CVE-2023-52477

usb: hub: Guard against accesses to uninitialized BOS descriptors

5.5 MediumFix available

In the Linux kernel, the following vulnerability has been resolved:

usb: hub: Guard against accesses to uninitialized BOS descriptors

Many functions in drivers/usb/core/hub.c and drivers/usb/core/hub.h access fields inside udev->bos without checking if it was allocated and initialized. If usb_get_bos_descriptor() fails for whatever reason, udev->bos will be NULL and those accesses will result in a crash:

BUG: kernel NULL pointer dereference, address: 0000000000000018 PGD 0 P4D 0 Oops: 0000 [#1] PREEMPT SMP NOPTI CPU: 5 PID: 17818 Comm: kworker/5:1 Tainted: G W 5.15.108-18910-gab0e1cb584e1 #1 <HASH:1f9e 1> Hardware name: Google Kindred/Kindred, BIOS Google_Kindred.12672.413.0 02/03/2021 Workqueue: usb_hub_wq hub_event RIP: 0010:hub_port_reset+0x193/0x788 Code: 89 f7 e8 20 f7 15 00 48 8b 43 08 80 b8 96 03 00 00 03 75 36 0f b7 88 92 03 00 00 81 f9 10 03 00 00 72 27 48 8b 80 a8 03 00 00 <48> 83 78 18 00 74 19 48 89 df 48 8b 75 b0 ba 02 00 00 00 4c 89 e9 RSP: 0018:ffffab740c53fcf8 EFLAGS: 00010246 RAX: 0000000000000000 RBX: ffffa1bc5f678000 RCX: 0000000000000310 RDX: fffffffffffffdff RSI: 0000000000000286 RDI: ffffa1be9655b840 RBP: ffffab740c53fd70 R08: 00001b7d5edaa20c R09: ffffffffb005e060 R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 R13: ffffab740c53fd3e R14: 0000000000000032 R15: 0000000000000000 FS: 0000000000000000(0000) GS:ffffa1be96540000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000000018 CR3: 000000022e80c005 CR4: 00000000003706e0 Call Trace: hub_event+0x73f/0x156e ? hub_activate+0x5b7/0x68f process_one_work+0x1a2/0x487 worker_thread+0x11a/0x288 kthread+0x13a/0x152 ? process_one_work+0x487/0x487 ? kthread_associate_blkcg+0x70/0x70 ret_from_fork+0x1f/0x30

Fall back to a default behavior if the BOS descriptor isn't accessible and skip all the functionalities that depend on it: LPM support checks, Super Speed capabilitiy checks, U1/U2 states setup.

Attack profile

How easy it is to exploit

Attack vector: Local
Complexity: Low
Privileges needed: Low
User interaction: None

What an attacker can affect

Confidentiality: None
Integrity: None
Availability: High

Exploit likelihood

0.24%Up 0.2 points since Feb 29, 2024

What each source reports

NVD Score used 5.5

In the Linux kernel, the following vulnerability has been resolved:

usb: hub: Guard against accesses to uninitialized BOS descriptors

Fall back to a default behavior if the BOS descriptor isn't accessible and skip all the functionalities that depend on it: LPM support checks, Super Speed capabilitiy checks, U1/U2 states setup.

Record: CVE-2023-52477
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness: CWE-476
Updated: 2026-11-02

CVE List No score

usb: hub: Guard against accesses to uninitialized BOS descriptors

In the Linux kernel, the following vulnerability has been resolved:

usb: hub: Guard against accesses to uninitialized BOS descriptors

Fall back to a default behavior if the BOS descriptor isn't accessible and skip all the functionalities that depend on it: LPM support checks, Super Speed capabilitiy checks, U1/U2 states setup.

Record: CVE-2023-52477
Updated: 2026-11-02

EUVDEUVD-2023-57102 No score

In the Linux kernel, the following vulnerability has been resolved:

usb: hub: Guard against accesses to uninitialized BOS descriptors

Fall back to a default behavior if the BOS descriptor isn't accessible and skip all the functionalities that depend on it: LPM support checks, Super Speed capabilitiy checks, U1/U2 states setup.

Record: EUVD-2023-57102
Updated: 2026-11-02

GitHub AdvisoriesGHSA-qw42-c97g-78x6 5.5

In the Linux kernel, the following vulnerability has been resolved: usb: hub: Guard against...

In the Linux kernel, the following vulnerability has been resolved:

usb: hub: Guard against accesses to uninitialized BOS descriptors

Fall back to a default behavior if the BOS descriptor isn't accessible and skip all the functionalities that depend on it: LPM support checks, Super Speed capabilitiy checks, U1/U2 states setup.

Record: GHSA-qw42-c97g-78x6
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness: CWE-476
Updated: 2026-11-02

OSVBELL-CVE-2023-52477 5.5

Record: BELL-CVE-2023-52477
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVDEBIAN-CVE-2023-52477 5.5

In the Linux kernel, the following vulnerability has been resolved: usb: hub: Guard against accesses to uninitialized BOS descriptors Many functions in drivers/usb/core/hub.c and drivers/usb/core/hub.h access fields inside udev->bos without checking if it was allocated and initialized. If usb_get_bos_descriptor() fails for whatever reason, udev->bos will be NULL and those accesses will result in a crash: BUG: kernel NULL pointer dereference, address: 0000000000000018 PGD 0 P4D 0 Oops: 0000 [#1] PREEMPT SMP NOPTI CPU: 5 PID: 17818 Comm: kworker/5:1 Tainted: G W 5.15.108-18910-gab0e1cb584e1 #1 <HASH:1f9e 1> Hardware name: Google Kindred/Kindred, BIOS Google_Kindred.12672.413.0 02/03/2021 Workqueue: usb_hub_wq hub_event RIP: 0010:hub_port_reset+0x193/0x788 Code: 89 f7 e8 20 f7 15 00 48 8b 43 08 80 b8 96 03 00 00 03 75 36 0f b7 88 92 03 00 00 81 f9 10 03 00 00 72 27 48 8b 80 a8 03 00 00 <48> 83 78 18 00 74 19 48 89 df 48 8b 75 b0 ba 02 00 00 00 4c 89 e9 RSP: 0018:ffffab740c53fcf8 EFLAGS: 00010246 RAX: 0000000000000000 RBX: ffffa1bc5f678000 RCX: 0000000000000310 RDX: fffffffffffffdff RSI: 0000000000000286 RDI: ffffa1be9655b840 RBP: ffffab740c53fd70 R08: 00001b7d5edaa20c R09: ffffffffb005e060 R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 R13: ffffab740c53fd3e R14: 0000000000000032 R15: 0000000000000000 FS: 0000000000000000(0000) GS:ffffa1be96540000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000000018 CR3: 000000022e80c005 CR4: 00000000003706e0 Call Trace: hub_event+0x73f/0x156e ? hub_activate+0x5b7/0x68f process_one_work+0x1a2/0x487 worker_thread+0x11a/0x288 kthread+0x13a/0x152 ? process_one_work+0x487/0x487 ? kthread_associate_blkcg+0x70/0x70 ret_from_fork+0x1f/0x30 Fall back to a default behavior if the BOS descriptor isn't accessible and skip all the functionalities that depend on it: LPM support checks, Super Speed capabilitiy checks, U1/U2 states setup.

Record: DEBIAN-CVE-2023-52477
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

Show 39 moreShow less

OSVOESA-2024-1567 8.0

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

sctp: use call_rcu to free endpoint

This patch is to delay the endpoint free by calling call_rcu() to fix another use-after-free issue in sctp_sock_dump():

BUG: KASAN: use-after-free in __lock_acquire+0x36d9/0x4c20 Call Trace: __lock_acquire+0x36d9/0x4c20 kernel/locking/lockdep.c:3218 lock_acquire+0x1ed/0x520 kernel/locking/lockdep.c:3844 __raw_spin_lock_bh include/linux/spinlock_api_smp.h:135 [inline] _raw_spin_lock_bh+0x31/0x40 kernel/locking/spinlock.c:168 spin_lock_bh include/linux/spinlock.h:334 [inline] __lock_sock+0x203/0x350 net/core/sock.c:2253 lock_sock_nested+0xfe/0x120 net/core/sock.c:2774 lock_sock include/net/sock.h:1492 [inline] sctp_sock_dump+0x122/0xb20 net/sctp/diag.c:324 sctp_for_each_transport+0x2b5/0x370 net/sctp/socket.c:5091 sctp_diag_dump+0x3ac/0x660 net/sctp/diag.c:527 __inet_diag_dump+0xa8/0x140 net/ipv4/inet_diag.c:1049 inet_diag_dump+0x9b/0x110 net/ipv4/inet_diag.c:1065 netlink_dump+0x606/0x1080 net/netlink/af_netlink.c:2244 __netlink_dump_start+0x59a/0x7c0 net/netlink/af_netlink.c:2352 netlink_dump_start include/linux/netlink.h:216 [inline] inet_diag_handler_cmd+0x2ce/0x3f0 net/ipv4/inet_diag.c:1170 __sock_diag_cmd net/core/sock_diag.c:232 [inline] sock_diag_rcv_msg+0x31d/0x410 net/core/sock_diag.c:263 netlink_rcv_skb+0x172/0x440 net/netlink/af_netlink.c:2477 sock_diag_rcv+0x2a/0x40 net/core/sock_diag.c:274

This issue occurs when asoc is peeled off and the old sk is freed after getting it by asoc->base.sk and before calling lock_sock(sk).

To prevent the sk free, as a holder of the sk, ep should be alive when calling lock_sock(). This patch uses call_rcu() and moves sock_put and ep free into sctp_endpoint_destroy_rcu(), so that it's safe to try to hold the ep under rcu_read_lock in sctp_transport_traverse_process().

If sctp_endpoint_hold() returns true, it means this ep is still alive and we have held it and can continue to dump it; If it returns false, it means this ep is dead and can be freed after rcu_read_unlock, and we should skip it.

In sctp_sock_dump(), after locking the sk, if this ep is different from tsp->asoc->ep, it means during this dumping, this asoc was peeled off before calling lock_sock(), and the sk should be skipped; If this ep is the same with tsp->asoc->ep, it means no peeloff happens on this asoc, and due to lock_sock, no peeloff will happen either until release_sock.

Note that delaying endpoint free won't delay the port release, as the port release happens in sctp_endpoint_destroy() before calling call_rcu(). Also, freeing endpoint by call_rcu() makes it safe to access the sk by asoc->base.sk in sctp_assocs_seq_show() and sctp_rcv().

Thanks Jones to bring this issue up.

v1->v2:

improve the changelog.
add kfree(ep) into sctp_endpoint_destroy_rcu(), as Jakub noticed.(CVE-2021-46929)

In the Linux kernel, the following vulnerability has been resolved:

net: fix use-after-free in tw_timer_handler

A real world panic issue was found as follow in Linux 5.4.

BUG: unable to handle page fault for address: ffffde49a863de28
PGD 7e6fe62067 P4D 7e6fe62067 PUD 7e6fe63067 PMD f51e064067 PTE 0
RIP: 0010:tw_timer_handler+0x20/0x40
Call Trace:
 &lt;IRQ&gt;
 call_timer_fn+0x2b/0x120
 run_timer_softirq+0x1ef/0x450
 __do_softirq+0x10d/0x2b8
 irq_exit+0xc7/0xd0
 smp_apic_timer_interrupt+0x68/0x120
 apic_timer_interrupt+0xf/0x20

This issue was also reported since 2017 in the thread [1], unfortunately, the issue was still can be reproduced after fixing DCCP.

The ipv4_mib_exit_net is called before tcp_sk_exit_batch when a net namespace is destroyed since tcp_sk_ops is registered befrore ipv4_mib_ops, which means tcp_sk_ops is in the front of…

Record: OESA-2024-1567
CVSS 3.1: 8.0 HighCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVOESA-2024-1568 6.1

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

scsi: core: Fix scsi_mode_sense() buffer length handling

Several problems exist with scsi_mode_sense() buffer length handling:

The allocation length field of the MODE SENSE(10) command is 16-bits, occupying bytes 7 and 8 of the CDB. With this command, access to mode pages larger than 255 bytes is thus possible. However, the CDB allocation length field is set by assigning len to byte 8 only, thus truncating buffer length larger than 255.
If scsi_mode_sense() is called with len smaller than 8 with sdev->use_10_for_ms set, or smaller than 4 otherwise, the buffer length is increased to 8 and 4 respectively, and the buffer is zero filled with these increased values, thus corrupting the memory following the buffer.

Fix these 2 problems by using put_unaligned_be16() to set the allocation length field of MODE SENSE(10) CDB and by returning an error when len is too small.

Furthermore, if len is larger than 255B, always try MODE SENSE(10) first, even if the device driver did not set sdev->use_10_for_ms. In case of invalid opcode error for MODE SENSE(10), access to mode pages larger than 255 bytes are not retried using MODE SENSE(6). To avoid buffer length overflows for the MODE_SENSE(10) case, check that len is smaller than 65535 bytes.

While at it, also fix the folowing:

Use get_unaligned_be16() to retrieve the mode data length and block descriptor length fields of the mode sense reply header instead of using an open coded calculation.
Fix the kdoc dbd argument explanation: the DBD bit stands for Disable Block Descriptor, which is the opposite of what the dbd argument description was.(CVE-2021-47182)

In the Linux kernel, the following vulnerability has been resolved:

iavf: free q_vectors before queues in iavf_disable_vf

iavf_free_queues() clears adapter->num_active_queues, which iavf_free_q_vectors() relies on, so swap the order of these two function calls in iavf_disable_vf(). This resolves a panic encountered when the interface is disabled and then later brought up again after PF communication is restored.(CVE-2021-47201)

In the Linux kernel, the following vulnerability has been resolved:

scsi: lpfc: Fix list_add() corruption in lpfc_drain_txq()

When parsing the txq list in lpfc_drain_txq(), the driver attempts to pass the requests to the adapter. If such an attempt fails, a local "fail_msg" string is set and a log message output. The job is then added to a completions list for cancellation.

Processing of any further jobs from the txq list continues, but since "fail_msg" remains set, jobs are added to the completions list regardless of whether a wqe was passed to the adapter. If successfully added to txcmplq, jobs are added to both lists resulting in list corruption.

Fix by clearing the fail_msg string after adding a job to the completions list. This stops the subsequent jobs from being added to the completions list unless they had an appropriate failure.(CVE-2021-47203)

In the Linux kernel, the following vulnerability has been resolved:

ALSA: usb-audio: fix null pointer dereference on pointer cs_desc

The pointer cs_desc return from snd_usb_find_clock_source could be null, so there is a potential null pointer dereference issue. Fix this by adding a null check before dereference.(CVE-2021-47211)

In the Linux kernel, the following vulnerability has been resolved:

scsi: advansys: Fix kernel pointer leak

Pointers should be printed with %p or %px rather than cast to 'unsigned long' and printed with %lx.

Change %lx to %p to print the hashed pointer.(CVE-2021-47216)

In the Linux kernel, the following vulnerability has been resolved:

x86/hyperv: Fix NULL deref in set_hv_tscchange_cb() if Hyper-V setup fails

Check for a…

Record: OESA-2024-1568
CVSS 3.1: 6.1 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H
Updated: 2026-11-02

OSVOESA-2024-1569 7.5

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

tun: avoid double free in tun_free_netdev

Avoid double free in tun_free_netdev() by moving the dev->tstats and tun->security allocs to a new ndo_init routine (tun_net_init()) that will be called by register_netdevice(). ndo_init is paired with the desctructor (tun_free_netdev()), so if there's an error in register_netdevice() the destructor will handle the frees.

BUG: KASAN: double-free or invalid-free in selinux_tun_dev_free_security+0x1a/0x20 security/selinux/hooks.c:5605

CPU: 0 PID: 25750 Comm: syz-executor416 Not tainted 5.16.0-rc2-syzk #1 Hardware name: Red Hat KVM, BIOS Call Trace: <TASK> __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x89/0xb5 lib/dump_stack.c:106 print_address_description.constprop.9+0x28/0x160 mm/kasan/report.c:247 kasan_report_invalid_free+0x55/0x80 mm/kasan/report.c:372 ____kasan_slab_free mm/kasan/common.c:346 [inline] __kasan_slab_free+0x107/0x120 mm/kasan/common.c:374 kasan_slab_free include/linux/kasan.h:235 [inline] slab_free_hook mm/slub.c:1723 [inline] slab_free_freelist_hook mm/slub.c:1749 [inline] slab_free mm/slub.c:3513 [inline] kfree+0xac/0x2d0 mm/slub.c:4561 selinux_tun_dev_free_security+0x1a/0x20 security/selinux/hooks.c:5605 security_tun_dev_free_security+0x4f/0x90 security/security.c:2342 tun_free_netdev+0xe6/0x150 drivers/net/tun.c:2215 netdev_run_todo+0x4df/0x840 net/core/dev.c:10627 rtnl_unlock+0x13/0x20 net/core/rtnetlink.c:112 __tun_chr_ioctl+0x80c/0x2870 drivers/net/tun.c:3302 tun_chr_ioctl+0x2f/0x40 drivers/net/tun.c:3311 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:874 [inline] __se_sys_ioctl fs/ioctl.c:860 [inline] __x64_sys_ioctl+0x19d/0x220 fs/ioctl.c:860 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x3a/0x80 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x44/0xae(CVE-2021-47082)

In the Linux kernel, the following vulnerability has been resolved:

scsi: core: Fix scsi_mode_sense() buffer length handling

Several problems exist with scsi_mode_sense() buffer length handling:

The allocation length field of the MODE SENSE(10) command is 16-bits, occupying bytes 7 and 8 of the CDB. With this command, access to mode pages larger than 255 bytes is thus possible. However, the CDB allocation length field is set by assigning len to byte 8 only, thus truncating buffer length larger than 255.
If scsi_mode_sense() is called with len smaller than 8 with sdev->use_10_for_ms set, or smaller than 4 otherwise, the buffer length is increased to 8 and 4 respectively, and the buffer is zero filled with these increased values, thus corrupting the memory following the buffer.

Fix these 2 problems by using put_unaligned_be16() to set the allocation length field of MODE SENSE(10) CDB and by returning an error when len is too small.

While at it, also fix the folowing:

Use get_unaligned_be16() to retrieve the mode data length and block descriptor length fields of the mode sense reply header instead of using an open coded calculation.
Fix the kdoc dbd argument explanation: the DBD bit stands for Disable Block Descriptor, which is the opposite of what the dbd argument description was.(CVE-2021-47182)

In the Linux kernel, the following vulnerability has been resolved:

ALSA: usb-audio: fix null pointer dereference on pointer cs_desc

The pointer cs_desc return from snd_usb_find_clock_source could be null, so there…

Record: OESA-2024-1569
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Updated: 2026-11-02

OSVOESA-2024-1620 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

firmware: arm_scmi: Harden accesses to the reset domains

Accessing reset domains descriptors by the index upon the SCMI drivers requests through the SCMI reset operations interface can potentially lead to out-of-bound violations if the SCMI driver misbehave.

Add an internal consistency check before any such domains descriptors accesses.(CVE-2022-48655)

In the Linux kernel, the following vulnerability has been resolved:

usb: hub: Guard against accesses to uninitialized BOS descriptors

Fall back to a default behavior if the BOS descriptor isn't accessible and skip all the functionalities that depend on it: LPM support checks, Super Speed capabilitiy checks, U1/U2 states setup.(CVE-2023-52477)

In the Linux kernel, the following vulnerability has been resolved:

block/rnbd-srv: Check for unlikely string overflow

Since "dev_search_path" can technically be as large as PATH_MAX, there was a risk of truncation when copying it and a second string into "full_path" since it was also PATH_MAX sized. The W=1 builds were reporting this warning:

drivers/block/rnbd/rnbd-srv.c: In function 'process_msg_open.isra': drivers/block/rnbd/rnbd-srv.c:616:51: warning: '%s' directive output may be truncated writing up to 254 bytes into a region of size between 0 and 4095 [-Wformat-truncation=] 616 | snprintf(full_path, PATH_MAX, "%s/%s", | ^~ In function 'rnbd_srv_get_full_path', inlined from 'process_msg_open.isra' at drivers/block/rnbd/rnbd-srv.c:721:14: drivers/block/rnbd/rnbd-srv.c:616:17: note: 'snprintf' output between 2 and 4351 bytes into a destination of size 4096 616 | snprintf(full_path, PATH_MAX, "%s/%s", | ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 617 | dev_search_path, dev_name); | ~~~~~~~~~~~~~~~~~~~~~~~~~~

To fix this, unconditionally check for truncation (as was already done for the case where "%SESSNAME%" was present).(CVE-2023-52618)

In the Linux kernel, the following…

Record: OESA-2024-1620
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVOESA-2024-1621 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

firmware: arm_scmi: Harden accesses to the reset domains

Add an internal consistency check before any such domains descriptors accesses.(CVE-2022-48655)

In the Linux kernel, the following vulnerability has been resolved:

usb: hub: Guard against accesses to uninitialized BOS descriptors

In the Linux kernel, the following vulnerability has been resolved:

block/rnbd-srv: Check for unlikely string overflow

To fix this, unconditionally check for truncation (as was already done for the case where "%SESSNAME%" was present).(CVE-2023-52618)

In the Linux kernel, the following…

Record: OESA-2024-1621
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVOESA-2024-1622 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

firmware: arm_scmi: Harden accesses to the reset domains

Add an internal consistency check before any such domains descriptors accesses.(CVE-2022-48655)

In the Linux kernel, the following vulnerability has been resolved:

erofs: fix pcluster use-after-free on UP platforms

During stress testing with CONFIG_SMP disabled, KASAN reports as below:

================================================================== BUG: KASAN: use-after-free in __mutex_lock+0xe5/0xc30 Read of size 8 at addr ffff8881094223f8 by task stress/7789

CPU: 0 PID: 7789 Comm: stress Not tainted 6.0.0-rc1-00002-g0d53d2e882f9 #3 Hardware name: Red Hat KVM, BIOS 0.5.1 01/01/2011 Call Trace: <TASK> .. __mutex_lock+0xe5/0xc30 .. z_erofs_do_read_page+0x8ce/0x1560 .. z_erofs_readahead+0x31c/0x580 .. Freed by task 7787 kasan_save_stack+0x1e/0x40 kasan_set_track+0x20/0x30 kasan_set_free_info+0x20/0x40 __kasan_slab_free+0x10c/0x190 kmem_cache_free+0xed/0x380 rcu_core+0x3d5/0xc90 __do_softirq+0x12d/0x389

Last potentially related work creation: kasan_save_stack+0x1e/0x40 __kasan_record_aux_stack+0x97/0xb0 call_rcu+0x3d/0x3f0 erofs_shrink_workstation+0x11f/0x210 erofs_shrink_scan+0xdc/0x170 shrink_slab.constprop.0+0x296/0x530 drop_slab+0x1c/0x70 drop_caches_sysctl_handler+0x70/0x80 proc_sys_call_handler+0x20a/0x2f0 vfs_write+0x555/0x6c0 ksys_write+0xbe/0x160 do_syscall_64+0x3b/0x90

The root cause is that erofs_workgroup_unfreeze() doesn't reset to orig_val thus it causes a race that the pcluster reuses unexpectedly before freeing.

