# ELSA-2024-12884: Security update for 11 packages ELSA-2024-12884, released December 16, 2024, fixes 120 CVEs across 11 products. None of them is reported as exploited. Patch Radar priority: High. - Web page: https://patchblox.com/security/fix/linux/elsa-2024-12884 - Platform: Linux - Released: Dec 16, 2024 - Priority: High (Closes CVE-2024-47685, high severity) - CVEs: 120, exploited: 0, on CISA KEV: 0 - Vendor advisory: https://linux.oracle.com/errata/ELSA-2024-12884.html ## Applies to | Product | Release | Fixed in | |---|---|---| | [kernel-uek](https://patchblox.com/security/data/product/linux/kernel-uek.md) | ol 8 | 0:5.4.17-2136.338.4.1.el8uek | | [kernel-uek-container](https://patchblox.com/security/data/product/linux/kernel-uek-container.md) | ol 8 | 0:5.4.17-2136.338.4.1.el8uek | | [kernel-uek-container-debug](https://patchblox.com/security/data/product/linux/kernel-uek-container-debug.md) | ol 8 | 0:5.4.17-2136.338.4.1.el8uek | | [kernel-uek-debug](https://patchblox.com/security/data/product/linux/kernel-uek-debug.md) | ol 8 | 0:5.4.17-2136.338.4.1.el8uek | | [kernel-uek-debug-devel](https://patchblox.com/security/data/product/linux/kernel-uek-debug-devel.md) | ol 8 | 0:5.4.17-2136.338.4.1.el8uek | | [kernel-uek-devel](https://patchblox.com/security/data/product/linux/kernel-uek-devel.md) | ol 8 | 0:5.4.17-2136.338.4.1.el8uek | | [kernel-uek-doc](https://patchblox.com/security/data/product/linux/kernel-uek-doc.md) | ol 8 | 0:5.4.17-2136.338.4.1.el8uek | | [kernel-uek-tools](https://patchblox.com/security/data/product/linux/kernel-uek-tools.md) | ol 8 | 0:5.4.17-2136.338.4.1.el7uek | | [kernel-uek-tools-libs](https://patchblox.com/security/data/product/linux/kernel-uek-tools-libs.md) | ol 8 | 0:5.4.17-2136.338.4.1.el7uek | | [perf](https://patchblox.com/security/data/product/linux/perf.md) | ol 8 | 0:5.4.17-2136.338.4.1.el7uek | | [python-perf](https://patchblox.com/security/data/product/linux/python-perf.md) | ol 8 | 0:5.4.17-2136.338.4.1.el7uek | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2024-47685](https://patchblox.com/security/data/cve/CVE-2024-47685.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... | 9.1 | 0.0136 | | | [CVE-2024-49997](https://patchblox.com/security/data/cve/CVE-2024-49997.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: net: ethernet: lantiq_etop: fix memory disclosur... | 7.5 | 0.0106 | | | [CVE-2024-50033](https://patchblox.com/security/data/cve/CVE-2024-50033.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... | 7.1 | 0.0079 | | | [CVE-2024-47696](https://patchblox.com/security/data/cve/CVE-2024-47696.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#ch... | 7.8 | 0.0073 | | | [CVE-2024-53059](https://patchblox.com/security/data/cve/CVE-2024-53059.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... | 7.8 | 0.0040 | | | [CVE-2024-49982](https://patchblox.com/security/data/cve/CVE-2024-49982.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: aoe: fix the potential use-after-free problem in... | 7.8 | 0.0038 | | | [CVE-2024-49894](https://patchblox.com/security/data/cve/CVE-2024-49894.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix index out of bounds in dega... | 7.8 | 0.0033 | | | [CVE-2024-49882](https://patchblox.com/security/data/cve/CVE-2024-49882.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... | 7.8 | 0.0032 | | | [CVE-2024-53057](https://patchblox.com/security/data/cve/CVE-2024-53057.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu... | 7.8 | 0.0029 | | | [CVE-2024-47742](https://patchblox.com/security/data/cve/CVE-2024-47742.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: firmware_loader: Block path traversal Most firm... | 7.8 | 0.0029 | | | [CVE-2024-47723](https://patchblox.com/security/data/cve/CVE-2024-47723.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: jfs: fix out-of-bounds in dbNextAG() and diAlloc... | 7.1 | 0.0029 | | | [CVE-2024-50151](https://patchblox.com/security/data/cve/CVE-2024-50151.