{"id":"CVE-2024-35994","aliases":["BELL-CVE-2024-35994","DEBIAN-CVE-2024-35994","EUVD-2024-35712","GHSA-5jj7-rmfx-38vv","UBUNTU-CVE-2024-35994","USN-6949-1","USN-6949-2","USN-6952-1","USN-6952-2","USN-6955-1"],"status":"published","title":"firmware: qcom: uefisecapp: Fix memory related IO errors and crashes","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nfirmware: qcom: uefisecapp: Fix memory related IO errors and crashes\n\nIt turns out that while the QSEECOM APP_SEND command has specific fields\nfor request and response buffers, uefisecapp expects them both to be in\na single memory region. Failure to adhere to this has (so far) resulted\nin either no response being written to the response buffer (causing an\nEIO to be emitted down the line), the SCM call to fail with EINVAL\n(i.e., directly from TZ/firmware), or the device to be hard-reset.\n\nWhile this issue can be triggered deterministically, in the current form\nit seems to happen rather sporadically (which is why it has gone\nunnoticed during earlier testing). This is likely due to the two\nkzalloc() calls (for request and response) being directly after each\nother. Which means that those likely return consecutive regions most of\nthe time, especially when not much else is going on in the system.\n\nFix this by allocating a single memory region for both request and\nresponse buffers, properly aligning both structs inside it. This\nunfortunately also means that the qcom_scm_qseecom_app_send() interface\nneeds to be restructured, as it should no longer map the DMA regions\nseparately. Therefore, move the responsibility of DMA allocation (or\nmapping) to the caller.","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00194,"percentile":0.09171,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-401"],"published":"2024-05-20T09:47:58Z","modified":"2026-11-02T12:02:40Z","fixes":[{"ecosystem":"Alpaquita:25","package":"linux-lts","fixed_in":["6.12.41-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"linux-lts","fixed_in":["6.12.41-r0"],"sources":["osv"]},{"ecosystem":"Linux","package":"Kernel","fixed_in":["6.8.9"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"linux","fixed_in":["6.8.9-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"linux","fixed_in":["6.8.9-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"linux-aws-6.8","fixed_in":["6.8.0-1013.14~22.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"linux-azure-6.8","fixed_in":["6.8.0-1012.14~22.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"linux-gcp-6.8","fixed_in":["6.8.0-1012.13~22.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"linux-hwe-6.8","fixed_in":["6.8.0-40.40~22.04.3"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"linux-lowlatency-hwe-6.8","fixed_in":["6.8.0-40.40.1~22.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"linux-nvidia-6.8","fixed_in":["6.8.0-1011.11~22.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"linux-oracle-6.8","fixed_in":["6.8.0-1010.10~22.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"linux-riscv-6.8","fixed_in":["6.8.0-40.40.1~22.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"linux","fixed_in":["6.8.0-40.40"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"linux-aws","fixed_in":["6.8.0-1013.14"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"linux-azure","fixed_in":["6.8.0-1012.14"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"linux-gcp","fixed_in":["6.8.0-1012.13"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"linux-gke","fixed_in":["6.8.0-1008.11"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"linux-ibm","fixed_in":["6.8.0-1010.10"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"linux-lowlatency","fixed_in":["6.8.0-40.40.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"linux-nvidia","fixed_in":["6.8.0-1011.11"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"linux-nvidia-lowlatency","fixed_in":["6.8.0-1011.11.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"linux-oem-6.8","fixed_in":["6.8.0-1010.10"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"linux-oracle","fixed_in":["6.8.0-1010.10"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"linux-raspi","fixed_in":["6.8.0-1009.10"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"linux-riscv","fixed_in":["6.8.0-40.40.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:Realtime:24.04:LTS","package":"linux-raspi-realtime","fixed_in":["6.8.0-2008.8"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:Realtime:24.04:LTS","package":"linux-realtime","fixed_in":["6.8.1-1006.6"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpaquita:25","package":"linux-lts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.6.89-r0"},{"fixed":"6.12.41-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"linux-lts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.6.100-r0"},{"fixed":"6.12.41-r0"}]}]},{"source":"osv","ecosystem":"Linux","package":"Kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.7.0"},{"fixed":"6.8.9"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.9-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.9-1"}]}]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"linux-hwe-edge","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.8.0-28.30~16.04.1","4.8.0-30.32~16.04.1","4.8.0-32.34~16.04.1","4.8.0-34.36~16.04.1","4.10.0-14.16~16.04.1","4.10.0-19.21~16.04.1","4.10.0-20.22~16.04.1","4.10.0-21.23~16.04.1","4.10.0-22.24~16.04.1","4.10.0-24.28~16.04.1","4.10.0-26.30~16.04.1","4.11.0-13.19~16.04.1","4.11.0-14.20~16.04.1","4.13.0-16.19~16.04.3","4.13.0-17.20~16.04.1","4.13.0-19.22~16.04.1","4.13.0-21.24~16.04.1","4.13.0-25.29~16.04.2","4.15.0-13.14~16.04.1","4.15.0-15.16~16.04.1","4.15.0-20.21~16.04.1","4.15.0-22.24~16.04.1","4.15.0-23.25~16.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-aws-5.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.0.0-1021.24~18.04.1","5.0.0-1022.25~18.04.1","5.0.0-1023.26~18.04.1","5.0.0-1024.27~18.04.1","5.0.0-1025.28","5.0.0-1027.30"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-aws-5.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.3.0-1016.17~18.04.1","5.3.0-1017.18~18.04.1","5.3.0-1019.21~18.04.1","5.3.0-1023.25~18.04.1","5.3.0-1028.30~18.04.1","5.3.0-1030.32~18.04.1","5.3.0-1032.34~18.04.2","5.3.0-1033.35","5.3.0-1034.36","5.3.0-1035.37"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-azure","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.15.0-1002.2","4.15.0-1003.3","4.15.0-1004.4","4.15.0-1008.8","4.15.0-1009.9","4.15.0-1012.12","4.15.0-1013.13","4.15.0-1014.14","4.15.0-1018.18","4.15.0-1019.19","4.15.0-1021.21","4.15.0-1022.23","4.15.0-1023.24","4.15.0-1025.26","4.15.0-1028.29","4.15.0-1030.31","4.15.0-1031.32","4.15.0-1032.33","4.15.0-1035.36","4.15.0-1036.38","4.15.0-1037.39","4.18.0-1011.11~18.04.1","4.18.0-1013.13~18.04.1","4.18.0-1014.14~18.04.1","4.18.0-1018.18~18.04.1","4.18.0-1019.19~18.04.1","4.18.0-1020.20~18.04.1","4.18.0-1023.24~18.04.1","4.18.0-1024.25~18.04.1","4.18.0-1025.27~18.04.1","5.0.0-1014.14~18.04.1","5.0.0-1016.17~18.04.1","5.0.0-1018.19~18.04.1","5.0.0-1020.21~18.04.1","5.0.0-1022.23~18.04.1","5.0.0-1023.24~18.04.1","5.0.0-1025.27~18.04.1","5.0.0-1027.29~18.04.1","5.0.0-1028.30~18.04.1","5.0.0-1029.31~18.04.1","5.0.0-1031.33","5.0.0-1032.34","5.0.0-1035.37","5.0.0-1036.38"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-azure-5.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.3.0-1007.8~18.04.1","5.3.0-1008.9~18.04.1","5.3.0-1009.10~18.04.1","5.3.0-1010.11~18.04.1","5.3.0-1012.13~18.04.1","5.3.0-1013.14~18.04.1","5.3.0-1016.17~18.04.1","5.3.0-1018.19~18.04.1","5.3.0-1019.20~18.04.1","5.3.0-1020.21~18.04.1","5.3.0-1022.23~18.04.1","5.3.0-1028.29~18.04.1","5.3.0-1031.32~18.04.1","5.3.0-1032.33~18.04.1","5.3.0-1034.35~18.04.1","5.3.0-1035.36"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-azure-edge","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.18.0-1006.6~18.04.1","4.18.0-1007.7~18.04.1","4.18.0-1008.8~18.04.1","5.0.0-1012.12~18.04.2"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-gcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.15.0-1001.1","4.15.0-1003.3","4.15.0-1005.5","4.15.0-1006.6","4.15.0-1008.8","4.15.0-1009.9","4.15.0-1010.10","4.15.0-1014.14","4.15.0-1015.15","4.15.0-1017.18","4.15.0-1018.19","4.15.0-1019.20","4.15.0-1021.22","4.15.0-1023.24","4.15.0-1024.25","4.15.0-1025.26","4.15.0-1026.27","4.15.0-1027.28","4.15.0-1028.29","4.15.0-1029.31","4.15.0-1030.32","4.15.0-1032.34","4.15.0-1033.35","4.15.0-1034.36","4.15.0-1036.38","4.15.0-1037.39","4.15.0-1040.42","4.15.0-1042.45","4.15.0-1044.70","5.0.0-1020.20~18.04.1","5.0.0-1021.21~18.04.1","5.0.0-1025.26~18.04.1","5.0.0-1026.27~18.04.1","5.0.0-1028.29~18.04.1","5.0.0-1029.30~18.04.1","5.0.0-1031.32","5.0.0-1033.34","5.0.0-1034.35"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-gcp-5.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.3.0-1008.9~18.04.1","5.3.0-1009.10~18.04.1","5.3.0-1010.11~18.04.1","5.3.0-1012.13~18.04.1","5.3.0-1014.15~18.04.1","5.3.0-1016.17~18.04.1","5.3.0-1017.18~18.04.1","5.3.0-1018.19~18.04.1","5.3.0-1020.22~18.04.1","5.3.0-1026.28~18.04.1","5.3.0-1029.31~18.04.1","5.3.0-1030.32~18.04.1","5.3.0-1032.34~18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-gke-4.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.15.0-1030.32","4.15.0-1032.34","4.15.0-1033.35","4.15.0-1034.36","4.15.0-1036.38","4.15.0-1037.39","4.15.0-1040.42","4.15.0-1041.43","4.15.0-1042.44","4.15.0-1044.46","4.15.0-1045.48","4.15.0-1046.49","4.15.0-1048.51","4.15.0-1049.52","4.15.0-1050.53","4.15.0-1052.55","4.15.0-1055.58","4.15.0-1057.60","4.15.0-1058.61","4.15.0-1059.62","4.15.0-1063.66","4.15.0-1064.67","4.15.0-1066.69","4.15.0-1067.70","4.15.0-1069.72","4.15.0-1070.73","4.15.0-1072.76","4.15.0-1073.78","4.15.0-1074.79","4.15.0-1076.81","4.15.0-1077.82","4.15.0-1078.83","4.15.0-1079.84"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-gke-5.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-1025.25~18.04.1","5.4.0-1027.28~18.04.1","5.4.0-1029.31~18.04.1","5.4.0-1030.32~18.04.1","5.4.0-1032.34~18.04.1","5.4.0-1033.35~18.04.1","5.4.0-1035.37~18.04.1","5.4.0-1036.38~18.04.1","5.4.0-1037.39~18.04.1","5.4.0-1039.41~18.04.1","5.4.0-1040.42~18.04.1","5.4.0-1042.44~18.04.1","5.4.0-1043.45~18.04.1","5.4.0-1044.46~18.04.1","5.4.0-1046.48~18.04.1","5.4.0-1049.52~18.04.1","5.4.0-1051.54~18.04.1","5.4.0-1052.55~18.04.1","5.4.0-1053.56~18.04.1","5.4.0-1054.57~18.04.1","5.4.0-1055.58~18.04.1","5.4.0-1056.59~18.04.1","5.4.0-1057.60~18.04.1","5.4.0-1059.62~18.04.1","5.4.0-1061.64~18.04.1","5.4.0-1062.65~18.04.1","5.4.0-1063.66~18.04.1","5.4.0-1065.68~18.04.1","5.4.0-1066.69~18.04.1","5.4.0-1067.70~18.04.1","5.4.0-1068.71~18.04.1","5.4.0-1071.76~18.04.3","5.4.0-1072.77~18.04.1","5.4.0-1074.79~18.04.1","5.4.0-1076.82~18.04.1","5.4.0-1078.84~18.04.1","5.4.0-1080.86~18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-gkeop-5.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-1001.1","5.4.0-1003.3","5.4.0-1004.5","5.4.0-1005.6","5.4.0-1007.8~18.04.1","5.4.0-1008.9~18.04.1","5.4.0-1009.10~18.04.1","5.4.0-1010.11~18.04.1","5.4.0-1011.12~18.04.2","5.4.0-1012.13~18.04.1","5.4.0-1013.14~18.04.1","5.4.0-1014.15~18.04.1","5.4.0-1015.16~18.04.1","5.4.0-1016.17~18.04.1","5.4.0-1018.19~18.04.1","5.4.0-1021.22~18.04.1","5.4.0-1022.23~18.04.1","5.4.0-1023.24~18.04.1","5.4.0-1024.25~18.04.1","5.4.0-1025.26~18.04.1","5.4.0-1026.27~18.04.1","5.4.0-1027.28~18.04.1","5.4.0-1029.30~18.04.2","5.4.0-1031.32~18.04.1","5.4.0-1032.33~18.04.1","5.4.0-1033.34~18.04.1","5.4.0-1034.35~18.04.1","5.4.0-1036.37~18.04.1","5.4.0-1037.38~18.04.1","5.4.0-1038.39~18.04.1","5.4.0-1039.40~18.04.1","5.4.0-1040.41~18.04.1","5.4.0-1043.44~18.04.1","5.4.0-1046.48~18.04.1","5.4.0-1048.51~18.04.1","5.4.0-1049.52~18.04.1","5.4.0-1051.54~18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-hwe","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.18.0-13.14~18.04.1","4.18.0-14.15~18.04.1","4.18.0-15.16~18.04.1","4.18.0-16.17~18.04.1","4.18.0-17.18~18.04.1","4.18.0-18.19~18.04.1","4.18.0-20.21~18.04.1","4.18.0-21.22~18.04.1","4.18.0-22.23~18.04.1","4.18.0-24.25~18.04.1","4.18.0-25.26~18.04.1","5.0.0-23.24~18.04.1","5.0.0-25.26~18.04.1","5.0.0-27.28~18.04.1","5.0.0-29.31~18.04.1","5.0.0-31.33~18.04.1","5.0.0-32.34~18.04.2","5.0.0-35.38~18.04.1","5.0.0-36.39~18.04.1","5.0.0-37.40~18.04.1","5.3.0-26.28~18.04.1","5.3.0-28.30~18.04.1","5.3.0-40.32~18.04.1","5.3.0-42.34~18.04.1","5.3.0-45.37~18.04.1","5.3.0-46.38~18.04.1","5.3.0-51.44~18.04.2","5.3.0-53.47~18.04.1","5.3.0-59.53~18.04.1","5.3.0-61.55~18.04.1","5.3.0-62.56~18.04.1","5.3.0-64.58~18.04.1","5.3.0-65.59","5.3.0-66.60","5.3.0-67.61","5.3.0-68.63","5.3.0-69.65","5.3.0-70.66","5.3.0-72.68","5.3.0-73.69","5.3.0-74.70","5.3.0-75.71","5.3.0-76.72"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-oem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.15.0-1002.3","4.15.0-1004.5","4.15.0-1006.9","4.15.0-1008.11","4.15.0-1009.12","4.15.0-1012.15","4.15.0-1013.16","4.15.0-1015.18","4.15.0-1017.20","4.15.0-1018.21","4.15.0-1021.24","4.15.0-1024.29","4.15.0-1026.31","4.15.0-1028.33","4.15.0-1030.35","4.15.0-1033.38","4.15.0-1034.39","4.15.0-1035.40","4.15.0-1036.41","4.15.0-1038.43","4.15.0-1039.44","4.15.0-1043.48","4.15.0-1045.50","4.15.0-1050.57","4.15.0-1056.65","4.15.0-1057.66","4.15.0-1059.68","4.15.0-1063.72","4.15.0-1064.73","4.15.0-1065.75","4.15.0-1066.76","4.15.0-1067.77","4.15.0-1069.79","4.15.0-1073.83","4.15.0-1076.86","4.15.0-1079.89","4.15.0-1080.90","4.15.0-1081.91","4.15.0-1087.97","4.15.0-1090.100","4.15.0-1091.101","4.15.0-1093.103","4.15.0-1094.104","4.15.0-1096.106","4.15.0-1097.107","4.15.0-1099.109","4.15.0-1100.110","4.15.0-1101.112","4.15.0-1102.113","4.15.0-1103.114"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-oracle-5.