# SUSE-SU-2024:2571-1: Security update for 13 packages

SUSE-SU-2024:2571-1, released July 22, 2024, fixes 285 CVEs across 13 products. One of them is being exploited (CVE-2024-36971); 1 on CISA KEV. Patch Radar priority: Patch now.

- Web page: https://patchblox.com/security/fix/linux/suse-su-2024-2571-1
- Platform: Linux
- Released: Jul 22, 2024
- Priority: Patch now (Closes CVE-2024-36971, exploited (CISA KEV))
- CVEs: 285, exploited: 1, on CISA KEV: 1
- Vendor advisory: https://osv.dev/vulnerability/SUSE-SU-2024:2571-1

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [dtb-aarch64](https://patchblox.com/security/data/product/linux/dtb-aarch64.md) | opensuse-leap 15.6 | 6.4.0-150600.23.14.1 |
| [kernel-64kb](https://patchblox.com/security/data/product/linux/kernel-64kb.md) | opensuse-leap 15.6 | 6.4.0-150600.23.14.1 |
| [kernel-64kb](https://patchblox.com/security/data/product/linux/kernel-64kb.md) | sles 15.6 | 6.4.0-150600.23.14.1 |
| [kernel-debug](https://patchblox.com/security/data/product/linux/kernel-debug.md) | opensuse-leap 15.6 | 6.4.0-150600.23.14.2 |
| [kernel-default](https://patchblox.com/security/data/product/linux/kernel-default.md) | opensuse-leap 15.6 | 6.4.0-150600.23.14.2 |
| [kernel-default](https://patchblox.com/security/data/product/linux/kernel-default.md) | sles 15.6 | 6.4.0-150600.23.14.2 |
| [kernel-default-base](https://patchblox.com/security/data/product/linux/kernel-default-base.md) | opensuse-leap 15.6 | 6.4.0-150600.23.14.2.150600.12.4.3 |
| [kernel-default-base](https://patchblox.com/security/data/product/linux/kernel-default-base.md) | sles 15.6 | 6.4.0-150600.23.14.2.150600.12.4.3 |
| [kernel-docs](https://patchblox.com/security/data/product/linux/kernel-docs.md) | opensuse-leap 15.6 | 6.4.0-150600.23.14.2 |
| [kernel-docs](https://patchblox.com/security/data/product/linux/kernel-docs.md) | sles 15.6 | 6.4.0-150600.23.14.2 |
| [kernel-kvmsmall](https://patchblox.com/security/data/product/linux/kernel-kvmsmall.md) | opensuse-leap 15.6 | 6.4.0-150600.23.14.2 |
| [kernel-livepatch-SLE15-SP6_Update_2](https://patchblox.com/security/data/product/linux/kernel-livepatch-sle15-sp6-update-2.md) | sles 15.6 | 1-150600.13.3.2 |
| [kernel-obs-build](https://patchblox.com/security/data/product/linux/kernel-obs-build.md) | opensuse-leap 15.6 | 6.4.0-150600.23.14.2 |
| [kernel-obs-build](https://patchblox.com/security/data/product/linux/kernel-obs-build.md) | sles 15.6 | 6.4.0-150600.23.14.2 |
| [kernel-obs-qa](https://patchblox.com/security/data/product/linux/kernel-obs-qa.md) | opensuse-leap 15.6 | 6.4.0-150600.23.14.2 |
| [kernel-source](https://patchblox.com/security/data/product/linux/kernel-source.md) | opensuse-leap 15.6 | 6.4.0-150600.23.14.2 |
| [kernel-source](https://patchblox.com/security/data/product/linux/kernel-source.md) | sles 15.6 | 6.4.0-150600.23.14.2 |
| [kernel-syms](https://patchblox.com/security/data/product/linux/kernel-syms.md) | opensuse-leap 15.6 | 6.4.0-150600.23.14.2 |
| [kernel-syms](https://patchblox.com/security/data/product/linux/kernel-syms.md) | sles 15.6 | 6.4.0-150600.23.14.2 |
| [kernel-zfcpdump](https://patchblox.com/security/data/product/linux/kernel-zfcpdump.md) | opensuse-leap 15.6 | 6.4.0-150600.23.14.2 |
| [kernel-zfcpdump](https://patchblox.com/security/data/product/linux/kernel-zfcpdump.md) | sles 15.6 | 6.4.0-150600.23.14.2 |

## CVEs this fix closes

| CVE | Priority | Title | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2024-36971](https://patchblox.com/security/data/cve/CVE-2024-36971.md) | Patch now | kernel-livepatch-SLE15-SP6-RT_Update_1: net: fix __dst_negative_advice() race (bsc#1226145). | 7.8 | 0.0270 | CISA KEV |
| [CVE-2023-52832](https://patchblox.com/security/data/cve/CVE-2023-52832.md) | High | dtb-aarch64: Security update for the Linux Kernel | 9.1 | 0.0126 |  |
| [CVE-2023-52735](https://patchblox.com/security/data/cve/CVE-2023-52735.md) | High | dtb-aarch64: Security update for the Linux Kernel | 9.1 | 0.0122 |  |
| [CVE-2023-52798](https://patchblox.com/security/data/cve/CVE-2023-52798.md) | High | dtb-aarch64: Security update for the Linux Kernel | 8.8 | 0.0103 |  |
| [CVE-2024-38573](https://patchblox.com/security/data/cve/CVE-2024-38573.md) | High | kernel-tools-libs-devel: Important: kernel security update | 7.5 | 0.0100 |  |
| [CVE-2024-35857](https://patchblox.com/security/data/cve/CVE-2024-35857.md) | High | kernel-64kb: icmp: prevent possible NULL dereferences from icmp_build_probe() (bsc#1224619). | 7.5 | 0.0098 |  |
| [CVE-2024-38541](https://patchblox.com/security/data/cve/CVE-2024-38541.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  of: module: add buffer overflow check in of_moda... | 7.8 | 0.0090 |  |
| [CVE-2023-52776](https://patchblox.com/security/data/cve/CVE-2023-52776.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  wifi: ath12k: fix dfs-radar and temperature even... | 8.8 | 0.0086 |  |
| [CVE-2024-38587](https://patchblox.com/security/data/cve/CVE-2024-38587.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  speakup: Fix sizeof() vs ARRAY_SIZE() bug  The "... | 7.8 | 0.0079 |  |
| [CVE-2024-38605](https://patchblox.com/security/data/cve/CVE-2024-38605.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  ALSA: core: Fix NULL module pointer assignment a... | 7.8 | 0.0075 |  |
| [CVE-2024-36916](https://patchblox.com/security/data/cve/CVE-2024-36916.md) | High | kernel-default-base: blk-iocost: avoid out of bounds shift (bsc#1225759). | 7.1 | 0.0073 |  |
| [CVE-2024-35884](https://patchblox.com/security/data/cve/CVE-2024-35884.md) | High | dtb-aarch64: udp: do not accept non-tunnel GSO skbs landing in a tunnel (bsc#1224520). | 7.8 | 0.0069 |  |
| [CVE-2024-38570](https://patchblox.com/security/data/cve/CVE-2024-38570.md) | High | dtb-aarch64: gfs2: Fix potential glock use-after-free on unmount (bsc#1226775). | 7.8 | 0.0068 |  |
| [CVE-2024-38616](https://patchblox.com/security/data/cve/CVE-2024-38616.md) | High | dtb-aarch64: Security update for the Linux Kernel | 8.2 | 0.0065 |  |
| [CVE-2024-36904](https://patchblox.com/security/data/cve/CVE-2024-36904.md) | High | kernel-docs: tcp: Use refcount_inc_not_zero() in tcp_twsk_unique() (bsc#1225732). | 7.8 | 0.0061 |  |
