# SUSE-SU-2024:3984-1: Security update for 3 packages

SUSE-SU-2024:3984-1, released November 13, 2024, fixes 275 CVEs across 3 products. None of them is reported as exploited. Patch Radar priority: High.

- Web page: https://patchblox.com/security/fix/linux/suse-su-2024-3984-1
- Platform: Linux
- Released: Nov 13, 2024
- Priority: High (Closes CVE-2024-47685, high severity)
- CVEs: 275, exploited: 0, on CISA KEV: 0
- Vendor advisory: https://osv.dev/vulnerability/SUSE-SU-2024:3984-1

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [kernel-azure](https://patchblox.com/security/data/product/linux/kernel-azure.md) | opensuse-leap 15.6 | 6.4.0-150600.8.17.2 |
| [kernel-azure](https://patchblox.com/security/data/product/linux/kernel-azure.md) | sles 15.6 | 6.4.0-150600.8.17.2 |
| [kernel-source-azure](https://patchblox.com/security/data/product/linux/kernel-source-azure.md) | opensuse-leap 15.6 | 6.4.0-150600.8.17.1 |
| [kernel-source-azure](https://patchblox.com/security/data/product/linux/kernel-source-azure.md) | sles 15.6 | 6.4.0-150600.8.17.1 |
| [kernel-syms-azure](https://patchblox.com/security/data/product/linux/kernel-syms-azure.md) | opensuse-leap 15.6 | 6.4.0-150600.8.17.1 |
| [kernel-syms-azure](https://patchblox.com/security/data/product/linux/kernel-syms-azure.md) | sles 15.6 | 6.4.0-150600.8.17.1 |

## CVEs this fix closes

| CVE | Priority | Title | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2024-47685](https://patchblox.com/security/data/cve/CVE-2024-47685.md) | High | kernel-64kb: netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (bsc#1231998). | 9.1 | 0.0136 |  |
| [CVE-2024-50033](https://patchblox.com/security/data/cve/CVE-2024-50033.md) | High | kernel-64kb: slip: make slhc_remember() more robust against malicious packets (bsc#1231914). | 7.1 | 0.0079 |  |
| [CVE-2024-49996](https://patchblox.com/security/data/cve/CVE-2024-49996.md) | High | kernel-64kb: cifs: Fix buffer overflow when parsing NFS reparse points (bsc#1232089). | 7.8 | 0.0078 |  |
| [CVE-2024-47696](https://patchblox.com/security/data/cve/CVE-2024-47696.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0073 |  |
| [CVE-2024-47695](https://patchblox.com/security/data/cve/CVE-2024-47695.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0069 |  |
| [CVE-2023-52881](https://patchblox.com/security/data/cve/CVE-2023-52881.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.0 | 0.0061 |  |
| [CVE-2024-47682](https://patchblox.com/security/data/cve/CVE-2024-47682.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0054 |  |
| [CVE-2024-49855](https://patchblox.com/security/data/cve/CVE-2024-49855.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.0 | 0.0046 |  |
| [CVE-2024-49864](https://patchblox.com/security/data/cve/CVE-2024-49864.md) | High | kernel-64kb: rxrpc: Fix a race between socket set up and I/O thread creation (bsc#1232256). | 7.8 | 0.0045 |  |
| [CVE-2023-6270](https://patchblox.com/security/data/cve/CVE-2023-6270.md) | High | kernel-64kb: aoe: fix the potential use-after-free problem in more places (bsc#1218562). | 7.0 | 0.0041 |  |
| [CVE-2024-49982](https://patchblox.com/security/data/cve/CVE-2024-49982.md) | High | kernel-coco_debug: Security update for the Linux Kernel | 7.8 | 0.0038 |  |
| [CVE-2024-49930](https://patchblox.com/security/data/cve/CVE-2024-49930.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0038 |  |
| [CVE-2024-49894](https://patchblox.com/security/data/cve/CVE-2024-49894.md) | High | kernel-64kb: drm/amd/display: Fix index out of bounds in degamma hardware format translation (bsc#1232354). | 7.8 | 0.0033 |  |
| [CVE-2024-49882](https://patchblox.com/security/data/cve/CVE-2024-49882.md) | High | kernel-64kb: ext4: fix double brelse() the buffer of the extents path (bsc#1232200). | 7.8 | 0.0032 |  |
| [CVE-2024-27043](https://patchblox.com/security/data/cve/CVE-2024-27043.md) | High | kernel-syms-azure: Security update for the Linux Kernel | 7.8 | 0.0029 |  |
| [CVE-2024-47742](https://patchblox.com/security/data/cve/CVE-2024-47742.md) | High | kernel-livepatch-SLE15-SP6_Update_6: Security update for the Linux Kernel | 7.8 | 0.0029 |  |
| [CVE-2024-49960](https://patchblox.com/security/data/cve/CVE-2024-49960.md) | High | kernel-64kb: ext4: fix timer use-after-free on failed mount (bsc#1232395). | 7.8 | 0.0029 |  |
| [CVE-2024-47723](https://patchblox.com/security/data/cve/CVE-2024-47723.md) | High | kernel-livepatch-SLE15-SP6_Update_6: Security update for the Linux Kernel | 7.1 | 0.0029 |  |
