# SUSE-SU-2024:2973-1: Security update for 5 packages SUSE-SU-2024:2973-1, released August 20, 2024, fixes 783 CVEs across 5 products. One of them is being exploited (CVE-2024-36971); 1 on CISA KEV. Patch Radar priority: Patch now. - Web page: https://patchblox.com/security/fix/linux/suse-su-2024-2973-1 - Platform: Linux - Released: Aug 20, 2024 - Priority: Patch now (Closes CVE-2024-36971, exploited (CISA KEV)) - CVEs: 783, exploited: 1, on CISA KEV: 1 - Vendor advisory: https://osv.dev/vulnerability/SUSE-SU-2024:2973-1 ## Applies to | Product | Release | Fixed in | |---|---|---| | [kernel-livepatch-SLE15-SP6-RT_Update_1](https://patchblox.com/security/data/product/linux/kernel-livepatch-sle15-sp6-rt-update-1.md) | sles 15.6 | 1-150600.1.5.1 | | [kernel-rt](https://patchblox.com/security/data/product/linux/kernel-rt.md) | opensuse-leap 15.6 | 6.4.0-150600.10.5.1 | | [kernel-rt_debug](https://patchblox.com/security/data/product/linux/kernel-rt-debug-kernel-rt-debug.md) | opensuse-leap 15.6 | 6.4.0-150600.10.5.1 | | [kernel-source-rt](https://patchblox.com/security/data/product/linux/kernel-source-rt.md) | opensuse-leap 15.6 | 6.4.0-150600.10.5.1 | | [kernel-syms-rt](https://patchblox.com/security/data/product/linux/kernel-syms-rt.md) | opensuse-leap 15.6 | 6.4.0-150600.10.5.1 | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2024-36971](https://patchblox.com/security/data/cve/CVE-2024-36971.md) | Patch now | kernel-livepatch-SLE15-SP6-RT_Update_1: net: fix __dst_negative_advice() race (bsc#1226145). | 7.8 | 0.0270 | CISA KEV | | [CVE-2024-36912](https://patchblox.com/security/data/cve/CVE-2024-36912.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus: Track decrypted status in vm... | 9.6 | 0.0097 | | | [CVE-2024-36913](https://patchblox.com/security/data/cve/CVE-2024-36913.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus: Leak pages if set_memory_enc... | 9.3 | 0.0066 | | | [CVE-2024-35960](https://patchblox.com/security/data/cve/CVE-2024-35960.md) | High | dtb-aarch64: Security update for the Linux Kernel | 9.1 | 0.0141 | | | [CVE-2024-27405](https://patchblox.com/security/data/cve/CVE-2024-27405.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.5 | 0.0130 | | | [CVE-2023-52832](https://patchblox.com/security/data/cve/CVE-2023-52832.md) | High | dtb-aarch64: Security update for the Linux Kernel | 9.1 | 0.0126 | | | [CVE-2023-52735](https://patchblox.com/security/data/cve/CVE-2023-52735.md) | High | dtb-aarch64: Security update for the Linux Kernel | 9.1 | 0.0122 | | | [CVE-2024-35955](https://patchblox.com/security/data/cve/CVE-2024-35955.md) | High | dtb-aarch64: Security update for the Linux Kernel | 8.8 | 0.0118 | | | [CVE-2024-35845](https://patchblox.com/security/data/cve/CVE-2024-35845.md) | High | bpftool: Important: kernel security and bug fix update | 9.1 | 0.0117 | | | [CVE-2023-52798](https://patchblox.com/security/data/cve/CVE-2023-52798.md) | High | dtb-aarch64: Security update for the Linux Kernel | 8.8 | 0.0103 | | | [CVE-2024-38573](https://patchblox.com/security/data/cve/CVE-2024-38573.md) | High | kernel-tools-libs-devel: Important: kernel security update | 7.5 | 0.0100 | | | [CVE-2024-35857](https://patchblox.com/security/data/cve/CVE-2024-35857.md) | High | kernel-64kb: icmp: prevent possible NULL dereferences from icmp_build_probe() (bsc#1224619). | 7.5 | 0.0098 | | | [CVE-2024-36896](https://patchblox.com/security/data/cve/CVE-2024-36896.md) | High | kernel-livepatch-SLE15-SP6-RT_Update_1: Security update for the Linux Kernel | 9.1 | 0.0092 | | | [CVE-2024-38541](https://patchblox.com/security/data/cve/CVE-2024-38541.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: of: module: add buffer overflow check in of_moda... | 7.8 | 0.0090 | | | [CVE-2023-52776](https://patchblox.com/security/data/cve/CVE-2023-52776.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix dfs-radar and temperature even... | 8.8 | 0.0086 | | | [CVE-2024-38558](https://patchblox.com/security/data/cve/CVE-2024-38558.md) | High | dtb-aarch64: net: openvswitch: fix overwriting ct original tuple for ICMPv6 (bsc#1226783). | 7.8 | 0.0082 | | | [CVE-2023-52696](https://patchblox.com/security/data/cve/CVE-2023-52696.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.5 | 0.0082 | | | [CVE-2024-38587](https://patchblox.com/security/data/cve/CVE-2024-38587.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: speakup: Fix sizeof() vs ARRAY_SIZE() bug The "... | 7.8 | 0.0079 | | | [CVE-2024-27393](https://patchblox.com/security/data/cve/CVE-2024-27393.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: xen-netfront: Add missing skb_mark_for_recycle... | 7.5 | 0.0077 | | | [CVE-2024-38605](https://patchblox.com/security/data/cve/CVE-2024-38605.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: ALSA: core: Fix NULL module pointer assignment a... | 7.8 | 0.0075 | | | [CVE-2024-36916](https://patchblox.com/security/data/cve/CVE-2024-36916.md) | High | kernel-default-base: blk-iocost: avoid out of bounds shift (bsc#1225759). | 7.1 | 0.0073 | | | [CVE-2024-35853](https://patchblox.com/security/data/cve/CVE-2024-35853.md) | High | bpftool: Important: kernel security and bug fix update | 7.0 | 0.0073 | | | [CVE-2024-26854](https://patchblox.com/security/data/cve/CVE-2024-26854.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.5 | 0.0071 | | | [CVE-2024-26882](https://patchblox.com/security/data/cve/CVE-2024-26882.md) | High | dtb-aarch64: Fixed net/ip_tunnel to make sure to pull inner header in ip_tunnel_rcv() (bsc#1223034). | 7.8 | 0.0070 | | | [CVE-2024-35884](https://patchblox.com/security/data/cve/CVE-2024-35884.md) | High | dtb-aarch64: udp: do not accept non-tunnel GSO skbs landing in a tunnel (bsc#1224520). | 7.8 | 0.0069 | | | [CVE-2023-52669](https://patchblox.com/security/data/cve/CVE-2023-52669.md) | High | kernel-default: Security update for the Linux Kernel | 7.8 | 0.0068 | | | [CVE-2024-26665](https://patchblox.com/security/data/cve/CVE-2024-26665.md) | High | dtb-aarch64: tunnels: fix out of bounds access when building IPv6 PMTU error (bsc#1222328). | 7.8 | 0.0068 | | | [CVE-2024-38570](https://patchblox.com/security/data/cve/CVE-2024-38570.md) | High | dtb-aarch64: gfs2: Fix potential glock use-after-free on unmount (bsc#1226775). | 7.8 | 0.0068 | | | [CVE-2023-52775](https://patchblox.com/security/data/cve/CVE-2023-52775.md) | High | dtb-aarch64: net/smc: avoid data corruption caused by decline (bsc#1225088). | 7.8 | 0.0067 | | | [CVE-2024-35861](https://patchblox.com/security/data/cve/CVE-2024-35861.md) | High | dtb-aarch64: Fixed potential UAF in cifs_signal_cifsd_for_reconnect() (bsc#1224766). | 7.8 | 0.0066 | | | [CVE-2024-35862](https://patchblox.com/security/data/cve/CVE-2024-35862.md) | High | smb: client: fix potential UAF in smb2_is_network_name_deleted() | 7.8 | 0.0066 | | | [CVE-2024-35863](https://patchblox.com/security/data/cve/CVE-2024-35863.md) | High | kernel-zfcpdump: Fixed potential UAF in is_valid_oplock_break() (bsc#1224763). | 7.8 | 0.0066 | | | [CVE-2024-35864](https://patchblox.com/security/data/cve/CVE-2024-35864.md) | High | smb: client: fix potential UAF in smb2_is_valid_lease_break() | 7.8 | 0.0066 | | | [CVE-2024-38616](https://patchblox.com/security/data/cve/CVE-2024-38616.md) | High | dtb-aarch64: Security update for the Linux Kernel | 8.2 | 0.0065 | | | [CVE-2024-26826](https://patchblox.com/security/data/cve/CVE-2024-26826.md) | High | kernel-zfcpdump-modules-extra: kernel: mptcp: fix data re-injection from stale subflow | 7.0 | 0.0065 | | | [CVE-2024-26769](https://patchblox.com/security/data/cve/CVE-2024-26769.md) | High | kernel-azure: Security update for the Linux Kernel | 7.8 | 0.0064 | | | [CVE-2024-35865](https://patchblox.com/security/data/cve/CVE-2024-35865.md) | High | smb: client: fix potential UAF in smb2_is_valid_oplock_break() | 9.8 | 0.0063 | | | [CVE-2024-35835](https://patchblox.com/security/data/cve/CVE-2024-35835.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: fix a double-free in arfs_create_grou... | 7.8 | 0.0063 | | | [CVE-2024-36904](https://patchblox.com/security/data/cve/CVE-2024-36904.md) | High | kernel-docs: tcp: Use refcount_inc_not_zero() in tcp_twsk_unique() (bsc#1225732). | 7.8 | 0.0061 | | | [CVE-2023-52881](https://patchblox.com/security/data/cve/CVE-2023-52881.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.0 | 0.0061 | | | [CVE-2024-26857](https://patchblox.com/security/data/cve/CVE-2024-26857.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: geneve: make sure to pull inner header in geneve... | 7.3 | 0.0061 | | | [CVE-2023-52801](https://patchblox.com/security/data/cve/CVE-2023-52801.md) | High | dtb-aarch64: Security update for the Linux Kernel | 8.8 | 0.0060 | | | [CVE-2024-35854](https://patchblox.com/security/data/cve/CVE-2024-35854.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrum_acl_tcam: Fix possible use-after... | 7.8 | 0.0058 | | | [CVE-2023-52883](https://patchblox.com/security/data/cve/CVE-2023-52883.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.5 | 0.0056 | | | [CVE-2024-36972](https://patchblox.com/security/data/cve/CVE-2024-36972.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: af_unix: Update unix_sk(sk)->oob_skb under sk_re... | 7.8 | 0.0052 | | | [CVE-2023-51780](https://patchblox.com/security/data/cve/CVE-2023-51780.md) | High | dtb-aarch64: Security update for the Linux Kernel | 8.0 | 0.0051 | | | [CVE-2024-36013](https://patchblox.com/security/data/cve/CVE-2024-36013.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix slab-use-after-free in l2c... | 8.8 | 0.0048 | | | [CVE-2024-35999](https://patchblox.com/security/data/cve/CVE-2024-35999.md) | High | smb3: missing lock when picking channel | 7.5 | 0.0038 | | | [CVE-2024-35969](https://patchblox.com/security/data/cve/CVE-2024-35969.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: ipv6: fix race condition between ipv6_get_ifaddr... | 8.8 | 0.0038 | | | [CVE-2024-38381](https://patchblox.com/security/data/cve/CVE-2024-38381.md) | High | kernel-source-azure: Security update for the Linux Kernel | 7.1 | 0.0038 | | | [CVE-2024-35789](https://patchblox.com/security/data/cve/CVE-2024-35789.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0036 | | | [CVE-2024-36032](https://patchblox.com/security/data/cve/CVE-2024-36032.