# SUSE-SU-2024:3561-1: Security update for 13 packages SUSE-SU-2024:3561-1, released October 9, 2024, fixes 162 CVEs across 13 products. None of them is reported as exploited. Patch Radar priority: High. - Web page: https://patchblox.com/security/fix/linux/suse-su-2024-3561-1 - Platform: Linux - Released: Oct 9, 2024 - Priority: High (Closes CVE-2024-44985, high severity) - CVEs: 162, exploited: 0, on CISA KEV: 0 - Vendor advisory: https://osv.dev/vulnerability/SUSE-SU-2024:3561-1 ## Applies to | Product | Release | Fixed in | |---|---|---| | [dtb-aarch64](https://patchblox.com/security/data/product/linux/dtb-aarch64.md) | opensuse-leap 15.6 | 6.4.0-150600.23.25.1 | | [kernel-64kb](https://patchblox.com/security/data/product/linux/kernel-64kb.md) | opensuse-leap 15.6 | 6.4.0-150600.23.25.1 | | [kernel-64kb](https://patchblox.com/security/data/product/linux/kernel-64kb.md) | sles 15.6 | 6.4.0-150600.23.25.1 | | [kernel-debug](https://patchblox.com/security/data/product/linux/kernel-debug.md) | opensuse-leap 15.6 | 6.4.0-150600.23.25.1 | | [kernel-default](https://patchblox.com/security/data/product/linux/kernel-default.md) | opensuse-leap 15.6 | 6.4.0-150600.23.25.1 | | [kernel-default](https://patchblox.com/security/data/product/linux/kernel-default.md) | sles 15.6 | 6.4.0-150600.23.25.1 | | [kernel-default-base](https://patchblox.com/security/data/product/linux/kernel-default-base.md) | opensuse-leap 15.6 | 6.4.0-150600.23.25.1.150600.12.10.2 | | [kernel-default-base](https://patchblox.com/security/data/product/linux/kernel-default-base.md) | sles 15.6 | 6.4.0-150600.23.25.1.150600.12.10.2 | | [kernel-docs](https://patchblox.com/security/data/product/linux/kernel-docs.md) | opensuse-leap 15.6 | 6.4.0-150600.23.25.2 | | [kernel-docs](https://patchblox.com/security/data/product/linux/kernel-docs.md) | sles 15.6 | 6.4.0-150600.23.25.2 | | [kernel-kvmsmall](https://patchblox.com/security/data/product/linux/kernel-kvmsmall.md) | opensuse-leap 15.6 | 6.4.0-150600.23.25.1 | | [kernel-livepatch-SLE15-SP6_Update_5](https://patchblox.com/security/data/product/linux/kernel-livepatch-sle15-sp6-update-5.md) | sles 15.6 | 1-150600.13.3.1 | | [kernel-obs-build](https://patchblox.com/security/data/product/linux/kernel-obs-build.md) | opensuse-leap 15.6 | 6.4.0-150600.23.25.2 | | [kernel-obs-build](https://patchblox.com/security/data/product/linux/kernel-obs-build.md) | sles 15.6 | 6.4.0-150600.23.25.2 | | [kernel-obs-qa](https://patchblox.com/security/data/product/linux/kernel-obs-qa.md) | opensuse-leap 15.6 | 6.4.0-150600.23.25.1 | | [kernel-source](https://patchblox.com/security/data/product/linux/kernel-source.md) | opensuse-leap 15.6 | 6.4.0-150600.23.25.1 | | [kernel-source](https://patchblox.com/security/data/product/linux/kernel-source.md) | sles 15.6 | 6.4.0-150600.23.25.1 | | [kernel-syms](https://patchblox.com/security/data/product/linux/kernel-syms.md) | opensuse-leap 15.6 | 6.4.0-150600.23.25.1 | | [kernel-syms](https://patchblox.com/security/data/product/linux/kernel-syms.md) | sles 15.6 | 6.4.0-150600.23.25.1 | | [kernel-zfcpdump](https://patchblox.com/security/data/product/linux/kernel-zfcpdump.md) | opensuse-leap 15.6 | 6.4.0-150600.23.25.1 | | [kernel-zfcpdump](https://patchblox.com/security/data/product/linux/kernel-zfcpdump.md) | sles 15.6 | 6.4.0-150600.23.25.1 | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2024-44985](https://patchblox.com/security/data/cve/CVE-2024-44985.md) | High | dtb-aarch64: ipv6: prevent possible UAF in ip6_xmit() (bsc#1230206). | 7.8 | 0.0088 | | | [CVE-2024-44998](https://patchblox.com/security/data/cve/CVE-2024-44998.md) | High | dtb-aarch64: atm: idt77252: prevent use after free in dequeue_rx() (bsc#1230171). | 7.8 | 0.0079 | | | [CVE-2024-44986](https://patchblox.com/security/data/cve/CVE-2024-44986.