{"id":"CVE-2023-3117","aliases":["CLSA-2023-1695715460","CLSA-2023-1695716575","EUVD-2023-43803","GHSA-vmqj-8947-67ch","OESA-2023-1435","OESA-2023-1436","OESA-2023-1437","OESA-2023-1438","OESA-2023-1439","SUSE-SU-2023:3171-1","SUSE-SU-2023:3172-1","SUSE-SU-2023:3180-1","SUSE-SU-2023:3182-1","SUSE-SU-2023:3302-1","SUSE-SU-2023:3318-1","SUSE-SU-2023:3390-1","SUSE-SU-2023:3391-1","SUSE-SU-2023:3421-1","UBUNTU-CVE-2023-3117"],"status":"rejected","title":"A use-after-free flaw was found in the Netfilter subsystem of the Linux kernel when processing...","description":"Duplicate of CVE-2023-3390.","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","from":"ghsa"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-416"],"published":"2023-06-30T00:00:00Z","modified":"2026-11-06T13:49:55Z","fixes":[{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"linux-aws","fixed_in":["4.4.0-1121.127"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"linux-azure","fixed_in":["4.15.0-1168.183~14.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"linux-lts-xenial","fixed_in":["4.4.0-243.277~14.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"linux","fixed_in":["4.4.0-243.277"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"linux-aws","fixed_in":["4.4.0-1159.174"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"linux-aws-hwe","fixed_in":["4.15.0-1159.172~16.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"linux-azure","fixed_in":["4.15.0-1168.183~16.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"linux-gcp","fixed_in":["4.15.0-1153.170~16.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"linux-hwe","fixed_in":["4.15.0-214.225~16.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"linux-kvm","fixed_in":["4.4.0-1122.132"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"linux-oracle","fixed_in":["4.15.0-1122.133~16.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"linux","fixed_in":["5.4.0-155.172"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"linux-aws","fixed_in":["5.4.0-1106.114"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"linux-aws-5.15","fixed_in":["5.15.0-1040.45~20.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"linux-azure","fixed_in":["5.4.0-1112.118"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"linux-azure-5.15","fixed_in":["5.15.0-1042.49~20.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"linux-bluefield","fixed_in":["5.4.0-1068.74"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"linux-gcp","fixed_in":["5.4.0-1109.118"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"linux-gcp-5.15","fixed_in":["5.15.0-1038.46~20.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"linux-gke","fixed_in":["5.4.0-1104.111"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"linux-gke-5.15","fixed_in":["5.15.0-1038.43~20.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"linux-gkeop","fixed_in":["5.4.0-1073.77"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"linux-gkeop-5.15","fixed_in":["5.15.0-1024.29~20.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"linux-hwe-5.15","fixed_in":["5.15.0-78.85~20.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"linux-ibm","fixed_in":["5.4.0-1053.58"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"linux-intel-iotg-5.15","fixed_in":["5.15.0-1036.41~20.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"linux-iot","fixed_in":["5.4.0-1018.19"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"linux-kvm","fixed_in":["5.4.0-1095.101"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"linux-lowlatency-hwe-5.15","fixed_in":["5.15.0-78.85~20.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"linux-oracle","fixed_in":["5.4.0-1105.114"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"linux-oracle-5.15","fixed_in":["5.15.0-1039.45~20.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"linux-raspi","fixed_in":["5.4.0-1090.101"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"linux-riscv-5.15","fixed_in":["5.15.0-1037.41~20.04.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"linux-xilinx-zynqmp","fixed_in":["5.4.0-1026.30"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"linux","fixed_in":["5.15.0-78.85"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"linux-aws","fixed_in":["5.15.0-1040.45"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"linux-azure","fixed_in":["5.15.0-1042.49"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"linux-gcp","fixed_in":["5.15.0-1038.46"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"linux-gcp-5.19","fixed_in":["5.19.0-1030.32~22.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"linux-gke","fixed_in":["5.15.0-1038.43"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"linux-gkeop","fixed_in":["5.15.0-1024.29"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"linux-hwe-5.19","fixed_in":["5.19.0-50.50"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"linux-ibm","fixed_in":["5.15.0-1034.37"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"linux-intel-iotg","fixed_in":["5.15.0-1036.41"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"linux-kvm","fixed_in":["5.15.0-1038.43"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"linux-lowlatency","fixed_in":["5.15.0-78.85"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"linux-lowlatency-hwe-5.19","fixed_in":["5.19.0-1030.30"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"linux-nvidia","fixed_in":["5.15.0-1029.29"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"linux-oem-6.1","fixed_in":["6.1.0-1019.19"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"linux-oracle","fixed_in":["5.15.0-1039.45"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"linux-raspi","fixed_in":["5.15.0-1034.37"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"bpftool","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-305.25.1.el8_4.tuxcare.els11"}]}],"bundled":24},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-305.25.1.el8_4.tuxcare.els11"}]}],"bundled":24},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"kernel-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-305.25.1.el8_4.tuxcare.els11"}]}],"bundled":24},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"kernel-cross-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-305.25.1.el8_4.tuxcare.els11"}]}],"bundled":24},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"kernel-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-305.25.1.el8_4.tuxcare.els11"}]}],"bundled":24},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"kernel-debug-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-305.25.1.el8_4.tuxcare.els11"}]}],"bundled":24},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"kernel-debug-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-305.25.1.el8_4.tuxcare.els11"}]}],"bundled":24},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"kernel-debug-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-305.25.1.el8_4.tuxcare.els11"}]}],"bundled":24},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"kernel-debug-modules-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-305.25.1.el8_4.tuxcare.els11"}]}],"bundled":24},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"kernel-debug-modules-internal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-305.25.1.el8_4.tuxcare.els11"}]}],"bundled":24},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"kernel-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-305.25.1.el8_4.tuxcare.els11"}]}],"bundled":24},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"kernel-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-305.25.1.el8_4.tuxcare.els11"}]}],"bundled":24},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"kernel-ipaclones-internal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-305.25.1.el8_4.tuxcare.els11"}]}],"bundled":24},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"kernel-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-305.25.1.el8_4.tuxcare.els11"}]}],"bundled":24},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"kernel-modules-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-305.25.1.el8_4.tuxcare.els11"}]}],"bundled":24},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"kernel-modules-internal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-305.25.1.el8_4.tuxcare.els11"}]}],"bundled":24},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"kernel-selftests-internal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-305.25.1.el8_4.tuxcare.els11"}]}],"bundled":24},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"kernel-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-305.25.1.el8_4.tuxcare.els11"}]}],"bundled":24},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"kernel-tools-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-305.25.1.el8_4.tuxcare.els11"}]}],"bundled":24},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"kernel-tools-libs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-305.25.1.el8_4.tuxcare.els11"}]}],"bundled":24},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-305.25.1.el8_4.tuxcare.els11"}]}],"bundled":24},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"python3-perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-305.25.1.el8_4.tuxcare.els11"}]}],"bundled":24},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"bpftool","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-348.7.1.el8_5.tuxcare.els11"}]}],"bundled":25},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-348.7.1.el8_5.tuxcare.els11"}]}],"bundled":25},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"kernel-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-348.7.1.el8_5.tuxcare.els11"}]}],"bundled":25},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"kernel-cross-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-348.7.1.el8_5.tuxcare.els11"}]}],"bundled":25},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"kernel-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-348.7.1.el8_5.tuxcare.els11"}]}],"bundled":25},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"kernel-debug-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-348.7.1.el8_5.tuxcare.els11"}]}],"bundled":25},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"kernel-debug-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-348.7.1.el8_5.tuxcare.els11"}]}],"bundled":25},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"kernel-debug-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-348.7.1.el8_5.tuxcare.els11"}]}],"bundled":25},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"kernel-debug-modules-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-348.7.1.el8_5.tuxcare.els11"}]}],"bundled":25},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"kernel-debug-modules-internal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-348.7.1.el8_5.tuxcare.els11"}]}],"bundled":25},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"kernel-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-348.7.1.el8_5.tuxcare.els11"}]}],"bundled":25},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"kernel-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-348.7.1.el8_5.tuxcare.els11"}]}],"bundled":25},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"kernel-ipaclones-internal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-348.7.1.el8_5.tuxcare.els11"}]}],"bundled":25},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"kernel-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-348.7.1.el8_5.tuxcare.els11"}]}],"bundled":25},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"kernel-modules-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-348.7.1.el8_5.tuxcare.els11"}]}],"bundled":25},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"kernel-modules-internal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-348.7.1.el8_5.tuxcare.els11"}]}],"bundled":25},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"kernel-selftests-internal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-348.7.1.el8_5.tuxcare.els11"}]}],"bundled":25},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"kernel-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-348.7.1.el8_5.tuxcare.els11"}]}],"bundled":25},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"kernel-tools-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-348.7.1.el8_5.tuxcare.els11"}]}],"bundled":25},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"kernel-tools-libs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-348.7.1.el8_5.tuxcare.els11"}]}],"bundled":25},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-348.7.1.el8_5.tuxcare.els11"}]}],"bundled":25},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"python3-perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-348.7.1.el8_5.tuxcare.els11"}]}],"bundled":25},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.10.0-60.103.0.130.oe2203"}]}],"bundled":7},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP1","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.10.0-136.41.0.119.oe2203sp1"}]}],"bundled":7},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP2","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.10.0-153.19.0.95.oe2203sp2"}]}],"bundled":6},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.19.90-2307.4.0.0210.oe1"}]}],"bundled":6},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.19.90-2307.4.0.0210.oe1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.24.74.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"kernel-default-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.24.74.1.150400.24.33.3"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.24.74.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"kernel-default-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.24.74.1.150400.24.33.3"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"kernel-64kb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.24.74.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.24.74.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"kernel-default-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.24.74.1.150400.24.33.3"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.24.74.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"kernel-zfcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.24.74.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP4","package":"kernel-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.24.74.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP4","package":"kernel-obs-build","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.24.74.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP4","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.24.74.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP4","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.24.74.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Legacy 15 SP4","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.24.74.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Live Patching 15 SP4","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.24.74.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Live Patching 15 SP4","package":"kernel-livepatch-SLE15-SP4_Update_15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1-150400.9.3.3"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Availability Extension 15 SP4","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.24.74.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP4","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.24.74.1"}]}],"bundled":7},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.3","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.24.74.1"}]}],"bundled":7},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.3","package":"kernel-default-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.24.74.1.150400.24.33.3"}]}],"bundled":7},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.4","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.24.74.1"}]}],"bundled":7},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.4","package":"kernel-default-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.24.74.1.150400.24.33.3"}]}],"bundled":7},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"dtb-aarch64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.24.74.1"}]}],"bundled":7},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"kernel-64kb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.24.74.1"}]}],"bundled":7},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"kernel-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.24.74.1"}]}],"bundled":7},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.24.74.1"}]}],"bundled":7},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"kernel-default-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.24.74.1.150400.24.33.3"}]}],"bundled":7},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"kernel-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.24.74.1"}]}],"bundled":7},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"kernel-kvmsmall","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.24.74.1"}]}],"bundled":7},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"kernel-obs-build","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.24.74.1"}]}],"bundled":7},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"kernel-obs-qa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.24.74.1"}]}],"bundled":7},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.24.74.1"}]}],"bundled":7},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.24.74.1"}]}],"bundled":7},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"kernel-zfcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.24.74.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"kernel-64kb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.55.12.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.55.12.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"kernel-default-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.55.12.1.150500.6.4.2"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.55.12.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"kernel-zfcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.55.12.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP5","package":"kernel-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.55.12.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP5","package":"kernel-obs-build","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.55.12.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP5","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.55.12.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP5","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.55.12.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Legacy 15 SP5","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.55.12.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Live Patching 15 SP5","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.55.12.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Live Patching 15 SP5","package":"kernel-livepatch-SLE15-SP5_Update_2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1-150500.11.3.2"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Availability Extension 15 SP5","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.55.12.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP5","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.55.12.1"}]}],"bundled":7},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"dtb-aarch64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.55.12.1"}]}],"bundled":7},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"kernel-64kb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.55.12.1"}]}],"bundled":7},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"kernel-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.55.12.1"}]}],"bundled":7},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.55.12.1"}]}],"bundled":7},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"kernel-default-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.55.12.1.150500.6.4.2"}]}],"bundled":7},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"kernel-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.55.12.1"}]}],"bundled":7},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"kernel-kvmsmall","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.55.12.1"}]}],"bundled":7},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"kernel-obs-build","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.55.12.1"}]}],"bundled":7},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"kernel-obs-qa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.55.12.1"}]}],"bundled":7},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.55.12.1"}]}],"bundled":7},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.55.12.1"}]}],"bundled":7},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"kernel-zfcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.55.12.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP5","package":"kernel-azure","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.33.11.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP5","package":"kernel-source-azure","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.33.11.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP5","package":"kernel-syms-azure","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.33.11.1"}]}],"bundled":7},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"kernel-azure","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.33.11.1"}]}],"bundled":7},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"kernel-source-azure","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.33.11.1"}]}],"bundled":7},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"kernel-syms-azure","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.33.11.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP4","package":"kernel-azure","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.14.60.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP4","package":"kernel-source-azure","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.14.60.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP4","package":"kernel-syms-azure","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.14.60.1"}]}],"bundled":9},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"kernel-azure","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.14.60.1"}]}],"bundled":9},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"kernel-source-azure","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.14.60.1"}]}],"bundled":9},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"kernel-syms-azure","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.14.60.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Live Patching 15 SP5","package":"kernel-livepatch-SLE15-SP5-RT_Update_3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1-150500.11.5.1"}]}],"bundled":28},{"source":"osv","ecosystem":"SUSE:Real Time Module 15 SP5","package":"kernel-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.13.11.1"}]}],"bundled":28},{"source":"osv","ecosystem":"SUSE:Real Time Module 15 SP5","package":"kernel-rt_debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.13.11.1"}]}],"bundled":28},{"source":"osv","ecosystem":"SUSE:Real Time Module 15 SP5","package":"kernel-source-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.13.11.1"}]}],"bundled":28},{"source":"osv","ecosystem":"SUSE:Real Time Module 15 SP5","package":"kernel-syms-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.13.11.1"}]}],"bundled":28},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"kernel-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.13.11.1"}]}],"bundled":28},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"kernel-rt_debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.13.11.1"}]}],"bundled":28},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"kernel-source-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.13.11.1"}]}],"bundled":28},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"kernel-syms-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.13.11.1"}]}],"bundled":28},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"kernel-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.15.46.1"}]}],"bundled":20},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"kernel-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.15.46.1"}]}],"bundled":20},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Live Patching 15 SP4","package":"kernel-livepatch-SLE15-SP4-RT_Update_11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1-150400.1.5.1"}]}],"bundled":20},{"source":"osv","ecosystem":"SUSE:Real Time Module 15 SP4","package":"kernel-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.15.46.1"}]}],"bundled":20},{"source":"osv","ecosystem":"SUSE:Real Time Module 15 SP4","package":"kernel-rt_debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.15.46.1"}]}],"bundled":20},{"source":"osv","ecosystem":"SUSE:Real Time Module 15 SP4","package":"kernel-source-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.15.46.1"}]}],"bundled":20},{"source":"osv","ecosystem":"SUSE:Real Time Module 15 SP4","package":"kernel-syms-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.15.46.1"}]}],"bundled":20},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.3","package":"kernel-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.15.46.1"}]}],"bundled":20},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.4","package":"kernel-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.15.46.1"}]}],"bundled":20},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"kernel-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.15.46.1"}]}],"bundled":20},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"kernel-rt_debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.15.46.1"}]}],"bundled":20},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"kernel-source-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.15.46.1"}]}],"bundled":20},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"kernel-syms-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.15.46.1"}]}],"bundled":20},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Live Patching 15 SP2","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-150200.24.160.2"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Live Patching 15 SP2","package":"kernel-livepatch-SLE15-SP2_Update_39","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1-150200.5.3.2"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Availability Extension 15 SP2","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-150200.24.160.2"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-150200.24.160.2"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"kernel-default-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-150200.24.160.2.150200.9.79.2"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"kernel-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-150200.24.160.3"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"kernel-obs-build","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-150200.24.160.2"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"kernel-preempt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-150200.24.160.2"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-150200.24.160.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-150200.24.160.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-150200.24.160.2"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"kernel-default-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-150200.24.160.2.150200.9.79.2"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"kernel-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-150200.24.160.3"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"kernel-obs-build","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-150200.24.160.2"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"kernel-preempt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-150200.24.160.2"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-150200.24.160.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-150200.24.160.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-150200.24.160.2"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"kernel-default-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-150200.24.160.2.150200.9.79.2"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"kernel-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-150200.24.160.3"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"kernel-obs-build","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-150200.24.160.2"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"kernel-preempt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-150200.24.160.2"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-150200.24.160.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-150200.24.160.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Live Patching 15 SP3","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-150300.59.130.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Live Patching 15 SP3","package":"kernel-livepatch-SLE15-SP3_Update_35","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1-150300.7.3.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Availability Extension 15 SP3","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-150300.59.130.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS","package":"kernel-64kb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-150300.59.130.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-150300.59.130.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS","package":"kernel-default-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-150300.59.130.1.150300.18.76.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS","package":"kernel-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-150300.59.130.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS","package":"kernel-obs-build","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-150300.59.130.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS","package":"kernel-preempt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-150300.59.130.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-150300.59.130.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-150300.59.130.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"kernel-64kb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-150300.59.130.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-150300.59.130.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"kernel-default-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-150300.59.130.1.150300.18.76.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"kernel-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-150300.59.130.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"kernel-obs-build","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-150300.59.130.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"kernel-preempt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-150300.59.130.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-150300.59.130.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-150300.59.130.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"kernel-64kb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-150300.59.130.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-150300.59.130.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"kernel-default-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-150300.59.130.1.150300.18.76.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"kernel-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-150300.59.130.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"kernel-obs-build","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-150300.59.130.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"kernel-preempt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-150300.59.130.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-150300.59.130.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-150300.59.130.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"kernel-zfcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-150300.59.130.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-150300.59.130.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"kernel-default-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-150300.59.130.1.150300.18.76.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"kernel-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-150300.59.130.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"kernel-obs-build","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-150300.59.130.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"kernel-preempt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-150300.59.130.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-150300.59.130.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-150300.59.130.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.2","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-150300.59.130.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.2","package":"kernel-default-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-150300.59.130.1.150300.18.76.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.2","package":"kernel-preempt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-150300.59.130.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.2","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-150300.59.130.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Manager Server 4.2","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-150300.59.130.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Manager Server 4.2","package":"kernel-default-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-150300.59.130.1.150300.18.76.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Manager Server 4.2","package":"kernel-preempt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-150300.59.130.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Manager Server 4.2","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-150300.59.130.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Manager Server 4.2","package":"kernel-zfcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-150300.59.130.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-150300.59.130.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"kernel-default-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-150300.59.130.1.150300.18.76.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-150300.59.130.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"kernel-default-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-150300.59.130.1.150300.18.76.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"kernel-64kb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-150300.59.130.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-150300.59.130.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"kernel-default-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-150300.59.130.1.150300.18.76.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"kernel-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-150300.59.130.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"kernel-obs-build","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-150300.59.130.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"kernel-preempt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-150300.59.130.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-150300.59.130.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-150300.59.130.1"}]}],"bundled":15},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"dtb-aarch64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-150300.59.130.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"kernel-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-150300.138.3"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"kernel-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-150300.138.3"}]}],"bundled":15},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"linux-aws","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-1121.127"}]}],"versions":["4.4.0-1002.2","4.4.0-1003.3","4.4.0-1005.5","4.4.0-1006.6","4.4.0-1009.9","4.4.0-1010.10","4.4.0-1011.11","4.4.0-1012.12","4.4.0-1014.14","4.4.0-1016.16","4.4.0-1017.17","4.4.0-1019.19","4.4.0-1022.22","4.4.0-1023.23","4.4.0-1024.25","4.4.0-1025.26","4.4.0-1027.30","4.4.0-1028.31","4.4.0-1029.32","4.4.0-1031.34","4.4.0-1032.35","4.4.0-1034.37","4.4.0-1036.39","4.4.0-1037.40","4.4.0-1038.41","4.4.0-1039.42","4.4.0-1040.43","4.4.0-1042.45","4.4.0-1044.47","4.4.0-1045.48","4.4.0-1046.50","4.4.0-1048.52","4.4.0-1050.54","4.4.0-1052.56","4.4.0-1054.58","4.4.0-1055.59","4.4.0-1056.60","4.4.0-1058.62","4.4.0-1059.63","4.4.0-1060.64","4.4.0-1061.65","4.4.0-1062.66","4.4.0-1064.68","4.4.0-1065.69","4.4.0-1066.70","4.4.0-1067.71","4.4.0-1073.77","4.4.0-1074.78","4.4.0-1075.79","4.4.0-1076.80","4.4.0-1077.81","4.4.0-1078.82","4.4.0-1081.85","4.4.0-1082.86","4.4.0-1083.87","4.4.0-1085.89","4.4.0-1086.90","4.4.0-1087.91","4.4.0-1088.92","4.4.0-1090.94","4.4.0-1091.95","4.4.0-1092.96","4.4.0-1093.97","4.4.0-1094.99","4.4.0-1095.100","4.4.0-1096.101","4.4.0-1097.102","4.4.0-1098.103","4.4.0-1099.104","4.4.0-1101.106","4.4.0-1102.107","4.4.0-1103.108","4.4.0-1104.109","4.4.0-1107.113","4.4.0-1109.115","4.4.0-1110.116","4.4.0-1111.117","4.4.0-1112.118","4.4.0-1113.119","4.4.0-1114.120","4.4.0-1115.121","4.4.0-1116.122","4.4.0-1117.123","4.4.0-1118.124","4.4.0-1119.125","4.4.0-1120.126"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"linux-azure","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.0-1168.183~14.04.1"}]}],"versions":["4.15.0-1023.24~14.04.1","4.15.0-1030.31~14.04.1","4.15.0-1031.32~14.04.1","4.15.0-1032.33~14.04.2","4.15.0-1035.36~14.04.2","4.15.0-1036.38~14.04.2","4.15.0-1037.39~14.04.2","4.15.0-1039.41~14.04.2","4.15.0-1040.44~14.04.1","4.15.0-1041.45~14.04.1","4.15.0-1042.46~14.04.1","4.15.0-1045.49~14.04.1","4.15.0-1046.50~14.04.1","4.15.0-1047.51~14.04.1","4.15.0-1049.54~14.04.1","4.15.0-1050.55~14.04.1","4.15.0-1051.56~14.04.1","4.15.0-1052.57~14.04.1","4.15.0-1055.60~14.04.1","4.15.0-1056.61~14.04.1","4.15.0-1057.62~14.04.1","4.15.0-1059.64~14.04.1","4.15.0-1060.65~14.04.1","4.15.0-1061.66~14.04.1","4.15.0-1063.68~14.04.1","4.15.0-1064.69~14.04.1","4.15.0-1066.71~14.04.1","4.15.0-1067.72~14.04.1","4.15.0-1069.74~14.04.1","4.15.0-1071.76~14.04.1","4.15.0-1074.79~14.04.1","4.15.0-1077.82~14.04.1","4.15.0-1082.92~14.04.1","4.15.0-1083.93~14.04.1","4.15.0-1089.99~14.04.1","4.15.0-1091.101~14.04.1","4.15.0-1092.102~14.04.1","4.15.0-1093.103~14.04.1","4.15.0-1095.105~14.04.1","4.15.0-1096.106~14.04.1","4.15.0-1098.109~14.04.1","4.15.0-1100.111~14.04.1","4.15.0-1102.113~14.04.1","4.15.0-1103.114~14.04.1","4.15.0-1106.118~14.04.1","4.15.0-1108.120~14.04.1","4.15.0-1109.121~14.04.1","4.15.0-1110.122~14.04.1","4.15.0-1111.123~14.04.1","4.15.0-1112.124~14.04.1","4.15.0-1113.126~14.04.1","4.15.0-1114.127~14.04.1","4.15.0-1115.128~14.04.1","4.15.0-1118.131~14.04.1","4.15.0-1121.134~14.04.1","4.15.0-1122.135~14.04.1","4.15.0-1123.136~14.04.1","4.15.0-1124.137~14.04.1","4.15.0-1125.138~14.04.1","4.15.0-1126.139~14.04.1","4.15.0-1127.140~14.04.1","4.15.0-1129.142~14.04.1","4.15.0-1130.143~14.04.1","4.15.0-1131.144~14.04.1","4.15.0-1133.146~14.04.1","4.15.0-1134.147~14.04.1","4.15.0-1136.149~14.04.1","4.15.0-1137.150~14.04.1","4.15.0-1138.151~14.04.1","4.15.0-1139.152~14.04.1","4.15.0-1142.156~14.04.1","4.15.0-1145.160~14.04.1","4.15.0-1146.161~14.04.1","4.15.0-1149.164~14.04.1","4.15.0-1150.165~14.04.1","4.15.0-1151.166~14.04.1","4.15.0-1153.168~14.04.1","4.15.0-1157.172~14.04.2","4.15.0-1158.173~14.04.1","4.15.0-1159.174~14.04.1","4.15.0-1162.177~14.04.1","4.15.0-1163.178~14.04.1","4.15.0-1164.179~14.04.1","4.15.0-1165.180~14.04.1","4.15.0-1166.181~14.04.1","4.15.0-1167.182~14.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"linux-lts-xenial","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-243.277~14.04.1"}]}],"versions":["4.4.0-13.29~14.04.1","4.4.0-14.30~14.04.2","4.4.0-15.31~14.04.1","4.4.0-18.34~14.04.1","4.4.0-21.37~14.04.1","4.4.0-22.39~14.04.1","4.4.0-22.40~14.04.1","4.4.0-24.43~14.04.1","4.4.0-28.47~14.04.1","4.4.0-31.50~14.04.1","4.4.0-34.53~14.04.1","4.4.0-36.55~14.04.1","4.4.0-38.57~14.04.1","4.4.0-42.62~14.04.1","4.4.0-45.66~14.04.1","4.4.0-47.68~14.04.1","4.4.0-51.72~14.04.1","4.4.0-53.74~14.04.1","4.4.0-57.78~14.04.1","4.4.0-59.80~14.04.1","4.4.0-62.83~14.04.1","4.4.0-63.84~14.04.2","4.4.0-64.85~14.04.1","4.4.0-66.87~14.04.1","4.4.0-67.88~14.04.1","4.4.0-70.91~14.04.1","4.4.0-71.92~14.04.1","4.4.0-72.93~14.04.1","4.4.0-75.96~14.04.1","4.4.0-78.99~14.04.2","4.4.0-79.100~14.04.1","4.4.0-81.104~14.04.1","4.4.0-83.106~14.04.1","4.4.0-87.110~14.04.1","4.4.0-89.112~14.04.1","4.4.0-91.114~14.04.1","4.4.0-92.115~14.04.1","4.4.0-93.116~14.04.1","4.4.0-96.119~14.04.1","4.4.0-97.120~14.04.1","4.4.0-98.121~14.04.1","4.4.0-101.124~14.04.1","4.4.0-103.126~14.04.1","4.4.0-104.127~14.04.1","4.4.0-108.131~14.04.1","4.4.0-109.132~14.04.1","4.4.0-111.134~14.04.1","4.4.0-112.135~14.04.1","4.4.0-116.140~14.04.1","4.4.0-119.143~14.04.1","4.4.0-121.145~14.04.1","4.4.0-124.148~14.04.1","4.4.0-127.153~14.04.1","4.4.0-128.154~14.04.1","4.4.0-130.156~14.04.1","4.4.0-131.157~14.04.1","4.4.0-133.159~14.04.1","4.4.0-134.160~14.04.1","4.4.0-135.161~14.04.1","4.4.0-137.163~14.04.1","4.4.0-138.164~14.04.1","4.4.0-139.165~14.04.1","4.4.0-140.166~14.04.1","4.4.0-141.167~14.04.1","4.4.0-142.168~14.04.1","4.4.0-143.169~14.04.2","4.4.0-144.170~14.04.1","4.4.0-146.172~14.04.1","4.4.0-148.174~14.04.1","4.4.0-150.176~14.04.1","4.4.0-151.178~14.04.1","4.4.0-154.181~14.04.1","4.4.0-157.185~14.04.1","4.4.0-159.187~14.04.1","4.4.0-161.189~14.04.1","4.4.0-164.192~14.04.1","4.4.0-165.193~14.04.1","4.4.0-166.195~14.04.1","4.4.0-168.197~14.04.1","4.4.0-169.198~14.04.1","4.4.0-170.199~14.04.1","4.4.0-171.200~14.04.1","4.4.0-173.203~14.04.1","4.4.0-174.204~14.04.1","4.4.0-176.206~14.04.1","4.4.0-177.207~14.04.1","4.4.0-178.208~14.04.1","4.4.0-179.209~14.04.1","4.4.0-184.214~14.04.1","4.4.0-185.215~14.04.1","4.4.0-186.216~14.04.1","4.4.0-187.217~14.04.1","4.4.0-189.219~14.04.1","4.4.0-190.220~14.04.1","4.4.0-193.224~14.04.1","4.4.0-194.226~14.04.1","4.4.0-197.229~14.04.1","4.4.0-198.230~14.04.1","4.4.0-200.232~14.04.1","4.4.0-201.233~14.04.1","4.4.0-203.235~14.04.1","4.4.0-204.236~14.04.1","4.4.0-206.238~14.04.1","4.4.0-208.240~14.04.1","4.4.0-209.241~14.04.1","4.4.0-210.242~14.04.1","4.4.0-211.243~14.04.1","4.4.0-212.244~14.04.1","4.4.0-213.245~14.04.1","4.4.0-214.246~14.04.1","4.4.0-215.247~14.04.1","4.4.0-218.251~14.04.1","4.4.0-219.252~14.04.1","4.4.0-221.254~14.04.1","4.4.0-222.255~14.04.1","4.4.0-223.256~14.04.1","4.4.0-224.257~14.04.1","4.4.0-227.261~14.04.1","4.4.0-229.263~14.04.1","4.4.0-230.264~14.04.1","4.4.0-231.265~14.04.1","4.4.0-233.267~14.04.1","4.4.0-234.268~14.04.1","4.4.0-235.269~14.04.1","4.4.0-236.270~14.04.1","4.4.0-237.271~14.04.1","4.4.0-239.273~14.04.1","4.4.0-240.274~14.04.1","4.4.0-241.275~14.04.1","4.4.0-242.276~14.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-243.277"}]}],"versions":["4.2.0-16.19","4.2.0-17.21","4.2.0-19.23","4.3.0-1.10","4.3.0-2.11","4.3.0-5.16","4.3.0-6.17","4.3.0-7.18","4.4.0-2.16","4.4.0-4.19","4.4.0-6.21","4.4.0-7.22","4.4.0-8.23","4.4.0-9.24","4.4.0-10.25","4.4.0-11.26","4.4.0-12.28","4.4.0-13.29","4.4.0-14.30","4.4.0-15.31","4.4.0-16.32","4.4.0-17.33","4.4.0-18.34","4.4.0-21.37","4.4.0-22.39","4.4.0-22.40","4.4.0-24.43","4.4.0-28.47","4.4.0-31.50","4.4.0-34.53","4.4.0-36.55","4.4.0-38.57","4.4.0-42.62","4.4.0-43.63","4.4.0-45.66","4.4.0-47.68","4.4.0-51.72","4.4.0-53.74","4.4.0-57.78","4.4.0-59.80","4.4.0-62.83","4.4.0-63.84","4.4.0-64.85","4.4.0-65.86","4.4.0-66.87","4.4.0-67.88","4.4.0-70.91","4.4.0-71.92","4.4.0-72.93","4.4.0-75.96","4.4.0-77.98","4.4.0-78.99","4.4.0-79.100","4.4.0-81.104","4.4.0-83.106","4.4.0-87.110","4.4.0-89.112","4.4.0-91.114","4.4.0-92.115","4.4.0-93.116","4.4.0-96.119","4.4.0-97.120","4.4.0-98.121","4.4.0-101.124","4.4.0-103.126","4.4.0-104.127","4.4.0-108.131","4.4.0-109.132","4.4.0-112.135","4.4.0-116.140","4.4.0-119.143","4.4.0-121.145","4.4.0-122.146","4.4.0-124.148","4.4.0-127.153","4.4.0-128.154","4.4.0-130.156","4.4.0-131.157","4.4.0-133.159","4.4.0-134.160","4.4.0-135.161","4.4.0-137.163","4.4.0-138.164","4.4.0-139.165","4.4.0-140.166","4.4.0-141.167","4.4.0-142.168","4.4.0-143.169","4.4.0-145.171","4.4.0-146.172","4.4.0-148.174","4.4.0-150.176","4.4.0-151.178","4.4.0-154.181","4.4.0-157.185","4.4.0-159.187","4.4.0-161.189","4.4.0-164.192","4.4.0-165.193","4.4.0-166.195","4.4.0-168.197","4.4.0-169.198","4.4.0-170.199","4.4.0-171.200","4.4.0-173.203","4.4.0-174.204","4.4.0-176.206","4.4.0-177.207","4.4.0-178.208","4.4.0-179.209","4.4.0-184.214","4.4.0-185.215","4.4.0-186.216","4.4.0-187.217","4.4.0-189.219","4.4.0-190.220","4.4.0-193.224","4.4.0-194.226","4.4.0-197.229","4.4.0-198.230","4.4.0-200.232","4.4.0-201.233","4.4.0-203.235","4.4.0-204.236","4.4.0-206.238","4.4.0-208.240","4.4.0-209.241","4.4.0-210.242","4.4.0-211.243","4.4.0-212.244","4.4.0-213.245","4.4.0-214.246","4.4.0-216.249","4.4.0-217.250","4.4.0-218.251","4.4.0-219.252","4.4.0-221.254","4.4.0-222.255","4.4.0-223.256","4.4.0-224.257","4.4.0-227.261","4.4.0-229.263","4.4.0-230.264","4.4.0-231.265","4.4.0-233.267","4.4.0-234.268","4.4.0-235.269","4.4.0-236.270","4.4.0-237.271","4.4.0-239.273","4.4.0-240.274","4.4.0-241.275","4.4.0-242.276"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"linux-aws","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-1159.174"}]}],"versions":["4.4.0-1001.10","4.4.0-1003.12","4.4.0-1004.13","4.4.0-1007.16","4.4.0-1009.18","4.4.0-1011.20","4.4.0-1012.21","4.4.0-1013.22","4.4.0-1016.25","4.4.0-1017.26","4.4.0-1018.27","4.4.0-1020.29","4.4.0-1022.31","4.4.0-1026.35","4.4.0-1028.37","4.4.0-1030.39","4.4.0-1031.40","4.4.0-1032.41","4.4.0-1035.44","4.4.0-1037.46","4.4.0-1038.47","4.4.0-1039.48","4.4.0-1041.50","4.4.0-1043.52","4.4.0-1044.53","4.4.0-1047.56","4.4.0-1048.57","4.4.0-1049.58","4.4.0-1050.59","4.4.0-1052.61","4.4.0-1054.63","4.4.0-1055.64","4.4.0-1057.66","4.4.0-1060.69","4.4.0-1061.70","4.4.0-1062.71","4.4.0-1063.72","4.4.0-1065.75","4.4.0-1066.76","4.4.0-1067.77","4.4.0-1069.79","4.4.0-1070.80","4.4.0-1072.82","4.4.0-1073.83","4.4.0-1074.84","4.4.0-1075.85","4.4.0-1077.87","4.4.0-1079.89","4.4.0-1081.91","4.4.0-1083.93","4.4.0-1084.94","4.4.0-1085.96","4.4.0-1087.98","4.4.0-1088.99","4.4.0-1090.101","4.4.0-1092.103","4.4.0-1094.105","4.4.0-1095.106","4.4.0-1096.107","4.4.0-1098.109","4.4.0-1099.110","4.4.0-1100.111","4.4.0-1101.112","4.4.0-1102.113","4.4.0-1104.115","4.4.0-1105.116","4.4.0-1106.117","4.4.0-1107.118","4.4.0-1109.120","4.4.0-1110.121","4.4.0-1111.123","4.4.0-1112.124","4.4.0-1113.126","4.4.0-1114.127","4.4.0-1117.131","4.4.0-1118.132","4.4.0-1119.133","4.4.0-1121.135","4.4.0-1122.136","4.4.0-1123.137","4.4.0-1124.138","4.4.0-1126.140","4.4.0-1127.141","4.4.0-1128.142","4.4.0-1129.143","4.4.0-1130.144","4.4.0-1131.145","4.4.0-1132.146","4.4.0-1133.147","4.4.0-1134.148","4.4.0-1135.149","4.4.0-1137.151","4.4.0-1138.152","4.4.0-1139.153","4.4.0-1140.154","4.4.0-1143.158","4.4.0-1145.160","4.4.0-1146.161","4.4.0-1147.162","4.4.0-1148.163","4.4.0-1150.165","4.4.0-1151.166","4.4.0-1152.167","4.4.0-1153.168","4.4.0-1154.169","4.4.0-1155.170","4.4.0-1156.171","4.4.0-1157.172","4.4.0-1158.173"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"linux-aws-hwe","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.0-1159.172~16.04.1"}]}],"versions":["4.15.0-1030.31~16.04.1","4.15.0-1031.33~16.04.1","4.15.0-1032.34~16.04.1","4.15.0-1033.35~16.04.1","4.15.0-1035.37~16.04.1","4.15.0-1036.38~16.04.1","4.15.0-1039.41~16.04.1","4.15.0-1040.42~16.04.1","4.15.0-1041.43~16.04.1","4.15.0-1043.45~16.04.1","4.15.0-1044.46~16.04.1","4.15.0-1045.47~16.04.1","4.15.0-1047.49~16.04.1","4.15.0-1048.50~16.04.1","4.15.0-1050.52~16.04.1","4.15.0-1051.53~16.04.1","4.15.0-1052.54~16.04.1","4.15.0-1054.56~16.04.1","4.15.0-1056.58~16.04.1","4.15.0-1057.59~16.04.1","4.15.0-1058.60~16.04.1","4.15.0-1060.62~16.04.1","4.15.0-1063.67~16.04.1","4.15.0-1065.69~16.04.1","4.15.0-1066.70~16.04.1","4.15.0-1067.71~16.04.1","4.15.0-1073.77~16.04.1","4.15.0-1074.78~16.04.1","4.15.0-1079.83~16.04.1","4.15.0-1080.84~16.04.1","4.15.0-1082.86~16.04.1","4.15.0-1083.87~16.04.1","4.15.0-1085.90~16.04.1","4.15.0-1088.93~16.04.1","4.15.0-1090.95~16.04.1","4.15.0-1091.96~16.04.1","4.15.0-1093.99~16.04.1","4.15.0-1094.101~16.04.1","4.15.0-1095.102~16.04.1","4.15.0-1096.103~16.04.1","4.15.0-1097.104~16.04.1","4.15.0-1098.105~16.04.1","4.15.0-1099.106~16.04.1","4.15.0-1102.109~16.04.1","4.15.0-1103.110~16.04.1","4.15.0-1106.113~16.04.1","4.15.0-1109.116~16.04.1","4.15.0-1110.117~16.04.1","4.15.0-1111.118~16.04.1","4.15.0-1112.119~16.04.1","4.15.0-1113.120~16.04.1","4.15.0-1115.122~16.04.1","4.15.0-1116.123~16.04.1","4.15.0-1118.125~16.04.1","4.15.0-1119.126~16.04.2","4.15.0-1120.128~16.04.1","4.15.0-1123.132~16.04.1","4.15.0-1124.133~16.04.1","4.15.0-1126.135~16.04.2","4.15.0-1127.136~16.04.1","4.15.0-1128.137~16.04.1","4.15.0-1130.139~16.04.1","4.15.0-1133.143~16.04.1","4.15.0-1136.147~16.04.1","4.15.0-1137.148~16.04.1","4.15.0-1139.150~16.04.1","4.15.0-1140.151~16.04.1","4.15.0-1141.152~16.04.1","4.15.0-1142.154~16.04.1","4.15.0-1143.155~16.04.1","4.15.0-1146.158~16.04.2","4.15.0-1147.159~16.04.1","4.15.0-1148.160~16.04.1","4.15.0-1151.164~16.04.1","4.15.0-1153.166~16.04.1","4.15.0-1154.167~16.04.1","4.15.0-1155.168~16.04.1","4.15.0-1156.169~16.04.1","4.15.0-1157.170~16.04.1","4.15.0-1158.171~16.