1225208).
CVE-2021-47397: Break out if skb_header_pointer returns NULL in sctp_rcv_ootb (bsc#1225082)
CVE-2021-47401: Fixed stack information leak (bsc#1225242).
CVE-2021-47423: Fixed file release memory leak (bsc#1225366).
CVE-2021-47431: Fixed gart.bo pin_count leak (bsc#1225390).
CVE-2021-47469: Add SPI fix commit to be ignored (bsc#1225347)
CVE-2021-47483: Fixed possible double-free in regcache_rbtree_exit() (bsc#1224907).
CVE-2021-47496: Fix flipped sign in tls_err_abort() calls (bsc#1225354)
CVE-2021-47497: Fixed shift-out-of-bound (UBSAN) with byte size cells (bsc#1225355).
CVE-2021-47500: Fixed trigger reference couting (bsc#1225360).
CVE-2021-47509: Limit the period size to 16MB (bsc#1225409).
CVE-2021-47511: Fixed negative period/buffer sizes (bsc#1225411).
CVE-2021-47548: Fixed a possible array out-of=bounds (bsc#1225506)
CVE-2022-48672: Fixed off-by-one error in unflatten_dt_nodes() (CVE-2022-48672 bsc#1223931).
CVE-2022-48686: Fixed UAF when detecting digest errors (bsc#1223948).
CVE-2022-48697: Fixed a use-after-free (bsc#1223922).
CVE-2022-48702: Fixed out of bounds access in snd_emu10k1_pcm_channel_alloc() (bsc#1223923).
CVE-2022-48704: Add a force flush to delay work when radeon (bsc#1223932)
CVE-2022-48708: Fixed potential NULL dereference (bsc#1224942).
CVE-2022-48710: Fixed a possible null pointer dereference (bsc#1225230).
CVE-2023-1829: Fixed a use-after-free vulnerability in the control index filter (tcindex) (bsc#1210335).
CVE-2023-42755: Check user supplied offsets (bsc#1215702).
CVE-2023-52586: Fixed mutex lock in control vblank irq (bsc#1221081).
CVE-2023-52655: Check packet for fixup for true limit (bsc#1217169).
CVE-2023-52664: Eliminate double free in error handling logic (bsc#1224747).
CVE-2023-52691: Fixed a double-free in si_dpm_init (bsc#1224607).
CVE-2023-52698: Fixed memory leak in netlbl_calipso_add_pass() (bsc#1224621)
CVE-2023-52730: Fixed possible resource leaks in some error paths (bsc#1224956).
CVE-2023-52732: Blocklist the kclient when…

Record: SUSE-SU-2024:2184-1
Updated: 2026-11-02

OSVSUSE-SU-2024:2185-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2021-47378: Destroy cm id before destroy qp to avoid use after free (bsc#1225201).
CVE-2021-47496: Fix flipped sign in tls_err_abort() calls (bsc#1225354)
CVE-2021-47402: Protect fl_walk() with rcu (bsc#1225301)
CVE-2022-48673: kABI workarounds for struct smc_link (bsc#1223934).
CVE-2023-52871: Handle a second device without data corruption (bsc#1225534)
CVE-2024-26828: Fix underflow in parse_server_interfaces() (bsc#1223084).
CVE-2021-47497: Fixed shift-out-of-bound (UBSAN) with byte size cells (bsc#1225355).
CVE-2021-47500: Fixed trigger reference couting (bsc#1225360).
CVE-2024-27413: Fix incorrect allocation size (bsc#1224438).
CVE-2021-47383: Fiedx out-of-bound vmalloc access in imageblit (bsc#1225208).
CVE-2021-47511: Fixed negative period/buffer sizes (bsc#1225411).
CVE-2023-52840: Fix use after free in rmi_unregister_function() (bsc#1224928).
CVE-2021-47261: Fix initializing CQ fragments buffer (bsc#1224954)
CVE-2021-47254: Fix use-after-free in gfs2_glock_shrink_scan (bsc#1224888).
CVE-2024-27398: Fixed use-after-free bugs caused by sco_sock_timeout (bsc#1224174).
CVE-2024-26921: Preserve kabi for sk_buff (bsc#1223138).
CVE-2023-52655: Check packet for fixup for true limit (bsc#1217169).
CVE-2023-4244: Fixed a use-after-free in the nf_tables component, which could be exploited to achieve local privilege escalation (bsc#1215420).
CVE-2023-4244: Fixed a use-after-free in the nf_tables component, which could be exploited to achieve local privilege escalation (bsc#1215420).
CVE-2023-1829: Fixed a use-after-free vulnerability in the control index filter (tcindex) (bsc#1210335).
CVE-2023-52686: Fix a null pointer in opal_event_init() (bsc#1065729).

The following non-security bugs were fixed:

af_unix: annote lockless accesses to unix_tot_inflight & gc_in_progress (bsc#1223384).
af_unix: Do not use atomic ops for unix_sk(sk)->inflight (bsc#1223384).
af_unix: Replace BUG_ON() with WARN_ON_ONCE() (bsc#1223384).
btrfs: do not start relocation until in progress drops are done (bsc#1222251).
btrfs: do not start relocation until in progress drops are done (bsc#1222251).
cifs: add missing spinlock around tcon refcount (bsc#1213476).
cifs: avoid dup prefix path in dfs_get_automount_devname() (bsc#1213476).
cifs: avoid race conditions with parallel reconnects (bsc#1213476).
cifs: avoid re-lookups in dfs_cache_find() (bsc#1213476).
cifs: avoid use of global locks for high contention data (bsc#1213476).
cifs: check only tcon status on tcon related functions (bsc#1213476).
cifs: do all necessary checks for credits within or before locking (bsc#1213476).
cifs: do not block in dfs_cache_noreq_update_tgthint() (bsc#1213476).
cifs: do not refresh cached referrals from unactive mounts (bsc#1213476).
cifs: do not take exclusive lock for updating target hints (bsc#1213476).
cifs: fix confusing debug message (bsc#1213476).
cifs: fix missing unload_nls() in smb2_reconnect() (bsc#1213476).
cifs: fix potential deadlock in cache_refresh_path() (bsc#1213476).
cifs: fix refresh of cached referrals (bsc#1213476).
cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (bsc#1213476).
cifs: fix source pathname comparison of dfs supers (bsc#1213476).
cifs: fix status checks in cifs_tree_connect (bsc#1213476).
cifs: fix use-after-free bug in refresh_cache_worker() (bsc#1213476).
cifs: get rid of dns resolve worker (bsc#1213476).
cifs: get rid of mount options string parsing (bsc#1213476).
cifs: handle cache lookup errors different than -ENOENT (bsc#1213476).
cifs: ignore ipc reconnect failures during dfs failover (bsc#1213476).
cifs: match even the scope id for ipv6 addresses (bsc#1213476).
cifs: optimize reconnect of nested links (bsc#1213476).
cifs: prevent data race in smb2_reconnect() (bsc#1213476). -…

Record: SUSE-SU-2024:2185-1
Updated: 2026-11-02

OSVSUSE-SU-2024:2189-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-35905: Fixed int overflow for stack access size (bsc#1224488).
CVE-2024-26828: Fix underflow in parse_server_interfaces() (bsc#1223084).
CVE-2024-35863: Fix potential UAF in is_valid_oplock_break() (bsc#1224763).
CVE-2024-35867: Fix potential UAF in cifs_stats_proc_show() (bsc#1224664).
CVE-2024-35868: Fix potential UAF in cifs_stats_proc_write() (bsc#1224678).
CVE-2024-26928: Fix potential UAF in cifs_debug_files_proc_show() (bsc#1223532).
CVE-2024-36926: Fixed LPAR panics during boot up with a frozen PE (bsc#1222011).
CVE-2024-26925: Release mutex after nft_gc_seq_end from abort path (bsc#1223390).
CVE-2024-27413: Fix incorrect allocation size (bsc#1224438).
CVE-2024-35817: Set gtt bound flag in amdgpu_ttm_gart_bind (bsc#1224736).
CVE-2024-35904: Avoid dereference of garbage after mount failure (bsc#1224494).
CVE-2024-26929: Fixed double free of fcport (bsc#1223715).
CVE-2024-27398: Fixed use-after-free bugs caused by sco_sock_timeout (bsc#1224174).
CVE-2024-26930: Fixed double free of the ha->vp_map pointer (bsc#1223626).
CVE-2024-26840: Fixed a memory leak in cachefiles_add_cache() (bsc#1222976).
CVE-2024-26862: Fixed packet annotate data-races around ignore_outgoing (bsc#1223111).
CVE-2024-0639: Fixed a denial-of-service vulnerability due to a deadlock found in sctp_auto_asconf_init in net/sctp/socket.c (bsc#1218917).
CVE-2024-26921: Preserve kabi for sk_buff (bsc#1223138).
CVE-2024-26852: Fixed use-after-free in ip6_route_mpath_notify() (bsc#1223057).
CVE-2023-1829: Fixed a use-after-free vulnerability in the control index filter (tcindex) (bsc#1210335).

The following non-security bugs were fixed:

af_unix: Do not use atomic ops for unix_sk(sk)->inflight (bsc#1223384).
af_unix: Replace BUG_ON() with WARN_ON_ONCE() (bsc#1223384).
af_unix: annote lockless accesses to unix_tot_inflight & gc_in_progress (bsc#1223384).
filemap: remove use of wait bookmarks (bsc#1224085).
idpf: extend tx watchdog timeout (bsc#1224137).
ipvs: Fix checksumming on GSO of SCTP packets (bsc#1221958)
powerpc/kasan: Do not instrument non-maskable or raw interrupts (bsc#1223191).
powerpc/powernv: Add a null pointer check in opal_event_init() (bsc#1065729).
powerpc/powernv: Add a null pointer check to scom_debug_init_one() (bsc#1194869).
powerpc/pseries/iommu: IOMMU table is not initialized for kdump over SR-IOV (bsc#1220492 ltc#205270).
powerpc/pseries/vio: Do not return ENODEV if node or compatible missing (bsc#1220783).
powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt (bsc#1221645 ltc#205739 bsc#1223191).
powerpc: Refactor verification of MSR_RI (bsc#1223191).

Record: SUSE-SU-2024:2189-1
Updated: 2026-11-02

OSVSUSE-SU-2024:2190-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2021-47548: Fixed a possible array out-of=bounds (bsc#1225506)
CVE-2022-48689: Fixed data-race in lru_add_fn (bsc#1223959)
CVE-2022-48691: Fixed memory leak in netfilter (bsc#1223961)
CVE-2023-1829: Fixed a use-after-free vulnerability in the control index filter (tcindex) (bsc#1210335).
CVE-2023-42755: Check user supplied offsets (bsc#1215702).
CVE-2023-52586: Fixed mutex lock in control vblank irq (bsc#1221081).
CVE-2023-52618: Fixed string overflow in block/rnbd-srv (bsc#1221615).
CVE-2023-52655: Check packet for fixup for true limit (bsc#1217169).
CVE-2023-52656: Dropped any code related to SCM_RIGHTS (bsc#1224187).
CVE-2023-52660: Fiedx IRQ handling due to shared interrupts (bsc#1224443).
CVE-2023-52664: Eliminate double free in error handling logic (bsc#1224747).
CVE-2023-52671: Fixed hang/underflow when transitioning to ODM4:1 (bsc#1224729).
CVE-2023-52674: Add clamp() in scarlett2_mixer_ctl_put() (bsc#1224727).
CVE-2023-52680: Fixed missing error checks to *_ctl_get() (bsc#1224608).
CVE-2023-52692: Fixed missing error check to scarlett2_usb_set_config() (bsc#1224628).
CVE-2023-52698: Fixed memory leak in netlbl_calipso_add_pass() (bsc#1224621)
CVE-2023-52746: Prevent potential spectre v1 gadget in xfrm_xlate32_attr() (bsc#1225114)
CVE-2023-52757: Fixed potential deadlock when releasing mids (bsc#1225548).
CVE-2023-52795: Fixed use after free in vhost_vdpa_probe() (bsc#1225085).
CVE-2023-52796: Add ipvlan_route_v6_outbound() helper (bsc#1224930).
CVE-2023-52807: Fixed out-of-bounds access may occur when coalesce info is read via debugfs (bsc#1225097).
CVE-2023-52860: Fixed null pointer dereference in hisi_hns3 (bsc#1224936).
CVE-2023-6531: Fixed a use-after-free flaw due to a race problem in the unix garbage collector's deletion of SKB races with unix_stream_read_generic()on the socket that the SKB is queued on (bsc#1218447).
CVE-2024-2201: Fixed information leak in x86/BHI (bsc#1217339).
CVE-2024-26643: Fixed mark set as dead when unbinding anonymous set with timeout (bsc#1221829).
CVE-2024-26679: Fixed read sk->sk_family once in inet_recv_error() (bsc#1222385).
CVE-2024-26692: Fixed regression in writes when non-standard maximum write size negotiated (bsc#1222464).
CVE-2024-26700: Fixed drm/amd/display: Fix MST Null Ptr for RV (bsc#1222870)
CVE-2024-26715: Fixed NULL pointer dereference in dwc3_gadget_suspend (bsc#1222561).
CVE-2024-26742: Fixed disable_managed_interrupts (git-fixes bsc#1222608).
CVE-2024-26775: Fixed potential deadlock at set_capacity (bsc#1222627).
CVE-2024-26777: Error out if pixclock equals zero in fbdev/sis (bsc#1222765)
CVE-2024-26778: Error out if pixclock equals zero in fbdev/savage (bsc#1222770)
CVE-2024-26791: Fixed properly validate device names in btrfs (bsc#1222793)
CVE-2024-26822: Set correct id, uid and cruid for multiuser automounts (bsc#1223011).
CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223084).
CVE-2024-26839: Fixed a memleak in init_credit_return() (bsc#1222975)
CVE-2024-26876: Fixed crash on irq during probe (bsc#1223119).
CVE-2024-26900: Fixed kmemleak of rdev->serial (bsc#1223046).
CVE-2024-26907: Fixed a fortify source warning while accessing Eth segment in mlx5 (bsc#1223203).
CVE-2024-26915: Reset IH OVERFLOW_CLEAR bit (bsc#1223207)
CVE-2024-26919: Fixed debugfs directory leak (bsc#1223847).
CVE-2024-26921: Preserve kabi for sk_buff (bsc#1223138).
CVE-2024-26925: Release mutex after nft_gc_seq_end from abort path (bsc#1223390).
CVE-2024-26928: Fixed potential UAF in cifs_debug_files_proc_show() (bsc#1223532).
CVE-2024-26939: Fixed UAF on destroy against retire race (bsc#1223679).
CVE-2024-26958: Fixed UAF in direct writes (bsc#1223653).
CVE-2024-27042: Fixed potential out-of-bounds access in…

