{"id":"CVE-2023-2019","aliases":["AZL-26378","DEBIAN-CVE-2023-2019","EUVD-2023-33547","GHSA-9vmw-8f7f-qhch","SUSE-SU-2023:2140-1","SUSE-SU-2023:2141-1","SUSE-SU-2023:2231-1","UBUNTU-CVE-2023-2019"],"status":"published","title":"A flaw was found in the Linux kernel's netdevsim device driver, within the scheduling of events....","description":"A flaw was found in the Linux kernel's netdevsim device driver, within the scheduling of events. This issue results from the improper management of a reference count. This may allow an attacker to create a denial of service condition on the system.","severity":{"version":"3.1","score":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.0034,"percentile":0.27657,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-911"],"published":"2023-04-24T00:00:00Z","modified":"2026-10-28T02:30:43Z","fixes":[{"ecosystem":"Azure Linux:2","package":"kernel","fixed_in":["5.15.111.1-1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"linux","fixed_in":["5.19.6-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"linux","fixed_in":["5.19.6-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"linux","fixed_in":["5.19.6-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"linux-aws-5.15","fixed_in":["5.15.0-1023.27~20.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"linux-azure-5.15","fixed_in":["5.15.0-1023.29~20.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"linux-azure-fde-5.15","fixed_in":["5.15.0-1029.36~20.04.1.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"linux-gcp-5.15","fixed_in":["5.15.0-1022.29~20.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"linux-gke-5.15","fixed_in":["5.15.0-1020.25~20.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"linux-gkeop-5.15","fixed_in":["5.15.0-1008.12~20.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"linux-hwe-5.15","fixed_in":["5.15.0-53.59~20.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"linux-intel-iotg-5.15","fixed_in":["5.15.0-1018.23~20.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"linux-lowlatency-hwe-5.15","fixed_in":["5.15.0-53.59~20.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"linux-oracle-5.15","fixed_in":["5.15.0-1022.28~20.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"linux-riscv-5.15","fixed_in":["5.15.0-1023.27~20.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"linux","fixed_in":["5.15.0-53.59"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"linux-aws","fixed_in":["5.15.0-1023.27"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"linux-azure","fixed_in":["5.15.0-1023.29"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"linux-azure-fde","fixed_in":["5.15.0-1024.30.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"linux-gcp","fixed_in":["5.15.0-1022.29"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"linux-gke","fixed_in":["5.15.0-1020.25"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"linux-gkeop","fixed_in":["5.15.0-1008.12"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"linux-ibm","fixed_in":["5.15.0-1018.21"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"linux-intel-iotg","fixed_in":["5.15.0-1018.23"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"linux-kvm","fixed_in":["5.15.0-1021.26"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"linux-lowlatency","fixed_in":["5.15.0-53.59"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"linux-nvidia","fixed_in":["5.15.0-1015.15"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"linux-oracle","fixed_in":["5.15.0-1022.28"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"linux-raspi","fixed_in":["5.15.0-1018.20"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:Realtime:22.04:LTS","package":"linux-realtime","fixed_in":["5.15.0-1025.28"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Azure Linux:2","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.111.1-1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.19.6-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.19.6-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.19.6-1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.24.63.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"kernel-default-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.24.63.1.150400.24.27.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.24.63.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"kernel-default-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.24.63.1.150400.24.27.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"kernel-64kb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.24.63.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.24.63.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"kernel-default-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.24.63.1.150400.24.27.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.24.63.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"kernel-zfcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.24.63.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP4","package":"kernel-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.24.63.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP4","package":"kernel-obs-build","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.24.63.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP4","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.24.63.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP4","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.24.63.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Legacy 15 SP4","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.24.63.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Live Patching 15 SP4","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.24.63.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Live Patching 15 SP4","package":"kernel-livepatch-SLE15-SP4_Update_12","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1-150400.9.3.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Availability Extension 15 SP4","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.24.63.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP4","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.24.63.1"}]}],"bundled":13},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.3","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.24.63.1"}]}],"bundled":13},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.3","package":"kernel-default-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.24.63.1.150400.24.27.1"}]}],"bundled":13},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"dtb-aarch64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.24.63.1"}]}],"bundled":13},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"kernel-64kb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.24.63.1"}]}],"bundled":13},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"kernel-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.24.63.1"}]}],"bundled":13},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.24.63.1"}]}],"bundled":13},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"kernel-default-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.24.63.1.150400.24.27.1"}]}],"bundled":13},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"kernel-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.24.63.1"}]}],"bundled":13},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"kernel-kvmsmall","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.24.63.1"}]}],"bundled":13},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"kernel-obs-build","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.24.63.1"}]}],"bundled":13},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"kernel-obs-qa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.24.63.1"}]}],"bundled":13},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.24.63.1"}]}],"bundled":13},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.24.63.1"}]}],"bundled":13},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"kernel-zfcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.24.63.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP4","package":"kernel-azure","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.14.49.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP4","package":"kernel-source-azure","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.14.49.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP4","package":"kernel-syms-azure","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.14.49.1"}]}],"bundled":13},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"kernel-azure","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.14.49.1"}]}],"bundled":13},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"kernel-source-azure","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.14.49.1"}]}],"bundled":13},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"kernel-syms-azure","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.14.49.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"kernel-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.15.28.2"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"kernel-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.15.28.2"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Live Patching 15 SP4","package":"kernel-livepatch-SLE15-SP4-RT_Update_7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1-150400.1.5.2"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Real Time Module 15 SP4","package":"kernel-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.15.28.2"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Real Time Module 15 SP4","package":"kernel-rt_debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.15.28.2"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Real Time Module 15 SP4","package":"kernel-source-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.15.28.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Real Time Module 15 SP4","package":"kernel-syms-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.15.28.1"}]}],"bundled":13},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.3","package":"kernel-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.15.28.2"}]}],"bundled":13},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"kernel-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.15.28.2"}]}],"bundled":13},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"kernel-rt_debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.15.28.2"}]}],"bundled":13},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"kernel-source-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.15.28.1"}]}],"bundled":13},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"kernel-syms-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.15.28.1"}]}],"bundled":13},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"linux-hwe-edge","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.8.0-28.30~16.04.1","4.8.0-30.32~16.04.1","4.8.0-32.34~16.04.1","4.8.0-34.36~16.04.1","4.10.0-14.16~16.04.1","4.10.0-19.21~16.04.1","4.10.0-20.22~16.04.1","4.10.0-21.23~16.04.1","4.10.0-22.24~16.04.1","4.10.0-24.28~16.04.1","4.10.0-26.30~16.04.1","4.11.0-13.19~16.04.1","4.11.0-14.20~16.04.1","4.13.0-16.19~16.04.3","4.13.0-17.20~16.04.1","4.13.0-19.22~16.04.1","4.13.0-21.24~16.04.1","4.13.0-25.29~16.04.2","4.15.0-13.14~16.04.1","4.15.0-15.16~16.04.1","4.15.0-20.21~16.04.1","4.15.0-22.24~16.04.1","4.15.0-23.25~16.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-aws-5.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.0.0-1021.24~18.04.1","5.0.0-1022.25~18.04.1","5.0.0-1023.26~18.04.1","5.0.0-1024.27~18.04.1","5.0.0-1025.28","5.0.0-1027.30"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-aws-5.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.3.0-1016.17~18.04.1","5.3.0-1017.18~18.04.1","5.3.0-1019.21~18.04.1","5.3.0-1023.25~18.04.1","5.3.0-1028.30~18.04.1","5.3.0-1030.32~18.04.1","5.3.0-1032.34~18.04.2","5.3.0-1033.35","5.3.0-1034.36","5.3.0-1035.37"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-azure","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.15.0-1002.2","4.15.0-1003.3","4.15.0-1004.4","4.15.0-1008.8","4.15.0-1009.9","4.15.0-1012.12","4.15.0-1013.13","4.15.0-1014.14","4.15.0-1018.18","4.15.0-1019.19","4.15.0-1021.21","4.15.0-1022.23","4.15.0-1023.24","4.15.0-1025.26","4.15.0-1028.29","4.15.0-1030.31","4.15.0-1031.32","4.15.0-1032.33","4.15.0-1035.36","4.15.0-1036.38","4.15.0-1037.39","4.18.0-1011.11~18.04.1","4.18.0-1013.13~18.04.1","4.18.0-1014.14~18.04.1","4.18.0-1018.18~18.04.1","4.18.0-1019.19~18.04.1","4.18.0-1020.20~18.04.1","4.18.0-1023.24~18.04.1","4.18.0-1024.25~18.04.1","4.18.0-1025.27~18.04.1","5.0.0-1014.14~18.04.1","5.0.0-1016.17~18.04.1","5.0.0-1018.19~18.04.1","5.0.0-1020.21~18.04.1","5.0.0-1022.23~18.04.1","5.0.0-1023.24~18.04.1","5.0.0-1025.27~18.04.1","5.0.0-1027.29~18.04.1","5.0.0-1028.30~18.04.1","5.0.0-1029.31~18.04.1","5.0.0-1031.33","5.0.0-1032.34","5.0.0-1035.37","5.0.0-1036.38"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-azure-5.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.3.0-1007.8~18.04.1","5.3.0-1008.9~18.04.1","5.3.0-1009.10~18.04.1","5.3.0-1010.11~18.04.1","5.3.0-1012.13~18.04.1","5.3.0-1013.14~18.04.1","5.3.0-1016.17~18.04.1","5.3.0-1018.19~18.04.1","5.3.0-1019.20~18.04.1","5.3.0-1020.21~18.04.1","5.3.0-1022.23~18.04.1","5.3.0-1028.29~18.04.1","5.3.0-1031.32~18.04.1","5.3.0-1032.33~18.04.1","5.3.0-1034.35~18.04.1","5.3.0-1035.36"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-azure-edge","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.18.0-1006.6~18.04.1","4.18.0-1007.7~18.04.1","4.18.0-1008.8~18.04.1","5.0.0-1012.12~18.04.2"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-gcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.15.0-1001.1","4.15.0-1003.3","4.15.0-1005.5","4.15.0-1006.6","4.15.0-1008.8","4.15.0-1009.9","4.15.0-1010.10","4.15.0-1014.14","4.15.0-1015.15","4.15.0-1017.18","4.15.0-1018.19","4.15.0-1019.20","4.15.0-1021.22","4.15.0-1023.24","4.15.0-1024.25","4.15.0-1025.26","4.15.0-1026.27","4.15.0-1027.28","4.15.0-1028.29","4.15.0-1029.31","4.15.0-1030.32","4.15.0-1032.34","4.15.0-1033.35","4.15.0-1034.36","4.15.0-1036.38","4.15.0-1037.39","4.15.0-1040.42","4.15.0-1042.45","4.15.0-1044.70","5.0.0-1020.20~18.04.1","5.0.0-1021.21~18.04.1","5.0.0-1025.26~18.04.1","5.0.0-1026.27~18.04.1","5.0.0-1028.29~18.04.1","5.0.0-1029.30~18.04.1","5.0.0-1031.32","5.0.0-1033.34","5.0.0-1034.35"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-gcp-5.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.3.0-1008.9~18.04.1","5.3.0-1009.10~18.04.1","5.3.0-1010.11~18.04.1","5.3.0-1012.13~18.04.1","5.3.0-1014.15~18.04.1","5.3.0-1016.17~18.04.1","5.3.0-1017.18~18.04.1","5.3.0-1018.19~18.04.1","5.3.0-1020.22~18.04.1","5.3.0-1026.28~18.04.1","5.3.0-1029.31~18.04.1","5.3.0-1030.32~18.04.1","5.3.0-1032.34~18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-gke-4.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.15.0-1030.32","4.15.0-1032.34","4.15.0-1033.35","4.15.0-1034.36","4.15.0-1036.38","4.15.0-1037.39","4.15.0-1040.42","4.15.0-1041.43","4.15.0-1042.44","4.15.0-1044.46","4.15.0-1045.48","4.15.0-1046.49","4.15.0-1048.51","4.15.0-1049.52","4.15.0-1050.53","4.15.0-1052.55","4.15.0-1055.58","4.15.0-1057.60","4.15.0-1058.61","4.15.0-1059.62","4.15.0-1063.66","4.15.0-1064.67","4.15.0-1066.69","4.15.0-1067.70","4.15.0-1069.72","4.15.0-1070.73","4.15.0-1072.76","4.15.0-1073.78","4.15.0-1074.79","4.15.0-1076.81","4.15.0-1077.82","4.15.0-1078.83","4.15.0-1079.84"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-gke-5.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-1025.25~18.04.1","5.4.0-1027.28~18.04.1","5.4.0-1029.31~18.04.1","5.4.0-1030.32~18.04.1","5.4.0-1032.34~18.04.1","5.4.0-1033.35~18.04.1","5.4.0-1035.37~18.04.1","5.4.0-1036.38~18.04.1","5.4.0-1037.39~18.04.1","5.4.0-1039.41~18.04.1","5.4.0-1040.42~18.04.1","5.4.0-1042.44~18.04.1","5.4.0-1043.45~18.04.1","5.4.0-1044.46~18.04.1","5.4.0-1046.48~18.04.1","5.4.0-1049.52~18.04.1","5.4.0-1051.54~18.04.1","5.4.0-1052.55~18.04.1","5.4.0-1053.56~18.04.1","5.4.0-1054.57~18.04.1","5.4.0-1055.58~18.04.1","5.4.0-1056.59~18.04.1","5.4.0-1057.60~18.04.1","5.4.0-1059.62~18.04.1","5.4.0-1061.64~18.04.1","5.4.0-1062.65~18.04.1","5.4.0-1063.66~18.04.1","5.4.0-1065.68~18.04.1","5.4.0-1066.69~18.04.1","5.4.0-1067.70~18.04.1","5.4.0-1068.71~18.04.1","5.4.0-1071.76~18.04.3","5.4.0-1072.77~18.04.1","5.4.0-1074.79~18.04.1","5.4.0-1076.82~18.04.1","5.4.0-1078.84~18.04.1","5.4.0-1080.86~18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-gkeop-5.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-1001.1","5.4.0-1003.3","5.4.0-1004.5","5.4.0-1005.6","5.4.0-1007.8~18.04.1","5.4.0-1008.9~18.04.1","5.4.0-1009.10~18.04.1","5.4.0-1010.11~18.04.1","5.4.0-1011.12~18.04.2","5.4.0-1012.13~18.04.1","5.4.0-1013.14~18.04.1","5.4.0-1014.15~18.04.1","5.4.0-1015.16~18.04.1","5.4.0-1016.17~18.04.1","5.4.0-1018.19~18.04.1","5.4.0-1021.22~18.04.1","5.4.0-1022.23~18.04.1","5.4.0-1023.24~18.04.1","5.4.0-1024.25~18.04.1","5.4.0-1025.26~18.04.1","5.4.0-1026.27~18.04.1","5.4.0-1027.28~18.04.1","5.4.0-1029.30~18.04.2","5.4.0-1031.32~18.04.1","5.4.0-1032.33~18.04.1","5.4.0-1033.34~18.04.1","5.4.0-1034.35~18.04.1","5.4.0-1036.37~18.04.1","5.4.0-1037.38~18.04.1","5.4.0-1038.39~18.04.1","5.4.0-1039.40~18.04.1","5.4.0-1040.41~18.04.1","5.4.0-1043.44~18.04.1","5.4.0-1046.48~18.04.1","5.4.0-1048.51~18.04.1","5.4.0-1049.52~18.04.1","5.4.0-1051.54~18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-hwe","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.18.0-13.14~18.04.1","4.18.0-14.15~18.04.1","4.18.0-15.16~18.04.1","4.18.0-16.17~18.04.1","4.18.0-17.18~18.04.1","4.18.0-18.19~18.04.1","4.18.0-20.21~18.04.1","4.18.0-21.22~18.04.1","4.18.0-22.23~18.04.1","4.18.0-24.25~18.04.1","4.18.0-25.26~18.04.1","5.0.0-23.24~18.04.1","5.0.0-25.26~18.04.1","5.0.0-27.28~18.04.1","5.0.0-29.31~18.04.1","5.0.0-31.33~18.04.1","5.0.0-32.34~18.04.2","5.0.0-35.38~18.04.1","5.0.0-36.39~18.04.1","5.0.0-37.40~18.04.1","5.3.0-26.28~18.04.1","5.3.0-28.30~18.04.1","5.3.0-40.32~18.04.1","5.3.0-42.34~18.04.1","5.3.0-45.37~18.04.1","5.3.0-46.38~18.04.1","5.3.0-51.44~18.04.2","5.3.0-53.47~18.04.1","5.3.0-59.53~18.04.1","5.3.0-61.55~18.04.1","5.3.0-62.56~18.04.1","5.3.0-64.58~18.04.1","5.3.0-65.59","5.3.0-66.60","5.3.0-67.61","5.3.0-68.63","5.3.0-69.65","5.3.0-70.66","5.3.0-72.68","5.3.0-73.69","5.3.0-74.70","5.3.0-75.71","5.3.0-76.72"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-oem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.15.0-1002.3","4.15.0-1004.5","4.15.0-1006.9","4.15.0-1008.11","4.15.0-1009.12","4.15.0-1012.15","4.15.0-1013.16","4.15.0-1015.18","4.15.0-1017.20","4.15.0-1018.21","4.15.0-1021.24","4.15.0-1024.29","4.15.0-1026.31","4.15.0-1028.33","4.15.0-1030.35","4.15.0-1033.38","4.15.0-1034.39","4.15.0-1035.40","4.15.0-1036.41","4.15.0-1038.43","4.15.0-1039.44","4.15.0-1043.48","4.15.0-1045.50","4.15.0-1050.57","4.15.0-1056.65","4.15.0-1057.66","4.15.0-1059.68","4.15.0-1063.72","4.15.0-1064.73","4.15.0-1065.75","4.15.0-1066.76","4.15.0-1067.77","4.15.0-1069.79","4.15.0-1073.83","4.15.0-1076.86","4.15.0-1079.89","4.15.0-1080.90","4.15.0-1081.91","4.15.0-1087.97","4.15.0-1090.100","4.15.0-1091.101","4.15.0-1093.103","4.15.0-1094.104","4.15.0-1096.106","4.15.0-1097.107","4.15.0-1099.109","4.15.0-1100.110","4.15.0-1101.112","4.15.0-1102.113","4.15.0-1103.114"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-oracle-5.