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"linux-azure","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.0-1168.183~16.04.1"}]}],"versions":["4.11.0-1009.9","4.11.0-1011.11","4.11.0-1013.13","4.11.0-1014.14","4.11.0-1015.15","4.11.0-1016.16","4.13.0-1005.7","4.13.0-1006.8","4.13.0-1007.9","4.13.0-1009.12","4.13.0-1011.14","4.13.0-1012.15","4.13.0-1014.17","4.13.0-1016.19","4.13.0-1018.21","4.15.0-1013.13~16.04.2","4.15.0-1014.14~16.04.1","4.15.0-1018.18~16.04.1","4.15.0-1019.19~16.04.1","4.15.0-1021.21~16.04.1","4.15.0-1022.22~16.04.1","4.15.0-1023.24~16.04.1","4.15.0-1025.26~16.04.1","4.15.0-1028.29~16.04.1","4.15.0-1030.31~16.04.1","4.15.0-1031.32~16.04.1","4.15.0-1032.33~16.04.1","4.15.0-1035.36~16.04.1","4.15.0-1036.38~16.04.1","4.15.0-1037.39~16.04.1","4.15.0-1039.43","4.15.0-1040.44","4.15.0-1041.45","4.15.0-1042.46","4.15.0-1045.49","4.15.0-1046.50","4.15.0-1047.51","4.15.0-1049.54","4.15.0-1050.55","4.15.0-1051.56","4.15.0-1052.57","4.15.0-1055.60","4.15.0-1056.61","4.15.0-1057.62","4.15.0-1059.64","4.15.0-1060.65","4.15.0-1061.66","4.15.0-1063.68","4.15.0-1064.69","4.15.0-1066.71","4.15.0-1067.72","4.15.0-1069.74","4.15.0-1071.76","4.15.0-1075.80","4.15.0-1077.82","4.15.0-1082.92~16.04.1","4.15.0-1083.93~16.04.1","4.15.0-1089.99~16.04.1","4.15.0-1091.101~16.04.1","4.15.0-1092.102~16.04.1","4.15.0-1093.103~16.04.1","4.15.0-1095.105~16.04.1","4.15.0-1096.106~16.04.1","4.15.0-1098.109~16.04.1","4.15.0-1100.111~16.04.1","4.15.0-1102.113~16.04.1","4.15.0-1103.114~16.04.1","4.15.0-1106.118~16.04.1","4.15.0-1108.120~16.04.1","4.15.0-1109.121~16.04.1","4.15.0-1110.122~16.04.1","4.15.0-1111.123~16.04.1","4.15.0-1112.124~16.04.1","4.15.0-1113.126~16.04.1","4.15.0-1114.127~16.04.1","4.15.0-1115.128~16.04.1","4.15.0-1118.131~16.04.1","4.15.0-1121.134~16.04.1","4.15.0-1122.135~16.04.1","4.15.0-1123.136~16.04.1","4.15.0-1124.137~16.04.1","4.15.0-1125.138~16.04.1","4.15.0-1126.139~16.04.1","4.15.0-1127.140~16.04.1","4.15.0-1129.142~16.04.1","4.15.0-1130.143~16.04.1","4.15.0-1131.144~16.04.1","4.15.0-1133.146~16.04.1","4.15.0-1134.147~16.04.1","4.15.0-1136.149~16.04.1","4.15.0-1137.150~16.04.1","4.15.0-1138.151~16.04.1","4.15.0-1139.152~16.04.1","4.15.0-1142.156~16.04.1","4.15.0-1145.160~16.04.1","4.15.0-1146.161~16.04.1","4.15.0-1149.164~16.04.1","4.15.0-1150.165~16.04.1","4.15.0-1151.166~16.04.1","4.15.0-1153.168~16.04.1","4.15.0-1159.174~16.04.1","4.15.0-1162.177~16.04.1","4.15.0-1163.178~16.04.1","4.15.0-1164.179~16.04.1","4.15.0-1165.180~16.04.1","4.15.0-1166.181~16.04.1","4.15.0-1167.182~16.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"linux-gcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.0-1153.170~16.04.1"}]}],"versions":["4.10.0-1004.4","4.10.0-1006.6","4.10.0-1007.7","4.10.0-1008.8","4.10.0-1009.9","4.13.0-1002.5","4.13.0-1006.9","4.13.0-1007.10","4.13.0-1008.11","4.13.0-1011.15","4.13.0-1012.16","4.13.0-1013.17","4.13.0-1015.19","4.13.0-1017.21","4.13.0-1019.23","4.15.0-1014.14~16.04.1","4.15.0-1015.15~16.04.1","4.15.0-1017.18~16.04.1","4.15.0-1018.19~16.04.2","4.15.0-1019.20~16.04.1","4.15.0-1021.22~16.04.1","4.15.0-1023.24~16.04.1","4.15.0-1024.25~16.04.2","4.15.0-1025.26~16.04.1","4.15.0-1026.27~16.04.1","4.15.0-1027.28~16.04.1","4.15.0-1028.29~16.04.1","4.15.0-1029.31~16.04.1","4.15.0-1030.32~16.04.1","4.15.0-1032.34~16.04.1","4.15.0-1033.35~16.04.1","4.15.0-1034.36~16.04.1","4.15.0-1036.38~16.04.1","4.15.0-1037.39~16.04.1","4.15.0-1040.42~16.04.1","4.15.0-1041.43","4.15.0-1042.44","4.15.0-1044.46","4.15.0-1046.49","4.15.0-1047.50","4.15.0-1049.52","4.15.0-1050.53","4.15.0-1052.56","4.15.0-1055.59","4.15.0-1058.62","4.15.0-1060.64","4.15.0-1061.65","4.15.0-1071.81~16.04.1","4.15.0-1077.87~16.04.1","4.15.0-1078.88~16.04.1","4.15.0-1080.90~16.04.1","4.15.0-1081.92~16.04.1","4.15.0-1083.94~16.04.1","4.15.0-1084.95~16.04.1","4.15.0-1086.98~16.04.1","4.15.0-1087.100~16.04.1","4.15.0-1088.101~16.04.1","4.15.0-1090.103~16.04.1","4.15.0-1091.104~16.04.1","4.15.0-1092.105~16.04.1","4.15.0-1093.106~16.04.1","4.15.0-1094.107~16.04.1","4.15.0-1095.108~16.04.1","4.15.0-1096.109~16.04.1","4.15.0-1097.110~16.04.1","4.15.0-1098.111~16.04.1","4.15.0-1099.112~16.04.1","4.15.0-1100.113~16.04.1","4.15.0-1103.116~16.04.1","4.15.0-1106.120~16.04.1","4.15.0-1107.121~16.04.1","4.15.0-1108.122~16.04.1","4.15.0-1109.123~16.04.1","4.15.0-1110.124~16.04.1","4.15.0-1111.125~16.04.1","4.15.0-1112.126~16.04.1","4.15.0-1114.128~16.04.1","4.15.0-1115.129~16.04.1","4.15.0-1116.130~16.04.1","4.15.0-1118.132~16.04.1","4.15.0-1119.133~16.04.1","4.15.0-1120.134~16.04.1","4.15.0-1121.135~16.04.1","4.15.0-1122.136~16.04.1","4.15.0-1124.138~16.04.1","4.15.0-1127.142~16.04.1","4.15.0-1130.146~16.04.1","4.15.0-1131.147~16.04.1","4.15.0-1134.150~16.04.2","4.15.0-1135.151~16.04.2","4.15.0-1136.152~16.04.1","4.15.0-1137.153~16.04.1","4.15.0-1138.154~16.04.1","4.15.0-1141.157~16.04.2","4.15.0-1142.158~16.04.1","4.15.0-1143.159~16.04.1","4.15.0-1146.162~16.04.1","4.15.0-1147.163~16.04.1","4.15.0-1148.164~16.04.1","4.15.0-1149.165~16.04.1","4.15.0-1150.166~16.04.1","4.15.0-1151.167~16.04.1","4.15.0-1152.168~16.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"linux-hwe","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.0-214.225~16.04.1"}]}],"versions":["4.8.0-36.36~16.04.1","4.8.0-39.42~16.04.1","4.8.0-41.44~16.04.1","4.8.0-42.45~16.04.1","4.8.0-44.47~16.04.1","4.8.0-45.48~16.04.1","4.8.0-46.49~16.04.1","4.8.0-49.52~16.04.1","4.8.0-51.54~16.04.1","4.8.0-52.55~16.04.1","4.8.0-53.56~16.04.1","4.8.0-54.57~16.04.1","4.8.0-56.61~16.04.1","4.8.0-58.63~16.04.1","4.10.0-27.30~16.04.2","4.10.0-28.32~16.04.2","4.10.0-30.34~16.04.1","4.10.0-32.36~16.04.1","4.10.0-33.37~16.04.1","4.10.0-35.39~16.04.1","4.10.0-37.41~16.04.1","4.10.0-38.42~16.04.1","4.10.0-40.44~16.04.1","4.10.0-42.46~16.04.1","4.13.0-26.29~16.04.2","4.13.0-31.34~16.04.1","4.13.0-32.35~16.04.1","4.13.0-36.40~16.04.1","4.13.0-37.42~16.04.1","4.13.0-38.43~16.04.1","4.13.0-39.44~16.04.1","4.13.0-41.46~16.04.1","4.13.0-43.48~16.04.1","4.13.0-45.50~16.04.1","4.15.0-24.26~16.04.1","4.15.0-29.31~16.04.1","4.15.0-30.32~16.04.1","4.15.0-32.35~16.04.1","4.15.0-33.36~16.04.1","4.15.0-34.37~16.04.1","4.15.0-36.39~16.04.1","4.15.0-38.41~16.04.1","4.15.0-39.42~16.04.1","4.15.0-42.45~16.04.1","4.15.0-43.46~16.04.1","4.15.0-45.48~16.04.1","4.15.0-46.49~16.04.1","4.15.0-47.50~16.04.1","4.15.0-48.51~16.04.1","4.15.0-50.54~16.04.1","4.15.0-51.55~16.04.1","4.15.0-52.56~16.04.1","4.15.0-54.58~16.04.1","4.15.0-55.60~16.04.2","4.15.0-58.64~16.04.1","4.15.0-60.67~16.04.1","4.15.0-62.69~16.04.1","4.15.0-64.73~16.04.1","4.15.0-65.74~16.04.1","4.15.0-66.75~16.04.1","4.15.0-69.78~16.04.1","4.15.0-70.79~16.04.1","4.15.0-72.81~16.04.1","4.15.0-74.83~16.04.1","4.15.0-76.86~16.04.1","4.15.0-88.88~16.04.1","4.15.0-91.92~16.04.1","4.15.0-96.97~16.04.1","4.15.0-99.100~16.04.1","4.15.0-101.102~16.04.1","4.15.0-106.107~16.04.1","4.15.0-107.108~16.04.1","4.15.0-112.113~16.04.1","4.15.0-115.116~16.04.1","4.15.0-117.118~16.04.1","4.15.0-118.119~16.04.1","4.15.0-120.122~16.04.1","4.15.0-122.124~16.04.1","4.15.0-123.126~16.04.1","4.15.0-126.129~16.04.1","4.15.0-128.131~16.04.1","4.15.0-129.132~16.04.1","4.15.0-132.136~16.04.1","4.15.0-133.137~16.04.1","4.15.0-136.140~16.04.1","4.15.0-137.141~16.04.1","4.15.0-139.143~16.04.1","4.15.0-140.144~16.04.1","4.15.0-142.146~16.04.1","4.15.0-143.147~16.04.3","4.15.0-144.148~16.04.1","4.15.0-147.151~16.04.1","4.15.0-151.157~16.04.1","4.15.0-153.160~16.04.1","4.15.0-154.161~16.04.1","4.15.0-156.163~16.04.1","4.15.0-158.166~16.04.1","4.15.0-159.167~16.04.1","4.15.0-161.169~16.04.1","4.15.0-162.170~16.04.1","4.15.0-163.171~16.04.1","4.15.0-166.174~16.04.1","4.15.0-167.175~16.04.1","4.15.0-169.177~16.04.1","4.15.0-171.180~16.04.1","4.15.0-173.182~16.04.1","4.15.0-175.184~16.04.1","4.15.0-176.185~16.04.1","4.15.0-177.186~16.04.1","4.15.0-180.189~16.04.1","4.15.0-184.194~16.04.1","4.15.0-187.198~16.04.1","4.15.0-188.199~16.04.1","4.15.0-189.200~16.04.1","4.15.0-191.202~16.04.1","4.15.0-192.203~16.04.1","4.15.0-193.204~16.04.1","4.15.0-194.205~16.04.1","4.15.0-196.207~16.04.1","4.15.0-197.208~16.04.1","4.15.0-200.211~16.04.2","4.15.0-201.212~16.04.1","4.15.0-202.213~16.04.1","4.15.0-206.217~16.04.1","4.15.0-208.219~16.04.1","4.15.0-209.220~16.04.1","4.15.0-210.221~16.04.1","4.15.0-211.222~16.04.1","4.15.0-212.223~16.04.1","4.15.0-213.224~16.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"linux-kvm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-1122.132"}]}],"versions":["4.4.0-1004.9","4.4.0-1007.12","4.4.0-1008.13","4.4.0-1009.14","4.4.0-1010.15","4.4.0-1012.17","4.4.0-1013.18","4.4.0-1015.20","4.4.0-1017.22","4.4.0-1019.24","4.4.0-1020.25","4.4.0-1021.26","4.4.0-1023.28","4.4.0-1026.31","4.4.0-1027.32","4.4.0-1029.34","4.4.0-1031.37","4.4.0-1032.38","4.4.0-1033.39","4.4.0-1035.41","4.4.0-1036.42","4.4.0-1037.43","4.4.0-1038.44","4.4.0-1039.45","4.4.0-1040.46","4.4.0-1041.47","4.4.0-1043.49","4.4.0-1044.50","4.4.0-1046.52","4.4.0-1047.53","4.4.0-1048.55","4.4.0-1051.58","4.4.0-1052.59","4.4.0-1054.61","4.4.0-1056.63","4.4.0-1058.65","4.4.0-1059.66","4.4.0-1060.67","4.4.0-1062.69","4.4.0-1063.70","4.4.0-1064.71","4.4.0-1065.72","4.4.0-1066.73","4.4.0-1068.75","4.4.0-1069.76","4.4.0-1070.77","4.4.0-1071.78","4.4.0-1075.82","4.4.0-1076.83","4.4.0-1077.84","4.4.0-1078.85","4.4.0-1079.86","4.4.0-1080.87","4.4.0-1082.91","4.4.0-1084.93","4.4.0-1085.94","4.4.0-1087.96","4.4.0-1088.97","4.4.0-1089.98","4.4.0-1090.99","4.4.0-1091.100","4.4.0-1092.101","4.4.0-1093.102","4.4.0-1094.103","4.4.0-1095.104","4.4.0-1096.105","4.4.0-1097.106","4.4.0-1098.107","4.4.0-1099.108","4.4.0-1100.109","4.4.0-1102.111","4.4.0-1103.112","4.4.0-1104.113","4.4.0-1105.114","4.4.0-1108.118","4.4.0-1110.120","4.4.0-1111.121","4.4.0-1112.122","4.4.0-1113.123","4.4.0-1114.124","4.4.0-1115.125","4.4.0-1116.126","4.4.0-1117.127","4.4.0-1118.128","4.4.0-1119.129","4.4.0-1120.130","4.4.0-1121.131"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"linux-oracle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.0-1122.133~16.04.1"}]}],"versions":["4.15.0-1007.9~16.04.1","4.15.0-1008.10~16.04.1","4.15.0-1009.11~16.04.1","4.15.0-1010.12~16.04.1","4.15.0-1011.13~16.04.1","4.15.0-1013.15~16.04.1","4.15.0-1014.16~16.04.1","4.15.0-1015.17~16.04.1","4.15.0-1017.19~16.04.2","4.15.0-1018.20~16.04.1","4.15.0-1021.23~16.04.1","4.15.0-1022.25~16.04.1","4.15.0-1023.26~16.04.1","4.15.0-1025.28~16.04.1","4.15.0-1026.29~16.04.1","4.15.0-1027.30~16.04.1","4.15.0-1029.32~16.04.1","4.15.0-1030.33~16.04.1","4.15.0-1031.34~16.04.1","4.15.0-1033.36~16.04.1","4.15.0-1035.38~16.04.1","4.15.0-1037.41~16.04.1","4.15.0-1038.42~16.04.1","4.15.0-1039.43~16.04.1","4.15.0-1045.49~16.04.1","4.15.0-1046.50~16.04.1","4.15.0-1050.54~16.04.1","4.15.0-1051.55~16.04.1","4.15.0-1053.57~16.04.1","4.15.0-1054.58~16.04.1","4.15.0-1056.61~16.04.1","4.15.0-1058.64~16.04.1","4.15.0-1059.65~16.04.1","4.15.0-1061.67~16.04.1","4.15.0-1062.68~16.04.1","4.15.0-1064.71~16.04.1","4.15.0-1065.73~16.04.1","4.15.0-1066.74~16.04.1","4.15.0-1067.75~16.04.1","4.15.0-1068.76~16.04.1","4.15.0-1069.77~16.04.1","4.15.0-1070.78~16.04.1","4.15.0-1071.79~16.04.1","4.15.0-1072.80~16.04.1","4.15.0-1075.83~16.04.1","4.15.0-1078.86~16.04.1","4.15.0-1079.87~16.04.1","4.15.0-1080.88~16.04.1","4.15.0-1081.89~16.04.1","4.15.0-1082.90~16.04.1","4.15.0-1083.91~16.04.1","4.15.0-1084.92~16.04.1","4.15.0-1085.93~16.04.1","4.15.0-1086.94~16.04.1","4.15.0-1087.95~16.04.1","4.15.0-1089.98~16.04.1","4.15.0-1090.99~16.04.1","4.15.0-1091.100~16.04.1","4.15.0-1092.101~16.04.1","4.15.0-1093.102~16.04.1","4.15.0-1095.104~16.04.1","4.15.0-1098.108~16.04.1","4.15.0-1101.112~16.04.1","4.15.0-1102.113~16.04.1","4.15.0-1104.115~16.04.1","4.15.0-1105.116~16.04.1","4.15.0-1106.117~16.04.1","4.15.0-1107.118~16.04.1","4.15.0-1108.119~16.04.1","4.15.0-1111.122~16.04.2","4.15.0-1112.123~16.04.1","4.15.0-1113.124~16.04.1","4.15.0-1115.126~16.04.1","4.15.0-1116.127~16.04.1","4.15.0-1117.128~16.04.1","4.15.0-1118.129~16.04.1","4.15.0-1119.130~16.04.1","4.15.0-1120.131~16.04.1","4.15.0-1121.132~16.04.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"linux-hwe-edge","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.8.0-28.30~16.04.1","4.8.0-30.32~16.04.1","4.8.0-32.34~16.04.1","4.8.0-34.36~16.04.1","4.10.0-14.16~16.04.1","4.10.0-19.21~16.04.1","4.10.0-20.22~16.04.1","4.10.0-21.23~16.04.1","4.10.0-22.24~16.04.1","4.10.0-24.28~16.04.1","4.10.0-26.30~16.04.1","4.11.0-13.19~16.04.1","4.11.0-14.20~16.04.1","4.13.0-16.19~16.04.3","4.13.0-17.20~16.04.1","4.13.0-19.22~16.04.1","4.13.0-21.24~16.04.1","4.13.0-25.29~16.04.2","4.15.0-13.14~16.04.1","4.15.0-15.16~16.04.1","4.15.0-20.21~16.04.1","4.15.0-22.24~16.04.1","4.15.0-23.25~16.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-aws-5.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.0.0-1021.24~18.04.1","5.0.0-1022.25~18.04.1","5.0.0-1023.26~18.04.1","5.0.0-1024.27~18.04.1","5.0.0-1025.28","5.0.0-1027.30"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-aws-5.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.3.0-1016.17~18.04.1","5.3.0-1017.18~18.04.1","5.3.0-1019.21~18.04.1","5.3.0-1023.25~18.04.1","5.3.0-1028.30~18.04.1","5.3.0-1030.32~18.04.1","5.3.0-1032.34~18.04.2","5.3.0-1033.35","5.3.0-1034.36","5.3.0-1035.37"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-azure","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.15.0-1002.2","4.15.0-1003.3","4.15.0-1004.4","4.15.0-1008.8","4.15.0-1009.9","4.15.0-1012.12","4.15.0-1013.13","4.15.0-1014.14","4.15.0-1018.18","4.15.0-1019.19","4.15.0-1021.21","4.15.0-1022.23","4.15.0-1023.24","4.15.0-1025.26","4.15.0-1028.29","4.15.0-1030.31","4.15.0-1031.32","4.15.0-1032.33","4.15.0-1035.36","4.15.0-1036.38","4.15.0-1037.39","4.18.0-1011.11~18.04.1","4.18.0-1013.13~18.04.1","4.18.0-1014.14~18.04.1","4.18.0-1018.18~18.04.1","4.18.0-1019.19~18.04.1","4.18.0-1020.20~18.04.1","4.18.0-1023.24~18.04.1","4.18.0-1024.25~18.04.1","4.18.0-1025.27~18.04.1","5.0.0-1014.14~18.04.1","5.0.0-1016.17~18.04.1","5.0.0-1018.19~18.04.1","5.0.0-1020.21~18.04.1","5.0.0-1022.23~18.04.1","5.0.0-1023.24~18.04.1","5.0.0-1025.27~18.04.1","5.0.0-1027.29~18.04.1","5.0.0-1028.30~18.04.1","5.0.0-1029.31~18.04.1","5.0.0-1031.33","5.0.0-1032.34","5.0.0-1035.37","5.0.0-1036.38"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-azure-5.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.3.0-1007.8~18.04.1","5.3.0-1008.9~18.04.1","5.3.0-1009.10~18.04.1","5.3.0-1010.11~18.04.1","5.3.0-1012.13~18.04.1","5.3.0-1013.14~18.04.1","5.3.0-1016.17~18.04.1","5.3.0-1018.19~18.04.1","5.3.0-1019.20~18.04.1","5.3.0-1020.21~18.04.1","5.3.0-1022.23~18.04.1","5.3.0-1028.29~18.04.1","5.3.0-1031.32~18.04.1","5.3.0-1032.33~18.04.1","5.3.0-1034.35~18.04.1","5.3.0-1035.36"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-azure-edge","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.18.0-1006.6~18.04.1","4.18.0-1007.7~18.04.1","4.18.0-1008.8~18.04.1","5.0.0-1012.12~18.04.2"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-gcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.15.0-1001.1","4.15.0-1003.3","4.15.0-1005.5","4.15.0-1006.6","4.15.0-1008.8","4.15.0-1009.9","4.15.0-1010.10","4.15.0-1014.14","4.15.0-1015.15","4.15.0-1017.18","4.15.0-1018.19","4.15.0-1019.20","4.15.0-1021.22","4.15.0-1023.24","4.15.0-1024.25","4.15.0-1025.26","4.15.0-1026.27","4.15.0-1027.28","4.15.0-1028.29","4.15.0-1029.31","4.15.0-1030.32","4.15.0-1032.34","4.15.0-1033.35","4.15.0-1034.36","4.15.0-1036.38","4.15.0-1037.39","4.15.0-1040.42","4.15.0-1042.45","4.15.0-1044.70","5.0.0-1020.20~18.04.1","5.0.0-1021.21~18.04.1","5.0.0-1025.26~18.04.1","5.0.0-1026.27~18.04.1","5.0.0-1028.29~18.04.1","5.0.0-1029.30~18.04.1","5.0.0-1031.32","5.0.0-1033.34","5.0.0-1034.35"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-gcp-5.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.3.0-1008.9~18.04.1","5.3.0-1009.10~18.04.1","5.3.0-1010.11~18.04.1","5.3.0-1012.13~18.04.1","5.3.0-1014.15~18.04.1","5.3.0-1016.17~18.04.1","5.3.0-1017.18~18.04.1","5.3.0-1018.19~18.04.1","5.3.0-1020.22~18.04.1","5.3.0-1026.28~18.04.1","5.3.0-1029.31~18.04.1","5.3.0-1030.32~18.04.1","5.3.0-1032.34~18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-hwe-edge","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.0.0-15.16~18.04.1","5.0.0-16.17~18.04.1","5.0.0-17.18~18.04.1","5.0.0-19.20~18.04.1","5.0.0-20.21~18.04.1","5.3.0-19.20~18.04.2","5.3.0-22.24~18.04.1","5.3.0-23.25~18.04.1","5.3.0-23.25~18.04.2","5.3.0-24.26~18.04.2"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-oracle-5.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.0.0-1007.12~18.04.1","5.0.0-1008.13~18.04.1","5.0.0-1009.14~18.04.1","5.0.0-1010.15~18.04.1","5.0.0-1011.16","5.0.0-1013.18","5.0.0-1014.19"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-oracle-5.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.3.0-1011.12~18.04.1","5.3.0-1013.14~18.04.1","5.3.0-1014.15~18.04.1","5.3.0-1016.18~18.04.1","5.3.0-1018.20~18.04.1","5.3.0-1024.26~18.04.1","5.3.0-1027.29~18.04.1","5.3.0-1028.30~18.04.1","5.3.0-1030.32~18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"linux-raspi-5.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-1013.13~18.04.1","5.4.0-1015.15~18.04.1","5.4.0-1016.17~18.04.1","5.4.0-1018.20~18.04.1","5.4.0-1019.21~18.04.1","5.4.0-1021.24~18.04.1","5.4.0-1022.25~18.04.1","5.4.0-1023.26~18.04.1","5.4.0-1025.28~18.04.1","5.4.0-1026.29~18.04.1","5.4.0-1028.31~18.04.1","5.4.0-1029.32~18.04.1","5.4.0-1030.33~18.04.1","5.4.0-1032.35~18.04.1","5.4.0-1033.36~18.04.1","5.4.0-1034.37~18.04.1","5.4.0-1035.38~18.04.1","5.4.0-1036.39~18.04.1","5.4.0-1038.41~18.04.1","5.4.0-1041.45~18.04.1","5.4.0-1042.46~18.04.3","5.4.0-1043.47~18.04.1","5.4.0-1044.48~18.04.1","5.4.0-1045.49~18.04.1","5.4.0-1046.50~18.04.1","5.4.0-1047.52~18.04.1","5.4.0-1048.53~18.04.1","5.4.0-1050.56~18.04.1","5.4.0-1052.58~18.04.1","5.4.0-1053.60~18.04.1","5.4.0-1055.62~18.04.1","5.4.0-1056.63~18.04.1","5.4.0-1058.65~18.04.1","5.4.0-1059.66~18.04.1","5.4.0-1060.68~18.04.1","5.4.0-1062.70~18.04.1","5.4.0-1065.75~18.04.1","5.4.0-1066.76~18.04.1","5.4.0-1068.78~18.04.1","5.4.0-1069.79~18.04.1","5.4.0-1070.80~18.04.1","5.4.0-1071.81~18.04.1","5.4.0-1073.84~18.04.1","5.4.0-1074.85~18.04.1","5.4.0-1077.88~18.04.2","5.4.0-1078.89~18.04.1","5.4.0-1079.90~18.04.1","5.4.0-1080.91~18.04.1","5.4.0-1081.92~18.04.1","5.4.0-1082.93~18.04.1","5.4.0-1083.94~18.04.1","5.4.0-1084.95~18.04.1","5.4.0-1085.96~18.04.1","5.4.0-1086.97~18.04.1","5.4.0-1088.99~18.04.1","5.4.0-1089.100~18.04.1","5.4.0-1090.101~18.04.1","5.4.0-1091.102~18.04.1","5.4.0-1092.103~18.04.1","5.4.0-1093.104~18.04.1","5.4.0-1094.105~18.04.1","5.4.0-1095.106~18.04.1","5.4.0-1096.107~18.04.1","5.4.0-1097.109~18.04.2","5.4.0-1098.110~18.04.2","5.4.0-1100.112~18.04.1","5.4.0-1101.113~18.04.1","5.4.0-1102.114~18.04.1","5.4.0-1103.115~18.04.1","5.4.0-1104.116~18.04.1","5.4.0-1105.117~18.04.1","5.4.0-1106.118~18.04.1","5.4.0-1107.119~18.04.1","5.4.0-1108.120~18.04.1","5.4.0-1109.121~18.04.1","5.4.0-1110.122~18.04.1","5.4.0-1111.123~18.04.1","5.4.0-1112.124~18.04.1","5.4.0-1114.126~18.04.1","5.4.0-1115.127~18.04.1","5.4.0-1116.128~18.04.1","5.4.0-1117.129~18.04.1","5.4.0-1118.130~18.04.1","5.4.0-1119.131~18.04.1","5.4.0-1120.132~18.04.1","5.4.0-1121.133~18.04.1","5.4.0-1122.134~18.04.1","5.4.0-1129.142~18.04.1","5.4.0-1130.143~18.04.1","5.4.0-1131.144~18.04.1","5.4.0-1132.145~18.04.1","5.4.0-1133.146~18.04.1","5.4.0-1134.147~18.04.1","5.4.0-1135.148~18.04.1","5.4.0-1136.149~18.04.1","5.4.0-1137.150~18.04.1","5.4.0-1139.152~18.04.1","5.4.0-1140.153~18.04.1","5.4.0-1143.156~18.04.1","5.4.0-1144.157~18.04.1","5.4.0-1145.158~18.04.1","5.4.0-1146.159~18.04.1","5.4.0-1147.160~18.04.1","5.4.0-1148.161~18.04.1","5.4.0-1149.162~18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.0-155.172"}]}],"versions":["5.3.0-18.19","5.3.0-24.26","5.4.0-9.12","5.4.0-18.22","5.4.0-21.25","5.4.0-24.28","5.4.0-25.29","5.4.0-26.30","5.4.0-28.32","5.4.0-29.33","5.4.0-31.35","5.4.0-33.37","5.4.0-37.41","5.4.0-39.43","5.4.0-40.44","5.4.0-42.46","5.4.0-45.49","5.4.0-47.51","5.4.0-48.52","5.4.0-51.56","5.4.0-52.57","5.4.0-53.59","5.4.0-54.60","5.4.0-56.62","5.4.0-58.64","5.4.0-59.65","5.4.0-60.67","5.4.0-62.70","5.4.0-64.72","5.4.0-65.73","5.4.0-66.74","5.4.0-67.75","5.4.0-70.78","5.4.0-71.79","5.4.0-72.80","5.4.0-73.82","5.4.0-74.83","5.4.0-77.86","5.4.0-80.90","5.4.0-81.91","5.4.0-84.94","5.4.0-86.97","5.4.0-88.99","5.4.0-89.100","5.4.0-90.101","5.4.0-91.102","5.4.0-92.103","5.4.0-94.106","5.4.0-96.109","5.4.0-97.110","5.4.0-99.112","5.4.0-100.113","5.4.0-104.118","5.4.0-105.119","5.4.0-107.121","5.4.0-109.123","5.4.0-110.124","5.4.0-113.127","5.4.0-117.132","5.4.0-120.136","5.4.0-121.137","5.4.0-122.138","5.4.0-124.140","5.4.0-125.141","5.4.0-126.142","5.4.0-128.144","5.4.0-131.147","5.4.0-132.148","5.4.0-135.152","5.4.0-136.153","5.4.0-137.154","5.4.0-139.156","5.4.0-144.161","5.4.0-146.163","5.4.0-147.164","5.4.0-148.165","5.4.0-149.166","5.4.0-150.167","5.4.0-152.169","5.4.0-153.170"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-aws","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.0-1106.114"}]}],"versions":["5.3.0-1003.3","5.3.0-1008.9","5.3.0-1009.10","5.3.0-1010.11","5.4.0-1005.5","5.4.0-1007.7","5.4.0-1008.8","5.4.0-1009.9","5.4.0-1011.11","5.4.0-1015.15","5.4.0-1017.17","5.4.0-1018.18","5.4.0-1020.20","5.4.0-1021.21","5.4.0-1022.22","5.4.0-1024.24","5.4.0-1025.25","5.4.0-1028.29","5.4.0-1029.30","5.4.0-1030.31","5.4.0-1032.33","5.4.0-1034.35","5.4.0-1035.37","5.4.0-1037.39","5.4.0-1038.40","5.4.0-1039.41","5.4.0-1041.43","5.4.0-1043.45","5.4.0-1045.47","5.4.0-1047.49","5.4.0-1048.50","5.4.0-1049.51","5.4.0-1051.53","5.4.0-1054.57","5.4.0-1055.58","5.4.0-1056.59","5.4.0-1057.60","5.4.0-1058.61","5.4.0-1059.62","5.4.0-1060.63","5.4.0-1061.64","5.4.0-1063.66","5.4.0-1064.67","5.4.0-1065.68","5.4.0-1066.69","5.4.0-1068.72","5.4.0-1069.73","5.4.0-1071.76","5.4.0-1072.77","5.4.0-1073.78","5.4.0-1075.80","5.4.0-1078.84","5.4.0-1080.87","5.4.0-1081.88","5.4.0-1083.90","5.4.0-1084.91","5.4.0-1085.92","5.4.0-1086.93","5.4.0-1088.96","5.4.0-1089.97","5.4.0-1092.100","5.4.0-1093.101","5.4.0-1094.102","5.4.0-1096.104","5.4.0-1097.105","5.4.0-1099.107","5.4.0-1100.108","5.4.0-1101.109","5.4.0-1102.110","5.4.0-1103.111","5.4.0-1104.112","5.4.0-1105.113"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-aws-5.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1040.45~20.04.1"}]}],"versions":["5.15.0-1014.18~20.04.1","5.15.0-1015.19~20.04.1","5.15.0-1017.21~20.04.1","5.15.0-1019.23~20.04.1","5.15.0-1020.24~20.04.1","5.15.0-1021.25~20.04.1","5.15.0-1022.26~20.04.1","5.15.0-1023.27~20.04.1","5.15.0-1026.30~20.04.2","5.15.0-1027.31~20.04.1","5.15.0-1028.32~20.04.1","5.15.0-1030.34~20.04.1","5.15.0-1031.35~20.04.1","5.15.0-1033.37~20.04.1","5.15.0-1034.38~20.04.1","5.15.0-1035.39~20.04.1","5.15.0-1036.40~20.04.1","5.15.0-1037.41~20.04.1","5.15.0-1038.43~20.04.1","5.15.0-1039.44~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-azure","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.0-1112.118"}]}],"versions":["5.3.0-1003.3","5.3.0-1008.9","5.3.0-1009.10","5.4.0-1006.6","5.4.0-1008.8","5.4.0-1009.9","5.4.0-1010.10","5.4.0-1012.12","5.4.0-1016.16","5.4.0-1019.19","5.4.0-1020.20","5.4.0-1022.22","5.4.0-1023.23","5.4.0-1025.25","5.4.0-1026.26","5.4.0-1031.32","5.4.0-1032.33","5.4.0-1034.35","5.4.0-1035.36","5.4.0-1036.38","5.4.0-1039.41","5.4.0-1040.42","5.4.0-1041.43","5.4.0-1043.45","5.4.0-1044.46","5.4.0-1046.48","5.4.0-1047.49","5.4.0-1048.50","5.4.0-1049.51","5.4.0-1051.53","5.4.0-1055.57","5.4.0-1056.58","5.4.0-1058.60","5.4.0-1059.62","5.4.0-1061.64","5.4.0-1062.65","5.4.0-1063.66","5.4.0-1064.67","5.4.0-1065.68","5.4.0-1067.70","5.4.0-1068.71","5.4.0-1069.72","5.4.0-1070.73","5.4.0-1072.75","5.4.0-1073.76","5.4.0-1074.77","5.4.0-1077.80","5.4.0-1078.81","5.4.0-1080.83","5.4.0-1083.87","5.4.0-1085.90","5.4.0-1086.91","5.4.0-1089.94","5.4.0-1090.95","5.4.0-1091.96","5.4.0-1094.100","5.4.0-1095.101","5.4.0-1098.104","5.4.0-1100.106","5.4.0-1101.107","5.4.0-1103.109","5.4.0-1104.110","5.4.0-1105.111","5.4.0-1106.112","5.4.0-1107.113","5.4.0-1108.114","5.4.0-1109.115","5.4.0-1110.116","5.4.0-1111.117"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-azure-5.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1042.49~20.04.1"}]}],"versions":["5.15.0-1007.8~20.04.1","5.15.0-1008.9~20.04.1","5.15.0-1013.16~20.04.1","5.15.0-1014.17~20.04.1","5.15.0-1017.20~20.04.1","5.15.0-1019.24~20.04.1","5.15.0-1020.25~20.04.1","5.15.0-1021.26~20.04.1","5.15.0-1022.27~20.04.1","5.15.0-1023.29~20.04.1","5.15.0-1029.36~20.04.1","5.15.0-1030.37~20.04.1","5.15.0-1031.38~20.04.1","5.15.0-1033.40~20.04.1","5.15.0-1034.41~20.04.1","5.15.0-1035.42~20.04.1","5.15.0-1036.43~20.04.1","5.15.0-1037.44~20.04.1","5.15.0-1038.45~20.04.1","5.15.0-1039.46~20.04.1","5.15.0-1040.47~20.04.1","5.15.0-1041.48~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-bluefield","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.0-1068.74"}]}],"versions":["5.4.0-1007.10","5.4.0-1011.14","5.4.0-1012.15","5.4.0-1013.16","5.4.0-1016.19","5.4.0-1019.22","5.4.0-1020.23","5.4.0-1021.24","5.4.0-1022.25","5.4.0-1023.26","5.4.0-1025.28","5.4.0-1026.29","5.4.0-1028.31","5.4.0-1030.33","5.4.0-1032.35","5.4.0-1035.38","5.4.0-1036.39","5.4.0-1040.44","5.4.0-1042.47","5.4.0-1044.49","5.4.0-1045.50","5.4.0-1046.51","5.4.0-1047.52","5.4.0-1049.55","5.4.0-1050.56","5.4.0-1054.60","5.4.0-1058.64","5.4.0-1059.65","5.4.0-1060.66","5.4.0-1062.68","5.4.0-1064.70","5.4.0-1065.71","5.4.0-1066.72"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-gcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.0-1109.118"}]}],"versions":["5.3.0-1004.4","5.3.0-1009.10","5.3.0-1011.12","5.4.0-1005.5","5.4.0-1007.7","5.4.0-1008.8","5.4.0-1009.9","5.4.0-1011.11","5.4.0-1015.15","5.4.0-1018.18","5.4.0-1019.19","5.4.0-1021.21","5.4.0-1022.22","5.4.0-1024.24","5.4.0-1025.25","5.4.0-1028.29","5.4.0-1029.31","5.4.0-1030.32","5.4.0-1032.34","5.4.0-1033.35","5.4.0-1034.37","5.4.0-1036.39","5.4.0-1037.40","5.4.0-1038.41","5.4.0-1040.43","5.4.0-1041.44","5.4.0-1042.45","5.4.0-1043.46","5.4.0-1044.47","5.4.0-1046.49","5.4.0-1049.53","5.4.0-1051.55","5.4.0-1052.56","5.4.0-1053.57","5.4.0-1055.59","5.4.0-1056.60","5.4.0-1057.61","5.4.0-1058.62","5.4.0-1059.63","5.4.0-1060.64","5.4.0-1062.66","5.4.0-1063.67","5.4.0-1064.68","5.4.0-1065.69","5.4.0-1067.71","5.4.0-1068.72","5.4.0-1069.73","5.4.0-1072.77","5.4.0-1073.78","5.4.0-1075.80","5.4.0-1078.84","5.4.0-1080.87","5.4.0-1083.91","5.4.0-1084.92","5.4.0-1086.94","5.4.0-1087.95","5.4.0-1089.97","5.4.0-1090.98","5.4.0-1092.101","5.4.0-1093.102","5.4.0-1096.105","5.4.0-1097.106","5.4.0-1098.107","5.4.0-1100.109","5.4.0-1101.110","5.4.0-1102.111","5.4.0-1103.112","5.4.0-1104.113","5.4.0-1105.114","5.4.0-1106.115","5.4.0-1107.116","5.4.0-1108.117"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-gcp-5.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1038.46~20.04.1"}]}],"versions":["5.15.0-1006.9~20.04.1","5.15.0-1012.17~20.04.1","5.15.0-1013.18~20.04.1","5.15.0-1016.21~20.04.1","5.15.0-1017.23~20.04.2","5.15.0-1018.24~20.04.1","5.15.0-1021.28~20.04.1","5.15.0-1022.29~20.04.1","5.15.0-1025.32~20.04.2","5.15.0-1026.33~20.04.1","5.15.0-1027.34~20.04.1","5.15.0-1029.36~20.04.1","5.15.0-1030.37~20.04.1","5.15.0-1031.38~20.04.1","5.15.0-1032.40~20.04.1","5.15.0-1033.41~20.04.1","5.15.0-1034.42~20.04.1","5.15.0-1035.43~20.04.1","5.15.0-1036.44~20.04.1","5.15.0-1037.45~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-gke","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.0-1104.111"}]}],"versions":["5.4.0-1033.35","5.4.0-1035.37","5.4.0-1036.38","5.4.0-1037.39","5.4.0-1039.41","5.4.0-1041.43","5.4.0-1042.44","5.4.0-1043.45","5.4.0-1044.46","5.4.0-1046.48","5.4.0-1049.52","5.4.0-1051.54","5.4.0-1052.55","5.4.0-1053.56","5.4.0-1054.57","5.4.0-1055.58","5.4.0-1056.59","5.4.0-1057.60","5.4.0-1059.62","5.4.0-1061.64","5.4.0-1062.65","5.4.0-1063.66","5.4.0-1065.68","5.4.0-1066.69","5.4.0-1067.70","5.4.0-1068.71","5.4.0-1071.76","5.4.0-1072.77","5.4.0-1074.79","5.4.0-1076.82","5.4.0-1078.84","5.4.0-1080.86","5.4.0-1081.87","5.4.0-1083.89","5.4.0-1084.90","5.4.0-1086.93","5.4.0-1087.94","5.4.0-1090.97","5.4.0-1091.98","5.4.0-1094.101","5.4.0-1095.102","5.4.0-1096.103","5.4.0-1097.104","5.4.0-1098.105","5.4.0-1099.106","5.4.0-1100.107","5.4.0-1101.108","5.4.0-1102.109","5.4.0-1103.110"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-gke-5.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1038.43~20.04.1"}]}],"versions":["5.15.0-1011.14~20.04.1","5.15.0-1014.17~20.04.1","5.15.0-1015.18~20.04.1","5.15.0-1016.19~20.04.1","5.15.0-1019.23~20.04.1","5.15.0-1020.25~20.04.1","5.15.0-1023.28~20.04.2","5.15.0-1027.32~20.04.1","5.15.0-1028.33~20.04.1","5.15.0-1029.34~20.04.1","5.15.0-1031.36~20.04.1","5.15.0-1032.37~20.04.1","5.15.0-1033.38~20.04.1","5.15.0-1034.39~20.04.1","5.15.0-1036.41~20.04.1","5.15.0-1037.42~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-gkeop","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.0-1073.77"}]}],"versions":["5.4.0-1008.9","5.4.0-1009.10","5.4.0-1010.11","5.4.0-1011.12","5.4.0-1012.13","5.4.0-1013.14","5.4.0-1014.15","5.4.0-1015.16","5.4.0-1016.17","5.4.0-1018.19","5.4.0-1021.22","5.4.0-1022.23","5.4.0-1023.24","5.4.0-1024.25","5.4.0-1025.26","5.4.0-1026.27","5.4.0-1027.28","5.4.0-1029.30","5.4.0-1031.32","5.4.0-1032.33","5.4.0-1033.34","5.4.0-1034.35","5.4.0-1036.37","5.4.0-1037.38","5.4.0-1038.39","5.4.0-1039.40","5.4.0-1040.41","5.4.0-1043.44","5.4.0-1046.48","5.4.0-1048.51","5.4.0-1049.52","5.4.0-1051.54","5.4.0-1052.55","5.4.0-1053.56","5.4.0-1054.57","5.4.0-1056.60","5.4.0-1057.61","5.4.0-1060.64","5.4.0-1061.65","5.4.0-1062.66","5.4.0-1064.68","5.4.0-1065.69","5.4.0-1066.70","5.4.0-1067.71","5.4.0-1068.72","5.4.0-1069.73","5.4.0-1070.74","5.4.0-1071.75","5.4.0-1072.76"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-gkeop-5.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1024.29~20.04.1"}]}],"versions":["5.15.0-1003.5~20.04.2","5.15.0-1005.7~20.04.1","5.15.0-1007.10~20.04.1","5.15.0-1008.12~20.04.1","5.15.0-1011.15~20.04.2","5.15.0-1012.16~20.04.1","5.15.0-1013.17~20.04.1","5.15.0-1015.19~20.04.1","5.15.0-1016.21~20.04.1","5.15.0-1017.22~20.04.1","5.15.0-1018.23~20.04.1","5.15.0-1019.24~20.04.1","5.15.0-1020.25~20.04.1","5.15.0-1021.26~20.04.1","5.15.0-1022.27~20.04.1","5.15.0-1023.28~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-hwe-5.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-78.85~20.04.1"}]}],"versions":["5.15.0-33.34~20.04.1","5.15.0-41.44~20.04.1","5.15.0-43.46~20.04.1","5.15.0-46.49~20.04.1","5.15.0-48.54~20.04.1","5.15.0-50.56~20.04.1","5.15.0-52.58~20.04.1","5.15.0-53.59~20.04.1","5.15.0-56.62~20.04.1","5.15.0-57.63~20.04.1","5.15.0-58.64~20.04.1","5.15.0-60.66~20.04.1","5.15.0-67.74~20.04.1","5.15.0-69.76~20.04.1","5.15.0-70.77~20.04.1","5.15.0-71.78~20.04.1","5.15.0-72.79~20.04.1","5.15.0-73.80~20.04.1","5.15.0-75.82~20.04.1","5.15.0-76.83~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.0-1053.58"}]}],"versions":["5.4.0-1003.4","5.4.0-1004.5","5.4.0-1005.6","5.4.0-1006.7","5.4.0-1007.8","5.4.0-1008.9","5.4.0-1010.11","5.4.0-1012.13","5.4.0-1013.14","5.4.0-1014.15","5.4.0-1015.16","5.4.0-1017.19","5.4.0-1018.20","5.4.0-1019.21","5.4.0-1020.22","5.4.0-1021.23","5.4.0-1023.25","5.4.0-1026.29","5.4.0-1028.32","5.4.0-1029.33","5.4.0-1031.35","5.4.0-1032.36","5.4.0-1033.37","5.4.0-1034.38","5.4.0-1036.41","5.4.0-1037.42","5.4.0-1040.45","5.4.0-1041.46","5.4.0-1042.47","5.4.0-1044.49","5.4.0-1045.50","5.4.0-1046.51","5.4.0-1047.52","5.4.0-1048.53","5.4.0-1049.54","5.4.0-1050.55","5.4.0-1051.56","5.4.0-1052.57"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-intel-iotg-5.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1036.41~20.04.1"}]}],"versions":["5.15.0-1003.5~20.04.1","5.15.0-1008.11~20.04.1","5.15.0-1010.14~20.04.1","5.15.0-1015.20~20.04.2","5.15.0-1016.21~20.04.1","5.15.0-1017.22~20.04.1","5.15.0-1018.23~20.04.1","5.15.0-1021.26~20.04.1","5.15.0-1023.28~20.04.1","5.15.0-1025.30~20.04.1","5.15.0-1026.31~20.04.1","5.15.0-1027.32~20.04.1","5.15.0-1030.35~20.04.1","5.15.0-1031.36~20.04.1","5.15.0-1033.38~20.04.1","5.15.0-1034.39~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-iot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.0-1018.19"}]}],"versions":["5.4.0-1001.3","5.4.0-1004.6","5.4.0-1005.7","5.4.0-1006.8","5.4.0-1009.11","5.4.0-1010.12","5.4.0-1011.13","5.4.0-1012.14","5.4.0-1013.15","5.4.0-1014.16","5.4.0-1017.18"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-kvm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.0-1095.101"}]}],"versions":["5.3.0-1003.3","5.3.0-1008.9","5.3.0-1009.10","5.4.0-1004.4","5.4.0-1006.6","5.4.0-1007.7","5.4.0-1008.8","5.4.0-1009.9","5.4.0-1011.11","5.4.0-1015.15","5.4.0-1018.18","5.4.0-1020.20","5.4.0-1021.21","5.4.0-1023.23","5.4.0-1024.24","5.4.0-1026.27","5.4.0-1028.29","5.4.0-1030.31","5.4.0-1031.32","5.4.0-1032.33","5.4.0-1033.34","5.4.0-1034.35","5.4.0-1036.37","5.4.0-1037.38","5.4.0-1038.39","5.4.0-1039.40","5.4.0-1040.41","5.4.0-1041.42","5.4.0-1044.46","5.4.0-1045.47","5.4.0-1046.48","5.4.0-1047.49","5.4.0-1048.50","5.4.0-1049.51","5.4.0-1050.52","5.4.0-1051.53","5.4.0-1053.55","5.4.0-1054.56","5.4.0-1055.57","5.4.0-1056.58","5.4.0-1058.61","5.4.0-1059.62","5.4.0-1061.64","5.4.0-1062.65","5.4.0-1063.66","5.4.0-1065.68","5.4.0-1068.72","5.4.0-1070.75","5.4.0-1071.76","5.4.0-1073.78","5.4.0-1074.79","5.4.0-1075.80","5.4.0-1076.81","5.4.0-1078.84","5.4.0-1079.85","5.4.0-1082.88","5.4.0-1083.89","5.4.0-1084.90","5.4.0-1086.92","5.4.0-1087.93","5.4.0-1088.94","5.4.0-1089.95","5.4.0-1090.96","5.4.0-1091.97","5.4.0-1092.98","5.4.0-1093.99","5.4.0-1094.100"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-lowlatency-hwe-5.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-78.85~20.04.1"}]}],"versions":["5.15.0-33.34~20.04.1","5.15.0-42.45~20.04.1","5.15.0-43.46~20.04.1","5.15.0-46.49~20.04.1","5.15.0-48.54~20.04.1","5.15.0-50.56~20.04.1","5.15.0-52.58~20.04.1","5.15.0-53.59~20.04.1","5.15.0-56.62~20.04.1","5.15.0-58.64~20.04.1","5.15.0-60.66~20.04.1","5.15.0-67.74~20.04.1","5.15.0-69.76~20.04.1","5.15.0-70.77~20.04.1","5.15.0-71.78~20.04.1","5.15.0-72.79~20.04.1","5.15.0-73.80~20.04.1","5.15.0-75.82~20.04.1","5.15.0-76.83~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-oracle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.0-1105.114"}]}],"versions":["5.3.0-1002.2","5.3.0-1007.8","5.3.0-1008.9","5.4.0-1005.5","5.4.0-1007.7","5.4.0-1008.8","5.4.0-1009.9","5.4.0-1011.11","5.4.0-1015.15","5.4.0-1018.18","5.4.0-1019.19","5.4.0-1021.21","5.4.0-1022.22","5.4.0-1024.24","5.4.0-1025.25","5.4.0-1028.29","5.4.0-1029.31","5.4.0-1030.32","5.4.0-1032.34","5.4.0-1034.36","5.4.0-1035.38","5.4.0-1037.40","5.4.0-1038.41","5.4.0-1039.42","5.4.0-1041.44","5.4.0-1042.45","5.4.0-1043.46","5.4.0-1045.49","5.4.0-1046.50","5.4.0-1048.52","5.4.0-1049.53","5.4.0-1052.56","5.4.0-1053.57","5.4.0-1054.58","5.4.0-1055.59","5.4.0-1056.60","5.4.0-1057.61","5.4.0-1058.62","5.4.0-1059.63","5.4.0-1061.65","5.4.0-1062.66","5.4.0-1063.67","5.4.0-1064.68","5.4.0-1066.71","5.4.0-1067.72","5.4.0-1069.75","5.4.0-1070.76","5.4.0-1071.77","5.4.0-1073.79","5.4.0-1076.83","5.4.0-1078.86","5.4.0-1079.87","5.4.0-1081.89","5.4.0-1082.90","5.4.0-1083.91","5.4.0-1084.92","5.4.0-1086.95","5.4.0-1087.96","5.4.0-1090.99","5.4.0-1091.100","5.4.0-1092.101","5.4.0-1093.102","5.4.0-1094.103","5.4.0-1097.106","5.4.0-1098.107","5.4.0-1099.108","5.4.0-1100.109","5.4.0-1101.110","5.4.0-1102.111","5.4.0-1103.112","5.4.0-1104.113"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-oracle-5.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1039.45~20.04.1"}]}],"versions":["5.15.0-1007.9~20.04.1","5.15.0-1013.17~20.04.1","5.15.0-1016.20~20.04.1","5.15.0-1017.22~20.04.1","5.15.0-1018.23~20.04.1","5.15.0-1019.24~20.04.1","5.15.0-1021.27~20.04.1","5.15.0-1022.28~20.04.1","5.15.0-1025.31~20.04.2","5.15.0-1027.33~20.04.1","5.15.0-1029.35~20.04.1","5.15.0-1030.36~20.04.1","5.15.0-1032.38~20.04.1","5.15.0-1033.39~20.04.1","5.15.0-1034.40~20.04.1","5.15.0-1035.41~20.04.1","5.15.0-1036.42~20.04.1","5.15.0-1037.43~20.04.1","5.15.0-1038.44~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-raspi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.0-1090.101"}]}],"versions":["5.4.0-1007.7","5.4.0-1008.8","5.4.0-1011.11","5.4.0-1012.12","5.4.0-1013.13","5.4.0-1015.15","5.4.0-1016.17","5.4.0-1018.20","5.4.0-1019.21","5.4.0-1021.24","5.4.0-1022.25","5.4.0-1023.26","5.4.0-1025.28","5.4.0-1026.29","5.4.0-1028.31","5.4.0-1029.32","5.4.0-1030.33","5.4.0-1032.35","5.4.0-1033.36","5.4.0-1034.37","5.4.0-1035.38","5.4.0-1036.39","5.4.0-1038.41","5.4.0-1041.45","5.4.0-1042.46","5.4.0-1043.47","5.4.0-1044.48","5.4.0-1045.49","5.4.0-1046.50","5.4.0-1047.52","5.4.0-1048.53","5.4.0-1050.56","5.4.0-1052.58","5.4.0-1053.60","5.4.0-1055.62","5.4.0-1056.63","5.4.0-1058.65","5.4.0-1059.67","5.4.0-1060.68","5.4.0-1062.70","5.4.0-1065.75","5.4.0-1066.76","5.4.0-1068.78","5.4.0-1069.79","5.4.0-1070.80","5.4.0-1071.81","5.4.0-1073.84","5.4.0-1074.85","5.4.0-1077.88","5.4.0-1078.89","5.4.0-1079.90","5.4.0-1080.91","5.4.0-1081.92","5.4.0-1082.93","5.4.0-1083.94","5.4.0-1084.95","5.4.0-1085.96","5.4.0-1086.97","5.4.0-1088.99","5.4.0-1089.100"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-riscv-5.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1037.41~20.04.2"}]}],"versions":["5.15.0-1015.17~20.04.1","5.15.0-1017.19~20.04.1","5.15.0-1018.21~20.04.1","5.15.0-1019.22~20.04.1","5.15.0-1022.26~20.04.1","5.15.0-1023.27~20.04.1","5.15.0-1026.30~20.04.2","5.15.0-1027.31~20.04.1","5.15.0-1028.32~20.04.1","5.15.0-1029.33~20.04.1","5.15.0-1030.34~20.04.1","5.15.0-1031.35~20.04.1","5.15.0-1032.36~20.04.1","5.15.0-1033.37~20.04.1","5.15.0-1034.38~20.04.1","5.15.0-1035.39~20.04.1","5.15.0-1036.40~20.04.2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-xilinx-zynqmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.0-1026.30"}]}],"versions":["5.4.0-1020.24","5.4.0-1021.25","5.4.0-1022.26","5.4.0-1023.27","5.4.0-1024.28","5.4.0-1025.29"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-aws-5.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.11.0-1009.9~20.04.2","5.11.0-1014.15~20.04.1","5.11.0-1016.17~20.04.1","5.11.0-1017.18~20.04.1","5.11.0-1019.20~20.04.1","5.11.0-1020.21~20.04.2","5.11.0-1021.22~20.04.2","5.11.0-1022.23~20.04.1","5.11.0-1023.24~20.04.1","5.11.0-1025.27~20.04.1","5.11.0-1027.30~20.04.1","5.11.0-1028.31~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-aws-5.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.13.0-1008.9~20.04.2","5.13.0-1011.12~20.04.1","5.13.0-1012.13~20.04.1","5.13.0-1014.15~20.04.1","5.13.0-1017.19~20.04.1","5.13.0-1019.21~20.04.1","5.13.0-1021.23~20.04.2","5.13.0-1022.24~20.04.1","5.13.0-1023.25~20.04.1","5.13.0-1025.27~20.04.1","5.13.0-1028.31~20.04.1","5.13.0-1029.32~20.04.1","5.13.0-1031.35~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-aws-5.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.8.0-1035.37~20.04.1","5.8.0-1038.40~20.04.1","5.8.0-1041.43~20.04.1","5.8.0-1042.44~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-azure-5.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.11.0-1007.7~20.04.2","5.11.0-1012.13~20.04.1","5.11.0-1013.14~20.04.1","5.11.0-1015.16~20.04.1","5.11.0-1017.18~20.04.1","5.11.0-1019.20~20.04.1","5.11.0-1020.21~20.04.1","5.11.0-1021.22~20.04.1","5.11.0-1022.23~20.04.1","5.11.0-1023.24~20.04.1","5.11.0-1025.27~20.04.1","5.11.0-1027.30~20.04.1","5.11.0-1028.31~20.04.2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-azure-5.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.13.0-1009.10~20.04.2","5.13.0-1012.14~20.04.1","5.13.0-1013.15~20.04.1","5.13.0-1014.16~20.04.1","5.13.0-1017.19~20.04.1","5.13.0-1021.24~20.04.1","5.13.0-1022.26~20.04.1","5.13.0-1023.27~20.04.1","5.13.0-1025.29~20.04.1","5.13.0-1028.33~20.04.1","5.13.0-1029.34~20.04.1","5.13.0-1031.37~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-azure-5.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.8.0-1033.35~20.04.1","5.8.0-1036.38~20.04.1","5.8.0-1039.42~20.04.1","5.8.0-1040.43~20.04.1","5.8.0-1041.44~20.04.1","5.8.0-1042.45~20.04.1","5.8.0-1043.46~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-azure-fde","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-1063.66+cvm2.2","5.4.0-1063.66+cvm3.2","5.4.0-1064.67+cvm1.1","5.4.0-1065.68+cvm2.1","5.4.0-1067.70+cvm1.1","5.4.0-1068.71+cvm1.1","5.4.0-1069.72+cvm1.1","5.4.0-1070.73+cvm1.1","5.4.0-1072.75+cvm1.1","5.4.0-1073.76+cvm1.1","5.4.0-1074.77+cvm1.1","5.4.0-1076.79+cvm1.1","5.4.0-1078.81+cvm1.1","5.4.0-1080.83+cvm1.1","5.4.0-1083.87+cvm1.1","5.4.0-1085.90+cvm1.1","5.4.0-1085.90+cvm2.1","5.4.0-1086.91+cvm1.1","5.4.0-1089.94+cvm1.2","5.4.0-1090.95+cvm1.1","5.4.0-1091.96+cvm1.1","5.4.0-1092.97+cvm1.1","5.4.0-1095.101+cvm1.1","5.4.0-1098.104+cvm1.1","5.4.0-1100.106+cvm1.1","5.4.0-1103.109+cvm1.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-gcp-5.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.11.0-1009.10~20.04.1","5.11.0-1014.16~20.04.1","5.11.0-1017.19~20.04.1","5.11.0-1018.20~20.04.2","5.11.0-1020.22~20.04.1","5.11.0-1021.23~20.04.1","5.11.0-1022.24~20.04.1","5.11.0-1023.25~20.04.1","5.11.0-1024.26~20.04.1","5.11.0-1026.29~20.04.1","5.11.0-1028.32~20.04.1","5.11.0-1029.33~20.04.3"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-gcp-5.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.13.0-1008.9~20.04.3","5.13.0-1012.15~20.04.1","5.13.0-1013.16~20.04.1","5.13.0-1015.18~20.04.1","5.13.0-1019.23~20.04.1","5.13.0-1021.25~20.04.1","5.13.0-1023.28~20.04.1","5.13.0-1024.29~20.04.1","5.13.0-1025.30~20.04.1","5.13.0-1027.32~20.04.1","5.13.0-1030.36~20.04.1","5.13.0-1031.37~20.04.1","5.13.0-1033.40~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-gcp-5.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.8.0-1032.34~20.04.1","5.8.0-1035.37~20.04.1","5.8.0-1038.40~20.04.1","5.8.0-1039.41"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-hwe-5.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.11.0-22.23~20.04.1","5.11.0-25.27~20.04.1","5.11.0-27.29~20.04.1","5.11.0-34.36~20.04.1","5.11.0-36.40~20.04.1","5.11.0-37.41~20.04.2","5.11.0-38.42~20.04.1","5.11.0-40.44~20.04.2","5.11.0-41.45~20.04.1","5.11.0-43.47~20.04.2","5.11.0-44.48~20.04.2","5.11.0-46.51~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-hwe-5.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.13.0-21.21~20.04.1","5.13.0-22.22~20.04.1","5.13.0-23.23~20.04.2","5.13.0-25.26~20.04.1","5.13.0-27.29~20.04.1","5.13.0-28.31~20.04.1","5.13.0-30.33~20.04.1","5.13.0-35.40~20.04.1","5.13.0-37.42~20.04.1","5.13.0-39.44~20.04.1","5.13.0-40.45~20.04.1","5.13.0-41.46~20.04.1","5.13.0-44.49~20.04.1","5.13.0-48.54~20.04.1","5.13.0-51.58~20.04.1","5.13.0-52.59~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-hwe-5.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.8.0-23.24~20.04.1","5.8.0-25.26~20.04.1","5.8.0-28.30~20.04.1","5.8.0-29.31~20.04.1","5.8.0-31.33~20.04.1","5.8.0-33.36~20.04.1","5.8.0-34.37~20.04.2","5.8.0-36.40~20.04.1","5.8.0-38.43~20.04.1","5.8.0-40.45~20.04.1","5.8.0-41.46~20.04.1","5.8.0-43.49~20.04.1","5.8.0-44.50~20.04.1","5.8.0-45.51~20.04.1","5.8.0-48.54~20.04.1","5.8.0-49.55~20.04.1","5.8.0-50.56~20.04.1","5.8.0-53.60~20.04.1","5.8.0-55.62~20.04.1","5.8.0-59.66~20.04.1","5.8.0-63.71~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-intel-5.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.13.0-1007.7","5.13.0-1008.8","5.13.0-1009.9","5.13.0-1010.10","5.13.0-1011.11","5.13.0-1014.15","5.13.0-1017.19"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-oem-5.10","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.10.0-1008.9","5.10.0-1011.12","5.10.0-1013.14","5.10.0-1014.15","5.10.0-1016.17","5.10.0-1017.18","5.10.0-1019.20","5.10.0-1021.22","5.10.0-1022.23","5.10.0-1023.24","5.10.0-1025.26","5.10.0-1026.27","5.10.0-1029.30","5.10.0-1032.33","5.10.0-1033.34","5.10.0-1034.35","5.10.0-1038.40","5.10.0-1044.46","5.10.0-1045.47","5.10.0-1049.51","5.10.0-1050.52","5.10.0-1051.53","5.10.0-1052.54","5.10.0-1053.55","5.10.0-1055.58","5.10.0-1057.61"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-oem-5.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.13.0-1009.10","5.13.0-1010.11","5.13.0-1012.16","5.13.0-1014.18","5.13.0-1017.21","5.13.0-1019.23","5.13.0-1020.24","5.13.0-1021.25","5.13.0-1022.26","5.13.0-1026.32","5.13.0-1028.35","5.13.0-1029.36"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-oem-5.14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.14.0-1004.4","5.14.0-1005.5","5.14.0-1007.7","5.14.0-1008.8","5.14.0-1010.10","5.14.0-1011.11","5.14.0-1013.13","5.14.0-1018.19","5.14.0-1020.22","5.14.0-1022.24","5.14.0-1024.26","5.14.0-1027.30","5.14.0-1029.32","5.14.0-1031.34","5.14.0-1032.35","5.14.0-1033.36","5.14.0-1034.37","5.14.0-1036.40","5.14.0-1038.42","5.14.0-1042.47","5.14.0-1044.49","5.14.0-1045.51","5.14.0-1046.53","5.14.0-1047.54","5.14.0-1048.55","5.14.0-1049.56","5.14.0-1050.57","5.14.0-1051.58","5.14.0-1052.59","5.14.0-1054.61","5.14.0-1055.62","5.14.0-1056.63","5.14.0-1057.64","5.14.0-1058.66","5.14.0-1059.67"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-oem-5.6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.6.0-1007.7","5.6.0-1008.8","5.6.0-1010.10","5.6.0-1011.11","5.6.0-1013.13","5.6.0-1017.17","5.6.0-1018.18","5.6.0-1020.20","5.6.0-1021.21","5.6.0-1023.23","5.6.0-1026.26","5.6.0-1027.27","5.6.0-1028.28","5.6.0-1031.32","5.6.0-1032.33","5.6.0-1033.35","5.6.0-1034.36","5.6.0-1035.37","5.6.0-1036.39","5.6.0-1039.43","5.6.0-1042.46","5.6.0-1047.51","5.6.0-1048.52","5.6.0-1050.54","5.6.0-1052.56","5.6.0-1053.57","5.6.0-1054.58","5.6.0-1055.59","5.6.0-1056.60"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-oracle-5.