Since UP platforms are quite rare now, such path becomes unnecessary. Let's drop such specific-designed path directly instead.(CVE-2022-48674)

In the Linux kernel, the following vulnerability has been resolved:

usb: hub: Guard against accesses to uninitialized BOS descriptors

Fall back to a default behavior if the BOS descriptor isn't accessible and skip all the functionalities that depend on it: LPM support…

Record: OESA-2024-1622
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2024:3618 7.8

Red Hat Security Advisory: kernel update

Record: RHSA-2024:3618
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2024:3627 7.8

Red Hat Security Advisory: kernel-rt security and bug fix update

Record: RHSA-2024:3627
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2024:9315 7.8

Red Hat Security Advisory: kernel security update

Record: RHSA-2024:9315
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2025:10701 7.0

Red Hat Security Advisory: kernel security update

Record: RHSA-2025:10701
CVSS 3.1: 7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVUBUNTU-CVE-2023-52477 5.1

Record: UBUNTU-CVE-2023-52477
CVSS 4.0: 5.1 MediumCVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVALSA-2024:3618 No score

Moderate: kernel update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: Marvin vulnerability side-channel leakage in the RSA decryption operation (CVE-2023-6240)
kernel: Information disclosure in vhost/vhost.c:vhost_new_msg() (CVE-2024-0340)
kernel: untrusted VMM can trigger int80 syscall handling (CVE-2024-25744)
kernel: i2c: i801: Fix block process call transactions (CVE-2024-26593)
kernel: pvrusb2: fix use after free on context disconnection (CVE-2023-52445)
kernel: x86/fpu: Stop relying on userspace for info to fault in xsave buffer that cause loop forever (CVE-2024-26603)
kernel: use after free in i2c (CVE-2019-25162)
kernel: i2c: validate user data in compat ioctl (CVE-2021-46934)
kernel: media: dvbdev: Fix memory leak in dvb_media_device_free() (CVE-2020-36777)
kernel: usb: hub: Guard against accesses to uninitialized BOS descriptors (CVE-2023-52477)
kernel: mtd: require write permissions for locking and badblock ioctls (CVE-2021-47055)
kernel: net/smc: fix illegal rmb_desc access in SMC-D connection dump (CVE-2024-26615)
kernel: vt: fix memory overlapping when deleting chars in the buffer (CVE-2022-48627)
kernel: Integer Overflow in raid5_cache_count (CVE-2024-23307)
kernel: media: uvcvideo: out-of-bounds read in uvc_query_v4l2_menu() (CVE-2023-52565)
kernel: net: bridge: data races indata-races in br_handle_frame_finish() (CVE-2023-52578)
kernel: net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg (CVE-2023-52528)
kernel: platform/x86: think-lmi: Fix reference leak (CVE-2023-52520)
kernel: RDMA/siw: Fix connection failure handling (CVE-2023-52513)
kernel: pid: take a reference when initializing cad_pid (CVE-2021-47118)
kernel: net/sched: act_ct: fix skb leak and crash on ooo frags (CVE-2023-52610)
kernel: netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout (CVE-2024-26643)
kernel: netfilter: nf_tables: disallow anonymous set with timeout flag (CVE-2024-26642)
kernel: i2c: i801: Don't generate an interrupt on bus reset (CVE-2021-47153)
kernel: xhci: handle isoc Babble and Buffer Overrun events properly (CVE-2024-26659)
kernel: hwmon: (coretemp) Fix out-of-bounds memory access (CVE-2024-26664)
kernel: wifi: mac80211: fix race condition on enabling fast-xmit (CVE-2024-26779)
kernel: RDMA/srpt: Support specifying the srpt_service_guid parameter (CVE-2024-26744)
kernel: RDMA/qedr: Fix qedr_create_user_qp error flow (CVE-2024-26743)
kernel: tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc (CVE-2021-47185)
kernel: do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak (CVE-2024-26901)
kernel: RDMA/srpt: Do not register event handler until srpt device is fully setup (CVE-2024-26872)
kernel: usb: ulpi: Fix debugfs directory leak (CVE-2024-26919)
kernel: usb: xhci: Add error handling in xhci_map_urb_for_dma (CVE-2024-26964)
kernel: USB: core: Fix deadlock in usb_deauthorize_interface() (CVE-2024-26934)
kernel: USB: core: Fix deadlock in port "disable" sysfs attribute (CVE-2024-26933)
kernel: fs: sysfs: Fix reference leak in sysfs_break_active_protection() (CVE-2024-26993)
kernel: fat: fix uninitialized field in nostale filehandles (CVE-2024-26973)
kernel: USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command (CVE-2024-27059)
kernel: net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send (CVE-2021-47013)
kernel: net: usb: fix memory leak in smsc75xx_bind (CVE-2021-47171)
kernel: powerpc/pseries: Fix potential memleak in papr_get_attr() (CVE-2022-48669)
kernel: uio: Fix use-after-free in uio_open (CVE-2023-52439)
kernel: wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() (CVE-2023-52594)
kernel: wifi: rt2x00: restart beacon queue when hardware reset (CVE-2023-52595)

Record: ALSA-2024:3618
Updated: 2026-11-02

OSVALSA-2024:3627 No score

Moderate: kernel-rt security and bug fix update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

kernel: Marvin vulnerability side-channel leakage in the RSA decryption operation (CVE-2023-6240)
kernel: Information disclosure in vhost/vhost.c:vhost_new_msg() (CVE-2024-0340)
kernel: untrusted VMM can trigger int80 syscall handling (CVE-2024-25744)
kernel: i2c: i801: Fix block process call transactions (CVE-2024-26593)
kernel: pvrusb2: fix use after free on context disconnection (CVE-2023-52445)
kernel: x86/fpu: Stop relying on userspace for info to fault in xsave buffer that cause loop forever (CVE-2024-26603)
kernel: use after free in i2c (CVE-2019-25162)
kernel: i2c: validate user data in compat ioctl (CVE-2021-46934)
kernel: media: dvbdev: Fix memory leak in dvb_media_device_free() (CVE-2020-36777)
kernel: usb: hub: Guard against accesses to uninitialized BOS descriptors (CVE-2023-52477)
kernel: mtd: require write permissions for locking and badblock ioctls (CVE-2021-47055)
kernel: net/smc: fix illegal rmb_desc access in SMC-D connection dump (CVE-2024-26615)
kernel: vt: fix memory overlapping when deleting chars in the buffer (CVE-2022-48627)
kernel: Integer Overflow in raid5_cache_count (CVE-2024-23307)
kernel: media: uvcvideo: out-of-bounds read in uvc_query_v4l2_menu() (CVE-2023-52565)
kernel: net: bridge: data races indata-races in br_handle_frame_finish() (CVE-2023-52578)
kernel: net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg (CVE-2023-52528)
kernel: platform/x86: think-lmi: Fix reference leak (CVE-2023-52520)
kernel: RDMA/siw: Fix connection failure handling (CVE-2023-52513)
kernel: pid: take a reference when initializing cad_pid (CVE-2021-47118)
kernel: net/sched: act_ct: fix skb leak and crash on ooo frags (CVE-2023-52610)
kernel: netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout (CVE-2024-26643)
kernel: netfilter: nf_tables: disallow anonymous set with timeout flag (CVE-2024-26642)
kernel: i2c: i801: Don't generate an interrupt on bus reset (CVE-2021-47153)
kernel: xhci: handle isoc Babble and Buffer Overrun events properly (CVE-2024-26659)
kernel: hwmon: (coretemp) Fix out-of-bounds memory access (CVE-2024-26664)
kernel: wifi: mac80211: fix race condition on enabling fast-xmit (CVE-2024-26779)
kernel: RDMA/srpt: Support specifying the srpt_service_guid parameter (CVE-2024-26744)
kernel: RDMA/qedr: Fix qedr_create_user_qp error flow (CVE-2024-26743)
kernel: tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc (CVE-2021-47185)
kernel: do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak (CVE-2024-26901)
kernel: RDMA/srpt: Do not register event handler until srpt device is fully setup (CVE-2024-26872)
kernel: usb: ulpi: Fix debugfs directory leak (CVE-2024-26919)
kernel: usb: xhci: Add error handling in xhci_map_urb_for_dma (CVE-2024-26964)
kernel: USB: core: Fix deadlock in usb_deauthorize_interface() (CVE-2024-26934)
kernel: USB: core: Fix deadlock in port "disable" sysfs attribute (CVE-2024-26933)
kernel: fs: sysfs: Fix reference leak in sysfs_break_active_protection() (CVE-2024-26993)
kernel: fat: fix uninitialized field in nostale filehandles (CVE-2024-26973)
kernel: USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command (CVE-2024-27059)

Bug Fix(es):

kernel-rt: update RT source tree to the latest AlmaLinux-8.10.z kernel (JIRA:AlmaLinux-34640)
kernel-rt: epoll_wait not reporting catching all events to application (JIRA:AlmaLinux-23022)

Record: ALSA-2024:3627
Updated: 2026-11-02

OSVCLSA-2024-1722533082 No score

kernel: Fix of 47 CVEs

af_unix: Fix garbage collector racing against connect() {CVE-2024-26923}
netfilter: nft_limit: reject configurations that cause integer overflow {CVE-2024-26668}
libbpf: Fix use-after-free in btf_dump_name_dups {CVE-2022-3534}
bpf: Fix partial dynptr stack slot reads/writes {CVE-2023-39191}
ima: Fix use-after-free on a dentry's dname.name {CVE-2024-39494}
ima: define ima_max_digest_data struct without a flexible array variable
ima: detect changes to the backing overlay file
tpm: fix reference counting for struct tpm_chip {CVE-2022-2977}
tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux {CVE-2023-6546}
tty: n_gsm: fix restart handling via CLD command
r8169: Fix possible ring buffer corruption on fragmented Tx packets. {CVE-2024-38586}
netfilter: tproxy: bail out if IP has been disabled on the device {CVE-2024-36270}
tcp: Use refcount_inc_not_zero() in tcp_twsk_unique(). {CVE-2024-36904}
Bluetooth: Fix double free in hci_conn_cleanup {CVE-2023-28464}
fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super {CVE-2024-0841}
net/ipv6: avoid possible UAF in ip6_route_mpath_notify() {CVE-2024-26852}
tipc: fix UAF in error path {CVE-2024-36886}
Bluetooth: af_bluetooth: Fix deadlock {CVE-2024-26886}
Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg {CVE-2023-51779}
dma-mapping: benchmark: handle NUMA_NO_NODE correctly {CVE-2024-39277}
net/mlx5e: Prevent deadlock while disabling aRFS {CVE-2024-27014}
net/mlx5e: Introduce flow steering API {CVE-2024-27014}
x86/sev: Harden #VC instruction emulation somewhat {CVE-2024-25742}
x86/coco: Disable 32-bit emulation by default on TDX and SEV {CVE-2024-25742}
x86: Introduce ia32_enabled() {CVE-2024-25742}
x86/entry: Do not allow external 0x80 interrupts {CVE-2024-25742}
x86/entry: Convert INT 0x80 emulation to IDTENTRY {CVE-2024-25742}
RDMA/srpt: Support specifying the srpt_service_guid parameter {CVE-2024-26744}
platform/x86: think-lmi: Fix reference leak {CVE-2023-52520}
USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command {CVE-2024-27059}
fat: fix uninitialized field in nostale filehandles {CVE-2024-26973}
usb: xhci: Add error handling in xhci_map_urb_for_dma {CVE-2024-26964}
wifi: ath9k: delay all of ath9k_wmi_event_tasklet() until init is complete {CVE-2024-26897}
wifi: mac80211: fix race condition on enabling fast-xmit {CVE-2024-26779}
RDMA/qedr: Fix qedr_create_user_qp error flow {CVE-2024-26743}
wifi: iwlwifi: fix a memory corruption {CVE-2024-26610}
x86/fpu: Stop relying on userspace for info to fault in xsave buffer {CVE-2024-26603}
wifi: rt2x00: restart beacon queue when hardware reset {CVE-2023-52595}
wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() {CVE-2023-52594}
net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg {CVE-2023-52528}
RDMA/siw: Fix connection failure handling {CVE-2023-52513}
usb: hub: Guard against accesses to uninitialized BOS descriptors {CVE-2023-52477}
tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc {CVE-2021-47185}
sctp: fail if no bound addresses can be used for a given scope {CVE-2023-1074}
memcg: enable accounting for file lock caches {CVE-2022-0480}
net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict() {CVE-2023-6176}
RDMA/srpt: Do not register event handler until srpt device is fully setup {CVE-2024-26872}
drm/amd/display: Atom Integrated System Info v2_2 for DCN35 {CVE-2024-36897}
net/mlx5e: fix a potential double-free in fs_any_create_groups {CVE-2023-52667}
ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action() {CVE-2024-36902}
ipv6: prevent NULL dereference in ip6_output() {CVE-2024-36901}
vt: fix memory overlapping when deleting chars in the buffer {CVE-2022-48627}
hwmon: (coretemp) Fix out-of-bounds memory access {CVE-2024-26664}
i2c: Fix a potential use after free {CVE-2019-25162}
net/smc: fix…

Record: CLSA-2024-1722533082
Updated: 2026-11-02

OSVCLSA-2025-1736469006 No score

Fix of 35 CVEs

CVE-url: https://ubuntu.com/security/CVE-2023-52664
- net: atlantic: eliminate double free in error handling logic
CVE-url: https://ubuntu.com/security/CVE-2023-52698
- calipso: fix memory leak in netlbl_calipso_add_pass()
CVE-url: https://ubuntu.com/security/CVE-2021-47466
- mm, slub: fix potential memoryleak in kmem_cache_open()
CVE-url: https://ubuntu.com/security/CVE-2023-52757
- smb: client: fix potential deadlock when releasing mids
CVE-url: https://ubuntu.com/security/CVE-2023-52749
- spi: Fix null dereference on suspend
CVE-url: https://ubuntu.com/security/CVE-2024-26921
- net: ipv4: do not handle duplicate fragments as overlapping
- net: IP defrag: encapsulate rbtree defrag code into callable functions
- ipv4: remove unnecessary type castings
- skb_expand_head() adjust skb->truesize incorrectly
- inet: inet_defrag: prevent sk release while still in use
CVE-url: https://ubuntu.com/security/CVE-2021-47082
- tun: avoid double free in tun_free_netdev
CVE-url: https://ubuntu.com/security/CVE-2024-36968
- Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
CVE-url: https://ubuntu.com/security/CVE-2023-52507
- nfc: nci: assert requested protocol is valid
CVE-url: https://ubuntu.com/security/CVE-2024-44944
- netfilter: ctnetlink: use helper function to calculate expect ID
CVE-url: https://ubuntu.com/security/CVE-2024-35861
- smb: client: fix potential UAF in cifs_debug_files_proc_show()
- smb: client: fix potential UAF in cifs_signal_cifsd_for_reconnect()
CVE-url: https://ubuntu.com/security/CVE-2024-35863
- smb: client: fix potential UAF in smb2_is_valid_oplock_break()
CVE-url: https://ubuntu.com/security/CVE-2024-35864
- smb: client: fix potential UAF in smb2_is_valid_lease_break()
CVE-url: https://ubuntu.com/security/CVE-2024-35867
- smb: client: fix potential UAF in cifs_stats_proc_show()
CVE-url: https://ubuntu.com/security/CVE-2024-35868
- smb: client: fix potential UAF in cifs_stats_proc_write()
CVE-url: https://ubuntu.com/security/CVE-2024-35896
- netfilter: validate user input for expected length
CVE-url: https://ubuntu.com/security/CVE-2024-27010
- net/sched: Fix mirred deadlock on device recursion
CVE-url: https://ubuntu.com/security/CVE-2024-26961
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
CVE-url: https://ubuntu.com/security/CVE-2024-26958
- NFS: Fix up commit deadlocks
- nfs: fix UAF in direct writes
CVE-url: https://ubuntu.com/security/CVE-2024-50115
- KVM: nSVM: Don't strip host's C-bit from guest's CR3 when reading PDPTRs
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
CVE-url: https://ubuntu.com/security/CVE-2024-50148
- Bluetooth: bnep: fix wild-memory-access in proto_unregister
CVE-url: https://ubuntu.com/security/CVE-2024-40910
- ax25: Fix refcount imbalance on inbound connections
CVE-url: https://ubuntu.com/security/CVE-2024-53057
- net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
CVE-url: https://ubuntu.com/security/CVE-2021-47101
- net: asix: fix uninit value bugs
- asix: fix uninit-value in asix_mdio_read()
CVE-url: https://ubuntu.com/security/CVE-2024-36952
- scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
CVE-url: https://ubuntu.com/security/CVE-2023-52488
- regmap: Add regmap_noinc_read API
- regmap: Add regmap_noinc_write API
- serial: sc16is7xx: convert from raw to noinc regmap functions for FIFO
CVE-url: https://ubuntu.com/security/CVE-2024-50142
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
CVE-url: https://ubuntu.com/security/CVE-2024-50256
- netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6()
CVE-url:…

Record: CLSA-2025-1736469006
Updated: 2026-11-02

OSVCLSA-2025-1736469452 No score

Fix of 35 CVEs

CVE-url: https://ubuntu.com/security/CVE-2023-52664
- net: atlantic: eliminate double free in error handling logic
CVE-url: https://ubuntu.com/security/CVE-2023-52698
- calipso: fix memory leak in netlbl_calipso_add_pass()
CVE-url: https://ubuntu.com/security/CVE-2021-47466
- mm, slub: fix potential memoryleak in kmem_cache_open()
CVE-url: https://ubuntu.com/security/CVE-2023-52757
- smb: client: fix potential deadlock when releasing mids
CVE-url: https://ubuntu.com/security/CVE-2023-52749
- spi: Fix null dereference on suspend
CVE-url: https://ubuntu.com/security/CVE-2024-26921
- net: ipv4: do not handle duplicate fragments as overlapping
- net: IP defrag: encapsulate rbtree defrag code into callable functions
- ipv4: remove unnecessary type castings
- skb_expand_head() adjust skb->truesize incorrectly
- inet: inet_defrag: prevent sk release while still in use
CVE-url: https://ubuntu.com/security/CVE-2021-47082
- tun: avoid double free in tun_free_netdev
CVE-url: https://ubuntu.com/security/CVE-2024-36968
- Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
CVE-url: https://ubuntu.com/security/CVE-2023-52507
- nfc: nci: assert requested protocol is valid
CVE-url: https://ubuntu.com/security/CVE-2024-44944
- netfilter: ctnetlink: use helper function to calculate expect ID
CVE-url: https://ubuntu.com/security/CVE-2024-35861
- smb: client: fix potential UAF in cifs_debug_files_proc_show()
- smb: client: fix potential UAF in cifs_signal_cifsd_for_reconnect()
CVE-url: https://ubuntu.com/security/CVE-2024-35863
- smb: client: fix potential UAF in smb2_is_valid_oplock_break()
CVE-url: https://ubuntu.com/security/CVE-2024-35864
- smb: client: fix potential UAF in smb2_is_valid_lease_break()
CVE-url: https://ubuntu.com/security/CVE-2024-35867
- smb: client: fix potential UAF in cifs_stats_proc_show()
CVE-url: https://ubuntu.com/security/CVE-2024-35868
- smb: client: fix potential UAF in cifs_stats_proc_write()
CVE-url: https://ubuntu.com/security/CVE-2024-35896
- netfilter: validate user input for expected length
CVE-url: https://ubuntu.com/security/CVE-2024-27010
- net/sched: Fix mirred deadlock on device recursion
CVE-url: https://ubuntu.com/security/CVE-2024-26961
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
CVE-url: https://ubuntu.com/security/CVE-2024-26958
- NFS: Fix up commit deadlocks
- nfs: fix UAF in direct writes
CVE-url: https://ubuntu.com/security/CVE-2024-50115
- KVM: nSVM: Don't strip host's C-bit from guest's CR3 when reading PDPTRs
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
CVE-url: https://ubuntu.com/security/CVE-2024-50148
- Bluetooth: bnep: fix wild-memory-access in proto_unregister
CVE-url: https://ubuntu.com/security/CVE-2024-40910
- ax25: Fix refcount imbalance on inbound connections
CVE-url: https://ubuntu.com/security/CVE-2024-53057
- net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
CVE-url: https://ubuntu.com/security/CVE-2021-47101
- net: asix: fix uninit value bugs
- asix: fix uninit-value in asix_mdio_read()
CVE-url: https://ubuntu.com/security/CVE-2024-36952
- scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
CVE-url: https://ubuntu.com/security/CVE-2023-52488
- regmap: Add regmap_noinc_read API
- regmap: Add regmap_noinc_write API
- serial: sc16is7xx: convert from raw to noinc regmap functions for FIFO
CVE-url: https://ubuntu.com/security/CVE-2024-50142
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
CVE-url: https://ubuntu.com/security/CVE-2024-50256
- netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6()
CVE-url:…

Record: CLSA-2025-1736469452
Updated: 2026-11-02

OSVCLSA-2025-1736470237 No score

Fix of 32 CVEs

CVE-url: https://ubuntu.com/security/CVE-2021-47466
- mm, slub: fix potential memoryleak in kmem_cache_open()
CVE-url: https://ubuntu.com/security/CVE-2024-36968
- Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
Bionic update: upstream stable patchset 2021-06-23 (LP: #1933375) // CVE- url: https://ubuntu.com/security/CVE-2021-47118
- pid: take a reference when initializing cad_pid
Bionic update: upstream stable patchset 2022-01-25 (LP: #1959033) // CVE- url: https://ubuntu.com/security/CVE-2021-47086
- phonet/pep: refuse to enable an unbound pipe
CVE-url: https://ubuntu.com/security/CVE-2023-52507
- nfc: nci: assert requested protocol is valid
CVE-url: https://ubuntu.com/security/CVE-2024-44944
- netfilter: ctnetlink: use helper function to calculate expect ID
CVE-url: https://ubuntu.com/security/CVE-2024-35861
- smb: client: fix potential UAF in cifs_debug_files_proc_show()
- smb: client: fix potential UAF in cifs_signal_cifsd_for_reconnect()
CVE-url: https://ubuntu.com/security/CVE-2024-35863
- smb: client: fix potential UAF in smb2_is_valid_oplock_break()
CVE-url: https://ubuntu.com/security/CVE-2024-35864
- smb: client: fix potential UAF in smb2_is_valid_lease_break()
CVE-url: https://ubuntu.com/security/CVE-2024-35867
- smb: client: fix potential UAF in cifs_stats_proc_show()
CVE-url: https://ubuntu.com/security/CVE-2024-35868
- smb: client: fix potential UAF in cifs_stats_proc_write()
CVE-url: https://ubuntu.com/security/CVE-2024-35896
- netfilter: validate user input for expected length
Bionic update: upstream stable patchset 2022-10-18 (LP: #1993349) // CVE- url: https://ubuntu.com/security/CVE-2022-48695
- scsi: mpt3sas: Fix use-after-free warning
Bionic update: upstream stable patchset 2021-08-03 (LP: #1938824) // CVE- url: https://ubuntu.com/security/CVE-2021-47321
- watchdog: Fix possible use-after-free by calling del_timer_sync()
Bionic update: upstream stable patchset 2021-08-13 (LP: #1939913) // CVE- url: https://ubuntu.com/security/CVE-2021-47310
- net: ti: fix UAF in tlan_remove_one
CVE-url: https://ubuntu.com/security/CVE-2024-27010
- net/sched: Fix mirred deadlock on device recursion
Bionic update: upstream stable patchset 2021-08-03 (LP: #1938824) // CVE- url: https://ubuntu.com/security/CVE-2021-47353
- udf: Fix NULL pointer dereference in udf_symlink function
CVE-url: https://ubuntu.com/security/CVE-2024-26961
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
CVE-url: https://ubuntu.com/security/CVE-2024-26958
- NFS: Allow multiple commit requests in flight per file
- NFS: Fix up commit deadlocks
- nfs: fix UAF in direct writes
CVE-url: https://ubuntu.com/security/CVE-2024-50115
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
CVE-url: https://ubuntu.com/security/CVE-2024-50148
- Bluetooth: bnep: fix wild-memory-access in proto_unregister
CVE-url: https://ubuntu.com/security/CVE-2024-40910
- ax25: Fix refcount imbalance on inbound connections
CVE-url: https://ubuntu.com/security/CVE-2024-53057
- net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
CVE-url: https://ubuntu.com/security/CVE-2024-36952
- scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
CVE-url: https://ubuntu.com/security/CVE-2024-50142
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
CVE-url: https://ubuntu.com/security/CVE-2024-50256
- netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6()
CVE-url: https://ubuntu.com/security/CVE-2021-47501
- i40e: Fix NULL pointer dereference in i40e_dbg_dump_desc
CVE-url: https://ubuntu.com/security/CVE-2023-52574
- team: fix null-ptr-deref when team device type is…

Record: CLSA-2025-1736470237
Updated: 2026-11-02

OSVCLSA-2025-1736470534 No score

Fix of 32 CVEs

CVE-url: https://ubuntu.com/security/CVE-2021-47466
- mm, slub: fix potential memoryleak in kmem_cache_open()
CVE-url: https://ubuntu.com/security/CVE-2024-36968
- Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
Bionic update: upstream stable patchset 2021-06-23 (LP: #1933375) // CVE- url: https://ubuntu.com/security/CVE-2021-47118
- pid: take a reference when initializing cad_pid
Bionic update: upstream stable patchset 2022-01-25 (LP: #1959033) // CVE- url: https://ubuntu.com/security/CVE-2021-47086
- phonet/pep: refuse to enable an unbound pipe
CVE-url: https://ubuntu.com/security/CVE-2023-52507
- nfc: nci: assert requested protocol is valid
CVE-url: https://ubuntu.com/security/CVE-2024-44944
- netfilter: ctnetlink: use helper function to calculate expect ID
CVE-url: https://ubuntu.com/security/CVE-2024-35861
- smb: client: fix potential UAF in cifs_debug_files_proc_show()
- smb: client: fix potential UAF in cifs_signal_cifsd_for_reconnect()
CVE-url: https://ubuntu.com/security/CVE-2024-35863
- smb: client: fix potential UAF in smb2_is_valid_oplock_break()
CVE-url: https://ubuntu.com/security/CVE-2024-35864
- smb: client: fix potential UAF in smb2_is_valid_lease_break()
CVE-url: https://ubuntu.com/security/CVE-2024-35867
- smb: client: fix potential UAF in cifs_stats_proc_show()
CVE-url: https://ubuntu.com/security/CVE-2024-35868
- smb: client: fix potential UAF in cifs_stats_proc_write()
CVE-url: https://ubuntu.com/security/CVE-2024-35896
- netfilter: validate user input for expected length
Bionic update: upstream stable patchset 2022-10-18 (LP: #1993349) // CVE- url: https://ubuntu.com/security/CVE-2022-48695
- scsi: mpt3sas: Fix use-after-free warning
Bionic update: upstream stable patchset 2021-08-03 (LP: #1938824) // CVE- url: https://ubuntu.com/security/CVE-2021-47321
- watchdog: Fix possible use-after-free by calling del_timer_sync()
Bionic update: upstream stable patchset 2021-08-13 (LP: #1939913) // CVE- url: https://ubuntu.com/security/CVE-2021-47310
- net: ti: fix UAF in tlan_remove_one
CVE-url: https://ubuntu.com/security/CVE-2024-27010
- net/sched: Fix mirred deadlock on device recursion
Bionic update: upstream stable patchset 2021-08-03 (LP: #1938824) // CVE- url: https://ubuntu.com/security/CVE-2021-47353
- udf: Fix NULL pointer dereference in udf_symlink function
CVE-url: https://ubuntu.com/security/CVE-2024-26961
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
CVE-url: https://ubuntu.com/security/CVE-2024-26958
- NFS: Allow multiple commit requests in flight per file
- NFS: Fix up commit deadlocks
- nfs: fix UAF in direct writes
CVE-url: https://ubuntu.com/security/CVE-2024-50115
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
CVE-url: https://ubuntu.com/security/CVE-2024-50148
- Bluetooth: bnep: fix wild-memory-access in proto_unregister
CVE-url: https://ubuntu.com/security/CVE-2024-40910
- ax25: Fix refcount imbalance on inbound connections
CVE-url: https://ubuntu.com/security/CVE-2024-53057
- net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
CVE-url: https://ubuntu.com/security/CVE-2024-36952
- scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
CVE-url: https://ubuntu.com/security/CVE-2024-50142
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
CVE-url: https://ubuntu.com/security/CVE-2024-50256
- netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6()
CVE-url: https://ubuntu.com/security/CVE-2021-47501
- i40e: Fix NULL pointer dereference in i40e_dbg_dump_desc
CVE-url: https://ubuntu.com/security/CVE-2023-52574
- team: fix null-ptr-deref when team device type is…

Record: CLSA-2025-1736470534
Updated: 2026-11-02

OSV No score

usb: hub: Guard against accesses to uninitialized BOS descriptors

In the Linux kernel, the following vulnerability has been resolved:

usb: hub: Guard against accesses to uninitialized BOS descriptors

Fall back to a default behavior if the BOS descriptor isn't accessible and skip all the functionalities that depend on it: LPM support checks, Super Speed capabilitiy checks, U1/U2 states setup.