| [CVE-2023-52881](https://patchblox.com/security/data/cve/CVE-2023-52881.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.0 | 0.0061 |  |
| [CVE-2023-52801](https://patchblox.com/security/data/cve/CVE-2023-52801.md) | High | dtb-aarch64: Security update for the Linux Kernel | 8.8 | 0.0060 |  |
| [CVE-2023-52883](https://patchblox.com/security/data/cve/CVE-2023-52883.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.5 | 0.0056 |  |
| [CVE-2024-36972](https://patchblox.com/security/data/cve/CVE-2024-36972.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  af_unix: Update unix_sk(sk)->oob_skb under sk_re... | 7.8 | 0.0052 |  |
| [CVE-2024-38381](https://patchblox.com/security/data/cve/CVE-2024-38381.md) | High | kernel-source-azure: Security update for the Linux Kernel | 7.1 | 0.0038 |  |
| [CVE-2023-52846](https://patchblox.com/security/data/cve/CVE-2023-52846.md) | High | dtb-aarch64: hsr: Prevent use after free in prp_create_tagged_frame() (bsc#1225098). | 7.8 | 0.0035 |  |
| [CVE-2023-52769](https://patchblox.com/security/data/cve/CVE-2023-52769.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0034 |  |
| [CVE-2024-36934](https://patchblox.com/security/data/cve/CVE-2024-36934.md) | High | dtb-aarch64: bna: ensure the copied buf is NUL terminated (bsc#1225760). | 7.8 | 0.0031 |  |
| [CVE-2024-38552](https://patchblox.com/security/data/cve/CVE-2024-38552.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0030 |  |
| [CVE-2023-52813](https://patchblox.com/security/data/cve/CVE-2023-52813.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.0 | 0.0029 |  |
| [CVE-2024-36960](https://patchblox.com/security/data/cve/CVE-2024-36960.md) | High | kernel-zfcpdump: Security update for the Linux Kernel | 7.1 | 0.0029 |  |
| [CVE-2024-35886](https://patchblox.com/security/data/cve/CVE-2024-35886.md) | High | dtb-aarch64: ipv6: Fix infinite recursion in fib6_dump_done() (bsc#1224670). | 7.8 | 0.0028 |  |
| [CVE-2024-36978](https://patchblox.com/security/data/cve/CVE-2024-36978.md) | High | kernel-devel: Important: kernel security update | 7.8 | 0.0028 |  |
| [CVE-2024-38621](https://patchblox.com/security/data/cve/CVE-2024-38621.md) | High | kernel-syms-azure: Security update for the Linux Kernel | 7.1 | 0.0028 |  |
| [CVE-2023-52864](https://patchblox.com/security/data/cve/CVE-2023-52864.md) | High | kernel-rt-debug-devel: kernel: platform/x86: wmi: Fix opening of char device | 7.8 | 0.0027 |  |
| [CVE-2024-38560](https://patchblox.com/security/data/cve/CVE-2024-38560.md) | High | dtb-aarch64: scsi: bfa: Ensure the copied buf is NUL terminated (bsc#1226786). | 7.1 | 0.0027 |  |
| [CVE-2023-52827](https://patchblox.com/security/data/cve/CVE-2023-52827.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.1 | 0.0026 |  |
| [CVE-2023-52829](https://patchblox.com/security/data/cve/CVE-2023-52829.md) | High | dtb-aarch64: Security update for the Linux Kernel | 8.4 | 0.0026 |  |
| [CVE-2024-38578](https://patchblox.com/security/data/cve/CVE-2024-38578.md) | High | dtb-aarch64: ecryptfs: Fix buffer size for tag 66 packet (bsc#1226634,). | 7.8 | 0.0026 |  |
| [CVE-2023-52810](https://patchblox.com/security/data/cve/CVE-2023-52810.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0026 |  |
| [CVE-2024-38555](https://patchblox.com/security/data/cve/CVE-2024-38555.md) | High | kernel-cross-headers: Important: kernel security update | 7.8 | 0.0026 |  |
| [CVE-2023-52812](https://patchblox.com/security/data/cve/CVE-2023-52812.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0026 |  |
| [CVE-2024-38556](https://patchblox.com/security/data/cve/CVE-2024-38556.md) | High | dtb-aarch64: net/mlx5: Add a timeout to acquire the command queue semaphore (bsc#1226774). | 7.8 | 0.0026 |  |
| [CVE-2024-35976](https://patchblox.com/security/data/cve/CVE-2024-35976.md) | High | kernel-syms: Validate user input for XDP_{UMEM\|COMPLETION}_FILL_RING (bsc#1224575). | 7.1 | 0.0026 |  |
| [CVE-2023-52867](https://patchblox.com/security/data/cve/CVE-2023-52867.md) | High | dtb-aarch64: Fixed possible buffer overflow (bsc#1225009). | 7.8 | 0.0026 |  |
| [CVE-2024-38583](https://patchblox.com/security/data/cve/CVE-2024-38583.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0026 |  |
| [CVE-2023-52799](https://patchblox.com/security/data/cve/CVE-2023-52799.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0026 |  |
| [CVE-2023-52804](https://patchblox.com/security/data/cve/CVE-2023-52804.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0026 |  |
| [CVE-2023-52818](https://patchblox.com/security/data/cve/CVE-2023-52818.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0026 |  |
| [CVE-2024-37078](https://patchblox.com/security/data/cve/CVE-2024-37078.md) | High | kernel-64kb: nilfs2: fix potential kernel bug due to lack of writeback flag waiting (bsc#1227066). | 7.1 | 0.0026 |  |
| [CVE-2023-52764](https://patchblox.com/security/data/cve/CVE-2023-52764.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0026 |  |
| [CVE-2023-52805](https://patchblox.com/security/data/cve/CVE-2023-52805.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0026 |  |
| [CVE-2023-52836](https://patchblox.com/security/data/cve/CVE-2023-52836.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0026 |  |
| [CVE-2024-38579](https://patchblox.com/security/data/cve/CVE-2024-38579.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0025 |  |
| [CVE-2021-47432](https://patchblox.com/security/data/cve/CVE-2021-47432.md) | High | kernel-livepatch-SLE15-SP6_Update_2: Security update for the Linux Kernel | 7.8 | 0.0025 |  |
| [CVE-2023-52835](https://patchblox.com/security/data/cve/CVE-2023-52835.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0025 |  |
| [CVE-2024-38559](https://patchblox.com/security/data/cve/CVE-2024-38559.md) | High | dtb-aarch64: scsi: qedf: Ensure the copied buf is NUL terminated (bsc#1226785). | 7.8 | 0.0025 |  |
| [CVE-2024-39463](https://patchblox.com/security/data/cve/CVE-2024-39463.md) | High | kernel-source: Security update for the Linux Kernel | 7.8 | 0.0025 |  |