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0072 | | | [CVE-2024-44970](https://patchblox.com/security/data/cve/CVE-2024-44970.md) | High | net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink | 7.8 | 0.0057 | | | [CVE-2024-44988](https://patchblox.com/security/data/cve/CVE-2024-44988.md) | High | dtb-aarch64: net: dsa: mv88e6xxx: Fix out-of-bound access (bsc#1230192). | 7.1 | 0.0036 | | | [CVE-2024-46744](https://patchblox.com/security/data/cve/CVE-2024-46744.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0030 | | | [CVE-2024-46673](https://patchblox.com/security/data/cve/CVE-2024-46673.md) | High | dtb-aarch64: scsi: aacraid: Fix double-free on probe failure (bsc#1230506). | 7.8 | 0.0030 | | | [CVE-2024-46743](https://patchblox.com/security/data/cve/CVE-2024-46743.md) | High | dtb-aarch64: of/irq: Prevent device address out-of-bounds read in interrupt map walk (bsc#1230756). | 7.1 | 0.0030 | | | [CVE-2024-46759](https://patchblox.com/security/data/cve/CVE-2024-46759.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0028 | | | [CVE-2024-38538](https://patchblox.com/security/data/cve/CVE-2024-38538.md) | High | dtb-aarch64: net: bridge: xmit: make sure we have at least eth header len bytes (bsc#1226606). | 7.1 | 0.0028 | | | [CVE-2024-42265](https://patchblox.com/security/data/cve/CVE-2024-42265.md) | High | dtb-aarch64: protect the fetch of ->fd[fd] in do_dup2() from mispredictions (bsc#1229334). | 7.8 | 0.0028 | | | [CVE-2024-46674](https://patchblox.com/security/data/cve/CVE-2024-46674.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0028 | | | [CVE-2024-46747](https://patchblox.com/security/data/cve/CVE-2024-46747.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.1 | 0.0028 | | | [CVE-2024-46738](https://patchblox.com/security/data/cve/CVE-2024-46738.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0028 | | | [CVE-2024-46774](https://patchblox.com/security/data/cve/CVE-2024-46774.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.1 | 0.0027 | | | [CVE-2024-26759](https://patchblox.com/security/data/cve/CVE-2024-26759.md) | High | mm/swap: fix race when skipping swapcache | 7.0 | 0.0026 | | | [CVE-2024-44999](https://patchblox.com/security/data/cve/CVE-2024-44999.md) | High | dtb-aarch64: gtp: pull network headers in gtp_dev_xmit() (bsc#1230233). | 7.1 | 0.0026 | | | [CVE-2024-42154](https://patchblox.com/security/data/cve/CVE-2024-42154.md) | High | dtb-aarch64: tcp_metrics: validate source addr length (bsc#1228507). | 7.8 | 0.0026 | | | [CVE-2024-44987](https://patchblox.com/security/data/cve/CVE-2024-44987.md) | High | dtb-aarch64: ipv6: prevent UAF in ip6_send_skb() (bsc#1230185). | 7.8 | 0.0026 | | | [CVE-2024-44977](https://patchblox.com/security/data/cve/CVE-2024-44977.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0025 | | | [CVE-2024-46689](https://patchblox.com/security/data/cve/CVE-2024-46689.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0025 | | | [CVE-2024-46722](https://patchblox.com/security/data/cve/CVE-2024-46722.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.1 | 0.0025 | | | [CVE-2024-46723](https://patchblox.com/security/data/cve/CVE-2024-46723.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.1 | 0.0025 | | | [CVE-2024-46746](https://patchblox.com/security/data/cve/CVE-2024-46746.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0025 | | | [CVE-2024-26804](https://patchblox.com/security/data/cve/CVE-2024-26804.