Record: CVE-2023-52477
Updated: 2026-11-02

OSVRLSA-2024:3618 No score

Moderate: kernel update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: Marvin vulnerability side-channel leakage in the RSA decryption operation (CVE-2023-6240)
kernel: Information disclosure in vhost/vhost.c:vhost_new_msg() (CVE-2024-0340)
kernel: untrusted VMM can trigger int80 syscall handling (CVE-2024-25744)
kernel: i2c: i801: Fix block process call transactions (CVE-2024-26593)
kernel: pvrusb2: fix use after free on context disconnection (CVE-2023-52445)
kernel: x86/fpu: Stop relying on userspace for info to fault in xsave buffer that cause loop forever (CVE-2024-26603)
kernel: use after free in i2c (CVE-2019-25162)
kernel: i2c: validate user data in compat ioctl (CVE-2021-46934)
kernel: media: dvbdev: Fix memory leak in dvb_media_device_free() (CVE-2020-36777)
kernel: usb: hub: Guard against accesses to uninitialized BOS descriptors (CVE-2023-52477)
kernel: mtd: require write permissions for locking and badblock ioctls (CVE-2021-47055)
kernel: net/smc: fix illegal rmb_desc access in SMC-D connection dump (CVE-2024-26615)
kernel: vt: fix memory overlapping when deleting chars in the buffer (CVE-2022-48627)
kernel: Integer Overflow in raid5_cache_count (CVE-2024-23307)
kernel: media: uvcvideo: out-of-bounds read in uvc_query_v4l2_menu() (CVE-2023-52565)
kernel: net: bridge: data races indata-races in br_handle_frame_finish() (CVE-2023-52578)
kernel: net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg (CVE-2023-52528)
kernel: platform/x86: think-lmi: Fix reference leak (CVE-2023-52520)
kernel: RDMA/siw: Fix connection failure handling (CVE-2023-52513)
kernel: pid: take a reference when initializing cad_pid (CVE-2021-47118)
kernel: net/sched: act_ct: fix skb leak and crash on ooo frags (CVE-2023-52610)
kernel: netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout (CVE-2024-26643)
kernel: netfilter: nf_tables: disallow anonymous set with timeout flag (CVE-2024-26642)
kernel: i2c: i801: Don't generate an interrupt on bus reset (CVE-2021-47153)
kernel: xhci: handle isoc Babble and Buffer Overrun events properly (CVE-2024-26659)
kernel: hwmon: (coretemp) Fix out-of-bounds memory access (CVE-2024-26664)
kernel: wifi: mac80211: fix race condition on enabling fast-xmit (CVE-2024-26779)
kernel: RDMA/srpt: Support specifying the srpt_service_guid parameter (CVE-2024-26744)
kernel: RDMA/qedr: Fix qedr_create_user_qp error flow (CVE-2024-26743)
kernel: tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc (CVE-2021-47185)
kernel: do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak (CVE-2024-26901)
kernel: RDMA/srpt: Do not register event handler until srpt device is fully setup (CVE-2024-26872)
kernel: usb: ulpi: Fix debugfs directory leak (CVE-2024-26919)
kernel: usb: xhci: Add error handling in xhci_map_urb_for_dma (CVE-2024-26964)
kernel: USB: core: Fix deadlock in usb_deauthorize_interface() (CVE-2024-26934)
kernel: USB: core: Fix deadlock in port "disable" sysfs attribute (CVE-2024-26933)
kernel: fs: sysfs: Fix reference leak in sysfs_break_active_protection() (CVE-2024-26993)
kernel: fat: fix uninitialized field in nostale filehandles (CVE-2024-26973)
kernel: USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command (CVE-2024-27059)
kernel: net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send (CVE-2021-47013)
kernel: net: usb: fix memory leak in smsc75xx_bind (CVE-2021-47171)
kernel: powerpc/pseries: Fix potential memleak in papr_get_attr() (CVE-2022-48669)
kernel: uio: Fix use-after-free in uio_open (CVE-2023-52439)
kernel: wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() (CVE-2023-52594)
kernel: wifi: rt2x00: restart beacon queue when hardware reset (CVE-2023-52595)

Record: RLSA-2024:3618
Updated: 2026-11-02

OSVRLSA-2024:3627 No score

Moderate: kernel-rt security and bug fix update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

kernel: Marvin vulnerability side-channel leakage in the RSA decryption operation (CVE-2023-6240)
kernel: Information disclosure in vhost/vhost.c:vhost_new_msg() (CVE-2024-0340)
kernel: untrusted VMM can trigger int80 syscall handling (CVE-2024-25744)
kernel: i2c: i801: Fix block process call transactions (CVE-2024-26593)
kernel: pvrusb2: fix use after free on context disconnection (CVE-2023-52445)
kernel: x86/fpu: Stop relying on userspace for info to fault in xsave buffer that cause loop forever (CVE-2024-26603)
kernel: use after free in i2c (CVE-2019-25162)
kernel: i2c: validate user data in compat ioctl (CVE-2021-46934)
kernel: media: dvbdev: Fix memory leak in dvb_media_device_free() (CVE-2020-36777)
kernel: usb: hub: Guard against accesses to uninitialized BOS descriptors (CVE-2023-52477)
kernel: mtd: require write permissions for locking and badblock ioctls (CVE-2021-47055)
kernel: net/smc: fix illegal rmb_desc access in SMC-D connection dump (CVE-2024-26615)
kernel: vt: fix memory overlapping when deleting chars in the buffer (CVE-2022-48627)
kernel: Integer Overflow in raid5_cache_count (CVE-2024-23307)
kernel: media: uvcvideo: out-of-bounds read in uvc_query_v4l2_menu() (CVE-2023-52565)
kernel: net: bridge: data races indata-races in br_handle_frame_finish() (CVE-2023-52578)
kernel: net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg (CVE-2023-52528)
kernel: platform/x86: think-lmi: Fix reference leak (CVE-2023-52520)
kernel: RDMA/siw: Fix connection failure handling (CVE-2023-52513)
kernel: pid: take a reference when initializing cad_pid (CVE-2021-47118)
kernel: net/sched: act_ct: fix skb leak and crash on ooo frags (CVE-2023-52610)
kernel: netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout (CVE-2024-26643)
kernel: netfilter: nf_tables: disallow anonymous set with timeout flag (CVE-2024-26642)
kernel: i2c: i801: Don't generate an interrupt on bus reset (CVE-2021-47153)
kernel: xhci: handle isoc Babble and Buffer Overrun events properly (CVE-2024-26659)
kernel: hwmon: (coretemp) Fix out-of-bounds memory access (CVE-2024-26664)
kernel: wifi: mac80211: fix race condition on enabling fast-xmit (CVE-2024-26779)
kernel: RDMA/srpt: Support specifying the srpt_service_guid parameter (CVE-2024-26744)
kernel: RDMA/qedr: Fix qedr_create_user_qp error flow (CVE-2024-26743)
kernel: tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc (CVE-2021-47185)
kernel: do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak (CVE-2024-26901)
kernel: RDMA/srpt: Do not register event handler until srpt device is fully setup (CVE-2024-26872)
kernel: usb: ulpi: Fix debugfs directory leak (CVE-2024-26919)
kernel: usb: xhci: Add error handling in xhci_map_urb_for_dma (CVE-2024-26964)
kernel: USB: core: Fix deadlock in usb_deauthorize_interface() (CVE-2024-26934)
kernel: USB: core: Fix deadlock in port "disable" sysfs attribute (CVE-2024-26933)
kernel: fs: sysfs: Fix reference leak in sysfs_break_active_protection() (CVE-2024-26993)
kernel: fat: fix uninitialized field in nostale filehandles (CVE-2024-26973)
kernel: USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command (CVE-2024-27059)

Bug Fix(es):

kernel-rt: update RT source tree to the latest Rocky Linux-8.10.z kernel (JIRA:Rocky Linux-34640)
kernel-rt: epoll_wait not reporting catching all events to application (JIRA:Rocky Linux-23022)

Record: RLSA-2024:3627
Updated: 2026-11-02

OSVSUSE-SU-2024:1320-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2021-46925: Fixed kernel panic caused by race of smc_sock (bsc#1220466).
CVE-2021-46926: Fixed bug when detecting controllers in ALSA/hda/intel-sdw-acpi (bsc#1220478).
CVE-2021-46927: Fixed assertion bug in nitro_enclaves: Use get_user_pages_unlocked() (bsc#1220443).
CVE-2021-46929: Fixed use-after-free issue in sctp_sock_dump() (bsc#1220482).
CVE-2021-46930: Fixed usb/mtu3 list_head check warning (bsc#1220484).
CVE-2021-46931: Fixed wrong type casting in mlx5e_tx_reporter_dump_sq() (bsc#1220486).
CVE-2021-46933: Fixed possible underflow in ffs_data_clear() (bsc#1220487).
CVE-2021-46936: Fixed use-after-free in tw_timer_handler() (bsc#1220439).
CVE-2021-47082: Fixed ouble free in tun_free_netdev() (bsc#1220969).
CVE-2021-47087: Fixed incorrect page free bug in tee/optee (bsc#1220954).
CVE-2021-47091: Fixed locking in ieee80211_start_ap()) error path (bsc#1220959).
CVE-2021-47093: Fixed memleak on registration failure in intel_pmc_core (bsc#1220978).
CVE-2021-47094: Fixed possible memory leak in KVM x86/mmu (bsc#1221551).
CVE-2021-47095: Fixed missing initialization in ipmi/ssif (bsc#1220979).
CVE-2021-47096: Fixed uninitalized user_pversion in ALSA rawmidi (bsc#1220981).
CVE-2021-47097: Fixed stack out of bound access in elantech_change_report_id() (bsc#1220982).
CVE-2021-47098: Fixed integer overflow/underflow in hysteresis calculations hwmon: (lm90) (bsc#1220983).
CVE-2021-47099: Fixed BUG_ON assertion in veth when skb entering GRO are cloned (bsc#1220955).
CVE-2021-47100: Fixed UAF when uninstall in ipmi (bsc#1220985).
CVE-2021-47101: Fixed uninit-value in asix_mdio_read() (bsc#1220987).
CVE-2021-47102: Fixed incorrect structure access In line: upper = info->upper_dev in net/marvell/prestera (bsc#1221009).
CVE-2021-47104: Fixed memory leak in qib_user_sdma_queue_pkts() (bsc#1220960).
CVE-2021-47105: Fixed potential memory leak in ice/xsk (bsc#1220961).
CVE-2021-47107: Fixed READDIR buffer overflow in NFSD (bsc#1220965).
CVE-2021-47108: Fixed possible NULL pointer dereference for mtk_hdmi_conf in drm/mediatek (bsc#1220986).
CVE-2022-48626: Fixed a potential use-after-free on remove path moxart (bsc#1220366).
CVE-2022-48629: Fixed possible memory leak in qcom-rng (bsc#1220989).
CVE-2022-48630: Fixed infinite loop on requests not multiple of WORD_SZ in crypto: qcom-rng (bsc#1220990).
CVE-2023-35827: Fixed a use-after-free issue in ravb_tx_timeout_work() (bsc#1212514).
CVE-2023-52450: Fixed NULL pointer dereference issue in upi_fill_topology() (bsc#1220237).
CVE-2023-52454: Fixed a kernel panic when host sends an invalid H2C PDU length (bsc#1220320).
CVE-2023-52469: Fixed a use-after-free in kv_parse_power_table (bsc#1220411).
CVE-2023-52470: Fixed null-ptr-deref in radeon_crtc_init() (bsc#1220413).
CVE-2023-52474: Fixed a vulnerability with non-PAGE_SIZE-end multi-iovec user SDMA requests (bsc#1220445).
CVE-2023-52477: Fixed USB Hub accesses to uninitialized BOS descriptors (bsc#1220790).
CVE-2023-52492: Fixed a null-pointer-dereference in channel unregistration function __dma_async_device_channel_register() (bsc#1221276).
CVE-2023-52497: Fixed data corruption in erofs (bsc#1220879).
CVE-2023-52501: Fixed possible memory corruption in ring-buffer (bsc#1220885).
CVE-2023-52502: Fixed a race condition in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn() (bsc#1220831).
CVE-2023-52504: Fixed possible out-of bounds in apply_alternatives() on a 5-level paging machine (bsc#1221553).
CVE-2023-52507: Fixed possible shift-out-of-bounds in nfc/nci (bsc#1220833).
CVE-2023-52508: Fixed null pointer dereference in nvme_fc_io_getuuid() (bsc#1221015).
CVE-2023-52509: Fixed a use-after-free issue in ravb_tx_timeout_work() (bsc#1220836).
CVE-2023-52510: Fixed a potential UAF in ca8210_probe() (bsc#1220898). -…

Record: SUSE-SU-2024:1320-1
Updated: 2026-11-02

OSVSUSE-SU-2024:1321-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-25742: Fixed insufficient validation during #VC instruction emulation in x86/sev (bsc#1221725).
CVE-2023-52519: Fixed possible overflow in HID/intel-ish-hid/ipc (bsc#1220920).
CVE-2023-52529: Fixed a potential memory leak in sony_probe() (bsc#1220929).
CVE-2023-52474: Fixed a vulnerability with non-PAGE_SIZE-end multi-iovec user SDMA requests (bsc#1220445).
CVE-2023-52513: Fixed connection failure handling in RDMA/siw (bsc#1221022).
CVE-2023-52515: Fixed possible use-after-free in RDMA/srp (bsc#1221048).
CVE-2023-52564: Reverted invalid fix for UAF in gsm_cleanup_mux() (bsc#1220938).
CVE-2023-52447: Fixed map_fd_put_ptr() signature kABI workaround (bsc#1220251).
CVE-2023-52510: Fixed a potential UAF in ca8210_probe() (bsc#1220898).
CVE-2023-52524: Fixed possible corruption in nfc/llcp (bsc#1220927).
CVE-2023-52528: Fixed uninit-value access in __smsc75xx_read_reg() (bsc#1220843).
CVE-2023-52507: Fixed possible shift-out-of-bounds in nfc/nci (bsc#1220833).
CVE-2023-52566: Fixed potential use after free in nilfs_gccache_submit_read_data() (bsc#1220940).
CVE-2023-52508: Fixed null pointer dereference in nvme_fc_io_getuuid() (bsc#1221015).
CVE-2023-6535: Fixed a NULL pointer dereference in nvmet_tcp_execute_request (bsc#1217988).
CVE-2023-6536: Fixed a NULL pointer dereference in __nvmet_req_complete (bsc#1217989).
CVE-2023-6356: Fixed a NULL pointer dereference in nvmet_tcp_build_pdu_iovec (bsc#1217987).
CVE-2023-52454: Fixed a kernel panic when host sends an invalid H2C PDU length (bsc#1220320).
CVE-2023-52520: Fixed reference leak in platform/x86/think-lmi (bsc#1220921).
CVE-2023-35827: Fixed a use-after-free issue in ravb_tx_timeout_work() (bsc#1212514).
CVE-2023-52509: Fixed a use-after-free issue in ravb_tx_timeout_work() (bsc#1220836).
CVE-2023-52501: Fixed possible memory corruption in ring-buffer (bsc#1220885).
CVE-2023-52567: Fixed possible Oops in serial/8250_port: when using IRQ polling (irq = 0) (bsc#1220839).
CVE-2023-52517: Fixed race between DMA RX transfer completion and RX FIFO drain in spi/sun6i (bsc#1221055).
CVE-2023-52511: Fixed possible memory corruption in spi/sun6i (bsc#1221012).
CVE-2023-52525: Fixed out of bounds check mwifiex_process_rx_packet() (bsc#1220840).
CVE-2023-52504: Fixed possible out-of bounds in apply_alternatives() on a 5-level paging machine (bsc#1221553).
CVE-2023-52575: Fixed SBPB enablement for spec_rstack_overflow=off (bsc#1220871).
CVE-2022-48626: Fixed a potential use-after-free on remove path moxart (bsc#1220366).
CVE-2022-48629: Fixed possible memory leak in qcom-rng (bsc#1220989).
CVE-2022-48630: Fixed infinite loop on requests not multiple of WORD_SZ in crypto: qcom-rng (bsc#1220990).
CVE-2021-46926: Fixed bug when detecting controllers in ALSA/hda/intel-sdw-acpi (bsc#1220478).
CVE-2021-47096: Fixed uninitalized user_pversion in ALSA rawmidi (bsc#1220981).
CVE-2021-47104: Fixed memory leak in qib_user_sdma_queue_pkts() (bsc#1220960).
CVE-2021-47097: Fixed stack out of bound access in elantech_change_report_id() (bsc#1220982).
CVE-2021-47094: Fixed possible memory leak in KVM x86/mmu (bsc#1221551).
CVE-2021-47107: Fixed READDIR buffer overflow in NFSD (bsc#1220965).
CVE-2021-47101: Fixed uninit-value in asix_mdio_read() (bsc#1220987).
CVE-2021-47108: Fixed possible NULL pointer dereference for mtk_hdmi_conf in drm/mediatek (bsc#1220986).
CVE-2021-47098: Fixed integer overflow/underflow in hysteresis calculations hwmon: (lm90) (bsc#1220983).
CVE-2021-47100: Fixed UAF when uninstall in ipmi (bsc#1220985).
CVE-2021-47095: Fixed missing initialization in ipmi/ssif (bsc#1220979).
CVE-2021-47091: Fixed locking in ieee80211_start_ap()) error path (bsc#1220959).
CVE-2021-46936: Fixed use-after-free in tw_timer_handler() (bsc#1220439).
CVE-2021-47102: Fixed…

Record: SUSE-SU-2024:1321-1
Updated: 2026-11-02

OSVSUSE-SU-2024:1454-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP2 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2020-36780: Fixed a reference leak when pm_runtime_get_sync fails in i2c (bsc#1220556).
CVE-2020-36782: Fixed a reference leak when pm_runtime_get_sync fails in i2c imx-lpi2c (bsc#1220560).
CVE-2020-36783: Fixed a reference leak when pm_runtime_get_sync fails in i2c img-scb (bsc#1220561).
CVE-2021-23134: Fixed a use-after-free issue in nfc sockets (bsc#1186060).
CVE-2021-46909: Fixed a PCI interrupt mapping in ARM footbridge (bsc#1220442).
CVE-2021-46921: Fixed ordering in queued_write_lock_slowpath (bsc#1220468).
CVE-2021-46930: Fixed a list_head check warning caused by uninitialization of list_head in usb mtu3 (bsc#1220484).
CVE-2021-46938: Fixed a double free of blk_mq_tag_set in dev remove after table load fails in dm rq (bsc#1220554).
CVE-2021-46939: Fixed a denial of service in trace_clock_global() in tracing (bsc#1220580).
CVE-2021-46943: Fixed an oops in set_fmt error handling in media: staging/intel-ipu3 (bsc#1220583).
CVE-2021-46944: Fixed a memory leak in imu_fmt in media staging/intel-ipu3 (bsc#1220566).
CVE-2021-46950: Fixed a data corruption bug in raid1 arrays using bitmaps in md/raid1 (bsc#1220662).
CVE-2021-46951: Fixed an integer underflow of efi_tpm_final_log_size in tpm_read_log_efi in tpm efi (bsc#1220615).
CVE-2021-46958: Fixed a race between transaction aborts and fsyncs leading to use-after-free in btrfs (bsc#1220521).
CVE-2021-46960: Fixed a warning on smb2_get_enc_key in cifs (bsc#1220528).
CVE-2021-46961: Fixed an error on not enabling irqs when handling spurious interrups in irqchip/gic-v3 (bsc#1220529).
CVE-2021-46962: Fixed a resource leak in the remove function in mmc uniphier-sd (bsc#1220532).
CVE-2021-46963: Fixed a denial of service in qla2xxx_mqueuecommand() in scsi qla2xxx (bsc#1220536)
CVE-2021-46971: Fixed unconditional security_locked_down() call in perf/core (bsc#1220697).
CVE-2021-46981: Fixed a NULL pointer in flush_workqueue in nbd (bsc#1220611).
CVE-2021-46984: Fixed an out of bounds access in kyber_bio_merge() in kyber (bsc#1220631).
CVE-2021-46988: Fixed release page in error path to avoid BUG_ON in userfaultfd (bsc#1220706).
CVE-2021-46990: Fixed a denial of service when toggling entry flush barrier in powerpc/64s (bsc#1220743).
CVE-2021-46991: Fixed a use-after-free in i40e_client_subtask (bsc#1220575).
CVE-2021-46992: Fixed a bug to avoid overflows in nft_hash_buckets (bsc#1220638).
CVE-2021-46998: Fixed an use after free bug in enic_hard_start_xmit in ethernet/enic (bsc#1220625).
CVE-2021-47000: Fixed an inode leak on getattr error in __fh_to_dentry in ceph (bsc#1220669).
CVE-2021-47006: Fixed wrong check in overflow_handler hook in ARM 9064/1 hw_breakpoint (bsc#1220751).
CVE-2021-47013: Fixed a use after free in emac_mac_tx_buf_send (bsc#1220641).
CVE-2021-47015: Fixed a RX consumer index logic in the error path in bnxt_rx_pkt() in bnxt_en (bsc#1220794).
CVE-2021-47020: Fixed a memory leak in stream config error path in soundwire stream (bsc#1220785).
CVE-2021-47034: Fixed a kernel memory fault for pte update on radix in powerpc/64s (bsc#1220687).
CVE-2021-47045: Fixed a null pointer dereference in lpfc_prep_els_iocb() in scsi lpfc (bsc#1220640).
CVE-2021-47049: Fixed an after free in __vmbus_open() in hv vmbus (bsc#1220692).
CVE-2021-47051: Fixed a PM reference leak in lpspi_prepare_xfer_hardware() in spi fsl-lpspi (bsc#1220764).
CVE-2021-47055: Fixed missing permissions for locking and badblock ioctls in mtd (bsc#1220768).
CVE-2021-47056: Fixed a user-memory-access error on vf2pf_lock in crypto (bsc#1220769).
CVE-2021-47058: Fixed a possible user-after-free in set debugfs_name in regmap (bsc#1220779).
CVE-2021-47061: Fixed a bug in KVM by destroy I/O bus devices on unregister failure after sync'ing SRCU (bsc#1220745).
CVE-2021-47063: Fixed a potential…

Record: SUSE-SU-2024:1454-1
Updated: 2026-11-02

OSVSUSE-SU-2024:1465-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP3 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2020-36780: Fixed a reference leak when pm_runtime_get_sync fails in i2c (bsc#1220556).
CVE-2020-36781: Fixed reference leak when pm_runtime_get_sync fails in i2c/imx (bsc#1220557).
CVE-2020-36782: Fixed a reference leak when pm_runtime_get_sync fails in i2c imx-lpi2c (bsc#1220560).
CVE-2020-36783: Fixed a reference leak when pm_runtime_get_sync fails in i2c img-scb (bsc#1220561).
CVE-2021-46908: Fixed incorrect permission flag for mixed signed bounds arithmetic in bpf (bsc#1220425).
CVE-2021-46909: Fixed a PCI interrupt mapping in ARM footbridge (bsc#1220442).
CVE-2021-46911: Fixed kernel panic (bsc#1220400).
CVE-2021-46914: Fixed unbalanced device enable/disable in suspend/resume in pci_disable_device() (bsc#1220465).
CVE-2021-46917: Fixed wq cleanup of WQCFG registers in idxd (bsc#1220432).
CVE-2021-46918: Fixed not clearing MSIX permission entry on shutdown in idxd (bsc#1220429).
CVE-2021-46919: Fixed wq size store permission state in idxd (bsc#1220414).
CVE-2021-46920: Fixed clobbering of SWERR overflow bit on writeback (bsc#1220426).
CVE-2021-46921: Fixed ordering in queued_write_lock_slowpath (bsc#1220468).
CVE-2021-46922: Fixed TPM reservation for seal/unseal (bsc#1220475).
CVE-2021-46930: Fixed usb/mtu3 list_head check warning (bsc#1220484).
CVE-2021-46931: Fixed wrong type casting in mlx5e_tx_reporter_dump_sq() (bsc#1220486).
CVE-2021-46933: Fixed possible underflow in ffs_data_clear() (bsc#1220487).
CVE-2021-46938: Fixed a double free of blk_mq_tag_set in dev remove after table load fails in dm rq (bsc#1220554).
CVE-2021-46939: Fixed a denial of service in trace_clock_global() in tracing (bsc#1220580).
CVE-2021-46943: Fixed an oops in set_fmt error handling in media: staging/intel-ipu3 (bsc#1220583).
CVE-2021-46944: Fixed a memory leak in imu_fmt in media staging/intel-ipu3 (bsc#1220566).
CVE-2021-46950: Fixed a data corruption bug in raid1 arrays using bitmaps in md/raid1 (bsc#1220662).
CVE-2021-46951: Fixed an integer underflow of efi_tpm_final_log_size in tpm_read_log_efi in tpm efi (bsc#1220615).
CVE-2021-46956: Fixed memory leak in virtio_fs_probe() (bsc#1220516).
CVE-2021-46958: Fixed a race between transaction aborts and fsyncs leading to use-after-free in btrfs (bsc#1220521).
CVE-2021-46959: Fixed use-after-free with devm_spi_alloc_* (bsc#1220734).
CVE-2021-46960: Fixed a warning on smb2_get_enc_key in cifs (bsc#1220528).
CVE-2021-46961: Fixed spurious interrup handling (bsc#1220529).
CVE-2021-46962: Fixed a resource leak in the remove function in mmc uniphier-sd (bsc#1220532).
CVE-2021-46963: Fixed crash in qla2xxx_mqueuecommand() (bsc#1220536).
CVE-2021-46971: Fixed unconditional security_locked_down() call (bsc#1220697).
CVE-2021-46976: Fixed crash in auto_retire in drm/i915 (bsc#1220621).
CVE-2021-46980: Fixed not retrieving all the PDOs instead of just the first 4 in usb/typec/ucsi (bsc#1220663).
CVE-2021-46981: Fixed a NULL pointer in flush_workqueue in nbd (bsc#1220611).
CVE-2021-46983: Fixed NULL pointer dereference when SEND is completed with error (bsc#1220639).
CVE-2021-46984: Fixed an out of bounds access in kyber_bio_merge() in kyber (bsc#1220631).
CVE-2021-46988: Fixed release page in error path to avoid BUG_ON (bsc#1220706).
CVE-2021-46990: Fixed a denial of service when toggling entry flush barrier in powerpc/64s (bsc#1220743).
CVE-2021-46991: Fixed a use-after-free in i40e_client_subtask (bsc#1220575).
CVE-2021-46992: Fixed a bug to avoid overflows in nft_hash_buckets (bsc#1220638).
CVE-2021-46998: Fixed an use after free bug in enic_hard_start_xmit in ethernet/enic (bsc#1220625).
CVE-2021-47000: Fixed an inode leak on getattr error in __fh_to_dentry in ceph (bsc#1220669).
CVE-2021-47001: Fixed cwnd update ordering in xprtrdma (bsc#1220670).
CVE-2021-47003: Fixed…

Record: SUSE-SU-2024:1465-1
Updated: 2026-11-02

OSVSUSE-SU-2024:1466-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security bugfixes.