| [CVE-2024-38545](https://patchblox.com/security/data/cve/CVE-2024-38545.md) | High | dtb-aarch64: RDMA/hns: Fix UAF for cq async event (bsc#1226595). | 7.8 | 0.0025 |  |
| [CVE-2024-36915](https://patchblox.com/security/data/cve/CVE-2024-36915.md) | High | kernel-azure: nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies (bsc#1225758). | 7.1 | 0.0025 |  |
| [CVE-2024-26625](https://patchblox.com/security/data/cve/CVE-2024-26625.md) | High | dtb-aarch64: Call sock_orphan() at release time (bsc#1221086) | 7.8 | 0.0025 |  |
| [CVE-2024-38619](https://patchblox.com/security/data/cve/CVE-2024-38619.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0025 |  |
| [CVE-2024-38627](https://patchblox.com/security/data/cve/CVE-2024-38627.md) | High | kernel-modules-extra: RHSA-2024:5101: kernel security update (Important) | 7.8 | 0.0025 |  |
| [CVE-2024-38630](https://patchblox.com/security/data/cve/CVE-2024-38630.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0025 |  |
| [CVE-2024-39469](https://patchblox.com/security/data/cve/CVE-2024-39469.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.1 | 0.0025 |  |
| [CVE-2023-52766](https://patchblox.com/security/data/cve/CVE-2023-52766.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.1 | 0.0025 |  |
| [CVE-2023-52809](https://patchblox.com/security/data/cve/CVE-2023-52809.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0025 |  |
| [CVE-2023-52807](https://patchblox.com/security/data/cve/CVE-2023-52807.md) | High | dtb-aarch64: Fixed out-of-bounds access may occur when coalesce info is read via debugfs (bsc#1225097). | 7.8 | 0.0025 |  |
| [CVE-2023-52837](https://patchblox.com/security/data/cve/CVE-2023-52837.md) | High | dtb-aarch64: nbd: fix uaf in nbd_open (bsc#1224935). | 7.8 | 0.0025 |  |
| [CVE-2023-52768](https://patchblox.com/security/data/cve/CVE-2023-52768.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  wifi: wilc1000: use vmm_table as array in wilc s... | 7.8 | 0.0025 |  |
| [CVE-2023-52796](https://patchblox.com/security/data/cve/CVE-2023-52796.md) | High | dtb-aarch64: Add ipvlan_route_v6_outbound() helper (bsc#1224930). | 7.8 | 0.0025 |  |
| [CVE-2023-52816](https://patchblox.com/security/data/cve/CVE-2023-52816.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0025 |  |
| [CVE-2024-38599](https://patchblox.com/security/data/cve/CVE-2024-38599.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.1 | 0.0025 |  |
| [CVE-2023-52794](https://patchblox.com/security/data/cve/CVE-2023-52794.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.1 | 0.0024 |  |
| [CVE-2023-52842](https://patchblox.com/security/data/cve/CVE-2023-52842.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.1 | 0.0024 |  |
| [CVE-2023-52777](https://patchblox.com/security/data/cve/CVE-2023-52777.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0024 |  |
| [CVE-2024-39291](https://patchblox.com/security/data/cve/CVE-2024-39291.md) | High | kernel-zfcpdump: Security update for the Linux Kernel | 7.8 | 0.0024 |  |
| [CVE-2023-52840](https://patchblox.com/security/data/cve/CVE-2023-52840.md) | High | dtb-aarch64: Fix use after free in rmi_unregister_function() (bsc#1224928). | 7.8 | 0.0024 |  |
| [CVE-2023-52854](https://patchblox.com/security/data/cve/CVE-2023-52854.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0024 |  |
| [CVE-2023-52795](https://patchblox.com/security/data/cve/CVE-2023-52795.md) | High | dtb-aarch64: Fixed use after free in vhost_vdpa_probe() (bsc#1225085). | 7.8 | 0.0024 |  |
| [CVE-2023-52781](https://patchblox.com/security/data/cve/CVE-2023-52781.md) | High | kernel-rt-debug-modules-extra: kernel: usb: , CVE-2023-52877) | 7.0 | 0.0024 |  |
| [CVE-2023-52817](https://patchblox.com/security/data/cve/CVE-2023-52817.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0024 |  |
| [CVE-2023-52851](https://patchblox.com/security/data/cve/CVE-2023-52851.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0024 |  |
| [CVE-2024-38588](https://patchblox.com/security/data/cve/CVE-2024-38588.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0024 |  |
| [CVE-2024-39471](https://patchblox.com/security/data/cve/CVE-2024-39471.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0024 |  |
| [CVE-2023-52868](https://patchblox.com/security/data/cve/CVE-2023-52868.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0024 |  |
| [CVE-2024-36973](https://patchblox.com/security/data/cve/CVE-2024-36973.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0024 |  |
| [CVE-2024-38562](https://patchblox.com/security/data/cve/CVE-2024-38562.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0024 |  |
| [CVE-2023-52878](https://patchblox.com/security/data/cve/CVE-2023-52878.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.0 | 0.0024 |  |
| [CVE-2024-38635](https://patchblox.com/security/data/cve/CVE-2024-38635.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.1 | 0.0024 |  |
| [CVE-2024-38384](https://patchblox.com/security/data/cve/CVE-2024-38384.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  blk-cgroup: fix list corruption from reorder of... | 7.8 | 0.0023 |  |
| [CVE-2024-38568](https://patchblox.com/security/data/cve/CVE-2024-38568.md) | High | dtb-aarch64: drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group (bsc#1226771). | 7.8 | 0.0023 |  |
| [CVE-2024-38569](https://patchblox.com/security/data/cve/CVE-2024-38569.md) | High | dtb-aarch64: drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group (bsc#1226772). | 7.8 | 0.0023 |  |
| [CVE-2024-38572](https://patchblox.com/security/data/cve/CVE-2024-38572.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.1 | 0.0023 |  |
| [CVE-2024-38388](https://patchblox.com/security/data/cve/CVE-2024-38388.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  ALSA: hda/cs_dsp_ctl: Use private_free for contr... | 7.8 | 0.0023 |  |
| [CVE-2024-38629](https://patchblox.com/security/data/cve/CVE-2024-38629.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0023 |  |
| [CVE-2024-38581](https://patchblox.com/security/data/cve/CVE-2024-38581.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0023 |  |