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.11.0-1008.8~20.04.1","5.11.0-1013.14~20.04.1","5.11.0-1016.17~20.04.1","5.11.0-1017.18~20.04.1","5.11.0-1019.20~20.04.1","5.11.0-1020.21~20.04.1","5.11.0-1021.22~20.04.1","5.11.0-1022.23~20.04.1","5.11.0-1023.24~20.04.1","5.11.0-1025.27~20.04.1","5.11.0-1027.30~20.04.1","5.11.0-1028.31~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-oracle-5.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.13.0-1011.13~20.04.2","5.13.0-1015.19~20.04.1","5.13.0-1016.20~20.04.1","5.13.0-1018.22~20.04.1","5.13.0-1021.26~20.04.1","5.13.0-1025.30~20.04.1","5.13.0-1027.32~20.04.1","5.13.0-1028.33~20.04.1","5.13.0-1030.35~20.04.1","5.13.0-1033.39~20.04.1","5.13.0-1034.40~20.04.1","5.13.0-1036.43~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-oracle-5.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.8.0-1031.32~20.04.2","5.8.0-1033.34~20.04.1","5.8.0-1034.35~20.04.2","5.8.0-1037.38~20.04.1","5.8.0-1038.39~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-raspi2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.3.0-1007.8","5.3.0-1014.16","5.3.0-1015.17","5.3.0-1017.19","5.4.0-1004.4","5.4.0-1006.6"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-riscv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-24.28","5.4.0-26.30","5.4.0-27.31","5.4.0-28.32","5.4.0-30.34","5.4.0-31.35","5.4.0-33.37","5.4.0-34.38","5.4.0-36.41","5.4.0-37.42","5.4.0-39.44","5.4.0-40.45"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-riscv-5.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.11.0-1015.16~20.04.1","5.11.0-1017.18~20.04.1","5.11.0-1018.19~20.04.2","5.11.0-1020.21~20.04.1","5.11.0-1021.22~20.04.1","5.11.0-1022.23~20.04.1","5.11.0-1023.24~20.04.1","5.11.0-1024.25~20.04.1","5.11.0-1026.28~20.04.1","5.11.0-1028.31~20.04.1","5.11.0-1029.32~20.04.1","5.11.0-1030.34","5.11.0-1031.35"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-riscv-5.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.8.0-14.16~20.04.1","5.8.0-14.16~20.04.3","5.8.0-16.18~20.04.1","5.8.0-17.19~20.04.1","5.8.0-18.20~20.04.1","5.8.0-20.22~20.04.1","5.8.0-22.24~20.04.1","5.8.0-25.27~20.04.1","5.8.0-26.28~20.04.1","5.8.0-29.31~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-78.85"}]}],"versions":["5.13.0-19.19","5.15.0-17.17","5.15.0-18.18","5.15.0-22.22","5.15.0-23.23","5.15.0-25.25","5.15.0-27.28","5.15.0-30.31","5.15.0-33.34","5.15.0-35.36","5.15.0-37.39","5.15.0-39.42","5.15.0-40.43","5.15.0-41.44","5.15.0-43.46","5.15.0-46.49","5.15.0-47.51","5.15.0-48.54","5.15.0-50.56","5.15.0-52.58","5.15.0-53.59","5.15.0-56.62","5.15.0-57.63","5.15.0-58.64","5.15.0-60.66","5.15.0-67.74","5.15.0-69.76","5.15.0-70.77","5.15.0-71.78","5.15.0-72.79","5.15.0-73.80","5.15.0-75.82","5.15.0-76.83"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-allwinner-5.19","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.19.0-1007.7~22.04.1","5.19.0-1009.9~22.04.1","5.19.0-1010.10~22.04.1","5.19.0-1011.11~22.04.1","5.19.0-1012.12~22.04.1","5.19.0-1013.13~22.04.1","5.19.0-1014.14~22.04.1","5.19.0-1015.15~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-aws","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1040.45"}]}],"versions":["5.13.0-1005.6","5.15.0-1002.4","5.15.0-1003.5","5.15.0-1004.6","5.15.0-1005.7","5.15.0-1008.10","5.15.0-1009.11","5.15.0-1011.14","5.15.0-1013.17","5.15.0-1014.18","5.15.0-1015.19","5.15.0-1017.21","5.15.0-1019.23","5.15.0-1020.24","5.15.0-1021.25","5.15.0-1022.26","5.15.0-1023.27","5.15.0-1026.30","5.15.0-1027.31","5.15.0-1028.32","5.15.0-1030.34","5.15.0-1031.35","5.15.0-1033.37","5.15.0-1034.38","5.15.0-1035.39","5.15.0-1036.40","5.15.0-1037.41","5.15.0-1038.43","5.15.0-1039.44"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-aws-5.19","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.19.0-1019.20~22.04.1","5.19.0-1020.21~22.04.1","5.19.0-1022.23~22.04.1","5.19.0-1023.24~22.04.1","5.19.0-1024.25~22.04.1","5.19.0-1025.26~22.04.1","5.19.0-1026.27~22.04.1","5.19.0-1027.28~22.04.1","5.19.0-1028.29~22.04.1","5.19.0-1029.30~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-azure","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1042.49"}]}],"versions":["5.13.0-1006.7","5.15.0-1001.2","5.15.0-1002.3","5.15.0-1003.4","5.15.0-1005.6","5.15.0-1007.8","5.15.0-1008.9","5.15.0-1010.12","5.15.0-1012.15","5.15.0-1013.16","5.15.0-1014.17","5.15.0-1017.20","5.15.0-1019.24","5.15.0-1020.25","5.15.0-1021.26","5.15.0-1022.27","5.15.0-1023.29","5.15.0-1024.30","5.15.0-1029.36","5.15.0-1030.37","5.15.0-1031.38","5.15.0-1033.40","5.15.0-1034.41","5.15.0-1035.42","5.15.0-1036.43","5.15.0-1037.44","5.15.0-1038.45","5.15.0-1039.46","5.15.0-1040.47","5.15.0-1041.48"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-azure-5.19","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.19.0-1020.21~22.04.1","5.19.0-1021.22~22.04.1","5.19.0-1022.23~22.04.1","5.19.0-1023.24~22.04.1","5.19.0-1025.28~22.04.1","5.19.0-1026.29~22.04.1","5.19.0-1027.30~22.04.2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-azure-fde-5.19","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.19.0-1025.28~22.04.1.1","5.19.0-1026.29~22.04.1.1","5.19.0-1027.30~22.04.2.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-gcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1038.46"}]}],"versions":["5.13.0-1005.6","5.15.0-1001.3","5.15.0-1002.5","5.15.0-1003.6","5.15.0-1004.7","5.15.0-1005.8","5.15.0-1006.9","5.15.0-1008.12","5.15.0-1010.15","5.15.0-1013.18","5.15.0-1016.21","5.15.0-1017.23","5.15.0-1018.24","5.15.0-1019.25","5.15.0-1021.28","5.15.0-1022.29","5.15.0-1025.32","5.15.0-1026.33","5.15.0-1027.34","5.15.0-1029.36","5.15.0-1030.37","5.15.0-1031.38","5.15.0-1032.40","5.15.0-1034.42","5.15.0-1035.43","5.15.0-1036.44","5.15.0-1037.45"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-gcp-5.19","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.19.0-1030.32~22.04.1"}]}],"versions":["5.19.0-1020.22~22.04.2","5.19.0-1021.23~22.04.1","5.19.0-1022.24~22.04.1","5.19.0-1024.26~22.04.1","5.19.0-1025.27~22.04.1","5.19.0-1026.28~22.04.1","5.19.0-1027.29~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-gke","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1038.43"}]}],"versions":["5.15.0-1002.2","5.15.0-1003.3","5.15.0-1004.5","5.15.0-1005.6","5.15.0-1006.7","5.15.0-1008.10","5.15.0-1010.13","5.15.0-1011.14","5.15.0-1014.17","5.15.0-1015.18","5.15.0-1016.19","5.15.0-1017.20","5.15.0-1019.23","5.15.0-1020.25","5.15.0-1023.28","5.15.0-1024.29","5.15.0-1027.32","5.15.0-1028.33","5.15.0-1030.35","5.15.0-1031.36","5.15.0-1032.37","5.15.0-1033.38","5.15.0-1034.39","5.15.0-1035.40","5.15.0-1036.41","5.15.0-1037.42"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-gkeop","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1024.29"}]}],"versions":["5.15.0-1001.2","5.15.0-1002.4","5.15.0-1003.5","5.15.0-1004.6","5.15.0-1005.7","5.15.0-1007.10","5.15.0-1008.12","5.15.0-1011.15","5.15.0-1012.16","5.15.0-1013.17","5.15.0-1015.19","5.15.0-1016.21","5.15.0-1017.22","5.15.0-1018.23","5.15.0-1019.24","5.15.0-1020.25","5.15.0-1021.26","5.15.0-1022.27","5.15.0-1023.28"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-hwe-5.19","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.19.0-50.50"}]}],"versions":["5.19.0-28.29~22.04.1","5.19.0-32.33~22.04.1","5.19.0-35.36~22.04.1","5.19.0-38.39~22.04.1","5.19.0-40.41~22.04.1","5.19.0-41.42~22.04.1","5.19.0-42.43~22.04.1","5.19.0-43.44~22.04.1","5.19.0-45.46~22.04.1","5.19.0-46.47~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1034.37"}]}],"versions":["5.15.0-1002.2","5.15.0-1003.3","5.15.0-1004.4","5.15.0-1005.5","5.15.0-1007.8","5.15.0-1009.11","5.15.0-1010.12","5.15.0-1012.14","5.15.0-1013.15","5.15.0-1015.17","5.15.0-1017.20","5.15.0-1018.21","5.15.0-1021.24","5.15.0-1022.25","5.15.0-1023.26","5.15.0-1025.28","5.15.0-1026.29","5.15.0-1027.30","5.15.0-1028.31","5.15.0-1029.32","5.15.0-1030.33","5.15.0-1031.34","5.15.0-1032.35","5.15.0-1033.36"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-intel-iotg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1036.41"}]}],"versions":["5.15.0-1004.6","5.15.0-1008.11","5.15.0-1010.14","5.15.0-1013.17","5.15.0-1015.20","5.15.0-1016.21","5.15.0-1017.22","5.15.0-1018.23","5.15.0-1021.26","5.15.0-1023.28","5.15.0-1025.30","5.15.0-1026.31","5.15.0-1027.32","5.15.0-1028.33","5.15.0-1030.35","5.15.0-1031.36","5.15.0-1033.38","5.15.0-1034.39","5.15.0-1035.40"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-kvm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1038.43"}]}],"versions":["5.13.0-1004.4","5.13.0-1006.6+22.04.1","5.13.0-1007.7+22.04.1","5.13.0-1010.11+22.04.1","5.15.0-1002.2","5.15.0-1004.4","5.15.0-1005.5","5.15.0-1007.7","5.15.0-1008.8","5.15.0-1010.11","5.15.0-1012.14","5.15.0-1013.16","5.15.0-1016.19","5.15.0-1017.21","5.15.0-1018.22","5.15.0-1019.23","5.15.0-1020.24","5.15.0-1021.26","5.15.0-1024.29","5.15.0-1025.30","5.15.0-1026.31","5.15.0-1028.33","5.15.0-1029.34","5.15.0-1030.35","5.15.0-1031.36","5.15.0-1032.37","5.15.0-1033.38","5.15.0-1034.39","5.15.0-1035.40","5.15.0-1037.42"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-lowlatency","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-78.85"}]}],"versions":["5.15.0-22.22","5.15.0-23.23","5.15.0-24.24","5.15.0-27.28","5.15.0-30.31","5.15.0-33.34","5.15.0-35.36","5.15.0-37.39","5.15.0-39.42","5.15.0-40.43","5.15.0-41.44","5.15.0-43.46","5.15.0-46.49","5.15.0-47.53","5.15.0-48.54","5.15.0-50.56","5.15.0-52.58","5.15.0-53.59","5.15.0-56.62","5.15.0-57.63","5.15.0-58.64","5.15.0-60.66","5.15.0-67.74","5.15.0-69.76","5.15.0-70.77","5.15.0-71.78","5.15.0-72.79","5.15.0-73.80","5.15.0-75.82","5.15.0-76.83"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-lowlatency-hwe-5.19","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.19.0-1030.30"}]}],"versions":["5.19.0-1017.18~22.04.1","5.19.0-1018.19~22.04.1","5.19.0-1021.22~22.04.1","5.19.0-1022.23~22.04.1","5.19.0-1023.24~22.04.1","5.19.0-1024.25~22.04.1","5.19.0-1025.26~22.04.1","5.19.0-1027.28~22.04.1","5.19.0-1028.29~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-nvidia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1029.29"}]}],"versions":["5.15.0-1005.5","5.15.0-1007.7","5.15.0-1010.10","5.15.0-1015.15","5.15.0-1017.17","5.15.0-1018.18","5.15.0-1023.23","5.15.0-1025.25","5.15.0-1026.26","5.15.0-1027.27","5.15.0-1028.28"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-oem-5.17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.17.0-1003.3","5.17.0-1004.4","5.17.0-1006.6","5.17.0-1011.12","5.17.0-1012.13","5.17.0-1013.14","5.17.0-1014.15","5.17.0-1015.16","5.17.0-1016.17","5.17.0-1017.18","5.17.0-1018.19","5.17.0-1019.20","5.17.0-1020.21","5.17.0-1021.22","5.17.0-1024.25","5.17.0-1025.26","5.17.0-1026.27","5.17.0-1027.28","5.17.0-1028.29","5.17.0-1029.30","5.17.0-1030.31","5.17.0-1031.32","5.17.0-1032.33","5.17.0-1033.34","5.17.0-1034.35","5.17.0-1035.36"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-oem-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.0.0-1006.6","6.0.0-1007.7","6.0.0-1008.8","6.0.0-1009.9","6.0.0-1010.10","6.0.0-1011.11","6.0.0-1012.12","6.0.0-1013.13","6.0.0-1014.14","6.0.0-1015.15","6.0.0-1016.16","6.0.0-1017.17","6.0.0-1018.18","6.0.0-1019.19","6.0.0-1020.20","6.0.0-1021.21"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-oem-6.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1.0-1019.19"}]}],"versions":["6.1.0-1004.4","6.1.0-1006.6","6.1.0-1007.7","6.1.0-1008.8","6.1.0-1009.9","6.1.0-1010.10","6.1.0-1012.12","6.1.0-1013.13","6.1.0-1014.14","6.1.0-1015.15","6.1.0-1016.16","6.1.0-1017.17"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-oracle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1039.45"}]}],"versions":["5.13.0-1008.10","5.15.0-1001.3","5.15.0-1002.4","5.15.0-1003.5","5.15.0-1006.8","5.15.0-1007.9","5.15.0-1009.12","5.15.0-1011.15","5.15.0-1013.17","5.15.0-1016.20","5.15.0-1017.22","5.15.0-1018.23","5.15.0-1019.24","5.15.0-1021.27","5.15.0-1022.28","5.15.0-1025.31","5.15.0-1026.32","5.15.0-1027.33","5.15.0-1029.35","5.15.0-1030.36","5.15.0-1032.38","5.15.0-1033.39","5.15.0-1034.40","5.15.0-1035.41","5.15.0-1036.42","5.15.0-1037.43","5.15.0-1038.44"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-raspi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1034.37"}]}],"versions":["5.13.0-1008.9","5.15.0-1002.2","5.15.0-1003.3","5.15.0-1004.4","5.15.0-1005.5","5.15.0-1006.6","5.15.0-1008.8","5.15.0-1011.13","5.15.0-1012.14","5.15.0-1013.15","5.15.0-1014.16","5.15.0-1015.17","5.15.0-1016.18","5.15.0-1017.19","5.15.0-1018.20","5.15.0-1021.23","5.15.0-1022.24","5.15.0-1023.25","5.15.0-1024.26","5.15.0-1025.27","5.15.0-1026.28","5.15.0-1027.29","5.15.0-1028.30","5.15.0-1029.31","5.15.0-1030.32","5.15.0-1032.35","5.15.0-1033.36"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-riscv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.13.0-1004.4","5.13.0-1006.6+22.04.1","5.13.0-1007.7+22.04.1","5.13.0-1010.11+22.04.1","5.15.0-1004.4","5.15.0-1005.5","5.15.0-1006.6","5.15.0-1007.7","5.15.0-1008.8","5.15.0-1011.12","5.15.0-1012.13","5.15.0-1014.16","5.15.0-1015.17","5.15.0-1016.18","5.15.0-1017.19","5.15.0-1018.21","5.15.0-1019.22","5.15.0-1020.23","5.15.0-1022.26","5.15.0-1023.27","5.15.0-1026.30","5.15.0-1027.31","5.15.0-1028.32"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-riscv-5.19","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.19.0-1012.13~22.04.1","5.19.0-1015.16~22.04.1","5.19.0-1016.17~22.04.1","5.19.0-1017.18~22.04.1","5.19.0-1018.19~22.04.1","5.19.0-1019.21~22.04.1","5.19.0-1020.22~22.04.1","5.19.0-1021.23~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-starfive-5.19","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.19.0-1014.16~22.04.1","5.19.0-1015.17~22.04.1","5.19.0-1016.18~22.04.1","5.19.0-1017.19~22.04.1","5.19.0-1018.20~22.04.1","5.19.0-1019.21~22.04.1","5.19.0-1020.22~22.04.1"]}],"references":[{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-3117","tags":["advisory"]},{"url":"https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=1240eb93f0616b21c675416516ff3d74798fdc97","tags":["report"]},{"url":"https://github.com/advisories/GHSA-vmqj-8947-67ch"},{"url":"https://errata.cloudlinux.com/centos8.4-els/CLSA-2023-1695715460.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos8.5els/CLSA-2023-1695716575.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-1263","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-1280","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-1462","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23036","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23040","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-2977","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3105","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3106","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3107","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3108","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-34918","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3707","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-39188","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-45886","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-45919","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-2124","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-22998","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-3212","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-3268","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-3390","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-3567","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-3609","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-40283","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-4128","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-4206","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-4207","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-4208","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-4387","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1435","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-1295","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-3090","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-31248","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-3220","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-3338","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-3358","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1436","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1437","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1438","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1439","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20233171-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1150305","tags":["report"]},{"url":"https://bugzilla.suse.com/1193629","tags":["report"]},{"url":"https://bugzilla.suse.com/1194869","tags":["report"]},{"url":"https://bugzilla.suse.com/1207894","tags":["report"]},{"url":"https://bugzilla.suse.com/1208788","tags":["report"]},{"url":"https://bugzilla.suse.com/1210565","tags":["report"]},{"url":"https://bugzilla.suse.com/1210584","tags":["report"]},{"url":"https://bugzilla.suse.com/1210853","tags":["report"]},{"url":"https://bugzilla.suse.com/1211243","tags":["report"]},{"url":"https://bugzilla.suse.com/1211811","tags":["report"]},{"url":"https://bugzilla.suse.com/1211867","tags":["report"]},{"url":"https://bugzilla.suse.com/1212301","tags":["report"]},{"url":"https://bugzilla.suse.com/1212846","tags":["report"]},{"url":"https://bugzilla.suse.com/1212905","tags":["report"]},{"url":"https://bugzilla.suse.com/1213010","tags":["report"]},{"url":"https://bugzilla.suse.com/1213011","tags":["report"]},{"url":"https://bugzilla.suse.com/1213012","tags":["report"]},{"url":"https://bugzilla.suse.com/1213013","tags":["report"]},{"url":"https://bugzilla.suse.com/1213014","tags":["report"]},{"url":"https://bugzilla.suse.com/1213015","tags":["report"]},{"url":"https://bugzilla.suse.com/1213016","tags":["report"]},{"url":"https://bugzilla.suse.com/1213017","tags":["report"]},{"url":"https://bugzilla.suse.com/1213018","tags":["report"]},{"url":"https://bugzilla.suse.com/1213019","tags":["report"]},{"url":"https://bugzilla.suse.com/1213020","tags":["report"]},{"url":"https://bugzilla.suse.com/1213021","tags":["report"]},{"url":"https://bugzilla.suse.com/1213024","tags":["report"]},{"url":"https://bugzilla.suse.com/1213025","tags":["report"]},{"url":"https://bugzilla.suse.com/1213032","tags":["report"]},{"url":"https://bugzilla.suse.com/1213034","tags":["report"]},{"url":"https://bugzilla.suse.com/1213035","tags":["report"]},{"url":"https://bugzilla.suse.com/1213036","tags":["report"]},{"url":"https://bugzilla.suse.com/1213037","tags":["report"]},{"url":"https://bugzilla.suse.com/1213038","tags":["report"]},{"url":"https://bugzilla.suse.com/1213039","tags":["report"]},{"url":"https://bugzilla.suse.com/1213040","tags":["report"]},{"url":"https://bugzilla.suse.com/1213041","tags":["report"]},{"url":"https://bugzilla.suse.com/1213059","tags":["report"]},{"url":"https://bugzilla.suse.com/1213061","tags":["report"]},{"url":"https://bugzilla.suse.com/1213087","tags":["report"]},{"url":"https://bugzilla.suse.com/1213088","tags":["report"]},{"url":"https://bugzilla.suse.com/1213089","tags":["report"]},{"url":"https://bugzilla.suse.com/1213090","tags":["report"]},{"url":"https://bugzilla.suse.com/1213092","tags":["report"]},{"url":"https://bugzilla.suse.com/1213093","tags":["report"]},{"url":"https://bugzilla.suse.com/1213094","tags":["report"]},{"url":"https://bugzilla.suse.com/1213095","tags":["report"]},{"url":"https://bugzilla.suse.com/1213096","tags":["report"]},{"url":"https://bugzilla.suse.com/1213098","tags":["report"]},{"url":"https://bugzilla.suse.com/1213099","tags":["report"]},{"url":"https://bugzilla.suse.com/1213100","tags":["report"]},{"url":"https://bugzilla.suse.com/1213102","tags":["report"]},{"url":"https://bugzilla.suse.com/1213103","tags":["report"]},{"url":"https://bugzilla.suse.com/1213104","tags":["report"]},{"url":"https://bugzilla.suse.com/1213105","tags":["report"]},{"url":"https://bugzilla.suse.com/1213106","tags":["report"]},{"url":"https://bugzilla.suse.com/1213107","tags":["report"]},{"url":"https://bugzilla.suse.com/1213108","tags":["report"]},{"url":"https://bugzilla.suse.com/1213109","tags":["report"]},{"url":"https://bugzilla.suse.com/1213110","tags":["report"]},{"url":"https://bugzilla.suse.com/1213111","tags":["report"]},{"url":"https://bugzilla.suse.com/1213112","tags":["report"]},{"url":"https://bugzilla.suse.com/1213113","tags":["report"]},{"url":"https://bugzilla.suse.com/1213114","tags":["report"]},{"url":"https://bugzilla.suse.com/1213134","tags":["report"]},{"url":"https://bugzilla.suse.com/1213245","tags":["report"]},{"url":"https://bugzilla.suse.com/1213247","tags":["report"]},{"url":"https://bugzilla.suse.com/1213252","tags":["report"]},{"url":"https://bugzilla.suse.com/1213258","tags":["report"]},{"url":"https://bugzilla.suse.com/1213259","tags":["report"]},{"url":"https://bugzilla.suse.com/1213263","tags":["report"]},{"url":"https://bugzilla.suse.com/1213264","tags":["report"]},{"url":"https://bugzilla.suse.com/1213286","tags":["report"]},{"url":"https://bugzilla.suse.com/1213523","tags":["report"]},{"url":"https://bugzilla.suse.com/1213524","tags":["report"]},{"url":"https://bugzilla.suse.com/1213543","tags":["report"]},{"url":"https://bugzilla.suse.com/1213705","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-20593","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-2985","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-3117","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-31248","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-3390","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-35001","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-3812","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20233172-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1212256","tags":["report"]},{"url":"https://bugzilla.suse.com/1212525","tags":["report"]},{"url":"https://bugzilla.suse.com/1213205","tags":["report"]},{"url":"https://bugzilla.suse.com/1213206","tags":["report"]},{"url":"https://bugzilla.suse.com/1213226","tags":["report"]},{"url":"https://bugzilla.suse.com/1213233","tags":["report"]},{"url":"https://bugzilla.suse.com/1213493","tags":["report"]},{"url":"https://bugzilla.suse.com/1213533","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20233180-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1213311","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20233182-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1213585","tags":["report"]},{"url":"https://bugzilla.suse.com/1213586","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-3609","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-3611","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20233302-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1187829","tags":["report"]},{"url":"https://bugzilla.suse.com/1206418","tags":["report"]},{"url":"https://bugzilla.suse.com/1207129","tags":["report"]},{"url":"https://bugzilla.suse.com/1207948","tags":["report"]},{"url":"https://bugzilla.suse.com/1210335","tags":["report"]},{"url":"https://bugzilla.suse.com/1210627","tags":["report"]},{"url":"https://bugzilla.suse.com/1210780","tags":["report"]},{"url":"https://bugzilla.suse.com/1210825","tags":["report"]},{"url":"https://bugzilla.suse.com/1211014","tags":["report"]},{"url":"https://bugzilla.suse.com/1211131","tags":["report"]},{"url":"https://bugzilla.suse.com/1211738","tags":["report"]},{"url":"https://bugzilla.suse.com/1212051","tags":["report"]},{"url":"https://bugzilla.suse.com/1212265","tags":["report"]},{"url":"https://bugzilla.suse.com/1212445","tags":["report"]},{"url":"https://bugzilla.suse.com/1212456","tags":["report"]},{"url":"https://bugzilla.suse.com/1212502","tags":["report"]},{"url":"https://bugzilla.suse.com/1212603","tags":["report"]},{"url":"https://bugzilla.suse.com/1212604","tags":["report"]},{"url":"https://bugzilla.suse.com/1212685","tags":["report"]},{"url":"https://bugzilla.suse.com/1212766","tags":["report"]},{"url":"https://bugzilla.suse.com/1212835","tags":["report"]},{"url":"https://bugzilla.suse.com/1212838","tags":["report"]},{"url":"https://bugzilla.suse.com/1212842","tags":["report"]},{"url":"https://bugzilla.suse.com/1212848","tags":["report"]},{"url":"https://bugzilla.suse.com/1212861","tags":["report"]},{"url":"https://bugzilla.suse.com/1212869","tags":["report"]},{"url":"https://bugzilla.suse.com/1212892","tags":["report"]},{"url":"https://bugzilla.suse.com/1212901","tags":["report"]},{"url":"https://bugzilla.suse.com/1212961","tags":["report"]},{"url":"https://bugzilla.suse.com/1213116","tags":["report"]},{"url":"https://bugzilla.suse.com/1213167","tags":["report"]},{"url":"https://bugzilla.suse.com/1213272","tags":["report"]},{"url":"https://bugzilla.suse.com/1213287","tags":["report"]},{"url":"https://bugzilla.suse.com/1213304","tags":["report"]},{"url":"https://bugzilla.suse.com/1213417","tags":["report"]},{"url":"https://bugzilla.suse.com/1213578","tags":["report"]},{"url":"https://bugzilla.suse.com/1213588","tags":["report"]},{"url":"https://bugzilla.suse.com/1213601","tags":["report"]},{"url":"https://bugzilla.suse.com/1213620","tags":["report"]},{"url":"https://bugzilla.suse.com/1213632","tags":["report"]},{"url":"https://bugzilla.suse.com/1213653","tags":["report"]},{"url":"https://bugzilla.suse.com/1213713","tags":["report"]},{"url":"https://bugzilla.suse.com/1213715","tags":["report"]},{"url":"https://bugzilla.suse.com/1213747","tags":["report"]},{"url":"https://bugzilla.suse.com/1213756","tags":["report"]},{"url":"https://bugzilla.suse.com/1213759","tags":["report"]},{"url":"https://bugzilla.suse.com/1213777","tags":["report"]},{"url":"https://bugzilla.suse.com/1213810","tags":["report"]},{"url":"https://bugzilla.suse.com/1213812","tags":["report"]},{"url":"https://bugzilla.suse.com/1213856","tags":["report"]},{"url":"https://bugzilla.suse.com/1213857","tags":["report"]},{"url":"https://bugzilla.suse.com/1213863","tags":["report"]},{"url":"https://bugzilla.suse.com/1213867","tags":["report"]},{"url":"https://bugzilla.suse.com/1213870","tags":["report"]},{"url":"https://bugzilla.suse.com/1213871","tags":["report"]},{"url":"https://bugzilla.suse.com/1213872","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2022-40982","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-0459","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-1829","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-20569","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-21400","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-2156","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-2166","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-2430","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-3090","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-31083","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-3111","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-3212","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-3268","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-3389","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-3567","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-3776","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-38409","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-3863","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-4004","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20233318-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20233390-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1207088","tags":["report"]},{"url":"https://bugzilla.suse.com/1209342","tags":["report"]},{"url":"https://bugzilla.suse.com/1212741","tags":["report"]},{"url":"https://bugzilla.suse.com/1213354","tags":["report"]},{"url":"https://bugzilla.suse.com/1213546","tags":["report"]},{"url":"https://bugzilla.suse.com/1213868","tags":["report"]},{"url":"https://bugzilla.suse.com/1213970","tags":["report"]},{"url":"https://bugzilla.suse.com/1214019","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-34319","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-4133","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-4194","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20233391-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1199304","tags":["report"]},{"url":"https://bugzilla.suse.com/1207270","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20233421-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2023-3117","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-3117","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2023-3117","description":"Duplicate of CVE-2023-3390.","status":"rejected","published":"2023-06-30T00:00:00Z","modified":"2023-08-07T16:06:02.623Z","updated_at":"2026-11-02T14:35:24.360381Z"}],"euvd":[{"id":"EUVD-2023-43803","description":"Duplicate of CVE-2023-3390.","status":"published","published":"2023-06-30T00:00:00Z","modified":"2023-08-07T16:06:02Z","updated_at":"2026-11-03T03:50:56.082226Z"}],"ghsa":[{"id":"GHSA-vmqj-8947-67ch","title":"A use-after-free flaw was found in the Netfilter subsystem of the Linux kernel when processing...","description":"A use-after-free flaw was found in the Netfilter subsystem of the Linux kernel when processing named and anonymous sets in batch requests, which can lead to performing arbitrary reads and writes in kernel memory. This flaw allows a local user with CAP_NET_ADMIN capability to crash or potentially escalate their privileges on the system.","status":"published","published":"2023-07-01T00:30:45Z","modified":"2023-11-09T05:01:18Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T14:54:56.096891Z"}],"nvd":[{"id":"CVE-2023-3117","description":"Rejected reason: Duplicate of CVE-2023-3390.","status":"rejected","published":"2023-06-30T22:15:10.127Z","modified":"2023-11-07T04:17:55.937Z","updated_at":"2026-11-02T14:08:14.715708Z"}],"osv":[{"id":"OESA-2023-1435","title":"kernel security update","description":"The Linux Kernel, the operating system core itself.\n\nSecurity Fix(es):\n\nA time-of-check to time-of-use issue exists in io_uring subsystem\u0026apos;s IORING_OP_CLOSE operation in the Linux kernel\u0026apos;s versions 5.6 - 5.11 (inclusive), which allows a local user to elevate their privileges to root. Introduced in b5dba59e0cf7e2cc4d3b3b1ac5fe81ddf21959eb, patched in 9eac1904d3364254d622bf2c771c4f85cd435fc2, backported to stable in 788d0824269bef539fe31a785b1517882eafed93.(CVE-2023-1295)\n\nA heap out-of-bounds write vulnerability in the Linux Kernel ipvlan network driver can be exploited to achieve local privilege escalation.\n\nThe out-of-bounds write is caused by missing skb-\u0026gt;cb  initialization in the ipvlan network driver. The vulnerability is reachable if CONFIG_IPVLAN is enabled.\n\n\nWe recommend upgrading past commit 90cbed5247439a966b645b34eb0a2e037836ea8e.\n\n(CVE-2023-3090)\n\nA use-after-free flaw was found in the Netfilter subsystem of the Linux kernel when processing named and anonymous sets in batch requests, which can lead to performing arbitrary reads and writes in kernel memory. This flaw allows a local user with CAP_NET_ADMIN capability to crash or potentially escalate their privileges on the system.(CVE-2023-3117)\n\nLinux Kernel nftables Use-After-Free Local Privilege Escalation Vulnerability; `nft_chain_lookup_byid()` failed to check whether a chain was active and CAP_NET_ADMIN is in any user or network namespace(CVE-2023-31248)\n\nAn issue was discovered in the Linux kernel through 6.1-rc8. dpu_crtc_atomic_check in drivers/gpu/drm/msm/disp/dpu1/dpu_crtc.c lacks check of the return value of kzalloc() and will cause the NULL Pointer Dereference.(CVE-2023-3220)\n\nA flaw null pointer dereference in the Linux kernel DECnet networking protocol was found. A remote user could use this flaw to crash the system.(CVE-2023-3338)\n\nA null pointer dereference was found in the Linux kernel\u0026apos;s Integrated Sensor Hub (ISH) driver. This issue could allow a local user to crash the system.(CVE-2023-3358)","status":"published","published":"2023-07-21T11:05:53Z","modified":"2026-08-18T01:17:46.382522201Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:40.328856Z"},{"id":"OESA-2023-1436","title":"kernel security update","description":"The Linux Kernel, the operating system core itself.\n\nSecurity Fix(es):\n\nA time-of-check to time-of-use issue exists in io_uring subsystem\u0026apos;s IORING_OP_CLOSE operation in the Linux kernel\u0026apos;s versions 5.6 - 5.11 (inclusive), which allows a local user to elevate their privileges to root. Introduced in b5dba59e0cf7e2cc4d3b3b1ac5fe81ddf21959eb, patched in 9eac1904d3364254d622bf2c771c4f85cd435fc2, backported to stable in 788d0824269bef539fe31a785b1517882eafed93.(CVE-2023-1295)\n\nA heap out-of-bounds write vulnerability in the Linux Kernel ipvlan network driver can be exploited to achieve local privilege escalation.\n\nThe out-of-bounds write is caused by missing skb-\u0026gt;cb  initialization in the ipvlan network driver. The vulnerability is reachable if CONFIG_IPVLAN is enabled.\n\n\nWe recommend upgrading past commit 90cbed5247439a966b645b34eb0a2e037836ea8e.\n\n(CVE-2023-3090)\n\nA use-after-free flaw was found in the Netfilter subsystem of the Linux kernel when processing named and anonymous sets in batch requests, which can lead to performing arbitrary reads and writes in kernel memory. This flaw allows a local user with CAP_NET_ADMIN capability to crash or potentially escalate their privileges on the system.(CVE-2023-3117)\n\nLinux Kernel nftables Use-After-Free Local Privilege Escalation Vulnerability; `nft_chain_lookup_byid()` failed to check whether a chain was active and CAP_NET_ADMIN is in any user or network namespace(CVE-2023-31248)\n\nAn issue was discovered in the Linux kernel through 6.1-rc8. dpu_crtc_atomic_check in drivers/gpu/drm/msm/disp/dpu1/dpu_crtc.c lacks check of the return value of kzalloc() and will cause the NULL Pointer Dereference.(CVE-2023-3220)\n\nA flaw null pointer dereference in the Linux kernel DECnet networking protocol was found. A remote user could use this flaw to crash the system.(CVE-2023-3338)\n\nA null pointer dereference was found in the Linux kernel\u0026apos;s Integrated Sensor Hub (ISH) driver. This issue could allow a local user to crash the system.(CVE-2023-3358)","status":"published","published":"2023-07-21T11:05:54Z","modified":"2026-08-18T01:17:45.684034257Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:40.328856Z"},{"id":"OESA-2023-1437","title":"kernel security update","description":"The Linux Kernel, the operating system core itself.\n\nSecurity Fix(es):\n\nA heap out-of-bounds write vulnerability in the Linux Kernel ipvlan network driver can be exploited to achieve local privilege escalation.\n\nThe out-of-bounds write is caused by missing skb-\u0026gt;cb  initialization in the ipvlan network driver. The vulnerability is reachable if CONFIG_IPVLAN is enabled.\n\n\nWe recommend upgrading past commit 90cbed5247439a966b645b34eb0a2e037836ea8e.\n\n(CVE-2023-3090)\n\nA use-after-free flaw was found in the Netfilter subsystem of the Linux kernel when processing named and anonymous sets in batch requests, which can lead to performing arbitrary reads and writes in kernel memory. This flaw allows a local user with CAP_NET_ADMIN capability to crash or potentially escalate their privileges on the system.(CVE-2023-3117)\n\nLinux Kernel nftables Use-After-Free Local Privilege Escalation Vulnerability; `nft_chain_lookup_byid()` failed to check whether a chain was active and CAP_NET_ADMIN is in any user or network namespace(CVE-2023-31248)\n\nAn issue was discovered in the Linux kernel through 6.1-rc8. dpu_crtc_atomic_check in drivers/gpu/drm/msm/disp/dpu1/dpu_crtc.c lacks check of the return value of kzalloc() and will cause the NULL Pointer Dereference.(CVE-2023-3220)\n\nA flaw null pointer dereference in the Linux kernel DECnet networking protocol was found. A remote user could use this flaw to crash the system.(CVE-2023-3338)\n\nA null pointer dereference was found in the Linux kernel\u0026apos;s Integrated Sensor Hub (ISH) driver. This issue could allow a local user to crash the system.(CVE-2023-3358)","status":"published","published":"2023-07-21T11:05:54Z","modified":"2026-08-18T01:17:47.223212582Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:40.328856Z"},{"id":"OESA-2023-1438","title":"kernel security update","description":"The Linux Kernel, the operating system core itself.\n\nSecurity Fix(es):\n\nA time-of-check to time-of-use issue exists in io_uring subsystem\u0026apos;s IORING_OP_CLOSE operation in the Linux kernel\u0026apos;s versions 5.6 - 5.11 (inclusive), which allows a local user to elevate their privileges to root. Introduced in b5dba59e0cf7e2cc4d3b3b1ac5fe81ddf21959eb, patched in 9eac1904d3364254d622bf2c771c4f85cd435fc2, backported to stable in 788d0824269bef539fe31a785b1517882eafed93.(CVE-2023-1295)\n\nA heap out-of-bounds write vulnerability in the Linux Kernel ipvlan network driver can be exploited to achieve local privilege escalation.\n\nThe out-of-bounds write is caused by missing skb-\u0026gt;cb  initialization in the ipvlan network driver. The vulnerability is reachable if CONFIG_IPVLAN is enabled.\n\n\nWe recommend upgrading past commit 90cbed5247439a966b645b34eb0a2e037836ea8e.\n\n(CVE-2023-3090)\n\nA use-after-free flaw was found in the Netfilter subsystem of the Linux kernel when processing named and anonymous sets in batch requests, which can lead to performing arbitrary reads and writes in kernel memory. This flaw allows a local user with CAP_NET_ADMIN capability to crash or potentially escalate their privileges on the system.(CVE-2023-3117)\n\nAn issue was discovered in the Linux kernel through 6.1-rc8. dpu_crtc_atomic_check in drivers/gpu/drm/msm/disp/dpu1/dpu_crtc.c lacks check of the return value of kzalloc() and will cause the NULL Pointer Dereference.(CVE-2023-3220)\n\nA flaw null pointer dereference in the Linux kernel DECnet networking protocol was found. A remote user could use this flaw to crash the system.(CVE-2023-3338)\n\nA null pointer dereference was found in the Linux kernel\u0026apos;s Integrated Sensor Hub (ISH) driver. This issue could allow a local user to crash the system.(CVE-2023-3358)","status":"published","published":"2023-07-21T11:05:54Z","modified":"2026-08-18T01:17:46.899670959Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:40.328856Z"},{"id":"OESA-2023-1439","title":"kernel security update","description":"The Linux Kernel, the operating system core itself.\n\nSecurity Fix(es):\n\nA time-of-check to time-of-use issue exists in io_uring subsystem\u0026apos;s IORING_OP_CLOSE operation in the Linux kernel\u0026apos;s versions 5.6 - 5.11 (inclusive), which allows a local user to elevate their privileges to root. Introduced in b5dba59e0cf7e2cc4d3b3b1ac5fe81ddf21959eb, patched in 9eac1904d3364254d622bf2c771c4f85cd435fc2, backported to stable in 788d0824269bef539fe31a785b1517882eafed93.(CVE-2023-1295)\n\nA heap out-of-bounds write vulnerability in the Linux Kernel ipvlan network driver can be exploited to achieve local privilege escalation.\n\nThe out-of-bounds write is caused by missing skb-\u0026gt;cb  initialization in the ipvlan network driver. The vulnerability is reachable if CONFIG_IPVLAN is enabled.\n\n\nWe recommend upgrading past commit 90cbed5247439a966b645b34eb0a2e037836ea8e.\n\n(CVE-2023-3090)\n\nA use-after-free flaw was found in the Netfilter subsystem of the Linux kernel when processing named and anonymous sets in batch requests, which can lead to performing arbitrary reads and writes in kernel memory. This flaw allows a local user with CAP_NET_ADMIN capability to crash or potentially escalate their privileges on the system.(CVE-2023-3117)\n\nAn issue was discovered in the Linux kernel through 6.1-rc8. dpu_crtc_atomic_check in drivers/gpu/drm/msm/disp/dpu1/dpu_crtc.c lacks check of the return value of kzalloc() and will cause the NULL Pointer Dereference.(CVE-2023-3220)\n\nA flaw null pointer dereference in the Linux kernel DECnet networking protocol was found. A remote user could use this flaw to crash the system.(CVE-2023-3338)\n\nA null pointer dereference was found in the Linux kernel\u0026apos;s Integrated Sensor Hub (ISH) driver. This issue could allow a local user to crash the system.(CVE-2023-3358)","status":"published","published":"2023-07-21T11:05:54Z","modified":"2026-08-18T01:17:47.223533756Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:40.328856Z"},{"id":"UBUNTU-CVE-2023-3117","description":"Rejected reason: Duplicate of CVE-2023-3390.","status":"published","published":"2023-06-30T22:15:00Z","modified":"2026-11-06T13:49:55.380162682Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-06T14:22:28.944809Z"},{"id":"CLSA-2023-1695715460","title":"kernel: Fix of 24 CVEs","description":"- xen/xenbus: don't let xenbus_grant_ring() remove grants in error case {CVE-2022-23040}\n- xen/xenbus: Fix granting of vmalloc'd memory\n- xen/blkfront: don't use gnttab_query_foreign_access() for mapped status {CVE-2022-23036}\n- xen/grant-table: add gnttab_try_end_foreign_access() {CVE-2022-23036}\n- xen/blkfront: don't trust the backend response data blindly\n- xen/blkfront: don't take local copy of a request from the ring page\n- xen/blkfront: read response from backend only once\n- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free {CVE-2023-4128}\n- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free {CVE-2023-4128}\n- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free {CVE-2023-4128}\n- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221 {CVE-2022-45919}\n- media: dvb-core: Fix use-after-free due on race condition at dvb_net {CVE-2022-45886}\n- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF {CVE-2023-3567}\n- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb {CVE-2023-40283}\n- net: vmxnet3: fix possible use-after-free bugs in vmxnet3_rq_alloc_rx_buf() {CVE-2023-4387}\n- tty: use new tty_insert_flip_string_and_push_buffer() in pty_write() {CVE-2022-1462}\n- tty: extract tty_flip_buffer_commit() from tty_flip_buffer_push()\n- mmu_gather: Force tlb-flush VM_PFNMAP vmas {CVE-2022-39188}\n- net/sched: cls_u32: Fix reference counter leak leading to overflow {CVE-2023-3609}\n- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE {CVE-2023-3117}\n- relayfs: fix out-of-bounds access in relay_file_read {CVE-2023-3268}\n- xfs: verify buffer contents when we skip log replay {CVE-2023-2124}\n- netfilter: nf_tables: stricter validation of element data {CVE-2022-34918}\n- tpm: fix reference counting for struct tpm_chip {CVE-2022-2977}\n- drm/virtio: Fix compile warnings (ents/nents) {CVE-2023-22998}\n- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling {CVE-2023-22998}\n- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init {CVE-2023-22998}\n- gfs2: Don't deref jdesc in evict {CVE-2023-3212}\n- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry {CVE-2022-3707}\n- drm/amdkfd: Check for null pointer after calling kmemdup {CVE-2022-3108}\n- hv_netvsc: Add check for kvmalloc_array {CVE-2022-3107}\n- sfc_ef100: potential dereference of null pointer {CVE-2022-3106}\n- RDMA/uverbs: Check for null return of kmalloc_array {CVE-2022-3105}\n- drm: use the lookup lock in drm_is_current_master {CVE-2022-1280}\n- drm: add a locked version of drm_is_current_master {CVE-2022-1280}\n- drm: serialize drm_file.master with a new spinlock {CVE-2022-1280}\n- drm/vmwgfx: fix potential UAF in vmwgfx_surface.c {CVE-2022-1280}\n- drm: protect drm_master pointers in drm_lease.c {CVE-2022-1280}","status":"published","published":"2023-09-26T08:15:54Z","modified":"2026-10-21T10:48:05.710400435Z","updated_at":"2026-11-02T15:43:40.509998Z"},{"id":"CLSA-2023-1695716575","title":"kernel: Fix of 28 CVEs","description":"- xen/xenbus: don't let xenbus_grant_ring() remove grants in error case {CVE-2022-23040}\n- xen/xenbus: Fix granting of vmalloc'd memory\n- xen/blkfront: don't use gnttab_query_foreign_access() for mapped status {CVE-2022-23036}\n- xen/grant-table: add gnttab_try_end_foreign_access() {CVE-2022-23036}\n- xen/blkfront: don't trust the backend response data blindly\n- xen/blkfront: don't take local copy of a request from the ring page\n- xen/blkfront: read response from backend only once\n- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free {CVE-2023-4128}\n- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free {CVE-2023-4128}\n- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free {CVE-2023-4128}\n- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221 {CVE-2022-45919}\n- media: dvb-core: Fix use-after-free due on race condition at dvb_net {CVE-2022-45886}\n- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF {CVE-2023-3567}\n- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb {CVE-2023-40283}\n- net: vmxnet3: fix possible use-after-free bugs in vmxnet3_rq_alloc_rx_buf() {CVE-2023-4387}\n- tty: use new tty_insert_flip_string_and_push_buffer() in pty_write() {CVE-2022-1462}\n- tty: extract tty_flip_buffer_commit() from tty_flip_buffer_push()\n- mmu_gather: Force tlb-flush VM_PFNMAP vmas {CVE-2022-39188}\n- net/sched: cls_u32: Fix reference counter leak leading to overflow {CVE-2023-3609}\n- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE {CVE-2023-3117}\n- relayfs: fix out-of-bounds access in relay_file_read {CVE-2023-3268}\n- xfs: verify buffer contents when we skip log replay {CVE-2023-2124}\n- netfilter: nf_tables: stricter validation of element data {CVE-2022-34918}\n- tpm: fix reference counting for struct tpm_chip {CVE-2022-2977}\n- drm/virtio: Fix compile warnings (ents/nents) {CVE-2023-22998}\n- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling {CVE-2023-22998}\n- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init {CVE-2023-22998}\n- gfs2: Don't deref jdesc in evict {CVE-2023-3212}\n- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry {CVE-2022-3707}\n- drm/amdkfd: Check for null pointer after calling kmemdup {CVE-2022-3108}\n- hv_netvsc: Add check for kvmalloc_array {CVE-2022-3107}\n- sfc_ef100: potential dereference of null pointer {CVE-2022-3106}\n- RDMA/uverbs: Check for null return of kmalloc_array {CVE-2022-3105}\n- drm: use the lookup lock in drm_is_current_master {CVE-2022-1280}\n- drm: add a locked version of drm_is_current_master {CVE-2022-1280}\n- drm: serialize drm_file.master with a new spinlock {CVE-2022-1280}\n- drm/vmwgfx: fix potential UAF in vmwgfx_surface.c {CVE-2022-1280}\n- drm: protect drm_master pointers in drm_lease.c {CVE-2022-1280}\n- KVM: avoid NULL pointer dereference in kvm_dirty_ring_push {CVE-2022-1263}","status":"published","published":"2026-10-18T03:24:08Z","modified":"2026-10-26T09:31:44.717042374Z","updated_at":"2026-11-02T15:43:40.509998Z"},{"id":"SUSE-SU-2023:3171-1","title":"Security update for the Linux Kernel","description":"\nThe SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security and bugfixes.\n\nThe following security bugs were fixed:\n\n- CVE-2023-2985: Fixed an use-after-free vulnerability in hfsplus_put_super in fs/hfsplus/super.c that could allow a local user to cause a denial of service (bsc#1211867).