| [CVE-2024-47745](https://patchblox.com/security/data/cve/CVE-2024-47745.md) | High | mm: call the security_mmap_file() LSM hook in remap_file_pages() | 7.8 | 0.0028 |  |
| [CVE-2024-45016](https://patchblox.com/security/data/cve/CVE-2024-45016.md) | High | dtb-aarch64: netem: fix return value if duplicate enqueue fails (bsc#1230429). | 7.0 | 0.0028 |  |
| [CVE-2024-47697](https://patchblox.com/security/data/cve/CVE-2024-47697.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0028 |  |
| [CVE-2024-49900](https://patchblox.com/security/data/cve/CVE-2024-49900.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.1 | 0.0028 |  |
| [CVE-2024-49974](https://patchblox.com/security/data/cve/CVE-2024-49974.md) | High | kernel-64kb: NFSD: Force all NFSv4.2 COPY requests to be synchronous (bsc#1232383). | 7.5 | 0.0028 |  |
| [CVE-2024-49883](https://patchblox.com/security/data/cve/CVE-2024-49883.md) | High | kernel-64kb: ext4: aovid use-after-free in ext4_ext_insert_extent() (bsc#1232199). | 7.8 | 0.0028 |  |
| [CVE-2024-49991](https://patchblox.com/security/data/cve/CVE-2024-49991.md) | High | kernel-64kb: drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer (bsc#1232282). | 7.8 | 0.0028 |  |
| [CVE-2024-49936](https://patchblox.com/security/data/cve/CVE-2024-49936.md) | High | kernel-64kb: net/xen-netback: prevent UAF in xenvif_flush_hash() (bsc#1232424). | 7.8 | 0.0027 |  |
| [CVE-2024-49895](https://patchblox.com/security/data/cve/CVE-2024-49895.md) | High | kernel-coco_debug: drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation (bsc#1232352). | 7.8 | 0.0027 |  |
| [CVE-2024-49969](https://patchblox.com/security/data/cve/CVE-2024-49969.md) | High | kernel-64kb: drm/amd/display: Fix index out of bounds in DCN30 color transformation (bsc#1232519). | 7.8 | 0.0027 |  |
| [CVE-2024-50035](https://patchblox.com/security/data/cve/CVE-2024-50035.md) | High | kernel-64kb: ppp: fix ppp_async_encode() illegal access (bsc#1232392). | 7.1 | 0.0027 |  |
| [CVE-2024-46818](https://patchblox.com/security/data/cve/CVE-2024-46818.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0027 |  |
| [CVE-2024-49966](https://patchblox.com/security/data/cve/CVE-2024-49966.md) | High | kernel-livepatch-SLE15-SP6-RT_Update_5: Security update for the Linux Kernel | 7.8 | 0.0027 |  |
| [CVE-2024-47698](https://patchblox.com/security/data/cve/CVE-2024-47698.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0027 |  |
| [CVE-2024-46815](https://patchblox.com/security/data/cve/CVE-2024-46815.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0027 |  |
| [CVE-2024-46821](https://patchblox.com/security/data/cve/CVE-2024-46821.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0026 |  |
| [CVE-2024-38577](https://patchblox.com/security/data/cve/CVE-2024-38577.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0026 |  |
| [CVE-2024-38576](https://patchblox.com/security/data/cve/CVE-2024-38576.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  rcu: Fix buffer overflow in print_cpu_stall_info... | 7.0 | 0.0026 |  |
| [CVE-2024-46812](https://patchblox.com/security/data/cve/CVE-2024-46812.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0026 |  |
| [CVE-2024-46813](https://patchblox.com/security/data/cve/CVE-2024-46813.md) | High | dtb-aarch64: drm/amd/display: Check link_index before accessing dc->links (bsc#1231191). | 7.8 | 0.0026 |  |
| [CVE-2024-49903](https://patchblox.com/security/data/cve/CVE-2024-49903.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.0 | 0.0026 |  |
| [CVE-2024-49860](https://patchblox.com/security/data/cve/CVE-2024-49860.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.1 | 0.0025 |  |
| [CVE-2024-47730](https://patchblox.com/security/data/cve/CVE-2024-47730.md) | High | kernel-64kb: crypto: hisilicon/qm - inject error before stopping queue (bsc#1232075). | 7.8 | 0.0025 |  |
| [CVE-2024-50055](https://patchblox.com/security/data/cve/CVE-2024-50055.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0025 |  |
| [CVE-2024-46814](https://patchblox.com/security/data/cve/CVE-2024-46814.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0025 |  |
| [CVE-2024-46849](https://patchblox.com/security/data/cve/CVE-2024-46849.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0025 |  |
| [CVE-2024-50007](https://patchblox.com/security/data/cve/CVE-2024-50007.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0025 |  |