| [CVE-2024-35979](https://patchblox.com/security/data/cve/CVE-2024-35979.md) | High | kernel-default-base: raid1: fix use-after-free for original bio in raid1_write_request() (bsc#1224572). | 7.8 | 0.0023 |  |
| [CVE-2024-35896](https://patchblox.com/security/data/cve/CVE-2024-35896.md) | High | kernel-rt-core: RHSA-2024:5102: kernel-rt security update (Important) | 7.1 | 0.0023 |  |
| [CVE-2023-52866](https://patchblox.com/security/data/cve/CVE-2023-52866.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.1 | 0.0023 |  |
| [CVE-2023-52800](https://patchblox.com/security/data/cve/CVE-2023-52800.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0023 |  |
| [CVE-2023-52877](https://patchblox.com/security/data/cve/CVE-2023-52877.md) | High | kernel-tools-libs-devel: Important: kernel security and bug fix update | 7.0 | 0.0022 |  |
| [CVE-2024-36477](https://patchblox.com/security/data/cve/CVE-2024-36477.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0022 |  |
| [CVE-2024-39277](https://patchblox.com/security/data/cve/CVE-2024-39277.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0022 |  |
| [CVE-2024-34777](https://patchblox.com/security/data/cve/CVE-2024-34777.md) | High | kernel-azure: Security update for the Linux Kernel | 7.1 | 0.0022 |  |
| [CVE-2024-35843](https://patchblox.com/security/data/cve/CVE-2024-35843.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  iommu/vt-d: Use device rbtree in iopf reporting... | 8.8 | 0.0022 |  |
| [CVE-2024-36919](https://patchblox.com/security/data/cve/CVE-2024-36919.md) | High | dtb-aarch64: scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload (bsc#1225767). | 7.8 | 0.0022 |  |
| [CVE-2024-38610](https://patchblox.com/security/data/cve/CVE-2024-38610.md) | High | dtb-aarch64: drivers/virt/acrn: fix PFNMAP PTE checks in acrn_vm_ram_map() (bsc#1226758). | 7.8 | 0.0021 |  |
| [CVE-2024-36935](https://patchblox.com/security/data/cve/CVE-2024-36935.md) | High | kernel-azure: ice: ensure the copied buf is NUL terminated (bsc#1225763). | 7.1 | 0.0021 |  |
| [CVE-2024-35898](https://patchblox.com/security/data/cve/CVE-2024-35898.md) | High | kernel-default-base: netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() (bsc#1224498). | 7.0 | 0.0020 |  |
| [CVE-2024-38664](https://patchblox.com/security/data/cve/CVE-2024-38664.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0020 |  |
| [CVE-2023-52847](https://patchblox.com/security/data/cve/CVE-2023-52847.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.0 | 0.0019 |  |
| [CVE-2023-52757](https://patchblox.com/security/data/cve/CVE-2023-52757.md) | High | dtb-aarch64: Fixed potential deadlock when releasing mids (bsc#1225548). | 7.8 | 0.0019 |  |
| [CVE-2023-52825](https://patchblox.com/security/data/cve/CVE-2023-52825.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0018 |  |
| [CVE-2024-38628](https://patchblox.com/security/data/cve/CVE-2024-38628.md) | High | usb: gadget: u_audio: Fix race condition use of controls after free during gadget unbind. | 7.8 | 0.0018 |  |
| [CVE-2023-52872](https://patchblox.com/security/data/cve/CVE-2023-52872.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0018 |  |
| [CVE-2024-36899](https://patchblox.com/security/data/cve/CVE-2024-36899.md) | High | dtb-aarch64: gpiolib: cdev: Fix use after free in lineinfo_changed_notify (bsc#1225737). | 7.0 | 0.0018 |  |
| [CVE-2023-52699](https://patchblox.com/security/data/cve/CVE-2023-52699.md) | Routine | dtb-aarch64: sysv: don't call sb_bread() with pointers_lock held (bsc#1224659). | 5.3 | 0.0097 |  |
| [CVE-2024-38582](https://patchblox.com/security/data/cve/CVE-2024-38582.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0086 |  |
| [CVE-2024-38544](https://patchblox.com/security/data/cve/CVE-2024-38544.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 6.3 | 0.0082 |  |
| [CVE-2024-26845](https://patchblox.com/security/data/cve/CVE-2024-26845.md) | Routine | dtb-aarch64: scsi: target: core: Add TMF to tmr_list handling (bsc#1223018). | 5.5 | 0.0074 |  |
| [CVE-2024-38565](https://patchblox.com/security/data/cve/CVE-2024-38565.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0074 |  |
| [CVE-2024-35880](https://patchblox.com/security/data/cve/CVE-2024-35880.md) | Routine | dtb-aarch64: io_uring/kbuf: hold io_buffer_list reference over mmap (bsc#1224523). | 5.5 | 0.0069 |  |
| [CVE-2023-52834](https://patchblox.com/security/data/cve/CVE-2023-52834.md) | Routine | dtb-aarch64: atl1c: Work around the DMA RX overflow issue (bsc#1225599). | 5.5 | 0.0065 |  |
| [CVE-2024-38618](https://patchblox.com/security/data/cve/CVE-2024-38618.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0064 |  |
| [CVE-2024-38539](https://patchblox.com/security/data/cve/CVE-2024-38539.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0061 |  |
| [CVE-2024-35970](https://patchblox.com/security/data/cve/CVE-2024-35970.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 6.3 | 0.0050 |  |
| [CVE-2024-36964](https://patchblox.com/security/data/cve/CVE-2024-36964.md) | Routine | kernel-livepatch-SLE15-SP6_Update_0: fs/9p: only translate RWX permissions for plain 9P2000 (bsc#1226325). | 5.5 | 0.0050 |  |
| [CVE-2024-36945](https://patchblox.com/security/data/cve/CVE-2024-36945.md) | Routine | kernel-64kb: net/smc: fix neighbour and rtable leak in smc_ib_find_route() (bsc#1225823). | 5.5 | 0.0048 |  |
| [CVE-2024-36962](https://patchblox.com/security/data/cve/CVE-2024-36962.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0046 |  |
| [CVE-2024-35998](https://patchblox.com/security/data/cve/CVE-2024-35998.md) | Routine | dtb-aarch64: Fixed lock ordering potential deadlock in cifs_sync_mid_result (bsc#1224549). | 5.5 | 0.0040 |  |
| [CVE-2024-26482](https://patchblox.com/security/data/cve/CVE-2024-26482.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | n/a | 0.0032 |  |
| [CVE-2024-38590](https://patchblox.com/security/data/cve/CVE-2024-38590.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0031 |  |
| [CVE-2023-52656](https://patchblox.com/security/data/cve/CVE-2023-52656.md) | Routine | kernel-docs: Dropped any code related to SCM_RIGHTS (bsc#1224187). | 5.5 | 0.0031 |  |
