CVE-2024-46787

userfaultfd: fix checks for huge PMDs

7.8 HighFix available

In the Linux kernel, the following vulnerability has been resolved:

userfaultfd: fix checks for huge PMDs

Patch series "userfaultfd: fix races around pmd_trans_huge() check", v2.

The pmd_trans_huge() code in mfill_atomic() is wrong in three different ways depending on kernel version:

The pmd_trans_huge() check is racy and can lead to a BUG_ON() (if you hit the right two race windows) - I've tested this in a kernel build with some extra mdelay() calls. See the commit message for a description of the race scenario. On older kernels (before 6.5), I think the same bug can even theoretically lead to accessing transhuge page contents as a page table if you hit the right 5 narrow race windows (I haven't tested this case).
As pointed out by Qi Zheng, pmd_trans_huge() is not sufficient for detecting PMDs that don't point to page tables. On older kernels (before 6.5), you'd just have to win a single fairly wide race to hit this. I've tested this on 6.1 stable by racing migration (with a mdelay() patched into try_to_migrate()) against UFFDIO_ZEROPAGE - on my x86 VM, that causes a kernel oops in ptlock_ptr().
On newer kernels (>=6.5), for shmem mappings, khugepaged is allowed to yank page tables out from under us (though I haven't tested that), so I think the BUG_ON() checks in mfill_atomic() are just wrong.

I decided to write two separate fixes for these (one fix for bugs 1+2, one fix for bug 3), so that the first fix can be backported to kernels affected by bugs 1+2.

This patch (of 2):

This fixes two issues.

I discovered that the following race can occur:

mfill_atomic other thread ============ ============ <zap PMD> pmdp_get_lockless() [reads none pmd] <bail if trans_huge> <if none:> <pagefault creates transhuge zeropage> __pte_alloc [no-op] <zap PMD> <bail if pmd_trans_huge(*dst_pmd)> BUG_ON(pmd_none(*dst_pmd))

I have experimentally verified this in a kernel with extra mdelay() calls; the BUG_ON(pmd_none(*dst_pmd)) triggers.

On kernels newer than commit 0d940a9b270b ("mm/pgtable: allow pte_offset_map_lock to fail"), this can't lead to anything worse than a BUG_ON(), since the page table access helpers are actually designed to deal with page tables concurrently disappearing; but on older kernels (<=6.4), I think we could probably theoretically race past the two BUG_ON() checks and end up treating a hugepage as a page table.

The second issue is that, as Qi Zheng pointed out, there are other types of huge PMDs that pmd_trans_huge() can't catch: devmap PMDs and swap PMDs (in particular, migration PMDs).

On <=6.4, this is worse than the first issue: If mfill_atomic() runs on a PMD that contains a migration entry (which just requires winning a single, fairly wide race), it will pass the PMD to pte_offset_map_lock(), which assumes that the PMD points to a page table.

Breakage follows: First, the kernel tries to take the PTE lock (which will crash or maybe worse if there is no "struct page" for the address bits in the migration entry PMD - I think at least on X86 there usually is no corresponding "struct page" thanks to the PTE inversion mitigation, amd64 looks different).

If that didn't crash, the kernel would next try to write a PTE into what it wrongly thinks is a page table.

As part of fixing these issues, get rid of the check for pmd_trans_huge() before __pte_alloc() - that's redundant, we're going to have to check for that after the __pte_alloc() anyway.

Backport note: pmdp_get_lockless() is pmd_read_atomic() in older kernels.

Attack profile

How easy it is to exploit

Attack vector: Local
Complexity: Low
Privileges needed: Low
User interaction: None

What an attacker can affect

Confidentiality: High
Integrity: High
Availability: High

Exploit likelihood

0.22%Up 0.2 points since Sep 19, 2024

What each source reports

CVE List Score used 7.8

userfaultfd: fix checks for huge PMDs

In the Linux kernel, the following vulnerability has been resolved:

userfaultfd: fix checks for huge PMDs

Patch series "userfaultfd: fix races around pmd_trans_huge() check", v2.

The pmd_trans_huge() code in mfill_atomic() is wrong in three different ways depending on kernel version:

The pmd_trans_huge() check is racy and can lead to a BUG_ON() (if you hit the right two race windows) - I've tested this in a kernel build with some extra mdelay() calls. See the commit message for a description of the race scenario. On older kernels (before 6.5), I think the same bug can even theoretically lead to accessing transhuge page contents as a page table if you hit the right 5 narrow race windows (I haven't tested this case).
As pointed out by Qi Zheng, pmd_trans_huge() is not sufficient for detecting PMDs that don't point to page tables. On older kernels (before 6.5), you'd just have to win a single fairly wide race to hit this. I've tested this on 6.1 stable by racing migration (with a mdelay() patched into try_to_migrate()) against UFFDIO_ZEROPAGE - on my x86 VM, that causes a kernel oops in ptlock_ptr().
On newer kernels (>=6.5), for shmem mappings, khugepaged is allowed to yank page tables out from under us (though I haven't tested that), so I think the BUG_ON() checks in mfill_atomic() are just wrong.

I decided to write two separate fixes for these (one fix for bugs 1+2, one fix for bug 3), so that the first fix can be backported to kernels affected by bugs 1+2.

This patch (of 2):

This fixes two issues.

I discovered that the following race can occur:

I have experimentally verified this in a kernel with extra mdelay() calls; the BUG_ON(pmd_none(*dst_pmd)) triggers.

The second issue is that, as Qi Zheng pointed out, there are other types of huge PMDs that pmd_trans_huge() can't catch: devmap PMDs and swap PMDs (in particular, migration PMDs).

If that didn't crash, the kernel would next try to write a PTE into what it wrongly thinks is a page table.

As part of fixing these issues, get rid of the check for pmd_trans_huge() before __pte_alloc() - that's redundant, we're going to have to check for that after the __pte_alloc() anyway.

Backport note: pmdp_get_lockless() is pmd_read_atomic() in older kernels.

Record: CVE-2024-46787
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

EUVDEUVD-2024-42048 7.8

In the Linux kernel, the following vulnerability has been resolved:

userfaultfd: fix checks for huge PMDs

Patch series "userfaultfd: fix races around pmd_trans_huge() check", v2.

The pmd_trans_huge() code in mfill_atomic() is wrong in three different ways depending on kernel version:

The pmd_trans_huge() check is racy and can lead to a BUG_ON() (if you hit the right two race windows) - I've tested this in a kernel build with some extra mdelay() calls. See the commit message for a description of the race scenario. On older kernels (before 6.5), I think the same bug can even theoretically lead to accessing transhuge page contents as a page table if you hit the right 5 narrow race windows (I haven't tested this case).
As pointed out by Qi Zheng, pmd_trans_huge() is not sufficient for detecting PMDs that don't point to page tables. On older kernels (before 6.5), you'd just have to win a single fairly wide race to hit this. I've tested this on 6.1 stable by racing migration (with a mdelay() patched into try_to_migrate()) against UFFDIO_ZEROPAGE - on my x86 VM, that causes a kernel oops in ptlock_ptr().
On newer kernels (>=6.5), for shmem mappings, khugepaged is allowed to yank page tables out from under us (though I haven't tested that), so I think the BUG_ON() checks in mfill_atomic() are just wrong.

I decided to write two separate fixes for these (one fix for bugs 1+2, one fix for bug 3), so that the first fix can be backported to kernels affected by bugs 1+2.

This patch (of 2):

This fixes two issues.

I discovered that the following race can occur:

I have experimentally verified this in a kernel with extra mdelay() calls; the BUG_ON(pmd_none(*dst_pmd)) triggers.

The second issue is that, as Qi Zheng pointed out, there are other types of huge PMDs that pmd_trans_huge() can't catch: devmap PMDs and swap PMDs (in particular, migration PMDs).

If that didn't crash, the kernel would next try to write a PTE into what it wrongly thinks is a page table.

As part of fixing these issues, get rid of the check for pmd_trans_huge() before __pte_alloc() - that's redundant, we're going to have to check for that after the __pte_alloc() anyway.

Backport note: pmdp_get_lockless() is pmd_read_atomic() in older kernels.

Record: EUVD-2024-42048
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

GitHub AdvisoriesGHSA-r8fr-h8q4-2f98 4.7

In the Linux kernel, the following vulnerability has been resolved: userfaultfd: fix checks for...

In the Linux kernel, the following vulnerability has been resolved:

userfaultfd: fix checks for huge PMDs

Patch series "userfaultfd: fix races around pmd_trans_huge() check", v2.

The pmd_trans_huge() code in mfill_atomic() is wrong in three different ways depending on kernel version:

The pmd_trans_huge() check is racy and can lead to a BUG_ON() (if you hit the right two race windows) - I've tested this in a kernel build with some extra mdelay() calls. See the commit message for a description of the race scenario. On older kernels (before 6.5), I think the same bug can even theoretically lead to accessing transhuge page contents as a page table if you hit the right 5 narrow race windows (I haven't tested this case).
As pointed out by Qi Zheng, pmd_trans_huge() is not sufficient for detecting PMDs that don't point to page tables. On older kernels (before 6.5), you'd just have to win a single fairly wide race to hit this. I've tested this on 6.1 stable by racing migration (with a mdelay() patched into try_to_migrate()) against UFFDIO_ZEROPAGE - on my x86 VM, that causes a kernel oops in ptlock_ptr().
On newer kernels (>=6.5), for shmem mappings, khugepaged is allowed to yank page tables out from under us (though I haven't tested that), so I think the BUG_ON() checks in mfill_atomic() are just wrong.

I decided to write two separate fixes for these (one fix for bugs 1+2, one fix for bug 3), so that the first fix can be backported to kernels affected by bugs 1+2.

This patch (of 2):

This fixes two issues.

I discovered that the following race can occur:

I have experimentally verified this in a kernel with extra mdelay() calls; the BUG_ON(pmd_none(*dst_pmd)) triggers.

The second issue is that, as Qi Zheng pointed out, there are other types of huge PMDs that pmd_trans_huge() can't catch: devmap PMDs and swap PMDs (in particular, migration PMDs).

If that didn't crash, the kernel would next try to write a PTE into what it wrongly thinks is a page table.

As part of fixing these issues, get rid of the check for pmd_trans_huge() before __pte_alloc() - that's redundant, we're going to have to check for that after the __pte_alloc() anyway.

Backport note: pmdp_get_lockless() is pmd_read_atomic() in older kernels.

Record: GHSA-r8fr-h8q4-2f98
CVSS 3.1: 4.7 MediumCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

NVD 7.8

In the Linux kernel, the following vulnerability has been resolved:

userfaultfd: fix checks for huge PMDs

Patch series "userfaultfd: fix races around pmd_trans_huge() check", v2.

The pmd_trans_huge() code in mfill_atomic() is wrong in three different ways depending on kernel version:

The pmd_trans_huge() check is racy and can lead to a BUG_ON() (if you hit the right two race windows) - I've tested this in a kernel build with some extra mdelay() calls. See the commit message for a description of the race scenario. On older kernels (before 6.5), I think the same bug can even theoretically lead to accessing transhuge page contents as a page table if you hit the right 5 narrow race windows (I haven't tested this case).
As pointed out by Qi Zheng, pmd_trans_huge() is not sufficient for detecting PMDs that don't point to page tables. On older kernels (before 6.5), you'd just have to win a single fairly wide race to hit this. I've tested this on 6.1 stable by racing migration (with a mdelay() patched into try_to_migrate()) against UFFDIO_ZEROPAGE - on my x86 VM, that causes a kernel oops in ptlock_ptr().
On newer kernels (>=6.5), for shmem mappings, khugepaged is allowed to yank page tables out from under us (though I haven't tested that), so I think the BUG_ON() checks in mfill_atomic() are just wrong.

I decided to write two separate fixes for these (one fix for bugs 1+2, one fix for bug 3), so that the first fix can be backported to kernels affected by bugs 1+2.

This patch (of 2):

This fixes two issues.

I discovered that the following race can occur:

I have experimentally verified this in a kernel with extra mdelay() calls; the BUG_ON(pmd_none(*dst_pmd)) triggers.

The second issue is that, as Qi Zheng pointed out, there are other types of huge PMDs that pmd_trans_huge() can't catch: devmap PMDs and swap PMDs (in particular, migration PMDs).

If that didn't crash, the kernel would next try to write a PTE into what it wrongly thinks is a page table.

As part of fixing these issues, get rid of the check for pmd_trans_huge() before __pte_alloc() - that's redundant, we're going to have to check for that after the __pte_alloc() anyway.

Backport note: pmdp_get_lockless() is pmd_read_atomic() in older kernels.

Record: CVE-2024-46787
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1: 4.7 MediumCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVBELL-CVE-2024-46787 4.7

Record: BELL-CVE-2024-46787
CVSS 3.1: 4.7 MediumCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-04

OSV 7.8

userfaultfd: fix checks for huge PMDs

In the Linux kernel, the following vulnerability has been resolved:

userfaultfd: fix checks for huge PMDs

Patch series "userfaultfd: fix races around pmd_trans_huge() check", v2.

The pmd_trans_huge() code in mfill_atomic() is wrong in three different ways depending on kernel version:

The pmd_trans_huge() check is racy and can lead to a BUG_ON() (if you hit the right two race windows) - I've tested this in a kernel build with some extra mdelay() calls. See the commit message for a description of the race scenario. On older kernels (before 6.5), I think the same bug can even theoretically lead to accessing transhuge page contents as a page table if you hit the right 5 narrow race windows (I haven't tested this case).
As pointed out by Qi Zheng, pmd_trans_huge() is not sufficient for detecting PMDs that don't point to page tables. On older kernels (before 6.5), you'd just have to win a single fairly wide race to hit this. I've tested this on 6.1 stable by racing migration (with a mdelay() patched into try_to_migrate()) against UFFDIO_ZEROPAGE - on my x86 VM, that causes a kernel oops in ptlock_ptr().
On newer kernels (>=6.5), for shmem mappings, khugepaged is allowed to yank page tables out from under us (though I haven't tested that), so I think the BUG_ON() checks in mfill_atomic() are just wrong.

I decided to write two separate fixes for these (one fix for bugs 1+2, one fix for bug 3), so that the first fix can be backported to kernels affected by bugs 1+2.

This patch (of 2):

This fixes two issues.

I discovered that the following race can occur:

I have experimentally verified this in a kernel with extra mdelay() calls; the BUG_ON(pmd_none(*dst_pmd)) triggers.

The second issue is that, as Qi Zheng pointed out, there are other types of huge PMDs that pmd_trans_huge() can't catch: devmap PMDs and swap PMDs (in particular, migration PMDs).

If that didn't crash, the kernel would next try to write a PTE into what it wrongly thinks is a page table.

As part of fixing these issues, get rid of the check for pmd_trans_huge() before __pte_alloc() - that's redundant, we're going to have to check for that after the __pte_alloc() anyway.

Backport note: pmdp_get_lockless() is pmd_read_atomic() in older kernels.

Record: CVE-2024-46787
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

Show 48 moreShow less

OSVDEBIAN-CVE-2024-46787 4.7

In the Linux kernel, the following vulnerability has been resolved: userfaultfd: fix checks for huge PMDs Patch series "userfaultfd: fix races around pmd_trans_huge() check", v2. The pmd_trans_huge() code in mfill_atomic() is wrong in three different ways depending on kernel version: 1. The pmd_trans_huge() check is racy and can lead to a BUG_ON() (if you hit the right two race windows) - I've tested this in a kernel build with some extra mdelay() calls. See the commit message for a description of the race scenario. On older kernels (before 6.5), I think the same bug can even theoretically lead to accessing transhuge page contents as a page table if you hit the right 5 narrow race windows (I haven't tested this case). 2. As pointed out by Qi Zheng, pmd_trans_huge() is not sufficient for detecting PMDs that don't point to page tables. On older kernels (before 6.5), you'd just have to win a single fairly wide race to hit this. I've tested this on 6.1 stable by racing migration (with a mdelay() patched into try_to_migrate()) against UFFDIO_ZEROPAGE - on my x86 VM, that causes a kernel oops in ptlock_ptr(). 3. On newer kernels (>=6.5), for shmem mappings, khugepaged is allowed to yank page tables out from under us (though I haven't tested that), so I think the BUG_ON() checks in mfill_atomic() are just wrong. I decided to write two separate fixes for these (one fix for bugs 1+2, one fix for bug 3), so that the first fix can be backported to kernels affected by bugs 1+2. This patch (of 2): This fixes two issues. I discovered that the following race can occur: mfill_atomic other thread ============ ============ <zap PMD> pmdp_get_lockless() [reads none pmd] <bail if trans_huge> <if none:> <pagefault creates transhuge zeropage> __pte_alloc [no-op] <zap PMD> <bail if pmd_trans_huge(*dst_pmd)> BUG_ON(pmd_none(*dst_pmd)) I have experimentally verified this in a kernel with extra mdelay() calls; the BUG_ON(pmd_none(*dst_pmd)) triggers. On kernels newer than commit 0d940a9b270b ("mm/pgtable: allow pte_offset_map_lock to fail"), this can't lead to anything worse than a BUG_ON(), since the page table access helpers are actually designed to deal with page tables concurrently disappearing; but on older kernels (<=6.4), I think we could probably theoretically race past the two BUG_ON() checks and end up treating a hugepage as a page table. The second issue is that, as Qi Zheng pointed out, there are other types of huge PMDs that pmd_trans_huge() can't catch: devmap PMDs and swap PMDs (in particular, migration PMDs). On <=6.4, this is worse than the first issue: If mfill_atomic() runs on a PMD that contains a migration entry (which just requires winning a single, fairly wide race), it will pass the PMD to pte_offset_map_lock(), which assumes that the PMD points to a page table. Breakage follows: First, the kernel tries to take the PTE lock (which will crash or maybe worse if there is no "struct page" for the address bits in the migration entry PMD - I think at least on X86 there usually is no corresponding "struct page" thanks to the PTE inversion mitigation, amd64 looks different). If that didn't crash, the kernel would next try to write a PTE into what it wrongly thinks is a page table. As part of fixing these issues, get rid of the check for pmd_trans_huge() before __pte_alloc() - that's redundant, we're going to have to check for that after the __pte_alloc() anyway. Backport note: pmdp_get_lockless() is pmd_read_atomic() in older kernels.

Record: DEBIAN-CVE-2024-46787
CVSS 3.1: 4.7 MediumCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVOESA-2024-2182 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

clk: sunxi-ng: Unregister clocks/resets when unbinding

Currently, unbinding a CCU driver unmaps the device's MMIO region, while leaving its clocks/resets and their providers registered. This can cause a page fault later when some clock operation tries to perform MMIO. Fix this by separating the CCU initialization from the memory allocation, and then using a devres callback to unregister the clocks and resets.

This also fixes a memory leak of the struct ccu_reset, and uses the correct owner (the specific platform driver) for the clocks and resets.

Early OF clock providers are never unregistered, and limited error handling is possible, so they are mostly unchanged. The error reporting is made more consistent by moving the message inside of_sunxi_ccu_probe.(CVE-2021-47205)

In the Linux kernel, the following vulnerability has been resolved:

NFSD: Fix ia_size underflow

iattr::ia_size is a loff_t, which is a signed 64-bit type. NFSv3 and NFSv4 both define file size as an unsigned 64-bit type. Thus there is a range of valid file size values an NFS client can send that is already larger than Linux can handle.

Currently decode_fattr4() dumps a full u64 value into ia_size. If that value happens to be larger than S64_MAX, then ia_size underflows. I'm about to fix up the NFSv3 behavior as well, so let's catch the underflow in the common code path: nfsd_setattr().(CVE-2022-48828)

In the Linux kernel, the following vulnerability has been resolved:

net: mvpp2: clear BM pool before initialization

Register value persist after booting the kernel using kexec which results in kernel panic. Thus clear the BM pool registers before initialisation to fix the issue.(CVE-2024-35837)

In the Linux kernel, the following vulnerability has been resolved:

drivers: core: synchronize really_probe() and dev_uevent()

Synchronize the dev->driver usage in really_probe() and dev_uevent(). These can run in different threads, what can result in the following race condition for dev->driver uninitialization:

Thread #1:

really_probe() { ... probe_failed: ... device_unbind_cleanup(dev) { ... dev->driver = NULL; // <= Failed probe sets dev->driver to NULL ... } ... }

Thread #2:

dev_uevent() { ... if (dev->driver) // If dev->driver is NULLed from really_probe() from here on, // after above check, the system crashes add_uevent_var(env, "DRIVER=%s", dev->driver->name); ... }

really_probe() holds the lock, already. So nothing needs to be done there. dev_uevent() is called with lock held, often, too. But not always. What implies that we can't add any locking in dev_uevent() itself. So fix this race by adding the lock to the non-protected path. This is the path where above race is observed:

dev_uevent+0x235/0x380 uevent_show+0x10c/0x1f0 <= Add lock here dev_attr_show+0x3a/0xa0 sysfs_kf_seq_show+0x17c/0x250 kernfs_seq_show+0x7c/0x90 seq_read_iter+0x2d7/0x940 kernfs_fop_read_iter+0xc6/0x310 vfs_read+0x5bc/0x6b0 ksys_read+0xeb/0x1b0 __x64_sys_read+0x42/0x50 x64_sys_call+0x27ad/0x2d30 do_syscall_64+0xcd/0x1d0 entry_SYSCALL_64_after_hwframe+0x77/0x7f

Similar cases are reported by syzkaller in

https://syzkaller.appspot.com/bug?extid=ffa8143439596313a85a

But these are regarding the initialization of dev->driver

dev->driver = drv;

As this switches dev->driver to non-NULL these reports can be considered to be false-positives (which should be "fixed" by this commit, as well, though).

The same issue was reported and tried to be fixed back in 2015 in

https://lore.kernel.org/lkml/[email protected]/

already.(CVE-2024-39501)

In the Linux kernel, the following vulnerability has…

Record: OESA-2024-2182
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVOESA-2024-2183 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

NFSD: Fix ia_size underflow

In the Linux kernel, the following vulnerability has been resolved:

drm/amd/pm: fix a double-free in si_dpm_init

When the allocation of adev->pm.dpm.dyn_state.vddc_dependency_on_dispclk.entries fails, amdgpu_free_extended_power_table is called to free some fields of adev. However, when the control flow returns to si_dpm_sw_init, it goes to label dpm_failed and calls si_dpm_fini, which calls amdgpu_free_extended_power_table again and free those fields again. Thus a double-free is triggered.(CVE-2023-52691)

In the Linux kernel, the following vulnerability has been resolved:

netfilter: tproxy: bail out if IP has been disabled on the device

syzbot reports: general protection fault, probably for non-canonical address 0xdffffc0000000003: 0000 [#1] PREEMPT SMP KASAN PTI KASAN: null-ptr-deref in range [0x0000000000000018-0x000000000000001f] [..] RIP: 0010:nf_tproxy_laddr4+0xb7/0x340 net/ipv4/netfilter/nf_tproxy_ipv4.c:62 Call Trace: nft_tproxy_eval_v4 net/netfilter/nft_tproxy.c:56 [inline] nft_tproxy_eval+0xa9a/0x1a00 net/netfilter/nft_tproxy.c:168

__in_dev_get_rcu() can return NULL, so check for this.(CVE-2024-36270)

In the Linux kernel, the following vulnerability has been resolved:

nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies

syzbot reported unsafe calls to copy_from_sockptr() [1]

Use copy_safe_from_sockptr() instead.

[1]

BUG: KASAN: slab-out-of-bounds in copy_from_sockptr_offset include/linux/sockptr.h:49 [inline] BUG: KASAN: slab-out-of-bounds in copy_from_sockptr include/linux/sockptr.h:55 [inline] BUG: KASAN: slab-out-of-bounds in nfc_llcp_setsockopt+0x6c2/0x850 net/nfc/llcp_sock.c:255 Read of size 4 at addr ffff88801caa1ec3 by task syz-executor459/5078

CPU: 0 PID: 5078 Comm: syz-executor459 Not tainted 6.8.0-syzkaller-08951-gfe46a7dd189e #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 Call Trace: <TASK> __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x241/0x360 lib/dump_stack.c:114 print_address_description mm/kasan/report.c:377 [inline] print_report+0x169/0x550 mm/kasan/report.c:488 kasan_report+0x143/0x180 mm/kasan/report.c:601 copy_from_sockptr_offset include/linux/sockptr.h:49 [inline] copy_from_sockptr include/linux/sockptr.h:55 [inline] nfc_llcp_setsockopt+0x6c2/0x850 net/nfc/llcp_sock.c:255 do_sock_setsockopt+0x3b1/0x720 net/socket.c:2311 __sys_setsockopt+0x1ae/0x250 net/socket.c:2334 __do_sys_setsockopt net/socket.c:2343 [inline] __se_sys_setsockopt net/socket.c:2340 [inline] __x64_sys_setsockopt+0xb5/0xd0 net/socket.c:2340 do_syscall_64+0xfd/0x240 entry_SYSCALL_64_after_hwframe+0x6d/0x75 RIP: 0033:0x7f7fac07fd89 Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 91 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fff660eb788 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f7fac07fd89 RDX: 0000000000000000 RSI: 0000000000000118 RDI: 0000000000000004 RBP: 0000000000000000 R08: 0000000000000002 R09: 0000000000000000 R10: 0000000020000a80 R11: 0000000000000246 R12: 0000000000000000 R13: 0000000000000000 R14:…

Record: OESA-2024-2183
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVOESA-2024-2185 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

NFSD: Fix ia_size underflow

In the Linux kernel, the following vulnerability has been resolved:

misc: fastrpc: Fix use-after-free race condition for maps

It is possible that in between calling fastrpc_map_get() until map->fl->lock is taken in fastrpc_free_map(), another thread can call fastrpc_map_lookup() and get a reference to a map that is about to be deleted.

Rewrite fastrpc_map_get() to only increase the reference count of a map if it's non-zero. Propagate this to callers so they can know if a map is about to be deleted.

Fixes this warning: refcount_t: addition on 0; use-after-free. WARNING: CPU: 5 PID: 10100 at lib/refcount.c:25 refcount_warn_saturate ... Call trace: refcount_warn_saturate [fastrpc_map_get inlined] [fastrpc_map_lookup inlined] fastrpc_map_create fastrpc_internal_invoke fastrpc_device_ioctl __arm64_sys_ioctl invoke_syscall(CVE-2022-48872)

In the Linux kernel, the following vulnerability has been resolved:

drm/amd/pm: fix a double-free in si_dpm_init

In the Linux kernel, the following vulnerability has been resolved:

f2fs: avoid format-overflow warning

With gcc and W=1 option, there's a warning like this:

fs/f2fs/compress.c: In function ‘f2fs_init_page_array_cache’: fs/f2fs/compress.c:1984:47: error: ‘%u’ directive writing between 1 and 7 bytes into a region of size between 5 and 8 [-Werror=format-overflow=] 1984 | sprintf(slab_name, "f2fs_page_array_entry-%u:%u", MAJOR(dev), MINOR(dev)); | ^~

String "f2fs_page_array_entry-%u:%u" can up to 35. The first "%u" can up to 4 and the second "%u" can up to 7, so total size is "24 + 4 + 7 = 35". slab_name's size should be 35 rather than 32.(CVE-2023-52748)

In the Linux kernel, the following vulnerability has been resolved:

usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()

In Google internal bug 265639009 we've received an (as yet) unreproducible crash report from an aarch64 GKI 5.10.149-android13 running device.

AFAICT the source code is at: https://android.googlesource.com/kernel/common/+/refs/tags/ASB-2022-12-05_13-5.10

The call stack is: ncm_close() -> ncm_notify() -> ncm_do_notify() with the crash at: ncm_do_notify+0x98/0x270 Code: 79000d0b b9000a6c f940012a f9400269 (b9405d4b)

Which I believe disassembles to (I don't know ARM assembly, but it looks sane enough to me...):

// halfword (16-bit) store presumably to event->wLength (at offset 6 of struct usb_cdc_notification) 0B 0D 00 79 strh w11, [x8, #6]

// word (32-bit) store presumably to req->Length (at offset 8 of struct usb_request) 6C 0A 00 B9 str w12, [x19, #8]

// x10 (NULL) was read here from offset 0 of valid pointer x9 // IMHO we're reading 'cdev->gadget' and…

Record: OESA-2024-2185
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVOESA-2024-2219 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()

set_memory_rox() can fail, leaving memory unprotected.