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: net: ip_tunnel: prevent perpetual headroom growt... | 7.8 | 0.0025 | | | [CVE-2023-52752](https://patchblox.com/security/data/cve/CVE-2023-52752.md) | High | dtb-aarch64: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225487). | 7.8 | 0.0025 | | | [CVE-2024-46741](https://patchblox.com/security/data/cve/CVE-2024-46741.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0024 | | | [CVE-2024-46724](https://patchblox.com/security/data/cve/CVE-2024-46724.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.1 | 0.0024 | | | [CVE-2024-44990](https://patchblox.com/security/data/cve/CVE-2024-44990.md) | High | dtb-aarch64: bonding: fix null pointer deref in bond_ipsec_offload_ok (bsc#1230194). | 8.0 | 0.0024 | | | [CVE-2024-45026](https://patchblox.com/security/data/cve/CVE-2024-45026.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0024 | | | [CVE-2024-46725](https://patchblox.com/security/data/cve/CVE-2024-46725.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0024 | | | [CVE-2024-46731](https://patchblox.com/security/data/cve/CVE-2024-46731.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.1 | 0.0024 | | | [CVE-2024-36953](https://patchblox.com/security/data/cve/CVE-2024-36953.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0023 | | | [CVE-2024-46786](https://patchblox.com/security/data/cve/CVE-2024-46786.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0023 | | | [CVE-2024-42305](https://patchblox.com/security/data/cve/CVE-2024-42305.md) | High | dtb-aarch64: ext4: check dot and dotdot of dx_root before making dir indexed (bsc#1229363). | 7.1 | 0.0023 | | | [CVE-2024-44967](https://patchblox.com/security/data/cve/CVE-2024-44967.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0022 | | | [CVE-2023-52916](https://patchblox.com/security/data/cve/CVE-2023-52916.md) | High | dtb-aarch64: media: aspeed: Fix memory overwrite if timing is 1600x900 (bsc#1230269). | 7.8 | 0.0022 | | | [CVE-2024-46798](https://patchblox.com/security/data/cve/CVE-2024-46798.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0022 | | | [CVE-2024-44997](https://patchblox.com/security/data/cve/CVE-2024-44997.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0021 | | | [CVE-2024-46729](https://patchblox.com/security/data/cve/CVE-2024-46729.md) | High | dtb-aarch64: drm/amd/display: Fix incorrect size calculation for loop (bsc#1230704). | 7.8 | 0.0021 | | | [CVE-2024-46687](https://patchblox.com/security/data/cve/CVE-2024-46687.md) | High | dtb-aarch64: btrfs: fix a use-after-free when hitting errors inside btrfs_submit_chunk() (bsc#1230518). | 7.8 | 0.0021 | | | [CVE-2024-44951](https://patchblox.com/security/data/cve/CVE-2024-44951.md) | High | serial: sc16is7xx: fix TX fifo corruption | 7.8 | 0.0021 | | | [CVE-2024-45023](https://patchblox.com/security/data/cve/CVE-2024-45023.md) | High | dtb-aarch64: md/raid1: Fix data corruption for degraded array with slow disk (bsc#1230455). | 7.1 | 0.0019 | | | [CVE-2024-46756](https://patchblox.com/security/data/cve/CVE-2024-46756.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: hwmon: (w83627ehf) Fix underflows seen when writ... | 7.8 | n/a | | | [CVE-2024-46757](https://patchblox.com/security/data/cve/CVE-2024-46757.md) | High | linux-6.1: In the Linux kernel, the following vulnerability has been resolved: hwmon: (nct6775-core) Fix underflows seen when w... | 7.8 | n/a | | | [CVE-2024-46758](https://patchblox.com/security/data/cve/CVE-2024-46758.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: hwmon: (lm95234) Fix underflows seen when writin... | 7.8 | n/a | | | [CVE-2024-44947](https://patchblox.com/security/data/cve/CVE-2024-44947.