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... | 7.8 | 0.0028 | | | [CVE-2024-47697](https://patchblox.com/security/data/cve/CVE-2024-47697.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: drivers: media: dvb-frontends/rtl2830: fix an ou... | 7.8 | 0.0028 | | | [CVE-2024-50230](https://patchblox.com/security/data/cve/CVE-2024-50230.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix kernel bug due to missing clearing o... | 7.8 | 0.0028 | | | [CVE-2024-49900](https://patchblox.com/security/data/cve/CVE-2024-49900.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: jfs: Fix uninit-value access of new_ea in ea_buf... | 7.1 | 0.0028 | | | [CVE-2024-50143](https://patchblox.com/security/data/cve/CVE-2024-50143.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... | 7.8 | 0.0028 | | | [CVE-2024-49883](https://patchblox.com/security/data/cve/CVE-2024-49883.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... | 7.8 | 0.0028 | | | [CVE-2024-50035](https://patchblox.com/security/data/cve/CVE-2024-50035.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... | 7.1 | 0.0027 | | | [CVE-2024-50262](https://patchblox.com/security/data/cve/CVE-2024-50262.md) | High | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: B... | 7.8 | 0.0027 | | | [CVE-2024-49966](https://patchblox.com/security/data/cve/CVE-2024-49966.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: ocfs2: cancel dqi_sync_work before freeing oinfo... | 7.8 | 0.0027 | | | [CVE-2024-47698](https://patchblox.com/security/data/cve/CVE-2024-47698.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: drivers: media: dvb-frontends/rtl2832: fix an ou... | 7.8 | 0.0027 | | | [CVE-2024-50180](https://patchblox.com/security/data/cve/CVE-2024-50180.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: fbdev: sisfb: Fix strbuf array overflow The val... | 7.8 | 0.0026 | | | [CVE-2024-49903](https://patchblox.com/security/data/cve/CVE-2024-49903.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: jfs: Fix uaf in dbFreeBits [syzbot reported] ==... | 7.0 | 0.0026 | | | [CVE-2024-49860](https://patchblox.com/security/data/cve/CVE-2024-49860.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... | 7.1 | 0.0025 | | | [CVE-2024-50167](https://patchblox.com/security/data/cve/CVE-2024-50167.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: be2net: fix potential memory leak in be_xmit()... | 7.1 | 0.0025 | | | [CVE-2024-26885](https://patchblox.com/security/data/cve/CVE-2024-26885.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... | 7.8 | 0.0025 | | | [CVE-2024-46849](https://patchblox.com/security/data/cve/CVE-2024-46849.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: ASoC: meson: axg-card: fix 'use-after-free' Buf... | 7.8 | 0.0025 | | | [CVE-2024-50007](https://patchblox.com/security/data/cve/CVE-2024-50007.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: ALSA: asihpi: Fix potential OOB array access AS... | 7.8 | 0.0025 | | | [CVE-2024-49924](https://patchblox.com/security/data/cve/CVE-2024-49924.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu... | 7.8 | 0.0025 | | | [CVE-2024-47701](https://patchblox.com/security/data/cve/CVE-2024-47701.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: ext4: avoid OOB when system.data xattr changes u... | 7.8 | 0.0025 | | | [CVE-2024-50127](https://patchblox.com/security/data/cve/CVE-2024-50127.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... | 7.8 | 0.0025 | | | [CVE-2024-50131](https://patchblox.com/security/data/cve/CVE-2024-50131.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: tracing: Consider the NULL character when valida... | 7.8 | 0.0025 | | | [CVE-2024-50150](https://patchblox.com/security/data/cve/CVE-2024-50150.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... | 7.8 | 0.0024 | | | [CVE-2024-46853](https://patchblox.com/security/data/cve/CVE-2024-46853.