Record: SUSE-SU-2024:2190-1
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`bpftool` AlmaLinux:8	before 4.18.0-553.22.1.el8_10	4.18.0-553.22.1.el8_10
`kernel` AlmaLinux:8	before 4.18.0-553.22.1.el8_10	4.18.0-553.22.1.el8_10
`kernel-abi-stablelists` AlmaLinux:8	before 4.18.0-553.22.1.el8_10	4.18.0-553.22.1.el8_10
`kernel-core` AlmaLinux:8	before 4.18.0-553.22.1.el8_10	4.18.0-553.22.1.el8_10
`kernel-cross-headers` AlmaLinux:8	before 4.18.0-553.22.1.el8_10	4.18.0-553.22.1.el8_10
`kernel-debug` AlmaLinux:8	before 4.18.0-553.22.1.el8_10	4.18.0-553.22.1.el8_10
`kernel-debug-core` AlmaLinux:8	before 4.18.0-553.22.1.el8_10	4.18.0-553.22.1.el8_10
`kernel-debug-devel` AlmaLinux:8	before 4.18.0-553.22.1.el8_10	4.18.0-553.22.1.el8_10
`kernel-debug-modules` AlmaLinux:8	before 4.18.0-553.22.1.el8_10	4.18.0-553.22.1.el8_10
`kernel-debug-modules-extra` AlmaLinux:8	before 4.18.0-553.22.1.el8_10	4.18.0-553.22.1.el8_10