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.0.0-1007.12~18.04.1","5.0.0-1008.13~18.04.1","5.0.0-1009.14~18.04.1","5.0.0-1010.15~18.04.1","5.0.0-1011.16","5.0.0-1013.18","5.0.0-1014.19"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-oracle-5.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.3.0-1011.12~18.04.1","5.3.0-1013.14~18.04.1","5.3.0-1014.15~18.04.1","5.3.0-1016.18~18.04.1","5.3.0-1018.20~18.04.1","5.3.0-1024.26~18.04.1","5.3.0-1027.29~18.04.1","5.3.0-1028.30~18.04.1","5.3.0-1030.32~18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-aws-5.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1023.27~20.04.1"}]}],"versions":["5.15.0-1014.18~20.04.1","5.15.0-1015.19~20.04.1","5.15.0-1017.21~20.04.1","5.15.0-1019.23~20.04.1","5.15.0-1020.24~20.04.1","5.15.0-1021.25~20.04.1","5.15.0-1022.26~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-azure-5.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1023.29~20.04.1"}]}],"versions":["5.15.0-1007.8~20.04.1","5.15.0-1008.9~20.04.1","5.15.0-1013.16~20.04.1","5.15.0-1014.17~20.04.1","5.15.0-1017.20~20.04.1","5.15.0-1019.24~20.04.1","5.15.0-1020.25~20.04.1","5.15.0-1021.26~20.04.1","5.15.0-1022.27~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-azure-fde-5.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1029.36~20.04.1.1"}]}],"versions":["5.15.0-1019.24~20.04.1.1","5.15.0-1020.25~20.04.1.1","5.15.0-1021.26~20.04.1.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-gcp-5.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1022.29~20.04.1"}]}],"versions":["5.15.0-1006.9~20.04.1","5.15.0-1012.17~20.04.1","5.15.0-1013.18~20.04.1","5.15.0-1016.21~20.04.1","5.15.0-1017.23~20.04.2","5.15.0-1018.24~20.04.1","5.15.0-1021.28~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-gke-5.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1020.25~20.04.1"}]}],"versions":["5.15.0-1011.14~20.04.1","5.15.0-1014.17~20.04.1","5.15.0-1015.18~20.04.1","5.15.0-1016.19~20.04.1","5.15.0-1019.23~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-gkeop-5.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1008.12~20.04.1"}]}],"versions":["5.15.0-1003.5~20.04.2","5.15.0-1005.7~20.04.1","5.15.0-1007.10~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-hwe-5.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-53.59~20.04.1"}]}],"versions":["5.15.0-33.34~20.04.1","5.15.0-41.44~20.04.1","5.15.0-43.46~20.04.1","5.15.0-46.49~20.04.1","5.15.0-48.54~20.04.1","5.15.0-50.56~20.04.1","5.15.0-52.58~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-intel-iotg-5.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1018.23~20.04.1"}]}],"versions":["5.15.0-1003.5~20.04.1","5.15.0-1008.11~20.04.1","5.15.0-1010.14~20.04.1","5.15.0-1015.20~20.04.2","5.15.0-1016.21~20.04.1","5.15.0-1017.22~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-lowlatency-hwe-5.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-53.59~20.04.1"}]}],"versions":["5.15.0-33.34~20.04.1","5.15.0-42.45~20.04.1","5.15.0-43.46~20.04.1","5.15.0-46.49~20.04.1","5.15.0-48.54~20.04.1","5.15.0-50.56~20.04.1","5.15.0-52.58~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-oracle-5.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1022.28~20.04.1"}]}],"versions":["5.15.0-1007.9~20.04.1","5.15.0-1013.17~20.04.1","5.15.0-1016.20~20.04.1","5.15.0-1017.22~20.04.1","5.15.0-1018.23~20.04.1","5.15.0-1019.24~20.04.1","5.15.0-1021.27~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-riscv-5.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1023.27~20.04.1"}]}],"versions":["5.15.0-1015.17~20.04.1","5.15.0-1017.19~20.04.1","5.15.0-1018.21~20.04.1","5.15.0-1019.22~20.04.1","5.15.0-1022.26~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-aws-5.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.11.0-1009.9~20.04.2","5.11.0-1014.15~20.04.1","5.11.0-1016.17~20.04.1","5.11.0-1017.18~20.04.1","5.11.0-1019.20~20.04.1","5.11.0-1020.21~20.04.2","5.11.0-1021.22~20.04.2","5.11.0-1022.23~20.04.1","5.11.0-1023.24~20.04.1","5.11.0-1025.27~20.04.1","5.11.0-1027.30~20.04.1","5.11.0-1028.31~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-aws-5.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.13.0-1008.9~20.04.2","5.13.0-1011.12~20.04.1","5.13.0-1012.13~20.04.1","5.13.0-1014.15~20.04.1","5.13.0-1017.19~20.04.1","5.13.0-1019.21~20.04.1","5.13.0-1021.23~20.04.2","5.13.0-1022.24~20.04.1","5.13.0-1023.25~20.04.1","5.13.0-1025.27~20.04.1","5.13.0-1028.31~20.04.1","5.13.0-1029.32~20.04.1","5.13.0-1031.35~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-aws-5.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.8.0-1035.37~20.04.1","5.8.0-1038.40~20.04.1","5.8.0-1041.43~20.04.1","5.8.0-1042.44~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-azure-5.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.11.0-1007.7~20.04.2","5.11.0-1012.13~20.04.1","5.11.0-1013.14~20.04.1","5.11.0-1015.16~20.04.1","5.11.0-1017.18~20.04.1","5.11.0-1019.20~20.04.1","5.11.0-1020.21~20.04.1","5.11.0-1021.22~20.04.1","5.11.0-1022.23~20.04.1","5.11.0-1023.24~20.04.1","5.11.0-1025.27~20.04.1","5.11.0-1027.30~20.04.1","5.11.0-1028.31~20.04.2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-azure-5.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.13.0-1009.10~20.04.2","5.13.0-1012.14~20.04.1","5.13.0-1013.15~20.04.1","5.13.0-1014.16~20.04.1","5.13.0-1017.19~20.04.1","5.13.0-1021.24~20.04.1","5.13.0-1022.26~20.04.1","5.13.0-1023.27~20.04.1","5.13.0-1025.29~20.04.1","5.13.0-1028.33~20.04.1","5.13.0-1029.34~20.04.1","5.13.0-1031.37~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-azure-5.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.8.0-1033.35~20.04.1","5.8.0-1036.38~20.04.1","5.8.0-1039.42~20.04.1","5.8.0-1040.43~20.04.1","5.8.0-1041.44~20.04.1","5.8.0-1042.45~20.04.1","5.8.0-1043.46~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-gcp-5.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.11.0-1009.10~20.04.1","5.11.0-1014.16~20.04.1","5.11.0-1017.19~20.04.1","5.11.0-1018.20~20.04.2","5.11.0-1020.22~20.04.1","5.11.0-1021.23~20.04.1","5.11.0-1022.24~20.04.1","5.11.0-1023.25~20.04.1","5.11.0-1024.26~20.04.1","5.11.0-1026.29~20.04.1","5.11.0-1028.32~20.04.1","5.11.0-1029.33~20.04.3"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-gcp-5.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.13.0-1008.9~20.04.3","5.13.0-1012.15~20.04.1","5.13.0-1013.16~20.04.1","5.13.0-1015.18~20.04.1","5.13.0-1019.23~20.04.1","5.13.0-1021.25~20.04.1","5.13.0-1023.28~20.04.1","5.13.0-1024.29~20.04.1","5.13.0-1025.30~20.04.1","5.13.0-1027.32~20.04.1","5.13.0-1030.36~20.04.1","5.13.0-1031.37~20.04.1","5.13.0-1033.40~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-gcp-5.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.8.0-1032.34~20.04.1","5.8.0-1035.37~20.04.1","5.8.0-1038.40~20.04.1","5.8.0-1039.41"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-hwe-5.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.11.0-22.23~20.04.1","5.11.0-25.27~20.04.1","5.11.0-27.29~20.04.1","5.11.0-34.36~20.04.1","5.11.0-36.40~20.04.1","5.11.0-37.41~20.04.2","5.11.0-38.42~20.04.1","5.11.0-40.44~20.04.2","5.11.0-41.45~20.04.1","5.11.0-43.47~20.04.2","5.11.0-44.48~20.04.2","5.11.0-46.51~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-hwe-5.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.13.0-21.21~20.04.1","5.13.0-22.22~20.04.1","5.13.0-23.23~20.04.2","5.13.0-25.26~20.04.1","5.13.0-27.29~20.04.1","5.13.0-28.31~20.04.1","5.13.0-30.33~20.04.1","5.13.0-35.40~20.04.1","5.13.0-37.42~20.04.1","5.13.0-39.44~20.04.1","5.13.0-40.45~20.04.1","5.13.0-41.46~20.04.1","5.13.0-44.49~20.04.1","5.13.0-48.54~20.04.1","5.13.0-51.58~20.04.1","5.13.0-52.59~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-hwe-5.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.8.0-23.24~20.04.1","5.8.0-25.26~20.04.1","5.8.0-28.30~20.04.1","5.8.0-29.31~20.04.1","5.8.0-31.33~20.04.1","5.8.0-33.36~20.04.1","5.8.0-34.37~20.04.2","5.8.0-36.40~20.04.1","5.8.0-38.43~20.04.1","5.8.0-40.45~20.04.1","5.8.0-41.46~20.04.1","5.8.0-43.49~20.04.1","5.8.0-44.50~20.04.1","5.8.0-45.51~20.04.1","5.8.0-48.54~20.04.1","5.8.0-49.55~20.04.1","5.8.0-50.56~20.04.1","5.8.0-53.60~20.04.1","5.8.0-55.62~20.04.1","5.8.0-59.66~20.04.1","5.8.0-63.71~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-intel-5.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.13.0-1007.7","5.13.0-1008.8","5.13.0-1009.9","5.13.0-1010.10","5.13.0-1011.11","5.13.0-1014.15","5.13.0-1017.19"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-oem-5.10","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.10.0-1008.9","5.10.0-1011.12","5.10.0-1013.14","5.10.0-1014.15","5.10.0-1016.17","5.10.0-1017.18","5.10.0-1019.20","5.10.0-1021.22","5.10.0-1022.23","5.10.0-1023.24","5.10.0-1025.26","5.10.0-1026.27","5.10.0-1029.30","5.10.0-1032.33","5.10.0-1033.34","5.10.0-1034.35","5.10.0-1038.40","5.10.0-1044.46","5.10.0-1045.47","5.10.0-1049.51","5.10.0-1050.52","5.10.0-1051.53","5.10.0-1052.54","5.10.0-1053.55","5.10.0-1055.58","5.10.0-1057.61"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-oem-5.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.13.0-1009.10","5.13.0-1010.11","5.13.0-1012.16","5.13.0-1014.18","5.13.0-1017.21","5.13.0-1019.23","5.13.0-1020.24","5.13.0-1021.25","5.13.0-1022.26","5.13.0-1026.32","5.13.0-1028.35","5.13.0-1029.36"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-oem-5.14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.14.0-1004.4","5.14.0-1005.5","5.14.0-1007.7","5.14.0-1008.8","5.14.0-1010.10","5.14.0-1011.11","5.14.0-1013.13","5.14.0-1018.19","5.14.0-1020.22","5.14.0-1022.24","5.14.0-1024.26","5.14.0-1027.30","5.14.0-1029.32","5.14.0-1031.34","5.14.0-1032.35","5.14.0-1033.36","5.14.0-1034.37","5.14.0-1036.40","5.14.0-1038.42","5.14.0-1042.47","5.14.0-1044.49","5.14.0-1045.51","5.14.0-1046.53","5.14.0-1047.54","5.14.0-1048.55","5.14.0-1049.56","5.14.0-1050.57","5.14.0-1051.58","5.14.0-1052.59","5.14.0-1054.61","5.14.0-1055.62","5.14.0-1056.63","5.14.0-1057.64","5.14.0-1058.66","5.14.0-1059.67"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-oem-5.6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.6.0-1007.7","5.6.0-1008.8","5.6.0-1010.10","5.6.0-1011.11","5.6.0-1013.13","5.6.0-1017.17","5.6.0-1018.18","5.6.0-1020.20","5.6.0-1021.21","5.6.0-1023.23","5.6.0-1026.26","5.6.0-1027.27","5.6.0-1028.28","5.6.0-1031.32","5.6.0-1032.33","5.6.0-1033.35","5.6.0-1034.36","5.6.0-1035.37","5.6.0-1036.39","5.6.0-1039.43","5.6.0-1042.46","5.6.0-1047.51","5.6.0-1048.52","5.6.0-1050.54","5.6.0-1052.56","5.6.0-1053.57","5.6.0-1054.58","5.6.0-1055.59","5.6.0-1056.60"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-oracle-5.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.11.0-1008.8~20.04.1","5.11.0-1013.14~20.04.1","5.11.0-1016.17~20.04.1","5.11.0-1017.18~20.04.1","5.11.0-1019.20~20.04.1","5.11.0-1020.21~20.04.1","5.11.0-1021.22~20.04.1","5.11.0-1022.23~20.04.1","5.11.0-1023.24~20.04.1","5.11.0-1025.27~20.04.1","5.11.0-1027.30~20.04.1","5.11.0-1028.31~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-oracle-5.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.13.0-1011.13~20.04.2","5.13.0-1015.19~20.04.1","5.13.0-1016.20~20.04.1","5.13.0-1018.22~20.04.1","5.13.0-1021.26~20.04.1","5.13.0-1025.30~20.04.1","5.13.0-1027.32~20.04.1","5.13.0-1028.33~20.04.1","5.13.0-1030.35~20.04.1","5.13.0-1033.39~20.04.1","5.13.0-1034.40~20.04.1","5.13.0-1036.43~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-oracle-5.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.8.0-1031.32~20.04.2","5.8.0-1033.34~20.04.1","5.8.0-1034.35~20.04.2","5.8.0-1037.38~20.04.1","5.8.0-1038.39~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-raspi2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.3.0-1007.8","5.3.0-1014.16","5.3.0-1015.17","5.3.0-1017.19","5.4.0-1004.4","5.4.0-1006.6"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-riscv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-24.28","5.4.0-26.30","5.4.0-27.31","5.4.0-28.32","5.4.0-30.34","5.4.0-31.35","5.4.0-33.37","5.4.0-34.38","5.4.0-36.41","5.4.0-37.42","5.4.0-39.44","5.4.0-40.45"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-riscv-5.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.11.0-1015.16~20.04.1","5.11.0-1017.18~20.04.1","5.11.0-1018.19~20.04.2","5.11.0-1020.21~20.04.1","5.11.0-1021.22~20.04.1","5.11.0-1022.23~20.04.1","5.11.0-1023.24~20.04.1","5.11.0-1024.25~20.04.1","5.11.0-1026.28~20.04.1","5.11.0-1028.31~20.04.1","5.11.0-1029.32~20.04.1","5.11.0-1030.34","5.11.0-1031.35"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-riscv-5.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.8.0-14.16~20.04.1","5.8.0-14.16~20.04.3","5.8.0-16.18~20.04.1","5.8.0-17.19~20.04.1","5.8.0-18.20~20.04.1","5.8.0-20.22~20.04.1","5.8.0-22.24~20.04.1","5.8.0-25.27~20.04.1","5.8.0-26.28~20.04.1","5.8.0-29.31~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-53.59"}]}],"versions":["5.13.0-19.19","5.15.0-17.17","5.15.0-18.18","5.15.0-22.22","5.15.0-23.23","5.15.0-25.25","5.15.0-27.28","5.15.0-30.31","5.15.0-33.34","5.15.0-35.36","5.15.0-37.39","5.15.0-39.42","5.15.0-40.43","5.15.0-41.44","5.15.0-43.46","5.15.0-46.49","5.15.0-47.51","5.15.0-48.54","5.15.0-50.56","5.15.0-52.58"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-aws","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1023.27"}]}],"versions":["5.13.0-1005.6","5.15.0-1002.4","5.15.0-1003.5","5.15.0-1004.6","5.15.0-1005.7","5.15.0-1008.10","5.15.0-1009.11","5.15.0-1011.14","5.15.0-1013.17","5.15.0-1014.18","5.15.0-1015.19","5.15.0-1017.21","5.15.0-1019.23","5.15.0-1020.24","5.15.0-1021.25","5.15.0-1022.26"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-azure","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1023.29"}]}],"versions":["5.13.0-1006.7","5.15.0-1001.2","5.15.0-1002.3","5.15.0-1003.4","5.15.0-1005.6","5.15.0-1007.8","5.15.0-1008.9","5.15.0-1010.12","5.15.0-1012.15","5.15.0-1013.16","5.15.0-1014.17","5.15.0-1017.20","5.15.0-1019.24","5.15.0-1020.25","5.15.0-1021.26","5.15.0-1022.27"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-azure-fde","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1024.30.1"}]}],"versions":["5.15.0-1019.24.