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.1 | 0.0035 | | | [CVE-2024-36922](https://patchblox.com/security/data/cve/CVE-2024-36922.md) | High | wifi: iwlwifi: read txq->read_ptr under lock | 7.8 | 0.0035 | | | [CVE-2024-36921](https://patchblox.com/security/data/cve/CVE-2024-36921.md) | High | wifi: iwlwifi: mvm: guard against invalid STA ID on removal | 7.8 | 0.0035 | | | [CVE-2024-35937](https://patchblox.com/security/data/cve/CVE-2024-35937.md) | High | wifi: cfg80211: check A-MSDU format more carefully | 7.1 | 0.0034 | | | [CVE-2024-35887](https://patchblox.com/security/data/cve/CVE-2024-35887.md) | High | ax25: fix use-after-free bugs caused by ax25_ds_del_timer | 7.8 | 0.0034 | | | [CVE-2023-52769](https://patchblox.com/security/data/cve/CVE-2023-52769.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0034 | | | [CVE-2024-27000](https://patchblox.com/security/data/cve/CVE-2024-27000.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0033 | | | [CVE-2024-26856](https://patchblox.com/security/data/cve/CVE-2024-26856.md) | High | dtb-aarch64: Fixed use-after-free inside sparx5_del_mact_entry (bsc#1223052). | 7.8 | 0.0032 | | | [CVE-2024-40901](https://patchblox.com/security/data/cve/CVE-2024-40901.md) | High | dtb-aarch64: scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory (bsc#1227762). | 7.8 | 0.0031 | | | [CVE-2024-36934](https://patchblox.com/security/data/cve/CVE-2024-36934.md) | High | dtb-aarch64: bna: ensure the copied buf is NUL terminated (bsc#1225760). | 7.8 | 0.0031 | | | [CVE-2024-39502](https://patchblox.com/security/data/cve/CVE-2024-39502.md) | High | kernel-tools: RHSA-2024:5101: kernel security update (Important) | 7.8 | 0.0031 | | | [CVE-2024-39494](https://patchblox.com/security/data/cve/CVE-2024-39494.md) | High | dtb-aarch64: ima: Fix use-after-free on a dentry's dname.name (bsc#1227716). | 7.8 | 0.0031 | | | [CVE-2024-40906](https://patchblox.com/security/data/cve/CVE-2024-40906.md) | High | dtb-aarch64: net/mlx5: Always stop health timer during driver removal (bsc#1227763). | 7.8 | 0.0031 | | | [CVE-2024-38552](https://patchblox.com/security/data/cve/CVE-2024-38552.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0030 | | | [CVE-2024-27008](https://patchblox.com/security/data/cve/CVE-2024-27008.md) | High | kernel-source-azure: Security update for the Linux Kernel | 7.8 | 0.0030 | | | [CVE-2024-27401](https://patchblox.com/security/data/cve/CVE-2024-27401.md) | High | kernel-zfcpdump: Fixed user_length taken into account when fetching packet contents (bsc#1224181). | 7.1 | 0.0030 | | | [CVE-2024-26793](https://patchblox.com/security/data/cve/CVE-2024-26793.md) | High | dtb-aarch64: Fixed an use-after-free and null-ptr-deref in gtp_newlink() in gtp (bsc#1222428). | 7.8 | 0.0029 | | | [CVE-2024-39496](https://patchblox.com/security/data/cve/CVE-2024-39496.md) | High | dtb-aarch64: btrfs: zoned: fix use-after-free due to race with dev replace (bsc#1227719). | 7.8 | 0.0029 | | | [CVE-2024-36902](https://patchblox.com/security/data/cve/CVE-2024-36902.md) | High | kernel-64kb: ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action() (bsc#1225719). | 7.8 | 0.0029 | | | [CVE-2023-52813](https://patchblox.com/security/data/cve/CVE-2023-52813.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.0 | 0.0029 | | | [CVE-2024-36960](https://patchblox.com/security/data/cve/CVE-2024-36960.md) | High | kernel-zfcpdump: Security update for the Linux Kernel | 7.1 | 0.0029 | | | [CVE-2024-35886](https://patchblox.com/security/data/cve/CVE-2024-35886.md) | High | dtb-aarch64: ipv6: Fix infinite recursion in fib6_dump_done() (bsc#1224670). | 7.8 | 0.0028 | | | [CVE-2024-26982](https://patchblox.com/security/data/cve/CVE-2024-26982.md) | High | kernel-modules-extra: Important: kernel security and bug fix update | 7.1 | 0.0028 | | | [CVE-2024-26988](https://patchblox.com/security/data/cve/CVE-2024-26988.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0028 | | | [CVE-2024-36978](https://patchblox.com/security/data/cve/CVE-2024-36978.md) | High | kernel-devel: Important: kernel security update | 7.8 | 0.0028 | | | [CVE-2023-52675](https://patchblox.com/security/data/cve/CVE-2023-52675.md) | High | kernel-obs-build: Security update for the Linux Kernel | 7.0 | 0.0028 | | | [CVE-2024-26739](https://patchblox.com/security/data/cve/CVE-2024-26739.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0028 | | | [CVE-2024-26928](https://patchblox.com/security/data/cve/CVE-2024-26928.md) | High | dtb-aarch64: Fix potential UAF in cifs_debug_files_proc_show() (bsc#1223532). | 7.8 | 0.0028 | | | [CVE-2024-38621](https://patchblox.com/security/data/cve/CVE-2024-38621.md) | High | kernel-syms-azure: Security update for the Linux Kernel | 7.1 | 0.0028 | | | [CVE-2023-52664](https://patchblox.com/security/data/cve/CVE-2023-52664.md) | High | kernel-docs: Security update for the Linux Kernel | 7.8 | 0.0028 | | | [CVE-2024-26981](https://patchblox.com/security/data/cve/CVE-2024-26981.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0027 | | | [CVE-2024-27013](https://patchblox.com/security/data/cve/CVE-2024-27013.md) | High | kernel-syms: Fixed tun limit printing rate when illegal packet received by tun device (bsc#1223745). | 7.8 | 0.0027 | | | [CVE-2024-27022](https://patchblox.com/security/data/cve/CVE-2024-27022.md) | High | dtb-aarch64: Fixed linking file vma until vma is fully initialized (bsc#1223774). | 7.8 | 0.0027 | | | [CVE-2024-40998](https://patchblox.com/security/data/cve/CVE-2024-40998.md) | High | dtb-aarch64: ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() (bsc#1227866). | 7.8 | 0.0027 | | | [CVE-2023-52667](https://patchblox.com/security/data/cve/CVE-2023-52667.md) | High | kernel-default: Security update for the Linux Kernel | 7.8 | 0.0027 | | | [CVE-2023-52864](https://patchblox.com/security/data/cve/CVE-2023-52864.md) | High | kernel-rt-debug-devel: kernel: platform/x86: wmi: Fix opening of char device | 7.8 | 0.0027 | | | [CVE-2024-26704](https://patchblox.com/security/data/cve/CVE-2024-26704.md) | High | dtb-aarch64: Fixed a double-free of blocks due to wrong extents moved_len in ext4 (bsc#1222422). | 7.8 | 0.0027 | | | [CVE-2024-40960](https://patchblox.com/security/data/cve/CVE-2024-40960.md) | High | dtb-aarch64: ipv6: prevent possible NULL dereference in rt6_probe() (bsc#1227813). | 7.8 | 0.0027 | | | [CVE-2024-35867](https://patchblox.com/security/data/cve/CVE-2024-35867.md) | High | dtb-aarch64: Fixed potential UAF in cifs_stats_proc_show() (bsc#1224664). | 7.8 | 0.0027 | | | [CVE-2024-26925](https://patchblox.com/security/data/cve/CVE-2024-26925.md) | High | kernel-debug-core: Important: kernel security update | 7.0 | 0.0027 | | | [CVE-2024-26772](https://patchblox.com/security/data/cve/CVE-2024-26772.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: ext4: avoid allocating blocks from corrupted gro... | 7.8 | 0.0027 | | | [CVE-2024-36016](https://patchblox.com/security/data/cve/CVE-2024-36016.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: tty: n_gsm: fix possible out-of-bounds in gsm0_r... | 7.8 | 0.0027 | | | [CVE-2023-52827](https://patchblox.com/security/data/cve/CVE-2023-52827.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.1 | 0.0026 | | | [CVE-2024-26674](https://patchblox.com/security/data/cve/CVE-2024-26674.md) | High | dtb-aarch64: Revert to _ASM_EXTABLE_UA() for {get,put}_user() fixups (bsc#1222378). | 7.1 | 0.0026 | | | [CVE-2023-52829](https://patchblox.com/security/data/cve/CVE-2023-52829.md) | High | dtb-aarch64: Security update for the Linux Kernel | 8.4 | 0.0026 | | | [CVE-2024-27065](https://patchblox.com/security/data/cve/CVE-2024-27065.md) | High | kernel-rt: RHSA-2024:5102: kernel-rt security update (Important) | 7.8 | 0.0026 | | | [CVE-2024-38578](https://patchblox.com/security/data/cve/CVE-2024-38578.md) | High | dtb-aarch64: ecryptfs: Fix buffer size for tag 66 packet (bsc#1226634,). | 7.8 | 0.0026 | | | [CVE-2023-52810](https://patchblox.com/security/data/cve/CVE-2023-52810.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0026 | | | [CVE-2024-38555](https://patchblox.com/security/data/cve/CVE-2024-38555.md) | High | kernel-cross-headers: Important: kernel security update | 7.8 | 0.0026 | | | [CVE-2023-52812](https://patchblox.com/security/data/cve/CVE-2023-52812.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0026 | | | [CVE-2024-36901](https://patchblox.com/security/data/cve/CVE-2024-36901.md) | High | kernel-livepatch-SLE15-SP6-RT_Update_1: ipv6: prevent NULL dereference in ip6_output() (bsc#1225711) | 7.8 | 0.0026 | | | [CVE-2024-35966](https://patchblox.com/security/data/cve/CVE-2024-35966.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.1 | 0.0026 | | | [CVE-2023-52503](https://patchblox.com/security/data/cve/CVE-2023-52503.md) | High | dtb-aarch64: Fixed tee/amdtee use-after-free vulnerability in amdtee_close_session (bsc#1220915). | 7.0 | 0.0026 | | | [CVE-2024-26654](https://patchblox.com/security/data/cve/CVE-2024-26654.md) | High | dtb-aarch64: Fixed use after free in ALSA/sh/aica (bsc#1222304). | 7.0 | 0.0026 | | | [CVE-2024-38556](https://patchblox.com/security/data/cve/CVE-2024-38556.md) | High | dtb-aarch64: net/mlx5: Add a timeout to acquire the command queue semaphore (bsc#1226774). | 7.8 | 0.0026 | | | [CVE-2024-40935](https://patchblox.com/security/data/cve/CVE-2024-40935.md) | High | dtb-aarch64: cachefiles: flush all requests after setting CACHEFILES_DEAD (bsc#1227797). | 7.8 | 0.0026 | | | [CVE-2024-40940](https://patchblox.com/security/data/cve/CVE-2024-40940.md) | High | kernel-zfcpdump: net/mlx5: Fix tainted pointer delete is case of flow rules creation fail (bsc#1227800). | 7.8 | 0.0026 | | | [CVE-2024-35976](https://patchblox.com/security/data/cve/CVE-2024-35976.md) | High | kernel-syms: Validate user input for XDP_{UMEM\|COMPLETION}_FILL_RING (bsc#1224575). | 7.1 | 0.0026 | | | [CVE-2024-35958](https://patchblox.com/security/data/cve/CVE-2024-35958.md) | High | kernel-zfcpdump: Security update for the Linux Kernel | 7.0 | 0.0026 | | | [CVE-2023-52867](https://patchblox.com/security/data/cve/CVE-2023-52867.md) | High | dtb-aarch64: Fixed possible buffer overflow (bsc#1225009). | 7.8 | 0.0026 | | | [CVE-2024-38583](https://patchblox.com/security/data/cve/CVE-2024-38583.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0026 | | | [CVE-2023-52799](https://patchblox.com/security/data/cve/CVE-2023-52799.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0026 | | | [CVE-2023-52804](https://patchblox.com/security/data/cve/CVE-2023-52804.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0026 | | | [CVE-2023-52818](https://patchblox.com/security/data/cve/CVE-2023-52818.