Show 290 moreShow less

Affected packages
Package	Affected	Fixed
`kernel-devel` AlmaLinux:8	before 4.18.0-553.22.1.el8_10	4.18.0-553.22.1.el8_10
`kernel-doc` AlmaLinux:8	before 4.18.0-553.22.1.el8_10	4.18.0-553.22.1.el8_10
`kernel-headers` AlmaLinux:8	before 4.18.0-553.22.1.el8_10	4.18.0-553.22.1.el8_10
`kernel-modules` AlmaLinux:8	before 4.18.0-553.22.1.el8_10	4.18.0-553.22.1.el8_10
`kernel-modules-extra` AlmaLinux:8	before 4.18.0-553.22.1.el8_10	4.18.0-553.22.1.el8_10
`kernel-tools` AlmaLinux:8	before 4.18.0-553.22.1.el8_10	4.18.0-553.22.1.el8_10
`kernel-tools-libs` AlmaLinux:8	before 4.18.0-553.22.1.el8_10	4.18.0-553.22.1.el8_10
`kernel-tools-libs-devel` AlmaLinux:8	before 4.18.0-553.22.1.el8_10	4.18.0-553.22.1.el8_10
`kernel-zfcpdump` AlmaLinux:8	before 4.18.0-553.22.1.el8_10	4.18.0-553.22.1.el8_10
`kernel-zfcpdump-core` AlmaLinux:8	before 4.18.0-553.22.1.el8_10	4.18.0-553.22.1.el8_10
`kernel-zfcpdump-devel` AlmaLinux:8	before 4.18.0-553.22.1.el8_10	4.18.0-553.22.1.el8_10
`kernel-zfcpdump-modules` AlmaLinux:8	before 4.18.0-553.22.1.el8_10	4.18.0-553.22.1.el8_10
`kernel-zfcpdump-modules-extra` AlmaLinux:8	before 4.18.0-553.22.1.el8_10	4.18.0-553.22.1.el8_10
`perf` AlmaLinux:8	before 4.18.0-553.22.1.el8_10	4.18.0-553.22.1.el8_10
`python3-perf` AlmaLinux:8	before 4.18.0-553.22.1.el8_10	4.18.0-553.22.1.el8_10
`kernel-rt` AlmaLinux:8	before 4.18.0-553.22.1.rt7.363.el8_10	4.18.0-553.22.1.rt7.363.el8_10
`kernel-rt-core` AlmaLinux:8	before 4.18.0-553.22.1.rt7.363.el8_10	4.18.0-553.22.1.rt7.363.el8_10
`kernel-rt-debug` AlmaLinux:8	before 4.18.0-553.22.1.rt7.363.el8_10	4.18.0-553.22.1.rt7.363.el8_10
`kernel-rt-debug-core` AlmaLinux:8	before 4.18.0-553.22.1.rt7.363.el8_10	4.18.0-553.22.1.rt7.363.el8_10
`kernel-rt-debug-devel` AlmaLinux:8	before 4.18.0-553.22.1.rt7.363.el8_10	4.18.0-553.22.1.rt7.363.el8_10
`kernel-rt-debug-kvm` AlmaLinux:8	before 4.18.0-553.22.1.rt7.363.el8_10	4.18.0-553.22.1.rt7.363.el8_10
`kernel-rt-debug-modules` AlmaLinux:8	before 4.18.0-553.22.1.rt7.363.el8_10	4.18.0-553.22.1.rt7.363.el8_10
`kernel-rt-debug-modules-extra` AlmaLinux:8	before 4.18.0-553.22.1.rt7.363.el8_10	4.18.0-553.22.1.rt7.363.el8_10
`kernel-rt-devel` AlmaLinux:8	before 4.18.0-553.22.1.rt7.363.el8_10	4.18.0-553.22.1.rt7.363.el8_10
`kernel-rt-kvm` AlmaLinux:8	before 4.18.0-553.22.1.rt7.363.el8_10	4.18.0-553.22.1.rt7.363.el8_10
`kernel-rt-modules` AlmaLinux:8	before 4.18.0-553.22.1.rt7.363.el8_10	4.18.0-553.22.1.rt7.363.el8_10
`kernel-rt-modules-extra` AlmaLinux:8	before 4.18.0-553.22.1.rt7.363.el8_10	4.18.0-553.22.1.rt7.363.el8_10
`bpftool` TuxCare:CentOS:8.5	before 4.18.0-348.7.1.el8_5.tuxcare.els20	4.18.0-348.7.1.el8_5.tuxcare.els20
`kernel` TuxCare:CentOS:8.5	before 4.18.0-348.7.1.el8_5.tuxcare.els20	4.18.0-348.7.1.el8_5.tuxcare.els20
`kernel-core` TuxCare:CentOS:8.5	before 4.18.0-348.7.1.el8_5.tuxcare.els20	4.18.0-348.7.1.el8_5.tuxcare.els20
`kernel-cross-headers` TuxCare:CentOS:8.5	before 4.18.0-348.7.1.el8_5.tuxcare.els20	4.18.0-348.7.1.el8_5.tuxcare.els20
`kernel-debug` TuxCare:CentOS:8.5	before 4.18.0-348.7.1.el8_5.tuxcare.els20	4.18.0-348.7.1.el8_5.tuxcare.els20
`kernel-debug-core` TuxCare:CentOS:8.5	before 4.18.0-348.7.1.el8_5.tuxcare.els20	4.18.0-348.7.1.el8_5.tuxcare.els20
`kernel-debug-devel` TuxCare:CentOS:8.5	before 4.18.0-348.7.1.el8_5.tuxcare.els20	4.18.0-348.7.1.el8_5.tuxcare.els20
`kernel-debug-modules` TuxCare:CentOS:8.5	before 4.18.0-348.7.1.el8_5.tuxcare.els20	4.18.0-348.7.1.el8_5.tuxcare.els20
`kernel-debug-modules-extra` TuxCare:CentOS:8.5	before 4.18.0-348.7.1.el8_5.tuxcare.els20	4.18.0-348.7.1.el8_5.tuxcare.els20
`kernel-debug-modules-internal` TuxCare:CentOS:8.5	before 4.18.0-348.7.1.el8_5.tuxcare.els20	4.18.0-348.7.1.el8_5.tuxcare.els20
`kernel-devel` TuxCare:CentOS:8.5	before 4.18.0-348.7.1.el8_5.tuxcare.els20	4.18.0-348.7.1.el8_5.tuxcare.els20
`kernel-headers` TuxCare:CentOS:8.5	before 4.18.0-348.7.1.el8_5.tuxcare.els20	4.18.0-348.7.1.el8_5.tuxcare.els20
`kernel-ipaclones-internal` TuxCare:CentOS:8.5	before 4.18.0-348.7.1.el8_5.tuxcare.els20	4.18.0-348.7.1.el8_5.tuxcare.els20
`kernel-modules` TuxCare:CentOS:8.5	before 4.18.0-348.7.1.el8_5.tuxcare.els20	4.18.0-348.7.1.el8_5.tuxcare.els20
`kernel-modules-extra` TuxCare:CentOS:8.5	before 4.18.0-348.7.1.el8_5.tuxcare.els20	4.18.0-348.7.1.el8_5.tuxcare.els20
`kernel-modules-internal` TuxCare:CentOS:8.5	before 4.18.0-348.7.1.el8_5.tuxcare.els20	4.18.0-348.7.1.el8_5.tuxcare.els20
`kernel-selftests-internal` TuxCare:CentOS:8.5	before 4.18.0-348.7.1.el8_5.tuxcare.els20	4.18.0-348.7.1.el8_5.tuxcare.els20
`kernel-tools` TuxCare:CentOS:8.5	before 4.18.0-348.7.1.el8_5.tuxcare.els20	4.18.0-348.7.1.el8_5.tuxcare.els20
`kernel-tools-libs` TuxCare:CentOS:8.5	before 4.18.0-348.7.1.el8_5.tuxcare.els20	4.18.0-348.7.1.el8_5.tuxcare.els20
`kernel-tools-libs-devel` TuxCare:CentOS:8.5	before 4.18.0-348.7.1.el8_5.tuxcare.els20	4.18.0-348.7.1.el8_5.tuxcare.els20
`perf` TuxCare:CentOS:8.5	before 4.18.0-348.7.1.el8_5.tuxcare.els20	4.18.0-348.7.1.el8_5.tuxcare.els20
`python3-perf` TuxCare:CentOS:8.5	before 4.18.0-348.7.1.el8_5.tuxcare.els20	4.18.0-348.7.1.el8_5.tuxcare.els20
`bpftool` TuxCare:CentOS:8.4	before 4.18.0-305.25.1.el8_4.tuxcare.els20	4.18.0-305.25.1.el8_4.tuxcare.els20
`kernel` TuxCare:CentOS:8.4	before 4.18.0-305.25.1.el8_4.tuxcare.els20	4.18.0-305.25.1.el8_4.tuxcare.els20
`kernel-core` TuxCare:CentOS:8.4	before 4.18.0-305.25.1.el8_4.tuxcare.els20	4.18.0-305.25.1.el8_4.tuxcare.els20
`kernel-cross-headers` TuxCare:CentOS:8.4	before 4.18.0-305.25.1.el8_4.tuxcare.els20	4.18.0-305.25.1.el8_4.tuxcare.els20
`kernel-debug` TuxCare:CentOS:8.4	before 4.18.0-305.25.1.el8_4.tuxcare.els20	4.18.0-305.25.1.el8_4.tuxcare.els20
`kernel-debug-core` TuxCare:CentOS:8.4	before 4.18.0-305.25.1.el8_4.tuxcare.els20	4.18.0-305.25.1.el8_4.tuxcare.els20
`kernel-debug-devel` TuxCare:CentOS:8.4	before 4.18.0-305.25.1.el8_4.tuxcare.els20	4.18.0-305.25.1.el8_4.tuxcare.els20
`kernel-debug-modules` TuxCare:CentOS:8.4	before 4.18.0-305.25.1.el8_4.tuxcare.els20	4.18.0-305.25.1.el8_4.tuxcare.els20
`kernel-debug-modules-extra` TuxCare:CentOS:8.4	before 4.18.0-305.25.1.el8_4.tuxcare.els20	4.18.0-305.25.1.el8_4.tuxcare.els20
`kernel-debug-modules-internal` TuxCare:CentOS:8.4	before 4.18.0-305.25.1.el8_4.tuxcare.els20	4.18.0-305.25.1.el8_4.tuxcare.els20
`kernel-devel` TuxCare:CentOS:8.4	before 4.18.0-305.25.1.el8_4.tuxcare.els20	4.18.0-305.25.1.el8_4.tuxcare.els20
`kernel-headers` TuxCare:CentOS:8.4	before 4.18.0-305.25.1.el8_4.tuxcare.els20	4.18.0-305.25.1.el8_4.tuxcare.els20
`kernel-ipaclones-internal` TuxCare:CentOS:8.4	before 4.18.0-305.25.1.el8_4.tuxcare.els20	4.18.0-305.25.1.el8_4.tuxcare.els20
`kernel-modules` TuxCare:CentOS:8.4	before 4.18.0-305.25.1.el8_4.tuxcare.els20	4.18.0-305.25.1.el8_4.tuxcare.els20
`kernel-modules-extra` TuxCare:CentOS:8.4	before 4.18.0-305.25.1.el8_4.tuxcare.els20	4.18.0-305.25.1.el8_4.tuxcare.els20
`kernel-modules-internal` TuxCare:CentOS:8.4	before 4.18.0-305.25.1.el8_4.tuxcare.els20	4.18.0-305.25.1.el8_4.tuxcare.els20
`kernel-selftests-internal` TuxCare:CentOS:8.4	before 4.18.0-305.25.1.el8_4.tuxcare.els20	4.18.0-305.25.1.el8_4.tuxcare.els20
`kernel-tools` TuxCare:CentOS:8.4	before 4.18.0-305.25.1.el8_4.tuxcare.els20	4.18.0-305.25.1.el8_4.tuxcare.els20
`kernel-tools-libs` TuxCare:CentOS:8.4	before 4.18.0-305.25.1.el8_4.tuxcare.els20	4.18.0-305.25.1.el8_4.tuxcare.els20
`kernel-tools-libs-devel` TuxCare:CentOS:8.4	before 4.18.0-305.25.1.el8_4.tuxcare.els20	4.18.0-305.25.1.el8_4.tuxcare.els20
`perf` TuxCare:CentOS:8.4	before 4.18.0-305.25.1.el8_4.tuxcare.els20	4.18.0-305.25.1.el8_4.tuxcare.els20
`python3-perf` TuxCare:CentOS:8.4	before 4.18.0-305.25.1.el8_4.tuxcare.els20	4.18.0-305.25.1.el8_4.tuxcare.els20
`bpftool` TuxCare:CentOS-Stream:8	before 4.18.0-553.6.1.el8_10.tuxcare.els3	4.18.0-553.6.1.el8_10.tuxcare.els3
`kernel` TuxCare:CentOS-Stream:8	before 4.18.0-553.6.1.el8_10.tuxcare.els3	4.18.0-553.6.1.el8_10.tuxcare.els3
`kernel-core` TuxCare:CentOS-Stream:8	before 4.18.0-553.6.1.el8_10.tuxcare.els3	4.18.0-553.6.1.el8_10.tuxcare.els3
`kernel-cross-headers` TuxCare:CentOS-Stream:8	before 4.18.0-553.6.1.el8_10.tuxcare.els3	4.18.0-553.6.1.el8_10.tuxcare.els3
`kernel-debug` TuxCare:CentOS-Stream:8	before 4.18.0-553.6.1.el8_10.tuxcare.els3	4.18.0-553.6.1.el8_10.tuxcare.els3
`kernel-debug-core` TuxCare:CentOS-Stream:8	before 4.18.0-553.6.1.el8_10.tuxcare.els3	4.18.0-553.6.1.el8_10.tuxcare.els3
`kernel-debug-devel` TuxCare:CentOS-Stream:8	before 4.18.0-553.6.1.el8_10.tuxcare.els3	4.18.0-553.6.1.el8_10.tuxcare.els3
`kernel-debug-modules` TuxCare:CentOS-Stream:8	before 4.18.0-553.6.1.el8_10.tuxcare.els3	4.18.0-553.6.1.el8_10.tuxcare.els3
`kernel-debug-modules-extra` TuxCare:CentOS-Stream:8	before 4.18.0-553.6.1.el8_10.tuxcare.els3	4.18.0-553.6.1.el8_10.tuxcare.els3
`kernel-debug-modules-internal` TuxCare:CentOS-Stream:8	before 4.18.0-553.6.1.el8_10.tuxcare.els3	4.18.0-553.6.1.el8_10.tuxcare.els3
`kernel-devel` TuxCare:CentOS-Stream:8	before 4.18.0-553.6.1.el8_10.tuxcare.els3	4.18.0-553.6.1.el8_10.tuxcare.els3
`kernel-headers` TuxCare:CentOS-Stream:8	before 4.18.0-553.6.1.el8_10.tuxcare.els3	4.18.0-553.6.1.el8_10.tuxcare.els3
`kernel-ipaclones-internal` TuxCare:CentOS-Stream:8	before 4.18.0-553.6.1.el8_10.tuxcare.els3	4.18.0-553.6.1.el8_10.tuxcare.els3
