# ALAS2023-2025-809: Security update for 21 packages ALAS2023-2025-809, released January 21, 2025, fixes 111 CVEs across 21 products. None of them is reported as exploited. Patch Radar priority: High. - Web page: https://patchblox.com/security/fix/linux/alas2023-2025-809 - Platform: Linux - Released: Jan 21, 2025 - Priority: High (Closes CVE-2024-56644, high severity) - CVEs: 111, exploited: 0, on CISA KEV: 0 - Vendor advisory: https://alas.aws.amazon.com/AL2023/ALAS-2025-809.html ## Applies to | Product | Release | Fixed in | |---|---|---| | [bpftool](https://patchblox.com/security/data/product/linux/bpftool.md) | amzn 2023 | 6.1.124-134.200.amzn2023 | | [bpftool-debuginfo](https://patchblox.com/security/data/product/linux/bpftool-debuginfo.md) | amzn 2023 | 6.1.124-134.200.amzn2023 | | [kernel](https://patchblox.com/security/data/product/linux/kernel.md) | amzn 2023 | 6.1.124-134.200.amzn2023 | | [kernel-debuginfo](https://patchblox.com/security/data/product/linux/kernel-debuginfo.md) | amzn 2023 | 6.1.124-134.200.amzn2023 | | [kernel-debuginfo-common-aarch64](https://patchblox.com/security/data/product/linux/kernel-debuginfo-common-aarch64.md) | amzn 2023 | 6.1.124-134.200.amzn2023 | | [kernel-debuginfo-common-x86_64](https://patchblox.com/security/data/product/linux/kernel-debuginfo-common-x86-64.md) | amzn 2023 | 6.1.124-134.200.amzn2023 | | [kernel-devel](https://patchblox.com/security/data/product/linux/kernel-devel.md) | amzn 2023 | 6.1.124-134.200.amzn2023 | | [kernel-headers](https://patchblox.com/security/data/product/linux/kernel-headers.md) | amzn 2023 | 6.1.124-134.200.amzn2023 | | [kernel-libbpf](https://patchblox.com/security/data/product/linux/kernel-libbpf.md) | amzn 2023 | 6.1.124-134.200.amzn2023 | | [kernel-libbpf-devel](https://patchblox.com/security/data/product/linux/kernel-libbpf-devel.md) | amzn 2023 | 6.1.124-134.200.amzn2023 | | [kernel-libbpf-static](https://patchblox.com/security/data/product/linux/kernel-libbpf-static.md) | amzn 2023 | 6.1.124-134.200.amzn2023 | | [kernel-livepatch-6.1.124-134.200](https://patchblox.com/security/data/product/linux/kernel-livepatch-6.1.124-134.200.md) | amzn 2023 | 1.0-0.amzn2023 | | [kernel-modules-extra](https://patchblox.com/security/data/product/linux/kernel-modules-extra.md) | amzn 2023 | 6.1.124-134.200.amzn2023 | | [kernel-modules-extra-common](https://patchblox.com/security/data/product/linux/kernel-modules-extra-common.md) | amzn 2023 | 6.1.124-134.200.amzn2023 | | [kernel-tools](https://patchblox.com/security/data/product/linux/kernel-tools.md) | amzn 2023 | 6.1.124-134.200.amzn2023 | | [kernel-tools-debuginfo](https://patchblox.com/security/data/product/linux/kernel-tools-debuginfo.md) | amzn 2023 | 6.1.124-134.200.amzn2023 | | [kernel-tools-devel](https://patchblox.com/security/data/product/linux/kernel-tools-devel.md) | amzn 2023 | 6.1.124-134.200.amzn2023 | | [perf](https://patchblox.com/security/data/product/linux/perf.md) | amzn 2023 | 6.1.124-134.200.amzn2023 | | [perf-debuginfo](https://patchblox.com/security/data/product/linux/perf-debuginfo.md) | amzn 2023 | 6.1.124-134.200.amzn2023 | | [python3-perf](https://patchblox.com/security/data/product/linux/python3-perf.md) | amzn 2023 | 6.1.124-134.200.amzn2023 | | [python3-perf-debuginfo](https://patchblox.com/security/data/product/linux/python3-perf-debuginfo.md) | amzn 2023 | 6.1.124-134.200.amzn2023 | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2024-56644](https://patchblox.com/security/data/cve/CVE-2024-56644.md) | High | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: n... | 7.1 | 0.0071 | | | [CVE-2024-56645](https://patchblox.com/security/data/cve/CVE-2024-56645.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: c... | 7.8 | 0.0068 | | | [CVE-2024-53206](https://patchblox.com/security/data/cve/CVE-2024-53206.