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0026 | | | [CVE-2024-27410](https://patchblox.com/security/data/cve/CVE-2024-27410.md) | High | kernel-tools: Important: kernel security and bug fix update | 7.0 | 0.0026 | | | [CVE-2024-41090](https://patchblox.com/security/data/cve/CVE-2024-41090.md) | High | kernel-uek: ELSA-2024-12546: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0026 | | | [CVE-2024-41091](https://patchblox.com/security/data/cve/CVE-2024-41091.md) | High | kernel-uek: ELSA-2024-12546: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0026 | | | [CVE-2024-37078](https://patchblox.com/security/data/cve/CVE-2024-37078.md) | High | kernel-64kb: nilfs2: fix potential kernel bug due to lack of writeback flag waiting (bsc#1227066). | 7.1 | 0.0026 | | | [CVE-2024-35852](https://patchblox.com/security/data/cve/CVE-2024-35852.md) | High | bpftool: Important: kernel security and bug fix update | 7.0 | 0.0026 | | | [CVE-2023-52764](https://patchblox.com/security/data/cve/CVE-2023-52764.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0026 | | | [CVE-2023-52805](https://patchblox.com/security/data/cve/CVE-2023-52805.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0026 | | | [CVE-2023-52836](https://patchblox.com/security/data/cve/CVE-2023-52836.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0026 | | | [CVE-2024-35959](https://patchblox.com/security/data/cve/CVE-2024-35959.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.0 | 0.0026 | | | [CVE-2024-23848](https://patchblox.com/security/data/cve/CVE-2024-23848.md) | High | dtb-aarch64: Fixed media/cec for possible use-after-free in cec_queue_msg_fh (bsc#1219104). | 7.8 | 0.0025 | | | [CVE-2024-35877](https://patchblox.com/security/data/cve/CVE-2024-35877.md) | High | dtb-aarch64: Fixed VM_PAT handling in COW mappings (bsc#1224525). | 7.8 | 0.0025 | | | [CVE-2024-38579](https://patchblox.com/security/data/cve/CVE-2024-38579.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0025 | | | [CVE-2021-47432](https://patchblox.com/security/data/cve/CVE-2021-47432.md) | High | kernel-livepatch-SLE15-SP6_Update_2: Security update for the Linux Kernel | 7.8 | 0.0025 | | | [CVE-2023-52835](https://patchblox.com/security/data/cve/CVE-2023-52835.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0025 | | | [CVE-2024-26737](https://patchblox.com/security/data/cve/CVE-2024-26737.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Fix racing between bpf_timer_cancel_and_fre... | 7.8 | 0.0025 | | | [CVE-2024-26883](https://patchblox.com/security/data/cve/CVE-2024-26883.md) | High | dtb-aarch64: Fixed bpf stackmap overflow check on 32-bit arches (bsc#1223035). | 7.8 | 0.0025 | | | [CVE-2024-39463](https://patchblox.com/security/data/cve/CVE-2024-39463.md) | High | kernel-source: Security update for the Linux Kernel | 7.8 | 0.0025 | | | [CVE-2024-40931](https://patchblox.com/security/data/cve/CVE-2024-40931.md) | High | dtb-aarch64: mptcp: ensure snd_una is properly initialized on connect (bsc#1227780). | 7.8 | 0.0025 | | | [CVE-2024-26906](https://patchblox.com/security/data/cve/CVE-2024-26906.md) | High | python3-perf: kernel: x86/mm: Disallow vsyscall page read for copy_from_kernel_nofault() | 7.0 | 0.0025 | | | [CVE-2023-52683](https://patchblox.com/security/data/cve/CVE-2023-52683.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0025 | | | [CVE-2024-38586](https://patchblox.com/security/data/cve/CVE-2024-38586.md) | High | kernel-rt-modules: kernel: r8169: Fix possible ring buffer corruption on fragmented Tx packets. | 7.8 | 0.0025 | | | [CVE-2024-35849](https://patchblox.com/security/data/cve/CVE-2024-35849.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.1 | 0.0025 | | | [CVE-2024-35964](https://patchblox.com/security/data/cve/CVE-2024-35964.md) | High | dtb-aarch64: Fixed not validating setsockopt user input (bsc#1224581). | 7.1 | 0.0025 | | | [CVE-2024-36915](https://patchblox.com/security/data/cve/CVE-2024-36915.md) | High | kernel-azure: nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies (bsc#1225758). | 7.1 | 0.0025 | | | [CVE-2023-52686](https://patchblox.com/security/data/cve/CVE-2023-52686.md) | High | kernel-default-base: Security update for the Linux Kernel | 7.0 | 0.0025 | | | [CVE-2024-26625](https://patchblox.com/security/data/cve/CVE-2024-26625.md) | High | dtb-aarch64: Call sock_orphan() at release time (bsc#1221086) | 7.8 | 0.0025 | | | [CVE-2024-26884](https://patchblox.com/security/data/cve/CVE-2024-26884.md) | High | dtb-aarch64: Fixed bpf hashtab overflow check on 32-bit arches (bsc#1223189). | 7.8 | 0.0025 | | | [CVE-2024-38619](https://patchblox.com/security/data/cve/CVE-2024-38619.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0025 | | | [CVE-2024-38627](https://patchblox.com/security/data/cve/CVE-2024-38627.md) | High | kernel-modules-extra: RHSA-2024:5101: kernel security update (Important) | 7.8 | 0.0025 | | | [CVE-2024-38630](https://patchblox.com/security/data/cve/CVE-2024-38630.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0025 | | | [CVE-2024-39469](https://patchblox.com/security/data/cve/CVE-2024-39469.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.1 | 0.0025 | | | [CVE-2024-26855](https://patchblox.com/security/data/cve/CVE-2024-26855.md) | High | dtb-aarch64: Fixed net/ice potential NULL pointer dereference in ice_bridge_setlink() (bsc#1223051). | 7.8 | 0.0025 | | | [CVE-2024-26885](https://patchblox.com/security/data/cve/CVE-2024-26885.md) | High | dtb-aarch64: Fixed bpf DEVMAP_HASH overflow check on 32-bit arches (bsc#1223190). | 7.8 | 0.0025 | | | [CVE-2024-36015](https://patchblox.com/security/data/cve/CVE-2024-36015.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0025 | | | [CVE-2024-36880](https://patchblox.com/security/data/cve/CVE-2024-36880.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0025 | | | [CVE-2024-36914](https://patchblox.com/security/data/cve/CVE-2024-36914.md) | High | kernel-default: drm/amd/display: Skip on writeback when it's not applicable (bsc#1225757). | 7.8 | 0.0025 | | | [CVE-2023-52766](https://patchblox.com/security/data/cve/CVE-2023-52766.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.1 | 0.0025 | | | [CVE-2023-52809](https://patchblox.com/security/data/cve/CVE-2023-52809.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0025 | | | [CVE-2024-36910](https://patchblox.com/security/data/cve/CVE-2024-36910.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: uio_hv_generic: Don't free decrypted memory In... | 8.4 | 0.0025 | | | [CVE-2023-52679](https://patchblox.com/security/data/cve/CVE-2023-52679.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0025 | | | [CVE-2023-52691](https://patchblox.com/security/data/cve/CVE-2023-52691.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0025 | | | [CVE-2023-52807](https://patchblox.com/security/data/cve/CVE-2023-52807.md) | High | dtb-aarch64: Fixed out-of-bounds access may occur when coalesce info is read via debugfs (bsc#1225097). | 7.8 | 0.0025 | | | [CVE-2023-52837](https://patchblox.com/security/data/cve/CVE-2023-52837.md) | High | dtb-aarch64: nbd: fix uaf in nbd_open (bsc#1224935). | 7.8 | 0.0025 | | | [CVE-2024-35847](https://patchblox.com/security/data/cve/CVE-2024-35847.md) | High | bpftool: Important: kernel security update | 7.8 | 0.0025 | | | [CVE-2024-36940](https://patchblox.com/security/data/cve/CVE-2024-36940.md) | High | kernel-zfcpdump-core: Important: kernel security update | 7.8 | 0.0025 | | | [CVE-2024-26791](https://patchblox.com/security/data/cve/CVE-2024-26791.md) | High | dtb-aarch64: Fixed properly validate device names in btrfs (bsc#1222793) | 7.1 | 0.0025 | | | [CVE-2024-39487](https://patchblox.com/security/data/cve/CVE-2024-39487.md) | High | kernel-doc: RHSA-2024:5101: kernel security update (Important) | 7.1 | 0.0025 | | | [CVE-2023-52768](https://patchblox.com/security/data/cve/CVE-2023-52768.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: wifi: wilc1000: use vmm_table as array in wilc s... | 7.8 | 0.0025 | | | [CVE-2023-52796](https://patchblox.com/security/data/cve/CVE-2023-52796.md) | High | dtb-aarch64: Add ipvlan_route_v6_outbound() helper (bsc#1224930). | 7.8 | 0.0025 | | | [CVE-2024-26958](https://patchblox.com/security/data/cve/CVE-2024-26958.md) | High | kernel-debug-core: Important: kernel security update | 7.8 | 0.0025 | | | [CVE-2023-52640](https://patchblox.com/security/data/cve/CVE-2023-52640.md) | High | kernel-syms-azure: Fix oob in ntfs_listxattr The length of name cannot exceed the space occupied by ea (bsc#1222301). | 7.1 | 0.0025 | | | [CVE-2024-36004](https://patchblox.com/security/data/cve/CVE-2024-36004.md) | High | dtb-aarch64: i40e: Do not use WQ_MEM_RECLAIM flag for workqueue (bsc#1224545) | 7.0 | 0.0025 | | | [CVE-2023-52816](https://patchblox.com/security/data/cve/CVE-2023-52816.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0025 | | | [CVE-2024-26742](https://patchblox.com/security/data/cve/CVE-2024-26742.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0025 | | | [CVE-2024-38599](https://patchblox.com/security/data/cve/CVE-2024-38599.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.1 | 0.0025 | | | [CVE-2024-38659](https://patchblox.com/security/data/cve/CVE-2024-38659.md) | High | dtb-aarch64: enic: Validate length of nl attributes in enic_set_vf_port (bsc#1226883). | 7.1 | 0.0025 | | | [CVE-2024-26950](https://patchblox.com/security/data/cve/CVE-2024-26950.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: wireguard: netlink: access device through ctx in... | 7.8 | 0.0024 | | | [CVE-2024-27395](https://patchblox.com/security/data/cve/CVE-2024-27395.md) | High | kernel-rt-debug-kvm: Important: kernel-rt security update | 7.8 | 0.0024 | | | [CVE-2024-27396](https://patchblox.com/security/data/cve/CVE-2024-27396.md) | High | dtb-aarch64: Fixed Use-After-Free in gtp_dellink (bsc#1224096). | 7.8 | 0.0024 | | | [CVE-2023-52794](https://patchblox.com/security/data/cve/CVE-2023-52794.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.1 | 0.0024 | | | [CVE-2023-52842](https://patchblox.com/security/data/cve/CVE-2023-52842.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.1 | 0.0024 | | | [CVE-2023-52751](https://patchblox.com/security/data/cve/CVE-2023-52751.md) | High | kernel-default-base: smb: client: fix use-after-free in smb2_query_info_compound() (bsc#1225489). | 7.8 | 0.0024 | | | [CVE-2023-52772](https://patchblox.com/security/data/cve/CVE-2023-52772.md) | High | dtb-aarch64: Fixed use-after-free in unix_stream_read_actor() (bsc#1224989). | 7.8 | 0.0024 | | | [CVE-2023-52777](https://patchblox.com/security/data/cve/CVE-2023-52777.