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... | 7.8 | 0.0024 | | | [CVE-2024-47670](https://patchblox.com/security/data/cve/CVE-2024-47670.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: ocfs2: add bounds checking to ocfs2_xattr_find_e... | 7.8 | 0.0024 | | | [CVE-2024-47757](https://patchblox.com/security/data/cve/CVE-2024-47757.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix potential oob read in nilfs_btree_ch... | 7.1 | 0.0024 | | | [CVE-2024-50074](https://patchblox.com/security/data/cve/CVE-2024-50074.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... | 7.8 | 0.0024 | | | [CVE-2024-50195](https://patchblox.com/security/data/cve/CVE-2024-50195.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: c... | 7.8 | 0.0023 | | | [CVE-2024-50059](https://patchblox.com/security/data/cve/CVE-2024-50059.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: ntb: ntb_hw_switchtec: Fix use after free vulner... | 7.0 | 0.0023 | | | [CVE-2024-46854](https://patchblox.com/security/data/cve/CVE-2024-46854.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: net: dpaa: Pad packets to ETH_ZLEN When sending... | 7.1 | 0.0023 | | | [CVE-2024-47747](https://patchblox.com/security/data/cve/CVE-2024-47747.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: net: seeq: Fix use after free vulnerability in e... | 7.0 | 0.0023 | | | [CVE-2024-50168](https://patchblox.com/security/data/cve/CVE-2024-50168.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: net/sun3_82586: fix potential memory leak in sun... | 7.1 | 0.0022 | | | [CVE-2024-49851](https://patchblox.com/security/data/cve/CVE-2024-49851.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... | 7.1 | 0.0022 | | | [CVE-2024-47679](https://patchblox.com/security/data/cve/CVE-2024-47679.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: c... | 7.8 | 0.0020 | | | [CVE-2024-50234](https://patchblox.com/security/data/cve/CVE-2024-50234.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: wifi: iwlegacy: Clear stale interrupts before re... | 7.0 | 0.0019 | | | [CVE-2024-49981](https://patchblox.com/security/data/cve/CVE-2024-49981.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: media: venus: fix use after free bug in venus_re... | 7.0 | 0.0019 | | | [CVE-2024-49967](https://patchblox.com/security/data/cve/CVE-2024-49967.md) | High | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | 7.8 | n/a | | | [CVE-2024-49995](https://patchblox.com/security/data/cve/CVE-2024-49995.md) | High | linux: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | 7.1 | n/a | | | [CVE-2024-50228](https://patchblox.com/security/data/cve/CVE-2024-50228.md) | High | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | 7.0 | n/a | | | [CVE-2024-47692](https://patchblox.com/security/data/cve/CVE-2024-47692.md) | Routine | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... | 6.5 | 0.0116 | | | [CVE-2024-50045](https://patchblox.com/security/data/cve/CVE-2024-50045.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: br_netfilter: fix panic with metadata... | 5.5 | 0.0061 | | | [CVE-2024-47749](https://patchblox.com/security/data/cve/CVE-2024-47749.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/cxgb4: Added NULL check for lookup_atid Th... | 5.5 | 0.0057 | | | [CVE-2024-50251](https://patchblox.com/security/data/cve/CVE-2024-50251.md) | Routine | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: n... | 6.2 | 0.0053 | | | [CVE-2024-26921](https://patchblox.com/security/data/cve/CVE-2024-26921.md) | Routine | kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... | 5.5 | 0.0040 | | | [CVE-2024-47712](https://patchblox.com/security/data/cve/CVE-2024-47712.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: wifi: wilc1000: fix potential RCU dereference is... | 5.5 | 0.0037 | | | [CVE-2024-49955](https://patchblox.com/security/data/cve/CVE-2024-49955.