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: tcp: Fix use-after-free of nreq in reqsk_timer_h... | 7.8 | 0.0063 | | | [CVE-2024-53141](https://patchblox.com/security/data/cve/CVE-2024-53141.md) | High | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: h... | 7.8 | 0.0040 | | | [CVE-2024-27407](https://patchblox.com/security/data/cve/CVE-2024-27407.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... | 7.8 | 0.0028 | | | [CVE-2024-47745](https://patchblox.com/security/data/cve/CVE-2024-47745.md) | High | mm: call the security_mmap_file() LSM hook in remap_file_pages() | 7.8 | 0.0028 | | | [CVE-2024-56633](https://patchblox.com/security/data/cve/CVE-2024-56633.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bp... | 7.8 | 0.0028 | | | [CVE-2024-56672](https://patchblox.com/security/data/cve/CVE-2024-56672.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: c... | 7.8 | 0.0027 | | | [CVE-2024-56709](https://patchblox.com/security/data/cve/CVE-2024-56709.md) | High | io_uring: check if iowq is killed before queuing | 7.8 | 0.0027 | | | [CVE-2024-57901](https://patchblox.com/security/data/cve/CVE-2024-57901.md) | High | kernel-64k-devel-matched: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0027 | | | [CVE-2024-57902](https://patchblox.com/security/data/cve/CVE-2024-57902.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0027 | | | [CVE-2024-53173](https://patchblox.com/security/data/cve/CVE-2024-53173.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... | 7.8 | 0.0027 | | | [CVE-2024-57900](https://patchblox.com/security/data/cve/CVE-2024-57900.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu... | 7.8 | 0.0026 | | | [CVE-2024-53174](https://patchblox.com/security/data/cve/CVE-2024-53174.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... | 7.8 | 0.0026 | | | [CVE-2024-53214](https://patchblox.com/security/data/cve/CVE-2024-53214.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: vfio/pci: Properly hide first-in-list PCIe exten... | 7.8 | 0.0026 | | | [CVE-2024-56615](https://patchblox.com/security/data/cve/CVE-2024-56615.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: bpf: fix OOB devmap writes when deleting element... | 7.8 | 0.0026 | | | [CVE-2024-52332](https://patchblox.com/security/data/cve/CVE-2024-52332.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: c... | 7.8 | 0.0026 | | | [CVE-2024-56614](https://patchblox.com/security/data/cve/CVE-2024-56614.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... | 7.8 | 0.0025 | | | [CVE-2024-50055](https://patchblox.com/security/data/cve/CVE-2024-50055.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... | 7.8 | 0.0025 | | | [CVE-2024-56600](https://patchblox.com/security/data/cve/CVE-2024-56600.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... | 7.8 | 0.0025 | | | [CVE-2024-56601](https://patchblox.com/security/data/cve/CVE-2024-56601.md) | High | kernel-64k-debug: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... | 7.8 | 0.0025 | | | [CVE-2024-56606](https://patchblox.com/security/data/cve/CVE-2024-56606.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: af_packet: avoid erroring out after sock_init_da... | 7.8 | 0.0025 | | | [CVE-2024-53142](https://patchblox.com/security/data/cve/CVE-2024-53142.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... | 7.8 | 0.0025 | | | [CVE-2024-56570](https://patchblox.com/security/data/cve/CVE-2024-56570.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... | 7.8 | 0.0024 | | | [CVE-2024-56693](https://patchblox.com/security/data/cve/CVE-2024-56693.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... | 7.8 | 0.0024 | | | [CVE-2024-56558](https://patchblox.com/security/data/cve/CVE-2024-56558.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... | 7.8 | 0.0024 | | | [CVE-2024-56642](https://patchblox.com/security/data/cve/CVE-2024-56642.