| [CVE-2023-52766](https://patchblox.com/security/data/cve/CVE-2023-52766.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.1 | 0.0025 |  |
| [CVE-2024-46826](https://patchblox.com/security/data/cve/CVE-2024-46826.md) | High | dtb-aarch64: ELF: fix kernel.randomize_va_space double read (bsc#1231115). | 8.0 | 0.0025 |  |
| [CVE-2024-49986](https://patchblox.com/security/data/cve/CVE-2024-49986.md) | High | kernel-64kb: platform/x86: x86-android-tablets: Fix use after free on platform_device_register() errors (bsc#1232093). | 7.8 | 0.0025 |  |
| [CVE-2024-46804](https://patchblox.com/security/data/cve/CVE-2024-46804.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0025 |  |
| [CVE-2024-47727](https://patchblox.com/security/data/cve/CVE-2024-47727.md) | High | kernel-64kb: x86/tdx: Fix 'in-kernel MMIO' check (bsc#1232116). | 7.8 | 0.0025 |  |
| [CVE-2024-46811](https://patchblox.com/security/data/cve/CVE-2024-46811.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0025 |  |
| [CVE-2024-47718](https://patchblox.com/security/data/cve/CVE-2024-47718.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0025 |  |
| [CVE-2024-46830](https://patchblox.com/security/data/cve/CVE-2024-46830.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0025 |  |
| [CVE-2024-38599](https://patchblox.com/security/data/cve/CVE-2024-38599.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.1 | 0.0025 |  |
| [CVE-2024-49886](https://patchblox.com/security/data/cve/CVE-2024-49886.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.1 | 0.0025 |  |
| [CVE-2024-46836](https://patchblox.com/security/data/cve/CVE-2024-46836.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0024 |  |
| [CVE-2024-49931](https://patchblox.com/security/data/cve/CVE-2024-49931.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0024 |  |
| [CVE-2024-47686](https://patchblox.com/security/data/cve/CVE-2024-47686.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.1 | 0.0024 |  |
| [CVE-2024-46853](https://patchblox.com/security/data/cve/CVE-2024-46853.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0024 |  |
| [CVE-2024-49928](https://patchblox.com/security/data/cve/CVE-2024-49928.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.1 | 0.0024 |  |
| [CVE-2024-46831](https://patchblox.com/security/data/cve/CVE-2024-46831.md) | High | kernel-64kb: net: microchip: vcap: Fix use-after-free error in kunit test (bsc#1231117). | 7.8 | 0.0024 |  |
| [CVE-2024-47670](https://patchblox.com/security/data/cve/CVE-2024-47670.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0024 |  |
| [CVE-2024-47675](https://patchblox.com/security/data/cve/CVE-2024-47675.md) | High | kernel-docs: Security update for the Linux Kernel | 7.8 | 0.0024 |  |
| [CVE-2024-47757](https://patchblox.com/security/data/cve/CVE-2024-47757.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.1 | 0.0024 |  |
| [CVE-2024-50074](https://patchblox.com/security/data/cve/CVE-2024-50074.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0024 |  |
| [CVE-2024-50063](https://patchblox.com/security/data/cve/CVE-2024-50063.md) | High | kernel-64kb: bpf: Prevent tail call between progs attached to different hooks (bsc#1232435). | 7.8 | 0.0023 |  |
| [CVE-2024-50059](https://patchblox.com/security/data/cve/CVE-2024-50059.md) | High | kernel-64kb: ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition (bsc#1232345). | 7.0 | 0.0023 |  |
| [CVE-2024-47751](https://patchblox.com/security/data/cve/CVE-2024-47751.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0023 |  |
| [CVE-2024-46854](https://patchblox.com/security/data/cve/CVE-2024-46854.md) | High | kernel-64kb: net: dpaa: Pad packets to ETH_ZLEN (bsc#1231084). | 7.1 | 0.0023 |  |
| [CVE-2024-49874](https://patchblox.com/security/data/cve/CVE-2024-49874.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.0 | 0.0023 |  |
| [CVE-2024-44932](https://patchblox.com/security/data/cve/CVE-2024-44932.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0023 |  |
| [CVE-2024-44964](https://patchblox.com/security/data/cve/CVE-2024-44964.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0023 |  |
| [CVE-2024-46766](https://patchblox.com/security/data/cve/CVE-2024-46766.md) | High | dtb-aarch64: ice: move netif_queue_set_napi to rtnl-protected sections (bsc#1230762). | 7.8 | 0.0023 |  |
| [CVE-2024-47719](https://patchblox.com/security/data/cve/CVE-2024-47719.md) | High | kernel-source: Security update for the Linux Kernel | 7.8 | 0.0023 |  |