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0024 | | | [CVE-2024-39291](https://patchblox.com/security/data/cve/CVE-2024-39291.md) | High | kernel-zfcpdump: Security update for the Linux Kernel | 7.8 | 0.0024 | | | [CVE-2024-36955](https://patchblox.com/security/data/cve/CVE-2024-36955.md) | High | kernel-source: Security update for the Linux Kernel | 7.7 | 0.0024 | | | [CVE-2024-36019](https://patchblox.com/security/data/cve/CVE-2024-36019.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.1 | 0.0024 | | | [CVE-2024-35890](https://patchblox.com/security/data/cve/CVE-2024-35890.md) | High | kernel-syms-azure: gro: fix ownership transfer (bsc#1224516). | 7.0 | 0.0024 | | | [CVE-2023-52840](https://patchblox.com/security/data/cve/CVE-2023-52840.md) | High | dtb-aarch64: Fix use after free in rmi_unregister_function() (bsc#1224928). | 7.8 | 0.0024 | | | [CVE-2023-52854](https://patchblox.com/security/data/cve/CVE-2023-52854.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0024 | | | [CVE-2024-26961](https://patchblox.com/security/data/cve/CVE-2024-26961.md) | High | bpftool: Important: kernel security update | 7.8 | 0.0024 | | | [CVE-2024-35866](https://patchblox.com/security/data/cve/CVE-2024-35866.md) | High | kernel-docs: Fixed potential UAF in cifs_dump_full_key() (bsc#1224667). | 7.8 | 0.0024 | | | [CVE-2023-52795](https://patchblox.com/security/data/cve/CVE-2023-52795.md) | High | dtb-aarch64: Fixed use after free in vhost_vdpa_probe() (bsc#1225085). | 7.8 | 0.0024 | | | [CVE-2024-26957](https://patchblox.com/security/data/cve/CVE-2024-26957.md) | High | kernel-azure: Security update for the Linux Kernel | 7.8 | 0.0024 | | | [CVE-2024-35965](https://patchblox.com/security/data/cve/CVE-2024-35965.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.1 | 0.0024 | | | [CVE-2023-52781](https://patchblox.com/security/data/cve/CVE-2023-52781.md) | High | kernel-rt-debug-modules-extra: kernel: usb: , CVE-2023-52877) | 7.0 | 0.0024 | | | [CVE-2023-52817](https://patchblox.com/security/data/cve/CVE-2023-52817.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0024 | | | [CVE-2024-26944](https://patchblox.com/security/data/cve/CVE-2024-26944.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0024 | | | [CVE-2024-26989](https://patchblox.com/security/data/cve/CVE-2024-26989.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0024 | | | [CVE-2024-35963](https://patchblox.com/security/data/cve/CVE-2024-35963.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.1 | 0.0024 | | | [CVE-2024-26734](https://patchblox.com/security/data/cve/CVE-2024-26734.md) | High | kernel-64kb: devlink: fix possible use-after-free and memory leaks in devlink_init() (bsc#1222438). | 7.8 | 0.0024 | | | [CVE-2024-35967](https://patchblox.com/security/data/cve/CVE-2024-35967.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.1 | 0.0024 | | | [CVE-2023-52851](https://patchblox.com/security/data/cve/CVE-2023-52851.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0024 | | | [CVE-2024-26995](https://patchblox.com/security/data/cve/CVE-2024-26995.md) | High | kernel-livepatch-SLE15-SP6-RT_Update_1: Security update for the Linux Kernel | 7.8 | 0.0024 | | | [CVE-2024-35791](https://patchblox.com/security/data/cve/CVE-2024-35791.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0024 | | | [CVE-2024-35868](https://patchblox.com/security/data/cve/CVE-2024-35868.md) | High | dtb-aarch64: Fixed potential UAF in cifs_stats_proc_write() (bsc#1224678). | 7.8 | 0.0024 | | | [CVE-2024-38588](https://patchblox.com/security/data/cve/CVE-2024-38588.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0024 | | | [CVE-2024-39471](https://patchblox.com/security/data/cve/CVE-2024-39471.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0024 | | | [CVE-2024-26673](https://patchblox.com/security/data/cve/CVE-2024-26673.md) | High | dtb-aarch64: Fixed netfilter/nft_ct layer 3 and 4 protocol sanitization (bsc#1222368). | 7.1 | 0.0024 | | | [CVE-2024-35814](https://patchblox.com/security/data/cve/CVE-2024-35814.md) | High | dtb-aarch64: Security update for the Linux Kernel | 8.8 | 0.0024 | | | [CVE-2024-26945](https://patchblox.com/security/data/cve/CVE-2024-26945.md) | High | dtb-aarch64: Fixed nr_cpus < nr_iaa case (bsc#1223732). | 8.4 | 0.0024 | | | [CVE-2023-52868](https://patchblox.com/security/data/cve/CVE-2023-52868.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0024 | | | [CVE-2024-26842](https://patchblox.com/security/data/cve/CVE-2024-26842.md) | High | kernel-rt: Security update for the Linux Kernel | 7.8 | 0.0024 | | | [CVE-2024-35921](https://patchblox.com/security/data/cve/CVE-2024-35921.md) | High | dtb-aarch64: Fixed oops when HEVC init fails (bsc#1224477). | 7.8 | 0.0024 | | | [CVE-2024-36898](https://patchblox.com/security/data/cve/CVE-2024-36898.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0024 | | | [CVE-2024-36973](https://patchblox.com/security/data/cve/CVE-2024-36973.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0024 | | | [CVE-2024-38562](https://patchblox.com/security/data/cve/CVE-2024-38562.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0024 | | | [CVE-2023-52878](https://patchblox.com/security/data/cve/CVE-2023-52878.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.0 | 0.0024 | | | [CVE-2024-26656](https://patchblox.com/security/data/cve/CVE-2024-26656.md) | High | kernel-livepatch-SLE15-SP6-RT_Update_1: Security update for the Linux Kernel | 7.0 | 0.0024 | | | [CVE-2024-26996](https://patchblox.com/security/data/cve/CVE-2024-26996.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0024 | | | [CVE-2024-41014](https://patchblox.com/security/data/cve/CVE-2024-41014.md) | High | dtb-aarch64: xfs: add bounds checking to xlog_recover_process_data (bsc#1228408). | 7.8 | 0.0024 | | | [CVE-2024-38635](https://patchblox.com/security/data/cve/CVE-2024-38635.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.1 | 0.0024 | | | [CVE-2024-26951](https://patchblox.com/security/data/cve/CVE-2024-26951.md) | High | dtb-aarch64: Fixed wireguard/netlink check for dangling peer via is_dead instead of empty list (bsc#1223660). | 7.8 | 0.0023 | | | [CVE-2024-35944](https://patchblox.com/security/data/cve/CVE-2024-35944.md) | High | kernel-livepatch-SLE15-SP6-RT_Update_1: Fixed memcpy() run-time warning in dg_dispatch_as_host() (bsc#1224648). | 7.8 | 0.0023 | | | [CVE-2024-36895](https://patchblox.com/security/data/cve/CVE-2024-36895.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0023 | | | [CVE-2024-36906](https://patchblox.com/security/data/cve/CVE-2024-36906.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0023 | | | [CVE-2024-38384](https://patchblox.com/security/data/cve/CVE-2024-38384.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: fix list corruption from reorder of... | 7.8 | 0.0023 | | | [CVE-2024-38568](https://patchblox.com/security/data/cve/CVE-2024-38568.md) | High | dtb-aarch64: drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group (bsc#1226771). | 7.8 | 0.0023 | | | [CVE-2024-38569](https://patchblox.com/security/data/cve/CVE-2024-38569.md) | High | dtb-aarch64: drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group (bsc#1226772). | 7.8 | 0.0023 | | | [CVE-2024-38572](https://patchblox.com/security/data/cve/CVE-2024-38572.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.1 | 0.0023 | | | [CVE-2024-26786](https://patchblox.com/security/data/cve/CVE-2024-26786.md) | High | kernel-default-base: Security update for the Linux Kernel | 7.8 | 0.0023 | | | [CVE-2024-36931](https://patchblox.com/security/data/cve/CVE-2024-36931.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.1 | 0.0023 | | | [CVE-2024-36007](https://patchblox.com/security/data/cve/CVE-2024-36007.md) | High | kernel-modules-extra: Important: kernel security and bug fix update | 7.0 | 0.0023 | | | [CVE-2024-26983](https://patchblox.com/security/data/cve/CVE-2024-26983.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0023 | | | [CVE-2024-35838](https://patchblox.com/security/data/cve/CVE-2024-35838.md) | High | bpftool: Important: kernel security and bug fix update | 7.0 | 0.0023 | | | [CVE-2024-26836](https://patchblox.com/security/data/cve/CVE-2024-26836.md) | High | kernel-livepatch-SLE15-SP6-RT_Update_1: Fixed platform/x86/think-lmi password opcode ordering for workstations (bsc#1222968). | 7.8 | 0.0023 | | | [CVE-2024-38388](https://patchblox.com/security/data/cve/CVE-2024-38388.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: ALSA: hda/cs_dsp_ctl: Use private_free for contr... | 7.8 | 0.0023 | | | [CVE-2024-38629](https://patchblox.com/security/data/cve/CVE-2024-38629.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0023 | | | [CVE-2024-38581](https://patchblox.com/security/data/cve/CVE-2024-38581.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0023 | | | [CVE-2024-35979](https://patchblox.com/security/data/cve/CVE-2024-35979.md) | High | kernel-default-base: raid1: fix use-after-free for original bio in raid1_write_request() (bsc#1224572). | 7.8 | 0.0023 | | | [CVE-2024-35896](https://patchblox.com/security/data/cve/CVE-2024-35896.md) | High | kernel-rt-core: RHSA-2024:5102: kernel-rt security update (Important) | 7.1 | 0.0023 | | | [CVE-2023-52866](https://patchblox.com/security/data/cve/CVE-2023-52866.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.1 | 0.0023 | | | [CVE-2023-52800](https://patchblox.com/security/data/cve/CVE-2023-52800.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0023 | | | [CVE-2024-36928](https://patchblox.com/security/data/cve/CVE-2024-36928.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: s390/qeth: Fix kernel panic after setting hsuid... | 7.8 | 0.0023 | | | [CVE-2024-35905](https://patchblox.com/security/data/cve/CVE-2024-35905.md) | High | kernel-livepatch-SLE15-SP6-RT_Update_1: Security update for the Linux Kernel | 7.8 | 0.0023 | | | [CVE-2024-41011](https://patchblox.com/security/data/cve/CVE-2024-41011.md) | High | kernel-default: Security update for the Linux Kernel | 7.8 | 0.0022 | | | [CVE-2024-26638](https://patchblox.com/security/data/cve/CVE-2024-26638.md) | High | dtb-aarch64: Fixed uninitialize struct msghdr completely (bsc#1221649 . | 7.8 | 0.0022 | | | [CVE-2024-35911](https://patchblox.com/security/data/cve/CVE-2024-35911.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0022 | | | [CVE-2024-41013](https://patchblox.com/security/data/cve/CVE-2024-41013.md) | High | dtb-aarch64: xfs: do not walk off the end of a directory data block (bsc#1228405). | 7.8 | 0.0022 | | | [CVE-2023-52877](https://patchblox.com/security/data/cve/CVE-2023-52877.md) | High | kernel-tools-libs-devel: Important: kernel security and bug fix update | 7.0 | 0.0022 | | | [CVE-2024-35986](https://patchblox.com/security/data/cve/CVE-2024-35986.