`kernel-modules` TuxCare:CentOS-Stream:8	before 4.18.0-553.6.1.el8_10.tuxcare.els3	4.18.0-553.6.1.el8_10.tuxcare.els3
`linux` Debian:12	before 5.14.16-1	5.14.16-1
`linux` Debian:13	before 5.14.16-1	5.14.16-1
`linux` Debian:14	before 5.14.16-1	5.14.16-1
`kernel` openEuler:20.03-LTS-SP1	before 4.19.90-2405.5.0.0251.oe1	4.19.90-2405.5.0.0251.oe1
`kernel` openEuler:20.03-LTS-SP4	before 4.19.90-2405.5.0.0278.oe2003sp4	4.19.90-2405.5.0.0278.oe2003sp4
`bpftool` Red Hat:enterprise_linux:8::baseos	before 0:4.18.0-553.22.1.el8_10	0:4.18.0-553.22.1.el8_10
`bpftool-debuginfo` Red Hat:enterprise_linux:8::baseos	before 0:4.18.0-553.22.1.el8_10	0:4.18.0-553.22.1.el8_10
`kernel` Red Hat:enterprise_linux:8::baseos	before 0:4.18.0-553.22.1.el8_10	0:4.18.0-553.22.1.el8_10
`kernel-abi-stablelists` Red Hat:enterprise_linux:8::baseos	before 0:4.18.0-553.22.1.el8_10	0:4.18.0-553.22.1.el8_10
`kernel-core` Red Hat:enterprise_linux:8::baseos	before 0:4.18.0-553.22.1.el8_10	0:4.18.0-553.22.1.el8_10
`kernel-debug` Red Hat:enterprise_linux:8::baseos	before 0:4.18.0-553.22.1.el8_10	0:4.18.0-553.22.1.el8_10
`kernel-debug-core` Red Hat:enterprise_linux:8::baseos	before 0:4.18.0-553.22.1.el8_10	0:4.18.0-553.22.1.el8_10
`kernel-debug-debuginfo` Red Hat:enterprise_linux:8::baseos	before 0:4.18.0-553.22.1.el8_10	0:4.18.0-553.22.1.el8_10
`kernel-debug-devel` Red Hat:enterprise_linux:8::baseos	before 0:4.18.0-553.22.1.el8_10	0:4.18.0-553.22.1.el8_10
`kernel-debug-modules` Red Hat:enterprise_linux:8::baseos	before 0:4.18.0-553.22.1.el8_10	0:4.18.0-553.22.1.el8_10
`kernel-debug-modules-extra` Red Hat:enterprise_linux:8::baseos	before 0:4.18.0-553.22.1.el8_10	0:4.18.0-553.22.1.el8_10
`kernel-debuginfo` Red Hat:enterprise_linux:8::baseos	before 0:4.18.0-553.22.1.el8_10	0:4.18.0-553.22.1.el8_10
`kernel-debuginfo-common-aarch64` Red Hat:enterprise_linux:8::baseos	before 0:4.18.0-553.22.1.el8_10	0:4.18.0-553.22.1.el8_10
`kernel-debuginfo-common-ppc64le` Red Hat:enterprise_linux:8::baseos	before 0:4.18.0-553.22.1.el8_10	0:4.18.0-553.22.1.el8_10
`kernel-debuginfo-common-s390x` Red Hat:enterprise_linux:8::baseos	before 0:4.18.0-553.22.1.el8_10	0:4.18.0-553.22.1.el8_10
`kernel-debuginfo-common-x86_64` Red Hat:enterprise_linux:8::baseos	before 0:4.18.0-553.22.1.el8_10	0:4.18.0-553.22.1.el8_10
`kernel-devel` Red Hat:enterprise_linux:8::baseos	before 0:4.18.0-553.22.1.el8_10	0:4.18.0-553.22.1.el8_10
`kernel-doc` Red Hat:enterprise_linux:8::baseos	before 0:4.18.0-553.22.1.el8_10	0:4.18.0-553.22.1.el8_10
`kernel-modules` Red Hat:enterprise_linux:8::baseos	before 0:4.18.0-553.22.1.el8_10	0:4.18.0-553.22.1.el8_10
`kernel-modules-extra` Red Hat:enterprise_linux:8::baseos	before 0:4.18.0-553.22.1.el8_10	0:4.18.0-553.22.1.el8_10
`kernel-tools` Red Hat:enterprise_linux:8::baseos	before 0:4.18.0-553.22.1.el8_10	0:4.18.0-553.22.1.el8_10
`kernel-tools-debuginfo` Red Hat:enterprise_linux:8::baseos	before 0:4.18.0-553.22.1.el8_10	0:4.18.0-553.22.1.el8_10
`kernel-tools-libs` Red Hat:enterprise_linux:8::baseos	before 0:4.18.0-553.22.1.el8_10	0:4.18.0-553.22.1.el8_10
`kernel-zfcpdump` Red Hat:enterprise_linux:8::baseos	before 0:4.18.0-553.22.1.el8_10	0:4.18.0-553.22.1.el8_10
`kernel-zfcpdump-core` Red Hat:enterprise_linux:8::baseos	before 0:4.18.0-553.22.1.el8_10	0:4.18.0-553.22.1.el8_10
`kernel-zfcpdump-debuginfo` Red Hat:enterprise_linux:8::baseos	before 0:4.18.0-553.22.1.el8_10	0:4.18.0-553.22.1.el8_10
`kernel-zfcpdump-devel` Red Hat:enterprise_linux:8::baseos	before 0:4.18.0-553.22.1.el8_10	0:4.18.0-553.22.1.el8_10
`kernel-zfcpdump-modules` Red Hat:enterprise_linux:8::baseos	before 0:4.18.0-553.22.1.el8_10	0:4.18.0-553.22.1.el8_10
`kernel-zfcpdump-modules-extra` Red Hat:enterprise_linux:8::baseos	before 0:4.18.0-553.22.1.el8_10	0:4.18.0-553.22.1.el8_10
`perf` Red Hat:enterprise_linux:8::baseos	before 0:4.18.0-553.22.1.el8_10	0:4.18.0-553.22.1.el8_10
`perf-debuginfo` Red Hat:enterprise_linux:8::baseos	before 0:4.18.0-553.22.1.el8_10	0:4.18.0-553.22.1.el8_10
`python3-perf` Red Hat:enterprise_linux:8::baseos	before 0:4.18.0-553.22.1.el8_10	0:4.18.0-553.22.1.el8_10
`python3-perf-debuginfo` Red Hat:enterprise_linux:8::baseos	before 0:4.18.0-553.22.1.el8_10	0:4.18.0-553.22.1.el8_10
`bpftool-debuginfo` Red Hat:enterprise_linux:8::crb	before 0:4.18.0-553.22.1.el8_10	0:4.18.0-553.22.1.el8_10
`kernel-debug-debuginfo` Red Hat:enterprise_linux:8::crb	before 0:4.18.0-553.22.1.el8_10	0:4.18.0-553.22.1.el8_10
`kernel-debuginfo` Red Hat:enterprise_linux:8::crb	before 0:4.18.0-553.22.1.el8_10	0:4.18.0-553.22.1.el8_10
`kernel-debuginfo-common-aarch64` Red Hat:enterprise_linux:8::crb	before 0:4.18.0-553.22.1.el8_10	0:4.18.0-553.22.1.el8_10
`kernel-debuginfo-common-ppc64le` Red Hat:enterprise_linux:8::crb	before 0:4.18.0-553.22.1.el8_10	0:4.18.0-553.22.1.el8_10
`kernel-debuginfo-common-x86_64` Red Hat:enterprise_linux:8::crb	before 0:4.18.0-553.22.1.el8_10	0:4.18.0-553.22.1.el8_10
`kernel-tools-debuginfo` Red Hat:enterprise_linux:8::crb	before 0:4.18.0-553.22.1.el8_10	0:4.18.0-553.22.1.el8_10
`kernel-tools-libs-devel` Red Hat:enterprise_linux:8::crb	before 0:4.18.0-553.22.1.el8_10	0:4.18.0-553.22.1.el8_10
`perf-debuginfo` Red Hat:enterprise_linux:8::crb	before 0:4.18.0-553.22.1.el8_10	0:4.18.0-553.22.1.el8_10
`python3-perf-debuginfo` Red Hat:enterprise_linux:8::crb	before 0:4.18.0-553.22.1.el8_10	0:4.18.0-553.22.1.el8_10
`kernel-rt` Red Hat:enterprise_linux:8::nfv	before 0:4.18.0-553.22.1.rt7.363.el8_10	0:4.18.0-553.22.1.rt7.363.el8_10
`kernel-rt-core` Red Hat:enterprise_linux:8::nfv	before 0:4.18.0-553.22.1.rt7.363.el8_10	0:4.18.0-553.22.1.rt7.363.el8_10
`kernel-rt-debug` Red Hat:enterprise_linux:8::nfv	before 0:4.18.0-553.22.1.rt7.363.el8_10	0:4.18.0-553.22.1.rt7.363.el8_10
`kernel-rt-debug-core` Red Hat:enterprise_linux:8::nfv	before 0:4.18.0-553.22.1.rt7.363.el8_10	0:4.18.0-553.22.1.rt7.363.el8_10
`kernel-rt-debug-debuginfo` Red Hat:enterprise_linux:8::nfv	before 0:4.18.0-553.22.1.rt7.363.el8_10	0:4.18.0-553.22.1.rt7.363.el8_10
`kernel-rt-debug-devel` Red Hat:enterprise_linux:8::nfv	before 0:4.18.0-553.22.1.rt7.363.el8_10	0:4.18.0-553.22.1.rt7.363.el8_10
`kernel-rt-debug-kvm` Red Hat:enterprise_linux:8::nfv	before 0:4.18.0-553.22.1.rt7.363.el8_10	0:4.18.0-553.22.1.rt7.363.el8_10
`kernel-rt-debug-modules` Red Hat:enterprise_linux:8::nfv	before 0:4.18.0-553.22.1.rt7.363.el8_10	0:4.18.0-553.22.1.rt7.363.el8_10
`kernel-rt-debug-modules-extra` Red Hat:enterprise_linux:8::nfv	before 0:4.18.0-553.22.1.rt7.363.el8_10	0:4.18.0-553.22.1.rt7.363.el8_10
`kernel-rt-debuginfo` Red Hat:enterprise_linux:8::nfv	before 0:4.18.0-553.22.1.rt7.363.el8_10	0:4.18.0-553.22.1.rt7.363.el8_10
`kernel-rt-debuginfo-common-x86_64` Red Hat:enterprise_linux:8::nfv	before 0:4.18.0-553.22.1.rt7.363.el8_10	0:4.18.0-553.22.1.rt7.363.el8_10
`kernel-rt-devel` Red Hat:enterprise_linux:8::nfv	before 0:4.18.0-553.22.1.rt7.363.el8_10	0:4.18.0-553.22.1.rt7.363.el8_10
`kernel-rt-kvm` Red Hat:enterprise_linux:8::nfv	before 0:4.18.0-553.22.1.rt7.363.el8_10	0:4.18.0-553.22.1.rt7.363.el8_10
`kernel-rt-modules` Red Hat:enterprise_linux:8::nfv	before 0:4.18.0-553.22.1.rt7.363.el8_10	0:4.18.0-553.22.1.rt7.363.el8_10
`kernel-rt-modules-extra` Red Hat:enterprise_linux:8::nfv	before 0:4.18.0-553.22.1.rt7.363.el8_10	0:4.18.0-553.22.1.rt7.363.el8_10
`kernel` Rocky Linux:8	before 0:4.18.0-553.22.1.el8_10	0:4.18.0-553.22.1.el8_10
`kernel-rt` Rocky Linux:8	before 0:4.18.0-553.22.1.rt7.363.el8_10	0:4.18.0-553.22.1.rt7.363.el8_10
`kernel-azure` SUSE:Linux Enterprise Server 12 SP5	before 4.12.14-16.188.1	4.12.14-16.188.1
`kernel-source-azure` SUSE:Linux Enterprise Server 12 SP5	before 4.12.14-16.188.1	4.12.14-16.188.1
`kernel-syms-azure` SUSE:Linux Enterprise Server 12 SP5	before 4.12.14-16.188.1	4.12.14-16.188.1
`kernel-azure` SUSE:Linux Enterprise Server for SAP Applications 12 SP5	before 4.12.14-16.188.1	4.12.14-16.188.1
`kernel-source-azure` SUSE:Linux Enterprise Server for SAP Applications 12 SP5	before 4.12.14-16.188.1	4.12.14-16.188.1
`kernel-syms-azure` SUSE:Linux Enterprise Server for SAP Applications 12 SP5	before 4.12.14-16.188.1	4.12.14-16.188.1
`kernel-rt` SUSE:Linux Enterprise Real Time 12 SP5	before 4.12.14-10.188.1	4.12.14-10.188.1
`kernel-rt_debug` SUSE:Linux Enterprise Real Time 12 SP5	before 4.12.14-10.188.1	4.12.14-10.188.1
`kernel-source-rt` SUSE:Linux Enterprise Real Time 12 SP5	before 4.12.14-10.188.1	4.12.14-10.188.1
`kernel-syms-rt` SUSE:Linux Enterprise Real Time 12 SP5	before 4.12.14-10.188.1	4.12.14-10.188.1
`kernel-rt` SUSE:Linux Enterprise Micro 5.5	before 5.14.21-150500.13.58.1	5.14.21-150500.13.58.1
`kernel-source-rt` SUSE:Linux Enterprise Micro 5.5	before 5.14.21-150500.13.58.1	5.14.21-150500.13.58.1
`kernel-livepatch-SLE15-SP5-RT_Update_16` SUSE:Linux Enterprise Live Patching 15 SP5	before 1-150500.11.3.1	1-150500.11.3.1
`kernel-rt` SUSE:Real Time Module 15 SP5	before 5.14.21-150500.13.58.1	5.14.21-150500.13.58.1
`kernel-rt_debug` SUSE:Real Time Module 15 SP5	before 5.14.21-150500.13.58.1	5.14.21-150500.13.58.1
`kernel-source-rt` SUSE:Real Time Module 15 SP5	before 5.14.21-150500.13.58.1	5.14.21-150500.13.58.1
`kernel-syms-rt` SUSE:Real Time Module 15 SP5	before 5.14.21-150500.13.58.1	5.14.21-150500.13.58.1
`kernel-rt` openSUSE:Leap 15.5	before 5.14.21-150500.13.58.1	5.14.21-150500.13.58.1
`kernel-rt_debug` openSUSE:Leap 15.5	before 5.14.21-150500.13.58.1	5.14.21-150500.13.58.1
