# SUSE-SU-2024:2896-1: Security update for 3 packages

SUSE-SU-2024:2896-1, released August 13, 2024, fixes 384 CVEs across 3 products. One of them is being exploited (CVE-2024-36971); 1 on CISA KEV. Patch Radar priority: Patch now.

- Web page: https://patchblox.com/security/fix/linux/suse-su-2024-2896-1
- Platform: Linux
- Released: Aug 13, 2024
- Priority: Patch now (Closes CVE-2024-36971, exploited (CISA KEV))
- CVEs: 384, exploited: 1, on CISA KEV: 1
- Vendor advisory: https://osv.dev/vulnerability/SUSE-SU-2024:2896-1

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [kernel-azure](https://patchblox.com/security/data/product/linux/kernel-azure.md) | opensuse-leap 15.6 | 6.4.0-150600.8.8.2 |
| [kernel-azure](https://patchblox.com/security/data/product/linux/kernel-azure.md) | sles 15.6 | 6.4.0-150600.8.8.2 |
| [kernel-source-azure](https://patchblox.com/security/data/product/linux/kernel-source-azure.md) | opensuse-leap 15.6 | 6.4.0-150600.8.8.2 |
| [kernel-source-azure](https://patchblox.com/security/data/product/linux/kernel-source-azure.md) | sles 15.6 | 6.4.0-150600.8.8.2 |
| [kernel-syms-azure](https://patchblox.com/security/data/product/linux/kernel-syms-azure.md) | opensuse-leap 15.6 | 6.4.0-150600.8.8.1 |
| [kernel-syms-azure](https://patchblox.com/security/data/product/linux/kernel-syms-azure.md) | sles 15.6 | 6.4.0-150600.8.8.1 |

## CVEs this fix closes

| CVE | Priority | Title | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2024-36971](https://patchblox.com/security/data/cve/CVE-2024-36971.md) | Patch now | kernel-livepatch-SLE15-SP6-RT_Update_1: net: fix __dst_negative_advice() race (bsc#1226145). | 7.8 | 0.0270 | CISA KEV |
| [CVE-2024-36912](https://patchblox.com/security/data/cve/CVE-2024-36912.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved:  Drivers: hv: vmbus: Track decrypted status in vm... | 9.6 | 0.0097 |  |
| [CVE-2024-36913](https://patchblox.com/security/data/cve/CVE-2024-36913.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved:  Drivers: hv: vmbus: Leak pages if set_memory_enc... | 9.3 | 0.0066 |  |
| [CVE-2023-52832](https://patchblox.com/security/data/cve/CVE-2023-52832.md) | High | dtb-aarch64: Security update for the Linux Kernel | 9.1 | 0.0126 |  |
| [CVE-2023-52798](https://patchblox.com/security/data/cve/CVE-2023-52798.md) | High | dtb-aarch64: Security update for the Linux Kernel | 8.8 | 0.0103 |  |
| [CVE-2024-38573](https://patchblox.com/security/data/cve/CVE-2024-38573.md) | High | kernel-tools-libs-devel: Important: kernel security update | 7.5 | 0.0100 |  |
| [CVE-2024-35857](https://patchblox.com/security/data/cve/CVE-2024-35857.md) | High | kernel-64kb: icmp: prevent possible NULL dereferences from icmp_build_probe() (bsc#1224619). | 7.5 | 0.0098 |  |
| [CVE-2024-38541](https://patchblox.com/security/data/cve/CVE-2024-38541.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  of: module: add buffer overflow check in of_moda... | 7.8 | 0.0090 |  |
| [CVE-2023-52776](https://patchblox.com/security/data/cve/CVE-2023-52776.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  wifi: ath12k: fix dfs-radar and temperature even... | 8.8 | 0.0086 |  |
| [CVE-2024-38558](https://patchblox.com/security/data/cve/CVE-2024-38558.md) | High | dtb-aarch64: net: openvswitch: fix overwriting ct original tuple for ICMPv6 (bsc#1226783). | 7.8 | 0.0082 |  |
| [CVE-2024-38587](https://patchblox.com/security/data/cve/CVE-2024-38587.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  speakup: Fix sizeof() vs ARRAY_SIZE() bug  The "... | 7.8 | 0.0079 |  |
| [CVE-2024-38605](https://patchblox.com/security/data/cve/CVE-2024-38605.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  ALSA: core: Fix NULL module pointer assignment a... | 7.8 | 0.0075 |  |
| [CVE-2024-36916](https://patchblox.com/security/data/cve/CVE-2024-36916.md) | High | kernel-default-base: blk-iocost: avoid out of bounds shift (bsc#1225759). | 7.1 | 0.0073 |  |
| [CVE-2024-35853](https://patchblox.com/security/data/cve/CVE-2024-35853.md) | High | bpftool: Important: kernel security and bug fix update | 7.0 | 0.0073 |  |
| [CVE-2024-35884](https://patchblox.com/security/data/cve/CVE-2024-35884.md) | High | dtb-aarch64: udp: do not accept non-tunnel GSO skbs landing in a tunnel (bsc#1224520). | 7.8 | 0.0069 |  |
| [CVE-2024-26665](https://patchblox.com/security/data/cve/CVE-2024-26665.md) | High | dtb-aarch64: tunnels: fix out of bounds access when building IPv6 PMTU error (bsc#1222328). | 7.8 | 0.0068 |  |
| [CVE-2024-38570](https://patchblox.com/security/data/cve/CVE-2024-38570.md) | High | dtb-aarch64: gfs2: Fix potential glock use-after-free on unmount (bsc#1226775). | 7.8 | 0.0068 |  |
| [CVE-2023-52775](https://patchblox.com/security/data/cve/CVE-2023-52775.md) | High | dtb-aarch64: net/smc: avoid data corruption caused by decline (bsc#1225088). | 7.8 | 0.0067 |  |
| [CVE-2024-38616](https://patchblox.com/security/data/cve/CVE-2024-38616.md) | High | dtb-aarch64: Security update for the Linux Kernel | 8.2 | 0.0065 |  |
| [CVE-2024-26826](https://patchblox.com/security/data/cve/CVE-2024-26826.md) | High | kernel-zfcpdump-modules-extra: kernel: mptcp: fix data re-injection from stale subflow | 7.0 | 0.0065 |  |
| [CVE-2024-36904](https://patchblox.com/security/data/cve/CVE-2024-36904.md) | High | kernel-docs: tcp: Use refcount_inc_not_zero() in tcp_twsk_unique() (bsc#1225732). | 7.8 | 0.0061 |  |
| [CVE-2023-52801](https://patchblox.com/security/data/cve/CVE-2023-52801.md) | High | dtb-aarch64: Security update for the Linux Kernel | 8.8 | 0.0060 |  |
| [CVE-2023-52883](https://patchblox.com/security/data/cve/CVE-2023-52883.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.5 | 0.0056 |  |
| [CVE-2024-36972](https://patchblox.com/security/data/cve/CVE-2024-36972.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  af_unix: Update unix_sk(sk)->oob_skb under sk_re... | 7.8 | 0.0052 |  |
| [CVE-2023-51780](https://patchblox.com/security/data/cve/CVE-2023-51780.md) | High | dtb-aarch64: Security update for the Linux Kernel | 8.0 | 0.0051 |  |
| [CVE-2024-38381](https://patchblox.com/security/data/cve/CVE-2024-38381.md) | High | kernel-source-azure: Security update for the Linux Kernel | 7.1 | 0.0038 |  |
| [CVE-2024-36922](https://patchblox.com/security/data/cve/CVE-2024-36922.md) | High | wifi: iwlwifi: read txq->read_ptr under lock | 7.8 | 0.0035 |  |
| [CVE-2023-52846](https://patchblox.com/security/data/cve/CVE-2023-52846.md) | High | dtb-aarch64: hsr: Prevent use after free in prp_create_tagged_frame() (bsc#1225098). | 7.8 | 0.0035 |  |
| [CVE-2023-52769](https://patchblox.com/security/data/cve/CVE-2023-52769.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0034 |  |
| [CVE-2024-40901](https://patchblox.com/security/data/cve/CVE-2024-40901.md) | High | dtb-aarch64: scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory (bsc#1227762). | 7.8 | 0.0031 |  |
| [CVE-2024-36934](https://patchblox.com/security/data/cve/CVE-2024-36934.md) | High | dtb-aarch64: bna: ensure the copied buf is NUL terminated (bsc#1225760). | 7.8 | 0.0031 |  |
| [CVE-2024-39502](https://patchblox.com/security/data/cve/CVE-2024-39502.md) | High | kernel-tools: RHSA-2024:5101: kernel security update (Important) | 7.8 | 0.0031 |  |
| [CVE-2024-39494](https://patchblox.com/security/data/cve/CVE-2024-39494.md) | High | dtb-aarch64: ima: Fix use-after-free on a dentry's dname.name (bsc#1227716). | 7.8 | 0.0031 |  |
| [CVE-2024-40906](https://patchblox.com/security/data/cve/CVE-2024-40906.md) | High | dtb-aarch64: net/mlx5: Always stop health timer during driver removal (bsc#1227763). | 7.8 | 0.0031 |  |
| [CVE-2024-38552](https://patchblox.com/security/data/cve/CVE-2024-38552.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0030 |  |
| [CVE-2024-39496](https://patchblox.com/security/data/cve/CVE-2024-39496.md) | High | dtb-aarch64: btrfs: zoned: fix use-after-free due to race with dev replace (bsc#1227719). | 7.8 | 0.0029 |  |
| [CVE-2024-36902](https://patchblox.com/security/data/cve/CVE-2024-36902.md) | High | kernel-64kb: ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action() (bsc#1225719). | 7.8 | 0.0029 |  |