| [CVE-2023-52800](https://patchblox.com/security/data/cve/CVE-2023-52800.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0023 |  |
| [CVE-2024-49862](https://patchblox.com/security/data/cve/CVE-2024-49862.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.1 | 0.0023 |  |
| [CVE-2024-47747](https://patchblox.com/security/data/cve/CVE-2024-47747.md) | High | kernel-64kb: net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition (bsc#1232145). | 7.0 | 0.0023 |  |
| [CVE-2024-50060](https://patchblox.com/security/data/cve/CVE-2024-50060.md) | High | kernel-64kb: io_uring: check if we need to reschedule during overflow flush (bsc#1232417). | 7.8 | 0.0022 |  |
| [CVE-2024-49851](https://patchblox.com/security/data/cve/CVE-2024-49851.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.1 | 0.0022 |  |
| [CVE-2024-46859](https://patchblox.com/security/data/cve/CVE-2024-46859.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0022 |  |
| [CVE-2024-49853](https://patchblox.com/security/data/cve/CVE-2024-49853.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0022 |  |
| [CVE-2024-46852](https://patchblox.com/security/data/cve/CVE-2024-46852.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0022 |  |
| [CVE-2024-46871](https://patchblox.com/security/data/cve/CVE-2024-46871.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0022 |  |
| [CVE-2024-50061](https://patchblox.com/security/data/cve/CVE-2024-50061.md) | High | i3c: master: cdns: Fix use after free vulnerability in cdns_i3c_master Driver Due to Race Condition | 7.0 | 0.0022 |  |
| [CVE-2024-47748](https://patchblox.com/security/data/cve/CVE-2024-47748.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0021 |  |
| [CVE-2024-50042](https://patchblox.com/security/data/cve/CVE-2024-50042.md) | High | kernel-64kb: ice: Fix increasing MSI-X on VF (bsc#1231906). | 7.1 | 0.0021 |  |
| [CVE-2024-47750](https://patchblox.com/security/data/cve/CVE-2024-47750.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0021 |  |
| [CVE-2024-49852](https://patchblox.com/security/data/cve/CVE-2024-49852.md) | High | kernel-64kb: scsi: elx: libefc: Fix potential use after free in efc_nport_vport_del() (bsc#1232819). | 7.8 | 0.0021 |  |
| [CVE-2024-49981](https://patchblox.com/security/data/cve/CVE-2024-49981.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.0 | 0.0019 |  |
| [CVE-2024-47741](https://patchblox.com/security/data/cve/CVE-2024-47741.md) | High | kernel-64kb: btrfs: fix race setting file private on concurrent lseek using same fd (bsc#1231869). | 7.0 | 0.0017 |  |
| [CVE-2024-49967](https://patchblox.com/security/data/cve/CVE-2024-49967.md) | High | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | 7.8 | n/a |  |
| [CVE-2024-49995](https://patchblox.com/security/data/cve/CVE-2024-49995.md) | High | linux: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | 7.1 | n/a |  |
| [CVE-2024-47692](https://patchblox.com/security/data/cve/CVE-2024-47692.md) | Routine | kernel-64kb: nfsd: return -EINVAL when namelen is 0 (bsc#1231857). | 6.5 | 0.0116 |  |
| [CVE-2024-47693](https://patchblox.com/security/data/cve/CVE-2024-47693.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 6.5 | 0.0098 |  |
| [CVE-2024-42145](https://patchblox.com/security/data/cve/CVE-2024-42145.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0087 |  |
| [CVE-2024-27026](https://patchblox.com/security/data/cve/CVE-2024-27026.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0077 |  |
| [CVE-2024-47739](https://patchblox.com/security/data/cve/CVE-2024-47739.md) | Routine | kernel-64kb: padata: use integer wrap around to prevent deadlock on seq_nr overflow (bsc#1232124). | 5.5 | 0.0068 |  |
| [CVE-2024-50045](https://patchblox.com/security/data/cve/CVE-2024-50045.md) | Routine | kernel-64kb: netfilter: br_netfilter: fix panic with metadata_dst skb (bsc#1231903). | 5.5 | 0.0061 |  |
| [CVE-2024-50076](https://patchblox.com/security/data/cve/CVE-2024-50076.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 6.5 | 0.0061 |  |
| [CVE-2024-50046](https://patchblox.com/security/data/cve/CVE-2024-50046.md) | Routine | kernel-64kb: NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies() (bsc#1231902). | 5.5 | 0.0058 |  |
| [CVE-2024-47749](https://patchblox.com/security/data/cve/CVE-2024-47749.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0057 |  |
| [CVE-2024-49875](https://patchblox.com/security/data/cve/CVE-2024-49875.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0054 |  |