Check return and bail out when bpf_jit_binary_lock_ro() returns an error.(CVE-2024-42067)

In the Linux kernel, the following vulnerability has been resolved:

sysctl: always initialize i_uid/i_gid

Always initialize i_uid/i_gid inside the sysfs core so set_ownership() can safely skip setting them.

Commit 5ec27ec735ba ("fs/proc/proc_sysctl.c: fix the default values of i_uid/i_gid on /proc/sys inodes.") added defaults for i_uid/i_gid when set_ownership() was not implemented. It also missed adjusting net_ctl_set_ownership() to use the same default values in case the computation of a better value failed.(CVE-2024-42312)

In the Linux kernel, the following vulnerability has been resolved:

parisc: fix a possible DMA corruption

ARCH_DMA_MINALIGN was defined as 16 - this is too small - it may be possible that two unrelated 16-byte allocations share a cache line. If one of these allocations is written using DMA and the other is written using cached write, the value that was written with DMA may be corrupted.

This commit changes ARCH_DMA_MINALIGN to be 128 on PA20 and 32 on PA1.1 - that's the largest possible cache line size.

As different parisc microarchitectures have different cache line size, we define arch_slab_minalign(), cache_line_size() and dma_get_cache_alignment() so that the kernel may tune slab cache parameters dynamically, based on the detected cache line size.(CVE-2024-44949)

In the Linux kernel, the following vulnerability has been resolved:

sched/smt: Fix unbalance sched_smt_present dec/inc

I got the following warn report while doing stress test:

jump label: negative count! WARNING: CPU: 3 PID: 38 at kernel/jump_label.c:263 static_key_slow_try_dec+0x9d/0xb0 Call Trace: <TASK> __static_key_slow_dec_cpuslocked+0x16/0x70 sched_cpu_deactivate+0x26e/0x2a0 cpuhp_invoke_callback+0x3ad/0x10d0 cpuhp_thread_fun+0x3f5/0x680 smpboot_thread_fn+0x56d/0x8d0 kthread+0x309/0x400 ret_from_fork+0x41/0x70 ret_from_fork_asm+0x1b/0x30 </TASK>

Because when cpuset_cpu_inactive() fails in sched_cpu_deactivate(), the cpu offline failed, but sched_smt_present is decremented before calling sched_cpu_deactivate(), it leads to unbalanced dec/inc, so fix it by incrementing sched_smt_present in the error path.(CVE-2024-44958)

In the Linux kernel, the following vulnerability has been resolved:

mptcp: pm: only decrement add_addr_accepted for MPJ req

Adding the following warning ...

WARN_ON_ONCE(msk->pm.add_addr_accepted == 0)

... before decrementing the add_addr_accepted counter helped to find a bug when running the "remove single subflow" subtest from the mptcp_join.sh selftest.

Removing a 'subflow' endpoint will first trigger a RM_ADDR, then the subflow closure. Before this patch, and upon the reception of the RM_ADDR, the other peer will then try to decrement this add_addr_accepted. That's not correct because the attached subflows have not been created upon the reception of an ADD_ADDR.

A way to solve that is to decrement the counter only if the attached subflow was an MP_JOIN to a remote id that was not 0, and initiated by the host receiving the RM_ADDR.(CVE-2024-45009)

In the Linux kernel, the following vulnerability has been resolved:

char: xillybus: Check USB endpoints when probing device

Ensure, as the driver probes the device, that all endpoints that the driver may attempt to access exist and are of the correct type.

All XillyUSB devices must have a Bulk IN and Bulk OUT endpoint at address 1. This is verified in xillyusb_setup_base_eps().

On top of that, a XillyUSB device may have additional Bulk OUT endpoints. The…

Record: OESA-2024-2219
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2025:6966 7.8

Red Hat Security Advisory: kernel security update

Record: RHSA-2025:6966
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVROOT-OS-DEBIAN-11-CVE-2024-46787 4.7

CVE-2024-46787 in linux - Patched by Root

Root has patched CVE-2024-46787 in the linux package for Root:Debian:11. Multiple fixed versions available.

Record: ROOT-OS-DEBIAN-11-CVE-2024-46787
CVSS 3.1: 4.7 MediumCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVROOT-OS-DEBIAN-12-CVE-2024-46787 4.7

CVE-2024-46787 in linux - Patched by Root

Root has patched CVE-2024-46787 in the linux package for Root:Debian:12. Multiple fixed versions available.

Record: ROOT-OS-DEBIAN-12-CVE-2024-46787
CVSS 3.1: 4.7 MediumCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVROOT-OS-UBUNTU-2204-CVE-2024-46787 4.7

CVE-2024-46787 in linux - Patched by Root

Root has patched CVE-2024-46787 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available.

Record: ROOT-OS-UBUNTU-2204-CVE-2024-46787
CVSS 3.1: 4.7 MediumCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-06

OSVUBUNTU-CVE-2024-46787 5.7

Record: UBUNTU-CVE-2024-46787
CVSS 4.0: 5.7 MediumCVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
CVSS 3.1: 4.7 MediumCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVAZL-53265 No score

CVE-2024-46787 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved:

userfaultfd: fix checks for huge PMDs

Patch series "userfaultfd: fix races around pmd_trans_huge() check", v2.

The pmd_trans_huge() code in mfill_atomic() is wrong in three different ways depending on kernel version:

The pmd_trans_huge() check is racy and can lead to a BUG_ON() (if you hit the right two race windows) - I've tested this in a kernel build with some extra mdelay() calls. See the commit message for a description of the race scenario. On older kernels (before 6.5), I think the same bug can even theoretically lead to accessing transhuge page contents as a page table if you hit the right 5 narrow race windows (I haven't tested this case).
As pointed out by Qi Zheng, pmd_trans_huge() is not sufficient for detecting PMDs that don't point to page tables. On older kernels (before 6.5), you'd just have to win a single fairly wide race to hit this. I've tested this on 6.1 stable by racing migration (with a mdelay() patched into try_to_migrate()) against UFFDIO_ZEROPAGE - on my x86 VM, that causes a kernel oops in ptlock_ptr().
On newer kernels (>=6.5), for shmem mappings, khugepaged is allowed to yank page tables out from under us (though I haven't tested that), so I think the BUG_ON() checks in mfill_atomic() are just wrong.

I decided to write two separate fixes for these (one fix for bugs 1+2, one fix for bug 3), so that the first fix can be backported to kernels affected by bugs 1+2.

This patch (of 2):

This fixes two issues.

I discovered that the following race can occur:

I have experimentally verified this in a kernel with extra mdelay() calls; the BUG_ON(pmd_none(*dst_pmd)) triggers.

The second issue is that, as Qi Zheng pointed out, there are other types of huge PMDs that pmd_trans_huge() can't catch: devmap PMDs and swap PMDs (in particular, migration PMDs).

If that didn't crash, the kernel would next try to write a PTE into what it wrongly thinks is a page table.

As part of fixing these issues, get rid of the check for pmd_trans_huge() before __pte_alloc() - that's redundant, we're going to have to check for that after the __pte_alloc() anyway.

Backport note: pmdp_get_lockless() is pmd_read_atomic() in older kernels.

Record: AZL-53265
Updated: 2026-11-02

OSVCLSA-2025-1753083608 No score

Fix of 17 CVEs

Focal update: v5.4.292 upstream stable release (LP: #2109357) // CVE-url: https://ubuntu.com/security/CVE-2025-37937
- objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
Focal update: v5.4.287 upstream stable release (LP: #2095145) // CVE-url: https://ubuntu.com/security/CVE-2024-53197
- ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices
CVE-url: https://ubuntu.com/security/CVE-2024-46787
- userfaultfd: fix checks for huge PMDs
CVE-url: https://ubuntu.com/security/CVE-2025-37798
- sch_drr: make drr_qlen_notify() idempotent
- sch_hfsc: make hfsc_qlen_notify() idempotent
- sch_qfq: make qfq_qlen_notify() idempotent
- codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()
Focal update: v5.4.285 upstream stable release (LP: #2089233) // CVE-2024-50116 // CVE-url: https://ubuntu.com/security/CVE-2024-50116
- nilfs2: fix kernel bug due to missing clearing of buffer delay flag
Focal update: v5.4.285 upstream stable release (LP: #2089233) // CVE-2024-49958 // CVE-url: https://ubuntu.com/security/CVE-2024-49958
- ocfs2: reserve space for inline xattr before attaching reflink tree
Focal update: v5.4.286 upstream stable release (LP: #2089558) // CVE-url: https://ubuntu.com/security/CVE-2021-47195
- spi: fix use-after-free of the add_lock mutex
CVE-url: https://ubuntu.com/security/CVE-2021-47469
- spi: Fix deadlock when adding SPI controllers on SPI buses
CVE-url: https://ubuntu.com/security/CVE-2025-39735
- jfs: fix slab-out-of-bounds read in ea_get()
CVE-url: https://ubuntu.com/security/CVE-2025-22020
- memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove
CVE-url: https://ubuntu.com/security/CVE-2025-22004
- net: atm: fix use after free in lec_send()
CVE-url: https://ubuntu.com/security/CVE-2025-39688
- nfsd: allow SC_STATUS_FREEABLE when searching via nfs4_lookup_stateid()
CVE-url: https://ubuntu.com/security/CVE-2022-49892
- ftrace: Fix use-after-free for dynamic ftrace_ops
CVE-url: https://ubuntu.com/security/CVE-2021-47293
- net/sched: act_skbmod: Skip non-Ethernet packets
CVE-url: https://ubuntu.com/security/CVE-2024-50106
- nfsd: simplify nfs4_put_deleg_lease calls
- nfsd: factor out common delegation-destruction code
- nfsd: Fix race to FREE_STATEID and cl_revoked
- nfsd: don't call functions with side-effecting inside WARN_ON()
- nfsd: remove fault injection code
- nfsd: avoid race after unhash_delegation_locked()
- nfsd4: don't set lock stateid's sc_type to CLOSED
- nfsd: split sc_status out of sc_type
- nfsd: fix race between laundromat and free_stateid
CVE-url: https://ubuntu.com/security/CVE-2024-57982
- xfrm: state: fix out-of-bounds read during lookup
CVE-url: https://ubuntu.com/security/CVE-2023-52588
- f2fs: fix to tag gcing flag on page during block migration
Miscellaneous Ubuntu changes
- [Config] updateconfigs for NFSD_FAULT_INJECTION

Record: CLSA-2025-1753083608
Updated: 2026-11-02

OSVCLSA-2025-1753085842 No score

Fix of 10 CVEs

CVE-url: https://ubuntu.com/security/CVE-2024-46787
- userfaultfd: fix checks for huge PMDs
CVE-url: https://ubuntu.com/security/CVE-2025-37798
- sch_htb: make htb_qlen_notify() idempotent
- sch_drr: make drr_qlen_notify() idempotent
- sch_hfsc: make hfsc_qlen_notify() idempotent
- sch_qfq: make qfq_qlen_notify() idempotent
- codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()
CVE-url: https://ubuntu.com/security/CVE-2025-37803
- udmabuf: fix a buf size overflow issue during udmabuf creation
CVE-url: https://ubuntu.com/security/CVE-2025-37785
- ext4: optimize __ext4_check_dir_entry()
- ext4: fix OOB read when checking dotdot dir
CVE-url: https://ubuntu.com/security/CVE-2025-22038
- ksmbd: validate zero num_subauth before sub_auth is accessed
CVE-url: https://ubuntu.com/security/CVE-2025-21927
- nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
CVE-url: https://ubuntu.com/security/CVE-2025-21969
- Bluetooth: L2CAP: Fix slab-use-after-free Read in l2cap_send_cmd
CVE-url: https://ubuntu.com/security/CVE-2025-21855
- ibmvnic: Don't reference skb after sending to VIOS
CVE-url: https://ubuntu.com/security/CVE-2025-21780
- drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
CVE-url: https://ubuntu.com/security/CVE-2023-0386
- ovl: fail on invalid uid/gid mapping at copy up

Record: CLSA-2025-1753085842
Updated: 2026-11-02

OSVCLSA-2026-1783791447 No score

kernel: Fix of 307 CVEs

gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully {CVE-2022-48660}
ipv4: check for NULL idev in ip_route_use_hint() {CVE-2024-36008}
KEYS: trusted: Do not use WARN when encode fails {CVE-2024-36975}
Fix userfaultfd_api to return EINVAL as expected {CVE-2024-41027}
xhci: Fix null pointer dereference when host dies {CVE-2023-52898}
sctp: sysctl: auth_enable: avoid using current->nsproxy {CVE-2025-21638}
blk-mq: fix IO hang from sbitmap wakeup race {CVE-2024-26671}
net: openvswitch: fix flow memory leak in ovs_flow_cmd_new {CVE-2023-52977}
gpiolib: fix memory leak in gpiochip_setup_dev() {CVE-2022-48975}
HID: betop: check shape of output reports {CVE-2023-53015}
mm/swapfile: add cond_resched() in get_swap_pages() {CVE-2023-52932}
HV: hv_balloon: fix memory leak with using debugfs_lookup() {CVE-2023-52937}
drm/i915: Fix a memory leak with reused mmap_offset {CVE-2023-53002}
ptdma: pt_core_execute_cmd() should use spinlock {CVE-2023-53013}
RDMA/core: Fix ib block iterator counter overflow {CVE-2023-53026}
Bluetooth: hci_conn: Fix memory leaks {CVE-2023-53018}
scsi: target: pscsi: Fix bio_put() for error case {CVE-2024-26760}
sctp: Prevent TOCTOU out-of-bounds write {CVE-2025-40331}
pnfs/flexfiles: Fix memory leak in nfs4_ff_alloc_deviceid_node() {CVE-2026-23038}
cpufreq: intel_pstate: Fix object lifecycle issue in update_qos_request() {CVE-2025-40194}
ALSA: hda/cs8409: Fix possible NULL dereference {CVE-2024-50160}
nbd: don't allow reconnect after disconnect {CVE-2025-21731}
openvswitch: fix lockup on tx to unregistering netdev with carrier {CVE-2025-21681}
ext4: detect invalid INLINE_DATA + EXTENTS flag combination {CVE-2025-40167}
ext4: xattr: fix null pointer deref in ext4_raw_inode() {CVE-2025-68820}
net: fix memory leak in skb_segment_list for GRO packets {CVE-2026-22979}
wifi: brcmfmac: fix crash while sending Action Frames in standalone AP Mode {CVE-2025-40321}
ipvs: fix ipv4 null-ptr-deref in route error path {CVE-2025-68813}
ASoC: Intel: bytcr_rt5651: Fix invalid quirk input mapping {CVE-2025-40121}
i40e: Fix macvlan leak by synchronizing access to mac_filter_hash {CVE-2024-50041}
net/mlx5e: Fix NULL deref in mlx5e_tir_builder_alloc() {CVE-2024-50000}
bpf: Fix reference count leak in bpf_prog_test_run_xdp() {CVE-2026-22994}
xsk: check IFF_UP earlier in Tx path {CVE-2023-53240}
firmware: cs_dsp: Prevent buffer overrun when processing V2 alg headers {CVE-2024-41038}
virtgpu: don't reset on shutdown {CVE-2025-38064}
xen/netfront: fix crash when removing device {CVE-2022-48969}
mptcp: do not fallback when OoO is present {CVE-2024-50185}
can: j1939: add missing calls in NETDEV_UNREGISTER notification handler {CVE-2025-39925}
netfilter: nf_tables: remove redundant chain validation on register store {CVE-2025-71160}
xfs: fix use-after-free in xattr node block inactivation {CVE-2026-43053}
ext4: fix racy may inline data check in dio write {CVE-2023-52786}
drm/amdgpu/fence: Fix oops due to non-matching drm_sched init/fini {CVE-2023-52738}
macsec: fix UAF bug for real_dev {CVE-2022-49390}
drm/i915/gem: Fix Virtual Memory mapping boundaries calculation {CVE-2024-42259}
mm/shmem: disable PMD-sized page cache if needed {CVE-2024-42241}
driver: iio: add missing checks on iio_info's callback access {CVE-2024-46715}
udmabuf: fix memory leak on last export_udmabuf() error path {CVE-2024-56712}
ALSA: control: Avoid WARN() for symlink errors {CVE-2024-56657}
mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM {CVE-2024-56611}
eth: bnxt: always recalculate features after XDP clearing, fix null-deref {CVE-2025-21682}
net: annotate data-races around sk->sk_{data_ready,write_space} {CVE-2026-23302}
udmabuf: change folios array from kmalloc to kvmalloc {CVE-2024-56544}
RDMA/mlx5: Move events notifier registration to be after device registration {CVE-2024-53224}
dlm: fix possible lkb_resource…

Record: CLSA-2026-1783791447
Updated: 2026-11-02

OSVMGASA-2024-0316 No score

Updated kernel, kmod-xtables-addons & kmod-virtualbox packages fix security vulnerabilities

Upstream kernel version 6.6.52 fixes bugs and vulnerabilities. The kmod-virtualbox and kmod-xtables-addons packages have been updated to work with this new kernel. For information about the vulnerabilities see the links.

Record: MGASA-2024-0316
Updated: 2026-11-02

OSVMGASA-2024-0318 No score

Updated kernel-linus packages fixes security vulnerabilities

Vanilla upstream kernel version 6.6.52 fixes bugs and vulnerabilities. For information about the vulnerabilities see the links.

Record: MGASA-2024-0318
Updated: 2026-11-02

OSVSUSE-SU-2024:3551-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2023-52610: net/sched: act_ct: fix skb leak and crash on ooo frags (bsc#1221610).
CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225487).
CVE-2023-52916: media: aspeed: Fix memory overwrite if timing is 1600x900 (bsc#1230269).
CVE-2024-26640: tcp: add sanity checks to rx zerocopy (bsc#1221650).
CVE-2024-26759: mm/swap: fix race when skipping swapcache (bsc#1230340).
CVE-2024-26804: net: ip_tunnel: prevent perpetual headroom growth (bsc#1222629).
CVE-2024-38538: net: bridge: xmit: make sure we have at least eth header len bytes (bsc#1226606).
CVE-2024-38596: af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg (bsc#1226846).
CVE-2024-40965: i2c: lpi2c: Avoid calling clk_get_rate during transfer (bsc#1227885).
CVE-2024-40973: media: mtk-vcodec: potential null pointer deference in SCP (bsc#1227890).
CVE-2024-40983: tipc: force a dst refcount before doing decryption (bsc#1227819).
CVE-2024-42154: tcp_metrics: validate source addr length (bsc#1228507).
CVE-2024-42243: mm/filemap: make MAX_PAGECACHE_ORDER acceptable to xarray (bsc#1229001).
CVE-2024-42252: closures: Change BUG_ON() to WARN_ON() (bsc#1229004).
CVE-2024-42265: protect the fetch of ->fd[fd] in do_dup2() from mispredictions (bsc#1229334).
CVE-2024-42294: block: fix deadlock between sd_remove & sd_release (bsc#1229371).
CVE-2024-42304: ext4: make sure the first directory block is not a hole (bsc#1229364).
CVE-2024-42305: ext4: check dot and dotdot of dx_root before making dir indexed (bsc#1229363).
CVE-2024-42306: udf: Avoid using corrupted block bitmap buffer (bsc#1229362).
CVE-2024-43828: ext4: fix infinite loop when replaying fast_commit (bsc#1229394).
CVE-2024-43832: s390/uv: Do not call folio_wait_writeback() without a folio reference (bsc#1229380).
CVE-2024-43845: udf: Fix bogus checksum computation in udf_rename() (bsc#1229389).
CVE-2024-43890: tracing: Fix overflow in get_free_elt() (bsc#1229764).
CVE-2024-43898: ext4: sanity check for NULL pointer after ext4_force_shutdown (bsc#1229753).
CVE-2024-43914: md/raid5: avoid BUG_ON() while continue reshape after reassembling (bsc#1229790).
CVE-2024-44935: sctp: Fix null-ptr-deref in reuseport_add_sock() (bsc#1229810).
CVE-2024-44944: netfilter: ctnetlink: use helper function to calculate expect ID (bsc#1229899).
CVE-2024-44946: kcm: Serialise kcm_sendmsg() for the same socket (bsc#1230015).
CVE-2024-44950: serial: sc16is7xx: fix invalid FIFO access with special register set (bsc#1230180).
CVE-2024-44951: serial: sc16is7xx: fix TX fifo corruption (bsc#1230181).
CVE-2024-44970: net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (bsc#1230209).
CVE-2024-44971: net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register() (bsc#1230211).
CVE-2024-44984: bnxt_en: Fix double DMA unmapping for XDP_REDIRECT (bsc#1230240).
CVE-2024-44985: ipv6: prevent possible UAF in ip6_xmit() (bsc#1230206).
CVE-2024-44987: ipv6: prevent UAF in ip6_send_skb() (bsc#1230185).
CVE-2024-44988: net: dsa: mv88e6xxx: Fix out-of-bound access (bsc#1230192).
CVE-2024-44989: bonding: fix xfrm real_dev null pointer dereference (bsc#1230193).
CVE-2024-44990: bonding: fix null pointer deref in bond_ipsec_offload_ok (bsc#1230194).
CVE-2024-44991: tcp: prevent concurrent execution of tcp_sk_exit_batch (bsc#1230195).
CVE-2024-44998: atm: idt77252: prevent use after free in dequeue_rx() (bsc#1230171).
CVE-2024-44999: gtp: pull network headers in gtp_dev_xmit() (bsc#1230233).
CVE-2024-45002: rtla/osnoise: Prevent NULL dereference in error handling (bsc#1230169).
CVE-2024-45003: Don't evict inode under the inode lru traversing context (bsc#1230245).
CVE-2024-45013: nvme: move stopping keep-alive into nvme_uninit_ctrl() (bsc#1230442).
CVE-2024-45017: net/mlx5: Fix…

Record: SUSE-SU-2024:3551-1
Updated: 2026-11-02

OSVSUSE-SU-2024:3553-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 CoCo kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225487).
CVE-2023-52916: media: aspeed: Fix memory overwrite if timing is 1600x900 (bsc#1230269).
CVE-2024-26759: mm/swap: fix race when skipping swapcache (bsc#1230340).
CVE-2024-26804: net: ip_tunnel: prevent perpetual headroom growth (bsc#1222629).
CVE-2024-38538: net: bridge: xmit: make sure we have at least eth header len bytes (bsc#1226606).
CVE-2024-40965: i2c: lpi2c: Avoid calling clk_get_rate during transfer (bsc#1227885).
CVE-2024-40973: media: mtk-vcodec: potential null pointer deference in SCP (bsc#1227890).
CVE-2024-40983: tipc: force a dst refcount before doing decryption (bsc#1227819).
CVE-2024-42154: tcp_metrics: validate source addr length (bsc#1228507).
CVE-2024-42252: closures: Change BUG_ON() to WARN_ON() (bsc#1229004).
CVE-2024-43832: s390/uv: Do not call folio_wait_writeback() without a folio reference (bsc#1229380).
CVE-2024-43890: tracing: Fix overflow in get_free_elt() (bsc#1229764).
CVE-2024-43914: md/raid5: avoid BUG_ON() while continue reshape after reassembling (bsc#1229790).
CVE-2024-44946: kcm: Serialise kcm_sendmsg() for the same socket (bsc#1230015).
CVE-2024-44970: net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (bsc#1230209).
CVE-2024-44971: net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register() (bsc#1230211).
CVE-2024-44984: bnxt_en: Fix double DMA unmapping for XDP_REDIRECT (bsc#1230240).
CVE-2024-44987: ipv6: prevent UAF in ip6_send_skb() (bsc#1230185).
CVE-2024-44988: net: dsa: mv88e6xxx: Fix out-of-bound access (bsc#1230192).
CVE-2024-44989: bonding: fix xfrm real_dev null pointer dereference (bsc#1230193).
CVE-2024-44990: bonding: fix null pointer deref in bond_ipsec_offload_ok (bsc#1230194).
CVE-2024-44991: tcp: prevent concurrent execution of tcp_sk_exit_batch (bsc#1230195).
CVE-2024-44999: gtp: pull network headers in gtp_dev_xmit() (bsc#1230233).
CVE-2024-45002: rtla/osnoise: Prevent NULL dereference in error handling (bsc#1230169).
CVE-2024-45013: nvme: move stopping keep-alive into nvme_uninit_ctrl() (bsc#1230442).
CVE-2024-45017: net/mlx5: Fix IPsec RoCE MPV trace call (bsc#1230430).
CVE-2024-45018: netfilter: flowtable: initialise extack before use (bsc#1230431).
CVE-2024-45019: net/mlx5e: Take state lock during tx timeout reporter (bsc#1230432).
CVE-2024-45021: memcg_write_event_control(): fix a user-triggerable oops (bsc#1230434).
CVE-2024-45022: mm/vmalloc: fix page mapping if vm_area_alloc_pages() with high order fallback to order 0 (bsc#1230435).
CVE-2024-45023: md/raid1: Fix data corruption for degraded array with slow disk (bsc#1230455).
CVE-2024-45029: i2c: tegra: Do not mark ACPI devices as irq safe (bsc#1230451).
CVE-2024-45030: igb: cope with large MAX_SKB_FRAGS (bsc#1230457).
CVE-2024-46673: scsi: aacraid: Fix double-free on probe failure (bsc#1230506).
CVE-2024-46677: gtp: fix a potential NULL pointer dereference (bsc#1230549).
CVE-2024-46679: ethtool: check device is present when getting link settings (bsc#1230556).
CVE-2024-46686: smb/client: avoid dereferencing rdata=NULL in smb2_new_read_req() (bsc#1230517).
CVE-2024-46687: btrfs: fix a use-after-free when hitting errors inside btrfs_submit_chunk() (bsc#1230518).
CVE-2024-46691: usb: typec: ucsi: Move unregister out of atomic section (bsc#1230526).
CVE-2024-46692: firmware: qcom: scm: Mark get_wq_ctx() as atomic call (bsc#1230520).
CVE-2024-46693: kABI workaround for soc-qcom pmic_glink changes (bsc#1230521).
CVE-2024-46710: drm/vmwgfx: Prevent unmapping active read buffers (bsc#1230540).
CVE-2024-46717: net/mlx5e: SHAMPO, Fix incorrect page release (bsc#1230719).
CVE-2024-46727: Fixed NULL pointer dereference in resource_log_pipe_topology_update (bsc#1230707).
CVE-2024-46729:…