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.0.0-1007.12~18.04.1","5.0.0-1008.13~18.04.1","5.0.0-1009.14~18.04.1","5.0.0-1010.15~18.04.1","5.0.0-1011.16","5.0.0-1013.18","5.0.0-1014.19"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-oracle-5.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.3.0-1011.12~18.04.1","5.3.0-1013.14~18.04.1","5.3.0-1014.15~18.04.1","5.3.0-1016.18~18.04.1","5.3.0-1018.20~18.04.1","5.3.0-1024.26~18.04.1","5.3.0-1027.29~18.04.1","5.3.0-1028.30~18.04.1","5.3.0-1030.32~18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-aws-5.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.11.0-1009.9~20.04.2","5.11.0-1014.15~20.04.1","5.11.0-1016.17~20.04.1","5.11.0-1017.18~20.04.1","5.11.0-1019.20~20.04.1","5.11.0-1020.21~20.04.2","5.11.0-1021.22~20.04.2","5.11.0-1022.23~20.04.1","5.11.0-1023.24~20.04.1","5.11.0-1025.27~20.04.1","5.11.0-1027.30~20.04.1","5.11.0-1028.31~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-aws-5.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.13.0-1008.9~20.04.2","5.13.0-1011.12~20.04.1","5.13.0-1012.13~20.04.1","5.13.0-1014.15~20.04.1","5.13.0-1017.19~20.04.1","5.13.0-1019.21~20.04.1","5.13.0-1021.23~20.04.2","5.13.0-1022.24~20.04.1","5.13.0-1023.25~20.04.1","5.13.0-1025.27~20.04.1","5.13.0-1028.31~20.04.1","5.13.0-1029.32~20.04.1","5.13.0-1031.35~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-aws-5.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.8.0-1035.37~20.04.1","5.8.0-1038.40~20.04.1","5.8.0-1041.43~20.04.1","5.8.0-1042.44~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-azure-5.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.11.0-1007.7~20.04.2","5.11.0-1012.13~20.04.1","5.11.0-1013.14~20.04.1","5.11.0-1015.16~20.04.1","5.11.0-1017.18~20.04.1","5.11.0-1019.20~20.04.1","5.11.0-1020.21~20.04.1","5.11.0-1021.22~20.04.1","5.11.0-1022.23~20.04.1","5.11.0-1023.24~20.04.1","5.11.0-1025.27~20.04.1","5.11.0-1027.30~20.04.1","5.11.0-1028.31~20.04.2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-azure-5.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.13.0-1009.10~20.04.2","5.13.0-1012.14~20.04.1","5.13.0-1013.15~20.04.1","5.13.0-1014.16~20.04.1","5.13.0-1017.19~20.04.1","5.13.0-1021.24~20.04.1","5.13.0-1022.26~20.04.1","5.13.0-1023.27~20.04.1","5.13.0-1025.29~20.04.1","5.13.0-1028.33~20.04.1","5.13.0-1029.34~20.04.1","5.13.0-1031.37~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-azure-5.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.8.0-1033.35~20.04.1","5.8.0-1036.38~20.04.1","5.8.0-1039.42~20.04.1","5.8.0-1040.43~20.04.1","5.8.0-1041.44~20.04.1","5.8.0-1042.45~20.04.1","5.8.0-1043.46~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-azure-fde","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-1063.66+cvm2.2","5.4.0-1063.66+cvm3.2","5.4.0-1064.67+cvm1.1","5.4.0-1065.68+cvm2.1","5.4.0-1067.70+cvm1.1","5.4.0-1068.71+cvm1.1","5.4.0-1069.72+cvm1.1","5.4.0-1070.73+cvm1.1","5.4.0-1072.75+cvm1.1","5.4.0-1073.76+cvm1.1","5.4.0-1074.77+cvm1.1","5.4.0-1076.79+cvm1.1","5.4.0-1078.81+cvm1.1","5.4.0-1080.83+cvm1.1","5.4.0-1083.87+cvm1.1","5.4.0-1085.90+cvm1.1","5.4.0-1085.90+cvm2.1","5.4.0-1086.91+cvm1.1","5.4.0-1089.94+cvm1.2","5.4.0-1090.95+cvm1.1","5.4.0-1091.96+cvm1.1","5.4.0-1092.97+cvm1.1","5.4.0-1095.101+cvm1.1","5.4.0-1098.104+cvm1.1","5.4.0-1100.106+cvm1.1","5.4.0-1103.109+cvm1.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-gcp-5.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.11.0-1009.10~20.04.1","5.11.0-1014.16~20.04.1","5.11.0-1017.19~20.04.1","5.11.0-1018.20~20.04.2","5.11.0-1020.22~20.04.1","5.11.0-1021.23~20.04.1","5.11.0-1022.24~20.04.1","5.11.0-1023.25~20.04.1","5.11.0-1024.26~20.04.1","5.11.0-1026.29~20.04.1","5.11.0-1028.32~20.04.1","5.11.0-1029.33~20.04.3"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-gcp-5.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.13.0-1008.9~20.04.3","5.13.0-1012.15~20.04.1","5.13.0-1013.16~20.04.1","5.13.0-1015.18~20.04.1","5.13.0-1019.23~20.04.1","5.13.0-1021.25~20.04.1","5.13.0-1023.28~20.04.1","5.13.0-1024.29~20.04.1","5.13.0-1025.30~20.04.1","5.13.0-1027.32~20.04.1","5.13.0-1030.36~20.04.1","5.13.0-1031.37~20.04.1","5.13.0-1033.40~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-gcp-5.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.8.0-1032.34~20.04.1","5.8.0-1035.37~20.04.1","5.8.0-1038.40~20.04.1","5.8.0-1039.41"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-gke","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-1033.35","5.4.0-1035.37","5.4.0-1036.38","5.4.0-1037.39","5.4.0-1039.41","5.4.0-1041.43","5.4.0-1042.44","5.4.0-1043.45","5.4.0-1044.46","5.4.0-1046.48","5.4.0-1049.52","5.4.0-1051.54","5.4.0-1052.55","5.4.0-1053.56","5.4.0-1054.57","5.4.0-1055.58","5.4.0-1056.59","5.4.0-1057.60","5.4.0-1059.62","5.4.0-1061.64","5.4.0-1062.65","5.4.0-1063.66","5.4.0-1065.68","5.4.0-1066.69","5.4.0-1067.70","5.4.0-1068.71","5.4.0-1071.76","5.4.0-1072.77","5.4.0-1074.79","5.4.0-1076.82","5.4.0-1078.84","5.4.0-1080.86","5.4.0-1081.87","5.4.0-1083.89","5.4.0-1084.90","5.4.0-1086.93","5.4.0-1087.94","5.4.0-1090.97","5.4.0-1091.98","5.4.0-1094.101","5.4.0-1095.102","5.4.0-1096.103","5.4.0-1097.104","5.4.0-1098.105","5.4.0-1099.106","5.4.0-1100.107","5.4.0-1101.108","5.4.0-1102.109","5.4.0-1103.110","5.4.0-1104.111","5.4.0-1105.112"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-gke-5.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1011.14~20.04.1","5.15.0-1014.17~20.04.1","5.15.0-1015.18~20.04.1","5.15.0-1016.19~20.04.1","5.15.0-1019.23~20.04.1","5.15.0-1020.25~20.04.1","5.15.0-1023.28~20.04.2","5.15.0-1027.32~20.04.1","5.15.0-1028.33~20.04.1","5.15.0-1029.34~20.04.1","5.15.0-1031.36~20.04.1","5.15.0-1032.37~20.04.1","5.15.0-1033.38~20.04.1","5.15.0-1034.39~20.04.1","5.15.0-1036.41~20.04.1","5.15.0-1037.42~20.04.1","5.15.0-1038.43~20.04.1","5.15.0-1039.44~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-hwe-5.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.11.0-22.23~20.04.1","5.11.0-25.27~20.04.1","5.11.0-27.29~20.04.1","5.11.0-34.36~20.04.1","5.11.0-36.40~20.04.1","5.11.0-37.41~20.04.2","5.11.0-38.42~20.04.1","5.11.0-40.44~20.04.2","5.11.0-41.45~20.04.1","5.11.0-43.47~20.04.2","5.11.0-44.48~20.04.2","5.11.0-46.51~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-hwe-5.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.13.0-21.21~20.04.1","5.13.0-22.22~20.04.1","5.13.0-23.23~20.04.2","5.13.0-25.26~20.04.1","5.13.0-27.29~20.04.1","5.13.0-28.31~20.04.1","5.13.0-30.33~20.04.1","5.13.0-35.40~20.04.1","5.13.0-37.42~20.04.1","5.13.0-39.44~20.04.1","5.13.0-40.45~20.04.1","5.13.0-41.46~20.04.1","5.13.0-44.49~20.04.1","5.13.0-48.54~20.04.1","5.13.0-51.58~20.04.1","5.13.0-52.59~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-hwe-5.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.8.0-23.24~20.04.1","5.8.0-25.26~20.04.1","5.8.0-28.30~20.04.1","5.8.0-29.31~20.04.1","5.8.0-31.33~20.04.1","5.8.0-33.36~20.04.1","5.8.0-34.37~20.04.2","5.8.0-36.40~20.04.1","5.8.0-38.43~20.04.1","5.8.0-40.45~20.04.1","5.8.0-41.46~20.04.1","5.8.0-43.49~20.04.1","5.8.0-44.50~20.04.1","5.8.0-45.51~20.04.1","5.8.0-48.54~20.04.1","5.8.0-49.55~20.04.1","5.8.0-50.56~20.04.1","5.8.0-53.60~20.04.1","5.8.0-55.62~20.04.1","5.8.0-59.66~20.04.1","5.8.0-63.71~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-intel-5.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.13.0-1007.7","5.13.0-1008.8","5.13.0-1009.9","5.13.0-1010.10","5.13.0-1011.11","5.13.0-1014.15","5.13.0-1017.19"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-oem-5.10","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.10.0-1008.9","5.10.0-1011.12","5.10.0-1013.14","5.10.0-1014.15","5.10.0-1016.17","5.10.0-1017.18","5.10.0-1019.20","5.10.0-1021.22","5.10.0-1022.23","5.10.0-1023.24","5.10.0-1025.26","5.10.0-1026.27","5.10.0-1029.30","5.10.0-1032.33","5.10.0-1033.34","5.10.0-1034.35","5.10.0-1038.40","5.10.0-1044.46","5.10.0-1045.47","5.10.0-1049.51","5.10.0-1050.52","5.10.0-1051.53","5.10.0-1052.54","5.10.0-1053.55","5.10.0-1055.58","5.10.0-1057.61"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-oem-5.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.13.0-1009.10","5.13.0-1010.11","5.13.0-1012.16","5.13.0-1014.18","5.13.0-1017.21","5.13.0-1019.23","5.13.0-1020.24","5.13.0-1021.25","5.13.0-1022.26","5.13.0-1026.32","5.13.0-1028.35","5.13.0-1029.36"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-oem-5.14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.14.0-1004.4","5.14.0-1005.5","5.14.0-1007.7","5.14.0-1008.8","5.14.0-1010.10","5.14.0-1011.11","5.14.0-1013.13","5.14.0-1018.19","5.14.0-1020.22","5.14.0-1022.24","5.14.0-1024.26","5.14.0-1027.30","5.14.0-1029.32","5.14.0-1031.34","5.14.0-1032.35","5.14.0-1033.36","5.14.0-1034.37","5.14.0-1036.40","5.14.0-1038.42","5.14.0-1042.47","5.14.0-1044.49","5.14.0-1045.51","5.14.0-1046.53","5.14.0-1047.54","5.14.0-1048.55","5.14.0-1049.56","5.14.0-1050.57","5.14.0-1051.58","5.14.0-1052.59","5.14.0-1054.61","5.14.0-1055.62","5.14.0-1056.63","5.14.0-1057.64","5.14.0-1058.66","5.14.0-1059.67"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-oem-5.6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.6.0-1007.7","5.6.0-1008.8","5.6.0-1010.10","5.6.0-1011.11","5.6.0-1013.13","5.6.0-1017.17","5.6.0-1018.18","5.6.0-1020.20","5.6.0-1021.21","5.6.0-1023.23","5.6.0-1026.26","5.6.0-1027.27","5.6.0-1028.28","5.6.0-1031.32","5.6.0-1032.33","5.6.0-1033.35","5.6.0-1034.36","5.6.0-1035.37","5.6.0-1036.39","5.6.0-1039.43","5.6.0-1042.46","5.6.0-1047.51","5.6.0-1048.52","5.6.0-1050.54","5.6.0-1052.56","5.6.0-1053.57","5.6.0-1054.58","5.6.0-1055.59","5.6.0-1056.60"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-oracle-5.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.11.0-1008.8~20.04.1","5.11.0-1013.14~20.04.1","5.11.0-1016.17~20.04.1","5.11.0-1017.18~20.04.1","5.11.0-1019.20~20.04.1","5.11.0-1020.21~20.04.1","5.11.0-1021.22~20.04.1","5.11.0-1022.23~20.04.1","5.11.0-1023.24~20.04.1","5.11.0-1025.27~20.04.1","5.11.0-1027.30~20.04.1","5.11.0-1028.31~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-oracle-5.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.13.0-1011.13~20.04.2","5.13.0-1015.19~20.04.1","5.13.0-1016.20~20.04.1","5.13.0-1018.22~20.04.1","5.13.0-1021.26~20.04.1","5.13.0-1025.30~20.04.1","5.13.0-1027.32~20.04.1","5.13.0-1028.33~20.04.1","5.13.0-1030.35~20.04.1","5.13.0-1033.39~20.04.1","5.13.0-1034.40~20.04.1","5.13.0-1036.43~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-oracle-5.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.8.0-1031.32~20.04.2","5.8.0-1033.34~20.04.1","5.8.0-1034.35~20.04.2","5.8.0-1037.38~20.04.1","5.8.0-1038.39~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-raspi2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.3.0-1007.8","5.3.0-1014.16","5.3.0-1015.17","5.3.0-1017.19","5.4.0-1004.4","5.4.0-1006.6"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-riscv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-24.28","5.4.0-26.30","5.4.0-27.31","5.4.0-28.32","5.4.0-30.34","5.4.0-31.35","5.4.0-33.37","5.4.0-34.38","5.4.0-36.41","5.4.0-37.42","5.4.0-39.44","5.4.0-40.45"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-riscv-5.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.11.0-1015.16~20.04.1","5.11.0-1017.18~20.04.1","5.11.0-1018.19~20.04.2","5.11.0-1020.21~20.04.1","5.11.0-1021.22~20.04.1","5.11.0-1022.23~20.04.1","5.11.0-1023.24~20.04.1","5.11.0-1024.25~20.04.1","5.11.0-1026.28~20.04.1","5.11.0-1028.31~20.04.1","5.11.0-1029.32~20.04.1","5.11.0-1030.34","5.11.0-1031.35"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-riscv-5.