| [CVE-2024-26889](https://patchblox.com/security/data/cve/CVE-2024-26889.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0028 |  |
| [CVE-2024-38549](https://patchblox.com/security/data/cve/CVE-2024-38549.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0028 |  |
| [CVE-2023-52845](https://patchblox.com/security/data/cve/CVE-2023-52845.md) | Routine | dtb-aarch64: tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING (bsc#1225585). | 5.5 | 0.0027 |  |
| [CVE-2024-35807](https://patchblox.com/security/data/cve/CVE-2024-35807.md) | Routine | dtb-aarch64: ext4: fix corruption during on-line resize (bsc#1224735). | 5.5 | 0.0027 |  |
| [CVE-2024-36478](https://patchblox.com/security/data/cve/CVE-2024-36478.md) | Routine | dtb-aarch64: null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues' (bsc#1226841). | 5.5 | 0.0027 |  |
| [CVE-2024-38608](https://patchblox.com/security/data/cve/CVE-2024-38608.md) | Routine | net/mlx5e: Fix netif state handling | 5.5 | 0.0026 |  |
| [CVE-2024-38661](https://patchblox.com/security/data/cve/CVE-2024-38661.md) | Routine | dtb-aarch64: s390/ap: Fix crash in AP internal function modify_bitmap() (bsc#1226996). | 5.5 | 0.0026 |  |
| [CVE-2024-38663](https://patchblox.com/security/data/cve/CVE-2024-38663.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0026 |  |
| [CVE-2023-52806](https://patchblox.com/security/data/cve/CVE-2023-52806.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0026 |  |
| [CVE-2023-52874](https://patchblox.com/security/data/cve/CVE-2023-52874.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0026 |  |
| [CVE-2024-26920](https://patchblox.com/security/data/cve/CVE-2024-26920.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0026 |  |
| [CVE-2024-38547](https://patchblox.com/security/data/cve/CVE-2024-38547.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0026 |  |
| [CVE-2023-52672](https://patchblox.com/security/data/cve/CVE-2023-52672.md) | Routine | kernel-64kb: pipe: wakeup wr_wait after setting max_usage (bsc#1224614). | 5.5 | 0.0026 |  |
| [CVE-2024-38567](https://patchblox.com/security/data/cve/CVE-2024-38567.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0025 |  |
| [CVE-2023-52838](https://patchblox.com/security/data/cve/CVE-2023-52838.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 6.2 | 0.0025 |  |
| [CVE-2023-52844](https://patchblox.com/security/data/cve/CVE-2023-52844.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 6.2 | 0.0025 |  |
| [CVE-2023-52858](https://patchblox.com/security/data/cve/CVE-2023-52858.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 6.2 | 0.0025 |  |
| [CVE-2024-38546](https://patchblox.com/security/data/cve/CVE-2024-38546.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0025 |  |
| [CVE-2023-52765](https://patchblox.com/security/data/cve/CVE-2023-52765.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 6.2 | 0.0025 |  |
| [CVE-2023-52811](https://patchblox.com/security/data/cve/CVE-2023-52811.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0025 |  |
| [CVE-2024-33619](https://patchblox.com/security/data/cve/CVE-2024-33619.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0025 |  |
| [CVE-2024-38548](https://patchblox.com/security/data/cve/CVE-2024-38548.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0025 |  |
| [CVE-2024-36017](https://patchblox.com/security/data/cve/CVE-2024-36017.md) | Routine | kernel-source: Security update for the Linux Kernel | 6.1 | 0.0025 |  |
| [CVE-2023-52861](https://patchblox.com/security/data/cve/CVE-2023-52861.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 6.2 | 0.0025 |  |
| [CVE-2024-38540](https://patchblox.com/security/data/cve/CVE-2024-38540.md) | Routine | kernel-tools-libs-devel: kernel: bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq | 4.4 | 0.0025 |  |
| [CVE-2023-52789](https://patchblox.com/security/data/cve/CVE-2023-52789.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0025 |  |
| [CVE-2023-52843](https://patchblox.com/security/data/cve/CVE-2023-52843.md) | Routine | dtb-aarch64: llc: verify mac len before reading mac header (bsc#1224951). | 5.5 | 0.0025 |  |
| [CVE-2023-52855](https://patchblox.com/security/data/cve/CVE-2023-52855.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0025 |  |
| [CVE-2023-52865](https://patchblox.com/security/data/cve/CVE-2023-52865.md) | Routine | kernel-default: Add check for mtk_alloc_clk_data (bsc#1225086). | 5.5 | 0.0025 |  |
| [CVE-2023-52880](https://patchblox.com/security/data/cve/CVE-2023-52880.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0025 |  |
| [CVE-2023-52819](https://patchblox.com/security/data/cve/CVE-2023-52819.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 6.6 | 0.0024 |  |
| [CVE-2024-36938](https://patchblox.com/security/data/cve/CVE-2024-36938.md) | Routine | dtb-aarch64: Fixed NULL pointer dereference in sk_psock_skb_ingress_enqueue (bsc#1225761). | 5.5 | 0.0024 |  |
| [CVE-2023-52622](https://patchblox.com/security/data/cve/CVE-2023-52622.md) | Routine | dtb-aarch64: ext4: avoid online resizing failures due to oversized flex bg (bsc#1222080). | 5.5 | 0.0024 |  |
| [CVE-2024-38633](https://patchblox.com/security/data/cve/CVE-2024-38633.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2022-48772](https://patchblox.com/security/data/cve/CVE-2022-48772.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2023-52762](https://patchblox.com/security/data/cve/CVE-2023-52762.md) | Routine | kernel-rt-kvm: (CVE-2024-27025) * (CVE-2021-47548) * (CVE-2023-52619) | 5.5 | 0.0024 |  |
| [CVE-2023-52784](https://patchblox.com/security/data/cve/CVE-2023-52784.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2023-52754](https://patchblox.com/security/data/cve/CVE-2023-52754.md) | Routine | kernel-azure: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2023-52821](https://patchblox.com/security/data/cve/CVE-2023-52821.md) | Routine | dtb-aarch64: Fixed a possible null pointer dereference (bsc#1225022). | 5.5 | 0.0024 |  |