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0089 | | | [CVE-2024-40983](https://patchblox.com/security/data/cve/CVE-2024-40983.md) | Routine | dtb-aarch64: tipc: force a dst refcount before doing decryption (bsc#1227819). | 5.5 | 0.0088 | | | [CVE-2024-44946](https://patchblox.com/security/data/cve/CVE-2024-44946.md) | Routine | dtb-aarch64: kcm: Serialise kcm_sendmsg() for the same socket (bsc#1230015). | 5.5 | 0.0086 | | | [CVE-2024-46737](https://patchblox.com/security/data/cve/CVE-2024-46737.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0076 | | | [CVE-2024-44984](https://patchblox.com/security/data/cve/CVE-2024-44984.md) | Routine | dtb-aarch64: bnxt_en: Fix double DMA unmapping for XDP_REDIRECT (bsc#1230240). | 5.5 | 0.0074 | | | [CVE-2023-52610](https://patchblox.com/security/data/cve/CVE-2023-52610.md) | Routine | dtb-aarch64: net/sched: act_ct: fix skb leak and crash on ooo frags (bsc#1221610). | 6.4 | 0.0064 | | | [CVE-2024-45001](https://patchblox.com/security/data/cve/CVE-2024-45001.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0064 | | | [CVE-2024-46695](https://patchblox.com/security/data/cve/CVE-2024-46695.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 6.3 | 0.0053 | | | [CVE-2024-46717](https://patchblox.com/security/data/cve/CVE-2024-46717.md) | Routine | net/mlx5e: SHAMPO, Fix incorrect page release | 5.5 | 0.0053 | | | [CVE-2024-45030](https://patchblox.com/security/data/cve/CVE-2024-45030.md) | Routine | dtb-aarch64: igb: cope with large MAX_SKB_FRAGS (bsc#1230457). | 5.5 | 0.0048 | | | [CVE-2024-46755](https://patchblox.com/security/data/cve/CVE-2024-46755.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0040 | | | [CVE-2024-45013](https://patchblox.com/security/data/cve/CVE-2024-45013.md) | Routine | dtb-aarch64: nvme: move stopping keep-alive into nvme_uninit_ctrl() (bsc#1230442). | 5.5 | 0.0038 | | | [CVE-2024-40973](https://patchblox.com/security/data/cve/CVE-2024-40973.md) | Routine | dtb-aarch64: media: mtk-vcodec: potential null pointer deference in SCP (bsc#1227890). | 5.5 | 0.0029 | | | [CVE-2024-46745](https://patchblox.com/security/data/cve/CVE-2024-46745.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0029 | | | [CVE-2024-46675](https://patchblox.com/security/data/cve/CVE-2024-46675.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0028 | | | [CVE-2024-46739](https://patchblox.com/security/data/cve/CVE-2024-46739.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0028 | | | [CVE-2024-46771](https://patchblox.com/security/data/cve/CVE-2024-46771.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0027 | | | [CVE-2024-46677](https://patchblox.com/security/data/cve/CVE-2024-46677.md) | Routine | dtb-aarch64: gtp: fix a potential NULL pointer dereference (bsc#1230549). | 5.5 | 0.0026 | | | [CVE-2024-46753](https://patchblox.com/security/data/cve/CVE-2024-46753.md) | Routine | dtb-aarch64: btrfs: handle errors from btrfs_dec_ref() properly (bsc#1230796). | 5.5 | 0.0026 | | | [CVE-2024-46685](https://patchblox.com/security/data/cve/CVE-2024-46685.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0026 | | | [CVE-2024-46751](https://patchblox.com/security/data/cve/CVE-2024-46751.md) | Routine | dtb-aarch64: btrfs: do not BUG_ON() when 0 reference count at btrfs_lookup_extent_info() (bsc#1230786). | 5.5 | 0.0026 | | | [CVE-2024-43890](https://patchblox.com/security/data/cve/CVE-2024-43890.md) | Routine | dtb-aarch64: tracing: Fix overflow in get_free_elt() (bsc#1229764). | 5.5 | 0.0026 | | | [CVE-2024-45021](https://patchblox.com/security/data/cve/CVE-2024-45021.md) | Routine | dtb-aarch64: memcg_write_event_control(): fix a user-triggerable oops (bsc#1230434). | 5.5 | 0.0026 | | | [CVE-2024-45006](https://patchblox.com/security/data/cve/CVE-2024-45006.