Record: SUSE-SU-2024:3553-1
Updated: 2026-11-02

OSVSUSE-SU-2024:3559-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2021-47387: cpufreq: schedutil: Destroy mutex before kobject_put() frees the memory (bsc#1225316).
CVE-2022-48788: nvme-rdma: fix possible use-after-free in transport error_recovery work (bsc#1227952).
CVE-2022-48789: nvme-tcp: fix possible use-after-free in transport error_recovery work (bsc#1228000).
CVE-2022-48790: nvme: fix a possible use-after-free in controller reset during load (bsc#1227941).
CVE-2022-48791: Fix use-after-free for aborted TMF sas_task (bsc#1228002)
CVE-2022-48799: perf: Fix list corruption in perf_cgroup_switch() (bsc#1227953).
CVE-2022-48844: Bluetooth: hci_core: Fix leaking sent_cmd skb (bsc#1228068).
CVE-2022-48911: kabi: add __nf_queue_get_refs() for kabi compliance. (bsc#1229633).
CVE-2022-48943: KVM: x86/mmu: make apf token non-zero to fix bug (bsc#1229645).
CVE-2022-48945: media: vivid: fix compose size exceed boundary (bsc#1230398).
CVE-2023-52915: media: dvb-usb-v2: af9035: fix missing unlock (bsc#1230270).
CVE-2024-38596: af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg (bsc#1226846).
CVE-2024-41073: nvme: avoid double free special payload (bsc#1228635).
CVE-2024-41079: nvmet: always initialize cqe.result (bsc#1228615).
CVE-2024-41082: nvme-fabrics: use reserved tag for reg read/write command (bsc#1228620 CVE-2024-41082).
CVE-2024-42154: tcp_metrics: validate source addr length (bsc#1228507).
CVE-2024-42265: protect the fetch of ->fd[fd] in do_dup2() from mispredictions (bsc#1229334).
CVE-2024-42305: ext4: check dot and dotdot of dx_root before making dir indexed (bsc#1229363).
CVE-2024-42306: udf: Avoid using corrupted block bitmap buffer (bsc#1229362).
CVE-2024-43884: Add error handling to pair_device() (bsc#1229739)
CVE-2024-43890: tracing: Fix overflow in get_free_elt() (bsc#1229764).
CVE-2024-43898: ext4: sanity check for NULL pointer after ext4_force_shutdown (bsc#1229753).
CVE-2024-43912: wifi: nl80211: disallow setting special AP channel widths (bsc#1229830)
CVE-2024-43914: md/raid5: avoid BUG_ON() while continue reshape after reassembling (bsc#1229790).
CVE-2024-44946: kcm: Serialise kcm_sendmsg() for the same socket (bsc#1230015).
CVE-2024-44948: x86/mtrr: Check if fixed MTRRs exist before saving them (bsc#1230174).
CVE-2024-44950: serial: sc16is7xx: fix invalid FIFO access with special register set (bsc#1230180).
CVE-2024-44952: driver core: Fix uevent_show() vs driver detach race (bsc#1230178).
CVE-2024-44954: ALSA: line6: Fix racy access to midibuf (bsc#1230176).
CVE-2024-44969: s390/sclp: Prevent release of buffer in I/O (bsc#1230200).
CVE-2024-44982: drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails (bsc#1230204).
CVE-2024-44987: ipv6: prevent UAF in ip6_send_skb() (bsc#1230185).
CVE-2024-44998: atm: idt77252: prevent use after free in dequeue_rx() (bsc#1230171).
CVE-2024-44999: gtp: pull network headers in gtp_dev_xmit() (bsc#1230233).
CVE-2024-45008: Input: MT - limit max slots (bsc#1230248).
CVE-2024-46673: scsi: aacraid: Fix double-free on probe failure (bsc#1230506).
CVE-2024-46675: usb: dwc3: core: Prevent USB core invalid event buffer address access (bsc#1230533).
CVE-2024-46676: nfc: pn533: Add poll mod list filling check (bsc#1230535).
CVE-2024-46677: gtp: fix a potential NULL pointer dereference (bsc#1230549).
CVE-2024-46679: ethtool: check device is present when getting link settings (bsc#1230556).
CVE-2024-46685: pinctrl: single: fix potential NULL dereference in pcs_get_function() (bsc#1230515)
CVE-2024-46686: smb/client: avoid dereferencing rdata=NULL in smb2_new_read_req() (bsc#1230517).
CVE-2024-46702: thunderbolt: Mark XDomain as unplugged when router is removed (bsc#1230589)
CVE-2024-46707: KVM: arm64: Make ICC_SGI_EL1 undef in the absence of a vGICv3 (bsc#1230582).
CVE-2024-46715: driver: iio: add…

Record: SUSE-SU-2024:3559-1
Updated: 2026-11-02

OSVSUSE-SU-2024:3561-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2023-52610: net/sched: act_ct: fix skb leak and crash on ooo frags (bsc#1221610).
CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225487).
CVE-2023-52916: media: aspeed: Fix memory overwrite if timing is 1600x900 (bsc#1230269).
CVE-2024-26640: tcp: add sanity checks to rx zerocopy (bsc#1221650).
CVE-2024-26759: mm/swap: fix race when skipping swapcache (bsc#1230340).
CVE-2024-26804: net: ip_tunnel: prevent perpetual headroom growth (bsc#1222629).
CVE-2024-38538: net: bridge: xmit: make sure we have at least eth header len bytes (bsc#1226606).
CVE-2024-38596: af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg (bsc#1226846).
CVE-2024-40965: i2c: lpi2c: Avoid calling clk_get_rate during transfer (bsc#1227885).
CVE-2024-40973: media: mtk-vcodec: potential null pointer deference in SCP (bsc#1227890).
CVE-2024-40983: tipc: force a dst refcount before doing decryption (bsc#1227819).
CVE-2024-42154: tcp_metrics: validate source addr length (bsc#1228507).
CVE-2024-42243: mm/filemap: make MAX_PAGECACHE_ORDER acceptable to xarray (bsc#1229001).
CVE-2024-42252: closures: Change BUG_ON() to WARN_ON() (bsc#1229004).
CVE-2024-42265: protect the fetch of ->fd[fd] in do_dup2() from mispredictions (bsc#1229334).
CVE-2024-42294: block: fix deadlock between sd_remove & sd_release (bsc#1229371).
CVE-2024-42304: ext4: make sure the first directory block is not a hole (bsc#1229364).
CVE-2024-42305: ext4: check dot and dotdot of dx_root before making dir indexed (bsc#1229363).
CVE-2024-42306: udf: Avoid using corrupted block bitmap buffer (bsc#1229362).
CVE-2024-43828: ext4: fix infinite loop when replaying fast_commit (bsc#1229394).
CVE-2024-43832: s390/uv: Do not call folio_wait_writeback() without a folio reference (bsc#1229380).
CVE-2024-43845: udf: Fix bogus checksum computation in udf_rename() (bsc#1229389).
CVE-2024-43890: tracing: Fix overflow in get_free_elt() (bsc#1229764).
CVE-2024-43898: ext4: sanity check for NULL pointer after ext4_force_shutdown (bsc#1229753).
CVE-2024-43914: md/raid5: avoid BUG_ON() while continue reshape after reassembling (bsc#1229790).
CVE-2024-44935: sctp: Fix null-ptr-deref in reuseport_add_sock() (bsc#1229810).
CVE-2024-44944: netfilter: ctnetlink: use helper function to calculate expect ID (bsc#1229899).
CVE-2024-44946: kcm: Serialise kcm_sendmsg() for the same socket (bsc#1230015).
CVE-2024-44950: serial: sc16is7xx: fix invalid FIFO access with special register set (bsc#1230180).
CVE-2024-44951: serial: sc16is7xx: fix TX fifo corruption (bsc#1230181).
CVE-2024-44970: net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (bsc#1230209).
CVE-2024-44971: net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register() (bsc#1230211).
CVE-2024-44984: bnxt_en: Fix double DMA unmapping for XDP_REDIRECT (bsc#1230240).
CVE-2024-44985: ipv6: prevent possible UAF in ip6_xmit() (bsc#1230206).
CVE-2024-44987: ipv6: prevent UAF in ip6_send_skb() (bsc#1230185).
CVE-2024-44988: net: dsa: mv88e6xxx: Fix out-of-bound access (bsc#1230192).
CVE-2024-44989: bonding: fix xfrm real_dev null pointer dereference (bsc#1230193).
CVE-2024-44990: bonding: fix null pointer deref in bond_ipsec_offload_ok (bsc#1230194).
CVE-2024-44991: tcp: prevent concurrent execution of tcp_sk_exit_batch (bsc#1230195).
CVE-2024-44998: atm: idt77252: prevent use after free in dequeue_rx() (bsc#1230171).
CVE-2024-44999: gtp: pull network headers in gtp_dev_xmit() (bsc#1230233).
CVE-2024-45002: rtla/osnoise: Prevent NULL dereference in error handling (bsc#1230169).
CVE-2024-45003: Don't evict inode under the inode lru traversing context (bsc#1230245).
CVE-2024-45013: nvme: move stopping keep-alive into nvme_uninit_ctrl() (bsc#1230442).
CVE-2024-45017: net/mlx5: Fix IPsec…

Record: SUSE-SU-2024:3561-1
Updated: 2026-11-02

OSVSUSE-SU-2024:3564-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2023-52610: net/sched: act_ct: fix skb leak and crash on ooo frags (bsc#1221610).
CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225487).
CVE-2023-52916: media: aspeed: Fix memory overwrite if timing is 1600x900 (bsc#1230269).
CVE-2024-26640: tcp: add sanity checks to rx zerocopy (bsc#1221650).
CVE-2024-26759: mm/swap: fix race when skipping swapcache (bsc#1230340).
CVE-2024-26804: net: ip_tunnel: prevent perpetual headroom growth (bsc#1222629).
CVE-2024-38538: net: bridge: xmit: make sure we have at least eth header len bytes (bsc#1226606).
CVE-2024-38596: af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg (bsc#1226846).
CVE-2024-40965: i2c: lpi2c: Avoid calling clk_get_rate during transfer (bsc#1227885).
CVE-2024-40973: media: mtk-vcodec: potential null pointer deference in SCP (bsc#1227890).
CVE-2024-40983: tipc: force a dst refcount before doing decryption (bsc#1227819).
CVE-2024-42154: tcp_metrics: validate source addr length (bsc#1228507).
CVE-2024-42243: mm/filemap: make MAX_PAGECACHE_ORDER acceptable to xarray (bsc#1229001).
CVE-2024-42252: closures: Change BUG_ON() to WARN_ON() (bsc#1229004).
CVE-2024-42265: protect the fetch of ->fd[fd] in do_dup2() from mispredictions (bsc#1229334).
CVE-2024-42294: block: fix deadlock between sd_remove & sd_release (bsc#1229371).
CVE-2024-42304: ext4: make sure the first directory block is not a hole (bsc#1229364).
CVE-2024-42305: ext4: check dot and dotdot of dx_root before making dir indexed (bsc#1229363).
CVE-2024-42306: udf: Avoid using corrupted block bitmap buffer (bsc#1229362).
CVE-2024-43828: ext4: fix infinite loop when replaying fast_commit (bsc#1229394).
CVE-2024-43832: s390/uv: Do not call folio_wait_writeback() without a folio reference (bsc#1229380).
CVE-2024-43845: udf: Fix bogus checksum computation in udf_rename() (bsc#1229389).
CVE-2024-43890: tracing: Fix overflow in get_free_elt() (bsc#1229764).
CVE-2024-43898: ext4: sanity check for NULL pointer after ext4_force_shutdown (bsc#1229753).
CVE-2024-43914: md/raid5: avoid BUG_ON() while continue reshape after reassembling (bsc#1229790).
CVE-2024-44935: sctp: Fix null-ptr-deref in reuseport_add_sock() (bsc#1229810).
CVE-2024-44944: netfilter: ctnetlink: use helper function to calculate expect ID (bsc#1229899).
CVE-2024-44946: kcm: Serialise kcm_sendmsg() for the same socket (bsc#1230015).
CVE-2024-44950: serial: sc16is7xx: fix invalid FIFO access with special register set (bsc#1230180).
CVE-2024-44951: serial: sc16is7xx: fix TX fifo corruption (bsc#1230181).
CVE-2024-44970: net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (bsc#1230209).
CVE-2024-44971: net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register() (bsc#1230211).
CVE-2024-44984: bnxt_en: Fix double DMA unmapping for XDP_REDIRECT (bsc#1230240).
CVE-2024-44985: ipv6: prevent possible UAF in ip6_xmit() (bsc#1230206).
CVE-2024-44987: ipv6: prevent UAF in ip6_send_skb() (bsc#1230185).
CVE-2024-44988: net: dsa: mv88e6xxx: Fix out-of-bound access (bsc#1230192).
CVE-2024-44989: bonding: fix xfrm real_dev null pointer dereference (bsc#1230193).
CVE-2024-44990: bonding: fix null pointer deref in bond_ipsec_offload_ok (bsc#1230194).
CVE-2024-44991: tcp: prevent concurrent execution of tcp_sk_exit_batch (bsc#1230195).
CVE-2024-44998: atm: idt77252: prevent use after free in dequeue_rx() (bsc#1230171).
CVE-2024-44999: gtp: pull network headers in gtp_dev_xmit() (bsc#1230233).
CVE-2024-45002: rtla/osnoise: Prevent NULL dereference in error handling (bsc#1230169).
CVE-2024-45003: Don't evict inode under the inode lru traversing context (bsc#1230245).
CVE-2024-45013: nvme: move stopping keep-alive into nvme_uninit_ctrl() (bsc#1230442).
CVE-2024-45017: net/mlx5: Fix IPsec…

Record: SUSE-SU-2024:3564-1
Updated: 2026-11-02

OSVSUSE-SU-2024:3566-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-46854: net: dpaa: Pad packets to ETH_ZLEN (bsc#1231084).
CVE-2024-46770: ice: Add netif_device_attach/detach into PF reset flow (bsc#1230763).
CVE-2024-41073: nvme: avoid double free special payload (bsc#1228635).
CVE-2024-41079: nvmet: always initialize cqe.result (bsc#1228615).
CVE-2024-46859: platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses (bsc#1231089).
CVE-2024-46853: spi: nxp-fspi: fix the KASAN report out-of-bounds bug (bsc#1231083).
CVE-2022-48945: media: vivid: fix compose size exceed boundary (bsc#1230398).
CVE-2024-41082: nvme-fabrics: use reserved tag for reg read/write command (bsc#1228620 CVE-2024-41082).
CVE-2024-46822: arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry (bsc#1231120).
CVE-2024-43890: tracing: Fix overflow in get_free_elt() (bsc#1229764).
CVE-2024-46731: drm/amd/pm: fix the Out-of-bounds read warning (bsc#1230709).
CVE-2024-46772: drm/amd/display: Check denominator crb_pipes before used (bsc#1230772).
CVE-2024-46722: drm/amdgpu: fix mc_data out-of-bounds read warning (bsc#1230712).
CVE-2024-46787: userfaultfd: fix checks for huge PMDs (bsc#1230815).
CVE-2022-48911: kabi: add __nf_queue_get_refs() for kabi compliance. (bsc#1229633).
CVE-2024-46753: btrfs: handle errors from btrfs_dec_ref() properly (bsc#1230796).
CVE-2024-46761: pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv (bsc#1230761).
CVE-2024-46759: hwmon: (adc128d818) Fix underflows seen when writing limit attributes (bsc#1230814).
CVE-2024-46745: Input: uinput - reject requests with unreasonable number of slots (bsc#1230748).
CVE-2024-46738: VMCI: Fix use-after-free when removing resource in vmci_resource_remove() (bsc#1230731).
CVE-2024-46783: tcp_bpf: fix return value of tcp_bpf_sendmsg() (bsc#1230810).
CVE-2024-44982: drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails (bsc#1230204).
CVE-2024-46723: drm/amdgpu: fix ucode out-of-bounds read warning (bsc#1230702).
CVE-2024-46750: PCI: Add missing bridge lock to pci_bus_lock() (bsc#1230783).
CVE-2024-46717: net/mlx5e: SHAMPO, Fix incorrect page release (bsc#1230719).
CVE-2024-40973: media: mtk-vcodec: potential null pointer deference in SCP (bsc#1227890).
CVE-2024-46744: Squashfs: sanity check symbolic link size (bsc#1230747).
CVE-2024-46743: of/irq: Prevent device address out-of-bounds read in interrupt map walk (bsc#1230756).
CVE-2024-46715: driver: iio: add missing checks on iio_info's callback access (bsc#1230700).
CVE-2024-46685: pinctrl: single: fix potential NULL dereference in pcs_get_function() (bsc#1230515)
CVE-2024-46675: usb: dwc3: core: Prevent USB core invalid event buffer address access (bsc#1230533).
CVE-2024-46702: thunderbolt: Mark XDomain as unplugged when router is removed (bsc#1230589)
CVE-2024-46686: smb/client: avoid dereferencing rdata=NULL in smb2_new_read_req() (bsc#1230517).
CVE-2024-46673: scsi: aacraid: Fix double-free on probe failure (bsc#1230506).
CVE-2024-46721: pparmor: fix possible NULL pointer dereference (bsc#1230710)
CVE-2024-46677: gtp: fix a potential NULL pointer dereference (bsc#1230549).
CVE-2024-46676: nfc: pn533: Add poll mod list filling check (bsc#1230535).
CVE-2024-46679: ethtool: check device is present when getting link settings (bsc#1230556).
CVE-2024-43914: md/raid5: avoid BUG_ON() while continue reshape after reassembling (bsc#1229790).
CVE-2024-44946: kcm: Serialise kcm_sendmsg() for the same socket (bsc#1230015).
CVE-2024-46707: KVM: arm64: Make ICC_SGI_EL1 undef in the absence of a vGICv3 (bsc#1230582).
CVE-2022-48799: perf: Fix list corruption in perf_cgroup_switch() (bsc#1227953).
CVE-2022-48789: nvme-tcp: fix possible use-after-free in transport error_recovery work (bsc#1228000).
CVE-2022-48790: nvme: fix a possible use-after-free in…

Record: SUSE-SU-2024:3566-1
Updated: 2026-11-02

OSVSUSE-SU-2024:3569-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2022-48901: btrfs: do not start relocation until in progress drops are done (bsc#1229607).
CVE-2022-48911: kabi: add __nf_queue_get_refs() for kabi compliance. (bsc#1229633).
CVE-2022-48923: btrfs: prevent copying too big compressed lzo segment (bsc#1229662)
CVE-2022-48935: Fixed an unregister flowtable hooks on netns exit (bsc#1229619)
CVE-2023-52610: net/sched: act_ct: fix skb leak and crash on ooo frags (bsc#1221610).
CVE-2023-52916: media: aspeed: Fix memory overwrite if timing is 1600x900 (bsc#1230269).
CVE-2024-26640: tcp: add sanity checks to rx zerocopy (bsc#1221650).
CVE-2024-26759: mm/swap: fix race when skipping swapcache (bsc#1230340).
CVE-2024-26767: drm/amd/display: fixed integer types and null check locations (bsc#1230339).
CVE-2024-26804: net: ip_tunnel: prevent perpetual headroom growth (bsc#1222629).
CVE-2024-26837: net: bridge: switchdev: race between creation of new group memberships and generation of the list of MDB events to replay (bsc#1222973).
CVE-2024-37353: virtio: fixed a double free in vp_del_vqs() (bsc#1226875).
CVE-2024-38538: net: bridge: xmit: make sure we have at least eth header len bytes (bsc#1226606).
CVE-2024-38596: af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg (bsc#1226846).
CVE-2024-40910: Fix refcount imbalance on inbound connections (bsc#1227832).
CVE-2024-40973: media: mtk-vcodec: potential null pointer deference in SCP (bsc#1227890).
CVE-2024-40983: tipc: force a dst refcount before doing decryption (bsc#1227819).
CVE-2024-41062: Sync sock recv cb and release (bsc#1228576).
CVE-2024-41082: nvme-fabrics: use reserved tag for reg read/write command (bsc#1228620 CVE-2024-41082).
CVE-2024-42154: tcp_metrics: validate source addr length (bsc#1228507).
CVE-2024-42259: Fix Virtual Memory mapping boundaries calculation (bsc#1229156)
CVE-2024-42265: protect the fetch of ->fd[fd] in do_dup2() from mispredictions (bsc#1229334).
CVE-2024-42304: ext4: make sure the first directory block is not a hole (bsc#1229364).
CVE-2024-42305: ext4: check dot and dotdot of dx_root before making dir indexed (bsc#1229363).
CVE-2024-42306: udf: Avoid using corrupted block bitmap buffer (bsc#1229362).
CVE-2024-43828: ext4: fix infinite loop when replaying fast_commit (bsc#1229394).
CVE-2024-43890: tracing: Fix overflow in get_free_elt() (bsc#1229764).
CVE-2024-43898: ext4: sanity check for NULL pointer after ext4_force_shutdown (bsc#1229753).
CVE-2024-43912: wifi: nl80211: disallow setting special AP channel widths (bsc#1229830)
CVE-2024-43914: md/raid5: avoid BUG_ON() while continue reshape after reassembling (bsc#1229790).
CVE-2024-44935: sctp: Fix null-ptr-deref in reuseport_add_sock() (bsc#1229810).
CVE-2024-44944: netfilter: ctnetlink: use helper function to calculate expect ID (bsc#1229899).
CVE-2024-44946: kcm: Serialise kcm_sendmsg() for the same socket (bsc#1230015).
CVE-2024-44950: serial: sc16is7xx: fix invalid FIFO access with special register set (bsc#1230180).
CVE-2024-44952: driver core: Fix uevent_show() vs driver detach race (bsc#1230178).
CVE-2024-44970: net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (bsc#1230209).
CVE-2024-44971: net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register() (bsc#1230211).
CVE-2024-44986: ipv6: fix possible UAF in ip6_finish_output2() (bsc#1230230)
CVE-2024-44987: ipv6: prevent UAF in ip6_send_skb() (bsc#1230185).
CVE-2024-44988: net: dsa: mv88e6xxx: Fix out-of-bound access (bsc#1230192).
CVE-2024-44989: bonding: fix xfrm real_dev null pointer dereference (bsc#1230193).
CVE-2024-44990: bonding: fix null pointer deref in bond_ipsec_offload_ok (bsc#1230194).
CVE-2024-44998: atm: idt77252: prevent use after free in dequeue_rx() (bsc#1230171).
CVE-2024-44999: gtp: pull network headers in gtp_dev_xmit()…

Record: SUSE-SU-2024:3569-1
Updated: 2026-11-02

OSVSUSE-SU-2024:3587-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2022-48901: btrfs: do not start relocation until in progress drops are done (bsc#1229607).
CVE-2022-48911: kabi: add __nf_queue_get_refs() for kabi compliance. (bsc#1229633).
CVE-2022-48923: btrfs: prevent copying too big compressed lzo segment (bsc#1229662)
CVE-2022-48935: Fixed an unregister flowtable hooks on netns exit (bsc#1229619)
CVE-2023-52610: net/sched: act_ct: fix skb leak and crash on ooo frags (bsc#1221610).
CVE-2023-52916: media: aspeed: Fix memory overwrite if timing is 1600x900 (bsc#1230269).
CVE-2024-26640: tcp: add sanity checks to rx zerocopy (bsc#1221650).
CVE-2024-26759: mm/swap: fix race when skipping swapcache (bsc#1230340).
CVE-2024-26767: drm/amd/display: fixed integer types and null check locations (bsc#1230339).
CVE-2024-26804: net: ip_tunnel: prevent perpetual headroom growth (bsc#1222629).
CVE-2024-26837: net: bridge: switchdev: race between creation of new group memberships and generation of the list of MDB events to replay (bsc#1222973).
CVE-2024-37353: virtio: fixed a double free in vp_del_vqs() (bsc#1226875).
CVE-2024-38538: net: bridge: xmit: make sure we have at least eth header len bytes (bsc#1226606).
CVE-2024-38596: af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg (bsc#1226846).
CVE-2024-40910: Fix refcount imbalance on inbound connections (bsc#1227832).
CVE-2024-40973: media: mtk-vcodec: potential null pointer deference in SCP (bsc#1227890).
CVE-2024-40983: tipc: force a dst refcount before doing decryption (bsc#1227819).
CVE-2024-41062: Sync sock recv cb and release (bsc#1228576).
CVE-2024-41082: nvme-fabrics: use reserved tag for reg read/write command (bsc#1228620 CVE-2024-41082).
CVE-2024-42154: tcp_metrics: validate source addr length (bsc#1228507).
CVE-2024-42259: Fix Virtual Memory mapping boundaries calculation (bsc#1229156)
CVE-2024-42265: protect the fetch of ->fd[fd] in do_dup2() from mispredictions (bsc#1229334).
CVE-2024-42304: ext4: make sure the first directory block is not a hole (bsc#1229364).
CVE-2024-42305: ext4: check dot and dotdot of dx_root before making dir indexed (bsc#1229363).
CVE-2024-42306: udf: Avoid using corrupted block bitmap buffer (bsc#1229362).
CVE-2024-43828: ext4: fix infinite loop when replaying fast_commit (bsc#1229394).
CVE-2024-43890: tracing: Fix overflow in get_free_elt() (bsc#1229764).
CVE-2024-43898: ext4: sanity check for NULL pointer after ext4_force_shutdown (bsc#1229753).
CVE-2024-43912: wifi: nl80211: disallow setting special AP channel widths (bsc#1229830)
CVE-2024-43914: md/raid5: avoid BUG_ON() while continue reshape after reassembling (bsc#1229790).
CVE-2024-44935: sctp: Fix null-ptr-deref in reuseport_add_sock() (bsc#1229810).
CVE-2024-44944: netfilter: ctnetlink: use helper function to calculate expect ID (bsc#1229899).
CVE-2024-44946: kcm: Serialise kcm_sendmsg() for the same socket (bsc#1230015).
CVE-2024-44950: serial: sc16is7xx: fix invalid FIFO access with special register set (bsc#1230180).
CVE-2024-44952: driver core: Fix uevent_show() vs driver detach race (bsc#1230178).
CVE-2024-44970: net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (bsc#1230209).
CVE-2024-44971: net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register() (bsc#1230211).
CVE-2024-44986: ipv6: fix possible UAF in ip6_finish_output2() (bsc#1230230)
CVE-2024-44987: ipv6: prevent UAF in ip6_send_skb() (bsc#1230185).
CVE-2024-44988: net: dsa: mv88e6xxx: Fix out-of-bound access (bsc#1230192).
CVE-2024-44989: bonding: fix xfrm real_dev null pointer dereference (bsc#1230193).
CVE-2024-44990: bonding: fix null pointer deref in bond_ipsec_offload_ok (bsc#1230194).
CVE-2024-44998: atm: idt77252: prevent use after free in dequeue_rx() (bsc#1230171).
CVE-2024-44999: gtp: pull network headers in…

Record: SUSE-SU-2024:3587-1
Updated: 2026-11-02

OSVSUSE-SU-2024:3591-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2021-47387: cpufreq: schedutil: Destroy mutex before kobject_put() frees the memory (bsc#1225316).
CVE-2022-48788: nvme-rdma: fix possible use-after-free in transport error_recovery work (bsc#1227952).
CVE-2022-48789: nvme-tcp: fix possible use-after-free in transport error_recovery work (bsc#1228000).
CVE-2022-48790: nvme: fix a possible use-after-free in controller reset during load (bsc#1227941).
CVE-2022-48791: Fix use-after-free for aborted TMF sas_task (bsc#1228002)
CVE-2022-48799: perf: Fix list corruption in perf_cgroup_switch() (bsc#1227953).
CVE-2022-48844: Bluetooth: hci_core: Fix leaking sent_cmd skb (bsc#1228068).
CVE-2022-48911: kabi: add __nf_queue_get_refs() for kabi compliance. (bsc#1229633).
CVE-2022-48943: KVM: x86/mmu: make apf token non-zero to fix bug (bsc#1229645).
CVE-2022-48945: media: vivid: fix compose size exceed boundary (bsc#1230398).
CVE-2023-52915: media: dvb-usb-v2: af9035: fix missing unlock (bsc#1230270).
CVE-2024-38596: af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg (bsc#1226846).
CVE-2024-41073: nvme: avoid double free special payload (bsc#1228635).
CVE-2024-41079: nvmet: always initialize cqe.result (bsc#1228615).
CVE-2024-41082: nvme-fabrics: use reserved tag for reg read/write command (bsc#1228620 CVE-2024-41082).
CVE-2024-42154: tcp_metrics: validate source addr length (bsc#1228507).
CVE-2024-42265: protect the fetch of ->fd[fd] in do_dup2() from mispredictions (bsc#1229334).
CVE-2024-42305: ext4: check dot and dotdot of dx_root before making dir indexed (bsc#1229363).
CVE-2024-42306: udf: Avoid using corrupted block bitmap buffer (bsc#1229362).
CVE-2024-43884: Add error handling to pair_device() (bsc#1229739)
CVE-2024-43890: tracing: Fix overflow in get_free_elt() (bsc#1229764).
CVE-2024-43898: ext4: sanity check for NULL pointer after ext4_force_shutdown (bsc#1229753).
CVE-2024-43912: wifi: nl80211: disallow setting special AP channel widths (bsc#1229830)
CVE-2024-43914: md/raid5: avoid BUG_ON() while continue reshape after reassembling (bsc#1229790).
CVE-2024-44946: kcm: Serialise kcm_sendmsg() for the same socket (bsc#1230015).
CVE-2024-44948: x86/mtrr: Check if fixed MTRRs exist before saving them (bsc#1230174).
CVE-2024-44950: serial: sc16is7xx: fix invalid FIFO access with special register set (bsc#1230180).
CVE-2024-44952: driver core: Fix uevent_show() vs driver detach race (bsc#1230178).
CVE-2024-44954: ALSA: line6: Fix racy access to midibuf (bsc#1230176).
CVE-2024-44969: s390/sclp: Prevent release of buffer in I/O (bsc#1230200).
CVE-2024-44982: drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails (bsc#1230204).
CVE-2024-44987: ipv6: prevent UAF in ip6_send_skb() (bsc#1230185).
CVE-2024-44998: atm: idt77252: prevent use after free in dequeue_rx() (bsc#1230171).
CVE-2024-44999: gtp: pull network headers in gtp_dev_xmit() (bsc#1230233).
CVE-2024-45008: Input: MT - limit max slots (bsc#1230248).
CVE-2024-46673: scsi: aacraid: Fix double-free on probe failure (bsc#1230506).
CVE-2024-46675: usb: dwc3: core: Prevent USB core invalid event buffer address access (bsc#1230533).
CVE-2024-46676: nfc: pn533: Add poll mod list filling check (bsc#1230535).
CVE-2024-46677: gtp: fix a potential NULL pointer dereference (bsc#1230549).
CVE-2024-46679: ethtool: check device is present when getting link settings (bsc#1230556).
CVE-2024-46685: pinctrl: single: fix potential NULL dereference in pcs_get_function() (bsc#1230515)
CVE-2024-46686: smb/client: avoid dereferencing rdata=NULL in smb2_new_read_req() (bsc#1230517).
CVE-2024-46702: thunderbolt: Mark XDomain as unplugged when router is removed (bsc#1230589)
CVE-2024-46707: KVM: arm64: Make ICC_SGI_EL1 undef in the absence of a vGICv3 (bsc#1230582).
CVE-2024-46715: driver: iio: add…