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... | 7.8 | 0.0024 | | | [CVE-2024-49861](https://patchblox.com/security/data/cve/CVE-2024-49861.md) | High | bpf: Fix helper writes to read-only maps | 7.1 | 0.0024 | | | [CVE-2023-52926](https://patchblox.com/security/data/cve/CVE-2023-52926.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bug... | 7.8 | 0.0024 | | | [CVE-2024-50275](https://patchblox.com/security/data/cve/CVE-2024-50275.md) | High | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: s... | 7.0 | 0.0024 | | | [CVE-2024-56603](https://patchblox.com/security/data/cve/CVE-2024-56603.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: c... | 8.1 | 0.0024 | | | [CVE-2024-53194](https://patchblox.com/security/data/cve/CVE-2024-53194.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... | 7.8 | 0.0024 | | | [CVE-2024-56582](https://patchblox.com/security/data/cve/CVE-2024-56582.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: btrfs: fix use-after-free in btrfs_encoded_read_... | 7.8 | 0.0024 | | | [CVE-2024-56581](https://patchblox.com/security/data/cve/CVE-2024-56581.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: btrfs: ref-verify: fix use-after-free after inva... | 7.8 | 0.0024 | | | [CVE-2024-56658](https://patchblox.com/security/data/cve/CVE-2024-56658.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: net: defer final 'struct net' free in netns dism... | 7.8 | 0.0024 | | | [CVE-2024-41014](https://patchblox.com/security/data/cve/CVE-2024-41014.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... | 7.8 | 0.0024 | | | [CVE-2024-50121](https://patchblox.com/security/data/cve/CVE-2024-50121.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... | 7.8 | 0.0023 | | | [CVE-2024-56739](https://patchblox.com/security/data/cve/CVE-2024-56739.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: c... | 7.8 | 0.0023 | | | [CVE-2024-53099](https://patchblox.com/security/data/cve/CVE-2024-53099.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Check validity of link->type in bpf_link_sh... | 7.1 | 0.0023 | | | [CVE-2024-53680](https://patchblox.com/security/data/cve/CVE-2024-53680.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu... | 7.8 | 0.0023 | | | [CVE-2024-56675](https://patchblox.com/security/data/cve/CVE-2024-56675.md) | High | kernel-zfcpdump: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0023 | | | [CVE-2024-57798](https://patchblox.com/security/data/cve/CVE-2024-57798.md) | High | drm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req() | 7.8 | 0.0022 | | | [CVE-2024-56759](https://patchblox.com/security/data/cve/CVE-2024-56759.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: btrfs: fix use-after-free when COWing tree bock... | 7.8 | 0.0022 | | | [CVE-2024-56616](https://patchblox.com/security/data/cve/CVE-2024-56616.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... | 7.8 | 0.0022 | | | [CVE-2024-57896](https://patchblox.com/security/data/cve/CVE-2024-57896.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: btrfs: flush delalloc workers queue before stopp... | 7.8 | 0.0021 | | | [CVE-2024-56690](https://patchblox.com/security/data/cve/CVE-2024-56690.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0019 | | | [CVE-2024-57876](https://patchblox.com/security/data/cve/CVE-2024-57876.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t... | 7.0 | 0.0016 | | | [CVE-2024-53217](https://patchblox.com/security/data/cve/CVE-2024-53217.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: NFSD: Prevent NULL dereference in nfsd4_process_... | 5.5 | 0.0073 | | | [CVE-2024-53240](https://patchblox.com/security/data/cve/CVE-2024-53240.