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.8.0-14.16~20.04.1","5.8.0-14.16~20.04.3","5.8.0-16.18~20.04.1","5.8.0-17.19~20.04.1","5.8.0-18.20~20.04.1","5.8.0-20.22~20.04.1","5.8.0-22.24~20.04.1","5.8.0-25.27~20.04.1","5.8.0-26.28~20.04.1","5.8.0-29.31~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-allwinner-5.19","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.19.0-1007.7~22.04.1","5.19.0-1009.9~22.04.1","5.19.0-1010.10~22.04.1","5.19.0-1011.11~22.04.1","5.19.0-1012.12~22.04.1","5.19.0-1013.13~22.04.1","5.19.0-1014.14~22.04.1","5.19.0-1015.15~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-aws-5.19","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.19.0-1019.20~22.04.1","5.19.0-1020.21~22.04.1","5.19.0-1022.23~22.04.1","5.19.0-1023.24~22.04.1","5.19.0-1024.25~22.04.1","5.19.0-1025.26~22.04.1","5.19.0-1026.27~22.04.1","5.19.0-1027.28~22.04.1","5.19.0-1028.29~22.04.1","5.19.0-1029.30~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-aws-6.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.2.0-1005.5~22.04.1","6.2.0-1006.6~22.04.1","6.2.0-1007.7~22.04.1","6.2.0-1008.8~22.04.1","6.2.0-1009.9~22.04.3","6.2.0-1010.10~22.04.1","6.2.0-1011.11~22.04.1","6.2.0-1012.12~22.04.1","6.2.0-1013.13~22.04.1","6.2.0-1014.14~22.04.1","6.2.0-1015.15~22.04.1","6.2.0-1016.16~22.04.1","6.2.0-1017.17~22.04.1","6.2.0-1018.18~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-aws-6.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-1013.14~22.04.1"}]}],"versions":["6.8.0-1009.9~22.04.2","6.8.0-1010.10~22.04.2","6.8.0-1011.12~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-azure-5.19","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.19.0-1020.21~22.04.1","5.19.0-1021.22~22.04.1","5.19.0-1022.23~22.04.1","5.19.0-1023.24~22.04.1","5.19.0-1025.28~22.04.1","5.19.0-1026.29~22.04.1","5.19.0-1027.30~22.04.2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-azure-6.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.2.0-1005.5~22.04.1","6.2.0-1006.6~22.04.1","6.2.0-1007.7~22.04.1","6.2.0-1008.8~22.04.1","6.2.0-1009.9~22.04.3","6.2.0-1011.11~22.04.1","6.2.0-1012.12~22.04.1","6.2.0-1014.14~22.04.1","6.2.0-1015.15~22.04.1","6.2.0-1016.16~22.04.1","6.2.0-1017.17~22.04.1","6.2.0-1018.18~22.04.1","6.2.0-1019.19~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-azure-6.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-1012.14~22.04.1"}]}],"versions":["6.8.0-1008.8~22.04.1","6.8.0-1009.9~22.04.1","6.8.0-1010.10~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-azure-fde-5.19","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.19.0-1025.28~22.04.1.1","5.19.0-1026.29~22.04.1.1","5.19.0-1027.30~22.04.2.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-azure-fde-6.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.2.0-1008.8~22.04.1.1","6.2.0-1009.9~22.04.3.1","6.2.0-1011.11~22.04.1.1","6.2.0-1012.12~22.04.1.1","6.2.0-1014.14~22.04.1.1","6.2.0-1015.15~22.04.1.1","6.2.0-1016.16~22.04.1.1","6.2.0-1017.17~22.04.1.1","6.2.0-1018.18~22.04.1.1","6.2.0-1019.19~22.04.1.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-gcp-5.19","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.19.0-1020.22~22.04.2","5.19.0-1021.23~22.04.1","5.19.0-1022.24~22.04.1","5.19.0-1024.26~22.04.1","5.19.0-1025.27~22.04.1","5.19.0-1026.28~22.04.1","5.19.0-1027.29~22.04.1","5.19.0-1030.32~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-gcp-6.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.2.0-1009.9~22.04.3","6.2.0-1010.10~22.04.1","6.2.0-1011.11~22.04.1","6.2.0-1011.11~22.04.3","6.2.0-1012.12~22.04.1","6.2.0-1013.13~22.04.1","6.2.0-1014.14~22.04.1","6.2.0-1016.18~22.04.1","6.2.0-1017.19~22.04.1","6.2.0-1018.20~22.04.1","6.2.0-1019.21~22.04.1","6.2.0-1021.23~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-gcp-6.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-1012.13~22.04.1"}]}],"versions":["6.8.0-1010.11~22.04.1","6.8.0-1011.12~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-hwe-5.19","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.19.0-28.29~22.04.1","5.19.0-32.33~22.04.1","5.19.0-35.36~22.04.1","5.19.0-38.39~22.04.1","5.19.0-40.41~22.04.1","5.19.0-41.42~22.04.1","5.19.0-42.43~22.04.1","5.19.0-43.44~22.04.1","5.19.0-45.46~22.04.1","5.19.0-46.47~22.04.1","5.19.0-50.50"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-hwe-6.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.2.0-25.25~22.04.2","6.2.0-26.26~22.04.1","6.2.0-31.31~22.04.1","6.2.0-32.32~22.04.1","6.2.0-33.33~22.04.1","6.2.0-34.34~22.04.1","6.2.0-35.35~22.04.1","6.2.0-36.37~22.04.1","6.2.0-37.38~22.04.1","6.2.0-39.40~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-hwe-6.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-40.40~22.04.3"}]}],"versions":["6.8.0-38.38~22.04.1","6.8.0-39.39~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-intel-iot-realtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1073.75"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-lowlatency-hwe-5.19","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.19.0-1017.18~22.04.1","5.19.0-1018.19~22.04.1","5.19.0-1021.22~22.04.1","5.19.0-1022.23~22.04.1","5.19.0-1023.24~22.04.1","5.19.0-1024.25~22.04.1","5.19.0-1025.26~22.04.1","5.19.0-1027.28~22.04.1","5.19.0-1028.29~22.04.1","5.19.0-1030.30"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-lowlatency-hwe-6.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.2.0-1008.8~22.04.1","6.2.0-1009.9~22.04.1","6.2.0-1011.11~22.04.1","6.2.0-1012.12~22.04.1","6.2.0-1013.13~22.04.1","6.2.0-1014.14~22.04.1","6.2.0-1015.15~22.04.1","6.2.0-1016.16~22.04.1","6.2.0-1017.17~22.04.1","6.2.0-1018.18~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-lowlatency-hwe-6.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-40.40.1~22.04.1"}]}],"versions":["6.8.0-38.38.1~22.04.2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-nvidia-6.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.2.0-1003.3~22.04.1","6.2.0-1009.9","6.2.0-1010.10","6.2.0-1011.11","6.2.0-1012.12","6.2.0-1013.13","6.2.0-1015.15"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-nvidia-6.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-1011.11~22.04.1"}]}],"versions":["6.8.0-1008.8~22.04.1","6.8.0-1009.9~22.04.1","6.8.0-1010.10~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-oem-5.17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.17.0-1003.3","5.17.0-1004.4","5.17.0-1006.6","5.17.0-1011.12","5.17.0-1012.13","5.17.0-1013.14","5.17.0-1014.15","5.17.0-1015.16","5.17.0-1016.17","5.17.0-1017.18","5.17.0-1018.19","5.17.0-1019.20","5.17.0-1020.21","5.17.0-1021.22","5.17.0-1024.25","5.17.0-1025.26","5.17.0-1026.27","5.17.0-1027.28","5.17.0-1028.29","5.17.0-1029.30","5.17.0-1030.31","5.17.0-1031.32","5.17.0-1032.33","5.17.0-1033.34","5.17.0-1034.35","5.17.0-1035.36"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-oem-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.0.0-1006.6","6.0.0-1007.7","6.0.0-1008.8","6.0.0-1009.9","6.0.0-1010.10","6.0.0-1011.11","6.0.0-1012.12","6.0.0-1013.13","6.0.0-1014.14","6.0.0-1015.15","6.0.0-1016.16","6.0.0-1017.17","6.0.0-1018.18","6.0.0-1019.19","6.0.0-1020.20","6.0.0-1021.21"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-oem-6.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.1.0-1004.4","6.1.0-1006.6","6.1.0-1007.7","6.1.0-1008.8","6.1.0-1009.9","6.1.0-1010.10","6.1.0-1012.12","6.1.0-1013.13","6.1.0-1014.14","6.1.0-1015.15","6.1.0-1016.16","6.1.0-1017.17","6.1.0-1019.19","6.1.0-1020.20","6.1.0-1021.21","6.1.0-1022.22","6.1.0-1023.23","6.1.0-1024.24","6.1.0-1025.25","6.1.0-1026.26","6.1.0-1027.27","6.1.0-1028.28","6.1.0-1029.29","6.1.0-1033.33","6.1.0-1034.34","6.1.0-1035.35","6.1.0-1036.36"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-oracle-6.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-1010.10~22.04.1"}]}],"versions":["6.8.0-1006.6~22.04.3","6.8.0-1008.8~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-realtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1032.35"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-riscv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.13.0-1004.4","5.13.0-1006.6+22.04.1","5.13.0-1007.7+22.04.1","5.13.0-1010.11+22.04.1","5.15.0-1004.4","5.15.0-1005.5","5.15.0-1006.6","5.15.0-1007.7","5.15.0-1008.8","5.15.0-1011.12","5.15.0-1012.13","5.15.0-1014.16","5.15.0-1015.17","5.15.0-1016.18","5.15.0-1017.19","5.15.0-1018.21","5.15.0-1019.22","5.15.0-1020.23","5.15.0-1022.26","5.15.0-1023.27","5.15.0-1026.30","5.15.0-1027.31","5.15.0-1028.32"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-riscv-5.19","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.19.0-1012.13~22.04.1","5.19.0-1015.16~22.04.1","5.19.0-1016.17~22.04.1","5.19.0-1017.18~22.04.1","5.19.0-1018.19~22.04.1","5.19.0-1019.21~22.04.1","5.19.0-1020.22~22.04.1","5.19.0-1021.23~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-riscv-6.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-40.40.1~22.04.1"}]}],"versions":["6.8.0-38.38.1~22.04.1","6.8.0-39.39.1~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-starfive-5.19","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.19.0-1014.16~22.04.1","5.19.0-1015.17~22.04.1","5.19.0-1016.18~22.04.1","5.19.0-1017.19~22.04.1","5.19.0-1018.20~22.04.1","5.19.0-1019.21~22.04.1","5.19.0-1020.22~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-starfive-6.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.2.0-1006.7~22.04.1","6.2.0-1007.8~22.04.1","6.2.0-1009.10~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-40.40"}]}],"versions":["6.5.0-9.9","6.6.0-14.14","6.8.0-11.11","6.8.0-20.20","6.8.0-22.22","6.8.0-28.28","6.8.0-31.31","6.8.0-35.35","6.8.0-36.36","6.8.0-38.38","6.8.0-39.39"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-aws","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-1013.14"}]}],"versions":["6.5.0-1008.8","6.6.0-1001.1","6.8.0-1001.1","6.8.0-1006.6","6.8.0-1008.8","6.8.0-1009.9","6.8.0-1010.10","6.8.0-1011.12","6.8.0-1012.13"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-azure","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-1012.14"}]}],"versions":["6.5.0-1007.7","6.6.0-1001.1","6.8.0-1001.1","6.8.0-1005.5","6.8.0-1006.6","6.8.0-1007.7","6.8.0-1008.8","6.8.0-1009.9","6.8.0-1010.10"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-gcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-1012.13"}]}],"versions":["6.5.0-1007.7","6.6.0-1001.1","6.8.0-1002.2","6.8.0-1005.5","6.8.0-1006.6","6.8.0-1007.7","6.8.0-1008.9","6.8.0-1009.10","6.8.0-1010.11","6.8.0-1011.12"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-gke","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-1008.11"}]}],"versions":["6.8.0-1003.5","6.8.0-1004.7","6.8.0-1005.8","6.8.0-1006.9","6.8.0-1007.10"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-1010.10"}]}],"versions":["6.5.0-1009.9","6.8.0-1001.1","6.8.0-1003.3","6.8.0-1004.4","6.8.0-1005.5","6.8.0-1006.6","6.8.0-1007.7","6.8.0-1008.8","6.8.0-1009.9"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-lowlatency","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-40.40.1"}]}],"versions":["6.5.0-9.9.1","6.6.0-14.14.1","6.8.0-7.7.1","6.8.0-25.25.3","6.8.0-28.28.1","6.8.0-31.31.1","6.8.0-35.35.1","6.8.0-36.36.1","6.8.0-38.38.1","6.8.0-39.39.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-nvidia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-1011.11"}]}],"versions":["6.8.0-1007.7","6.8.0-1008.8","6.8.0-1009.9","6.8.0-1010.10"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-nvidia-lowlatency","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-1011.11.1"}]}],"versions":["6.8.0-1009.9.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-oem-6.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-1010.10"}]}],"versions":["6.8.0-1003.3","6.8.0-1004.4","6.8.0-1005.5","6.8.0-1006.6","6.8.0-1007.7","6.8.0-1008.8","6.8.0-1009.9"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-oracle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-1010.10"}]}],"versions":["6.5.0-1010.10","6.6.0-1001.1","6.8.0-1001.1","6.8.0-1004.4","6.8.0-1005.5","6.8.0-1006.6","6.8.0-1008.8"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-raspi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-1009.10"}]}],"versions":["6.5.0-1005.7","6.7.0-1001.1","6.8.0-1001.1","6.8.0-1002.2","6.8.0-1003.3","6.8.0-1004.4","6.8.0-1005.5","6.8.0-1006.6","6.8.0-1007.7","6.8.0-1008.8"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-riscv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-40.40.1"}]}],"versions":["6.5.0-9.9.1","6.8.0-20.20.1","6.8.0-28.28.1","6.8.0-31.31.1","6.8.0-35.35.1","6.8.0-36.36.1","6.8.0-38.38.1","6.8.0-39.39.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:Realtime:24.04:LTS","package":"linux-raspi-realtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-2008.8"}]}],"versions":["6.7.0-2001.1","6.8.0-2001.1","6.8.0-2002.2","6.8.0-2004.4","6.8.0-2005.5","6.8.0-2006.6","6.8.0-2007.7"]},{"source":"osv","ecosystem":"Ubuntu:Pro:Realtime:24.04:LTS","package":"linux-realtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.1-1006.6"}]}],"versions":["6.8.0-1008.19","6.8.1-1001.1","6.8.1-1002.2","6.8.1-1003.3","6.8.1-1004.4","6.8.1-1005.5"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-nvidia-6.