`kernel-source-rt` openSUSE:Leap 15.5	before 5.14.21-150500.13.58.1	5.14.21-150500.13.58.1
`kernel-syms-rt` openSUSE:Leap 15.5	before 5.14.21-150500.13.58.1	5.14.21-150500.13.58.1
`kernel-rt` SUSE:Linux Enterprise Micro 5.1	before 5.3.18-150300.172.1	5.3.18-150300.172.1
`kernel-source-rt` SUSE:Linux Enterprise Micro 5.1	before 5.3.18-150300.172.1	5.3.18-150300.172.1
`kernel-rt` SUSE:Linux Enterprise Micro 5.2	before 5.3.18-150300.172.1	5.3.18-150300.172.1
`kernel-source-rt` SUSE:Linux Enterprise Micro 5.2	before 5.3.18-150300.172.1	5.3.18-150300.172.1
`kernel-rt` SUSE:Linux Enterprise Micro 5.3	before 5.14.21-150400.15.82.1	5.14.21-150400.15.82.1
`kernel-source-rt` SUSE:Linux Enterprise Micro 5.3	before 5.14.21-150400.15.82.1	5.14.21-150400.15.82.1
`kernel-rt` SUSE:Linux Enterprise Micro 5.4	before 5.14.21-150400.15.82.1	5.14.21-150400.15.82.1
`kernel-source-rt` SUSE:Linux Enterprise Micro 5.4	before 5.14.21-150400.15.82.1	5.14.21-150400.15.82.1
`kernel-rt` openSUSE:Leap Micro 5.3	before 5.14.21-150400.15.82.1	5.14.21-150400.15.82.1
`kernel-rt` openSUSE:Leap Micro 5.4	before 5.14.21-150400.15.82.1	5.14.21-150400.15.82.1
`kernel-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP5	before 5.14.21-150500.33.57.1	5.14.21-150500.33.57.1
`kernel-source-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP5	before 5.14.21-150500.33.57.1	5.14.21-150500.33.57.1
`kernel-syms-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP5	before 5.14.21-150500.33.57.1	5.14.21-150500.33.57.1
`kernel-azure` openSUSE:Leap 15.5	before 5.14.21-150500.33.57.1	5.14.21-150500.33.57.1
`kernel-source-azure` openSUSE:Leap 15.5	before 5.14.21-150500.33.57.1	5.14.21-150500.33.57.1
`kernel-syms-azure` openSUSE:Leap 15.5	before 5.14.21-150500.33.57.1	5.14.21-150500.33.57.1
`kernel-default` SUSE:Linux Enterprise Live Patching 15 SP2	before 5.3.18-150200.24.194.1	5.3.18-150200.24.194.1
`kernel-livepatch-SLE15-SP2_Update_49` SUSE:Linux Enterprise Live Patching 15 SP2	before 1-150200.5.3.1	1-150200.5.3.1
`kernel-default` SUSE:Linux Enterprise High Availability Extension 15 SP2	before 5.3.18-150200.24.194.1	5.3.18-150200.24.194.1
`kernel-default` SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS	before 5.3.18-150200.24.194.1	5.3.18-150200.24.194.1
`kernel-default-base` SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS	before 5.3.18-150200.24.194.1.150200.9.99.1	5.3.18-150200.24.194.1.150200.9.99.1
`kernel-docs` SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS	before 5.3.18-150200.24.194.1	5.3.18-150200.24.194.1
`kernel-obs-build` SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS	before 5.3.18-150200.24.194.1	5.3.18-150200.24.194.1
`kernel-preempt` SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS	before 5.3.18-150200.24.194.1	5.3.18-150200.24.194.1
`kernel-source` SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS	before 5.3.18-150200.24.194.1	5.3.18-150200.24.194.1
`kernel-syms` SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS	before 5.3.18-150200.24.194.1	5.3.18-150200.24.194.1
`kernel-default` SUSE:Linux Enterprise Server 15 SP2-LTSS	before 5.3.18-150200.24.194.1	5.3.18-150200.24.194.1
`kernel-default-base` SUSE:Linux Enterprise Server 15 SP2-LTSS	before 5.3.18-150200.24.194.1.150200.9.99.1	5.3.18-150200.24.194.1.150200.9.99.1
`kernel-docs` SUSE:Linux Enterprise Server 15 SP2-LTSS	before 5.3.18-150200.24.194.1	5.3.18-150200.24.194.1
`kernel-obs-build` SUSE:Linux Enterprise Server 15 SP2-LTSS	before 5.3.18-150200.24.194.1	5.3.18-150200.24.194.1
`kernel-preempt` SUSE:Linux Enterprise Server 15 SP2-LTSS	before 5.3.18-150200.24.194.1	5.3.18-150200.24.194.1
`kernel-source` SUSE:Linux Enterprise Server 15 SP2-LTSS	before 5.3.18-150200.24.194.1	5.3.18-150200.24.194.1
`kernel-syms` SUSE:Linux Enterprise Server 15 SP2-LTSS	before 5.3.18-150200.24.194.1	5.3.18-150200.24.194.1
`kernel-default` SUSE:Linux Enterprise Server for SAP Applications 15 SP2	before 5.3.18-150200.24.194.1	5.3.18-150200.24.194.1
`kernel-default-base` SUSE:Linux Enterprise Server for SAP Applications 15 SP2	before 5.3.18-150200.24.194.1.150200.9.99.1	5.3.18-150200.24.194.1.150200.9.99.1
`kernel-docs` SUSE:Linux Enterprise Server for SAP Applications 15 SP2	before 5.3.18-150200.24.194.1	5.3.18-150200.24.194.1
`kernel-obs-build` SUSE:Linux Enterprise Server for SAP Applications 15 SP2	before 5.3.18-150200.24.194.1	5.3.18-150200.24.194.1
`kernel-preempt` SUSE:Linux Enterprise Server for SAP Applications 15 SP2	before 5.3.18-150200.24.194.1	5.3.18-150200.24.194.1
`kernel-source` SUSE:Linux Enterprise Server for SAP Applications 15 SP2	before 5.3.18-150200.24.194.1	5.3.18-150200.24.194.1
`kernel-syms` SUSE:Linux Enterprise Server for SAP Applications 15 SP2	before 5.3.18-150200.24.194.1	5.3.18-150200.24.194.1
`kernel-default` SUSE:Linux Enterprise High Availability Extension 12 SP5	before 4.12.14-122.219.1	4.12.14-122.219.1
`kernel-default` SUSE:Linux Enterprise Live Patching 12 SP5	before 4.12.14-122.219.1	4.12.14-122.219.1
`kgraft-patch-SLE12-SP5_Update_57` SUSE:Linux Enterprise Live Patching 12 SP5	before 1-8.3.1	1-8.3.1
`kernel-docs` SUSE:Linux Enterprise Software Development Kit 12 SP5	before 4.12.14-122.219.1	4.12.14-122.219.1
`kernel-obs-build` SUSE:Linux Enterprise Software Development Kit 12 SP5	before 4.12.14-122.219.1	4.12.14-122.219.1
`kernel-default` SUSE:Linux Enterprise Server 12 SP5	before 4.12.14-122.219.1	4.12.14-122.219.1
`kernel-default` openSUSE:Leap Micro 5.3	before 5.14.21-150400.24.122.2	5.14.21-150400.24.122.2
`kernel-default-base` openSUSE:Leap Micro 5.3	before 5.14.21-150400.24.122.2.150400.24.58.2	5.14.21-150400.24.122.2.150400.24.58.2
`kernel-default` openSUSE:Leap Micro 5.4	before 5.14.21-150400.24.122.2	5.14.21-150400.24.122.2
`kernel-default-base` openSUSE:Leap Micro 5.4	before 5.14.21-150400.24.122.2.150400.24.58.2	5.14.21-150400.24.122.2.150400.24.58.2
`dtb-aarch64` openSUSE:Leap 15.5	before 5.14.21-150500.55.68.1	5.14.21-150500.55.68.1
`kernel-64kb` openSUSE:Leap 15.5	before 5.14.21-150500.55.68.1	5.14.21-150500.55.68.1
`kernel-debug` openSUSE:Leap 15.5	before 5.14.21-150500.55.68.1	5.14.21-150500.55.68.1
`kernel-default` openSUSE:Leap 15.5	before 5.14.21-150500.55.68.1	5.14.21-150500.55.68.1
`kernel-default-base` openSUSE:Leap 15.5	before 5.14.21-150500.55.68.1.150500.6.31.1	5.14.21-150500.55.68.1.150500.6.31.1
`kernel-docs` openSUSE:Leap 15.5	before 5.14.21-150500.55.68.1	5.14.21-150500.55.68.1
`kernel-kvmsmall` openSUSE:Leap 15.5	before 5.14.21-150500.55.68.1	5.14.21-150500.55.68.1
`kernel-obs-build` openSUSE:Leap 15.5	before 5.14.21-150500.55.68.1	5.14.21-150500.55.68.1
`kernel-obs-qa` openSUSE:Leap 15.5	before 5.14.21-150500.55.68.1	5.14.21-150500.55.68.1
`kernel-source` openSUSE:Leap 15.5	before 5.14.21-150500.55.68.1	5.14.21-150500.55.68.1
`kernel-syms` openSUSE:Leap 15.5	before 5.14.21-150500.55.68.1	5.14.21-150500.55.68.1
`kernel-zfcpdump` openSUSE:Leap 15.5	before 5.14.21-150500.55.68.1	5.14.21-150500.55.68.1
`linux-azure` Ubuntu:Pro:14.04:LTS	before 4.15.0-1129.142~14.04.1, plus listed versions 4.15.0-1023.24~14.04.14.15.0-1030.31~14.04.14.15.0-1031.32~14.04.14.15.0-1032.33~14.04.24.15.0-1035.36~14.04.2 Show 45 moreShow less 4.15.0-1036.38~14.04.24.15.0-1037.39~14.04.24.15.0-1039.41~14.04.24.15.0-1040.44~14.04.14.15.0-1041.45~14.04.14.15.0-1042.46~14.04.14.15.0-1045.49~14.04.14.15.0-1046.50~14.04.14.15.0-1047.51~14.04.14.15.0-1049.54~14.04.14.15.0-1050.55~14.04.14.15.0-1051.56~14.04.14.15.0-1052.57~14.04.14.15.0-1055.60~14.04.14.15.0-1056.61~14.04.14.15.0-1057.62~14.04.14.15.0-1059.64~14.04.14.15.0-1060.65~14.04.14.15.0-1061.66~14.04.14.15.0-1063.68~14.04.14.15.0-1064.69~14.04.14.15.0-1066.71~14.04.14.15.0-1067.72~14.04.14.15.0-1069.74~14.04.14.15.0-1071.76~14.04.14.15.0-1074.79~14.04.14.15.0-1077.82~14.04.14.15.0-1082.92~14.04.14.15.0-1083.93~14.04.14.15.0-1089.99~14.04.14.15.0-1091.101~14.04.14.15.0-1092.102~14.04.14.15.0-1093.103~14.04.14.15.0-1095.105~14.04.14.15.0-1096.106~14.04.14.15.0-1098.109~14.04.14.15.0-1100.111~14.04.14.15.0-1102.113~14.04.14.15.0-1103.114~14.04.14.15.0-1106.118~14.04.14.15.0-1108.120~14.04.14.15.0-1109.121~14.04.14.15.0-1110.122~14.04.14.15.0-1111.123~14.04.14.15.0-1112.124~14.04.1	4.15.0-1129.142~14.04.1
`linux-aws` Ubuntu:Pro:14.04:LTS	All versions, plus listed versions 4.4.0-1002.24.4.0-1003.34.4.0-1005.54.4.0-1006.64.4.0-1009.9 Show 45 moreShow less 4.4.0-1010.104.4.0-1011.114.4.0-1012.124.4.0-1014.144.4.0-1016.164.4.0-1017.174.4.0-1019.194.4.0-1022.224.4.0-1023.234.4.0-1024.254.4.0-1025.264.4.0-1027.304.4.0-1028.314.4.0-1029.324.4.0-1031.344.4.0-1032.354.4.0-1034.374.4.0-1036.394.4.0-1037.404.4.0-1038.414.4.0-1039.424.4.0-1040.434.4.0-1042.454.4.0-1044.474.4.0-1045.484.4.0-1046.504.4.0-1048.524.4.0-1050.544.4.0-1052.564.4.0-1054.584.4.0-1055.594.4.0-1056.604.4.0-1058.624.4.0-1059.634.4.0-1060.644.4.0-1061.654.4.0-1062.664.4.0-1064.684.4.0-1065.694.4.0-1066.704.4.0-1067.714.4.0-1073.774.4.0-1074.784.4.0-1075.794.4.0-1076.80	None known