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: phy: ti: tusb1210: Resolve charger-det crash if... | 7.0 | 0.0022 | | | [CVE-2024-40972](https://patchblox.com/security/data/cve/CVE-2024-40972.md) | High | dtb-aarch64: ext4: fold quota accounting into ext4_xattr_inode_lookup_create() (bsc#1227910). | 7.8 | 0.0022 | | | [CVE-2024-27020](https://patchblox.com/security/data/cve/CVE-2024-27020.md) | High | kernel-rt: RHSA-2024:5102: kernel-rt security update (Important) | 7.0 | 0.0022 | | | [CVE-2024-36477](https://patchblox.com/security/data/cve/CVE-2024-36477.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0022 | | | [CVE-2024-39277](https://patchblox.com/security/data/cve/CVE-2024-39277.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0022 | | | [CVE-2024-39479](https://patchblox.com/security/data/cve/CVE-2024-39479.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0022 | | | [CVE-2024-26846](https://patchblox.com/security/data/cve/CVE-2024-26846.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0022 | | | [CVE-2024-34777](https://patchblox.com/security/data/cve/CVE-2024-34777.md) | High | kernel-azure: Security update for the Linux Kernel | 7.1 | 0.0022 | | | [CVE-2024-35843](https://patchblox.com/security/data/cve/CVE-2024-35843.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Use device rbtree in iopf reporting... | 8.8 | 0.0022 | | | [CVE-2024-26932](https://patchblox.com/security/data/cve/CVE-2024-26932.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0022 | | | [CVE-2024-36919](https://patchblox.com/security/data/cve/CVE-2024-36919.md) | High | dtb-aarch64: scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload (bsc#1225767). | 7.8 | 0.0022 | | | [CVE-2024-35932](https://patchblox.com/security/data/cve/CVE-2024-35932.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0021 | | | [CVE-2024-35989](https://patchblox.com/security/data/cve/CVE-2024-35989.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0021 | | | [CVE-2024-36012](https://patchblox.com/security/data/cve/CVE-2024-36012.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0021 | | | [CVE-2024-38610](https://patchblox.com/security/data/cve/CVE-2024-38610.md) | High | dtb-aarch64: drivers/virt/acrn: fix PFNMAP PTE checks in acrn_vm_ram_map() (bsc#1226758). | 7.8 | 0.0021 | | | [CVE-2024-36935](https://patchblox.com/security/data/cve/CVE-2024-36935.md) | High | kernel-azure: ice: ensure the copied buf is NUL terminated (bsc#1225763). | 7.1 | 0.0021 | | | [CVE-2023-52697](https://patchblox.com/security/data/cve/CVE-2023-52697.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.1 | 0.0021 | | | [CVE-2024-26923](https://patchblox.com/security/data/cve/CVE-2024-26923.md) | High | dtb-aarch64: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223384). | 7.8 | 0.0021 | | | [CVE-2024-35898](https://patchblox.com/security/data/cve/CVE-2024-35898.md) | High | kernel-default-base: netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() (bsc#1224498). | 7.0 | 0.0020 | | | [CVE-2024-26984](https://patchblox.com/security/data/cve/CVE-2024-26984.md) | High | kernel-obs-build: Security update for the Linux Kernel | 7.5 | 0.0020 | | | [CVE-2024-38664](https://patchblox.com/security/data/cve/CVE-2024-38664.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0020 | | | [CVE-2024-35899](https://patchblox.com/security/data/cve/CVE-2024-35899.md) | High | kernel-64kb: netfilter: nf_tables: flush pending destroy work before exit_net release (bsc#1224499) | 7.3 | 0.0020 | | | [CVE-2024-36894](https://patchblox.com/security/data/cve/CVE-2024-36894.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_fs: Fix race between aio_cancel()... | 7.8 | 0.0020 | | | [CVE-2024-21823](https://patchblox.com/security/data/cve/CVE-2024-21823.md) | High | kernel-64kb: Fixed safety flag to struct ends (bsc#1223625). | 7.5 | 0.0020 | | | [CVE-2024-35809](https://patchblox.com/security/data/cve/CVE-2024-35809.md) | High | kernel-source-azure: Security update for the Linux Kernel | 7.8 | 0.0020 | | | [CVE-2024-26934](https://patchblox.com/security/data/cve/CVE-2024-26934.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0019 | | | [CVE-2023-52847](https://patchblox.com/security/data/cve/CVE-2023-52847.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.0 | 0.0019 | | | [CVE-2024-26671](https://patchblox.com/security/data/cve/CVE-2024-26671.md) | High | dtb-aarch64: Fixed blk-mq IO hang from sbitmap wakeup race (bsc#1222357). | 8.0 | 0.0019 | | | [CVE-2023-52757](https://patchblox.com/security/data/cve/CVE-2023-52757.md) | High | dtb-aarch64: Fixed potential deadlock when releasing mids (bsc#1225548). | 7.8 | 0.0019 | | | [CVE-2023-52825](https://patchblox.com/security/data/cve/CVE-2023-52825.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0018 | | | [CVE-2024-26614](https://patchblox.com/security/data/cve/CVE-2024-26614.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: tcp: make sure init the accept_queue's spinlocks... | 7.8 | 0.0018 | | | [CVE-2024-27062](https://patchblox.com/security/data/cve/CVE-2024-27062.md) | High | nouveau: lock the client object tree. | 7.8 | 0.0018 | | | [CVE-2024-38628](https://patchblox.com/security/data/cve/CVE-2024-38628.md) | High | usb: gadget: u_audio: Fix race condition use of controls after free during gadget unbind. | 7.8 | 0.0018 | | | [CVE-2023-52872](https://patchblox.com/security/data/cve/CVE-2023-52872.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0018 | | | [CVE-2024-26960](https://patchblox.com/security/data/cve/CVE-2024-26960.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: mm: swap: fix race between free_swap_and_cache()... | 7.0 | 0.0018 | | | [CVE-2024-36899](https://patchblox.com/security/data/cve/CVE-2024-36899.md) | High | dtb-aarch64: gpiolib: cdev: Fix use after free in lineinfo_changed_notify (bsc#1225737). | 7.0 | 0.0018 | | | [CVE-2024-26933](https://patchblox.com/security/data/cve/CVE-2024-26933.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0018 | | | [CVE-2024-26972](https://patchblox.com/security/data/cve/CVE-2024-26972.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: ubifs: ubifs_symlink: Fix memleak of inode->i_li... | n/a | n/a | | | [CVE-2024-27028](https://patchblox.com/security/data/cve/CVE-2024-27028.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 6.5 | 0.0118 | | | [CVE-2023-52699](https://patchblox.com/security/data/cve/CVE-2023-52699.md) | Routine | dtb-aarch64: sysv: don't call sb_bread() with pointers_lock held (bsc#1224659). | 5.3 | 0.0097 | | | [CVE-2024-27388](https://patchblox.com/security/data/cve/CVE-2024-27388.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0096 | | | [CVE-2024-35823](https://patchblox.com/security/data/cve/CVE-2024-35823.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0092 | | | [CVE-2024-38582](https://patchblox.com/security/data/cve/CVE-2024-38582.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0086 | | | [CVE-2024-26901](https://patchblox.com/security/data/cve/CVE-2024-26901.md) | Routine | kernel-debug-core: kernel: RDMA/srpt: Do not register event handler until srpt device is fully setup (CVE-2024-26872) * kernel: usb: ulp... | 5.5 | 0.0083 | | | [CVE-2024-26731](https://patchblox.com/security/data/cve/CVE-2024-26731.md) | Routine | kernel-64kb: Fixed NULL pointer dereference in sk_psock_verdict_data_ready() (bsc#1222371). | 5.3 | 0.0083 | | | [CVE-2024-38544](https://patchblox.com/security/data/cve/CVE-2024-38544.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 6.3 | 0.0082 | | | [CVE-2024-35878](https://patchblox.com/security/data/cve/CVE-2024-35878.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0079 | | | [CVE-2024-40923](https://patchblox.com/security/data/cve/CVE-2024-40923.md) | Routine | dtb-aarch64: vmxnet3: disable rx data ring on dma allocation failure (bsc#1227786). | 5.5 | 0.0079 | | | [CVE-2024-26845](https://patchblox.com/security/data/cve/CVE-2024-26845.md) | Routine | dtb-aarch64: scsi: target: core: Add TMF to tmr_list handling (bsc#1223018). | 5.5 | 0.0074 | | | [CVE-2024-38565](https://patchblox.com/security/data/cve/CVE-2024-38565.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0074 | | | [CVE-2023-52618](https://patchblox.com/security/data/cve/CVE-2023-52618.md) | Routine | dtb-aarch64: Fixed string overflow in block/rnbd-srv (bsc#1221615). | 5.3 | 0.0074 | | | [CVE-2024-40937](https://patchblox.com/security/data/cve/CVE-2024-40937.md) | Routine | kernel-livepatch-SLE15-SP6-RT_Update_1: gve: Clear napi->skb before dev_kfree_skb_any() (bsc#1227836). | 5.5 | 0.0074 | | | [CVE-2024-26881](https://patchblox.com/security/data/cve/CVE-2024-26881.md) | Routine | dtb-aarch64: Fixed net/hns3 kernel crash when 1588 is received on HIP08 devices (bsc#1223041). | 5.5 | 0.0069 | | | [CVE-2024-35971](https://patchblox.com/security/data/cve/CVE-2024-35971.md) | Routine | net: ks8851: Handle softirqs at the end of IRQ thread to fix hang | 5.5 | 0.0069 | | | [CVE-2024-40999](https://patchblox.com/security/data/cve/CVE-2024-40999.md) | Routine | net: ena: Add validation for completion descriptors consistency | 5.5 | 0.0069 | | | [CVE-2024-35880](https://patchblox.com/security/data/cve/CVE-2024-35880.md) | Routine | dtb-aarch64: io_uring/kbuf: hold io_buffer_list reference over mmap (bsc#1224523). | 5.5 | 0.0069 | | | [CVE-2023-52834](https://patchblox.com/security/data/cve/CVE-2023-52834.md) | Routine | dtb-aarch64: atl1c: Work around the DMA RX overflow issue (bsc#1225599). | 5.5 | 0.0065 | | | [CVE-2024-26760](https://patchblox.com/security/data/cve/CVE-2024-26760.md) | Routine | dtb-aarch64: Fixed bio_put() for error case (bsc#1222596 cve-2024-267600). | 5.5 | 0.0065 | | | [CVE-2024-26611](https://patchblox.com/security/data/cve/CVE-2024-26611.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0065 | | | [CVE-2024-38618](https://patchblox.com/security/data/cve/CVE-2024-38618.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0064 | | | [CVE-2024-35916](https://patchblox.com/security/data/cve/CVE-2024-35916.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.3 | 0.0064 | | | [CVE-2024-26853](https://patchblox.com/security/data/cve/CVE-2024-26853.md) | Routine | igc: avoid returning frame twice in XDP_REDIRECT | 5.5 | 0.0063 | | | [CVE-2024-36911](https://patchblox.com/security/data/cve/CVE-2024-36911.md) | Routine | hv_netvsc: Don't free decrypted memory | 5.5 | 0.0063 | | | [CVE-2024-27436](https://patchblox.com/security/data/cve/CVE-2024-27436.