| [CVE-2023-52826](https://patchblox.com/security/data/cve/CVE-2023-52826.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2024-26767](https://patchblox.com/security/data/cve/CVE-2024-26767.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2024-36903](https://patchblox.com/security/data/cve/CVE-2024-36903.md) | Routine | kernel-uek64k: ipv6: Fix potential uninit-value access in __ip6_make_skb() (Shigeru Yoshida) [Orabug: 36683284] | 5.5 | 0.0024 |  |
| [CVE-2024-36926](https://patchblox.com/security/data/cve/CVE-2024-36926.md) | Routine | kernel-docs: Fixed LPAR panics during boot up with a frozen PE (bsc#1222011). | 5.5 | 0.0024 |  |
| [CVE-2024-38543](https://patchblox.com/security/data/cve/CVE-2024-38543.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2023-52750](https://patchblox.com/security/data/cve/CVE-2023-52750.md) | Routine | kernel-livepatch-SLE15-SP6_Update_2: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2023-52753](https://patchblox.com/security/data/cve/CVE-2023-52753.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2023-52774](https://patchblox.com/security/data/cve/CVE-2023-52774.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2023-52791](https://patchblox.com/security/data/cve/CVE-2023-52791.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2023-52814](https://patchblox.com/security/data/cve/CVE-2023-52814.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2023-52833](https://patchblox.com/security/data/cve/CVE-2023-52833.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2023-52841](https://patchblox.com/security/data/cve/CVE-2023-52841.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2023-52853](https://patchblox.com/security/data/cve/CVE-2023-52853.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2023-52863](https://patchblox.com/security/data/cve/CVE-2023-52863.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2024-35962](https://patchblox.com/security/data/cve/CVE-2024-35962.md) | Routine | perf: RHSA-2024:5101: kernel security update (Important) | 5.5 | 0.0024 |  |
| [CVE-2023-52808](https://patchblox.com/security/data/cve/CVE-2023-52808.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2023-52857](https://patchblox.com/security/data/cve/CVE-2023-52857.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2024-36281](https://patchblox.com/security/data/cve/CVE-2024-36281.md) | Routine | dtb-aarch64: net/mlx5: Use mlx5_ipsec_rx_status_destroy to correctly delete status rules (bsc#1226799). | 5.5 | 0.0024 |  |
| [CVE-2024-36887](https://patchblox.com/security/data/cve/CVE-2024-36887.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2024-38564](https://patchblox.com/security/data/cve/CVE-2024-38564.md) | Routine | bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE | 5.5 | 0.0024 |  |
| [CVE-2024-36957](https://patchblox.com/security/data/cve/CVE-2024-36957.md) | Routine | dtb-aarch64: octeontx2-af: avoid off-by-one read from userspace (bsc#1225762). | 5.5 | 0.0024 |  |
| [CVE-2023-52780](https://patchblox.com/security/data/cve/CVE-2023-52780.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2024-38615](https://patchblox.com/security/data/cve/CVE-2024-38615.md) | Routine | kernel-devel: RHSA-2024:5101: kernel security update (Important) | 5.5 | 0.0024 |  |
| [CVE-2024-38580](https://patchblox.com/security/data/cve/CVE-2024-38580.md) | Routine | dtb-aarch64: epoll: be better about file lifetimes (bsc#1226610). | 4.7 | 0.0024 |  |
| [CVE-2023-52763](https://patchblox.com/security/data/cve/CVE-2023-52763.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2023-52773](https://patchblox.com/security/data/cve/CVE-2023-52773.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2023-52787](https://patchblox.com/security/data/cve/CVE-2023-52787.md) | Routine | dtb-aarch64: blk-mq: make sure active queue usage is held for bio_integrity_prep() (bsc#1225105). | 5.5 | 0.0024 |  |
| [CVE-2023-52788](https://patchblox.com/security/data/cve/CVE-2023-52788.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2023-52792](https://patchblox.com/security/data/cve/CVE-2023-52792.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2023-52803](https://patchblox.com/security/data/cve/CVE-2023-52803.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2023-52815](https://patchblox.com/security/data/cve/CVE-2023-52815.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2023-52849](https://patchblox.com/security/data/cve/CVE-2023-52849.md) | Routine | kernel-zfcpdump: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2024-38551](https://patchblox.com/security/data/cve/CVE-2024-38551.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2024-38554](https://patchblox.com/security/data/cve/CVE-2024-38554.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2023-52782](https://patchblox.com/security/data/cve/CVE-2023-52782.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2023-52850](https://patchblox.com/security/data/cve/CVE-2023-52850.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2023-52856](https://patchblox.com/security/data/cve/CVE-2023-52856.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2024-26813](https://patchblox.com/security/data/cve/CVE-2024-26813.md) | Routine | dtb-aarch64: vfio/platform: Create persistent IRQ handlers (bsc#1222809). | 5.5 | 0.0023 |  |
| [CVE-2024-27414](https://patchblox.com/security/data/cve/CVE-2024-27414.md) | Routine | dtb-aarch64: rtnetlink: fix error logic of IFLA_BRIDGE_FLAGS writing back (bsc#1224439). | 5.5 | 0.0023 |  |
| [CVE-2024-38592](https://patchblox.com/security/data/cve/CVE-2024-38592.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2024-38550](https://patchblox.com/security/data/cve/CVE-2024-38550.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 4.4 | 0.0023 |  |
| [CVE-2024-36005](https://patchblox.com/security/data/cve/CVE-2024-36005.md) | Routine | kernel-rt: kernel: netfilter: nf_tables: honor table dormant flag from netdev release event path | 5.5 | 0.0023 |  |
| [CVE-2024-26676](https://patchblox.com/security/data/cve/CVE-2024-26676.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2023-52875](https://patchblox.com/security/data/cve/CVE-2023-52875.md) | Routine | dtb-aarch64: Add check for mtk_alloc_clk_data (bsc#1225096). | 5.5 | 0.0023 |  |