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: ACPI: battery: Fix possible crash when unregiste... | 5.5 | 0.0034 | | | [CVE-2024-49867](https://patchblox.com/security/data/cve/CVE-2024-49867.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: btrfs: wait for fixup workers before stopping cl... | 5.5 | 0.0030 | | | [CVE-2024-49878](https://patchblox.com/security/data/cve/CVE-2024-49878.md) | Routine | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... | 5.5 | 0.0030 | | | [CVE-2024-49948](https://patchblox.com/security/data/cve/CVE-2024-49948.md) | Routine | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... | 5.5 | 0.0029 | | | [CVE-2024-49868](https://patchblox.com/security/data/cve/CVE-2024-49868.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: btrfs: fix a NULL pointer dereference when faile... | 5.5 | 0.0029 | | | [CVE-2024-49902](https://patchblox.com/security/data/cve/CVE-2024-49902.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: jfs: check if leafidx greater than num leaves pe... | 5.5 | 0.0029 | | | [CVE-2024-49952](https://patchblox.com/security/data/cve/CVE-2024-49952.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: prevent nf_skb_duplicated... | 5.5 | 0.0029 | | | [CVE-2024-49949](https://patchblox.com/security/data/cve/CVE-2024-49949.md) | Routine | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: s... | 5.5 | 0.0028 | | | [CVE-2024-50024](https://patchblox.com/security/data/cve/CVE-2024-50024.md) | Routine | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... | 5.5 | 0.0028 | | | [CVE-2024-47684](https://patchblox.com/security/data/cve/CVE-2024-47684.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: tcp: check skb is non-NULL in tcp_rto_delta_us()... | 5.5 | 0.0028 | | | [CVE-2024-47737](https://patchblox.com/security/data/cve/CVE-2024-47737.md) | Routine | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... | 5.5 | 0.0028 | | | [CVE-2024-49944](https://patchblox.com/security/data/cve/CVE-2024-49944.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: sctp: set sk_state back to CLOSED if autobind fa... | 5.5 | 0.0028 | | | [CVE-2024-50099](https://patchblox.com/security/data/cve/CVE-2024-50099.md) | Routine | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: s... | 5.5 | 0.0027 | | | [CVE-2024-50237](https://patchblox.com/security/data/cve/CVE-2024-50237.md) | Routine | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... | 5.5 | 0.0027 | | | [CVE-2024-50218](https://patchblox.com/security/data/cve/CVE-2024-50218.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: ocfs2: pass u64 to ocfs2_truncate_inline maybe o... | 5.5 | 0.0027 | | | [CVE-2024-50233](https://patchblox.com/security/data/cve/CVE-2024-50233.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: staging: iio: frequency: ad9832: fix division by... | 5.5 | 0.0027 | | | [CVE-2024-49896](https://patchblox.com/security/data/cve/CVE-2024-49896.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check stream before comparing t... | 5.5 | 0.0026 | | | [CVE-2024-50148](https://patchblox.com/security/data/cve/CVE-2024-50148.md) | Routine | kernel-64k-debug-modules-core: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: B... | 5.5 | 0.0026 | | | [CVE-2024-47699](https://patchblox.com/security/data/cve/CVE-2024-47699.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix potential null-ptr-deref in nilfs_bt... | 5.5 | 0.0026 | | | [CVE-2024-50236](https://patchblox.com/security/data/cve/CVE-2024-50236.md) | Routine | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... | 5.5 | 0.0026 | | | [CVE-2024-49938](https://patchblox.com/security/data/cve/CVE-2024-49938.md) | Routine | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... | 5.5 | 0.0026 | | | [CVE-2024-49973](https://patchblox.com/security/data/cve/CVE-2024-49973.md) | Routine | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... | 5.5 | 0.0026 | | | [CVE-2024-50142](https://patchblox.com/security/data/cve/CVE-2024-50142.md) | Routine | kernel-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: s... | 5.5 | 0.0026 | | | [CVE-2024-47713](https://patchblox.com/security/data/cve/CVE-2024-47713.md) | Routine | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... | 5.5 | 0.0026 | | | [CVE-2024-50040](https://patchblox.com/security/data/cve/CVE-2024-50040.