`linux-lts-xenial` Ubuntu:Pro:14.04:LTS	All versions, plus listed versions 4.4.0-13.29~14.04.14.4.0-14.30~14.04.24.4.0-15.31~14.04.14.4.0-18.34~14.04.14.4.0-21.37~14.04.1 Show 45 moreShow less 4.4.0-22.39~14.04.14.4.0-22.40~14.04.14.4.0-24.43~14.04.14.4.0-28.47~14.04.14.4.0-31.50~14.04.14.4.0-34.53~14.04.14.4.0-36.55~14.04.14.4.0-38.57~14.04.14.4.0-42.62~14.04.14.4.0-45.66~14.04.14.4.0-47.68~14.04.14.4.0-51.72~14.04.14.4.0-53.74~14.04.14.4.0-57.78~14.04.14.4.0-59.80~14.04.14.4.0-62.83~14.04.14.4.0-63.84~14.04.24.4.0-64.85~14.04.14.4.0-66.87~14.04.14.4.0-67.88~14.04.14.4.0-70.91~14.04.14.4.0-71.92~14.04.14.4.0-72.93~14.04.14.4.0-75.96~14.04.14.4.0-78.99~14.04.24.4.0-79.100~14.04.14.4.0-81.104~14.04.14.4.0-83.106~14.04.14.4.0-87.110~14.04.14.4.0-89.112~14.04.14.4.0-91.114~14.04.14.4.0-92.115~14.04.14.4.0-93.116~14.04.14.4.0-96.119~14.04.14.4.0-97.120~14.04.14.4.0-98.121~14.04.14.4.0-101.124~14.04.14.4.0-103.126~14.04.14.4.0-104.127~14.04.14.4.0-108.131~14.04.14.4.0-109.132~14.04.14.4.0-111.134~14.04.14.4.0-112.135~14.04.14.4.0-116.140~14.04.14.4.0-119.143~14.04.1	None known
`linux-aws-hwe` Ubuntu:Pro:16.04:LTS	before 4.15.0-1118.125~16.04.1, plus listed versions 4.15.0-1030.31~16.04.14.15.0-1031.33~16.04.14.15.0-1032.34~16.04.14.15.0-1033.35~16.04.14.15.0-1035.37~16.04.1 Show 45 moreShow less 4.15.0-1036.38~16.04.14.15.0-1039.41~16.04.14.15.0-1040.42~16.04.14.15.0-1041.43~16.04.14.15.0-1043.45~16.04.14.15.0-1044.46~16.04.14.15.0-1045.47~16.04.14.15.0-1047.49~16.04.14.15.0-1048.50~16.04.14.15.0-1050.52~16.04.14.15.0-1051.53~16.04.14.15.0-1052.54~16.04.14.15.0-1054.56~16.04.14.15.0-1056.58~16.04.14.15.0-1057.59~16.04.14.15.0-1058.60~16.04.14.15.0-1060.62~16.04.14.15.0-1063.67~16.04.14.15.0-1065.69~16.04.14.15.0-1066.70~16.04.14.15.0-1067.71~16.04.14.15.0-1073.77~16.04.14.15.0-1074.78~16.04.14.15.0-1079.83~16.04.14.15.0-1080.84~16.04.14.15.0-1082.86~16.04.14.15.0-1083.87~16.04.14.15.0-1085.90~16.04.14.15.0-1088.93~16.04.14.15.0-1090.95~16.04.14.15.0-1091.96~16.04.14.15.0-1093.99~16.04.14.15.0-1094.101~16.04.14.15.0-1095.102~16.04.14.15.0-1096.103~16.04.14.15.0-1097.104~16.04.14.15.0-1098.105~16.04.14.15.0-1099.106~16.04.14.15.0-1102.109~16.04.14.15.0-1103.110~16.04.14.15.0-1106.113~16.04.14.15.0-1109.116~16.04.14.15.0-1110.117~16.04.14.15.0-1111.118~16.04.14.15.0-1112.119~16.04.1	4.15.0-1118.125~16.04.1
`linux-azure` Ubuntu:Pro:16.04:LTS	before 4.15.0-1129.142~16.04.1, plus listed versions 4.11.0-1009.94.11.0-1011.114.11.0-1013.134.11.0-1014.144.11.0-1015.15 Show 45 moreShow less 4.11.0-1016.164.13.0-1005.74.13.0-1006.84.13.0-1007.94.13.0-1009.124.13.0-1011.144.13.0-1012.154.13.0-1014.174.13.0-1016.194.13.0-1018.214.15.0-1013.13~16.04.24.15.0-1014.14~16.04.14.15.0-1018.18~16.04.14.15.0-1019.19~16.04.14.15.0-1021.21~16.04.14.15.0-1022.22~16.04.14.15.0-1023.24~16.04.14.15.0-1025.26~16.04.14.15.0-1028.29~16.04.14.15.0-1030.31~16.04.14.15.0-1031.32~16.04.14.15.0-1032.33~16.04.14.15.0-1035.36~16.04.14.15.0-1036.38~16.04.14.15.0-1037.39~16.04.14.15.0-1039.434.15.0-1040.444.15.0-1041.454.15.0-1042.464.15.0-1045.494.15.0-1046.504.15.0-1047.514.15.0-1049.544.15.0-1050.554.15.0-1051.564.15.0-1052.574.15.0-1055.604.15.0-1056.614.15.0-1057.624.15.0-1059.644.15.0-1060.654.15.0-1061.664.15.0-1063.684.15.0-1064.694.15.0-1066.71	4.15.0-1129.142~16.04.1
`linux-gcp` Ubuntu:Pro:16.04:LTS	before 4.15.0-1114.128~16.04.1, plus listed versions 4.10.0-1004.44.10.0-1006.64.10.0-1007.74.10.0-1008.84.10.0-1009.9 Show 45 moreShow less 4.13.0-1002.54.13.0-1006.94.13.0-1007.104.13.0-1008.114.13.0-1011.154.13.0-1012.164.13.0-1013.174.13.0-1015.194.13.0-1017.214.13.0-1019.234.15.0-1014.14~16.04.14.15.0-1015.15~16.04.14.15.0-1017.18~16.04.14.15.0-1018.19~16.04.24.15.0-1019.20~16.04.14.15.0-1021.22~16.04.14.15.0-1023.24~16.04.14.15.0-1024.25~16.04.24.15.0-1025.26~16.04.14.15.0-1026.27~16.04.14.15.0-1027.28~16.04.14.15.0-1028.29~16.04.14.15.0-1029.31~16.04.14.15.0-1030.32~16.04.14.15.0-1032.34~16.04.14.15.0-1033.35~16.04.14.15.0-1034.36~16.04.14.15.0-1036.38~16.04.14.15.0-1037.39~16.04.14.15.0-1040.42~16.04.14.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1046.494.15.0-1047.504.15.0-1049.524.15.0-1050.534.15.0-1052.564.15.0-1055.594.15.0-1058.624.15.0-1060.644.15.0-1061.654.15.0-1071.81~16.04.14.15.0-1077.87~16.04.14.15.0-1078.88~16.04.1	4.15.0-1114.128~16.04.1
`linux-hwe` Ubuntu:Pro:16.04:LTS	before 4.15.0-166.174~16.04.1, plus listed versions 4.8.0-36.36~16.04.14.8.0-39.42~16.04.14.8.0-41.44~16.04.14.8.0-42.45~16.04.14.8.0-44.47~16.04.1 Show 45 moreShow less 4.8.0-45.48~16.04.14.8.0-46.49~16.04.14.8.0-49.52~16.04.14.8.0-51.54~16.04.14.8.0-52.55~16.04.14.8.0-53.56~16.04.14.8.0-54.57~16.04.14.8.0-56.61~16.04.14.8.0-58.63~16.04.14.10.0-27.30~16.04.24.10.0-28.32~16.04.24.10.0-30.34~16.04.14.10.0-32.36~16.04.14.10.0-33.37~16.04.14.10.0-35.39~16.04.14.10.0-37.41~16.04.14.10.0-38.42~16.04.14.10.0-40.44~16.04.14.10.0-42.46~16.04.14.13.0-26.29~16.04.24.13.0-31.34~16.04.14.13.0-32.35~16.04.14.13.0-36.40~16.04.14.13.0-37.42~16.04.14.13.0-38.43~16.04.14.13.0-39.44~16.04.14.13.0-41.46~16.04.14.13.0-43.48~16.04.14.13.0-45.50~16.04.14.15.0-24.26~16.04.14.15.0-29.31~16.04.14.15.0-30.32~16.04.14.15.0-32.35~16.04.14.15.0-33.36~16.04.14.15.0-34.37~16.04.14.15.0-36.39~16.04.14.15.0-38.41~16.04.14.15.0-39.42~16.04.14.15.0-42.45~16.04.14.15.0-43.46~16.04.14.15.0-45.48~16.04.14.15.0-46.49~16.04.14.15.0-47.50~16.04.14.15.0-48.51~16.04.14.15.0-50.54~16.04.1	4.15.0-166.174~16.04.1
`linux-oracle` Ubuntu:Pro:16.04:LTS	before 4.15.0-1085.93~16.04.1, plus listed versions 4.15.0-1007.9~16.04.14.15.0-1008.10~16.04.14.15.0-1009.11~16.04.14.15.0-1010.12~16.04.14.15.0-1011.13~16.04.1 Show 45 moreShow less 4.15.0-1013.15~16.04.14.15.0-1014.16~16.04.14.15.0-1015.17~16.04.14.15.0-1017.19~16.04.24.15.0-1018.20~16.04.14.15.0-1021.23~16.04.14.15.0-1022.25~16.04.14.15.0-1023.26~16.04.14.15.0-1025.28~16.04.14.15.0-1026.29~16.04.14.15.0-1027.30~16.04.14.15.0-1029.32~16.04.14.15.0-1030.33~16.04.14.15.0-1031.34~16.04.14.15.0-1033.36~16.04.14.15.0-1035.38~16.04.14.15.0-1037.41~16.04.14.15.0-1038.42~16.04.14.15.0-1039.43~16.04.14.15.0-1045.49~16.04.14.15.0-1046.50~16.04.14.15.0-1050.54~16.04.14.15.0-1051.55~16.04.14.15.0-1053.57~16.04.14.15.0-1054.58~16.04.14.15.0-1056.61~16.04.14.15.0-1058.64~16.04.14.15.0-1059.65~16.04.14.15.0-1061.67~16.04.14.15.0-1062.68~16.04.14.15.0-1064.71~16.04.14.15.0-1065.73~16.04.14.15.0-1066.74~16.04.14.15.0-1067.75~16.04.14.15.0-1068.76~16.04.14.15.0-1069.77~16.04.14.15.0-1070.78~16.04.14.15.0-1071.79~16.04.14.15.0-1072.80~16.04.14.15.0-1075.83~16.04.14.15.0-1078.86~16.04.14.15.0-1079.87~16.04.14.15.0-1080.88~16.04.14.15.0-1081.89~16.04.14.15.0-1082.90~16.04.1	4.15.0-1085.93~16.04.1
`linux` Ubuntu:Pro:16.04:LTS	All versions, plus listed versions 4.2.0-16.194.2.0-17.214.2.0-19.234.3.0-1.104.3.0-2.11 Show 45 moreShow less 4.3.0-5.164.3.0-6.174.3.0-7.184.4.0-2.164.4.0-4.194.4.0-6.214.4.0-7.224.4.0-8.234.4.0-9.244.4.0-10.254.4.0-11.264.4.0-12.284.4.0-13.294.4.0-14.304.4.0-15.314.4.0-16.324.4.0-17.334.4.0-18.344.4.0-21.374.4.0-22.394.4.0-22.404.4.0-24.434.4.0-28.474.4.0-31.504.4.0-34.534.4.0-36.554.4.0-38.574.4.0-42.624.4.0-43.634.4.0-45.664.4.0-47.684.4.0-51.724.4.0-53.744.4.0-57.784.4.0-59.804.4.0-62.834.4.0-63.844.4.0-64.854.4.0-65.864.4.0-66.874.4.0-67.884.4.0-70.914.4.0-71.924.4.0-72.934.4.0-75.96	None known
`linux-aws` Ubuntu:Pro:16.04:LTS	All versions, plus listed versions 4.4.0-1001.104.4.0-1003.124.4.0-1004.134.4.0-1007.164.4.0-1009.18 Show 45 moreShow less 4.4.0-1011.204.4.0-1012.214.4.0-1013.224.4.0-1016.254.4.0-1017.264.4.0-1018.274.4.0-1020.294.4.0-1022.314.4.0-1026.354.4.0-1028.374.4.0-1030.394.4.0-1031.404.4.0-1032.414.4.0-1035.444.4.0-1037.464.4.0-1038.474.4.0-1039.484.4.0-1041.504.4.0-1043.524.4.0-1044.534.4.0-1047.564.4.0-1048.574.4.0-1049.584.4.0-1050.594.4.0-1052.614.4.0-1054.634.4.0-1055.644.4.0-1057.664.4.0-1060.694.4.0-1061.704.4.0-1062.714.4.0-1063.724.4.0-1065.754.4.0-1066.764.4.0-1067.774.4.0-1069.794.4.0-1070.804.4.0-1072.824.4.0-1073.834.4.0-1074.844.4.0-1075.854.4.0-1077.874.4.0-1079.894.4.0-1081.914.4.0-1083.93	None known
`linux-hwe-edge` Ubuntu:16.04:LTS	All versions, plus listed versions 4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1 Show 18 moreShow less 4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1	None known
`linux-kvm` Ubuntu:Pro:16.04:LTS	All versions, plus listed versions 4.4.0-1004.94.4.0-1007.124.4.0-1008.134.4.0-1009.144.4.0-1010.15 Show 45 moreShow less 4.4.0-1012.174.4.0-1013.184.4.0-1015.204.4.0-1017.224.4.0-1019.244.4.0-1020.254.4.0-1021.264.4.0-1023.284.4.0-1026.314.4.0-1027.324.4.0-1029.344.4.0-1031.374.4.0-1032.384.4.0-1033.394.4.0-1035.414.4.0-1036.424.4.0-1037.434.4.0-1038.444.4.0-1039.454.4.0-1040.464.4.0-1041.474.4.0-1043.494.4.0-1044.504.4.0-1046.524.4.0-1047.534.4.0-1048.554.4.0-1051.584.4.0-1052.594.4.0-1054.614.4.0-1056.634.4.0-1058.654.4.0-1059.664.4.0-1060.674.4.0-1062.694.4.0-1063.704.4.0-1064.714.4.0-1065.724.4.0-1066.734.4.0-1068.754.4.0-1069.764.4.0-1070.774.4.0-1071.784.4.0-1075.824.4.0-1076.834.4.0-1077.84	None known
`linux-fips` Ubuntu:Pro:FIPS-updates:16.04:LTS	All versions, plus listed versions 4.4.0-1003.34.4.0-1005.54.4.0-1006.64.4.0-1008.104.4.0-1010.13 Show 45 moreShow less 4.4.0-1011.144.4.0-1012.164.4.0-1013.174.4.0-1015.204.4.0-1017.224.4.0-1019.244.4.0-1021.264.4.0-1022.274.4.0-1023.284.4.0-1025.304.4.0-1026.314.4.0-1027.324.4.0-1028.334.4.0-1029.344.4.0-1031.364.4.0-1032.374.4.0-1033.384.4.0-1034.394.4.0-1041.464.4.0-1042.474.4.0-1043.484.4.0-1044.494.4.0-1045.504.4.0-1046.514.4.0-1048.534.4.0-1049.554.4.0-1051.574.4.0-1052.584.4.0-1054.604.4.0-1055.614.4.0-1056.624.4.0-1057.634.4.0-1058.644.4.0-1060.664.4.0-1061.674.4.0-1062.684.4.0-1063.694.4.0-1064.704.4.0-1065.714.4.0-1066.724.4.0-1067.734.4.0-1068.744.4.0-1069.754.4.0-1071.774.4.0-1072.78	None known