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-1011.11~22.04.1"}]}],"versions":["6.8.0-1008.8~22.04.1","6.8.0-1009.9~22.04.1","6.8.0-1010.10~22.04.1"],"bundled":226},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-40.40"}]}],"versions":["6.5.0-9.9","6.6.0-14.14","6.8.0-11.11","6.8.0-20.20","6.8.0-22.22","6.8.0-28.28","6.8.0-31.31","6.8.0-35.35","6.8.0-36.36","6.8.0-38.38","6.8.0-39.39"],"bundled":226},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-aws","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-1013.14"}]}],"versions":["6.5.0-1008.8","6.6.0-1001.1","6.8.0-1001.1","6.8.0-1006.6","6.8.0-1008.8","6.8.0-1009.9","6.8.0-1010.10","6.8.0-1011.12","6.8.0-1012.13"],"bundled":226},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-gcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-1012.13"}]}],"versions":["6.5.0-1007.7","6.6.0-1001.1","6.8.0-1002.2","6.8.0-1005.5","6.8.0-1006.6","6.8.0-1007.7","6.8.0-1008.9","6.8.0-1009.10","6.8.0-1010.11","6.8.0-1011.12"],"bundled":226},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-gke","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-1008.11"}]}],"versions":["6.8.0-1003.5","6.8.0-1004.7","6.8.0-1005.8","6.8.0-1006.9","6.8.0-1007.10"],"bundled":226},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-1010.10"}]}],"versions":["6.5.0-1009.9","6.8.0-1001.1","6.8.0-1003.3","6.8.0-1004.4","6.8.0-1005.5","6.8.0-1006.6","6.8.0-1007.7","6.8.0-1008.8","6.8.0-1009.9"],"bundled":226},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-nvidia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-1011.11"}]}],"versions":["6.8.0-1007.7","6.8.0-1008.8","6.8.0-1009.9","6.8.0-1010.10"],"bundled":226},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-lowlatency","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-40.40.1"}]}],"versions":["6.5.0-9.9.1","6.6.0-14.14.1","6.8.0-7.7.1","6.8.0-25.25.3","6.8.0-28.28.1","6.8.0-31.31.1","6.8.0-35.35.1","6.8.0-36.36.1","6.8.0-38.38.1","6.8.0-39.39.1"],"bundled":226},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-raspi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-1009.10"}]}],"versions":["6.5.0-1005.7","6.7.0-1001.1","6.8.0-1001.1","6.8.0-1002.2","6.8.0-1003.3","6.8.0-1004.4","6.8.0-1005.5","6.8.0-1006.6","6.8.0-1007.7","6.8.0-1008.8"],"bundled":226},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-nvidia-lowlatency","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-1011.11.1"}]}],"versions":["6.8.0-1009.9.1"],"bundled":233},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-oracle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-1010.10"}]}],"versions":["6.5.0-1010.10","6.6.0-1001.1","6.8.0-1001.1","6.8.0-1004.4","6.8.0-1005.5","6.8.0-1006.6","6.8.0-1008.8"],"bundled":233},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-azure","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-1012.14"}]}],"versions":["6.5.0-1007.7","6.6.0-1001.1","6.8.0-1001.1","6.8.0-1005.5","6.8.0-1006.6","6.8.0-1007.7","6.8.0-1008.8","6.8.0-1009.9","6.8.0-1010.10"],"bundled":233},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-oem-6.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-1010.10"}]}],"versions":["6.8.0-1003.3","6.8.0-1004.4","6.8.0-1005.5","6.8.0-1006.6","6.8.0-1007.7","6.8.0-1008.8","6.8.0-1009.9"],"bundled":225}],"products":[{"vendor":"linux","product":"linux"},{"vendor":"linux","product":"linux_kernel"}],"references":[{"url":"https://git.kernel.org/stable/c/dd22b34fb53cb04b13b2f5eee5c9200bb091fc88","tags":["x_transferred","Patch","web","report"]},{"url":"https://git.kernel.org/stable/c/ed09f81eeaa8f9265e1787282cb283f10285c259","tags":["x_transferred","Patch","web","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-35994","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-5jj7-rmfx-38vv"},{"url":"https://docs.bell-sw.com/security/cves/CVE-2024-35994","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/35xxx/CVE-2024-35994.json","tags":["advisory"]},{"url":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","tags":["package"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2024-35994","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2024-35994","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-35994","tags":["report"]},{"url":"https://git.kernel.org/linus/ed09f81eeaa8f9265e1787282cb283f10285c259","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-6949-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-6952-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-6955-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-6949-2","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-6952-2","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2023-52882","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-27394","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-27395","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-27396","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-27398","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-27399","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-27400","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-27401","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-35846","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-35847","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-35848","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-35849","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-35850","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-35851","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-35852","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-35853","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-35854","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-35855","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-35856","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-35857","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-35858","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-35859","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-35947","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-35949","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-35983","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-35986","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-35987","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-35988","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-35989","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-35991","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-35993","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-35996","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-35998","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-35999","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-36000","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-36001","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-36002","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-36003","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-36004","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-36005","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-36006","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-36007","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-36009","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-36011","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-36012","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-36013","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-36014","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-36017","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-36028","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-36029","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-36030","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-36031","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-36032","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-36033","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-36880","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-36881","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-36882","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-36883","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-36884","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-36886","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-36887","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-36888","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-36889","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-36890","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-36891","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-36892","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-36893","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-36894","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-36895","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-36896","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-36897","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-36898","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-36899","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-36900","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-36901","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-36902","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-36903","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-36904","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-36905","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-36906","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-36908","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-36909","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-36910","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-36911","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-36912","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-36913","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-36914","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-36915","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-36916","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-36917","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-36918","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-36919","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-36920","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-36921","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-36922","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-36923","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-36924","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-36925","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-36926","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-36927","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-36928","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-36929","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-36930","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-36931","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-36932","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-36933","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-36934","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-36935","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-36936","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-36937","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-36938","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-36939","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-36940","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-36941","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-36943","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-36944","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-36945","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-36946","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-36947","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-36948","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-36949","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-36950","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-36951","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-36952","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-36953","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-36954","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-36955","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-36956","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-36957","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-36958","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-36959","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-36960","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