Record: SUSE-SU-2024:3591-1
Updated: 2026-11-02

OSVSUSE-SU-2024:3592-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2022-48901: btrfs: do not start relocation until in progress drops are done (bsc#1229607).
CVE-2022-48911: kabi: add __nf_queue_get_refs() for kabi compliance. (bsc#1229633).
CVE-2022-48923: btrfs: prevent copying too big compressed lzo segment (bsc#1229662)
CVE-2022-48935: Fixed an unregister flowtable hooks on netns exit (bsc#1229619)
CVE-2023-52610: net/sched: act_ct: fix skb leak and crash on ooo frags (bsc#1221610).
CVE-2023-52916: media: aspeed: Fix memory overwrite if timing is 1600x900 (bsc#1230269).
CVE-2024-26640: tcp: add sanity checks to rx zerocopy (bsc#1221650).
CVE-2024-26759: mm/swap: fix race when skipping swapcache (bsc#1230340).
CVE-2024-26767: drm/amd/display: fixed integer types and null check locations (bsc#1230339).
CVE-2024-26804: net: ip_tunnel: prevent perpetual headroom growth (bsc#1222629).
CVE-2024-26837: net: bridge: switchdev: race between creation of new group memberships and generation of the list of MDB events to replay (bsc#1222973).
CVE-2024-37353: virtio: fixed a double free in vp_del_vqs() (bsc#1226875).
CVE-2024-38538: net: bridge: xmit: make sure we have at least eth header len bytes (bsc#1226606).
CVE-2024-38596: af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg (bsc#1226846).
CVE-2024-40910: Fix refcount imbalance on inbound connections (bsc#1227832).
CVE-2024-40973: media: mtk-vcodec: potential null pointer deference in SCP (bsc#1227890).
CVE-2024-40983: tipc: force a dst refcount before doing decryption (bsc#1227819).
CVE-2024-41062: Sync sock recv cb and release (bsc#1228576).
CVE-2024-41082: nvme-fabrics: use reserved tag for reg read/write command (bsc#1228620 CVE-2024-41082).
CVE-2024-42154: tcp_metrics: validate source addr length (bsc#1228507).
CVE-2024-42259: Fix Virtual Memory mapping boundaries calculation (bsc#1229156)
CVE-2024-42265: protect the fetch of ->fd[fd] in do_dup2() from mispredictions (bsc#1229334).
CVE-2024-42304: ext4: make sure the first directory block is not a hole (bsc#1229364).
CVE-2024-42305: ext4: check dot and dotdot of dx_root before making dir indexed (bsc#1229363).
CVE-2024-42306: udf: Avoid using corrupted block bitmap buffer (bsc#1229362).
CVE-2024-43828: ext4: fix infinite loop when replaying fast_commit (bsc#1229394).
CVE-2024-43890: tracing: Fix overflow in get_free_elt() (bsc#1229764).
CVE-2024-43898: ext4: sanity check for NULL pointer after ext4_force_shutdown (bsc#1229753).
CVE-2024-43912: wifi: nl80211: disallow setting special AP channel widths (bsc#1229830)
CVE-2024-43914: md/raid5: avoid BUG_ON() while continue reshape after reassembling (bsc#1229790).
CVE-2024-44935: sctp: Fix null-ptr-deref in reuseport_add_sock() (bsc#1229810).
CVE-2024-44944: netfilter: ctnetlink: use helper function to calculate expect ID (bsc#1229899).
CVE-2024-44946: kcm: Serialise kcm_sendmsg() for the same socket (bsc#1230015).
CVE-2024-44950: serial: sc16is7xx: fix invalid FIFO access with special register set (bsc#1230180).
CVE-2024-44952: driver core: Fix uevent_show() vs driver detach race (bsc#1230178).
CVE-2024-44954: ALSA: line6: Fix racy access to midibuf (bsc#1230176).
CVE-2024-44970: net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (bsc#1230209).
CVE-2024-44971: net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register() (bsc#1230211).
CVE-2024-44986: ipv6: fix possible UAF in ip6_finish_output2() (bsc#1230230)
CVE-2024-44987: ipv6: prevent UAF in ip6_send_skb() (bsc#1230185).
CVE-2024-44988: net: dsa: mv88e6xxx: Fix out-of-bound access (bsc#1230192).
CVE-2024-44989: bonding: fix xfrm real_dev null pointer dereference (bsc#1230193).
CVE-2024-44990: bonding: fix null pointer deref in bond_ipsec_offload_ok (bsc#1230194).
CVE-2024-44998: atm: idt77252: prevent use after free in dequeue_rx()…

Record: SUSE-SU-2024:3592-1
Updated: 2026-11-02

OSVSUSE-SU-2025:20073-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2023-52610: net/sched: act_ct: fix skb leak and crash on ooo frags (bsc#1221610).
CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225487).
CVE-2023-52916: media: aspeed: Fix memory overwrite if timing is 1600x900 (bsc#1230269).
CVE-2024-26640: tcp: add sanity checks to rx zerocopy (bsc#1221650).
CVE-2024-26759: mm/swap: fix race when skipping swapcache (bsc#1230340).
CVE-2024-26804: net: ip_tunnel: prevent perpetual headroom growth (bsc#1222629).
CVE-2024-38538: net: bridge: xmit: make sure we have at least eth header len bytes (bsc#1226606).
CVE-2024-38596: af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg (bsc#1226846).
CVE-2024-40965: i2c: lpi2c: Avoid calling clk_get_rate during transfer (bsc#1227885).
CVE-2024-40973: media: mtk-vcodec: potential null pointer deference in SCP (bsc#1227890).
CVE-2024-40983: tipc: force a dst refcount before doing decryption (bsc#1227819).
CVE-2024-42154: tcp_metrics: validate source addr length (bsc#1228507).
CVE-2024-42243: mm/filemap: make MAX_PAGECACHE_ORDER acceptable to xarray (bsc#1229001).
CVE-2024-42252: closures: Change BUG_ON() to WARN_ON() (bsc#1229004).
CVE-2024-42265: protect the fetch of ->fd[fd] in do_dup2() from mispredictions (bsc#1229334).
CVE-2024-42294: block: fix deadlock between sd_remove & sd_release (bsc#1229371).
CVE-2024-42304: ext4: make sure the first directory block is not a hole (bsc#1229364).
CVE-2024-42305: ext4: check dot and dotdot of dx_root before making dir indexed (bsc#1229363).
CVE-2024-42306: udf: Avoid using corrupted block bitmap buffer (bsc#1229362).
CVE-2024-43828: ext4: fix infinite loop when replaying fast_commit (bsc#1229394).
CVE-2024-43832: s390/uv: Do not call folio_wait_writeback() without a folio reference (bsc#1229380).
CVE-2024-43845: udf: Fix bogus checksum computation in udf_rename() (bsc#1229389).
CVE-2024-43890: tracing: Fix overflow in get_free_elt() (bsc#1229764).
CVE-2024-43898: ext4: sanity check for NULL pointer after ext4_force_shutdown (bsc#1229753).
CVE-2024-43914: md/raid5: avoid BUG_ON() while continue reshape after reassembling (bsc#1229790).
CVE-2024-44935: sctp: Fix null-ptr-deref in reuseport_add_sock() (bsc#1229810).
CVE-2024-44944: netfilter: ctnetlink: use helper function to calculate expect ID (bsc#1229899).
CVE-2024-44946: kcm: Serialise kcm_sendmsg() for the same socket (bsc#1230015).
CVE-2024-44950: serial: sc16is7xx: fix invalid FIFO access with special register set (bsc#1230180).
CVE-2024-44951: serial: sc16is7xx: fix TX fifo corruption (bsc#1230181).
CVE-2024-44970: net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (bsc#1230209).
CVE-2024-44971: net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register() (bsc#1230211).
CVE-2024-44984: bnxt_en: Fix double DMA unmapping for XDP_REDIRECT (bsc#1230240).
CVE-2024-44985: ipv6: prevent possible UAF in ip6_xmit() (bsc#1230206).
CVE-2024-44987: ipv6: prevent UAF in ip6_send_skb() (bsc#1230185).
CVE-2024-44988: net: dsa: mv88e6xxx: Fix out-of-bound access (bsc#1230192).
CVE-2024-44989: bonding: fix xfrm real_dev null pointer dereference (bsc#1230193).
CVE-2024-44990: bonding: fix null pointer deref in bond_ipsec_offload_ok (bsc#1230194).
CVE-2024-44991: tcp: prevent concurrent execution of tcp_sk_exit_batch (bsc#1230195).
CVE-2024-44998: atm: idt77252: prevent use after free in dequeue_rx() (bsc#1230171).
CVE-2024-44999: gtp: pull network headers in gtp_dev_xmit() (bsc#1230233).
CVE-2024-45002: rtla/osnoise: Prevent NULL dereference in error handling (bsc#1230169).
CVE-2024-45003: Don't evict inode under the inode lru traversing context (bsc#1230245).
CVE-2024-45013: nvme: move stopping keep-alive into nvme_uninit_ctrl() (bsc#1230442).
CVE-2024-45017: net/mlx5: Fix IPsec…

Record: SUSE-SU-2025:20073-1
Updated: 2026-11-02

OSVSUSE-SU-2025:20077-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2023-52610: net/sched: act_ct: fix skb leak and crash on ooo frags (bsc#1221610).
CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225487).
CVE-2023-52916: media: aspeed: Fix memory overwrite if timing is 1600x900 (bsc#1230269).
CVE-2024-26640: tcp: add sanity checks to rx zerocopy (bsc#1221650).
CVE-2024-26759: mm/swap: fix race when skipping swapcache (bsc#1230340).
CVE-2024-26804: net: ip_tunnel: prevent perpetual headroom growth (bsc#1222629).
CVE-2024-38538: net: bridge: xmit: make sure we have at least eth header len bytes (bsc#1226606).
CVE-2024-38596: af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg (bsc#1226846).
CVE-2024-40965: i2c: lpi2c: Avoid calling clk_get_rate during transfer (bsc#1227885).
CVE-2024-40973: media: mtk-vcodec: potential null pointer deference in SCP (bsc#1227890).
CVE-2024-40983: tipc: force a dst refcount before doing decryption (bsc#1227819).
CVE-2024-42154: tcp_metrics: validate source addr length (bsc#1228507).
CVE-2024-42243: mm/filemap: make MAX_PAGECACHE_ORDER acceptable to xarray (bsc#1229001).
CVE-2024-42252: closures: Change BUG_ON() to WARN_ON() (bsc#1229004).
CVE-2024-42265: protect the fetch of ->fd[fd] in do_dup2() from mispredictions (bsc#1229334).
CVE-2024-42294: block: fix deadlock between sd_remove & sd_release (bsc#1229371).
CVE-2024-42304: ext4: make sure the first directory block is not a hole (bsc#1229364).
CVE-2024-42305: ext4: check dot and dotdot of dx_root before making dir indexed (bsc#1229363).
CVE-2024-42306: udf: Avoid using corrupted block bitmap buffer (bsc#1229362).
CVE-2024-43828: ext4: fix infinite loop when replaying fast_commit (bsc#1229394).
CVE-2024-43832: s390/uv: Do not call folio_wait_writeback() without a folio reference (bsc#1229380).
CVE-2024-43845: udf: Fix bogus checksum computation in udf_rename() (bsc#1229389).
CVE-2024-43890: tracing: Fix overflow in get_free_elt() (bsc#1229764).
CVE-2024-43898: ext4: sanity check for NULL pointer after ext4_force_shutdown (bsc#1229753).
CVE-2024-43914: md/raid5: avoid BUG_ON() while continue reshape after reassembling (bsc#1229790).
CVE-2024-44935: sctp: Fix null-ptr-deref in reuseport_add_sock() (bsc#1229810).
CVE-2024-44944: netfilter: ctnetlink: use helper function to calculate expect ID (bsc#1229899).
CVE-2024-44946: kcm: Serialise kcm_sendmsg() for the same socket (bsc#1230015).
CVE-2024-44950: serial: sc16is7xx: fix invalid FIFO access with special register set (bsc#1230180).
CVE-2024-44951: serial: sc16is7xx: fix TX fifo corruption (bsc#1230181).
CVE-2024-44970: net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (bsc#1230209).
CVE-2024-44971: net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register() (bsc#1230211).
CVE-2024-44984: bnxt_en: Fix double DMA unmapping for XDP_REDIRECT (bsc#1230240).
CVE-2024-44985: ipv6: prevent possible UAF in ip6_xmit() (bsc#1230206).
CVE-2024-44987: ipv6: prevent UAF in ip6_send_skb() (bsc#1230185).
CVE-2024-44988: net: dsa: mv88e6xxx: Fix out-of-bound access (bsc#1230192).
CVE-2024-44989: bonding: fix xfrm real_dev null pointer dereference (bsc#1230193).
CVE-2024-44990: bonding: fix null pointer deref in bond_ipsec_offload_ok (bsc#1230194).
CVE-2024-44991: tcp: prevent concurrent execution of tcp_sk_exit_batch (bsc#1230195).
CVE-2024-44998: atm: idt77252: prevent use after free in dequeue_rx() (bsc#1230171).
CVE-2024-44999: gtp: pull network headers in gtp_dev_xmit() (bsc#1230233).
CVE-2024-45002: rtla/osnoise: Prevent NULL dereference in error handling (bsc#1230169).
CVE-2024-45003: Don't evict inode under the inode lru traversing context (bsc#1230245).
CVE-2024-45013: nvme: move stopping keep-alive into nvme_uninit_ctrl() (bsc#1230442).
CVE-2024-45017: net/mlx5: Fix…

Record: SUSE-SU-2025:20077-1
Updated: 2026-11-02

OSVUSN-7154-1 No score

linux, linux-aws, linux-aws-6.8, linux-gcp, linux-gcp-6.8, linux-gke, linux-ibm, linux-lowlatency, linux-lowlatency-hwe-6.8, linux-oem-6.8, linux-oracle, linux-oracle-6.8, linux-raspi vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
MIPS architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
User-Mode Linux (UML);
x86 architecture;
Block layer subsystem;
Android drivers;
ATM drivers;
Drivers core;
Ublk userspace block driver;
Bluetooth drivers;
Character device driver;
Hardware crypto device drivers;
Buffer Sharing and Synchronization framework;
DMA engine subsystem;
Qualcomm firmware drivers;
GPIO subsystem;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
I2C subsystem;
I3C subsystem;
IIO subsystem;
InfiniBand drivers;
Input Device core drivers;
Input Device (Miscellaneous) drivers;
IOMMU subsystem;
IRQ chip drivers;
LED subsystem;
Mailbox framework;
Multiple devices driver;
Media drivers;
Fastrpc Driver;
VMware VMCI Driver;
MMC subsystem;
Ethernet bonding driver;
Network drivers;
Mellanox network drivers;
Microsoft Azure Network Adapter (MANA) driver;
Near Field Communication (NFC) drivers;
NVME drivers;
Device tree and open firmware driver;
Parport drivers;
PCI subsystem;
Pin controllers subsystem;
x86 platform drivers;
Power supply drivers;
Remote Processor subsystem;
S/390 drivers;
SCSI subsystem;
QCOM SoC drivers;
SPI subsystem;
Direct Digital Synthesis drivers;
Thunderbolt and USB4 drivers;
TTY drivers;
UFS subsystem;
Userspace I/O drivers;
DesignWare USB3 driver;
USB Gadget drivers;
USB Host Controller drivers;
USB Type-C Connector System Software Interface driver;
USB over IP driver;
Virtio Host (VHOST) subsystem;
Framebuffer layer;
Xen hypervisor drivers;
File systems infrastructure;
BTRFS file system;
Ext4 file system;
F2FS file system;
JFS file system;
Network file systems library;
Network file system (NFS) client;
Network file system (NFS) server daemon;
NILFS2 file system;
File system notification infrastructure;
NTFS3 file system;
Proc file system;
SMB network file system;
Tracing file system;
Bitmap API;
BPF subsystem;
Memory Management;
Objagg library;
Perf events;
Virtio network driver;
VMware vSockets driver;
KCM (Kernel Connection Multiplexor) sockets driver;
Control group (cgroup);
DMA mapping infrastructure;
Locking primitives;
Padata parallel execution mechanism;
Scheduler infrastructure;
Tracing infrastructure;
Radix Tree data structure library;
Kernel userspace event delivery library;
KUnit for arithmetic overflow checks;
Memory management;
Bluetooth subsystem;
Ethernet bridge;
CAN network layer;
Networking core;
Ethtool driver;
IPv4 networking;
IPv6 networking;
MAC80211 subsystem;
Multipath TCP;
Netfilter;
Network traffic control;
SCTP protocol;
TIPC protocol;
Wireless networking;
AppArmor security module;
Landlock security;
SELinux security module;
Simplified Mandatory Access Control Kernel framework;
FireWire sound drivers;
AMD SoC Alsa drivers;
Texas InstrumentS Audio (ASoC/HDA) drivers;
SoC Audio for Freescale CPUs drivers;
Intel ASoC drivers;
Amlogic Meson SoC drivers;
SoC audio core drivers;
USB sound devices;
Real-Time Linux Analysis tools; (CVE-2024-46783, CVE-2024-44960, CVE-2024-46743, CVE-2024-45009, CVE-2024-43820, CVE-2024-43888, CVE-2024-45010, CVE-2024-43839, CVE-2024-42304, CVE-2024-43846, CVE-2024-42258, CVE-2024-45005, CVE-2024-46709, CVE-2024-46774, CVE-2024-43883, CVE-2024-43859, CVE-2024-46721, CVE-2024-44944, CVE-2024-43913, CVE-2024-43843, CVE-2024-43845, CVE-2024-45018, CVE-2024-43909,…

Record: USN-7154-1
Updated: 2026-11-02

OSVUSN-7154-2 No score

linux-hwe-6.8 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
MIPS architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
User-Mode Linux (UML);
x86 architecture;
Block layer subsystem;
Android drivers;
ATM drivers;
Drivers core;
Ublk userspace block driver;
Bluetooth drivers;
Character device driver;
Hardware crypto device drivers;
Buffer Sharing and Synchronization framework;
DMA engine subsystem;
Qualcomm firmware drivers;
GPIO subsystem;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
I2C subsystem;
I3C subsystem;
IIO subsystem;
InfiniBand drivers;
Input Device core drivers;
Input Device (Miscellaneous) drivers;
IOMMU subsystem;
IRQ chip drivers;
LED subsystem;
Mailbox framework;
Multiple devices driver;
Media drivers;
Fastrpc Driver;
VMware VMCI Driver;
MMC subsystem;
Ethernet bonding driver;
Network drivers;
Mellanox network drivers;
Microsoft Azure Network Adapter (MANA) driver;
Near Field Communication (NFC) drivers;
NVME drivers;
Device tree and open firmware driver;
Parport drivers;
PCI subsystem;
Pin controllers subsystem;
x86 platform drivers;
Power supply drivers;
Remote Processor subsystem;
S/390 drivers;
SCSI subsystem;
QCOM SoC drivers;
SPI subsystem;
Direct Digital Synthesis drivers;
Thunderbolt and USB4 drivers;
TTY drivers;
UFS subsystem;
Userspace I/O drivers;
DesignWare USB3 driver;
USB Gadget drivers;
USB Host Controller drivers;
USB Type-C Connector System Software Interface driver;
USB over IP driver;
Virtio Host (VHOST) subsystem;
Framebuffer layer;
Xen hypervisor drivers;
File systems infrastructure;
BTRFS file system;
Ext4 file system;
F2FS file system;
JFS file system;
Network file systems library;
Network file system (NFS) client;
Network file system (NFS) server daemon;
NILFS2 file system;
File system notification infrastructure;
NTFS3 file system;
Proc file system;
SMB network file system;
Tracing file system;
Bitmap API;
BPF subsystem;
Memory Management;
Objagg library;
Perf events;
Virtio network driver;
VMware vSockets driver;
KCM (Kernel Connection Multiplexor) sockets driver;
Control group (cgroup);
DMA mapping infrastructure;
Locking primitives;
Padata parallel execution mechanism;
Scheduler infrastructure;
Tracing infrastructure;
Radix Tree data structure library;
Kernel userspace event delivery library;
KUnit for arithmetic overflow checks;
Memory management;
Bluetooth subsystem;
Ethernet bridge;
CAN network layer;
Networking core;
Ethtool driver;
IPv4 networking;
IPv6 networking;
MAC80211 subsystem;
Multipath TCP;
Netfilter;
Network traffic control;
SCTP protocol;
TIPC protocol;
Wireless networking;
AppArmor security module;
Landlock security;
SELinux security module;
Simplified Mandatory Access Control Kernel framework;
FireWire sound drivers;
AMD SoC Alsa drivers;
Texas InstrumentS Audio (ASoC/HDA) drivers;
SoC Audio for Freescale CPUs drivers;
Intel ASoC drivers;
Amlogic Meson SoC drivers;
SoC audio core drivers;
USB sound devices;
Real-Time Linux Analysis tools; (CVE-2024-46783, CVE-2024-44960, CVE-2024-46743, CVE-2024-45009, CVE-2024-43820, CVE-2024-43888, CVE-2024-45010, CVE-2024-43839, CVE-2024-42304, CVE-2024-43846, CVE-2024-42258, CVE-2024-45005, CVE-2024-46709, CVE-2024-46774, CVE-2024-43883, CVE-2024-43859, CVE-2024-46721, CVE-2024-44944, CVE-2024-43913, CVE-2024-43843, CVE-2024-43845, CVE-2024-45018, CVE-2024-43909,…

Record: USN-7154-2
Updated: 2026-11-02

OSVUSN-7155-1 No score

linux-nvidia, linux-nvidia-6.8, linux-nvidia-lowlatency vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
MIPS architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
User-Mode Linux (UML);
x86 architecture;
Block layer subsystem;
Android drivers;
ATM drivers;
Drivers core;
Ublk userspace block driver;
Bluetooth drivers;
Character device driver;
Hardware crypto device drivers;
Buffer Sharing and Synchronization framework;
DMA engine subsystem;
Qualcomm firmware drivers;
GPIO subsystem;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
I2C subsystem;
I3C subsystem;
IIO subsystem;
InfiniBand drivers;
Input Device core drivers;
Input Device (Miscellaneous) drivers;
IOMMU subsystem;
IRQ chip drivers;
LED subsystem;
Mailbox framework;
Multiple devices driver;
Media drivers;
Fastrpc Driver;
VMware VMCI Driver;
MMC subsystem;
Ethernet bonding driver;
Network drivers;
Mellanox network drivers;
Microsoft Azure Network Adapter (MANA) driver;
Near Field Communication (NFC) drivers;
NVME drivers;
Device tree and open firmware driver;
Parport drivers;
PCI subsystem;
Pin controllers subsystem;
x86 platform drivers;
Power supply drivers;
Remote Processor subsystem;
S/390 drivers;
SCSI subsystem;
QCOM SoC drivers;
SPI subsystem;
Direct Digital Synthesis drivers;
Thunderbolt and USB4 drivers;
TTY drivers;
UFS subsystem;
Userspace I/O drivers;
DesignWare USB3 driver;
USB Gadget drivers;
USB Host Controller drivers;
USB Type-C Connector System Software Interface driver;
USB over IP driver;
Virtio Host (VHOST) subsystem;
Framebuffer layer;
Xen hypervisor drivers;
File systems infrastructure;
BTRFS file system;
Ext4 file system;
F2FS file system;
JFS file system;
Network file systems library;
Network file system (NFS) client;
Network file system (NFS) server daemon;
NILFS2 file system;
File system notification infrastructure;
NTFS3 file system;
Proc file system;
SMB network file system;
Tracing file system;
Bitmap API;
BPF subsystem;
Memory Management;
Objagg library;
Perf events;
Virtio network driver;
VMware vSockets driver;
KCM (Kernel Connection Multiplexor) sockets driver;
Control group (cgroup);
DMA mapping infrastructure;
Locking primitives;
Padata parallel execution mechanism;
Scheduler infrastructure;
Tracing infrastructure;
Radix Tree data structure library;
Kernel userspace event delivery library;
KUnit for arithmetic overflow checks;
Memory management;
Bluetooth subsystem;
Ethernet bridge;
CAN network layer;
Networking core;
Ethtool driver;
IPv4 networking;
IPv6 networking;
MAC80211 subsystem;
Multipath TCP;
Netfilter;
Network traffic control;
SCTP protocol;
TIPC protocol;
Wireless networking;
AppArmor security module;
Landlock security;
SELinux security module;
Simplified Mandatory Access Control Kernel framework;
FireWire sound drivers;
AMD SoC Alsa drivers;
Texas InstrumentS Audio (ASoC/HDA) drivers;
SoC Audio for Freescale CPUs drivers;
Intel ASoC drivers;
Amlogic Meson SoC drivers;
SoC audio core drivers;
USB sound devices;
Real-Time Linux Analysis tools; (CVE-2024-43845, CVE-2024-42311, CVE-2024-46757, CVE-2024-46738, CVE-2024-44961, CVE-2024-44935, CVE-2024-46845, CVE-2024-46783, CVE-2024-42315, CVE-2023-52918, CVE-2024-46708, CVE-2024-44934, CVE-2024-42298, CVE-2024-46786, CVE-2024-46778, CVE-2024-44960, CVE-2024-42295, CVE-2024-43881, CVE-2024-44971, CVE-2024-43849, CVE-2024-43914, CVE-2024-44962, CVE-2024-43841,…