| [CVE-2024-46855](https://patchblox.com/security/data/cve/CVE-2024-46855.md) | Routine | kernel-64kb: netfilter: nft_socket: fix sk refcount leaks (bsc#1231085). | 5.5 | 0.0054 |  |
| [CVE-2024-50062](https://patchblox.com/security/data/cve/CVE-2024-50062.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0051 |  |
| [CVE-2024-47658](https://patchblox.com/security/data/cve/CVE-2024-47658.md) | Routine | crypto: stm32/cryp - call finalize with bh disabled | 5.5 | 0.0048 |  |
| [CVE-2024-47712](https://patchblox.com/security/data/cve/CVE-2024-47712.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0037 |  |
| [CVE-2024-49939](https://patchblox.com/security/data/cve/CVE-2024-49939.md) | Routine | wifi: rtw89: avoid to add interface to list twice when SER | 6.4 | 0.0034 |  |
| [CVE-2024-49955](https://patchblox.com/security/data/cve/CVE-2024-49955.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0034 |  |
| [CVE-2024-50001](https://patchblox.com/security/data/cve/CVE-2024-50001.md) | Routine | kernel-64kb: net/mlx5: Fix error path in multi-packet WQE transmit (bsc#1232084). | 5.5 | 0.0033 |  |
| [CVE-2024-49953](https://patchblox.com/security/data/cve/CVE-2024-49953.md) | Routine | kernel-64kb: net/mlx5e: Fix crash caused by calling __xfrm_state_delete() twice (bsc#1232156). | 5.5 | 0.0030 |  |
| [CVE-2024-49867](https://patchblox.com/security/data/cve/CVE-2024-49867.md) | Routine | kernel-64kb: btrfs: wait for fixup workers before stopping cleaner kthread during umount (bsc#1232262). | 5.5 | 0.0030 |  |
| [CVE-2024-49878](https://patchblox.com/security/data/cve/CVE-2024-49878.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0030 |  |
| [CVE-2024-49920](https://patchblox.com/security/data/cve/CVE-2024-49920.md) | Routine | drm/amd/display: Check null pointers before multiple uses | 5.5 | 0.0030 |  |
| [CVE-2024-46834](https://patchblox.com/security/data/cve/CVE-2024-46834.md) | Routine | ethtool: fail closed if we can't get max channel used in indirection tables | 5.5 | 0.0029 |  |
| [CVE-2024-46842](https://patchblox.com/security/data/cve/CVE-2024-46842.md) | Routine | scsi: lpfc: Handle mailbox timeouts in lpfc_get_sfp_info | 5.5 | 0.0029 |  |
| [CVE-2024-41031](https://patchblox.com/security/data/cve/CVE-2024-41031.md) | Routine | kernel-64kb: mm/filemap: skip to create PMD-sized page cache if needed (bsc#1228454). | 5.5 | 0.0029 |  |
| [CVE-2024-49902](https://patchblox.com/security/data/cve/CVE-2024-49902.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0029 |  |
| [CVE-2024-49863](https://patchblox.com/security/data/cve/CVE-2024-49863.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0029 |  |
| [CVE-2024-49918](https://patchblox.com/security/data/cve/CVE-2024-49918.md) | Routine | drm/amd/display: Add null check for head_pipe in dcn32_acquire_idle_pipe_for_head_pipe_in_layer | 5.5 | 0.0029 |  |
| [CVE-2024-47714](https://patchblox.com/security/data/cve/CVE-2024-47714.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0028 |  |
| [CVE-2024-49949](https://patchblox.com/security/data/cve/CVE-2024-49949.md) | Routine | kernel-64kb: net: avoid potential underflow in qdisc_pkt_len_init() with UFO (bsc#1232160). | 5.5 | 0.0028 |  |
| [CVE-2024-50024](https://patchblox.com/security/data/cve/CVE-2024-50024.md) | Routine | kernel-64kb: net: Fix an unsafe loop on the list (bsc#1231954). | 5.5 | 0.0028 |  |
| [CVE-2024-47684](https://patchblox.com/security/data/cve/CVE-2024-47684.md) | Routine | kernel-64kb: tcp: check skb is non-NULL in tcp_rto_delta_us() (bsc#1231987). | 5.5 | 0.0028 |  |
| [CVE-2024-47737](https://patchblox.com/security/data/cve/CVE-2024-47737.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0028 |  |
| [CVE-2024-41047](https://patchblox.com/security/data/cve/CVE-2024-41047.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0027 |  |
| [CVE-2024-49958](https://patchblox.com/security/data/cve/CVE-2024-49958.md) | Routine | kernel-64kb: ocfs2: reserve space for inline xattr before attaching reflink tree (bsc#1232151). | 5.5 | 0.0027 |  |
| [CVE-2024-46803](https://patchblox.com/security/data/cve/CVE-2024-46803.md) | Routine | drm/amdkfd: Check debug trap enable before write dbg_ev_file | 5.5 | 0.0027 |  |
| [CVE-2024-46816](https://patchblox.com/security/data/cve/CVE-2024-46816.md) | Routine | dtb-aarch64: drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links (bsc#1231197). | 5.5 | 0.0027 |  |