`linux-fips` Ubuntu:Pro:FIPS:16.04:LTS	All versions, plus listed versions 4.4.0-1001.14.4.0-1002.2	None known
`linux` Ubuntu:18.04:LTS	before 4.15.0-166.174, plus listed versions 4.13.0-16.194.13.0-17.204.13.0-25.294.13.0-32.354.15.0-10.11 Show 45 moreShow less 4.15.0-12.134.15.0-13.144.15.0-15.164.15.0-19.204.15.0-20.214.15.0-22.244.15.0-23.254.15.0-24.264.15.0-29.314.15.0-30.324.15.0-32.354.15.0-33.364.15.0-34.374.15.0-36.394.15.0-38.414.15.0-39.424.15.0-42.454.15.0-43.464.15.0-44.474.15.0-45.484.15.0-46.494.15.0-47.504.15.0-48.514.15.0-50.544.15.0-51.554.15.0-52.564.15.0-54.584.15.0-55.604.15.0-58.644.15.0-60.674.15.0-62.694.15.0-64.734.15.0-65.744.15.0-66.754.15.0-69.784.15.0-70.794.15.0-72.814.15.0-74.844.15.0-76.864.15.0-88.884.15.0-91.924.15.0-96.974.15.0-99.1004.15.0-101.1024.15.0-106.107	4.15.0-166.174
`linux-aws` Ubuntu:18.04:LTS	before 4.15.0-1118.125, plus listed versions 4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1007.7 Show 45 moreShow less 4.15.0-1009.94.15.0-1010.104.15.0-1011.114.15.0-1016.164.15.0-1017.174.15.0-1019.194.15.0-1020.204.15.0-1021.214.15.0-1023.234.15.0-1025.254.15.0-1027.274.15.0-1029.304.15.0-1031.334.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1035.374.15.0-1037.394.15.0-1039.414.15.0-1040.424.15.0-1041.434.15.0-1043.454.15.0-1044.464.15.0-1045.474.15.0-1047.494.15.0-1048.504.15.0-1050.524.15.0-1051.534.15.0-1052.544.15.0-1054.564.15.0-1056.584.15.0-1057.594.15.0-1058.604.15.0-1060.624.15.0-1063.674.15.0-1065.694.15.0-1066.704.15.0-1067.714.15.0-1073.774.15.0-1076.804.15.0-1077.814.15.0-1079.834.15.0-1080.844.15.0-1082.864.15.0-1083.87	4.15.0-1118.125
`linux-aws-5.4` Ubuntu:18.04:LTS	before 5.4.0-1061.64~18.04.1, plus listed versions 5.4.0-1018.18~18.04.15.4.0-1020.20~18.04.25.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1 Show 23 moreShow less 5.4.0-1028.29~18.04.15.4.0-1029.30~18.04.15.4.0-1030.31~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.37~18.04.15.4.0-1037.39~18.04.15.4.0-1038.40~18.04.15.4.0-1039.41~18.04.15.4.0-1041.43~18.04.15.4.0-1043.45~18.04.15.4.0-1045.47~18.04.15.4.0-1047.49~18.04.15.4.0-1048.50~18.04.15.4.0-1049.51~18.04.15.4.0-1051.53~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1058.61~18.04.35.4.0-1059.62~18.04.15.4.0-1060.63~18.04.1	5.4.0-1061.64~18.04.1
`linux-azure-4.15` Ubuntu:18.04:LTS	before 4.15.0-1129.142, plus listed versions 4.15.0-1082.924.15.0-1083.934.15.0-1089.994.15.0-1091.1014.15.0-1092.102 Show 25 moreShow less 4.15.0-1093.1034.15.0-1095.1054.15.0-1096.1064.15.0-1099.1104.15.0-1100.1114.15.0-1102.1134.15.0-1103.1144.15.0-1104.1164.15.0-1106.1184.15.0-1108.1204.15.0-1109.1214.15.0-1110.1224.15.0-1111.1234.15.0-1112.1254.15.0-1113.1264.15.0-1114.1274.15.0-1115.1284.15.0-1118.1314.15.0-1121.1344.15.0-1122.1354.15.0-1123.1364.15.0-1124.1374.15.0-1125.1384.15.0-1126.1394.15.0-1127.140	4.15.0-1129.142
`linux-azure-5.4` Ubuntu:18.04:LTS	before 5.4.0-1065.68~18.04.1, plus listed versions 5.4.0-1020.20~18.04.15.4.0-1022.22~18.04.15.4.0-1023.23~18.04.15.4.0-1025.25~18.04.15.4.0-1026.26~18.04.1 Show 23 moreShow less 5.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.36~18.04.15.4.0-1036.38~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1041.43~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1047.49~18.04.15.4.0-1048.50~18.04.15.4.0-1049.51~18.04.15.4.0-1051.53~18.04.15.4.0-1055.57~18.04.15.4.0-1056.58~18.04.15.4.0-1058.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1064.67~18.04.1	5.4.0-1065.68~18.04.1
`linux-gcp-4.15` Ubuntu:18.04:LTS	before 4.15.0-1114.128, plus listed versions 4.15.0-1071.814.15.0-1077.874.15.0-1078.884.15.0-1080.904.15.0-1081.92 Show 24 moreShow less 4.15.0-1083.944.15.0-1084.954.15.0-1086.984.15.0-1087.1004.15.0-1088.1014.15.0-1090.1034.15.0-1091.1044.15.0-1092.1054.15.0-1093.1064.15.0-1094.1074.15.0-1095.1084.15.0-1096.1094.15.0-1097.1104.15.0-1098.1114.15.0-1099.1124.15.0-1100.1134.15.0-1103.1164.15.0-1106.1204.15.0-1107.1214.15.0-1108.1224.15.0-1109.1234.15.0-1110.1244.15.0-1111.1254.15.0-1112.126	4.15.0-1114.128
`linux-gcp-5.4` Ubuntu:18.04:LTS	before 5.4.0-1059.63~18.04.1, plus listed versions 5.4.0-1019.19~18.04.25.4.0-1021.21~18.04.15.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1 Show 23 moreShow less 5.4.0-1028.29~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.15.4.0-1033.35~18.04.15.4.0-1034.37~18.04.15.4.0-1036.39~18.04.15.4.0-1037.40~18.04.15.4.0-1038.41~18.04.15.4.0-1040.43~18.04.15.4.0-1041.44~18.04.15.4.0-1042.45~18.04.15.4.0-1043.46~18.04.15.4.0-1044.47~18.04.25.4.0-1046.49~18.04.15.4.0-1049.53~18.04.15.4.0-1051.55~18.04.15.4.0-1052.56~18.04.15.4.0-1053.57~18.04.15.4.0-1055.59~18.04.15.4.0-1056.60~18.04.15.4.0-1057.61~18.04.15.4.0-1058.62~18.04.1	5.4.0-1059.63~18.04.1
`linux-hwe-5.4` Ubuntu:18.04:LTS	before 5.4.0-92.103~18.04.2, plus listed versions 5.4.0-37.41~18.04.15.4.0-39.43~18.04.15.4.0-40.44~18.04.15.4.0-42.46~18.04.15.4.0-45.49~18.04.2 Show 29 moreShow less 5.4.0-47.51~18.04.15.4.0-48.52~18.04.15.4.0-51.56~18.04.15.4.0-52.57~18.04.15.4.0-53.59~18.04.15.4.0-54.60~18.04.15.4.0-56.62~18.04.15.4.0-58.64~18.04.15.4.0-59.65~18.04.15.4.0-60.67~18.04.15.4.0-62.70~18.04.15.4.0-64.72~18.04.15.4.0-65.73~18.04.15.4.0-66.74~18.04.25.4.0-67.75~18.04.15.4.0-70.78~18.04.15.4.0-71.79~18.04.15.4.0-72.80~18.04.15.4.0-73.82~18.04.15.4.0-74.83~18.04.15.4.0-77.86~18.04.15.4.0-80.90~18.04.15.4.0-81.91~18.04.15.4.0-84.94~18.04.15.4.0-86.97~18.04.15.4.0-87.98~18.04.15.4.0-89.100~18.04.15.4.0-90.101~18.04.15.4.0-91.102~18.04.1	5.4.0-92.103~18.04.2
`linux-kvm` Ubuntu:18.04:LTS	before 4.15.0-1105.107, plus listed versions 4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1006.64.15.0-1008.8 Show 45 moreShow less 4.15.0-1010.104.15.0-1011.114.15.0-1012.124.15.0-1016.164.15.0-1017.174.15.0-1019.194.15.0-1020.204.15.0-1021.214.15.0-1023.234.15.0-1025.254.15.0-1026.264.15.0-1027.274.15.0-1028.284.15.0-1029.294.15.0-1030.304.15.0-1031.314.15.0-1032.324.15.0-1034.344.15.0-1035.354.15.0-1036.364.15.0-1038.384.15.0-1039.394.15.0-1042.424.15.0-1043.434.15.0-1044.444.15.0-1046.464.15.0-1047.474.15.0-1048.484.15.0-1050.504.15.0-1051.514.15.0-1052.524.15.0-1053.534.15.0-1056.574.15.0-1058.594.15.0-1059.604.15.0-1060.614.15.0-1067.684.15.0-1069.704.15.0-1071.724.15.0-1072.734.15.0-1074.754.15.0-1075.764.15.0-1077.794.15.0-1079.814.15.0-1081.83	4.15.0-1105.107
`linux-oracle` Ubuntu:18.04:LTS	before 4.15.0-1085.93, plus listed versions 4.15.0-1007.94.15.0-1008.104.15.0-1009.114.15.0-1010.124.15.0-1011.13 Show 45 moreShow less 4.15.0-1013.154.15.0-1014.164.15.0-1015.174.15.0-1017.194.15.0-1018.204.15.0-1021.234.15.0-1022.254.15.0-1023.264.15.0-1025.284.15.0-1026.294.15.0-1027.304.15.0-1029.324.15.0-1030.334.15.0-1031.344.15.0-1033.364.15.0-1035.394.15.0-1037.414.15.0-1038.424.15.0-1039.434.15.0-1045.494.15.0-1047.514.15.0-1048.524.15.0-1050.544.15.0-1051.554.15.0-1053.574.15.0-1054.584.15.0-1057.624.15.0-1058.644.15.0-1059.654.15.0-1061.674.15.0-1062.684.15.0-1063.704.15.0-1064.714.15.0-1065.734.15.0-1066.744.15.0-1067.754.15.0-1068.764.15.0-1069.774.15.0-1070.784.15.0-1071.794.15.0-1072.804.15.0-1075.834.15.0-1078.864.15.0-1079.874.15.0-1080.88	4.15.0-1085.93
`linux-oracle-5.4` Ubuntu:18.04:LTS	before 5.4.0-1059.63~18.04.1, plus listed versions 5.4.0-1019.19~18.04.15.4.0-1021.21~18.04.15.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1 Show 23 moreShow less 5.4.0-1028.29~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1033.355.4.0-1034.36~18.04.15.4.0-1035.38~18.04.15.4.0-1037.40~18.04.15.4.0-1038.41~18.04.15.4.0-1039.42~18.04.15.4.0-1041.44~18.04.15.4.0-1042.45~18.04.15.4.0-1043.46~18.04.15.4.0-1044.47~18.04.15.4.0-1046.50~18.04.25.4.0-1048.52~18.04.15.4.0-1049.53~18.04.15.4.0-1052.56~18.04.15.4.0-1053.57~18.04.15.4.0-1054.58~18.04.15.4.0-1055.59~18.04.15.4.0-1056.60~18.04.15.4.0-1057.61~18.04.15.4.0-1058.62~18.04.1	5.4.0-1059.63~18.04.1
`linux-raspi-5.4` Ubuntu:18.04:LTS	before 5.4.0-1048.53~18.04.1, plus listed versions 5.4.0-1013.13~18.04.15.4.0-1015.15~18.04.15.4.0-1016.17~18.04.15.4.0-1018.20~18.04.15.4.0-1019.21~18.04.1 Show 21 moreShow less 5.4.0-1021.24~18.04.15.4.0-1022.25~18.04.15.4.0-1023.26~18.04.15.4.0-1025.28~18.04.15.4.0-1026.29~18.04.15.4.0-1028.31~18.04.15.4.0-1029.32~18.04.15.4.0-1030.33~18.04.15.4.0-1032.35~18.04.15.4.0-1033.36~18.04.15.4.0-1034.37~18.04.15.4.0-1035.38~18.04.15.4.0-1036.39~18.04.15.4.0-1038.41~18.04.15.4.0-1041.45~18.04.15.4.0-1042.46~18.04.35.4.0-1043.47~18.04.15.4.0-1044.48~18.04.15.4.0-1045.49~18.04.15.4.0-1046.50~18.04.15.4.0-1047.52~18.04.1	5.4.0-1048.53~18.04.1
`linux-aws-5.0` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30	None known
`linux-aws-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1 Show 5 moreShow less 5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37	None known
`linux-azure` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9 Show 39 moreShow less 4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38	None known
`linux-azure-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1 Show 11 moreShow less 5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36	None known
`linux-azure-edge` Ubuntu:18.04:LTS	All versions, plus listed versions 4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2	None known