| [CVE-2023-52813](https://patchblox.com/security/data/cve/CVE-2023-52813.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.0 | 0.0029 |  |
| [CVE-2024-36960](https://patchblox.com/security/data/cve/CVE-2024-36960.md) | High | kernel-zfcpdump: Security update for the Linux Kernel | 7.1 | 0.0029 |  |
| [CVE-2024-35886](https://patchblox.com/security/data/cve/CVE-2024-35886.md) | High | dtb-aarch64: ipv6: Fix infinite recursion in fib6_dump_done() (bsc#1224670). | 7.8 | 0.0028 |  |
| [CVE-2024-36974](https://patchblox.com/security/data/cve/CVE-2024-36974.md) | High | dtb-aarch64: net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP (bsc#1226519). | 7.8 | 0.0028 |  |
| [CVE-2024-36978](https://patchblox.com/security/data/cve/CVE-2024-36978.md) | High | kernel-devel: Important: kernel security update | 7.8 | 0.0028 |  |
| [CVE-2024-38621](https://patchblox.com/security/data/cve/CVE-2024-38621.md) | High | kernel-syms-azure: Security update for the Linux Kernel | 7.1 | 0.0028 |  |
| [CVE-2024-40998](https://patchblox.com/security/data/cve/CVE-2024-40998.md) | High | dtb-aarch64: ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() (bsc#1227866). | 7.8 | 0.0027 |  |
| [CVE-2023-52864](https://patchblox.com/security/data/cve/CVE-2023-52864.md) | High | kernel-rt-debug-devel: kernel: platform/x86: wmi: Fix opening of char device | 7.8 | 0.0027 |  |
| [CVE-2024-40960](https://patchblox.com/security/data/cve/CVE-2024-40960.md) | High | dtb-aarch64: ipv6: prevent possible NULL dereference in rt6_probe() (bsc#1227813). | 7.8 | 0.0027 |  |
| [CVE-2024-38560](https://patchblox.com/security/data/cve/CVE-2024-38560.md) | High | dtb-aarch64: scsi: bfa: Ensure the copied buf is NUL terminated (bsc#1226786). | 7.1 | 0.0027 |  |
| [CVE-2023-52827](https://patchblox.com/security/data/cve/CVE-2023-52827.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.1 | 0.0026 |  |
| [CVE-2023-52829](https://patchblox.com/security/data/cve/CVE-2023-52829.md) | High | dtb-aarch64: Security update for the Linux Kernel | 8.4 | 0.0026 |  |
| [CVE-2024-27065](https://patchblox.com/security/data/cve/CVE-2024-27065.md) | High | kernel-rt: RHSA-2024:5102: kernel-rt security update (Important) | 7.8 | 0.0026 |  |
| [CVE-2024-38578](https://patchblox.com/security/data/cve/CVE-2024-38578.md) | High | dtb-aarch64: ecryptfs: Fix buffer size for tag 66 packet (bsc#1226634,). | 7.8 | 0.0026 |  |
| [CVE-2023-52810](https://patchblox.com/security/data/cve/CVE-2023-52810.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0026 |  |
| [CVE-2024-38555](https://patchblox.com/security/data/cve/CVE-2024-38555.md) | High | kernel-cross-headers: Important: kernel security update | 7.8 | 0.0026 |  |
| [CVE-2023-52812](https://patchblox.com/security/data/cve/CVE-2023-52812.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0026 |  |
| [CVE-2024-36901](https://patchblox.com/security/data/cve/CVE-2024-36901.md) | High | kernel-livepatch-SLE15-SP6-RT_Update_1: ipv6: prevent NULL dereference in ip6_output() (bsc#1225711) | 7.8 | 0.0026 |  |
| [CVE-2024-38556](https://patchblox.com/security/data/cve/CVE-2024-38556.md) | High | dtb-aarch64: net/mlx5: Add a timeout to acquire the command queue semaphore (bsc#1226774). | 7.8 | 0.0026 |  |
| [CVE-2024-40935](https://patchblox.com/security/data/cve/CVE-2024-40935.md) | High | dtb-aarch64: cachefiles: flush all requests after setting CACHEFILES_DEAD (bsc#1227797). | 7.8 | 0.0026 |  |
| [CVE-2024-40940](https://patchblox.com/security/data/cve/CVE-2024-40940.md) | High | kernel-zfcpdump: net/mlx5: Fix tainted pointer delete is case of flow rules creation fail (bsc#1227800). | 7.8 | 0.0026 |  |
| [CVE-2024-35976](https://patchblox.com/security/data/cve/CVE-2024-35976.md) | High | kernel-syms: Validate user input for XDP_{UMEM\|COMPLETION}_FILL_RING (bsc#1224575). | 7.1 | 0.0026 |  |
| [CVE-2023-52867](https://patchblox.com/security/data/cve/CVE-2023-52867.md) | High | dtb-aarch64: Fixed possible buffer overflow (bsc#1225009). | 7.8 | 0.0026 |  |
| [CVE-2024-38583](https://patchblox.com/security/data/cve/CVE-2024-38583.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0026 |  |
| [CVE-2023-52799](https://patchblox.com/security/data/cve/CVE-2023-52799.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0026 |  |
| [CVE-2023-52804](https://patchblox.com/security/data/cve/CVE-2023-52804.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0026 |  |
| [CVE-2023-52818](https://patchblox.com/security/data/cve/CVE-2023-52818.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0026 |  |
| [CVE-2024-41090](https://patchblox.com/security/data/cve/CVE-2024-41090.md) | High | kernel-uek: ELSA-2024-12546: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0026 |  |
| [CVE-2024-41091](https://patchblox.com/security/data/cve/CVE-2024-41091.md) | High | kernel-uek: ELSA-2024-12546: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0026 |  |
| [CVE-2024-37078](https://patchblox.com/security/data/cve/CVE-2024-37078.md) | High | kernel-64kb: nilfs2: fix potential kernel bug due to lack of writeback flag waiting (bsc#1227066). | 7.1 | 0.0026 |  |
| [CVE-2023-52764](https://patchblox.com/security/data/cve/CVE-2023-52764.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0026 |  |
| [CVE-2023-52805](https://patchblox.com/security/data/cve/CVE-2023-52805.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0026 |  |
| [CVE-2023-52836](https://patchblox.com/security/data/cve/CVE-2023-52836.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0026 |  |
| [CVE-2024-38579](https://patchblox.com/security/data/cve/CVE-2024-38579.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0025 |  |
| [CVE-2021-47432](https://patchblox.com/security/data/cve/CVE-2021-47432.md) | High | kernel-livepatch-SLE15-SP6_Update_2: Security update for the Linux Kernel | 7.8 | 0.0025 |  |
| [CVE-2023-52835](https://patchblox.com/security/data/cve/CVE-2023-52835.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0025 |  |
| [CVE-2024-38559](https://patchblox.com/security/data/cve/CVE-2024-38559.md) | High | dtb-aarch64: scsi: qedf: Ensure the copied buf is NUL terminated (bsc#1226785). | 7.8 | 0.0025 |  |
| [CVE-2024-39463](https://patchblox.com/security/data/cve/CVE-2024-39463.md) | High | kernel-source: Security update for the Linux Kernel | 7.8 | 0.0025 |  |
| [CVE-2024-40931](https://patchblox.com/security/data/cve/CVE-2024-40931.md) | High | dtb-aarch64: mptcp: ensure snd_una is properly initialized on connect (bsc#1227780). | 7.8 | 0.0025 |  |
| [CVE-2024-38545](https://patchblox.com/security/data/cve/CVE-2024-38545.md) | High | dtb-aarch64: RDMA/hns: Fix UAF for cq async event (bsc#1226595). | 7.8 | 0.0025 |  |
| [CVE-2024-38586](https://patchblox.com/security/data/cve/CVE-2024-38586.md) | High | kernel-rt-modules: kernel: r8169: Fix possible ring buffer corruption on fragmented Tx packets. | 7.8 | 0.0025 |  |
| [CVE-2024-26625](https://patchblox.com/security/data/cve/CVE-2024-26625.md) | High | dtb-aarch64: Call sock_orphan() at release time (bsc#1221086) | 7.8 | 0.0025 |  |
| [CVE-2024-38619](https://patchblox.com/security/data/cve/CVE-2024-38619.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0025 |  |
| [CVE-2024-38627](https://patchblox.com/security/data/cve/CVE-2024-38627.md) | High | kernel-modules-extra: RHSA-2024:5101: kernel security update (Important) | 7.8 | 0.0025 |  |
| [CVE-2024-38630](https://patchblox.com/security/data/cve/CVE-2024-38630.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0025 |  |
| [CVE-2024-39469](https://patchblox.com/security/data/cve/CVE-2024-39469.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.1 | 0.0025 |  |
| [CVE-2024-36914](https://patchblox.com/security/data/cve/CVE-2024-36914.md) | High | kernel-default: drm/amd/display: Skip on writeback when it's not applicable (bsc#1225757). | 7.8 | 0.0025 |  |
| [CVE-2023-52809](https://patchblox.com/security/data/cve/CVE-2023-52809.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0025 |  |
| [CVE-2023-52807](https://patchblox.com/security/data/cve/CVE-2023-52807.md) | High | dtb-aarch64: Fixed out-of-bounds access may occur when coalesce info is read via debugfs (bsc#1225097). | 7.8 | 0.0025 |  |