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-gcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1022.29"}]}],"versions":["5.13.0-1005.6","5.15.0-1001.3","5.15.0-1002.5","5.15.0-1003.6","5.15.0-1004.7","5.15.0-1005.8","5.15.0-1006.9","5.15.0-1008.12","5.15.0-1010.15","5.15.0-1013.18","5.15.0-1016.21","5.15.0-1017.23","5.15.0-1018.24","5.15.0-1019.25","5.15.0-1021.28"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-gke","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1020.25"}]}],"versions":["5.15.0-1002.2","5.15.0-1003.3","5.15.0-1004.5","5.15.0-1005.6","5.15.0-1006.7","5.15.0-1008.10","5.15.0-1010.13","5.15.0-1011.14","5.15.0-1014.17","5.15.0-1015.18","5.15.0-1016.19","5.15.0-1017.20","5.15.0-1019.23"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-gkeop","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1008.12"}]}],"versions":["5.15.0-1001.2","5.15.0-1002.4","5.15.0-1003.5","5.15.0-1004.6","5.15.0-1005.7","5.15.0-1007.10"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1018.21"}]}],"versions":["5.15.0-1002.2","5.15.0-1003.3","5.15.0-1004.4","5.15.0-1005.5","5.15.0-1007.8","5.15.0-1009.11","5.15.0-1010.12","5.15.0-1012.14","5.15.0-1013.15","5.15.0-1015.17","5.15.0-1017.20"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-intel-iot-realtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1073.75"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-intel-iotg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1018.23"}]}],"versions":["5.15.0-1004.6","5.15.0-1008.11","5.15.0-1010.14","5.15.0-1013.17","5.15.0-1015.20","5.15.0-1016.21","5.15.0-1017.22"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-kvm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1021.26"}]}],"versions":["5.13.0-1004.4","5.13.0-1006.6+22.04.1","5.13.0-1007.7+22.04.1","5.13.0-1010.11+22.04.1","5.15.0-1002.2","5.15.0-1004.4","5.15.0-1005.5","5.15.0-1007.7","5.15.0-1008.8","5.15.0-1010.11","5.15.0-1012.14","5.15.0-1013.16","5.15.0-1016.19","5.15.0-1017.21","5.15.0-1018.22","5.15.0-1019.23","5.15.0-1020.24"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-lowlatency","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-53.59"}]}],"versions":["5.15.0-22.22","5.15.0-23.23","5.15.0-24.24","5.15.0-27.28","5.15.0-30.31","5.15.0-33.34","5.15.0-35.36","5.15.0-37.39","5.15.0-39.42","5.15.0-40.43","5.15.0-41.44","5.15.0-43.46","5.15.0-46.49","5.15.0-47.53","5.15.0-48.54","5.15.0-50.56","5.15.0-52.58"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-nvidia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1015.15"}]}],"versions":["5.15.0-1005.5","5.15.0-1007.7","5.15.0-1010.10"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-oem-5.17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.17.0-1003.3","5.17.0-1004.4","5.17.0-1006.6","5.17.0-1011.12","5.17.0-1012.13","5.17.0-1013.14","5.17.0-1014.15","5.17.0-1015.16","5.17.0-1016.17","5.17.0-1017.18","5.17.0-1018.19","5.17.0-1019.20","5.17.0-1020.21","5.17.0-1021.22","5.17.0-1024.25","5.17.0-1025.26","5.17.0-1026.27","5.17.0-1027.28","5.17.0-1028.29","5.17.0-1029.30","5.17.0-1030.31","5.17.0-1031.32","5.17.0-1032.33","5.17.0-1033.34","5.17.0-1034.35","5.17.0-1035.36"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-oracle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1022.28"}]}],"versions":["5.13.0-1008.10","5.15.0-1001.3","5.15.0-1002.4","5.15.0-1003.5","5.15.0-1006.8","5.15.0-1007.9","5.15.0-1009.12","5.15.0-1011.15","5.15.0-1013.17","5.15.0-1016.20","5.15.0-1017.22","5.15.0-1018.23","5.15.0-1019.24","5.15.0-1021.27"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-raspi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1018.20"}]}],"versions":["5.13.0-1008.9","5.15.0-1002.2","5.15.0-1003.3","5.15.0-1004.4","5.15.0-1005.5","5.15.0-1006.6","5.15.0-1008.8","5.15.0-1011.13","5.15.0-1012.14","5.15.0-1013.15","5.15.0-1014.16","5.15.0-1015.17","5.15.0-1016.18","5.15.0-1017.19"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-realtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1032.35"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-riscv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.13.0-1004.4","5.13.0-1006.6+22.04.1","5.13.0-1007.7+22.04.1","5.13.0-1010.11+22.04.1","5.15.0-1004.4","5.15.0-1005.5","5.15.0-1006.6","5.15.0-1007.7","5.15.0-1008.8","5.15.0-1011.12","5.15.0-1012.13","5.15.0-1014.16","5.15.0-1015.17","5.15.0-1016.18","5.15.0-1017.19","5.15.0-1018.21","5.15.0-1019.22","5.15.0-1020.23","5.15.0-1022.26","5.15.0-1023.27","5.15.0-1026.30","5.15.0-1027.31","5.15.0-1028.32"]},{"source":"osv","ecosystem":"Ubuntu:Pro:Realtime:22.04:LTS","package":"linux-realtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1025.28"}]}],"versions":["5.15.0-1006.6","5.15.0-1007.7","5.15.0-1009.9","5.15.0-1011.11","5.15.0-1014.14","5.15.0-1015.15","5.15.0-1016.16","5.15.0-1019.19","5.15.0-1020.20","5.15.0-1021.21","5.15.0-1022.22","5.15.0-1024.25"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-raspi-realtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.8.0-2019.20"]}],"products":[{"vendor":"linux","product":"linux_kernel"},{"vendor":"redhat","product":"enterprise_linux"}],"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2189137","tags":["x_transferred","Issue Tracking","Patch","Third Party Advisory","report"]},{"url":"https://www.zerodayinitiative.com/advisories/ZDI-CAN-17811/","tags":["x_transferred","Third Party Advisory","VDB Entry","advisory","report"]},{"url":"https://github.com/torvalds/linux/commit/180a6a3ee60a","tags":["x_transferred","Patch","fix","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-2019","tags":["web","advisory"]},{"url":"https://www.zerodayinitiative.com/advisories/ZDI-CAN-17811"},{"url":"https://github.com/advisories/GHSA-9vmw-8f7f-qhch"},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/2xxx/CVE-2023-2019.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2023-2019","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20232140-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1142685","tags":["report"]},{"url":"https://bugzilla.suse.com/1155798","tags":["report"]},{"url":"https://bugzilla.suse.com/1174777","tags":["report"]},{"url":"https://bugzilla.suse.com/1189999","tags":["report"]},{"url":"https://bugzilla.suse.com/1194869","tags":["report"]},{"url":"https://bugzilla.suse.com/1203039","tags":["report"]},{"url":"https://bugzilla.suse.com/1203325","tags":["report"]},{"url":"https://bugzilla.suse.com/1204042","tags":["report"]},{"url":"https://bugzilla.suse.com/1206649","tags":["report"]},{"url":"https://bugzilla.suse.com/1206891","tags":["report"]},{"url":"https://bugzilla.suse.com/1206992","tags":["report"]},{"url":"https://bugzilla.suse.com/1207088","tags":["report"]},{"url":"https://bugzilla.suse.com/1208076","tags":["report"]},{"url":"https://bugzilla.suse.com/1208822","tags":["report"]},{"url":"https://bugzilla.suse.com/1208845","tags":["report"]},{"url":"https://bugzilla.suse.com/1209615","tags":["report"]},{"url":"https://bugzilla.suse.com/1209693","tags":["report"]},{"url":"https://bugzilla.suse.com/1209739","tags":["report"]},{"url":"https://bugzilla.suse.com/1209871","tags":["report"]},{"url":"https://bugzilla.suse.com/1209927","tags":["report"]},{"url":"https://bugzilla.suse.com/1209999","tags":["report"]},{"url":"https://bugzilla.suse.com/1210034","tags":["report"]},{"url":"https://bugzilla.suse.com/1210158","tags":["report"]},{"url":"https://bugzilla.suse.com/1210202","tags":["report"]},{"url":"https://bugzilla.suse.com/1210206","tags":["report"]},{"url":"https://bugzilla.suse.com/1210301","tags":["report"]},{"url":"https://bugzilla.suse.com/1210329","tags":["report"]},{"url":"https://bugzilla.suse.com/1210336","tags":["report"]},{"url":"https://bugzilla.suse.com/1210337","tags":["report"]},{"url":"https://bugzilla.suse.com/1210439","tags":["report"]},{"url":"https://bugzilla.suse.com/1210453","tags":["report"]},{"url":"https://bugzilla.suse.com/1210454","tags":["report"]},{"url":"https://bugzilla.suse.com/1210469","tags":["report"]},{"url":"https://bugzilla.suse.com/1210499","tags":["report"]},{"url":"https://bugzilla.suse.com/1210506","tags":["report"]},{"url":"https://bugzilla.suse.com/1210629","tags":["report"]},{"url":"https://bugzilla.suse.com/1210630","tags":["report"]},{"url":"https://bugzilla.suse.com/1210725","tags":["report"]},{"url":"https://bugzilla.suse.com/1210729","tags":["report"]},{"url":"https://bugzilla.suse.com/1210762","tags":["report"]},{"url":"https://bugzilla.suse.com/1210763","tags":["report"]},{"url":"https://bugzilla.suse.com/1210764","tags":["report"]},{"url":"https://bugzilla.suse.com/1210765","tags":["report"]},{"url":"https://bugzilla.suse.com/1210766","tags":["report"]},{"url":"https://bugzilla.suse.com/1210767","tags":["report"]},{"url":"https://bugzilla.suse.com/1210768","tags":["report"]},{"url":"https://bugzilla.suse.com/1210769","tags":["report"]},{"url":"https://bugzilla.suse.com/1210770","tags":["report"]},{"url":"https://bugzilla.suse.com/1210771","tags":["report"]},{"url":"https://bugzilla.suse.com/1210793","tags":["report"]},{"url":"https://bugzilla.suse.com/1210816","tags":["report"]},{"url":"https://bugzilla.suse.com/1210817","tags":["report"]},{"url":"https://bugzilla.suse.com/1210827","tags":["report"]},{"url":"https://bugzilla.suse.com/1210943","tags":["report"]},{"url":"https://bugzilla.suse.com/1210953","tags":["report"]},{"url":"https://bugzilla.suse.com/1210986","tags":["report"]},{"url":"https://bugzilla.suse.com/1211025","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2196","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-0386","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-1670","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-1855","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-1989","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-1990","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-1998","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-2008","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-2019","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-2176","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-2235","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-23006","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-30772","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20232141-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20232231-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2023-2019","tags":["report"]},{"url":"https://git.kernel.org/linus/180a6a3ee60a7cb69ed1232388460644f6a21f00","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-2019","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2023-2019","description":"A flaw was found in the Linux kernel's netdevsim device driver, within the scheduling of events. This issue results from the improper management of a reference count. This may allow an attacker to create a denial of service condition on the system.","status":"published","published":"2023-04-24T00:00:00Z","modified":"2025-03-18T19:17:56.031Z","cvss":[{"version":"3.1","score":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"adp"}],"cwes":["CWE-911"],"updated_at":"2026-11-02T14:35:24.004321Z"}],"euvd":[{"id":"EUVD-2023-33547","description":"A flaw was found in the Linux kernel's netdevsim device driver, within the scheduling of events. This issue results from the improper management of a reference count. This may allow an attacker to create a denial of service condition on the system.","status":"published","published":"2023-04-24T00:00:00Z","modified":"2025-03-18T19:17:56Z","cvss":[{"version":"3.1","score":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T20:52:59.954045Z"}],"ghsa":[{"id":"GHSA-9vmw-8f7f-qhch","title":"A flaw was found in the Linux kernel's netdevsim device driver, within the scheduling of events....","description":"A flaw was found in the Linux kernel's netdevsim device driver, within the scheduling of events. This issue results from the improper management of a reference count. This may allow an attacker to create a denial of service condition on the system.","status":"published","published":"2023-04-24T21:30:30Z","modified":"2024-04-11T21:21:42Z","cvss":[{"version":"3.1","score":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-911"],"updated_at":"2026-11-02T14:57:10.781816Z"}],"nvd":[{"id":"CVE-2023-2019","description":"A flaw was found in the Linux kernel's netdevsim device driver, within the scheduling of events. This issue results from the improper management of a reference count. This may allow an attacker to create a denial of service condition on the system.","status":"published","published":"2023-04-24T21:15:09.347Z","modified":"2026-06-17T05:51:12.443Z","cvss":[{"version":"3.1","score":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"3.1","score":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"secondary"}],"cwes":["CWE-911"],"updated_at":"2026-11-02T14:07:56.683259Z"}],"osv":[{"id":"AZL-26378","title":"CVE-2023-2019 affecting package kernel for versions less than 5.15.111.1-1","description":"A flaw was found in the Linux kernel's netdevsim device driver, within the scheduling of events. This issue results from the improper management of a reference count. This may allow an attacker to create a denial of service condition on the system.","status":"published","published":"2023-04-24T21:15:09Z","modified":"2026-04-21T04:23:39.217597Z","cvss":[{"version":"3.1","score":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:28:03.093433Z"},{"id":"CVE-2023-2019","description":"A flaw was found in the Linux kernel's netdevsim device driver, within the scheduling of events. This issue results from the improper management of a reference count. This may allow an attacker to create a denial of service condition on the system.","status":"published","published":"2023-04-24T00:00:00Z","modified":"2026-10-28T02:30:43.403244684Z","cvss":[{"version":"3.1","score":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-911"],"updated_at":"2026-11-02T15:44:30.334753Z"},{"id":"DEBIAN-CVE-2023-2019","description":"A flaw was found in the Linux kernel's netdevsim device driver, within the scheduling of events. This issue results from the improper management of a reference count. This may allow an attacker to create a denial of service condition on the system.","status":"published","published":"2023-04-24T21:15:09.347Z","modified":"2026-10-26T18:00:25.753323843Z","cvss":[{"version":"3.1","score":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:39.369204Z"},{"id":"UBUNTU-CVE-2023-2019","description":"A flaw was found in the Linux kernel's netdevsim device driver, within the scheduling of events. This issue results from the improper management of a reference count. This may allow an attacker to create a denial of service condition on the system.","status":"published","published":"2023-04-24T21:15:00Z","modified":"2026-04-22T14:01:21.149087Z","cvss":[{"version":"3.1","score":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","level":"medium"},{"version":"3.1","score":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T16:54:18.756095Z"},{"id":"SUSE-SU-2023:2140-1","title":"Security update for the Linux Kernel","description":"The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security and bugfixes.\n\n\nThe following security bugs were fixed:\n\n- CVE-2023-2235: A use-after-free vulnerability in the Performance Events system can be exploited to achieve local privilege escalation (bsc#1210986).\n- CVE-2022-2196: Fixed a regression related to KVM that allowed for speculative execution attacks (bsc#1206992).\n- CVE-2023-23006: Fixed NULL checking against IS_ERR in dr_domain_init_resources (bsc#1208845).\n- CVE-2023-1670: Fixed a use after free in the Xircom 16-bit PCMCIA Ethernet driver. A local user could use this flaw to crash the system or potentially escalate their privileges on the system (bsc#1209871).\n- CVE-2023-2176: A vulnerability was found in compare_netdev_and_ip in drivers/infiniband/core/cma.c in RDMA. The improper cleanup results in out-of-boundary read, where a local user can utilize this problem to crash the system or escalation of privilege (bsc#1210629).\n- CVE-2023-0386: A flaw was found where unauthorized access to the execution of the setuid file with capabilities was found in the OverlayFS subsystem, when a user copies a capable file from a nosuid mount into another mount. This uid mapping bug allowed a local user to escalate their privileges on the system (bsc#1209615).\n- CVE-2023-1998: Fixed a use after free during login when accessing the shost ipaddress (bsc#1210506).\n- CVE-2023-1855: Fixed a use after free in xgene_hwmon_remove (bsc#1210202).\n- CVE-2023-30772: Fixed a race condition and resultant use-after-free in da9150_charger_remove (bsc#1210329).\n- CVE-2023-2019: A flaw was found in the netdevsim device driver, more specifically within the scheduling of events. This issue results from the improper management of a reference count and may lead to a denial of service (bsc#1210454).\n- CVE-2023-2008: A flaw was found in the fault handler of the udmabuf device driver. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code (bsc#1210453).\n- CVE-2023-1989: Fixed a use after free in btsdio_remove (bsc#1210336).\n- CVE-2023-1990: Fixed a use after free in ndlc_remove (bsc#1210337).\n\nThe following non-security bugs were fixed:\n\n- ACPI: CPPC: Disable FIE if registers in PCC regions (bsc#1210953).\n- ACPI: VIOT: Initialize the correct IOMMU fwspec (git-fixes).\n- ACPI: resource: Add Medion S17413 to IRQ override quirk (git-fixes).\n- ALSA: emu10k1: do not create old pass-through playback device on Audigy (git-fixes).\n- ALSA: emu10k1: fix capture interrupt handler unlinking (git-fixes).\n- ALSA: firewire-tascam: add missing unwind goto in snd_tscm_stream_start_duplex() (git-fixes).\n- ALSA: hda/cirrus: Add extra 10 ms delay to allow PLL settle and lock (git-fixes).\n- ALSA: hda/realtek: Add quirks for Lenovo Z13/Z16 Gen2 (git-fixes).\n- ALSA: hda/realtek: Enable mute/micmute LEDs and speaker support for HP Laptops (git-fixes).\n- ALSA: hda/realtek: Remove specific patch for Dell Precision 3260 (git-fixes).\n- ALSA: hda/realtek: fix mute/micmute LEDs for a HP ProBook (git-fixes).\n- ALSA: hda/realtek: fix speaker, mute/micmute LEDs not work on a HP platform (git-fixes).\n- ALSA: hda/sigmatel: add pin overrides for Intel DP45SG motherboard (git-fixes).\n- ALSA: hda/sigmatel: fix S/PDIF out on Intel D*45* motherboards (git-fixes).\n- ALSA: hda: cs35l41: Enable Amp High Pass Filter (git-fixes).\n- ALSA: hda: patch_realtek: add quirk for Asus N7601ZM (git-fixes).\n- ALSA: i2c/cs8427: fix iec958 mixer control deactivation (git-fixes).\n- ARM: 9290/1: uaccess: Fix KASAN false-positives (git-fixes).\n- ARM: dts: exynos: fix WM8960 clock name in Itop Elite (git-fixes).\n- ARM: dts: gta04: fix excess dma channel usage (git-fixes).\n- ARM: dts: qcom: ipq4019: Fix the PCI I/O port range (git-fixes).\n- ARM: dts: rockchip: fix a typo error for rk3288 spdif node (git-fixes).\n- ARM: dts: s5pv210: correct MIPI CSIS clock name (git-fixes).\n- ASN.1: Fix check for strdup() success (git-fixes).\n- ASoC: cs35l41: Only disable internal boost (git-fixes).\n- ASoC: es8316: Handle optional IRQ assignment (git-fixes).\n- ASoC: fsl_asrc_dma: fix potential null-ptr-deref (git-fixes).\n- ASoC: fsl_mqs: move of_node_put() to the correct location (git-fixes).\n- Bluetooth: Fix race condition in hidp_session_thread (git-fixes).\n- Bluetooth: L2CAP: Fix use-after-free in l2cap_disconnect_{req,rsp} (git-fixes).\n- Drivers: vmbus: Check for channel allocation before looking up relids (git-fixes).\n- IB/mlx5: Add support for 400G_8X lane speed (git-fixes)\n- Input: hp_sdc_rtc - mark an unused function as __maybe_unused (git-fixes).\n- Input: raspberrypi-ts - fix refcount leak in rpi_ts_probe (git-fixes).\n- KEYS: Add missing function documentation (git-fixes).\n- KEYS: Create static version of public_key_verify_signature (git-fixes).\n- NFS: Cleanup unused rpc_clnt variable (git-fixes).\n- NFSD: Avoid calling OPDESC() with ops-\u003eopnum == OP_ILLEGAL (git-fixes).\n- NFSD: callback request does not use correct credential for AUTH_SYS (git-fixes).\n- PCI/EDR: Clear Device Status after EDR error recovery (git-fixes).\n- PCI: dwc: Fix PORT_LINK_CONTROL update when CDM check enabled (git-fixes).\n- PCI: imx6: Install the fault handler only on compatible match (git-fixes).\n- PCI: loongson: Add more devices that need MRRS quirk (git-fixes).\n- PCI: loongson: Prevent LS7A MRRS increases (git-fixes).\n- PCI: pciehp: Fix AB-BA deadlock between reset_lock and device_lock (git-fixes).\n- PCI: qcom: Fix the incorrect register usage in v2.7.0 config (git-fixes).