NOTE: This update has been retracted due to a bug in the BHI CPU sidechannel mitigation, which led to incorrect selection of other CPU mitigations.

The following security bugs were fixed:

CVE-2021-46925: Fixed kernel panic caused by race of smc_sock (bsc#1220466).
CVE-2021-46926: Fixed bug when detecting controllers in ALSA/hda/intel-sdw-acpi (bsc#1220478).
CVE-2021-46927: Fixed assertion bug in nitro_enclaves: Use get_user_pages_unlocked() (bsc#1220443).
CVE-2021-46929: Fixed use-after-free issue in sctp_sock_dump() (bsc#1220482).
CVE-2021-46930: Fixed usb/mtu3 list_head check warning (bsc#1220484).
CVE-2021-46931: Fixed wrong type casting in mlx5e_tx_reporter_dump_sq() (bsc#1220486).
CVE-2021-46933: Fixed possible underflow in ffs_data_clear() (bsc#1220487).
CVE-2021-46934: Fixed a bug by validating user data in compat ioctl (bsc#1220469).
CVE-2021-46936: Fixed use-after-free in tw_timer_handler() (bsc#1220439).
CVE-2021-47082: Fixed ouble free in tun_free_netdev() (bsc#1220969).
CVE-2021-47083: Fixed a global-out-of-bounds issue in mediatek: (bsc#1220917).
CVE-2021-47087: Fixed incorrect page free bug in tee/optee (bsc#1220954).
CVE-2021-47091: Fixed locking in ieee80211_start_ap()) error path (bsc#1220959).
CVE-2021-47093: Fixed memleak on registration failure in intel_pmc_core (bsc#1220978).
CVE-2021-47094: Fixed possible memory leak in KVM x86/mmu (bsc#1221551).
CVE-2021-47095: Fixed missing initialization in ipmi/ssif (bsc#1220979).
CVE-2021-47096: Fixed uninitalized user_pversion in ALSA rawmidi (bsc#1220981).
CVE-2021-47097: Fixed stack out of bound access in elantech_change_report_id() (bsc#1220982).
CVE-2021-47098: Fixed integer overflow/underflow in hysteresis calculations hwmon: (lm90) (bsc#1220983).
CVE-2021-47099: Fixed BUG_ON assertion in veth when skb entering GRO are cloned (bsc#1220955).
CVE-2021-47100: Fixed UAF when uninstall in ipmi (bsc#1220985).
CVE-2021-47101: Fixed uninit-value in asix_mdio_read() (bsc#1220987).
CVE-2021-47102: Fixed incorrect structure access In line: upper = info->upper_dev in net/marvell/prestera (bsc#1221009).
CVE-2021-47104: Fixed memory leak in qib_user_sdma_queue_pkts() (bsc#1220960).
CVE-2021-47105: Fixed potential memory leak in ice/xsk (bsc#1220961).
CVE-2021-47107: Fixed READDIR buffer overflow in NFSD (bsc#1220965).
CVE-2021-47108: Fixed possible NULL pointer dereference for mtk_hdmi_conf in drm/mediatek (bsc#1220986).
CVE-2022-4744: Fixed double-free that could lead to DoS or privilege escalation in TUN/TAP device driver functionality (bsc#1209635).
CVE-2022-48626: Fixed a potential use-after-free on remove path moxart (bsc#1220366).
CVE-2022-48627: Fixed a memory overlapping when deleting chars in the buffer (bsc#1220845).
CVE-2022-48628: Fixed possible lock in ceph (bsc#1220848).
CVE-2022-48629: Fixed possible memory leak in qcom-rng (bsc#1220989).
CVE-2022-48630: Fixed infinite loop on requests not multiple of WORD_SZ in crypto: qcom-rng (bsc#1220990).
CVE-2023-0160: Fixed deadlock flaw in BPF that could allow a local user to potentially crash the system (bsc#1209657).
CVE-2023-28746: Fixed Register File Data Sampling (bsc#1213456).
CVE-2023-35827: Fixed a use-after-free issue in ravb_tx_timeout_work() (bsc#1212514).
CVE-2023-4881: Fixed a out-of-bounds write flaw in the netfilter subsystem that could lead to potential information disclosure or a denial of service (bsc#1215221).
CVE-2023-52447: Fixed map_fd_put_ptr() signature kABI workaround (bsc#1220251).
CVE-2023-52450: Fixed NULL pointer dereference issue in upi_fill_topology() (bsc#1220237).
CVE-2023-52453: Fixed data corruption in hisi_acc_vfio_pci (bsc#1220337).
CVE-2023-52454: Fixed a kernel panic when host sends an invalid H2C PDU length (bsc#1220320).
CVE-2023-52462: Fixed check for attempt to corrupt spilled pointer…

Record: SUSE-SU-2024:1466-1
Updated: 2026-11-02

OSVSUSE-SU-2024:1480-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2021-46925: Fixed kernel panic caused by race of smc_sock (bsc#1220466).
CVE-2021-46926: Fixed bug when detecting controllers in ALSA/hda/intel-sdw-acpi (bsc#1220478).
CVE-2021-46927: Fixed assertion bug in nitro_enclaves: Use get_user_pages_unlocked() (bsc#1220443).
CVE-2021-46929: Fixed use-after-free issue in sctp_sock_dump() (bsc#1220482).
CVE-2021-46930: Fixed usb/mtu3 list_head check warning (bsc#1220484).
CVE-2021-46931: Fixed wrong type casting in mlx5e_tx_reporter_dump_sq() (bsc#1220486).
CVE-2021-46933: Fixed possible underflow in ffs_data_clear() (bsc#1220487).
CVE-2021-46934: Fixed a bug by validating user data in compat ioctl (bsc#1220469).
CVE-2021-46936: Fixed use-after-free in tw_timer_handler() (bsc#1220439).
CVE-2021-47082: Fixed ouble free in tun_free_netdev() (bsc#1220969).
CVE-2021-47083: Fixed a global-out-of-bounds issue in mediatek: (bsc#1220917).
CVE-2021-47087: Fixed incorrect page free bug in tee/optee (bsc#1220954).
CVE-2021-47091: Fixed locking in ieee80211_start_ap()) error path (bsc#1220959).
CVE-2021-47093: Fixed memleak on registration failure in intel_pmc_core (bsc#1220978).
CVE-2021-47094: Fixed possible memory leak in KVM x86/mmu (bsc#1221551).
CVE-2021-47095: Fixed missing initialization in ipmi/ssif (bsc#1220979).
CVE-2021-47096: Fixed uninitalized user_pversion in ALSA rawmidi (bsc#1220981).
CVE-2021-47097: Fixed stack out of bound access in elantech_change_report_id() (bsc#1220982).
CVE-2021-47098: Fixed integer overflow/underflow in hysteresis calculations hwmon: (lm90) (bsc#1220983).
CVE-2021-47099: Fixed BUG_ON assertion in veth when skb entering GRO are cloned (bsc#1220955).
CVE-2021-47100: Fixed UAF when uninstall in ipmi (bsc#1220985).
CVE-2021-47101: Fixed uninit-value in asix_mdio_read() (bsc#1220987).
CVE-2021-47102: Fixed incorrect structure access In line: upper = info->upper_dev in net/marvell/prestera (bsc#1221009).
CVE-2021-47104: Fixed memory leak in qib_user_sdma_queue_pkts() (bsc#1220960).
CVE-2021-47105: Fixed potential memory leak in ice/xsk (bsc#1220961).
CVE-2021-47107: Fixed READDIR buffer overflow in NFSD (bsc#1220965).
CVE-2021-47108: Fixed possible NULL pointer dereference for mtk_hdmi_conf in drm/mediatek (bsc#1220986).
CVE-2022-4744: Fixed double-free that could lead to DoS or privilege escalation in TUN/TAP device driver functionality (bsc#1209635).
CVE-2022-48626: Fixed a potential use-after-free on remove path moxart (bsc#1220366).
CVE-2022-48627: Fixed a memory overlapping when deleting chars in the buffer (bsc#1220845).
CVE-2022-48628: Fixed possible lock in ceph (bsc#1220848).
CVE-2022-48629: Fixed possible memory leak in qcom-rng (bsc#1220989).
CVE-2022-48630: Fixed infinite loop on requests not multiple of WORD_SZ in crypto: qcom-rng (bsc#1220990).
CVE-2023-0160: Fixed deadlock flaw in BPF that could allow a local user to potentially crash the system (bsc#1209657).
CVE-2023-28746: Fixed Register File Data Sampling (bsc#1213456).
CVE-2023-35827: Fixed a use-after-free issue in ravb_tx_timeout_work() (bsc#1212514).
CVE-2023-4881: Fixed a out-of-bounds write flaw in the netfilter subsystem that could lead to potential information disclosure or a denial of service (bsc#1215221).
CVE-2023-52447: Fixed map_fd_put_ptr() signature kABI workaround (bsc#1220251).
CVE-2023-52450: Fixed NULL pointer dereference issue in upi_fill_topology() (bsc#1220237).
CVE-2023-52453: Fixed data corruption in hisi_acc_vfio_pci (bsc#1220337).
CVE-2023-52454: Fixed a kernel panic when host sends an invalid H2C PDU length (bsc#1220320).
CVE-2023-52462: Fixed check for attempt to corrupt spilled pointer (bsc#1220325).
CVE-2023-52463: Fixed null pointer dereference in efivarfs (bsc#1220328).
CVE-2023-52467: Fixed a null pointer dereference in of_syscon_register…

Record: SUSE-SU-2024:1480-1
Updated: 2026-11-02

OSVSUSE-SU-2024:1489-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP3 LTSS kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2020-36781: Fixed reference leak when pm_runtime_get_sync fails in i2c/imx (bsc#1220557).
CVE-2021-46911: Fixed kernel panic (bsc#1220400).
CVE-2021-46914: Fixed unbalanced device enable/disable in suspend/resume in pci_disable_device() (bsc#1220465).
CVE-2021-46917: Fixed wq cleanup of WQCFG registers in idxd (bsc#1220432).
CVE-2021-46918: Fixed not clearing MSIX permission entry on shutdown in idxd (bsc#1220429).
CVE-2021-46919: Fixed wq size store permission state in idxd (bsc#1220414).
CVE-2021-46920: Fixed clobbering of SWERR overflow bit on writeback (bsc#1220426).
CVE-2021-46922: Fixed TPM reservation for seal/unseal (bsc#1220475).
CVE-2021-46930: Fixed usb/mtu3 list_head check warning (bsc#1220484).
CVE-2021-46931: Fixed wrong type casting in mlx5e_tx_reporter_dump_sq() (bsc#1220486).
CVE-2021-46933: Fixed possible underflow in ffs_data_clear() (bsc#1220487).
CVE-2021-46956: Fixed memory leak in virtio_fs_probe() (bsc#1220516).
CVE-2021-46959: Fixed use-after-free with devm_spi_alloc_* (bsc#1220734).
CVE-2021-46961: Fixed spurious interrup handling (bsc#1220529).
CVE-2021-46971: Fixed unconditional security_locked_down() call (bsc#1220697).
CVE-2021-46976: Fixed crash in auto_retire in drm/i915 (bsc#1220621).
CVE-2021-46980: Fixed not retrieving all the PDOs instead of just the first 4 in usb/typec/ucsi (bsc#1220663).
CVE-2021-46983: Fixed NULL pointer dereference when SEND is completed with error (bsc#1220639).
CVE-2021-46988: Fixed release page in error path to avoid BUG_ON (bsc#1220706).
CVE-2021-47001: Fixed cwnd update ordering in xprtrdma (bsc#1220670).
CVE-2021-47003: Fixed potential null dereference on pointer status in idxd_cmd_exec (bsc#1220677).
CVE-2021-47009: Fixed memory leak on object td (bsc#1220733).
CVE-2021-47014: Fixed wild memory access when clearing fragments in net/sched/act_ct (bsc#1220630).
CVE-2021-47017: Fixed use after free in ath10k_htc_send_bundle (bsc#1220678).
CVE-2021-47026: Fixed not destroying sysfs after removing session from active list (bsc#1220685).
CVE-2021-47035: Fixed wrong WO permissions on second-level paging entries in iommu/vt-d (bsc#1220688).
CVE-2021-47038: Fixed deadlock between hci_dev->lock and socket lock in bluetooth (bsc#1220753).
CVE-2021-47044: Fixed shift-out-of-bounds in load_balance() in sched/fair (bsc#1220759).
CVE-2021-47046: Fixed off by one in hdmi_14_process_transaction() (bsc#1220758).
CVE-2021-47087: Fixed incorrect page free bug in tee/optee (bsc#1220954).
CVE-2021-47095: Fixed missing initialization in ipmi/ssif (bsc#1220979).
CVE-2021-47097: Fixed stack out of bound access in elantech_change_report_id() (bsc#1220982).
CVE-2021-47100: Fixed UAF when uninstall in ipmi (bsc#1220985).
CVE-2021-47101: Fixed uninit-value in asix_mdio_read() (bsc#1220987).
CVE-2021-47109: Fixed NUD_NOARP entries to be forced GCed (bsc#1221534).
CVE-2021-47130: Fixed freeing unallocated p2pmem in nvmet (bsc#1221552).
CVE-2021-47137: Fixed memory corruption in RX ring in net/lantiq (bsc#1221932).
CVE-2021-47150: Fixed the potential memory leak in fec_enet_init() (bsc#1221973).
CVE-2021-47160: Fixed VLAN traffic leaks in dsa: mt7530 (bsc#1221974).
CVE-2021-47164: Fixed null pointer dereference accessing lag dev in net/mlx5e (bsc#1221978).
CVE-2021-47174: Fixed missing check in irq_fpu_usable() (bsc#1221990).
CVE-2021-47175: Fixed OOB access in net/sched/fq_pie (bsc#1222003).
CVE-2021-47181: Fixed a null pointer dereference caused by calling platform_get_resource() (bsc#1222660).
CVE-2021-47183: Fixed a null pointer dereference during link down processing in scsi lpfc (bsc#1192145, bsc#1222664).
CVE-2021-47185: Fixed a softlockup issue in flush_to_ldisc in tty tty_buffer (bsc#1222669).
CVE-2021-47189: Fixed denial of service due to memory…

Record: SUSE-SU-2024:1489-1
Updated: 2026-11-02

OSVSUSE-SU-2024:1490-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2021-46925: Fixed kernel panic caused by race of smc_sock (bsc#1220466).
CVE-2021-46926: Fixed bug when detecting controllers in ALSA/hda/intel-sdw-acpi (bsc#1220478).
CVE-2021-46927: Fixed assertion bug in nitro_enclaves: Use get_user_pages_unlocked() (bsc#1220443).
CVE-2021-46929: Fixed use-after-free issue in sctp_sock_dump() (bsc#1220482).
CVE-2021-46930: Fixed usb/mtu3 list_head check warning (bsc#1220484).
CVE-2021-46931: Fixed wrong type casting in mlx5e_tx_reporter_dump_sq() (bsc#1220486).
CVE-2021-46933: Fixed possible underflow in ffs_data_clear() (bsc#1220487).
CVE-2021-46936: Fixed use-after-free in tw_timer_handler() (bsc#1220439).
CVE-2021-47082: Fixed ouble free in tun_free_netdev() (bsc#1220969).
CVE-2021-47087: Fixed incorrect page free bug in tee/optee (bsc#1220954).
CVE-2021-47091: Fixed locking in ieee80211_start_ap()) error path (bsc#1220959).
CVE-2021-47093: Fixed memleak on registration failure in intel_pmc_core (bsc#1220978).
CVE-2021-47094: Fixed possible memory leak in KVM x86/mmu (bsc#1221551).
CVE-2021-47095: Fixed missing initialization in ipmi/ssif (bsc#1220979).
CVE-2021-47096: Fixed uninitalized user_pversion in ALSA rawmidi (bsc#1220981).
CVE-2021-47097: Fixed stack out of bound access in elantech_change_report_id() (bsc#1220982).
CVE-2021-47098: Fixed integer overflow/underflow in hysteresis calculations hwmon: (lm90) (bsc#1220983).
CVE-2021-47099: Fixed BUG_ON assertion in veth when skb entering GRO are cloned (bsc#1220955).
CVE-2021-47100: Fixed UAF when uninstall in ipmi (bsc#1220985).
CVE-2021-47101: Fixed uninit-value in asix_mdio_read() (bsc#1220987).
CVE-2021-47102: Fixed incorrect structure access In line: upper = info->upper_dev in net/marvell/prestera (bsc#1221009).
CVE-2021-47104: Fixed memory leak in qib_user_sdma_queue_pkts() (bsc#1220960).
CVE-2021-47105: Fixed potential memory leak in ice/xsk (bsc#1220961).
CVE-2021-47107: Fixed READDIR buffer overflow in NFSD (bsc#1220965).
CVE-2021-47108: Fixed possible NULL pointer dereference for mtk_hdmi_conf in drm/mediatek (bsc#1220986).
CVE-2021-47181: Fixed a null pointer dereference caused by calling platform_get_resource() (bsc#1222660).
CVE-2021-47182: Fixed buffer length handling in scsi_mode_sense() in scsi core (bsc#1222662).
CVE-2021-47183: Fixed a null pointer dereference during link down processing in scsi lpfc (bsc#1192145, bsc#1222664).
CVE-2021-47185: Fixed a softlockup issue in flush_to_ldisc in tty tty_buffer (bsc#1222669).
CVE-2021-47189: Fixed denial of service due to memory ordering issues between normal and ordered work functions in btrfs (bsc#1222706).
CVE-2022-4744: Fixed double-free that could lead to DoS or privilege escalation in TUN/TAP device driver functionality (bsc#1209635).
CVE-2022-48626: Fixed a potential use-after-free on remove path moxart (bsc#1220366).
CVE-2022-48629: Fixed possible memory leak in qcom-rng (bsc#1220989).
CVE-2022-48630: Fixed infinite loop on requests not multiple of WORD_SZ in crypto: qcom-rng (bsc#1220990).
CVE-2023-0160: Fixed deadlock flaw in BPF that could allow a local user to potentially crash the system (bsc#1209657).
CVE-2023-28746: Fixed Register File Data Sampling (bsc#1213456).
CVE-2023-35827: Fixed a use-after-free issue in ravb_tx_timeout_work() (bsc#1212514).
CVE-2023-4881: Fixed a out-of-bounds write flaw in the netfilter subsystem that could lead to potential information disclosure or a denial of service (bsc#1215221).
CVE-2023-52447: Fixed map_fd_put_ptr() signature kABI workaround (bsc#1220251).
CVE-2023-52450: Fixed NULL pointer dereference issue in upi_fill_topology() (bsc#1220237).
CVE-2023-52453: Fixed data corruption in hisi_acc_vfio_pci (bsc#1220337).
CVE-2023-52454: Fixed a kernel panic when host sends an invalid H2C PDU length…

Record: SUSE-SU-2024:1490-1
Updated: 2026-11-02

OSVSUSE-SU-2024:1643-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2019-25160: Fixed out-of-bounds memory accesses in netlabel (bsc#1220394).
CVE-2020-36312: Fixed an issue in virt/kvm/kvm_main.c that had a kvm_io_bus_unregister_dev memory leak upon a kmalloc failure (bsc#1184509).
CVE-2021-23134: Fixed a use-after-free issue in nfc sockets (bsc#1186060).
CVE-2021-46904: Fixed NULL pointer dereference during tty device unregistration (bsc#1220416).
CVE-2021-46905: Fixed NULL pointer dereference on disconnect regression (bsc#1220418).
CVE-2021-46909: Fixed a PCI interrupt mapping in ARM footbridge (bsc#1220442).
CVE-2021-46938: Fixed a double free of blk_mq_tag_set in dev remove after table load fails in dm rq (bsc#1220554).
CVE-2021-46939: Fixed a denial of service in trace_clock_global() in tracing (bsc#1220580).
CVE-2021-46941: Fixed core softreset when switch mode in usb dwc3 (bsc#1220628).
CVE-2021-46950: Fixed a data corruption bug in raid1 arrays using bitmaps in md/raid1 (bsc#1220662).
CVE-2021-46955: Fixed an out-of-bounds read with openvswitch, when fragmenting IPv4 packets (bsc#1220513).
CVE-2021-46958: Fixed a race between transaction aborts and fsyncs leading to use-after-free in btrfs (bsc#1220521).
CVE-2021-46960: Fixed a warning on smb2_get_enc_key in cifs (bsc#1220528).
CVE-2021-46963: Fixed crash in qla2xxx_mqueuecommand() (bsc#1220536).
CVE-2021-46964: Fixed unreserved extra IRQ vectors in qla2xxx (bsc#1220538).
CVE-2021-46966: Fixed potential use-after-free issue in cm_write() (bsc#1220572).
CVE-2021-46981: Fixed a NULL pointer in flush_workqueue in nbd (bsc#1220611).
CVE-2021-46988: Fixed release page in error path to avoid BUG_ON (bsc#1220706).
CVE-2021-46990: Fixed a denial of service when toggling entry flush barrier in powerpc/64s (bsc#1220743).
CVE-2021-46998: Fixed an use after free bug in enic_hard_start_xmit in ethernet/enic (bsc#1220625).
CVE-2021-47006: Fixed wrong check in overflow_handler hook in ARM 9064/1 hw_breakpoint (bsc#1220751).
CVE-2021-47015: Fixed a RX consumer index logic in the error path in bnxt_rx_pkt() in bnxt_en (bsc#1220794).
CVE-2021-47024: Fixed possible memory leak in vsock/virtio when closing socket (bsc#1220637).
CVE-2021-47034: Fixed a kernel memory fault for pte update on radix in powerpc/64s (bsc#1220687).
CVE-2021-47045: Fixed a null pointer dereference in lpfc_prep_els_iocb() in scsi lpfc (bsc#1220640).
CVE-2021-47049: Fixed an after free in __vmbus_open() in hv vmbus (bsc#1220692).
CVE-2021-47055: Fixed missing permissions for locking and badblock ioctls in mtd (bsc#1220768).
CVE-2021-47056: Fixed a user-memory-access error on vf2pf_lock in crypto (bsc#1220769).
CVE-2021-47060: Fixed a bug in KVM by stop looking for coalesced MMIO zones if the bus is destroyed (bsc#1220742).
CVE-2021-47061: Fixed a bug in KVM by destroy I/O bus devices on unregister failure after sync'ing SRCU (bsc#1220745).
CVE-2021-47063: Fixed a potential use-after-free during bridge detach in drm bridge/panel (bsc#1220777).
CVE-2021-47068: Fixed a use-after-free issue in llcp_sock_bind/connect (bsc#1220739).
CVE-2021-47070: Fixed memory leak in error handling paths in uio_hv_generic (bsc#1220829).
CVE-2021-47071: Fixed a memory leak in error handling paths in hv_uio_cleanup() in uio_hv_generic (bsc#1220846).
CVE-2021-47073: Fixed oops on rmmod dell_smbios init_dell_smbios_wmi() (bsc#1220850).
CVE-2021-47100: Fixed UAF when uninstall in ipmi (bsc#1220985).
CVE-2021-47101: Fixed uninit-value in asix_mdio_read() (bsc#1220987).
CVE-2021-47104: Fixed memory leak in qib_user_sdma_queue_pkts() (bsc#1220960).
CVE-2021-47110: Fixed possible memory corruption when restoring from hibernation in x86/kvm (bsc#1221532).
CVE-2021-47112: Fixed possible memory corruption when restoring from hibernation in x86/kvm (bsc#1221541).
CVE-2021-47113: Abort…

Record: SUSE-SU-2024:1643-1
Updated: 2026-11-02

OSVSUSE-SU-2024:1646-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2019-25160: Fixed out-of-bounds memory accesses in netlabel (bsc#1220394).
CVE-2021-46904: Fixed NULL pointer dereference during tty device unregistration (bsc#1220416).
CVE-2021-46905: Fixed NULL pointer dereference on disconnect regression (bsc#1220418).
CVE-2021-46909: Fixed a PCI interrupt mapping in ARM footbridge (bsc#1220442).
CVE-2021-46938: Fixed a double free of blk_mq_tag_set in dev remove after table load fails in dm rq (bsc#1220554).
CVE-2021-46939: Fixed a denial of service in trace_clock_global() in tracing (bsc#1220580).
CVE-2021-46941: Fixed core softreset when switch mode in usb dwc3 (bsc#1220628).
CVE-2021-46950: Fixed a data corruption bug in raid1 arrays using bitmaps in md/raid1 (bsc#1220662).
CVE-2021-46958: Fixed a race between transaction aborts and fsyncs leading to use-after-free in btrfs (bsc#1220521).
CVE-2021-46960: Fixed a warning on smb2_get_enc_key in cifs (bsc#1220528).
CVE-2021-46963: Fixed crash in qla2xxx_mqueuecommand() (bsc#1220536).
CVE-2021-46964: Fixed unreserved extra IRQ vectors in qla2xxx (bsc#1220538).
CVE-2021-46966: Fixed potential use-after-free issue in cm_write() (bsc#1220572).
CVE-2021-46981: Fixed a NULL pointer in flush_workqueue in nbd (bsc#1220611).
CVE-2021-46988: Fixed release page in error path to avoid BUG_ON (bsc#1220706).
CVE-2021-46990: Fixed a denial of service when toggling entry flush barrier in powerpc/64s (bsc#1220743).
CVE-2021-46998: Fixed an use after free bug in enic_hard_start_xmit in ethernet/enic (bsc#1220625).
CVE-2021-47006: Fixed wrong check in overflow_handler hook in ARM 9064/1 hw_breakpoint (bsc#1220751).
CVE-2021-47015: Fixed a RX consumer index logic in the error path in bnxt_rx_pkt() in bnxt_en (bsc#1220794).
CVE-2021-47024: Fixed possible memory leak in vsock/virtio when closing socket (bsc#1220637).
CVE-2021-47034: Fixed a kernel memory fault for pte update on radix in powerpc/64s (bsc#1220687).
CVE-2021-47045: Fixed a null pointer dereference in lpfc_prep_els_iocb() in scsi lpfc (bsc#1220640).
CVE-2021-47049: Fixed an after free in __vmbus_open() in hv vmbus (bsc#1220692).
CVE-2021-47055: Fixed missing permissions for locking and badblock ioctls in mtd (bsc#1220768).
CVE-2021-47056: Fixed a user-memory-access error on vf2pf_lock in crypto (bsc#1220769).
CVE-2021-47060: Fixed a bug in KVM by stop looking for coalesced MMIO zones if the bus is destroyed (bsc#1220742).
CVE-2021-47061: Fixed a bug in KVM by destroy I/O bus devices on unregister failure after sync'ing SRCU (bsc#1220745).
CVE-2021-47063: Fixed a potential use-after-free during bridge detach in drm bridge/panel (bsc#1220777).
CVE-2021-47068: Fixed a use-after-free issue in llcp_sock_bind/connect (bsc#1220739).
CVE-2021-47070: Fixed memory leak in error handling paths in uio_hv_generic (bsc#1220829).
CVE-2021-47071: Fixed a memory leak in error handling paths in hv_uio_cleanup() in uio_hv_generic (bsc#1220846).
CVE-2021-47073: Fixed oops on rmmod dell_smbios init_dell_smbios_wmi() (bsc#1220850).
CVE-2021-47100: Fixed UAF when uninstall in ipmi (bsc#1220985).
CVE-2021-47101: Fixed uninit-value in asix_mdio_read() (bsc#1220987).
CVE-2021-47104: Fixed memory leak in qib_user_sdma_queue_pkts() (bsc#1220960).
CVE-2021-47110: Fixed possible memory corruption when restoring from hibernation in x86/kvm (bsc#1221532).
CVE-2021-47112: Fixed possible memory corruption when restoring from hibernation in x86/kvm (bsc#1221541).
CVE-2021-47114: Fixed a data corruption by fallocate in ocfs2 (bsc#1221548).
CVE-2021-47117: Fixed a crash in ext4_es_cache_extent as ext4_split_extent_at failed in ext4 (bsc#1221575).
CVE-2021-47118: Fixed an use-after-free in init task's struct pid in pid (bsc#1221605).
CVE-2021-47119: Fixed a memory leak in ext4_fill_super in ext4 (bsc#1221608). -…