| [CVE-2023-52837](https://patchblox.com/security/data/cve/CVE-2023-52837.md) | High | dtb-aarch64: nbd: fix uaf in nbd_open (bsc#1224935). | 7.8 | 0.0025 |  |
| [CVE-2024-36940](https://patchblox.com/security/data/cve/CVE-2024-36940.md) | High | kernel-zfcpdump-core: Important: kernel security update | 7.8 | 0.0025 |  |
| [CVE-2024-39487](https://patchblox.com/security/data/cve/CVE-2024-39487.md) | High | kernel-doc: RHSA-2024:5101: kernel security update (Important) | 7.1 | 0.0025 |  |
| [CVE-2023-52768](https://patchblox.com/security/data/cve/CVE-2023-52768.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  wifi: wilc1000: use vmm_table as array in wilc s... | 7.8 | 0.0025 |  |
| [CVE-2023-52796](https://patchblox.com/security/data/cve/CVE-2023-52796.md) | High | dtb-aarch64: Add ipvlan_route_v6_outbound() helper (bsc#1224930). | 7.8 | 0.0025 |  |
| [CVE-2024-36004](https://patchblox.com/security/data/cve/CVE-2024-36004.md) | High | dtb-aarch64: i40e: Do not use WQ_MEM_RECLAIM flag for workqueue (bsc#1224545) | 7.0 | 0.0025 |  |
| [CVE-2023-52816](https://patchblox.com/security/data/cve/CVE-2023-52816.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0025 |  |
| [CVE-2024-38659](https://patchblox.com/security/data/cve/CVE-2024-38659.md) | High | dtb-aarch64: enic: Validate length of nl attributes in enic_set_vf_port (bsc#1226883). | 7.1 | 0.0025 |  |
| [CVE-2023-52794](https://patchblox.com/security/data/cve/CVE-2023-52794.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.1 | 0.0024 |  |
| [CVE-2023-52842](https://patchblox.com/security/data/cve/CVE-2023-52842.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.1 | 0.0024 |  |
| [CVE-2023-52751](https://patchblox.com/security/data/cve/CVE-2023-52751.md) | High | kernel-default-base: smb: client: fix use-after-free in smb2_query_info_compound() (bsc#1225489). | 7.8 | 0.0024 |  |
| [CVE-2023-52777](https://patchblox.com/security/data/cve/CVE-2023-52777.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0024 |  |
| [CVE-2024-39291](https://patchblox.com/security/data/cve/CVE-2024-39291.md) | High | kernel-zfcpdump: Security update for the Linux Kernel | 7.8 | 0.0024 |  |
| [CVE-2024-36955](https://patchblox.com/security/data/cve/CVE-2024-36955.md) | High | kernel-source: Security update for the Linux Kernel | 7.7 | 0.0024 |  |
| [CVE-2024-35890](https://patchblox.com/security/data/cve/CVE-2024-35890.md) | High | kernel-syms-azure: gro: fix ownership transfer (bsc#1224516). | 7.0 | 0.0024 |  |
| [CVE-2023-52840](https://patchblox.com/security/data/cve/CVE-2023-52840.md) | High | dtb-aarch64: Fix use after free in rmi_unregister_function() (bsc#1224928). | 7.8 | 0.0024 |  |
| [CVE-2023-52854](https://patchblox.com/security/data/cve/CVE-2023-52854.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0024 |  |
| [CVE-2023-52795](https://patchblox.com/security/data/cve/CVE-2023-52795.md) | High | dtb-aarch64: Fixed use after free in vhost_vdpa_probe() (bsc#1225085). | 7.8 | 0.0024 |  |
| [CVE-2023-52781](https://patchblox.com/security/data/cve/CVE-2023-52781.md) | High | kernel-rt-debug-modules-extra: kernel: usb: , CVE-2023-52877) | 7.0 | 0.0024 |  |
| [CVE-2023-52817](https://patchblox.com/security/data/cve/CVE-2023-52817.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0024 |  |
| [CVE-2024-26734](https://patchblox.com/security/data/cve/CVE-2024-26734.md) | High | kernel-64kb: devlink: fix possible use-after-free and memory leaks in devlink_init() (bsc#1222438). | 7.8 | 0.0024 |  |
| [CVE-2023-52851](https://patchblox.com/security/data/cve/CVE-2023-52851.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0024 |  |
| [CVE-2024-38588](https://patchblox.com/security/data/cve/CVE-2024-38588.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0024 |  |
| [CVE-2024-39471](https://patchblox.com/security/data/cve/CVE-2024-39471.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0024 |  |
| [CVE-2023-52868](https://patchblox.com/security/data/cve/CVE-2023-52868.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0024 |  |
| [CVE-2024-36973](https://patchblox.com/security/data/cve/CVE-2024-36973.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0024 |  |
| [CVE-2024-38562](https://patchblox.com/security/data/cve/CVE-2024-38562.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0024 |  |
| [CVE-2023-52878](https://patchblox.com/security/data/cve/CVE-2023-52878.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.0 | 0.0024 |  |
| [CVE-2024-41014](https://patchblox.com/security/data/cve/CVE-2024-41014.md) | High | dtb-aarch64: xfs: add bounds checking to xlog_recover_process_data (bsc#1228408). | 7.8 | 0.0024 |  |
| [CVE-2024-38635](https://patchblox.com/security/data/cve/CVE-2024-38635.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.1 | 0.0024 |  |
| [CVE-2024-38384](https://patchblox.com/security/data/cve/CVE-2024-38384.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  blk-cgroup: fix list corruption from reorder of... | 7.8 | 0.0023 |  |
| [CVE-2024-38568](https://patchblox.com/security/data/cve/CVE-2024-38568.md) | High | dtb-aarch64: drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group (bsc#1226771). | 7.8 | 0.0023 |  |
| [CVE-2024-38569](https://patchblox.com/security/data/cve/CVE-2024-38569.md) | High | dtb-aarch64: drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group (bsc#1226772). | 7.8 | 0.0023 |  |
| [CVE-2024-38572](https://patchblox.com/security/data/cve/CVE-2024-38572.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.1 | 0.0023 |  |
| [CVE-2024-38388](https://patchblox.com/security/data/cve/CVE-2024-38388.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  ALSA: hda/cs_dsp_ctl: Use private_free for contr... | 7.8 | 0.0023 |  |
| [CVE-2024-38629](https://patchblox.com/security/data/cve/CVE-2024-38629.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0023 |  |
| [CVE-2024-38581](https://patchblox.com/security/data/cve/CVE-2024-38581.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0023 |  |
| [CVE-2024-35979](https://patchblox.com/security/data/cve/CVE-2024-35979.md) | High | kernel-default-base: raid1: fix use-after-free for original bio in raid1_write_request() (bsc#1224572). | 7.8 | 0.0023 |  |
| [CVE-2024-35896](https://patchblox.com/security/data/cve/CVE-2024-35896.md) | High | kernel-rt-core: RHSA-2024:5102: kernel-rt security update (Important) | 7.1 | 0.0023 |  |
| [CVE-2023-52866](https://patchblox.com/security/data/cve/CVE-2023-52866.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.1 | 0.0023 |  |
| [CVE-2024-41013](https://patchblox.com/security/data/cve/CVE-2024-41013.md) | High | dtb-aarch64: xfs: do not walk off the end of a directory data block (bsc#1228405). | 7.8 | 0.0022 |  |
| [CVE-2023-52877](https://patchblox.com/security/data/cve/CVE-2023-52877.md) | High | kernel-tools-libs-devel: Important: kernel security and bug fix update | 7.0 | 0.0022 |  |
| [CVE-2024-40972](https://patchblox.com/security/data/cve/CVE-2024-40972.md) | High | dtb-aarch64: ext4: fold quota accounting into ext4_xattr_inode_lookup_create() (bsc#1227910). | 7.8 | 0.0022 |  |
| [CVE-2024-27020](https://patchblox.com/security/data/cve/CVE-2024-27020.md) | High | kernel-rt: RHSA-2024:5102: kernel-rt security update (Important) | 7.0 | 0.0022 |  |
| [CVE-2024-36477](https://patchblox.com/security/data/cve/CVE-2024-36477.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0022 |  |
| [CVE-2024-39277](https://patchblox.com/security/data/cve/CVE-2024-39277.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0022 |  |
| [CVE-2024-39479](https://patchblox.com/security/data/cve/CVE-2024-39479.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0022 |  |
| [CVE-2024-34777](https://patchblox.com/security/data/cve/CVE-2024-34777.md) | High | kernel-azure: Security update for the Linux Kernel | 7.1 | 0.0022 |  |
| [CVE-2024-35843](https://patchblox.com/security/data/cve/CVE-2024-35843.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  iommu/vt-d: Use device rbtree in iopf reporting... | 8.8 | 0.0022 |  |
| [CVE-2024-36919](https://patchblox.com/security/data/cve/CVE-2024-36919.md) | High | dtb-aarch64: scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload (bsc#1225767). | 7.8 | 0.0022 |  |