\n- RDMA/cma: Allow UD qp_type to join multicast only (git-fixes)\n- RDMA/core: Fix GID entry ref leak when create_ah fails (git-fixes)\n- RDMA/irdma: Add ipv4 check to irdma_find_listener() (git-fixes)\n- RDMA/irdma: Fix memory leak of PBLE objects (git-fixes)\n- RDMA/irdma: Increase iWARP CM default rexmit count (git-fixes)\n- Remove obsolete KMP obsoletes (bsc#1210469).\n- Revert 'Bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work' (git-fixes).\n- Revert 'pinctrl: amd: Disable and mask interrupts on resume' (git-fixes).\n- USB: dwc3: fix runtime pm imbalance on probe errors (git-fixes).\n- USB: dwc3: fix runtime pm imbalance on unbind (git-fixes).\n- USB: serial: cp210x: add Silicon Labs IFS-USB-DATACABLE IDs (git-fixes).\n- USB: serial: option: add Quectel RM500U-CN modem (git-fixes).\n- USB: serial: option: add Telit FE990 compositions (git-fixes).\n- USB: serial: option: add UNISOC vendor and TOZED LT70C product (git-fixes).\n- amdgpu: disable powerpc support for the newer display engine (bsc#1194869).\n- arm64: dts: imx8mm-evk: correct pmic clock source (git-fixes).\n- arm64: dts: meson-g12-common: specify full DMC range (git-fixes).\n- arm64: dts: qcom: ipq8074-hk01: enable QMP device, not the PHY node (git-fixes).\n- arm64: dts: qcom: ipq8074: Fix the PCI I/O port range (git-fixes).\n- arm64: dts: qcom: msm8994-kitakami: drop unit address from PMI8994 regulator (git-fixes).\n- arm64: dts: qcom: msm8994-msft-lumia-octagon: drop unit address from PMI8994 regulator (git-fixes).\n- arm64: dts: qcom: msm8996: Fix the PCI I/O port range (git-fixes).\n- arm64: dts: qcom: msm8998: Fix stm-stimulus-base reg name (git-fixes).\n- arm64: dts: qcom: msm8998: Fix the PCI I/O port range (git-fixes).\n- arm64: dts: qcom: sc7180-trogdor-lazor: correct trackpad supply (git-fixes).\n- arm64: dts: qcom: sdm845: Fix the PCI I/O port range (git-fixes).\n- arm64: dts: qcom: sm8250: Fix the PCI I/O port range (git-fixes).\n- arm64: dts: renesas: r8a774c0: Remove bogus voltages from OPP table (git-fixes).\n- arm64: dts: renesas: r8a77990: Remove bogus voltages from OPP table (git-fixes).\n- arm64: dts: ti: k3-j721e-main: Remove ti,strobe-sel property (git-fixes).\n- bluetooth: Perform careful capability checks in hci_sock_ioctl() (git-fixes).\n- cgroup/cpuset: Add cpuset_can_fork() and cpuset_cancel_fork() methods\n- cgroup/cpuset: Make cpuset_fork() handle CLONE_INTO_CGROUP properly\n- cgroup/cpuset: Wake up cpuset_attach_wq tasks in cpuset_cancel_attach() (bsc#1210827).\n- cifs: fix negotiate context parsing (bsc#1210301).\n- clk: add missing of_node_put() in 'assigned-clocks' property parsing (git-fixes).\n- clk: at91: clk-sam9x60-pll: fix return value check (git-fixes).\n- clk: rockchip: rk3399: allow clk_cifout to force clk_cifout_src to reparent (git-fixes).\n- clk: sprd: set max_register according to mapping range (git-fixes).\n- clocksource/drivers/davinci: Fix memory leak in davinci_timer_register when init fails (git-fixes).\n- cpufreq: CPPC: Fix build error without CONFIG_ACPI_CPPC_CPUFREQ_FIE (bsc#1210953).\n- cpufreq: CPPC: Fix performance/frequency conversion (git-fixes).\n- cpumask: fix incorrect cpumask scanning result checks (bsc#1210943).\n- crypto: caam - Clear some memory in instantiate_rng (git-fixes).\n- crypto: drbg - Only fail when jent is unavailable in FIPS mode (git-fixes).\n- crypto: sa2ul - Select CRYPTO_DES (git-fixes).\n- crypto: safexcel - Cleanup ring IRQ workqueues on load failure (git-fixes).\n- driver core: Do not require dynamic_debug for initcall_debug probe timing (git-fixes).\n- drivers: staging: rtl8723bs: Fix locking in _rtw_join_timeout_handler() (git-fixes).\n- drivers: staging: rtl8723bs: Fix locking in rtw_scan_timeout_handler() (git-fixes).\n- drm/amd/display/dc/dce60/Makefile: Fix previous attempt to silence known override-init warnings (git-fixes).\n- drm/amd/display: Fix potential null dereference (git-fixes).\n- drm/amdgpu: Re-enable DCN for 64-bit powerpc (bsc#1194869).\n- drm/armada: Fix a potential double free in an error handling path (git-fixes).\n- drm/bridge: adv7533: Fix adv7533_mode_valid for adv7533 and adv7535 (git-fixes).\n- drm/bridge: lt8912b: Fix DSI Video Mode (git-fixes).\n- drm/bridge: lt9611: Fix PLL being unable to lock (git-fixes).\n- drm/fb-helper: set x/yres_virtual in drm_fb_helper_check_var (git-fixes).\n- drm/i915/dsi: fix DSS CTL register offsets for TGL+ (git-fixes).\n- drm/i915: Fix fast wake AUX sync len (git-fixes).\n- drm/i915: Make intel_get_crtc_new_encoder() less oopsy (git-fixes).\n- drm/i915: fix race condition UAF in i915_perf_add_config_ioctl (git-fixes).\n- drm/lima/lima_drv: Add missing unwind goto in lima_pdev_probe() (git-fixes).\n- drm/msm/adreno: drop bogus pm_runtime_set_active() (git-fixes).\n- drm/msm/disp/dpu: check for crtc enable rather than crtc active to release shared resources (git-fixes).\n- drm/msm: fix NULL-deref on snapshot tear down (git-fixes).\n- drm/nouveau/disp: Support more modes by checking with lower bpc (git-fixes).\n- drm/panel: otm8009a: Set backlight parent to panel device (git-fixes).\n- drm/probe-helper: Cancel previous job before starting new one (git-fixes).\n- drm/rockchip: Drop unbalanced obj unref (git-fixes).\n- drm/vgem: add missing mutex_destroy (git-fixes).\n- drm: msm: adreno: Disable preemption on Adreno 510 (git-fixes).\n- drm: panel-orientation-quirks: Add quirk for Lenovo Yoga Book X90F (git-fixes).\n- drm: rcar-du: Fix a NULL vs IS_ERR() bug (git-fixes).\n- dt-bindings: arm: fsl: Fix copy-paste error in comment (git-fixes).\n- dt-bindings: iio: ti,tmp117: fix documentation link (git-fixes).\n- dt-bindings: mailbox: qcom,apcs-kpss-global: fix SDX55 'if' match (git-fixes).\n- dt-bindings: nvmem: qcom,spmi-sdam: fix example 'reg' property (git-fixes).\n- dt-bindings: remoteproc: stm32-rproc: Typo fix (git-fixes).\n- dt-bindings: soc: qcom: smd-rpm: re-add missing qcom,rpm-msm8994 (git-fixes).\n- e1000e: Disable TSO on i219-LM card to increase speed (git-fixes).\n- efi: sysfb_efi: Add quirk for Lenovo Yoga Book X91F/L (git-fixes).\n- ext4: Fix deadlock during directory rename (bsc#1210763).\n- ext4: Fix possible corruption when moving a directory (bsc#1210763).\n- ext4: fix RENAME_WHITEOUT handling for inline directories (bsc#1210766).\n- ext4: fix another off-by-one fsmap error on 1k block filesystems (bsc#1210767).\n- ext4: fix bad checksum after online resize (bsc#1210762 bsc#1208076).\n- ext4: fix cgroup writeback accounting with fs-layer encryption (bsc#1210765).\n- ext4: fix corruption when online resizing a 1K bigalloc fs (bsc#1206891).\n- ext4: fix incorrect options show of original mount_opt and extend mount_opt2 (bsc#1210764).\n- ext4: fix possible double unlock when moving a directory (bsc#1210763).\n- ext4: use ext4_journal_start/stop for fast commit transactions (bsc#1210793).\n- fbmem: Reject FB_ACTIVATE_KD_TEXT from userspace (git-fixes).\n- firmware: qcom_scm: Clear download bit during reboot (git-fixes).\n- firmware: stratix10-svc: Fix an NULL vs IS_ERR() bug in probe (git-fixes).\n- fpga: bridge: fix kernel-doc parameter description (git-fixes).\n- hwmon: (adt7475) Use device_property APIs when configuring polarity (git-fixes).\n- hwmon: (k10temp) Check range scale when CUR_TEMP register is read-write (git-fixes).\n- hwmon: (pmbus/fsp-3y) Fix functionality bitmask in FSP-3Y YM-2151E (git-fixes).\n- i2c: cadence: cdns_i2c_master_xfer(): Fix runtime PM leak on error path (git-fixes).\n- i2c: hisi: Avoid redundant interrupts (git-fixes).\n- i2c: imx-lpi2c: clean rx/tx buffers upon new message (git-fixes).\n- i2c: ocores: generate stop condition after timeout in polling mode (git-fixes).\n- i915/perf: Replace DRM_DEBUG with driver specific drm_dbg call (git-fixes).\n- ice: avoid bonding causing auxiliary plug/unplug under RTNL lock (bsc#1210158).\n- iio: adc: at91-sama5d2_adc: fix an error code in at91_adc_allocate_trigger() (git-fixes).\n- iio: light: tsl2772: fix reading proximity-diodes from device tree (git-fixes).\n- ipmi: fix SSIF not responding under certain cond (git-fixes).\n- ipmi:ssif: Add send_retries increment (git-fixes).\n- k-m-s: Drop Linux 2.6 support\n- kABI: PCI: loongson: Prevent LS7A MRRS increases (kabi).\n- kABI: x86/msi: Fix msi message data shadow struct (kabi).\n- kabi/severities: ignore KABI for NVMe target (bsc#1174777).\n- keys: Fix linking a duplicate key to a keyring's assoc_array (bsc#1207088).\n- locking/rwbase: Mitigate indefinite writer starvation.\n- media: av7110: prevent underflow in write_ts_to_decoder() (git-fixes).\n- media: dm1105: Fix use after free bug in dm1105_remove due to race condition (git-fixes).\n- media: max9286: Free control handler (git-fixes).\n- media: rc: gpio-ir-recv: Fix support for wake-up (git-fixes).\n- media: rkvdec: fix use after free bug in rkvdec_remove (git-fixes).\n- media: saa7134: fix use after free bug in saa7134_finidev due to race condition (git-fixes).\n- media: venus: dec: Fix handling of the start cmd (git-fixes).\n- memstick: fix memory leak if card device is never registered (git-fixes).\n- mm/filemap: fix page end in filemap_get_read_batch (bsc#1210768).\n- mm: page_alloc: skip regions with hugetlbfs pages when allocating 1G pages (bsc#1210034).\n- mm: take a page reference when removing device exclusive entries (bsc#1211025).\n- mmc: sdhci-of-esdhc: fix quirk to ignore command inhibit for data (git-fixes).\n- mmc: sdhci_am654: Set HIGH_SPEED_ENA for SDR12 and SDR25 (git-fixes).\n- mtd: core: fix error path for nvmem provider (git-fixes).\n- mtd: core: fix nvmem error reporting (git-fixes).\n- mtd: core: provide unique name for nvmem device, take two (git-fixes).\n- mtd: spi-nor: Fix a trivial typo (git-fixes).\n- net: phy: nxp-c45-tja11xx: add remove callback (git-fixes).\n- net: phy: nxp-c45-tja11xx: fix unsigned long multiplication overflow (git-fixes).\n- nfsd: call op_release, even when op_func returns an error (git-fixes).\n- nilfs2: fix potential UAF of struct nilfs_sc_info in nilfs_segctor_thread() (git-fixes).\n- nilfs2: initialize unused bytes in segment summary blocks (git-fixes).\n- nvme initialize core quirks before calling nvme_init_subsystem (git-fixes).\n- nvme-auth: uninitialized variable in nvme_auth_transform_key() (git-fixes).\n- nvme-fcloop: fix 'inconsistent {IN-HARDIRQ-W} -\u003e {HARDIRQ-ON-W} usage' (git-fixes).\n- nvme-hwmon: consistently ignore errors from nvme_hwmon_init (git-fixes).\n- nvme-hwmon: kmalloc the NVME SMART log buffer (git-fixes).\n- nvme-multipath: fix possible hang in live ns resize with ANA access (git-fixes).\n- nvme-pci: fix doorbell buffer value endianness (git-fixes).\n- nvme-pci: fix mempool alloc size (git-fixes).\n- nvme-pci: fix page size checks (git-fixes).\n- nvme-pci: fix timeout request state check (git-fixes).\n- nvme-rdma: fix possible hang caused during ctrl deletion (git-fixes).\n- nvme-tcp: fix possible circular locking when deleting a controller under memory pressure (git-fixes).\n- nvme-tcp: fix possible hang caused during ctrl deletion (git-fixes).\n- nvme-tcp: fix regression that causes sporadic requests to time out (git-fixes).\n- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices (git-fixes).\n- nvme: add device name to warning in uuid_show() (git-fixes).\n- nvme: catch -ENODEV from nvme_revalidate_zones again (git-fixes).\n- nvme: copy firmware_rev on each init (git-fixes).\n- nvme: define compat_ioctl again to unbreak 32-bit userspace (git-fixes).\n- nvme: fix async event trace event (git-fixes).\n- nvme: fix handling single range discard request (git-fixes).\n- nvme: fix per-namespace chardev deletion (git-fixes).\n- nvme: fix the NVME_CMD_EFFECTS_CSE_MASK definition (git-fixes).\n- nvme: fix the read-only state for zoned namespaces with unsupposed features (git-fixes).\n- nvme: improve the NVME_CONNECT_AUTHREQ* definitions (git-fixes).\n- nvme: move nvme_multi_css into nvme.h (git-fixes).\n- nvme: return err on nvme_init_non_mdts_limits fail (git-fixes).\n- nvme: send Identify with CNS 06h only to I/O controllers (bsc#1209693).\n- nvme: set dma alignment to dword (git-fixes).\n- nvme: use command_id instead of req-\u003etag in trace_nvme_complete_rq() (git-fixes).\n- nvmet-auth: do not try to cancel a non-initialized work_struct (git-fixes).\n- nvmet-tcp: fix incomplete data digest send (git-fixes).\n- nvmet-tcp: fix regression in data_digest calculation (git-fixes).\n- nvmet: add helpers to set the result field for connect commands (git-fixes).\n- nvmet: avoid potential UAF in nvmet_req_complete() (git-fixes).\n- nvmet: do not defer passthrough commands with trivial effects to the workqueue (git-fixes).\n- nvmet: fix I/O Command Set specific Identify Controller (git-fixes).\n- nvmet: fix Identify Active Namespace ID list handling (git-fixes).\n- nvmet: fix Identify Controller handling (git-fixes).\n- nvmet: fix Identify Namespace handling (git-fixes).\n- nvmet: fix a memory leak (git-fixes).\n- nvmet: fix a memory leak in nvmet_auth_set_key (git-fixes).\n- nvmet: fix a use-after-free (git-fixes).\n- nvmet: fix invalid memory reference in nvmet_subsys_attr_qid_max_show (git-fixes).\n- nvmet: force reconnect when number of queue changes (git-fixes).\n- nvmet: looks at the passthrough controller when initializing CAP (git-fixes).\n- nvmet: only allocate a single slab for bvecs (git-fixes).\n- nvmet: use IOCB_NOWAIT only if the filesystem supports it (git-fixes).\n- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output (git fixes).\n- perf/core: Fix the same task check in perf_event_set_output (git fixes).\n- perf: Fix check before add_event_to_groups() in perf_group_detach() (git fixes).\n- perf: fix perf_event_context-\u003etime (git fixes).\n- platform/x86 (gigabyte-wmi): Add support for A320M-S2H V2 (git-fixes).\n- platform/x86: gigabyte-wmi: add support for X570S AORUS ELITE (git-fixes).\n- power: supply: cros_usbpd: reclassify 'default case!' as debug (git-fixes).\n- power: supply: generic-adc-battery: fix unit scaling (git-fixes).\n- powerpc/64: Always build with 128-bit long double (bsc#1194869).\n- powerpc/64e: Fix amdgpu build on Book3E w/o AltiVec (bsc#1194869).\n- powerpc/hv-gpci: Fix hv_gpci event list (git fixes).\n- powerpc/papr_scm: Update the NUMA distance table for the target node (bsc#1209999 ltc#202140 bsc#1142685 ltc#179509 git-fixes).\n- powerpc/perf/hv-24x7: add missing RTAS retry status handling (git fixes).\n- powerpc/pseries: Consolidate different NUMA distance update code paths (bsc#1209999 ltc#202140 bsc#1142685 ltc#179509 git-fixes).\n- powerpc: declare unmodified attribute_group usages const (git-fixes).\n- regulator: core: Avoid lockdep reports when resolving supplies (git-fixes).\n- regulator: core: Consistently set mutex_owner when using ww_mutex_lock_slow() (git-fixes).\n- regulator: core: Shorten off-on-delay-us for always-on/boot-on by time since booted (git-fixes).\n- regulator: fan53555: Explicitly include bits header (git-fixes).\n- regulator: fan53555: Fix wrong TCS_SLEW_MASK (git-fixes).\n- regulator: stm32-pwr: fix of_iomap leak (git-fixes).\n- remoteproc: Harden rproc_handle_vdev() against integer overflow (git-fixes).\n- remoteproc: imx_rproc: Call of_node_put() on iteration error (git-fixes).\n- remoteproc: st: Call of_node_put() on iteration error (git-fixes).\n- remoteproc: stm32: Call of_node_put() on iteration error (git-fixes).\n- rtc: meson-vrtc: Use ktime_get_real_ts64() to get the current time (git-fixes).\n- rtc: omap: include header for omap_rtc_power_off_program prototype (git-fixes).\n- sched/fair: Fix imbalance overflow (bsc#1155798).\n- sched/fair: Limit sched slice duration (bsc#1189999).\n- sched/fair: Move calculate of avg_load to a better location (bsc#1155798).\n- sched/fair: Sanitize vruntime of entity being migrated (bsc#1203325).\n- sched/fair: sanitize vruntime of entity being placed (bsc#1203325).\n- sched/numa: Stop an exhastive search if an idle core is found (bsc#1189999).\n- sched_getaffinity: do not assume 'cpumask_size()' is fully initialized (bsc#1155798).\n- scsi: aic94xx: Add missing check for dma_map_single() (git-fixes).\n- scsi: core: Add BLIST_NO_VPD_SIZE for some VDASD (git-fixes bsc#1203039).\n- scsi: core: Add BLIST_SKIP_VPD_PAGES for SKhynix H28U74301AMR (git-fixes).\n- scsi: core: Fix a procfs host directory removal regression (git-fixes).\n- scsi: core: Fix a source code comment (git-fixes).\n- scsi: core: Remove the /proc/scsi/${proc_name} directory earlier (git-fixes).\n- scsi: hisi_sas: Check devm_add_action() return value (git-fixes).\n- scsi: hisi_sas: Set a port invalid only if there are no devices attached when refreshing port id (git-fixes).\n- scsi: ipr: Work around fortify-string warning (git-fixes).\n- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param() (git-fixes).\n- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress (git-fixes).\n- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress (git-fixes).\n- scsi: kABI workaround for fc_host_fpin_rcv (git-fixes).\n- scsi: libsas: Remove useless dev_list delete in sas_ex_discover_end_dev() (git-fixes).\n- scsi: lpfc: Avoid usage of list iterator variable after loop (git-fixes).\n- scsi: lpfc: Check kzalloc() in lpfc_sli4_cgn_params_read() (git-fixes).\n- scsi: lpfc: Copyright updates for 14.2.0.11 patches (bsc#1210943).\n- scsi: lpfc: Correct used_rpi count when devloss tmo fires with no recovery (bsc#1210943).\n- scsi: lpfc: Defer issuing new PLOGI if received RSCN before completing REG_LOGIN (bsc#1210943).\n- scsi: lpfc: Drop redundant pci_enable_pcie_error_reporting() (bsc#1210943).\n- scsi: lpfc: Fix double word in comments (bsc#1210943).\n- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup() (bsc#1210943).\n- scsi: lpfc: Fix lockdep warning for rx_monitor lock when unloading driver (bsc#1210943).\n- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow (bsc#1210943).\n- scsi: lpfc: Record LOGO state with discovery engine even if aborted (bsc#1210943).\n- scsi: lpfc: Reorder freeing of various DMA buffers and their list removal (bsc#1210943).\n- scsi: lpfc: Revise lpfc_error_lost_link() reason code evaluation logic (bsc#1210943).\n- scsi: lpfc: Silence an incorrect device output (bsc#1210943).\n- scsi: lpfc: Skip waiting for register ready bits when in unrecoverable state (bsc#1210943).\n- scsi: lpfc: Update lpfc version to 14.2.0.11 (bsc#1210943).