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0025 | | | [CVE-2024-46761](https://patchblox.com/security/data/cve/CVE-2024-46761.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0025 | | | [CVE-2024-46781](https://patchblox.com/security/data/cve/CVE-2024-46781.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0025 | | | [CVE-2024-46822](https://patchblox.com/security/data/cve/CVE-2024-46822.md) | Routine | dtb-aarch64: arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry (bsc#1231120). | 5.5 | 0.0025 | | | [CVE-2024-43835](https://patchblox.com/security/data/cve/CVE-2024-43835.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0025 | | | [CVE-2024-45028](https://patchblox.com/security/data/cve/CVE-2024-45028.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0025 | | | [CVE-2024-46752](https://patchblox.com/security/data/cve/CVE-2024-46752.md) | Routine | dtb-aarch64: btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info() (bsc#1230794). | 5.5 | 0.0025 | | | [CVE-2024-42306](https://patchblox.com/security/data/cve/CVE-2024-42306.md) | Routine | dtb-aarch64: udf: Avoid using corrupted block bitmap buffer (bsc#1229362). | 5.5 | 0.0025 | | | [CVE-2024-46679](https://patchblox.com/security/data/cve/CVE-2024-46679.md) | Routine | dtb-aarch64: ethtool: check device is present when getting link settings (bsc#1230556). | 4.7 | 0.0025 | | | [CVE-2024-44991](https://patchblox.com/security/data/cve/CVE-2024-44991.md) | Routine | dtb-aarch64: tcp: prevent concurrent execution of tcp_sk_exit_batch (bsc#1230195). | 5.5 | 0.0025 | | | [CVE-2024-46676](https://patchblox.com/security/data/cve/CVE-2024-46676.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0025 | | | [CVE-2024-46735](https://patchblox.com/security/data/cve/CVE-2024-46735.md) | Routine | dtb-aarch64: ublk_drv: fix NULL pointer dereference in ublk_ctrl_start_recovery() (bsc#1230727). | 5.5 | 0.0025 | | | [CVE-2024-26640](https://patchblox.com/security/data/cve/CVE-2024-26640.md) | Routine | kernel-default-base: tcp: add sanity checks to rx zerocopy (bsc#1221650). | 5.5 | 0.0024 | | | [CVE-2024-44948](https://patchblox.com/security/data/cve/CVE-2024-44948.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 | | | [CVE-2024-44982](https://patchblox.com/security/data/cve/CVE-2024-44982.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 | | | [CVE-2024-44989](https://patchblox.com/security/data/cve/CVE-2024-44989.md) | Routine | dtb-aarch64: bonding: fix xfrm real_dev null pointer dereference (bsc#1230193). | 5.5 | 0.0024 | | | [CVE-2024-45018](https://patchblox.com/security/data/cve/CVE-2024-45018.md) | Routine | dtb-aarch64: netfilter: flowtable: initialise extack before use (bsc#1230431). | 5.5 | 0.0024 | | | [CVE-2024-46780](https://patchblox.com/security/data/cve/CVE-2024-46780.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 | | | [CVE-2024-44944](https://patchblox.com/security/data/cve/CVE-2024-44944.md) | Routine | dtb-aarch64: netfilter: ctnetlink: use helper function to calculate expect ID (bsc#1229899). | 6.1 | 0.0024 | | | [CVE-2024-43828](https://patchblox.com/security/data/cve/CVE-2024-43828.md) | Routine | dtb-aarch64: ext4: fix infinite loop when replaying fast_commit (bsc#1229394). | 5.5 | 0.0024 | | | [CVE-2024-44960](https://patchblox.com/security/data/cve/CVE-2024-44960.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 | | | [CVE-2024-45008](https://patchblox.com/security/data/cve/CVE-2024-45008.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 | | | [CVE-2024-46714](https://patchblox.com/security/data/cve/CVE-2024-46714.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 | | | [CVE-2024-46719](https://patchblox.com/security/data/cve/CVE-2024-46719.