| [CVE-2024-38610](https://patchblox.com/security/data/cve/CVE-2024-38610.md) | High | dtb-aarch64: drivers/virt/acrn: fix PFNMAP PTE checks in acrn_vm_ram_map() (bsc#1226758). | 7.8 | 0.0021 |  |
| [CVE-2024-36935](https://patchblox.com/security/data/cve/CVE-2024-36935.md) | High | kernel-azure: ice: ensure the copied buf is NUL terminated (bsc#1225763). | 7.1 | 0.0021 |  |
| [CVE-2024-35898](https://patchblox.com/security/data/cve/CVE-2024-35898.md) | High | kernel-default-base: netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() (bsc#1224498). | 7.0 | 0.0020 |  |
| [CVE-2024-38664](https://patchblox.com/security/data/cve/CVE-2024-38664.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0020 |  |
| [CVE-2024-35899](https://patchblox.com/security/data/cve/CVE-2024-35899.md) | High | kernel-64kb: netfilter: nf_tables: flush pending destroy work before exit_net release (bsc#1224499) | 7.3 | 0.0020 |  |
| [CVE-2023-52847](https://patchblox.com/security/data/cve/CVE-2023-52847.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.0 | 0.0019 |  |
| [CVE-2023-52757](https://patchblox.com/security/data/cve/CVE-2023-52757.md) | High | dtb-aarch64: Fixed potential deadlock when releasing mids (bsc#1225548). | 7.8 | 0.0019 |  |
| [CVE-2023-52825](https://patchblox.com/security/data/cve/CVE-2023-52825.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0018 |  |
| [CVE-2024-38628](https://patchblox.com/security/data/cve/CVE-2024-38628.md) | High | usb: gadget: u_audio: Fix race condition use of controls after free during gadget unbind. | 7.8 | 0.0018 |  |
| [CVE-2023-52872](https://patchblox.com/security/data/cve/CVE-2023-52872.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0018 |  |
| [CVE-2024-36899](https://patchblox.com/security/data/cve/CVE-2024-36899.md) | High | dtb-aarch64: gpiolib: cdev: Fix use after free in lineinfo_changed_notify (bsc#1225737). | 7.0 | 0.0018 |  |
| [CVE-2023-52699](https://patchblox.com/security/data/cve/CVE-2023-52699.md) | Routine | dtb-aarch64: sysv: don't call sb_bread() with pointers_lock held (bsc#1224659). | 5.3 | 0.0097 |  |
| [CVE-2024-38582](https://patchblox.com/security/data/cve/CVE-2024-38582.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0086 |  |
| [CVE-2024-38544](https://patchblox.com/security/data/cve/CVE-2024-38544.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 6.3 | 0.0082 |  |
| [CVE-2024-40923](https://patchblox.com/security/data/cve/CVE-2024-40923.md) | Routine | dtb-aarch64: vmxnet3: disable rx data ring on dma allocation failure (bsc#1227786). | 5.5 | 0.0079 |  |
| [CVE-2024-26845](https://patchblox.com/security/data/cve/CVE-2024-26845.md) | Routine | dtb-aarch64: scsi: target: core: Add TMF to tmr_list handling (bsc#1223018). | 5.5 | 0.0074 |  |
| [CVE-2024-38565](https://patchblox.com/security/data/cve/CVE-2024-38565.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0074 |  |
| [CVE-2024-40937](https://patchblox.com/security/data/cve/CVE-2024-40937.md) | Routine | kernel-livepatch-SLE15-SP6-RT_Update_1: gve: Clear napi->skb before dev_kfree_skb_any() (bsc#1227836). | 5.5 | 0.0074 |  |
| [CVE-2024-40999](https://patchblox.com/security/data/cve/CVE-2024-40999.md) | Routine | net: ena: Add validation for completion descriptors consistency | 5.5 | 0.0069 |  |
| [CVE-2024-35880](https://patchblox.com/security/data/cve/CVE-2024-35880.md) | Routine | dtb-aarch64: io_uring/kbuf: hold io_buffer_list reference over mmap (bsc#1224523). | 5.5 | 0.0069 |  |
| [CVE-2023-52834](https://patchblox.com/security/data/cve/CVE-2023-52834.md) | Routine | dtb-aarch64: atl1c: Work around the DMA RX overflow issue (bsc#1225599). | 5.5 | 0.0065 |  |
| [CVE-2024-38618](https://patchblox.com/security/data/cve/CVE-2024-38618.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0064 |  |
| [CVE-2024-38539](https://patchblox.com/security/data/cve/CVE-2024-38539.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0061 |  |
| [CVE-2024-26641](https://patchblox.com/security/data/cve/CVE-2024-26641.md) | Routine | dtb-aarch64: ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv() (bsc#1221654). | 5.5 | 0.0058 |  |
| [CVE-2024-39468](https://patchblox.com/security/data/cve/CVE-2024-39468.md) | Routine | kernel-docs: smb: client: fix deadlock in smb2_find_smb_tcon() (bsc#1227103. | 5.5 | 0.0053 |  |
| [CVE-2024-35970](https://patchblox.com/security/data/cve/CVE-2024-35970.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 6.3 | 0.0050 |  |
| [CVE-2024-36964](https://patchblox.com/security/data/cve/CVE-2024-36964.md) | Routine | kernel-livepatch-SLE15-SP6_Update_0: fs/9p: only translate RWX permissions for plain 9P2000 (bsc#1226325). | 5.5 | 0.0050 |  |
| [CVE-2024-36945](https://patchblox.com/security/data/cve/CVE-2024-36945.md) | Routine | kernel-64kb: net/smc: fix neighbour and rtable leak in smc_ib_find_route() (bsc#1225823). | 5.5 | 0.0048 |  |
| [CVE-2024-36947](https://patchblox.com/security/data/cve/CVE-2024-36947.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0048 |  |
| [CVE-2024-36962](https://patchblox.com/security/data/cve/CVE-2024-36962.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0046 |  |
| [CVE-2023-38417](https://patchblox.com/security/data/cve/CVE-2023-38417.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 4.3 | 0.0043 |  |
| [CVE-2024-27404](https://patchblox.com/security/data/cve/CVE-2024-27404.md) | Routine | dtb-aarch64: mptcp: fix data races on remote_id (bsc#1224422) | 5.5 | 0.0042 |  |
| [CVE-2024-35998](https://patchblox.com/security/data/cve/CVE-2024-35998.md) | Routine | dtb-aarch64: Fixed lock ordering potential deadlock in cifs_sync_mid_result (bsc#1224549). | 5.5 | 0.0040 |  |
| [CVE-2023-47210](https://patchblox.com/security/data/cve/CVE-2023-47210.md) | Routine | dtb-aarch64: wifi: iwlwifi: bump FW API to 90 for BZ/SC devices (bsc#1225601, bsc#1225600). | 4.7 | 0.0036 |  |
| [CVE-2024-27016](https://patchblox.com/security/data/cve/CVE-2024-27016.md) | Routine | dtb-aarch64: netfilter: flowtable: validate pppoe header (bsc#1223807). | 5.5 | 0.0034 |  |
| [CVE-2024-26633](https://patchblox.com/security/data/cve/CVE-2024-26633.md) | Routine | dtb-aarch64: ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim() (bsc#1221647). | 5.5 | 0.0033 |  |
| [CVE-2024-25741](https://patchblox.com/security/data/cve/CVE-2024-25741.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0031 |  |
| [CVE-2024-38590](https://patchblox.com/security/data/cve/CVE-2024-38590.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0031 |  |
| [CVE-2023-52656](https://patchblox.com/security/data/cve/CVE-2023-52656.md) | Routine | kernel-docs: Dropped any code related to SCM_RIGHTS (bsc#1224187). | 5.5 | 0.0031 |  |
| [CVE-2024-40979](https://patchblox.com/security/data/cve/CVE-2024-40979.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0030 |  |
| [CVE-2024-40970](https://patchblox.com/security/data/cve/CVE-2024-40970.md) | Routine | dtb-aarch64: Avoid hw_desc array overrun in dw-axi-dmac (bsc#1227899). | 5.6 | 0.0030 |  |
| [CVE-2024-40925](https://patchblox.com/security/data/cve/CVE-2024-40925.md) | Routine | kernel-livepatch-SLE15-SP6_Update_3: block: fix request.queuelist usage in flush (bsc#1227789). | 5.5 | 0.0030 |  |
| [CVE-2024-39507](https://patchblox.com/security/data/cve/CVE-2024-39507.md) | Routine | kernel-syms-azure: net: hns3: fix kernel crash problem in concurrent scenario (bsc#1227730). | 5.5 | 0.0030 |  |
| [CVE-2024-27025](https://patchblox.com/security/data/cve/CVE-2024-27025.md) | Routine | kernel-rt: (CVE-2021-47548) * (CVE-2023-52619) | 5.5 | 0.0029 |  |
| [CVE-2024-40919](https://patchblox.com/security/data/cve/CVE-2024-40919.md) | Routine | kernel-livepatch-SLE15-SP6_Update_3: bnxt_en: Adjust logging of firmware messages in case of released token in __hwrm_send() (bsc#1227779). | 5.5 | 0.0029 |  |
| [CVE-2024-40966](https://patchblox.com/security/data/cve/CVE-2024-40966.md) | Routine | tty: add the option to have a tty reject a new ldisc | 5.5 | 0.0029 |  |
| [CVE-2024-40975](https://patchblox.com/security/data/cve/CVE-2024-40975.md) | Routine | dtb-aarch64: platform/x86: x86-android-tablets: Unregister devices in reverse order (bsc#1227926). | 5.5 | 0.0029 |  |