Record: USN-7155-1
Updated: 2026-11-02

OSVUSN-7156-1 No score

linux-gkeop vulnerabilities

Chenyuan Yang discovered that the USB Gadget subsystem in the Linux kernel did not properly check for the device to be enabled before writing. A local attacker could possibly use this to cause a denial of service. (CVE-2024-25741)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM32 architecture;
ARM64 architecture;
MIPS architecture;
PA-RISC architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
User-Mode Linux (UML);
x86 architecture;
Block layer subsystem;
Cryptographic API;
Android drivers;
Serial ATA and Parallel ATA drivers;
ATM drivers;
Drivers core;
Null block device driver;
Ublk userspace block driver;
Bluetooth drivers;
Cdrom driver;
Character device driver;
Clock framework and drivers;
Hardware crypto device drivers;
CXL (Compute Express Link) drivers;
Buffer Sharing and Synchronization framework;
DMA engine subsystem;
Cirrus firmware drivers;
Qualcomm firmware drivers;
GPIO subsystem;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
I2C subsystem;
I3C subsystem;
IIO subsystem;
InfiniBand drivers;
Input Device core drivers;
Input Device (Miscellaneous) drivers;
IOMMU subsystem;
IRQ chip drivers;
ISDN/mISDN subsystem;
LED subsystem;
Mailbox framework;
Multiple devices driver;
Media drivers;
Fastrpc Driver;
VMware VMCI Driver;
MMC subsystem;
Ethernet bonding driver;
Network drivers;
Mellanox network drivers;
Microsoft Azure Network Adapter (MANA) driver;
Near Field Communication (NFC) drivers;
NVME drivers;
NVMEM (Non Volatile Memory) drivers;
Device tree and open firmware driver;
Parport drivers;
PCI subsystem;
Pin controllers subsystem;
x86 platform drivers;
Power supply drivers;
Remote Processor subsystem;
S/390 drivers;
SCSI subsystem;
QCOM SoC drivers;
SPI subsystem;
Direct Digital Synthesis drivers;
Thermal drivers;
Thunderbolt and USB4 drivers;
TTY drivers;
UFS subsystem;
Userspace I/O drivers;
USB DSL drivers;
USB core drivers;
DesignWare USB3 driver;
USB Gadget drivers;
USB Host Controller drivers;
USB Serial drivers;
USB Type-C Connector System Software Interface driver;
USB over IP driver;
VFIO drivers;
Virtio Host (VHOST) subsystem;
Framebuffer layer;
Xen hypervisor drivers;
File systems infrastructure;
BTRFS file system;
Ext4 file system;
F2FS file system;
GFS2 file system;
JFFS2 file system;
JFS file system;
Network file systems library;
Network file system (NFS) client;
Network file system (NFS) server daemon;
NILFS2 file system;
File system notification infrastructure;
NTFS3 file system;
Proc file system;
SMB network file system;
Tracing file system;
Bitmap API;
BPF subsystem;
Syscall compatibility layer;
Memory Management;
Memory management;
Objagg library;
Perf events;
Syscall interfaces;
Virtio network driver;
VMware vSockets driver;
KCM (Kernel Connection Multiplexor) sockets driver;
Netfilter;
Tracing infrastructure;
io_uring subsystem;
Control group (cgroup);
DMA mapping infrastructure;
Locking primitives;
Padata parallel execution mechanism;
Scheduler infrastructure;
Closures library;
Radix Tree data structure library;
Kernel userspace event delivery library;
KUnit for arithmetic overflow checks;
Bluetooth subsystem;
Ethernet bridge;
CAN network layer;
Ceph Core library;
Networking core;
Ethtool driver;
IPv4 networking;
IPv6 networking;
IUCV driver;
MAC80211 subsystem;
Multipath TCP;
Network traffic control;…

Record: USN-7156-1
Updated: 2026-11-02

OSVUSN-7196-1 No score

linux-azure, linux-azure-6.8 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
MIPS architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
User-Mode Linux (UML);
x86 architecture;
Block layer subsystem;
Android drivers;
ATM drivers;
Drivers core;
Ublk userspace block driver;
Bluetooth drivers;
Character device driver;
Hardware crypto device drivers;
Buffer Sharing and Synchronization framework;
DMA engine subsystem;
Qualcomm firmware drivers;
GPIO subsystem;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
I2C subsystem;
I3C subsystem;
IIO subsystem;
InfiniBand drivers;
Input Device core drivers;
Input Device (Miscellaneous) drivers;
IOMMU subsystem;
IRQ chip drivers;
LED subsystem;
Mailbox framework;
Multiple devices driver;
Media drivers;
Fastrpc Driver;
VMware VMCI Driver;
MMC subsystem;
Ethernet bonding driver;
Network drivers;
Mellanox network drivers;
Microsoft Azure Network Adapter (MANA) driver;
Near Field Communication (NFC) drivers;
NVME drivers;
Device tree and open firmware driver;
Parport drivers;
PCI subsystem;
Pin controllers subsystem;
x86 platform drivers;
Power supply drivers;
Remote Processor subsystem;
S/390 drivers;
SCSI subsystem;
QCOM SoC drivers;
SPI subsystem;
Direct Digital Synthesis drivers;
Thunderbolt and USB4 drivers;
TTY drivers;
UFS subsystem;
Userspace I/O drivers;
DesignWare USB3 driver;
USB Gadget drivers;
USB Host Controller drivers;
USB Type-C Connector System Software Interface driver;
USB over IP driver;
Virtio Host (VHOST) subsystem;
Framebuffer layer;
Xen hypervisor drivers;
File systems infrastructure;
BTRFS file system;
Ext4 file system;
F2FS file system;
JFS file system;
Network file systems library;
Network file system (NFS) client;
Network file system (NFS) server daemon;
NILFS2 file system;
File system notification infrastructure;
NTFS3 file system;
Proc file system;
SMB network file system;
Tracing file system;
Bitmap API;
BPF subsystem;
Memory Management;
Objagg library;
Perf events;
Virtio network driver;
VMware vSockets driver;
KCM (Kernel Connection Multiplexor) sockets driver;
Control group (cgroup);
DMA mapping infrastructure;
Locking primitives;
Padata parallel execution mechanism;
Scheduler infrastructure;
Tracing infrastructure;
Radix Tree data structure library;
Kernel userspace event delivery library;
KUnit for arithmetic overflow checks;
Memory management;
Bluetooth subsystem;
Ethernet bridge;
CAN network layer;
Networking core;
Ethtool driver;
IPv4 networking;
IPv6 networking;
MAC80211 subsystem;
Multipath TCP;
Netfilter;
Network traffic control;
SCTP protocol;
TIPC protocol;
Wireless networking;
AppArmor security module;
Landlock security;
SELinux security module;
Simplified Mandatory Access Control Kernel framework;
FireWire sound drivers;
AMD SoC Alsa drivers;
Texas InstrumentS Audio (ASoC/HDA) drivers;
SoC Audio for Freescale CPUs drivers;
Intel ASoC drivers;
Amlogic Meson SoC drivers;
SoC audio core drivers;
USB sound devices;
Real-Time Linux Analysis tools; (CVE-2024-44979, CVE-2024-47658, CVE-2024-44970, CVE-2024-43913, CVE-2024-46816, CVE-2024-46738, CVE-2024-46777, CVE-2024-46730, CVE-2024-46811, CVE-2024-44954, CVE-2024-42317, CVE-2024-42279, CVE-2024-45002, CVE-2024-43826, CVE-2024-44967, CVE-2024-46721, CVE-2024-46763, CVE-2024-43856, CVE-2024-42284, CVE-2024-42289, CVE-2024-46806, CVE-2024-46776, CVE-2024-43843,…

Record: USN-7196-1
Updated: 2026-11-02

OSVUSN-7607-1 No score

linux, linux-aws, linux-lts-xenial vulnerabilities

It was discovered that a use-after-free vulnerability existed in the Bluetooth stack in the Linux kernel. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2022-3640)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

SCSI subsystem;
Network file system (NFS) client;
NILFS2 file system;
File systems infrastructure;
Memory management;
Bluetooth subsystem;
Network traffic control;
USB sound devices; (CVE-2024-50116, CVE-2021-47576, CVE-2024-53197, CVE-2024-46787, CVE-2025-37798, CVE-2024-49958, CVE-2021-47260, CVE-2025-37932, CVE-2022-49909)

Record: USN-7607-1
Updated: 2026-11-03

OSVUSN-7607-2 No score

linux-fips vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

SCSI subsystem;
Network file system (NFS) client;
NILFS2 file system;
File systems infrastructure;
Memory management;
Bluetooth subsystem;
Network traffic control;
USB sound devices; (CVE-2024-50116, CVE-2021-47576, CVE-2024-53197, CVE-2024-46787, CVE-2025-37798, CVE-2024-49958, CVE-2021-47260, CVE-2025-37932, CVE-2022-49909)

Record: USN-7607-2
Updated: 2026-11-03

OSVUSN-7607-3 No score

linux-kvm vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

SCSI subsystem;
Network file system (NFS) client;
NILFS2 file system;
File systems infrastructure;
Memory management;
Bluetooth subsystem;
Network traffic control;
USB sound devices; (CVE-2024-50116, CVE-2021-47576, CVE-2024-53197, CVE-2024-46787, CVE-2025-37798, CVE-2024-49958, CVE-2021-47260, CVE-2025-37932, CVE-2022-49909)

Record: USN-7607-3
Updated: 2026-11-03

OSVUSN-7608-1 No score

linux, linux-aws, linux-gcp, linux-gcp-5.15, linux-gke, linux-gkeop, linux-hwe-5.15, linux-ibm, linux-kvm, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-nvidia, linux-oracle, linux-oracle-5.15 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

GPU drivers;
SMB network file system;
Memory management;
Netfilter;
Network traffic control; (CVE-2025-37890, CVE-2024-46787, CVE-2025-37798, CVE-2025-38000, CVE-2025-37932, CVE-2025-38001, CVE-2025-37997, CVE-2024-50047, CVE-2024-53051)

Record: USN-7608-1
Updated: 2026-11-03

OSVUSN-7608-2 No score

linux-fips, linux-aws-fips, linux-gcp-fips vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

GPU drivers;
SMB network file system;
Memory management;
Netfilter;
Network traffic control; (CVE-2025-37890, CVE-2024-46787, CVE-2025-37798, CVE-2025-38000, CVE-2025-37932, CVE-2025-38001, CVE-2025-37997, CVE-2024-50047, CVE-2024-53051)

Record: USN-7608-2
Updated: 2026-11-03

OSVUSN-7608-3 No score

linux-realtime vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

GPU drivers;
SMB network file system;
Memory management;
Netfilter;
Network traffic control; (CVE-2025-37890, CVE-2024-46787, CVE-2025-37798, CVE-2025-38000, CVE-2025-37932, CVE-2025-38001, CVE-2025-37997, CVE-2024-50047, CVE-2024-53051)

Record: USN-7608-3
Updated: 2026-11-03

OSVUSN-7608-4 No score

linux-aws-5.15, linux-intel-iot-realtime vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

GPU drivers;
SMB network file system;
Memory management;
Netfilter;
Network traffic control; (CVE-2025-37890, CVE-2024-46787, CVE-2025-37798, CVE-2025-38000, CVE-2025-37932, CVE-2025-38001, CVE-2025-37997, CVE-2024-50047, CVE-2024-53051)

Record: USN-7608-4
Updated: 2026-11-03

OSVUSN-7608-5 No score

linux-ibm-5.15, linux-intel-iotg, linux-nvidia-tegra, linux-nvidia-tegra-5.15, linux-nvidia-tegra-igx vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

GPU drivers;
SMB network file system;
Memory management;
Netfilter;
Network traffic control; (CVE-2025-37890, CVE-2024-46787, CVE-2025-37798, CVE-2025-38000, CVE-2025-37932, CVE-2025-38001, CVE-2025-37997, CVE-2024-50047, CVE-2024-53051)

Record: USN-7608-5
Updated: 2026-11-03

OSVUSN-7608-6 No score

linux-xilinx-zynqmp vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

GPU drivers;
SMB network file system;
Memory management;
Netfilter;
Network traffic control; (CVE-2025-37890, CVE-2024-46787, CVE-2025-37798, CVE-2025-38000, CVE-2025-37932, CVE-2025-38001, CVE-2025-37997, CVE-2024-50047, CVE-2024-53051)

Record: USN-7608-6
Updated: 2026-11-03

OSVUSN-7608-7 No score

linux-azure vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

GPU drivers;
SMB network file system;
Memory management;
Netfilter;
Network traffic control; (CVE-2025-37890, CVE-2024-46787, CVE-2025-37798, CVE-2025-38000, CVE-2025-37932, CVE-2025-38001, CVE-2025-37997, CVE-2024-50047, CVE-2024-53051)

Record: USN-7608-7
Updated: 2026-11-03

OSVUSN-7627-1 No score

linux, linux-aws, linux-aws-hwe, linux-azure, linux-azure-4.15, linux-gcp, linux-gcp-4.15, linux-hwe, linux-kvm, linux-oracle vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

PowerPC architecture;
Block layer subsystem;
ACPI drivers;
NILFS2 file system;
File systems infrastructure;
Memory management;
Network traffic control;
USB sound devices; (CVE-2025-37932, CVE-2024-53197, CVE-2024-50116, CVE-2021-47379, CVE-2024-49958, CVE-2022-49179, CVE-2024-46787, CVE-2024-41070, CVE-2025-38000, CVE-2024-56662, CVE-2022-49176, CVE-2025-37798)

Record: USN-7627-1
Updated: 2026-11-03

OSVUSN-7627-2 No score

linux-fips, linux-aws-fips, linux-azure-fips, linux-gcp-fips vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

PowerPC architecture;
Block layer subsystem;
ACPI drivers;
NILFS2 file system;
File systems infrastructure;
Memory management;
Network traffic control;
USB sound devices; (CVE-2025-37932, CVE-2024-53197, CVE-2024-50116, CVE-2021-47379, CVE-2024-49958, CVE-2022-49179, CVE-2024-46787, CVE-2024-41070, CVE-2025-38000, CVE-2024-56662, CVE-2022-49176, CVE-2025-37798)

Record: USN-7627-2
Updated: 2026-11-03

OSVUSN-7655-1 No score

linux-intel-iotg-5.15 vulnerabilities

Michael Randrianantenaina discovered that the Bluetooth driver in the Linux Kernel contained an improper access control vulnerability. A nearby attacker could use this to connect a rougue device and possibly execute arbitrary code. (CVE-2024-8805)

It was discovered that the CIFS network file system implementation in the Linux kernel did not properly verify the target namespace when handling upcalls. An attacker could use this to expose sensitive information. (CVE-2025-2312)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

PA-RISC architecture;
PowerPC architecture;
x86 architecture;
Block layer subsystem;
Cryptographic API;
ACPI drivers;
Serial ATA and Parallel ATA drivers;
Bluetooth drivers;
Bus devices;
Clock framework and drivers;
CPU frequency scaling framework;
Buffer Sharing and Synchronization framework;
DMA engine subsystem;
ARM SCMI message protocol;
GPU drivers;
HID subsystem;
HSI subsystem;
I2C subsystem;
I3C subsystem;
IIO subsystem;
InfiniBand drivers;
IOMMU subsystem;
IRQ chip drivers;
MCB driver;
Multiple devices driver;
Media drivers;
MemoryStick subsystem;
Multifunction device drivers;
PCI Endpoint Test driver;
MTD block device drivers;
Network drivers;
Mellanox network drivers;
NTB driver;
Device tree and open firmware driver;
PCI subsystem;
TI SCI PM domains driver;
PWM drivers;
Voltage and Current Regulator drivers;
Remote Processor subsystem;
S/390 drivers;
SCSI subsystem;
QCOM SoC drivers;
Samsung SoC drivers;
TCM subsystem;
Thermal drivers;
UFS subsystem;
Cadence USB3 driver;
ChipIdea USB driver;
USB Device Class drivers;
DesignWare USB3 driver;
USB Gadget drivers;
USB Type-C support driver;
USB Type-C Connector System Software Interface driver;
Backlight driver;
Framebuffer layer;
Xen hypervisor drivers;
BTRFS file system;
Ext4 file system;
F2FS file system;
File systems infrastructure;
JFS file system;
Network file system (NFS) client;
Network file system (NFS) server daemon;
NTFS3 file system;
Proc file system;
SMB network file system;
Kernel stack handling interfaces;
Bluetooth subsystem;
IPv6 networking;
Network traffic control;
SCTP protocol;
RDMA verbs API;
SoC audio core drivers;
BPF subsystem;
Kernel command line parsing driver;
Tracing infrastructure;
Watch queue notification mechanism;
Memory management;
802.1Q VLAN protocol;
Asynchronous Transfer Mode (ATM) subsystem;
Networking core;
IPv4 networking;
MAC80211 subsystem;
Management Component Transport Protocol (MCTP);
Multipath TCP;
Netfilter;
Open vSwitch;
Phonet protocol;
SMC sockets;
Sun RPC protocol;
TIPC protocol;
TLS protocol;
SoC Audio for Freescale CPUs drivers;
Virtio sound driver;
CPU Power monitoring subsystem; (CVE-2025-37989, CVE-2025-22071, CVE-2025-37808, CVE-2025-37983, CVE-2025-38001, CVE-2024-46816, CVE-2024-50125, CVE-2025-38575, CVE-2025-37766, CVE-2022-49168, CVE-2025-22025, CVE-2025-22035, CVE-2025-37923, CVE-2024-49989, CVE-2025-23148, CVE-2024-53051, CVE-2025-39728, CVE-2025-21956, CVE-2025-37741, CVE-2025-37970, CVE-2025-37798, CVE-2025-23157, CVE-2025-38177, CVE-2022-49535, CVE-2025-22027, CVE-2025-37756, CVE-2025-38023, CVE-2025-22066, CVE-2025-37780, CVE-2025-37995, CVE-2025-37739, CVE-2025-37932, CVE-2025-37982, CVE-2025-37812, CVE-2025-23156, CVE-2025-38005, CVE-2025-21839, CVE-2025-37892, CVE-2025-22073, CVE-2024-35866, CVE-2023-52757, CVE-2025-37785, CVE-2025-23150, CVE-2024-58093, CVE-2025-21992, CVE-2025-37905, CVE-2025-37836, CVE-2025-21964, CVE-2025-23140, CVE-2025-22056, CVE-2025-37915, CVE-2025-22054,…

Record: USN-7655-1
Updated: 2026-11-03

OSVUSN-7671-1 No score

linux, linux-aws, linux-aws-5.4, linux-aws-fips, linux-bluefield, linux-fips, linux-gcp, linux-gcp-5.4, linux-gcp-fips, linux-hwe-5.4, linux-ibm, linux-ibm-5.4, linux-kvm, linux-oracle, linux-oracle-5.4, linux-xilinx-zynqmp vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ACPI drivers;
GPU drivers;
SMB network file system;
Memory management;
Netfilter;
Network traffic control; (CVE-2024-53051, CVE-2024-46787, CVE-2024-50047, CVE-2024-56662, CVE-2025-37890, CVE-2025-38001, CVE-2025-37997, CVE-2025-37932, CVE-2025-37798, CVE-2025-38177, CVE-2025-38000)

Record: USN-7671-1
Updated: 2026-11-03

OSVUSN-7671-2 No score

linux-azure, linux-azure-5.4, linux-azure-fips, linux-raspi, linux-raspi-5.4 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ACPI drivers;
GPU drivers;
SMB network file system;
Memory management;
Netfilter;
Network traffic control; (CVE-2024-53051, CVE-2024-46787, CVE-2024-50047, CVE-2024-56662, CVE-2025-37890, CVE-2025-38001, CVE-2025-37997, CVE-2025-37932, CVE-2025-37798, CVE-2025-38177, CVE-2025-38000)

Record: USN-7671-2
Updated: 2026-11-03

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`kernel` Azure Linux:2	through 5.15.200.1-1	None known
`linux-lts` Alpaquita:23	6.1.189-r0 up to 6.1.191-r0	6.1.191-r0
`linux-lts` Alpaquita:25	6.6.89-r0 up to 6.12.41-r0	6.12.41-r0
`linux-lts` Alpaquita:stream	6.6.100-r0 up to 6.12.41-r0	6.12.41-r0
`linux-buildinfo-4.15.0-249-tuxcare.els37-generic` TuxCare:Ubuntu:18.04 From an advisory covering 17 CVEs	before 4.15.0-249.260	4.15.0-249.260
`linux-buildinfo-4.15.0-249-tuxcare.els37-lowlatency` TuxCare:Ubuntu:18.04 From an advisory covering 17 CVEs	before 4.15.0-249.260	4.15.0-249.260
`linux-cloud-tools-4.15.0-249-tuxcare.els37` TuxCare:Ubuntu:18.04 From an advisory covering 17 CVEs	before 4.15.0-249.260	4.15.0-249.260
`linux-cloud-tools-4.15.0-249-tuxcare.els37-generic` TuxCare:Ubuntu:18.04 From an advisory covering 17 CVEs	before 4.15.0-249.260	4.15.0-249.260
`linux-cloud-tools-4.15.0-249-tuxcare.els37-lowlatency` TuxCare:Ubuntu:18.04 From an advisory covering 17 CVEs	before 4.15.0-249.260	4.15.0-249.260
`linux-cloud-tools-common` TuxCare:Ubuntu:18.04 From an advisory covering 17 CVEs	before 4.15.0-249.260	4.15.0-249.260