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0062 | | | [CVE-2024-26868](https://patchblox.com/security/data/cve/CVE-2024-26868.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0061 | | | [CVE-2024-35891](https://patchblox.com/security/data/cve/CVE-2024-35891.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0061 | | | [CVE-2024-22099](https://patchblox.com/security/data/cve/CVE-2024-22099.md) | Routine | dtb-aarch64: Fixed a null-pointer-dereference in rfcomm_check_security (bsc#1219170). | 5.7 | 0.0061 | | | [CVE-2024-38539](https://patchblox.com/security/data/cve/CVE-2024-38539.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0061 | | | [CVE-2023-52687](https://patchblox.com/security/data/cve/CVE-2023-52687.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0060 | | | [CVE-2024-26641](https://patchblox.com/security/data/cve/CVE-2024-26641.md) | Routine | dtb-aarch64: ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv() (bsc#1221654). | 5.5 | 0.0058 | | | [CVE-2024-35821](https://patchblox.com/security/data/cve/CVE-2024-35821.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0058 | | | [CVE-2024-39468](https://patchblox.com/security/data/cve/CVE-2024-39468.md) | Routine | kernel-docs: smb: client: fix deadlock in smb2_find_smb_tcon() (bsc#1227103. | 5.5 | 0.0053 | | | [CVE-2024-35970](https://patchblox.com/security/data/cve/CVE-2024-35970.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 6.3 | 0.0050 | | | [CVE-2024-36964](https://patchblox.com/security/data/cve/CVE-2024-36964.md) | Routine | kernel-livepatch-SLE15-SP6_Update_0: fs/9p: only translate RWX permissions for plain 9P2000 (bsc#1226325). | 5.5 | 0.0050 | | | [CVE-2024-36945](https://patchblox.com/security/data/cve/CVE-2024-36945.md) | Routine | kernel-64kb: net/smc: fix neighbour and rtable leak in smc_ib_find_route() (bsc#1225823). | 5.5 | 0.0048 | | | [CVE-2024-36947](https://patchblox.com/security/data/cve/CVE-2024-36947.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0048 | | | [CVE-2024-35901](https://patchblox.com/security/data/cve/CVE-2024-35901.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0047 | | | [CVE-2024-36962](https://patchblox.com/security/data/cve/CVE-2024-36962.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0046 | | | [CVE-2023-38417](https://patchblox.com/security/data/cve/CVE-2023-38417.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 4.3 | 0.0043 | | | [CVE-2024-27404](https://patchblox.com/security/data/cve/CVE-2024-27404.md) | Routine | dtb-aarch64: mptcp: fix data races on remote_id (bsc#1224422) | 5.5 | 0.0042 | | | [CVE-2024-35834](https://patchblox.com/security/data/cve/CVE-2024-35834.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0041 | | | [CVE-2024-26921](https://patchblox.com/security/data/cve/CVE-2024-26921.md) | Routine | kernel-headers: (CVE-2021-47579) * (CVE-2024-36927) * (CVE-2024-39276) * (CVE-2024-33621) * (CVE-2024-27010) * (CVE-2024-26960) * (CV... | 5.5 | 0.0040 | | | [CVE-2024-27435](https://patchblox.com/security/data/cve/CVE-2024-27435.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0040 | | | [CVE-2024-35998](https://patchblox.com/security/data/cve/CVE-2024-35998.md) | Routine | dtb-aarch64: Fixed lock ordering potential deadlock in cifs_sync_mid_result (bsc#1224549). | 5.5 | 0.0040 | | | [CVE-2024-35889](https://patchblox.com/security/data/cve/CVE-2024-35889.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0038 | | | [CVE-2023-47210](https://patchblox.com/security/data/cve/CVE-2023-47210.md) | Routine | dtb-aarch64: wifi: iwlwifi: bump FW API to 90 for BZ/SC devices (bsc#1225601, bsc#1225600). | 4.7 | 0.0036 | | | [CVE-2024-27416](https://patchblox.com/security/data/cve/CVE-2024-27416.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0036 | | | [CVE-2024-35811](https://patchblox.com/security/data/cve/CVE-2024-35811.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0035 | | | [CVE-2024-27016](https://patchblox.com/security/data/cve/CVE-2024-27016.md) | Routine | dtb-aarch64: netfilter: flowtable: validate pppoe header (bsc#1223807). | 5.5 | 0.0034 | | | [CVE-2024-26633](https://patchblox.com/security/data/cve/CVE-2024-26633.md) | Routine | dtb-aarch64: ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim() (bsc#1221647). | 5.5 | 0.0033 | | | [CVE-2024-35915](https://patchblox.com/security/data/cve/CVE-2024-35915.md) | Routine | kernel-docs: Security update for the Linux Kernel | 5.5 | 0.0032 | | | [CVE-2024-26922](https://patchblox.com/security/data/cve/CVE-2024-26922.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0032 | | | [CVE-2024-25741](https://patchblox.com/security/data/cve/CVE-2024-25741.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0031 | | | [CVE-2024-26773](https://patchblox.com/security/data/cve/CVE-2024-26773.md) | Routine | kernel-syms: Fixed ext4 block allocation from corrupted group in ext4_mb_try_best_found() (bsc#1222618). | 5.5 | 0.0031 | | | [CVE-2024-38590](https://patchblox.com/security/data/cve/CVE-2024-38590.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0031 | | | [CVE-2024-35914](https://patchblox.com/security/data/cve/CVE-2024-35914.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0031 | | | [CVE-2023-52656](https://patchblox.com/security/data/cve/CVE-2023-52656.md) | Routine | kernel-docs: Dropped any code related to SCM_RIGHTS (bsc#1224187). | 5.5 | 0.0031 | | | [CVE-2024-26816](https://patchblox.com/security/data/cve/CVE-2024-26816.md) | Routine | dtb-aarch64: Fixed relocations in .notes section when building with CONFIG_XEN_PV=y (bsc#1222624). | 5.5 | 0.0031 | | | [CVE-2024-27399](https://patchblox.com/security/data/cve/CVE-2024-27399.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0030 | | | [CVE-2024-40979](https://patchblox.com/security/data/cve/CVE-2024-40979.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0030 | | | [CVE-2024-26652](https://patchblox.com/security/data/cve/CVE-2024-26652.md) | Routine | kernel-azure: Security update for the Linux Kernel | 6.7 | 0.0030 | | | [CVE-2024-40970](https://patchblox.com/security/data/cve/CVE-2024-40970.md) | Routine | dtb-aarch64: Avoid hw_desc array overrun in dw-axi-dmac (bsc#1227899). | 5.6 | 0.0030 | | | [CVE-2024-40925](https://patchblox.com/security/data/cve/CVE-2024-40925.md) | Routine | kernel-livepatch-SLE15-SP6_Update_3: block: fix request.queuelist usage in flush (bsc#1227789). | 5.5 | 0.0030 | | | [CVE-2024-27046](https://patchblox.com/security/data/cve/CVE-2024-27046.md) | Routine | dtb-aarch64: Fixed nfp/flower handling acti_netdevs allocation failure (bsc#1223827). | 5.5 | 0.0030 | | | [CVE-2024-26994](https://patchblox.com/security/data/cve/CVE-2024-26994.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0030 | | | [CVE-2024-27434](https://patchblox.com/security/data/cve/CVE-2024-27434.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0030 | | | [CVE-2024-39507](https://patchblox.com/security/data/cve/CVE-2024-39507.md) | Routine | kernel-syms-azure: net: hns3: fix kernel crash problem in concurrent scenario (bsc#1227730). | 5.5 | 0.0030 | | | [CVE-2024-26601](https://patchblox.com/security/data/cve/CVE-2024-26601.md) | Routine | kernel-syms: Fixed ext4 buddy bitmap corruption via fast commit replay (bsc#1220342). | 5.5 | 0.0029 | | | [CVE-2024-27025](https://patchblox.com/security/data/cve/CVE-2024-27025.md) | Routine | kernel-rt: (CVE-2021-47548) * (CVE-2023-52619) | 5.5 | 0.0029 | | | [CVE-2023-6238](https://patchblox.com/security/data/cve/CVE-2023-6238.md) | Routine | kernel-64kb: Fixed kcalloc() arguments order (bsc#1217384). | n/a | 0.0029 | | | [CVE-2023-0160](https://patchblox.com/security/data/cve/CVE-2023-0160.md) | Routine | kernel-syms: Fixed deadlock flaw in BPF that could allow a local user to potentially crash the system (bsc#1209657). | 5.5 | 0.0029 | | | [CVE-2024-40919](https://patchblox.com/security/data/cve/CVE-2024-40919.md) | Routine | kernel-livepatch-SLE15-SP6_Update_3: bnxt_en: Adjust logging of firmware messages in case of released token in __hwrm_send() (bsc#1227779). | 5.5 | 0.0029 | | | [CVE-2024-40966](https://patchblox.com/security/data/cve/CVE-2024-40966.md) | Routine | tty: add the option to have a tty reject a new ldisc | 5.5 | 0.0029 | | | [CVE-2024-40975](https://patchblox.com/security/data/cve/CVE-2024-40975.md) | Routine | dtb-aarch64: platform/x86: x86-android-tablets: Unregister devices in reverse order (bsc#1227926). | 5.5 | 0.0029 | | | [CVE-2024-26900](https://patchblox.com/security/data/cve/CVE-2024-26900.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 6.0 | 0.0029 | | | [CVE-2023-52670](https://patchblox.com/security/data/cve/CVE-2023-52670.md) | Routine | rpmsg: virtio: Free driver_override when rpmsg_remove() | 6.6 | 0.0029 | | | [CVE-2024-26815](https://patchblox.com/security/data/cve/CVE-2024-26815.md) | Routine | dtb-aarch64: Fixed improper TCA_TAPRIO_TC_ENTRY_INDEX check (bsc#1222635). | 5.5 | 0.0029 | | | [CVE-2023-7042](https://patchblox.com/security/data/cve/CVE-2023-7042.md) | Routine | linux: A null pointer dereference vulnerability was found in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev() in drivers/net/wirele... | 5.5 | 0.0028 | | | [CVE-2024-26870](https://patchblox.com/security/data/cve/CVE-2024-26870.md) | Routine | kernel-rt: kernel: NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102 | 5.5 | 0.0028 | | | [CVE-2024-27001](https://patchblox.com/security/data/cve/CVE-2024-27001.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0028 | | | [CVE-2024-26889](https://patchblox.com/security/data/cve/CVE-2024-26889.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0028 | | | [CVE-2024-35978](https://patchblox.com/security/data/cve/CVE-2024-35978.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0028 | | | [CVE-2024-38549](https://patchblox.com/security/data/cve/CVE-2024-38549.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0028 | | | [CVE-2024-26903](https://patchblox.com/security/data/cve/CVE-2024-26903.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0028 | | | [CVE-2024-40908](https://patchblox.com/security/data/cve/CVE-2024-40908.md) | Routine | kernel-source: bpf: Set run context for rawtp test_run callback (bsc#1227783). | 5.5 | 0.0028 | | | [CVE-2023-52653](https://patchblox.com/security/data/cve/CVE-2023-52653.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0028 | | | [CVE-2023-52652](https://patchblox.com/security/data/cve/CVE-2023-52652.md) | Routine | dtb-aarch64: Fixed NTB for possible name leak in ntb_register_device() (bsc#1223686). | 5.5 | 0.0027 | | | [CVE-2023-52472](https://patchblox.com/security/data/cve/CVE-2023-52472.