| [CVE-2023-52862](https://patchblox.com/security/data/cve/CVE-2023-52862.md) | Routine | kernel-syms: Security update for the Linux Kernel | 4.1 | 0.0023 |  |
| [CVE-2023-52879](https://patchblox.com/security/data/cve/CVE-2023-52879.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2024-35247](https://patchblox.com/security/data/cve/CVE-2024-35247.md) | Routine | dtb-aarch64: fpga: region: add owner module and take its refcount (bsc#1226948). | 5.5 | 0.0023 |  |
| [CVE-2024-38571](https://patchblox.com/security/data/cve/CVE-2024-38571.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2024-38611](https://patchblox.com/security/data/cve/CVE-2024-38611.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2024-39301](https://patchblox.com/security/data/cve/CVE-2024-39301.md) | Routine | dtb-aarch64: net/9p: fix uninit-value in p9_client_rpc() (bsc#1226994). | 5.5 | 0.0023 |  |
| [CVE-2023-52871](https://patchblox.com/security/data/cve/CVE-2023-52871.md) | Routine | dtb-aarch64: Handle a second device without data corruption (bsc#1225534) | 5.5 | 0.0023 |  |
| [CVE-2024-35900](https://patchblox.com/security/data/cve/CVE-2024-35900.md) | Routine | kernel-doc: Important: kernel security update | 5.5 | 0.0023 |  |
| [CVE-2024-35925](https://patchblox.com/security/data/cve/CVE-2024-35925.md) | Routine | bpftool: Important: kernel security update | 5.5 | 0.0023 |  |
| [CVE-2023-52876](https://patchblox.com/security/data/cve/CVE-2023-52876.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2024-36900](https://patchblox.com/security/data/cve/CVE-2024-36900.md) | Routine | dtb-aarch64: net: hns3: fix kernel crash when devlink reload during initialization (bsc#1225726). | 5.5 | 0.0023 |  |
| [CVE-2024-36917](https://patchblox.com/security/data/cve/CVE-2024-36917.md) | Routine | kernel-rt-debug-modules-extra: (CVE-2024-36016) * (CVE-2023-52762) * (CVE-2024-27025) * (CVE-2021-47548) * (CVE-2023-52619) | 5.5 | 0.0023 |  |
| [CVE-2024-36937](https://patchblox.com/security/data/cve/CVE-2024-36937.md) | Routine | kernel-zfcpdump: xdp: use flags field to disambiguate broadcast redirect (bsc#1225834). | 5.5 | 0.0023 |  |
| [CVE-2024-38575](https://patchblox.com/security/data/cve/CVE-2024-38575.md) | Routine | kernel-rt-debug-modules: (CVE-2024-36917) * (CVE-2024-36016) * (CVE-2023-52762) * (CVE-2024-27025) * (CVE-2021-47548) * (CVE-2023-52619) | 5.5 | 0.0023 |  |
| [CVE-2024-26750](https://patchblox.com/security/data/cve/CVE-2024-26750.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0022 |  |
| [CVE-2024-39371](https://patchblox.com/security/data/cve/CVE-2024-39371.md) | Routine | dtb-aarch64: io_uring: check for non-NULL file pointer in io_file_can_poll() (bsc#1226990). | 5.5 | 0.0022 |  |
| [CVE-2023-52869](https://patchblox.com/security/data/cve/CVE-2023-52869.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0022 |  |
| [CVE-2023-52873](https://patchblox.com/security/data/cve/CVE-2023-52873.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0022 |  |
| [CVE-2024-26814](https://patchblox.com/security/data/cve/CVE-2024-26814.md) | Routine | dtb-aarch64: vfio/fsl-mc: Block calling interrupt handler without trigger (bsc#1222810). | 5.5 | 0.0022 |  |
| [CVE-2024-26780](https://patchblox.com/security/data/cve/CVE-2024-26780.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0022 |  |
| [CVE-2024-38390](https://patchblox.com/security/data/cve/CVE-2024-38390.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0022 |  |
| [CVE-2024-38622](https://patchblox.com/security/data/cve/CVE-2024-38622.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0022 |  |
| [CVE-2024-36952](https://patchblox.com/security/data/cve/CVE-2024-36952.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 4.7 | 0.0022 |  |
| [CVE-2024-36965](https://patchblox.com/security/data/cve/CVE-2024-36965.md) | Routine | kernel-syms: Security update for the Linux Kernel | 5.5 | 0.0022 |  |
| [CVE-2024-36977](https://patchblox.com/security/data/cve/CVE-2024-36977.md) | Routine | rv: kernel: usb: dwc3: Wait unconditionally after issuing EndXfer command | 5.5 | 0.0022 |  |
| [CVE-2024-38566](https://patchblox.com/security/data/cve/CVE-2024-38566.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0022 |  |
| [CVE-2024-35827](https://patchblox.com/security/data/cve/CVE-2024-35827.md) | Routine | dtb-aarch64: io_uring/net: fix overflow check in io_recvmsg_mshot_prep() (bsc#1224606). | 5.5 | 0.0022 |  |
| [CVE-2023-52870](https://patchblox.com/security/data/cve/CVE-2023-52870.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 4.1 | 0.0022 |  |
| [CVE-2024-36008](https://patchblox.com/security/data/cve/CVE-2024-36008.md) | Routine | kernel-docs: ipv4: check for NULL idev in ip_route_use_hint() (bsc#1224540). | 5.5 | 0.0021 |  |
| [CVE-2024-38385](https://patchblox.com/security/data/cve/CVE-2024-38385.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2024-36969](https://patchblox.com/security/data/cve/CVE-2024-36969.md) | Routine | kernel-syms-azure: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2024-26758](https://patchblox.com/security/data/cve/CVE-2024-26758.md) | Routine | md: Don't ignore suspended array in md_check_recovery() | 5.5 | 0.0021 |  |
| [CVE-2024-36967](https://patchblox.com/security/data/cve/CVE-2024-36967.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2024-38602](https://patchblox.com/security/data/cve/CVE-2024-38602.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2024-36479](https://patchblox.com/security/data/cve/CVE-2024-36479.md) | Routine | kernel-livepatch-SLE15-SP6-RT_Update_1: fpga: bridge: add owner module and take its refcount (bsc#1226949). | 5.5 | 0.0021 |  |
| [CVE-2024-37021](https://patchblox.com/security/data/cve/CVE-2024-37021.md) | Routine | fpga: manager: add owner module and take its refcount | 5.5 | 0.0021 |  |
| [CVE-2024-38603](https://patchblox.com/security/data/cve/CVE-2024-38603.md) | Routine | dtb-aarch64: drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset() (bsc#1226842). | 5.5 | 0.0021 |  |