| [CVE-2024-38549](https://patchblox.com/security/data/cve/CVE-2024-38549.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0028 |  |
| [CVE-2024-40908](https://patchblox.com/security/data/cve/CVE-2024-40908.md) | Routine | kernel-source: bpf: Set run context for rawtp test_run callback (bsc#1227783). | 5.5 | 0.0028 |  |
| [CVE-2023-52472](https://patchblox.com/security/data/cve/CVE-2023-52472.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0027 |  |
| [CVE-2024-27012](https://patchblox.com/security/data/cve/CVE-2024-27012.md) | Routine | dtb-aarch64: netfilter: nf_tables: restore set elements when delete set fails (bsc#1223804). | 5.5 | 0.0027 |  |
| [CVE-2024-39504](https://patchblox.com/security/data/cve/CVE-2024-39504.md) | Routine | dtb-aarch64: netfilter: nft_inner: validate mandatory meta and payload (bsc#1227757). | 5.5 | 0.0027 |  |
| [CVE-2023-52845](https://patchblox.com/security/data/cve/CVE-2023-52845.md) | Routine | dtb-aarch64: tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING (bsc#1225585). | 5.5 | 0.0027 |  |
| [CVE-2024-35807](https://patchblox.com/security/data/cve/CVE-2024-35807.md) | Routine | dtb-aarch64: ext4: fix corruption during on-line resize (bsc#1224735). | 5.5 | 0.0027 |  |
| [CVE-2024-36889](https://patchblox.com/security/data/cve/CVE-2024-36889.md) | Routine | kernel-modules-extra: Important: kernel security update | 5.5 | 0.0027 |  |
| [CVE-2024-36478](https://patchblox.com/security/data/cve/CVE-2024-36478.md) | Routine | dtb-aarch64: null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues' (bsc#1226841). | 5.5 | 0.0027 |  |
| [CVE-2024-36946](https://patchblox.com/security/data/cve/CVE-2024-36946.md) | Routine | dtb-aarch64: phonet: fix rtm_phonet_notify() skb allocation (bsc#1225851). | 5.5 | 0.0027 |  |
| [CVE-2024-40961](https://patchblox.com/security/data/cve/CVE-2024-40961.md) | Routine | kernel-64kb: ipv6: prevent possible NULL deref in fib6_nh_init() (bsc#1227814). | 5.5 | 0.0027 |  |
| [CVE-2024-38608](https://patchblox.com/security/data/cve/CVE-2024-38608.md) | Routine | net/mlx5e: Fix netif state handling | 5.5 | 0.0026 |  |
| [CVE-2024-40947](https://patchblox.com/security/data/cve/CVE-2024-40947.md) | Routine | dtb-aarch64: ima: Avoid blocking in RCU read-side critical section (bsc#1227803). | 5.5 | 0.0026 |  |
| [CVE-2024-36950](https://patchblox.com/security/data/cve/CVE-2024-36950.md) | Routine | kernel-default-base: Security update for the Linux Kernel | 4.4 | 0.0026 |  |
| [CVE-2024-26615](https://patchblox.com/security/data/cve/CVE-2024-26615.md) | Routine | dtb-aarch64: net/smc: fix illegal rmb_desc access in SMC-D connection dump (bsc#1220942). | 5.5 | 0.0026 |  |
| [CVE-2024-38661](https://patchblox.com/security/data/cve/CVE-2024-38661.md) | Routine | dtb-aarch64: s390/ap: Fix crash in AP internal function modify_bitmap() (bsc#1226996). | 5.5 | 0.0026 |  |
| [CVE-2024-38663](https://patchblox.com/security/data/cve/CVE-2024-38663.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0026 |  |
| [CVE-2023-52806](https://patchblox.com/security/data/cve/CVE-2023-52806.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0026 |  |
| [CVE-2023-52874](https://patchblox.com/security/data/cve/CVE-2023-52874.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0026 |  |
| [CVE-2024-38547](https://patchblox.com/security/data/cve/CVE-2024-38547.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0026 |  |
| [CVE-2023-52672](https://patchblox.com/security/data/cve/CVE-2023-52672.md) | Routine | kernel-64kb: pipe: wakeup wr_wait after setting max_usage (bsc#1224614). | 5.5 | 0.0026 |  |
| [CVE-2024-38567](https://patchblox.com/security/data/cve/CVE-2024-38567.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0025 |  |
| [CVE-2023-52838](https://patchblox.com/security/data/cve/CVE-2023-52838.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 6.2 | 0.0025 |  |
| [CVE-2023-52844](https://patchblox.com/security/data/cve/CVE-2023-52844.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 6.2 | 0.0025 |  |
| [CVE-2023-52858](https://patchblox.com/security/data/cve/CVE-2023-52858.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 6.2 | 0.0025 |  |
| [CVE-2024-36959](https://patchblox.com/security/data/cve/CVE-2024-36959.md) | Routine | kernel-docs: Security update for the Linux Kernel | 5.5 | 0.0025 |  |
| [CVE-2024-38546](https://patchblox.com/security/data/cve/CVE-2024-38546.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0025 |  |
| [CVE-2023-52765](https://patchblox.com/security/data/cve/CVE-2023-52765.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 6.2 | 0.0025 |  |
| [CVE-2024-39472](https://patchblox.com/security/data/cve/CVE-2024-39472.md) | Routine | kernel-devel: RHSA-2024:5101: kernel security update (Important) | 5.5 | 0.0025 |  |
| [CVE-2023-52811](https://patchblox.com/security/data/cve/CVE-2023-52811.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0025 |  |
| [CVE-2024-26663](https://patchblox.com/security/data/cve/CVE-2024-26663.md) | Routine | dtb-aarch64: tipc: Check the bearer type before calling tipc_udp_nl_bearer_add() (bsc#1222326). | 5.5 | 0.0025 |  |
| [CVE-2024-33619](https://patchblox.com/security/data/cve/CVE-2024-33619.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0025 |  |
| [CVE-2024-36017](https://patchblox.com/security/data/cve/CVE-2024-36017.md) | Routine | kernel-source: Security update for the Linux Kernel | 6.1 | 0.0025 |  |
| [CVE-2024-26863](https://patchblox.com/security/data/cve/CVE-2024-26863.md) | Routine | dtb-aarch64: hsr: Fix uninit-value access in hsr_get_node() (bsc#1223021). | 5.5 | 0.0025 |  |
| [CVE-2024-40948](https://patchblox.com/security/data/cve/CVE-2024-40948.md) | Routine | dtb-aarch64: mm/page_table_check: fix crash on ZONE_DEVICE (bsc#1227801). | 5.5 | 0.0025 |  |
| [CVE-2023-52861](https://patchblox.com/security/data/cve/CVE-2023-52861.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 6.2 | 0.0025 |  |
| [CVE-2024-41017](https://patchblox.com/security/data/cve/CVE-2024-41017.md) | Routine | dtb-aarch64: jfs: do not walk off the end of ealist (bsc#1228403). | 5.5 | 0.0025 |  |
| [CVE-2024-38540](https://patchblox.com/security/data/cve/CVE-2024-38540.md) | Routine | kernel-tools-libs-devel: kernel: bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq | 4.4 | 0.0025 |  |
| [CVE-2023-52789](https://patchblox.com/security/data/cve/CVE-2023-52789.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0025 |  |
| [CVE-2023-52843](https://patchblox.com/security/data/cve/CVE-2023-52843.md) | Routine | dtb-aarch64: llc: verify mac len before reading mac header (bsc#1224951). | 5.5 | 0.0025 |  |
| [CVE-2023-52855](https://patchblox.com/security/data/cve/CVE-2023-52855.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0025 |  |
| [CVE-2023-52865](https://patchblox.com/security/data/cve/CVE-2023-52865.md) | Routine | kernel-default: Add check for mtk_alloc_clk_data (bsc#1225086). | 5.5 | 0.0025 |  |
| [CVE-2023-52880](https://patchblox.com/security/data/cve/CVE-2023-52880.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0025 |  |
| [CVE-2023-52819](https://patchblox.com/security/data/cve/CVE-2023-52819.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 6.6 | 0.0024 |  |
| [CVE-2024-36938](https://patchblox.com/security/data/cve/CVE-2024-36938.md) | Routine | dtb-aarch64: Fixed NULL pointer dereference in sk_psock_skb_ingress_enqueue (bsc#1225761). | 5.5 | 0.0024 |  |
| [CVE-2023-52622](https://patchblox.com/security/data/cve/CVE-2023-52622.md) | Routine | dtb-aarch64: ext4: avoid online resizing failures due to oversized flex bg (bsc#1222080). | 5.5 | 0.0024 |  |
| [CVE-2024-38633](https://patchblox.com/security/data/cve/CVE-2024-38633.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2022-48772](https://patchblox.com/security/data/cve/CVE-2022-48772.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2023-52762](https://patchblox.com/security/data/cve/CVE-2023-52762.md) | Routine | kernel-rt-kvm: (CVE-2024-27025) * (CVE-2021-47548) * (CVE-2023-52619) | 5.5 | 0.0024 |  |
| [CVE-2023-52784](https://patchblox.com/security/data/cve/CVE-2023-52784.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2024-26635](https://patchblox.com/security/data/cve/CVE-2024-26635.md) | Routine | kernel-obs-build: llc: Drop support for ETH_P_TR_802_2 (bsc#1221656). | 5.5 | 0.0024 |  |