Record: SUSE-SU-2024:1646-1
Updated: 2026-11-02

OSVSUSE-SU-2024:1870-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2019-25160: Fixed out-of-bounds memory accesses in netlabel (bsc#1220394).
CVE-2020-36312: Fixed an issue in virt/kvm/kvm_main.c that had a kvm_io_bus_unregister_dev memory leak upon a kmalloc failure (bsc#1184509).
CVE-2021-23134: Fixed a use-after-free issue in nfc sockets (bsc#1186060).
CVE-2021-46904: Fixed NULL pointer dereference during tty device unregistration (bsc#1220416).
CVE-2021-46905: Fixed NULL pointer dereference on disconnect regression (bsc#1220418).
CVE-2021-46909: Fixed PCI interrupt mapping in ARM footbridge (bsc#1220442).
CVE-2021-46938: Fixed double free of blk_mq_tag_set in dev remove after table load fails (bsc#1220554).
CVE-2021-46939: Fixed possible hung in trace_clock_global() (bsc#1220580).
CVE-2021-46941: Fixed core softreset when switch mode in usb dwc3 (bsc#1220628).
CVE-2021-46950: Fixed possible data corruption in md/raid1 when ending a failed write request (bsc#1220662).
CVE-2021-46958: Fixed race between transaction aborts and fsyncs that could lead to use-after-free in btrfs (bsc#1220521).
CVE-2021-46960: Fixed wrong error code from smb2_get_enc_key() (bsc#1220528).
CVE-2021-46963: Fixed crash in qla2xxx_mqueuecommand() (bsc#1220536).
CVE-2021-46964: Fixed unreserved extra IRQ vectors in qla2xxx (bsc#1220538).
CVE-2021-46966: Fixed potential use-after-free issue in cm_write() (bsc#1220572).
CVE-2021-46981: Fixed NULL pointer in flush_workqueue (bsc#1220611).
CVE-2021-46988: Fixed possible crash in userfaultfd due to unreleased page (bsc#1220706).
CVE-2021-46990: Fixed crashes when toggling entry flush barrier in powerpc/64s (bsc#1220743).
CVE-2021-46998: Fixed a use after free bug in enic_hard_start_xmit() (bsc#1220625).
CVE-2021-47006: Fixed wrong check in overflow_handler hook in ARM 9064/1 hw_breakpoint (bsc#1220751).
CVE-2021-47015: Fixed RX consumer index logic in the error path in bnxt_en (bsc#1220794).
CVE-2021-47024: Fixed possible memory leak in vsock/virtio when closing socket (bsc#1220637).
CVE-2021-47034: Fixed resolved pte update for kernel memory on radix in powerpc/64s (bsc#1220687).
CVE-2021-47045: Fixed null pointer dereference in lpfc_prep_els_iocb() (bsc#1220640).
CVE-2021-47049: Fixed Use after free in __vmbus_open() (bsc#1220692).
CVE-2021-47055: Fixed missing permissions for locking and badblock ioctls in mtd (bsc#1220768).
CVE-2021-47056: Fixed uninitialized lock in adf_vf2pf_shutdown() (bsc#1220769).
CVE-2021-47060: Fixed a bug in KVM by stop looking for coalesced MMIO zones if the bus is destroyed (bsc#1220742).
CVE-2021-47061: Fixed a bug in KVM by destroy I/O bus devices on unregister failure after sync'ing SRCU (bsc#1220745).
CVE-2021-47063: Fixed possible use-after-free in panel_bridge_detach() (bsc#1220777).
CVE-2021-47068: Fixed a use-after-free issue in llcp_sock_bind/connect (bsc#1220739).
CVE-2021-47070: Fixed memory leak in error handling paths in uio_hv_generic (bsc#1220829).
CVE-2021-47071: Fixed memory leak in error handling paths in uio_hv_generic (bsc#1220846).
CVE-2021-47073: Fixed oops on rmmod dell_smbios init_dell_smbios_wmi() (bsc#1220850).
CVE-2021-47100: Fixed UAF when uninstall in ipmi (bsc#1220985).
CVE-2021-47101: Fixed uninit-value in asix_mdio_read() (bsc#1220987).
CVE-2021-47104: Fixed memory leak in qib_user_sdma_queue_pkts() (bsc#1220960).
CVE-2021-47110: Fixed possible memory corruption when restoring from hibernation in x86/kvm (bsc#1221532).
CVE-2021-47112: Fixed possible memory corruption when restoring from hibernation in x86/kvm (bsc#1221541).
CVE-2021-47114: Fixed data corruption by fallocate in ocfs2 (bsc#1221548).
CVE-2021-47117: Fixed bug on in ext4_es_cache_extent() as ext4_split_extent_at() failed (bsc#1221575).
CVE-2021-47118: Fixed possible use-after-free when initializing cad_pid (bsc#1221605). -…

Record: SUSE-SU-2024:1870-1
Updated: 2026-11-02

OSVUSN-7727-1 No score

linux, linux-aws, linux-kvm, linux-lts-xenial vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

InfiniBand drivers;
Media drivers;
SPI subsystem;
USB core drivers;
NILFS2 file system;
IPv6 networking;
Network traffic control; (CVE-2024-50051, CVE-2025-37752, CVE-2024-53130, CVE-2024-47685, CVE-2024-27074, CVE-2023-52477, CVE-2024-50202, CVE-2021-47345, CVE-2024-57996, CVE-2024-53131)

Record: USN-7727-1
Updated: 2026-11-02

OSVUSN-7727-2 No score

linux-fips vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

InfiniBand drivers;
Media drivers;
SPI subsystem;
USB core drivers;
NILFS2 file system;
IPv6 networking;
Network traffic control; (CVE-2024-50051, CVE-2025-37752, CVE-2024-53130, CVE-2024-47685, CVE-2024-27074, CVE-2023-52477, CVE-2024-50202, CVE-2021-47345, CVE-2024-57996, CVE-2024-53131)

Record: USN-7727-2
Updated: 2026-11-02

OSVUSN-7727-3 No score

linux-aws vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

InfiniBand drivers;
Media drivers;
SPI subsystem;
USB core drivers;
NILFS2 file system;
IPv6 networking;
Network traffic control; (CVE-2024-50051, CVE-2025-37752, CVE-2024-53130, CVE-2024-47685, CVE-2024-27074, CVE-2023-52477, CVE-2024-50202, CVE-2021-47345, CVE-2024-57996, CVE-2024-53131)

Record: USN-7727-3
Updated: 2026-11-02

OSVUSN-7755-1 No score

linux, linux-aws, linux-aws-hwe, linux-azure, linux-azure-4.15, linux-gcp, linux-gcp-4.15, linux-hwe, linux-kvm, linux-oracle vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

Media drivers;
SPI subsystem;
USB core drivers;
NILFS2 file system;
IPv6 networking;
Network traffic control; (CVE-2024-53130, CVE-2025-38350, CVE-2024-50202, CVE-2024-47685, CVE-2025-37752, CVE-2024-50051, CVE-2024-57996, CVE-2023-52477, CVE-2024-27074, CVE-2024-53131)

Record: USN-7755-1
Updated: 2026-11-03

OSVUSN-7755-2 No score

linux-fips, linux-azure-fips, linux-gcp-fips vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

Media drivers;
SPI subsystem;
USB core drivers;
NILFS2 file system;
IPv6 networking;
Network traffic control; (CVE-2024-53130, CVE-2025-38350, CVE-2024-50202, CVE-2024-47685, CVE-2025-37752, CVE-2024-50051, CVE-2024-57996, CVE-2023-52477, CVE-2024-27074, CVE-2024-53131)

Record: USN-7755-2
Updated: 2026-11-03

OSVUSN-7755-3 No score

linux-aws-fips vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

Media drivers;
SPI subsystem;
USB core drivers;
NILFS2 file system;
IPv6 networking;
Network traffic control; (CVE-2025-38350, CVE-2024-47685, CVE-2024-57996, CVE-2024-53130, CVE-2025-37752, CVE-2023-52477, CVE-2024-53131, CVE-2024-50202, CVE-2024-27074, CVE-2024-50051)

Record: USN-7755-3
Updated: 2026-11-03

OSVUSN-7875-1 No score

linux-oracle vulnerabilities

Jean-Claude Graf, Sandro Rüegge, Ali Hajiabadi, and Kaveh Razavi discovered that the Linux kernel contained insufficient branch predictor isolation between a guest and a userspace hypervisor for certain processors. This flaw is known as VMSCAPE. An attacker in a guest VM could possibly use this to expose sensitive information from the host OS. (CVE-2025-40300)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

DMA engine subsystem;
GPU drivers;
HSI subsystem;
Media drivers;
Ethernet team driver;
SPI subsystem;
USB core drivers;
Framebuffer layer;
BTRFS file system;
Ext4 file system;
Network file system (NFS) server daemon;
NILFS2 file system;
Timer subsystem;
DCCP (Datagram Congestion Control Protocol);
IPv6 networking;
NET/ROM layer;
Packet sockets;
Network traffic control;
SCTP protocol;
VMware vSockets driver;
USB sound devices; (CVE-2023-52477, CVE-2023-52574, CVE-2023-52650, CVE-2024-27074, CVE-2024-35849, CVE-2024-41006, CVE-2024-47685, CVE-2024-49924, CVE-2024-50006, CVE-2024-50051, CVE-2024-50202, CVE-2024-50299, CVE-2024-53124, CVE-2024-53130, CVE-2024-53131, CVE-2024-53150, CVE-2024-56767, CVE-2024-57996, CVE-2025-21796, CVE-2025-37752, CVE-2025-37785, CVE-2025-37838, CVE-2025-38350, CVE-2025-38352, CVE-2025-38477, CVE-2025-38617, CVE-2025-38618)

Record: USN-7875-1
Updated: 2026-11-03

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`bpftool` AlmaLinux:8	before 4.18.0-553.5.1.el8_10	4.18.0-553.5.1.el8_10
`kernel` AlmaLinux:8	before 4.18.0-553.5.1.el8_10	4.18.0-553.5.1.el8_10
`kernel-abi-stablelists` AlmaLinux:8	before 4.18.0-553.5.1.el8_10	4.18.0-553.5.1.el8_10
`kernel-core` AlmaLinux:8	before 4.18.0-553.5.1.el8_10	4.18.0-553.5.1.el8_10
`kernel-cross-headers` AlmaLinux:8	before 4.18.0-553.5.1.el8_10	4.18.0-553.5.1.el8_10
`kernel-debug` AlmaLinux:8	before 4.18.0-553.5.1.el8_10	4.18.0-553.5.1.el8_10
`kernel-debug-core` AlmaLinux:8	before 4.18.0-553.5.1.el8_10	4.18.0-553.5.1.el8_10
`kernel-debug-devel` AlmaLinux:8	before 4.18.0-553.5.1.el8_10	4.18.0-553.5.1.el8_10
`kernel-debug-modules` AlmaLinux:8	before 4.18.0-553.5.1.el8_10	4.18.0-553.5.1.el8_10
`kernel-debug-modules-extra` AlmaLinux:8	before 4.18.0-553.5.1.el8_10	4.18.0-553.5.1.el8_10