Show 290 moreShow less

Affected packages
Package	Affected	Fixed
`linux-doc` TuxCare:Ubuntu:18.04 From an advisory covering 17 CVEs	before 4.15.0-249.260	4.15.0-249.260
`linux-headers-4.15.0-249-tuxcare.els37` TuxCare:Ubuntu:18.04 From an advisory covering 17 CVEs	before 4.15.0-249.260	4.15.0-249.260
`linux-headers-4.15.0-249-tuxcare.els37-generic` TuxCare:Ubuntu:18.04 From an advisory covering 17 CVEs	before 4.15.0-249.260	4.15.0-249.260
`linux-headers-4.15.0-249-tuxcare.els37-lowlatency` TuxCare:Ubuntu:18.04 From an advisory covering 17 CVEs	before 4.15.0-249.260	4.15.0-249.260
`linux-image-unsigned-4.15.0-249-tuxcare.els37-generic` TuxCare:Ubuntu:18.04 From an advisory covering 17 CVEs	before 4.15.0-249.260	4.15.0-249.260
`linux-image-unsigned-4.15.0-249-tuxcare.els37-lowlatency` TuxCare:Ubuntu:18.04 From an advisory covering 17 CVEs	before 4.15.0-249.260	4.15.0-249.260
`linux-libc-dev` TuxCare:Ubuntu:18.04 From an advisory covering 17 CVEs	before 4.15.0-249.260	4.15.0-249.260
`linux-modules-4.15.0-249-tuxcare.els37-generic` TuxCare:Ubuntu:18.04 From an advisory covering 17 CVEs	before 4.15.0-249.260	4.15.0-249.260
`linux-modules-4.15.0-249-tuxcare.els37-lowlatency` TuxCare:Ubuntu:18.04 From an advisory covering 17 CVEs	before 4.15.0-249.260	4.15.0-249.260
`linux-modules-extra-4.15.0-249-tuxcare.els37-generic` TuxCare:Ubuntu:18.04 From an advisory covering 17 CVEs	before 4.15.0-249.260	4.15.0-249.260
`linux-source-4.15.0` TuxCare:Ubuntu:18.04 From an advisory covering 17 CVEs	before 4.15.0-249.260	4.15.0-249.260
`linux-tools-4.15.0-249-tuxcare.els37` TuxCare:Ubuntu:18.04 From an advisory covering 17 CVEs	before 4.15.0-249.260	4.15.0-249.260
`linux-tools-4.15.0-249-tuxcare.els37-generic` TuxCare:Ubuntu:18.04 From an advisory covering 17 CVEs	before 4.15.0-249.260	4.15.0-249.260
`linux-tools-4.15.0-249-tuxcare.els37-lowlatency` TuxCare:Ubuntu:18.04 From an advisory covering 17 CVEs	before 4.15.0-249.260	4.15.0-249.260
`linux-tools-common` TuxCare:Ubuntu:18.04 From an advisory covering 17 CVEs	before 4.15.0-249.260	4.15.0-249.260
`linux-tools-host` TuxCare:Ubuntu:18.04 From an advisory covering 17 CVEs	before 4.15.0-249.260	4.15.0-249.260
`linux-buildinfo-5.4.0-220-tuxcare.els2-generic` TuxCare:Ubuntu:20.04 From an advisory covering 10 CVEs	before 5.4.0-220.240	5.4.0-220.240
`linux-buildinfo-5.4.0-220-tuxcare.els2-lowlatency` TuxCare:Ubuntu:20.04 From an advisory covering 10 CVEs	before 5.4.0-220.240	5.4.0-220.240
`linux-cloud-tools-5.4.0-220-tuxcare.els2` TuxCare:Ubuntu:20.04 From an advisory covering 10 CVEs	before 5.4.0-220.240	5.4.0-220.240
`linux-cloud-tools-5.4.0-220-tuxcare.els2-generic` TuxCare:Ubuntu:20.04 From an advisory covering 10 CVEs	before 5.4.0-220.240	5.4.0-220.240
`linux-cloud-tools-5.4.0-220-tuxcare.els2-lowlatency` TuxCare:Ubuntu:20.04 From an advisory covering 10 CVEs	before 5.4.0-220.240	5.4.0-220.240
`linux-cloud-tools-common` TuxCare:Ubuntu:20.04 From an advisory covering 10 CVEs	before 5.4.0-220.240	5.4.0-220.240
`linux-doc` TuxCare:Ubuntu:20.04 From an advisory covering 10 CVEs	before 5.4.0-220.240	5.4.0-220.240
`linux-headers-5.4.0-220-tuxcare.els2` TuxCare:Ubuntu:20.04 From an advisory covering 10 CVEs	before 5.4.0-220.240	5.4.0-220.240
`linux-headers-5.4.0-220-tuxcare.els2-generic` TuxCare:Ubuntu:20.04 From an advisory covering 10 CVEs	before 5.4.0-220.240	5.4.0-220.240
`linux-headers-5.4.0-220-tuxcare.els2-lowlatency` TuxCare:Ubuntu:20.04 From an advisory covering 10 CVEs	before 5.4.0-220.240	5.4.0-220.240
`linux-image-unsigned-5.4.0-220-tuxcare.els2-generic` TuxCare:Ubuntu:20.04 From an advisory covering 10 CVEs	before 5.4.0-220.240	5.4.0-220.240
`linux-image-unsigned-5.4.0-220-tuxcare.els2-lowlatency` TuxCare:Ubuntu:20.04 From an advisory covering 10 CVEs	before 5.4.0-220.240	5.4.0-220.240
`linux-libc-dev` TuxCare:Ubuntu:20.04 From an advisory covering 10 CVEs	before 5.4.0-220.240	5.4.0-220.240
`linux-modules-5.4.0-220-tuxcare.els2-generic` TuxCare:Ubuntu:20.04 From an advisory covering 10 CVEs	before 5.4.0-220.240	5.4.0-220.240
`linux-modules-5.4.0-220-tuxcare.els2-lowlatency` TuxCare:Ubuntu:20.04 From an advisory covering 10 CVEs	before 5.4.0-220.240	5.4.0-220.240
`linux-modules-extra-5.4.0-220-tuxcare.els2-generic` TuxCare:Ubuntu:20.04 From an advisory covering 10 CVEs	before 5.4.0-220.240	5.4.0-220.240
`linux-source-5.4.0` TuxCare:Ubuntu:20.04 From an advisory covering 10 CVEs	before 5.4.0-220.240	5.4.0-220.240
`linux-tools-5.4.0-220-tuxcare.els2` TuxCare:Ubuntu:20.04 From an advisory covering 10 CVEs	before 5.4.0-220.240	5.4.0-220.240
`linux-tools-5.4.0-220-tuxcare.els2-generic` TuxCare:Ubuntu:20.04 From an advisory covering 10 CVEs	before 5.4.0-220.240	5.4.0-220.240
`linux-tools-5.4.0-220-tuxcare.els2-lowlatency` TuxCare:Ubuntu:20.04 From an advisory covering 10 CVEs	before 5.4.0-220.240	5.4.0-220.240
`linux-tools-common` TuxCare:Ubuntu:20.04 From an advisory covering 10 CVEs	before 5.4.0-220.240	5.4.0-220.240
`linux-tools-host` TuxCare:Ubuntu:20.04 From an advisory covering 10 CVEs	before 5.4.0-220.240	5.4.0-220.240
`bpftool` TuxCare:AlmaLinux:9.2 From an advisory covering 305 CVEs	before 7.0.0-284.1101.el9_2.tuxcare.11.els8	7.0.0-284.1101.el9_2.tuxcare.11.els8
`kernel` TuxCare:AlmaLinux:9.2 From an advisory covering 305 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els8	5.14.0-284.1101.el9_2.tuxcare.11.els8
`kernel-64k` TuxCare:AlmaLinux:9.2 From an advisory covering 305 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els8	5.14.0-284.1101.el9_2.tuxcare.11.els8
`kernel-64k-core` TuxCare:AlmaLinux:9.2 From an advisory covering 305 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els8	5.14.0-284.1101.el9_2.tuxcare.11.els8
`kernel-64k-debug` TuxCare:AlmaLinux:9.2 From an advisory covering 305 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els8	5.14.0-284.1101.el9_2.tuxcare.11.els8
`kernel-64k-debug-core` TuxCare:AlmaLinux:9.2 From an advisory covering 305 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els8	5.14.0-284.1101.el9_2.tuxcare.11.els8
`kernel-64k-debug-devel` TuxCare:AlmaLinux:9.2 From an advisory covering 305 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els8	5.14.0-284.1101.el9_2.tuxcare.11.els8
`kernel-64k-debug-devel-matched` TuxCare:AlmaLinux:9.2 From an advisory covering 305 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els8	5.14.0-284.1101.el9_2.tuxcare.11.els8
`kernel-64k-debug-modules` TuxCare:AlmaLinux:9.2 From an advisory covering 305 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els8	5.14.0-284.1101.el9_2.tuxcare.11.els8
`kernel-64k-debug-modules-core` TuxCare:AlmaLinux:9.2 From an advisory covering 305 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els8	5.14.0-284.1101.el9_2.tuxcare.11.els8
`kernel-64k-debug-modules-extra` TuxCare:AlmaLinux:9.2 From an advisory covering 305 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els8	5.14.0-284.1101.el9_2.tuxcare.11.els8
`kernel-64k-debug-modules-internal` TuxCare:AlmaLinux:9.2 From an advisory covering 305 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els8	5.14.0-284.1101.el9_2.tuxcare.11.els8
`kernel-64k-debug-modules-partner` TuxCare:AlmaLinux:9.2 From an advisory covering 305 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els8	5.14.0-284.1101.el9_2.tuxcare.11.els8
`kernel-64k-devel` TuxCare:AlmaLinux:9.2 From an advisory covering 305 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els8	5.14.0-284.1101.el9_2.tuxcare.11.els8
`kernel-64k-devel-matched` TuxCare:AlmaLinux:9.2 From an advisory covering 305 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els8	5.14.0-284.1101.el9_2.tuxcare.11.els8
`kernel-64k-modules` TuxCare:AlmaLinux:9.2 From an advisory covering 305 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els8	5.14.0-284.1101.el9_2.tuxcare.11.els8
`kernel-64k-modules-core` TuxCare:AlmaLinux:9.2 From an advisory covering 305 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els8	5.14.0-284.1101.el9_2.tuxcare.11.els8
`kernel-64k-modules-extra` TuxCare:AlmaLinux:9.2 From an advisory covering 305 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els8	5.14.0-284.1101.el9_2.tuxcare.11.els8
`kernel-64k-modules-internal` TuxCare:AlmaLinux:9.2 From an advisory covering 305 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els8	5.14.0-284.1101.el9_2.tuxcare.11.els8
`Kernel` Linux	4.3.0 up to 6.1.191, 6.2.0 up to 6.6.51, 6.7.0 up to 6.10.10	6.1.1916.6.516.10.10
`linux` Debian:12	All versions, plus listed versions 6.1.106-16.1.106-26.1.106-36.1.112-16.1.115-1 Show 45 moreShow less 6.1.119-16.1.123-16.1.124-16.1.128-16.1.129-16.1.133-16.1.135-16.1.137-16.1.139-16.1.140-16.1.147-16.1.148-16.1.153-16.1.158-16.1.159-16.1.162-16.1.164-16.1.170-16.1.170-26.1.170-36.1.172-16.1.174-16.1.176-16.1.177-16.1.180-16.1.187-16.1.190-16.1.27-16.1.37-16.1.38-16.1.38-26.1.38-2~bpo11+16.1.38-36.1.38-46.1.38-4~bpo11+16.1.52-16.1.55-16.1.55-1~bpo11+16.1.64-16.1.66-16.1.67-16.1.69-16.1.69-1~bpo11+16.1.76-16.1.76-1~bpo11+1	None known
`linux` Debian:13	before 6.10.11-1	6.10.11-1
`linux` Debian:14	before 6.10.11-1	6.10.11-1
`kernel` Mageia:9 From an advisory covering 51 CVEs	before 6.6.52-1.mga9	6.6.52-1.mga9
`kmod-xtables-addons` Mageia:9 From an advisory covering 51 CVEs	before 3.24-62.mga9	3.24-62.mga9
`kmod-virtualbox` Mageia:9 From an advisory covering 51 CVEs	before 7.0.20-54.mga9	7.0.20-54.mga9
`kernel-linus` Mageia:9 From an advisory covering 51 CVEs	before 6.6.52-1.mga9	6.6.52-1.mga9
`kernel` openEuler:22.03-LTS-SP4 From an advisory covering 32 CVEs	before 5.10.0-230.0.0.129.oe2203sp4	5.10.0-230.0.0.129.oe2203sp4
`kernel` openEuler:22.03-LTS-SP3 From an advisory covering 32 CVEs	before 5.10.0-230.0.0.132.oe2203sp3	5.10.0-230.0.0.132.oe2203sp3
`kernel` openEuler:22.03-LTS-SP1 From an advisory covering 31 CVEs	before 5.10.0-136.95.0.176.oe2203sp1	5.10.0-136.95.0.176.oe2203sp1
`kernel` openEuler:24.03-LTS From an advisory covering 69 CVEs	before 6.6.0-46.0.0.51.oe2403	6.6.0-46.0.0.51.oe2403
`kernel-64k-debug-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-64k-debug-devel` Red Hat:enterprise_linux:9::appstream From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-64k-debug-devel-matched` Red Hat:enterprise_linux:9::appstream From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-64k-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-64k-devel` Red Hat:enterprise_linux:9::appstream From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-64k-devel-matched` Red Hat:enterprise_linux:9::appstream From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-debug-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-debug-devel` Red Hat:enterprise_linux:9::appstream From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-debug-devel-matched` Red Hat:enterprise_linux:9::appstream From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-debuginfo-common-aarch64` Red Hat:enterprise_linux:9::appstream From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-debuginfo-common-ppc64le` Red Hat:enterprise_linux:9::appstream From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-debuginfo-common-s390x` Red Hat:enterprise_linux:9::appstream From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-debuginfo-common-x86_64` Red Hat:enterprise_linux:9::appstream From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-devel` Red Hat:enterprise_linux:9::appstream From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-devel-matched` Red Hat:enterprise_linux:9::appstream From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-doc` Red Hat:enterprise_linux:9::appstream From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-rt-64k-debug-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-rt-64k-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-rt-debug-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-rt-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-tools-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-zfcpdump-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-zfcpdump-devel` Red Hat:enterprise_linux:9::appstream From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-zfcpdump-devel-matched` Red Hat:enterprise_linux:9::appstream From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`libperf-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`perf` Red Hat:enterprise_linux:9::appstream From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`perf-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`python3-perf` Red Hat:enterprise_linux:9::appstream From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`python3-perf-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`rtla` Red Hat:enterprise_linux:9::appstream From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`rv` Red Hat:enterprise_linux:9::appstream From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel` Red Hat:enterprise_linux:9::baseos From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-64k` Red Hat:enterprise_linux:9::baseos From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-64k-core` Red Hat:enterprise_linux:9::baseos From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-64k-debug` Red Hat:enterprise_linux:9::baseos From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-64k-debug-core` Red Hat:enterprise_linux:9::baseos From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-64k-debug-debuginfo` Red Hat:enterprise_linux:9::baseos From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-64k-debug-modules` Red Hat:enterprise_linux:9::baseos From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-64k-debug-modules-core` Red Hat:enterprise_linux:9::baseos From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-64k-debug-modules-extra` Red Hat:enterprise_linux:9::baseos From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-64k-debuginfo` Red Hat:enterprise_linux:9::baseos From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-64k-modules` Red Hat:enterprise_linux:9::baseos From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-64k-modules-core` Red Hat:enterprise_linux:9::baseos From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-64k-modules-extra` Red Hat:enterprise_linux:9::baseos From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-abi-stablelists` Red Hat:enterprise_linux:9::baseos From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-core` Red Hat:enterprise_linux:9::baseos From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-debug` Red Hat:enterprise_linux:9::baseos From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-debug-core` Red Hat:enterprise_linux:9::baseos From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-debug-debuginfo` Red Hat:enterprise_linux:9::baseos From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-debug-modules` Red Hat:enterprise_linux:9::baseos From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-debug-modules-core` Red Hat:enterprise_linux:9::baseos From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-debug-modules-extra` Red Hat:enterprise_linux:9::baseos From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-debug-uki-virt` Red Hat:enterprise_linux:9::baseos From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-debuginfo` Red Hat:enterprise_linux:9::baseos From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-debuginfo-common-aarch64` Red Hat:enterprise_linux:9::baseos From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-debuginfo-common-ppc64le` Red Hat:enterprise_linux:9::baseos From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-debuginfo-common-s390x` Red Hat:enterprise_linux:9::baseos From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-debuginfo-common-x86_64` Red Hat:enterprise_linux:9::baseos From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-modules` Red Hat:enterprise_linux:9::baseos From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-modules-core` Red Hat:enterprise_linux:9::baseos From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-modules-extra` Red Hat:enterprise_linux:9::baseos From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`linux` Root:Debian:11	before 5.10.262-1.aikido.113	5.10.262-1.aikido.1135.10.262-1.aikido.114
`rootio-linux` Root:Debian:11	before 5.10.262-1.aikido.113	5.10.262-1.aikido.1135.10.262-1.aikido.114
`linux` Root:Debian:12	before 6.1.190-1.aikido.167	6.1.190-1.aikido.167
`rootio-linux` Root:Debian:12	before 6.1.190-1.aikido.167	6.1.190-1.aikido.167
`linux` Root:Ubuntu:22.04	before 5.15.0-203.213.aikido.119	5.15.0-203.213.aikido.119
`rootio-linux` Root:Ubuntu:22.04	before 5.15.0-203.213.aikido.119	5.15.0-203.213.aikido.119
`kernel-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP6 From an advisory covering 162 CVEs	before 6.4.0-150600.8.14.1	6.4.0-150600.8.14.1
`kernel-source-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP6 From an advisory covering 162 CVEs	before 6.4.0-150600.8.14.1	6.4.0-150600.8.14.1
`kernel-syms-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP6 From an advisory covering 162 CVEs	before 6.4.0-150600.8.14.1	6.4.0-150600.8.14.1
`kernel-azure` openSUSE:Leap 15.6 From an advisory covering 162 CVEs	before 6.4.0-150600.8.14.1	6.4.0-150600.8.14.1
`kernel-source-azure` openSUSE:Leap 15.6 From an advisory covering 162 CVEs	before 6.4.0-150600.8.14.1	6.4.0-150600.8.14.1
`kernel-syms-azure` openSUSE:Leap 15.6 From an advisory covering 162 CVEs	before 6.4.0-150600.8.14.1	6.4.0-150600.8.14.1
`kernel-coco` SUSE:Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6 From an advisory covering 147 CVEs	before 6.4.0-15061.6.coco15sp6.1	6.4.0-15061.6.coco15sp6.1
`kernel-coco_debug` SUSE:Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6 From an advisory covering 147 CVEs	before 6.4.0-15061.6.coco15sp6.1	6.4.0-15061.6.coco15sp6.1
`kernel-source-coco` SUSE:Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6 From an advisory covering 147 CVEs	before 6.4.0-15061.6.coco15sp6.1	6.4.0-15061.6.coco15sp6.1
`kernel-syms-coco` SUSE:Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6 From an advisory covering 147 CVEs	before 6.4.0-15061.6.coco15sp6.1	6.4.0-15061.6.coco15sp6.1
`kernel-default` SUSE:Linux Enterprise High Availability Extension 12 SP5 From an advisory covering 71 CVEs	before 4.12.14-122.231.1	4.12.14-122.231.1
`kernel-default` SUSE:Linux Enterprise Live Patching 12 SP5 From an advisory covering 71 CVEs	before 4.12.14-122.231.1	4.12.14-122.231.1
`kgraft-patch-SLE12-SP5_Update_61` SUSE:Linux Enterprise Live Patching 12 SP5 From an advisory covering 71 CVEs	before 1-8.3.1	1-8.3.1
`kernel-docs` SUSE:Linux Enterprise Software Development Kit 12 SP5 From an advisory covering 71 CVEs	before 4.12.14-122.231.1	4.12.14-122.231.1
`kernel-obs-build` SUSE:Linux Enterprise Software Development Kit 12 SP5 From an advisory covering 71 CVEs	before 4.12.14-122.231.1	4.12.14-122.231.1
`kernel-default` SUSE:Linux Enterprise Server 12 SP5 From an advisory covering 71 CVEs	before 4.12.14-122.231.1	4.12.14-122.231.1
`kernel-source` SUSE:Linux Enterprise Server 12 SP5 From an advisory covering 71 CVEs	before 4.12.14-122.231.1	4.12.14-122.231.1
`kernel-syms` SUSE:Linux Enterprise Server 12 SP5 From an advisory covering 71 CVEs	before 4.12.14-122.231.1	4.12.14-122.231.1
`kernel-default` SUSE:Linux Enterprise Server for SAP Applications 12 SP5 From an advisory covering 71 CVEs	before 4.12.14-122.231.1	4.12.14-122.231.1
`kernel-source` SUSE:Linux Enterprise Server for SAP Applications 12 SP5 From an advisory covering 71 CVEs	before 4.12.14-122.231.1	4.12.14-122.231.1
`kernel-syms` SUSE:Linux Enterprise Server for SAP Applications 12 SP5 From an advisory covering 71 CVEs	before 4.12.14-122.231.1	4.12.14-122.231.1
`kernel-default` SUSE:Linux Enterprise Workstation Extension 12 SP5 From an advisory covering 71 CVEs	before 4.12.14-122.231.1	4.12.14-122.231.1
`kernel-64kb` SUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 162 CVEs	before 6.4.0-150600.23.25.1	6.4.0-150600.23.25.1
`kernel-default` SUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 162 CVEs	before 6.4.0-150600.23.25.1	6.4.0-150600.23.25.1
`kernel-default-base` SUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 162 CVEs	before 6.4.0-150600.23.25.1.150600.12.10.2	6.4.0-150600.23.25.1.150600.12.10.2
`kernel-source` SUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 162 CVEs	before 6.4.0-150600.23.25.1	6.4.0-150600.23.25.1
`kernel-zfcpdump` SUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 162 CVEs	before 6.4.0-150600.23.25.1	6.4.0-150600.23.25.1
`kernel-docs` SUSE:Linux Enterprise Module for Development Tools 15 SP6 From an advisory covering 162 CVEs	before 6.4.0-150600.23.25.2	6.4.0-150600.23.25.2
`kernel-obs-build` SUSE:Linux Enterprise Module for Development Tools 15 SP6 From an advisory covering 162 CVEs	before 6.4.0-150600.23.25.2	6.4.0-150600.23.25.2
`kernel-source` SUSE:Linux Enterprise Module for Development Tools 15 SP6 From an advisory covering 162 CVEs	before 6.4.0-150600.23.25.1	6.4.0-150600.23.25.1
`kernel-syms` SUSE:Linux Enterprise Module for Development Tools 15 SP6 From an advisory covering 162 CVEs	before 6.4.0-150600.23.25.1	6.4.0-150600.23.25.1
`kernel-default` SUSE:Linux Enterprise Module for Legacy 15 SP6 From an advisory covering 162 CVEs	before 6.4.0-150600.23.25.1	6.4.0-150600.23.25.1
`kernel-default` SUSE:Linux Enterprise Live Patching 15 SP6 From an advisory covering 162 CVEs	before 6.4.0-150600.23.25.1	6.4.0-150600.23.25.1
`kernel-livepatch-SLE15-SP6_Update_5` SUSE:Linux Enterprise Live Patching 15 SP6 From an advisory covering 162 CVEs	before 1-150600.13.3.1	1-150600.13.3.1
`kernel-default` SUSE:Linux Enterprise High Availability Extension 15 SP6 From an advisory covering 162 CVEs	before 6.4.0-150600.23.25.1	6.4.0-150600.23.25.1
`kernel-default` SUSE:Linux Enterprise Workstation Extension 15 SP6 From an advisory covering 162 CVEs	before 6.4.0-150600.23.25.1	6.4.0-150600.23.25.1
`dtb-aarch64` openSUSE:Leap 15.6 From an advisory covering 162 CVEs	before 6.4.0-150600.23.25.1	6.4.0-150600.23.25.1
`kernel-64kb` openSUSE:Leap 15.6 From an advisory covering 162 CVEs	before 6.4.0-150600.23.25.1	6.4.0-150600.23.25.1
`kernel-debug` openSUSE:Leap 15.6 From an advisory covering 162 CVEs	before 6.4.0-150600.23.25.1	6.4.0-150600.23.25.1
`kernel-default` openSUSE:Leap 15.6 From an advisory covering 162 CVEs	before 6.4.0-150600.23.25.1	6.4.0-150600.23.25.1
`kernel-default-base` openSUSE:Leap 15.6 From an advisory covering 162 CVEs	before 6.4.0-150600.23.25.1.150600.12.10.2	6.4.0-150600.23.25.1.150600.12.10.2
`kernel-docs` openSUSE:Leap 15.6 From an advisory covering 162 CVEs	before 6.4.0-150600.23.25.2	6.4.0-150600.23.25.2
`kernel-kvmsmall` openSUSE:Leap 15.6 From an advisory covering 162 CVEs	before 6.4.0-150600.23.25.1	6.4.0-150600.23.25.1
`kernel-obs-build` openSUSE:Leap 15.6 From an advisory covering 162 CVEs	before 6.4.0-150600.23.25.2	6.4.0-150600.23.25.2
`kernel-obs-qa` openSUSE:Leap 15.6 From an advisory covering 162 CVEs	before 6.4.0-150600.23.25.1	6.4.0-150600.23.25.1