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0027 | | | [CVE-2024-27012](https://patchblox.com/security/data/cve/CVE-2024-27012.md) | Routine | dtb-aarch64: netfilter: nf_tables: restore set elements when delete set fails (bsc#1223804). | 5.5 | 0.0027 | | | [CVE-2024-39504](https://patchblox.com/security/data/cve/CVE-2024-39504.md) | Routine | dtb-aarch64: netfilter: nft_inner: validate mandatory meta and payload (bsc#1227757). | 5.5 | 0.0027 | | | [CVE-2023-52845](https://patchblox.com/security/data/cve/CVE-2023-52845.md) | Routine | dtb-aarch64: tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING (bsc#1225585). | 5.5 | 0.0027 | | | [CVE-2024-35807](https://patchblox.com/security/data/cve/CVE-2024-35807.md) | Routine | dtb-aarch64: ext4: fix corruption during on-line resize (bsc#1224735). | 5.5 | 0.0027 | | | [CVE-2023-52882](https://patchblox.com/security/data/cve/CVE-2023-52882.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0027 | | | [CVE-2024-26937](https://patchblox.com/security/data/cve/CVE-2024-26937.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0027 | | | [CVE-2024-26642](https://patchblox.com/security/data/cve/CVE-2024-26642.md) | Routine | dtb-aarch64: Fixed the set of anonymous timeout flag in netfilter nf_tables (bsc#1221830). | 5.5 | 0.0027 | | | [CVE-2024-26993](https://patchblox.com/security/data/cve/CVE-2024-26993.md) | Routine | kernel-rt: kernel: fs: sysfs: Fix reference leak in sysfs_break_active_protection() | 5.5 | 0.0027 | | | [CVE-2024-35947](https://patchblox.com/security/data/cve/CVE-2024-35947.md) | Routine | kernel-rt-debug-modules-extra: kernel: dyndbg: fix old BUG_ON in >control parser | 5.5 | 0.0027 | | | [CVE-2024-36889](https://patchblox.com/security/data/cve/CVE-2024-36889.md) | Routine | kernel-modules-extra: Important: kernel security update | 5.5 | 0.0027 | | | [CVE-2024-36478](https://patchblox.com/security/data/cve/CVE-2024-36478.md) | Routine | dtb-aarch64: null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues' (bsc#1226841). | 5.5 | 0.0027 | | | [CVE-2024-36946](https://patchblox.com/security/data/cve/CVE-2024-36946.md) | Routine | dtb-aarch64: phonet: fix rtm_phonet_notify() skb allocation (bsc#1225851). | 5.5 | 0.0027 | | | [CVE-2024-40961](https://patchblox.com/security/data/cve/CVE-2024-40961.md) | Routine | kernel-64kb: ipv6: prevent possible NULL deref in fib6_nh_init() (bsc#1227814). | 5.5 | 0.0027 | | | [CVE-2024-27027](https://patchblox.com/security/data/cve/CVE-2024-27027.md) | Routine | kernel-livepatch-SLE15-SP6_Update_1: Security update for the Linux Kernel | 5.5 | 0.0026 | | | [CVE-2023-52658](https://patchblox.com/security/data/cve/CVE-2023-52658.md) | Routine | perf: kernel: Revert "net/mlx5: Block entering switchdev mode with ns inconsistency" | 5.5 | 0.0026 | | | [CVE-2024-35982](https://patchblox.com/security/data/cve/CVE-2024-35982.md) | Routine | kernel-default: Security update for the Linux Kernel | 5.5 | 0.0026 | | | [CVE-2024-38608](https://patchblox.com/security/data/cve/CVE-2024-38608.md) | Routine | net/mlx5e: Fix netif state handling | 5.5 | 0.0026 | | | [CVE-2024-40947](https://patchblox.com/security/data/cve/CVE-2024-40947.md) | Routine | dtb-aarch64: ima: Avoid blocking in RCU read-side critical section (bsc#1227803). | 5.5 | 0.0026 | | | [CVE-2024-36950](https://patchblox.com/security/data/cve/CVE-2024-36950.md) | Routine | kernel-default-base: Security update for the Linux Kernel | 4.4 | 0.0026 | | | [CVE-2024-26615](https://patchblox.com/security/data/cve/CVE-2024-26615.md) | Routine | dtb-aarch64: net/smc: fix illegal rmb_desc access in SMC-D connection dump (bsc#1220942). | 5.5 | 0.0026 | | | [CVE-2024-35950](https://patchblox.com/security/data/cve/CVE-2024-35950.md) | Routine | kernel-syms-azure: Security update for the Linux Kernel | 5.5 | 0.0026 | | | [CVE-2024-38661](https://patchblox.com/security/data/cve/CVE-2024-38661.md) | Routine | dtb-aarch64: s390/ap: Fix crash in AP internal function modify_bitmap() (bsc#1226996). | 5.5 | 0.0026 | | | [CVE-2024-38663](https://patchblox.com/security/data/cve/CVE-2024-38663.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0026 | | | [CVE-2023-52806](https://patchblox.com/security/data/cve/CVE-2023-52806.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0026 | | | [CVE-2024-35984](https://patchblox.com/security/data/cve/CVE-2024-35984.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0026 | | | [CVE-2024-36020](https://patchblox.com/security/data/cve/CVE-2024-36020.md) | Routine | kernel-rt: RHSA-2024:5102: kernel-rt security update (Important) | 5.5 | 0.0026 | | | [CVE-2023-52874](https://patchblox.com/security/data/cve/CVE-2023-52874.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0026 | | | [CVE-2024-26726](https://patchblox.com/security/data/cve/CVE-2024-26726.md) | Routine | kernel-source-azure: Do not drop extent_map for free space inode on write error (bsc#1222532) | 5.5 | 0.0026 | | | [CVE-2024-26733](https://patchblox.com/security/data/cve/CVE-2024-26733.md) | Routine | kernel-syms: Fixed an overflow in arp_req_get() in arp (bsc#1222585). | 5.5 | 0.0026 | | | [CVE-2024-26920](https://patchblox.com/security/data/cve/CVE-2024-26920.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0026 | | | [CVE-2024-38547](https://patchblox.com/security/data/cve/CVE-2024-38547.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0026 | | | [CVE-2023-52672](https://patchblox.com/security/data/cve/CVE-2023-52672.md) | Routine | kernel-64kb: pipe: wakeup wr_wait after setting max_usage (bsc#1224614). | 5.5 | 0.0026 | | | [CVE-2024-26973](https://patchblox.com/security/data/cve/CVE-2024-26973.md) | Routine | kernel-zfcpdump-core: kernel: fat: fix uninitialized field in nostale filehandles | 5.5 | 0.0026 | | | [CVE-2024-38567](https://patchblox.com/security/data/cve/CVE-2024-38567.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0025 | | | [CVE-2023-52838](https://patchblox.com/security/data/cve/CVE-2023-52838.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 6.2 | 0.0025 | | | [CVE-2023-52844](https://patchblox.com/security/data/cve/CVE-2023-52844.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 6.2 | 0.0025 | | | [CVE-2023-52858](https://patchblox.com/security/data/cve/CVE-2023-52858.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 6.2 | 0.0025 | | | [CVE-2024-35875](https://patchblox.com/security/data/cve/CVE-2024-35875.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0025 | | | [CVE-2024-35973](https://patchblox.com/security/data/cve/CVE-2024-35973.md) | Routine | kernel-obs-build: Security update for the Linux Kernel | 5.5 | 0.0025 | | | [CVE-2024-36959](https://patchblox.com/security/data/cve/CVE-2024-36959.md) | Routine | kernel-docs: Security update for the Linux Kernel | 5.5 | 0.0025 | | | [CVE-2024-38546](https://patchblox.com/security/data/cve/CVE-2024-38546.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0025 | | | [CVE-2023-52765](https://patchblox.com/security/data/cve/CVE-2023-52765.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 6.2 | 0.0025 | | | [CVE-2024-27056](https://patchblox.com/security/data/cve/CVE-2024-27056.md) | Routine | bpftool: Moderate: kernel update | 5.5 | 0.0025 | | | [CVE-2024-36025](https://patchblox.com/security/data/cve/CVE-2024-36025.md) | Routine | bpftool: Important: kernel security update | 5.5 | 0.0025 | | | [CVE-2024-39472](https://patchblox.com/security/data/cve/CVE-2024-39472.md) | Routine | kernel-devel: RHSA-2024:5101: kernel security update (Important) | 5.5 | 0.0025 | | | [CVE-2023-52811](https://patchblox.com/security/data/cve/CVE-2023-52811.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0025 | | | [CVE-2024-26663](https://patchblox.com/security/data/cve/CVE-2024-26663.md) | Routine | dtb-aarch64: tipc: Check the bearer type before calling tipc_udp_nl_bearer_add() (bsc#1222326). | 5.5 | 0.0025 | | | [CVE-2024-26685](https://patchblox.com/security/data/cve/CVE-2024-26685.md) | Routine | dtb-aarch64: Fixed nilfs2 potential bug in end_buffer_async_write (bsc#1222437). | 5.5 | 0.0025 | | | [CVE-2024-26909](https://patchblox.com/security/data/cve/CVE-2024-26909.md) | Routine | dtb-aarch64: Fixed drm bridge use-after-free (bsc#1223143). | 5.5 | 0.0025 | | | [CVE-2024-33619](https://patchblox.com/security/data/cve/CVE-2024-33619.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0025 | | | [CVE-2024-38548](https://patchblox.com/security/data/cve/CVE-2024-38548.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0025 | | | [CVE-2024-36017](https://patchblox.com/security/data/cve/CVE-2024-36017.md) | Routine | kernel-source: Security update for the Linux Kernel | 6.1 | 0.0025 | | | [CVE-2023-52693](https://patchblox.com/security/data/cve/CVE-2023-52693.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0025 | | | [CVE-2024-26863](https://patchblox.com/security/data/cve/CVE-2024-26863.md) | Routine | dtb-aarch64: hsr: Fix uninit-value access in hsr_get_node() (bsc#1223021). | 5.5 | 0.0025 | | | [CVE-2024-26997](https://patchblox.com/security/data/cve/CVE-2024-26997.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0025 | | | [CVE-2024-35815](https://patchblox.com/security/data/cve/CVE-2024-35815.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0025 | | | [CVE-2024-40948](https://patchblox.com/security/data/cve/CVE-2024-40948.md) | Routine | dtb-aarch64: mm/page_table_check: fix crash on ZONE_DEVICE (bsc#1227801). | 5.5 | 0.0025 | | | [CVE-2023-52861](https://patchblox.com/security/data/cve/CVE-2023-52861.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 6.2 | 0.0025 | | | [CVE-2024-25739](https://patchblox.com/security/data/cve/CVE-2024-25739.md) | Routine | dtb-aarch64: Fixed possible crash in create_empty_lvol() in drivers/mtd/ubi/vtbl.c (bsc#1219834). | 5.5 | 0.0025 | | | [CVE-2024-35813](https://patchblox.com/security/data/cve/CVE-2024-35813.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0025 | | | [CVE-2024-36014](https://patchblox.com/security/data/cve/CVE-2024-36014.