\n- CVE-2023-3117: Fixed an use-after-free vulnerability in the netfilter subsystem when processing named and anonymous sets in batch requests that could allow a local user with CAP_NET_ADMIN capability to crash or potentially escalate their privileges on the system (bsc#1213245).\n- CVE-2023-3390: Fixed an use-after-free vulnerability in the netfilter subsystem in net/netfilter/nf_tables_api.c that could allow a local attacker with user access to cause a privilege escalation issue (bsc#1212846).\n- CVE-2023-3812: Fixed an out-of-bounds memory access flaw in the TUN/TAP device driver functionality that could allow a local user to crash or potentially escalate their privileges on the system (bsc#1213543).\n- CVE-2023-20593: Fixed a ZenBleed issue in 'Zen 2' CPUs that could allow an attacker to potentially access sensitive information (bsc#1213286).\n- CVE-2023-31248: Fixed an use-after-free vulnerability in nft_chain_lookup_byid that could allow a local attacker to escalate their privilege (bsc#1213061).\n- CVE-2023-35001: Fixed an out-of-bounds memory access flaw in nft_byteorder that could allow a local attacker to escalate their privilege (bsc#1213059).\n\n\nThe following non-security bugs were fixed:\n\n- ACPI: utils: Fix acpi_evaluate_dsm_typed() redefinition error (git-fixes).\n- ALSA: fireface: make read-only const array for model names static (git-fixes).\n- ALSA: hda/realtek - remove 3k pull low procedure (git-fixes).\n- ALSA: hda/realtek: Add quirk for ASUS ROG G614Jx (git-fixes).\n- ALSA: hda/realtek: Add quirk for ASUS ROG GA402X (git-fixes).\n- ALSA: hda/realtek: Add quirk for ASUS ROG GX650P (git-fixes).\n- ALSA: hda/realtek: Add quirk for ASUS ROG GZ301V (git-fixes).\n- ALSA: hda/realtek: Add quirk for Clevo NPx0SNx (git-fixes).\n- ALSA: hda/realtek: Add quirk for Clevo NS70AU (git-fixes).\n- ALSA: hda/realtek: Add quirks for Unis H3C Desktop B760 \u0026 Q760 (git-fixes).\n- ALSA: hda/realtek: Add support for DELL Oasis 13/14/16 laptops (git-fixes).\n- ALSA: hda/realtek: Amend G634 quirk to enable rear speakers (git-fixes).\n- ALSA: hda/realtek: Enable Mute LED on HP Laptop 15s-eq2xxx (git-fixes).\n- ALSA: hda/realtek: Fix generic fixup definition for cs35l41 amp (git-fixes).\n- ALSA: hda/realtek: Whitespace fix (git-fixes).\n- ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync() (git-fixes).\n- ALSA: oxfw: make read-only const array models static (git-fixes).\n- ALSA: pcm: Fix potential data race at PCM memory allocation helpers (git-fixes).\n- ASoC: codecs: wcd-mbhc-v2: fix resource leaks on component remove (git-fixes).\n- ASoC: codecs: wcd934x: fix resource leaks on component remove (git-fixes).\n- ASoC: codecs: wcd938x: fix codec initialisation race (git-fixes).\n- ASoC: codecs: wcd938x: fix dB range for HPHL and HPHR (git-fixes).\n- ASoC: codecs: wcd938x: fix missing clsh ctrl error handling (git-fixes).\n- ASoC: codecs: wcd938x: fix soundwire initialisation race (git-fixes).\n- ASoC: tegra: Fix ADX byte map (git-fixes).\n- ASoC: tegra: Fix AMX byte map (git-fixes).\n- Add MODULE_FIRMWARE() for FIRMWARE_TG357766 (git-fixes).\n- Documentation: ABI: sysfs-class-net-qmi: pass_through contact update (git-fixes).\n- Documentation: bonding: fix the doc of peer_notif_delay (git-fixes).\n- Documentation: timers: hrtimers: Make hybrid union historical (git-fixes).\n- Enable NXP SNVS RTC driver for i.MX 8MQ/8MP (jsc#PED-4758)\n- Fix documentation of panic_on_warn (git-fixes).\n- IB/hfi1: Use bitmap_zalloc() when applicable (git-fixes)\n- PCI/PM: Avoid putting EloPOS E2/S2/H2 PCIe Ports in D3cold (git-fixes).\n- PCI: Add function 1 DMA alias quirk for Marvell 88SE9235 (git-fixes).\n- RDMA/rxe: Fix access checks in rxe_check_bind_mw (git-fixes)\n- Revert 'arm64: dts: zynqmp: Add address-cells property to interrupt (git-fixes)\n- Revert 'drm/amd/display: edp do not add non-edid timings' (git-fixes).\n- USB: dwc2: Fix some error handling paths (git-fixes).\n- USB: dwc2: platform: Improve error reporting for problems during .remove() (git-fixes).\n- USB: gadget: udc: core: Offload usb_udc_vbus_handler processing (git-fixes).\n- USB: gadget: udc: core: Prevent soft_connect_store() race (git-fixes).\n- USB: serial: option: add LARA-R6 01B PIDs (git-fixes).\n- Update config and supported.conf files due to renaming.\n- apparmor: fix missing error check for rhashtable_insert_fast (git-fixes).\n- arm64/mm: mark private VM_FAULT_X defines as vm_fault_t (git-fixes)\n- arm64: dts: microchip: sparx5: do not use PSCI on reference boards (git-fixes)\n- arm64: vdso: Pass (void *) to virt_to_page() (git-fixes)\n- arm64: xor-neon: mark xor_arm64_neon_*() static (git-fixes)\n- can: bcm: Fix UAF in bcm_proc_show() (git-fixes).\n- cifs: add a warning when the in-flight count goes negative (bsc#1193629).\n- cifs: address unused variable warning (bsc#1193629).\n- cifs: do all necessary checks for credits within or before locking (bsc#1193629).\n- cifs: fix lease break oops in xfstest generic/098 (bsc#1193629).\n- cifs: fix max_credits implementation (bsc#1193629).\n- cifs: fix session state check in reconnect to avoid use-after-free issue (bsc#1193629).\n- cifs: fix session state check in smb2_find_smb_ses (bsc#1193629).\n- cifs: fix session state transition to avoid use-after-free issue (bsc#1193629).\n- cifs: fix sockaddr comparison in iface_cmp (bsc#1193629).\n- cifs: fix status checks in cifs_tree_connect (bsc#1193629).\n- cifs: log session id when a matching ses is not found (bsc#1193629).\n- cifs: new dynamic tracepoint to track ses not found errors (bsc#1193629).\n- cifs: prevent use-after-free by freeing the cfile later (bsc#1193629).\n- cifs: print all credit counters in DebugData (bsc#1193629).\n- cifs: print client_guid in DebugData (bsc#1193629).\n- cifs: print more detail when invalidate_inode_mapping fails (bsc#1193629).\n- cifs: print nosharesock value while dumping mount options (bsc#1193629).\n- clk: qcom: camcc-sc7180: Add parent dependency to all camera GDSCs (git-fixes).\n- clk: qcom: gcc-ipq6018: Use floor ops for sdcc clocks (git-fixes).\n- codel: fix kernel-doc notation warnings (git-fixes).\n- crypto: kpp - Add helper to set reqsize (git-fixes).\n- crypto: qat - Use helper to set reqsize (git-fixes).\n- devlink: fix kernel-doc notation warnings (git-fixes).\n- docs: networking: Update codeaurora references for rmnet (git-fixes).\n- drm/amd/display: Correct `DMUB_FW_VERSION` macro (git-fixes).\n- drm/amdgpu: Set vmbo destroy after pt bo is created (git-fixes).\n- drm/amdgpu: Validate VM ioctl flags (git-fixes).\n- drm/amdgpu: avoid restore process run into dead loop (git-fixes).\n- drm/amdgpu: fix clearing mappings for BOs that are always valid in VM (git-fixes).\n- drm/atomic: Allow vblank-enabled + self-refresh 'disable' (git-fixes).\n- drm/atomic: Fix potential use-after-free in nonblocking commits (git-fixes).\n- drm/bridge: tc358768: Add atomic_get_input_bus_fmts() implementation (git-fixes).\n- drm/bridge: tc358768: fix TCLK_TRAILCNT computation (git-fixes).\n- drm/bridge: tc358768: fix THS_TRAILCNT computation (git-fixes).\n- drm/bridge: tc358768: fix THS_ZEROCNT computation (git-fixes).\n- drm/client: Fix memory leak in drm_client_target_cloned (git-fixes).\n- drm/i915/psr: Use hw.adjusted mode when calculating io/fast wake times (git-fixes).\n- drm/i915: Fix one wrong caching mode enum usage (git-fixes).\n- drm/msm/disp/dpu: get timing engine status from intf status register (git-fixes).\n- drm/msm/dpu: Set DPU_DATA_HCTL_EN for in INTF_SC7180_MASK (git-fixes).\n- drm/panel: simple: Add Powertip PH800480T013 drm_display_mode flags (git-fixes).\n- drm/panel: simple: Add connector_type for innolux_at043tn24 (git-fixes).\n- drm/ttm: Do not leak a resource on swapout move error (git-fixes).\n- dt-bindings: phy: brcm,brcmstb-usb-phy: Fix error in 'compatible' conditional schema (git-fixes).\n- ext4: Fix reusing stale buffer heads from last failed mounting (bsc#1213020).\n- ext4: add EA_INODE checking to ext4_iget() (bsc#1213106).\n- ext4: add ext4_sb_block_valid() refactored out of ext4_inode_block_valid() (bsc#1213088).\n- ext4: add lockdep annotations for i_data_sem for ea_inode's (bsc#1213109).\n- ext4: add strict range checks while freeing blocks (bsc#1213089).\n- ext4: avoid deadlock in fs reclaim with page writeback (bsc#1213016).\n- ext4: bail out of ext4_xattr_ibody_get() fails for any reason (bsc#1213018).\n- ext4: block range must be validated before use in ext4_mb_clear_bb() (bsc#1213090).\n- ext4: check iomap type only if ext4_iomap_begin() does not fail (bsc#1213103).\n- ext4: disallow ea_inodes with extended attributes (bsc#1213108).\n- ext4: fail ext4_iget if special inode unallocated (bsc#1213010).\n- ext4: fix WARNING in ext4_update_inline_data (bsc#1213012).\n- ext4: fix WARNING in mb_find_extent (bsc#1213099).\n- ext4: fix bug_on in __es_tree_search caused by bad quota inode (bsc#1213111).\n- ext4: fix data races when using cached status extents (bsc#1213102).\n- ext4: fix deadlock when converting an inline directory in nojournal mode (bsc#1213105).\n- ext4: fix i_disksize exceeding i_size problem in paritally written case (bsc#1213015).\n- ext4: fix lockdep warning when enabling MMP (bsc#1213100).\n- ext4: fix task hung in ext4_xattr_delete_inode (bsc#1213096).\n- ext4: fix to check return value of freeze_bdev() in ext4_shutdown() (bsc#1213021).\n- ext4: fix use-after-free read in ext4_find_extent for bigalloc + inline (bsc#1213098).\n- ext4: improve error handling from ext4_dirhash() (bsc#1213104).\n- ext4: improve error recovery code paths in __ext4_remount() (bsc#1213017).\n- ext4: move where set the MAY_INLINE_DATA flag is set (bsc#1213011).\n- ext4: only update i_reserved_data_blocks on successful block allocation (bsc#1213019).\n- ext4: refactor ext4_free_blocks() to pull out ext4_mb_clear_bb() (bsc#1213087).\n- ext4: refuse to create ea block when umounted (bsc#1213093).\n- ext4: set lockdep subclass for the ea_inode in ext4_xattr_inode_cache_find() (bsc#1213107).\n- ext4: turn quotas off if mount failed after enabling quotas (bsc#1213110).\n- ext4: update s_journal_inum if it changes after journal replay (bsc#1213094).\n- ext4: use ext4_fc_tl_mem in fast-commit replay path (bsc#1213092).\n- ext4: zero i_disksize when initializing the bootloader inode (bsc#1213013).\n- fbdev: au1200fb: Fix missing IRQ check in au1200fb_drv_probe (git-fixes).\n- fbdev: imxfb: warn about invalid left/right margin (git-fixes).\n- fuse: ioctl: translate ENOSYS in outarg (bsc#1213524).\n- fuse: revalidate: do not invalidate if interrupted (bsc#1213523).\n- hvcs: Fix hvcs port reference counting (bsc#1213134 ltc#202861).\n- hvcs: Get reference to tty in remove (bsc#1213134 ltc#202861).\n- hvcs: Synchronize hotplug remove with port free (bsc#1213134 ltc#202861).\n- hvcs: Use dev_groups to manage hvcs device attributes (bsc#1213134 ltc#202861).\n- hvcs: Use driver groups to manage driver attributes (bsc#1213134 ltc#202861).\n- hvcs: Use vhangup in hotplug remove (bsc#1213134 ltc#202861).\n- hwmon: (adm1275) Allow setting sample averaging (git-fixes).\n- hwmon: (pmbus/adm1275) Fix problems with temperature monitoring on ADM1272 (git-fixes).\n- i2c: xiic: Defer xiic_wakeup() and __xiic_start_xfer() in xiic_process() (git-fixes).\n- i2c: xiic: Do not try to handle more interrupt events after error (git-fixes).\n- inotify: Avoid reporting event with invalid wd (bsc#1213025).\n- jbd2: fix data missing when reusing bh which is ready to be checkpointed (bsc#1213095).\n- jdb2: Do not refuse invalidation of already invalidated buffers (bsc#1213014).\n- kABI: do not check external trampolines for signature (kabi bsc#1207894 bsc#1211243).\n- kabi/severities: Add VAS symbols changed due to recent fix VAS accelerators are directly tied to the architecture, there is no reason to have out-of-tree production drivers\n- kselftest: vDSO: Fix accumulation of uninitialized ret when CLOCK_REALTIME is undefined (git-fixes).\n- leds: trigger: netdev: Recheck NETDEV_LED_MODE_LINKUP on dev rename (git-fixes).\n- media: atomisp: gmin_platform: fix out_len in gmin_get_config_dsm_var() (git-fixes).\n- media: cec: i2c: ch7322: also select REGMAP (git-fixes).\n- media: i2c: Correct format propagation for st-mipid02 (git-fixes).\n- media: usb: Check az6007_read() return value (git-fixes).\n- media: usb: siano: Fix warning due to null work_func_t function pointer (git-fixes).\n- media: venus: helpers: Fix ALIGN() of non power of two (git-fixes).\n- media: videodev2.h: Fix struct v4l2_input tuner index comment (git-fixes).\n- memcg: drop kmem.limit_in_bytes (bsc#1208788, bsc#1212905).\n- mmc: core: disable TRIM on Kingston EMMC04G-M627 (git-fixes).\n- mmc: sdhci: fix DMA configure compatibility issue when 64bit DMA mode is used (git-fixes).\n- net: mana: Add support for vlan tagging (bsc#1212301).\n- net: phy: prevent stale pointer dereference in phy_init() (git-fixes).\n- ntb: amd: Fix error handling in amd_ntb_pci_driver_init() (git-fixes).\n- ntb: idt: Fix error handling in idt_pci_driver_init() (git-fixes).\n- ntb: intel: Fix error handling in intel_ntb_pci_driver_init() (git-fixes).\n- ntb: ntb_tool: Add check for devm_kcalloc (git-fixes).\n- ntb: ntb_transport: fix possible memory leak while device_register() fails (git-fixes).\n- nvme-multipath: support io stats on the mpath device (bsc#1210565).\n- nvme: introduce nvme_start_request (bsc#1210565).\n- ocfs2: Switch to security_inode_init_security() (git-fixes).\n- ocfs2: check new file size on fallocate call (git-fixes).\n- ocfs2: fix use-after-free when unmounting read-only filesystem (git-fixes).\n- opp: Fix use-after-free in lazy_opp_tables after probe deferral (git-fixes).\n- phy: Revert 'phy: Remove SOC_EXYNOS4212 dep. from PHY_EXYNOS4X12_USB' (git-fixes).\n- phy: tegra: xusb: Clear the driver reference in usb-phy dev (git-fixes).\n- phy: tegra: xusb: check return value of devm_kzalloc() (git-fixes).\n- pie: fix kernel-doc notation warning (git-fixes).\n- pinctrl: amd: Detect internal GPIO0 debounce handling (git-fixes).\n- pinctrl: amd: Fix mistake in handling clearing pins at startup (git-fixes).\n- pinctrl: amd: Only use special debounce behavior for GPIO 0 (git-fixes).\n- powerpc/64: Only WARN if __pa()/__va() called with bad addresses (bsc#1194869).\n- powerpc/64s: Fix VAS mm use after free (bsc#1194869).\n- powerpc/book3s64/mm: Fix DirectMap stats in /proc/meminfo (bsc#1194869).\n- powerpc/bpf: Fix use of user_pt_regs in uapi (bsc#1194869).\n- powerpc/ftrace: Remove ftrace init tramp once kernel init is complete (bsc#1194869).\n- powerpc/interrupt: Do not read MSR from interrupt_exit_kernel_prepare() (bsc#1194869).\n- powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (bsc#1150305 ltc#176097 git-fixes).\n- powerpc/mm: Switch obsolete dssall to .long (bsc#1194869).\n- powerpc/powernv/sriov: perform null check on iov before dereferencing iov (bsc#1194869).\n- powerpc/powernv/vas: Assign real address to rx_fifo in vas_rx_win_attr (bsc#1194869).\n- powerpc/prom_init: Fix kernel config grep (bsc#1194869).\n- powerpc/secvar: fix refcount leak in format_show() (bsc#1194869).\n- powerpc/xics: fix refcount leak in icp_opal_init() (bsc#1194869).\n- powerpc: clean vdso32 and vdso64 directories (bsc#1194869).\n- powerpc: define get_cycles macro for arch-override (bsc#1194869).\n- powerpc: update ppc_save_regs to save current r1 in pt_regs (bsc#1194869).\n- pwm: ab8500: Fix error code in probe() (git-fixes).\n- pwm: imx-tpm: force 'real_period' to be zero in suspend (git-fixes).\n- pwm: sysfs: Do not apply state to already disabled PWMs (git-fixes).\n- rpm/check-for-config-changes: ignore also RISCV_ISA_* and DYNAMIC_SIGFRAME They depend on CONFIG_TOOLCHAIN_HAS_*.\n- rsi: remove kernel-doc comment marker (git-fixes).\n- s390/ap: fix status returned by ap_aqic() (git-fixes bsc#1213259).\n- s390/ap: fix status returned by ap_qact() (git-fixes bsc#1213258).\n- s390/debug: add _ASM_S390_ prefix to header guard (git-fixes bsc#1213263).\n- s390/percpu: add READ_ONCE() to arch_this_cpu_to_op_simple() (git-fixes bsc#1213252).\n- s390: define RUNTIME_DISCARD_EXIT to fix link error with GNU ld \u0026lt; 2.36 (git-fixes bsc#1213264).\n- s390: discard .interp section (git-fixes bsc#1213247).\n- sched/debug: fix dentry leak in update_sched_domain_debugfs (git-fixes)\n- sched: Fix DEBUG \u0026\u0026 !SCHEDSTATS warn (git-fixes)\n- security: keys: Modify mismatched function name (git-fixes).\n- selftests: mptcp: depend on SYN_COOKIES (git-fixes).\n- selftests: mptcp: sockopt: return error if wrong mark (git-fixes).\n- selftests: rtnetlink: remove netdevsim device after ipsec offload test (git-fixes).\n- selftests: tc: add 'ct' action kconfig dep (git-fixes).\n- selftests: tc: add ConnTrack procfs kconfig (git-fixes).\n- selftests: tc: set timeout to 15 minutes (git-fixes).\n- signal/powerpc: On swapcontext failure force SIGSEGV (bsc#1194869).\n- signal: Replace force_sigsegv(SIGSEGV) with force_fatal_sig(SIGSEGV) (bsc#1194869).\n- smb3: do not reserve too many oplock credits (bsc#1193629).\n- smb3: missing null check in SMB2_change_notify (bsc#1193629).\n- smb: client: fix broken file attrs with nodfs mounts (bsc#1193629).\n- smb: client: fix missed ses refcounting (git-fixes).\n- smb: client: fix parsing of source mount option (bsc#1193629).\n- smb: client: fix shared DFS root mounts with different prefixes (bsc#1193629).\n- smb: client: fix warning in CIFSFindFirst() (bsc#1193629).\n- smb: client: fix warning in CIFSFindNext() (bsc#1193629).\n- smb: client: fix warning in cifs_match_super() (bsc#1193629).\n- smb: client: fix warning in cifs_smb3_do_mount() (bsc#1193629).\n- smb: client: fix warning in generic_ip_connect() (bsc#1193629).\n- smb: client: improve DFS mount check (bsc#1193629).\n- smb: client: remove redundant pointer 'server' (bsc#1193629).\n- smb: delete an unnecessary statement (bsc#1193629).\n- smb: move client and server files to common directory fs/smb (bsc#1193629).\n- smb: remove obsolete comment (bsc#1193629).\n- soundwire: qcom: fix storing port config out-of-bounds (git-fixes).\n- spi: bcm-qspi: return error if neither hif_mspi nor mspi is available (git-fixes).\n- spi: bcm63xx: fix max prepend length (git-fixes).\n- tpm: tpm_vtpm_proxy: fix a race condition in /dev/vtpmx creation (git-fixes).\n- tty: serial: fsl_lpuart: add earlycon for imx8ulp platform (git-fixes).\n- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size (bsc#1210584).\n- ubi: ensure that VID header offset + VID header size \u0026lt;= alloc, size (bsc#1210584).\n- udf: Avoid double brelse() in udf_rename() (bsc#1213032).\n- udf: Define EFSCORRUPTED error code (bsc#1213038).\n- udf: Detect system inodes linked into directory hierarchy (bsc#1213114).\n- udf: Discard preallocation before extending file with a hole (bsc#1213036).\n- udf: Do not bother looking for prealloc extents if i_lenExtents matches i_size (bsc#1213035).\n- udf: Do not bother merging very long extents (bsc#1213040).\n- udf: Do not update file length for failed writes to inline files (bsc#1213041).\n- udf: Fix error handling in udf_new_inode() (bsc#1213112).\n- udf: Fix extending file within last block (bsc#1213037).\n- udf: Fix preallocation discarding at indirect extent boundary (bsc#1213034).\n- udf: Preserve link count of system files (bsc#1213113).\n- udf: Truncate added extents on failed expansion (bsc#1213039).\n- wifi: airo: avoid uninitialized warning in airo_get_rate() (git-fixes).\n- wifi: ray_cs: Drop useless status variable in parse_addr() (git-fixes).\n- wifi: ray_cs: Utilize strnlen() in parse_addr() (git-fixes).\n- wifi: rtw89: debug: fix error code in rtw89_debug_priv_send_h2c_set() (git-fixes).\n- wl3501_cs: use eth_hw_addr_set() (git-fixes).\n- writeback: fix call of incorrect macro (bsc#1213024).\n- x86: Fix .brk attribute in linker script (git-fixes).\n- xfs: AIL needs asynchronous CIL forcing (bsc#1211811).\n- xfs: CIL work is serialised, not pipelined (bsc#1211811).\n- xfs: XLOG_STATE_IOERROR must die (bsc#1211811).\n- xfs: async CIL flushes need pending pushes to be made stable (bsc#1211811).\n- xfs: attach iclog callbacks in xlog_cil_set_ctx_write_state() (bsc#1211811).\n- xfs: clean up the rtbitmap fsmap backend (git-fixes).\n- xfs: do not deplete the reserve pool when trying to shrink the fs (git-fixes).\n- xfs: do not reverse order of items in bulk AIL insertion (git-fixes).\n- xfs: do not run shutdown callbacks on active iclogs (bsc#1211811).\n- xfs: drop async cache flushes from CIL commits (bsc#1211811).\n- xfs: factor out log write ordering from xlog_cil_push_work() (bsc#1211811).\n- xfs: fix getfsmap reporting past the last rt extent (git-fixes).\n- xfs: fix integer overflows in the fsmap rtbitmap and logdev backends (git-fixes).\n- xfs: fix interval filtering in multi-step fsmap queries (git-fixes).\n- xfs: fix logdev fsmap query result filtering (git-fixes).\n- xfs: fix off-by-one error when the last rt extent is in use (git-fixes).\n- xfs: fix uninitialized variable access (git-fixes).\n- xfs: make fsmap backend function key parameters const (git-fixes).\n- xfs: make the record pointer passed to query_range functions const (git-fixes).\n- xfs: move the CIL workqueue to the CIL (bsc#1211811).\n- xfs: move xlog_commit_record to xfs_log_cil.c (bsc#1211811).\n- xfs: order CIL checkpoint start records (bsc#1211811).\n- xfs: pass a CIL context to xlog_write() (bsc#1211811).\n- xfs: pass explicit mount pointer to rtalloc query functions (git-fixes).\n- xfs: rework xlog_state_do_callback() (bsc#1211811).\n- xfs: run callbacks before waking waiters in xlog_state_shutdown_callbacks (bsc#1211811).\n- xfs: separate out log shutdown callback processing (bsc#1211811).\n- xfs: wait iclog complete before tearing down AIL (bsc#1211811).\n- xhci: Fix TRB prefetch issue of ZHAOXIN hosts (git-fixes).\n- xhci: Fix resume issue of some ZHAOXIN hosts (git-fixes).\n- xhci: Show ZHAOXIN xHCI root hub speed correctly (git-fixes).\n","status":"published","published":"2023-08-03T06:34:15Z","modified":"2026-02-04T03:00:21.256028Z","updated_at":"2026-11-02T15:53:53.019382Z"},{"id":"SUSE-SU-2023:3172-1","title":"Security update for the Linux Kernel","description":"\nThe SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security and bugfixes.\n\n\nThe following security bugs were fixed:\n\n- CVE-2023-2985: Fixed an use-after-free vulnerability in hfsplus_put_super in fs/hfsplus/super.c that could allow a local user to cause a denial of service (bsc#1211867).\n- CVE-2023-3117: Fixed an use-after-free vulnerability in the netfilter subsystem when processing named and anonymous sets in batch requests that could allow a local user with CAP_NET_ADMIN capability to crash or potentially escalate their privileges on the system (bsc#1213245).\n- CVE-2023-3390: Fixed an use-after-free vulnerability in the netfilter subsystem in net/netfilter/nf_tables_api.c that could allow a local attacker with user access to cause a privilege escalation issue (bsc#1212846).\n- CVE-2023-3812: Fixed an out-of-bounds memory access flaw in the TUN/TAP device driver functionality that could allow a local user to crash or potentially escalate their privileges on the system (bsc#1213543).\n- CVE-2023-20593: Fixed a ZenBleed issue in 'Zen 2' CPUs that could allow an attacker to potentially access sensitive information (bsc#1213286).\n- CVE-2023-31248: Fixed an use-after-free vulnerability in nft_chain_lookup_byid that could allow a local attacker to escalate their privilege (bsc#1213061).\n- CVE-2023-35001: Fixed an out-of-bounds memory access flaw in nft_byteorder that could allow a local attacker to escalate their privilege (bsc#1213059).\n\nThe following non-security bugs were fixed:\n\n- Dropped patch that caused issues with k3s (bsc#1213705).\n- ASoC: Intel: sof_sdw: remove SOF_SDW_TGL_HDMI for MeteorLake devices (git-fixes).\n- ASoC: SOF: topology: Fix logic for copying tuples (git-fixes).\n- Bluetooth: ISO: Fix CIG auto-allocation to select configurable CIG (git-fixes).\n- Bluetooth: ISO: consider right CIS when removing CIG at cleanup (git-fixes).\n- Bluetooth: ISO: fix iso_conn related locking and validity issues (git-fixes).\n- Bluetooth: ISO: use hci_sync for setting CIG parameters (git-fixes).\n- Bluetooth: fix invalid-bdaddr quirk for non-persistent setup (git-fixes).\n- Bluetooth: fix use-bdaddr-property quirk (git-fixes).\n- Bluetooth: hci_bcm: do not mark valid bd_addr as invalid (git-fixes).\n- Bluetooth: hci_event: call disconnect callback before deleting conn (git-fixes).\n- Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_remove_adv_monitor() (git-fixes).\n- Bluetooth: use RCU for hci_conn_params and iterate safely in hci_sync (git-fixes).\n- Enable NXP SNVS RTC driver for i.MX 8MQ/8MP (jsc#PED-4758)\n- PCI: s390: Fix use-after-free of PCI resources with per-function hotplug (bsc#1212525).\n- PCI: vmd: Fix uninitialized variable usage in vmd_enable_domain() (git-fixes).\n- Revert 'arm64: dts: zynqmp: Add address-cells property to interrupt (git-fixes)\n- Revert 'drm/i915: Disable DSB usage for now' (git-fixes).\n- USB: dwc2: Fix some error handling paths (git-fixes).\n- USB: gadget: udc: core: Offload usb_udc_vbus_handler processing (git-fixes).\n- USB: gadget: udc: core: Prevent soft_connect_store() race (git-fixes).\n- USB: typec: Fix fast_role_swap_current show function (git-fixes).\n- Update config and supported.conf files due to renaming.\n- acpi: Fix suspend with Xen PV (git-fixes).\n- adreno: Shutdown the GPU properly (git-fixes).\n- arm64/mm: mark private VM_FAULT_X defines as vm_fault_t (git-fixes)\n- arm64: dts: microchip: sparx5: do not use PSCI on reference boards (git-fixes)\n- arm64: vdso: Pass (void *) to virt_to_page() (git-fixes)\n- arm64: xor-neon: mark xor_arm64_neon_*() static (git-fixes)\n- can: bcm: Fix UAF in bcm_proc_show() (git-fixes).\n- ceph: add a dedicated private data for netfs rreq (bsc#1213205).\n- ceph: fix blindly expanding the readahead windows (bsc#1213206).\n- cifs: add a warning when the in-flight count goes negative (bsc#1193629).\n- cifs: address unused variable warning (bsc#1193629).\n- cifs: do all necessary checks for credits within or before locking (bsc#1193629).\n- cifs: fix lease break oops in xfstest generic/098 (bsc#1193629).\n- cifs: fix max_credits implementation (bsc#1193629).\n- cifs: fix session state check in reconnect to avoid use-after-free issue (bsc#1193629).\n- cifs: fix session state check in smb2_find_smb_ses (bsc#1193629).\n- cifs: fix session state transition to avoid use-after-free issue (bsc#1193629).\n- cifs: fix sockaddr comparison in iface_cmp (bsc#1193629).\n- cifs: fix status checks in cifs_tree_connect (bsc#1193629).\n- cifs: log session id when a matching ses is not found (bsc#1193629).\n- cifs: new dynamic tracepoint to track ses not found errors (bsc#1193629).\n- cifs: prevent use-after-free by freeing the cfile later (bsc#1193629).\n- cifs: print all credit counters in DebugData (bsc#1193629).\n- cifs: print client_guid in DebugData (bsc#1193629).\n- cifs: print more detail when invalidate_inode_mapping fails (bsc#1193629).\n- cifs: print nosharesock value while dumping mount options (bsc#1193629).\n- codel: fix kernel-doc notation warnings (git-fixes).\n- cpufreq: tegra194: Fix module loading (git-fixes).\n- devlink: fix kernel-doc notation warnings (git-fixes).\n- dma-buf/dma-resv: Stop leaking on krealloc() failure (git-fixes).\n- drm/amd/amdgpu: introduce gc_*_mes_2.bin v2 (git-fixes).\n- drm/amd/amdgpu: limit one queue per gang (git-fixes).\n- drm/amd/amdgpu: update mes11 api def (git-fixes).\n- drm/amd/display (gcc13): fix enum mismatch (git-fixes).\n- drm/amd/display: Add Z8 allow states to z-state support list (git-fixes).\n- drm/amd/display: Add debug option to skip PSR CRTC disable (git-fixes).\n- drm/amd/display: Add minimum Z8 residency debug option (git-fixes).\n- drm/amd/display: Add missing WA and MCLK validation (git-fixes).\n- drm/amd/display: Change default Z8 watermark values (git-fixes).\n- drm/amd/display: Correct DML calculation to align HW formula (git-fixes).\n- drm/amd/display: Correct DML calculation to follow HW SPEC (git-fixes).\n- drm/amd/display: Do not update DRR while BW optimizations pending (git-fixes).\n- drm/amd/display: Enable HostVM based on rIOMMU active (git-fixes).\n- drm/amd/display: Enforce 60us prefetch for 200Mhz DCFCLK modes (git-fixes).\n- drm/amd/display: Ensure vmin and vmax adjust for DCE (git-fixes).\n- drm/amd/display: Fix 4to1 MPC black screen with DPP RCO (git-fixes).\n- drm/amd/display: Fix Z8 support configurations (git-fixes).\n- drm/amd/display: Fix a test CalculatePrefetchSchedule() (git-fixes).\n- drm/amd/display: Fix a test dml32_rq_dlg_get_rq_reg() (git-fixes).\n- drm/amd/display: Have Payload Properly Created After Resume (git-fixes).\n- drm/amd/display: Lowering min Z8 residency time (git-fixes).\n- drm/amd/display: Reduce sdp bw after urgent to 90% (git-fixes).\n- drm/amd/display: Refactor eDP PSR codes (git-fixes).\n- drm/amd/display: Remove FPU guards from the DML folder (git-fixes).\n- drm/amd/display: Remove optimization for VRR updates (git-fixes).\n- drm/amd/display: Remove stutter only configurations (git-fixes).\n- drm/amd/display: Update Z8 SR exit/enter latencies (git-fixes).\n- drm/amd/display: Update Z8 watermarks for DCN314 (git-fixes).\n- drm/amd/display: Update minimum stutter residency for DCN314 Z8 (git-fixes).\n- drm/amd/display: filter out invalid bits in pipe_fuses (git-fixes).\n- drm/amd/display: fix PSR-SU/DSC interoperability support (git-fixes).\n- drm/amd/display: fix a divided-by-zero error (git-fixes).\n- drm/amd/display: fixed dcn30+ underflow issue (git-fixes).\n- drm/amd/display: limit timing for single dimm memory (git-fixes).\n- drm/amd/display: populate subvp cmd info only for the top pipe (git-fixes).\n- drm/amd/display: set dcn315 lb bpp to 48 (git-fixes).\n- drm/amd/pm: add missing NotifyPowerSource message mapping for SMU13.0.7 (git-fixes).\n- drm/amd/pm: avoid potential UBSAN issue on legacy asics (git-fixes).\n- drm/amd/pm: conditionally disable pcie lane switching for some sienna_cichlid SKUs (git-fixes).\n- drm/amd/pm: fix possible power mode mismatch between driver and PMFW (git-fixes).\n- drm/amd/pm: resolve reboot exception for si oland (git-fixes).\n- drm/amd/pm: reverse mclk and fclk clocks levels for SMU v13.0.4 (git-fixes).\n- drm/amd/pm: reverse mclk clocks levels for SMU v13.0.5 (git-fixes).\n- drm/amd/pm: workaround for compute workload type on some skus (git-fixes).\n- drm/amd: Add a new helper for loading/validating microcode (git-fixes).\n- drm/amd: Do not allow s0ix on APUs older than Raven (git-fixes).\n- drm/amd: Load MES microcode during early_init (git-fixes).\n- drm/amd: Use `amdgpu_ucode_*` helpers for MES (git-fixes).\n- drm/amdgpu/gfx11: Adjust gfxoff before powergating on gfx11 as well (git-fixes).\n- drm/amdgpu/gfx11: update gpu_clock_counter logic (git-fixes).\n- drm/amdgpu/gfx: set cg flags to enter/exit safe mode (git-fixes).\n- drm/amdgpu/gmc11: implement get_vbios_fb_size() (git-fixes).\n- drm/amdgpu/jpeg: Remove harvest checking for JPEG3 (git-fixes).\n- drm/amdgpu/mes11: enable reg active poll (git-fixes).\n- drm/amdgpu/vcn: Disable indirect SRAM on Vangogh broken BIOSes (git-fixes).\n- drm/amdgpu/vkms: relax timer deactivation by hrtimer_try_to_cancel (git-fixes).\n- drm/amdgpu: Do not set struct drm_driver.output_poll_changed (git-fixes).\n- drm/amdgpu: Fix desktop freezed after gpu-reset (git-fixes).\n- drm/amdgpu: Fix memcpy() in sienna_cichlid_append_powerplay_table function (git-fixes).\n- drm/amdgpu: Fix sdma v4 sw fini error (git-fixes).\n- drm/amdgpu: Fix usage of UMC fill record in RAS (git-fixes).\n- drm/amdgpu: Force signal hw_fences that are embedded in non-sched jobs (git-fixes).\n- drm/amdgpu: add mes resume when do gfx post soft reset (git-fixes).\n- drm/amdgpu: change reserved vram info print (git-fixes).\n- drm/amdgpu: declare firmware for new MES 11.0.4 (git-fixes).\n- drm/amdgpu: enable tmz by default for GC 11.0.1 (git-fixes).\n- drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v10_0_hw_fini (git-fixes).\n- drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v11_0_hw_fini (git-fixes).\n- drm/amdgpu: fix an amdgpu_irq_put() issue in gmc_v9_0_hw_fini() (git-fixes).\n- drm/amdgpu: refine get gpu clock counter method (git-fixes).\n- drm/amdgpu: remove deprecated MES version vars (git-fixes).\n- drm/amdgpu: reserve the old gc_11_0_*_mes.bin (git-fixes).\n- drm/amdgpu: set gfx9 onwards APU atomics support to be true (git-fixes).\n- drm/amdgpu: vcn_4_0 set instance 0 init sched score to 1 (git-fixes).\n- drm/bridge: anx7625: Convert to i2c's .probe_new() (git-fixes).\n- drm/bridge: anx7625: Fix refcount bug in anx7625_parse_dt() (git-fixes).\n- drm/bridge: anx7625: Prevent endless probe loop (git-fixes).\n- drm/bridge: it6505: Move a variable assignment behind a null pointer check in receive_timing_debugfs_show() (git-fixes).\n- drm/bridge: tc358767: Switch to devm MIPI-DSI helpers (git-fixes).\n- drm/bridge: tc358768: Add atomic_get_input_bus_fmts() implementation (git-fixes).\n- drm/bridge: tc358768: fix TCLK_TRAILCNT computation (git-fixes).\n- drm/bridge: tc358768: fix THS_TRAILCNT computation (git-fixes).\n- drm/bridge: tc358768: fix THS_ZEROCNT computation (git-fixes).\n- drm/bridge: ti-sn65dsi83: Fix enable error path (git-fixes).\n- drm/client: Fix memory leak in drm_client_target_cloned (git-fixes).\n- drm/display/dp_mst: Fix payload addition on a disconnected sink (git-fixes).\n- drm/display: Do not block HDR_OUTPUT_METADATA on unknown EOTF (git-fixes).\n- drm/drm_vma_manager: Add drm_vma_node_allow_once() (git-fixes).\n- drm/dsc: fix DP_DSC_MAX_BPP_DELTA_* macro values (git-fixes).\n- drm/dsc: fix drm_edp_dsc_sink_output_bpp() DPCD high byte usage (git-fixes).\n- drm/etnaviv: move idle mapping reaping into separate function (git-fixes).\n- drm/etnaviv: reap idle mapping if it does not match the softpin address (git-fixes).\n- drm/i915/dp_mst: Add the MST topology state for modesetted CRTCs (bsc#1213493).\n- drm/i915/fbdev: lock the fbdev obj before vma pin (git-fixes).\n- drm/i915/gt: Cleanup partial engine discovery failures (git-fixes).\n- drm/i915/guc: Add error-capture init warnings when needed (git-fixes).\n- drm/i915/guc: Fix missing ecodes (git-fixes).\n- drm/i915/guc: Limit scheduling properties to avoid overflow (git-fixes).\n- drm/i915/guc: Rename GuC register state capture node to be more obvious (git-fixes).\n- drm/i915/mtl: update scaler source and destination limits for MTL (git-fixes).\n- drm/i915/sdvo: Grab mode_config.mutex during LVDS init to avoid WARNs (git-fixes).\n- drm/i915/sseu: fix max_subslices array-index-out-of-bounds access (git-fixes).\n- drm/i915/tc: Fix TC port link ref init for DP MST during HW readout (git-fixes).\n- drm/i915: Allow panel fixed modes to have differing sync polarities (git-fixes).\n- drm/i915: Check pipe source size when using skl+ scalers (git-fixes).\n- drm/i915: Do panel VBT init early if the VBT declares an explicit panel type (git-fixes).\n- drm/i915: Fix TypeC mode initialization during system resume (git-fixes).\n- drm/i915: Fix a memory leak with reused mmap_offset (git-fixes).\n- drm/i915: Fix negative value passed as remaining time (git-fixes).\n- drm/i915: Fix one wrong caching mode enum usage (git-fixes).\n- drm/i915: Introduce intel_panel_init_alloc() (git-fixes).\n- drm/i915: Never return 0 if not all requests retired (git-fixes).\n- drm/i915: Populate encoder-\u003edevdata for DSI on icl+ (git-fixes).\n- drm/i915: Print return value on error (git-fixes).\n- drm/i915: Use _MMIO_PIPE() for SKL_BOTTOM_COLOR (git-fixes).\n- drm/meson: Fix return type of meson_encoder_cvbs_mode_valid() (git-fixes).\n- drm/msm/a5xx: really check for A510 in a5xx_gpu_init (git-fixes).\n- drm/msm/adreno: Simplify read64/write64 helpers (git-fixes).\n- drm/msm/adreno: fix runtime PM imbalance at unbind (git-fixes).\n- drm/msm/disp/dpu: get timing engine status from intf status register (git-fixes).\n- drm/msm/dpu: Add DSC hardware blocks to register snapshot (git-fixes).\n- drm/msm/dpu: Assign missing writeback log_mask (git-fixes).\n- drm/msm/dpu: Set DPU_DATA_HCTL_EN for in INTF_SC7180_MASK (git-fixes).\n- drm/msm/dpu: clean up dpu_kms_get_clk_rate() returns (git-fixes).\n- drm/msm/dpu: set DSC flush bit correctly at MDP CTL flush register (git-fixes).\n- drm/msm/hdmi: use devres helper for runtime PM management (git-fixes).\n- drm/panel: boe-tv101wum-nl6: Ensure DSI writes succeed during disable (git-fixes).\n- drm/panel: simple: Add Powertip PH800480T013 drm_display_mode flags (git-fixes).\n- drm/panel: simple: Add connector_type for innolux_at043tn24 (git-fixes).\n- drm/rockchip: dw_hdmi: cleanup drm encoder during unbind (git-fixes).\n- drm/ttm: Do not leak a resource on swapout move error (git-fixes).\n- drm/virtio: Fix memory leak in virtio_gpu_object_create() (git-fixes).\n- drm/virtio: Simplify error handling of virtio_gpu_object_create() (git-fixes).\n- drm/vmwgfx: Refactor resource manager's hashtable to use linux/hashtable implementation (git-fixes).\n- drm/vmwgfx: Refactor resource validation hashtable to use linux/hashtable implementation (git-fixes).\n- drm/vmwgfx: Refactor ttm reference object hashtable to use linux/hashtable (git-fixes).\n- drm/vmwgfx: Remove ttm object hashtable (git-fixes).\n- drm/vmwgfx: Remove vmwgfx_hashtab (git-fixes).\n- drm/vmwgfx: Write the driver id registers (git-fixes).\n- drm: Add fixed-point helper to get rounded integer values (git-fixes).\n- drm: Add missing DP DSC extended capability definitions (git-fixes).\n- drm: Optimize drm buddy top-down allocation method (git-fixes).\n- drm: buddy_allocator: Fix buddy allocator init on 32-bit systems (git-fixes).\n- drm: panel-orientation-quirks: Add quirk for DynaBook K50 (git-fixes).\n- drm: rcar-du: Add quirk for H3 ES1.x pclk workaround (git-fixes).\n- drm: rcar-du: Fix setting a reserved bit in DPLLCR (git-fixes).\n- drm: use mgr-\u003edev in drm_dbg_kms in drm_dp_add_payload_part2 (git-fixes).\n- fuse: ioctl: translate ENOSYS in outarg (bsc#1213524).\n- fuse: revalidate: do not invalidate if interrupted (bsc#1213523).\n- i2c: tegra: Set ACPI node as primary fwnode (bsc#1213226).\n- irqchip/gic-v3: Claim iomem resources (bsc#1213533)\n- irqchip/gicv3: Handle resource request failure consistently (bsc#1213533)\n- irqchip/gicv3: Workaround for NVIDIA erratum T241-FABRIC-4 (bsc#1213533)\n- kABI: do not check external trampolines for signature (kabi bsc#1207894 bsc#1211243).\n- kabi/severities: Add VAS symbols changed due to recent fix VAS accelerators are directly tied to the architecture, there is no reason to have out-of-tree production drivers\n- kabi/severities: ignore kABI of i915 module It's exported only for its sub-module, not really used by externals\n- kabi/severities: ignore kABI of vmwgfx The driver exports a function unnecessarily without used by anyone else. Ignore the kABI changes.\n- memcg: drop kmem.limit_in_bytes (bsc#1208788, bsc#1212905).\n- net: mana: Add support for vlan tagging (bsc#1212301).\n- net: phy: prevent stale pointer dereference in phy_init() (git-fixes).\n- net: qrtr: Fix an uninit variable access bug in qrtr_tx_resume() (git-fixes).\n- net: qrtr: start MHI channel after endpoit creation (git-fixes).\n- nilfs2: reject devices with insufficient block count (git-fixes).\n- ocfs2: Switch to security_inode_init_security() (git-fixes).\n- ocfs2: check new file size on fallocate call (git-fixes).\n- ocfs2: fix use-after-free when unmounting read-only filesystem (git-fixes).\n- perf/x86/amd/core: Always clear status for idx (bsc#1213233).\n- pie: fix kernel-doc notation warning (git-fixes).\n- powerpc/64: Only WARN if __pa()/__va() called with bad addresses (bsc#1194869).\n- powerpc/64s: Fix VAS mm use after free (bsc#1194869).\n- powerpc/book3s64/mm: Fix DirectMap stats in /proc/meminfo (bsc#1194869).\n- powerpc/bpf: Fix use of user_pt_regs in uapi (bsc#1194869).\n- powerpc/ftrace: Remove ftrace init tramp once kernel init is complete (bsc#1194869).\n- powerpc/interrupt: Do not read MSR from interrupt_exit_kernel_prepare() (bsc#1194869).\n- powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (bsc#1150305 ltc#176097 git-fixes).\n- powerpc/mm: Switch obsolete dssall to .long (bsc#1194869).\n- powerpc/powernv/sriov: perform null check on iov before dereferencing iov (bsc#1194869).\n- powerpc/powernv/vas: Assign real address to rx_fifo in vas_rx_win_attr (bsc#1194869).\n- powerpc/prom_init: Fix kernel config grep (bsc#1194869).\n- powerpc/pseries/vas: Hold mmap_mutex after mmap lock during window close (jsc#PED-542 git-fixes).\n- powerpc/secvar: fix refcount leak in format_show() (bsc#1194869).\n- powerpc/xics: fix refcount leak in icp_opal_init() (bsc#1194869).\n- powerpc: clean vdso32 and vdso64 directories (bsc#1194869).\n- powerpc: define get_cycles macro for arch-override (bsc#1194869).\n- powerpc: update ppc_save_regs to save current r1 in pt_regs (bsc#1194869).\n- rpm/check-for-config-changes: ignore also RISCV_ISA_* and DYNAMIC_SIGFRAME They depend on CONFIG_TOOLCHAIN_HAS_*.\n- rsi: remove kernel-doc comment marker (git-fixes).\n- s390/ap: fix status returned by ap_aqic() (git-fixes bsc#1213259).\n- s390/ap: fix status returned by ap_qact() (git-fixes bsc#1213258).\n- s390/debug: add _ASM_S390_ prefix to header guard (git-fixes bsc#1213263).\n- s390/pci: clean up left over special treatment for function zero (bsc#1212525).\n- s390/pci: only add specific device in zpci_bus_scan_device() (bsc#1212525).\n- s390/pci: remove redundant pci_bus_add_devices() on new bus (bsc#1212525).\n- s390/percpu: add READ_ONCE() to arch_this_cpu_to_op_simple() (git-fixes bsc#1213252).\n- s390: define RUNTIME_DISCARD_EXIT to fix link error with GNU ld \u0026lt; 2.36 (git-fixes bsc#1213264).\n- s390: discard .interp section (git-fixes bsc#1213247).\n- security: keys: Modify mismatched function name (git-fixes).\n- selftests/ir: fix build with ancient kernel headers (git-fixes).\n- selftests: cgroup: fix unsigned comparison with less than zero (git-fixes).\n- selftests: forwarding: Fix packet matching in mirroring selftests (git-fixes).\n- selftests: tc: add 'ct' action kconfig dep (git-fixes).\n- selftests: tc: add ConnTrack procfs kconfig (git-fixes).\n- selftests: tc: set timeout to 15 minutes (git-fixes).\n- signal/powerpc: On swapcontext failure force SIGSEGV (bsc#1194869).\n- signal: Replace force_sigsegv(SIGSEGV) with force_fatal_sig(SIGSEGV) (bsc#1194869).\n- smb3: do not reserve too many oplock credits (bsc#1193629).\n- smb3: missing null check in SMB2_change_notify (bsc#1193629).\n- smb: client: fix broken file attrs with nodfs mounts (bsc#1193629).\n- smb: client: fix missed ses refcounting (git-fixes).\n- smb: client: fix parsing of source mount option (bsc#1193629).\n- smb: client: fix shared DFS root mounts with different prefixes (bsc#1193629).\n- smb: client: fix warning in CIFSFindFirst() (bsc#1193629).\n- smb: client: fix warning in CIFSFindNext() (bsc#1193629).\n- smb: client: fix warning in cifs_match_super() (bsc#1193629).\n- smb: client: fix warning in cifs_smb3_do_mount() (bsc#1193629).\n- smb: client: fix warning in generic_ip_connect() (bsc#1193629).\n- smb: client: improve DFS mount check (bsc#1193629).\n- smb: client: remove redundant pointer 'server' (bsc#1193629).\n- smb: delete an unnecessary statement (bsc#1193629).\n- smb: move client and server files to common directory fs/smb (bsc#1193629).\n- smb: remove obsolete comment (bsc#1193629).\n- soundwire: bus_type: Avoid lockdep assert in sdw_drv_probe() (git-fixes).\n- soundwire: cadence: Drain the RX FIFO after an IO timeout (git-fixes).\n- soundwire: stream: Add missing clear of alloc_slave_rt (git-fixes).\n- spi: bcm63xx: fix max prepend length (git-fixes).\n- swsmu/amdgpu_smu: Fix the wrong if-condition (git-fixes).\n- tpm: tpm_vtpm_proxy: fix a race condition in /dev/vtpmx creation (git-fixes).\n- wifi: airo: avoid uninitialized warning in airo_get_rate() (git-fixes).\n- wifi: ath10k: Trigger STA disconnect after reconfig complete on hardware restart (git-fixes).\n- wifi: ath11k: Add missing check for ioremap (git-fixes).\n- wifi: rtw89: debug: fix error code in rtw89_debug_priv_send_h2c_set() (git-fixes).\n- x86/amd_nb: Add PCI ID for family 19h model 78h (git-fixes).\n- x86/platform/uv: Add platform resolving #defines for misc GAM_MMIOH_REDIRECT* (bsc#1212256 jsc#PED-4718).\n- x86/platform/uv: Fix printed information in calc_mmioh_map (bsc#1212256 jsc#PED-4718).\n- x86/platform/uv: Helper functions for allocating and freeing conversion tables (bsc#1212256 jsc#PED-4718).\n- x86/platform/uv: Introduce helper function uv_pnode_to_socket (bsc#1212256 jsc#PED-4718).\n- x86/platform/uv: Remove remaining BUG_ON() and BUG() calls (bsc#1212256 jsc#PED-4718).\n- x86/platform/uv: UV support for sub-NUMA clustering (bsc#1212256 jsc#PED-4718).\n- x86/platform/uv: Update UV platform code for SNC (bsc#1212256 jsc#PED-4718).\n- x86/platform/uv: When searching for minimums, start at INT_MAX not 99999 (bsc#1212256 jsc#PED-4718).\n- x86: Fix .brk attribute in linker script (git-fixes).\n- xfs: clean up the rtbitmap fsmap backend (git-fixes).\n- xfs: do not deplete the reserve pool when trying to shrink the fs (git-fixes).\n- xfs: do not reverse order of items in bulk AIL insertion (git-fixes).\n- xfs: fix getfsmap reporting past the last rt extent (git-fixes).\n- xfs: fix integer overflows in the fsmap rtbitmap and logdev backends (git-fixes).\n- xfs: fix interval filtering in multi-step fsmap queries (git-fixes).\n- xfs: fix logdev fsmap query result filtering (git-fixes).\n- xfs: fix off-by-one error when the last rt extent is in use (git-fixes).\n- xfs: fix uninitialized variable access (git-fixes).\n- xfs: make fsmap backend function key parameters const (git-fixes).\n- xfs: make the record pointer passed to query_range functions const (git-fixes).\n- xfs: pass explicit mount pointer to rtalloc query functions (git-fixes).\n","status":"published","published":"2023-08-03T06:36:45Z","modified":"2025-05-02T04:34:27.608839Z","updated_at":"2026-11-02T15:53:53.019382Z"},{"id":"SUSE-SU-2023:3180-1","title":"Security update for the Linux Kernel","description":"\nThe SUSE Linux Enterprise 15 SP5 Azure kernel was updated to receive various security and bugfixes.\n\n\nThe following security bugs were fixed:\n\n- CVE-2023-3812: Fixed an out-of-bounds memory access flaw in the TUN/TAP device driver functionality that could allow a local user to crash or potentially escalate their privileges on the system (bsc#1213543).\n- CVE-2023-35001: Fixed an out-of-bounds memory access flaw in nft_byteorder that could allow a local attacker to escalate their privilege (bsc#1213059).\n- CVE-2023-31248: Fixed an use-after-free vulnerability in nft_chain_lookup_byid that could allow a local attacker to escalate their privilege (bsc#1213061).\n- CVE-2023-3390: Fixed an use-after-free vulnerability in the netfilter subsystem in net/netfilter/nf_tables_api.c that could allow a local attacker with user access to cause a privilege escalation issue (bsc#1212846).\n- CVE-2023-3117: Fixed an use-after-free vulnerability in the netfilter subsystem when processing named and anonymous sets in batch requests that could allow a local user with CAP_NET_ADMIN capability to crash or potentially escalate their privileges on the system (bsc#1213245).\n- CVE-2023-20593: Fixed a ZenBleed issue in 'Zen 2' CPUs that could allow an attacker to potentially access sensitive information (bsc#1213286).\n- CVE-2023-2985: Fixed an use-after-free vulnerability in hfsplus_put_super in fs/hfsplus/super.c that could allow a local user to cause a denial of service (bsc#1211867).\n\nThe following non-security bugs were fixed:\n\n- Enable NXP SNVS RTC driver for i.MX 8MQ/8MP (jsc#PED-4758).