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: igb: Do not bring the device up after non-fatal... | 5.5 | 0.0026 | | | [CVE-2024-53060](https://patchblox.com/security/data/cve/CVE-2024-53060.md) | Routine | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... | 5.5 | 0.0026 | | | [CVE-2024-49892](https://patchblox.com/security/data/cve/CVE-2024-49892.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Initialize get_bytes_per_elemen... | 5.5 | 0.0026 | | | [CVE-2024-49959](https://patchblox.com/security/data/cve/CVE-2024-49959.md) | Routine | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... | 5.5 | 0.0026 | | | [CVE-2024-49963](https://patchblox.com/security/data/cve/CVE-2024-49963.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: mailbox: bcm2835: Fix timeout during suspend mod... | 5.5 | 0.0026 | | | [CVE-2024-50039](https://patchblox.com/security/data/cve/CVE-2024-50039.md) | Routine | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... | 5.5 | 0.0025 | | | [CVE-2024-50117](https://patchblox.com/security/data/cve/CVE-2024-50117.md) | Routine | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... | 5.5 | 0.0025 | | | [CVE-2024-50134](https://patchblox.com/security/data/cve/CVE-2024-50134.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: drm/vboxvideo: Replace fake VLA at end of vbva_m... | 5.5 | 0.0025 | | | [CVE-2024-49877](https://patchblox.com/security/data/cve/CVE-2024-49877.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix possible null-ptr-deref in ocfs2_set_... | 5.5 | 0.0025 | | | [CVE-2024-49879](https://patchblox.com/security/data/cve/CVE-2024-49879.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: drm: omapdrm: Add missing check for alloc_ordere... | 5.5 | 0.0025 | | | [CVE-2024-49957](https://patchblox.com/security/data/cve/CVE-2024-49957.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix null-ptr-deref when journal load failed | 5.5 | 0.0025 | | | [CVE-2024-49962](https://patchblox.com/security/data/cve/CVE-2024-49962.md) | Routine | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... | 5.5 | 0.0025 | | | [CVE-2024-47709](https://patchblox.com/security/data/cve/CVE-2024-47709.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: can: bcm: Clear bo->bcm_proc_read after remove_p... | 5.5 | 0.0025 | | | [CVE-2024-44931](https://patchblox.com/security/data/cve/CVE-2024-44931.md) | Routine | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... | 5.5 | 0.0025 | | | [CVE-2024-41016](https://patchblox.com/security/data/cve/CVE-2024-41016.md) | Routine | kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... | 5.5 | 0.0025 | | | [CVE-2024-50008](https://patchblox.com/security/data/cve/CVE-2024-50008.md) | Routine | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... | 5.5 | 0.0025 | | | [CVE-2024-50096](https://patchblox.com/security/data/cve/CVE-2024-50096.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: nouveau/dmem: Fix vulnerability in migrate_to_ra... | 5.5 | 0.0024 | | | [CVE-2024-50116](https://patchblox.com/security/data/cve/CVE-2024-50116.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix kernel bug due to missing clearing o... | 5.5 | 0.0024 | | | [CVE-2024-50171](https://patchblox.com/security/data/cve/CVE-2024-50171.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: net: systemport: fix potential memory leak in bc... | 5.5 | 0.0024 | | | [CVE-2024-47740](https://patchblox.com/security/data/cve/CVE-2024-47740.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: f2fs: Require FMODE_WRITE for atomic write ioctl... | 5.5 | 0.0023 | | | [CVE-2024-50179](https://patchblox.com/security/data/cve/CVE-2024-50179.