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 | | | [CVE-2024-46702](https://patchblox.com/security/data/cve/CVE-2024-46702.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 | | | [CVE-2024-43904](https://patchblox.com/security/data/cve/CVE-2024-43904.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 | | | [CVE-2024-46772](https://patchblox.com/security/data/cve/CVE-2024-46772.md) | Routine | dtb-aarch64: drm/amd/display: Check denominator crb_pipes before used (bsc#1230772). | 5.5 | 0.0024 | | | [CVE-2024-46773](https://patchblox.com/security/data/cve/CVE-2024-46773.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 | | | [CVE-2024-43832](https://patchblox.com/security/data/cve/CVE-2024-43832.md) | Routine | dtb-aarch64: s390/uv: Do not call folio_wait_writeback() without a folio reference (bsc#1229380). | 5.5 | 0.0024 | | | [CVE-2024-46767](https://patchblox.com/security/data/cve/CVE-2024-46767.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 | | | [CVE-2024-46776](https://patchblox.com/security/data/cve/CVE-2024-46776.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 | | | [CVE-2024-42304](https://patchblox.com/security/data/cve/CVE-2024-42304.md) | Routine | dtb-aarch64: ext4: make sure the first directory block is not a hole (bsc#1229364). | 5.5 | 0.0023 | | | [CVE-2024-46760](https://patchblox.com/security/data/cve/CVE-2024-46760.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0023 | | | [CVE-2024-45000](https://patchblox.com/security/data/cve/CVE-2024-45000.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0023 | | | [CVE-2024-46707](https://patchblox.com/security/data/cve/CVE-2024-46707.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0023 | | | [CVE-2024-45020](https://patchblox.com/security/data/cve/CVE-2024-45020.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 6.0 | 0.0023 | | | [CVE-2024-46749](https://patchblox.com/security/data/cve/CVE-2024-46749.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0023 | | | [CVE-2024-46686](https://patchblox.com/security/data/cve/CVE-2024-46686.md) | Routine | dtb-aarch64: smb/client: avoid dereferencing rdata=NULL in smb2_new_read_req() (bsc#1230517). | 5.5 | 0.0023 | | | [CVE-2024-46732](https://patchblox.com/security/data/cve/CVE-2024-46732.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0023 | | | [CVE-2024-46783](https://patchblox.com/security/data/cve/CVE-2024-46783.md) | Routine | kernel-modules: kernel: tcp_bpf: fix return value of tcp_bpf_sendmsg() | 5.5 | 0.0023 | | | [CVE-2024-45011](https://patchblox.com/security/data/cve/CVE-2024-45011.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0023 | | | [CVE-2024-46709](https://patchblox.com/security/data/cve/CVE-2024-46709.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0023 | | | [CVE-2024-45022](https://patchblox.com/security/data/cve/CVE-2024-45022.md) | Routine | dtb-aarch64: mm/vmalloc: fix page mapping if vm_area_alloc_pages() with high order fallback to order 0 (bsc#1230435). | 5.5 | 0.0023 | | | [CVE-2024-46730](https://patchblox.com/security/data/cve/CVE-2024-46730.md) | Routine | drm/amd/display: Ensure array index tg_inst won't be -1 | 5.5 | 0.0023 | | | [CVE-2024-46694](https://patchblox.com/security/data/cve/CVE-2024-46694.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0023 | | | [CVE-2024-46726](https://patchblox.com/security/data/cve/CVE-2024-46726.