\n- Support sub-NUMA clustering on UV (jsc#PED-4718).\n- Fixed multipath not supported error (bsc#1213311).\n- Revert 'arm64: dts: zynqmp: Add address-cells property to interrupt (git-fixes)\n- Revert 'drm/i915: Disable DSB usage for now' (git-fixes).\n- acpi: Fix suspend with Xen PV (git-fixes).\n- adreno: Shutdown the GPU properly (git-fixes).\n- arm64/mm: mark private VM_FAULT_X defines as vm_fault_t (git-fixes)\n- arm64: dts: microchip: sparx5: do not use PSCI on reference boards (git-fixes)\n- arm64: vdso: Pass (void *) to virt_to_page() (git-fixes)\n- arm64: xor-neon: mark xor_arm64_neon_*() static (git-fixes)\n- asoc: Intel: sof_sdw: remove SOF_SDW_TGL_HDMI for MeteorLake devices (git-fixes).\n- asoc: SOF: topology: Fix logic for copying tuples (git-fixes).\n- bluetooth: ISO: Fix CIG auto-allocation to select configurable CIG (git-fixes).\n- bluetooth: ISO: consider right CIS when removing CIG at cleanup (git-fixes).\n- bluetooth: ISO: fix iso_conn related locking and validity issues (git-fixes).\n- bluetooth: ISO: use hci_sync for setting CIG parameters (git-fixes).\n- bluetooth: fix invalid-bdaddr quirk for non-persistent setup (git-fixes).\n- bluetooth: fix use-bdaddr-property quirk (git-fixes).\n- bluetooth: hci_bcm: do not mark valid bd_addr as invalid (git-fixes).\n- bluetooth: hci_event: call disconnect callback before deleting conn (git-fixes).\n- bluetooth: hci_sync: Avoid use-after-free in dbg for hci_remove_adv_monitor() (git-fixes).\n- bluetooth: use RCU for hci_conn_params and iterate safely in hci_sync (git-fixes).\n- can: bcm: Fix UAF in bcm_proc_show() (git-fixes).\n- ceph: add a dedicated private data for netfs rreq (bsc#1213205).\n- ceph: fix blindly expanding the readahead windows (bsc#1213206).\n- cifs: add a warning when the in-flight count goes negative (bsc#1193629).\n- cifs: address unused variable warning (bsc#1193629).\n- cifs: do all necessary checks for credits within or before locking (bsc#1193629).\n- cifs: fix lease break oops in xfstest generic/098 (bsc#1193629).\n- cifs: fix max_credits implementation (bsc#1193629).\n- cifs: fix session state check in reconnect to avoid use-after-free issue (bsc#1193629).\n- cifs: fix session state check in smb2_find_smb_ses (bsc#1193629).\n- cifs: fix session state transition to avoid use-after-free issue (bsc#1193629).\n- cifs: fix sockaddr comparison in iface_cmp (bsc#1193629).\n- cifs: fix status checks in cifs_tree_connect (bsc#1193629).\n- cifs: log session id when a matching ses is not found (bsc#1193629).\n- cifs: new dynamic tracepoint to track ses not found errors (bsc#1193629).\n- cifs: prevent use-after-free by freeing the cfile later (bsc#1193629).\n- cifs: print all credit counters in DebugData (bsc#1193629).\n- cifs: print client_guid in DebugData (bsc#1193629).\n- cifs: print more detail when invalidate_inode_mapping fails (bsc#1193629).\n- cifs: print nosharesock value while dumping mount options (bsc#1193629).\n- codel: fix kernel-doc notation warnings (git-fixes).\n- cpufreq: tegra194: Fix module loading (git-fixes).\n- devlink: fix kernel-doc notation warnings (git-fixes).\n- dma-buf/dma-resv: Stop leaking on krealloc() failure (git-fixes).\n- drm/amd/amdgpu: introduce gc_*_mes_2.bin v2 (git-fixes).\n- drm/amd/amdgpu: limit one queue per gang (git-fixes).\n- drm/amd/amdgpu: update mes11 api def (git-fixes).\n- drm/amd/display (gcc13): fix enum mismatch (git-fixes).\n- drm/amd/display: Add Z8 allow states to z-state support list (git-fixes).\n- drm/amd/display: Add debug option to skip PSR CRTC disable (git-fixes).\n- drm/amd/display: Add minimum Z8 residency debug option (git-fixes).\n- drm/amd/display: Add missing WA and MCLK validation (git-fixes).\n- drm/amd/display: Change default Z8 watermark values (git-fixes).\n- drm/amd/display: Correct DML calculation to align HW formula (git-fixes).\n- drm/amd/display: Correct DML calculation to follow HW SPEC (git-fixes).\n- drm/amd/display: Do not update DRR while BW optimizations pending (git-fixes).\n- drm/amd/display: Enable HostVM based on rIOMMU active (git-fixes).\n- drm/amd/display: Enforce 60us prefetch for 200Mhz DCFCLK modes (git-fixes).\n- drm/amd/display: Ensure vmin and vmax adjust for DCE (git-fixes).\n- drm/amd/display: Fix 4to1 MPC black screen with DPP RCO (git-fixes).\n- drm/amd/display: Fix Z8 support configurations (git-fixes).\n- drm/amd/display: Fix a test CalculatePrefetchSchedule() (git-fixes).\n- drm/amd/display: Fix a test dml32_rq_dlg_get_rq_reg() (git-fixes).\n- drm/amd/display: Have Payload Properly Created After Resume (git-fixes).\n- drm/amd/display: Lowering min Z8 residency time (git-fixes).\n- drm/amd/display: Reduce sdp bw after urgent to 90% (git-fixes).\n- drm/amd/display: Refactor eDP PSR codes (git-fixes).\n- drm/amd/display: Remove FPU guards from the DML folder (git-fixes).\n- drm/amd/display: Remove optimization for VRR updates (git-fixes).\n- drm/amd/display: Remove stutter only configurations (git-fixes).\n- drm/amd/display: Update Z8 SR exit/enter latencies (git-fixes).\n- drm/amd/display: Update Z8 watermarks for DCN314 (git-fixes).\n- drm/amd/display: Update minimum stutter residency for DCN314 Z8 (git-fixes).\n- drm/amd/display: filter out invalid bits in pipe_fuses (git-fixes).\n- drm/amd/display: fix PSR-SU/DSC interoperability support (git-fixes).\n- drm/amd/display: fix a divided-by-zero error (git-fixes).\n- drm/amd/display: fixed dcn30+ underflow issue (git-fixes).\n- drm/amd/display: limit timing for single dimm memory (git-fixes).\n- drm/amd/display: populate subvp cmd info only for the top pipe (git-fixes).\n- drm/amd/display: set dcn315 lb bpp to 48 (git-fixes).\n- drm/amd/pm: add missing NotifyPowerSource message mapping for SMU13.0.7 (git-fixes).\n- drm/amd/pm: avoid potential UBSAN issue on legacy asics (git-fixes).\n- drm/amd/pm: conditionally disable pcie lane switching for some sienna_cichlid SKUs (git-fixes).\n- drm/amd/pm: fix possible power mode mismatch between driver and PMFW (git-fixes).\n- drm/amd/pm: resolve reboot exception for si oland (git-fixes).\n- drm/amd/pm: reverse mclk and fclk clocks levels for SMU v13.0.4 (git-fixes).\n- drm/amd/pm: reverse mclk clocks levels for SMU v13.0.5 (git-fixes).\n- drm/amd/pm: workaround for compute workload type on some skus (git-fixes).\n- drm/amd: Add a new helper for loading/validating microcode (git-fixes).\n- drm/amd: Do not allow s0ix on APUs older than Raven (git-fixes).\n- drm/amd: Load MES microcode during early_init (git-fixes).\n- drm/amd: Use `amdgpu_ucode_*` helpers for MES (git-fixes).\n- drm/amdgpu/gfx11: Adjust gfxoff before powergating on gfx11 as well (git-fixes).\n- drm/amdgpu/gfx11: update gpu_clock_counter logic (git-fixes).\n- drm/amdgpu/gfx: set cg flags to enter/exit safe mode (git-fixes).\n- drm/amdgpu/gmc11: implement get_vbios_fb_size() (git-fixes).\n- drm/amdgpu/jpeg: Remove harvest checking for JPEG3 (git-fixes).\n- drm/amdgpu/mes11: enable reg active poll (git-fixes).\n- drm/amdgpu/vcn: Disable indirect SRAM on Vangogh broken BIOSes (git-fixes).\n- drm/amdgpu/vkms: relax timer deactivation by hrtimer_try_to_cancel (git-fixes).\n- drm/amdgpu: Do not set struct drm_driver.output_poll_changed (git-fixes).\n- drm/amdgpu: Fix desktop freezed after gpu-reset (git-fixes).\n- drm/amdgpu: Fix memcpy() in sienna_cichlid_append_powerplay_table function (git-fixes).\n- drm/amdgpu: Fix sdma v4 sw fini error (git-fixes).\n- drm/amdgpu: Fix usage of UMC fill record in RAS (git-fixes).\n- drm/amdgpu: Force signal hw_fences that are embedded in non-sched jobs (git-fixes).\n- drm/amdgpu: add mes resume when do gfx post soft reset (git-fixes).\n- drm/amdgpu: change reserved vram info print (git-fixes).\n- drm/amdgpu: declare firmware for new MES 11.0.4 (git-fixes).\n- drm/amdgpu: enable tmz by default for GC 11.0.1 (git-fixes).\n- drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v10_0_hw_fini (git-fixes).\n- drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v11_0_hw_fini (git-fixes).\n- drm/amdgpu: fix an amdgpu_irq_put() issue in gmc_v9_0_hw_fini() (git-fixes).\n- drm/amdgpu: refine get gpu clock counter method (git-fixes).\n- drm/amdgpu: remove deprecated MES version vars (git-fixes).\n- drm/amdgpu: reserve the old gc_11_0_*_mes.bin (git-fixes).\n- drm/amdgpu: set gfx9 onwards APU atomics support to be true (git-fixes).\n- drm/amdgpu: vcn_4_0 set instance 0 init sched score to 1 (git-fixes).\n- drm/bridge: anx7625: Convert to i2c's .probe_new() (git-fixes).\n- drm/bridge: anx7625: Fix refcount bug in anx7625_parse_dt() (git-fixes).\n- drm/bridge: anx7625: Prevent endless probe loop (git-fixes).\n- drm/bridge: it6505: Move a variable assignment behind a null pointer check in receive_timing_debugfs_show() (git-fixes).\n- drm/bridge: tc358767: Switch to devm MIPI-DSI helpers (git-fixes).\n- drm/bridge: tc358768: Add atomic_get_input_bus_fmts() implementation (git-fixes).\n- drm/bridge: tc358768: fix TCLK_TRAILCNT computation (git-fixes).\n- drm/bridge: tc358768: fix THS_TRAILCNT computation (git-fixes).\n- drm/bridge: tc358768: fix THS_ZEROCNT computation (git-fixes).\n- drm/bridge: ti-sn65dsi83: Fix enable error path (git-fixes).\n- drm/client: Fix memory leak in drm_client_target_cloned (git-fixes).\n- drm/display/dp_mst: Fix payload addition on a disconnected sink (git-fixes).\n- drm/display: Do not block HDR_OUTPUT_METADATA on unknown EOTF (git-fixes).\n- drm/drm_vma_manager: Add drm_vma_node_allow_once() (git-fixes).\n- drm/dsc: fix DP_DSC_MAX_BPP_DELTA_* macro values (git-fixes).\n- drm/dsc: fix drm_edp_dsc_sink_output_bpp() DPCD high byte usage (git-fixes).\n- drm/etnaviv: move idle mapping reaping into separate function (git-fixes).\n- drm/etnaviv: reap idle mapping if it does not match the softpin address (git-fixes).\n- drm/i915/dp_mst: Add the MST topology state for modesetted CRTCs (bsc#1213493).\n- drm/i915/fbdev: lock the fbdev obj before vma pin (git-fixes).\n- drm/i915/gt: Cleanup partial engine discovery failures (git-fixes).\n- drm/i915/guc: Add error-capture init warnings when needed (git-fixes).\n- drm/i915/guc: Fix missing ecodes (git-fixes).\n- drm/i915/guc: Limit scheduling properties to avoid overflow (git-fixes).\n- drm/i915/guc: Rename GuC register state capture node to be more obvious (git-fixes).\n- drm/i915/mtl: update scaler source and destination limits for MTL (git-fixes).\n- drm/i915/sdvo: Grab mode_config.mutex during LVDS init to avoid WARNs (git-fixes).\n- drm/i915/sseu: fix max_subslices array-index-out-of-bounds access (git-fixes).\n- drm/i915/tc: Fix TC port link ref init for DP MST during HW readout (git-fixes).\n- drm/i915: Allow panel fixed modes to have differing sync polarities (git-fixes).\n- drm/i915: Check pipe source size when using skl+ scalers (git-fixes).\n- drm/i915: Do panel VBT init early if the VBT declares an explicit panel type (git-fixes).\n- drm/i915: Fix TypeC mode initialization during system resume (git-fixes).\n- drm/i915: Fix a memory leak with reused mmap_offset (git-fixes).\n- drm/i915: Fix negative value passed as remaining time (git-fixes).\n- drm/i915: Fix one wrong caching mode enum usage (git-fixes).\n- drm/i915: Introduce intel_panel_init_alloc() (git-fixes).\n- drm/i915: Never return 0 if not all requests retired (git-fixes).\n- drm/i915: Populate encoder-\u003edevdata for DSI on icl+ (git-fixes).\n- drm/i915: Print return value on error (git-fixes).\n- drm/i915: Use _MMIO_PIPE() for SKL_BOTTOM_COLOR (git-fixes).\n- drm/meson: Fix return type of meson_encoder_cvbs_mode_valid() (git-fixes).\n- drm/msm/a5xx: really check for A510 in a5xx_gpu_init (git-fixes).\n- drm/msm/adreno: Simplify read64/write64 helpers (git-fixes).\n- drm/msm/adreno: fix runtime PM imbalance at unbind (git-fixes).\n- drm/msm/disp/dpu: get timing engine status from intf status register (git-fixes).\n- drm/msm/dpu: Add DSC hardware blocks to register snapshot (git-fixes).\n- drm/msm/dpu: Assign missing writeback log_mask (git-fixes).\n- drm/msm/dpu: Set DPU_DATA_HCTL_EN for in INTF_SC7180_MASK (git-fixes).\n- drm/msm/dpu: clean up dpu_kms_get_clk_rate() returns (git-fixes).\n- drm/msm/dpu: set DSC flush bit correctly at MDP CTL flush register (git-fixes).\n- drm/msm/hdmi: use devres helper for runtime PM management (git-fixes).\n- drm/panel: boe-tv101wum-nl6: Ensure DSI writes succeed during disable (git-fixes).\n- drm/panel: simple: Add Powertip PH800480T013 drm_display_mode flags (git-fixes).\n- drm/panel: simple: Add connector_type for innolux_at043tn24 (git-fixes).\n- drm/rockchip: dw_hdmi: cleanup drm encoder during unbind (git-fixes).\n- drm/ttm: Do not leak a resource on swapout move error (git-fixes).\n- drm/virtio: Fix memory leak in virtio_gpu_object_create() (git-fixes).\n- drm/virtio: Simplify error handling of virtio_gpu_object_create() (git-fixes).\n- drm/vmwgfx: Refactor resource manager's hashtable to use linux/hashtable implementation (git-fixes).\n- drm/vmwgfx: Refactor resource validation hashtable to use linux/hashtable implementation (git-fixes).\n- drm/vmwgfx: Refactor ttm reference object hashtable to use linux/hashtable (git-fixes).\n- drm/vmwgfx: Remove ttm object hashtable (git-fixes).\n- drm/vmwgfx: Remove vmwgfx_hashtab (git-fixes).\n- drm/vmwgfx: Write the driver id registers (git-fixes).\n- drm: Add fixed-point helper to get rounded integer values (git-fixes).\n- drm: Add missing DP DSC extended capability definitions (git-fixes).\n- drm: Optimize drm buddy top-down allocation method (git-fixes).\n- drm: buddy_allocator: Fix buddy allocator init on 32-bit systems (git-fixes).\n- drm: panel-orientation-quirks: Add quirk for DynaBook K50 (git-fixes).\n- drm: rcar-du: Add quirk for H3 ES1.x pclk workaround (git-fixes).\n- drm: rcar-du: Fix setting a reserved bit in DPLLCR (git-fixes).\n- drm: use mgr-\u003edev in drm_dbg_kms in drm_dp_add_payload_part2 (git-fixes).\n- fuse: ioctl: translate ENOSYS in outarg (bsc#1213524).\n- fuse: revalidate: do not invalidate if interrupted (bsc#1213523).\n- i2c: tegra: Set ACPI node as primary fwnode (bsc#1213226).\n- irqchip/gic-v3: Claim iomem resources (bsc#1213533)\n- irqchip/gicv3: Handle resource request failure consistently (bsc#1213533)\n- irqchip/gicv3: Workaround for NVIDIA erratum T241-FABRIC-4 (bsc#1213533)\n- kABI: do not check external trampolines for signature (kabi bsc#1207894 bsc#1211243).\n- kabi/severities: Add VAS symbols changed due to recent fix VAS accelerators are directly tied to the architecture, there is no reason to have out-of-tree production drivers\n- kabi/severities: ignore kABI of i915 module It's exported only for its sub-module, not really used by externals\n- kabi/severities: ignore kABI of vmwgfx The driver exports a function unnecessarily without used by anyone else. Ignore the kABI changes.\n- memcg: drop kmem.limit_in_bytes (bsc#1208788, bsc#1212905).\n- net: mana: Add support for vlan tagging (bsc#1212301).\n- net: phy: prevent stale pointer dereference in phy_init() (git-fixes).\n- net: qrtr: Fix an uninit variable access bug in qrtr_tx_resume() (git-fixes).\n- net: qrtr: start MHI channel after endpoit creation (git-fixes).\n- nilfs2: reject devices with insufficient block count (git-fixes).\n- ocfs2: Switch to security_inode_init_security() (git-fixes).\n- ocfs2: check new file size on fallocate call (git-fixes).\n- ocfs2: fix use-after-free when unmounting read-only filesystem (git-fixes).\n- pci: s390: Fix use-after-free of PCI resources with per-function hotplug (bsc#1212525).\n- pci: vmd: Fix uninitialized variable usage in vmd_enable_domain() (git-fixes).\n- perf/x86/amd/core: Always clear status for idx (bsc#1213233).\n- pie: fix kernel-doc notation warning (git-fixes).\n- powerpc/64: Only WARN if __pa()/__va() called with bad addresses (bsc#1194869).\n- powerpc/64s: Fix VAS mm use after free (bsc#1194869).\n- powerpc/book3s64/mm: Fix DirectMap stats in /proc/meminfo (bsc#1194869).\n- powerpc/bpf: Fix use of user_pt_regs in uapi (bsc#1194869).\n- powerpc/ftrace: Remove ftrace init tramp once kernel init is complete (bsc#1194869).\n- powerpc/interrupt: Do not read MSR from interrupt_exit_kernel_prepare() (bsc#1194869).\n- powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (bsc#1150305 ltc#176097 git-fixes).\n- powerpc/mm: Switch obsolete dssall to .long (bsc#1194869).\n- powerpc/powernv/sriov: perform null check on iov before dereferencing iov (bsc#1194869).\n- powerpc/powernv/vas: Assign real address to rx_fifo in vas_rx_win_attr (bsc#1194869).\n- powerpc/prom_init: Fix kernel config grep (bsc#1194869).\n- powerpc/pseries/vas: Hold mmap_mutex after mmap lock during window close (jsc#PED-542 git-fixes).\n- powerpc/secvar: fix refcount leak in format_show() (bsc#1194869).\n- powerpc/xics: fix refcount leak in icp_opal_init() (bsc#1194869).\n- powerpc: clean vdso32 and vdso64 directories (bsc#1194869).\n- powerpc: define get_cycles macro for arch-override (bsc#1194869).\n- powerpc: update ppc_save_regs to save current r1 in pt_regs (bsc#1194869).\n- rpm/check-for-config-changes: ignore also RISCV_ISA_* and DYNAMIC_SIGFRAME They depend on CONFIG_TOOLCHAIN_HAS_*.\n- rsi: remove kernel-doc comment marker (git-fixes).\n- s390/ap: fix status returned by ap_aqic() (git-fixes bsc#1213259).\n- s390/ap: fix status returned by ap_qact() (git-fixes bsc#1213258).\n- s390/debug: add _ASM_S390_ prefix to header guard (git-fixes bsc#1213263).\n- s390/pci: clean up left over special treatment for function zero (bsc#1212525).\n- s390/pci: only add specific device in zpci_bus_scan_device() (bsc#1212525).\n- s390/pci: remove redundant pci_bus_add_devices() on new bus (bsc#1212525).\n- s390/percpu: add READ_ONCE() to arch_this_cpu_to_op_simple() (git-fixes bsc#1213252).\n- s390: define RUNTIME_DISCARD_EXIT to fix link error with GNU ld \u0026lt; 2.36 (git-fixes bsc#1213264).\n- s390: discard .interp section (git-fixes bsc#1213247).\n- security: keys: Modify mismatched function name (git-fixes).\n- selftests/ir: fix build with ancient kernel headers (git-fixes).\n- selftests: cgroup: fix unsigned comparison with less than zero (git-fixes).\n- selftests: forwarding: Fix packet matching in mirroring selftests (git-fixes).\n- selftests: tc: add 'ct' action kconfig dep (git-fixes).\n- selftests: tc: add ConnTrack procfs kconfig (git-fixes).\n- selftests: tc: set timeout to 15 minutes (git-fixes).\n- signal/powerpc: On swapcontext failure force SIGSEGV (bsc#1194869).\n- signal: Replace force_sigsegv(SIGSEGV) with force_fatal_sig(SIGSEGV) (bsc#1194869).\n- smb3: do not reserve too many oplock credits (bsc#1193629).\n- smb3: missing null check in SMB2_change_notify (bsc#1193629).\n- smb: client: fix broken file attrs with nodfs mounts (bsc#1193629).\n- smb: client: fix missed ses refcounting (git-fixes).\n- smb: client: fix parsing of source mount option (bsc#1193629).\n- smb: client: fix shared DFS root mounts with different prefixes (bsc#1193629).\n- smb: client: fix warning in CIFSFindFirst() (bsc#1193629).\n- smb: client: fix warning in CIFSFindNext() (bsc#1193629).\n- smb: client: fix warning in cifs_match_super() (bsc#1193629).\n- smb: client: fix warning in cifs_smb3_do_mount() (bsc#1193629).\n- smb: client: fix warning in generic_ip_connect() (bsc#1193629).\n- smb: client: improve DFS mount check (bsc#1193629).\n- smb: client: remove redundant pointer 'server' (bsc#1193629).\n- smb: delete an unnecessary statement (bsc#1193629).\n- smb: move client and server files to common directory fs/smb (bsc#1193629).\n- smb: remove obsolete comment (bsc#1193629).\n- soundwire: bus_type: Avoid lockdep assert in sdw_drv_probe() (git-fixes).\n- soundwire: cadence: Drain the RX FIFO after an IO timeout (git-fixes).\n- soundwire: stream: Add missing clear of alloc_slave_rt (git-fixes).\n- spi: bcm63xx: fix max prepend length (git-fixes).\n- swsmu/amdgpu_smu: Fix the wrong if-condition (git-fixes).\n- tpm: tpm_vtpm_proxy: fix a race condition in /dev/vtpmx creation (git-fixes).\n- usb: dwc2: Fix some error handling paths (git-fixes).\n- usb: gadget: udc: core: Offload usb_udc_vbus_handler processing (git-fixes).\n- usb: gadget: udc: core: Prevent soft_connect_store() race (git-fixes).\n- usb: typec: Fix fast_role_swap_current show function (git-fixes).\n- usb: typec: Fix fast_role_swap_current show function (git-fixes).\n- wifi: airo: avoid uninitialized warning in airo_get_rate() (git-fixes).\n- wifi: ath10k: Trigger STA disconnect after reconfig complete on hardware restart (git-fixes).\n- wifi: ath11k: Add missing check for ioremap (git-fixes).\n- wifi: rtw89: debug: fix error code in rtw89_debug_priv_send_h2c_set() (git-fixes).\n- x86/amd_nb: Add PCI ID for family 19h model 78h (git-fixes).\n- x86/platform/uv: Add platform resolving #defines for misc GAM_MMIOH_REDIRECT* (bsc#1212256 jsc#PED-4718).\n- x86/platform/uv: Fix printed information in calc_mmioh_map (bsc#1212256 jsc#PED-4718).\n- x86/platform/uv: Helper functions for allocating and freeing conversion tables (bsc#1212256 jsc#PED-4718).\n- x86/platform/uv: Introduce helper function uv_pnode_to_socket (bsc#1212256 jsc#PED-4718).\n- x86/platform/uv: Remove remaining BUG_ON() and BUG() calls (bsc#1212256 jsc#PED-4718).\n- x86/platform/uv: UV support for sub-NUMA clustering (bsc#1212256 jsc#PED-4718).\n- x86/platform/uv: Update UV platform code for SNC (bsc#1212256 jsc#PED-4718).\n- x86/platform/uv: When searching for minimums, start at INT_MAX not 99999 (bsc#1212256 jsc#PED-4718).\n- x86: Fix .brk attribute in linker script (git-fixes).\n- xfs: clean up the rtbitmap fsmap backend (git-fixes).\n- xfs: do not deplete the reserve pool when trying to shrink the fs (git-fixes).\n- xfs: do not reverse order of items in bulk AIL insertion (git-fixes).\n- xfs: fix getfsmap reporting past the last rt extent (git-fixes).\n- xfs: fix integer overflows in the fsmap rtbitmap and logdev backends (git-fixes).\n- xfs: fix interval filtering in multi-step fsmap queries (git-fixes).\n- xfs: fix logdev fsmap query result filtering (git-fixes).\n- xfs: fix off-by-one error when the last rt extent is in use (git-fixes).\n- xfs: fix uninitialized variable access (git-fixes).\n- xfs: make fsmap backend function key parameters const (git-fixes).\n- xfs: make the record pointer passed to query_range functions const (git-fixes).\n- xfs: pass explicit mount pointer to rtalloc query functions (git-fixes).\n","status":"published","published":"2023-08-03T18:17:13Z","modified":"2026-02-04T03:50:08.848794Z","updated_at":"2026-11-02T15:53:53.019382Z"},{"id":"SUSE-SU-2023:3182-1","title":"Security update for the Linux Kernel","description":"\n\nThe SUSE Linux Enterprise 15 SP4 Azure kernel was updated to receive various security and bugfixes.\n\n\nThe following security bugs were fixed:\n\n- CVE-2023-3609: Fixed an use-after-free vulnerability in net/sched (bsc#1213586).\n- CVE-2023-3611: Fixed an out-of-bounds write vulnerability in net/sched (bsc#1213585).\n- CVE-2023-3812: Fixed an out-of-bounds memory access flaw in the TUN/TAP device driver functionality that could allow a local user to crash or potentially escalate their privileges on the system (bsc#1213543).\n- CVE-2023-35001: Fixed an out-of-bounds memory access flaw in nft_byteorder that could allow a local attacker to escalate their privilege (bsc#1213059).\n- CVE-2023-31248: Fixed an use-after-free vulnerability in nft_chain_lookup_byid that could allow a local attacker to escalate their privilege (bsc#1213061).\n- CVE-2023-3390: Fixed an use-after-free vulnerability in the netfilter subsystem in net/netfilter/nf_tables_api.c that could allow a local attacker with user access to cause a privilege escalation issue (bsc#1212846).\n- CVE-2023-3117: Fixed an use-after-free vulnerability in the netfilter subsystem when processing named and anonymous sets in batch requests that could allow a local user with CAP_NET_ADMIN capability to crash or potentially escalate their privileges on the system (bsc#1213245).\n- CVE-2023-20593: Fixed a ZenBleed issue in 'Zen 2' CPUs that could allow an attacker to potentially access sensitive information (bsc#1213286).\n- CVE-2023-2985: Fixed an use-after-free vulnerability in hfsplus_put_super in fs/hfsplus/super.c that could allow a local user to cause a denial of service (bsc#1211867).\n\nThe following non-security bugs were fixed:\n\n- Add MODULE_FIRMWARE() for FIRMWARE_TG357766 (git-fixes).\n- Drop patch that caused issues with k3s (bsc#1213705).\n- Enable NXP SNVS RTC driver for i.MX 8MQ/8MP (jsc#PED-4758)\n- Fix documentation of panic_on_warn (git-fixes).\n- Fixed launch issue on 15-SP5 (git-fixes, bsc#1210853).\n- Revert 'arm64: dts: zynqmp: Add address-cells property to interrupt (git-fixes)\n- Revert 'drm/amd/display: edp do not add non-edid timings' (git-fixes).\n- acpi: utils: Fix acpi_evaluate_dsm_typed() redefinition error (git-fixes).\n- alsa: fireface: make read-only const array for model names static (git-fixes).\n- alsa: hda/realtek - remove 3k pull low procedure (git-fixes).\n- alsa: hda/realtek: Add quirk for ASUS ROG G614Jx (git-fixes).\n- alsa: hda/realtek: Add quirk for ASUS ROG GA402X (git-fixes).\n- alsa: hda/realtek: Add quirk for ASUS ROG GX650P (git-fixes).\n- alsa: hda/realtek: Add quirk for ASUS ROG GZ301V (git-fixes).\n- alsa: hda/realtek: Add quirk for Clevo NPx0SNx (git-fixes).\n- alsa: hda/realtek: Add quirk for Clevo NS70AU (git-fixes).\n- alsa: hda/realtek: Add quirks for Unis H3C Desktop B760 \u0026 Q760 (git-fixes).\n- alsa: hda/realtek: Add support for DELL Oasis 13/14/16 laptops (git-fixes).\n- alsa: hda/realtek: Amend G634 quirk to enable rear speakers (git-fixes).\n- alsa: hda/realtek: Enable Mute LED on HP Laptop 15s-eq2xxx (git-fixes).\n- alsa: hda/realtek: Fix generic fixup definition for cs35l41 amp (git-fixes).\n- alsa: hda/realtek: Whitespace fix (git-fixes).\n- alsa: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync() (git-fixes).\n- alsa: oxfw: make read-only const array models static (git-fixes).\n- alsa: pcm: Fix potential data race at PCM memory allocation helpers (git-fixes).\n- apparmor: fix missing error check for rhashtable_insert_fast (git-fixes).\n- arm64/mm: mark private VM_FAULT_X defines as vm_fault_t (git-fixes)\n- arm64: dts: microchip: sparx5: do not use PSCI on reference boards (git-fixes)\n- arm64: vdso: Pass (void *) to virt_to_page() (git-fixes)\n- arm64: xor-neon: mark xor_arm64_neon_*() static (git-fixes)\n- asoc: codecs: wcd-mbhc-v2: fix resource leaks on component remove (git-fixes).\n- asoc: codecs: wcd934x: fix resource leaks on component remove (git-fixes).\n- asoc: codecs: wcd938x: fix codec initialisation race (git-fixes).\n- asoc: codecs: wcd938x: fix dB range for HPHL and HPHR (git-fixes).\n- asoc: codecs: wcd938x: fix missing clsh ctrl error handling (git-fixes).\n- asoc: codecs: wcd938x: fix soundwire initialisation race (git-fixes).\n- asoc: tegra: Fix ADX byte map (git-fixes).\n- asoc: tegra: Fix AMX byte map (git-fixes).\n- can: bcm: Fix UAF in bcm_proc_show() (git-fixes).\n- cifs: add a warning when the in-flight count goes negative (bsc#1193629).\n- cifs: address unused variable warning (bsc#1193629).\n- cifs: do all necessary checks for credits within or before locking (bsc#1193629).\n- cifs: fix lease break oops in xfstest generic/098 (bsc#1193629).\n- cifs: fix max_credits implementation (bsc#1193629).\n- cifs: fix session state check in reconnect to avoid use-after-free issue (bsc#1193629).\n- cifs: fix session state check in smb2_find_smb_ses (bsc#1193629).\n- cifs: fix session state transition to avoid use-after-free issue (bsc#1193629).\n- cifs: fix sockaddr comparison in iface_cmp (bsc#1193629).\n- cifs: fix status checks in cifs_tree_connect (bsc#1193629).\n- cifs: log session id when a matching ses is not found (bsc#1193629).\n- cifs: new dynamic tracepoint to track ses not found errors (bsc#1193629).\n- cifs: prevent use-after-free by freeing the cfile later (bsc#1193629).\n- cifs: print all credit counters in DebugData (bsc#1193629).\n- cifs: print client_guid in DebugData (bsc#1193629).\n- cifs: print more detail when invalidate_inode_mapping fails (bsc#1193629).\n- cifs: print nosharesock value while dumping mount options (bsc#1193629).\n- clk: qcom: camcc-sc7180: Add parent dependency to all camera GDSCs (git-fixes).\n- clk: qcom: gcc-ipq6018: Use floor ops for sdcc clocks (git-fixes).\n- codel: fix kernel-doc notation warnings (git-fixes).\n- crypto: kpp - Add helper to set reqsize (git-fixes).\n- crypto: qat - Use helper to set reqsize (git-fixes).\n- devlink: fix kernel-doc notation warnings (git-fixes).\n- docs: networking: Update codeaurora references for rmnet (git-fixes).\n- documentation: bonding: fix the doc of peer_notif_delay (git-fixes).\n- documentation: timers: hrtimers: Make hybrid union historical (git-fixes).\n- drm/amd/display: Correct `DMUB_FW_VERSION` macro (git-fixes).\n- drm/amdgpu: Set vmbo destroy after pt bo is created (git-fixes).\n- drm/amdgpu: Validate VM ioctl flags (git-fixes).\n- drm/amdgpu: avoid restore process run into dead loop (git-fixes).\n- drm/amdgpu: fix clearing mappings for BOs that are always valid in VM (git-fixes).\n- drm/atomic: Allow vblank-enabled + self-refresh 'disable' (git-fixes).\n- drm/atomic: Fix potential use-after-free in nonblocking commits (git-fixes).\n- drm/bridge: tc358768: Add atomic_get_input_bus_fmts() implementation (git-fixes).\n- drm/bridge: tc358768: fix TCLK_TRAILCNT computation (git-fixes).\n- drm/bridge: tc358768: fix THS_TRAILCNT computation (git-fixes).\n- drm/bridge: tc358768: fix THS_ZEROCNT computation (git-fixes).\n- drm/client: Fix memory leak in drm_client_target_cloned (git-fixes).\n- drm/i915/psr: Use hw.adjusted mode when calculating io/fast wake times (git-fixes).\n- drm/i915: Fix one wrong caching mode enum usage (git-fixes).\n- drm/msm/disp/dpu: get timing engine status from intf status register (git-fixes).\n- drm/msm/dpu: Set DPU_DATA_HCTL_EN for in INTF_SC7180_MASK (git-fixes).\n- drm/panel: simple: Add Powertip PH800480T013 drm_display_mode flags (git-fixes).\n- drm/panel: simple: Add connector_type for innolux_at043tn24 (git-fixes).\n- drm/ttm: Do not leak a resource on swapout move error (git-fixes).\n- dt-bindings: phy: brcm,brcmstb-usb-phy: Fix error in 'compatible' conditional schema (git-fixes).\n- ext4: Fix reusing stale buffer heads from last failed mounting (bsc#1213020).\n- ext4: add EA_INODE checking to ext4_iget() (bsc#1213106).\n- ext4: add ext4_sb_block_valid() refactored out of ext4_inode_block_valid() (bsc#1213088).\n- ext4: add lockdep annotations for i_data_sem for ea_inode's (bsc#1213109).\n- ext4: add strict range checks while freeing blocks (bsc#1213089).\n- ext4: avoid deadlock in fs reclaim with page writeback (bsc#1213016).\n- ext4: bail out of ext4_xattr_ibody_get() fails for any reason (bsc#1213018).\n- ext4: block range must be validated before use in ext4_mb_clear_bb() (bsc#1213090).\n- ext4: check iomap type only if ext4_iomap_begin() does not fail (bsc#1213103).\n- ext4: disallow ea_inodes with extended attributes (bsc#1213108).\n- ext4: fail ext4_iget if special inode unallocated (bsc#1213010).\n- ext4: fix WARNING in ext4_update_inline_data (bsc#1213012).\n- ext4: fix WARNING in mb_find_extent (bsc#1213099).\n- ext4: fix bug_on in __es_tree_search caused by bad quota inode (bsc#1213111).\n- ext4: fix data races when using cached status extents (bsc#1213102).\n- ext4: fix deadlock when converting an inline directory in nojournal mode (bsc#1213105).\n- ext4: fix i_disksize exceeding i_size problem in paritally written case (bsc#1213015).\n- ext4: fix lockdep warning when enabling MMP (bsc#1213100).\n- ext4: fix task hung in ext4_xattr_delete_inode (bsc#1213096).\n- ext4: fix to check return value of freeze_bdev() in ext4_shutdown() (bsc#1213021).\n- ext4: fix use-after-free read in ext4_find_extent for bigalloc + inline (bsc#1213098).\n- ext4: improve error handling from ext4_dirhash() (bsc#1213104).\n- ext4: improve error recovery code paths in __ext4_remount() (bsc#1213017).\n- ext4: move where set the MAY_INLINE_DATA flag is set (bsc#1213011).\n- ext4: only update i_reserved_data_blocks on successful block allocation (bsc#1213019).\n- ext4: refactor ext4_free_blocks() to pull out ext4_mb_clear_bb() (bsc#1213087).\n- ext4: refuse to create ea block when umounted (bsc#1213093).\n- ext4: set lockdep subclass for the ea_inode in ext4_xattr_inode_cache_find() (bsc#1213107).\n- ext4: turn quotas off if mount failed after enabling quotas (bsc#1213110).\n- ext4: update s_journal_inum if it changes after journal replay (bsc#1213094).\n- ext4: use ext4_fc_tl_mem in fast-commit replay path (bsc#1213092).\n- ext4: zero i_disksize when initializing the bootloader inode (bsc#1213013).\n- fbdev: au1200fb: Fix missing IRQ check in au1200fb_drv_probe (git-fixes).\n- fbdev: imxfb: warn about invalid left/right margin (git-fixes).\n- fuse: ioctl: translate ENOSYS in outarg (bsc#1213524).\n- fuse: revalidate: do not invalidate if interrupted (bsc#1213523).\n- hvcs: Fix hvcs port reference counting (bsc#1213134 ltc#202861).\n- hvcs: Get reference to tty in remove (bsc#1213134 ltc#202861).\n- hvcs: Synchronize hotplug remove with port free (bsc#1213134 ltc#202861).\n- hvcs: Use dev_groups to manage hvcs device attributes (bsc#1213134 ltc#202861).\n- hvcs: Use driver groups to manage driver attributes (bsc#1213134 ltc#202861).\n- hvcs: Use vhangup in hotplug remove (bsc#1213134 ltc#202861).\n- hwmon: (adm1275) Allow setting sample averaging (git-fixes).\n- hwmon: (pmbus/adm1275) Fix problems with temperature monitoring on ADM1272 (git-fixes).\n- i2c: xiic: Defer xiic_wakeup() and __xiic_start_xfer() in xiic_process() (git-fixes).\n- i2c: xiic: Do not try to handle more interrupt events after error (git-fixes).\n- ib/hfi1: Use bitmap_zalloc() when applicable (git-fixes)\n- inotify: Avoid reporting event with invalid wd (bsc#1213025).\n- jbd2: fix data missing when reusing bh which is ready to be checkpointed (bsc#1213095).\n- jdb2: Do not refuse invalidation of already invalidated buffers (bsc#1213014).\n- kABI: do not check external trampolines for signature (kabi bsc#1207894 bsc#1211243).\n- kabi/severities: Add VAS symbols changed due to recent fix VAS accelerators are directly tied to the architecture, there is no reason to have out-of-tree production drivers\n- kselftest: vDSO: Fix accumulation of uninitialized ret when CLOCK_REALTIME is undefined (git-fixes).\n- leds: trigger: netdev: Recheck NETDEV_LED_MODE_LINKUP on dev rename (git-fixes).\n- media: atomisp: gmin_platform: fix out_len in gmin_get_config_dsm_var() (git-fixes).\n- media: cec: i2c: ch7322: also select REGMAP (git-fixes).\n- media: i2c: Correct format propagation for st-mipid02 (git-fixes).\n- media: usb: Check az6007_read() return value (git-fixes).\n- media: usb: siano: Fix warning due to null work_func_t function pointer (git-fixes).\n- media: venus: helpers: Fix ALIGN() of non power of two (git-fixes).\n- media: videodev2.h: Fix struct v4l2_input tuner index comment (git-fixes).\n- memcg: drop kmem.limit_in_bytes (bsc#1208788, bsc#1212905).\n- mmc: core: disable TRIM on Kingston EMMC04G-M627 (git-fixes).\n- mmc: sdhci: fix DMA configure compatibility issue when 64bit DMA mode is used (git-fixes).\n- net/sched: sch_qfq: refactor parsing of netlink parameters (bsc#1213585).\n- net/sched: sch_qfq: reintroduce lmax bound check for MTU (bsc#1213585).\n- net: mana: Add support for vlan tagging (bsc#1212301).\n- net: phy: prevent stale pointer dereference in phy_init() (git-fixes).\n- ntb: amd: Fix error handling in amd_ntb_pci_driver_init() (git-fixes).\n- ntb: idt: Fix error handling in idt_pci_driver_init() (git-fixes).\n- ntb: intel: Fix error handling in intel_ntb_pci_driver_init() (git-fixes).\n- ntb: ntb_tool: Add check for devm_kcalloc (git-fixes).\n- ntb: ntb_transport: fix possible memory leak while device_register() fails (git-fixes).\n- nvme-multipath: support io stats on the mpath device (bsc#1210565).\n- nvme: introduce nvme_start_request (bsc#1210565).\n- ocfs2: Switch to security_inode_init_security() (git-fixes).\n- ocfs2: check new file size on fallocate call (git-fixes).\n- ocfs2: fix use-after-free when unmounting read-only filesystem (git-fixes).\n- opp: Fix use-after-free in lazy_opp_tables after probe deferral (git-fixes).\n- pci/pm: Avoid putting EloPOS E2/S2/H2 PCIe Ports in D3cold (git-fixes).\n- pci: Add function 1 DMA alias quirk for Marvell 88SE9235 (git-fixes).\n- phy: Revert 'phy: Remove SOC_EXYNOS4212 dep. from PHY_EXYNOS4X12_USB' (git-fixes).\n- phy: tegra: xusb: Clear the driver reference in usb-phy dev (git-fixes).\n- phy: tegra: xusb: check return value of devm_kzalloc() (git-fixes).\n- pie: fix kernel-doc notation warning (git-fixes).\n- pinctrl: amd: Detect internal GPIO0 debounce handling (git-fixes).\n- pinctrl: amd: Fix mistake in handling clearing pins at startup (git-fixes).\n- pinctrl: amd: Only use special debounce behavior for GPIO 0 (git-fixes).\n- powerpc/64: Only WARN if __pa()/__va() called with bad addresses (bsc#1194869).\n- powerpc/64s: Fix VAS mm use after free (bsc#1194869).\n- powerpc/book3s64/mm: Fix DirectMap stats in /proc/meminfo (bsc#1194869).\n- powerpc/bpf: Fix use of user_pt_regs in uapi (bsc#1194869).\n- powerpc/ftrace: Remove ftrace init tramp once kernel init is complete (bsc#1194869).\n- powerpc/interrupt: Do not read MSR from interrupt_exit_kernel_prepare() (bsc#1194869).\n- powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (bsc#1150305 ltc#176097 git-fixes).\n- powerpc/mm: Switch obsolete dssall to .long (bsc#1194869).\n- powerpc/powernv/sriov: perform null check on iov before dereferencing iov (bsc#1194869).\n- powerpc/powernv/vas: Assign real address to rx_fifo in vas_rx_win_attr (bsc#1194869).\n- powerpc/prom_init: Fix kernel config grep (bsc#1194869).\n- powerpc/secvar: fix refcount leak in format_show() (bsc#1194869).\n- powerpc/xics: fix refcount leak in icp_opal_init() (bsc#1194869).\n- powerpc: clean vdso32 and vdso64 directories (bsc#1194869).\n- powerpc: define get_cycles macro for arch-override (bsc#1194869).\n- powerpc: update ppc_save_regs to save current r1 in pt_regs (bsc#1194869).\n- pwm: ab8500: Fix error code in probe() (git-fixes).\n- pwm: imx-tpm: force 'real_period' to be zero in suspend (git-fixes).\n- pwm: sysfs: Do not apply state to already disabled PWMs (git-fixes).\n- rdma/rxe: Fix access checks in rxe_check_bind_mw (git-fixes)\n- rpm/check-for-config-changes: ignore also RISCV_ISA_* and DYNAMIC_SIGFRAME They depend on CONFIG_TOOLCHAIN_HAS_*.\n- rsi: remove kernel-doc comment marker (git-fixes).\n- s390/ap: fix status returned by ap_aqic() (git-fixes bsc#1213259).\n- s390/ap: fix status returned by ap_qact() (git-fixes bsc#1213258).\n- s390/debug: add _ASM_S390_ prefix to header guard (git-fixes bsc#1213263).\n- s390/percpu: add READ_ONCE() to arch_this_cpu_to_op_simple() (git-fixes bsc#1213252).\n- s390: define RUNTIME_DISCARD_EXIT to fix link error with GNU ld \u0026lt; 2.36 (git-fixes bsc#1213264).\n- s390: discard .interp section (git-fixes bsc#1213247).\n- sched/debug: fix dentry leak in update_sched_domain_debugfs (git-fixes)\n- sched: Fix DEBUG \u0026\u0026 !SCHEDSTATS warn (git-fixes)\n- security: keys: Modify mismatched function name (git-fixes).\n- selftests: mptcp: depend on SYN_COOKIES (git-fixes).\n- selftests: mptcp: sockopt: return error if wrong mark (git-fixes).\n- selftests: rtnetlink: remove netdevsim device after ipsec offload test (git-fixes).\n- selftests: tc: add 'ct' action kconfig dep (git-fixes).\n- selftests: tc: add ConnTrack procfs kconfig (git-fixes).\n- selftests: tc: set timeout to 15 minutes (git-fixes).\n- signal/powerpc: On swapcontext failure force SIGSEGV (bsc#1194869).\n- signal: Replace force_sigsegv(SIGSEGV) with force_fatal_sig(SIGSEGV) (bsc#1194869).\n- smb3: do not reserve too many oplock credits (bsc#1193629).\n- smb3: missing null check in SMB2_change_notify (bsc#1193629).\n- smb: client: fix broken file attrs with nodfs mounts (bsc#1193629).\n- smb: client: fix missed ses refcounting (git-fixes).\n- smb: client: fix parsing of source mount option (bsc#1193629).\n- smb: client: fix shared DFS root mounts with different prefixes (bsc#1193629).\n- smb: client: fix warning in CIFSFindFirst() (bsc#1193629).\n- smb: client: fix warning in CIFSFindNext() (bsc#1193629).\n- smb: client: fix warning in cifs_match_super() (bsc#1193629).\n- smb: client: fix warning in cifs_smb3_do_mount() (bsc#1193629).\n- smb: client: fix warning in generic_ip_connect() (bsc#1193629).\n- smb: client: improve DFS mount check (bsc#1193629).\n- smb: client: remove redundant pointer 'server' (bsc#1193629).\n- smb: delete an unnecessary statement (bsc#1193629).\n- smb: move client and server files to common directory fs/smb (bsc#1193629).\n- smb: remove obsolete comment (bsc#1193629).\n- soundwire: qcom: fix storing port config out-of-bounds (git-fixes).\n- spi: bcm-qspi: return error if neither hif_mspi nor mspi is available (git-fixes).\n- spi: bcm63xx: fix max prepend length (git-fixes).\n- tpm: tpm_vtpm_proxy: fix a race condition in /dev/vtpmx creation (git-fixes).\n- tty: serial: fsl_lpuart: add earlycon for imx8ulp platform (git-fixes).\n- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size (bsc#1210584).\n- ubi: ensure that VID header offset + VID header size \u0026lt;= alloc, size (bsc#1210584).\n- udf: Avoid double brelse() in udf_rename() (bsc#1213032).\n- udf: Define EFSCORRUPTED error code (bsc#1213038).\n- udf: Detect system inodes linked into directory hierarchy (bsc#1213114).\n- udf: Discard preallocation before extending file with a hole (bsc#1213036).\n- udf: Do not bother looking for prealloc extents if i_lenExtents matches i_size (bsc#1213035).\n- udf: Do not bother merging very long extents (bsc#1213040).\n- udf: Do not update file length for failed writes to inline files (bsc#1213041).\n- udf: Fix error handling in udf_new_inode() (bsc#1213112).\n- udf: Fix extending file within last block (bsc#1213037).\n- udf: Fix preallocation discarding at indirect extent boundary (bsc#1213034).\n- udf: Preserve link count of system files (bsc#1213113).\n- udf: Truncate added extents on failed expansion (bsc#1213039).\n- usb: dwc2: Fix some error handling paths (git-fixes).\n- usb: dwc2: platform: Improve error reporting for problems during .remove() (git-fixes).\n- usb: gadget: udc: core: Offload usb_udc_vbus_handler processing (git-fixes).\n- usb: gadget: udc: core: Prevent soft_connect_store() race (git-fixes).\n- usb: serial: option: add LARA-R6 01B PIDs (git-fixes).\n- wifi: airo: avoid uninitialized warning in airo_get_rate() (git-fixes).\n- wifi: ray_cs: Drop useless status variable in parse_addr() (git-fixes).\n- wifi: ray_cs: Utilize strnlen() in parse_addr() (git-fixes).\n- wifi: rtw89: debug: fix error code in rtw89_debug_priv_send_h2c_set() (git-fixes).\n- wl3501_cs: use eth_hw_addr_set() (git-fixes).\n- writeback: fix call of incorrect macro (bsc#1213024).\n- x86: Fix .brk attribute in linker script (git-fixes).\n- xfs: AIL needs asynchronous CIL forcing (bsc#1211811).\n- xfs: CIL work is serialised, not pipelined (bsc#1211811).\n- xfs: XLOG_STATE_IOERROR must die (bsc#1211811).\n- xfs: async CIL flushes need pending pushes to be made stable (bsc#1211811).\n- xfs: attach iclog callbacks in xlog_cil_set_ctx_write_state() (bsc#1211811).\n- xfs: clean up the rtbitmap fsmap backend (git-fixes).\n- xfs: do not deplete the reserve pool when trying to shrink the fs (git-fixes).\n- xfs: do not reverse order of items in bulk AIL insertion (git-fixes).\n- xfs: do not run shutdown callbacks on active iclogs (bsc#1211811).\n- xfs: drop async cache flushes from CIL commits (bsc#1211811).\n- xfs: factor out log write ordering from xlog_cil_push_work() (bsc#1211811).\n- xfs: fix getfsmap reporting past the last rt extent (git-fixes).\n- xfs: fix integer overflows in the fsmap rtbitmap and logdev backends (git-fixes).\n- xfs: fix interval filtering in multi-step fsmap queries (git-fixes).\n- xfs: fix logdev fsmap query result filtering (git-fixes).\n- xfs: fix off-by-one error when the last rt extent is in use (git-fixes).\n- xfs: fix uninitialized variable access (git-fixes).\n- xfs: make fsmap backend function key parameters const (git-fixes).\n- xfs: make the record pointer passed to query_range functions const (git-fixes).\n- xfs: move the CIL workqueue to the CIL (bsc#1211811).\n- xfs: move xlog_commit_record to xfs_log_cil.c (bsc#1211811).\n- xfs: order CIL checkpoint start records (bsc#1211811).\n- xfs: pass a CIL context to xlog_write() (bsc#1211811).\n- xfs: pass explicit mount pointer to rtalloc query functions (git-fixes).\n- xfs: rework xlog_state_do_callback() (bsc#1211811).\n- xfs: run callbacks before waking waiters in xlog_state_shutdown_callbacks (bsc#1211811).\n- xfs: separate out log shutdown callback processing (bsc#1211811).\n- xfs: wait iclog complete before tearing down AIL (bsc#1211811).\n- xhci: Fix TRB prefetch issue of ZHAOXIN hosts (git-fixes).\n- xhci: Fix resume issue of some ZHAOXIN hosts (git-fixes).\n- xhci: Show ZHAOXIN xHCI root hub speed correctly (git-fixes).\n","status":"published","published":"2023-08-03T19:41:42Z","modified":"2026-02-04T03:24:14.317881Z","updated_at":"2026-11-02T15:53:53.019382Z"},{"id":"SUSE-SU-2023:3302-1","title":"Security update for the Linux Kernel","description":"\n\nThe SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security and bugfixes.\n\n\nThe following security bugs were fixed:\n\n- CVE-2022-40982: Fixed transient execution attack called 'Gather Data Sampling' (bsc#1206418).\n- CVE-2023-0459: Fixed information leak in __uaccess_begin_nospec (bsc#1211738).\n- CVE-2023-1829: Fixed a use-after-free vulnerability in the control index filter (tcindex) (bsc#1210335).\n- CVE-2023-20569: Fixed side channel attack ‘Inception’ or ‘RAS Poisoning’ (bsc#1213287).\n- CVE-2023-20593: Fixed a ZenBleed issue in 'Zen 2' CPUs that could allow an attacker to potentially access sensitive information (bsc#1213286).\n- CVE-2023-21400: Fixed several memory corruptions due to improper locking in io_uring (bsc#1213272).\n- CVE-2023-2156: Fixed a flaw in the networking subsystem within the handling of the RPL protocol (bsc#1211131).\n- CVE-2023-2166: Fixed NULL pointer dereference in can_rcv_filter (bsc#1210627).\n- CVE-2023-2430: Fixed amissing lock for IOPOLL in io_cqring_event_overflow() in io_uring.c that could allow a privileged user to cause a denial of service (bsc#1211014).\n- CVE-2023-2985: Fixed an use-after-free vulnerability in hfsplus_put_super in fs/hfsplus/super.c that could allow a local user to cause a denial of service (bsc#1211867).\n- CVE-2023-3090: Fixed a heap out-of-bounds write in the ipvlan network driver (bsc#1212842).\n- CVE-2023-31083: Fixed race condition in hci_uart_tty_ioctl (bsc#1210780).\n- CVE-2023-3111: Fixed a use-after-free vulnerability in prepare_to_relocate in fs/btrfs/relocation.c (bsc#1212051).\n- CVE-2023-3117: Fixed an use-after-free vulnerability in the netfilter subsystem when processing named and anonymous sets in batch requests that could allow a local user with CAP_NET_ADMIN capability to crash or potentially escalate their privileges on the system (bsc#1213245).\n- CVE-2023-31248: Fixed an use-after-free vulnerability in nft_chain_lookup_byid that could allow a local attacker to escalate their privilege (bsc#1213061).\n- CVE-2023-3212: Fixed a NULL pointer dereference flaw in the gfs2 file system (bsc#1212265).\n- CVE-2023-3268: Fixed an out of bounds memory access flaw in relay_file_read_start_pos in the relayfs (bsc#1212502).\n- CVE-2023-3389: Fixed a use-after-free vulnerability in the io_uring subsystem (bsc#1212838).\n- CVE-2023-3390: Fixed an use-after-free vulnerability in the netfilter subsystem in net/netfilter/nf_tables_api.c that could allow a local attacker with user access to cause a privilege escalation issue (bsc#1212846).