\n- scsi: megaraid_sas: Fix crash after a double completion (git-fixes).\n- scsi: megaraid_sas: Update max supported LD IDs to 240 (git-fixes).\n- scsi: mpt3sas: Do not print sense pool info twice (git-fixes).\n- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add() (git-fixes).\n- scsi: mpt3sas: Fix a memory leak (git-fixes).\n- scsi: qla2xxx: Fix memory leak in qla2x00_probe_one() (git-fixes).\n- scsi: qla2xxx: Perform lockless command completion in abort path (git-fixes).\n- scsi: scsi_dh_alua: Fix memleak for 'qdata' in alua_activate() (git-fixes).\n- scsi: scsi_transport_fc: Add an additional flag to fc_host_fpin_rcv() (bsc#1210943).\n- scsi: sd: Fix wrong zone_write_granularity value during revalidate (git-fixes).\n- scsi: ses: Do not attach if enclosure has no components (git-fixes).\n- scsi: ses: Fix possible addl_desc_ptr out-of-bounds accesses (git-fixes).\n- scsi: ses: Fix possible desc_ptr out-of-bounds accesses (git-fixes).\n- scsi: ses: Fix slab-out-of-bounds in ses_enclosure_data_process() (git-fixes).\n- scsi: ses: Fix slab-out-of-bounds in ses_intf_remove() (git-fixes).\n- scsi: snic: Fix memory leak with using debugfs_lookup() (git-fixes).\n- seccomp: Move copy_seccomp() to no failure path (bsc#1210817).\n- selftests/kselftest/runner/run_one(): allow running non-executable files (git-fixes).\n- selftests: sigaltstack: fix -Wuninitialized (git-fixes).\n- selinux: ensure av_permissions.h is built when needed (git-fixes).\n- selinux: fix Makefile dependencies of flask.h (git-fixes).\n- serial: 8250: Add missing wakeup event reporting (git-fixes).\n- serial: 8250_bcm7271: Fix arbitration handling (git-fixes).\n- serial: 8250_exar: derive nr_ports from PCI ID for Acces I/O cards (git-fixes).\n- serial: exar: Add support for Sealevel 7xxxC serial cards (git-fixes).\n- signal handling: do not use BUG_ON() for debugging (bsc#1210439).\n- signal: Add SA_IMMUTABLE to ensure forced siganls do not get changed (bsc#1210816).\n- signal: Do not always set SA_IMMUTABLE for forced signals (bsc#1210816).\n- signal: HANDLER_EXIT should clear SIGNAL_UNKILLABLE (bsc#1210816).\n- soc: ti: pm33xx: Fix refcount leak in am33xx_pm_probe (git-fixes).\n- spi: cadence-quadspi: fix suspend-resume implementations (git-fixes).\n- spi: fsl-spi: Fix CPM/QE mode Litte Endian (git-fixes).\n- spi: qup: Do not skip cleanup in remove's error path (git-fixes).\n- staging: iio: resolver: ads1210: fix config mode (git-fixes).\n- staging: rtl8192e: Fix W_DISABLE# does not work after stop/start (git-fixes).\n- stat: fix inconsistency between struct stat and struct compat_stat (git-fixes).\n- sunrpc: only free unix grouplist after RCU settles (git-fixes).\n- tty: Prevent writing chars during tcsetattr TCSADRAIN/FLUSH (git-fixes).\n- tty: serial: fsl_lpuart: adjust buffer length to the intended size (git-fixes).\n- udf: Check consistency of Space Bitmap Descriptor (bsc#1210771).\n- udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (bsc#1206649).\n- udf: Support splicing to file (bsc#1210770).\n- usb: chipidea: fix missing goto in `ci_hdrc_probe` (git-fixes).\n- usb: chipidea: imx: avoid unnecessary probe defer (git-fixes).\n- usb: dwc3: gadget: Change condition for processing suspend event (git-fixes).\n- usb: dwc3: pci: add support for the Intel Meteor Lake-S (git-fixes).\n- usb: gadget: tegra-xudc: Fix crash in vbus_draw (git-fixes).\n- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition (git-fixes).\n- usb: host: xhci-rcar: remove leftover quirk handling (git-fixes).\n- virt/coco/sev-guest: Add throttling awareness (bsc#1209927).\n- virt/coco/sev-guest: Carve out the request issuing logic into a helper (bsc#1209927).\n- virt/coco/sev-guest: Check SEV_SNP attribute at probe time (bsc#1209927).\n- virt/coco/sev-guest: Convert the sw_exit_info_2 checking to a switch-case (bsc#1209927).\n- virt/coco/sev-guest: Do some code style cleanups (bsc#1209927).\n- virt/coco/sev-guest: Remove the disable_vmpck label in handle_guest_request() (bsc#1209927).\n- virt/coco/sev-guest: Simplify extended guest request handling (bsc#1209927).\n- virt/sev-guest: Return -EIO if certificate buffer is not large enough (bsc#1209927).\n- virtio_ring: do not update event idx on get_buf (git-fixes).\n- vmci_host: fix a race condition in vmci_host_poll() causing GPF (git-fixes).\n- vmxnet3: use gro callback when UPT is enabled (bsc#1209739).\n- wifi: ath5k: fix an off by one check in ath5k_eeprom_read_freq_list() (git-fixes).\n- wifi: ath6kl: minor fix for allocation size (git-fixes).\n- wifi: ath6kl: reduce WARN to dev_dbg() in callback (git-fixes).\n- wifi: ath9k: hif_usb: fix memory leak of remain_skbs (git-fixes).\n- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies() (git-fixes).\n- wifi: brcmfmac: support CQM RSSI notification with older firmware (git-fixes).\n- wifi: iwlwifi: debug: fix crash in __iwl_err() (git-fixes).\n- wifi: iwlwifi: fix duplicate entry in iwl_dev_info_table (git-fixes).\n- wifi: iwlwifi: fw: fix memory leak in debugfs (git-fixes).\n- wifi: iwlwifi: fw: move memset before early return (git-fixes).\n- wifi: iwlwifi: make the loop for card preparation effective (git-fixes).\n- wifi: iwlwifi: mvm: check firmware response size (git-fixes).\n- wifi: iwlwifi: mvm: do not set CHECKSUM_COMPLETE for unsupported protocols (git-fixes).\n- wifi: iwlwifi: mvm: fix mvmtxq-\u003estopped handling (git-fixes).\n- wifi: iwlwifi: mvm: initialize seq variable (git-fixes).\n- wifi: iwlwifi: trans: do not trigger d3 interrupt twice (git-fixes).\n- wifi: iwlwifi: yoyo: Fix possible division by zero (git-fixes).\n- wifi: iwlwifi: yoyo: skip dump correctly on hw error (git-fixes).\n- wifi: mac80211: adjust scan cancel comment/check (git-fixes).\n- wifi: mt76: add missing locking to protect against concurrent rx/status calls (git-fixes).\n- wifi: mt76: fix 6GHz high channel not be scanned (git-fixes).\n- wifi: mt76: handle failure of vzalloc in mt7615_coredump_work (git-fixes).\n- wifi: mwifiex: mark OF related data as maybe unused (git-fixes).\n- wifi: rt2x00: Fix memory leak when handling surveys (git-fixes).\n- wifi: rtlwifi: fix incorrect error codes in rtl_debugfs_set_write_reg() (git-fixes).\n- wifi: rtlwifi: fix incorrect error codes in rtl_debugfs_set_write_rfreg() (git-fixes).\n- wifi: rtw88: mac: Return the original error from rtw_mac_power_switch() (git-fixes).\n- wifi: rtw88: mac: Return the original error from rtw_pwr_seq_parser() (git-fixes).\n- wifi: rtw89: fix potential race condition between napi_init and napi_enable (git-fixes).\n- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs (bsc#1210769).\n- x86/MCE/AMD: Fix memory leak when threshold_create_bank() fails (git-fixes).\n- x86/PCI: Add quirk for AMD XHCI controller that loses MSI-X state in D3hot (git-fixes).\n- x86/bug: Prevent shadowing in __WARN_FLAGS (git-fixes).\n- x86/bugs: Enable STIBP for IBPB mitigated RETBleed (git-fixes).\n- x86/entry: Avoid very early RET (git-fixes).\n- x86/entry: Do not call error_entry() for XENPV (git-fixes).\n- x86/entry: Move CLD to the start of the idtentry macro (git-fixes).\n- x86/entry: Move PUSH_AND_CLEAR_REGS out of error_entry() (git-fixes).\n- x86/entry: Switch the stack after error_entry() returns (git-fixes).\n- x86/fpu: Prevent FPU state corruption (git-fixes).\n- x86/kvm: Preserve BSP MSR_KVM_POLL_CONTROL across suspend/resume (git-fixes).\n- x86/msi: Fix msi message data shadow struct (git-fixes).\n- x86/pci/xen: Disable PCI/MSI masking for XEN_HVM guests (git-fixes).\n- x86/traps: Use pt_regs directly in fixup_bad_iret() (git-fixes).\n- x86/tsx: Disable TSX development mode at boot (git-fixes).\n- x86: __memcpy_flushcache: fix wrong alignment if size \u003e 2^32 (git-fixes).\n- xhci: fix debugfs register accesses while suspended (git-fixes).\n\nkernel-default-base changed:\n\n- Do not ship on s390x (bsc#1210729)\n- Add exfat (bsc#1208822)\n- Add _diag modules for included socket types (bsc#1204042)\n","status":"published","published":"2023-05-09T12:28:52Z","modified":"2026-02-04T02:27:27.89978Z","updated_at":"2026-11-02T15:53:52.350754Z"},{"id":"SUSE-SU-2023:2141-1","title":"Security update for the Linux Kernel","description":"The SUSE Linux Enterprise 15 SP4 Azure kernel was updated to receive various security and bugfixes.\n\n\nThe following security bugs were fixed:\n\n- CVE-2023-2235: A use-after-free vulnerability in the Performance Events system can be exploited to achieve local privilege escalation (bsc#1210986).\n- CVE-2022-2196: Fixed a regression related to KVM that allowed for speculative execution attacks (bsc#1206992).\n- CVE-2023-23006: Fixed NULL checking against IS_ERR in dr_domain_init_resources (bsc#1208845).\n- CVE-2023-1670: Fixed a use after free in the Xircom 16-bit PCMCIA Ethernet driver. A local user could use this flaw to crash the system or potentially escalate their privileges on the system (bsc#1209871).\n- CVE-2023-2176: A vulnerability was found in compare_netdev_and_ip in drivers/infiniband/core/cma.c in RDMA. The improper cleanup results in out-of-boundary read, where a local user can utilize this problem to crash the system or escalation of privilege (bsc#1210629).\n- CVE-2023-0386: A flaw was found where unauthorized access to the execution of the setuid file with capabilities was found in the OverlayFS subsystem, when a user copies a capable file from a nosuid mount into another mount. This uid mapping bug allowed a local user to escalate their privileges on the system (bsc#1209615).\n- CVE-2023-1998: Fixed a use after free during login when accessing the shost ipaddress (bsc#1210506).\n- CVE-2023-1855: Fixed a use after free in xgene_hwmon_remove (bsc#1210202).\n- CVE-2023-30772: Fixed a race condition and resultant use-after-free in da9150_charger_remove (bsc#1210329).\n- CVE-2023-2019: A flaw was found in the netdevsim device driver, more specifically within the scheduling of events. This issue results from the improper management of a reference count and may lead to a denial of service (bsc#1210454).\n- CVE-2023-2008: A flaw was found in the fault handler of the udmabuf device driver. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code (bsc#1210453).\n- CVE-2023-1989: Fixed a use after free in btsdio_remove (bsc#1210336).\n- CVE-2023-1990: Fixed a use after free in ndlc_remove (bsc#1210337).\n\nThe following non-security bugs were fixed:\n\n- ACPI: CPPC: Disable FIE if registers in PCC regions (bsc#1210953).\n- ACPI: VIOT: Initialize the correct IOMMU fwspec (git-fixes).\n- ACPI: resource: Add Medion S17413 to IRQ override quirk (git-fixes).\n- ALSA: emu10k1: do not create old pass-through playback device on Audigy (git-fixes).\n- ALSA: emu10k1: fix capture interrupt handler unlinking (git-fixes).\n- ALSA: firewire-tascam: add missing unwind goto in snd_tscm_stream_start_duplex() (git-fixes).\n- ALSA: hda/cirrus: Add extra 10 ms delay to allow PLL settle and lock (git-fixes).\n- ALSA: hda/realtek: Add quirks for Lenovo Z13/Z16 Gen2 (git-fixes).\n- ALSA: hda/realtek: Enable mute/micmute LEDs and speaker support for HP Laptops (git-fixes).\n- ALSA: hda/realtek: Remove specific patch for Dell Precision 3260 (git-fixes).\n- ALSA: hda/realtek: fix mute/micmute LEDs for a HP ProBook (git-fixes).\n- ALSA: hda/realtek: fix speaker, mute/micmute LEDs not work on a HP platform (git-fixes).\n- ALSA: hda/sigmatel: add pin overrides for Intel DP45SG motherboard (git-fixes).\n- ALSA: hda/sigmatel: fix S/PDIF out on Intel D*45* motherboards (git-fixes).\n- ALSA: hda: cs35l41: Enable Amp High Pass Filter (git-fixes).\n- ALSA: hda: patch_realtek: add quirk for Asus N7601ZM (git-fixes).\n- ALSA: i2c/cs8427: fix iec958 mixer control deactivation (git-fixes).\n- ARM: 9290/1: uaccess: Fix KASAN false-positives (git-fixes).\n- ARM: dts: exynos: fix WM8960 clock name in Itop Elite (git-fixes).\n- ARM: dts: gta04: fix excess dma channel usage (git-fixes).\n- ARM: dts: qcom: ipq4019: Fix the PCI I/O port range (git-fixes).\n- ARM: dts: rockchip: fix a typo error for rk3288 spdif node (git-fixes).\n- ARM: dts: s5pv210: correct MIPI CSIS clock name (git-fixes).\n- ASN.1: Fix check for strdup() success (git-fixes).\n- ASoC: cs35l41: Only disable internal boost (git-fixes).\n- ASoC: es8316: Handle optional IRQ assignment (git-fixes).\n- ASoC: fsl_asrc_dma: fix potential null-ptr-deref (git-fixes).\n- ASoC: fsl_mqs: move of_node_put() to the correct location (git-fixes).\n- Add 42a11bf5c543 cgroup/cpuset: Make cpuset_fork() handle CLONE_INTO_CGROUP properly\n- Add eee878537941 cgroup/cpuset: Add cpuset_can_fork() and cpuset_cancel_fork() methods\n- Bluetooth: Fix race condition in hidp_session_thread (git-fixes).\n- Bluetooth: L2CAP: Fix use-after-free in l2cap_disconnect_{req,rsp} (git-fixes).\n- Drivers: vmbus: Check for channel allocation before looking up relids (git-fixes).\n- IB/mlx5: Add support for 400G_8X lane speed (git-fixes)\n- Input: hp_sdc_rtc - mark an unused function as __maybe_unused (git-fixes).\n- Input: raspberrypi-ts - fix refcount leak in rpi_ts_probe (git-fixes).\n- KEYS: Add missing function documentation (git-fixes).\n- KEYS: Create static version of public_key_verify_signature (git-fixes).\n- NFS: Cleanup unused rpc_clnt variable (git-fixes).\n- NFSD: Avoid calling OPDESC() with ops-\u003eopnum == OP_ILLEGAL (git-fixes).\n- NFSD: callback request does not use correct credential for AUTH_SYS (git-fixes).\n- PCI/EDR: Clear Device Status after EDR error recovery (git-fixes).\n- PCI: dwc: Fix PORT_LINK_CONTROL update when CDM check enabled (git-fixes).\n- PCI: imx6: Install the fault handler only on compatible match (git-fixes).\n- PCI: loongson: Add more devices that need MRRS quirk (git-fixes).\n- PCI: loongson: Prevent LS7A MRRS increases (git-fixes).\n- PCI: pciehp: Fix AB-BA deadlock between reset_lock and device_lock (git-fixes).\n- PCI: qcom: Fix the incorrect register usage in v2.7.0 config (git-fixes).\n- RDMA/cma: Allow UD qp_type to join multicast only (git-fixes)\n- RDMA/core: Fix GID entry ref leak when create_ah fails (git-fixes)\n- RDMA/irdma: Add ipv4 check to irdma_find_listener() (git-fixes)\n- RDMA/irdma: Fix memory leak of PBLE objects (git-fixes)\n- RDMA/irdma: Increase iWARP CM default rexmit count (git-fixes)\n- Remove obsolete KMP obsoletes (bsc#1210469).\n- Revert 'Bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work' (git-fixes).\n- Revert 'pinctrl: amd: Disable and mask interrupts on resume' (git-fixes).\n- USB: dwc3: fix runtime pm imbalance on probe errors (git-fixes).\n- USB: dwc3: fix runtime pm imbalance on unbind (git-fixes).\n- USB: serial: cp210x: add Silicon Labs IFS-USB-DATACABLE IDs (git-fixes).\n- USB: serial: option: add Quectel RM500U-CN modem (git-fixes).\n- USB: serial: option: add Telit FE990 compositions (git-fixes).\n- USB: serial: option: add UNISOC vendor and TOZED LT70C product (git-fixes).\n- amdgpu: disable powerpc support for the newer display engine (bsc#1194869).\n- arm64: dts: imx8mm-evk: correct pmic clock source (git-fixes).\n- arm64: dts: meson-g12-common: specify full DMC range (git-fixes).\n- arm64: dts: qcom: ipq8074-hk01: enable QMP device, not the PHY node (git-fixes).\n- arm64: dts: qcom: ipq8074: Fix the PCI I/O port range (git-fixes).\n- arm64: dts: qcom: msm8994-kitakami: drop unit address from PMI8994 regulator (git-fixes).\n- arm64: dts: qcom: msm8994-msft-lumia-octagon: drop unit address from PMI8994 regulator (git-fixes).\n- arm64: dts: qcom: msm8996: Fix the PCI I/O port range (git-fixes).\n- arm64: dts: qcom: msm8998: Fix stm-stimulus-base reg name (git-fixes).\n- arm64: dts: qcom: msm8998: Fix the PCI I/O port range (git-fixes).\n- arm64: dts: qcom: sc7180-trogdor-lazor: correct trackpad supply (git-fixes).\n- arm64: dts: qcom: sdm845: Fix the PCI I/O port range (git-fixes).\n- arm64: dts: qcom: sm8250: Fix the PCI I/O port range (git-fixes).\n- arm64: dts: renesas: r8a774c0: Remove bogus voltages from OPP table (git-fixes).\n- arm64: dts: renesas: r8a77990: Remove bogus voltages from OPP table (git-fixes).\n- arm64: dts: ti: k3-j721e-main: Remove ti,strobe-sel property (git-fixes).\n- bluetooth: Perform careful capability checks in hci_sock_ioctl() (git-fixes).\n- cgroup/cpuset: Wake up cpuset_attach_wq tasks in cpuset_cancel_attach() (bsc#1210827).\n- cifs: fix negotiate context parsing (bsc#1210301).\n- clk: add missing of_node_put() in 'assigned-clocks' property parsing (git-fixes).\n- clk: at91: clk-sam9x60-pll: fix return value check (git-fixes).\n- clk: rockchip: rk3399: allow clk_cifout to force clk_cifout_src to reparent (git-fixes).\n- clk: sprd: set max_register according to mapping range (git-fixes).\n- clocksource/drivers/davinci: Fix memory leak in davinci_timer_register when init fails (git-fixes).\n- cpufreq: CPPC: Fix build error without CONFIG_ACPI_CPPC_CPUFREQ_FIE (bsc#1210953).\n- cpufreq: CPPC: Fix performance/frequency conversion (git-fixes).\n- cpumask: fix incorrect cpumask scanning result checks (bsc#1210943).\n- crypto: caam - Clear some memory in instantiate_rng (git-fixes).\n- crypto: drbg - Only fail when jent is unavailable in FIPS mode (git-fixes).\n- crypto: sa2ul - Select CRYPTO_DES (git-fixes).\n- crypto: safexcel - Cleanup ring IRQ workqueues on load failure (git-fixes).\n- driver core: Do not require dynamic_debug for initcall_debug probe timing (git-fixes).\n- drivers: staging: rtl8723bs: Fix locking in _rtw_join_timeout_handler() (git-fixes).\n- drivers: staging: rtl8723bs: Fix locking in rtw_scan_timeout_handler() (git-fixes).\n- drm/amd/display/dc/dce60/Makefile: Fix previous attempt to silence known override-init warnings (git-fixes).\n- drm/amd/display: Fix potential null dereference (git-fixes).\n- drm/amdgpu: Re-enable DCN for 64-bit powerpc (bsc#1194869).\n- drm/armada: Fix a potential double free in an error handling path (git-fixes).\n- drm/bridge: adv7533: Fix adv7533_mode_valid for adv7533 and adv7535 (git-fixes).\n- drm/bridge: lt8912b: Fix DSI Video Mode (git-fixes).\n- drm/bridge: lt9611: Fix PLL being unable to lock (git-fixes).\n- drm/fb-helper: set x/yres_virtual in drm_fb_helper_check_var (git-fixes).\n- drm/i915/dsi: fix DSS CTL register offsets for TGL+ (git-fixes).\n- drm/i915: Fix fast wake AUX sync len (git-fixes).