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0023 | | | [CVE-2024-43914](https://patchblox.com/security/data/cve/CVE-2024-43914.md) | Routine | dtb-aarch64: md/raid5: avoid BUG_ON() while continue reshape after reassembling (bsc#1229790). | 5.5 | 0.0023 | | | [CVE-2024-44935](https://patchblox.com/security/data/cve/CVE-2024-44935.md) | Routine | dtb-aarch64: sctp: Fix null-ptr-deref in reuseport_add_sock() (bsc#1229810). | 5.5 | 0.0023 | | | [CVE-2024-44950](https://patchblox.com/security/data/cve/CVE-2024-44950.md) | Routine | dtb-aarch64: serial: sc16is7xx: fix invalid FIFO access with special register set (bsc#1230180). | 5.5 | 0.0023 | | | [CVE-2024-46716](https://patchblox.com/security/data/cve/CVE-2024-46716.md) | Routine | dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor | 5.5 | 0.0023 | | | [CVE-2024-38632](https://patchblox.com/security/data/cve/CVE-2024-38632.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0023 | | | [CVE-2024-46710](https://patchblox.com/security/data/cve/CVE-2024-46710.md) | Routine | dtb-aarch64: drm/vmwgfx: Prevent unmapping active read buffers (bsc#1230540). | 4.7 | 0.0023 | | | [CVE-2024-45007](https://patchblox.com/security/data/cve/CVE-2024-45007.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0023 | | | [CVE-2024-45002](https://patchblox.com/security/data/cve/CVE-2024-45002.md) | Routine | dtb-aarch64: rtla/osnoise: Prevent NULL dereference in error handling (bsc#1230169). | 5.5 | 0.0022 | | | [CVE-2024-46750](https://patchblox.com/security/data/cve/CVE-2024-46750.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0022 | | | [CVE-2024-44965](https://patchblox.com/security/data/cve/CVE-2024-44965.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0022 | | | [CVE-2024-40965](https://patchblox.com/security/data/cve/CVE-2024-40965.md) | Routine | kernel-64kb: i2c: lpi2c: Avoid calling clk_get_rate during transfer (bsc#1227885). | 5.5 | 0.0022 | | | [CVE-2024-46715](https://patchblox.com/security/data/cve/CVE-2024-46715.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0022 | | | [CVE-2024-43845](https://patchblox.com/security/data/cve/CVE-2024-43845.md) | Routine | dtb-aarch64: udf: Fix bogus checksum computation in udf_rename() (bsc#1229389). | 3.3 | 0.0022 | | | [CVE-2024-44969](https://patchblox.com/security/data/cve/CVE-2024-44969.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 6.1 | 0.0022 | | | [CVE-2024-46784](https://patchblox.com/security/data/cve/CVE-2024-46784.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0022 | | | [CVE-2024-46787](https://patchblox.com/security/data/cve/CVE-2024-46787.md) | Routine | userfaultfd: fix checks for huge PMDs | 4.7 | 0.0022 | | | [CVE-2024-46728](https://patchblox.com/security/data/cve/CVE-2024-46728.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0022 | | | [CVE-2024-46720](https://patchblox.com/security/data/cve/CVE-2024-46720.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0022 | | | [CVE-2024-46706](https://patchblox.com/security/data/cve/CVE-2024-46706.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0022 | | | [CVE-2024-42252](https://patchblox.com/security/data/cve/CVE-2024-42252.md) | Routine | dtb-aarch64: closures: Change BUG_ON() to WARN_ON() (bsc#1229004). | 5.5 | 0.0021 | | | [CVE-2024-43870](https://patchblox.com/security/data/cve/CVE-2024-43870.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0021 | | | [CVE-2024-44971](https://patchblox.com/security/data/cve/CVE-2024-44971.md) | Routine | dtb-aarch64: net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register() (bsc#1230211). | 5.5 | 0.0021 | | | [CVE-2023-52915](https://patchblox.com/security/data/cve/CVE-2023-52915.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0021 | | | [CVE-2024-42243](https://patchblox.com/security/data/cve/CVE-2024-42243.md) | Routine | dtb-aarch64: mm/filemap: make MAX_PAGECACHE_ORDER acceptable to xarray (bsc#1229001). | 5.5 | 0.0021 | | | [CVE-2024-44961](https://patchblox.com/security/data/cve/CVE-2024-44961.