\n- CVE-2023-35001: Fixed an out-of-bounds memory access flaw in nft_byteorder that could allow a local attacker to escalate their privilege (bsc#1213059).\n- CVE-2023-3567: Fixed a use-after-free in vcs_read in drivers/tty/vt/vc_screen.c (bsc#1213167).\n- CVE-2023-3609: Fixed reference counter leak leading to  overflow in net/sched (bsc#1213586).\n- CVE-2023-3611: Fixed an out-of-bounds write in net/sched sch_qfq(bsc#1213585).\n- CVE-2023-3776: Fixed improper refcount update in  cls_fw leads to use-after-free (bsc#1213588).\n- CVE-2023-3812: Fixed an out-of-bounds memory access flaw in the TUN/TAP device driver functionality that could allow a local user to crash or potentially escalate their privileges on the system (bsc#1213543).\n- CVE-2023-38409: Fixed a use-after-free in drivers/video/fbdev/core/fbcon.c (bsc#1213417).\n- CVE-2023-3863: Fixed a use-after-free flaw in nfc_llcp_find_local in net/nfc/llcp_core.c in NFC (bsc#1213601).\n- CVE-2023-4004: Fixed improper element removal netfilter nft_set_pipapo (bsc#1213812).\n\nThe following non-security bugs were fixed:\n\n- acpi/iort: remove erroneous id_count check in iort_node_get_rmr_info() (git-fixes).\n- acpi: cppc: add acpi disabled check to acpi_cpc_valid() (bsc#1212445).\n- acpi: cppc: add definition for undefined fadt preferred pm profile value (bsc#1212445).\n- acpi: fix suspend with xen pv (git-fixes).\n- acpi: utils: fix acpi_evaluate_dsm_typed() redefinition error (git-fixes).\n- add module_firmware() for firmware_tg357766 (git-fixes).\n- adreno: shutdown the gpu properly (git-fixes).\n- afs: adjust ack interpretation to try and cope with nat (git-fixes).\n- afs: fix access after dec in put functions (git-fixes).\n- afs: fix afs_getattr() to refetch file status if callback break occurred (git-fixes).\n- afs: fix dynamic root getattr (git-fixes).\n- afs: fix fileserver probe rtt handling (git-fixes).\n- afs: fix infinite loop found by xfstest generic/676 (git-fixes).\n- afs: fix lost servers_outstanding count (git-fixes).\n- afs: fix server-\u003eactive leak in afs_put_server (git-fixes).\n- afs: fix setting of mtime when creating a file/dir/symlink (git-fixes).\n- afs: fix updating of i_size with dv jump from server (git-fixes).\n- afs: fix vlserver probe rtt handling (git-fixes).\n- afs: return -eagain, not -eremoteio, when a file already locked (git-fixes).\n- afs: use refcount_t rather than atomic_t (git-fixes).\n- afs: use the operation issue time instead of the reply time for callbacks (git-fixes).\n- alsa: ac97: fix possible null dereference in snd_ac97_mixer (git-fixes).\n- alsa: emu10k1: roll up loops in dsp setup code for audigy (git-fixes).\n- alsa: fireface: make read-only const array for model names static (git-fixes).\n- alsa: hda/realtek - remove 3k pull low procedure (git-fixes).\n- alsa: hda/realtek: add quirk for asus rog g614jx (git-fixes).\n- alsa: hda/realtek: add quirk for asus rog ga402x (git-fixes).\n- alsa: hda/realtek: add quirk for asus rog gx650p (git-fixes).\n- alsa: hda/realtek: add quirk for asus rog gz301v (git-fixes).\n- alsa: hda/realtek: add quirk for clevo npx0snx (git-fixes).\n- alsa: hda/realtek: add quirk for clevo ns70au (git-fixes).\n- alsa: hda/realtek: add quirks for rog ally cs35l41 audio (git-fixes).\n- alsa: hda/realtek: add quirks for unis h3c desktop b760 \u0026 q760 (git-fixes).\n- alsa: hda/realtek: add support for dell oasis 13/14/16 laptops (git-fixes).\n- alsa: hda/realtek: amend g634 quirk to enable rear speakers (git-fixes).\n- alsa: hda/realtek: enable mute led on hp laptop 15s-eq2xxx (git-fixes).\n- alsa: hda/realtek: enable mute/micmute leds and limit mic boost on elitebook (git-fixes).\n- alsa: hda/realtek: fix generic fixup definition for cs35l41 amp (git-fixes).\n- alsa: hda/realtek: support asus g713pv laptop (git-fixes).\n- alsa: hda/realtek: whitespace fix (git-fixes).\n- alsa: hda/relatek: enable mute led on hp 250 g8 (git-fixes).\n- alsa: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync() (git-fixes).\n- alsa: hda: lnl: add hd audio pci id (git-fixes).\n- alsa: jack: fix mutex call in snd_jack_report() (git-fixes).\n- alsa: oxfw: make read-only const array models static (git-fixes).\n- alsa: pcm: fix potential data race at pcm memory allocation helpers (git-fixes).\n- alsa: usb-audio: add fixed_rate quirk for jbl quantum610 wireless (git-fixes).\n- alsa: usb-audio: add new quirk fixed_rate for jbl quantum810 wireless (git-fixes).\n- alsa: usb-audio: add quirk for microsoft modern wireless headset (bsc#1207129).\n- alsa: usb-audio: always initialize fixed_rate in snd_usb_find_implicit_fb_sync_format() (git-fixes).\n- alsa: usb-audio: apply mutex around snd_usb_endpoint_set_params() (git-fixes).\n- alsa: usb-audio: avoid superfluous endpoint setup (git-fixes).\n- alsa: usb-audio: avoid unnecessary interface change at ep close (git-fixes).\n- alsa: usb-audio: clear fixed clock rate at closing ep (git-fixes).\n- alsa: usb-audio: correct the return code from snd_usb_endpoint_set_params() (git-fixes).\n- alsa: usb-audio: drop superfluous interface setup at parsing (git-fixes).\n- alsa: usb-audio: fix possible null pointer dereference in snd_usb_pcm_has_fixed_rate() (git-fixes).\n- alsa: usb-audio: fix wrong kfree issue in snd_usb_endpoint_free_all (git-fixes).\n- alsa: usb-audio: more refactoring of hw constraint rules (git-fixes).\n- alsa: usb-audio: properly refcounting clock rate (git-fixes).\n- alsa: usb-audio: rate limit usb_set_interface error reporting (git-fixes).\n- alsa: usb-audio: refcount multiple accesses on the single clock (git-fixes).\n- alsa: usb-audio: split endpoint setups for hw_params and prepare (take#2) (git-fixes).\n- alsa: usb-audio: update for native dsd support quirks (git-fixes).\n- alsa: usb-audio: use atomic_try_cmpxchg in ep_state_update (git-fixes).\n- alsa: usb-audio: workaround for xrun at prepare (git-fixes).\n- amd-pstate: fix amd_pstate mode switch (git-fixes).\n- amdgpu: validate offset_in_bo of drm_amdgpu_gem_va (git-fixes).\n- apparmor: fix missing error check for rhashtable_insert_fast (git-fixes).\n- arm64/mm: mark private vm_fault_x defines as vm_fault_t (git-fixes)\n- arm64: add missing set/way cmo encodings (git-fixes).\n- arm64: dts: microchip: sparx5: do not use psci on reference boards (git-fixes)\n- arm64: vdso: pass (void *) to virt_to_page() (git-fixes)\n- arm64: xor-neon: mark xor_arm64_neon_*() static (git-fixes)\n- arm: dts: fix erroneous ads touchscreen polarities (git-fixes).\n- asoc: amd: acp: fix for invalid dai id handling in acp_get_byte_count() (git-fixes).\n- asoc: atmel: fix the 8k sample parameter in i2sc master (git-fixes).\n- asoc: codecs: es8316: fix dmic config (git-fixes).\n- asoc: codecs: wcd-mbhc-v2: fix resource leaks on component remove (git-fixes).\n- asoc: codecs: wcd934x: fix resource leaks on component remove (git-fixes).\n- asoc: codecs: wcd938x: fix codec initialisation race (git-fixes).\n- asoc: codecs: wcd938x: fix db range for hphl and hphr (git-fixes).\n- asoc: codecs: wcd938x: fix missing clsh ctrl error handling (git-fixes).\n- asoc: codecs: wcd938x: fix soundwire initialisation race (git-fixes).\n- asoc: da7219: check for failure reading aad irq events (git-fixes).\n- asoc: da7219: flush pending aad irq when suspending (git-fixes).\n- asoc: es8316: do not set rate constraints for unsupported mclks (git-fixes).\n- asoc: es8316: increment max value for alc capture target volume control (git-fixes).\n- asoc: fsl_sai: disable bit clock with transmitter (git-fixes).\n- asoc: fsl_spdif: silence output on stop (git-fixes).\n- asoc: imx-audmix: check return value of devm_kasprintf() (git-fixes).\n- asoc: intel: sof_sdw: remove sof_sdw_tgl_hdmi for meteorlake devices (git-fixes).\n- asoc: mediatek: mt8173: fix irq error path (git-fixes).\n- asoc: nau8824: add quirk to active-high jack-detect (git-fixes).\n- asoc: rt5640: fix sleep in atomic context (git-fixes).\n- asoc: rt5682-sdw: fix for jd event handling in clockstop mode0 (git-fixes).\n- asoc: rt711-sdca: fix for jd event handling in clockstop mode0 (git-fixes).\n- asoc: rt711: fix for jd event handling in clockstop mode0 (git-fixes).\n- asoc: simple-card: add missing of_node_put() in case of error (git-fixes).\n- asoc: sof: ipc3-dtrace: uninitialized data in dfsentry_trace_filter_write() (git-fixes).\n- asoc: sof: topology: fix logic for copying tuples (git-fixes).\n- asoc: tegra: fix adx byte map (git-fixes).\n- asoc: tegra: fix amx byte map (git-fixes).\n- asoc: wm8904: fill the cache for wm8904_adc_test_0 register (git-fixes).\n- ata: pata_ns87415: mark ns87560_tf_read static (git-fixes).\n- block, bfq: fix division by zero error on zero wsum (bsc#1213653).\n- block: fix a source code comment in include/uapi/linux/blkzoned.h (git-fixes).\n- bluetooth: fix invalid-bdaddr quirk for non-persistent setup (git-fixes).\n- bluetooth: fix use-bdaddr-property quirk (git-fixes).\n- bluetooth: hci_bcm: do not mark valid bd_addr as invalid (git-fixes).\n- bluetooth: hci_event: call disconnect callback before deleting conn (git-fixes).\n- bluetooth: hci_sync: avoid use-after-free in dbg for hci_remove_adv_monitor() (git-fixes).\n- bluetooth: iso: consider right cis when removing cig at cleanup (git-fixes).\n- bluetooth: iso: fix cig auto-allocation to select configurable cig (git-fixes).\n- bluetooth: iso: fix iso_conn related locking and validity issues (git-fixes).\n- bluetooth: iso: use hci_sync for setting cig parameters (git-fixes).\n- bluetooth: use rcu for hci_conn_params and iterate safely in hci_sync (git-fixes).\n- bonding: fix negative jump label count on nested bonding (bsc#1212685).\n- bus: fsl-mc: fsl-mc-allocator: drop a write-only variable (git-fixes).\n- bus: mhi: add new interfaces to handle mhi channels directly (bsc#1207948).\n- bus: mhi: host: add destroy_device argument to mhi_power_down() (bsc#1207948).\n- bus: ti-sysc: fix dispc quirk masking bool variables (git-fixes).\n- can: bcm: fix uaf in bcm_proc_show() (git-fixes).\n- can: gs_usb: gs_can_close(): add missing set of can state to can_state_stopped (git-fixes).\n- can: isotp: isotp_sendmsg(): fix return error fix on tx path (git-fixes).\n- can: kvaser_pciefd: remove handler for unused kvaser_pciefd_pack_type_eframe_ack (git-fixes).\n- can: kvaser_pciefd: remove useless write to interrupt register (git-fixes).\n- can: length: fix bitstuffing count (git-fixes).\n- can: length: fix description of the rrs field (git-fixes).\n- can: length: make header self contained (git-fixes).\n- ceph: add a dedicated private data for netfs rreq (bsc#1213205).\n- ceph: do not let check_caps skip sending responses for revoke msgs (bsc#1213856).\n- ceph: fix blindly expanding the readahead windows (bsc#1213206).\n- cifs: add a warning when the in-flight count goes negative (bsc#1193629).\n- cifs: address unused variable warning (bsc#1193629).\n- cifs: do all necessary checks for credits within or before locking (bsc#1193629).\n- cifs: fix lease break oops in xfstest generic/098 (bsc#1193629).\n- cifs: fix max_credits implementation (bsc#1193629).\n- cifs: fix session state check in reconnect to avoid use-after-free issue (bsc#1193629).\n- cifs: fix session state check in smb2_find_smb_ses (bsc#1193629).\n- cifs: fix session state transition to avoid use-after-free issue (bsc#1193629).\n- cifs: fix sockaddr comparison in iface_cmp (bsc#1193629).\n- cifs: fix status checks in cifs_tree_connect (bsc#1193629).\n- cifs: log session id when a matching ses is not found (bsc#1193629).\n- cifs: new dynamic tracepoint to track ses not found errors (bsc#1193629).\n- cifs: prevent use-after-free by freeing the cfile later (bsc#1193629).\n- cifs: print all credit counters in debugdata (bsc#1193629).\n- cifs: print client_guid in debugdata (bsc#1193629).\n- cifs: print more detail when invalidate_inode_mapping fails (bsc#1193629).\n- cifs: print nosharesock value while dumping mount options (bsc#1193629).\n- clk: cdce925: check return value of kasprintf() (git-fixes).\n- clk: fix memory leak in devm_clk_notifier_register() (git-fixes).\n- clk: imx: clk-imx8mn: fix memory leak in imx8mn_clocks_probe (git-fixes).\n- clk: imx: clk-imx8mp: improve error handling in imx8mp_clocks_probe() (git-fixes).\n- clk: imx: scu: use _safe list iterator to avoid a use after free (git-fixes).\n- clk: keystone: sci-clk: check return value of kasprintf() (git-fixes).\n- clk: qcom: camcc-sc7180: add parent dependency to all camera gdscs (git-fixes).\n- clk: qcom: gcc-ipq6018: use floor ops for sdcc clocks (git-fixes).\n- clk: samsung: add exynos4212 compatible to clkout driver (git-fixes).\n- clk: si5341: check return value of {devm_}kasprintf() (git-fixes).\n- clk: si5341: free unused memory on probe failure (git-fixes).\n- clk: si5341: return error if one synth clock registration fails (git-fixes).\n- clk: tegra: tegra124-emc: fix potential memory leak (git-fixes).\n- clk: ti: clkctrl: check return value of kasprintf() (git-fixes).\n- clk: vc5: check memory returned by kasprintf() (git-fixes).\n- coda: avoid partial allocation of sig_inputargs (git-fixes).\n- codel: fix kernel-doc notation warnings (git-fixes).\n- cpufreq: amd-pstate: add -\u003efast_switch() callback (bsc#1212445).\n- cpufreq: amd-pstate: add amd p-state frequencies attributes (bsc#1212445).\n- cpufreq: amd-pstate: add amd p-state performance attributes (bsc#1212445).\n- cpufreq: amd-pstate: add amd-pstate driver parameter for mode selection (bsc#1212445).\n- cpufreq: amd-pstate: add boost mode support for amd p-state (bsc#1212445).\n- cpufreq: amd-pstate: add driver working mode switch support (bsc#1212445).\n- cpufreq: amd-pstate: add fast switch function for amd p-state (bsc#1212445).\n- cpufreq: amd-pstate: add guided autonomous mode (bsc#1212445).\n- cpufreq: amd-pstate: add guided mode control support via sysfs (bsc#1212445).\n- cpufreq: amd-pstate: add more tracepoint for amd p-state module (bsc#1212445).\n- cpufreq: amd-pstate: add resume and suspend callbacks (bsc#1212445).\n- cpufreq: amd-pstate: add trace for amd p-state module (bsc#1212445).\n- cpufreq: amd-pstate: avoid uninitialized variable use (bsc#1212445).\n- cpufreq: amd-pstate: change amd-pstate driver to be built-in type (bsc#1212445).\n- cpufreq: amd-pstate: convert sprintf with sysfs_emit() (bsc#1212445).\n- cpufreq: amd-pstate: cpufreq: amd-pstate: reset msr_amd_perf_ctl register at init (bsc#1212445).\n- cpufreq: amd-pstate: expose struct amd_cpudata (bsc#1212445).\n- cpufreq: amd-pstate: fix initial highest_perf value (bsc#1212445).\n- cpufreq: amd-pstate: fix invalid write to msr_amd_cppc_req (bsc#1212445).\n- cpufreq: amd-pstate: fix kconfig dependencies for amd p-state (bsc#1212445).\n- cpufreq: amd-pstate: fix kernel hang issue while amd-pstate unregistering (bsc#1212445).\n- cpufreq: amd-pstate: fix struct amd_cpudata kernel-doc comment (bsc#1212445).\n- cpufreq: amd-pstate: fix white-space (bsc#1212445).\n- cpufreq: amd-pstate: implement amd pstate cpu online and offline callback (bsc#1212445).\n- cpufreq: amd-pstate: implement pstate epp support for the amd processors (bsc#1212445).\n- cpufreq: amd-pstate: implement suspend and resume callbacks (bsc#1212445).\n- cpufreq: amd-pstate: introduce a new amd p-state driver to support future processors (bsc#1212445).\n- cpufreq: amd-pstate: introduce the support for the processors with shared memory solution (bsc#1212445).\n- cpufreq: amd-pstate: let user know amd-pstate is disabled (bsc#1212445).\n- cpufreq: amd-pstate: make amd-pstate epp driver name hyphenated (bsc#1212445).\n- cpufreq: amd-pstate: make varaiable mode_state_machine static (bsc#1212445).\n- cpufreq: amd-pstate: optimize driver working mode selection in amd_pstate_param() (bsc#1212445).\n- cpufreq: amd-pstate: remove fast_switch_possible flag from active driver (bsc#1212445).\n- cpufreq: amd-pstate: remove module_license in non-modules (bsc#1212445).\n- cpufreq: amd-pstate: set a fallback policy based on preferred_profile (bsc#1212445).\n- cpufreq: amd-pstate: simplify cpudata pointer assignment (bsc#1212445).\n- cpufreq: amd-pstate: update policy-\u003ecur in amd_pstate_adjust_perf() (bsc#1212445).\n- cpufreq: amd-pstate: update pstate frequency transition delay time (bsc#1212445).\n- cpufreq: amd-pstate: write cppc enable bit per-socket (bsc#1212445).\n- cpufreq: amd_pstate: fix wrong lowest perf fetch (bsc#1212445).\n- cpufreq: amd_pstate: map desired perf into pstate scope for powersave governor (bsc#1212445).\n- cpufreq: tegra194: fix module loading (git-fixes).\n- crypto: kpp - add helper to set reqsize (git-fixes).\n- crypto: marvell/cesa - fix type mismatch warning (git-fixes).\n- crypto: nx - fix build warnings when debug_fs is not enabled (git-fixes).\n- crypto: qat - use helper to set reqsize (git-fixes).\n- delete suse/memcg-drop-kmem-limit_in_bytes. drop the patch in order to fix bsc#1213705.\n- devlink: fix kernel-doc notation warnings (git-fixes).\n- dlm: fix missing lkb refcount handling (git-fixes).\n- dlm: fix plock invalid read (git-fixes).\n- dma-buf/dma-resv: stop leaking on krealloc() failure (git-fixes).\n- docs: networking: update codeaurora references for rmnet (git-fixes).\n- documentation: abi: sysfs-class-net-qmi: pass_through contact update (git-fixes).\n- documentation: bonding: fix the doc of peer_notif_delay (git-fixes).\n- documentation: cpufreq: amd-pstate: move amd_pstate param to alphabetical order (bsc#1212445).\n- documentation: devices.txt: reconcile serial/ucc_uart minor numers (git-fixes).\n- documentation: timers: hrtimers: make hybrid union historical (git-fixes).\n- drivers: meson: secure-pwrc: always enable dma domain (git-fixes).\n- drm/amd/amdgpu: introduce gc_*_mes_2.bin v2 (git-fixes).\n- drm/amd/amdgpu: limit one queue per gang (git-fixes).\n- drm/amd/amdgpu: update mes11 api def (git-fixes).\n- drm/amd/display (gcc13): fix enum mismatch (git-fixes).\n- drm/amd/display: add a null pointer check (bsc#1212848, bsc#1212961).\n- drm/amd/display: add debug option to skip psr crtc disable (git-fixes).\n- drm/amd/display: add logging for display mall refresh setting (git-fixes).\n- drm/amd/display: add minimal pipe split transition state (git-fixes).\n- drm/amd/display: add minimum z8 residency debug option (git-fixes).\n- drm/amd/display: add missing wa and mclk validation (git-fixes).\n- drm/amd/display: add monitor specific edid quirk (git-fixes).\n- drm/amd/display: add polling method to handle mst reply packet (bsc#1213578).\n- drm/amd/display: add wrapper to call planes and stream update (git-fixes).\n- drm/amd/display: add z8 allow states to z-state support list (git-fixes).\n- drm/amd/display: change default z8 watermark values (git-fixes).\n- drm/amd/display: check tg is non-null before checking if enabled (git-fixes).\n- drm/amd/display: correct `dmub_fw_version` macro (git-fixes).\n- drm/amd/display: correct dml calculation to align hw formula (git-fixes).\n- drm/amd/display: correct dml calculation to follow hw spec (git-fixes).\n- drm/amd/display: disable mpc split by default on special asic (git-fixes).\n- drm/amd/display: disable seamless boot if force_odm_combine is enabled (bsc#1212848, bsc#1212961).\n- drm/amd/display: do not update drr while bw optimizations pending (git-fixes).\n- drm/amd/display: drop redundant memset() in get_available_dsc_slices() (git-fixes).\n- drm/amd/display: enable hostvm based on riommu active (git-fixes).\n- drm/amd/display: enforce 60us prefetch for 200mhz dcfclk modes (git-fixes).\n- drm/amd/display: ensure vmin and vmax adjust for dce (git-fixes).\n- drm/amd/display: explicitly specify update type per plane info change (git-fixes).\n- drm/amd/display: filter out invalid bits in pipe_fuses (git-fixes).\n- drm/amd/display: fix 4to1 mpc black screen with dpp rco (git-fixes).\n- drm/amd/display: fix a divided-by-zero error (git-fixes).\n- drm/amd/display: fix a test calculateprefetchschedule() (git-fixes).\n- drm/amd/display: fix a test dml32_rq_dlg_get_rq_reg() (git-fixes).\n- drm/amd/display: fix access hdcp_workqueue assert (git-fixes).\n- drm/amd/display: fix artifacting on edp panels when engaging freesync video mode (git-fixes).\n- drm/amd/display: fix psr-su/dsc interoperability support (git-fixes).\n- drm/amd/display: fix seamless odm transitions (git-fixes).\n- drm/amd/display: fix the system hang while disable psr (git-fixes).\n- drm/amd/display: fix z8 support configurations (git-fixes).\n- drm/amd/display: fixed dcn30+ underflow issue (git-fixes).\n- drm/amd/display: have payload properly created after resume (git-fixes).\n- drm/amd/display: keep phy active for dp displays on dcn31 (git-fixes).\n- drm/amd/display: limit timing for single dimm memory (git-fixes).\n- drm/amd/display: lowering min z8 residency time (git-fixes).\n- drm/amd/display: only update link settings after successful mst link train (git-fixes).\n- drm/amd/display: phase3 mst hdcp for multiple displays (git-fixes).\n- drm/amd/display: populate subvp cmd info only for the top pipe (git-fixes).\n- drm/amd/display: reduce sdp bw after urgent to 90% (git-fixes).\n- drm/amd/display: refactor edp psr codes (git-fixes).\n- drm/amd/display: remove fpu guards from the dml folder (git-fixes).\n- drm/amd/display: remove optimization for vrr updates (git-fixes).\n- drm/amd/display: remove phantom pipe check when calculating k1 and k2 (git-fixes).\n- drm/amd/display: remove stutter only configurations (git-fixes).\n- drm/amd/display: save restore hdcp state when display is unplugged from mst hub (git-fixes).\n- drm/amd/display: set dcn315 lb bpp to 48 (git-fixes).\n- drm/amd/display: unlock on error path in dm_handle_mst_sideband_msg_ready_event() (git-fixes).\n- drm/amd/display: update minimum stutter residency for dcn314 z8 (git-fixes).\n- drm/amd/display: update z8 sr exit/enter latencies (git-fixes).\n- drm/amd/display: update z8 watermarks for dcn314 (git-fixes).\n- drm/amd/display: use dc_update_planes_and_stream (git-fixes).\n- drm/amd/pm: add abnormal fan detection for smu 13.0.0 (git-fixes).\n- drm/amd/pm: add missing notifypowersource message mapping for smu13.0.7 (git-fixes).\n- drm/amd/pm: avoid potential ubsan issue on legacy asics (git-fixes).\n- drm/amd/pm: conditionally disable pcie lane switching for some sienna_cichlid skus (git-fixes).\n- drm/amd/pm: conditionally disable pcie lane/speed switching for smu13 (git-fixes).\n- drm/amd/pm: fix possible power mode mismatch between driver and pmfw (git-fixes).\n- drm/amd/pm: re-enable the gfx imu when smu resume (git-fixes).\n- drm/amd/pm: resolve reboot exception for si oland (git-fixes).\n- drm/amd/pm: reverse mclk and fclk clocks levels for smu v13.0.4 (git-fixes).\n- drm/amd/pm: reverse mclk clocks levels for smu v13.0.5 (git-fixes).\n- drm/amd/pm: revise the aspm settings for thunderbolt attached scenario (bsc#1212848, bsc#1212961).\n- drm/amd/pm: share the code around smu13 pcie parameters update (git-fixes).\n- drm/amd/pm: update the lc_l1_inactivity setting to address possible noise issue (bsc#1212848, bsc#1212961).\n- drm/amd/pm: workaround for compute workload type on some skus (git-fixes).\n- drm/amd: add a new helper for loading/validating microcode (git-fixes).\n- drm/amd: disable psr-su on parade 0803 tcon (bsc#1212848, bsc#1212961).\n- drm/amd: do not allow s0ix on apus older than raven (git-fixes).\n- drm/amd: do not try to enable secure display ta multiple times (bsc#1212848, bsc#1212961).\n- drm/amd: fix an error handling mistake in psp_sw_init() (git-fixes).\n- drm/amd: load mes microcode during early_init (git-fixes).\n- drm/amd: use `amdgpu_ucode_*` helpers for mes (git-fixes).\n- drm/amdgpu/gfx11: adjust gfxoff before powergating on gfx11 as well (git-fixes).\n- drm/amdgpu/gfx11: update gpu_clock_counter logic (git-fixes).\n- drm/amdgpu/gfx: set cg flags to enter/exit safe mode (git-fixes).\n- drm/amdgpu/gmc11: implement get_vbios_fb_size() (git-fixes).\n- drm/amdgpu/jpeg: remove harvest checking for jpeg3 (git-fixes).\n- drm/amdgpu/mes11: enable reg active poll (git-fixes).\n- drm/amdgpu/vcn: disable indirect sram on vangogh broken bioses (git-fixes).\n- drm/amdgpu/vkms: relax timer deactivation by hrtimer_try_to_cancel (git-fixes).\n- drm/amdgpu: add mes resume when do gfx post soft reset (git-fixes).\n- drm/amdgpu: add the fan abnormal detection feature (git-fixes).\n- drm/amdgpu: avoid restore process run into dead loop (git-fixes).\n- drm/amdgpu: change reserved vram info print (git-fixes).\n- drm/amdgpu: declare firmware for new mes 11.0.4 (git-fixes).\n- drm/amdgpu: do not set struct drm_driver.output_poll_changed (git-fixes).\n- drm/amdgpu: enable tmz by default for gc 11.0.1 (git-fixes).\n- drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v10_0_hw_fini (git-fixes).\n- drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v11_0_hw_fini (git-fixes).\n- drm/amdgpu: fix an amdgpu_irq_put() issue in gmc_v9_0_hw_fini() (git-fixes).\n- drm/amdgpu: fix clearing mappings for bos that are always valid in vm (bsc#1212848, bsc#1212961).\n- drm/amdgpu: fix clearing mappings for bos that are always valid in vm (git-fixes).\n- drm/amdgpu: fix desktop freezed after gpu-reset (git-fixes).\n- drm/amdgpu: fix memcpy() in sienna_cichlid_append_powerplay_table function (git-fixes).\n- drm/amdgpu: fix minmax warning (git-fixes).\n- drm/amdgpu: fix number of fence calculations (bsc#1212848, bsc#1212961).\n- drm/amdgpu: fix sdma v4 sw fini error (git-fixes).\n- drm/amdgpu: fix usage of umc fill record in ras (git-fixes).\n- drm/amdgpu: force signal hw_fences that are embedded in non-sched jobs (git-fixes).\n- drm/amdgpu: refine get gpu clock counter method (git-fixes).\n- drm/amdgpu: remove deprecated mes version vars (git-fixes).\n- drm/amdgpu: reserve the old gc_11_0_*_mes.bin (git-fixes).\n- drm/amdgpu: set gfx9 onwards apu atomics support to be true (git-fixes).\n- drm/amdgpu: set vmbo destroy after pt bo is created (git-fixes).\n- drm/amdgpu: validate vm ioctl flags (git-fixes).\n- drm/amdgpu: vcn_4_0 set instance 0 init sched score to 1 (git-fixes).\n- drm/amdkfd: fix potential deallocation of previously deallocated memory (git-fixes).\n- drm/atomic: fix potential use-after-free in nonblocking commits (git-fixes).\n- drm/bridge: anx7625: convert to i2c's .probe_new() (git-fixes).\n- drm/bridge: anx7625: fix refcount bug in anx7625_parse_dt() (git-fixes).\n- drm/bridge: anx7625: prevent endless probe loop (git-fixes).\n- drm/bridge: it6505: move a variable assignment behind a null pointer check in receive_timing_debugfs_show() (git-fixes).\n- drm/bridge: tc358767: switch to devm mipi-dsi helpers (git-fixes).\n- drm/bridge: tc358768: add atomic_get_input_bus_fmts() implementation (git-fixes).\n- drm/bridge: tc358768: always enable hs video mode (git-fixes).\n- drm/bridge: tc358768: fix pll parameters computation (git-fixes).\n- drm/bridge: tc358768: fix pll target frequency (git-fixes).\n- drm/bridge: tc358768: fix tclk_trailcnt computation (git-fixes).\n- drm/bridge: tc358768: fix tclk_zerocnt computation (git-fixes).\n- drm/bridge: tc358768: fix ths_trailcnt computation (git-fixes).\n- drm/bridge: tc358768: fix ths_zerocnt computation (git-fixes).\n- drm/bridge: tc358768: fix txtagocnt computation (git-fixes).\n- drm/bridge: ti-sn65dsi83: fix enable error path (git-fixes).\n- drm/bridge: ti-sn65dsi86: fix auxiliary bus lifetime (git-fixes).\n- drm/client: fix memory leak in drm_client_modeset_probe (git-fixes).\n- drm/client: fix memory leak in drm_client_target_cloned (git-fixes).\n- drm/display/dp_mst: fix payload addition on a disconnected sink (git-fixes).\n- drm/display: do not block hdr_output_metadata on unknown eotf (git-fixes).\n- drm/dp_mst: clear msg_rdy flag before sending new message (bsc#1213578).\n- drm/drm_vma_manager: add drm_vma_node_allow_once() (git-fixes).\n- drm/dsc: fix dp_dsc_max_bpp_delta_* macro values (git-fixes).\n- drm/dsc: fix drm_edp_dsc_sink_output_bpp() dpcd high byte usage (git-fixes).\n- drm/etnaviv: move idle mapping reaping into separate function (git-fixes).\n- drm/etnaviv: reap idle mapping if it does not match the softpin address (git-fixes).\n- drm/exynos: fix race condition uaf in exynos_g2d_exec_ioctl (git-fixes).\n- drm/exynos: vidi: fix a wrong error return (git-fixes).\n- drm/i915/dp_mst: add the mst topology state for modesetted crtcs (bsc#1213493).\n- drm/i915/dpt: use shmem for dpt objects (git-fixes).\n- drm/i915/fbdev: lock the fbdev obj before vma pin (git-fixes).\n- drm/i915/gt: cleanup partial engine discovery failures (git-fixes).\n- drm/i915/guc: add error-capture init warnings when needed (git-fixes).\n- drm/i915/guc: fix missing ecodes (git-fixes).\n- drm/i915/guc: limit scheduling properties to avoid overflow (git-fixes).\n- drm/i915/guc: rename guc register state capture node to be more obvious (git-fixes).\n- drm/i915/gvt: remove unused variable gma_bottom in command parser (git-fixes).\n- drm/i915/mtl: update scaler source and destination limits for mtl (git-fixes).\n- drm/i915/psr: use hw.adjusted mode when calculating io/fast wake times (git-fixes).\n- drm/i915/sdvo: grab mode_config.mutex during lvds init to avoid warns (git-fixes).\n- drm/i915/sseu: fix max_subslices array-index-out-of-bounds access (git-fixes).\n- drm/i915/tc: fix system resume mst mode restore for dp-alt sinks (git-fixes).\n- drm/i915/tc: fix tc port link ref init for dp mst during hw readout (git-fixes).\n- drm/i915: allow panel fixed modes to have differing sync polarities (git-fixes).\n- drm/i915: check pipe source size when using skl+ scalers (git-fixes).\n- drm/i915: do not preserve dpll_hw_state for slave crtc in bigjoiner (git-fixes).\n- drm/i915: do panel vbt init early if the vbt declares an explicit panel type (git-fixes).\n- drm/i915: fix a memory leak with reused mmap_offset (git-fixes).\n- drm/i915: fix an error handling path in igt_write_huge() (git-fixes).\n- drm/i915: fix negative value passed as remaining time (git-fixes).\n- drm/i915: fix one wrong caching mode enum usage (git-fixes).\n- drm/i915: fix typec mode initialization during system resume (git-fixes).\n- drm/i915: introduce intel_panel_init_alloc() (git-fixes).\n- drm/i915: never return 0 if not all requests retired (git-fixes).\n- drm/i915: populate encoder-\u003edevdata for dsi on icl+ (git-fixes).\n- drm/i915: print return value on error (git-fixes).\n- drm/i915: use _mmio_pipe() for skl_bottom_color (git-fixes).\n- drm/meson: fix return type of meson_encoder_cvbs_mode_valid() (git-fixes).\n- drm/msm/a5xx: really check for a510 in a5xx_gpu_init (git-fixes).\n- drm/msm/adreno: fix runtime pm imbalance at unbind (git-fixes).\n- drm/msm/adreno: fix snapshot bindless_data size (git-fixes).\n- drm/msm/adreno: fix sparse warnings in a6xx code (git-fixes).\n- drm/msm/adreno: simplify read64/write64 helpers (git-fixes).\n- drm/msm/disp/dpu: get timing engine status from intf status register (git-fixes).\n- drm/msm/dp: free resources after unregistering them (git-fixes).\n- drm/msm/dpu: add dsc hardware blocks to register snapshot (git-fixes).\n- drm/msm/dpu: assign missing writeback log_mask (git-fixes).\n- drm/msm/dpu: clean up dpu_kms_get_clk_rate() returns (git-fixes).\n- drm/msm/dpu: correct merge_3d length (git-fixes).\n- drm/msm/dpu: do not enable color-management if dspps are not available (git-fixes).\n- drm/msm/dpu: drop enum dpu_core_perf_data_bus_id (git-fixes).\n- drm/msm/dpu: set dpu_data_hctl_en for in intf_sc7180_mask (git-fixes).\n- drm/msm/dpu: set dsc flush bit correctly at mdp ctl flush register (git-fixes).\n- drm/msm/dsi: do not allow enabling 14nm vco with unprogrammed rate (git-fixes).\n- drm/msm/hdmi: use devres helper for runtime pm management (git-fixes).\n- drm/msm: fix is_err_or_null() vs null check in a5xx_submit_in_rb() (git-fixes).\n- drm/panel: boe-tv101wum-nl6: ensure dsi writes succeed during disable (git-fixes).\n- drm/panel: sharp-ls043t1le01: adjust mode settings (git-fixes).\n- drm/panel: simple: add connector_type for innolux_at043tn24 (git-fixes).\n- drm/panel: simple: add powertip ph800480t013 drm_display_mode flags (git-fixes).\n- drm/panel: simple: fix active size for ampire am-480272h3tmqw-t01h (git-fixes).\n- drm/radeon: fix integer overflow in radeon_cs_parser_init (git-fixes).\n- drm/radeon: fix possible division-by-zero errors (git-fixes).\n- drm/radeon: fix race condition uaf in radeon_gem_set_domain_ioctl (git-fixes).\n- drm/rockchip: dw_hdmi: cleanup drm encoder during unbind (git-fixes).\n- drm/rockchip: vop: leave vblank enabled in self-refresh (git-fixes).\n- drm/ttm: do not leak a resource on swapout move error (git-fixes).\n- drm/ttm: fix bulk_move corruption when adding a entry (git-fixes).\n- drm/ttm: fix warning that we shouldn't mix \u0026\u0026 and || (git-fixes).\n- drm/virtio: fix memory leak in virtio_gpu_object_create() (git-fixes).\n- drm/virtio: simplify error handling of virtio_gpu_object_create() (git-fixes).\n- drm/vmwgfx: fix legacy display unit atomic drm support (bsc#1213632).\n- drm/vmwgfx: refactor resource manager's hashtable to use linux/hashtable implementation (git-fixes).\n- drm/vmwgfx: refactor resource validation hashtable to use linux/hashtable implementation (git-fixes).\n- drm/vmwgfx: refactor ttm reference object hashtable to use linux/hashtable (git-fixes).\n- drm/vmwgfx: remove explicit and broken vblank handling (bsc#1213632).\n- drm/vmwgfx: remove rcu locks from user resources (bsc#1213632).\n- drm/vmwgfx: remove ttm object hashtable (git-fixes).\n- drm/vmwgfx: remove vmwgfx_hashtab (git-fixes).\n- drm/vmwgfx: write the driver id registers (git-fixes).\n- drm/vram-helper: fix function names in vram helper doc (git-fixes).\n- drm: add fixed-point helper to get rounded integer values (git-fixes).\n- drm: add missing dp dsc extended capability definitions (git-fixes).\n- drm: buddy_allocator: fix buddy allocator init on 32-bit systems (git-fixes).\n- drm: optimize drm buddy top-down allocation method (git-fixes).\n- drm: panel-orientation-quirks: add quirk for dynabook k50 (git-fixes).\n- drm: rcar-du: add quirk for h3 es1.x pclk workaround (git-fixes).\n- drm: rcar-du: fix setting a reserved bit in dpllcr (git-fixes).\n- drm: sun4i_tcon: use devm_clk_get_enabled in `sun4i_tcon_init_clocks` (git-fixes).\n- drm: use mgr-\u003edev in drm_dbg_kms in drm_dp_add_payload_part2 (git-fixes).\n- drop amdgpu patches for fixing regression (bsc#1213304,bsc#1213777).\n- dt-bindings: phy: brcm,brcmstb-usb-phy: fix error in 'compatible' conditional schema (git-fixes).\n- elf: correct note name comment (git-fixes).\n- enable nxp snvs rtc driver for i.mx 8mq/8mp (jsc#ped-4758)\n- ext4: add ea_inode checking to ext4_iget() (bsc#1213106).\n- ext4: add ext4_sb_block_valid() refactored out of ext4_inode_block_valid() (bsc#1213088).\n- ext4: add lockdep annotations for i_data_sem for ea_inode's (bsc#1213109).\n- ext4: add strict range checks while freeing blocks (bsc#1213089).\n- ext4: avoid deadlock in fs reclaim with page writeback (bsc#1213016).\n- ext4: bail out of ext4_xattr_ibody_get() fails for any reason (bsc#1213018).\n- ext4: block range must be validated before use in ext4_mb_clear_bb() (bsc#1213090).\n- ext4: check iomap type only if ext4_iomap_begin() does not fail (bsc#1213103).\n- ext4: disallow ea_inodes with extended attributes (bsc#1213108).\n- ext4: fail ext4_iget if special inode unallocated (bsc#1213010).\n- ext4: fix bug_on in __es_tree_search caused by bad quota inode (bsc#1213111).\n- ext4: fix data races when using cached status extents (bsc#1213102).\n- ext4: fix deadlock when converting an inline directory in nojournal mode (bsc#1213105).\n- ext4: fix i_disksize exceeding i_size problem in paritally written case (bsc#1213015).\n- ext4: fix lockdep warning when enabling mmp (bsc#1213100).\n- ext4: fix reusing stale buffer heads from last failed mounting (bsc#1213020).\n- ext4: fix task hung in ext4_xattr_delete_inode (bsc#1213096).\n- ext4: fix to check return value of freeze_bdev() in ext4_shutdown() (bsc#1213021).\n- ext4: fix use-after-free read in ext4_find_extent for bigalloc + inline (bsc#1213098).\n- ext4: fix warning in ext4_update_inline_data (bsc#1213012).\n- ext4: fix warning in mb_find_extent (bsc#1213099).\n- ext4: improve error handling from ext4_dirhash() (bsc#1213104).\n- ext4: improve error recovery code paths in __ext4_remount() (bsc#1213017).\n- ext4: move where set the may_inline_data flag is set (bsc#1213011).\n- ext4: only update i_reserved_data_blocks on successful block allocation (bsc#1213019).\n- ext4: refactor ext4_free_blocks() to pull out ext4_mb_clear_bb() (bsc#1213087).\n- ext4: refuse to create ea block when umounted (bsc#1213093).\n- ext4: set lockdep subclass for the ea_inode in ext4_xattr_inode_cache_find() (bsc#1213107).\n- ext4: turn quotas off if mount failed after enabling quotas (bsc#1213110).\n- ext4: update s_journal_inum if it changes after journal replay (bsc#1213094).\n- ext4: use ext4_fc_tl_mem in fast-commit replay path (bsc#1213092).\n- ext4: zero i_disksize when initializing the bootloader inode (bsc#1213013).\n- extcon: fix kernel doc of property capability fields to avoid warnings (git-fixes).\n- extcon: fix kernel doc of property fields to avoid warnings (git-fixes).\n- extcon: usbc-tusb320: add usb type-c support (git-fixes).\n- extcon: usbc-tusb320: call the type-c irq handler only if a port is registered (git-fixes).\n- extcon: usbc-tusb320: unregister typec port on driver removal (git-fixes).\n- extcon: usbc-tusb320: update state on probe even if no irq pending (git-fixes).\n- fbdev: au1200fb: fix missing irq check in au1200fb_drv_probe (git-fixes).\n- fbdev: imxfb: removed unneeded release_mem_region (git-fixes).\n- fbdev: imxfb: warn about invalid left/right margin (git-fixes).\n- fbdev: omapfb: lcd_mipid: fix an error handling path in mipid_spi_probe() (git-fixes).\n- file: always lock position for fmode_atomic_pos (bsc#1213759).\n- firmware: stratix10-svc: fix a potential resource leak in svc_create_memory_pool() (git-fixes).\n- fix documentation of panic_on_warn (git-fixes).\n- fix null pointer dereference in drm_dp_atomic_find_time_slots() (bsc#1213578).\n- fs: dlm: add midcomms init/start functions (git-fixes).\n- fs: dlm: do not set stop rx flag after node reset (git-fixes).\n- fs: dlm: filter user dlm messages for kernel locks (git-fixes).\n- fs: dlm: fix log of lowcomms vs midcomms (git-fixes).\n- fs: dlm: fix race between test_bit() and queue_work() (git-fixes).\n- fs: dlm: fix race in lowcomms (git-fixes).\n- fs: dlm: handle -ebusy first in lock arg validation (git-fixes).\n- fs: dlm: move sending fin message into state change handling (git-fixes).\n- fs: dlm: retry accept() until -eagain or error returns (git-fixes).\n- fs: dlm: return positive pid value for f_getlk (git-fixes).\n- fs: dlm: start midcomms before scand (git-fixes).\n- fs: hfsplus: remove warn_on() from hfsplus_cat_{read,write}_inode() (git-fixes).\n- fs: jfs: check for read-only mounted filesystem in txbegin (git-fixes).\n- fs: jfs: fix null-ptr-deref read in txbegin (git-fixes).\n- fs: jfs: fix ubsan: array-index-out-of-bounds in dballocdmaplev (git-fixes).\n- fuse: ioctl: translate enosys in outarg (bsc#1213524).\n- fuse: revalidate: do not invalidate if interrupted (bsc#1213523).\n- get module prefix from kmod (bsc#1212835).\n- gve: set default duplex configuration to full (git-fixes).\n- gve: unify driver name usage (git-fixes).\n- hid: logitech-hidpp: add hidpp_quirk_delayed_init for the t651 (git-fixes).\n- hid: wacom: add error check to wacom_parse_and_register() (git-fixes).\n- hvcs: fix hvcs port reference counting (bsc#1213134 ltc#202861).\n- hvcs: get reference to tty in remove (bsc#1213134 ltc#202861).\n- hvcs: synchronize hotplug remove with port free (bsc#1213134 ltc#202861).\n- hvcs: use dev_groups to manage hvcs device attributes (bsc#1213134 ltc#202861).\n- hvcs: use driver groups to manage driver attributes (bsc#1213134 ltc#202861).\n- hvcs: use vhangup in hotplug remove (bsc#1213134 ltc#202861).\n- hwmon: (adm1275) allow setting sample averaging (git-fixes).\n- hwmon: (gsc-hwmon) fix fan pwm temperature scaling (git-fixes).\n- hwmon: (k10temp) enable amd3255 proc to show negative temperature (git-fixes).\n- hwmon: (nct7802) fix for temp6 (peci1) processed even if peci1 disabled (git-fixes).\n- hwmon: (pmbus/adm1275) fix problems with temperature monitoring on adm1272 (git-fixes).\n- hwrng: imx-rngc - fix the timeout for init and self check (git-fixes).\n- hwrng: st - keep clock enabled while hwrng is registered (git-fixes).\n- i2c: tegra: set acpi node as primary fwnode (bsc#1213226).\n- i2c: xiic: defer xiic_wakeup() and __xiic_start_xfer() in xiic_process() (git-fixes).\n- i2c: xiic: do not try to handle more interrupt events after error (git-fixes).\n- iavf: check for removal state before iavf_flag_pf_comms_failed (git-fixes).\n- iavf: fix a deadlock caused by rtnl and driver's lock circular dependencies (git-fixes).\n- iavf: fix out-of-bounds when setting channels on remove (git-fixes).\n- iavf: fix potential deadlock on allocation failure (git-fixes).\n- iavf: fix reset task race with iavf_remove() (git-fixes).\n- iavf: fix use-after-free in free_netdev (git-fixes).\n- iavf: move netdev_update_features() into watchdog task (git-fixes).\n- iavf: use internal state to free traffic irqs (git-fixes).\n- iavf: wait for reset in callbacks which trigger it (git-fixes).\n- ib/hfi1: fix wrong mmu_node used for user sdma packet after invalidate (git-fixes)\n- ib/hfi1: use bitmap_zalloc() when applicable (git-fixes)\n- ib/isert: fix dead lock in ib_isert (git-fixes)\n- ib/isert: fix incorrect release of isert connection (git-fixes)\n- ib/isert: fix possible list corruption in cma handler (git-fixes)\n- ib/uverbs: fix to consider event queue closing also upon non-blocking mode (git-fixes)\n- ibmvnic: do not reset dql stats on non_fatal err (bsc#1212603 ltc#202604).\n- ice: fix max_rate check while configuring tx rate limits (git-fixes).\n- ice: fix memory management in ice_ethtool_fdir.c (git-fixes).\n- ice: handle extts in the miscellaneous interrupt thread (git-fixes).\n- igc: check if hardware tx timestamping is enabled earlier (git-fixes).\n- igc: enable and fix rx hash usage by netstack (git-fixes).\n- igc: fix inserting of empty frame for launchtime (git-fixes).\n- igc: fix kernel panic during ndo_tx_timeout callback (git-fixes).\n- igc: fix launchtime before start of cycle (git-fixes).\n- igc: fix race condition in ptp tx code (git-fixes).\n- igc: handle pps start time programming for past time values (git-fixes).\n- igc: prevent garbled tx queue with xdp zerocopy (git-fixes).\n- igc: remove delay during tx ring configuration (git-fixes).\n- igc: set tp bit in 'supported' and 'advertising' fields of ethtool_link_ksettings (git-fixes).\n- igc: work around hw bug causing missing timestamps (git-fixes).\n- iio: accel: fxls8962af: errata bug only applicable for fxls8962af (git-fixes).\n- iio: accel: fxls8962af: fixup buffer scan element type (git-fixes).\n- iio: adc: ad7192: fix internal/external clock selection (git-fixes).\n- iio: adc: ad7192: fix null ad7192_state pointer access (git-fixes).\n- inotify: avoid reporting event with invalid wd (bsc#1213025).\n- input: adxl34x - do not hardcode interrupt trigger type (git-fixes).\n- input: drv260x - fix typo in register value define (git-fixes).\n- input: drv260x - remove unused .reg_defaults (git-fixes).\n- input: drv260x - sleep between polling go bit (git-fixes).\n- input: i8042 - add clevo pcx0dx to i8042 quirk table (git-fixes).\n- input: iqs269a - do not poll during ati (git-fixes).\n- input: iqs269a - do not poll during suspend or resume (git-fixes).\n- input: soc_button_array - add invalid acpi_index dmi quirk handling (git-fixes).\n- integrity: fix possible multiple allocation in integrity_inode_get() (git-fixes).\n- io_uring: do not expose io_fill_cqe_aux() (bsc#1211014).\n- irqchip/gic-v3: claim iomem resources (bsc#1213533)\n- irqchip/gicv3: handle resource request failure consistently (bsc#1213533)\n- irqchip/gicv3: workaround for nvidia erratum t241-fabric-4 (bsc#1213533)\n- jbd2: fix data missing when reusing bh which is ready to be checkpointed (bsc#1213095).\n- jdb2: do not refuse invalidation of already invalidated buffers (bsc#1213014).\n- jffs2: fix memory leak in jffs2_do_fill_super (git-fixes).\n- jffs2: fix memory leak in jffs2_do_mount_fs (git-fixes).\n- jffs2: fix memory leak in jffs2_scan_medium (git-fixes).\n- jffs2: fix use-after-free in jffs2_clear_xattr_subsystem (git-fixes).\n- jffs2: gc deadlock reading a page that is used in jffs2_write_begin() (git-fixes).\n- jffs2: reduce stack usage in jffs2_build_xattr_subsystem() (git-fixes).\n- jfs: jfs_dmap: validate db_l2nbperpage while mounting (git-fixes).\n- kabi fix after restore kabi for nvidia vgpu driver (bsc#1210825).\n- kabi/severities: add vas symbols changed due to recent fix vas accelerators are directly tied to the architecture, there is no reason to have out-of-tree production drivers\n- kabi/severities: ignore kabi of i915 module it's exported only for its sub-module, not really used by externals\n- kabi/severities: ignore kabi of vmwgfx the driver exports a function unnecessarily without used by anyone else. ignore the kabi changes.\n- kabi/severities: relax kabi for ath11k local symbols (bsc#1207948)\n- kabi: do not check external trampolines for signature (kabi bsc#1207894 bsc#1211243).\n- kernel-binary.spec.in: remove superfluous %% in supplements fixes: 02b7735e0caf ('rpm/kernel-binary.spec.in: add enhances and supplements tags to in-tree kmps')\n- kselftest: vdso: fix accumulation of uninitialized ret when clock_realtime is undefined (git-fixes).\n- kvm: arm64: do not read a hw interrupt pending state in user context (git-fixes)\n- kvm: arm64: warn if accessing timer pending state outside of vcpu (bsc#1213620)\n- kvm: do not null dereference ops-\u003edestroy (git-fixes)\n- kvm: downgrade two bug_ons to warn_on_once (git-fixes)\n- kvm: initialize debugfs_dentry when a vm is created to avoid null (git-fixes)\n- kvm: s390: pv: fix index value of replaced asce (git-fixes bsc#1213867).\n- kvm: vmx: inject #gp on encls if vcpu has paging disabled (cr0.pg==0) (git-fixes).\n- kvm: vmx: inject #gp, not #ud, if sgx2 encls leafs are unsupported (git-fixes).\n- kvm: vmx: restore vmx_vmexit alignment (git-fixes).\n- kvm: x86: account fastpath-only vm-exits in vcpu stats (git-fixes).\n- leds: trigger: netdev: recheck netdev_led_mode_linkup on dev rename (git-fixes).\n- libceph: harden msgr2.1 frame segment length checks (bsc#1213857).\n- m alsa: usb-audio: add quirk for tascam model 12 (git-fixes).\n- mailbox: ti-msgmgr: fill non-message tx data fields with 0x0 (git-fixes).\n- maintainers: add amd p-state driver maintainer entry (bsc#1212445).\n- md: add error_handlers for raid0 and linear (bsc#1212766).\n- media: atomisp: gmin_platform: fix out_len in gmin_get_config_dsm_var() (git-fixes).\n- media: cec: core: do not set last_initiator if tx in progress (git-fixes).\n- media: cec: i2c: ch7322: also select regmap (git-fixes).\n- media: i2c: correct format propagation for st-mipid02 (git-fixes).\n- media: staging: atomisp: select v4l2_fwnode (git-fixes).\n- media: usb: check az6007_read() return value (git-fixes).\n- media: usb: siano: fix warning due to null work_func_t function pointer (git-fixes).\n- media: venus: helpers: fix align() of non power of two (git-fixes).\n- media: videodev2.h: fix struct v4l2_input tuner index comment (git-fixes).\n- memcg: drop kmem.limit_in_bytes (bsc#1208788, bsc#1212905).\n- memory: brcmstb_dpfe: fix testing array offset after use (git-fixes).\n- meson saradc: fix clock divider mask length (git-fixes).\n- mfd: intel-lpss: add missing check for platform_get_resource (git-fixes).\n- mfd: pm8008: fix module autoloading (git-fixes).