\n- drm/i915: Make intel_get_crtc_new_encoder() less oopsy (git-fixes).\n- drm/i915: fix race condition UAF in i915_perf_add_config_ioctl (git-fixes).\n- drm/lima/lima_drv: Add missing unwind goto in lima_pdev_probe() (git-fixes).\n- drm/msm/adreno: drop bogus pm_runtime_set_active() (git-fixes).\n- drm/msm/disp/dpu: check for crtc enable rather than crtc active to release shared resources (git-fixes).\n- drm/msm: fix NULL-deref on snapshot tear down (git-fixes).\n- drm/nouveau/disp: Support more modes by checking with lower bpc (git-fixes).\n- drm/panel: otm8009a: Set backlight parent to panel device (git-fixes).\n- drm/probe-helper: Cancel previous job before starting new one (git-fixes).\n- drm/rockchip: Drop unbalanced obj unref (git-fixes).\n- drm/vgem: add missing mutex_destroy (git-fixes).\n- drm: msm: adreno: Disable preemption on Adreno 510 (git-fixes).\n- drm: panel-orientation-quirks: Add quirk for Lenovo Yoga Book X90F (git-fixes).\n- drm: rcar-du: Fix a NULL vs IS_ERR() bug (git-fixes).\n- dt-bindings: arm: fsl: Fix copy-paste error in comment (git-fixes).\n- dt-bindings: iio: ti,tmp117: fix documentation link (git-fixes).\n- dt-bindings: mailbox: qcom,apcs-kpss-global: fix SDX55 'if' match (git-fixes).\n- dt-bindings: nvmem: qcom,spmi-sdam: fix example 'reg' property (git-fixes).\n- dt-bindings: remoteproc: stm32-rproc: Typo fix (git-fixes).\n- dt-bindings: soc: qcom: smd-rpm: re-add missing qcom,rpm-msm8994 (git-fixes).\n- e1000e: Disable TSO on i219-LM card to increase speed (git-fixes).\n- efi: sysfb_efi: Add quirk for Lenovo Yoga Book X91F/L (git-fixes).\n- ext4: Fix deadlock during directory rename (bsc#1210763).\n- ext4: Fix possible corruption when moving a directory (bsc#1210763).\n- ext4: fix RENAME_WHITEOUT handling for inline directories (bsc#1210766).\n- ext4: fix another off-by-one fsmap error on 1k block filesystems (bsc#1210767).\n- ext4: fix bad checksum after online resize (bsc#1210762 bsc#1208076).\n- ext4: fix cgroup writeback accounting with fs-layer encryption (bsc#1210765).\n- ext4: fix corruption when online resizing a 1K bigalloc fs (bsc#1206891).\n- ext4: fix incorrect options show of original mount_opt and extend mount_opt2 (bsc#1210764).\n- ext4: fix possible double unlock when moving a directory (bsc#1210763).\n- ext4: use ext4_journal_start/stop for fast commit transactions (bsc#1210793).\n- fbmem: Reject FB_ACTIVATE_KD_TEXT from userspace (git-fixes).\n- firmware: qcom_scm: Clear download bit during reboot (git-fixes).\n- firmware: stratix10-svc: Fix an NULL vs IS_ERR() bug in probe (git-fixes).\n- fpga: bridge: fix kernel-doc parameter description (git-fixes).\n- hwmon: (adt7475) Use device_property APIs when configuring polarity (git-fixes).\n- hwmon: (k10temp) Check range scale when CUR_TEMP register is read-write (git-fixes).\n- hwmon: (pmbus/fsp-3y) Fix functionality bitmask in FSP-3Y YM-2151E (git-fixes).\n- i2c: cadence: cdns_i2c_master_xfer(): Fix runtime PM leak on error path (git-fixes).\n- i2c: hisi: Avoid redundant interrupts (git-fixes).\n- i2c: imx-lpi2c: clean rx/tx buffers upon new message (git-fixes).\n- i2c: ocores: generate stop condition after timeout in polling mode (git-fixes).\n- i915/perf: Replace DRM_DEBUG with driver specific drm_dbg call (git-fixes).\n- ice: avoid bonding causing auxiliary plug/unplug under RTNL lock (bsc#1210158).\n- iio: adc: at91-sama5d2_adc: fix an error code in at91_adc_allocate_trigger() (git-fixes).\n- iio: light: tsl2772: fix reading proximity-diodes from device tree (git-fixes).\n- ipmi: fix SSIF not responding under certain cond (git-fixes).\n- ipmi:ssif: Add send_retries increment (git-fixes).\n- k-m-s: Drop Linux 2.6 support\n- kABI: PCI: loongson: Prevent LS7A MRRS increases (kabi).\n- kABI: x86/msi: Fix msi message data shadow struct (kabi).\n- kabi/severities: ignore KABI for NVMe target (bsc#1174777).\n- keys: Fix linking a duplicate key to a keyring's assoc_array (bsc#1207088).\n- locking/rwbase: Mitigate indefinite writer starvation.\n- media: av7110: prevent underflow in write_ts_to_decoder() (git-fixes).\n- media: dm1105: Fix use after free bug in dm1105_remove due to race condition (git-fixes).\n- media: max9286: Free control handler (git-fixes).\n- media: rc: gpio-ir-recv: Fix support for wake-up (git-fixes).\n- media: rkvdec: fix use after free bug in rkvdec_remove (git-fixes).\n- media: saa7134: fix use after free bug in saa7134_finidev due to race condition (git-fixes).\n- media: venus: dec: Fix handling of the start cmd (git-fixes).\n- memstick: fix memory leak if card device is never registered (git-fixes).\n- mm/filemap: fix page end in filemap_get_read_batch (bsc#1210768).\n- mm: page_alloc: skip regions with hugetlbfs pages when allocating 1G pages (bsc#1210034).\n- mm: take a page reference when removing device exclusive entries (bsc#1211025).\n- mmc: sdhci-of-esdhc: fix quirk to ignore command inhibit for data (git-fixes).\n- mmc: sdhci_am654: Set HIGH_SPEED_ENA for SDR12 and SDR25 (git-fixes).\n- mtd: core: fix error path for nvmem provider (git-fixes).\n- mtd: core: fix nvmem error reporting (git-fixes).\n- mtd: core: provide unique name for nvmem device, take two (git-fixes).\n- mtd: spi-nor: Fix a trivial typo (git-fixes).\n- net: phy: nxp-c45-tja11xx: add remove callback (git-fixes).\n- net: phy: nxp-c45-tja11xx: fix unsigned long multiplication overflow (git-fixes).\n- nfsd: call op_release, even when op_func returns an error (git-fixes).\n- nilfs2: fix potential UAF of struct nilfs_sc_info in nilfs_segctor_thread() (git-fixes).\n- nilfs2: initialize unused bytes in segment summary blocks (git-fixes).\n- nvme initialize core quirks before calling nvme_init_subsystem (git-fixes).\n- nvme-auth: uninitialized variable in nvme_auth_transform_key() (git-fixes).\n- nvme-fcloop: fix 'inconsistent {IN-HARDIRQ-W} -\u003e {HARDIRQ-ON-W} usage' (git-fixes).\n- nvme-hwmon: consistently ignore errors from nvme_hwmon_init (git-fixes).\n- nvme-hwmon: kmalloc the NVME SMART log buffer (git-fixes).\n- nvme-multipath: fix possible hang in live ns resize with ANA access (git-fixes).\n- nvme-pci: fix doorbell buffer value endianness (git-fixes).\n- nvme-pci: fix mempool alloc size (git-fixes).\n- nvme-pci: fix page size checks (git-fixes).\n- nvme-pci: fix timeout request state check (git-fixes).\n- nvme-rdma: fix possible hang caused during ctrl deletion (git-fixes).\n- nvme-tcp: fix possible circular locking when deleting a controller under memory pressure (git-fixes).\n- nvme-tcp: fix possible hang caused during ctrl deletion (git-fixes).\n- nvme-tcp: fix regression that causes sporadic requests to time out (git-fixes).\n- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices (git-fixes).\n- nvme: add device name to warning in uuid_show() (git-fixes).\n- nvme: catch -ENODEV from nvme_revalidate_zones again (git-fixes).\n- nvme: copy firmware_rev on each init (git-fixes).\n- nvme: define compat_ioctl again to unbreak 32-bit userspace (git-fixes).\n- nvme: fix async event trace event (git-fixes).\n- nvme: fix handling single range discard request (git-fixes).\n- nvme: fix per-namespace chardev deletion (git-fixes).\n- nvme: fix the NVME_CMD_EFFECTS_CSE_MASK definition (git-fixes).\n- nvme: fix the read-only state for zoned namespaces with unsupposed features (git-fixes).\n- nvme: improve the NVME_CONNECT_AUTHREQ* definitions (git-fixes).\n- nvme: move nvme_multi_css into nvme.h (git-fixes).\n- nvme: return err on nvme_init_non_mdts_limits fail (git-fixes).\n- nvme: send Identify with CNS 06h only to I/O controllers (bsc#1209693).\n- nvme: set dma alignment to dword (git-fixes).\n- nvme: use command_id instead of req-\u003etag in trace_nvme_complete_rq() (git-fixes).\n- nvmet-auth: do not try to cancel a non-initialized work_struct (git-fixes).\n- nvmet-tcp: fix incomplete data digest send (git-fixes).\n- nvmet-tcp: fix regression in data_digest calculation (git-fixes).\n- nvmet: add helpers to set the result field for connect commands (git-fixes).\n- nvmet: avoid potential UAF in nvmet_req_complete() (git-fixes).\n- nvmet: do not defer passthrough commands with trivial effects to the workqueue (git-fixes).\n- nvmet: fix I/O Command Set specific Identify Controller (git-fixes).\n- nvmet: fix Identify Active Namespace ID list handling (git-fixes).\n- nvmet: fix Identify Controller handling (git-fixes).\n- nvmet: fix Identify Namespace handling (git-fixes).\n- nvmet: fix a memory leak (git-fixes).\n- nvmet: fix a memory leak in nvmet_auth_set_key (git-fixes).\n- nvmet: fix a use-after-free (git-fixes).\n- nvmet: fix invalid memory reference in nvmet_subsys_attr_qid_max_show (git-fixes).\n- nvmet: force reconnect when number of queue changes (git-fixes).\n- nvmet: looks at the passthrough controller when initializing CAP (git-fixes).\n- nvmet: only allocate a single slab for bvecs (git-fixes).\n- nvmet: use IOCB_NOWAIT only if the filesystem supports it (git-fixes).\n- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output (git fixes).\n- perf/core: Fix the same task check in perf_event_set_output (git fixes).\n- perf: Fix check before add_event_to_groups() in perf_group_detach() (git fixes).\n- perf: fix perf_event_context-\u003etime (git fixes).\n- platform/x86 (gigabyte-wmi): Add support for A320M-S2H V2 (git-fixes).\n- platform/x86: gigabyte-wmi: add support for X570S AORUS ELITE (git-fixes).\n- power: supply: cros_usbpd: reclassify 'default case!' as debug (git-fixes).\n- power: supply: generic-adc-battery: fix unit scaling (git-fixes).\n- powerpc/64: Always build with 128-bit long double (bsc#1194869).\n- powerpc/64e: Fix amdgpu build on Book3E w/o AltiVec (bsc#1194869).\n- powerpc/hv-gpci: Fix hv_gpci event list (git fixes).\n- powerpc/papr_scm: Update the NUMA distance table for the target node (bsc#1209999 ltc#202140 bsc#1142685 ltc#179509 git-fixes).\n- powerpc/perf/hv-24x7: add missing RTAS retry status handling (git fixes).\n- powerpc/pseries: Consolidate different NUMA distance update code paths (bsc#1209999 ltc#202140 bsc#1142685 ltc#179509 git-fixes).\n- powerpc: declare unmodified attribute_group usages const (git-fixes).\n- regulator: core: Avoid lockdep reports when resolving supplies (git-fixes).\n- regulator: core: Consistently set mutex_owner when using ww_mutex_lock_slow() (git-fixes).\n- regulator: core: Shorten off-on-delay-us for always-on/boot-on by time since booted (git-fixes).\n- regulator: fan53555: Explicitly include bits header (git-fixes).\n- regulator: fan53555: Fix wrong TCS_SLEW_MASK (git-fixes).\n- regulator: stm32-pwr: fix of_iomap leak (git-fixes).\n- remoteproc: Harden rproc_handle_vdev() against integer overflow (git-fixes).\n- remoteproc: imx_rproc: Call of_node_put() on iteration error (git-fixes).\n- remoteproc: st: Call of_node_put() on iteration error (git-fixes).\n- remoteproc: stm32: Call of_node_put() on iteration error (git-fixes).\n- rtc: meson-vrtc: Use ktime_get_real_ts64() to get the current time (git-fixes).\n- rtc: omap: include header for omap_rtc_power_off_program prototype (git-fixes).\n- sched/fair: Fix imbalance overflow (bsc#1155798 (CPU scheduler functional and performance backports)).\n- sched/fair: Limit sched slice duration (bsc#1189999 (Scheduler functional and performance backports)).\n- sched/fair: Move calculate of avg_load to a better location (bsc#1155798).\n- sched/fair: Sanitize vruntime of entity being migrated (bsc#1203325).\n- sched/fair: sanitize vruntime of entity being placed (bsc#1203325).\n- sched/numa: Stop an exhastive search if an idle core is found (bsc#1189999).\n- sched_getaffinity: do not assume 'cpumask_size()' is fully initialized (bsc#1155798).\n- scsi: aic94xx: Add missing check for dma_map_single() (git-fixes).\n- scsi: core: Add BLIST_NO_VPD_SIZE for some VDASD (git-fixes bsc#1203039)\n- scsi: core: Add BLIST_SKIP_VPD_PAGES for SKhynix H28U74301AMR (git-fixes).\n- scsi: core: Fix a procfs host directory removal regression (git-fixes).\n- scsi: core: Fix a source code comment (git-fixes).\n- scsi: core: Remove the /proc/scsi/${proc_name} directory earlier (git-fixes).\n- scsi: hisi_sas: Check devm_add_action() return value (git-fixes).\n- scsi: hisi_sas: Set a port invalid only if there are no devices attached when refreshing port id (git-fixes).\n- scsi: ipr: Work around fortify-string warning (git-fixes).\n- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param() (git-fixes).\n- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress (git-fixes).\n- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress (git-fixes).\n- scsi: kABI workaround for fc_host_fpin_rcv (git-fixes).\n- scsi: libsas: Remove useless dev_list delete in sas_ex_discover_end_dev() (git-fixes).\n- scsi: lpfc: Avoid usage of list iterator variable after loop (git-fixes).\n- scsi: lpfc: Check kzalloc() in lpfc_sli4_cgn_params_read() (git-fixes).\n- scsi: lpfc: Copyright updates for 14.2.0.11 patches (bsc#1210943).\n- scsi: lpfc: Correct used_rpi count when devloss tmo fires with no recovery (bsc#1210943).\n- scsi: lpfc: Defer issuing new PLOGI if received RSCN before completing REG_LOGIN (bsc#1210943).\n- scsi: lpfc: Drop redundant pci_enable_pcie_error_reporting() (bsc#1210943).\n- scsi: lpfc: Fix double word in comments (bsc#1210943).\n- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup() (bsc#1210943).\n- scsi: lpfc: Fix lockdep warning for rx_monitor lock when unloading driver (bsc#1210943).\n- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow (bsc#1210943).\n- scsi: lpfc: Record LOGO state with discovery engine even if aborted (bsc#1210943).\n- scsi: lpfc: Reorder freeing of various DMA buffers and their list removal (bsc#1210943).\n- scsi: lpfc: Revise lpfc_error_lost_link() reason code evaluation logic (bsc#1210943).\n- scsi: lpfc: Silence an incorrect device output (bsc#1210943).\n- scsi: lpfc: Skip waiting for register ready bits when in unrecoverable state (bsc#1210943).\n- scsi: lpfc: Update lpfc version to 14.2.0.11 (bsc#1210943).\n- scsi: megaraid_sas: Fix crash after a double completion (git-fixes).\n- scsi: megaraid_sas: Update max supported LD IDs to 240 (git-fixes).\n- scsi: mpt3sas: Do not print sense pool info twice (git-fixes).\n- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add() (git-fixes).\n- scsi: mpt3sas: Fix a memory leak (git-fixes).\n- scsi: qla2xxx: Fix memory leak in qla2x00_probe_one() (git-fixes).\n- scsi: qla2xxx: Perform lockless command completion in abort path (git-fixes).\n- scsi: scsi_dh_alua: Fix memleak for 'qdata' in alua_activate() (git-fixes).\n- scsi: scsi_transport_fc: Add an additional flag to fc_host_fpin_rcv() (bsc#1210943).\n- scsi: sd: Fix wrong zone_write_granularity value during revalidate (git-fixes).\n- scsi: ses: Do not attach if enclosure has no components (git-fixes).\n- scsi: ses: Fix possible addl_desc_ptr out-of-bounds accesses (git-fixes).\n- scsi: ses: Fix possible desc_ptr out-of-bounds accesses (git-fixes).\n- scsi: ses: Fix slab-out-of-bounds in ses_enclosure_data_process() (git-fixes).\n- scsi: ses: Fix slab-out-of-bounds in ses_intf_remove() (git-fixes).\n- scsi: snic: Fix memory leak with using debugfs_lookup() (git-fixes).\n- seccomp: Move copy_seccomp() to no failure path (bsc#1210817).\n- selftests/kselftest/runner/run_one(): allow running non-executable files (git-fixes).\n- selftests: sigaltstack: fix -Wuninitialized (git-fixes).\n- selinux: ensure av_permissions.h is built when needed (git-fixes).\n- selinux: fix Makefile dependencies of flask.h (git-fixes).\n- serial: 8250: Add missing wakeup event reporting (git-fixes).\n- serial: 8250_bcm7271: Fix arbitration handling (git-fixes).\n- serial: 8250_exar: derive nr_ports from PCI ID for Acces I/O cards (git-fixes).\n- serial: exar: Add support for Sealevel 7xxxC serial cards (git-fixes).\n- signal handling: do not use BUG_ON() for debugging (bsc#1210439).\n- signal: Add SA_IMMUTABLE to ensure forced siganls do not get changed (bsc#1210816).\n- signal: Do not always set SA_IMMUTABLE for forced signals (bsc#1210816).\n- signal: HANDLER_EXIT should clear SIGNAL_UNKILLABLE (bsc#1210816).\n- soc: ti: pm33xx: Fix refcount leak in am33xx_pm_probe (git-fixes).\n- spi: cadence-quadspi: fix suspend-resume implementations (git-fixes).\n- spi: fsl-spi: Fix CPM/QE mode Litte Endian (git-fixes).\n- spi: qup: Do not skip cleanup in remove's error path (git-fixes).\n- staging: iio: resolver: ads1210: fix config mode (git-fixes).\n- staging: rtl8192e: Fix W_DISABLE# does not work after stop/start (git-fixes).\n- stat: fix inconsistency between struct stat and struct compat_stat (git-fixes).\n- sunrpc: only free unix grouplist after RCU settles (git-fixes).\n- tty: Prevent writing chars during tcsetattr TCSADRAIN/FLUSH (git-fixes).\n- tty: serial: fsl_lpuart: adjust buffer length to the intended size (git-fixes).\n- udf: Check consistency of Space Bitmap Descriptor (bsc#1210771).\n- udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (bsc#1206649).\n- udf: Support splicing to file (bsc#1210770).\n- usb: chipidea: fix missing goto in `ci_hdrc_probe` (git-fixes).\n- usb: chipidea: imx: avoid unnecessary probe defer (git-fixes).\n- usb: dwc3: gadget: Change condition for processing suspend event (git-fixes).\n- usb: dwc3: pci: add support for the Intel Meteor Lake-S (git-fixes).\n- usb: gadget: tegra-xudc: Fix crash in vbus_draw (git-fixes).\n- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition (git-fixes).\n- usb: host: xhci-rcar: remove leftover quirk handling (git-fixes).\n- virt/coco/sev-guest: Add throttling awareness (bsc#1209927).\n- virt/coco/sev-guest: Carve out the request issuing logic into a helper (bsc#1209927).\n- virt/coco/sev-guest: Check SEV_SNP attribute at probe time (bsc#1209927).\n- virt/coco/sev-guest: Convert the sw_exit_info_2 checking to a switch-case (bsc#1209927).\n- virt/coco/sev-guest: Do some code style cleanups (bsc#1209927).\n- virt/coco/sev-guest: Remove the disable_vmpck label in handle_guest_request() (bsc#1209927).\n- virt/coco/sev-guest: Simplify extended guest request handling (bsc#1209927).\n- virt/sev-guest: Return -EIO if certificate buffer is not large enough (bsc#1209927).\n- virtio_ring: do not update event idx on get_buf (git-fixes).