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0021 | | | [CVE-2024-44962](https://patchblox.com/security/data/cve/CVE-2024-44962.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0021 | | | [CVE-2024-45005](https://patchblox.com/security/data/cve/CVE-2024-45005.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0021 | | | [CVE-2024-46672](https://patchblox.com/security/data/cve/CVE-2024-46672.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0021 | | | [CVE-2024-46693](https://patchblox.com/security/data/cve/CVE-2024-46693.md) | Routine | dtb-aarch64: kABI workaround for soc-qcom pmic_glink changes (bsc#1230521). | 4.7 | 0.0021 | | | [CVE-2024-45012](https://patchblox.com/security/data/cve/CVE-2024-45012.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0021 | | | [CVE-2024-45015](https://patchblox.com/security/data/cve/CVE-2024-45015.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0021 | | | [CVE-2024-46691](https://patchblox.com/security/data/cve/CVE-2024-46691.md) | Routine | dtb-aarch64: usb: typec: ucsi: Move unregister out of atomic section (bsc#1230526). | 5.5 | 0.0021 | | | [CVE-2024-46794](https://patchblox.com/security/data/cve/CVE-2024-46794.md) | Routine | dtb-aarch64: x86/tdx: Fix data leak in mmio_read() (bsc#1230825). | 3.3 | 0.0020 | | | [CVE-2024-45017](https://patchblox.com/security/data/cve/CVE-2024-45017.md) | Routine | dtb-aarch64: net/mlx5: Fix IPsec RoCE MPV trace call (bsc#1230430). | 5.5 | 0.0019 | | | [CVE-2024-46778](https://patchblox.com/security/data/cve/CVE-2024-46778.md) | Routine | drm/amd/display: Check UnboundedRequestEnabled's value | 5.5 | 0.0019 | | | [CVE-2024-46734](https://patchblox.com/security/data/cve/CVE-2024-46734.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0019 | | | [CVE-2024-38596](https://patchblox.com/security/data/cve/CVE-2024-38596.md) | Routine | kernel-rt-modules-extra: Important: kernel-rt security update | 4.7 | 0.0019 | | | [CVE-2024-45019](https://patchblox.com/security/data/cve/CVE-2024-45019.md) | Routine | dtb-aarch64: net/mlx5e: Take state lock during tx timeout reporter (bsc#1230432). | 5.5 | 0.0018 | | | [CVE-2024-44954](https://patchblox.com/security/data/cve/CVE-2024-44954.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.0 | 0.0018 | | | [CVE-2024-45003](https://patchblox.com/security/data/cve/CVE-2024-45003.md) | Routine | dtb-aarch64: Don't evict inode under the inode lru traversing context (bsc#1230245). | 4.7 | 0.0017 | | | [CVE-2024-45029](https://patchblox.com/security/data/cve/CVE-2024-45029.md) | Routine | dtb-aarch64: i2c: tegra: Do not mark ACPI devices as irq safe (bsc#1230451). | 5.5 | 0.0017 | | | [CVE-2024-46692](https://patchblox.com/security/data/cve/CVE-2024-46692.md) | Routine | dtb-aarch64: firmware: qcom: scm: Mark get_wq_ctx() as atomic call (bsc#1230520). | 5.5 | 0.0017 | | | [CVE-2024-42294](https://patchblox.com/security/data/cve/CVE-2024-42294.md) | Routine | dtb-aarch64: block: fix deadlock between sd_remove & sd_release (bsc#1229371). | 5.5 | 0.0017 | | | [CVE-2024-46791](https://patchblox.com/security/data/cve/CVE-2024-46791.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0016 | | | [CVE-2024-46797](https://patchblox.com/security/data/cve/CVE-2024-46797.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0016 | | | [CVE-2024-44952](https://patchblox.com/security/data/cve/CVE-2024-44952.md) | Routine | linux: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | 5.5 | n/a | | | [CVE-2024-43898](https://patchblox.com/security/data/cve/CVE-2024-43898.md) | Routine | dtb-aarch64: ext4: sanity check for NULL pointer after ext4_force_shutdown (bsc#1229753). | n/a | n/a | | --- Data as of 2026-11-11T01:43:54Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.