-36961","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-36962","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-36963","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-36964","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-36965","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-36966","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-36967","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-36968","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-36969","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-36975","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-36977","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-36979","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-38538","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-38539","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-38540","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-38541","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-38542","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-38543","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-38544","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-38545","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-38546","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-38547","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-38548","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-38549","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-38550","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-38551","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-38552","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-38553","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-38554","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-38555","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-38556","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-38557","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-38558","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-38559","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-38560","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-38561","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-38562","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-38563","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-38564","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-38565","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-38566","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-38567","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-38568","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-38569","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-38570","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-38571","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-38572","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-38573","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-38574","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-38575","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-38576","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-38577","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-38578","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-38579","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-38580","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-38582","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-38583","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-38584","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-38585","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-38586","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-38587","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-38588","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-38589","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-38590","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-38591","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-38592","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-38593","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-38594","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-38595","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-38596","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-38597","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-38598","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-38599","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-38600","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-38601","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-38602","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-38603","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-38604","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-38605","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-38606","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-38607","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-38610","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-38611","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-38612","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-38613","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-38614","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-38615","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-38616","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-38617","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-38620","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-39482","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-41011","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-42134","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-25742","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-35984","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-35990","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-35992","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-35997","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-36008","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-36016","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2024-35994","title":"firmware: qcom: uefisecapp: Fix memory related IO errors and crashes","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nfirmware: qcom: uefisecapp: Fix memory related IO errors and crashes\n\nIt turns out that while the QSEECOM APP_SEND command has specific fields\nfor request and response buffers, uefisecapp expects them both to be in\na single memory region. Failure to adhere to this has (so far) resulted\nin either no response being written to the response buffer (causing an\nEIO to be emitted down the line), the SCM call to fail with EINVAL\n(i.e., directly from TZ/firmware), or the device to be hard-reset.\n\nWhile this issue can be triggered deterministically, in the current form\nit seems to happen rather sporadically (which is why it has gone\nunnoticed during earlier testing). This is likely due to the two\nkzalloc() calls (for request and response) being directly after each\nother. Which means that those likely return consecutive regions most of\nthe time, especially when not much else is going on in the system.\n\nFix this by allocating a single memory region for both request and\nresponse buffers, properly aligning both structs inside it. This\nunfortunately also means that the qcom_scm_qseecom_app_send() interface\nneeds to be restructured, as it should no longer map the DMA regions\nseparately. Therefore, move the responsibility of DMA allocation (or\nmapping) to the caller.","status":"published","published":"2024-05-20T09:47:58.396Z","modified":"2026-08-05T11:31:28.204Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"}],"updated_at":"2026-11-02T14:34:19.965827Z"}],"euvd":[{"id":"EUVD-2024-35712","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nfirmware: qcom: uefisecapp: Fix memory related IO errors and crashes\n\nIt turns out that while the QSEECOM APP_SEND command has specific fields\nfor request and response buffers, uefisecapp expects them both to be in\na single memory region. Failure to adhere to this has (so far) resulted\nin either no response being written to the response buffer (causing an\nEIO to be emitted down the line), the SCM call to fail with EINVAL\n(i.e., directly from TZ/firmware), or the device to be hard-reset.\n\nWhile this issue can be triggered deterministically, in the current form\nit seems to happen rather sporadically (which is why it has gone\nunnoticed during earlier testing). This is likely due to the two\nkzalloc() calls (for request and response) being directly after each\nother. Which means that those likely return consecutive regions most of\nthe time, especially when not much else is going on in the system.\n\nFix this by allocating a single memory region for both request and\nresponse buffers, properly aligning both structs inside it. This\nunfortunately also means that the qcom_scm_qseecom_app_send() interface\nneeds to be restructured, as it should no longer map the DMA regions\nseparately. Therefore, move the responsibility of DMA allocation (or\nmapping) to the caller.","status":"published","published":"2024-05-20T09:47:58Z","modified":"2026-08-05T11:31:28Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T18:02:17.510467Z"}],"ghsa":[{"id":"GHSA-5jj7-rmfx-38vv","title":"In the Linux kernel, the following vulnerability has been resolved:\n\nfirmware: qcom: uefisecapp:...","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nfirmware: qcom: uefisecapp: Fix memory related IO errors and crashes\n\nIt turns out that while the QSEECOM APP_SEND command has specific fields\nfor request and response buffers, uefisecapp expects them both to be in\na single memory region. Failure to adhere to this has (so far) resulted\nin either no response being written to the response buffer (causing an\nEIO to be emitted down the line), the SCM call to fail with EINVAL\n(i.e., directly from TZ/firmware), or the device to be hard-reset.\n\nWhile this issue can be triggered deterministically, in the current form\nit seems to happen rather sporadically (which is why it has gone\nunnoticed during earlier testing). This is likely due to the two\nkzalloc() calls (for request and response) being directly after each\nother. Which means that those likely return consecutive regions most of\nthe time, especially when not much else is going on in the system.\n\nFix this by allocating a single memory region for both request and\nresponse buffers, properly aligning both structs inside it. This\nunfortunately also means that the qcom_scm_qseecom_app_send() interface\nneeds to be restructured, as it should no longer map the DMA regions\nseparately. Therefore, move the responsibility of DMA allocation (or\nmapping) to the caller.","status":"published","published":"2024-05-20T12:30:29Z","modified":"2025-09-23T18:31:23Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-401"],"updated_at":"2026-11-02T15:03:44.216026Z"}],"nvd":[{"id":"CVE-2024-35994","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nfirmware: qcom: uefisecapp: Fix memory related IO errors and crashes\n\nIt turns out that while the QSEECOM APP_SEND command has specific fields\nfor request and response buffers, uefisecapp expects them both to be in\na single memory region. Failure to adhere to this has (so far) resulted\nin either no response being written to the response buffer (causing an\nEIO to be emitted down the line), the SCM call to fail with EINVAL\n(i.e., directly from TZ/firmware), or the device to be hard-reset.\n\nWhile this issue can be triggered deterministically, in the current form\nit seems to happen rather sporadically (which is why it has gone\nunnoticed during earlier testing). This is likely due to the two\nkzalloc() calls (for request and response) being directly after each\nother. Which means that those likely return consecutive regions most of\nthe time, especially when not much else is going on in the system.\n\nFix this by allocating a single memory region for both request and\nresponse buffers, properly aligning both structs inside it. This\nunfortunately also means that the qcom_scm_qseecom_app_send() interface\nneeds to be restructured, as it should no longer map the DMA regions\nseparately. Therefore, move the responsibility of DMA allocation (or\nmapping) to the caller.","status":"published","published":"2024-05-20T10:15:13.53Z","modified":"2026-08-04T11:18:20.113Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"}],"cwes":["CWE-401"],"updated_at":"2026-11-02T14:10:01.327642Z"}],"osv":[{"id":"BELL-CVE-2024-35994","status":"published","published":"2024-05-21T05:57:09.326869Z","modified":"2026-01-26T09:37:32.452081Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:28:19.923987Z"},{"id":"CVE-2024-35994","title":"firmware: qcom: uefisecapp: Fix memory related IO errors and crashes","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nfirmware: qcom: uefisecapp: Fix memory related IO errors and crashes\n\nIt turns out that while the QSEECOM APP_SEND command has specific fields\nfor request and response buffers, uefisecapp expects them both to be in\na single memory region. Failure to adhere to this has (so far) resulted\nin either no response being written to the response buffer (causing an\nEIO to be emitted down the line), the SCM call to fail with EINVAL\n(i.e., directly from TZ/firmware), or the device to be hard-reset.