| [CVE-2024-50022](https://patchblox.com/security/data/cve/CVE-2024-50022.md) | Routine | kernel-64kb: device-dax: correct pgoff align in dax_set_mapping() (bsc#1231956). | 5.5 | 0.0027 |  |
| [CVE-2024-46840](https://patchblox.com/security/data/cve/CVE-2024-46840.md) | Routine | kernel-64kb: btrfs: clean up our handling of refs == 0 in snapshot delete (bsc#1231105). | 5.5 | 0.0026 |  |
| [CVE-2024-49896](https://patchblox.com/security/data/cve/CVE-2024-49896.md) | Routine | kernel-64kb: drm/amd/display: Check stream before comparing them (bsc#1232221). | 5.5 | 0.0026 |  |
| [CVE-2024-46817](https://patchblox.com/security/data/cve/CVE-2024-46817.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0026 |  |
| [CVE-2024-47699](https://patchblox.com/security/data/cve/CVE-2024-47699.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0026 |  |
| [CVE-2024-49938](https://patchblox.com/security/data/cve/CVE-2024-49938.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0026 |  |
| [CVE-2024-49973](https://patchblox.com/security/data/cve/CVE-2024-49973.md) | Routine | kernel-64kb: r8169: add tally counter fields added with RTL8125 (bsc#1232105). | 5.5 | 0.0026 |  |
| [CVE-2024-47713](https://patchblox.com/security/data/cve/CVE-2024-47713.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0026 |  |
| [CVE-2024-50040](https://patchblox.com/security/data/cve/CVE-2024-50040.md) | Routine | kernel-64kb: igb: Do not bring the device up after non-fatal error (bsc#1231908). | 5.5 | 0.0026 |  |
| [CVE-2024-41082](https://patchblox.com/security/data/cve/CVE-2024-41082.md) | Routine | nvme-fabrics: use reserved tag for reg read/write command | 5.5 | 0.0026 |  |
| [CVE-2024-49892](https://patchblox.com/security/data/cve/CVE-2024-49892.md) | Routine | kernel-64kb: drm/amd/display: Initialize get_bytes_per_element's default to 1 (bsc#1232220). | 5.5 | 0.0026 |  |
| [CVE-2024-49959](https://patchblox.com/security/data/cve/CVE-2024-49959.md) | Routine | kernel-64kb: jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error (bsc#1232149). | 5.5 | 0.0026 |  |
| [CVE-2024-49963](https://patchblox.com/security/data/cve/CVE-2024-49963.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0026 |  |
| [CVE-2024-46777](https://patchblox.com/security/data/cve/CVE-2024-46777.md) | Routine | dtb-aarch64: udf: Avoid excessive partition lengths (bsc#1230773). | 5.5 | 0.0025 |  |
| [CVE-2024-46805](https://patchblox.com/security/data/cve/CVE-2024-46805.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0025 |  |
| [CVE-2024-47661](https://patchblox.com/security/data/cve/CVE-2024-47661.md) | Routine | drm/amd/display: Avoid overflow from uint32_t to uint8_t | 5.5 | 0.0025 |  |
| [CVE-2024-49877](https://patchblox.com/security/data/cve/CVE-2024-49877.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0025 |  |
| [CVE-2024-49879](https://patchblox.com/security/data/cve/CVE-2024-49879.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0025 |  |
| [CVE-2024-49881](https://patchblox.com/security/data/cve/CVE-2024-49881.md) | Routine | kernel-64kb: ext4: update orig_path in ext4_find_extent() (bsc#1232201). | 5.5 | 0.0025 |  |
| [CVE-2024-49890](https://patchblox.com/security/data/cve/CVE-2024-49890.md) | Routine | kernel-coco_debug: drm/amd/pm: ensure the fw_info is not null before using it (bsc#1232217). | 5.5 | 0.0025 |  |
| [CVE-2024-49957](https://patchblox.com/security/data/cve/CVE-2024-49957.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0025 |  |
| [CVE-2024-49962](https://patchblox.com/security/data/cve/CVE-2024-49962.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0025 |  |
| [CVE-2024-47709](https://patchblox.com/security/data/cve/CVE-2024-47709.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0025 |  |
| [CVE-2024-49913](https://patchblox.com/security/data/cve/CVE-2024-49913.md) | Routine | kernel-64kb: drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream (bsc#1232307). | 5.5 | 0.0025 |  |
| [CVE-2024-49935](https://patchblox.com/security/data/cve/CVE-2024-49935.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0025 |  |
| [CVE-2024-50048](https://patchblox.com/security/data/cve/CVE-2024-50048.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0025 |  |
| [CVE-2024-41016](https://patchblox.com/security/data/cve/CVE-2024-41016.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0025 |  |
| [CVE-2024-46754](https://patchblox.com/security/data/cve/CVE-2024-46754.md) | Routine | bpf: Remove tst_run from lwt_seg6local_prog_ops. | 5.5 | 0.0025 |  |