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: xen/netfront: fix crash when removing device Wh... | 6.8 | 0.0062 | | | [CVE-2024-56779](https://patchblox.com/security/data/cve/CVE-2024-56779.md) | Routine | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... | 6.3 | 0.0055 | | | [CVE-2024-53146](https://patchblox.com/security/data/cve/CVE-2024-53146.md) | Routine | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... | 5.5 | 0.0055 | | | [CVE-2024-56688](https://patchblox.com/security/data/cve/CVE-2024-56688.md) | Routine | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... | 5.5 | 0.0054 | | | [CVE-2024-57882](https://patchblox.com/security/data/cve/CVE-2024-57882.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: mptcp: fix TCP options overflow | 5.5 | 0.0052 | | | [CVE-2025-21629](https://patchblox.com/security/data/cve/CVE-2025-21629.md) | Routine | net: reenable NETIF_F_IPV6_CSUM offload for BIG TCP packets | 5.5 | 0.0043 | | | [CVE-2024-56694](https://patchblox.com/security/data/cve/CVE-2024-56694.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: bpf: fix recursive lock when verdict program ret... | 5.5 | 0.0041 | | | [CVE-2024-53164](https://patchblox.com/security/data/cve/CVE-2024-53164.md) | Routine | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... | 5.5 | 0.0027 | | | [CVE-2024-56770](https://patchblox.com/security/data/cve/CVE-2024-56770.md) | Routine | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu... | 5.5 | 0.0027 | | | [CVE-2024-56636](https://patchblox.com/security/data/cve/CVE-2024-56636.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: geneve: do not assume mac header is set in genev... | 5.5 | 0.0027 | | | [CVE-2024-48881](https://patchblox.com/security/data/cve/CVE-2024-48881.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: bcache: revert replacing IS_ERR_OR_NULL with IS_... | 5.5 | 0.0026 | | | [CVE-2024-49934](https://patchblox.com/security/data/cve/CVE-2024-49934.md) | Routine | fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name | 4.6 | 0.0026 | | | [CVE-2024-56587](https://patchblox.com/security/data/cve/CVE-2024-56587.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: leds: class: Protect brightness_show() with led_... | 5.5 | 0.0026 | | | [CVE-2024-56634](https://patchblox.com/security/data/cve/CVE-2024-56634.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: gpio: grgpio: Add NULL check in grgpio_probe de... | 5.5 | 0.0026 | | | [CVE-2024-45828](https://patchblox.com/security/data/cve/CVE-2024-45828.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: i3c: mipi-i3c-hci: Mask ring interrupts before r... | 5.5 | 0.0025 | | | [CVE-2024-56369](https://patchblox.com/security/data/cve/CVE-2024-56369.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: drm/modes: Avoid divide by zero harder in drm_mo... | 5.5 | 0.0025 | | | [CVE-2024-56648](https://patchblox.com/security/data/cve/CVE-2024-56648.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: net: hsr: avoid potential out-of-bound access in... | 5.5 | 0.0025 | | | [CVE-2024-46841](https://patchblox.com/security/data/cve/CVE-2024-46841.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_... | 5.5 | 0.0025 | | | [CVE-2024-53198](https://patchblox.com/security/data/cve/CVE-2024-53198.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: xen: Fix the issue of resource not being properl... | 5.5 | 0.0024 | | | [CVE-2024-56569](https://patchblox.com/security/data/cve/CVE-2024-56569.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: ftrace: Fix regression with module command in st... | 5.5 | 0.0024 | | | [CVE-2024-56720](https://patchblox.com/security/data/cve/CVE-2024-56720.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Several fixes to bpf_msg_pop_data... | 5.5 | 0.0024 | | | [CVE-2024-56584](https://patchblox.com/security/data/cve/CVE-2024-56584.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: io_uring/tctx: work around xa_store() allocation... | 5.5 | 0.0024 | | | [CVE-2024-53175](https://patchblox.com/security/data/cve/CVE-2024-53175.