| [CVE-2024-41006](https://patchblox.com/security/data/cve/CVE-2024-41006.md) | Routine | kernel-obs-build: netrom: Fix a memory leak in nr_heartbeat_expiry() (bsc#1227862). | 5.5 | 0.0024 |  |
| [CVE-2023-52754](https://patchblox.com/security/data/cve/CVE-2023-52754.md) | Routine | kernel-azure: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2023-52821](https://patchblox.com/security/data/cve/CVE-2023-52821.md) | Routine | dtb-aarch64: Fixed a possible null pointer dereference (bsc#1225022). | 5.5 | 0.0024 |  |
| [CVE-2023-52826](https://patchblox.com/security/data/cve/CVE-2023-52826.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2024-36903](https://patchblox.com/security/data/cve/CVE-2024-36903.md) | Routine | kernel-uek64k: ipv6: Fix potential uninit-value access in __ip6_make_skb() (Shigeru Yoshida) [Orabug: 36683284] | 5.5 | 0.0024 |  |
| [CVE-2024-36926](https://patchblox.com/security/data/cve/CVE-2024-36926.md) | Routine | kernel-docs: Fixed LPAR panics during boot up with a frozen PE (bsc#1222011). | 5.5 | 0.0024 |  |
| [CVE-2024-38543](https://patchblox.com/security/data/cve/CVE-2024-38543.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2023-52750](https://patchblox.com/security/data/cve/CVE-2023-52750.md) | Routine | kernel-livepatch-SLE15-SP6_Update_2: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2023-52753](https://patchblox.com/security/data/cve/CVE-2023-52753.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2023-52774](https://patchblox.com/security/data/cve/CVE-2023-52774.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2023-52791](https://patchblox.com/security/data/cve/CVE-2023-52791.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2023-52814](https://patchblox.com/security/data/cve/CVE-2023-52814.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2023-52833](https://patchblox.com/security/data/cve/CVE-2023-52833.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2023-52841](https://patchblox.com/security/data/cve/CVE-2023-52841.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2023-52853](https://patchblox.com/security/data/cve/CVE-2023-52853.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2023-52863](https://patchblox.com/security/data/cve/CVE-2023-52863.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2024-26636](https://patchblox.com/security/data/cve/CVE-2024-26636.md) | Routine | dtb-aarch64: llc: make llc_ui_sendmsg() more robust against bonding changes (bsc#1221659). | 5.5 | 0.0024 |  |
| [CVE-2024-35962](https://patchblox.com/security/data/cve/CVE-2024-35962.md) | Routine | perf: RHSA-2024:5101: kernel security update (Important) | 5.5 | 0.0024 |  |
| [CVE-2024-36941](https://patchblox.com/security/data/cve/CVE-2024-36941.md) | Routine | kernel-doc: RHSA-2024:5101: kernel security update (Important) | 5.7 | 0.0024 |  |
| [CVE-2023-52808](https://patchblox.com/security/data/cve/CVE-2023-52808.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2023-52857](https://patchblox.com/security/data/cve/CVE-2023-52857.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2024-36281](https://patchblox.com/security/data/cve/CVE-2024-36281.md) | Routine | dtb-aarch64: net/mlx5: Use mlx5_ipsec_rx_status_destroy to correctly delete status rules (bsc#1226799). | 5.5 | 0.0024 |  |
| [CVE-2024-36887](https://patchblox.com/security/data/cve/CVE-2024-36887.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2024-38564](https://patchblox.com/security/data/cve/CVE-2024-38564.md) | Routine | bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE | 5.5 | 0.0024 |  |
| [CVE-2024-36957](https://patchblox.com/security/data/cve/CVE-2024-36957.md) | Routine | dtb-aarch64: octeontx2-af: avoid off-by-one read from userspace (bsc#1225762). | 5.5 | 0.0024 |  |
| [CVE-2024-39482](https://patchblox.com/security/data/cve/CVE-2024-39482.md) | Routine | dtb-aarch64: bcache: fix variable length array abuse in btree_iter (bsc#1227447). | 5.5 | 0.0024 |  |
| [CVE-2024-39498](https://patchblox.com/security/data/cve/CVE-2024-39498.md) | Routine | dtb-aarch64: drm/mst: Fix NULL pointer dereference at drm_dp_add_payload_part2 (bsc#1227723) | 5.5 | 0.0024 |  |
| [CVE-2023-52780](https://patchblox.com/security/data/cve/CVE-2023-52780.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2024-38615](https://patchblox.com/security/data/cve/CVE-2024-38615.md) | Routine | kernel-devel: RHSA-2024:5101: kernel security update (Important) | 5.5 | 0.0024 |  |
| [CVE-2024-38580](https://patchblox.com/security/data/cve/CVE-2024-38580.md) | Routine | dtb-aarch64: epoll: be better about file lifetimes (bsc#1226610). | 4.7 | 0.0024 |  |
| [CVE-2023-52763](https://patchblox.com/security/data/cve/CVE-2023-52763.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2023-52773](https://patchblox.com/security/data/cve/CVE-2023-52773.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2023-52787](https://patchblox.com/security/data/cve/CVE-2023-52787.md) | Routine | dtb-aarch64: blk-mq: make sure active queue usage is held for bio_integrity_prep() (bsc#1225105). | 5.5 | 0.0024 |  |
| [CVE-2023-52788](https://patchblox.com/security/data/cve/CVE-2023-52788.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2023-52792](https://patchblox.com/security/data/cve/CVE-2023-52792.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2023-52803](https://patchblox.com/security/data/cve/CVE-2023-52803.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2023-52815](https://patchblox.com/security/data/cve/CVE-2023-52815.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2023-52849](https://patchblox.com/security/data/cve/CVE-2023-52849.md) | Routine | kernel-zfcpdump: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2024-38551](https://patchblox.com/security/data/cve/CVE-2024-38551.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2024-38554](https://patchblox.com/security/data/cve/CVE-2024-38554.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2023-52782](https://patchblox.com/security/data/cve/CVE-2023-52782.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2023-52850](https://patchblox.com/security/data/cve/CVE-2023-52850.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2023-52856](https://patchblox.com/security/data/cve/CVE-2023-52856.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2024-26813](https://patchblox.com/security/data/cve/CVE-2024-26813.md) | Routine | dtb-aarch64: vfio/platform: Create persistent IRQ handlers (bsc#1222809). | 5.5 | 0.0023 |  |
| [CVE-2024-27414](https://patchblox.com/security/data/cve/CVE-2024-27414.md) | Routine | dtb-aarch64: rtnetlink: fix error logic of IFLA_BRIDGE_FLAGS writing back (bsc#1224439). | 5.5 | 0.0023 |  |
| [CVE-2024-35893](https://patchblox.com/security/data/cve/CVE-2024-35893.md) | Routine | bpftool: kernel: net/sched: act_skbmod: prevent kernel-infoleak | 5.5 | 0.0023 |  |
| [CVE-2024-38592](https://patchblox.com/security/data/cve/CVE-2024-38592.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2024-38550](https://patchblox.com/security/data/cve/CVE-2024-38550.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 4.4 | 0.0023 |  |
| [CVE-2024-36005](https://patchblox.com/security/data/cve/CVE-2024-36005.md) | Routine | kernel-rt: kernel: netfilter: nf_tables: honor table dormant flag from netdev release event path | 5.5 | 0.0023 |  |
| [CVE-2023-52435](https://patchblox.com/security/data/cve/CVE-2023-52435.md) | Routine | dtb-aarch64: net: prevent mss overflow in skb_segment() (bsc#1220138). | 5.5 | 0.0023 |  |
| [CVE-2024-26676](https://patchblox.com/security/data/cve/CVE-2024-26676.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2024-39276](https://patchblox.com/security/data/cve/CVE-2024-39276.md) | Routine | kernel-devel: (CVE-2024-33621) * (CVE-2024-27010) * (CVE-2024-26960) * (CVE-2024-38596) * (CVE-2022-48743) * (CVE-2024-26733) * (CV... | 5.5 | 0.0023 |  |
| [CVE-2023-52875](https://patchblox.com/security/data/cve/CVE-2023-52875.md) | Routine | dtb-aarch64: Add check for mtk_alloc_clk_data (bsc#1225096). | 5.5 | 0.0023 |  |