\n- mfd: rt5033: drop rt5033-battery sub-device (git-fixes).\n- mfd: stmfx: fix error path in stmfx_chip_init (git-fixes).\n- mfd: stmfx: nullify stmfx-\u003evdd in case of error (git-fixes).\n- mfd: stmpe: only disable the regulators if they are enabled (git-fixes).\n- mhi_power_down() kabi workaround (bsc#1207948).\n- misc: fastrpc: create fastrpc scalar with correct buffer count (git-fixes).\n- misc: pci_endpoint_test: free irqs before removing the device (git-fixes).\n- misc: pci_endpoint_test: re-init completion for every test (git-fixes).\n- mmc: core: disable trim on kingston emmc04g-m627 (git-fixes).\n- mmc: mmci: set probe_prefer_asynchronous (git-fixes).\n- mmc: sdhci-msm: disable broken 64-bit dma on msm8916 (git-fixes).\n- mmc: sdhci: fix dma configure compatibility issue when 64bit dma mode is used (git-fixes).\n- mtd: rawnand: meson: fix unaligned dma buffers handling (git-fixes).\n- net/mlx5: add ifc bits for bypassing port select flow table (git-fixes)\n- net/mlx5: dr, support sw created encap actions for fw table (git-fixes).\n- net/mlx5e: check for not_ready flag state after locking (git-fixes).\n- net/mlx5e: fix double free in mlx5e_destroy_flow_table (git-fixes).\n- net/mlx5e: fix memory leak in mlx5e_fs_tt_redirect_any_create (git-fixes).\n- net/mlx5e: fix memory leak in mlx5e_ptp_open (git-fixes).\n- net/mlx5e: xdp, allow growing tail for xdp multi buffer (git-fixes).\n- net/mlx5e: xsk: set napi_id to support busy polling on xsk rq (git-fixes).\n- net/sched: sch_qfq: refactor parsing of netlink parameters (bsc#1213585).\n- net/sched: sch_qfq: reintroduce lmax bound check for mtu (bsc#1213585).\n- net: ena: fix shift-out-of-bounds in exponential backoff (git-fixes).\n- net: mana: add support for vlan tagging (bsc#1212301).\n- net: mana: batch ringing rx queue doorbell on receiving packets (bsc#1212901).\n- net: mana: use the correct wqe count for ringing rq doorbell (bsc#1212901).\n- net: phy: marvell10g: fix 88x3310 power up (git-fixes).\n- net: phy: prevent stale pointer dereference in phy_init() (git-fixes).\n- net: qrtr: fix an uninit variable access bug in qrtr_tx_resume() (git-fixes).\n- net: qrtr: start mhi channel after endpoit creation (git-fixes).\n- nfcsim.c: fix error checking for debugfs_create_dir (git-fixes).\n- nfsd: add encoding of op_recall flag for write delegation (git-fixes).\n- nfsd: fix double fget() bug in __write_ports_addfd() (git-fixes).\n- nfsd: fix sparse warning (git-fixes).\n- nfsd: remove open coding of string copy (git-fixes).\n- nfsv4.1: always send a reclaim_complete after establishing lease (git-fixes).\n- nfsv4.1: freeze the session table upon receiving nfs4err_badsession (git-fixes).\n- nilfs2: fix buffer corruption due to concurrent device reads (git-fixes).\n- nilfs2: reject devices with insufficient block count (git-fixes).\n- ntb: amd: fix error handling in amd_ntb_pci_driver_init() (git-fixes).\n- ntb: idt: fix error handling in idt_pci_driver_init() (git-fixes).\n- ntb: intel: fix error handling in intel_ntb_pci_driver_init() (git-fixes).\n- ntb: ntb_tool: add check for devm_kcalloc (git-fixes).\n- ntb: ntb_transport: fix possible memory leak while device_register() fails (git-fixes).\n- nvme-core: fix dev_pm_qos memleak (git-fixes).\n- nvme-core: fix memory leak in dhchap_ctrl_secret (git-fixes).\n- nvme-core: fix memory leak in dhchap_secret_store (git-fixes).\n- nvme-multipath: support io stats on the mpath device (bsc#1210565).\n- nvme-pci: add quirk for missing secondary temperature thresholds (git-fixes).\n- nvme-pci: fix dma direction of unmapping integrity data (git-fixes).\n- nvme-pci: remove nvme_queue from nvme_iod (git-fixes).\n- nvme: do not reject probe due to duplicate ids for single-ported pcie devices (git-fixes).\n- nvme: double ka polling frequency to avoid kato with tbkas on (git-fixes).\n- nvme: fix the nvme_id_ns_nvm_sts_mask definition (git-fixes).\n- nvme: introduce nvme_start_request (bsc#1210565).\n- ocfs2: check new file size on fallocate call (git-fixes).\n- ocfs2: fix defrag path triggering jbd2 assert (git-fixes).\n- ocfs2: fix freeing uninitialized resource on ocfs2_dlm_shutdown (git-fixes).\n- ocfs2: fix non-auto defrag path not working issue (git-fixes).\n- ocfs2: fix use-after-free when unmounting read-only filesystem (git-fixes).\n- ocfs2: switch to security_inode_init_security() (git-fixes).\n- octeontx-af: fix hardware timestamp configuration (git-fixes).\n- octeontx2-af: move validation of ptp pointer before its usage (git-fixes).\n- octeontx2-pf: add additional check for mcam rules (git-fixes).\n- opp: fix use-after-free in lazy_opp_tables after probe deferral (git-fixes).\n- pci/aspm: disable aspm on mfd function removal to avoid use-after-free (git-fixes).\n- pci/pm: avoid putting elopos e2/s2/h2 pcie ports in d3cold (git-fixes).\n- pci: add function 1 dma alias quirk for marvell 88se9235 (git-fixes).\n- pci: add pci_clear_master() stub for non-config_pci (git-fixes).\n- pci: cadence: fix gen2 link retraining process (git-fixes).\n- pci: endpoint: add missing documentation about the msi/msi-x range (git-fixes).\n- pci: ftpci100: release the clock resources (git-fixes).\n- pci: pciehp: cancel bringup sequence if card is not present (git-fixes).\n- pci: qcom: disable write access to read only registers for ip v2.3.3 (git-fixes).\n- pci: release resource invalidated by coalescing (git-fixes).\n- pci: rockchip: add poll and timeout to wait for phy plls to be locked (git-fixes).\n- pci: rockchip: assert pci configuration enable bit after probe (git-fixes).\n- pci: rockchip: fix legacy irq generation for rk3399 pcie endpoint core (git-fixes).\n- pci: rockchip: set address alignment for endpoint mode (git-fixes).\n- pci: rockchip: use u32 variable to access 32-bit registers (git-fixes).\n- pci: rockchip: write pci device id to correct register (git-fixes).\n- pci: s390: fix use-after-free of pci resources with per-function hotplug (bsc#1212525).\n- pci: vmd: fix uninitialized variable usage in vmd_enable_domain() (git-fixes).\n- pci: vmd: reset vmd config register between soft reboots (git-fixes).\n- perf/x86/amd/core: always clear status for idx (bsc#1213233).\n- phy: hisilicon: fix an out of bounds check in hisi_inno_phy_probe() (git-fixes).\n- phy: revert 'phy: remove soc_exynos4212 dep. from phy_exynos4x12_usb' (git-fixes).\n- phy: tegra: xusb: check return value of devm_kzalloc() (git-fixes).\n- phy: tegra: xusb: clear the driver reference in usb-phy dev (git-fixes).\n- pie: fix kernel-doc notation warning (git-fixes).\n- pinctrl: amd: detect internal gpio0 debounce handling (git-fixes).\n- pinctrl: amd: do not show `invalid config param` errors (git-fixes).\n- pinctrl: amd: fix mistake in handling clearing pins at startup (git-fixes).\n- pinctrl: amd: only use special debounce behavior for gpio 0 (git-fixes).\n- pinctrl: amd: use amd_pinconf_set() for all config options (git-fixes).\n- pinctrl: at91-pio4: check return value of devm_kasprintf() (git-fixes).\n- pinctrl: cherryview: return correct value if pin in push-pull mode (git-fixes).\n- pinctrl: microchip-sgpio: check return value of devm_kasprintf() (git-fixes).\n- platform/x86: msi-laptop: fix rfkill out-of-sync on msi wind u100 (git-fixes).\n- platform/x86: think-lmi: correct nvme password handling (git-fixes).\n- platform/x86: think-lmi: correct system password interface (git-fixes).\n- platform/x86: think-lmi: mutex protection around multiple wmi calls (git-fixes).\n- platform/x86: thinkpad_acpi: fix lkp-tests warnings for platform profiles (git-fixes).\n- powerpc/64: only warn if __pa()/__va() called with bad addresses (bsc#1194869).\n- powerpc/64s: fix vas mm use after free (bsc#1194869).\n- powerpc/book3s64/mm: fix directmap stats in /proc/meminfo (bsc#1194869).\n- powerpc/bpf: fix use of user_pt_regs in uapi (bsc#1194869).\n- powerpc/ftrace: remove ftrace init tramp once kernel init is complete (bsc#1194869).\n- powerpc/interrupt: do not read msr from interrupt_exit_kernel_prepare() (bsc#1194869).\n- powerpc/mm/dax: fix the condition when checking if altmap vmemap can cross-boundary (bsc#1150305 ltc#176097 git-fixes).\n- powerpc/mm: switch obsolete dssall to .long (bsc#1194869).\n- powerpc/powernv/sriov: perform null check on iov before dereferencing iov (bsc#1194869).\n- powerpc/powernv/vas: assign real address to rx_fifo in vas_rx_win_attr (bsc#1194869).\n- powerpc/prom_init: fix kernel config grep (bsc#1194869).\n- powerpc/pseries/vas: hold mmap_mutex after mmap lock during window close (jsc#ped-542 git-fixes).\n- powerpc/secvar: fix refcount leak in format_show() (bsc#1194869).\n- powerpc/xics: fix refcount leak in icp_opal_init() (bsc#1194869).\n- powerpc: clean vdso32 and vdso64 directories (bsc#1194869).\n- powerpc: define get_cycles macro for arch-override (bsc#1194869).\n- powerpc: update ppc_save_regs to save current r1 in pt_regs (bsc#1194869).\n- pstore/ram: add check for kstrdup (git-fixes).\n- pwm: ab8500: fix error code in probe() (git-fixes).\n- pwm: imx-tpm: force 'real_period' to be zero in suspend (git-fixes).\n- pwm: sysfs: do not apply state to already disabled pwms (git-fixes).\n- radeon: avoid double free in ci_dpm_init() (git-fixes).\n- rdma/bnxt_re: avoid calling wake_up threads from spin_lock context (git-fixes)\n- rdma/bnxt_re: disable/kill tasklet only if it is enabled (git-fixes)\n- rdma/bnxt_re: fix hang during driver unload (git-fixes)\n- rdma/bnxt_re: fix to remove an unnecessary log (git-fixes)\n- rdma/bnxt_re: fix to remove unnecessary return labels (git-fixes)\n- rdma/bnxt_re: prevent handling any completions after qp destroy (git-fixes)\n- rdma/bnxt_re: remove a redundant check inside bnxt_re_update_gid (git-fixes)\n- rdma/bnxt_re: remove unnecessary checks (git-fixes)\n- rdma/bnxt_re: return directly without goto jumps (git-fixes)\n- rdma/bnxt_re: use unique names while registering interrupts (git-fixes)\n- rdma/bnxt_re: wraparound mbox producer index (git-fixes)\n- rdma/cma: always set static rate to 0 for roce (git-fixes)\n- rdma/core: update cma destination address on rdma_resolve_addr (git-fixes)\n- rdma/hns: fix hns_roce_table_get return value (git-fixes)\n- rdma/irdma: add missing read barriers (git-fixes)\n- rdma/irdma: avoid fortify-string warning in irdma_clr_wqes (git-fixes)\n- rdma/irdma: fix data race on cqp completion stats (git-fixes)\n- rdma/irdma: fix data race on cqp request done (git-fixes)\n- rdma/irdma: fix op_type reporting in cqes (git-fixes)\n- rdma/irdma: report correct wc error (git-fixes)\n- rdma/mlx4: make check for invalid flags stricter (git-fixes)\n- rdma/mlx5: create an indirect flow table for steering anchor (git-fixes)\n- rdma/mlx5: do not set tx affinity when lag is in hash mode (git-fixes)\n- rdma/mlx5: fix affinity assignment (git-fixes)\n- rdma/mlx5: initiate dropless rq for raw ethernet functions (git-fixes)\n- rdma/mthca: fix crash when polling cq for shared qps (git-fixes)\n- rdma/rtrs: fix rxe_dealloc_pd warning (git-fixes)\n- rdma/rtrs: fix the last iu-\u003ebuf leak in err path (git-fixes)\n- rdma/rxe: fix access checks in rxe_check_bind_mw (git-fixes)\n- rdma/rxe: fix packet length checks (git-fixes)\n- rdma/rxe: fix ref count error in check_rkey() (git-fixes)\n- rdma/rxe: fix rxe_cq_post (git-fixes)\n- rdma/rxe: fix the use-before-initialization error of resp_pkts (git-fixes)\n- rdma/rxe: remove dangling declaration of rxe_cq_disable() (git-fixes)\n- rdma/rxe: remove the unused variable obj (git-fixes)\n- rdma/rxe: removed unused name from rxe_task struct (git-fixes)\n- rdma/uverbs: restrict usage of privileged qkeys (git-fixes)\n- rdma/vmw_pvrdma: remove unnecessary check on wr-\u003eopcode (git-fixes)\n- regmap: account for register length in smbus i/o limits (git-fixes).\n- regmap: drop initial version of maximum transfer length fixes (git-fixes).\n- regulator: core: fix more error checking for debugfs_create_dir() (git-fixes).\n- regulator: core: streamline debugfs operations (git-fixes).\n- regulator: helper: document ramp_delay parameter of regulator_set_ramp_delay_regmap() (git-fixes).\n- restore kabi for nvidia vgpu driver (bsc#1210825).\n- revert 'alsa: usb-audio: drop superfluous interface setup at parsing' (git-fixes).\n- revert 'arm64: dts: zynqmp: add address-cells property to interrupt (git-fixes)\n- revert 'debugfs, coccinelle: check for obsolete define_simple_attribute() usage' (git-fixes).\n- revert 'drm/amd/display: edp do not add non-edid timings' (git-fixes).\n- revert 'drm/i915: disable dsb usage for now' (git-fixes).\n- revert 'drop amdgpu patches for fixing regression (bsc#1213304,bsc#1213777)' sle15-sp5 branch works as is, hence revive the dropped patches again.\n- revert 'iavf: detach device during reset task' (git-fixes).\n- revert 'iavf: do not restart tx queues after reset task failure' (git-fixes).\n- revert 'mtd: rawnand: arasan: prevent an unsupported configuration' (git-fixes).\n- revert 'net: phy: dp83867: perform soft reset and retain established link' (git-fixes).\n- revert 'nfsv4: retry lock on old_stateid during delegation return' (git-fixes).\n- revert 'usb: dwc3: core: enable autoretry feature in the controller' (git-fixes).\n- revert 'usb: gadget: tegra-xudc: fix error check in tegra_xudc_powerdomain_init()' (git-fixes).\n- revert 'usb: gadget: udc: core: offload usb_udc_vbus_handler processing'\n- revert 'usb: gadget: udc: core: prevent soft_connect_store() race'\n- revert 'usb: xhci: tegra: fix error check' (git-fixes).\n- revive drm_dp_mst_hpd_irq() function (bsc#1213578).\n- rpm/check-for-config-changes: ignore also pahole_has_* we now also have options like config_pahole_has_lang_exclude.\n- rpm/check-for-config-changes: ignore also riscv_isa_* and dynamic_sigframe they depend on config_toolchain_has_*.\n- rsi: remove kernel-doc comment marker (git-fixes).\n- rtc: efi: add wakeup support (bsc#1213116).\n- rtc: efi: enable set/get wakeup services as optional (bsc#1213116).\n- rtc: efi: switch to devm_rtc_allocate_device (bsc#1213116).\n- rtc: st-lpc: release some resources in st_rtc_probe() in case of error (git-fixes).\n- rxrpc, afs: fix selection of abort codes (git-fixes).\n- s390/ap: fix status returned by ap_aqic() (git-fixes bsc#1213259).\n- s390/ap: fix status returned by ap_qact() (git-fixes bsc#1213258).\n- s390/bpf: add expoline to tail calls (git-fixes bsc#1213870).\n- s390/dasd: fix hanging device after quiesce/resume (git-fixes bsc#1213810).\n- s390/dasd: print copy pair message only for the correct error (git-fixes bsc#1213872).\n- s390/debug: add _asm_s390_ prefix to header guard (git-fixes bsc#1213263).\n- s390/decompressor: specify __decompress() buf len to avoid overflow (git-fixes bsc#1213863).\n- s390/gmap: voluntarily schedule during key setting (git-fixes bsc#1212892).\n- s390/ipl: add missing intersection check to ipl_report handling (git-fixes bsc#1213871).\n- s390/pci: clean up left over special treatment for function zero (bsc#1212525).\n- s390/pci: only add specific device in zpci_bus_scan_device() (bsc#1212525).\n- s390/pci: remove redundant pci_bus_add_devices() on new bus (bsc#1212525).\n- s390/percpu: add read_once() to arch_this_cpu_to_op_simple() (git-fixes bsc#1213252).\n- s390/qeth: fix vipa deletion (git-fixes bsc#1213713).\n- s390/vmem: fix empty page tables cleanup under kasan (git-fixes bsc#1213715).\n- s390: define runtime_discard_exit to fix link error with gnu ld \u0026lt; 2.36 (git-fixes bsc#1213264).\n- s390: discard .interp section (git-fixes bsc#1213247).\n- s390: introduce nospec_uses_trampoline() (git-fixes bsc#1213870).\n- scftorture: count reschedule ipis (git-fixes).\n- sched/debug: fix dentry leak in update_sched_domain_debugfs (git-fixes)\n- sched: fix debug \u0026\u0026 !schedstats warn (git-fixes)\n- scsi: lpfc: abort outstanding els cmds when mailbox timeout error is detected (bsc#1213756).\n- scsi: lpfc: avoid -wstringop-overflow warning (bsc#1213756).\n- scsi: lpfc: clean up sli-4 sysfs resource reporting (bsc#1213756).\n- scsi: lpfc: copyright updates for 14.2.0.14 patches (bsc#1213756).\n- scsi: lpfc: fix a possible data race in lpfc_unregister_fcf_rescan() (bsc#1213756).\n- scsi: lpfc: fix incorrect big endian type assignment in bsg loopback path (bsc#1213756).\n- scsi: lpfc: fix incorrect big endian type assignments in fdmi and vmid paths (bsc#1213756).\n- scsi: lpfc: fix lpfc_name struct packing (bsc#1213756).\n- scsi: lpfc: make fabric zone discovery more robust when handling unsolicited logo (bsc#1213756).\n- scsi: lpfc: pull out fw diagnostic dump log message from driver's trace buffer (bsc#1213756).\n- scsi: lpfc: qualify ndlp discovery state when processing rscn (bsc#1213756).\n- scsi: lpfc: refactor cpu affinity assignment paths (bsc#1213756).\n- scsi: lpfc: remove extra ndlp kref decrement in flogi cmpl for loop topology (bsc#1213756).\n- scsi: lpfc: replace all non-returning strlcpy() with strscpy() (bsc#1213756).\n- scsi: lpfc: replace one-element array with flexible-array member (bsc#1213756).\n- scsi: lpfc: revise ndlp kref handling for dev_loss_tmo_callbk and lpfc_drop_node (bsc#1213756).\n- scsi: lpfc: set establish image pair service parameter only for target functions (bsc#1213756).\n- scsi: lpfc: simplify fcp_abort transport callback log message (bsc#1213756).\n- scsi: lpfc: update lpfc version to 14.2.0.14 (bsc#1213756).\n- scsi: lpfc: use struct_size() helper (bsc#1213756).\n- scsi: qla2xxx: adjust iocb resource on qpair create (bsc#1213747).\n- scsi: qla2xxx: array index may go out of bound (bsc#1213747).\n- scsi: qla2xxx: avoid fcport pointer dereference (bsc#1213747).\n- scsi: qla2xxx: check valid rport returned by fc_bsg_to_rport() (bsc#1213747).\n- scsi: qla2xxx: correct the index of array (bsc#1213747).\n- scsi: qla2xxx: drop useless list_head (bsc#1213747).\n- scsi: qla2xxx: fix buffer overrun (bsc#1213747).\n- scsi: qla2xxx: fix command flush during tmf (bsc#1213747).\n- scsi: qla2xxx: fix deletion race condition (bsc#1213747).\n- scsi: qla2xxx: fix end of loop test (bsc#1213747).\n- scsi: qla2xxx: fix erroneous link up failure (bsc#1213747).\n- scsi: qla2xxx: fix error code in qla2x00_start_sp() (bsc#1213747).\n- scsi: qla2xxx: fix inconsistent tmf timeout (bsc#1213747).\n- scsi: qla2xxx: fix null pointer dereference in target mode (bsc#1213747).\n- scsi: qla2xxx: fix potential null pointer dereference (bsc#1213747).\n- scsi: qla2xxx: fix session hang in gnl (bsc#1213747).\n- scsi: qla2xxx: fix tmf leak through (bsc#1213747).\n- scsi: qla2xxx: limit tmf to 8 per function (bsc#1213747).\n- scsi: qla2xxx: pointer may be dereferenced (bsc#1213747).\n- scsi: qla2xxx: remove unused nvme_ls_waitq wait queue (bsc#1213747).\n- scsi: qla2xxx: replace one-element array with declare_flex_array() helper (bsc#1213747).\n- scsi: qla2xxx: silence a static checker warning (bsc#1213747).\n- scsi: qla2xxx: turn off noisy message log (bsc#1213747).\n- scsi: qla2xxx: update version to 10.02.08.400-k (bsc#1213747).\n- scsi: qla2xxx: update version to 10.02.08.500-k (bsc#1213747).\n- scsi: qla2xxx: use vmalloc_array() and vcalloc() (bsc#1213747).\n- security: keys: modify mismatched function name (git-fixes).\n- selftests/ir: fix build with ancient kernel headers (git-fixes).\n- selftests: cgroup: fix unsigned comparison with less than zero (git-fixes).\n- selftests: forwarding: fix packet matching in mirroring selftests (git-fixes).\n- selftests: mptcp: depend on syn_cookies (git-fixes).\n- selftests: mptcp: sockopt: return error if wrong mark (git-fixes).\n- selftests: rtnetlink: remove netdevsim device after ipsec offload test (git-fixes).\n- selftests: tc: add 'ct' action kconfig dep (git-fixes).\n- selftests: tc: add conntrack procfs kconfig (git-fixes).\n- selftests: tc: set timeout to 15 minutes (git-fixes).\n- serial: 8250: lock port for stop_rx() in omap8250_irq() (git-fixes).\n- serial: 8250: lock port for uart_ier access in omap8250_irq() (git-fixes).\n- serial: 8250: omap: fix freeing of resources on failed register (git-fixes).\n- serial: 8250_omap: use force_suspend and resume for system suspend (git-fixes).\n- serial: atmel: do not enable irqs prematurely (git-fixes).\n- serial: qcom-geni: drop bogus runtime pm state update (git-fixes).\n- serial: sifive: fix sifive_serial_console_setup() section (git-fixes).\n- sfc: fix crash when reading stats while nic is resetting (git-fixes).\n- sfc: fix xdp queues mode with legacy irq (git-fixes).\n- sfc: use budget for tx completions (git-fixes).\n- signal/powerpc: on swapcontext failure force sigsegv (bsc#1194869).\n- signal/s390: use force_sigsegv in default_trap_handler (git-fixes bsc#1212861).\n- signal: replace force_sigsegv(sigsegv) with force_fatal_sig(sigsegv) (bsc#1194869).\n- smb3: do not reserve too many oplock credits (bsc#1193629).\n- smb3: missing null check in smb2_change_notify (bsc#1193629).\n- smb: client: fix broken file attrs with nodfs mounts (bsc#1193629).\n- smb: client: fix missed ses refcounting (git-fixes).\n- smb: client: fix parsing of source mount option (bsc#1193629).\n- smb: client: fix shared dfs root mounts with different prefixes (bsc#1193629).\n- smb: client: fix warning in cifs_match_super() (bsc#1193629).\n- smb: client: fix warning in cifs_smb3_do_mount() (bsc#1193629).\n- smb: client: fix warning in cifsfindfirst() (bsc#1193629).\n- smb: client: fix warning in cifsfindnext() (bsc#1193629).\n- smb: client: fix warning in generic_ip_connect() (bsc#1193629).\n- smb: client: improve dfs mount check (bsc#1193629).\n- smb: client: remove redundant pointer 'server' (bsc#1193629).\n- smb: delete an unnecessary statement (bsc#1193629).\n- smb: move client and server files to common directory fs/smb (bsc#1193629).\n- smb: remove obsolete comment (bsc#1193629).\n- soc/fsl/qe: fix usb.c build errors (git-fixes).\n- soc: samsung: exynos-pmu: re-introduce exynos4212 support (git-fixes).\n- soundwire: bus_type: avoid lockdep assert in sdw_drv_probe() (git-fixes).\n- soundwire: cadence: drain the rx fifo after an io timeout (git-fixes).\n- soundwire: dmi-quirks: add new mapping for hp spectre x360 (git-fixes).\n- soundwire: qcom: fix storing port config out-of-bounds (git-fixes).\n- soundwire: qcom: update status correctly with mask (git-fixes).\n- soundwire: stream: add missing clear of alloc_slave_rt (git-fixes).\n- spi: bcm-qspi: return error if neither hif_mspi nor mspi is available (git-fixes).\n- spi: bcm63xx: fix max prepend length (git-fixes).\n- spi: dw: round of n_bytes to power of 2 (git-fixes).\n- spi: lpspi: disable lpspi module irq in dma mode (git-fixes).\n- spi: spi-geni-qcom: correct cs_toggle bit in spi_trans_cfg (git-fixes).\n- staging: ks7010: potential buffer overflow in ks_wlan_set_encode_ext() (git-fixes).\n- staging: r8712: fix memory leak in _r8712_init_xmit_priv() (git-fixes).\n- sunrpc: always free ctxt when freeing deferred request (git-fixes).\n- sunrpc: double free xprt_ctxt while still in use (git-fixes).\n- sunrpc: fix trace_svc_register() call site (git-fixes).\n- sunrpc: fix uaf in svc_tcp_listen_data_ready() (git-fixes).\n- sunrpc: remove dead code in svc_tcp_release_rqst() (git-fixes).\n- sunrpc: remove the maximum number of retries in call_bind_status (git-fixes).\n- svcrdma: prevent page release when nothing was received (git-fixes).\n- swsmu/amdgpu_smu: fix the wrong if-condition (git-fixes).\n- test_firmware: return enomem instead of enospc on failed memory allocation (git-fixes).\n- tpm: tpm_vtpm_proxy: fix a race condition in /dev/vtpmx creation (git-fixes).\n- tpm_tis: explicitly check for error code (git-fixes).\n- tracing/timer: add missing hrtimer modes to decode_hrtimer_mode() (git-fixes).\n- tty: n_gsm: fix uaf in gsm_cleanup_mux (git-fixes).\n- tty: serial: fsl_lpuart: add earlycon for imx8ulp platform (git-fixes).\n- tty: serial: imx: fix rs485 rx after tx (git-fixes).\n- tty: serial: samsung_tty: fix a memory leak in s3c24xx_serial_getclk() in case of error (git-fixes).\n- tty: serial: samsung_tty: fix a memory leak in s3c24xx_serial_getclk() when iterating clk (git-fixes).\n- ubi: ensure that vid header offset + vid header size \u0026lt;= alloc, size (bsc#1210584).\n- ubi: fix failure attaching when vid_hdr offset equals to (sub)page size (bsc#1210584).\n- ubifs: add missing iput if do_tmpfile() failed in rename whiteout (git-fixes).\n- ubifs: do_rename: fix wrong space budget when target inode's nlink \u003e 1 (git-fixes).\n- ubifs: error path in ubifs_remount_rw() seems to wrongly free write buffers (git-fixes).\n- ubifs: fix 'ui-\u003edirty' race between do_tmpfile() and writeback work (git-fixes).\n- ubifs: fix aa deadlock when setting xattr for encrypted file (git-fixes).\n- ubifs: fix build errors as symbol undefined (git-fixes).\n- ubifs: fix deadlock in concurrent rename whiteout and inode writeback (git-fixes).\n- ubifs: fix memory leak in alloc_wbufs() (git-fixes).\n- ubifs: fix memory leak in do_rename (git-fixes).\n- ubifs: fix read out-of-bounds in ubifs_wbuf_write_nolock() (git-fixes).\n- ubifs: fix to add refcount once page is set private (git-fixes).\n- ubifs: fix wrong dirty space budget for dirty inode (git-fixes).\n- ubifs: free memory for tmpfile name (git-fixes).\n- ubifs: rectify space amount budget for mkdir/tmpfile operations (git-fixes).\n- ubifs: rectify space budget for ubifs_symlink() if symlink is encrypted (git-fixes).\n- ubifs: rectify space budget for ubifs_xrename() (git-fixes).\n- ubifs: rename whiteout atomically (git-fixes).\n- ubifs: rename_whiteout: correct old_dir size computing (git-fixes).\n- ubifs: rename_whiteout: fix double free for whiteout_ui-\u003edata (git-fixes).\n- ubifs: reserve one leb for each journal head while doing budget (git-fixes).\n- ubifs: setflags: make dirtied_ino_d 8 bytes aligned (git-fixes).\n- ubifs: ubifs_writepage: mark page dirty after writing inode failed (git-fixes).\n- udf: avoid double brelse() in udf_rename() (bsc#1213032).\n- udf: define efscorrupted error code (bsc#1213038).\n- udf: detect system inodes linked into directory hierarchy (bsc#1213114).\n- udf: discard preallocation before extending file with a hole (bsc#1213036).\n- udf: do not bother looking for prealloc extents if i_lenextents matches i_size (bsc#1213035).\n- udf: do not bother merging very long extents (bsc#1213040).\n- udf: do not update file length for failed writes to inline files (bsc#1213041).\n- udf: fix error handling in udf_new_inode() (bsc#1213112).\n- udf: fix extending file within last block (bsc#1213037).\n- udf: fix preallocation discarding at indirect extent boundary (bsc#1213034).\n- udf: preserve link count of system files (bsc#1213113).\n- udf: truncate added extents on failed expansion (bsc#1213039).\n- update config and supported.conf files due to renaming.\n- update config files: enable config_x86_amd_pstate (bsc#1212445)\n- update suse/rdma-mthca-fix-crash-when-polling-cq-for-shared-qps. (git-fixes bsc#1212604).\n- usb: dwc2: fix some error handling paths (git-fixes).\n- usb: dwc2: platform: improve error reporting for problems during .remove() (git-fixes).\n- usb: dwc3-meson-g12a: fix an error handling path in dwc3_meson_g12a_probe() (git-fixes).\n- usb: dwc3: do not reset device side if dwc3 was configured as host-only (git-fixes).\n- usb: dwc3: gadget: propagate core init errors to udc during pullup (git-fixes).\n- usb: dwc3: pci: skip byt gpio lookup table for hardwired phy (git-fixes).\n- usb: dwc3: qcom: fix an error handling path in dwc3_qcom_probe() (git-fixes).\n- usb: dwc3: qcom: fix potential memory leak (git-fixes).\n- usb: dwc3: qcom: release the correct resources in dwc3_qcom_remove() (git-fixes).\n- usb: gadget: core: remove unbalanced mutex_unlock in usb_gadget_activate (git-fixes).\n- usb: gadget: u_serial: add null pointer check in gserial_suspend (git-fixes).\n- usb: gadget: udc: core: offload usb_udc_vbus_handler processing (git-fixes).\n- usb: gadget: udc: core: prevent soft_connect_store() race (git-fixes).\n- usb: gadget: udc: fix null dereference in remove() (git-fixes).\n- usb: hide unused usbfs_notify_suspend/resume functions (git-fixes).\n- usb: phy: phy-tahvo: fix memory leak in tahvo_usb_probe() (git-fixes).\n- usb: serial: option: add lara-r6 01b pids (git-fixes).\n- usb: typec: fix fast_role_swap_current show function (git-fixes).\n- usb: typec: iterate pds array when showing the pd list (git-fixes).\n- usb: typec: set port-\u003epd before adding device for typec_port (git-fixes).\n- usb: typec: use sysfs_emit_at when concatenating the string (git-fixes).\n- usb: xhci-mtk: set the dma max_seg_size (git-fixes).\n- usb: xhci: remove unused udev from xhci_log_ctx trace event (git-fixes).\n- usrmerge: adjust module path in the kernel sources (bsc#1212835).\n- vhost: support packed when setting-getting vring_base (git-fixes).\n- vhost_net: revert upend_idx only on retriable error (git-fixes).\n- virtio-net: maintain reverse cleanup order (git-fixes).\n- virtio_net: fix error unwinding of xdp initialization (git-fixes).\n- w1: fix loop in w1_fini() (git-fixes).\n- w1: w1_therm: fix locking behavior in convert_t (git-fixes).\n- wifi: airo: avoid uninitialized warning in airo_get_rate() (git-fixes).\n- wifi: ath10k: trigger sta disconnect after reconfig complete on hardware restart (git-fixes).\n- wifi: ath11k: add missing check for ioremap (git-fixes).\n- wifi: ath11k: add support for suspend in power down state (bsc#1207948).\n- wifi: ath11k: handle irq enable/disable in several code path (bsc#1207948).\n- wifi: ath11k: handle thermal device registeration together with mac (bsc#1207948).\n- wifi: ath11k: remove mhi loopback channels (bsc#1207948).\n- wifi: ath9k: avoid referencing uninit memory in ath9k_wmi_ctrl_rx (git-fixes).\n- wifi: ath9k: convert msecs to jiffies where needed (git-fixes).\n- wifi: ath9k: do not allow to overwrite endpoint0 attributes (git-fixes).\n- wifi: ath9k: fix ar9003 mac hardware hang check register offset calculation (git-fixes).\n- wifi: ath9k: fix possible stall on ath9k_txq_list_has_key() (git-fixes).\n- wifi: atmel: fix an error handling path in atmel_probe() (git-fixes).\n- wifi: cfg80211: rewrite merging of inherited elements (git-fixes).\n- wifi: iwlwifi: mvm: indicate hw decrypt for beacon protection (git-fixes).\n- wifi: iwlwifi: pcie: fix null pointer dereference in iwl_pcie_irq_rx_msix_handler() (git-fixes).\n- wifi: iwlwifi: pull from txqs with softirqs disabled (git-fixes).\n- wifi: mwifiex: fix the size of a memory allocation in mwifiex_ret_802_11_scan() (git-fixes).\n- wifi: orinoco: fix an error handling path in orinoco_cs_probe() (git-fixes).\n- wifi: orinoco: fix an error handling path in spectrum_cs_probe() (git-fixes).\n- wifi: ray_cs: drop useless status variable in parse_addr() (git-fixes).\n- wifi: ray_cs: utilize strnlen() in parse_addr() (git-fixes).\n- wifi: rsi: do not configure wowlan in shutdown hook if not enabled (git-fixes).\n- wifi: rsi: do not set mmc_pm_keep_power in shutdown (git-fixes).\n- wifi: rtw89: debug: fix error code in rtw89_debug_priv_send_h2c_set() (git-fixes).\n- wifi: wilc1000: fix for absent rsn capabilities wfa testcase (git-fixes).\n- wl3501_cs: use eth_hw_addr_set() (git-fixes).\n- writeback: fix call of incorrect macro (bsc#1213024).\n- writeback: fix dereferencing null mapping-\u003ehost on writeback_page_template (git-fixes).\n- x86/amd_nb: add pci id for family 19h model 78h (git-fixes).\n- x86/build: avoid relocation information in final vmlinux (bsc#1187829).\n- x86/kprobes: fix arch_check_optimized_kprobe check within optimized_kprobe range (git-fixes).\n- x86/platform/uv: add platform resolving #defines for misc gam_mmioh_redirect* (bsc#1212256 jsc#ped-4718).\n- x86/platform/uv: fix printed information in calc_mmioh_map (bsc#1212256 jsc#ped-4718).\n- x86/platform/uv: helper functions for allocating and freeing conversion tables (bsc#1212256 jsc#ped-4718).\n- x86/platform/uv: introduce helper function uv_pnode_to_socket (bsc#1212256 jsc#ped-4718).\n- x86/platform/uv: remove remaining bug_on() and bug() calls (bsc#1212256 jsc#ped-4718).\n- x86/platform/uv: update uv platform code for snc (bsc#1212256 jsc#ped-4718).\n- x86/platform/uv: uv support for sub-numa clustering (bsc#1212256 jsc#ped-4718).\n- x86/platform/uv: when searching for minimums, start at int_max not 99999 (bsc#1212256 jsc#ped-4718).\n- x86/pvh: obtain vga console info in dom0 (git-fixes).\n- x86/xen: fix secondary processor fpu initialization (bsc#1212869).\n- x86: fix .brk attribute in linker script (git-fixes).\n- xen/blkfront: only check req_fua for writes (git-fixes).\n- xen/pvcalls-back: fix double frees with pvcalls_new_active_socket() (git-fixes).\n- xfs: ail needs asynchronous cil forcing (bsc#1211811).\n- xfs: async cil flushes need pending pushes to be made stable (bsc#1211811).\n- xfs: attach iclog callbacks in xlog_cil_set_ctx_write_state() (bsc#1211811).\n- xfs: cil work is serialised, not pipelined (bsc#1211811).\n- xfs: clean up the rtbitmap fsmap backend (git-fixes).\n- xfs: do not deplete the reserve pool when trying to shrink the fs (git-fixes).\n- xfs: do not reverse order of items in bulk ail insertion (git-fixes).\n- xfs: do not run shutdown callbacks on active iclogs (bsc#1211811).\n- xfs: drop async cache flushes from cil commits (bsc#1211811).\n- xfs: factor out log write ordering from xlog_cil_push_work() (bsc#1211811).\n- xfs: fix getfsmap reporting past the last rt extent (git-fixes).\n- xfs: fix integer overflows in the fsmap rtbitmap and logdev backends (git-fixes).\n- xfs: fix interval filtering in multi-step fsmap queries (git-fixes).\n- xfs: fix logdev fsmap query result filtering (git-fixes).\n- xfs: fix off-by-one error when the last rt extent is in use (git-fixes).\n- xfs: fix uninitialized variable access (git-fixes).\n- xfs: make fsmap backend function key parameters const (git-fixes).\n- xfs: make the record pointer passed to query_range functions const (git-fixes).\n- xfs: move the cil workqueue to the cil (bsc#1211811).\n- xfs: move xlog_commit_record to xfs_log_cil.c (bsc#1211811).\n- xfs: order cil checkpoint start records (bsc#1211811).\n- xfs: pass a cil context to xlog_write() (bsc#1211811).\n- xfs: pass explicit mount pointer to rtalloc query functions (git-fixes).\n- xfs: rework xlog_state_do_callback() (bsc#1211811).\n- xfs: run callbacks before waking waiters in xlog_state_shutdown_callbacks (bsc#1211811).\n- xfs: separate out log shutdown callback processing (bsc#1211811).\n- xfs: wait iclog complete before tearing down ail (bsc#1211811).\n- xfs: xlog_state_ioerror must die (bsc#1211811).\n- xhci: fix resume issue of some zhaoxin hosts (git-fixes).\n- xhci: fix trb prefetch issue of zhaoxin hosts (git-fixes).\n- xhci: show zhaoxin xhci root hub speed correctly (git-fixes).\n","status":"published","published":"2023-08-14T07:44:11Z","modified":"2026-02-04T02:28:29.77522Z","updated_at":"2026-11-02T15:53:53.440387Z"},{"id":"SUSE-SU-2023:3318-1","title":"Security update for the Linux Kernel","description":"\n\nThe SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security and bugfixes.\n\n\nThe following security bugs were fixed:\n\n- CVE-2022-40982: Fixed transient execution attack called 'Gather Data Sampling' (bsc#1206418).\n- CVE-2023-0459: Fixed information leak in __uaccess_begin_nospec (bsc#1211738).\n- CVE-2023-20569: Fixed side channel attack ‘Inception’ or ‘RAS Poisoning’ (bsc#1213287).\n- CVE-2023-20593: Fixed a ZenBleed issue in 'Zen 2' CPUs that could allow an attacker to potentially access sensitive information (bsc#1213286).\n- CVE-2023-21400: Fixed several memory corruptions due to improper locking in io_uring (bsc#1213272).\n- CVE-2023-2156: Fixed a flaw in the networking subsystem within the handling of the RPL protocol (bsc#1211131).\n- CVE-2023-2166: Fixed NULL pointer dereference in can_rcv_filter (bsc#1210627).\n- CVE-2023-2985: Fixed an use-after-free vulnerability in hfsplus_put_super in fs/hfsplus/super.c that could allow a local user to cause a denial of service (bsc#1211867).\n- CVE-2023-31083: Fixed race condition in hci_uart_tty_ioctl (bsc#1210780).\n- CVE-2023-3117: Fixed an use-after-free vulnerability in the netfilter subsystem when processing named and anonymous sets in batch requests that could allow a local user with CAP_NET_ADMIN capability to crash or potentially escalate their privileges on the system (bsc#1213245).\n- CVE-2023-31248: Fixed an use-after-free vulnerability in nft_chain_lookup_byid that could allow a local attacker to escalate their privilege (bsc#1213061).\n- CVE-2023-3268: Fixed an out of bounds memory access flaw in relay_file_read_start_pos in the relayfs (bsc#1212502).\n- CVE-2023-3390: Fixed an use-after-free vulnerability in the netfilter subsystem in net/netfilter/nf_tables_api.c that could allow a local attacker with user access to cause a privilege escalation issue (bsc#1212846).\n- CVE-2023-35001: Fixed an out-of-bounds memory access flaw in nft_byteorder that could allow a local attacker to escalate their privilege (bsc#1213059).\n- CVE-2023-3567: Fixed a use-after-free in vcs_read in drivers/tty/vt/vc_screen.c (bsc#1213167).\n- CVE-2023-3609: Fixed reference counter leak leading to  overflow in net/sched (bsc#1213586).\n- CVE-2023-3611: Fixed an out-of-bounds write in net/sched sch_qfq(bsc#1213585).\n- CVE-2023-3776: Fixed improper refcount update in  cls_fw leads to use-after-free (bsc#1213588).\n- CVE-2023-3812: Fixed an out-of-bounds memory access flaw in the TUN/TAP device driver functionality that could allow a local user to crash or potentially escalate their privileges on the system (bsc#1213543).\n- CVE-2023-4004: Fixed improper element removal netfilter nft_set_pipapo (bsc#1213812).\n\nThe following non-security bugs were fixed:\n\n- acpi: utils: fix acpi_evaluate_dsm_typed() redefinition error (git-fixes).\n- add module_firmware() for firmware_tg357766 (git-fixes).\n- afs: adjust ack interpretation to try and cope with nat (git-fixes).\n- afs: fix access after dec in put functions (git-fixes).\n- afs: fix afs_getattr() to refetch file status if callback break occurred (git-fixes).\n- afs: fix dynamic root getattr (git-fixes).\n- afs: fix fileserver probe rtt handling (git-fixes).\n- afs: fix infinite loop found by xfstest generic/676 (git-fixes).\n- afs: fix lost servers_outstanding count (git-fixes).\n- afs: fix server-\u003eactive leak in afs_put_server (git-fixes).\n- afs: fix setting of mtime when creating a file/dir/symlink (git-fixes).\n- afs: fix updating of i_size with dv jump from server (git-fixes).\n- afs: fix vlserver probe rtt handling (git-fixes).\n- afs: return -eagain, not -eremoteio, when a file already locked (git-fixes).\n- afs: use refcount_t rather than atomic_t (git-fixes).\n- afs: use the operation issue time instead of the reply time for callbacks (git-fixes).\n- alsa: emu10k1: roll up loops in dsp setup code for audigy (git-fixes).\n- alsa: fireface: make read-only const array for model names static (git-fixes).\n- alsa: hda/realtek - remove 3k pull low procedure (git-fixes).\n- alsa: hda/realtek: add quirk for asus rog g614jx (git-fixes).\n- alsa: hda/realtek: add quirk for asus rog ga402x (git-fixes).\n- alsa: hda/realtek: add quirk for asus rog gx650p (git-fixes).\n- alsa: hda/realtek: add quirk for asus rog gz301v (git-fixes).\n- alsa: hda/realtek: add quirk for clevo npx0snx (git-fixes).\n- alsa: hda/realtek: add quirk for clevo ns70au (git-fixes).\n- alsa: hda/realtek: add quirks for unis h3c desktop b760 \u0026 q760 (git-fixes).\n- alsa: hda/realtek: add support for dell oasis 13/14/16 laptops (git-fixes).\n- alsa: hda/realtek: amend g634 quirk to enable rear speakers (git-fixes).\n- alsa: hda/realtek: enable mute led on hp laptop 15s-eq2xxx (git-fixes).\n- alsa: hda/realtek: fix generic fixup definition for cs35l41 amp (git-fixes).\n- alsa: hda/realtek: support asus g713pv laptop (git-fixes).\n- alsa: hda/realtek: whitespace fix (git-fixes).\n- alsa: hda/relatek: enable mute led on hp 250 g8 (git-fixes).\n- alsa: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync() (git-fixes).\n- alsa: oxfw: make read-only const array models static (git-fixes).\n- alsa: pcm: fix potential data race at pcm memory allocation helpers (git-fixes).\n- alsa: usb-audio: add quirk for microsoft modern wireless headset (bsc#1207129).\n- alsa: usb-audio: update for native dsd support quirks (git-fixes).\n- apparmor: fix missing error check for rhashtable_insert_fast (git-fixes).\n- arm64/mm: mark private vm_fault_x defines as vm_fault_t (git-fixes)\n- arm64: dts: microchip: sparx5: do not use psci on reference boards (git-fixes)\n- arm64: vdso: pass (void *) to virt_to_page() (git-fixes)\n- arm64: xor-neon: mark xor_arm64_neon_*() static (git-fixes)\n- asoc: atmel: fix the 8k sample parameter in i2sc master (git-fixes).\n- asoc: codecs: es8316: fix dmic config (git-fixes).\n- asoc: codecs: wcd-mbhc-v2: fix resource leaks on component remove (git-fixes).\n- asoc: codecs: wcd934x: fix resource leaks on component remove (git-fixes).\n- asoc: codecs: wcd938x: fix codec initialisation race (git-fixes).\n- asoc: codecs: wcd938x: fix db range for hphl and hphr (git-fixes).\n- asoc: codecs: wcd938x: fix missing clsh ctrl error handling (git-fixes).\n- asoc: codecs: wcd938x: fix soundwire initialisation race (git-fixes).\n- asoc: da7219: check for failure reading aad irq events (git-fixes).\n- asoc: da7219: flush pending aad irq when suspending (git-fixes).\n- asoc: fsl_sai: disable bit clock with transmitter (git-fixes).\n- asoc: fsl_spdif: silence output on stop (git-fixes).\n- asoc: rt5682-sdw: fix for jd event handling in clockstop mode0 (git-fixes).\n- asoc: rt711-sdca: fix for jd event handling in clockstop mode0 (git-fixes).\n- asoc: rt711: fix for jd event handling in clockstop mode0 (git-fixes).\n- asoc: tegra: fix adx byte map (git-fixes).\n- asoc: tegra: fix amx byte map (git-fixes).\n- asoc: wm8904: fill the cache for wm8904_adc_test_0 register (git-fixes).\n- ata: pata_ns87415: mark ns87560_tf_read static (git-fixes).\n- block, bfq: fix division by zero error on zero wsum (bsc#1213653).\n- block: fix a source code comment in include/uapi/linux/blkzoned.h (git-fixes).\n- can: bcm: fix uaf in bcm_proc_show() (git-fixes).\n- can: gs_usb: gs_can_close(): add missing set of can state to can_state_stopped (git-fixes).\n- ceph: do not let check_caps skip sending responses for revoke msgs (bsc#1213856).\n- cifs: add a warning when the in-flight count goes negative (bsc#1193629).\n- cifs: address unused variable warning (bsc#1193629).\n- cifs: do all necessary checks for credits within or before locking (bsc#1193629).\n- cifs: fix lease break oops in xfstest generic/098 (bsc#1193629).\n- cifs: fix max_credits implementation (bsc#1193629).\n- cifs: fix session state check in reconnect to avoid use-after-free issue (bsc#1193629).\n- cifs: fix session state check in smb2_find_smb_ses (bsc#1193629).\n- cifs: fix session state transition to avoid use-after-free issue (bsc#1193629).\n- cifs: fix sockaddr comparison in iface_cmp (bsc#1193629).\n- cifs: fix status checks in cifs_tree_connect (bsc#1193629).\n- cifs: log session id when a matching ses is not found (bsc#1193629).\n- cifs: new dynamic tracepoint to track ses not found errors (bsc#1193629).\n- cifs: prevent use-after-free by freeing the cfile later (bsc#1193629).\n- cifs: print all credit counters in debugdata (bsc#1193629).\n- cifs: print client_guid in debugdata (bsc#1193629).\n- cifs: print more detail when invalidate_inode_mapping fails (bsc#1193629).\n- cifs: print nosharesock value while dumping mount options (bsc#1193629).\n- clk: qcom: camcc-sc7180: add parent dependency to all camera gdscs (git-fixes).\n- clk: qcom: gcc-ipq6018: use floor ops for sdcc clocks (git-fixes).\n- coda: avoid partial allocation of sig_inputargs (git-fixes).\n- codel: fix kernel-doc notation warnings (git-fixes).\n- crypto: kpp - add helper to set reqsize (git-fixes).\n- crypto: qat - use helper to set reqsize (git-fixes).\n- delete suse/memcg-drop-kmem-limit_in_bytes. drop the patch in order to fix bsc#1213705.\n- devlink: fix kernel-doc notation warnings (git-fixes).\n- dlm: fix missing lkb refcount handling (git-fixes).\n- dlm: fix plock invalid read (git-fixes).\n- docs: networking: update codeaurora references for rmnet (git-fixes).\n- documentation: abi: sysfs-class-net-qmi: pass_through contact update (git-fixes).\n- documentation: bonding: fix the doc of peer_notif_delay (git-fixes).\n- documentation: devices.txt: reconcile serial/ucc_uart minor numers (git-fixes).\n- documentation: timers: hrtimers: make hybrid union historical (git-fixes).\n- drm/amd/display: correct `dmub_fw_version` macro (git-fixes).\n- drm/amd/display: disable mpc split by default on special asic (git-fixes).\n- drm/amd/display: keep phy active for dp displays on dcn31 (git-fixes).\n- drm/amdgpu: avoid restore process run into dead loop (git-fixes).\n- drm/amdgpu: fix clearing mappings for bos that are always valid in vm (git-fixes).\n- drm/amdgpu: set vmbo destroy after pt bo is created (git-fixes).\n- drm/amdgpu: validate vm ioctl flags (git-fixes).\n- drm/atomic: allow vblank-enabled + self-refresh 'disable' (git-fixes).\n- drm/atomic: fix potential use-after-free in nonblocking commits (git-fixes).\n- drm/bridge: tc358768: add atomic_get_input_bus_fmts() implementation (git-fixes).\n- drm/bridge: tc358768: fix tclk_trailcnt computation (git-fixes).\n- drm/bridge: tc358768: fix ths_trailcnt computation (git-fixes).\n- drm/bridge: tc358768: fix ths_zerocnt computation (git-fixes).\n- drm/client: fix memory leak in drm_client_modeset_probe (git-fixes).\n- drm/client: fix memory leak in drm_client_target_cloned (git-fixes).\n- drm/i915/psr: use hw.adjusted mode when calculating io/fast wake times (git-fixes).\n- drm/i915: fix one wrong caching mode enum usage (git-fixes).\n- drm/msm/adreno: fix snapshot bindless_data size (git-fixes).\n- drm/msm/disp/dpu: get timing engine status from intf status register (git-fixes).\n- drm/msm/dpu: drop enum dpu_core_perf_data_bus_id (git-fixes).\n- drm/msm/dpu: set dpu_data_hctl_en for in intf_sc7180_mask (git-fixes).\n- drm/msm: fix is_err_or_null() vs null check in a5xx_submit_in_rb() (git-fixes).\n- drm/panel: simple: add connector_type for innolux_at043tn24 (git-fixes).\n- drm/panel: simple: add powertip ph800480t013 drm_display_mode flags (git-fixes).\n- drm/radeon: fix integer overflow in radeon_cs_parser_init (git-fixes).\n- drm/ttm: do not leak a resource on swapout move error (git-fixes).\n- drop amdgpu patches for fixing regression (bsc#1213304,bsc#1213777)\n- dt-bindings: phy: brcm,brcmstb-usb-phy: fix error in 'compatible' conditional schema (git-fixes).\n- enable nxp snvs rtc driver for i.mx 8mq/8mp (jsc#PED-4758)\n- ext4: add ea_inode checking to ext4_iget() (bsc#1213106).\n- ext4: add ext4_sb_block_valid() refactored out of ext4_inode_block_valid() (bsc#1213088).\n- ext4: add lockdep annotations for i_data_sem for ea_inode's (bsc#1213109).\n- ext4: add strict range checks while freeing blocks (bsc#1213089).\n- ext4: avoid deadlock in fs reclaim with page writeback (bsc#1213016).\n- ext4: bail out of ext4_xattr_ibody_get() fails for any reason (bsc#1213018).\n- ext4: block range must be validated before use in ext4_mb_clear_bb() (bsc#1213090).\n- ext4: check iomap type only if ext4_iomap_begin() does not fail (bsc#1213103).\n- ext4: disallow ea_inodes with extended attributes (bsc#1213108).\n- ext4: fail ext4_iget if special inode unallocated (bsc#1213010).\n- ext4: fix bug_on in __es_tree_search caused by bad quota inode (bsc#1213111).\n- ext4: fix data races when using cached status extents (bsc#1213102).\n- ext4: fix deadlock when converting an inline directory in nojournal mode (bsc#1213105).\n- ext4: fix i_disksize exceeding i_size problem in paritally written case (bsc#1213015).\n- ext4: fix lockdep warning when enabling mmp (bsc#1213100).