\n- vmci_host: fix a race condition in vmci_host_poll() causing GPF (git-fixes).\n- vmxnet3: use gro callback when UPT is enabled (bsc#1209739).\n- wifi: ath5k: fix an off by one check in ath5k_eeprom_read_freq_list() (git-fixes).\n- wifi: ath6kl: minor fix for allocation size (git-fixes).\n- wifi: ath6kl: reduce WARN to dev_dbg() in callback (git-fixes).\n- wifi: ath9k: hif_usb: fix memory leak of remain_skbs (git-fixes).\n- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies() (git-fixes).\n- wifi: brcmfmac: support CQM RSSI notification with older firmware (git-fixes).\n- wifi: iwlwifi: debug: fix crash in __iwl_err() (git-fixes).\n- wifi: iwlwifi: fix duplicate entry in iwl_dev_info_table (git-fixes).\n- wifi: iwlwifi: fw: fix memory leak in debugfs (git-fixes).\n- wifi: iwlwifi: fw: move memset before early return (git-fixes).\n- wifi: iwlwifi: make the loop for card preparation effective (git-fixes).\n- wifi: iwlwifi: mvm: check firmware response size (git-fixes).\n- wifi: iwlwifi: mvm: do not set CHECKSUM_COMPLETE for unsupported protocols (git-fixes).\n- wifi: iwlwifi: mvm: fix mvmtxq-\u003estopped handling (git-fixes).\n- wifi: iwlwifi: mvm: initialize seq variable (git-fixes).\n- wifi: iwlwifi: trans: do not trigger d3 interrupt twice (git-fixes).\n- wifi: iwlwifi: yoyo: Fix possible division by zero (git-fixes).\n- wifi: iwlwifi: yoyo: skip dump correctly on hw error (git-fixes).\n- wifi: mac80211: adjust scan cancel comment/check (git-fixes).\n- wifi: mt76: add missing locking to protect against concurrent rx/status calls (git-fixes).\n- wifi: mt76: fix 6GHz high channel not be scanned (git-fixes).\n- wifi: mt76: handle failure of vzalloc in mt7615_coredump_work (git-fixes).\n- wifi: mwifiex: mark OF related data as maybe unused (git-fixes).\n- wifi: rt2x00: Fix memory leak when handling surveys (git-fixes).\n- wifi: rtlwifi: fix incorrect error codes in rtl_debugfs_set_write_reg() (git-fixes).\n- wifi: rtlwifi: fix incorrect error codes in rtl_debugfs_set_write_rfreg() (git-fixes).\n- wifi: rtw88: mac: Return the original error from rtw_mac_power_switch() (git-fixes).\n- wifi: rtw88: mac: Return the original error from rtw_pwr_seq_parser() (git-fixes).\n- wifi: rtw89: fix potential race condition between napi_init and napi_enable (git-fixes).\n- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs (bsc#1210769).\n- x86/MCE/AMD: Fix memory leak when threshold_create_bank() fails (git-fixes).\n- x86/PCI: Add quirk for AMD XHCI controller that loses MSI-X state in D3hot (git-fixes).\n- x86/bug: Prevent shadowing in __WARN_FLAGS (git-fixes).\n- x86/bugs: Enable STIBP for IBPB mitigated RETBleed (git-fixes).\n- x86/entry: Avoid very early RET (git-fixes).\n- x86/entry: Do not call error_entry() for XENPV (git-fixes).\n- x86/entry: Move CLD to the start of the idtentry macro (git-fixes).\n- x86/entry: Move PUSH_AND_CLEAR_REGS out of error_entry() (git-fixes).\n- x86/entry: Switch the stack after error_entry() returns (git-fixes).\n- x86/fpu: Prevent FPU state corruption (git-fixes).\n- x86/kvm: Preserve BSP MSR_KVM_POLL_CONTROL across suspend/resume (git-fixes).\n- x86/msi: Fix msi message data shadow struct (git-fixes).\n- x86/pci/xen: Disable PCI/MSI masking for XEN_HVM guests (git-fixes).\n- x86/traps: Use pt_regs directly in fixup_bad_iret() (git-fixes).\n- x86/tsx: Disable TSX development mode at boot (git-fixes).\n- x86: __memcpy_flushcache: fix wrong alignment if size \u003e 2^32 (git-fixes).\n- xhci: fix debugfs register accesses while suspended (git-fixes).\n","status":"published","published":"2023-05-09T12:29:44Z","modified":"2026-02-04T04:33:58.831982Z","updated_at":"2026-11-02T15:53:52.350754Z"},{"id":"SUSE-SU-2023:2231-1","title":"Security update for the Linux Kernel","description":"The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security and bugfixes.\n\n\nThe following security bugs were fixed:\n\n- CVE-2023-2235: A use-after-free vulnerability in the Performance Events system can be exploited to achieve local privilege escalation (bsc#1210986).\n- CVE-2022-2196: Fixed a regression related to KVM that allowed for speculative execution attacks (bsc#1206992).\n- CVE-2023-23006: Fixed NULL checking against IS_ERR in dr_domain_init_resources (bsc#1208845).\n- CVE-2023-1670: Fixed a use after free in the Xircom 16-bit PCMCIA Ethernet driver. A local user could use this flaw to crash the system or potentially escalate their privileges on the system (bsc#1209871).\n- CVE-2023-2176: A vulnerability was found in compare_netdev_and_ip in drivers/infiniband/core/cma.c in RDMA. The improper cleanup results in out-of-boundary read, where a local user can utilize this problem to crash the system or escalation of privilege (bsc#1210629).\n- CVE-2023-0386: A flaw was found where unauthorized access to the execution of the setuid file with capabilities was found in the OverlayFS subsystem, when a user copies a capable file from a nosuid mount into another mount. This uid mapping bug allowed a local user to escalate their privileges on the system (bsc#1209615).\n- CVE-2023-1998: Fixed a use after free during login when accessing the shost ipaddress (bsc#1210506).\n- CVE-2023-1855: Fixed a use after free in xgene_hwmon_remove (bsc#1210202).\n- CVE-2023-30772: Fixed a race condition and resultant use-after-free in da9150_charger_remove (bsc#1210329).\n- CVE-2023-2019: A flaw was found in the netdevsim device driver, more specifically within the scheduling of events. This issue results from the improper management of a reference count and may lead to a denial of service (bsc#1210454).\n- CVE-2023-2008: A flaw was found in the fault handler of the udmabuf device driver. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code (bsc#1210453).\n- CVE-2023-1989: Fixed a use after free in btsdio_remove (bsc#1210336).\n- CVE-2023-1990: Fixed a use after free in ndlc_remove (bsc#1210337).\n\nThe following non-security bugs were fixed:\n\n- ACPI: CPPC: Disable FIE if registers in PCC regions (bsc#1210953).\n- ACPI: VIOT: Initialize the correct IOMMU fwspec (git-fixes).\n- ACPI: resource: Add Medion S17413 to IRQ override quirk (git-fixes).\n- ALSA: emu10k1: do not create old pass-through playback device on Audigy (git-fixes).\n- ALSA: emu10k1: fix capture interrupt handler unlinking (git-fixes).\n- ALSA: firewire-tascam: add missing unwind goto in snd_tscm_stream_start_duplex() (git-fixes).\n- ALSA: hda/cirrus: Add extra 10 ms delay to allow PLL settle and lock (git-fixes).\n- ALSA: hda/realtek: Add quirks for Lenovo Z13/Z16 Gen2 (git-fixes).\n- ALSA: hda/realtek: Enable mute/micmute LEDs and speaker support for HP Laptops (git-fixes).\n- ALSA: hda/realtek: Remove specific patch for Dell Precision 3260 (git-fixes).\n- ALSA: hda/realtek: fix mute/micmute LEDs for a HP ProBook (git-fixes).\n- ALSA: hda/realtek: fix speaker, mute/micmute LEDs not work on a HP platform (git-fixes).\n- ALSA: hda/sigmatel: add pin overrides for Intel DP45SG motherboard (git-fixes).\n- ALSA: hda/sigmatel: fix S/PDIF out on Intel D*45* motherboards (git-fixes).\n- ALSA: hda: cs35l41: Enable Amp High Pass Filter (git-fixes).\n- ALSA: hda: patch_realtek: add quirk for Asus N7601ZM (git-fixes).\n- ALSA: i2c/cs8427: fix iec958 mixer control deactivation (git-fixes).\n- ARM: 9290/1: uaccess: Fix KASAN false-positives (git-fixes).\n- ARM: dts: exynos: fix WM8960 clock name in Itop Elite (git-fixes).\n- ARM: dts: gta04: fix excess dma channel usage (git-fixes).\n- ARM: dts: qcom: ipq4019: Fix the PCI I/O port range (git-fixes).\n- ARM: dts: rockchip: fix a typo error for rk3288 spdif node (git-fixes).\n- ARM: dts: s5pv210: correct MIPI CSIS clock name (git-fixes).\n- ASN.1: Fix check for strdup() success (git-fixes).\n- ASoC: cs35l41: Only disable internal boost (git-fixes).\n- ASoC: es8316: Handle optional IRQ assignment (git-fixes).\n- ASoC: fsl_asrc_dma: fix potential null-ptr-deref (git-fixes).\n- ASoC: fsl_mqs: move of_node_put() to the correct location (git-fixes).\n- Add 42a11bf5c543 cgroup/cpuset: Make cpuset_fork() handle CLONE_INTO_CGROUP properly\n- Add eee878537941 cgroup/cpuset: Add cpuset_can_fork() and cpuset_cancel_fork() methods\n- Bluetooth: Fix race condition in hidp_session_thread (git-fixes).\n- Bluetooth: L2CAP: Fix use-after-free in l2cap_disconnect_{req,rsp} (git-fixes).\n- Drivers: vmbus: Check for channel allocation before looking up relids (git-fixes).\n- IB/mlx5: Add support for 400G_8X lane speed (git-fixes)\n- Input: hp_sdc_rtc - mark an unused function as __maybe_unused (git-fixes).\n- Input: raspberrypi-ts - fix refcount leak in rpi_ts_probe (git-fixes).\n- KEYS: Add missing function documentation (git-fixes).\n- KEYS: Create static version of public_key_verify_signature (git-fixes).\n- NFS: Cleanup unused rpc_clnt variable (git-fixes).\n- NFSD: Avoid calling OPDESC() with ops-\u003eopnum == OP_ILLEGAL (git-fixes).\n- NFSD: callback request does not use correct credential for AUTH_SYS (git-fixes).\n- PCI/EDR: Clear Device Status after EDR error recovery (git-fixes).\n- PCI: dwc: Fix PORT_LINK_CONTROL update when CDM check enabled (git-fixes).\n- PCI: imx6: Install the fault handler only on compatible match (git-fixes).\n- PCI: loongson: Add more devices that need MRRS quirk (git-fixes).\n- PCI: loongson: Prevent LS7A MRRS increases (git-fixes).\n- PCI: pciehp: Fix AB-BA deadlock between reset_lock and device_lock (git-fixes).\n- PCI: qcom: Fix the incorrect register usage in v2.7.0 config (git-fixes).\n- RDMA/cma: Allow UD qp_type to join multicast only (git-fixes)\n- RDMA/core: Fix GID entry ref leak when create_ah fails (git-fixes)\n- RDMA/irdma: Add ipv4 check to irdma_find_listener() (git-fixes)\n- RDMA/irdma: Fix memory leak of PBLE objects (git-fixes)\n- RDMA/irdma: Increase iWARP CM default rexmit count (git-fixes)\n- Remove obsolete KMP obsoletes (bsc#1210469).\n- Revert 'Bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work' (git-fixes).\n- Revert 'pinctrl: amd: Disable and mask interrupts on resume' (git-fixes).\n- USB: dwc3: fix runtime pm imbalance on probe errors (git-fixes).\n- USB: dwc3: fix runtime pm imbalance on unbind (git-fixes).\n- USB: serial: cp210x: add Silicon Labs IFS-USB-DATACABLE IDs (git-fixes).\n- USB: serial: option: add Quectel RM500U-CN modem (git-fixes).\n- USB: serial: option: add Telit FE990 compositions (git-fixes).\n- USB: serial: option: add UNISOC vendor and TOZED LT70C product (git-fixes).\n- amdgpu: disable powerpc support for the newer display engine (bsc#1194869).\n- arm64: dts: imx8mm-evk: correct pmic clock source (git-fixes).\n- arm64: dts: meson-g12-common: specify full DMC range (git-fixes).\n- arm64: dts: qcom: ipq8074-hk01: enable QMP device, not the PHY node (git-fixes).\n- arm64: dts: qcom: ipq8074: Fix the PCI I/O port range (git-fixes).\n- arm64: dts: qcom: msm8994-kitakami: drop unit address from PMI8994 regulator (git-fixes).\n- arm64: dts: qcom: msm8994-msft-lumia-octagon: drop unit address from PMI8994 regulator (git-fixes).\n- arm64: dts: qcom: msm8996: Fix the PCI I/O port range (git-fixes).\n- arm64: dts: qcom: msm8998: Fix stm-stimulus-base reg name (git-fixes).\n- arm64: dts: qcom: msm8998: Fix the PCI I/O port range (git-fixes).\n- arm64: dts: qcom: sc7180-trogdor-lazor: correct trackpad supply (git-fixes).\n- arm64: dts: qcom: sdm845: Fix the PCI I/O port range (git-fixes).\n- arm64: dts: qcom: sm8250: Fix the PCI I/O port range (git-fixes).\n- arm64: dts: renesas: r8a774c0: Remove bogus voltages from OPP table (git-fixes).\n- arm64: dts: renesas: r8a77990: Remove bogus voltages from OPP table (git-fixes).\n- arm64: dts: ti: k3-j721e-main: Remove ti,strobe-sel property (git-fixes).\n- arm64: enable jump-label jump-label was disabled on arm64 by a backport error.\n- bluetooth: Perform careful capability checks in hci_sock_ioctl() (git-fixes).\n- cgroup/cpuset: Wake up cpuset_attach_wq tasks in cpuset_cancel_attach() (bsc#1210827).\n- cifs: fix negotiate context parsing (bsc#1210301).\n- clk: add missing of_node_put() in 'assigned-clocks' property parsing (git-fixes).\n- clk: at91: clk-sam9x60-pll: fix return value check (git-fixes).\n- clk: rockchip: rk3399: allow clk_cifout to force clk_cifout_src to reparent (git-fixes).\n- clk: sprd: set max_register according to mapping range (git-fixes).\n- clocksource/drivers/davinci: Fix memory leak in davinci_timer_register when init fails (git-fixes).\n- config: arm64: enable ERRATUM_843419 Config option was incorrectly replaced by the rt-refresh-configs script\n- cpufreq: CPPC: Fix build error without CONFIG_ACPI_CPPC_CPUFREQ_FIE (bsc#1210953).\n- cpufreq: CPPC: Fix performance/frequency conversion (git-fixes).\n- cpumask: fix incorrect cpumask scanning result checks (bsc#1210943).\n- crypto: caam - Clear some memory in instantiate_rng (git-fixes).\n- crypto: drbg - Only fail when jent is unavailable in FIPS mode (git-fixes).\n- crypto: sa2ul - Select CRYPTO_DES (git-fixes).\n- crypto: safexcel - Cleanup ring IRQ workqueues on load failure (git-fixes).\n- driver core: Do not require dynamic_debug for initcall_debug probe timing (git-fixes).\n- drivers: staging: rtl8723bs: Fix locking in _rtw_join_timeout_handler() (git-fixes).\n- drivers: staging: rtl8723bs: Fix locking in rtw_scan_timeout_handler() (git-fixes).\n- drm/amd/display/dc/dce60/Makefile: Fix previous attempt to silence known override-init warnings (git-fixes).\n- drm/amd/display: Fix potential null dereference (git-fixes).\n- drm/amdgpu: Re-enable DCN for 64-bit powerpc (bsc#1194869).\n- drm/armada: Fix a potential double free in an error handling path (git-fixes).\n- drm/bridge: adv7533: Fix adv7533_mode_valid for adv7533 and adv7535 (git-fixes).\n- drm/bridge: lt8912b: Fix DSI Video Mode (git-fixes).\n- drm/bridge: lt9611: Fix PLL being unable to lock (git-fixes).\n- drm/fb-helper: set x/yres_virtual in drm_fb_helper_check_var (git-fixes).\n- drm/i915/dsi: fix DSS CTL register offsets for TGL+ (git-fixes).\n- drm/i915: Fix fast wake AUX sync len (git-fixes).\n- drm/i915: Make intel_get_crtc_new_encoder() less oopsy (git-fixes).\n- drm/i915: fix race condition UAF in i915_perf_add_config_ioctl (git-fixes).\n- drm/lima/lima_drv: Add missing unwind goto in lima_pdev_probe() (git-fixes).\n- drm/msm/adreno: drop bogus pm_runtime_set_active() (git-fixes).\n- drm/msm/disp/dpu: check for crtc enable rather than crtc active to release shared resources (git-fixes).\n- drm/msm: fix NULL-deref on snapshot tear down (git-fixes).\n- drm/nouveau/disp: Support more modes by checking with lower bpc (git-fixes).\n- drm/panel: otm8009a: Set backlight parent to panel device (git-fixes).\n- drm/probe-helper: Cancel previous job before starting new one (git-fixes).\n- drm/rockchip: Drop unbalanced obj unref (git-fixes).\n- drm/vgem: add missing mutex_destroy (git-fixes).\n- drm: msm: adreno: Disable preemption on Adreno 510 (git-fixes).\n- drm: panel-orientation-quirks: Add quirk for Lenovo Yoga Book X90F (git-fixes).\n- drm: rcar-du: Fix a NULL vs IS_ERR() bug (git-fixes).\n- dt-bindings: arm: fsl: Fix copy-paste error in comment (git-fixes).\n- dt-bindings: iio: ti,tmp117: fix documentation link (git-fixes).\n- dt-bindings: mailbox: qcom,apcs-kpss-global: fix SDX55 'if' match (git-fixes).\n- dt-bindings: nvmem: qcom,spmi-sdam: fix example 'reg' property (git-fixes).\n- dt-bindings: remoteproc: stm32-rproc: Typo fix (git-fixes).\n- dt-bindings: soc: qcom: smd-rpm: re-add missing qcom,rpm-msm8994 (git-fixes).\n- e1000e: Disable TSO on i219-LM card to increase speed (git-fixes).\n- efi: sysfb_efi: Add quirk for Lenovo Yoga Book X91F/L (git-fixes).\n- ext4: Fix deadlock during directory rename (bsc#1210763).\n- ext4: Fix possible corruption when moving a directory (bsc#1210763).\n- ext4: fix RENAME_WHITEOUT handling for inline directories (bsc#1210766).\n- ext4: fix another off-by-one fsmap error on 1k block filesystems (bsc#1210767).\n- ext4: fix bad checksum after online resize (bsc#1210762 bsc#1208076).\n- ext4: fix cgroup writeback accounting with fs-layer encryption (bsc#1210765).\n- ext4: fix corruption when online resizing a 1K bigalloc fs (bsc#1206891).\n- ext4: fix incorrect options show of original mount_opt and extend mount_opt2 (bsc#1210764).\n- ext4: fix possible double unlock when moving a directory (bsc#1210763).\n- ext4: use ext4_journal_start/stop for fast commit transactions (bsc#1210793).\n- fbmem: Reject FB_ACTIVATE_KD_TEXT from userspace (git-fixes).\n- firmware: qcom_scm: Clear download bit during reboot (git-fixes).\n- firmware: stratix10-svc: Fix an NULL vs IS_ERR() bug in probe (git-fixes).\n- fpga: bridge: fix kernel-doc parameter description (git-fixes).\n- hwmon: (adt7475) Use device_property APIs when configuring polarity (git-fixes).\n- hwmon: (k10temp) Check range scale when CUR_TEMP register is read-write (git-fixes).\n- hwmon: (pmbus/fsp-3y) Fix functionality bitmask in FSP-3Y YM-2151E (git-fixes).\n- i2c: cadence: cdns_i2c_master_xfer(): Fix runtime PM leak on error path (git-fixes).\n- i2c: hisi: Avoid redundant interrupts (git-fixes).\n- i2c: imx-lpi2c: clean rx/tx buffers upon new message (git-fixes).\n- i2c: ocores: generate stop condition after timeout in polling mode (git-fixes).\n- i915/perf: Replace DRM_DEBUG with driver specific drm_dbg call (git-fixes).\n- ice: avoid bonding causing auxiliary plug/unplug under RTNL lock (bsc#1210158).\n- iio: adc: at91-sama5d2_adc: fix an error code in at91_adc_allocate_trigger() (git-fixes).\n- iio: light: tsl2772: fix reading proximity-diodes from device tree (git-fixes).\n- ipmi: fix SSIF not responding under certain cond (git-fixes).\n- ipmi:ssif: Add send_retries increment (git-fixes).\n- k-m-s: Drop Linux 2.6 support\n- kABI: PCI: loongson: Prevent LS7A MRRS increases (kabi).\n- kABI: x86/msi: Fix msi message data shadow struct (kabi).\n- kabi/severities: ignore KABI for NVMe target (bsc#1174777) The target code is only for testing and there are no external users.\n- keys: Fix linking a duplicate key to a keyring's assoc_array (bsc#1207088).\n- locking/rwbase: Mitigate indefinite writer starvation.\n- media: av7110: prevent underflow in write_ts_to_decoder() (git-fixes).\n- media: dm1105: Fix use after free bug in dm1105_remove due to race condition (git-fixes).