| [CVE-2024-27015](https://patchblox.com/security/data/cve/CVE-2024-27015.md) | Routine | dtb-aarch64: netfilter: flowtable: incorrect pppoe tuple (bsc#1223806). | 5.5 | 0.0023 |  |
| [CVE-2023-52862](https://patchblox.com/security/data/cve/CVE-2023-52862.md) | Routine | kernel-syms: Security update for the Linux Kernel | 4.1 | 0.0023 |  |
| [CVE-2023-52879](https://patchblox.com/security/data/cve/CVE-2023-52879.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2024-35247](https://patchblox.com/security/data/cve/CVE-2024-35247.md) | Routine | dtb-aarch64: fpga: region: add owner module and take its refcount (bsc#1226948). | 5.5 | 0.0023 |  |
| [CVE-2024-38571](https://patchblox.com/security/data/cve/CVE-2024-38571.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2024-38611](https://patchblox.com/security/data/cve/CVE-2024-38611.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2024-39301](https://patchblox.com/security/data/cve/CVE-2024-39301.md) | Routine | dtb-aarch64: net/9p: fix uninit-value in p9_client_rpc() (bsc#1226994). | 5.5 | 0.0023 |  |
| [CVE-2024-39475](https://patchblox.com/security/data/cve/CVE-2024-39475.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2024-40928](https://patchblox.com/security/data/cve/CVE-2024-40928.md) | Routine | bpftool: net: ethtool: fix the error condition in ethtool_get_phy_stats_ethtool() (CKI Backport Bot) [RHEL-47902] | 5.5 | 0.0023 |  |
| [CVE-2023-52871](https://patchblox.com/security/data/cve/CVE-2023-52871.md) | Routine | dtb-aarch64: Handle a second device without data corruption (bsc#1225534) | 5.5 | 0.0023 |  |
| [CVE-2024-35900](https://patchblox.com/security/data/cve/CVE-2024-35900.md) | Routine | kernel-doc: Important: kernel security update | 5.5 | 0.0023 |  |
| [CVE-2024-35925](https://patchblox.com/security/data/cve/CVE-2024-35925.md) | Routine | bpftool: Important: kernel security update | 5.5 | 0.0023 |  |
| [CVE-2024-36930](https://patchblox.com/security/data/cve/CVE-2024-36930.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2024-26623](https://patchblox.com/security/data/cve/CVE-2024-26623.md) | Routine | dtb-aarch64: pds_core: Prevent race issues involving the adminq (bsc#1221057). | 4.7 | 0.0023 |  |
| [CVE-2023-52876](https://patchblox.com/security/data/cve/CVE-2023-52876.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2024-26785](https://patchblox.com/security/data/cve/CVE-2024-26785.md) | Routine | kernel-livepatch-SLE15-SP6-RT_Update_1: iommufd: Fix protection fault in iommufd_test_syz_conv_iova (bsc#1222779). | 5.5 | 0.0023 |  |
| [CVE-2024-36900](https://patchblox.com/security/data/cve/CVE-2024-36900.md) | Routine | dtb-aarch64: net: hns3: fix kernel crash when devlink reload during initialization (bsc#1225726). | 5.5 | 0.0023 |  |
| [CVE-2024-36917](https://patchblox.com/security/data/cve/CVE-2024-36917.md) | Routine | kernel-rt-debug-modules-extra: (CVE-2024-36016) * (CVE-2023-52762) * (CVE-2024-27025) * (CVE-2021-47548) * (CVE-2023-52619) | 5.5 | 0.0023 |  |
| [CVE-2024-36937](https://patchblox.com/security/data/cve/CVE-2024-36937.md) | Routine | kernel-zfcpdump: xdp: use flags field to disambiguate broadcast redirect (bsc#1225834). | 5.5 | 0.0023 |  |
| [CVE-2024-38575](https://patchblox.com/security/data/cve/CVE-2024-38575.md) | Routine | kernel-rt-debug-modules: (CVE-2024-36917) * (CVE-2024-36016) * (CVE-2023-52762) * (CVE-2024-27025) * (CVE-2021-47548) * (CVE-2023-52619) | 5.5 | 0.0023 |  |
| [CVE-2024-26750](https://patchblox.com/security/data/cve/CVE-2024-26750.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0022 |  |
| [CVE-2024-39371](https://patchblox.com/security/data/cve/CVE-2024-39371.md) | Routine | dtb-aarch64: io_uring: check for non-NULL file pointer in io_file_can_poll() (bsc#1226990). | 5.5 | 0.0022 |  |
| [CVE-2024-39474](https://patchblox.com/security/data/cve/CVE-2024-39474.md) | Routine | kernel-default: mm/vmalloc: fix vmalloc which may return null if called with __GFP_NOFAIL (bsc#1227434). | 5.5 | 0.0022 |  |
| [CVE-2024-39490](https://patchblox.com/security/data/cve/CVE-2024-39490.md) | Routine | kernel-livepatch-SLE15-SP6-RT_Update_1: ipv6: sr: fix missing sk_buff release in seg6_input_core (bsc#1227626). | 6.2 | 0.0022 |  |
| [CVE-2023-52869](https://patchblox.com/security/data/cve/CVE-2023-52869.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0022 |  |
| [CVE-2023-52873](https://patchblox.com/security/data/cve/CVE-2023-52873.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0022 |  |
| [CVE-2024-26814](https://patchblox.com/security/data/cve/CVE-2024-26814.md) | Routine | dtb-aarch64: vfio/fsl-mc: Block calling interrupt handler without trigger (bsc#1222810). | 5.5 | 0.0022 |  |
| [CVE-2024-36949](https://patchblox.com/security/data/cve/CVE-2024-36949.md) | Routine | kernel-syms: Security update for the Linux Kernel | 4.7 | 0.0022 |  |
| [CVE-2024-27402](https://patchblox.com/security/data/cve/CVE-2024-27402.md) | Routine | kernel-64kb: phonet/pep: fix racy skb_queue_empty() use (bsc#1224414). | 5.8 | 0.0022 |  |
| [CVE-2024-26780](https://patchblox.com/security/data/cve/CVE-2024-26780.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0022 |  |
| [CVE-2024-27064](https://patchblox.com/security/data/cve/CVE-2024-27064.md) | Routine | dtb-aarch64: netfilter: nf_tables: Fix a memory leak in nf_tables_updchain (bsc#1223740). | 5.5 | 0.0022 |  |
| [CVE-2024-36951](https://patchblox.com/security/data/cve/CVE-2024-36951.md) | Routine | kernel-obs-build: Security update for the Linux Kernel | 5.5 | 0.0022 |  |
| [CVE-2024-38390](https://patchblox.com/security/data/cve/CVE-2024-38390.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0022 |  |
| [CVE-2024-38622](https://patchblox.com/security/data/cve/CVE-2024-38622.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0022 |  |
| [CVE-2024-36952](https://patchblox.com/security/data/cve/CVE-2024-36952.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 4.7 | 0.0022 |  |
| [CVE-2024-36965](https://patchblox.com/security/data/cve/CVE-2024-36965.md) | Routine | kernel-syms: Security update for the Linux Kernel | 5.5 | 0.0022 |  |
| [CVE-2024-36977](https://patchblox.com/security/data/cve/CVE-2024-36977.md) | Routine | rv: kernel: usb: dwc3: Wait unconditionally after issuing EndXfer command | 5.5 | 0.0022 |  |
| [CVE-2024-38566](https://patchblox.com/security/data/cve/CVE-2024-38566.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0022 |  |
| [CVE-2024-39481](https://patchblox.com/security/data/cve/CVE-2024-39481.md) | Routine | kernel-syms: Security update for the Linux Kernel | 5.5 | 0.0022 |  |
| [CVE-2024-35827](https://patchblox.com/security/data/cve/CVE-2024-35827.md) | Routine | dtb-aarch64: io_uring/net: fix overflow check in io_recvmsg_mshot_prep() (bsc#1224606). | 5.5 | 0.0022 |  |
| [CVE-2023-52870](https://patchblox.com/security/data/cve/CVE-2023-52870.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 4.1 | 0.0022 |  |
| [CVE-2024-36008](https://patchblox.com/security/data/cve/CVE-2024-36008.md) | Routine | kernel-docs: ipv4: check for NULL idev in ip_route_use_hint() (bsc#1224540). | 5.5 | 0.0021 |  |
| [CVE-2024-38385](https://patchblox.com/security/data/cve/CVE-2024-38385.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2024-36969](https://patchblox.com/security/data/cve/CVE-2024-36969.md) | Routine | kernel-syms-azure: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2024-35934](https://patchblox.com/security/data/cve/CVE-2024-35934.md) | Routine | dtb-aarch64: net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list() (bsc#1224641) | 5.5 | 0.0021 |  |
| [CVE-2024-36967](https://patchblox.com/security/data/cve/CVE-2024-36967.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2024-38602](https://patchblox.com/security/data/cve/CVE-2024-38602.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2024-27019](https://patchblox.com/security/data/cve/CVE-2024-27019.md) | Routine | bpftool: Important: kernel security update | 5.5 | 0.0021 |  |
| [CVE-2024-35908](https://patchblox.com/security/data/cve/CVE-2024-35908.md) | Routine | dtb-aarch64: tls: get psock ref after taking rxlock to avoid leak (bsc#1224490) | 5.5 | 0.0021 |  |
| [CVE-2024-35942](https://patchblox.com/security/data/cve/CVE-2024-35942.md) | Routine | kernel-source-azure: pmdomain: imx8mp-blk-ctrl: imx8mp_blk: Add fdcc clock to hdmimix domain (bsc#1224589). | 5.5 | 0.0021 |  |