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: ipc: fix memleak if msg_init_ns failed in create... | 5.5 | 0.0024 | | | [CVE-2024-49926](https://patchblox.com/security/data/cve/CVE-2024-49926.md) | Routine | rcu-tasks: Fix access non-existent percpu rtpcp variable in rcu_tasks_need_gpcb() | 5.5 | 0.0024 | | | [CVE-2024-53105](https://patchblox.com/security/data/cve/CVE-2024-53105.md) | Routine | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... | 5.5 | 0.0024 | | | [CVE-2024-50146](https://patchblox.com/security/data/cve/CVE-2024-50146.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Don't call cleanup on profile rollbac... | 5.5 | 0.0023 | | | [CVE-2024-53125](https://patchblox.com/security/data/cve/CVE-2024-53125.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: bpf: sync_linked_regs() must preserve subreg_def... | 5.5 | 0.0023 | | | [CVE-2024-35956](https://patchblox.com/security/data/cve/CVE-2024-35956.md) | Routine | kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... | 5.5 | 0.0023 | | | [CVE-2024-53157](https://patchblox.com/security/data/cve/CVE-2024-53157.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scpi: Check the DVFS OPP count ret... | 5.5 | 0.0023 | | | [CVE-2024-56562](https://patchblox.com/security/data/cve/CVE-2024-56562.md) | Routine | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... | 5.5 | 0.0023 | | | [CVE-2024-55916](https://patchblox.com/security/data/cve/CVE-2024-55916.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: util: Avoid accessing a ringbuffer... | 5.5 | 0.0023 | | | [CVE-2024-53210](https://patchblox.com/security/data/cve/CVE-2024-53210.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: s390/iucv: MSG_PEEK causes memory leak in iucv_s... | 6.1 | 0.0022 | | | [CVE-2024-53196](https://patchblox.com/security/data/cve/CVE-2024-53196.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Don't retire aborted MMIO instructio... | 5.5 | 0.0022 | | | [CVE-2024-53233](https://patchblox.com/security/data/cve/CVE-2024-53233.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: unicode: Fix utf8_load() error path utf8_load()... | 5.5 | 0.0022 | | | [CVE-2024-57841](https://patchblox.com/security/data/cve/CVE-2024-57841.md) | Routine | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues: The following security issues we... | 5.5 | 0.0022 | | | [CVE-2024-56610](https://patchblox.com/security/data/cve/CVE-2024-56610.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: kcsan: Turn report_filterlist_lock into a raw_sp... | 5.5 | 0.0022 | | | [CVE-2024-50248](https://patchblox.com/security/data/cve/CVE-2024-50248.md) | Routine | ntfs3: Add bounds checking to mi_enum_attr() | 5.5 | 0.0022 | | | [CVE-2024-57931](https://patchblox.com/security/data/cve/CVE-2024-57931.md) | Routine | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... | 5.5 | 0.0022 | | | [CVE-2024-56751](https://patchblox.com/security/data/cve/CVE-2024-56751.md) | Routine | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu... | 6.4 | 0.0022 | | | [CVE-2024-56660](https://patchblox.com/security/data/cve/CVE-2024-56660.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: net/mlx5: DR, prevent potential error pointer de... | 5.5 | 0.0022 | | | [CVE-2024-56665](https://patchblox.com/security/data/cve/CVE-2024-56665.md) | Routine | bpf,perf: Fix invalid prog_array access in perf_event_detach_bpf_prog | 5.5 | 0.0022 | | | [CVE-2024-50258](https://patchblox.com/security/data/cve/CVE-2024-50258.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: net: fix crash when config small gso_max_size/gs... | 5.5 | 0.0022 | | | [CVE-2024-56756](https://patchblox.com/security/data/cve/CVE-2024-56756.