\n- ext4: fix reusing stale buffer heads from last failed mounting (bsc#1213020).\n- ext4: fix task hung in ext4_xattr_delete_inode (bsc#1213096).\n- ext4: fix to check return value of freeze_bdev() in ext4_shutdown() (bsc#1213021).\n- ext4: fix use-after-free read in ext4_find_extent for bigalloc + inline (bsc#1213098).\n- ext4: fix warning in ext4_update_inline_data (bsc#1213012).\n- ext4: fix warning in mb_find_extent (bsc#1213099).\n- ext4: improve error handling from ext4_dirhash() (bsc#1213104).\n- ext4: improve error recovery code paths in __ext4_remount() (bsc#1213017).\n- ext4: move where set the may_inline_data flag is set (bsc#1213011).\n- ext4: only update i_reserved_data_blocks on successful block allocation (bsc#1213019).\n- ext4: refactor ext4_free_blocks() to pull out ext4_mb_clear_bb() (bsc#1213087).\n- ext4: refuse to create ea block when umounted (bsc#1213093).\n- ext4: set lockdep subclass for the ea_inode in ext4_xattr_inode_cache_find() (bsc#1213107).\n- ext4: turn quotas off if mount failed after enabling quotas (bsc#1213110).\n- ext4: update s_journal_inum if it changes after journal replay (bsc#1213094).\n- ext4: use ext4_fc_tl_mem in fast-commit replay path (bsc#1213092).\n- ext4: zero i_disksize when initializing the bootloader inode (bsc#1213013).\n- fbdev: au1200fb: fix missing irq check in au1200fb_drv_probe (git-fixes).\n- fbdev: imxfb: warn about invalid left/right margin (git-fixes).\n- file: always lock position for fmode_atomic_pos (bsc#1213759).\n- fix documentation of panic_on_warn (git-fixes).\n- fs: dlm: add midcomms init/start functions (git-fixes).\n- fs: dlm: do not set stop rx flag after node reset (git-fixes).\n- fs: dlm: filter user dlm messages for kernel locks (git-fixes).\n- fs: dlm: fix log of lowcomms vs midcomms (git-fixes).\n- fs: dlm: fix race between test_bit() and queue_work() (git-fixes).\n- fs: dlm: fix race in lowcomms (git-fixes).\n- fs: dlm: handle -ebusy first in lock arg validation (git-fixes).\n- fs: dlm: move sending fin message into state change handling (git-fixes).\n- fs: dlm: retry accept() until -eagain or error returns (git-fixes).\n- fs: dlm: return positive pid value for f_getlk (git-fixes).\n- fs: dlm: start midcomms before scand (git-fixes).\n- fs: hfsplus: remove warn_on() from hfsplus_cat_{read,write}_inode() (git-fixes).\n- fs: jfs: check for read-only mounted filesystem in txbegin (git-fixes).\n- fs: jfs: fix null-ptr-deref read in txbegin (git-fixes).\n- fs: jfs: fix ubsan: array-index-out-of-bounds in dballocdmaplev (git-fixes).\n- fuse: ioctl: translate enosys in outarg (bsc#1213524).\n- fuse: revalidate: do not invalidate if interrupted (bsc#1213523).\n- gve: set default duplex configuration to full (git-fixes).\n- gve: unify driver name usage (git-fixes).\n- hvcs: fix hvcs port reference counting (bsc#1213134 ltc#202861).\n- hvcs: get reference to tty in remove (bsc#1213134 ltc#202861).\n- hvcs: synchronize hotplug remove with port free (bsc#1213134 ltc#202861).\n- hvcs: use dev_groups to manage hvcs device attributes (bsc#1213134 ltc#202861).\n- hvcs: use driver groups to manage driver attributes (bsc#1213134 ltc#202861).\n- hvcs: use vhangup in hotplug remove (bsc#1213134 ltc#202861).\n- hwmon: (adm1275) allow setting sample averaging (git-fixes).\n- hwmon: (k10temp) enable amd3255 proc to show negative temperature (git-fixes).\n- hwmon: (nct7802) fix for temp6 (peci1) processed even if peci1 disabled (git-fixes).\n- hwmon: (pmbus/adm1275) fix problems with temperature monitoring on adm1272 (git-fixes).\n- i2c: xiic: defer xiic_wakeup() and __xiic_start_xfer() in xiic_process() (git-fixes).\n- i2c: xiic: do not try to handle more interrupt events after error (git-fixes).\n- iavf: fix out-of-bounds when setting channels on remove (git-fixes).\n- iavf: fix use-after-free in free_netdev (git-fixes).\n- iavf: use internal state to free traffic irqs (git-fixes).\n- ib/hfi1: use bitmap_zalloc() when applicable (git-fixes)\n- igc: check if hardware tx timestamping is enabled earlier (git-fixes).\n- igc: enable and fix rx hash usage by netstack (git-fixes).\n- igc: fix inserting of empty frame for launchtime (git-fixes).\n- igc: fix kernel panic during ndo_tx_timeout callback (git-fixes).\n- igc: fix launchtime before start of cycle (git-fixes).\n- igc: fix race condition in ptp tx code (git-fixes).\n- igc: handle pps start time programming for past time values (git-fixes).\n- igc: prevent garbled tx queue with xdp zerocopy (git-fixes).\n- igc: remove delay during tx ring configuration (git-fixes).\n- igc: set tp bit in 'supported' and 'advertising' fields of ethtool_link_ksettings (git-fixes).\n- igc: work around hw bug causing missing timestamps (git-fixes).\n- inotify: avoid reporting event with invalid wd (bsc#1213025).\n- input: i8042 - add clevo pcx0dx to i8042 quirk table (git-fixes).\n- input: iqs269a - do not poll during ati (git-fixes).\n- input: iqs269a - do not poll during suspend or resume (git-fixes).\n- jbd2: fix data missing when reusing bh which is ready to be checkpointed (bsc#1213095).\n- jdb2: do not refuse invalidation of already invalidated buffers (bsc#1213014).\n- jffs2: fix memory leak in jffs2_do_fill_super (git-fixes).\n- jffs2: fix memory leak in jffs2_do_mount_fs (git-fixes).\n- jffs2: fix memory leak in jffs2_scan_medium (git-fixes).\n- jffs2: fix use-after-free in jffs2_clear_xattr_subsystem (git-fixes).\n- jffs2: gc deadlock reading a page that is used in jffs2_write_begin() (git-fixes).\n- jffs2: reduce stack usage in jffs2_build_xattr_subsystem() (git-fixes).\n- jfs: jfs_dmap: validate db_l2nbperpage while mounting (git-fixes).\n- kabi/severities: add vas symbols changed due to recent fix vas accelerators are directly tied to the architecture, there is no reason to have out-of-tree production drivers\n- kabi: do not check external trampolines for signature (kabi bsc#1207894 bsc#1211243).\n- kernel-binary.spec.in: remove superfluous %% in supplements fixes: 02b7735e0caf ('rpm/kernel-binary.spec.in: add enhances and supplements tags to in-tree kmps')\n- kselftest: vdso: fix accumulation of uninitialized ret when clock_realtime is undefined (git-fixes).\n- kvm: arm64: do not read a hw interrupt pending state in user context (git-fixes)\n- kvm: arm64: warn if accessing timer pending state outside of vcpu (bsc#1213620)\n- kvm: do not null dereference ops-\u003edestroy (git-fixes)\n- kvm: downgrade two bug_ons to warn_on_once (git-fixes)\n- kvm: initialize debugfs_dentry when a vm is created to avoid null (git-fixes)\n- kvm: s390: pv: fix index value of replaced asce (git-fixes bsc#1213867).\n- kvm: vmx: inject #gp on encls if vcpu has paging disabled (cr0.pg==0) (git-fixes).\n- kvm: vmx: inject #gp, not #ud, if sgx2 encls leafs are unsupported (git-fixes).\n- kvm: vmx: restore vmx_vmexit alignment (git-fixes).\n- kvm: x86: account fastpath-only vm-exits in vcpu stats (git-fixes).\n- leds: trigger: netdev: recheck netdev_led_mode_linkup on dev rename (git-fixes).\n- libceph: harden msgr2.1 frame segment length checks (bsc#1213857).\n- media: atomisp: gmin_platform: fix out_len in gmin_get_config_dsm_var() (git-fixes).\n- media: cec: i2c: ch7322: also select regmap (git-fixes).\n- media: i2c: correct format propagation for st-mipid02 (git-fixes).\n- media: staging: atomisp: select v4l2_fwnode (git-fixes).\n- media: usb: check az6007_read() return value (git-fixes).\n- media: usb: siano: fix warning due to null work_func_t function pointer (git-fixes).\n- media: venus: helpers: fix align() of non power of two (git-fixes).\n- media: videodev2.h: fix struct v4l2_input tuner index comment (git-fixes).\n- memcg: drop kmem.limit_in_bytes (bsc#1208788, bsc#1212905).\n- mmc: core: disable trim on kingston emmc04g-m627 (git-fixes).\n- mmc: sdhci: fix dma configure compatibility issue when 64bit dma mode is used (git-fixes).\n- net/sched: sch_qfq: refactor parsing of netlink parameters (bsc#1213585).\n- net/sched: sch_qfq: reintroduce lmax bound check for mtu (bsc#1213585).\n- net: ena: fix shift-out-of-bounds in exponential backoff (git-fixes).\n- net: mana: add support for vlan tagging (bsc#1212301).\n- net: mana: batch ringing rx queue doorbell on receiving packets (bsc#1212901).\n- net: mana: use the correct wqe count for ringing rq doorbell (bsc#1212901).\n- net: phy: marvell10g: fix 88x3310 power up (git-fixes).\n- net: phy: prevent stale pointer dereference in phy_init() (git-fixes).\n- nfsd: add encoding of op_recall flag for write delegation (git-fixes).\n- nfsd: fix double fget() bug in __write_ports_addfd() (git-fixes).\n- nfsd: fix sparse warning (git-fixes).\n- nfsd: remove open coding of string copy (git-fixes).\n- nfsv4.1: always send a reclaim_complete after establishing lease (git-fixes).\n- nfsv4.1: freeze the session table upon receiving nfs4err_badsession (git-fixes).\n- ntb: amd: fix error handling in amd_ntb_pci_driver_init() (git-fixes).\n- ntb: idt: fix error handling in idt_pci_driver_init() (git-fixes).\n- ntb: intel: fix error handling in intel_ntb_pci_driver_init() (git-fixes).\n- ntb: ntb_tool: add check for devm_kcalloc (git-fixes).\n- ntb: ntb_transport: fix possible memory leak while device_register() fails (git-fixes).\n- nvme-multipath: support io stats on the mpath device (bsc#1210565).\n- nvme-pci: fix dma direction of unmapping integrity data (git-fixes).\n- nvme-pci: remove nvme_queue from nvme_iod (git-fixes).\n- nvme: introduce nvme_start_request (bsc#1210565).\n- ocfs2: check new file size on fallocate call (git-fixes).\n- ocfs2: fix use-after-free when unmounting read-only filesystem (git-fixes).\n- ocfs2: switch to security_inode_init_security() (git-fixes).\n- octeontx-af: fix hardware timestamp configuration (git-fixes).\n- octeontx2-af: move validation of ptp pointer before its usage (git-fixes).\n- octeontx2-pf: add additional check for mcam rules (git-fixes).\n- opp: fix use-after-free in lazy_opp_tables after probe deferral (git-fixes).\n- pci/pm: avoid putting elopos e2/s2/h2 pcie ports in d3cold (git-fixes).\n- pci: add function 1 dma alias quirk for marvell 88se9235 (git-fixes).\n- phy: hisilicon: fix an out of bounds check in hisi_inno_phy_probe() (git-fixes).\n- phy: revert 'phy: remove soc_exynos4212 dep. from phy_exynos4x12_usb' (git-fixes).\n- phy: tegra: xusb: check return value of devm_kzalloc() (git-fixes).\n- phy: tegra: xusb: clear the driver reference in usb-phy dev (git-fixes).\n- pie: fix kernel-doc notation warning (git-fixes).\n- pinctrl: amd: detect internal gpio0 debounce handling (git-fixes).\n- pinctrl: amd: do not show `invalid config param` errors (git-fixes).\n- pinctrl: amd: fix mistake in handling clearing pins at startup (git-fixes).\n- pinctrl: amd: only use special debounce behavior for gpio 0 (git-fixes).\n- pinctrl: amd: use amd_pinconf_set() for all config options (git-fixes).\n- platform/x86: msi-laptop: fix rfkill out-of-sync on msi wind u100 (git-fixes).\n- powerpc/64: only warn if __pa()/__va() called with bad addresses (bsc#1194869).\n- powerpc/64s: fix vas mm use after free (bsc#1194869).\n- powerpc/book3s64/mm: fix directmap stats in /proc/meminfo (bsc#1194869).\n- powerpc/bpf: fix use of user_pt_regs in uapi (bsc#1194869).\n- powerpc/ftrace: remove ftrace init tramp once kernel init is complete (bsc#1194869).\n- powerpc/interrupt: do not read msr from interrupt_exit_kernel_prepare() (bsc#1194869).\n- powerpc/mm/dax: fix the condition when checking if altmap vmemap can cross-boundary (bsc#1150305 ltc#176097 git-fixes).\n- powerpc/mm: switch obsolete dssall to .long (bsc#1194869).\n- powerpc/powernv/sriov: perform null check on iov before dereferencing iov (bsc#1194869).\n- powerpc/powernv/vas: assign real address to rx_fifo in vas_rx_win_attr (bsc#1194869).\n- powerpc/prom_init: fix kernel config grep (bsc#1194869).\n- powerpc/secvar: fix refcount leak in format_show() (bsc#1194869).\n- powerpc/xics: fix refcount leak in icp_opal_init() (bsc#1194869).\n- powerpc: clean vdso32 and vdso64 directories (bsc#1194869).\n- powerpc: define get_cycles macro for arch-override (bsc#1194869).\n- powerpc: update ppc_save_regs to save current r1 in pt_regs (bsc#1194869).\n- pwm: ab8500: fix error code in probe() (git-fixes).\n- pwm: imx-tpm: force 'real_period' to be zero in suspend (git-fixes).\n- pwm: sysfs: do not apply state to already disabled pwms (git-fixes).\n- rdma/bnxt_re: fix hang during driver unload (git-fixes)\n- rdma/bnxt_re: prevent handling any completions after qp destroy (git-fixes)\n- rdma/core: update cma destination address on rdma_resolve_addr (git-fixes)\n- rdma/irdma: add missing read barriers (git-fixes)\n- rdma/irdma: fix data race on cqp completion stats (git-fixes)\n- rdma/irdma: fix data race on cqp request done (git-fixes)\n- rdma/irdma: fix op_type reporting in cqes (git-fixes)\n- rdma/irdma: report correct wc error (git-fixes)\n- rdma/mlx4: make check for invalid flags stricter (git-fixes)\n- rdma/mthca: fix crash when polling cq for shared qps (git-fixes)\n- rdma/rxe: fix access checks in rxe_check_bind_mw (git-fixes)\n- regmap: account for register length in smbus i/o limits (git-fixes).\n- regmap: drop initial version of maximum transfer length fixes (git-fixes).\n- revert 'arm64: dts: zynqmp: add address-cells property to interrupt (git-fixes)\n- revert 'debugfs, coccinelle: check for obsolete define_simple_attribute() usage' (git-fixes).\n- revert 'drm/amd/display: edp do not add non-edid timings' (git-fixes).\n- revert 'nfsv4: retry lock on old_stateid during delegation return' (git-fixes).\n- revert 'usb: dwc3: core: enable autoretry feature in the controller' (git-fixes).\n- revert 'usb: gadget: tegra-xudc: fix error check in tegra_xudc_powerdomain_init()' (git-fixes).\n- revert 'usb: xhci: tegra: fix error check' (git-fixes).\n- revert 'xhci: add quirk for host controllers that do not update endpoint dcs' (git-fixes).\n- rpm/check-for-config-changes: ignore also riscv_isa_* and dynamic_sigframe they depend on config_toolchain_has_*.\n- rpm: update dependency to match current kmod.\n- rsi: remove kernel-doc comment marker (git-fixes).\n- rxrpc, afs: fix selection of abort codes (git-fixes).\n- s390/ap: fix status returned by ap_aqic() (git-fixes bsc#1213259).\n- s390/ap: fix status returned by ap_qact() (git-fixes bsc#1213258).\n- s390/bpf: add expoline to tail calls (git-fixes bsc#1213870).\n- s390/dasd: fix hanging device after quiesce/resume (git-fixes bsc#1213810).\n- s390/debug: add _asm_s390_ prefix to header guard (git-fixes bsc#1213263).\n- s390/decompressor: specify __decompress() buf len to avoid overflow (git-fixes bsc#1213863).\n- s390/ipl: add missing intersection check to ipl_report handling (git-fixes bsc#1213871).\n- s390/percpu: add read_once() to arch_this_cpu_to_op_simple() (git-fixes bsc#1213252).\n- s390/qeth: fix vipa deletion (git-fixes bsc#1213713).\n- s390/vmem: fix empty page tables cleanup under kasan (git-fixes bsc#1213715).\n- s390: define runtime_discard_exit to fix link error with gnu ld \u0026lt; 2.36 (git-fixes bsc#1213264).\n- s390: discard .interp section (git-fixes bsc#1213247).\n- s390: introduce nospec_uses_trampoline() (git-fixes bsc#1213870).\n- scftorture: count reschedule ipis (git-fixes).\n- sched/debug: fix dentry leak in update_sched_domain_debugfs (git-fixes)\n- sched: fix debug \u0026\u0026 !schedstats warn (git-fixes)\n- scsi: lpfc: abort outstanding els cmds when mailbox timeout error is detected (bsc#1213756).\n- scsi: lpfc: avoid -wstringop-overflow warning (bsc#1213756).\n- scsi: lpfc: clean up sli-4 sysfs resource reporting (bsc#1213756).\n- scsi: lpfc: copyright updates for 14.2.0.14 patches (bsc#1213756).\n- scsi: lpfc: fix a possible data race in lpfc_unregister_fcf_rescan() (bsc#1213756).\n- scsi: lpfc: fix incorrect big endian type assignment in bsg loopback path (bsc#1213756).\n- scsi: lpfc: fix incorrect big endian type assignments in fdmi and vmid paths (bsc#1213756).\n- scsi: lpfc: fix lpfc_name struct packing (bsc#1213756).\n- scsi: lpfc: make fabric zone discovery more robust when handling unsolicited logo (bsc#1213756).\n- scsi: lpfc: pull out fw diagnostic dump log message from driver's trace buffer (bsc#1213756).\n- scsi: lpfc: qualify ndlp discovery state when processing rscn (bsc#1213756).\n- scsi: lpfc: refactor cpu affinity assignment paths (bsc#1213756).\n- scsi: lpfc: remove extra ndlp kref decrement in flogi cmpl for loop topology (bsc#1213756).\n- scsi: lpfc: replace all non-returning strlcpy() with strscpy() (bsc#1213756).\n- scsi: lpfc: replace one-element array with flexible-array member (bsc#1213756).\n- scsi: lpfc: revise ndlp kref handling for dev_loss_tmo_callbk and lpfc_drop_node (bsc#1213756).\n- scsi: lpfc: set establish image pair service parameter only for target functions (bsc#1213756).\n- scsi: lpfc: simplify fcp_abort transport callback log message (bsc#1213756).\n- scsi: lpfc: update lpfc version to 14.2.0.14 (bsc#1213756).\n- scsi: lpfc: use struct_size() helper (bsc#1213756).\n- scsi: qla2xxx: adjust iocb resource on qpair create (bsc#1213747).\n- scsi: qla2xxx: array index may go out of bound (bsc#1213747).\n- scsi: qla2xxx: avoid fcport pointer dereference (bsc#1213747).\n- scsi: qla2xxx: check valid rport returned by fc_bsg_to_rport() (bsc#1213747).\n- scsi: qla2xxx: correct the index of array (bsc#1213747).\n- scsi: qla2xxx: drop useless list_head (bsc#1213747).\n- scsi: qla2xxx: fix buffer overrun (bsc#1213747).\n- scsi: qla2xxx: fix command flush during tmf (bsc#1213747).\n- scsi: qla2xxx: fix deletion race condition (bsc#1213747).\n- scsi: qla2xxx: fix end of loop test (bsc#1213747).\n- scsi: qla2xxx: fix erroneous link up failure (bsc#1213747).\n- scsi: qla2xxx: fix error code in qla2x00_start_sp() (bsc#1213747).\n- scsi: qla2xxx: fix inconsistent tmf timeout (bsc#1213747).\n- scsi: qla2xxx: fix null pointer dereference in target mode (bsc#1213747).\n- scsi: qla2xxx: fix potential null pointer dereference (bsc#1213747).\n- scsi: qla2xxx: fix session hang in gnl (bsc#1213747).\n- scsi: qla2xxx: fix tmf leak through (bsc#1213747).\n- scsi: qla2xxx: limit tmf to 8 per function (bsc#1213747).\n- scsi: qla2xxx: pointer may be dereferenced (bsc#1213747).\n- scsi: qla2xxx: remove unused nvme_ls_waitq wait queue (bsc#1213747).\n- scsi: qla2xxx: replace one-element array with declare_flex_array() helper (bsc#1213747).\n- scsi: qla2xxx: silence a static checker warning (bsc#1213747).\n- scsi: qla2xxx: turn off noisy message log (bsc#1213747).\n- scsi: qla2xxx: update version to 10.02.08.400-k (bsc#1213747).\n- scsi: qla2xxx: update version to 10.02.08.500-k (bsc#1213747).\n- scsi: qla2xxx: use vmalloc_array() and vcalloc() (bsc#1213747).\n- security: keys: modify mismatched function name (git-fixes).\n- selftests: mptcp: depend on syn_cookies (git-fixes).\n- selftests: mptcp: sockopt: return error if wrong mark (git-fixes).\n- selftests: rtnetlink: remove netdevsim device after ipsec offload test (git-fixes).\n- selftests: tc: add 'ct' action kconfig dep (git-fixes).\n- selftests: tc: add conntrack procfs kconfig (git-fixes).\n- selftests: tc: set timeout to 15 minutes (git-fixes).\n- serial: qcom-geni: drop bogus runtime pm state update (git-fixes).\n- serial: sifive: fix sifive_serial_console_setup() section (git-fixes).\n- signal/powerpc: on swapcontext failure force sigsegv (bsc#1194869).\n- signal: replace force_sigsegv(sigsegv) with force_fatal_sig(sigsegv) (bsc#1194869).\n- smb3: do not reserve too many oplock credits (bsc#1193629).\n- smb3: missing null check in smb2_change_notify (bsc#1193629).\n- smb: client: fix broken file attrs with nodfs mounts (bsc#1193629).\n- smb: client: fix missed ses refcounting (git-fixes).\n- smb: client: fix parsing of source mount option (bsc#1193629).\n- smb: client: fix shared dfs root mounts with different prefixes (bsc#1193629).\n- smb: client: fix warning in cifs_match_super() (bsc#1193629).\n- smb: client: fix warning in cifs_smb3_do_mount() (bsc#1193629).\n- smb: client: fix warning in cifsfindfirst() (bsc#1193629).\n- smb: client: fix warning in cifsfindnext() (bsc#1193629).\n- smb: client: fix warning in generic_ip_connect() (bsc#1193629).\n- smb: client: improve dfs mount check (bsc#1193629).\n- smb: client: remove redundant pointer 'server' (bsc#1193629).\n- smb: delete an unnecessary statement (bsc#1193629).\n- smb: move client and server files to common directory fs/smb (bsc#1193629).\n- smb: remove obsolete comment (bsc#1193629).\n- soundwire: qcom: fix storing port config out-of-bounds (git-fixes).\n- soundwire: qcom: update status correctly with mask (git-fixes).\n- spi: bcm-qspi: return error if neither hif_mspi nor mspi is available (git-fixes).\n- spi: bcm63xx: fix max prepend length (git-fixes).\n- staging: ks7010: potential buffer overflow in ks_wlan_set_encode_ext() (git-fixes).\n- staging: r8712: fix memory leak in _r8712_init_xmit_priv() (git-fixes).\n- sunrpc: always free ctxt when freeing deferred request (git-fixes).\n- sunrpc: double free xprt_ctxt while still in use (git-fixes).\n- sunrpc: fix trace_svc_register() call site (git-fixes).\n- sunrpc: fix uaf in svc_tcp_listen_data_ready() (git-fixes).\n- sunrpc: remove dead code in svc_tcp_release_rqst() (git-fixes).\n- sunrpc: remove the maximum number of retries in call_bind_status (git-fixes).\n- svcrdma: prevent page release when nothing was received (git-fixes).\n- tpm: tpm_vtpm_proxy: fix a race condition in /dev/vtpmx creation (git-fixes).\n- tpm_tis: explicitly check for error code (git-fixes).\n- tty: n_gsm: fix uaf in gsm_cleanup_mux (git-fixes).\n- tty: serial: fsl_lpuart: add earlycon for imx8ulp platform (git-fixes).\n- ubi: ensure that vid header offset + vid header size \u0026lt;= alloc, size (bsc#1210584).\n- ubi: fix failure attaching when vid_hdr offset equals to (sub)page size (bsc#1210584).\n- ubifs: add missing iput if do_tmpfile() failed in rename whiteout (git-fixes).\n- ubifs: do_rename: fix wrong space budget when target inode's nlink \u003e 1 (git-fixes).\n- ubifs: error path in ubifs_remount_rw() seems to wrongly free write buffers (git-fixes).\n- ubifs: fix 'ui-\u003edirty' race between do_tmpfile() and writeback work (git-fixes).\n- ubifs: fix aa deadlock when setting xattr for encrypted file (git-fixes).\n- ubifs: fix build errors as symbol undefined (git-fixes).\n- ubifs: fix deadlock in concurrent rename whiteout and inode writeback (git-fixes).\n- ubifs: fix memory leak in alloc_wbufs() (git-fixes).\n- ubifs: fix memory leak in do_rename (git-fixes).\n- ubifs: fix read out-of-bounds in ubifs_wbuf_write_nolock() (git-fixes).\n- ubifs: fix to add refcount once page is set private (git-fixes).\n- ubifs: fix wrong dirty space budget for dirty inode (git-fixes).\n- ubifs: free memory for tmpfile name (git-fixes).\n- ubifs: rectify space amount budget for mkdir/tmpfile operations (git-fixes).\n- ubifs: rectify space budget for ubifs_symlink() if symlink is encrypted (git-fixes).\n- ubifs: rectify space budget for ubifs_xrename() (git-fixes).\n- ubifs: rename whiteout atomically (git-fixes).\n- ubifs: rename_whiteout: correct old_dir size computing (git-fixes).\n- ubifs: rename_whiteout: fix double free for whiteout_ui-\u003edata (git-fixes).\n- ubifs: reserve one leb for each journal head while doing budget (git-fixes).\n- ubifs: setflags: make dirtied_ino_d 8 bytes aligned (git-fixes).\n- ubifs: ubifs_writepage: mark page dirty after writing inode failed (git-fixes).\n- udf: avoid double brelse() in udf_rename() (bsc#1213032).\n- udf: define efscorrupted error code (bsc#1213038).\n- udf: detect system inodes linked into directory hierarchy (bsc#1213114).\n- udf: discard preallocation before extending file with a hole (bsc#1213036).\n- udf: do not bother looking for prealloc extents if i_lenextents matches i_size (bsc#1213035).\n- udf: do not bother merging very long extents (bsc#1213040).\n- udf: do not update file length for failed writes to inline files (bsc#1213041).\n- udf: fix error handling in udf_new_inode() (bsc#1213112).\n- udf: fix extending file within last block (bsc#1213037).\n- udf: fix preallocation discarding at indirect extent boundary (bsc#1213034).\n- udf: preserve link count of system files (bsc#1213113).\n- udf: truncate added extents on failed expansion (bsc#1213039).\n- update config and supported.conf files due to renaming.\n- update suse/rdma-mthca-fix-crash-when-polling-cq-for-shared-qps. (git-fixes bsc#1212604). added bug reference.\n- usb: dwc2: fix some error handling paths (git-fixes).\n- usb: dwc2: platform: improve error reporting for problems during .remove() (git-fixes).\n- usb: dwc3: do not reset device side if dwc3 was configured as host-only (git-fixes).\n- usb: dwc3: pci: skip byt gpio lookup table for hardwired phy (git-fixes).\n- usb: gadget: core: remove unbalanced mutex_unlock in usb_gadget_activate (git-fixes).\n- usb: gadget: udc: core: offload usb_udc_vbus_handler processing (git-fixes).\n- usb: gadget: udc: core: prevent soft_connect_store() race (git-fixes).\n- usb: serial: option: add lara-r6 01b pids (git-fixes).\n- usb: xhci-mtk: set the dma max_seg_size (git-fixes).\n- vhost: support packed when setting-getting vring_base (git-fixes).\n- vhost_net: revert upend_idx only on retriable error (git-fixes).\n- virtio-net: maintain reverse cleanup order (git-fixes).\n- virtio_net: fix error unwinding of xdp initialization (git-fixes).\n- wifi: airo: avoid uninitialized warning in airo_get_rate() (git-fixes).\n- wifi: ray_cs: drop useless status variable in parse_addr() (git-fixes).\n- wifi: ray_cs: utilize strnlen() in parse_addr() (git-fixes).\n- wifi: rtw89: debug: fix error code in rtw89_debug_priv_send_h2c_set() (git-fixes).\n- wl3501_cs: use eth_hw_addr_set() (git-fixes).\n- writeback: fix call of incorrect macro (bsc#1213024).\n- x86/pvh: obtain vga console info in dom0 (git-fixes).\n- x86: fix .brk attribute in linker script (git-fixes).\n- xen/blkfront: only check req_fua for writes (git-fixes).\n- xen/pvcalls-back: fix double frees with pvcalls_new_active_socket() (git-fixes).\n- xfs: ail needs asynchronous cil forcing (bsc#1211811).\n- xfs: async cil flushes need pending pushes to be made stable (bsc#1211811).\n- xfs: attach iclog callbacks in xlog_cil_set_ctx_write_state() (bsc#1211811).\n- xfs: cil work is serialised, not pipelined (bsc#1211811).\n- xfs: clean up the rtbitmap fsmap backend (git-fixes).\n- xfs: do not deplete the reserve pool when trying to shrink the fs (git-fixes).\n- xfs: do not reverse order of items in bulk ail insertion (git-fixes).\n- xfs: do not run shutdown callbacks on active iclogs (bsc#1211811).\n- xfs: drop async cache flushes from cil commits (bsc#1211811).\n- xfs: factor out log write ordering from xlog_cil_push_work() (bsc#1211811).\n- xfs: fix getfsmap reporting past the last rt extent (git-fixes).\n- xfs: fix integer overflows in the fsmap rtbitmap and logdev backends (git-fixes).\n- xfs: fix interval filtering in multi-step fsmap queries (git-fixes).\n- xfs: fix logdev fsmap query result filtering (git-fixes).\n- xfs: fix off-by-one error when the last rt extent is in use (git-fixes).\n- xfs: fix uninitialized variable access (git-fixes).\n- xfs: make fsmap backend function key parameters const (git-fixes).\n- xfs: make the record pointer passed to query_range functions const (git-fixes).\n- xfs: move the cil workqueue to the cil (bsc#1211811).\n- xfs: move xlog_commit_record to xfs_log_cil.c (bsc#1211811).\n- xfs: order cil checkpoint start records (bsc#1211811).\n- xfs: pass a cil context to xlog_write() (bsc#1211811).\n- xfs: pass explicit mount pointer to rtalloc query functions (git-fixes).\n- xfs: rework xlog_state_do_callback() (bsc#1211811).\n- xfs: run callbacks before waking waiters in xlog_state_shutdown_callbacks (bsc#1211811).\n- xfs: separate out log shutdown callback processing (bsc#1211811).\n- xfs: wait iclog complete before tearing down ail (bsc#1211811).\n- xfs: xlog_state_ioerror must die (bsc#1211811).\n- xhci: fix resume issue of some zhaoxin hosts (git-fixes).\n- xhci: fix trb prefetch issue of zhaoxin hosts (git-fixes).\n- xhci: show zhaoxin xhci root hub speed correctly (git-fixes).\n","status":"published","published":"2023-08-15T08:34:21Z","modified":"2026-02-04T04:05:01.426557Z","updated_at":"2026-11-02T15:53:53.440387Z"},{"id":"SUSE-SU-2023:3390-1","title":"Security update for the Linux Kernel","description":"\n\nThe SUSE Linux Enterprise 15 SP2 kernel was updated to receive various security and bugfixes.\n\n\nThe following security bugs were fixed:\n\n- CVE-2022-40982: Fixed transient execution attack called 'Gather Data Sampling' (bsc#1206418).\n- CVE-2023-0459: Fixed information leak in __uaccess_begin_nospec (bsc#1211738).\n- CVE-2023-20569: Fixed side channel attack ‘Inception’ or ‘RAS Poisoning’ (bsc#1213287).\n- CVE-2023-20593: Fixed a ZenBleed issue in 'Zen 2' CPUs that could allow an attacker to potentially access sensitive information (bsc#1213286).\n- CVE-2023-2985: Fixed an use-after-free vulnerability in hfsplus_put_super in fs/hfsplus/super.c that could allow a local user to cause a denial of service (bsc#1211867).\n- CVE-2023-3117: Fixed an use-after-free vulnerability in the netfilter subsystem when processing named and anonymous sets in batch requests that could allow a local user with CAP_NET_ADMIN capability to crash or potentially escalate their privileges on the system (bsc#1213245).\n- CVE-2023-3390: Fixed an use-after-free vulnerability in the netfilter subsystem in net/netfilter/nf_tables_api.c that could allow a local attacker with user access to cause a privilege escalation issue (bsc#1212846).\n- CVE-2023-34319: Fixed buffer overrun triggered by unusual packet in xen/netback (XSA-432) (bsc#1213546).\n- CVE-2023-35001: Fixed an out-of-bounds memory access flaw in nft_byteorder that could allow a local attacker to escalate their privilege (bsc#1213059).\n- CVE-2023-3567: Fixed a use-after-free in vcs_read in drivers/tty/vt/vc_screen.c (bsc#1213167).\n- CVE-2023-3609: Fixed reference counter leak leading to  overflow in net/sched (bsc#1213586).\n- CVE-2023-3611: Fixed an out-of-bounds write in net/sched sch_qfq(bsc#1213585).\n- CVE-2023-3776: Fixed improper refcount update in  cls_fw leads to use-after-free (bsc#1213588).\n- CVE-2023-3812: Fixed an out-of-bounds memory access flaw in the TUN/TAP device driver functionality that could allow a local user to crash or potentially escalate their privileges on the system (bsc#1213543).\n- CVE-2023-4133: Fixed use after free bugs caused by circular dependency problem in cxgb4 (bsc#1213970).\n- CVE-2023-4194: Fixed a type confusion in net tun_chr_open()  bsc#1214019).\n\nThe following non-security bugs were fixed:\n\n- arm: cpu: switch to arch_cpu_finalize_init() (bsc#1206418).\n- arm: spear: do not use timer namespace for timer_shutdown() function (bsc#1213970).\n- fix kabi when adding new cpuid leaves\n- get module prefix from kmod (bsc#1212835).\n- remove more packaging cruft for sle \u0026lt; 12 sp3\n- cifs: fix open leaks in open_cached_dir() (bsc#1209342).\n- clocksource/drivers/arm_arch_timer: do not use timer namespace for timer_shutdown() function (bsc#1213970).\n- clocksource/drivers/sp804: do not use timer namespace for timer_shutdown() function (bsc#1213970).\n- init, x86: move mem_encrypt_init() into arch_cpu_finalize_init() (bsc#1206418).\n- init: invoke arch_cpu_finalize_init() earlier (bsc#1206418).\n- init: provide arch_cpu_finalize_init() (bsc#1206418).\n- init: remove check_bugs() leftovers (bsc#1206418).\n- kernel-binary.spec.in: remove superfluous %% in supplements fixes: 02b7735e0caf ('rpm/kernel-binary.spec.in: add enhances and supplements tags to in-tree kmps')\n- kernel-docs: add buildrequires on python3-base when using python3 the python3 binary is provided by python3-base.\n- kernel-docs: use python3 together with python3-sphinx (bsc#1212741).\n- keys: do not cache key in task struct if key is requested from kernel thread (bsc#1213354).\n- keys: fix linking a duplicate key to a keyring's assoc_array (bsc#1207088).\n- net/sched: sch_qfq: refactor parsing of netlink parameters (bsc#1213585).\n- net: mana: add support for vlan tagging (bsc#1212301).\n- rpm/check-for-config-changes: ignore also pahole_has_* we now also have options like config_pahole_has_lang_exclude.\n- rpm/check-for-config-changes: ignore also riscv_isa_* and dynamic_sigframe they depend on config_toolchain_has_*.\n- timers: add shutdown mechanism to the internal functions (bsc#1213970).\n- timers: provide timer_shutdown[_sync]() (bsc#1213970).\n- timers: rename del_timer() to timer_delete() (bsc#1213970).\n- timers: rename del_timer_sync() to timer_delete_sync() (bsc#1213970).\n- timers: replace bug_on()s (bsc#1213970).\n- timers: silently ignore timers with a null function (bsc#1213970).\n- timers: split [try_to_]del_timer[_sync]() to prepare for shutdown mode (bsc#1213970).\n- timers: update kernel-doc for various functions (bsc#1213970).\n- timers: use del_timer_sync() even on up (bsc#1213970).\n- ubi: fix failure attaching when vid_hdr offset equals to (sub)page size (bsc#1210584).\n- ubi: ensure that vid header offset + vid header size \u0026lt;= alloc, size (bsc#1210584).\n- usrmerge: adjust module path in the kernel sources (bsc#1212835).\n- x86/cpu: switch to arch_cpu_finalize_init() (bsc#1206418).\n- x86/fpu: remove cpuinfo argument from init functions (bsc#1206418).\n- x86/microcode/AMD: Make stub function static inline (bsc#1213868).\n","status":"published","published":"2023-08-23T15:25:59Z","modified":"2026-02-04T04:09:05.95169Z","updated_at":"2026-11-02T15:53:53.440387Z"},{"id":"SUSE-SU-2023:3391-1","title":"Security update for the Linux Kernel","description":"\nThe SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security and bugfixes.\n\n\nThe following security bugs were fixed:\n\n- CVE-2022-40982: Fixed transient execution attack called 'Gather Data Sampling' (bsc#1206418).\n- CVE-2023-0459: Fixed information leak in __uaccess_begin_nospec (bsc#1211738).\n- CVE-2023-20569: Fixed side channel attack ‘Inception’ or ‘RAS Poisoning’ (bsc#1213287).\n- CVE-2023-20593: Fixed a ZenBleed issue in 'Zen 2' CPUs that could allow an attacker to potentially access sensitive information (bsc#1213286).\n- CVE-2023-2156: Fixed a flaw in the networking subsystem within the handling of the RPL protocol (bsc#1211131).\n- CVE-2023-2985: Fixed an use-after-free vulnerability in hfsplus_put_super in fs/hfsplus/super.c that could allow a local user to cause a denial of service (bsc#1211867).\n- CVE-2023-3117: Fixed an use-after-free vulnerability in the netfilter subsystem when processing named and anonymous sets in batch requests that could allow a local user with CAP_NET_ADMIN capability to crash or potentially escalate their privileges on the system (bsc#1213245).\n- CVE-2023-31248: Fixed an use-after-free vulnerability in nft_chain_lookup_byid that could allow a local attacker to escalate their privilege (bsc#1213061).\n- CVE-2023-3390: Fixed an use-after-free vulnerability in the netfilter subsystem in net/netfilter/nf_tables_api.c that could allow a local attacker with user access to cause a privilege escalation issue (bsc#1212846).\n- CVE-2023-35001: Fixed an out-of-bounds memory access flaw in nft_byteorder that could allow a local attacker to escalate their privilege (bsc#1213059).\n- CVE-2023-3567: Fixed a use-after-free in vcs_read in drivers/tty/vt/vc_screen.c (bsc#1213167).\n- CVE-2023-3609: Fixed reference counter leak leading to  overflow in net/sched (bsc#1213586).\n- CVE-2023-3611: Fixed an out-of-bounds write in net/sched sch_qfq(bsc#1213585).\n- CVE-2023-3776: Fixed improper refcount update in  cls_fw leads to use-after-free (bsc#1213588).\n- CVE-2023-3812: Fixed an out-of-bounds memory access flaw in the TUN/TAP device driver functionality that could allow a local user to crash or potentially escalate their privileges on the system (bsc#1213543).\n\nThe following non-security bugs were fixed:\n\n- arm: cpu: switch to arch_cpu_finalize_init() (bsc#1206418).\n- block, bfq: fix division by zero error on zero wsum (bsc#1213653).\n- get module prefix from kmod (bsc#1212835).\n- init, x86: move mem_encrypt_init() into arch_cpu_finalize_init() (bsc#1206418).\n- init: invoke arch_cpu_finalize_init() earlier (bsc#1206418).\n- init: provide arch_cpu_finalize_init() (bsc#1206418).\n- init: remove check_bugs() leftovers (bsc#1206418).\n- jbd2: export jbd2_journal_[grab|put]_journal_head (bsc#1199304).\n- kernel-binary.spec.in: remove superfluous %% in supplements fixes: 02b7735e0caf ('rpm/kernel-binary.spec.in: add enhances and supplements tags to in-tree kmps')\n- kernel-docs: add buildrequires on python3-base when using python3 the python3 binary is provided by python3-base.\n- kernel-docs: use python3 together with python3-sphinx (bsc#1212741).\n- keys: do not cache key in task struct if key is requested from kernel thread (bsc#1213354).\n- lockdep: add preemption enabled/disabled assertion apis (bsc#1207270 jsc#ped-4567).\n- locking/rwsem: add __always_inline annotation to __down_read_common() and inlined callers (bsc#1207270 jsc#ped-4567).\n- locking/rwsem: allow slowpath writer to ignore handoff bit if not set by first waiter (bsc#1207270 jsc#ped-4567).\n- locking/rwsem: always try to wake waiters in out_nolock path (bsc#1207270 jsc#ped-4567).\n- locking/rwsem: better collate rwsem_read_trylock() (bsc#1207270 jsc#ped-4567).\n- locking/rwsem: conditionally wake waiters in reader/writer slowpaths (bsc#1207270 jsc#ped-4567).\n- locking/rwsem: disable preemption for spinning region (bsc#1207270 jsc#ped-4567).\n- locking/rwsem: disable preemption in all down_read*() and up_read() code paths (bsc#1207270 jsc#ped-4567).\n- locking/rwsem: disable preemption in all down_write*() and up_write() code paths (bsc#1207270 jsc#ped-4567).\n- locking/rwsem: disable preemption while trying for rwsem lock (bsc#1207270 jsc#ped-4567).\n- locking/rwsem: enable reader optimistic lock stealing (bsc#1207270 jsc#ped-4567).\n- locking/rwsem: fix comment typo (bsc#1207270 jsc#ped-4567).\n- locking/rwsem: fix comments about reader optimistic lock stealing conditions (bsc#1207270 jsc#ped-4567).\n- locking/rwsem: fold __down_{read,write}*() (bsc#1207270 jsc#ped-4567).\n- locking/rwsem: introduce rwsem_write_trylock() (bsc#1207270 jsc#ped-4567).\n- locking/rwsem: make handoff bit handling more consistent (bsc#1207270 jsc#ped-4567).\n- locking/rwsem: no need to check for handoff bit if wait queue empty (bsc#1207270 jsc#ped-4567).\n- locking/rwsem: optimize down_read_trylock() under highly contended case (bsc#1207270 jsc#ped-4567).\n- locking/rwsem: pass the current atomic count to rwsem_down_read_slowpath() (bsc#1207270 jsc#ped-4567).\n- locking/rwsem: prevent non-first waiter from spinning in down_write() slowpath (bsc#1207270 jsc#ped-4567).\n- locking/rwsem: prevent potential lock starvation (bsc#1207270 jsc#ped-4567).\n- locking/rwsem: remove an unused parameter of rwsem_wake() (bsc#1207270 jsc#ped-4567).\n- locking/rwsem: remove reader optimistic spinning (bsc#1207270 jsc#ped-4567).\n- locking: add missing __sched attributes (bsc#1207270 jsc#ped-4567).\n- locking: remove rcu_read_{,un}lock() for preempt_{dis,en}able() (bsc#1207270 jsc#ped-4567).\n- net/sched: sch_qfq: refactor parsing of netlink parameters (bsc#1213585).\n- net: mana: add support for vlan tagging (bsc#1212301).\n- ocfs2: fix a deadlock when commit trans (bsc#1199304).\n- ocfs2: fix defrag path triggering jbd2 assert (bsc#1199304).\n- ocfs2: fix race between searching chunks and release journal_head from buffer_head (bsc#1199304).\n- remove more packaging cruft for sle \u0026lt; 12 sp3\n- rpm/check-for-config-changes: ignore also pahole_has_* we now also have options like config_pahole_has_lang_exclude.\n- rpm/check-for-config-changes: ignore also riscv_isa_* and dynamic_sigframe they depend on config_toolchain_has_*.\n- rwsem: implement down_read_interruptible (bsc#1207270 jsc#ped-4567).\n- rwsem: implement down_read_killable_nested (bsc#1207270 jsc#ped-4567).\n- ubi: ensure that vid header offset + vid header size \u0026lt;= alloc, size (bsc#1210584).\n- ubi: fix failure attaching when vid_hdr offset equals to (sub)page size (bsc#1210584).\n- usrmerge: adjust module path in the kernel sources (bsc#1212835).\n- x86/cpu: switch to arch_cpu_finalize_init() (bsc#1206418).\n- x86/fpu: remove cpuinfo argument from init functions (bsc#1206418).\n- x86/microcode/AMD: Make stub function static inline (bsc#1213868).\n","status":"published","published":"2023-08-23T15:29:53Z","modified":"2026-02-04T03:56:35.179641Z","updated_at":"2026-11-02T15:53:53.440387Z"},{"id":"SUSE-SU-2023:3421-1","title":"Security update for the Linux Kernel","description":"\n\nThe SUSE Linux Enterprise 15 SP3 RT kernel was updated to receive various security and bugfixes.\n\n\nThe following security bugs were fixed:\n\n- CVE-2023-2156: Fixed IPv6 RPL Protocol Reachable Assertion Denial-of-Service Vulnerability (bsc#1211131).\n- CVE-2022-40982: Fixed transient execution attack called 'Gather Data Sampling' (bsc#1206418).\n- CVE-2023-0459: Fixed information leak in __uaccess_begin_nospec (bsc#1211738).\n- CVE-2023-20569: Fixed side channel attack ‘Inception’ or ‘RAS Poisoning’ (bsc#1213287).\n- CVE-2023-20593: Fixed a ZenBleed issue in 'Zen 2' CPUs that could allow an attacker to potentially access sensitive information (bsc#1213286).\n- CVE-2023-2985: Fixed an use-after-free vulnerability in hfsplus_put_super in fs/hfsplus/super.c that could allow a local user to cause a denial of service (bsc#1211867).\n- CVE-2023-3117: Fixed an use-after-free vulnerability in the netfilter subsystem when processing named and anonymous sets in batch requests that could allow a local user with CAP_NET_ADMIN capability to crash or potentially escalate their privileges on the system (bsc#1213245).\n- CVE-2023-31248: Fixed an use-after-free vulnerability in nft_chain_lookup_byid that could allow a local attacker to escalate their privilege (bsc#1213061).\n- CVE-2023-3390: Fixed an use-after-free vulnerability in the netfilter subsystem in net/netfilter/nf_tables_api.c that could allow a local attacker with user access to cause a privilege escalation issue (bsc#1212846).\n- CVE-2023-35001: Fixed an out-of-bounds memory access flaw in nft_byteorder that could allow a local attacker to escalate their privilege (bsc#1213059).\n- CVE-2023-3567: Fixed a use-after-free in vcs_read in drivers/tty/vt/vc_screen.c (bsc#1213167).\n- CVE-2023-3609: Fixed reference counter leak leading to  overflow in net/sched (bsc#1213586).\n- CVE-2023-3611: Fixed an out-of-bounds write in net/sched sch_qfq(bsc#1213585).\n- CVE-2023-3776: Fixed improper refcount update in  cls_fw leads to use-after-free (bsc#1213588).\n- CVE-2023-3812: Fixed an out-of-bounds memory access flaw in the TUN/TAP device driver functionality that could allow a local user to crash or potentially escalate their privileges on the system (bsc#1213543).\n\nThe following non-security bugs were fixed:\n\n- arm: cpu: switch to arch_cpu_finalize_init() (bsc#1206418).\n- get module prefix from kmod (bsc#1212835).\n- remove more packaging cruft for sle \u0026lt; 12 sp3\n- block, bfq: fix division by zero error on zero wsum (bsc#1213653).\n- init, x86: move mem_encrypt_init() into arch_cpu_finalize_init() (bsc#1206418).\n- init: invoke arch_cpu_finalize_init() earlier (bsc#1206418).\n- init: provide arch_cpu_finalize_init() (bsc#1206418).\n- init: remove check_bugs() leftovers (bsc#1206418).\n- jbd2: export jbd2_journal_[grab|put]_journal_head (bsc#1199304).\n- kernel-binary.spec.in: remove superfluous %% in supplements fixes: 02b7735e0caf ('rpm/kernel-binary.spec.in: add enhances and supplements tags to in-tree kmps')\n- kernel-docs: add buildrequires on python3-base when using python3 the python3 binary is provided by python3-base.\n- kernel-docs: use python3 together with python3-sphinx (bsc#1212741).\n- keys: do not cache key in task struct if key is requested from kernel thread (bsc#1213354).\n- lockdep: add preemption enabled/disabled assertion apis (bsc#1207270 jsc#ped-4567).\n- locking/rwsem: add __always_inline annotation to __down_read_common() and inlined callers (bsc#1207270 jsc#ped-4567).\n- locking/rwsem: allow slowpath writer to ignore handoff bit if not set by first waiter (bsc#1207270 jsc#ped-4567).\n- locking/rwsem: always try to wake waiters in out_nolock path (bsc#1207270 jsc#ped-4567).\n- locking/rwsem: better collate rwsem_read_trylock() (bsc#1207270 jsc#ped-4567).\n- locking/rwsem: conditionally wake waiters in reader/writer slowpaths (bsc#1207270 jsc#ped-4567).\n- locking/rwsem: disable preemption for spinning region (bsc#1207270 jsc#ped-4567).\n- locking/rwsem: disable preemption in all down_read*() and up_read() code paths (bsc#1207270 jsc#ped-4567).\n- locking/rwsem: disable preemption in all down_write*() and up_write() code paths (bsc#1207270 jsc#ped-4567).\n- locking/rwsem: disable preemption while trying for rwsem lock (bsc#1207270 jsc#ped-4567).\n- locking/rwsem: enable reader optimistic lock stealing (bsc#1207270 jsc#ped-4567).\n- locking/rwsem: fix comment typo (bsc#1207270 jsc#ped-4567).\n- locking/rwsem: fix comments about reader optimistic lock stealing conditions (bsc#1207270 jsc#ped-4567).\n- locking/rwsem: fold __down_{read,write}*() (bsc#1207270 jsc#ped-4567).\n- locking/rwsem: introduce rwsem_write_trylock() (bsc#1207270 jsc#ped-4567).\n- locking/rwsem: make handoff bit handling more consistent (bsc#1207270 jsc#ped-4567).\n- locking/rwsem: no need to check for handoff bit if wait queue empty (bsc#1207270 jsc#ped-4567).\n- locking/rwsem: optimize down_read_trylock() under highly contended case (bsc#1207270 jsc#ped-4567).\n- locking/rwsem: pass the current atomic count to rwsem_down_read_slowpath() (bsc#1207270 jsc#ped-4567).\n- locking/rwsem: prevent non-first waiter from spinning in down_write() slowpath (bsc#1207270 jsc#ped-4567).\n- locking/rwsem: prevent potential lock starvation (bsc#1207270 jsc#ped-4567).\n- locking/rwsem: remove an unused parameter of rwsem_wake() (bsc#1207270 jsc#ped-4567).\n- locking/rwsem: remove reader optimistic spinning (bsc#1207270 jsc#ped-4567).\n- locking: add missing __sched attributes (bsc#1207270 jsc#ped-4567).\n- locking: remove rcu_read_{,un}lock() for preempt_{dis,en}able() (bsc#1207270 jsc#ped-4567).\n- net/sched: sch_qfq: refactor parsing of netlink parameters (bsc#1213585).\n- net: mana: add support for vlan tagging (bsc#1212301).\n- ocfs2: fix a deadlock when commit trans (bsc#1199304).\n- ocfs2: fix defrag path triggering jbd2 assert (bsc#1199304).\n- ocfs2: fix race between searching chunks and release journal_head from buffer_head (bsc#1199304).\n- rpm/check-for-config-changes: ignore also pahole_has_* we now also have options like config_pahole_has_lang_exclude.\n- rpm/check-for-config-changes: ignore also riscv_isa_* and dynamic_sigframe they depend on config_toolchain_has_*.\n- rwsem-rt: implement down_read_interruptible (bsc#1207270, jsc#ped-4567, sle realtime extension).\n- rwsem: implement down_read_interruptible (bsc#1207270 jsc#ped-4567).\n- rwsem: implement down_read_killable_nested (bsc#1207270 jsc#ped-4567).\n- ubi: fix failure attaching when vid_hdr offset equals to (sub)page size (bsc#1210584).\n- ubi: ensure that vid header offset + vid header size \u0026lt;= alloc, size (bsc#1210584).\n- usrmerge: adjust module path in the kernel sources (bsc#1212835).\n- x86/cpu: switch to arch_cpu_finalize_init() (bsc#1206418).\n- x86/fpu: remove cpuinfo argument from init functions (bsc#1206418).\n- x86/microcode/AMD: Make stub function static inline (bsc#1213868).\n","status":"published","published":"2023-08-24T08:55:49Z","modified":"2026-02-04T04:23:04.734926Z","updated_at":"2026-11-02T15:53:53.440387Z"}]}}