| [CVE-2024-39466](https://patchblox.com/security/data/cve/CVE-2024-39466.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2024-36975](https://patchblox.com/security/data/cve/CVE-2024-36975.md) | Routine | kernel-azure: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2024-38594](https://patchblox.com/security/data/cve/CVE-2024-38594.md) | Routine | dtb-aarch64: net: stmmac: move the EST lock to struct stmmac_priv (bsc#1226734). | 5.5 | 0.0021 |  |
| [CVE-2024-38595](https://patchblox.com/security/data/cve/CVE-2024-38595.md) | Routine | net/mlx5: Fix peer devlink set for SF representor devlink port | 5.5 | 0.0021 |  |
| [CVE-2024-38636](https://patchblox.com/security/data/cve/CVE-2024-38636.md) | Routine | dtb-aarch64: f2fs: multidev: fix to recognize valid zero block address (bsc#1226879). | 5.5 | 0.0021 |  |
| [CVE-2024-38617](https://patchblox.com/security/data/cve/CVE-2024-38617.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2023-52783](https://patchblox.com/security/data/cve/CVE-2023-52783.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2024-35831](https://patchblox.com/security/data/cve/CVE-2024-35831.md) | Routine | dtb-aarch64: io_uring: Fix release of pinned pages when __io_uaddr_map fails (bsc#1224698). | 5.5 | 0.0021 |  |
| [CVE-2024-35957](https://patchblox.com/security/data/cve/CVE-2024-35957.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0020 |  |
| [CVE-2024-38600](https://patchblox.com/security/data/cve/CVE-2024-38600.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0019 |  |
| [CVE-2024-36924](https://patchblox.com/security/data/cve/CVE-2024-36924.md) | Routine | kernel-obs-build: Security update for the Linux Kernel | 5.5 | 0.0019 |  |
| [CVE-2024-38553](https://patchblox.com/security/data/cve/CVE-2024-38553.md) | Routine | dtb-aarch64: net: fec: remove .ndo_poll_controller to avoid deadlock (bsc#1226744). | 5.5 | 0.0019 |  |
| [CVE-2024-27419](https://patchblox.com/security/data/cve/CVE-2024-27419.md) | Routine | dtb-aarch64: Fixed data-races around sysctl_net_busy_read (bsc#1224759) | 4.7 | 0.0019 |  |
| [CVE-2024-38634](https://patchblox.com/security/data/cve/CVE-2024-38634.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0019 |  |
| [CVE-2024-35848](https://patchblox.com/security/data/cve/CVE-2024-35848.md) | Routine | dtb-aarch64: eeprom: at24: fix memory corruption race condition (bsc#1224612). | 5.5 | 0.0019 |  |
| [CVE-2024-38780](https://patchblox.com/security/data/cve/CVE-2024-38780.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0019 |  |
| [CVE-2024-35926](https://patchblox.com/security/data/cve/CVE-2024-35926.md) | Routine | dtb-aarch64: crypto: iaa - Fix async_disable descriptor leak (bsc#1224655). | 5.5 | 0.0018 |  |
| [CVE-2024-38557](https://patchblox.com/security/data/cve/CVE-2024-38557.md) | Routine | dtb-aarch64: net/mlx5: Reload only IB representors upon lag disable/enable (bsc#1226781). | 5.5 | 0.0018 |  |
| [CVE-2023-52749](https://patchblox.com/security/data/cve/CVE-2023-52749.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 4.7 | 0.0018 |  |
| [CVE-2024-36882](https://patchblox.com/security/data/cve/CVE-2024-36882.md) | Routine | kernel-source-azure: mm: use memalloc_nofs_save() in page_cache_ra_order() (bsc#1225723). | 5.5 | 0.0018 |  |
| [CVE-2023-52786](https://patchblox.com/security/data/cve/CVE-2023-52786.md) | Routine | dtb-aarch64: ext4: fix racy may inline data check in dio write (bsc#1224939). | 4.7 | 0.0018 |  |
| [CVE-2024-36010](https://patchblox.com/security/data/cve/CVE-2024-36010.md) | Routine | kernel-rt: RHSA-2024:5102: kernel-rt security update (Important) | 5.5 | 0.0018 |  |
| [CVE-2024-38597](https://patchblox.com/security/data/cve/CVE-2024-38597.md) | Routine | dtb-aarch64: eth: sungem: remove .ndo_poll_controller to avoid deadlocks (bsc#1226749). | 5.5 | 0.0018 |  |
| [CVE-2023-52884](https://patchblox.com/security/data/cve/CVE-2023-52884.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 4.4 | 0.0018 |  |
| [CVE-2024-38601](https://patchblox.com/security/data/cve/CVE-2024-38601.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 4.7 | 0.0018 |  |
| [CVE-2024-37354](https://patchblox.com/security/data/cve/CVE-2024-37354.md) | Routine | dtb-aarch64: btrfs: fix crash on racing fsync and size-extending write into prealloc (bsc#1227101). | 5.5 | 0.0017 |  |
| [CVE-2024-38591](https://patchblox.com/security/data/cve/CVE-2024-38591.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0017 |  |
| [CVE-2023-52767](https://patchblox.com/security/data/cve/CVE-2023-52767.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0017 |  |
| [CVE-2024-35892](https://patchblox.com/security/data/cve/CVE-2024-35892.md) | Routine | dtb-aarch64: net/sched: fix lockdep splat in qdisc_tree_reduce_backlog() (bsc#1224515). | 5.5 | 0.0017 |  |
| [CVE-2024-39296](https://patchblox.com/security/data/cve/CVE-2024-39296.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 4.7 | 0.0017 |  |
| [CVE-2024-36024](https://patchblox.com/security/data/cve/CVE-2024-36024.md) | Routine | drm/amd/display: Disable idle reallow as part of command/gpint execution | 4.7 | 0.0016 |  |
| [CVE-2024-36923](https://patchblox.com/security/data/cve/CVE-2024-36923.md) | Routine | kernel-livepatch-SLE15-SP6-RT_Update_1: fs/9p: fix uninitialized values during inode evict (bsc#1225815). | 5.5 | n/a |  |
| [CVE-2024-37353](https://patchblox.com/security/data/cve/CVE-2024-37353.md) | Routine | dtb-aarch64: virtio: fixed a double free in vp_del_vqs() (bsc#1226875). | 4.4 | n/a |  |
| [CVE-2024-38391](https://patchblox.com/security/data/cve/CVE-2024-38391.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 4.4 | n/a |  |
| [CVE-2024-39362](https://patchblox.com/security/data/cve/CVE-2024-39362.md) | Routine | kernel-azure: Security update for the Linux Kernel | 4.4 | n/a |  |
| [CVE-2023-52759](https://patchblox.com/security/data/cve/CVE-2023-52759.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  gfs2: ignore negated quota changes  When lots of... | n/a | n/a |  |

---

Data as of 2026-11-11T01:43:54Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.