\n\nWhile this issue can be triggered deterministically, in the current form\nit seems to happen rather sporadically (which is why it has gone\nunnoticed during earlier testing). This is likely due to the two\nkzalloc() calls (for request and response) being directly after each\nother. Which means that those likely return consecutive regions most of\nthe time, especially when not much else is going on in the system.\n\nFix this by allocating a single memory region for both request and\nresponse buffers, properly aligning both structs inside it. This\nunfortunately also means that the qcom_scm_qseecom_app_send() interface\nneeds to be restructured, as it should no longer map the DMA regions\nseparately. Therefore, move the responsibility of DMA allocation (or\nmapping) to the caller.","status":"published","published":"2024-05-20T09:47:58.396Z","modified":"2026-10-28T02:31:10.195479315Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:40.704083Z"},{"id":"DEBIAN-CVE-2024-35994","description":"In the Linux kernel, the following vulnerability has been resolved:  firmware: qcom: uefisecapp: Fix memory related IO errors and crashes  It turns out that while the QSEECOM APP_SEND command has specific fields for request and response buffers, uefisecapp expects them both to be in a single memory region. Failure to adhere to this has (so far) resulted in either no response being written to the response buffer (causing an EIO to be emitted down the line), the SCM call to fail with EINVAL (i.e., directly from TZ/firmware), or the device to be hard-reset.  While this issue can be triggered deterministically, in the current form it seems to happen rather sporadically (which is why it has gone unnoticed during earlier testing). This is likely due to the two kzalloc() calls (for request and response) being directly after each other. Which means that those likely return consecutive regions most of the time, especially when not much else is going on in the system.  Fix this by allocating a single memory region for both request and response buffers, properly aligning both structs inside it. This unfortunately also means that the qcom_scm_qseecom_app_send() interface needs to be restructured, as it should no longer map the DMA regions separately. Therefore, move the responsibility of DMA allocation (or mapping) to the caller.","status":"published","published":"2024-05-20T10:15:13.53Z","modified":"2026-11-02T12:02:40.600040001Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:42.835825Z"},{"id":"UBUNTU-CVE-2024-35994","description":"In the Linux kernel, the following vulnerability has been resolved: firmware: qcom: uefisecapp: Fix memory related IO errors and crashes It turns out that while the QSEECOM APP_SEND command has specific fields for request and response buffers, uefisecapp expects them both to be in a single memory region. Failure to adhere to this has (so far) resulted in either no response being written to the response buffer (causing an EIO to be emitted down the line), the SCM call to fail with EINVAL (i.e., directly from TZ/firmware), or the device to be hard-reset. While this issue can be triggered deterministically, in the current form it seems to happen rather sporadically (which is why it has gone unnoticed during earlier testing). This is likely due to the two kzalloc() calls (for request and response) being directly after each other. Which means that those likely return consecutive regions most of the time, especially when not much else is going on in the system. Fix this by allocating a single memory region for both request and response buffers, properly aligning both structs inside it. This unfortunately also means that the qcom_scm_qseecom_app_send() interface needs to be restructured, as it should no longer map the DMA regions separately. Therefore, move the responsibility of DMA allocation (or mapping) to the caller.","status":"published","published":"2024-05-20T10:15:00Z","modified":"2026-08-06T03:07:49.39248855Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T16:54:50.784131Z"},{"id":"USN-6949-1","title":"linux, linux-aws, linux-gcp, linux-gke, linux-ibm, linux-nvidia, linux-nvidia-6.8 vulnerabilities","description":"Several security issues were discovered in the Linux kernel.\nAn attacker could possibly use these to compromise the system.\nThis update corrects flaws in the following subsystems:\n  - ARM32 architecture;\n  - ARM64 architecture;\n  - M68K architecture;\n  - OpenRISC architecture;\n  - PowerPC architecture;\n  - RISC-V architecture;\n  - x86 architecture;\n  - Block layer subsystem;\n  - Accessibility subsystem;\n  - Bluetooth drivers;\n  - Clock framework and drivers;\n  - CPU frequency scaling framework;\n  - Hardware crypto device drivers;\n  - DMA engine subsystem;\n  - DPLL subsystem;\n  - FireWire subsystem;\n  - EFI core;\n  - Qualcomm firmware drivers;\n  - GPIO subsystem;\n  - GPU drivers;\n  - Microsoft Hyper-V drivers;\n  - InfiniBand drivers;\n  - IOMMU subsystem;\n  - IRQ chip drivers;\n  - Macintosh device drivers;\n  - Multiple devices driver;\n  - Media drivers;\n  - EEPROM drivers;\n  - MMC subsystem;\n  - Network drivers;\n  - STMicroelectronics network drivers;\n  - Device tree and open firmware driver;\n  - HiSilicon SoC PMU drivers;\n  - PHY drivers;\n  - Pin controllers subsystem;\n  - Remote Processor subsystem;\n  - S/390 drivers;\n  - SCSI drivers;\n  - SPI subsystem;\n  - Media staging drivers;\n  - Thermal drivers;\n  - Userspace I/O drivers;\n  - USB subsystem;\n  - DesignWare USB3 driver;\n  - ACRN Hypervisor Service Module driver;\n  - Virtio drivers;\n  - 9P distributed file system;\n  - BTRFS file system;\n  - eCrypt file system;\n  - EROFS file system;\n  - File systems infrastructure;\n  - GFS2 file system;\n  - JFFS2 file system;\n  - Network file systems library;\n  - Network file system client;\n  - Network file system server daemon;\n  - NILFS2 file system;\n  - Proc file system;\n  - SMB network file system;\n  - Tracing file system;\n  - Mellanox drivers;\n  - Memory management;\n  - Socket messages infrastructure;\n  - Slab allocator;\n  - Tracing infrastructure;\n  - User-space API (UAPI);\n  - Core kernel;\n  - BPF subsystem;\n  - DMA mapping infrastructure;\n  - RCU subsystem;\n  - Dynamic debug library;\n  - KUnit library;\n  - Maple Tree data structure library;\n  - Heterogeneous memory management;\n  - Amateur Radio drivers;\n  - Bluetooth subsystem;\n  - Ethernet bridge;\n  - Networking core;\n  - IPv4 networking;\n  - IPv6 networking;\n  - Multipath TCP;\n  - Netfilter;\n  - NET/ROM layer;\n  - NFC subsystem;\n  - NSH protocol;\n  - Open vSwitch;\n  - Phonet protocol;\n  - SMC sockets;\n  - TIPC protocol;\n  - Unix domain sockets;\n  - Wireless networking;\n  - Key management;\n  - ALSA framework;\n  - HD-audio driver;\n  - Kirkwood ASoC drivers;\n  - MediaTek ASoC drivers;\n(CVE-2024-36006, CVE-2024-36922, CVE-2024-38567, CVE-2024-38584,\nCVE-2024-36923, CVE-2024-36892, CVE-2024-35855, CVE-2024-35853,\nCVE-2024-38562, CVE-2024-36920, CVE-2024-38543, CVE-2024-38576,\nCVE-2024-38572, CVE-2024-36898, CVE-2024-38560, CVE-2024-36004,\nCVE-2024-36956, CVE-2024-36881, CVE-2024-36977, CVE-2024-36955,\nCVE-2024-36906, CVE-2024-36013, CVE-2024-36884, CVE-2024-38563,\nCVE-2024-36966, CVE-2024-38547, CVE-2024-38594, CVE-2024-36926,\nCVE-2024-38587, CVE-2024-38566, CVE-2024-27400, CVE-2024-36941,\nCVE-2024-36017, CVE-2024-38544, CVE-2024-36899, CVE-2024-35851,\nCVE-2024-38577, CVE-2024-38590, CVE-2024-38568, CVE-2024-38559,\nCVE-2024-38611, CVE-2024-36887, CVE-2024-36886, CVE-2024-35996,\nCVE-2024-38612, CVE-2024-36925, CVE-2024-38586, CVE-2024-38596,\nCVE-2024-36932, CVE-2024-39482, CVE-2024-38585, CVE-2024-36033,\nCVE-2024-38614, CVE-2024-35852, CVE-2024-36908, CVE-2024-36939,\nCVE-2024-36963, CVE-2024-27401, CVE-2024-36029, CVE-2024-38540,\nCVE-2024-38565, CVE-2024-36927, CVE-2024-36910, CVE-2024-42134,\nCVE-2024-36888, CVE-2024-35859, CVE-2024-36911, CVE-2024-35947,\nCVE-2024-36940, CVE-2024-36921, CVE-2024-36913, CVE-2024-36943,\nCVE-2024-35986, CVE-2024-38616, CVE-2024-36900, CVE-2024-36954,\nCVE-2024-36915, CVE-2024-38602, CVE-2024-41011, CVE-2024-35991,\nCVE-2024-36909, CVE-2024-38603, CVE-2023-52882, CVE-2024-36953,\nCVE-2024-38599, CVE-2024-38574, CVE-2024-36967, CVE-2024-36895,\nCVE-2024-36003, CVE-2024-36961, CVE-2024-38545, CVE-2024-38538,\nCVE-2024-36001, CVE-2024-36912, CVE-2024-36952, CVE-2024-38550,\nCVE-2024-38570, CVE-2024-36969, CVE-2024-38595, CVE-2024-35849,\nCVE-2024-36936, CVE-2024-35949, CVE-2024-36009, CVE-2024-35987,\nCVE-2024-38541, CVE-2024-38564, CVE-2024-36032, CVE-2024-38615,\nCVE-2024-36960, CVE-2024-36934, CVE-2024-36951, CVE-2024-35999,\nCVE-2024-38551, CVE-2024-36903, CVE-2024-36931, CVE-2024-38593,\nCVE-2024-36938, CVE-2024-38607, CVE-2024-36928, CVE-2024-38552,\nCVE-2024-36002, CVE-2024-38605, CVE-2024-38582, CVE-2024-36933,\nCVE-2024-38620, CVE-2024-27395, CVE-2024-27396, CVE-2024-36012,\nCVE-2024-38591, CVE-2024-38597, CVE-2024-36889, CVE-2024-36964,\nCVE-2024-38606, CVE-2024-38553, CVE-2024-36945, CVE-2024-35848,\nCVE-2024-36962, CVE-2024-36947, CVE-2024-27399, CVE-2024-38546,\nCVE-2024-38583, CVE-2024-38573, CVE-2024-35850, CVE-2024-38549,\nCVE-2024-38588, CVE-2024-38610, CVE-2024-36917, CVE-2024-36957,\nCVE-2024-35846, CVE-2024-38579, CVE-2024-36965, CVE-2024-35857,\nCVE-2024-38548, CVE-2024-36975, CVE-2024-36919, CVE-2024-38542,\nCVE-2024-36948, CVE-2024-36011, CVE-2024-38556, CVE-2024-36897,\nCVE-2024-38557, CVE-2024-36890, CVE-2024-36882, CVE-2024-38613,\nCVE-2024-36914, CVE-2024-35998, CVE-2024-36958, CVE-2024-38580,\nCVE-2024-36896, CVE-2024-36891, CVE-2024-36924, CVE-2024-38589,\nCVE-2024-38592, CVE-2024-36904, CVE-2024-36894, CVE-2024-36028,\nCVE-2024-36014, CVE-2024-36880, CVE-2024-36944, CVE-2024-38598,\nCVE-2024-36929, CVE-2024-36883, CVE-2024-35858, CVE-2024-38555,\nCVE-2024-36005, CVE-2024-38539, CVE-2024-35994, CVE-2024-36030,\nCVE-2024-27394, CVE-2024-36930, CVE-2024-36937, CVE-2024-38561,\nCVE-2024-38578, CVE-2024-36959, CVE-2024-36935, CVE-2024-36916,\nCVE-2024-36902, CVE-2024-38604, CVE-2024-38554, CVE-2024-38575,\nCVE-2024-36918, CVE-2024-36979, CVE-2024-35854, CVE-2024-36968,\nCVE-2024-38558, CVE-2024-36000, CVE-2024-27398, CVE-2024-35983,\nCVE-2024-36949, CVE-2024-38600, CVE-2024-36950, CVE-2024-36946,\nCVE-2024-36031, CVE-2024-35847, CVE-2024-36905, CVE-2024-38571,\nCVE-2024-36007, CVE-2024-35856, CVE-2024-38601, CVE-2024-38569,\nCVE-2024-38617, CVE-2024-35988, CVE-2024-35989, CVE-2024-35993,\nCVE-2024-36893, CVE-2024-36901)\n","status":"published","published":"2024-08-08T21:48:26Z","modified":"2026-10-26T22:31:34.27064585Z","updated_at":"2026-11-02T16:58:17.914523Z"},{"id":"USN-6949-2","title":"linux-lowlatency, linux-raspi vulnerabilities","description":"Several security issues were discovered in the Linux kernel.\nAn attacker could possibly use these to compromise the system.