Show 290 moreShow less

Affected packages
Package	Affected	Fixed
`kernel-devel` AlmaLinux:8	before 4.18.0-553.5.1.el8_10	4.18.0-553.5.1.el8_10
`kernel-doc` AlmaLinux:8	before 4.18.0-553.5.1.el8_10	4.18.0-553.5.1.el8_10
`kernel-headers` AlmaLinux:8	before 4.18.0-553.5.1.el8_10	4.18.0-553.5.1.el8_10
`kernel-modules` AlmaLinux:8	before 4.18.0-553.5.1.el8_10	4.18.0-553.5.1.el8_10
`kernel-modules-extra` AlmaLinux:8	before 4.18.0-553.5.1.el8_10	4.18.0-553.5.1.el8_10
`kernel-tools` AlmaLinux:8	before 4.18.0-553.5.1.el8_10	4.18.0-553.5.1.el8_10
`kernel-tools-libs` AlmaLinux:8	before 4.18.0-553.5.1.el8_10	4.18.0-553.5.1.el8_10
`kernel-tools-libs-devel` AlmaLinux:8	before 4.18.0-553.5.1.el8_10	4.18.0-553.5.1.el8_10
`kernel-zfcpdump` AlmaLinux:8	before 4.18.0-553.5.1.el8_10	4.18.0-553.5.1.el8_10
`kernel-zfcpdump-core` AlmaLinux:8	before 4.18.0-553.5.1.el8_10	4.18.0-553.5.1.el8_10
`kernel-zfcpdump-devel` AlmaLinux:8	before 4.18.0-553.5.1.el8_10	4.18.0-553.5.1.el8_10
`kernel-zfcpdump-modules` AlmaLinux:8	before 4.18.0-553.5.1.el8_10	4.18.0-553.5.1.el8_10
`kernel-zfcpdump-modules-extra` AlmaLinux:8	before 4.18.0-553.5.1.el8_10	4.18.0-553.5.1.el8_10
`perf` AlmaLinux:8	before 4.18.0-553.5.1.el8_10	4.18.0-553.5.1.el8_10
`python3-perf` AlmaLinux:8	before 4.18.0-553.5.1.el8_10	4.18.0-553.5.1.el8_10
`kernel-rt` AlmaLinux:8	before 4.18.0-553.5.1.rt7.346.el8_10	4.18.0-553.5.1.rt7.346.el8_10
`kernel-rt-core` AlmaLinux:8	before 4.18.0-553.5.1.rt7.346.el8_10	4.18.0-553.5.1.rt7.346.el8_10
`kernel-rt-debug` AlmaLinux:8	before 4.18.0-553.5.1.rt7.346.el8_10	4.18.0-553.5.1.rt7.346.el8_10
`kernel-rt-debug-core` AlmaLinux:8	before 4.18.0-553.5.1.rt7.346.el8_10	4.18.0-553.5.1.rt7.346.el8_10
`kernel-rt-debug-devel` AlmaLinux:8	before 4.18.0-553.5.1.rt7.346.el8_10	4.18.0-553.5.1.rt7.346.el8_10
`kernel-rt-debug-kvm` AlmaLinux:8	before 4.18.0-553.5.1.rt7.346.el8_10	4.18.0-553.5.1.rt7.346.el8_10
`kernel-rt-debug-modules` AlmaLinux:8	before 4.18.0-553.5.1.rt7.346.el8_10	4.18.0-553.5.1.rt7.346.el8_10
`kernel-rt-debug-modules-extra` AlmaLinux:8	before 4.18.0-553.5.1.rt7.346.el8_10	4.18.0-553.5.1.rt7.346.el8_10
`kernel-rt-devel` AlmaLinux:8	before 4.18.0-553.5.1.rt7.346.el8_10	4.18.0-553.5.1.rt7.346.el8_10
`kernel-rt-kvm` AlmaLinux:8	before 4.18.0-553.5.1.rt7.346.el8_10	4.18.0-553.5.1.rt7.346.el8_10
`kernel-rt-modules` AlmaLinux:8	before 4.18.0-553.5.1.rt7.346.el8_10	4.18.0-553.5.1.rt7.346.el8_10
`kernel-rt-modules-extra` AlmaLinux:8	before 4.18.0-553.5.1.rt7.346.el8_10	4.18.0-553.5.1.rt7.346.el8_10
`linux-lts` Alpaquita:23	6.1.56-r0 up to 6.1.62-r0	6.1.62-r0
`linux-lts` Alpaquita:stream	6.1.112-r0 up to 6.6.58-r0	6.6.58-r0
`bpftool` TuxCare:AlmaLinux:9.2	before 7.0.0-284.30.1.el9_2.tuxcare.els5	7.0.0-284.30.1.el9_2.tuxcare.els5
`kernel` TuxCare:AlmaLinux:9.2	before 5.14.0-284.30.1.el9_2.tuxcare.els5	5.14.0-284.30.1.el9_2.tuxcare.els5
`kernel-abi-stablelists` TuxCare:AlmaLinux:9.2	before 5.14.0-284.30.1.el9_2.tuxcare.els5	5.14.0-284.30.1.el9_2.tuxcare.els5
`kernel-core` TuxCare:AlmaLinux:9.2	before 5.14.0-284.30.1.el9_2.tuxcare.els5	5.14.0-284.30.1.el9_2.tuxcare.els5
`kernel-cross-headers` TuxCare:AlmaLinux:9.2	before 5.14.0-284.30.1.el9_2.tuxcare.els5	5.14.0-284.30.1.el9_2.tuxcare.els5
`kernel-debug` TuxCare:AlmaLinux:9.2	before 5.14.0-284.30.1.el9_2.tuxcare.els5	5.14.0-284.30.1.el9_2.tuxcare.els5
`kernel-debug-core` TuxCare:AlmaLinux:9.2	before 5.14.0-284.30.1.el9_2.tuxcare.els5	5.14.0-284.30.1.el9_2.tuxcare.els5
`kernel-debug-devel` TuxCare:AlmaLinux:9.2	before 5.14.0-284.30.1.el9_2.tuxcare.els5	5.14.0-284.30.1.el9_2.tuxcare.els5
`kernel-debug-devel-matched` TuxCare:AlmaLinux:9.2	before 5.14.0-284.30.1.el9_2.tuxcare.els5	5.14.0-284.30.1.el9_2.tuxcare.els5
`kernel-debug-modules` TuxCare:AlmaLinux:9.2	before 5.14.0-284.30.1.el9_2.tuxcare.els5	5.14.0-284.30.1.el9_2.tuxcare.els5
`kernel-debug-modules-core` TuxCare:AlmaLinux:9.2	before 5.14.0-284.30.1.el9_2.tuxcare.els5	5.14.0-284.30.1.el9_2.tuxcare.els5
`kernel-debug-modules-extra` TuxCare:AlmaLinux:9.2	before 5.14.0-284.30.1.el9_2.tuxcare.els5	5.14.0-284.30.1.el9_2.tuxcare.els5
`kernel-debug-modules-internal` TuxCare:AlmaLinux:9.2	before 5.14.0-284.30.1.el9_2.tuxcare.els5	5.14.0-284.30.1.el9_2.tuxcare.els5
`kernel-debug-modules-partner` TuxCare:AlmaLinux:9.2	before 5.14.0-284.30.1.el9_2.tuxcare.els5	5.14.0-284.30.1.el9_2.tuxcare.els5
`kernel-debug-uki-virt` TuxCare:AlmaLinux:9.2	before 5.14.0-284.30.1.el9_2.tuxcare.els5	5.14.0-284.30.1.el9_2.tuxcare.els5
`kernel-devel` TuxCare:AlmaLinux:9.2	before 5.14.0-284.30.1.el9_2.tuxcare.els5	5.14.0-284.30.1.el9_2.tuxcare.els5
`kernel-devel-matched` TuxCare:AlmaLinux:9.2	before 5.14.0-284.30.1.el9_2.tuxcare.els5	5.14.0-284.30.1.el9_2.tuxcare.els5
`kernel-doc` TuxCare:AlmaLinux:9.2	before 5.14.0-284.30.1.el9_2.tuxcare.els5	5.14.0-284.30.1.el9_2.tuxcare.els5
`kernel-headers` TuxCare:AlmaLinux:9.2	before 5.14.0-284.30.1.el9_2.tuxcare.els5	5.14.0-284.30.1.el9_2.tuxcare.els5
`kernel-ipaclones-internal` TuxCare:AlmaLinux:9.2	before 5.14.0-284.30.1.el9_2.tuxcare.els5	5.14.0-284.30.1.el9_2.tuxcare.els5
`kernel-modules` TuxCare:AlmaLinux:9.2	before 5.14.0-284.30.1.el9_2.tuxcare.els5	5.14.0-284.30.1.el9_2.tuxcare.els5
`kernel-modules-core` TuxCare:AlmaLinux:9.2	before 5.14.0-284.30.1.el9_2.tuxcare.els5	5.14.0-284.30.1.el9_2.tuxcare.els5
`kernel-modules-extra` TuxCare:AlmaLinux:9.2	before 5.14.0-284.30.1.el9_2.tuxcare.els5	5.14.0-284.30.1.el9_2.tuxcare.els5
`kernel-modules-internal` TuxCare:AlmaLinux:9.2	before 5.14.0-284.30.1.el9_2.tuxcare.els5	5.14.0-284.30.1.el9_2.tuxcare.els5
`kernel-modules-partner` TuxCare:AlmaLinux:9.2	before 5.14.0-284.30.1.el9_2.tuxcare.els5	5.14.0-284.30.1.el9_2.tuxcare.els5
`kernel-selftests-internal` TuxCare:AlmaLinux:9.2	before 5.14.0-284.30.1.el9_2.tuxcare.els5	5.14.0-284.30.1.el9_2.tuxcare.els5
`kernel-tools` TuxCare:AlmaLinux:9.2	before 5.14.0-284.30.1.el9_2.tuxcare.els5	5.14.0-284.30.1.el9_2.tuxcare.els5
`kernel-tools-libs` TuxCare:AlmaLinux:9.2	before 5.14.0-284.30.1.el9_2.tuxcare.els5	5.14.0-284.30.1.el9_2.tuxcare.els5
`kernel-tools-libs-devel` TuxCare:AlmaLinux:9.2	before 5.14.0-284.30.1.el9_2.tuxcare.els5	5.14.0-284.30.1.el9_2.tuxcare.els5
`kernel-uki-virt` TuxCare:AlmaLinux:9.2	before 5.14.0-284.30.1.el9_2.tuxcare.els5	5.14.0-284.30.1.el9_2.tuxcare.els5
`perf` TuxCare:AlmaLinux:9.2	before 5.14.0-284.30.1.el9_2.tuxcare.els5	5.14.0-284.30.1.el9_2.tuxcare.els5
`python3-perf` TuxCare:AlmaLinux:9.2	before 5.14.0-284.30.1.el9_2.tuxcare.els5	5.14.0-284.30.1.el9_2.tuxcare.els5
`rtla` TuxCare:AlmaLinux:9.2	before 5.14.0-284.30.1.el9_2.tuxcare.els5	5.14.0-284.30.1.el9_2.tuxcare.els5
`linux-buildinfo-4.15.0-242-tuxcare.els30-generic` TuxCare:Ubuntu:18.04	before 4.15.0-242.253	4.15.0-242.253
`linux-buildinfo-4.15.0-242-tuxcare.els30-lowlatency` TuxCare:Ubuntu:18.04	before 4.15.0-242.253	4.15.0-242.253
`linux-cloud-tools-4.15.0-242-tuxcare.els30` TuxCare:Ubuntu:18.04	before 4.15.0-242.253	4.15.0-242.253
`linux-cloud-tools-4.15.0-242-tuxcare.els30-generic` TuxCare:Ubuntu:18.04	before 4.15.0-242.253	4.15.0-242.253
`linux-cloud-tools-4.15.0-242-tuxcare.els30-lowlatency` TuxCare:Ubuntu:18.04	before 4.15.0-242.253	4.15.0-242.253
`linux-cloud-tools-common` TuxCare:Ubuntu:18.04	before 4.15.0-242.253	4.15.0-242.253
`linux-cloud-tools-generic` TuxCare:Ubuntu:18.04	before 4.15.0.242.253	4.15.0.242.253
`linux-cloud-tools-lowlatency` TuxCare:Ubuntu:18.04	before 4.15.0.242.253	4.15.0.242.253
`linux-crashdump` TuxCare:Ubuntu:18.04	before 4.15.0.242.253	4.15.0.242.253
`linux-doc` TuxCare:Ubuntu:18.04	before 4.15.0-242.253	4.15.0-242.253
`linux-generic` TuxCare:Ubuntu:18.04	before 4.15.0.242.253	4.15.0.242.253
`linux-headers-4.15.0-242-tuxcare.els30` TuxCare:Ubuntu:18.04	before 4.15.0-242.253	4.15.0-242.253
`linux-headers-4.15.0-242-tuxcare.els30-generic` TuxCare:Ubuntu:18.04	before 4.15.0-242.253	4.15.0-242.253
`linux-headers-4.15.0-242-tuxcare.els30-lowlatency` TuxCare:Ubuntu:18.04	before 4.15.0-242.253	4.15.0-242.253
`linux-headers-generic` TuxCare:Ubuntu:18.04	before 4.15.0.242.253	4.15.0.242.253
`linux-headers-lowlatency` TuxCare:Ubuntu:18.04	before 4.15.0.242.253	4.15.0.242.253
`linux-image-generic` TuxCare:Ubuntu:18.04	before 4.15.0.242.253	4.15.0.242.253
`linux-image-lowlatency` TuxCare:Ubuntu:18.04	before 4.15.0.242.253	4.15.0.242.253
`linux-image-unsigned-4.15.0-242-tuxcare.els30-generic` TuxCare:Ubuntu:18.04	before 4.15.0-242.253	4.15.0-242.253
`linux-image-unsigned-4.15.0-242-tuxcare.els30-lowlatency` TuxCare:Ubuntu:18.04	before 4.15.0-242.253	4.15.0-242.253
`linux-libc-dev` TuxCare:Ubuntu:18.04	before 4.15.0-242.253	4.15.0-242.253
`linux-lowlatency` TuxCare:Ubuntu:18.04	before 4.15.0.242.253	4.15.0.242.253
`linux-modules-4.15.0-242-tuxcare.els30-generic` TuxCare:Ubuntu:18.04	before 4.15.0-242.253	4.15.0-242.253
`Kernel` Linux	4.6.0 up to 4.14.328, 4.15.0 up to 4.19.297, 4.20.0 up to 5.4.259, 5.5.0 up to 5.10.199, 5.11.0 up to 5.15.136, 5.16.0 up to 6.1.59, 6.2.0 up to 6.5.8	4.14.3284.19.2975.4.2595.10.1995.15.1366.1.596.5.8
`linux` Debian:12	before 6.1.64-1, plus listed versions 6.1.27-16.1.37-16.1.38-16.1.38-26.1.38-2~bpo11+1 Show 6 moreShow less 6.1.38-36.1.38-46.1.38-4~bpo11+16.1.52-16.1.55-16.1.55-1~bpo11+1	6.1.64-1
`linux` Debian:13	before 6.5.8-1	6.5.8-1
`linux` Debian:14	before 6.5.8-1	6.5.8-1
`kernel` openEuler:20.03-LTS-SP1	before 4.19.90-2405.1.0.0248.oe1	4.19.90-2405.1.0.0248.oe1
`kernel` openEuler:20.03-LTS-SP4	before 4.19.90-2405.1.0.0275.oe2003sp4	4.19.90-2405.1.0.0275.oe2003sp4
`kernel` openEuler:22.03-LTS	before 5.10.0-60.136.0.163.oe2203	5.10.0-60.136.0.163.oe2203
`kernel` openEuler:22.03-LTS-SP1	before 5.10.0-136.75.0.155.oe2203sp1	5.10.0-136.75.0.155.oe2203sp1
`kernel` openEuler:22.03-LTS-SP2	before 5.10.0-153.54.0.132.oe2203sp2	5.10.0-153.54.0.132.oe2203sp2
`kernel` openEuler:22.03-LTS-SP3	before 5.10.0-199.0.0.112.oe2203sp3	5.10.0-199.0.0.112.oe2203sp3
`bpftool` Red Hat:enterprise_linux:8::baseos	before 0:4.18.0-553.5.1.el8_10	0:4.18.0-553.5.1.el8_10
`bpftool-debuginfo` Red Hat:enterprise_linux:8::baseos	before 0:4.18.0-553.5.1.el8_10	0:4.18.0-553.5.1.el8_10
`kernel` Red Hat:enterprise_linux:8::baseos	before 0:4.18.0-553.5.1.el8_10	0:4.18.0-553.5.1.el8_10
`kernel-abi-stablelists` Red Hat:enterprise_linux:8::baseos	before 0:4.18.0-553.5.1.el8_10	0:4.18.0-553.5.1.el8_10
`kernel-core` Red Hat:enterprise_linux:8::baseos	before 0:4.18.0-553.5.1.el8_10	0:4.18.0-553.5.1.el8_10
`kernel-debug` Red Hat:enterprise_linux:8::baseos	before 0:4.18.0-553.5.1.el8_10	0:4.18.0-553.5.1.el8_10
`kernel-debug-core` Red Hat:enterprise_linux:8::baseos	before 0:4.18.0-553.5.1.el8_10	0:4.18.0-553.5.1.el8_10
`kernel-debug-debuginfo` Red Hat:enterprise_linux:8::baseos	before 0:4.18.0-553.5.1.el8_10	0:4.18.0-553.5.1.el8_10
`kernel-debug-devel` Red Hat:enterprise_linux:8::baseos	before 0:4.18.0-553.5.1.el8_10	0:4.18.0-553.5.1.el8_10
`kernel-debug-modules` Red Hat:enterprise_linux:8::baseos	before 0:4.18.0-553.5.1.el8_10	0:4.18.0-553.5.1.el8_10
`kernel-debug-modules-extra` Red Hat:enterprise_linux:8::baseos	before 0:4.18.0-553.5.1.el8_10	0:4.18.0-553.5.1.el8_10
`kernel-debuginfo` Red Hat:enterprise_linux:8::baseos	before 0:4.18.0-553.5.1.el8_10	0:4.18.0-553.5.1.el8_10
`kernel-debuginfo-common-aarch64` Red Hat:enterprise_linux:8::baseos	before 0:4.18.0-553.5.1.el8_10	0:4.18.0-553.5.1.el8_10
`kernel-debuginfo-common-ppc64le` Red Hat:enterprise_linux:8::baseos	before 0:4.18.0-553.5.1.el8_10	0:4.18.0-553.5.1.el8_10
`kernel-debuginfo-common-s390x` Red Hat:enterprise_linux:8::baseos	before 0:4.18.0-553.5.1.el8_10	0:4.18.0-553.5.1.el8_10
`kernel-debuginfo-common-x86_64` Red Hat:enterprise_linux:8::baseos	before 0:4.18.0-553.5.1.el8_10	0:4.18.0-553.5.1.el8_10
`kernel-devel` Red Hat:enterprise_linux:8::baseos	before 0:4.18.0-553.5.1.el8_10	0:4.18.0-553.5.1.el8_10
`kernel-doc` Red Hat:enterprise_linux:8::baseos	before 0:4.18.0-553.5.1.el8_10	0:4.18.0-553.5.1.el8_10
`kernel-modules` Red Hat:enterprise_linux:8::baseos	before 0:4.18.0-553.5.1.el8_10	0:4.18.0-553.5.1.el8_10
`kernel-modules-extra` Red Hat:enterprise_linux:8::baseos	before 0:4.18.0-553.5.1.el8_10	0:4.18.0-553.5.1.el8_10
`kernel-tools` Red Hat:enterprise_linux:8::baseos	before 0:4.18.0-553.5.1.el8_10	0:4.18.0-553.5.1.el8_10
`kernel-tools-debuginfo` Red Hat:enterprise_linux:8::baseos	before 0:4.18.0-553.5.1.el8_10	0:4.18.0-553.5.1.el8_10
`kernel-tools-libs` Red Hat:enterprise_linux:8::baseos	before 0:4.18.0-553.5.1.el8_10	0:4.18.0-553.5.1.el8_10
`kernel-zfcpdump` Red Hat:enterprise_linux:8::baseos	before 0:4.18.0-553.5.1.el8_10	0:4.18.0-553.5.1.el8_10
`kernel-zfcpdump-core` Red Hat:enterprise_linux:8::baseos	before 0:4.18.0-553.5.1.el8_10	0:4.18.0-553.5.1.el8_10
`kernel-zfcpdump-debuginfo` Red Hat:enterprise_linux:8::baseos	before 0:4.18.0-553.5.1.el8_10	0:4.18.0-553.5.1.el8_10
`kernel-zfcpdump-devel` Red Hat:enterprise_linux:8::baseos	before 0:4.18.0-553.5.1.el8_10	0:4.18.0-553.5.1.el8_10
`kernel-zfcpdump-modules` Red Hat:enterprise_linux:8::baseos	before 0:4.18.0-553.5.1.el8_10	0:4.18.0-553.5.1.el8_10
`kernel-zfcpdump-modules-extra` Red Hat:enterprise_linux:8::baseos	before 0:4.18.0-553.5.1.el8_10	0:4.18.0-553.5.1.el8_10
`perf` Red Hat:enterprise_linux:8::baseos	before 0:4.18.0-553.5.1.el8_10	0:4.18.0-553.5.1.el8_10
`perf-debuginfo` Red Hat:enterprise_linux:8::baseos	before 0:4.18.0-553.5.1.el8_10	0:4.18.0-553.5.1.el8_10
`python3-perf` Red Hat:enterprise_linux:8::baseos	before 0:4.18.0-553.5.1.el8_10	0:4.18.0-553.5.1.el8_10
`python3-perf-debuginfo` Red Hat:enterprise_linux:8::baseos	before 0:4.18.0-553.5.1.el8_10	0:4.18.0-553.5.1.el8_10
`bpftool-debuginfo` Red Hat:enterprise_linux:8::crb	before 0:4.18.0-553.5.1.el8_10	0:4.18.0-553.5.1.el8_10
`kernel-debug-debuginfo` Red Hat:enterprise_linux:8::crb	before 0:4.18.0-553.5.1.el8_10	0:4.18.0-553.5.1.el8_10
`kernel-debuginfo` Red Hat:enterprise_linux:8::crb	before 0:4.18.0-553.5.1.el8_10	0:4.18.0-553.5.1.el8_10
`kernel-debuginfo-common-aarch64` Red Hat:enterprise_linux:8::crb	before 0:4.18.0-553.5.1.el8_10	0:4.18.0-553.5.1.el8_10
`kernel-debuginfo-common-ppc64le` Red Hat:enterprise_linux:8::crb	before 0:4.18.0-553.5.1.el8_10	0:4.18.0-553.5.1.el8_10
`kernel-debuginfo-common-x86_64` Red Hat:enterprise_linux:8::crb	before 0:4.18.0-553.5.1.el8_10	0:4.18.0-553.5.1.el8_10
`kernel-tools-debuginfo` Red Hat:enterprise_linux:8::crb	before 0:4.18.0-553.5.1.el8_10	0:4.18.0-553.5.1.el8_10
`kernel-tools-libs-devel` Red Hat:enterprise_linux:8::crb	before 0:4.18.0-553.5.1.el8_10	0:4.18.0-553.5.1.el8_10
`perf-debuginfo` Red Hat:enterprise_linux:8::crb	before 0:4.18.0-553.5.1.el8_10	0:4.18.0-553.5.1.el8_10
`python3-perf-debuginfo` Red Hat:enterprise_linux:8::crb	before 0:4.18.0-553.5.1.el8_10	0:4.18.0-553.5.1.el8_10
`kernel-rt` Red Hat:enterprise_linux:8::nfv	before 0:4.18.0-553.5.1.rt7.346.el8_10	0:4.18.0-553.5.1.rt7.346.el8_10
`kernel-rt-core` Red Hat:enterprise_linux:8::nfv	before 0:4.18.0-553.5.1.rt7.346.el8_10	0:4.18.0-553.5.1.rt7.346.el8_10
`kernel-rt-debug` Red Hat:enterprise_linux:8::nfv	before 0:4.18.0-553.5.1.rt7.346.el8_10	0:4.18.0-553.5.1.rt7.346.el8_10
`kernel-rt-debug-core` Red Hat:enterprise_linux:8::nfv	before 0:4.18.0-553.5.1.rt7.346.el8_10	0:4.18.0-553.5.1.rt7.346.el8_10
`kernel-rt-debug-debuginfo` Red Hat:enterprise_linux:8::nfv	before 0:4.18.0-553.5.1.rt7.346.el8_10	0:4.18.0-553.5.1.rt7.346.el8_10
`kernel-rt-debug-devel` Red Hat:enterprise_linux:8::nfv	before 0:4.18.0-553.5.1.rt7.346.el8_10	0:4.18.0-553.5.1.rt7.346.el8_10
`kernel-rt-debug-kvm` Red Hat:enterprise_linux:8::nfv	before 0:4.18.0-553.5.1.rt7.346.el8_10	0:4.18.0-553.5.1.rt7.346.el8_10
`kernel-rt-debug-modules` Red Hat:enterprise_linux:8::nfv	before 0:4.18.0-553.5.1.rt7.346.el8_10	0:4.18.0-553.5.1.rt7.346.el8_10
`kernel-rt-debug-modules-extra` Red Hat:enterprise_linux:8::nfv	before 0:4.18.0-553.5.1.rt7.346.el8_10	0:4.18.0-553.5.1.rt7.346.el8_10
`kernel-rt-debuginfo` Red Hat:enterprise_linux:8::nfv	before 0:4.18.0-553.5.1.rt7.346.el8_10	0:4.18.0-553.5.1.rt7.346.el8_10
`kernel-rt-debuginfo-common-x86_64` Red Hat:enterprise_linux:8::nfv	before 0:4.18.0-553.5.1.rt7.346.el8_10	0:4.18.0-553.5.1.rt7.346.el8_10
`kernel-rt-devel` Red Hat:enterprise_linux:8::nfv	before 0:4.18.0-553.5.1.rt7.346.el8_10	0:4.18.0-553.5.1.rt7.346.el8_10
`kernel-rt-kvm` Red Hat:enterprise_linux:8::nfv	before 0:4.18.0-553.5.1.rt7.346.el8_10	0:4.18.0-553.5.1.rt7.346.el8_10
`kernel` Rocky Linux:8	before 0:4.18.0-553.5.1.el8_10	0:4.18.0-553.5.1.el8_10
`kernel-rt` Rocky Linux:8	before 0:4.18.0-553.5.1.rt7.346.el8_10	0:4.18.0-553.5.1.rt7.346.el8_10
`kernel-rt` SUSE:Linux Enterprise Micro 5.3	before 5.14.21-150400.15.76.1	5.14.21-150400.15.76.1
`kernel-source-rt` SUSE:Linux Enterprise Micro 5.3	before 5.14.21-150400.15.76.1	5.14.21-150400.15.76.1
`kernel-rt` SUSE:Linux Enterprise Micro 5.4	before 5.14.21-150400.15.76.1	5.14.21-150400.15.76.1
`kernel-source-rt` SUSE:Linux Enterprise Micro 5.4	before 5.14.21-150400.15.76.1	5.14.21-150400.15.76.1
`kernel-rt` openSUSE:Leap Micro 5.3	before 5.14.21-150400.15.76.1	5.14.21-150400.15.76.1
`kernel-rt` openSUSE:Leap Micro 5.4	before 5.14.21-150400.15.76.1	5.14.21-150400.15.76.1
`kernel-default` SUSE:Linux Enterprise Micro 5.3	before 5.14.21-150400.24.116.1	5.14.21-150400.24.116.1
`kernel-default-base` SUSE:Linux Enterprise Micro 5.3	before 5.14.21-150400.24.116.1.150400.24.54.5	5.14.21-150400.24.116.1.150400.24.54.5
`kernel-default` SUSE:Linux Enterprise Micro 5.4	before 5.14.21-150400.24.116.1	5.14.21-150400.24.116.1
`kernel-default-base` SUSE:Linux Enterprise Micro 5.4	before 5.14.21-150400.24.116.1.150400.24.54.5	5.14.21-150400.24.116.1.150400.24.54.5
`kernel-default` SUSE:Linux Enterprise Live Patching 15 SP4	before 5.14.21-150400.24.116.1	5.14.21-150400.24.116.1
`kernel-livepatch-SLE15-SP4_Update_25` SUSE:Linux Enterprise Live Patching 15 SP4	before 1-150400.9.5.1	1-150400.9.5.1
`kernel-default` SUSE:Linux Enterprise High Availability Extension 15 SP4	before 5.14.21-150400.24.116.1	5.14.21-150400.24.116.1
`kernel-64kb` SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS	before 5.14.21-150400.24.116.1	5.14.21-150400.24.116.1
`kernel-default` SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS	before 5.14.21-150400.24.116.1	5.14.21-150400.24.116.1
`kernel-default-base` SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS	before 5.14.21-150400.24.116.1.150400.24.54.5	5.14.21-150400.24.116.1.150400.24.54.5
`kernel-docs` SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS	before 5.14.21-150400.24.116.1	5.14.21-150400.24.116.1
`kernel-obs-build` SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS	before 5.14.21-150400.24.116.1	5.14.21-150400.24.116.1
`kernel-source` SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS	before 5.14.21-150400.24.116.1	5.14.21-150400.24.116.1
`kernel-syms` SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS	before 5.14.21-150400.24.116.1	5.14.21-150400.24.116.1
`kernel-64kb` SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS	before 5.14.21-150400.24.116.1	5.14.21-150400.24.116.1
`kernel-default` SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS	before 5.14.21-150400.24.116.1	5.14.21-150400.24.116.1
`kernel-default-base` SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS	before 5.14.21-150400.24.116.1.150400.24.54.5	5.14.21-150400.24.116.1.150400.24.54.5
`kernel-docs` SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS	before 5.14.21-150400.24.116.1	5.14.21-150400.24.116.1
`kernel-obs-build` SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS	before 5.14.21-150400.24.116.1	5.14.21-150400.24.116.1
`kernel-source` SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS	before 5.14.21-150400.24.116.1	5.14.21-150400.24.116.1
`kernel-syms` SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS	before 5.14.21-150400.24.116.1	5.14.21-150400.24.116.1
`kernel-64kb` SUSE:Linux Enterprise Server 15 SP4-LTSS	before 5.14.21-150400.24.116.1	5.14.21-150400.24.116.1
`kernel-default` SUSE:Linux Enterprise Server 15 SP4-LTSS	before 5.14.21-150400.24.116.1	5.14.21-150400.24.116.1
`kernel-default-base` SUSE:Linux Enterprise Server 15 SP4-LTSS	before 5.14.21-150400.24.116.1.150400.24.54.5	5.14.21-150400.24.116.1.150400.24.54.5
`kernel-docs` SUSE:Linux Enterprise Server 15 SP4-LTSS	before 5.14.21-150400.24.116.1	5.14.21-150400.24.116.1
`kernel-obs-build` SUSE:Linux Enterprise Server 15 SP4-LTSS	before 5.14.21-150400.24.116.1	5.14.21-150400.24.116.1
`kernel-source` SUSE:Linux Enterprise Server 15 SP4-LTSS	before 5.14.21-150400.24.116.1	5.14.21-150400.24.116.1
`kernel-syms` SUSE:Linux Enterprise Server 15 SP4-LTSS	before 5.14.21-150400.24.116.1	5.14.21-150400.24.116.1
`kernel-zfcpdump` SUSE:Linux Enterprise Server 15 SP4-LTSS	before 5.14.21-150400.24.116.1	5.14.21-150400.24.116.1
`kernel-default` SUSE:Linux Enterprise Server for SAP Applications 15 SP4	before 5.14.21-150400.24.116.1	5.14.21-150400.24.116.1