`linux-gcp` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8 Show 33 moreShow less 4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35	None known
`linux-gcp-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1 Show 8 moreShow less 5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1	None known
`linux-gke-4.15` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38 Show 28 moreShow less 4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84	None known
`linux-gke-5.4` Ubuntu:18.04:LTS	All versions, plus listed versions 5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.1 Show 32 moreShow less 5.4.0-1033.35~18.04.15.4.0-1035.37~18.04.15.4.0-1036.38~18.04.15.4.0-1037.39~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1042.44~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.15.4.0-1052.55~18.04.15.4.0-1053.56~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1071.76~18.04.35.4.0-1072.77~18.04.15.4.0-1074.79~18.04.15.4.0-1076.82~18.04.15.4.0-1078.84~18.04.15.4.0-1080.86~18.04.1	None known
`linux-gkeop-5.4` Ubuntu:18.04:LTS	All versions, plus listed versions 5.4.0-1001.15.4.0-1003.35.4.0-1004.55.4.0-1005.65.4.0-1007.8~18.04.1 Show 32 moreShow less 5.4.0-1008.9~18.04.15.4.0-1009.10~18.04.15.4.0-1010.11~18.04.15.4.0-1011.12~18.04.25.4.0-1012.13~18.04.15.4.0-1013.14~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1016.17~18.04.15.4.0-1018.19~18.04.15.4.0-1021.22~18.04.15.4.0-1022.23~18.04.15.4.0-1023.24~18.04.15.4.0-1024.25~18.04.15.4.0-1025.26~18.04.15.4.0-1026.27~18.04.15.4.0-1027.28~18.04.15.4.0-1029.30~18.04.25.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1033.34~18.04.15.4.0-1034.35~18.04.15.4.0-1036.37~18.04.15.4.0-1037.38~18.04.15.4.0-1038.39~18.04.15.4.0-1039.40~18.04.15.4.0-1040.41~18.04.15.4.0-1043.44~18.04.15.4.0-1046.48~18.04.15.4.0-1048.51~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.1	None known
`linux-hwe` Ubuntu:18.04:LTS	All versions, plus listed versions 4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1 Show 38 moreShow less 4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72	None known
`linux-hwe-edge` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-15.16~18.04.15.0.0-16.17~18.04.15.0.0-17.18~18.04.15.0.0-19.20~18.04.15.0.0-20.21~18.04.1 Show 5 moreShow less 5.3.0-19.20~18.04.25.3.0-22.24~18.04.15.3.0-23.25~18.04.15.3.0-23.25~18.04.25.3.0-24.26~18.04.2	None known
`linux-oem` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12 Show 45 moreShow less 4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114	None known
`linux-oracle-5.0` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19	None known
`linux-oracle-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1 Show 4 moreShow less 5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1	None known
`linux-aws-fips` Ubuntu:Pro:FIPS-updates:18.04:LTS	before 4.15.0-2059.61, plus listed versions 4.15.0-2000.44.15.0-2018.184.15.0-2021.214.15.0-2022.224.15.0-2024.24 Show 25 moreShow less 4.15.0-2025.254.15.0-2026.264.15.0-2027.274.15.0-2030.314.15.0-2031.324.15.0-2033.344.15.0-2034.354.15.0-2035.374.15.0-2036.384.15.0-2037.394.15.0-2038.404.15.0-2039.414.15.0-2040.424.15.0-2041.434.15.0-2042.444.15.0-2044.464.15.0-2045.474.15.0-2048.504.15.0-2051.534.15.0-2052.544.15.0-2053.554.15.0-2054.564.15.0-2055.574.15.0-2056.584.15.0-2057.59	4.15.0-2059.61
`linux-azure-fips` Ubuntu:Pro:FIPS-updates:18.04:LTS	before 4.15.0-2041.45, plus listed versions 4.15.0-1002.24.15.0-2006.74.15.0-2007.84.15.0-2008.94.15.0-2009.10 Show 22 moreShow less 4.15.0-2012.144.15.0-2013.154.15.0-2015.174.15.0-2016.184.15.0-2017.204.15.0-2018.214.15.0-2020.234.15.0-2021.244.15.0-2022.254.15.0-2023.264.15.0-2024.274.15.0-2025.284.15.0-2026.294.15.0-2027.304.15.0-2030.334.15.0-2033.374.15.0-2034.384.15.0-2035.394.15.0-2036.404.15.0-2037.414.15.0-2038.424.15.0-2039.43	4.15.0-2041.45
`linux-fips` Ubuntu:Pro:FIPS-updates:18.04:LTS	before 4.15.0-1075.84, plus listed versions 4.15.0-1027.324.15.0-1029.344.15.0-1034.394.15.0-1035.404.15.0-1037.42 Show 29 moreShow less 4.15.0-1038.434.15.0-1039.444.15.0-1040.454.15.0-1041.464.15.0-1044.504.15.0-1045.524.15.0-1046.534.15.0-1048.554.15.0-1049.564.15.0-1050.584.15.0-1051.594.15.0-1052.604.15.0-1053.614.15.0-1054.624.15.0-1055.634.15.0-1056.644.15.0-1057.654.15.0-1058.664.15.0-1059.674.15.0-1060.684.15.0-1063.714.15.0-1066.754.15.0-1067.764.15.0-1068.774.15.0-1069.784.15.0-1070.794.15.0-1071.804.15.0-1072.814.15.0-1073.82	4.15.0-1075.84
`linux-gcp-fips` Ubuntu:Pro:FIPS-updates:18.04:LTS	before 4.15.0-2024.26, plus listed versions 4.15.0-2013.144.15.0-2016.184.15.0-2017.194.15.0-2018.204.15.0-2019.214.15.0-2020.224.15.0-2021.234.15.0-2022.24	4.15.0-2024.26
`linux-aws-fips` Ubuntu:Pro:FIPS:18.04:LTS	All versions, plus listed versions 4.15.0-2000.4	None known
`linux-azure-fips` Ubuntu:Pro:FIPS:18.04:LTS	All versions, plus listed versions 4.15.0-1002.2	None known
`linux-fips` Ubuntu:Pro:FIPS:18.04:LTS	All versions, plus listed versions 4.15.0-1011.12	None known
`linux-gcp-fips` Ubuntu:Pro:FIPS:18.04:LTS	All versions, plus listed versions 4.15.0-1001.1	None known
`linux` Ubuntu:20.04:LTS	before 5.4.0-92.103, plus listed versions 5.3.0-18.195.3.0-24.265.4.0-9.125.4.0-18.225.4.0-21.25 Show 41 moreShow less 5.4.0-24.285.4.0-25.295.4.0-26.305.4.0-28.325.4.0-29.335.4.0-31.355.4.0-33.375.4.0-37.415.4.0-39.435.4.0-40.445.4.0-42.465.4.0-45.495.4.0-47.515.4.0-48.525.4.0-51.565.4.0-52.575.4.0-53.595.4.0-54.605.4.0-56.625.4.0-58.645.4.0-59.655.4.0-60.675.4.0-62.705.4.0-64.725.4.0-65.735.4.0-66.745.4.0-67.755.4.0-70.785.4.0-71.795.4.0-72.805.4.0-73.825.4.0-74.835.4.0-77.865.4.0-80.905.4.0-81.915.4.0-84.945.4.0-86.975.4.0-88.995.4.0-89.1005.4.0-90.1015.4.0-91.102	5.4.0-92.103
`linux-aws` Ubuntu:20.04:LTS	before 5.4.0-1061.64, plus listed versions 5.3.0-1003.35.3.0-1008.95.3.0-1009.105.3.0-1010.115.4.0-1005.5 Show 35 moreShow less 5.4.0-1007.75.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1017.175.4.0-1018.185.4.0-1020.205.4.0-1021.215.4.0-1022.225.4.0-1024.245.4.0-1025.255.4.0-1028.295.4.0-1029.305.4.0-1030.315.4.0-1032.335.4.0-1034.355.4.0-1035.375.4.0-1037.395.4.0-1038.405.4.0-1039.415.4.0-1041.435.4.0-1043.455.4.0-1045.475.4.0-1047.495.4.0-1048.505.4.0-1049.515.4.0-1051.535.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1058.615.4.0-1059.625.4.0-1060.63	5.4.0-1061.64
`linux-azure` Ubuntu:20.04:LTS	before 5.4.0-1065.68, plus listed versions 5.3.0-1003.35.3.0-1008.95.3.0-1009.105.4.0-1006.65.4.0-1008.8 Show 33 moreShow less 5.4.0-1009.95.4.0-1010.105.4.0-1012.125.4.0-1016.165.4.0-1019.195.4.0-1020.205.4.0-1022.225.4.0-1023.235.4.0-1025.255.4.0-1026.265.4.0-1031.325.4.0-1032.335.4.0-1034.355.4.0-1035.365.4.0-1036.385.4.0-1039.415.4.0-1040.425.4.0-1041.435.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1047.495.4.0-1048.505.4.0-1049.515.4.0-1051.535.4.0-1055.575.4.0-1056.585.4.0-1058.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1064.67	5.4.0-1065.68
`linux-bluefield` Ubuntu:20.04:LTS	before 5.4.0-1023.26, plus listed versions 5.4.0-1007.105.4.0-1011.145.4.0-1012.155.4.0-1013.165.4.0-1016.19 Show 4 moreShow less 5.4.0-1019.225.4.0-1020.235.4.0-1021.245.4.0-1022.25	5.4.0-1023.26
`linux-gcp` Ubuntu:20.04:LTS	before 5.4.0-1059.63, plus listed versions 5.3.0-1004.45.3.0-1009.105.3.0-1011.125.4.0-1005.55.4.0-1007.7 Show 33 moreShow less 5.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1018.185.4.0-1019.195.4.0-1021.215.4.0-1022.225.4.0-1024.245.4.0-1025.255.4.0-1028.295.4.0-1029.315.4.0-1030.325.4.0-1032.345.4.0-1033.355.4.0-1034.375.4.0-1036.395.4.0-1037.405.4.0-1038.415.4.0-1040.435.4.0-1041.445.4.0-1042.455.4.0-1043.465.4.0-1044.475.4.0-1046.495.4.0-1049.535.4.0-1051.555.4.0-1052.565.4.0-1053.575.4.0-1055.595.4.0-1056.605.4.0-1057.615.4.0-1058.62	5.4.0-1059.63
`linux-gkeop` Ubuntu:20.04:LTS	before 5.4.0-1029.30, plus listed versions 5.4.0-1008.95.4.0-1009.105.4.0-1010.115.4.0-1011.125.4.0-1012.13 Show 12 moreShow less 5.4.0-1013.145.4.0-1014.155.4.0-1015.165.4.0-1016.175.4.0-1018.195.4.0-1021.225.4.0-1022.235.4.0-1023.245.4.0-1024.255.4.0-1025.265.4.0-1026.275.4.0-1027.28	5.4.0-1029.30
`linux-ibm` Ubuntu:20.04:LTS	before 5.4.0-1010.11, plus listed versions 5.4.0-1003.45.4.0-1004.55.4.0-1005.65.4.0-1006.75.4.0-1007.85.4.0-1008.9	5.4.0-1010.11
`linux-kvm` Ubuntu:20.04:LTS	before 5.4.0-1051.53, plus listed versions 5.3.0-1003.35.3.0-1008.95.3.0-1009.105.4.0-1004.45.4.0-1006.6 Show 30 moreShow less 5.4.0-1007.75.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1018.185.4.0-1020.205.4.0-1021.215.4.0-1023.235.4.0-1024.245.4.0-1026.275.4.0-1028.295.4.0-1030.315.4.0-1031.325.4.0-1032.335.4.0-1033.345.4.0-1034.355.4.0-1036.375.4.0-1037.385.4.0-1038.395.4.0-1039.405.4.0-1040.415.4.0-1041.425.4.0-1044.465.4.0-1045.475.4.0-1046.485.4.0-1047.495.4.0-1048.505.4.0-1049.515.4.0-1050.52	5.4.0-1051.53

History

History
Recorded	Changed	Sources
Nov 2, 2026	first indexed	CVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2021-47497 is a high vulnerability (CVSS 7.8) in Linux, published May 22, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.22%, the 12th percentile. Fixed in bpftool 4.18.0-553.22.1.el8_10.

References

Show 194 moreShow less

This page doesn't list everything

Left out here: 577 package rows, 774 versions, 5,052 references and the rest of 17 source descriptions. The JSON record has them.