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0025 | | | [CVE-2024-26764](https://patchblox.com/security/data/cve/CVE-2024-26764.md) | Routine | dtb-aarch64: Fixed IOCB_AIO_RW check in fs/aio before the struct aio_kiocb conversion (bsc#1222721). | 3.3 | 0.0025 | | | [CVE-2024-35951](https://patchblox.com/security/data/cve/CVE-2024-35951.md) | Routine | drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr() | 5.5 | 0.0025 | | | [CVE-2024-41017](https://patchblox.com/security/data/cve/CVE-2024-41017.md) | Routine | dtb-aarch64: jfs: do not walk off the end of ealist (bsc#1228403). | 5.5 | 0.0025 | | | [CVE-2024-38540](https://patchblox.com/security/data/cve/CVE-2024-38540.md) | Routine | kernel-tools-libs-devel: kernel: bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq | 4.4 | 0.0025 | | | [CVE-2023-52789](https://patchblox.com/security/data/cve/CVE-2023-52789.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0025 | | | [CVE-2024-27412](https://patchblox.com/security/data/cve/CVE-2024-27412.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0025 | | | [CVE-2024-27413](https://patchblox.com/security/data/cve/CVE-2024-27413.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0025 | | | [CVE-2023-52843](https://patchblox.com/security/data/cve/CVE-2023-52843.md) | Routine | dtb-aarch64: llc: verify mac len before reading mac header (bsc#1224951). | 5.5 | 0.0025 | | | [CVE-2023-52855](https://patchblox.com/security/data/cve/CVE-2023-52855.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0025 | | | [CVE-2023-52865](https://patchblox.com/security/data/cve/CVE-2023-52865.md) | Routine | kernel-default: Add check for mtk_alloc_clk_data (bsc#1225086). | 5.5 | 0.0025 | | | [CVE-2023-52880](https://patchblox.com/security/data/cve/CVE-2023-52880.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0025 | | | [CVE-2023-52819](https://patchblox.com/security/data/cve/CVE-2023-52819.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 6.6 | 0.0024 | | | [CVE-2024-26783](https://patchblox.com/security/data/cve/CVE-2024-26783.md) | Routine | dtb-aarch64: Fixed mm/vmscan bug when calling wakeup_kswapd() with a wrong zone index (bsc#1222615). | 5.5 | 0.0024 | | | [CVE-2024-27400](https://patchblox.com/security/data/cve/CVE-2024-27400.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 | | | [CVE-2024-36938](https://patchblox.com/security/data/cve/CVE-2024-36938.md) | Routine | dtb-aarch64: Fixed NULL pointer dereference in sk_psock_skb_ingress_enqueue (bsc#1225761). | 5.5 | 0.0024 | | | [CVE-2023-52622](https://patchblox.com/security/data/cve/CVE-2023-52622.md) | Routine | dtb-aarch64: ext4: avoid online resizing failures due to oversized flex bg (bsc#1222080). | 5.5 | 0.0024 | | | [CVE-2024-38633](https://patchblox.com/security/data/cve/CVE-2024-38633.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 | | | [CVE-2022-48772](https://patchblox.com/security/data/cve/CVE-2022-48772.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 | | | [CVE-2023-52616](https://patchblox.com/security/data/cve/CVE-2023-52616.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 | | | [CVE-2023-52762](https://patchblox.com/security/data/cve/CVE-2023-52762.md) | Routine | kernel-rt-kvm: (CVE-2024-27025) * (CVE-2021-47548) * (CVE-2023-52619) | 5.5 | 0.0024 | | | [CVE-2023-52784](https://patchblox.com/security/data/cve/CVE-2023-52784.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 | | | [CVE-2024-26635](https://patchblox.com/security/data/cve/CVE-2024-26635.md) | Routine | kernel-obs-build: llc: Drop support for ETH_P_TR_802_2 (bsc#1221656). | 5.5 | 0.0024 | | | [CVE-2024-26805](https://patchblox.com/security/data/cve/CVE-2024-26805.md) | Routine | dtb-aarch64: Fixed a kernel-infoleak-after-free in __skb_datagram_iter in netlink (bsc#1222630). | 5.5 | 0.0024 | | | [CVE-2024-26935](https://patchblox.com/security/data/cve/CVE-2024-26935.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 | | | [CVE-2024-35830](https://patchblox.com/security/data/cve/CVE-2024-35830.md) | Routine | kernel-syms: Security update for the Linux Kernel | 5.5 | 0.0024 | | | [CVE-2024-41006](https://patchblox.com/security/data/cve/CVE-2024-41006.md) | Routine | kernel-obs-build: netrom: Fix a memory leak in nr_heartbeat_expiry() (bsc#1227862). | 5.5 | 0.0024 | | | [CVE-2023-52754](https://patchblox.com/security/data/cve/CVE-2023-52754.md) | Routine | kernel-azure: Security update for the Linux Kernel | 5.5 | 0.0024 | | | [CVE-2023-52821](https://patchblox.com/security/data/cve/CVE-2023-52821.md) | Routine | dtb-aarch64: Fixed a possible null pointer dereference (bsc#1225022). | 5.5 | 0.0024 | | | [CVE-2023-52826](https://patchblox.com/security/data/cve/CVE-2023-52826.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 | | | [CVE-2024-26767](https://patchblox.com/security/data/cve/CVE-2024-26767.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 | | | [CVE-2024-26946](https://patchblox.com/security/data/cve/CVE-2024-26946.md) | Routine | dtb-aarch64: Fixed copy_from_kernel_nofault() to read from unsafe address (bsc#1223669). | 5.5 | 0.0024 | | | [CVE-2024-26949](https://patchblox.com/security/data/cve/CVE-2024-26949.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 | | | [CVE-2024-35954](https://patchblox.com/security/data/cve/CVE-2024-35954.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0024 | | | [CVE-2024-36903](https://patchblox.com/security/data/cve/CVE-2024-36903.md) | Routine | kernel-uek64k: ipv6: Fix potential uninit-value access in __ip6_make_skb() (Shigeru Yoshida) [Orabug: 36683284] | 5.5 | 0.0024 | | | [CVE-2024-36909](https://patchblox.com/security/data/cve/CVE-2024-36909.md) | Routine | Drivers: hv: vmbus: Don't free ring buffers that couldn't be re-encrypted | 5.5 | 0.0024 | | | [CVE-2024-36926](https://patchblox.com/security/data/cve/CVE-2024-36926.md) | Routine | kernel-docs: Fixed LPAR panics during boot up with a frozen PE (bsc#1222011). | 5.5 | 0.0024 | | | [CVE-2024-38543](https://patchblox.com/security/data/cve/CVE-2024-38543.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 | | | [CVE-2023-52750](https://patchblox.com/security/data/cve/CVE-2023-52750.md) | Routine | kernel-livepatch-SLE15-SP6_Update_2: Security update for the Linux Kernel | 5.5 | 0.0024 | | | [CVE-2023-52753](https://patchblox.com/security/data/cve/CVE-2023-52753.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 | | | [CVE-2023-52774](https://patchblox.com/security/data/cve/CVE-2023-52774.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 | | | [CVE-2023-52791](https://patchblox.com/security/data/cve/CVE-2023-52791.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 | | | [CVE-2023-52814](https://patchblox.com/security/data/cve/CVE-2023-52814.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 | | | [CVE-2023-52833](https://patchblox.com/security/data/cve/CVE-2023-52833.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 | | | [CVE-2023-52841](https://patchblox.com/security/data/cve/CVE-2023-52841.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 | | | [CVE-2023-52853](https://patchblox.com/security/data/cve/CVE-2023-52853.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 | | | [CVE-2023-52863](https://patchblox.com/security/data/cve/CVE-2023-52863.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0024 | | | [CVE-2024-26636](https://patchblox.com/security/data/cve/CVE-2024-26636.md) | Routine | dtb-aarch64: llc: make llc_ui_sendmsg() more robust against bonding changes (bsc#1221659). | 5.5 | 0.0024 | | | [CVE-2024-26990](https://patchblox.com/security/data/cve/CVE-2024-26990.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 | | | [CVE-2024-35817](https://patchblox.com/security/data/cve/CVE-2024-35817.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 | | | [CVE-2024-35962](https://patchblox.com/security/data/cve/CVE-2024-35962.md) | Routine | perf: RHSA-2024:5101: kernel security update (Important) | 5.5 | 0.0024 | | | [CVE-2023-52641](https://patchblox.com/security/data/cve/CVE-2023-52641.md) | Routine | dtb-aarch64: Fixed NULL ptr dereference checking at the end of attr_allocate_frame() (bsc#1222303) | 5.5 | 0.0024 | | | [CVE-2023-52808](https://patchblox.com/security/data/cve/CVE-2023-52808.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 | | | [CVE-2023-52857](https://patchblox.com/security/data/cve/CVE-2023-52857.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 | | | [CVE-2023-52860](https://patchblox.com/security/data/cve/CVE-2023-52860.md) | Routine | dtb-aarch64: Fixed null pointer dereference in hisi_hns3 (bsc#1224936). | 5.5 | 0.0024 | | | [CVE-2024-27417](https://patchblox.com/security/data/cve/CVE-2024-27417.md) | Routine | dtb-aarch64: Fixed potential 'struct net' leak in inet6_rtm_getaddr() (bsc#1224721) | 5.5 | 0.0024 | | | [CVE-2024-35943](https://patchblox.com/security/data/cve/CVE-2024-35943.md) | Routine | dtb-aarch64: Fixed a null pointer dereference in omap_prm_domain_init (bsc#1224649). | 5.5 | 0.0024 | | | [CVE-2024-36029](https://patchblox.com/security/data/cve/CVE-2024-36029.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 | | | [CVE-2024-36281](https://patchblox.com/security/data/cve/CVE-2024-36281.md) | Routine | dtb-aarch64: net/mlx5: Use mlx5_ipsec_rx_status_destroy to correctly delete status rules (bsc#1226799). | 5.5 | 0.0024 | | | [CVE-2024-36887](https://patchblox.com/security/data/cve/CVE-2024-36887.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 | | | [CVE-2024-38564](https://patchblox.com/security/data/cve/CVE-2024-38564.md) | Routine | bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE | 5.5 | 0.0024 | | | [CVE-2024-26632](https://patchblox.com/security/data/cve/CVE-2024-26632.md) | Routine | dtb-aarch64: Fixed iterating over an empty bio with bio_for_each_folio_all (bsc#1221635). | 5.5 | 0.0024 | | | [CVE-2024-26774](https://patchblox.com/security/data/cve/CVE-2024-26774.md) | Routine | dtb-aarch64: Fixed dividing by 0 in mb_update_avg_fragment_size() when block bitmap corrupt (bsc#1222622). | 5.5 | 0.0024 | | | [CVE-2024-26802](https://patchblox.com/security/data/cve/CVE-2024-26802.md) | Routine | kernel-rt-debug-modules-extra: kernel: stmmac: Clear variable when destroying workqueue | 5.5 | 0.0024 | | | [CVE-2024-36957](https://patchblox.com/security/data/cve/CVE-2024-36957.md) | Routine | dtb-aarch64: octeontx2-af: avoid off-by-one read from userspace (bsc#1225762). | 5.5 | 0.0024 | | | [CVE-2024-39482](https://patchblox.com/security/data/cve/CVE-2024-39482.md) | Routine | dtb-aarch64: bcache: fix variable length array abuse in btree_iter (bsc#1227447). | 5.5 | 0.0024 | | | [CVE-2024-39498](https://patchblox.com/security/data/cve/CVE-2024-39498.md) | Routine | dtb-aarch64: drm/mst: Fix NULL pointer dereference at drm_dp_add_payload_part2 (bsc#1227723) | 5.5 | 0.0024 | | Showing 500 of 783 CVEs; the web page lists them all. --- Data as of 2026-11-11T01:43:54Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.