`kernel-default-base` SUSE:Linux Enterprise Server for SAP Applications 15 SP4	before 5.14.21-150400.24.116.1.150400.24.54.5	5.14.21-150400.24.116.1.150400.24.54.5
`kernel-docs` SUSE:Linux Enterprise Server for SAP Applications 15 SP4	before 5.14.21-150400.24.116.1	5.14.21-150400.24.116.1
`kernel-obs-build` SUSE:Linux Enterprise Server for SAP Applications 15 SP4	before 5.14.21-150400.24.116.1	5.14.21-150400.24.116.1
`kernel-source` SUSE:Linux Enterprise Server for SAP Applications 15 SP4	before 5.14.21-150400.24.116.1	5.14.21-150400.24.116.1
`kernel-syms` SUSE:Linux Enterprise Server for SAP Applications 15 SP4	before 5.14.21-150400.24.116.1	5.14.21-150400.24.116.1
`kernel-default` SUSE:Manager Proxy 4.3	before 5.14.21-150400.24.116.1	5.14.21-150400.24.116.1
`kernel-default-base` SUSE:Manager Proxy 4.3	before 5.14.21-150400.24.116.1.150400.24.54.5	5.14.21-150400.24.116.1.150400.24.54.5
`kernel-source` SUSE:Manager Proxy 4.3	before 5.14.21-150400.24.116.1	5.14.21-150400.24.116.1
`kernel-syms` SUSE:Manager Proxy 4.3	before 5.14.21-150400.24.116.1	5.14.21-150400.24.116.1
`kernel-default` SUSE:Manager Server 4.3	before 5.14.21-150400.24.116.1	5.14.21-150400.24.116.1
`kernel-default-base` SUSE:Manager Server 4.3	before 5.14.21-150400.24.116.1.150400.24.54.5	5.14.21-150400.24.116.1.150400.24.54.5
`kernel-source` SUSE:Manager Server 4.3	before 5.14.21-150400.24.116.1	5.14.21-150400.24.116.1
`kernel-syms` SUSE:Manager Server 4.3	before 5.14.21-150400.24.116.1	5.14.21-150400.24.116.1
`kernel-zfcpdump` SUSE:Manager Server 4.3	before 5.14.21-150400.24.116.1	5.14.21-150400.24.116.1
`kernel-default` openSUSE:Leap Micro 5.3	before 5.14.21-150400.24.116.1	5.14.21-150400.24.116.1
`kernel-default-base` openSUSE:Leap Micro 5.3	before 5.14.21-150400.24.116.1.150400.24.54.5	5.14.21-150400.24.116.1.150400.24.54.5
`kernel-default` openSUSE:Leap Micro 5.4	before 5.14.21-150400.24.116.1	5.14.21-150400.24.116.1
`kernel-default-base` openSUSE:Leap Micro 5.4	before 5.14.21-150400.24.116.1.150400.24.54.5	5.14.21-150400.24.116.1.150400.24.54.5
`kernel-default` SUSE:Linux Enterprise Live Patching 15 SP2	before 5.3.18-150200.24.188.1	5.3.18-150200.24.188.1
`kernel-livepatch-SLE15-SP2_Update_47` SUSE:Linux Enterprise Live Patching 15 SP2	before 1-150200.5.3.3	1-150200.5.3.3
`kernel-default` SUSE:Linux Enterprise High Availability Extension 15 SP2	before 5.3.18-150200.24.188.1	5.3.18-150200.24.188.1
`kernel-default` SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS	before 5.3.18-150200.24.188.1	5.3.18-150200.24.188.1
`kernel-default-base` SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS	before 5.3.18-150200.24.188.1.150200.9.95.3	5.3.18-150200.24.188.1.150200.9.95.3
`kernel-docs` SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS	before 5.3.18-150200.24.188.1	5.3.18-150200.24.188.1
`kernel-obs-build` SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS	before 5.3.18-150200.24.188.1	5.3.18-150200.24.188.1
`kernel-preempt` SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS	before 5.3.18-150200.24.188.1	5.3.18-150200.24.188.1
`kernel-rt` openSUSE:Leap 15.5	before 5.14.21-150500.13.47.1	5.14.21-150500.13.47.1
`kernel-rt_debug` openSUSE:Leap 15.5	before 5.14.21-150500.13.47.1	5.14.21-150500.13.47.1
`kernel-source-rt` openSUSE:Leap 15.5	before 5.14.21-150500.13.47.1	5.14.21-150500.13.47.1
`kernel-syms-rt` openSUSE:Leap 15.5	before 5.14.21-150500.13.47.1	5.14.21-150500.13.47.1
`dtb-aarch64` openSUSE:Leap 15.5	before 5.14.21-150500.55.59.1	5.14.21-150500.55.59.1
`kernel-64kb` openSUSE:Leap 15.5	before 5.14.21-150500.55.59.1	5.14.21-150500.55.59.1
`kernel-debug` openSUSE:Leap 15.5	before 5.14.21-150500.55.59.1	5.14.21-150500.55.59.1
`kernel-default` openSUSE:Leap 15.5	before 5.14.21-150500.55.59.1	5.14.21-150500.55.59.1
`kernel-default-base` openSUSE:Leap 15.5	before 5.14.21-150500.55.59.1.150500.6.25.7	5.14.21-150500.55.59.1.150500.6.25.7
`kernel-docs` openSUSE:Leap 15.5	before 5.14.21-150500.55.59.1	5.14.21-150500.55.59.1
`kernel-kvmsmall` openSUSE:Leap 15.5	before 5.14.21-150500.55.59.1	5.14.21-150500.55.59.1
`kernel-obs-build` openSUSE:Leap 15.5	before 5.14.21-150500.55.59.1	5.14.21-150500.55.59.1
`kernel-obs-qa` openSUSE:Leap 15.5	before 5.14.21-150500.55.59.1	5.14.21-150500.55.59.1
`kernel-source` openSUSE:Leap 15.5	before 5.14.21-150500.55.59.1	5.14.21-150500.55.59.1
`kernel-syms` openSUSE:Leap 15.5	before 5.14.21-150500.55.59.1	5.14.21-150500.55.59.1
`kernel-zfcpdump` openSUSE:Leap 15.5	before 5.14.21-150500.55.59.1	5.14.21-150500.55.59.1
`kernel-azure` openSUSE:Leap 15.5	before 5.14.21-150500.33.48.1	5.14.21-150500.33.48.1
`kernel-source-azure` openSUSE:Leap 15.5	before 5.14.21-150500.33.48.1	5.14.21-150500.33.48.1
`kernel-syms-azure` openSUSE:Leap 15.5	before 5.14.21-150500.33.48.1	5.14.21-150500.33.48.1
`linux` Ubuntu:Pro:14.04:LTS	All versions, plus listed versions 3.11.0-12.193.12.0-1.33.12.0-2.53.12.0-2.73.12.0-3.8 Show 45 moreShow less 3.12.0-3.93.12.0-4.103.12.0-4.123.12.0-5.133.12.0-7.153.13.0-1.163.13.0-2.173.13.0-3.183.13.0-4.193.13.0-5.203.13.0-6.233.13.0-7.253.13.0-7.263.13.0-8.273.13.0-8.283.13.0-10.303.13.0-11.313.13.0-12.323.13.0-13.333.13.0-14.343.13.0-15.353.13.0-16.363.13.0-17.373.13.0-18.383.13.0-19.393.13.0-19.403.13.0-20.423.13.0-21.433.13.0-22.443.13.0-23.453.13.0-24.463.13.0-24.473.13.0-27.503.13.0-29.533.13.0-30.543.13.0-30.553.13.0-32.573.13.0-33.583.13.0-34.603.13.0-35.623.13.0-36.633.13.0-37.643.13.0-39.663.13.0-40.693.13.0-41.70	None known
`linux-aws` Ubuntu:Pro:14.04:LTS	before 4.4.0-1147.153, plus listed versions 4.4.0-1002.24.4.0-1003.34.4.0-1005.54.4.0-1006.64.4.0-1009.9 Show 45 moreShow less 4.4.0-1010.104.4.0-1011.114.4.0-1012.124.4.0-1014.144.4.0-1016.164.4.0-1017.174.4.0-1019.194.4.0-1022.224.4.0-1023.234.4.0-1024.254.4.0-1025.264.4.0-1027.304.4.0-1028.314.4.0-1029.324.4.0-1031.344.4.0-1032.354.4.0-1034.374.4.0-1036.394.4.0-1037.404.4.0-1038.414.4.0-1039.424.4.0-1040.434.4.0-1042.454.4.0-1044.474.4.0-1045.484.4.0-1046.504.4.0-1048.524.4.0-1050.544.4.0-1052.564.4.0-1054.584.4.0-1055.594.4.0-1056.604.4.0-1058.624.4.0-1059.634.4.0-1060.644.4.0-1061.654.4.0-1062.664.4.0-1064.684.4.0-1065.694.4.0-1066.704.4.0-1067.714.4.0-1073.774.4.0-1074.784.4.0-1075.794.4.0-1076.80	4.4.0-1147.153
`linux-azure` Ubuntu:Pro:14.04:LTS	before 4.15.0-1192.207~14.04.1, plus listed versions 4.15.0-1023.24~14.04.14.15.0-1030.31~14.04.14.15.0-1031.32~14.04.14.15.0-1032.33~14.04.24.15.0-1035.36~14.04.2 Show 45 moreShow less 4.15.0-1036.38~14.04.24.15.0-1037.39~14.04.24.15.0-1039.41~14.04.24.15.0-1040.44~14.04.14.15.0-1041.45~14.04.14.15.0-1042.46~14.04.14.15.0-1045.49~14.04.14.15.0-1046.50~14.04.14.15.0-1047.51~14.04.14.15.0-1049.54~14.04.14.15.0-1050.55~14.04.14.15.0-1051.56~14.04.14.15.0-1052.57~14.04.14.15.0-1055.60~14.04.14.15.0-1056.61~14.04.14.15.0-1057.62~14.04.14.15.0-1059.64~14.04.14.15.0-1060.65~14.04.14.15.0-1061.66~14.04.14.15.0-1063.68~14.04.14.15.0-1064.69~14.04.14.15.0-1066.71~14.04.14.15.0-1067.72~14.04.14.15.0-1069.74~14.04.14.15.0-1071.76~14.04.14.15.0-1074.79~14.04.14.15.0-1077.82~14.04.14.15.0-1082.92~14.04.14.15.0-1083.93~14.04.14.15.0-1089.99~14.04.14.15.0-1091.101~14.04.14.15.0-1092.102~14.04.14.15.0-1093.103~14.04.14.15.0-1095.105~14.04.14.15.0-1096.106~14.04.14.15.0-1098.109~14.04.14.15.0-1100.111~14.04.14.15.0-1102.113~14.04.14.15.0-1103.114~14.04.14.15.0-1106.118~14.04.14.15.0-1108.120~14.04.14.15.0-1109.121~14.04.14.15.0-1110.122~14.04.14.15.0-1111.123~14.04.14.15.0-1112.124~14.04.1	4.15.0-1192.207~14.04.1
`linux-lts-xenial` Ubuntu:Pro:14.04:LTS	before 4.4.0-272.306~14.04.1, plus listed versions 4.4.0-13.29~14.04.14.4.0-14.30~14.04.24.4.0-15.31~14.04.14.4.0-18.34~14.04.14.4.0-21.37~14.04.1 Show 45 moreShow less 4.4.0-22.39~14.04.14.4.0-22.40~14.04.14.4.0-24.43~14.04.14.4.0-28.47~14.04.14.4.0-31.50~14.04.14.4.0-34.53~14.04.14.4.0-36.55~14.04.14.4.0-38.57~14.04.14.4.0-42.62~14.04.14.4.0-45.66~14.04.14.4.0-47.68~14.04.14.4.0-51.72~14.04.14.4.0-53.74~14.04.14.4.0-57.78~14.04.14.4.0-59.80~14.04.14.4.0-62.83~14.04.14.4.0-63.84~14.04.24.4.0-64.85~14.04.14.4.0-66.87~14.04.14.4.0-67.88~14.04.14.4.0-70.91~14.04.14.4.0-71.92~14.04.14.4.0-72.93~14.04.14.4.0-75.96~14.04.14.4.0-78.99~14.04.24.4.0-79.100~14.04.14.4.0-81.104~14.04.14.4.0-83.106~14.04.14.4.0-87.110~14.04.14.4.0-89.112~14.04.14.4.0-91.114~14.04.14.4.0-92.115~14.04.14.4.0-93.116~14.04.14.4.0-96.119~14.04.14.4.0-97.120~14.04.14.4.0-98.121~14.04.14.4.0-101.124~14.04.14.4.0-103.126~14.04.14.4.0-104.127~14.04.14.4.0-108.131~14.04.14.4.0-109.132~14.04.14.4.0-111.134~14.04.14.4.0-112.135~14.04.14.4.0-116.140~14.04.14.4.0-119.143~14.04.1	4.4.0-272.306~14.04.1
`linux` Ubuntu:Pro:16.04:LTS	before 4.4.0-272.306, plus listed versions 4.2.0-16.194.2.0-17.214.2.0-19.234.3.0-1.104.3.0-2.11 Show 45 moreShow less 4.3.0-5.164.3.0-6.174.3.0-7.184.4.0-2.164.4.0-4.194.4.0-6.214.4.0-7.224.4.0-8.234.4.0-9.244.4.0-10.254.4.0-11.264.4.0-12.284.4.0-13.294.4.0-14.304.4.0-15.314.4.0-16.324.4.0-17.334.4.0-18.344.4.0-21.374.4.0-22.394.4.0-22.404.4.0-24.434.4.0-28.474.4.0-31.504.4.0-34.534.4.0-36.554.4.0-38.574.4.0-42.624.4.0-43.634.4.0-45.664.4.0-47.684.4.0-51.724.4.0-53.744.4.0-57.784.4.0-59.804.4.0-62.834.4.0-63.844.4.0-64.854.4.0-65.864.4.0-66.874.4.0-67.884.4.0-70.914.4.0-71.924.4.0-72.934.4.0-75.96	4.4.0-272.306
`linux-aws` Ubuntu:Pro:16.04:LTS	before 4.4.0-1185.200, plus listed versions 4.4.0-1001.104.4.0-1003.124.4.0-1004.134.4.0-1007.164.4.0-1009.18 Show 45 moreShow less 4.4.0-1011.204.4.0-1012.214.4.0-1013.224.4.0-1016.254.4.0-1017.264.4.0-1018.274.4.0-1020.294.4.0-1022.314.4.0-1026.354.4.0-1028.374.4.0-1030.394.4.0-1031.404.4.0-1032.414.4.0-1035.444.4.0-1037.464.4.0-1038.474.4.0-1039.484.4.0-1041.504.4.0-1043.524.4.0-1044.534.4.0-1047.564.4.0-1048.574.4.0-1049.584.4.0-1050.594.4.0-1052.614.4.0-1054.634.4.0-1055.644.4.0-1057.664.4.0-1060.694.4.0-1061.704.4.0-1062.714.4.0-1063.724.4.0-1065.754.4.0-1066.764.4.0-1067.774.4.0-1069.794.4.0-1070.804.4.0-1072.824.4.0-1073.834.4.0-1074.844.4.0-1075.854.4.0-1077.874.4.0-1079.894.4.0-1081.914.4.0-1083.93	4.4.0-1185.200
`linux-aws-hwe` Ubuntu:Pro:16.04:LTS	before 4.15.0-1184.197~16.04.1, plus listed versions 4.15.0-1030.31~16.04.14.15.0-1031.33~16.04.14.15.0-1032.34~16.04.14.15.0-1033.35~16.04.14.15.0-1035.37~16.04.1 Show 45 moreShow less 4.15.0-1036.38~16.04.14.15.0-1039.41~16.04.14.15.0-1040.42~16.04.14.15.0-1041.43~16.04.14.15.0-1043.45~16.04.14.15.0-1044.46~16.04.14.15.0-1045.47~16.04.14.15.0-1047.49~16.04.14.15.0-1048.50~16.04.14.15.0-1050.52~16.04.14.15.0-1051.53~16.04.14.15.0-1052.54~16.04.14.15.0-1054.56~16.04.14.15.0-1056.58~16.04.14.15.0-1057.59~16.04.14.15.0-1058.60~16.04.14.15.0-1060.62~16.04.14.15.0-1063.67~16.04.14.15.0-1065.69~16.04.14.15.0-1066.70~16.04.14.15.0-1067.71~16.04.14.15.0-1073.77~16.04.14.15.0-1074.78~16.04.14.15.0-1079.83~16.04.14.15.0-1080.84~16.04.14.15.0-1082.86~16.04.14.15.0-1083.87~16.04.14.15.0-1085.90~16.04.14.15.0-1088.93~16.04.14.15.0-1090.95~16.04.14.15.0-1091.96~16.04.14.15.0-1093.99~16.04.14.15.0-1094.101~16.04.14.15.0-1095.102~16.04.14.15.0-1096.103~16.04.14.15.0-1097.104~16.04.14.15.0-1098.105~16.04.14.15.0-1099.106~16.04.14.15.0-1102.109~16.04.14.15.0-1103.110~16.04.14.15.0-1106.113~16.04.14.15.0-1109.116~16.04.14.15.0-1110.117~16.04.14.15.0-1111.118~16.04.14.15.0-1112.119~16.04.1	4.15.0-1184.197~16.04.1
`linux-azure` Ubuntu:Pro:16.04:LTS	before 4.15.0-1192.207~16.04.1, plus listed versions 4.11.0-1009.94.11.0-1011.114.11.0-1013.134.11.0-1014.144.11.0-1015.15 Show 45 moreShow less 4.11.0-1016.164.13.0-1005.74.13.0-1006.84.13.0-1007.94.13.0-1009.124.13.0-1011.144.13.0-1012.154.13.0-1014.174.13.0-1016.194.13.0-1018.214.15.0-1013.13~16.04.24.15.0-1014.14~16.04.14.15.0-1018.18~16.04.14.15.0-1019.19~16.04.14.15.0-1021.21~16.04.14.15.0-1022.22~16.04.14.15.0-1023.24~16.04.14.15.0-1025.26~16.04.14.15.0-1028.29~16.04.14.15.0-1030.31~16.04.14.15.0-1031.32~16.04.14.15.0-1032.33~16.04.14.15.0-1035.36~16.04.14.15.0-1036.38~16.04.14.15.0-1037.39~16.04.14.15.0-1039.434.15.0-1040.444.15.0-1041.454.15.0-1042.464.15.0-1045.494.15.0-1046.504.15.0-1047.514.15.0-1049.544.15.0-1050.554.15.0-1051.564.15.0-1052.574.15.0-1055.604.15.0-1056.614.15.0-1057.624.15.0-1059.644.15.0-1060.654.15.0-1061.664.15.0-1063.684.15.0-1064.694.15.0-1066.71	4.15.0-1192.207~16.04.1
`linux-gcp` Ubuntu:Pro:16.04:LTS	before 4.15.0-1177.194~16.04.1, plus listed versions 4.10.0-1004.44.10.0-1006.64.10.0-1007.74.10.0-1008.84.10.0-1009.9 Show 45 moreShow less 4.13.0-1002.54.13.0-1006.94.13.0-1007.104.13.0-1008.114.13.0-1011.154.13.0-1012.164.13.0-1013.174.13.0-1015.194.13.0-1017.214.13.0-1019.234.15.0-1014.14~16.04.14.15.0-1015.15~16.04.14.15.0-1017.18~16.04.14.15.0-1018.19~16.04.24.15.0-1019.20~16.04.14.15.0-1021.22~16.04.14.15.0-1023.24~16.04.14.15.0-1024.25~16.04.24.15.0-1025.26~16.04.14.15.0-1026.27~16.04.14.15.0-1027.28~16.04.14.15.0-1028.29~16.04.14.15.0-1029.31~16.04.14.15.0-1030.32~16.04.14.15.0-1032.34~16.04.14.15.0-1033.35~16.04.14.15.0-1034.36~16.04.14.15.0-1036.38~16.04.14.15.0-1037.39~16.04.14.15.0-1040.42~16.04.14.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1046.494.15.0-1047.504.15.0-1049.524.15.0-1050.534.15.0-1052.564.15.0-1055.594.15.0-1058.624.15.0-1060.644.15.0-1061.654.15.0-1071.81~16.04.14.15.0-1077.87~16.04.14.15.0-1078.88~16.04.1	4.15.0-1177.194~16.04.1
`linux-hwe` Ubuntu:Pro:16.04:LTS	before 4.15.0-241.253~16.04.1, plus listed versions 4.8.0-36.36~16.04.14.8.0-39.42~16.04.14.8.0-41.44~16.04.14.8.0-42.45~16.04.14.8.0-44.47~16.04.1 Show 45 moreShow less 4.8.0-45.48~16.04.14.8.0-46.49~16.04.14.8.0-49.52~16.04.14.8.0-51.54~16.04.14.8.0-52.55~16.04.14.8.0-53.56~16.04.14.8.0-54.57~16.04.14.8.0-56.61~16.04.14.8.0-58.63~16.04.14.10.0-27.30~16.04.24.10.0-28.32~16.04.24.10.0-30.34~16.04.14.10.0-32.36~16.04.14.10.0-33.37~16.04.14.10.0-35.39~16.04.14.10.0-37.41~16.04.14.10.0-38.42~16.04.14.10.0-40.44~16.04.14.10.0-42.46~16.04.14.13.0-26.29~16.04.24.13.0-31.34~16.04.14.13.0-32.35~16.04.14.13.0-36.40~16.04.14.13.0-37.42~16.04.14.13.0-38.43~16.04.14.13.0-39.44~16.04.14.13.0-41.46~16.04.14.13.0-43.48~16.04.14.13.0-45.50~16.04.14.15.0-24.26~16.04.14.15.0-29.31~16.04.14.15.0-30.32~16.04.14.15.0-32.35~16.04.14.15.0-33.36~16.04.14.15.0-34.37~16.04.14.15.0-36.39~16.04.14.15.0-38.41~16.04.14.15.0-39.42~16.04.14.15.0-42.45~16.04.14.15.0-43.46~16.04.14.15.0-45.48~16.04.14.15.0-46.49~16.04.14.15.0-47.50~16.04.14.15.0-48.51~16.04.14.15.0-50.54~16.04.1	4.15.0-241.253~16.04.1
`linux-kvm` Ubuntu:Pro:16.04:LTS	before 4.4.0-1148.159, plus listed versions 4.4.0-1004.94.4.0-1007.124.4.0-1008.134.4.0-1009.144.4.0-1010.15 Show 45 moreShow less 4.4.0-1012.174.4.0-1013.184.4.0-1015.204.4.0-1017.224.4.0-1019.244.4.0-1020.254.4.0-1021.264.4.0-1023.284.4.0-1026.314.4.0-1027.324.4.0-1029.344.4.0-1031.374.4.0-1032.384.4.0-1033.394.4.0-1035.414.4.0-1036.424.4.0-1037.434.4.0-1038.444.4.0-1039.454.4.0-1040.464.4.0-1041.474.4.0-1043.494.4.0-1044.504.4.0-1046.524.4.0-1047.534.4.0-1048.554.4.0-1051.584.4.0-1052.594.4.0-1054.614.4.0-1056.634.4.0-1058.654.4.0-1059.664.4.0-1060.674.4.0-1062.694.4.0-1063.704.4.0-1064.714.4.0-1065.724.4.0-1066.734.4.0-1068.754.4.0-1069.764.4.0-1070.774.4.0-1071.784.4.0-1075.824.4.0-1076.834.4.0-1077.84	4.4.0-1148.159
`linux-oracle` Ubuntu:Pro:16.04:LTS	before 4.15.0-1148.159~16.04.1, plus listed versions 4.15.0-1007.9~16.04.14.15.0-1008.10~16.04.14.15.0-1009.11~16.04.14.15.0-1010.12~16.04.14.15.0-1011.13~16.04.1 Show 45 moreShow less 4.15.0-1013.15~16.04.14.15.0-1014.16~16.04.14.15.0-1015.17~16.04.14.15.0-1017.19~16.04.24.15.0-1018.20~16.04.14.15.0-1021.23~16.04.14.15.0-1022.25~16.04.14.15.0-1023.26~16.04.14.15.0-1025.28~16.04.14.15.0-1026.29~16.04.14.15.0-1027.30~16.04.14.15.0-1029.32~16.04.14.15.0-1030.33~16.04.14.15.0-1031.34~16.04.14.15.0-1033.36~16.04.14.15.0-1035.38~16.04.14.15.0-1037.41~16.04.14.15.0-1038.42~16.04.14.15.0-1039.43~16.04.14.15.0-1045.49~16.04.14.15.0-1046.50~16.04.14.15.0-1050.54~16.04.14.15.0-1051.55~16.04.14.15.0-1053.57~16.04.14.15.0-1054.58~16.04.14.15.0-1056.61~16.04.14.15.0-1058.64~16.04.14.15.0-1059.65~16.04.14.15.0-1061.67~16.04.14.15.0-1062.68~16.04.14.15.0-1064.71~16.04.14.15.0-1065.73~16.04.14.15.0-1066.74~16.04.14.15.0-1067.75~16.04.14.15.0-1068.76~16.04.14.15.0-1069.77~16.04.14.15.0-1070.78~16.04.14.15.0-1071.79~16.04.14.15.0-1072.80~16.04.14.15.0-1075.83~16.04.14.15.0-1078.86~16.04.14.15.0-1079.87~16.04.14.15.0-1080.88~16.04.14.15.0-1081.89~16.04.14.15.0-1082.90~16.04.1	4.15.0-1148.159~16.04.1
`linux-hwe-edge` Ubuntu:16.04:LTS	All versions, plus listed versions 4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1 Show 18 moreShow less 4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1	None known
`linux-fips` Ubuntu:Pro:FIPS-updates:16.04:LTS	before 4.4.0-1117.124, plus listed versions 4.4.0-1003.34.4.0-1005.54.4.0-1006.64.4.0-1008.104.4.0-1010.13 Show 45 moreShow less 4.4.0-1011.144.4.0-1012.164.4.0-1013.174.4.0-1015.204.4.0-1017.224.4.0-1019.244.4.0-1021.264.4.0-1022.274.4.0-1023.284.4.0-1025.304.4.0-1026.314.4.0-1027.324.4.0-1028.334.4.0-1029.344.4.0-1031.364.4.0-1032.374.4.0-1033.384.4.0-1034.394.4.0-1041.464.4.0-1042.474.4.0-1043.484.4.0-1044.494.4.0-1045.504.4.0-1046.514.4.0-1048.534.4.0-1049.554.4.0-1051.574.4.0-1052.584.4.0-1054.604.4.0-1055.614.4.0-1056.624.4.0-1057.634.4.0-1058.644.4.0-1060.664.4.0-1061.674.4.0-1062.684.4.0-1063.694.4.0-1064.704.4.0-1065.714.4.0-1066.724.4.0-1067.734.4.0-1068.744.4.0-1069.754.4.0-1071.774.4.0-1072.78	4.4.0-1117.124
`linux-fips` Ubuntu:Pro:FIPS:16.04:LTS	All versions, plus listed versions 4.4.0-1001.14.4.0-1002.2	None known
`linux` Ubuntu:Pro:18.04:LTS	before 4.15.0-241.253, plus listed versions 4.13.0-16.194.13.0-17.204.13.0-25.294.13.0-32.354.15.0-10.11 Show 45 moreShow less 4.15.0-12.134.15.0-13.144.15.0-15.164.15.0-19.204.15.0-20.214.15.0-22.244.15.0-23.254.15.0-24.264.15.0-29.314.15.0-30.324.15.0-32.354.15.0-33.364.15.0-34.374.15.0-36.394.15.0-38.414.15.0-39.424.15.0-42.454.15.0-43.464.15.0-44.474.15.0-45.484.15.0-46.494.15.0-47.504.15.0-48.514.15.0-50.544.15.0-51.554.15.0-52.564.15.0-54.584.15.0-55.604.15.0-58.644.15.0-60.674.15.0-62.694.15.0-64.734.15.0-65.744.15.0-66.754.15.0-69.784.15.0-70.794.15.0-72.814.15.0-74.844.15.0-76.864.15.0-88.884.15.0-91.924.15.0-96.974.15.0-99.1004.15.0-101.1024.15.0-106.107	4.15.0-241.253
`linux-aws` Ubuntu:Pro:18.04:LTS	before 4.15.0-1184.197, plus listed versions 4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1007.7 Show 45 moreShow less 4.15.0-1009.94.15.0-1010.104.15.0-1011.114.15.0-1016.164.15.0-1017.174.15.0-1019.194.15.0-1020.204.15.0-1021.214.15.0-1023.234.15.0-1025.254.15.0-1027.274.15.0-1029.304.15.0-1031.334.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1035.374.15.0-1037.394.15.0-1039.414.15.0-1040.424.15.0-1041.434.15.0-1043.454.15.0-1044.464.15.0-1045.474.15.0-1047.494.15.0-1048.504.15.0-1050.524.15.0-1051.534.15.0-1052.544.15.0-1054.564.15.0-1056.584.15.0-1057.594.15.0-1058.604.15.0-1060.624.15.0-1063.674.15.0-1065.694.15.0-1066.704.15.0-1067.714.15.0-1073.774.15.0-1076.804.15.0-1077.814.15.0-1079.834.15.0-1080.844.15.0-1082.864.15.0-1083.87	4.15.0-1184.197
`linux-aws-5.0` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30	None known
`linux-aws-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1 Show 5 moreShow less 5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37	None known
`linux-aws-5.4` Ubuntu:Pro:18.04:LTS	before 5.4.0-1118.128~18.04.1, plus listed versions 5.4.0-1018.18~18.04.15.4.0-1020.20~18.04.25.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1 Show 45 moreShow less 5.4.0-1028.29~18.04.15.4.0-1029.30~18.04.15.4.0-1030.31~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.37~18.04.15.4.0-1037.39~18.04.15.4.0-1038.40~18.04.15.4.0-1039.41~18.04.15.4.0-1041.43~18.04.15.4.0-1043.45~18.04.15.4.0-1045.47~18.04.15.4.0-1047.49~18.04.15.4.0-1048.50~18.04.15.4.0-1049.51~18.04.15.4.0-1051.53~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1058.61~18.04.35.4.0-1059.62~18.04.15.4.0-1060.63~18.04.15.4.0-1061.64~18.04.15.4.0-1063.66~18.04.15.4.0-1064.67~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1068.72~18.04.15.4.0-1069.73~18.04.15.4.0-1071.76~18.04.15.4.0-1072.77~18.04.15.4.0-1075.80~18.04.15.4.0-1078.84~18.04.15.4.0-1080.87~18.04.15.4.0-1081.88~18.04.15.4.0-1083.90~18.04.15.4.0-1084.91~18.04.15.4.0-1085.92~18.04.15.4.0-1086.93~18.04.15.4.0-1088.96~18.04.15.4.0-1089.97~18.04.15.4.0-1090.98~18.04.15.4.0-1092.100~18.04.25.4.0-1093.102~18.04.2	5.4.0-1118.128~18.04.1
`linux-azure` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9 Show 39 moreShow less 4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38	None known