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: ceph: remove the incorrect Fw reference check wh... | 5.5 | 0.0023 | | | [CVE-2024-47710](https://patchblox.com/security/data/cve/CVE-2024-47710.md) | Routine | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... | 5.5 | 0.0023 | | | [CVE-2024-50202](https://patchblox.com/security/data/cve/CVE-2024-50202.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: nilfs2: propagate directory read errors from nil... | 5.5 | 0.0023 | | | [CVE-2024-50194](https://patchblox.com/security/data/cve/CVE-2024-50194.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: arm64: probes: Fix uprobes for big-endian kernel... | 5.5 | 0.0023 | | | [CVE-2024-50205](https://patchblox.com/security/data/cve/CVE-2024-50205.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: ALSA: firewire-lib: Avoid division by zero in ap... | 5.5 | 0.0023 | | | [CVE-2024-42229](https://patchblox.com/security/data/cve/CVE-2024-42229.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: crypto: aead,cipher - zeroize key buffer after u... | 4.1 | 0.0023 | | | [CVE-2024-50184](https://patchblox.com/security/data/cve/CVE-2024-50184.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: virtio_pmem: Check device status before requesti... | 5.5 | 0.0023 | | | [CVE-2024-53097](https://patchblox.com/security/data/cve/CVE-2024-53097.md) | Routine | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... | 5.5 | 0.0023 | | | [CVE-2024-50082](https://patchblox.com/security/data/cve/CVE-2024-50082.md) | Routine | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: s... | 4.7 | 0.0022 | | | [CVE-2024-50199](https://patchblox.com/security/data/cve/CVE-2024-50199.md) | Routine | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... | 5.5 | 0.0022 | | | [CVE-2024-47671](https://patchblox.com/security/data/cve/CVE-2024-47671.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: USB: usbtmc: prevent kernel-usb-infoleak The sy... | 5.5 | 0.0022 | | | [CVE-2024-47756](https://patchblox.com/security/data/cve/CVE-2024-47756.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: PCI: keystone: Fix if-statement expression in ks... | 5.5 | 0.0022 | | | [CVE-2024-50229](https://patchblox.com/security/data/cve/CVE-2024-50229.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix potential deadlock with newly create... | 5.5 | 0.0021 | | | [CVE-2024-49985](https://patchblox.com/security/data/cve/CVE-2024-49985.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: i2c: stm32f7: Do not prepare/unprepare clock dur... | 5.5 | 0.0020 | | | [CVE-2024-40953](https://patchblox.com/security/data/cve/CVE-2024-40953.md) | Routine | kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... | 4.7 | 0.0020 | | | [CVE-2024-49965](https://patchblox.com/security/data/cve/CVE-2024-49965.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: ocfs2: remove unreasonable unlock in ocfs2_read_... | 5.5 | 0.0020 | | | [CVE-2024-50006](https://patchblox.com/security/data/cve/CVE-2024-50006.md) | Routine | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... | 4.7 | 0.0019 | | | [CVE-2024-50044](https://patchblox.com/security/data/cve/CVE-2024-50044.md) | Routine | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... | 4.7 | 0.0019 | | | [CVE-2024-50210](https://patchblox.com/security/data/cve/CVE-2024-50210.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: posix-clock: posix-clock: Fix unbalanced locking... | 5.5 | 0.0017 | | | [CVE-2024-47672](https://patchblox.com/security/data/cve/CVE-2024-47672.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: don't wait for tx queues if... | 5.5 | n/a | | | [CVE-2024-50089](https://patchblox.com/security/data/cve/CVE-2024-50089.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: unicode: Don't special case ignorable code point... | 5.5 | n/a | | --- Data as of 2026-11-08T06:59:42Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.