| [CVE-2024-46841](https://patchblox.com/security/data/cve/CVE-2024-46841.md) | Routine | kernel-64kb: btrfs: do not BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc() (bsc#1231094). | 5.5 | 0.0025 |  |
| [CVE-2024-50008](https://patchblox.com/security/data/cve/CVE-2024-50008.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0025 |  |
| [CVE-2024-36244](https://patchblox.com/security/data/cve/CVE-2024-36244.md) | Routine | kernel-default: net/sched: taprio: extend minimum interval restriction to entire cycle too (bsc#1226797). | 5.5 | 0.0025 |  |
| [CVE-2024-47674](https://patchblox.com/security/data/cve/CVE-2024-47674.md) | Routine | kernel-64kb: mm: avoid leaving partial pfn mappings around in error case (bsc#1231673). | 5.5 | 0.0025 |  |
| [CVE-2024-50027](https://patchblox.com/security/data/cve/CVE-2024-50027.md) | Routine | kernel-64kb: thermal: core: Free tzp copy along with the thermal zone (bsc#1231951). | 5.5 | 0.0025 |  |
| [CVE-2024-47706](https://patchblox.com/security/data/cve/CVE-2024-47706.md) | Routine | kernel-64kb: block, bfq: fix possible UAF for bfqq->bic with merge chain (bsc#1231942). | 5.5 | 0.0025 |  |
| [CVE-2024-50031](https://patchblox.com/security/data/cve/CVE-2024-50031.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0025 |  |
| [CVE-2024-50058](https://patchblox.com/security/data/cve/CVE-2024-50058.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0025 |  |
| [CVE-2024-49906](https://patchblox.com/security/data/cve/CVE-2024-49906.md) | Routine | kernel-64kb: drm/amd/display: Check null pointer before try to access it (bsc#1232332). | 5.5 | 0.0024 |  |
| [CVE-2024-49914](https://patchblox.com/security/data/cve/CVE-2024-49914.md) | Routine | kernel-64kb: drm/amd/display: Add null check for pipe_ctx->plane_state in (bsc#1232369). | 5.5 | 0.0024 |  |
| [CVE-2024-49907](https://patchblox.com/security/data/cve/CVE-2024-49907.md) | Routine | kernel-64kb: drm/amd/display: Check null pointers before using dc->clk_mgr (bsc#1232334). | 5.5 | 0.0024 |  |
| [CVE-2024-50019](https://patchblox.com/security/data/cve/CVE-2024-50019.md) | Routine | kernel-livepatch-SLE15-SP6_Update_6: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2024-26767](https://patchblox.com/security/data/cve/CVE-2024-26767.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2024-46819](https://patchblox.com/security/data/cve/CVE-2024-46819.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2024-46770](https://patchblox.com/security/data/cve/CVE-2024-46770.md) | Routine | dtb-aarch64: ice: Add netif_device_attach/detach into PF reset flow (bsc#1230763). | 5.5 | 0.0024 |  |
| [CVE-2024-46809](https://patchblox.com/security/data/cve/CVE-2024-46809.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2024-50015](https://patchblox.com/security/data/cve/CVE-2024-50015.md) | Routine | kernel-64kb: ext4: dax: fix overflowing extents beyond inode size when partially writing (bsc#1232079). | 5.5 | 0.0024 |  |
| [CVE-2024-47707](https://patchblox.com/security/data/cve/CVE-2024-47707.md) | Routine | kernel-64kb: ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev() (bsc#1231935). | 5.5 | 0.0024 |  |
| [CVE-2024-46807](https://patchblox.com/security/data/cve/CVE-2024-46807.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2024-46810](https://patchblox.com/security/data/cve/CVE-2024-46810.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2024-49897](https://patchblox.com/security/data/cve/CVE-2024-49897.md) | Routine | drm/amd/display: Check phantom_stream before it is used | 5.5 | 0.0024 |  |
| [CVE-2024-49898](https://patchblox.com/security/data/cve/CVE-2024-49898.md) | Routine | drm/amd/display: Check null-initialized variables | 5.5 | 0.0024 |  |
| [CVE-2024-49909](https://patchblox.com/security/data/cve/CVE-2024-49909.md) | Routine | drm/amd/display: Add NULL check for function pointer in dcn32_set_output_transfer_func | 5.5 | 0.0024 |  |
| [CVE-2024-49917](https://patchblox.com/security/data/cve/CVE-2024-49917.md) | Routine | drm/amd/display: Add NULL check for clk_mgr and clk_mgr->funcs in dcn30_init_hw | 5.5 | 0.0024 |  |
| [CVE-2024-49929](https://patchblox.com/security/data/cve/CVE-2024-49929.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2024-49937](https://patchblox.com/security/data/cve/CVE-2024-49937.md) | Routine | wifi: cfg80211: Set correct chandef when starting CAC | 5.5 | 0.0024 |  |