\n- media: max9286: Free control handler (git-fixes).\n- media: rc: gpio-ir-recv: Fix support for wake-up (git-fixes).\n- media: rkvdec: fix use after free bug in rkvdec_remove (git-fixes).\n- media: saa7134: fix use after free bug in saa7134_finidev due to race condition (git-fixes).\n- media: venus: dec: Fix handling of the start cmd (git-fixes).\n- memstick: fix memory leak if card device is never registered (git-fixes).\n- mm/filemap: fix page end in filemap_get_read_batch (bsc#1210768).\n- mm: page_alloc: skip regions with hugetlbfs pages when allocating 1G pages (bsc#1210034).\n- mm: take a page reference when removing device exclusive entries (bsc#1211025).\n- mmc: sdhci-of-esdhc: fix quirk to ignore command inhibit for data (git-fixes).\n- mmc: sdhci_am654: Set HIGH_SPEED_ENA for SDR12 and SDR25 (git-fixes).\n- mtd: core: fix error path for nvmem provider (git-fixes).\n- mtd: core: fix nvmem error reporting (git-fixes).\n- mtd: core: provide unique name for nvmem device, take two (git-fixes).\n- mtd: spi-nor: Fix a trivial typo (git-fixes).\n- net: phy: nxp-c45-tja11xx: add remove callback (git-fixes).\n- net: phy: nxp-c45-tja11xx: fix unsigned long multiplication overflow (git-fixes).\n- nfsd: call op_release, even when op_func returns an error (git-fixes).\n- nilfs2: fix potential UAF of struct nilfs_sc_info in nilfs_segctor_thread() (git-fixes).\n- nilfs2: initialize unused bytes in segment summary blocks (git-fixes).\n- nvme initialize core quirks before calling nvme_init_subsystem (git-fixes).\n- nvme-auth: uninitialized variable in nvme_auth_transform_key() (git-fixes).\n- nvme-fcloop: fix 'inconsistent {IN-HARDIRQ-W} -\u003e {HARDIRQ-ON-W} usage' (git-fixes).\n- nvme-hwmon: consistently ignore errors from nvme_hwmon_init (git-fixes).\n- nvme-hwmon: kmalloc the NVME SMART log buffer (git-fixes).\n- nvme-multipath: fix possible hang in live ns resize with ANA access (git-fixes).\n- nvme-pci: fix doorbell buffer value endianness (git-fixes).\n- nvme-pci: fix mempool alloc size (git-fixes).\n- nvme-pci: fix page size checks (git-fixes).\n- nvme-pci: fix timeout request state check (git-fixes).\n- nvme-rdma: fix possible hang caused during ctrl deletion (git-fixes).\n- nvme-tcp: fix possible circular locking when deleting a controller under memory pressure (git-fixes).\n- nvme-tcp: fix possible hang caused during ctrl deletion (git-fixes).\n- nvme-tcp: fix regression that causes sporadic requests to time out (git-fixes).\n- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices (git-fixes).\n- nvme: add device name to warning in uuid_show() (git-fixes).\n- nvme: catch -ENODEV from nvme_revalidate_zones again (git-fixes).\n- nvme: copy firmware_rev on each init (git-fixes).\n- nvme: define compat_ioctl again to unbreak 32-bit userspace (git-fixes).\n- nvme: fix async event trace event (git-fixes).\n- nvme: fix handling single range discard request (git-fixes).\n- nvme: fix per-namespace chardev deletion (git-fixes).\n- nvme: fix the NVME_CMD_EFFECTS_CSE_MASK definition (git-fixes).\n- nvme: fix the read-only state for zoned namespaces with unsupposed features (git-fixes).\n- nvme: improve the NVME_CONNECT_AUTHREQ* definitions (git-fixes).\n- nvme: move nvme_multi_css into nvme.h (git-fixes).\n- nvme: return err on nvme_init_non_mdts_limits fail (git-fixes).\n- nvme: send Identify with CNS 06h only to I/O controllers (bsc#1209693).\n- nvme: set dma alignment to dword (git-fixes).\n- nvme: use command_id instead of req-\u003etag in trace_nvme_complete_rq() (git-fixes).\n- nvmet-auth: do not try to cancel a non-initialized work_struct (git-fixes).\n- nvmet-tcp: fix incomplete data digest send (git-fixes).\n- nvmet-tcp: fix regression in data_digest calculation (git-fixes).\n- nvmet: add helpers to set the result field for connect commands (git-fixes).\n- nvmet: avoid potential UAF in nvmet_req_complete() (git-fixes).\n- nvmet: do not defer passthrough commands with trivial effects to the workqueue (git-fixes).\n- nvmet: fix I/O Command Set specific Identify Controller (git-fixes).\n- nvmet: fix Identify Active Namespace ID list handling (git-fixes).\n- nvmet: fix Identify Controller handling (git-fixes).\n- nvmet: fix Identify Namespace handling (git-fixes).\n- nvmet: fix a memory leak (git-fixes).\n- nvmet: fix a memory leak in nvmet_auth_set_key (git-fixes).\n- nvmet: fix a use-after-free (git-fixes).\n- nvmet: fix invalid memory reference in nvmet_subsys_attr_qid_max_show (git-fixes).\n- nvmet: force reconnect when number of queue changes (git-fixes).\n- nvmet: looks at the passthrough controller when initializing CAP (git-fixes).\n- nvmet: only allocate a single slab for bvecs (git-fixes).\n- nvmet: use IOCB_NOWAIT only if the filesystem supports it (git-fixes).\n- perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output (git fixes).\n- perf/core: Fix the same task check in perf_event_set_output (git fixes).\n- perf: Fix check before add_event_to_groups() in perf_group_detach() (git fixes).\n- perf: fix perf_event_context-\u003etime (git fixes).\n- platform/x86 (gigabyte-wmi): Add support for A320M-S2H V2 (git-fixes).\n- platform/x86: gigabyte-wmi: add support for X570S AORUS ELITE (git-fixes).\n- power: supply: cros_usbpd: reclassify 'default case!' as debug (git-fixes).\n- power: supply: generic-adc-battery: fix unit scaling (git-fixes).\n- powerpc/64: Always build with 128-bit long double (bsc#1194869).\n- powerpc/64e: Fix amdgpu build on Book3E w/o AltiVec (bsc#1194869).\n- powerpc/hv-gpci: Fix hv_gpci event list (git fixes).\n- powerpc/papr_scm: Update the NUMA distance table for the target node (bsc#1209999 ltc#202140 bsc#1142685 ltc#179509 git-fixes).\n- powerpc/perf/hv-24x7: add missing RTAS retry status handling (git fixes).\n- powerpc/pseries: Consolidate different NUMA distance update code paths (bsc#1209999 ltc#202140 bsc#1142685 ltc#179509 git-fixes).\n- powerpc: declare unmodified attribute_group usages const (git-fixes).\n- regulator: core: Avoid lockdep reports when resolving supplies (git-fixes).\n- regulator: core: Consistently set mutex_owner when using ww_mutex_lock_slow() (git-fixes).\n- regulator: core: Shorten off-on-delay-us for always-on/boot-on by time since booted (git-fixes).\n- regulator: fan53555: Explicitly include bits header (git-fixes).\n- regulator: fan53555: Fix wrong TCS_SLEW_MASK (git-fixes).\n- regulator: stm32-pwr: fix of_iomap leak (git-fixes).\n- remoteproc: Harden rproc_handle_vdev() against integer overflow (git-fixes).\n- remoteproc: imx_rproc: Call of_node_put() on iteration error (git-fixes).\n- remoteproc: st: Call of_node_put() on iteration error (git-fixes).\n- remoteproc: stm32: Call of_node_put() on iteration error (git-fixes).\n- rtc: meson-vrtc: Use ktime_get_real_ts64() to get the current time (git-fixes).\n- rtc: omap: include header for omap_rtc_power_off_program prototype (git-fixes).\n- sched/fair: Fix imbalance overflow (bsc#1155798 (CPU scheduler functional and performance backports)).\n- sched/fair: Limit sched slice duration (bsc#1189999 (Scheduler functional and performance backports)).\n- sched/fair: Move calculate of avg_load to a better location (bsc#1155798 (CPU scheduler functional and performance backports)).\n- sched/fair: Sanitize vruntime of entity being migrated (bsc#1203325).\n- sched/fair: sanitize vruntime of entity being placed (bsc#1203325).\n- sched/numa: Stop an exhastive search if an idle core is found (bsc#1189999 (Scheduler functional and performance backports)).\n- sched_getaffinity: do not assume 'cpumask_size()' is fully initialized (bsc#1155798 (CPU scheduler functional and performance backports)).\n- scsi: aic94xx: Add missing check for dma_map_single() (git-fixes).\n- scsi: core: Add BLIST_NO_VPD_SIZE for some VDASD (git-fixes bsc#1203039) (renamed now that it's upstgream)\n- scsi: core: Add BLIST_SKIP_VPD_PAGES for SKhynix H28U74301AMR (git-fixes).\n- scsi: core: Fix a procfs host directory removal regression (git-fixes).\n- scsi: core: Fix a source code comment (git-fixes).\n- scsi: core: Remove the /proc/scsi/${proc_name} directory earlier (git-fixes).\n- scsi: hisi_sas: Check devm_add_action() return value (git-fixes).\n- scsi: hisi_sas: Set a port invalid only if there are no devices attached when refreshing port id (git-fixes).\n- scsi: ipr: Work around fortify-string warning (git-fixes).\n- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param() (git-fixes).\n- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress (git-fixes).\n- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress (git-fixes).\n- scsi: kABI workaround for fc_host_fpin_rcv (git-fixes).\n- scsi: libsas: Remove useless dev_list delete in sas_ex_discover_end_dev() (git-fixes).\n- scsi: lpfc: Avoid usage of list iterator variable after loop (git-fixes).\n- scsi: lpfc: Check kzalloc() in lpfc_sli4_cgn_params_read() (git-fixes).\n- scsi: lpfc: Copyright updates for 14.2.0.11 patches (bsc#1210943).\n- scsi: lpfc: Correct used_rpi count when devloss tmo fires with no recovery (bsc#1210943).\n- scsi: lpfc: Defer issuing new PLOGI if received RSCN before completing REG_LOGIN (bsc#1210943).\n- scsi: lpfc: Drop redundant pci_enable_pcie_error_reporting() (bsc#1210943).\n- scsi: lpfc: Fix double word in comments (bsc#1210943).\n- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup() (bsc#1210943).\n- scsi: lpfc: Fix lockdep warning for rx_monitor lock when unloading driver (bsc#1210943).\n- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow (bsc#1210943).\n- scsi: lpfc: Record LOGO state with discovery engine even if aborted (bsc#1210943).\n- scsi: lpfc: Reorder freeing of various DMA buffers and their list removal (bsc#1210943).\n- scsi: lpfc: Revise lpfc_error_lost_link() reason code evaluation logic (bsc#1210943).\n- scsi: lpfc: Silence an incorrect device output (bsc#1210943).\n- scsi: lpfc: Skip waiting for register ready bits when in unrecoverable state (bsc#1210943).\n- scsi: lpfc: Update lpfc version to 14.2.0.11 (bsc#1210943).\n- scsi: megaraid_sas: Fix crash after a double completion (git-fixes).\n- scsi: megaraid_sas: Update max supported LD IDs to 240 (git-fixes).\n- scsi: mpt3sas: Do not print sense pool info twice (git-fixes).\n- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add() (git-fixes).\n- scsi: mpt3sas: Fix a memory leak (git-fixes).\n- scsi: qla2xxx: Fix memory leak in qla2x00_probe_one() (git-fixes).\n- scsi: qla2xxx: Perform lockless command completion in abort path (git-fixes).\n- scsi: scsi_dh_alua: Fix memleak for 'qdata' in alua_activate() (git-fixes).\n- scsi: scsi_transport_fc: Add an additional flag to fc_host_fpin_rcv() (bsc#1210943).\n- scsi: sd: Fix wrong zone_write_granularity value during revalidate (git-fixes).\n- scsi: ses: Do not attach if enclosure has no components (git-fixes).\n- scsi: ses: Fix possible addl_desc_ptr out-of-bounds accesses (git-fixes).\n- scsi: ses: Fix possible desc_ptr out-of-bounds accesses (git-fixes).\n- scsi: ses: Fix slab-out-of-bounds in ses_enclosure_data_process() (git-fixes).\n- scsi: ses: Fix slab-out-of-bounds in ses_intf_remove() (git-fixes).\n- scsi: snic: Fix memory leak with using debugfs_lookup() (git-fixes).\n- seccomp: Move copy_seccomp() to no failure path (bsc#1210817).\n- selftests/kselftest/runner/run_one(): allow running non-executable files (git-fixes).\n- selftests: sigaltstack: fix -Wuninitialized (git-fixes).\n- selinux: ensure av_permissions.h is built when needed (git-fixes).\n- selinux: fix Makefile dependencies of flask.h (git-fixes).\n- serial: 8250: Add missing wakeup event reporting (git-fixes).\n- serial: 8250_bcm7271: Fix arbitration handling (git-fixes).\n- serial: 8250_exar: derive nr_ports from PCI ID for Acces I/O cards (git-fixes).\n- serial: exar: Add support for Sealevel 7xxxC serial cards (git-fixes).\n- signal handling: do not use BUG_ON() for debugging (bsc#1210439).\n- signal: Add SA_IMMUTABLE to ensure forced siganls do not get changed (bsc#1210816).\n- signal: Do not always set SA_IMMUTABLE for forced signals (bsc#1210816).\n- signal: HANDLER_EXIT should clear SIGNAL_UNKILLABLE (bsc#1210816).\n- soc: ti: pm33xx: Fix refcount leak in am33xx_pm_probe (git-fixes).\n- spi: cadence-quadspi: fix suspend-resume implementations (git-fixes).\n- spi: fsl-spi: Fix CPM/QE mode Litte Endian (git-fixes).\n- spi: qup: Do not skip cleanup in remove's error path (git-fixes).\n- staging: iio: resolver: ads1210: fix config mode (git-fixes).\n- staging: rtl8192e: Fix W_DISABLE# does not work after stop/start (git-fixes).\n- stat: fix inconsistency between struct stat and struct compat_stat (git-fixes).\n- sunrpc: only free unix grouplist after RCU settles (git-fixes).\n- supported.conf: declaring usb_f_ncm supported as requested in (jsc#PED-3750) Support for the legacy functionality g_ncm is still under discussion (see jsc-PED#3200) For maintainance see (jsc#PED-3759)\n- supported.conf: support u_ether and libcomposite (jsc-PED#3750) This is necessary for g_ncm (for maintainance see jsc-PED#3759)\n- tty: Prevent writing chars during tcsetattr TCSADRAIN/FLUSH (git-fixes).\n- tty: serial: fsl_lpuart: adjust buffer length to the intended size (git-fixes).\n- udf: Check consistency of Space Bitmap Descriptor (bsc#1210771).\n- udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (bsc#1206649).\n- udf: Support splicing to file (bsc#1210770).\n- usb: chipidea: fix missing goto in `ci_hdrc_probe` (git-fixes).\n- usb: chipidea: imx: avoid unnecessary probe defer (git-fixes).\n- usb: dwc3: gadget: Change condition for processing suspend event (git-fixes).\n- usb: dwc3: pci: add support for the Intel Meteor Lake-S (git-fixes).\n- usb: gadget: tegra-xudc: Fix crash in vbus_draw (git-fixes).\n- usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition (git-fixes).\n- usb: host: xhci-rcar: remove leftover quirk handling (git-fixes).\n- virt/coco/sev-guest: Add throttling awareness (bsc#1209927).\n- virt/coco/sev-guest: Carve out the request issuing logic into a helper (bsc#1209927).\n- virt/coco/sev-guest: Check SEV_SNP attribute at probe time (bsc#1209927).\n- virt/coco/sev-guest: Convert the sw_exit_info_2 checking to a switch-case (bsc#1209927).\n- virt/coco/sev-guest: Do some code style cleanups (bsc#1209927).\n- virt/coco/sev-guest: Remove the disable_vmpck label in handle_guest_request() (bsc#1209927).\n- virt/coco/sev-guest: Simplify extended guest request handling (bsc#1209927).\n- virt/sev-guest: Return -EIO if certificate buffer is not large enough (bsc#1209927).\n- virtio_ring: do not update event idx on get_buf (git-fixes).\n- vmci_host: fix a race condition in vmci_host_poll() causing GPF (git-fixes).\n- vmxnet3: use gro callback when UPT is enabled (bsc#1209739).\n- wifi: ath5k: fix an off by one check in ath5k_eeprom_read_freq_list() (git-fixes).\n- wifi: ath6kl: minor fix for allocation size (git-fixes).\n- wifi: ath6kl: reduce WARN to dev_dbg() in callback (git-fixes).\n- wifi: ath9k: hif_usb: fix memory leak of remain_skbs (git-fixes).\n- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies() (git-fixes).\n- wifi: brcmfmac: support CQM RSSI notification with older firmware (git-fixes).\n- wifi: iwlwifi: debug: fix crash in __iwl_err() (git-fixes).\n- wifi: iwlwifi: fix duplicate entry in iwl_dev_info_table (git-fixes).\n- wifi: iwlwifi: fw: fix memory leak in debugfs (git-fixes).\n- wifi: iwlwifi: fw: move memset before early return (git-fixes).\n- wifi: iwlwifi: make the loop for card preparation effective (git-fixes).\n- wifi: iwlwifi: mvm: check firmware response size (git-fixes).\n- wifi: iwlwifi: mvm: do not set CHECKSUM_COMPLETE for unsupported protocols (git-fixes).\n- wifi: iwlwifi: mvm: fix mvmtxq-\u003estopped handling (git-fixes).\n- wifi: iwlwifi: mvm: initialize seq variable (git-fixes).\n- wifi: iwlwifi: trans: do not trigger d3 interrupt twice (git-fixes).\n- wifi: iwlwifi: yoyo: Fix possible division by zero (git-fixes).\n- wifi: iwlwifi: yoyo: skip dump correctly on hw error (git-fixes).\n- wifi: mac80211: adjust scan cancel comment/check (git-fixes).\n- wifi: mt76: add missing locking to protect against concurrent rx/status calls (git-fixes).\n- wifi: mt76: fix 6GHz high channel not be scanned (git-fixes).\n- wifi: mt76: handle failure of vzalloc in mt7615_coredump_work (git-fixes).\n- wifi: mwifiex: mark OF related data as maybe unused (git-fixes).\n- wifi: rt2x00: Fix memory leak when handling surveys (git-fixes).\n- wifi: rtlwifi: fix incorrect error codes in rtl_debugfs_set_write_reg() (git-fixes).\n- wifi: rtlwifi: fix incorrect error codes in rtl_debugfs_set_write_rfreg() (git-fixes).\n- wifi: rtw88: mac: Return the original error from rtw_mac_power_switch() (git-fixes).\n- wifi: rtw88: mac: Return the original error from rtw_pwr_seq_parser() (git-fixes).\n- wifi: rtw89: fix potential race condition between napi_init and napi_enable (git-fixes).\n- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs (bsc#1210769).\n- x86/MCE/AMD: Fix memory leak when threshold_create_bank() fails (git-fixes).\n- x86/PCI: Add quirk for AMD XHCI controller that loses MSI-X state in D3hot (git-fixes).\n- x86/bug: Prevent shadowing in __WARN_FLAGS (git-fixes).\n- x86/bugs: Enable STIBP for IBPB mitigated RETBleed (git-fixes).\n- x86/entry: Avoid very early RET (git-fixes).\n- x86/entry: Do not call error_entry() for XENPV (git-fixes).\n- x86/entry: Move CLD to the start of the idtentry macro (git-fixes).\n- x86/entry: Move PUSH_AND_CLEAR_REGS out of error_entry() (git-fixes).\n- x86/entry: Switch the stack after error_entry() returns (git-fixes).\n- x86/fpu: Prevent FPU state corruption (git-fixes).\n- x86/kvm: Preserve BSP MSR_KVM_POLL_CONTROL across suspend/resume (git-fixes).\n- x86/msi: Fix msi message data shadow struct (git-fixes).\n- x86/pci/xen: Disable PCI/MSI masking for XEN_HVM guests (git-fixes).\n- x86/traps: Use pt_regs directly in fixup_bad_iret() (git-fixes).\n- x86/tsx: Disable TSX development mode at boot (git-fixes).\n- x86: __memcpy_flushcache: fix wrong alignment if size \u003e 2^32 (git-fixes).\n- xhci: fix debugfs register accesses while suspended (git-fixes).\n","status":"published","published":"2023-05-17T08:08:29Z","modified":"2026-02-04T03:09:13.293513Z","updated_at":"2026-11-02T15:53:53.019382Z"}]}}