\nThis update corrects flaws in the following subsystems:\n  - ARM32 architecture;\n  - ARM64 architecture;\n  - M68K architecture;\n  - OpenRISC architecture;\n  - PowerPC architecture;\n  - RISC-V architecture;\n  - x86 architecture;\n  - Block layer subsystem;\n  - Accessibility subsystem;\n  - Bluetooth drivers;\n  - Clock framework and drivers;\n  - CPU frequency scaling framework;\n  - Hardware crypto device drivers;\n  - DMA engine subsystem;\n  - DPLL subsystem;\n  - FireWire subsystem;\n  - EFI core;\n  - Qualcomm firmware drivers;\n  - GPIO subsystem;\n  - GPU drivers;\n  - Microsoft Hyper-V drivers;\n  - InfiniBand drivers;\n  - IOMMU subsystem;\n  - IRQ chip drivers;\n  - Macintosh device drivers;\n  - Multiple devices driver;\n  - Media drivers;\n  - EEPROM drivers;\n  - MMC subsystem;\n  - Network drivers;\n  - STMicroelectronics network drivers;\n  - Device tree and open firmware driver;\n  - HiSilicon SoC PMU drivers;\n  - PHY drivers;\n  - Pin controllers subsystem;\n  - Remote Processor subsystem;\n  - S/390 drivers;\n  - SCSI drivers;\n  - SPI subsystem;\n  - Media staging drivers;\n  - Thermal drivers;\n  - Userspace I/O drivers;\n  - USB subsystem;\n  - DesignWare USB3 driver;\n  - ACRN Hypervisor Service Module driver;\n  - Virtio drivers;\n  - 9P distributed file system;\n  - BTRFS file system;\n  - eCrypt file system;\n  - EROFS file system;\n  - File systems infrastructure;\n  - GFS2 file system;\n  - JFFS2 file system;\n  - Network file systems library;\n  - Network file system client;\n  - Network file system server daemon;\n  - NILFS2 file system;\n  - Proc file system;\n  - SMB network file system;\n  - Tracing file system;\n  - Mellanox drivers;\n  - Memory management;\n  - Socket messages infrastructure;\n  - Slab allocator;\n  - Tracing infrastructure;\n  - User-space API (UAPI);\n  - Core kernel;\n  - BPF subsystem;\n  - DMA mapping infrastructure;\n  - RCU subsystem;\n  - Dynamic debug library;\n  - KUnit library;\n  - Maple Tree data structure library;\n  - Heterogeneous memory management;\n  - Amateur Radio drivers;\n  - Bluetooth subsystem;\n  - Ethernet bridge;\n  - Networking core;\n  - IPv4 networking;\n  - IPv6 networking;\n  - Multipath TCP;\n  - Netfilter;\n  - NET/ROM layer;\n  - NFC subsystem;\n  - NSH protocol;\n  - Open vSwitch;\n  - Phonet protocol;\n  - SMC sockets;\n  - TIPC protocol;\n  - Unix domain sockets;\n  - Wireless networking;\n  - Key management;\n  - ALSA framework;\n  - HD-audio driver;\n  - Kirkwood ASoC drivers;\n  - MediaTek ASoC drivers;\n(CVE-2024-36006, CVE-2024-36922, CVE-2024-38567, CVE-2024-38584,\nCVE-2024-36923, CVE-2024-36892, CVE-2024-35855, CVE-2024-35853,\nCVE-2024-38562, CVE-2024-36920, CVE-2024-38543, CVE-2024-38576,\nCVE-2024-38572, CVE-2024-36898, CVE-2024-38560, CVE-2024-36004,\nCVE-2024-36956, CVE-2024-36881, CVE-2024-36977, CVE-2024-36955,\nCVE-2024-36906, CVE-2024-36013, CVE-2024-36884, CVE-2024-38563,\nCVE-2024-36966, CVE-2024-38547, CVE-2024-38594, CVE-2024-36926,\nCVE-2024-38587, CVE-2024-38566, CVE-2024-27400, CVE-2024-36941,\nCVE-2024-36017, CVE-2024-38544, CVE-2024-36899, CVE-2024-35851,\nCVE-2024-38577, CVE-2024-38590, CVE-2024-38568, CVE-2024-38559,\nCVE-2024-38611, CVE-2024-36887, CVE-2024-36886, CVE-2024-35996,\nCVE-2024-38612, CVE-2024-36925, CVE-2024-38586, CVE-2024-38596,\nCVE-2024-36932, CVE-2024-39482, CVE-2024-38585, CVE-2024-36033,\nCVE-2024-38614, CVE-2024-35852, CVE-2024-36908, CVE-2024-36939,\nCVE-2024-36963, CVE-2024-27401, CVE-2024-36029, CVE-2024-38540,\nCVE-2024-38565, CVE-2024-36927, CVE-2024-36910, CVE-2024-42134,\nCVE-2024-36888, CVE-2024-35859, CVE-2024-36911, CVE-2024-35947,\nCVE-2024-36940, CVE-2024-36921, CVE-2024-36913, CVE-2024-36943,\nCVE-2024-35986, CVE-2024-38616, CVE-2024-36900, CVE-2024-36954,\nCVE-2024-36915, CVE-2024-38602, CVE-2024-41011, CVE-2024-35991,\nCVE-2024-36909, CVE-2024-38603, CVE-2023-52882, CVE-2024-36953,\nCVE-2024-38599, CVE-2024-38574, CVE-2024-36967, CVE-2024-36895,\nCVE-2024-36003, CVE-2024-36961, CVE-2024-38545, CVE-2024-38538,\nCVE-2024-36001, CVE-2024-36912, CVE-2024-36952, CVE-2024-38550,\nCVE-2024-38570, CVE-2024-36969, CVE-2024-38595, CVE-2024-35849,\nCVE-2024-36936, CVE-2024-35949, CVE-2024-36009, CVE-2024-35987,\nCVE-2024-38541, CVE-2024-38564, CVE-2024-36032, CVE-2024-38615,\nCVE-2024-36960, CVE-2024-36934, CVE-2024-36951, CVE-2024-35999,\nCVE-2024-38551, CVE-2024-36903, CVE-2024-36931, CVE-2024-38593,\nCVE-2024-36938, CVE-2024-38607, CVE-2024-36928, CVE-2024-38552,\nCVE-2024-36002, CVE-2024-38605, CVE-2024-38582, CVE-2024-36933,\nCVE-2024-38620, CVE-2024-27395, CVE-2024-27396, CVE-2024-36012,\nCVE-2024-38591, CVE-2024-38597, CVE-2024-36889, CVE-2024-36964,\nCVE-2024-38606, CVE-2024-38553, CVE-2024-36945, CVE-2024-35848,\nCVE-2024-36962, CVE-2024-36947, CVE-2024-27399, CVE-2024-38546,\nCVE-2024-38583, CVE-2024-38573, CVE-2024-35850, CVE-2024-38549,\nCVE-2024-38588, CVE-2024-38610, CVE-2024-36917, CVE-2024-36957,\nCVE-2024-35846, CVE-2024-38579, CVE-2024-36965, CVE-2024-35857,\nCVE-2024-38548, CVE-2024-36975, CVE-2024-36919, CVE-2024-38542,\nCVE-2024-36948, CVE-2024-36011, CVE-2024-38556, CVE-2024-36897,\nCVE-2024-38557, CVE-2024-36890, CVE-2024-36882, CVE-2024-38613,\nCVE-2024-36914, CVE-2024-35998, CVE-2024-36958, CVE-2024-38580,\nCVE-2024-36896, CVE-2024-36891, CVE-2024-36924, CVE-2024-38589,\nCVE-2024-38592, CVE-2024-36904, CVE-2024-36894, CVE-2024-36028,\nCVE-2024-36014, CVE-2024-36880, CVE-2024-36944, CVE-2024-38598,\nCVE-2024-36929, CVE-2024-36883, CVE-2024-35858, CVE-2024-38555,\nCVE-2024-36005, CVE-2024-38539, CVE-2024-35994, CVE-2024-36030,\nCVE-2024-27394, CVE-2024-36930, CVE-2024-36937, CVE-2024-38561,\nCVE-2024-38578, CVE-2024-36959, CVE-2024-36935, CVE-2024-36916,\nCVE-2024-36902, CVE-2024-38604, CVE-2024-38554, CVE-2024-38575,\nCVE-2024-36918, CVE-2024-36979, CVE-2024-35854, CVE-2024-36968,\nCVE-2024-38558, CVE-2024-36000, CVE-2024-27398, CVE-2024-35983,\nCVE-2024-36949, CVE-2024-38600, CVE-2024-36950, CVE-2024-36946,\nCVE-2024-36031, CVE-2024-35847, CVE-2024-36905, CVE-2024-38571,\nCVE-2024-36007, CVE-2024-35856, CVE-2024-38601, CVE-2024-38569,\nCVE-2024-38617, CVE-2024-35988, CVE-2024-35989, CVE-2024-35993,\nCVE-2024-36893, CVE-2024-36901)\n","status":"published","published":"2024-08-13T17:30:34Z","modified":"2026-10-26T22:31:42.289937588Z","updated_at":"2026-11-02T16:58:17.914523Z"},{"id":"USN-6952-1","title":"linux-nvidia-lowlatency, linux-oracle vulnerabilities","description":"\nBenedict Schlüter, Supraja Sridhara, Andrin Bertschi, and Shweta Shinde\ndiscovered that an untrusted hypervisor could inject malicious #VC\ninterrupts and compromise the security guarantees of AMD SEV-SNP. This flaw\nis known as WeSee. A local attacker in control of the hypervisor could use\nthis to expose sensitive information or possibly execute arbitrary code in\nthe trusted execution environment. (CVE-2024-25742)\n\nSeveral security issues were discovered in the Linux kernel.\nAn attacker could possibly use these to compromise the system.\nThis update corrects flaws in the following subsystems:\n  - ARM32 architecture;\n  - ARM64 architecture;\n  - M68K architecture;\n  - OpenRISC architecture;\n  - PowerPC architecture;\n  - RISC-V architecture;\n  - x86 architecture;\n  - Block layer subsystem;\n  - Accessibility subsystem;\n  - Bluetooth drivers;\n  - Clock framework and drivers;\n  - CPU frequency scaling framework;\n  - Hardware crypto device drivers;\n  - DMA engine subsystem;\n  - DPLL subsystem;\n  - FireWire subsystem;\n  - EFI core;\n  - Qualcomm firmware drivers;\n  - GPIO subsystem;\n  - GPU drivers;\n  - HID subsystem;\n  - Microsoft Hyper-V drivers;\n  - I2C subsystem;\n  - InfiniBand drivers;\n  - IOMMU subsystem;\n  - IRQ chip drivers;\n  - Macintosh device drivers;\n  - Multiple devices driver;\n  - Media drivers;\n  - EEPROM drivers;\n  - MMC subsystem;\n  - Network drivers;\n  - STMicroelectronics network drivers;\n  - Device tree and open firmware driver;\n  - HiSilicon SoC PMU drivers;\n  - PHY drivers;\n  - Pin controllers subsystem;\n  - Remote Processor subsystem;\n  - S/390 drivers;\n  - SCSI drivers;\n  - SPI subsystem;\n  - Media staging drivers;\n  - Thermal drivers;\n  - TTY drivers;\n  - Userspace I/O drivers;\n  - USB subsystem;\n  - DesignWare USB3 driver;\n  - ACRN Hypervisor Service Module driver;\n  - Virtio drivers;\n  - 9P distributed file system;\n  - BTRFS file system;\n  - eCrypt file system;\n  - EROFS file system;\n  - File systems infrastructure;\n  - GFS2 file system;\n  - JFFS2 file system;\n  - Network file systems library;\n  - Network file system client;\n  - Network file system server daemon;\n  - NILFS2 file system;\n  - Proc file system;\n  - SMB network file system;\n  - Tracing file system;\n  - Mellanox drivers;\n  - Memory management;\n  - Socket messages infrastructure;\n  - Slab allocator;\n  - Tracing infrastructure;\n  - User-space API (UAPI);\n  - Core kernel;\n  - BPF subsystem;\n  - DMA mapping infrastructure;\n  - RCU subsystem;\n  - Dynamic debug library;\n  - KUnit library;\n  - Maple Tree data structure library;\n  - Heterogeneous memory management;\n  - Amateur Radio drivers;\n  - Bluetooth subsystem;\n  - Ethernet bridge;\n  - Networking core;\n  - IPv4 networking;\n  - IPv6 networking;\n  - Multipath TCP;\n  - Netfilter;\n  - NET/ROM layer;\n  - NFC subsystem;\n  - NSH protocol;\n  - Open vSwitch;\n  - Phonet protocol;\n  - SMC sockets;\n  - TIPC protocol;\n  - Unix domain sockets;\n  - Wireless networking;\n  - Key management;\n  - ALSA framework;\n  - HD-audio driver;\n  - Kirkwood ASoC drivers;\n  - MediaTek ASoC drivers;\n(CVE-2024-38601, CVE-2024-36935, CVE-2024-35991, CVE-2024-36032,\nCVE-2024-35988, CVE-2024-36886, CVE-2024-36913, CVE-2024-36928,\nCVE-2024-38553, CVE-2024-36927, CVE-2024-38615, CVE-2024-36958,\nCVE-2024-36977, CVE-2024-36889, CVE-2024-38554, CVE-2024-38590,\nCVE-2024-42134, CVE-2024-35857, CVE-2024-35850, CVE-2024-35986,\nCVE-2024-36921, CVE-2024-38569, CVE-2024-36966, CVE-2024-38542,\nCVE-2024-38585, CVE-2024-36884, CVE-2024-36006, CVE-2024-38577,\nCVE-2024-36016, CVE-2024-38584, CVE-2024-36887, CVE-2024-38598,\nCVE-2024-35994, CVE-2024-38603, CVE-2024-35998, CVE-2024-27401,\nCVE-2024-35852, CVE-2024-36944, CVE-2024-38572, CVE-2024-36917,\nCVE-2024-36943, CVE-2024-36009, CVE-2024-38587, CVE-2024-35949,\nCVE-2024-36945, CVE-2024-36004, CVE-2024-36919, CVE-2024-27398,\nCVE-2024-38582, CVE-2024-35847, CVE-2024-38580, CVE-2024-38602,\nCVE-2024-36916, CVE-2024-36903, CVE-2024-38555, CVE-2024-36952,\nCVE-2024-38589, CVE-2024-27394, CVE-2024-36933, CVE-2024-36975,\nCVE-2024-38591, CVE-2024-38612, CVE-2024-36939, CVE-2024-35983,\nCVE-2024-38607, CVE-2024-36929, CVE-2024-35849, CVE-2024-36941,\nCVE-2024-35858, CVE-2024-38599, CVE-2024-35996, CVE-2024-36031,\nCVE-2024-36931, CVE-2024-35990, CVE-2024-35851, CVE-2024-38556,\nCVE-2024-36000, CVE-2024-36910, CVE-2024-38573, CVE-2024-36906,\nCVE-2024-36951, CVE-2024-38604, CVE-2024-38613, CVE-2024-38547,\nCVE-2024-36014, CVE-2024-36949, CVE-2024-36033, CVE-2024-38597,\nCVE-2024-36880, CVE-2024-38594, CVE-2024-36894, CVE-2024-38546,\nCVE-2024-36947, CVE-2024-38541, CVE-2024-35989, CVE-2024-27399,\nCVE-2024-38550, CVE-2024-36922, CVE-2024-36008, CVE-2024-38540,\nCVE-2024-36924, CVE-2024-36892, CVE-2024-38549, CVE-2024-36882,\nCVE-2024-36908, CVE-2024-38566, CVE-2024-36005, CVE-2024-38583,\nCVE-2024-36968, CVE-2024-36017, CVE-2024-38565, CVE-2024-36881,\nCVE-2024-38611, CVE-2024-36897, CVE-2024-38560, CVE-2024-36923,\nCVE-2024-38575, CVE-2024-36899, CVE-2024-38570, CVE-2024-36898,\nCVE-2024-36896, CVE-2024-38559, CVE-2024-38588, CVE-2024-38606,\nCVE-2024-38551, CVE-2024-36891, CVE-2024-38567, CVE-2024-36895,\nCVE-2024-35993, CVE-2024-38552, CVE-2024-36925, CVE-2024-36964,\nCVE-2024-36888, CVE-2024-36956, CVE-2024-36946, CVE-2024-38600,\nCVE-2024-35997, CVE-2024-36912, CVE-2024-35984, CVE-2024-35848,\nCVE-2024-38545, CVE-2024-38563, CVE-2024-36918, CVE-2024-36001,\nCVE-2024-36957, CVE-2024-38576, CVE-2024-36030, CVE-2024-38574,\nCVE-2024-36963, CVE-2024-36890, CVE-2024-36960, CVE-2024-36901,\nCVE-2024-38614, CVE-2024-35859, CVE-2024-38593, CVE-2024-36904,\nCVE-2024-36012, CVE-2024-38578, CVE-2024-36011, CVE-2024-36930,\nCVE-2024-36938, CVE-2024-36893, CVE-2024-35987, CVE-2024-36905,\nCVE-2024-35853, CVE-2024-36003, CVE-2024-38562, CVE-2024-38617,\nCVE-2024-35855, CVE-2024-36965, CVE-2024-38596, CVE-2024-38558,\nCVE-2024-38568, CVE-2024-36955, CVE-2024-36029, CVE-2024-36967,\nCVE-2024-36940, CVE-2024-38595, CVE-2024-36028, CVE-2024-38610,\nCVE-2024-36911, CVE-2024-35999, CVE-2024-35854, CVE-2024-38571,\nCVE-2024-38548, CVE-2024-36948, CVE-2024-36002, CVE-2024-36961,\nCVE-2024-36900, CVE-2024-36932, CVE-2024-36902, CVE-2024-35992,\nCVE-2024-36914, CVE-2024-38592, CVE-2024-38616, CVE-2024-27400,\nCVE-2024-36937, CVE-2024-36920, CVE-2024-38586, CVE-2024-36909,\nCVE-2024-35846, CVE-2024-39482, CVE-2024-38579, CVE-2024-38539,\nCVE-2024-27395, CVE-2024-36962, CVE-2024-36013, CVE-2024-27396,\nCVE-2024-38557, CVE-2024-36953, CVE-2024-41011, CVE-2023-52882,\nCVE-2024-36969, CVE-2024-36007, CVE-2024-35856, CVE-2024-38605,\nCVE-2024-36915, CVE-2024-36979, CVE-2024-36954, CVE-2024-38538,\nCVE-2024-36950, CVE-2024-36926, CVE-2024-38544, CVE-2024-36959,\nCVE-2024-38561, CVE-2024-36883, CVE-2024-36936, CVE-2024-38564,\nCVE-2024-38543, CVE-2024-36934, CVE-2024-35947, CVE-2024-38620)\n","status":"published","published":"2024-08-09T00:06:04Z","modified":"2026-10-26T22:32:56.429488012Z","updated_at":"2026-11-02T16:58:17.914523Z"},{"id":"USN-6952-2","title":"linux-azure vulnerabilities","description":"Benedict Schlüter, Supraja Sridhara, Andrin Bertschi, and Shweta Shinde\ndiscovered that an untrusted hypervisor could inject malicious #VC\ninterrupts and compromise the security guarantees of AMD SEV-SNP. This flaw\nis known as WeSee. A local attacker in control of the hypervisor could use\nthis to expose sensitive information or possibly execute arbitrary code in\nthe trusted execution environment. (CVE-2024-25742)\n\nSeveral security issues were discovered in the Linux kernel.\nAn attacker could possibly use these to compromise the system.