`kernel-source` openSUSE:Leap 15.6 From an advisory covering 162 CVEs	before 6.4.0-150600.23.25.1	6.4.0-150600.23.25.1
`kernel-syms` openSUSE:Leap 15.6 From an advisory covering 162 CVEs	before 6.4.0-150600.23.25.1	6.4.0-150600.23.25.1
`kernel-zfcpdump` openSUSE:Leap 15.6 From an advisory covering 162 CVEs	before 6.4.0-150600.23.25.1	6.4.0-150600.23.25.1
`kernel-livepatch-SLE15-SP6-RT_Update_4` SUSE:Linux Enterprise Live Patching 15 SP6 From an advisory covering 162 CVEs	before 1-150600.1.3.1	1-150600.1.3.1
`kernel-rt` SUSE:Real Time Module 15 SP6 From an advisory covering 162 CVEs	before 6.4.0-150600.10.14.1	6.4.0-150600.10.14.1
`kernel-rt_debug` SUSE:Real Time Module 15 SP6 From an advisory covering 162 CVEs	before 6.4.0-150600.10.14.1	6.4.0-150600.10.14.1
`kernel-source-rt` SUSE:Real Time Module 15 SP6 From an advisory covering 162 CVEs	before 6.4.0-150600.10.14.1	6.4.0-150600.10.14.1
`kernel-syms-rt` SUSE:Real Time Module 15 SP6 From an advisory covering 162 CVEs	before 6.4.0-150600.10.14.1	6.4.0-150600.10.14.1
`kernel-rt` openSUSE:Leap 15.6 From an advisory covering 162 CVEs	before 6.4.0-150600.10.14.1	6.4.0-150600.10.14.1
`kernel-rt_debug` openSUSE:Leap 15.6 From an advisory covering 162 CVEs	before 6.4.0-150600.10.14.1	6.4.0-150600.10.14.1
`kernel-source-rt` openSUSE:Leap 15.6 From an advisory covering 162 CVEs	before 6.4.0-150600.10.14.1	6.4.0-150600.10.14.1
`kernel-syms-rt` openSUSE:Leap 15.6 From an advisory covering 162 CVEs	before 6.4.0-150600.10.14.1	6.4.0-150600.10.14.1
`kernel-rt` SUSE:Linux Enterprise Real Time 12 SP5 From an advisory covering 90 CVEs	before 4.12.14-10.203.1	4.12.14-10.203.1
`kernel-rt_debug` SUSE:Linux Enterprise Real Time 12 SP5 From an advisory covering 90 CVEs	before 4.12.14-10.203.1	4.12.14-10.203.1
`kernel-source-rt` SUSE:Linux Enterprise Real Time 12 SP5 From an advisory covering 90 CVEs	before 4.12.14-10.203.1	4.12.14-10.203.1
`kernel-syms-rt` SUSE:Linux Enterprise Real Time 12 SP5 From an advisory covering 90 CVEs	before 4.12.14-10.203.1	4.12.14-10.203.1
`kernel-default` SUSE:Linux Enterprise Micro 5.5 From an advisory covering 130 CVEs	before 5.14.21-150500.55.83.1	5.14.21-150500.55.83.1
`kernel-default-base` SUSE:Linux Enterprise Micro 5.5 From an advisory covering 130 CVEs	before 5.14.21-150500.55.83.1.150500.6.37.1	5.14.21-150500.55.83.1.150500.6.37.1
`kernel-64kb` SUSE:Linux Enterprise Module for Basesystem 15 SP5 From an advisory covering 130 CVEs	before 5.14.21-150500.55.83.1	5.14.21-150500.55.83.1
`kernel-default` SUSE:Linux Enterprise Module for Basesystem 15 SP5 From an advisory covering 130 CVEs	before 5.14.21-150500.55.83.1	5.14.21-150500.55.83.1
`kernel-default-base` SUSE:Linux Enterprise Module for Basesystem 15 SP5 From an advisory covering 130 CVEs	before 5.14.21-150500.55.83.1.150500.6.37.1	5.14.21-150500.55.83.1.150500.6.37.1
`kernel-source` SUSE:Linux Enterprise Module for Basesystem 15 SP5 From an advisory covering 130 CVEs	before 5.14.21-150500.55.83.1	5.14.21-150500.55.83.1
`kernel-zfcpdump` SUSE:Linux Enterprise Module for Basesystem 15 SP5 From an advisory covering 130 CVEs	before 5.14.21-150500.55.83.1	5.14.21-150500.55.83.1
`kernel-docs` SUSE:Linux Enterprise Module for Development Tools 15 SP5 From an advisory covering 130 CVEs	before 5.14.21-150500.55.83.1	5.14.21-150500.55.83.1
`kernel-obs-build` SUSE:Linux Enterprise Module for Development Tools 15 SP5 From an advisory covering 130 CVEs	before 5.14.21-150500.55.83.1	5.14.21-150500.55.83.1
`kernel-source` SUSE:Linux Enterprise Module for Development Tools 15 SP5 From an advisory covering 130 CVEs	before 5.14.21-150500.55.83.1	5.14.21-150500.55.83.1
`kernel-syms` SUSE:Linux Enterprise Module for Development Tools 15 SP5 From an advisory covering 130 CVEs	before 5.14.21-150500.55.83.1	5.14.21-150500.55.83.1
`kernel-default` SUSE:Linux Enterprise Module for Legacy 15 SP5 From an advisory covering 130 CVEs	before 5.14.21-150500.55.83.1	5.14.21-150500.55.83.1
`kernel-default` SUSE:Linux Enterprise Live Patching 15 SP5 From an advisory covering 130 CVEs	before 5.14.21-150500.55.83.1	5.14.21-150500.55.83.1
`kernel-livepatch-SLE15-SP5_Update_20` SUSE:Linux Enterprise Live Patching 15 SP5 From an advisory covering 130 CVEs	before 1-150500.11.3.1	1-150500.11.3.1
`kernel-default` SUSE:Linux Enterprise High Availability Extension 15 SP5 From an advisory covering 130 CVEs	before 5.14.21-150500.55.83.1	5.14.21-150500.55.83.1
`kernel-default` SUSE:Linux Enterprise Workstation Extension 15 SP5 From an advisory covering 130 CVEs	before 5.14.21-150500.55.83.1	5.14.21-150500.55.83.1
`kernel-default` openSUSE:Leap Micro 5.5 From an advisory covering 130 CVEs	before 5.14.21-150500.55.83.1	5.14.21-150500.55.83.1
`kernel-default-base` openSUSE:Leap Micro 5.5 From an advisory covering 130 CVEs	before 5.14.21-150500.55.83.1.150500.6.37.1	5.14.21-150500.55.83.1.150500.6.37.1
`kernel-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP5 From an advisory covering 132 CVEs	before 5.14.21-150500.33.69.1	5.14.21-150500.33.69.1
`kernel-source-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP5 From an advisory covering 132 CVEs	before 5.14.21-150500.33.69.1	5.14.21-150500.33.69.1
`kernel-syms-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP5 From an advisory covering 132 CVEs	before 5.14.21-150500.33.69.1	5.14.21-150500.33.69.1
`kernel-azure` openSUSE:Leap 15.5 From an advisory covering 132 CVEs	before 5.14.21-150500.33.69.1	5.14.21-150500.33.69.1
`kernel-source-azure` openSUSE:Leap 15.5 From an advisory covering 132 CVEs	before 5.14.21-150500.33.69.1	5.14.21-150500.33.69.1
`kernel-syms-azure` openSUSE:Leap 15.5 From an advisory covering 132 CVEs	before 5.14.21-150500.33.69.1	5.14.21-150500.33.69.1
`kernel-azure` SUSE:Linux Enterprise Server 12 SP5 From an advisory covering 71 CVEs	before 4.12.14-16.200.1	4.12.14-16.200.1
`kernel-rt` openSUSE:Leap Micro 5.5 From an advisory covering 130 CVEs	before 5.14.21-150500.13.73.1	5.14.21-150500.13.73.1
`kernel-rt` openSUSE:Leap 15.5 From an advisory covering 130 CVEs	before 5.14.21-150500.13.73.1	5.14.21-150500.13.73.1
`kernel-rt_debug` openSUSE:Leap 15.5 From an advisory covering 130 CVEs	before 5.14.21-150500.13.73.1	5.14.21-150500.13.73.1
`kernel-source-rt` openSUSE:Leap 15.5 From an advisory covering 130 CVEs	before 5.14.21-150500.13.73.1	5.14.21-150500.13.73.1
`kernel-syms-rt` openSUSE:Leap 15.5 From an advisory covering 130 CVEs	before 5.14.21-150500.13.73.1	5.14.21-150500.13.73.1
`linux-aws` Ubuntu:Pro:14.04:LTS	before 4.4.0-1145.151, plus listed versions 4.4.0-1002.24.4.0-1003.34.4.0-1005.54.4.0-1006.64.4.0-1009.9 Show 45 moreShow less 4.4.0-1010.104.4.0-1011.114.4.0-1012.124.4.0-1014.144.4.0-1016.164.4.0-1017.174.4.0-1019.194.4.0-1022.224.4.0-1023.234.4.0-1024.254.4.0-1025.264.4.0-1027.304.4.0-1028.314.4.0-1029.324.4.0-1031.344.4.0-1032.354.4.0-1034.374.4.0-1036.394.4.0-1037.404.4.0-1038.414.4.0-1039.424.4.0-1040.434.4.0-1042.454.4.0-1044.474.4.0-1045.484.4.0-1046.504.4.0-1048.524.4.0-1050.544.4.0-1052.564.4.0-1054.584.4.0-1055.594.4.0-1056.604.4.0-1058.624.4.0-1059.634.4.0-1060.644.4.0-1061.654.4.0-1062.664.4.0-1064.684.4.0-1065.694.4.0-1066.704.4.0-1067.714.4.0-1073.774.4.0-1074.784.4.0-1075.794.4.0-1076.80	4.4.0-1145.151
`linux-azure` Ubuntu:Pro:14.04:LTS	before 4.15.0-1190.205~14.04.1, plus listed versions 4.15.0-1023.24~14.04.14.15.0-1030.31~14.04.14.15.0-1031.32~14.04.14.15.0-1032.33~14.04.24.15.0-1035.36~14.04.2 Show 45 moreShow less 4.15.0-1036.38~14.04.24.15.0-1037.39~14.04.24.15.0-1039.41~14.04.24.15.0-1040.44~14.04.14.15.0-1041.45~14.04.14.15.0-1042.46~14.04.14.15.0-1045.49~14.04.14.15.0-1046.50~14.04.14.15.0-1047.51~14.04.14.15.0-1049.54~14.04.14.15.0-1050.55~14.04.14.15.0-1051.56~14.04.14.15.0-1052.57~14.04.14.15.0-1055.60~14.04.14.15.0-1056.61~14.04.14.15.0-1057.62~14.04.14.15.0-1059.64~14.04.14.15.0-1060.65~14.04.14.15.0-1061.66~14.04.14.15.0-1063.68~14.04.14.15.0-1064.69~14.04.14.15.0-1066.71~14.04.14.15.0-1067.72~14.04.14.15.0-1069.74~14.04.14.15.0-1071.76~14.04.14.15.0-1074.79~14.04.14.15.0-1077.82~14.04.14.15.0-1082.92~14.04.14.15.0-1083.93~14.04.14.15.0-1089.99~14.04.14.15.0-1091.101~14.04.14.15.0-1092.102~14.04.14.15.0-1093.103~14.04.14.15.0-1095.105~14.04.14.15.0-1096.106~14.04.14.15.0-1098.109~14.04.14.15.0-1100.111~14.04.14.15.0-1102.113~14.04.14.15.0-1103.114~14.04.14.15.0-1106.118~14.04.14.15.0-1108.120~14.04.14.15.0-1109.121~14.04.14.15.0-1110.122~14.04.14.15.0-1111.123~14.04.14.15.0-1112.124~14.04.1	4.15.0-1190.205~14.04.1
`linux-lts-xenial` Ubuntu:Pro:14.04:LTS	before 4.4.0-270.304~14.04.1, plus listed versions 4.4.0-13.29~14.04.14.4.0-14.30~14.04.24.4.0-15.31~14.04.14.4.0-18.34~14.04.14.4.0-21.37~14.04.1 Show 45 moreShow less 4.4.0-22.39~14.04.14.4.0-22.40~14.04.14.4.0-24.43~14.04.14.4.0-28.47~14.04.14.4.0-31.50~14.04.14.4.0-34.53~14.04.14.4.0-36.55~14.04.14.4.0-38.57~14.04.14.4.0-42.62~14.04.14.4.0-45.66~14.04.14.4.0-47.68~14.04.14.4.0-51.72~14.04.14.4.0-53.74~14.04.14.4.0-57.78~14.04.14.4.0-59.80~14.04.14.4.0-62.83~14.04.14.4.0-63.84~14.04.24.4.0-64.85~14.04.14.4.0-66.87~14.04.14.4.0-67.88~14.04.14.4.0-70.91~14.04.14.4.0-71.92~14.04.14.4.0-72.93~14.04.14.4.0-75.96~14.04.14.4.0-78.99~14.04.24.4.0-79.100~14.04.14.4.0-81.104~14.04.14.4.0-83.106~14.04.14.4.0-87.110~14.04.14.4.0-89.112~14.04.14.4.0-91.114~14.04.14.4.0-92.115~14.04.14.4.0-93.116~14.04.14.4.0-96.119~14.04.14.4.0-97.120~14.04.14.4.0-98.121~14.04.14.4.0-101.124~14.04.14.4.0-103.126~14.04.14.4.0-104.127~14.04.14.4.0-108.131~14.04.14.4.0-109.132~14.04.14.4.0-111.134~14.04.14.4.0-112.135~14.04.14.4.0-116.140~14.04.14.4.0-119.143~14.04.1	4.4.0-270.304~14.04.1
`linux` Ubuntu:Pro:16.04:LTS	before 4.4.0-270.304, plus listed versions 4.2.0-16.194.2.0-17.214.2.0-19.234.3.0-1.104.3.0-2.11 Show 45 moreShow less 4.3.0-5.164.3.0-6.174.3.0-7.184.4.0-2.164.4.0-4.194.4.0-6.214.4.0-7.224.4.0-8.234.4.0-9.244.4.0-10.254.4.0-11.264.4.0-12.284.4.0-13.294.4.0-14.304.4.0-15.314.4.0-16.324.4.0-17.334.4.0-18.344.4.0-21.374.4.0-22.394.4.0-22.404.4.0-24.434.4.0-28.474.4.0-31.504.4.0-34.534.4.0-36.554.4.0-38.574.4.0-42.624.4.0-43.634.4.0-45.664.4.0-47.684.4.0-51.724.4.0-53.744.4.0-57.784.4.0-59.804.4.0-62.834.4.0-63.844.4.0-64.854.4.0-65.864.4.0-66.874.4.0-67.884.4.0-70.914.4.0-71.924.4.0-72.934.4.0-75.96	4.4.0-270.304
`linux-aws` Ubuntu:Pro:16.04:LTS	before 4.4.0-1183.198, plus listed versions 4.4.0-1001.104.4.0-1003.124.4.0-1004.134.4.0-1007.164.4.0-1009.18 Show 45 moreShow less 4.4.0-1011.204.4.0-1012.214.4.0-1013.224.4.0-1016.254.4.0-1017.264.4.0-1018.274.4.0-1020.294.4.0-1022.314.4.0-1026.354.4.0-1028.374.4.0-1030.394.4.0-1031.404.4.0-1032.414.4.0-1035.444.4.0-1037.464.4.0-1038.474.4.0-1039.484.4.0-1041.504.4.0-1043.524.4.0-1044.534.4.0-1047.564.4.0-1048.574.4.0-1049.584.4.0-1050.594.4.0-1052.614.4.0-1054.634.4.0-1055.644.4.0-1057.664.4.0-1060.694.4.0-1061.704.4.0-1062.714.4.0-1063.724.4.0-1065.754.4.0-1066.764.4.0-1067.774.4.0-1069.794.4.0-1070.804.4.0-1072.824.4.0-1073.834.4.0-1074.844.4.0-1075.854.4.0-1077.874.4.0-1079.894.4.0-1081.914.4.0-1083.93	4.4.0-1183.198
`linux-aws-hwe` Ubuntu:Pro:16.04:LTS	before 4.15.0-1182.195~16.04.1, plus listed versions 4.15.0-1030.31~16.04.14.15.0-1031.33~16.04.14.15.0-1032.34~16.04.14.15.0-1033.35~16.04.14.15.0-1035.37~16.04.1 Show 45 moreShow less 4.15.0-1036.38~16.04.14.15.0-1039.41~16.04.14.15.0-1040.42~16.04.14.15.0-1041.43~16.04.14.15.0-1043.45~16.04.14.15.0-1044.46~16.04.14.15.0-1045.47~16.04.14.15.0-1047.49~16.04.14.15.0-1048.50~16.04.14.15.0-1050.52~16.04.14.15.0-1051.53~16.04.14.15.0-1052.54~16.04.14.15.0-1054.56~16.04.14.15.0-1056.58~16.04.14.15.0-1057.59~16.04.14.15.0-1058.60~16.04.14.15.0-1060.62~16.04.14.15.0-1063.67~16.04.14.15.0-1065.69~16.04.14.15.0-1066.70~16.04.14.15.0-1067.71~16.04.14.15.0-1073.77~16.04.14.15.0-1074.78~16.04.14.15.0-1079.83~16.04.14.15.0-1080.84~16.04.14.15.0-1082.86~16.04.14.15.0-1083.87~16.04.14.15.0-1085.90~16.04.14.15.0-1088.93~16.04.14.15.0-1090.95~16.04.14.15.0-1091.96~16.04.14.15.0-1093.99~16.04.14.15.0-1094.101~16.04.14.15.0-1095.102~16.04.14.15.0-1096.103~16.04.14.15.0-1097.104~16.04.14.15.0-1098.105~16.04.14.15.0-1099.106~16.04.14.15.0-1102.109~16.04.14.15.0-1103.110~16.04.14.15.0-1106.113~16.04.14.15.0-1109.116~16.04.14.15.0-1110.117~16.04.14.15.0-1111.118~16.04.14.15.0-1112.119~16.04.1	4.15.0-1182.195~16.04.1
`linux-azure` Ubuntu:Pro:16.04:LTS	before 4.15.0-1190.205~16.04.1, plus listed versions 4.11.0-1009.94.11.0-1011.114.11.0-1013.134.11.0-1014.144.11.0-1015.15 Show 45 moreShow less 4.11.0-1016.164.13.0-1005.74.13.0-1006.84.13.0-1007.94.13.0-1009.124.13.0-1011.144.13.0-1012.154.13.0-1014.174.13.0-1016.194.13.0-1018.214.15.0-1013.13~16.04.24.15.0-1014.14~16.04.14.15.0-1018.18~16.04.14.15.0-1019.19~16.04.14.15.0-1021.21~16.04.14.15.0-1022.22~16.04.14.15.0-1023.24~16.04.14.15.0-1025.26~16.04.14.15.0-1028.29~16.04.14.15.0-1030.31~16.04.14.15.0-1031.32~16.04.14.15.0-1032.33~16.04.14.15.0-1035.36~16.04.14.15.0-1036.38~16.04.14.15.0-1037.39~16.04.14.15.0-1039.434.15.0-1040.444.15.0-1041.454.15.0-1042.464.15.0-1045.494.15.0-1046.504.15.0-1047.514.15.0-1049.544.15.0-1050.554.15.0-1051.564.15.0-1052.574.15.0-1055.604.15.0-1056.614.15.0-1057.624.15.0-1059.644.15.0-1060.654.15.0-1061.664.15.0-1063.684.15.0-1064.694.15.0-1066.71	4.15.0-1190.205~16.04.1
`linux-gcp` Ubuntu:Pro:16.04:LTS	before 4.15.0-1175.192~16.04.1, plus listed versions 4.10.0-1004.44.10.0-1006.64.10.0-1007.74.10.0-1008.84.10.0-1009.9 Show 45 moreShow less 4.13.0-1002.54.13.0-1006.94.13.0-1007.104.13.0-1008.114.13.0-1011.154.13.0-1012.164.13.0-1013.174.13.0-1015.194.13.0-1017.214.13.0-1019.234.15.0-1014.14~16.04.14.15.0-1015.15~16.04.14.15.0-1017.18~16.04.14.15.0-1018.19~16.04.24.15.0-1019.20~16.04.14.15.0-1021.22~16.04.14.15.0-1023.24~16.04.14.15.0-1024.25~16.04.24.15.0-1025.26~16.04.14.15.0-1026.27~16.04.14.15.0-1027.28~16.04.14.15.0-1028.29~16.04.14.15.0-1029.31~16.04.14.15.0-1030.32~16.04.14.15.0-1032.34~16.04.14.15.0-1033.35~16.04.14.15.0-1034.36~16.04.14.15.0-1036.38~16.04.14.15.0-1037.39~16.04.14.15.0-1040.42~16.04.14.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1046.494.15.0-1047.504.15.0-1049.524.15.0-1050.534.15.0-1052.564.15.0-1055.594.15.0-1058.624.15.0-1060.644.15.0-1061.654.15.0-1071.81~16.04.14.15.0-1077.87~16.04.14.15.0-1078.88~16.04.1	4.15.0-1175.192~16.04.1
`linux-hwe` Ubuntu:Pro:16.04:LTS	before 4.15.0-239.251~16.04.1, plus listed versions 4.8.0-36.36~16.04.14.8.0-39.42~16.04.14.8.0-41.44~16.04.14.8.0-42.45~16.04.14.8.0-44.47~16.04.1 Show 45 moreShow less 4.8.0-45.48~16.04.14.8.0-46.49~16.04.14.8.0-49.52~16.04.14.8.0-51.54~16.04.14.8.0-52.55~16.04.14.8.0-53.56~16.04.14.8.0-54.57~16.04.14.8.0-56.61~16.04.14.8.0-58.63~16.04.14.10.0-27.30~16.04.24.10.0-28.32~16.04.24.10.0-30.34~16.04.14.10.0-32.36~16.04.14.10.0-33.37~16.04.14.10.0-35.39~16.04.14.10.0-37.41~16.04.14.10.0-38.42~16.04.14.10.0-40.44~16.04.14.10.0-42.46~16.04.14.13.0-26.29~16.04.24.13.0-31.34~16.04.14.13.0-32.35~16.04.14.13.0-36.40~16.04.14.13.0-37.42~16.04.14.13.0-38.43~16.04.14.13.0-39.44~16.04.14.13.0-41.46~16.04.14.13.0-43.48~16.04.14.13.0-45.50~16.04.14.15.0-24.26~16.04.14.15.0-29.31~16.04.14.15.0-30.32~16.04.14.15.0-32.35~16.04.14.15.0-33.36~16.04.14.15.0-34.37~16.04.14.15.0-36.39~16.04.14.15.0-38.41~16.04.14.15.0-39.42~16.04.14.15.0-42.45~16.04.14.15.0-43.46~16.04.14.15.0-45.48~16.04.14.15.0-46.49~16.04.14.15.0-47.50~16.04.14.15.0-48.51~16.04.14.15.0-50.54~16.04.1	4.15.0-239.251~16.04.1
`linux-kvm` Ubuntu:Pro:16.04:LTS	before 4.4.0-1146.157, plus listed versions 4.4.0-1004.94.4.0-1007.124.4.0-1008.134.4.0-1009.144.4.0-1010.15 Show 45 moreShow less 4.4.0-1012.174.4.0-1013.184.4.0-1015.204.4.0-1017.224.4.0-1019.244.4.0-1020.254.4.0-1021.264.4.0-1023.284.4.0-1026.314.4.0-1027.324.4.0-1029.344.4.0-1031.374.4.0-1032.384.4.0-1033.394.4.0-1035.414.4.0-1036.424.4.0-1037.434.4.0-1038.444.4.0-1039.454.4.0-1040.464.4.0-1041.474.4.0-1043.494.4.0-1044.504.4.0-1046.524.4.0-1047.534.4.0-1048.554.4.0-1051.584.4.0-1052.594.4.0-1054.614.4.0-1056.634.4.0-1058.654.4.0-1059.664.4.0-1060.674.4.0-1062.694.4.0-1063.704.4.0-1064.714.4.0-1065.724.4.0-1066.734.4.0-1068.754.4.0-1069.764.4.0-1070.774.4.0-1071.784.4.0-1075.824.4.0-1076.834.4.0-1077.84	4.4.0-1146.157
`linux-oracle` Ubuntu:Pro:16.04:LTS	before 4.15.0-1144.155~16.04.1, plus listed versions 4.15.0-1007.9~16.04.14.15.0-1008.10~16.04.14.15.0-1009.11~16.04.14.15.0-1010.12~16.04.14.15.0-1011.13~16.04.1 Show 45 moreShow less 4.15.0-1013.15~16.04.14.15.0-1014.16~16.04.14.15.0-1015.17~16.04.14.15.0-1017.19~16.04.24.15.0-1018.20~16.04.14.15.0-1021.23~16.04.14.15.0-1022.25~16.04.14.15.0-1023.26~16.04.14.15.0-1025.28~16.04.14.15.0-1026.29~16.04.14.15.0-1027.30~16.04.14.15.0-1029.32~16.04.14.15.0-1030.33~16.04.14.15.0-1031.34~16.04.14.15.0-1033.36~16.04.14.15.0-1035.38~16.04.14.15.0-1037.41~16.04.14.15.0-1038.42~16.04.14.15.0-1039.43~16.04.14.15.0-1045.49~16.04.14.15.0-1046.50~16.04.14.15.0-1050.54~16.04.14.15.0-1051.55~16.04.14.15.0-1053.57~16.04.14.15.0-1054.58~16.04.14.15.0-1056.61~16.04.14.15.0-1058.64~16.04.14.15.0-1059.65~16.04.14.15.0-1061.67~16.04.14.15.0-1062.68~16.04.14.15.0-1064.71~16.04.14.15.0-1065.73~16.04.14.15.0-1066.74~16.04.14.15.0-1067.75~16.04.14.15.0-1068.76~16.04.14.15.0-1069.77~16.04.14.15.0-1070.78~16.04.14.15.0-1071.79~16.04.14.15.0-1072.80~16.04.14.15.0-1075.83~16.04.14.15.0-1078.86~16.04.14.15.0-1079.87~16.04.14.15.0-1080.88~16.04.14.15.0-1081.89~16.04.14.15.0-1082.90~16.04.1	4.15.0-1144.155~16.04.1
`linux-hwe-edge` Ubuntu:16.04:LTS	All versions, plus listed versions 4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1 Show 18 moreShow less 4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1	None known
`linux-fips` Ubuntu:Pro:FIPS-updates:16.04:LTS	before 4.4.0-1115.122, plus listed versions 4.4.0-1003.34.4.0-1005.54.4.0-1006.64.4.0-1008.104.4.0-1010.13 Show 45 moreShow less 4.4.0-1011.144.4.0-1012.164.4.0-1013.174.4.0-1015.204.4.0-1017.224.4.0-1019.244.4.0-1021.264.4.0-1022.274.4.0-1023.284.4.0-1025.304.4.0-1026.314.4.0-1027.324.4.0-1028.334.4.0-1029.344.4.0-1031.364.4.0-1032.374.4.0-1033.384.4.0-1034.394.4.0-1041.464.4.0-1042.474.4.0-1043.484.4.0-1044.494.4.0-1045.504.4.0-1046.514.4.0-1048.534.4.0-1049.554.4.0-1051.574.4.0-1052.584.4.0-1054.604.4.0-1055.614.4.0-1056.624.4.0-1057.634.4.0-1058.644.4.0-1060.664.4.0-1061.674.4.0-1062.684.4.0-1063.694.4.0-1064.704.4.0-1065.714.4.0-1066.724.4.0-1067.734.4.0-1068.744.4.0-1069.754.4.0-1071.774.4.0-1072.78	4.4.0-1115.122
`linux-fips` Ubuntu:Pro:FIPS:16.04:LTS	All versions, plus listed versions 4.4.0-1001.14.4.0-1002.2	None known
`linux` Ubuntu:Pro:18.04:LTS	before 4.15.0-239.251, plus listed versions 4.13.0-16.194.13.0-17.204.13.0-25.294.13.0-32.354.15.0-10.11 Show 45 moreShow less 4.15.0-12.134.15.0-13.144.15.0-15.164.15.0-19.204.15.0-20.214.15.0-22.244.15.0-23.254.15.0-24.264.15.0-29.314.15.0-30.324.15.0-32.354.15.0-33.364.15.0-34.374.15.0-36.394.15.0-38.414.15.0-39.424.15.0-42.454.15.0-43.464.15.0-44.474.15.0-45.484.15.0-46.494.15.0-47.504.15.0-48.514.15.0-50.544.15.0-51.554.15.0-52.564.15.0-54.584.15.0-55.604.15.0-58.644.15.0-60.674.15.0-62.694.15.0-64.734.15.0-65.744.15.0-66.754.15.0-69.784.15.0-70.794.15.0-72.814.15.0-74.844.15.0-76.864.15.0-88.884.15.0-91.924.15.0-96.974.15.0-99.1004.15.0-101.1024.15.0-106.107	4.15.0-239.251
`linux-aws` Ubuntu:Pro:18.04:LTS	before 4.15.0-1182.195, plus listed versions 4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1007.7 Show 45 moreShow less 4.15.0-1009.94.15.0-1010.104.15.0-1011.114.15.0-1016.164.15.0-1017.174.15.0-1019.194.15.0-1020.204.15.0-1021.214.15.0-1023.234.15.0-1025.254.15.0-1027.274.15.0-1029.304.15.0-1031.334.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1035.374.15.0-1037.394.15.0-1039.414.15.0-1040.424.15.0-1041.434.15.0-1043.454.15.0-1044.464.15.0-1045.474.15.0-1047.494.15.0-1048.504.15.0-1050.524.15.0-1051.534.15.0-1052.544.15.0-1054.564.15.0-1056.584.15.0-1057.594.15.0-1058.604.15.0-1060.624.15.0-1063.674.15.0-1065.694.15.0-1066.704.15.0-1067.714.15.0-1073.774.15.0-1076.804.15.0-1077.814.15.0-1079.834.15.0-1080.844.15.0-1082.864.15.0-1083.87	4.15.0-1182.195
`linux-aws-5.0` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30	None known
`linux-aws-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1 Show 5 moreShow less 5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37	None known
`linux-aws-5.4` Ubuntu:Pro:18.04:LTS	before 5.4.0-1148.158~18.04.1, plus listed versions 5.4.0-1018.18~18.04.15.4.0-1020.20~18.04.25.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1 Show 45 moreShow less 5.4.0-1028.29~18.04.15.4.0-1029.30~18.04.15.4.0-1030.31~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.37~18.04.15.4.0-1037.39~18.04.15.4.0-1038.40~18.04.15.4.0-1039.41~18.04.15.4.0-1041.43~18.04.15.4.0-1043.45~18.04.15.4.0-1045.47~18.04.15.4.0-1047.49~18.04.15.4.0-1048.50~18.04.15.4.0-1049.51~18.04.15.4.0-1051.53~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1058.61~18.04.35.4.0-1059.62~18.04.15.4.0-1060.63~18.04.15.4.0-1061.64~18.04.15.4.0-1063.66~18.04.15.4.0-1064.67~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1068.72~18.04.15.4.0-1069.73~18.04.15.4.0-1071.76~18.04.15.4.0-1072.77~18.04.15.4.0-1075.80~18.04.15.4.0-1078.84~18.04.15.4.0-1080.87~18.04.15.4.0-1081.88~18.04.15.4.0-1083.90~18.04.15.4.0-1084.91~18.04.15.4.0-1085.92~18.04.15.4.0-1086.93~18.04.15.4.0-1088.96~18.04.15.4.0-1089.97~18.04.15.4.0-1090.98~18.04.15.4.0-1092.100~18.04.25.4.0-1093.102~18.04.2	5.4.0-1148.158~18.04.1
`linux-azure` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9 Show 39 moreShow less 4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38	None known
`linux-azure-4.15` Ubuntu:Pro:18.04:LTS	before 4.15.0-1190.205, plus listed versions 4.15.0-1082.924.15.0-1083.934.15.0-1089.994.15.0-1091.1014.15.0-1092.102 Show 45 moreShow less 4.15.0-1093.1034.15.0-1095.1054.15.0-1096.1064.15.0-1099.1104.15.0-1100.1114.15.0-1102.1134.15.0-1103.1144.15.0-1104.1164.15.0-1106.1184.15.0-1108.1204.15.0-1109.1214.15.0-1110.1224.15.0-1111.1234.15.0-1112.1254.15.0-1113.1264.15.0-1114.1274.15.0-1115.1284.15.0-1118.1314.15.0-1121.1344.15.0-1122.1354.15.0-1123.1364.15.0-1124.1374.15.0-1125.1384.15.0-1126.1394.15.0-1127.1404.15.0-1129.1424.15.0-1130.1434.15.0-1131.1444.15.0-1133.1464.15.0-1134.1474.15.0-1136.1494.15.0-1137.1504.15.0-1138.1514.15.0-1139.1524.15.0-1142.1564.15.0-1145.1604.15.0-1146.1614.15.0-1149.1644.15.0-1150.1654.15.0-1151.1664.15.0-1153.1684.15.0-1157.1724.15.0-1158.1734.15.0-1159.1744.15.0-1161.176	4.15.0-1190.205
`linux-azure-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1 Show 11 moreShow less 5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36	None known
`linux-azure-5.4` Ubuntu:Pro:18.04:LTS	before 5.4.0-1153.160~18.04.1, plus listed versions 5.4.0-1020.20~18.04.15.4.0-1022.22~18.04.15.4.0-1023.23~18.04.15.4.0-1025.25~18.04.15.4.0-1026.26~18.04.1 Show 45 moreShow less 5.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.36~18.04.15.4.0-1036.38~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1041.43~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1047.49~18.04.15.4.0-1048.50~18.04.15.4.0-1049.51~18.04.15.4.0-1051.53~18.04.15.4.0-1055.57~18.04.15.4.0-1056.58~18.04.15.4.0-1058.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1064.67~18.04.15.4.0-1065.68~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1069.72~18.04.15.4.0-1070.73~18.04.15.4.0-1072.75~18.04.15.4.0-1073.76~18.04.15.4.0-1074.77~18.04.15.4.0-1077.80~18.04.15.4.0-1078.81~18.04.15.4.0-1080.83~18.04.25.4.0-1083.87~18.04.15.4.0-1085.90~18.04.15.4.0-1086.91~18.04.15.4.0-1089.94~18.04.15.4.0-1090.95~18.04.15.4.0-1091.96~18.04.15.4.0-1094.100~18.04.15.4.0-1095.101~18.04.15.4.0-1098.104~18.04.25.4.0-1100.106~18.04.15.4.0-1101.107~18.04.1	5.4.0-1153.160~18.04.1