| [CVE-2024-36479](https://patchblox.com/security/data/cve/CVE-2024-36479.md) | Routine | kernel-livepatch-SLE15-SP6-RT_Update_1: fpga: bridge: add owner module and take its refcount (bsc#1226949). | 5.5 | 0.0021 |  |
| [CVE-2024-37021](https://patchblox.com/security/data/cve/CVE-2024-37021.md) | Routine | fpga: manager: add owner module and take its refcount | 5.5 | 0.0021 |  |
| [CVE-2024-38603](https://patchblox.com/security/data/cve/CVE-2024-38603.md) | Routine | dtb-aarch64: drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset() (bsc#1226842). | 5.5 | 0.0021 |  |
| [CVE-2024-39466](https://patchblox.com/security/data/cve/CVE-2024-39466.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2024-39473](https://patchblox.com/security/data/cve/CVE-2024-39473.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2024-36975](https://patchblox.com/security/data/cve/CVE-2024-36975.md) | Routine | kernel-azure: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2024-38594](https://patchblox.com/security/data/cve/CVE-2024-38594.md) | Routine | dtb-aarch64: net: stmmac: move the EST lock to struct stmmac_priv (bsc#1226734). | 5.5 | 0.0021 |  |
| [CVE-2024-38595](https://patchblox.com/security/data/cve/CVE-2024-38595.md) | Routine | net/mlx5: Fix peer devlink set for SF representor devlink port | 5.5 | 0.0021 |  |
| [CVE-2024-38636](https://patchblox.com/security/data/cve/CVE-2024-38636.md) | Routine | dtb-aarch64: f2fs: multidev: fix to recognize valid zero block address (bsc#1226879). | 5.5 | 0.0021 |  |
| [CVE-2024-38617](https://patchblox.com/security/data/cve/CVE-2024-38617.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2023-52783](https://patchblox.com/security/data/cve/CVE-2023-52783.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2024-35831](https://patchblox.com/security/data/cve/CVE-2024-35831.md) | Routine | dtb-aarch64: io_uring: Fix release of pinned pages when __io_uaddr_map fails (bsc#1224698). | 5.5 | 0.0021 |  |
| [CVE-2024-38604](https://patchblox.com/security/data/cve/CVE-2024-38604.md) | Routine | dtb-aarch64: block: refine the EOF check in blkdev_iomap_begin (bsc#1226866). | 5.5 | 0.0021 |  |
| [CVE-2024-35957](https://patchblox.com/security/data/cve/CVE-2024-35957.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0020 |  |
| [CVE-2024-38598](https://patchblox.com/security/data/cve/CVE-2024-38598.md) | Routine | kernel-headers: Important: kernel security update | 5.5 | 0.0020 |  |
| [CVE-2024-40953](https://patchblox.com/security/data/cve/CVE-2024-40953.md) | Routine | dtb-aarch64: KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin() (bsc#1227806). | 4.7 | 0.0020 |  |
| [CVE-2024-38600](https://patchblox.com/security/data/cve/CVE-2024-38600.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0019 |  |
| [CVE-2024-36924](https://patchblox.com/security/data/cve/CVE-2024-36924.md) | Routine | kernel-obs-build: Security update for the Linux Kernel | 5.5 | 0.0019 |  |
| [CVE-2024-38553](https://patchblox.com/security/data/cve/CVE-2024-38553.md) | Routine | dtb-aarch64: net: fec: remove .ndo_poll_controller to avoid deadlock (bsc#1226744). | 5.5 | 0.0019 |  |
| [CVE-2024-27419](https://patchblox.com/security/data/cve/CVE-2024-27419.md) | Routine | dtb-aarch64: Fixed data-races around sysctl_net_busy_read (bsc#1224759) | 4.7 | 0.0019 |  |
| [CVE-2024-38634](https://patchblox.com/security/data/cve/CVE-2024-38634.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0019 |  |
| [CVE-2024-35848](https://patchblox.com/security/data/cve/CVE-2024-35848.md) | Routine | dtb-aarch64: eeprom: at24: fix memory corruption race condition (bsc#1224612). | 5.5 | 0.0019 |  |
| [CVE-2024-38780](https://patchblox.com/security/data/cve/CVE-2024-38780.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0019 |  |
| [CVE-2024-35926](https://patchblox.com/security/data/cve/CVE-2024-35926.md) | Routine | dtb-aarch64: crypto: iaa - Fix async_disable descriptor leak (bsc#1224655). | 5.5 | 0.0018 |  |
| [CVE-2024-38557](https://patchblox.com/security/data/cve/CVE-2024-38557.md) | Routine | dtb-aarch64: net/mlx5: Reload only IB representors upon lag disable/enable (bsc#1226781). | 5.5 | 0.0018 |  |
| [CVE-2024-35805](https://patchblox.com/security/data/cve/CVE-2024-35805.md) | Routine | dtb-aarch64: dm snapshot: fix lockup in dm_exception_table_exit (bsc#1224743). | 5.5 | 0.0018 |  |
| [CVE-2023-52749](https://patchblox.com/security/data/cve/CVE-2023-52749.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 4.7 | 0.0018 |  |
| [CVE-2024-36882](https://patchblox.com/security/data/cve/CVE-2024-36882.md) | Routine | kernel-source-azure: mm: use memalloc_nofs_save() in page_cache_ra_order() (bsc#1225723). | 5.5 | 0.0018 |  |
| [CVE-2023-52786](https://patchblox.com/security/data/cve/CVE-2023-52786.md) | Routine | dtb-aarch64: ext4: fix racy may inline data check in dio write (bsc#1224939). | 4.7 | 0.0018 |  |
| [CVE-2024-36010](https://patchblox.com/security/data/cve/CVE-2024-36010.md) | Routine | kernel-rt: RHSA-2024:5102: kernel-rt security update (Important) | 5.5 | 0.0018 |  |
| [CVE-2024-38597](https://patchblox.com/security/data/cve/CVE-2024-38597.md) | Routine | dtb-aarch64: eth: sungem: remove .ndo_poll_controller to avoid deadlocks (bsc#1226749). | 5.5 | 0.0018 |  |
| [CVE-2023-52884](https://patchblox.com/security/data/cve/CVE-2023-52884.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 4.4 | 0.0018 |  |
| [CVE-2024-38601](https://patchblox.com/security/data/cve/CVE-2024-38601.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 4.7 | 0.0018 |  |
| [CVE-2024-37354](https://patchblox.com/security/data/cve/CVE-2024-37354.md) | Routine | dtb-aarch64: btrfs: fix crash on racing fsync and size-extending write into prealloc (bsc#1227101). | 5.5 | 0.0017 |  |
| [CVE-2024-38591](https://patchblox.com/security/data/cve/CVE-2024-38591.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0017 |  |
| [CVE-2023-52767](https://patchblox.com/security/data/cve/CVE-2023-52767.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0017 |  |
| [CVE-2024-35892](https://patchblox.com/security/data/cve/CVE-2024-35892.md) | Routine | dtb-aarch64: net/sched: fix lockdep splat in qdisc_tree_reduce_backlog() (bsc#1224515). | 5.5 | 0.0017 |  |
| [CVE-2024-36003](https://patchblox.com/security/data/cve/CVE-2024-36003.md) | Routine | dtb-aarch64: ice: fix LAG and VF lock dependency in ice_reset_vf() (bsc#1224544). | 5.5 | 0.0017 |  |
| [CVE-2024-36944](https://patchblox.com/security/data/cve/CVE-2024-36944.md) | Routine | kernel-livepatch-SLE15-SP6_Update_1: Security update for the Linux Kernel | 5.5 | 0.0017 |  |
| [CVE-2024-39296](https://patchblox.com/security/data/cve/CVE-2024-39296.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 4.7 | 0.0017 |  |
| [CVE-2024-36024](https://patchblox.com/security/data/cve/CVE-2024-36024.md) | Routine | drm/amd/display: Disable idle reallow as part of command/gpint execution | 4.7 | 0.0016 |  |
| [CVE-2024-36923](https://patchblox.com/security/data/cve/CVE-2024-36923.md) | Routine | kernel-livepatch-SLE15-SP6-RT_Update_1: fs/9p: fix uninitialized values during inode evict (bsc#1225815). | 5.5 | n/a |  |
| [CVE-2024-36942](https://patchblox.com/security/data/cve/CVE-2024-36942.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  Bluetooth: qca: fix firmware check error path  A... | 5.5 | n/a |  |
| [CVE-2024-37353](https://patchblox.com/security/data/cve/CVE-2024-37353.md) | Routine | dtb-aarch64: virtio: fixed a double free in vp_del_vqs() (bsc#1226875). | 4.4 | n/a |  |
| [CVE-2024-38391](https://patchblox.com/security/data/cve/CVE-2024-38391.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 4.4 | n/a |  |
| [CVE-2024-39362](https://patchblox.com/security/data/cve/CVE-2024-39362.md) | Routine | kernel-azure: Security update for the Linux Kernel | 4.4 | n/a |  |
| [CVE-2023-52759](https://patchblox.com/security/data/cve/CVE-2023-52759.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  gfs2: ignore negated quota changes  When lots of... | n/a | n/a |  |

---

Data as of 2026-11-11T01:43:54Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.