\nThis update corrects flaws in the following subsystems:\n  - ARM32 architecture;\n  - ARM64 architecture;\n  - M68K architecture;\n  - OpenRISC architecture;\n  - PowerPC architecture;\n  - RISC-V architecture;\n  - x86 architecture;\n  - Block layer subsystem;\n  - Accessibility subsystem;\n  - Bluetooth drivers;\n  - Clock framework and drivers;\n  - CPU frequency scaling framework;\n  - Hardware crypto device drivers;\n  - DMA engine subsystem;\n  - DPLL subsystem;\n  - FireWire subsystem;\n  - EFI core;\n  - Qualcomm firmware drivers;\n  - GPIO subsystem;\n  - GPU drivers;\n  - HID subsystem;\n  - Microsoft Hyper-V drivers;\n  - I2C subsystem;\n  - InfiniBand drivers;\n  - IOMMU subsystem;\n  - IRQ chip drivers;\n  - Macintosh device drivers;\n  - Multiple devices driver;\n  - Media drivers;\n  - EEPROM drivers;\n  - MMC subsystem;\n  - Network drivers;\n  - STMicroelectronics network drivers;\n  - Device tree and open firmware driver;\n  - HiSilicon SoC PMU drivers;\n  - PHY drivers;\n  - Pin controllers subsystem;\n  - Remote Processor subsystem;\n  - S/390 drivers;\n  - SCSI drivers;\n  - SPI subsystem;\n  - Media staging drivers;\n  - Thermal drivers;\n  - TTY drivers;\n  - Userspace I/O drivers;\n  - USB subsystem;\n  - DesignWare USB3 driver;\n  - ACRN Hypervisor Service Module driver;\n  - Virtio drivers;\n  - 9P distributed file system;\n  - BTRFS file system;\n  - eCrypt file system;\n  - EROFS file system;\n  - File systems infrastructure;\n  - GFS2 file system;\n  - JFFS2 file system;\n  - Network file systems library;\n  - Network file system client;\n  - Network file system server daemon;\n  - NILFS2 file system;\n  - Proc file system;\n  - SMB network file system;\n  - Tracing file system;\n  - Mellanox drivers;\n  - Memory management;\n  - Socket messages infrastructure;\n  - Slab allocator;\n  - Tracing infrastructure;\n  - User-space API (UAPI);\n  - Core kernel;\n  - BPF subsystem;\n  - DMA mapping infrastructure;\n  - RCU subsystem;\n  - Dynamic debug library;\n  - KUnit library;\n  - Maple Tree data structure library;\n  - Heterogeneous memory management;\n  - Amateur Radio drivers;\n  - Bluetooth subsystem;\n  - Ethernet bridge;\n  - Networking core;\n  - IPv4 networking;\n  - IPv6 networking;\n  - Multipath TCP;\n  - Netfilter;\n  - NET/ROM layer;\n  - NFC subsystem;\n  - NSH protocol;\n  - Open vSwitch;\n  - Phonet protocol;\n  - SMC sockets;\n  - TIPC protocol;\n  - Unix domain sockets;\n  - Wireless networking;\n  - Key management;\n  - ALSA framework;\n  - HD-audio driver;\n  - Kirkwood ASoC drivers;\n  - MediaTek ASoC drivers;\n(CVE-2024-38601, CVE-2024-36935, CVE-2024-35991, CVE-2024-36032,\nCVE-2024-35988, CVE-2024-36886, CVE-2024-36913, CVE-2024-36928,\nCVE-2024-38553, CVE-2024-36927, CVE-2024-38615, CVE-2024-36958,\nCVE-2024-36977, CVE-2024-36889, CVE-2024-38554, CVE-2024-38590,\nCVE-2024-42134, CVE-2024-35857, CVE-2024-35850, CVE-2024-35986,\nCVE-2024-36921, CVE-2024-38569, CVE-2024-36966, CVE-2024-38542,\nCVE-2024-38585, CVE-2024-36884, CVE-2024-36006, CVE-2024-38577,\nCVE-2024-36016, CVE-2024-38584, CVE-2024-36887, CVE-2024-38598,\nCVE-2024-35994, CVE-2024-38603, CVE-2024-35998, CVE-2024-27401,\nCVE-2024-35852, CVE-2024-36944, CVE-2024-38572, CVE-2024-36917,\nCVE-2024-36943, CVE-2024-36009, CVE-2024-38587, CVE-2024-35949,\nCVE-2024-36945, CVE-2024-36004, CVE-2024-36919, CVE-2024-27398,\nCVE-2024-38582, CVE-2024-35847, CVE-2024-38580, CVE-2024-38602,\nCVE-2024-36916, CVE-2024-36903, CVE-2024-38555, CVE-2024-36952,\nCVE-2024-38589, CVE-2024-27394, CVE-2024-36933, CVE-2024-36975,\nCVE-2024-38591, CVE-2024-38612, CVE-2024-36939, CVE-2024-35983,\nCVE-2024-38607, CVE-2024-36929, CVE-2024-35849, CVE-2024-36941,\nCVE-2024-35858, CVE-2024-38599, CVE-2024-35996, CVE-2024-36031,\nCVE-2024-36931, CVE-2024-35990, CVE-2024-35851, CVE-2024-38556,\nCVE-2024-36000, CVE-2024-36910, CVE-2024-38573, CVE-2024-36906,\nCVE-2024-36951, CVE-2024-38604, CVE-2024-38613, CVE-2024-38547,\nCVE-2024-36014, CVE-2024-36949, CVE-2024-36033, CVE-2024-38597,\nCVE-2024-36880, CVE-2024-38594, CVE-2024-36894, CVE-2024-38546,\nCVE-2024-36947, CVE-2024-38541, CVE-2024-35989, CVE-2024-27399,\nCVE-2024-38550, CVE-2024-36922, CVE-2024-36008, CVE-2024-38540,\nCVE-2024-36924, CVE-2024-36892, CVE-2024-38549, CVE-2024-36882,\nCVE-2024-36908, CVE-2024-38566, CVE-2024-36005, CVE-2024-38583,\nCVE-2024-36968, CVE-2024-36017, CVE-2024-38565, CVE-2024-36881,\nCVE-2024-38611, CVE-2024-36897, CVE-2024-38560, CVE-2024-36923,\nCVE-2024-38575, CVE-2024-36899, CVE-2024-38570, CVE-2024-36898,\nCVE-2024-36896, CVE-2024-38559, CVE-2024-38588, CVE-2024-38606,\nCVE-2024-38551, CVE-2024-36891, CVE-2024-38567, CVE-2024-36895,\nCVE-2024-35993, CVE-2024-38552, CVE-2024-36925, CVE-2024-36964,\nCVE-2024-36888, CVE-2024-36956, CVE-2024-36946, CVE-2024-38600,\nCVE-2024-35997, CVE-2024-36912, CVE-2024-35984, CVE-2024-35848,\nCVE-2024-38545, CVE-2024-38563, CVE-2024-36918, CVE-2024-36001,\nCVE-2024-36957, CVE-2024-38576, CVE-2024-36030, CVE-2024-38574,\nCVE-2024-36963, CVE-2024-36890, CVE-2024-36960, CVE-2024-36901,\nCVE-2024-38614, CVE-2024-35859, CVE-2024-38593, CVE-2024-36904,\nCVE-2024-36012, CVE-2024-38578, CVE-2024-36011, CVE-2024-36930,\nCVE-2024-36938, CVE-2024-36893, CVE-2024-35987, CVE-2024-36905,\nCVE-2024-35853, CVE-2024-36003, CVE-2024-38562, CVE-2024-38617,\nCVE-2024-35855, CVE-2024-36965, CVE-2024-38596, CVE-2024-38558,\nCVE-2024-38568, CVE-2024-36955, CVE-2024-36029, CVE-2024-36967,\nCVE-2024-36940, CVE-2024-38595, CVE-2024-36028, CVE-2024-38610,\nCVE-2024-36911, CVE-2024-35999, CVE-2024-35854, CVE-2024-38571,\nCVE-2024-38548, CVE-2024-36948, CVE-2024-36002, CVE-2024-36961,\nCVE-2024-36900, CVE-2024-36932, CVE-2024-36902, CVE-2024-35992,\nCVE-2024-36914, CVE-2024-38592, CVE-2024-38616, CVE-2024-27400,\nCVE-2024-36937, CVE-2024-36920, CVE-2024-38586, CVE-2024-36909,\nCVE-2024-35846, CVE-2024-39482, CVE-2024-38579, CVE-2024-38539,\nCVE-2024-27395, CVE-2024-36962, CVE-2024-36013, CVE-2024-27396,\nCVE-2024-38557, CVE-2024-36953, CVE-2024-41011, CVE-2023-52882,\nCVE-2024-36969, CVE-2024-36007, CVE-2024-35856, CVE-2024-38605,\nCVE-2024-36915, CVE-2024-36979, CVE-2024-36954, CVE-2024-38538,\nCVE-2024-36950, CVE-2024-36926, CVE-2024-38544, CVE-2024-36959,\nCVE-2024-38561, CVE-2024-36883, CVE-2024-36936, CVE-2024-38564,\nCVE-2024-38543, CVE-2024-36934, CVE-2024-35947, CVE-2024-38620)\n","status":"published","published":"2024-08-13T18:11:04Z","modified":"2026-10-26T22:33:03.423818109Z","updated_at":"2026-11-02T16:58:17.914523Z"},{"id":"USN-6955-1","title":"linux-oem-6.8 vulnerabilities","description":"Several security issues were discovered in the Linux kernel.\nAn attacker could possibly use these to compromise the system.\nThis update corrects flaws in the following subsystems:\n  - ARM32 architecture;\n  - ARM64 architecture;\n  - M68K architecture;\n  - OpenRISC architecture;\n  - PowerPC architecture;\n  - RISC-V architecture;\n  - x86 architecture;\n  - Block layer subsystem;\n  - Accessibility subsystem;\n  - Bluetooth drivers;\n  - Clock framework and drivers;\n  - CPU frequency scaling framework;\n  - Hardware crypto device drivers;\n  - DMA engine subsystem;\n  - DPLL subsystem;\n  - FireWire subsystem;\n  - EFI core;\n  - Qualcomm firmware drivers;\n  - GPIO subsystem;\n  - GPU drivers;\n  - Microsoft Hyper-V drivers;\n  - InfiniBand drivers;\n  - IOMMU subsystem;\n  - IRQ chip drivers;\n  - Macintosh device drivers;\n  - Multiple devices driver;\n  - Media drivers;\n  - EEPROM drivers;\n  - MMC subsystem;\n  - Network drivers;\n  - STMicroelectronics network drivers;\n  - Device tree and open firmware driver;\n  - HiSilicon SoC PMU drivers;\n  - PHY drivers;\n  - Pin controllers subsystem;\n  - Remote Processor subsystem;\n  - S/390 drivers;\n  - SCSI drivers;\n  - SPI subsystem;\n  - Media staging drivers;\n  - Thermal drivers;\n  - Userspace I/O drivers;\n  - USB subsystem;\n  - DesignWare USB3 driver;\n  - ACRN Hypervisor Service Module driver;\n  - Virtio drivers;\n  - 9P distributed file system;\n  - BTRFS file system;\n  - eCrypt file system;\n  - EROFS file system;\n  - File systems infrastructure;\n  - GFS2 file system;\n  - JFFS2 file system;\n  - Network file systems library;\n  - Network file system client;\n  - Network file system server daemon;\n  - NILFS2 file system;\n  - Proc file system;\n  - SMB network file system;\n  - Tracing file system;\n  - Mellanox drivers;\n  - Memory management;\n  - Socket messages infrastructure;\n  - Slab allocator;\n  - Tracing infrastructure;\n  - User-space API (UAPI);\n  - Core kernel;\n  - BPF subsystem;\n  - DMA mapping infrastructure;\n  - RCU subsystem;\n  - Dynamic debug library;\n  - KUnit library;\n  - Maple Tree data structure library;\n  - Heterogeneous memory management;\n  - Amateur Radio drivers;\n  - Bluetooth subsystem;\n  - Ethernet bridge;\n  - Networking core;\n  - IPv4 networking;\n  - IPv6 networking;\n  - Multipath TCP;\n  - Netfilter;\n  - NET/ROM layer;\n  - NFC subsystem;\n  - NSH protocol;\n  - Open vSwitch;\n  - Phonet protocol;\n  - SMC sockets;\n  - TIPC protocol;\n  - Unix domain sockets;\n  - Wireless networking;\n  - Key management;\n  - ALSA framework;\n  - HD-audio driver;\n  - Kirkwood ASoC drivers;\n  - MediaTek ASoC drivers;\n(CVE-2024-35987, CVE-2024-36931, CVE-2024-38614, CVE-2024-35857,\nCVE-2024-36949, CVE-2024-38599, CVE-2024-35994, CVE-2024-35849,\nCVE-2024-36916, CVE-2024-38590, CVE-2024-36944, CVE-2024-38561,\nCVE-2024-38538, CVE-2024-36017, CVE-2024-38593, CVE-2024-36028,\nCVE-2024-36960, CVE-2024-36002, CVE-2024-36967, CVE-2024-36898,\nCVE-2024-35989, CVE-2024-36975, CVE-2024-38578, CVE-2024-38582,\nCVE-2024-38588, CVE-2024-38579, CVE-2024-38617, CVE-2024-36901,\nCVE-2024-38550, CVE-2023-52882, CVE-2024-38603, CVE-2024-38620,\nCVE-2024-36956, CVE-2024-36880, CVE-2024-36895, CVE-2024-36979,\nCVE-2024-36887, CVE-2024-27396, CVE-2024-27400, CVE-2024-36952,\nCVE-2024-36886, CVE-2024-36905, CVE-2024-36883, CVE-2024-38540,\nCVE-2024-38605, CVE-2024-36029, CVE-2024-36934, CVE-2024-27395,\nCVE-2024-36000, CVE-2024-38549, CVE-2024-35999, CVE-2024-38585,\nCVE-2024-38589, CVE-2024-38565, CVE-2024-36917, CVE-2024-36930,\nCVE-2024-36940, CVE-2024-36900, CVE-2024-35850, CVE-2024-38592,\nCVE-2024-38553, CVE-2024-36929, CVE-2024-36915, CVE-2024-36004,\nCVE-2024-38573, CVE-2024-36941, CVE-2024-38607, CVE-2024-36009,\nCVE-2024-27398, CVE-2024-36909, CVE-2024-35848, CVE-2024-36950,\nCVE-2024-38564, CVE-2024-36947, CVE-2024-38613, CVE-2024-38570,\nCVE-2024-38612, CVE-2024-38580, CVE-2024-38557, CVE-2024-36959,\nCVE-2024-27399, CVE-2024-41011, CVE-2024-36928, CVE-2024-38543,\nCVE-2024-38541, CVE-2024-38583, CVE-2024-35855, CVE-2024-38611,\nCVE-2024-36891, CVE-2024-38587, CVE-2024-35851, CVE-2024-38546,\nCVE-2024-38596, CVE-2024-35998, CVE-2024-35991, CVE-2024-36965,\nCVE-2024-36925, CVE-2024-36894, CVE-2024-38567, CVE-2024-38572,\nCVE-2024-36882, CVE-2024-38594, CVE-2024-38563, CVE-2024-38616,\nCVE-2024-36951, CVE-2024-36005, CVE-2024-42134, CVE-2024-38602,\nCVE-2024-36014, CVE-2024-38601, CVE-2024-36001, CVE-2024-38575,\nCVE-2024-27401, CVE-2024-36961, CVE-2024-38576, CVE-2024-36935,\nCVE-2024-36893, CVE-2024-38562, CVE-2024-36904, CVE-2024-36939,\nCVE-2024-38591, CVE-2024-38539, CVE-2024-36030, CVE-2024-36920,\nCVE-2024-39482, CVE-2024-36977, CVE-2024-36013, CVE-2024-35856,\nCVE-2024-36922, CVE-2024-36033, CVE-2024-35859, CVE-2024-36919,\nCVE-2024-35846, CVE-2024-36913, CVE-2024-35854, CVE-2024-36924,\nCVE-2024-38547, CVE-2024-38551, CVE-2024-36899, CVE-2024-36932,\nCVE-2024-38545, CVE-2024-36966, CVE-2024-36911, CVE-2024-36946,\nCVE-2024-36906, CVE-2024-38595, CVE-2024-36012, CVE-2024-38552,\nCVE-2024-36933, CVE-2024-36936, CVE-2024-38548, CVE-2024-38558,\nCVE-2024-36006, CVE-2024-36908, CVE-2024-36892, CVE-2024-35988,\nCVE-2024-35993, CVE-2024-36914, CVE-2024-36896, CVE-2024-38615,\nCVE-2024-36890, CVE-2024-36969, CVE-2024-38559, CVE-2024-36964,\nCVE-2024-38560, CVE-2024-38574, CVE-2024-36962, CVE-2024-38542,\nCVE-2024-36926, CVE-2024-36968, CVE-2024-36032, CVE-2024-38544,\nCVE-2024-36938, CVE-2024-38597, CVE-2024-38577, CVE-2024-36958,\nCVE-2024-36945, CVE-2024-36943, CVE-2024-38610, CVE-2024-36927,\nCVE-2024-38554, CVE-2024-38555, CVE-2024-36031, CVE-2024-36011,\nCVE-2024-38569, CVE-2024-35847, CVE-2024-36921, CVE-2024-38606,\nCVE-2024-35949, CVE-2024-35947, CVE-2024-36889, CVE-2024-36884,\nCVE-2024-36954, CVE-2024-36902, CVE-2024-36007, CVE-2024-38586,\nCVE-2024-36918, CVE-2024-38571, CVE-2024-36955, CVE-2024-36888,\nCVE-2024-38556, CVE-2024-38604, CVE-2024-27394, CVE-2024-38600,\nCVE-2024-35983, CVE-2024-38568, CVE-2024-38566, CVE-2024-35853,\nCVE-2024-35858, CVE-2024-36910, CVE-2024-36903, CVE-2024-36881,\nCVE-2024-36937, CVE-2024-36957, CVE-2024-36912, CVE-2024-36948,\nCVE-2024-36953, CVE-2024-35996, CVE-2024-36963, CVE-2024-36923,\nCVE-2024-35852, CVE-2024-38598, CVE-2024-36003, CVE-2024-35986,\nCVE-2024-38584)\n","status":"published","published":"2024-08-12T18:05:26Z","modified":"2026-10-26T22:33:10.379382439Z","updated_at":"2026-11-02T16:58:17.914523Z"}]}}