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: nvme-pci: fix freeing of the HMB descriptor tabl... | 5.5 | 0.0022 | | | [CVE-2024-57890](https://patchblox.com/security/data/cve/CVE-2024-57890.md) | Routine | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... | 5.5 | 0.0022 | | | [CVE-2024-56780](https://patchblox.com/security/data/cve/CVE-2024-56780.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: quota: flush quota_release_work upon quota write... | 5.5 | 0.0022 | | | [CVE-2024-57884](https://patchblox.com/security/data/cve/CVE-2024-57884.md) | Routine | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... | 5.5 | 0.0022 | | | [CVE-2024-42252](https://patchblox.com/security/data/cve/CVE-2024-42252.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: closures: Change BUG_ON() to WARN_ON() If a BUG... | 5.5 | 0.0021 | | | [CVE-2024-56745](https://patchblox.com/security/data/cve/CVE-2024-56745.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: PCI: Fix reset_method_store() memory leak In re... | 6.1 | 0.0021 | | | [CVE-2024-57938](https://patchblox.com/security/data/cve/CVE-2024-57938.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: net/sctp: Prevent autoclose integer overflow in... | 5.5 | 0.0021 | | | [CVE-2024-55881](https://patchblox.com/security/data/cve/CVE-2024-55881.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Play nice with protected guests in com... | 5.5 | 0.0021 | | | [CVE-2024-56716](https://patchblox.com/security/data/cve/CVE-2024-56716.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: netdevsim: prevent bad user input in nsim_dev_he... | 5.5 | 0.0021 | | | [CVE-2024-56755](https://patchblox.com/security/data/cve/CVE-2024-56755.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: netfs/fscache: Add a memory barrier for FSCACHE_... | 5.5 | 0.0021 | | | [CVE-2024-57874](https://patchblox.com/security/data/cve/CVE-2024-57874.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: arm64: ptrace: fix partial SETREGSET for NT_ARM_... | 6.1 | 0.0021 | | | [CVE-2024-56625](https://patchblox.com/security/data/cve/CVE-2024-56625.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: can: dev: can_set_termination(): allow sleeping... | 5.5 | 0.0021 | | | [CVE-2024-56763](https://patchblox.com/security/data/cve/CVE-2024-56763.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: tracing: Prevent bad count for tracing_cpumask_w... | 5.5 | 0.0021 | | | [CVE-2024-56774](https://patchblox.com/security/data/cve/CVE-2024-56774.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: btrfs: add a sanity check for btrfs root in btrf... | 5.5 | 0.0021 | | | [CVE-2024-56783](https://patchblox.com/security/data/cve/CVE-2024-56783.md) | Routine | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... | 5.5 | 0.0021 | | | [CVE-2024-57903](https://patchblox.com/security/data/cve/CVE-2024-57903.md) | Routine | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... | 5.5 | 0.0020 | | | [CVE-2024-56637](https://patchblox.com/security/data/cve/CVE-2024-56637.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: Hold module reference while re... | 4.7 | 0.0018 | | | [CVE-2024-43098](https://patchblox.com/security/data/cve/CVE-2024-43098.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: i3c: Use i3cdev->desc->info instead of calling i... | 5.5 | 0.0017 | | | [CVE-2024-57946](https://patchblox.com/security/data/cve/CVE-2024-57946.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: virtio-blk: don't keep queue frozen during syste... | 5.5 | 0.0017 | | | [CVE-2024-56568](https://patchblox.com/security/data/cve/CVE-2024-56568.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: iommu/arm-smmu: Defer probe of clients after smm... | 5.5 | 0.0016 | | | [CVE-2024-56687](https://patchblox.com/security/data/cve/CVE-2024-56687.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: usb: musb: Fix hardware lockup on first Rx endpo... | 5.5 | 0.0016 | | --- Data as of 2026-11-08T06:59:42Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.