`linux-azure-edge` Ubuntu:18.04:LTS	All versions, plus listed versions 4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2	None known
`linux-gcp` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8 Show 33 moreShow less 4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35	None known
`linux-gcp-4.15` Ubuntu:Pro:18.04:LTS	before 4.15.0-1175.192, plus listed versions 4.15.0-1071.814.15.0-1077.874.15.0-1078.884.15.0-1080.904.15.0-1081.92 Show 45 moreShow less 4.15.0-1083.944.15.0-1084.954.15.0-1086.984.15.0-1087.1004.15.0-1088.1014.15.0-1090.1034.15.0-1091.1044.15.0-1092.1054.15.0-1093.1064.15.0-1094.1074.15.0-1095.1084.15.0-1096.1094.15.0-1097.1104.15.0-1098.1114.15.0-1099.1124.15.0-1100.1134.15.0-1103.1164.15.0-1106.1204.15.0-1107.1214.15.0-1108.1224.15.0-1109.1234.15.0-1110.1244.15.0-1111.1254.15.0-1112.1264.15.0-1114.1284.15.0-1115.1294.15.0-1116.1304.15.0-1118.1324.15.0-1119.1334.15.0-1120.1344.15.0-1121.1354.15.0-1122.1364.15.0-1124.1384.15.0-1127.1424.15.0-1130.1464.15.0-1131.1474.15.0-1134.1504.15.0-1135.1514.15.0-1136.1524.15.0-1137.1534.15.0-1138.1544.15.0-1141.1574.15.0-1142.1584.15.0-1143.1594.15.0-1145.161	4.15.0-1175.192
`linux-gcp-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1 Show 8 moreShow less 5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1	None known
`linux-gcp-5.4` Ubuntu:Pro:18.04:LTS	before 5.4.0-1151.160~18.04.1, plus listed versions 5.4.0-1019.19~18.04.25.4.0-1021.21~18.04.15.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1 Show 45 moreShow less 5.4.0-1028.29~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.15.4.0-1033.35~18.04.15.4.0-1034.37~18.04.15.4.0-1036.39~18.04.15.4.0-1037.40~18.04.15.4.0-1038.41~18.04.15.4.0-1040.43~18.04.15.4.0-1041.44~18.04.15.4.0-1042.45~18.04.15.4.0-1043.46~18.04.15.4.0-1044.47~18.04.25.4.0-1046.49~18.04.15.4.0-1049.53~18.04.15.4.0-1051.55~18.04.15.4.0-1052.56~18.04.15.4.0-1053.57~18.04.15.4.0-1055.59~18.04.15.4.0-1056.60~18.04.15.4.0-1057.61~18.04.15.4.0-1058.62~18.04.15.4.0-1059.63~18.04.15.4.0-1060.64~18.04.15.4.0-1062.66~18.04.15.4.0-1063.67~18.04.15.4.0-1064.68~18.04.15.4.0-1065.69~18.04.15.4.0-1067.71~18.04.15.4.0-1068.72~18.04.15.4.0-1069.73~18.04.15.4.0-1072.77~18.04.15.4.0-1073.78~18.04.15.4.0-1075.80~18.04.15.4.0-1078.84~18.04.15.4.0-1080.87~18.04.15.4.0-1083.91~18.04.15.4.0-1084.92~18.04.15.4.0-1086.94~18.04.15.4.0-1087.95~18.04.15.4.0-1089.97~18.04.15.4.0-1092.101~18.04.15.4.0-1093.102~18.04.15.4.0-1096.105~18.04.2	5.4.0-1151.160~18.04.1
`linux-gke-4.15` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38 Show 28 moreShow less 4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84	None known
`linux-gke-5.4` Ubuntu:18.04:LTS	All versions, plus listed versions 5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.1 Show 32 moreShow less 5.4.0-1033.35~18.04.15.4.0-1035.37~18.04.15.4.0-1036.38~18.04.15.4.0-1037.39~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1042.44~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.15.4.0-1052.55~18.04.15.4.0-1053.56~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1071.76~18.04.35.4.0-1072.77~18.04.15.4.0-1074.79~18.04.15.4.0-1076.82~18.04.15.4.0-1078.84~18.04.15.4.0-1080.86~18.04.1	None known
`linux-gkeop-5.4` Ubuntu:18.04:LTS	All versions, plus listed versions 5.4.0-1001.15.4.0-1003.35.4.0-1004.55.4.0-1005.65.4.0-1007.8~18.04.1 Show 32 moreShow less 5.4.0-1008.9~18.04.15.4.0-1009.10~18.04.15.4.0-1010.11~18.04.15.4.0-1011.12~18.04.25.4.0-1012.13~18.04.15.4.0-1013.14~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1016.17~18.04.15.4.0-1018.19~18.04.15.4.0-1021.22~18.04.15.4.0-1022.23~18.04.15.4.0-1023.24~18.04.15.4.0-1024.25~18.04.15.4.0-1025.26~18.04.15.4.0-1026.27~18.04.15.4.0-1027.28~18.04.15.4.0-1029.30~18.04.25.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1033.34~18.04.15.4.0-1034.35~18.04.15.4.0-1036.37~18.04.15.4.0-1037.38~18.04.15.4.0-1038.39~18.04.15.4.0-1039.40~18.04.15.4.0-1040.41~18.04.15.4.0-1043.44~18.04.15.4.0-1046.48~18.04.15.4.0-1048.51~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.1	None known
`linux-hwe` Ubuntu:18.04:LTS	All versions, plus listed versions 4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1 Show 38 moreShow less 4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72	None known
`linux-hwe-5.4` Ubuntu:Pro:18.04:LTS	before 5.4.0-219.239~18.04.1, plus listed versions 5.4.0-37.41~18.04.15.4.0-39.43~18.04.15.4.0-40.44~18.04.15.4.0-42.46~18.04.15.4.0-45.49~18.04.2 Show 45 moreShow less 5.4.0-47.51~18.04.15.4.0-48.52~18.04.15.4.0-51.56~18.04.15.4.0-52.57~18.04.15.4.0-53.59~18.04.15.4.0-54.60~18.04.15.4.0-56.62~18.04.15.4.0-58.64~18.04.15.4.0-59.65~18.04.15.4.0-60.67~18.04.15.4.0-62.70~18.04.15.4.0-64.72~18.04.15.4.0-65.73~18.04.15.4.0-66.74~18.04.25.4.0-67.75~18.04.15.4.0-70.78~18.04.15.4.0-71.79~18.04.15.4.0-72.80~18.04.15.4.0-73.82~18.04.15.4.0-74.83~18.04.15.4.0-77.86~18.04.15.4.0-80.90~18.04.15.4.0-81.91~18.04.15.4.0-84.94~18.04.15.4.0-86.97~18.04.15.4.0-87.98~18.04.15.4.0-89.100~18.04.15.4.0-90.101~18.04.15.4.0-91.102~18.04.15.4.0-92.103~18.04.25.4.0-94.106~18.04.15.4.0-96.109~18.04.15.4.0-97.110~18.04.15.4.0-99.112~18.04.15.4.0-100.113~18.04.15.4.0-104.118~18.04.15.4.0-105.119~18.04.15.4.0-107.121~18.04.15.4.0-109.123~18.04.15.4.0-110.124~18.04.15.4.0-113.127~18.04.15.4.0-117.132~18.04.15.4.0-120.136~18.04.15.4.0-121.137~18.04.15.4.0-122.138~18.04.1	5.4.0-219.239~18.04.1
`linux-hwe-edge` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-15.16~18.04.15.0.0-16.17~18.04.15.0.0-17.18~18.04.15.0.0-19.20~18.04.15.0.0-20.21~18.04.1 Show 5 moreShow less 5.3.0-19.20~18.04.25.3.0-22.24~18.04.15.3.0-23.25~18.04.15.3.0-23.25~18.04.25.3.0-24.26~18.04.2	None known
`linux-ibm-5.4` Ubuntu:Pro:18.04:LTS	before 5.4.0-1094.99~18.04.1, plus listed versions 5.4.0-1010.11~18.04.25.4.0-1012.13~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1017.19~18.04.1 Show 45 moreShow less 5.4.0-1018.20~18.04.15.4.0-1019.21~18.04.15.4.0-1020.22~18.04.15.4.0-1021.23~18.04.15.4.0-1023.25~18.04.15.4.0-1026.29~18.04.15.4.0-1028.32~18.04.15.4.0-1029.33~18.04.15.4.0-1031.35~18.04.15.4.0-1032.36~18.04.15.4.0-1033.37~18.04.15.4.0-1034.38~18.04.15.4.0-1036.41~18.04.15.4.0-1037.42~18.04.15.4.0-1040.45~18.04.25.4.0-1041.46~18.04.15.4.0-1042.47~18.04.15.4.0-1044.49~18.04.15.4.0-1045.50~18.04.15.4.0-1046.51~18.04.15.4.0-1047.52~18.04.15.4.0-1048.53~18.04.15.4.0-1049.54~18.04.15.4.0-1050.55~18.04.15.4.0-1051.56~18.04.15.4.0-1052.57~18.04.15.4.0-1053.58~18.04.15.4.0-1054.59~18.04.15.4.0-1056.61~18.04.15.4.0-1057.62~18.04.15.4.0-1058.63~18.04.15.4.0-1059.64~18.04.15.4.0-1060.65~18.04.15.4.0-1061.66~18.04.15.4.0-1063.68~18.04.15.4.0-1064.69~18.04.15.4.0-1065.70~18.04.15.4.0-1066.71~18.04.15.4.0-1067.72~18.04.15.4.0-1068.73~18.04.15.4.0-1069.74~18.04.15.4.0-1070.75~18.04.15.4.0-1071.76~18.04.15.4.0-1072.77~18.04.15.4.0-1073.78~18.04.1	5.4.0-1094.99~18.04.1
`linux-kvm` Ubuntu:Pro:18.04:LTS	before 4.15.0-1165.170, plus listed versions 4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1006.64.15.0-1008.8 Show 45 moreShow less 4.15.0-1010.104.15.0-1011.114.15.0-1012.124.15.0-1016.164.15.0-1017.174.15.0-1019.194.15.0-1020.204.15.0-1021.214.15.0-1023.234.15.0-1025.254.15.0-1026.264.15.0-1027.274.15.0-1028.284.15.0-1029.294.15.0-1030.304.15.0-1031.314.15.0-1032.324.15.0-1034.344.15.0-1035.354.15.0-1036.364.15.0-1038.384.15.0-1039.394.15.0-1042.424.15.0-1043.434.15.0-1044.444.15.0-1046.464.15.0-1047.474.15.0-1048.484.15.0-1050.504.15.0-1051.514.15.0-1052.524.15.0-1053.534.15.0-1056.574.15.0-1058.594.15.0-1059.604.15.0-1060.614.15.0-1067.684.15.0-1069.704.15.0-1071.724.15.0-1072.734.15.0-1074.754.15.0-1075.764.15.0-1077.794.15.0-1079.814.15.0-1081.83	4.15.0-1165.170
`linux-oem` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12 Show 45 moreShow less 4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114	None known
`linux-oracle` Ubuntu:Pro:18.04:LTS	before 4.15.0-1144.155, plus listed versions 4.15.0-1007.94.15.0-1008.104.15.0-1009.114.15.0-1010.124.15.0-1011.13 Show 45 moreShow less 4.15.0-1013.154.15.0-1014.164.15.0-1015.174.15.0-1017.194.15.0-1018.204.15.0-1021.234.15.0-1022.254.15.0-1023.264.15.0-1025.284.15.0-1026.294.15.0-1027.304.15.0-1029.324.15.0-1030.334.15.0-1031.344.15.0-1033.364.15.0-1035.394.15.0-1037.414.15.0-1038.424.15.0-1039.434.15.0-1045.494.15.0-1047.514.15.0-1048.524.15.0-1050.544.15.0-1051.554.15.0-1053.574.15.0-1054.584.15.0-1057.624.15.0-1058.644.15.0-1059.654.15.0-1061.674.15.0-1062.684.15.0-1063.704.15.0-1064.714.15.0-1065.734.15.0-1066.744.15.0-1067.754.15.0-1068.764.15.0-1069.774.15.0-1070.784.15.0-1071.794.15.0-1072.804.15.0-1075.834.15.0-1078.864.15.0-1079.874.15.0-1080.88	4.15.0-1144.155
`linux-oracle-5.0` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19	None known
`linux-oracle-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1 Show 4 moreShow less 5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1	None known
`linux-oracle-5.4` Ubuntu:Pro:18.04:LTS	before 5.4.0-1146.156~18.04.1, plus listed versions 5.4.0-1019.19~18.04.15.4.0-1021.21~18.04.15.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1 Show 45 moreShow less 5.4.0-1028.29~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1033.355.4.0-1034.36~18.04.15.4.0-1035.38~18.04.15.4.0-1037.40~18.04.15.4.0-1038.41~18.04.15.4.0-1039.42~18.04.15.4.0-1041.44~18.04.15.4.0-1042.45~18.04.15.4.0-1043.46~18.04.15.4.0-1044.47~18.04.15.4.0-1046.50~18.04.25.4.0-1048.52~18.04.15.4.0-1049.53~18.04.15.4.0-1052.56~18.04.15.4.0-1053.57~18.04.15.4.0-1054.58~18.04.15.4.0-1055.59~18.04.15.4.0-1056.60~18.04.15.4.0-1057.61~18.04.15.4.0-1058.62~18.04.15.4.0-1059.63~18.04.15.4.0-1061.65~18.04.15.4.0-1062.66~18.04.15.4.0-1063.67~18.04.15.4.0-1064.68~18.04.15.4.0-1066.71~18.04.15.4.0-1067.72~18.04.15.4.0-1069.75~18.04.15.4.0-1070.76~18.04.15.4.0-1071.77~18.04.15.4.0-1073.79~18.04.15.4.0-1076.83~18.04.15.4.0-1078.86~18.04.15.4.0-1079.87~18.04.15.4.0-1081.89~18.04.15.4.0-1082.90~18.04.15.4.0-1083.91~18.04.15.4.0-1084.92~18.04.15.4.0-1086.95~18.04.15.4.0-1087.96~18.04.15.4.0-1090.99~18.04.25.4.0-1091.100~18.04.1	5.4.0-1146.156~18.04.1
`linux-raspi-5.4` Ubuntu:Pro:18.04:LTS	before 5.4.0-1131.144~18.04.1, plus listed versions 5.4.0-1013.13~18.04.15.4.0-1015.15~18.04.15.4.0-1016.17~18.04.15.4.0-1018.20~18.04.15.4.0-1019.21~18.04.1 Show 45 moreShow less 5.4.0-1021.24~18.04.15.4.0-1022.25~18.04.15.4.0-1023.26~18.04.15.4.0-1025.28~18.04.15.4.0-1026.29~18.04.15.4.0-1028.31~18.04.15.4.0-1029.32~18.04.15.4.0-1030.33~18.04.15.4.0-1032.35~18.04.15.4.0-1033.36~18.04.15.4.0-1034.37~18.04.15.4.0-1035.38~18.04.15.4.0-1036.39~18.04.15.4.0-1038.41~18.04.15.4.0-1041.45~18.04.15.4.0-1042.46~18.04.35.4.0-1043.47~18.04.15.4.0-1044.48~18.04.15.4.0-1045.49~18.04.15.4.0-1046.50~18.04.15.4.0-1047.52~18.04.15.4.0-1048.53~18.04.15.4.0-1050.56~18.04.15.4.0-1052.58~18.04.15.4.0-1053.60~18.04.15.4.0-1055.62~18.04.15.4.0-1056.63~18.04.15.4.0-1058.65~18.04.15.4.0-1059.66~18.04.15.4.0-1060.68~18.04.15.4.0-1062.70~18.04.15.4.0-1065.75~18.04.15.4.0-1066.76~18.04.15.4.0-1068.78~18.04.15.4.0-1069.79~18.04.15.4.0-1070.80~18.04.15.4.0-1071.81~18.04.15.4.0-1073.84~18.04.15.4.0-1074.85~18.04.15.4.0-1077.88~18.04.25.4.0-1078.89~18.04.15.4.0-1079.90~18.04.15.4.0-1080.91~18.04.15.4.0-1081.92~18.04.15.4.0-1082.93~18.04.1	5.4.0-1131.144~18.04.1
`linux-aws-fips` Ubuntu:Pro:FIPS-updates:18.04:LTS	before 4.15.0-2120.126, plus listed versions 4.15.0-2000.44.15.0-2018.184.15.0-2021.214.15.0-2022.224.15.0-2024.24 Show 45 moreShow less 4.15.0-2025.254.15.0-2026.264.15.0-2027.274.15.0-2030.314.15.0-2031.324.15.0-2033.344.15.0-2034.354.15.0-2035.374.15.0-2036.384.15.0-2037.394.15.0-2038.404.15.0-2039.414.15.0-2040.424.15.0-2041.434.15.0-2042.444.15.0-2044.464.15.0-2045.474.15.0-2048.504.15.0-2051.534.15.0-2052.544.15.0-2053.554.15.0-2054.564.15.0-2055.574.15.0-2056.584.15.0-2057.594.15.0-2059.614.15.0-2060.624.15.0-2061.634.15.0-2063.664.15.0-2064.674.15.0-2065.684.15.0-2066.694.15.0-2067.704.15.0-2069.724.15.0-2072.764.15.0-2075.804.15.0-2076.814.15.0-2078.834.15.0-2079.844.15.0-2080.854.15.0-2081.874.15.0-2082.884.15.0-2083.894.15.0-2085.914.15.0-2087.93	4.15.0-2120.126
`linux-azure-fips` Ubuntu:Pro:FIPS-updates:18.04:LTS	before 4.15.0-2099.105, plus listed versions 4.15.0-1002.24.15.0-2006.74.15.0-2007.84.15.0-2008.94.15.0-2009.10 Show 45 moreShow less 4.15.0-2012.144.15.0-2013.154.15.0-2015.174.15.0-2016.184.15.0-2017.204.15.0-2018.214.15.0-2020.234.15.0-2021.244.15.0-2022.254.15.0-2023.264.15.0-2024.274.15.0-2025.284.15.0-2026.294.15.0-2027.304.15.0-2030.334.15.0-2033.374.15.0-2034.384.15.0-2035.394.15.0-2036.404.15.0-2037.414.15.0-2038.424.15.0-2039.434.15.0-2041.454.15.0-2042.464.15.0-2043.474.15.0-2045.494.15.0-2046.504.15.0-2047.514.15.0-2048.524.15.0-2049.534.15.0-2050.544.15.0-2053.584.15.0-2056.624.15.0-2057.634.15.0-2059.654.15.0-2060.664.15.0-2062.684.15.0-2066.724.15.0-2067.734.15.0-2068.744.15.0-2070.764.15.0-2071.774.15.0-2072.784.15.0-2073.794.15.0-2074.80	4.15.0-2099.105
`linux-fips` Ubuntu:Pro:FIPS-updates:18.04:LTS	before 4.15.0-1137.148, plus listed versions 4.15.0-1027.324.15.0-1029.344.15.0-1034.394.15.0-1035.404.15.0-1037.42 Show 45 moreShow less 4.15.0-1038.434.15.0-1039.444.15.0-1040.454.15.0-1041.464.15.0-1044.504.15.0-1045.524.15.0-1046.534.15.0-1048.554.15.0-1049.564.15.0-1050.584.15.0-1051.594.15.0-1052.604.15.0-1053.614.15.0-1054.624.15.0-1055.634.15.0-1056.644.15.0-1057.654.15.0-1058.664.15.0-1059.674.15.0-1060.684.15.0-1063.714.15.0-1066.754.15.0-1067.764.15.0-1068.774.15.0-1069.784.15.0-1070.794.15.0-1071.804.15.0-1072.814.15.0-1073.824.15.0-1075.844.15.0-1076.854.15.0-1078.874.15.0-1080.894.15.0-1081.904.15.0-1083.924.15.0-1084.934.15.0-1085.944.15.0-1087.964.15.0-1090.1004.15.0-1093.1044.15.0-1094.1054.15.0-1096.1074.15.0-1097.1084.15.0-1098.1094.15.0-1099.110	4.15.0-1137.148
`linux-gcp-fips` Ubuntu:Pro:FIPS-updates:18.04:LTS	before 4.15.0-2083.89, plus listed versions 4.15.0-2013.144.15.0-2016.184.15.0-2017.194.15.0-2018.204.15.0-2019.21 Show 45 moreShow less 4.15.0-2020.224.15.0-2021.234.15.0-2022.244.15.0-2024.264.15.0-2025.274.15.0-2026.284.15.0-2028.314.15.0-2029.324.15.0-2030.334.15.0-2031.344.15.0-2032.354.15.0-2034.374.15.0-2037.414.15.0-2040.454.15.0-2041.464.15.0-2043.484.15.0-2044.494.15.0-2045.504.15.0-2047.524.15.0-2050.554.15.0-2052.574.15.0-2054.594.15.0-2055.604.15.0-2056.614.15.0-2057.624.15.0-2058.634.15.0-2059.644.15.0-2060.654.15.0-2061.664.15.0-2062.674.15.0-2063.684.15.0-2064.694.15.0-2065.704.15.0-2066.714.15.0-2067.724.15.0-2068.734.15.0-2069.744.15.0-2070.754.15.0-2071.764.15.0-2072.774.15.0-2073.784.15.0-2074.794.15.0-2075.804.15.0-2076.814.15.0-2077.83	4.15.0-2083.89
`linux-aws-fips` Ubuntu:Pro:FIPS:18.04:LTS	All versions, plus listed versions 4.15.0-2000.4	None known
`linux-azure-fips` Ubuntu:Pro:FIPS:18.04:LTS	All versions, plus listed versions 4.15.0-1002.2	None known
`linux-fips` Ubuntu:Pro:FIPS:18.04:LTS	All versions, plus listed versions 4.15.0-1011.12	None known
`linux-gcp-fips` Ubuntu:Pro:FIPS:18.04:LTS	All versions, plus listed versions 4.15.0-1001.1	None known
`linux` Ubuntu:Pro:20.04:LTS	before 5.4.0-219.239, plus listed versions 5.3.0-18.195.3.0-24.265.4.0-9.125.4.0-18.225.4.0-21.25 Show 45 moreShow less 5.4.0-24.285.4.0-25.295.4.0-26.305.4.0-28.325.4.0-29.335.4.0-31.355.4.0-33.375.4.0-37.415.4.0-39.435.4.0-40.445.4.0-42.465.4.0-45.495.4.0-47.515.4.0-48.525.4.0-51.565.4.0-52.575.4.0-53.595.4.0-54.605.4.0-56.625.4.0-58.645.4.0-59.655.4.0-60.675.4.0-62.705.4.0-64.725.4.0-65.735.4.0-66.745.4.0-67.755.4.0-70.785.4.0-71.795.4.0-72.805.4.0-73.825.4.0-74.835.4.0-77.865.4.0-80.905.4.0-81.915.4.0-84.945.4.0-86.975.4.0-88.995.4.0-89.1005.4.0-90.1015.4.0-91.1025.4.0-92.1035.4.0-94.1065.4.0-96.1095.4.0-97.110	5.4.0-219.239
`linux-aws` Ubuntu:Pro:20.04:LTS	before 5.4.0-1148.158, plus listed versions 5.3.0-1003.35.3.0-1008.95.3.0-1009.105.3.0-1010.115.4.0-1005.5 Show 45 moreShow less 5.4.0-1007.75.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1017.175.4.0-1018.185.4.0-1020.205.4.0-1021.215.4.0-1022.225.4.0-1024.245.4.0-1025.255.4.0-1028.295.4.0-1029.305.4.0-1030.315.4.0-1032.335.4.0-1034.355.4.0-1035.375.4.0-1037.395.4.0-1038.405.4.0-1039.415.4.0-1041.435.4.0-1043.455.4.0-1045.475.4.0-1047.495.4.0-1048.505.4.0-1049.515.4.0-1051.535.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1058.615.4.0-1059.625.4.0-1060.635.4.0-1061.645.4.0-1063.665.4.0-1064.675.4.0-1065.685.4.0-1066.695.4.0-1068.725.4.0-1069.735.4.0-1071.765.4.0-1072.775.4.0-1073.78	5.4.0-1148.158
`linux-aws-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1009.9~20.04.25.11.0-1014.15~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1 Show 7 moreShow less 5.11.0-1020.21~20.04.25.11.0-1021.22~20.04.25.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1	None known
`linux-aws-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1008.9~20.04.25.13.0-1011.12~20.04.15.13.0-1012.13~20.04.15.13.0-1014.15~20.04.15.13.0-1017.19~20.04.1 Show 8 moreShow less 5.13.0-1019.21~20.04.15.13.0-1021.23~20.04.25.13.0-1022.24~20.04.15.13.0-1023.25~20.04.15.13.0-1025.27~20.04.15.13.0-1028.31~20.04.15.13.0-1029.32~20.04.15.13.0-1031.35~20.04.1	None known
`linux-aws-5.15` Ubuntu:Pro:20.04:LTS	before 5.15.0-1087.94~20.04.1, plus listed versions 5.15.0-1014.18~20.04.15.15.0-1015.19~20.04.15.15.0-1017.21~20.04.15.15.0-1019.23~20.04.15.15.0-1020.24~20.04.1 Show 45 moreShow less 5.15.0-1021.25~20.04.15.15.0-1022.26~20.04.15.15.0-1023.27~20.04.15.15.0-1026.30~20.04.25.15.0-1027.31~20.04.15.15.0-1028.32~20.04.15.15.0-1030.34~20.04.15.15.0-1031.35~20.04.15.15.0-1033.37~20.04.15.15.0-1034.38~20.04.15.15.0-1035.39~20.04.15.15.0-1036.40~20.04.15.15.0-1037.41~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.15.15.0-1040.45~20.04.15.15.0-1041.46~20.04.15.15.0-1043.48~20.04.15.15.0-1044.49~20.04.15.15.0-1045.50~20.04.15.15.0-1047.52~20.04.15.15.0-1048.53~20.04.15.15.0-1049.54~20.04.15.15.0-1050.55~20.04.15.15.0-1051.56~20.04.15.15.0-1052.57~20.04.15.15.0-1053.58~20.04.15.15.0-1055.60~20.04.15.15.0-1056.61~20.04.15.15.0-1057.63~20.04.15.15.0-1058.64~20.04.15.15.0-1061.67~20.04.15.15.0-1062.68~20.04.15.15.0-1063.69~20.04.15.15.0-1064.70~20.04.15.15.0-1065.71~20.04.15.15.0-1066.72~20.04.15.15.0-1067.73~20.04.15.15.0-1068.74~20.04.15.15.0-1069.75~20.04.15.15.0-1070.76~20.04.15.15.0-1071.77~20.04.15.15.0-1072.78~20.04.15.15.0-1073.79~20.04.15.15.0-1075.82~20.04.1	5.15.0-1087.94~20.04.1
`linux-aws-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1041.43~20.04.15.8.0-1042.44~20.04.1	None known
`linux-azure` Ubuntu:Pro:20.04:LTS	before 5.4.0-1153.160, plus listed versions 5.3.0-1003.35.3.0-1008.95.3.0-1009.105.4.0-1006.65.4.0-1008.8 Show 45 moreShow less 5.4.0-1009.95.4.0-1010.105.4.0-1012.125.4.0-1016.165.4.0-1019.195.4.0-1020.205.4.0-1022.225.4.0-1023.235.4.0-1025.255.4.0-1026.265.4.0-1031.325.4.0-1032.335.4.0-1034.355.4.0-1035.365.4.0-1036.385.4.0-1039.415.4.0-1040.425.4.0-1041.435.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1047.495.4.0-1048.505.4.0-1049.515.4.0-1051.535.4.0-1055.575.4.0-1056.585.4.0-1058.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1064.675.4.0-1065.685.4.0-1067.705.4.0-1068.715.4.0-1069.725.4.0-1070.735.4.0-1072.755.4.0-1073.765.4.0-1074.775.4.0-1077.805.4.0-1078.815.4.0-1080.835.4.0-1083.87	5.4.0-1153.160
`linux-azure-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1007.7~20.04.25.11.0-1012.13~20.04.15.11.0-1013.14~20.04.15.11.0-1015.16~20.04.15.11.0-1017.18~20.04.1 Show 8 moreShow less 5.11.0-1019.20~20.04.15.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.2	None known
`linux-azure-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1009.10~20.04.25.13.0-1012.14~20.04.15.13.0-1013.15~20.04.15.13.0-1014.16~20.04.15.13.0-1017.19~20.04.1 Show 7 moreShow less 5.13.0-1021.24~20.04.15.13.0-1022.26~20.04.15.13.0-1023.27~20.04.15.13.0-1025.29~20.04.15.13.0-1028.33~20.04.15.13.0-1029.34~20.04.15.13.0-1031.37~20.04.1	None known
`linux-azure-5.15` Ubuntu:Pro:20.04:LTS	before 5.15.0-1094.103~20.04.1, plus listed versions 5.15.0-1007.8~20.04.15.15.0-1008.9~20.04.15.15.0-1013.16~20.04.15.15.0-1014.17~20.04.15.15.0-1017.20~20.04.1 Show 45 moreShow less 5.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.29~20.04.15.15.0-1029.36~20.04.15.15.0-1030.37~20.04.15.15.0-1031.38~20.04.15.15.0-1033.40~20.04.15.15.0-1034.41~20.04.15.15.0-1035.42~20.04.15.15.0-1036.43~20.04.15.15.0-1037.44~20.04.15.15.0-1038.45~20.04.15.15.0-1039.46~20.04.15.15.0-1040.47~20.04.15.15.0-1041.48~20.04.15.15.0-1042.49~20.04.15.15.0-1043.50~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.15.15.0-1049.56~20.04.15.15.0-1050.57~20.04.15.15.0-1051.59~20.04.15.15.0-1052.60~20.04.15.15.0-1053.61~20.04.15.15.0-1054.62~20.04.15.15.0-1056.64~20.04.15.15.0-1057.65~20.04.15.15.0-1058.66~20.04.25.15.0-1059.67~20.04.15.15.0-1060.69~20.04.15.15.0-1061.70~20.04.15.15.0-1063.72~20.04.15.15.0-1064.73~20.04.15.15.0-1065.74~20.04.15.15.0-1067.76~20.04.15.15.0-1068.77~20.04.15.15.0-1070.79~20.04.15.15.0-1071.80~20.04.15.15.0-1072.81~20.04.15.15.0-1073.82~20.04.15.15.0-1074.83~20.04.15.15.0-1075.84~20.04.1	5.15.0-1094.103~20.04.1
`linux-azure-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1033.35~20.04.15.8.0-1036.38~20.04.15.8.0-1039.42~20.04.15.8.0-1040.43~20.04.15.8.0-1041.44~20.04.15.8.0-1042.45~20.04.15.8.0-1043.46~20.04.1	None known
`linux-azure-fde` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-1063.66+cvm2.25.4.0-1063.66+cvm3.25.4.0-1064.67+cvm1.15.4.0-1065.68+cvm2.15.4.0-1067.70+cvm1.1 Show 21 moreShow less 5.4.0-1068.71+cvm1.15.4.0-1069.72+cvm1.15.4.0-1070.73+cvm1.15.4.0-1072.75+cvm1.15.4.0-1073.76+cvm1.15.4.0-1074.77+cvm1.15.4.0-1076.79+cvm1.15.4.0-1078.81+cvm1.15.4.0-1080.83+cvm1.15.4.0-1083.87+cvm1.15.4.0-1085.90+cvm1.15.4.0-1085.90+cvm2.15.4.0-1086.91+cvm1.15.4.0-1089.94+cvm1.25.4.0-1090.95+cvm1.15.4.0-1091.96+cvm1.15.4.0-1092.97+cvm1.15.4.0-1095.101+cvm1.15.4.0-1098.104+cvm1.15.4.0-1100.106+cvm1.15.4.0-1103.109+cvm1.1	None known

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected	OSV
Nov 6, 2026	affected
Nov 4, 2026	affected	OSV
Nov 3, 2026	facts	OSV
Nov 2, 2026	first indexed	CVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2024-46787 is a high vulnerability (CVSS 7.8) in Linux, published September 18, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.22%, the 12th percentile. Fixed in linux-lts 6.1.191-r0.

References

Show 194 moreShow less

This page doesn't list everything

Left out here: 383 package rows, 2,138 versions, 3,632 references and the rest of 23 source descriptions. The JSON record has them. Left out on purpose, here and in the API, to keep responses small: 4 source records.