`linux-azure-4.15` Ubuntu:Pro:18.04:LTS	before 4.15.0-1192.207, plus listed versions 4.15.0-1082.924.15.0-1083.934.15.0-1089.994.15.0-1091.1014.15.0-1092.102 Show 45 moreShow less 4.15.0-1093.1034.15.0-1095.1054.15.0-1096.1064.15.0-1099.1104.15.0-1100.1114.15.0-1102.1134.15.0-1103.1144.15.0-1104.1164.15.0-1106.1184.15.0-1108.1204.15.0-1109.1214.15.0-1110.1224.15.0-1111.1234.15.0-1112.1254.15.0-1113.1264.15.0-1114.1274.15.0-1115.1284.15.0-1118.1314.15.0-1121.1344.15.0-1122.1354.15.0-1123.1364.15.0-1124.1374.15.0-1125.1384.15.0-1126.1394.15.0-1127.1404.15.0-1129.1424.15.0-1130.1434.15.0-1131.1444.15.0-1133.1464.15.0-1134.1474.15.0-1136.1494.15.0-1137.1504.15.0-1138.1514.15.0-1139.1524.15.0-1142.1564.15.0-1145.1604.15.0-1146.1614.15.0-1149.1644.15.0-1150.1654.15.0-1151.1664.15.0-1153.1684.15.0-1157.1724.15.0-1158.1734.15.0-1159.1744.15.0-1161.176	4.15.0-1192.207
`linux-azure-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1 Show 11 moreShow less 5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36	None known
`linux-azure-5.4` Ubuntu:Pro:18.04:LTS	before 5.4.0-1123.130~18.04.1, plus listed versions 5.4.0-1020.20~18.04.15.4.0-1022.22~18.04.15.4.0-1023.23~18.04.15.4.0-1025.25~18.04.15.4.0-1026.26~18.04.1 Show 45 moreShow less 5.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.36~18.04.15.4.0-1036.38~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1041.43~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1047.49~18.04.15.4.0-1048.50~18.04.15.4.0-1049.51~18.04.15.4.0-1051.53~18.04.15.4.0-1055.57~18.04.15.4.0-1056.58~18.04.15.4.0-1058.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1064.67~18.04.15.4.0-1065.68~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1069.72~18.04.15.4.0-1070.73~18.04.15.4.0-1072.75~18.04.15.4.0-1073.76~18.04.15.4.0-1074.77~18.04.15.4.0-1077.80~18.04.15.4.0-1078.81~18.04.15.4.0-1080.83~18.04.25.4.0-1083.87~18.04.15.4.0-1085.90~18.04.15.4.0-1086.91~18.04.15.4.0-1089.94~18.04.15.4.0-1090.95~18.04.15.4.0-1091.96~18.04.15.4.0-1094.100~18.04.15.4.0-1095.101~18.04.15.4.0-1098.104~18.04.25.4.0-1100.106~18.04.15.4.0-1101.107~18.04.1	5.4.0-1123.130~18.04.1
`linux-azure-edge` Ubuntu:18.04:LTS	All versions, plus listed versions 4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2	None known
`linux-gcp` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8 Show 33 moreShow less 4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35	None known
`linux-gcp-4.15` Ubuntu:Pro:18.04:LTS	before 4.15.0-1177.194, plus listed versions 4.15.0-1071.814.15.0-1077.874.15.0-1078.884.15.0-1080.904.15.0-1081.92 Show 45 moreShow less 4.15.0-1083.944.15.0-1084.954.15.0-1086.984.15.0-1087.1004.15.0-1088.1014.15.0-1090.1034.15.0-1091.1044.15.0-1092.1054.15.0-1093.1064.15.0-1094.1074.15.0-1095.1084.15.0-1096.1094.15.0-1097.1104.15.0-1098.1114.15.0-1099.1124.15.0-1100.1134.15.0-1103.1164.15.0-1106.1204.15.0-1107.1214.15.0-1108.1224.15.0-1109.1234.15.0-1110.1244.15.0-1111.1254.15.0-1112.1264.15.0-1114.1284.15.0-1115.1294.15.0-1116.1304.15.0-1118.1324.15.0-1119.1334.15.0-1120.1344.15.0-1121.1354.15.0-1122.1364.15.0-1124.1384.15.0-1127.1424.15.0-1130.1464.15.0-1131.1474.15.0-1134.1504.15.0-1135.1514.15.0-1136.1524.15.0-1137.1534.15.0-1138.1544.15.0-1141.1574.15.0-1142.1584.15.0-1143.1594.15.0-1145.161	4.15.0-1177.194
`linux-gcp-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1 Show 8 moreShow less 5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1	None known
`linux-gcp-5.4` Ubuntu:Pro:18.04:LTS	before 5.4.0-1122.131~18.04.1, plus listed versions 5.4.0-1019.19~18.04.25.4.0-1021.21~18.04.15.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1 Show 45 moreShow less 5.4.0-1028.29~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.15.4.0-1033.35~18.04.15.4.0-1034.37~18.04.15.4.0-1036.39~18.04.15.4.0-1037.40~18.04.15.4.0-1038.41~18.04.15.4.0-1040.43~18.04.15.4.0-1041.44~18.04.15.4.0-1042.45~18.04.15.4.0-1043.46~18.04.15.4.0-1044.47~18.04.25.4.0-1046.49~18.04.15.4.0-1049.53~18.04.15.4.0-1051.55~18.04.15.4.0-1052.56~18.04.15.4.0-1053.57~18.04.15.4.0-1055.59~18.04.15.4.0-1056.60~18.04.15.4.0-1057.61~18.04.15.4.0-1058.62~18.04.15.4.0-1059.63~18.04.15.4.0-1060.64~18.04.15.4.0-1062.66~18.04.15.4.0-1063.67~18.04.15.4.0-1064.68~18.04.15.4.0-1065.69~18.04.15.4.0-1067.71~18.04.15.4.0-1068.72~18.04.15.4.0-1069.73~18.04.15.4.0-1072.77~18.04.15.4.0-1073.78~18.04.15.4.0-1075.80~18.04.15.4.0-1078.84~18.04.15.4.0-1080.87~18.04.15.4.0-1083.91~18.04.15.4.0-1084.92~18.04.15.4.0-1086.94~18.04.15.4.0-1087.95~18.04.15.4.0-1089.97~18.04.15.4.0-1092.101~18.04.15.4.0-1093.102~18.04.15.4.0-1096.105~18.04.2	5.4.0-1122.131~18.04.1
`linux-gke-4.15` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38 Show 28 moreShow less 4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84	None known
`linux-gke-5.4` Ubuntu:18.04:LTS	All versions, plus listed versions 5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.1 Show 32 moreShow less 5.4.0-1033.35~18.04.15.4.0-1035.37~18.04.15.4.0-1036.38~18.04.15.4.0-1037.39~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1042.44~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.15.4.0-1052.55~18.04.15.4.0-1053.56~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1071.76~18.04.35.4.0-1072.77~18.04.15.4.0-1074.79~18.04.15.4.0-1076.82~18.04.15.4.0-1078.84~18.04.15.4.0-1080.86~18.04.1	None known
`linux-gkeop-5.4` Ubuntu:18.04:LTS	All versions, plus listed versions 5.4.0-1001.15.4.0-1003.35.4.0-1004.55.4.0-1005.65.4.0-1007.8~18.04.1 Show 32 moreShow less 5.4.0-1008.9~18.04.15.4.0-1009.10~18.04.15.4.0-1010.11~18.04.15.4.0-1011.12~18.04.25.4.0-1012.13~18.04.15.4.0-1013.14~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1016.17~18.04.15.4.0-1018.19~18.04.15.4.0-1021.22~18.04.15.4.0-1022.23~18.04.15.4.0-1023.24~18.04.15.4.0-1024.25~18.04.15.4.0-1025.26~18.04.15.4.0-1026.27~18.04.15.4.0-1027.28~18.04.15.4.0-1029.30~18.04.25.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1033.34~18.04.15.4.0-1034.35~18.04.15.4.0-1036.37~18.04.15.4.0-1037.38~18.04.15.4.0-1038.39~18.04.15.4.0-1039.40~18.04.15.4.0-1040.41~18.04.15.4.0-1043.44~18.04.15.4.0-1046.48~18.04.15.4.0-1048.51~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.1	None known
`linux-hwe` Ubuntu:18.04:LTS	All versions, plus listed versions 4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1 Show 38 moreShow less 4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72	None known
`linux-hwe-5.4` Ubuntu:Pro:18.04:LTS	before 5.4.0-171.189~18.04.1, plus listed versions 5.4.0-37.41~18.04.15.4.0-39.43~18.04.15.4.0-40.44~18.04.15.4.0-42.46~18.04.15.4.0-45.49~18.04.2 Show 45 moreShow less 5.4.0-47.51~18.04.15.4.0-48.52~18.04.15.4.0-51.56~18.04.15.4.0-52.57~18.04.15.4.0-53.59~18.04.15.4.0-54.60~18.04.15.4.0-56.62~18.04.15.4.0-58.64~18.04.15.4.0-59.65~18.04.15.4.0-60.67~18.04.15.4.0-62.70~18.04.15.4.0-64.72~18.04.15.4.0-65.73~18.04.15.4.0-66.74~18.04.25.4.0-67.75~18.04.15.4.0-70.78~18.04.15.4.0-71.79~18.04.15.4.0-72.80~18.04.15.4.0-73.82~18.04.15.4.0-74.83~18.04.15.4.0-77.86~18.04.15.4.0-80.90~18.04.15.4.0-81.91~18.04.15.4.0-84.94~18.04.15.4.0-86.97~18.04.15.4.0-87.98~18.04.15.4.0-89.100~18.04.15.4.0-90.101~18.04.15.4.0-91.102~18.04.15.4.0-92.103~18.04.25.4.0-94.106~18.04.15.4.0-96.109~18.04.15.4.0-97.110~18.04.15.4.0-99.112~18.04.15.4.0-100.113~18.04.15.4.0-104.118~18.04.15.4.0-105.119~18.04.15.4.0-107.121~18.04.15.4.0-109.123~18.04.15.4.0-110.124~18.04.15.4.0-113.127~18.04.15.4.0-117.132~18.04.15.4.0-120.136~18.04.15.4.0-121.137~18.04.15.4.0-122.138~18.04.1	5.4.0-171.189~18.04.1
`linux-hwe-edge` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-15.16~18.04.15.0.0-16.17~18.04.15.0.0-17.18~18.04.15.0.0-19.20~18.04.15.0.0-20.21~18.04.1 Show 5 moreShow less 5.3.0-19.20~18.04.25.3.0-22.24~18.04.15.3.0-23.25~18.04.15.3.0-23.25~18.04.25.3.0-24.26~18.04.2	None known
`linux-ibm-5.4` Ubuntu:Pro:18.04:LTS	before 5.4.0-1065.70~18.04.1, plus listed versions 5.4.0-1010.11~18.04.25.4.0-1012.13~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1017.19~18.04.1 Show 36 moreShow less 5.4.0-1018.20~18.04.15.4.0-1019.21~18.04.15.4.0-1020.22~18.04.15.4.0-1021.23~18.04.15.4.0-1023.25~18.04.15.4.0-1026.29~18.04.15.4.0-1028.32~18.04.15.4.0-1029.33~18.04.15.4.0-1031.35~18.04.15.4.0-1032.36~18.04.15.4.0-1033.37~18.04.15.4.0-1034.38~18.04.15.4.0-1036.41~18.04.15.4.0-1037.42~18.04.15.4.0-1040.45~18.04.25.4.0-1041.46~18.04.15.4.0-1042.47~18.04.15.4.0-1044.49~18.04.15.4.0-1045.50~18.04.15.4.0-1046.51~18.04.15.4.0-1047.52~18.04.15.4.0-1048.53~18.04.15.4.0-1049.54~18.04.15.4.0-1050.55~18.04.15.4.0-1051.56~18.04.15.4.0-1052.57~18.04.15.4.0-1053.58~18.04.15.4.0-1054.59~18.04.15.4.0-1056.61~18.04.15.4.0-1057.62~18.04.15.4.0-1058.63~18.04.15.4.0-1059.64~18.04.15.4.0-1060.65~18.04.15.4.0-1061.66~18.04.15.4.0-1063.68~18.04.15.4.0-1064.69~18.04.1	5.4.0-1065.70~18.04.1
`linux-kvm` Ubuntu:Pro:18.04:LTS	before 4.15.0-1167.172, plus listed versions 4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1006.64.15.0-1008.8 Show 45 moreShow less 4.15.0-1010.104.15.0-1011.114.15.0-1012.124.15.0-1016.164.15.0-1017.174.15.0-1019.194.15.0-1020.204.15.0-1021.214.15.0-1023.234.15.0-1025.254.15.0-1026.264.15.0-1027.274.15.0-1028.284.15.0-1029.294.15.0-1030.304.15.0-1031.314.15.0-1032.324.15.0-1034.344.15.0-1035.354.15.0-1036.364.15.0-1038.384.15.0-1039.394.15.0-1042.424.15.0-1043.434.15.0-1044.444.15.0-1046.464.15.0-1047.474.15.0-1048.484.15.0-1050.504.15.0-1051.514.15.0-1052.524.15.0-1053.534.15.0-1056.574.15.0-1058.594.15.0-1059.604.15.0-1060.614.15.0-1067.684.15.0-1069.704.15.0-1071.724.15.0-1072.734.15.0-1074.754.15.0-1075.764.15.0-1077.794.15.0-1079.814.15.0-1081.83	4.15.0-1167.172
`linux-oem` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12 Show 45 moreShow less 4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114	None known
`linux-oracle` Ubuntu:Pro:18.04:LTS	before 4.15.0-1146.157, plus listed versions 4.15.0-1007.94.15.0-1008.104.15.0-1009.114.15.0-1010.124.15.0-1011.13 Show 45 moreShow less 4.15.0-1013.154.15.0-1014.164.15.0-1015.174.15.0-1017.194.15.0-1018.204.15.0-1021.234.15.0-1022.254.15.0-1023.264.15.0-1025.284.15.0-1026.294.15.0-1027.304.15.0-1029.324.15.0-1030.334.15.0-1031.344.15.0-1033.364.15.0-1035.394.15.0-1037.414.15.0-1038.424.15.0-1039.434.15.0-1045.494.15.0-1047.514.15.0-1048.524.15.0-1050.544.15.0-1051.554.15.0-1053.574.15.0-1054.584.15.0-1057.624.15.0-1058.644.15.0-1059.654.15.0-1061.674.15.0-1062.684.15.0-1063.704.15.0-1064.714.15.0-1065.734.15.0-1066.744.15.0-1067.754.15.0-1068.764.15.0-1069.774.15.0-1070.784.15.0-1071.794.15.0-1072.804.15.0-1075.834.15.0-1078.864.15.0-1079.874.15.0-1080.88	4.15.0-1146.157
`linux-oracle-5.0` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19	None known
`linux-oracle-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1 Show 4 moreShow less 5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1	None known
`linux-oracle-5.4` Ubuntu:Pro:18.04:LTS	before 5.4.0-1117.126~18.04.1, plus listed versions 5.4.0-1019.19~18.04.15.4.0-1021.21~18.04.15.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1 Show 45 moreShow less 5.4.0-1028.29~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1033.355.4.0-1034.36~18.04.15.4.0-1035.38~18.04.15.4.0-1037.40~18.04.15.4.0-1038.41~18.04.15.4.0-1039.42~18.04.15.4.0-1041.44~18.04.15.4.0-1042.45~18.04.15.4.0-1043.46~18.04.15.4.0-1044.47~18.04.15.4.0-1046.50~18.04.25.4.0-1048.52~18.04.15.4.0-1049.53~18.04.15.4.0-1052.56~18.04.15.4.0-1053.57~18.04.15.4.0-1054.58~18.04.15.4.0-1055.59~18.04.15.4.0-1056.60~18.04.15.4.0-1057.61~18.04.15.4.0-1058.62~18.04.15.4.0-1059.63~18.04.15.4.0-1061.65~18.04.15.4.0-1062.66~18.04.15.4.0-1063.67~18.04.15.4.0-1064.68~18.04.15.4.0-1066.71~18.04.15.4.0-1067.72~18.04.15.4.0-1069.75~18.04.15.4.0-1070.76~18.04.15.4.0-1071.77~18.04.15.4.0-1073.79~18.04.15.4.0-1076.83~18.04.15.4.0-1078.86~18.04.15.4.0-1079.87~18.04.15.4.0-1081.89~18.04.15.4.0-1082.90~18.04.15.4.0-1083.91~18.04.15.4.0-1084.92~18.04.15.4.0-1086.95~18.04.15.4.0-1087.96~18.04.15.4.0-1090.99~18.04.25.4.0-1091.100~18.04.1	5.4.0-1117.126~18.04.1
`linux-raspi-5.4` Ubuntu:Pro:18.04:LTS	before 5.4.0-1102.114~18.04.1, plus listed versions 5.4.0-1013.13~18.04.15.4.0-1015.15~18.04.15.4.0-1016.17~18.04.15.4.0-1018.20~18.04.15.4.0-1019.21~18.04.1 Show 45 moreShow less 5.4.0-1021.24~18.04.15.4.0-1022.25~18.04.15.4.0-1023.26~18.04.15.4.0-1025.28~18.04.15.4.0-1026.29~18.04.15.4.0-1028.31~18.04.15.4.0-1029.32~18.04.15.4.0-1030.33~18.04.15.4.0-1032.35~18.04.15.4.0-1033.36~18.04.15.4.0-1034.37~18.04.15.4.0-1035.38~18.04.15.4.0-1036.39~18.04.15.4.0-1038.41~18.04.15.4.0-1041.45~18.04.15.4.0-1042.46~18.04.35.4.0-1043.47~18.04.15.4.0-1044.48~18.04.15.4.0-1045.49~18.04.15.4.0-1046.50~18.04.15.4.0-1047.52~18.04.15.4.0-1048.53~18.04.15.4.0-1050.56~18.04.15.4.0-1052.58~18.04.15.4.0-1053.60~18.04.15.4.0-1055.62~18.04.15.4.0-1056.63~18.04.15.4.0-1058.65~18.04.15.4.0-1059.66~18.04.15.4.0-1060.68~18.04.15.4.0-1062.70~18.04.15.4.0-1065.75~18.04.15.4.0-1066.76~18.04.15.4.0-1068.78~18.04.15.4.0-1069.79~18.04.15.4.0-1070.80~18.04.15.4.0-1071.81~18.04.15.4.0-1073.84~18.04.15.4.0-1074.85~18.04.15.4.0-1077.88~18.04.25.4.0-1078.89~18.04.15.4.0-1079.90~18.04.15.4.0-1080.91~18.04.15.4.0-1081.92~18.04.15.4.0-1082.93~18.04.1	5.4.0-1102.114~18.04.1
`linux-aws-fips` Ubuntu:Pro:FIPS-updates:18.04:LTS	before 4.15.0-2122.128, plus listed versions 4.15.0-2000.44.15.0-2018.184.15.0-2021.214.15.0-2022.224.15.0-2024.24 Show 45 moreShow less 4.15.0-2025.254.15.0-2026.264.15.0-2027.274.15.0-2030.314.15.0-2031.324.15.0-2033.344.15.0-2034.354.15.0-2035.374.15.0-2036.384.15.0-2037.394.15.0-2038.404.15.0-2039.414.15.0-2040.424.15.0-2041.434.15.0-2042.444.15.0-2044.464.15.0-2045.474.15.0-2048.504.15.0-2051.534.15.0-2052.544.15.0-2053.554.15.0-2054.564.15.0-2055.574.15.0-2056.584.15.0-2057.594.15.0-2059.614.15.0-2060.624.15.0-2061.634.15.0-2063.664.15.0-2064.674.15.0-2065.684.15.0-2066.694.15.0-2067.704.15.0-2069.724.15.0-2072.764.15.0-2075.804.15.0-2076.814.15.0-2078.834.15.0-2079.844.15.0-2080.854.15.0-2081.874.15.0-2082.884.15.0-2083.894.15.0-2085.914.15.0-2087.93	4.15.0-2122.128
`linux-azure-fips` Ubuntu:Pro:FIPS-updates:18.04:LTS	before 4.15.0-2101.107, plus listed versions 4.15.0-1002.24.15.0-2006.74.15.0-2007.84.15.0-2008.94.15.0-2009.10 Show 45 moreShow less 4.15.0-2012.144.15.0-2013.154.15.0-2015.174.15.0-2016.184.15.0-2017.204.15.0-2018.214.15.0-2020.234.15.0-2021.244.15.0-2022.254.15.0-2023.264.15.0-2024.274.15.0-2025.284.15.0-2026.294.15.0-2027.304.15.0-2030.334.15.0-2033.374.15.0-2034.384.15.0-2035.394.15.0-2036.404.15.0-2037.414.15.0-2038.424.15.0-2039.434.15.0-2041.454.15.0-2042.464.15.0-2043.474.15.0-2045.494.15.0-2046.504.15.0-2047.514.15.0-2048.524.15.0-2049.534.15.0-2050.544.15.0-2053.584.15.0-2056.624.15.0-2057.634.15.0-2059.654.15.0-2060.664.15.0-2062.684.15.0-2066.724.15.0-2067.734.15.0-2068.744.15.0-2070.764.15.0-2071.774.15.0-2072.784.15.0-2073.794.15.0-2074.80	4.15.0-2101.107
`linux-fips` Ubuntu:Pro:FIPS-updates:18.04:LTS	before 4.15.0-1139.150, plus listed versions 4.15.0-1027.324.15.0-1029.344.15.0-1034.394.15.0-1035.404.15.0-1037.42 Show 45 moreShow less 4.15.0-1038.434.15.0-1039.444.15.0-1040.454.15.0-1041.464.15.0-1044.504.15.0-1045.524.15.0-1046.534.15.0-1048.554.15.0-1049.564.15.0-1050.584.15.0-1051.594.15.0-1052.604.15.0-1053.614.15.0-1054.624.15.0-1055.634.15.0-1056.644.15.0-1057.654.15.0-1058.664.15.0-1059.674.15.0-1060.684.15.0-1063.714.15.0-1066.754.15.0-1067.764.15.0-1068.774.15.0-1069.784.15.0-1070.794.15.0-1071.804.15.0-1072.814.15.0-1073.824.15.0-1075.844.15.0-1076.854.15.0-1078.874.15.0-1080.894.15.0-1081.904.15.0-1083.924.15.0-1084.934.15.0-1085.944.15.0-1087.964.15.0-1090.1004.15.0-1093.1044.15.0-1094.1054.15.0-1096.1074.15.0-1097.1084.15.0-1098.1094.15.0-1099.110	4.15.0-1139.150
`linux-gcp-fips` Ubuntu:Pro:FIPS-updates:18.04:LTS	before 4.15.0-2085.91, plus listed versions 4.15.0-2013.144.15.0-2016.184.15.0-2017.194.15.0-2018.204.15.0-2019.21 Show 45 moreShow less 4.15.0-2020.224.15.0-2021.234.15.0-2022.244.15.0-2024.264.15.0-2025.274.15.0-2026.284.15.0-2028.314.15.0-2029.324.15.0-2030.334.15.0-2031.344.15.0-2032.354.15.0-2034.374.15.0-2037.414.15.0-2040.454.15.0-2041.464.15.0-2043.484.15.0-2044.494.15.0-2045.504.15.0-2047.524.15.0-2050.554.15.0-2052.574.15.0-2054.594.15.0-2055.604.15.0-2056.614.15.0-2057.624.15.0-2058.634.15.0-2059.644.15.0-2060.654.15.0-2061.664.15.0-2062.674.15.0-2063.684.15.0-2064.694.15.0-2065.704.15.0-2066.714.15.0-2067.724.15.0-2068.734.15.0-2069.744.15.0-2070.754.15.0-2071.764.15.0-2072.774.15.0-2073.784.15.0-2074.794.15.0-2075.804.15.0-2076.814.15.0-2077.83	4.15.0-2085.91
`linux-aws-fips` Ubuntu:Pro:FIPS:18.04:LTS	All versions, plus listed versions 4.15.0-2000.4	None known
`linux-azure-fips` Ubuntu:Pro:FIPS:18.04:LTS	All versions, plus listed versions 4.15.0-1002.2	None known
`linux-fips` Ubuntu:Pro:FIPS:18.04:LTS	All versions, plus listed versions 4.15.0-1011.12	None known
`linux-gcp-fips` Ubuntu:Pro:FIPS:18.04:LTS	All versions, plus listed versions 4.15.0-1001.1	None known
`linux` Ubuntu:20.04:LTS	before 5.4.0-171.189, plus listed versions 5.3.0-18.195.3.0-24.265.4.0-9.125.4.0-18.225.4.0-21.25 Show 45 moreShow less 5.4.0-24.285.4.0-25.295.4.0-26.305.4.0-28.325.4.0-29.335.4.0-31.355.4.0-33.375.4.0-37.415.4.0-39.435.4.0-40.445.4.0-42.465.4.0-45.495.4.0-47.515.4.0-48.525.4.0-51.565.4.0-52.575.4.0-53.595.4.0-54.605.4.0-56.625.4.0-58.645.4.0-59.655.4.0-60.675.4.0-62.705.4.0-64.725.4.0-65.735.4.0-66.745.4.0-67.755.4.0-70.785.4.0-71.795.4.0-72.805.4.0-73.825.4.0-74.835.4.0-77.865.4.0-80.905.4.0-81.915.4.0-84.945.4.0-86.975.4.0-88.995.4.0-89.1005.4.0-90.1015.4.0-91.1025.4.0-92.1035.4.0-94.1065.4.0-96.1095.4.0-97.110	5.4.0-171.189
`linux-aws` Ubuntu:20.04:LTS	before 5.4.0-1118.128, plus listed versions 5.3.0-1003.35.3.0-1008.95.3.0-1009.105.3.0-1010.115.4.0-1005.5 Show 45 moreShow less 5.4.0-1007.75.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1017.175.4.0-1018.185.4.0-1020.205.4.0-1021.215.4.0-1022.225.4.0-1024.245.4.0-1025.255.4.0-1028.295.4.0-1029.305.4.0-1030.315.4.0-1032.335.4.0-1034.355.4.0-1035.375.4.0-1037.395.4.0-1038.405.4.0-1039.415.4.0-1041.435.4.0-1043.455.4.0-1045.475.4.0-1047.495.4.0-1048.505.4.0-1049.515.4.0-1051.535.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1058.615.4.0-1059.625.4.0-1060.635.4.0-1061.645.4.0-1063.665.4.0-1064.675.4.0-1065.685.4.0-1066.695.4.0-1068.725.4.0-1069.735.4.0-1071.765.4.0-1072.775.4.0-1073.78	5.4.0-1118.128
`linux-aws-5.15` Ubuntu:20.04:LTS	before 5.15.0-1053.58~20.04.1, plus listed versions 5.15.0-1014.18~20.04.15.15.0-1015.19~20.04.15.15.0-1017.21~20.04.15.15.0-1019.23~20.04.15.15.0-1020.24~20.04.1 Show 26 moreShow less 5.15.0-1021.25~20.04.15.15.0-1022.26~20.04.15.15.0-1023.27~20.04.15.15.0-1026.30~20.04.25.15.0-1027.31~20.04.15.15.0-1028.32~20.04.15.15.0-1030.34~20.04.15.15.0-1031.35~20.04.15.15.0-1033.37~20.04.15.15.0-1034.38~20.04.15.15.0-1035.39~20.04.15.15.0-1036.40~20.04.15.15.0-1037.41~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.15.15.0-1040.45~20.04.15.15.0-1041.46~20.04.15.15.0-1043.48~20.04.15.15.0-1044.49~20.04.15.15.0-1045.50~20.04.15.15.0-1047.52~20.04.15.15.0-1048.53~20.04.15.15.0-1049.54~20.04.15.15.0-1050.55~20.04.15.15.0-1051.56~20.04.15.15.0-1052.57~20.04.1	5.15.0-1053.58~20.04.1
`linux-azure` Ubuntu:20.04:LTS	before 5.4.0-1123.130, plus listed versions 5.3.0-1003.35.3.0-1008.95.3.0-1009.105.4.0-1006.65.4.0-1008.8 Show 45 moreShow less 5.4.0-1009.95.4.0-1010.105.4.0-1012.125.4.0-1016.165.4.0-1019.195.4.0-1020.205.4.0-1022.225.4.0-1023.235.4.0-1025.255.4.0-1026.265.4.0-1031.325.4.0-1032.335.4.0-1034.355.4.0-1035.365.4.0-1036.385.4.0-1039.415.4.0-1040.425.4.0-1041.435.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1047.495.4.0-1048.505.4.0-1049.515.4.0-1051.535.4.0-1055.575.4.0-1056.585.4.0-1058.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1064.675.4.0-1065.685.4.0-1067.705.4.0-1068.715.4.0-1069.725.4.0-1070.735.4.0-1072.755.4.0-1073.765.4.0-1074.775.4.0-1077.805.4.0-1078.815.4.0-1080.835.4.0-1083.87	5.4.0-1123.130
`linux-azure-5.15` Ubuntu:20.04:LTS	before 5.15.0-1056.64~20.04.1, plus listed versions 5.15.0-1007.8~20.04.15.15.0-1008.9~20.04.15.15.0-1013.16~20.04.15.15.0-1014.17~20.04.15.15.0-1017.20~20.04.1 Show 28 moreShow less 5.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.29~20.04.15.15.0-1029.36~20.04.15.15.0-1030.37~20.04.15.15.0-1031.38~20.04.15.15.0-1033.40~20.04.15.15.0-1034.41~20.04.15.15.0-1035.42~20.04.15.15.0-1036.43~20.04.15.15.0-1037.44~20.04.15.15.0-1038.45~20.04.15.15.0-1039.46~20.04.15.15.0-1040.47~20.04.15.15.0-1041.48~20.04.15.15.0-1042.49~20.04.15.15.0-1043.50~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.15.15.0-1049.56~20.04.15.15.0-1050.57~20.04.15.15.0-1051.59~20.04.15.15.0-1052.60~20.04.15.15.0-1053.61~20.04.15.15.0-1054.62~20.04.1	5.15.0-1056.64~20.04.1

History

History
Recorded	Changed	Sources
Nov 3, 2026	facts	OSV
Nov 2, 2026	first indexed	CVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2023-52477 is a medium vulnerability (CVSS 5.5) in Linux, published February 29, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.24%, the 15th percentile. Fixed in bpftool 4.18.0-553.5.1.el8_10.