| [CVE-2024-46802](https://patchblox.com/security/data/cve/CVE-2024-46802.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2024-47687](https://patchblox.com/security/data/cve/CVE-2024-47687.md) | Routine | kernel-64kb: vdpa/mlx5: Fix invalid mr resource destroy (bsc#1232003). | 5.5 | 0.0024 |  |
| [CVE-2024-49919](https://patchblox.com/security/data/cve/CVE-2024-49919.md) | Routine | kernel-64kb: drm/amd/display: Add null check for head_pipe in dcn201_acquire_free_pipe_for_layer (bsc#1231968). | 5.5 | 0.0024 |  |
| [CVE-2024-49870](https://patchblox.com/security/data/cve/CVE-2024-49870.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 6.1 | 0.0024 |  |
| [CVE-2024-26761](https://patchblox.com/security/data/cve/CVE-2024-26761.md) | Routine | kernel-default-base: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2024-45025](https://patchblox.com/security/data/cve/CVE-2024-45025.md) | Routine | dtb-aarch64: fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE (bsc#1230456). | 5.5 | 0.0024 |  |
| [CVE-2024-47728](https://patchblox.com/security/data/cve/CVE-2024-47728.md) | Routine | bpf: Zero former ARG_PTR_TO_{LONGINT} args in case of error | 5.5 | 0.0024 |  |
| [CVE-2024-47731](https://patchblox.com/security/data/cve/CVE-2024-47731.md) | Routine | kernel-64kb: drivers/perf: Fix ali_drw_pmu driver interrupt status clearing (bsc#1232117). | 5.5 | 0.0024 |  |
| [CVE-2024-49871](https://patchblox.com/security/data/cve/CVE-2024-49871.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2024-49891](https://patchblox.com/security/data/cve/CVE-2024-49891.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2024-49901](https://patchblox.com/security/data/cve/CVE-2024-49901.md) | Routine | kernel-64kb: drm/msm/adreno: Assign msm_gpu->pdev earlier to avoid nullptrs (bsc#1232305). | 5.5 | 0.0024 |  |
| [CVE-2024-49946](https://patchblox.com/security/data/cve/CVE-2024-49946.md) | Routine | kernel-64kb: ppp: do not assume bh is held in ppp_channel_bridge_input() (bsc#1232164). | 5.5 | 0.0024 |  |
| [CVE-2024-49947](https://patchblox.com/security/data/cve/CVE-2024-49947.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2024-49954](https://patchblox.com/security/data/cve/CVE-2024-49954.md) | Routine | kernel-64kb: static_call: Replace pointless WARN_ON() in static_call_module_notify() (bsc#1232155). | 5.5 | 0.0024 |  |
| [CVE-2024-49961](https://patchblox.com/security/data/cve/CVE-2024-49961.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2024-50000](https://patchblox.com/security/data/cve/CVE-2024-50000.md) | Routine | kernel-64kb: net/mlx5e: Fix NULL deref in mlx5e_tir_builder_alloc() (bsc#1232085). | 5.5 | 0.0024 |  |
| [CVE-2024-50002](https://patchblox.com/security/data/cve/CVE-2024-50002.md) | Routine | dtb-aarch64: static_call: Handle module init failure correctly in static_call_del_module() (bsc#1232083). | 5.5 | 0.0024 |  |
| [CVE-2024-46806](https://patchblox.com/security/data/cve/CVE-2024-46806.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2024-46835](https://patchblox.com/security/data/cve/CVE-2024-46835.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2024-46843](https://patchblox.com/security/data/cve/CVE-2024-46843.md) | Routine | kernel-64kb: scsi: ufs: core: Remove SCSI host only if added (bsc#1231100). | 5.5 | 0.0024 |  |
| [CVE-2024-47681](https://patchblox.com/security/data/cve/CVE-2024-47681.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2024-47688](https://patchblox.com/security/data/cve/CVE-2024-47688.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2024-50023](https://patchblox.com/security/data/cve/CVE-2024-50023.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2024-46827](https://patchblox.com/security/data/cve/CVE-2024-46827.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2024-46721](https://patchblox.com/security/data/cve/CVE-2024-46721.md) | Routine | dtb-aarch64: pparmor: fix possible NULL pointer dereference (bsc#1230710) | 5.5 | 0.0023 |  |
| [CVE-2024-46825](https://patchblox.com/security/data/cve/CVE-2024-46825.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2024-47710](https://patchblox.com/security/data/cve/CVE-2024-47710.md) | Routine | kernel-64kb: sock_map: Add a cond_resched() in sock_hash_free() (bsc#1232049). | 5.5 | 0.0023 |  |
| [CVE-2024-47738](https://patchblox.com/security/data/cve/CVE-2024-47738.md) | Routine | wifi: mac80211: don't use rate mask for offchannel TX either | 3.3 | 0.0023 |  |
| [CVE-2024-35980](https://patchblox.com/security/data/cve/CVE-2024-35980.md) | Routine | kernel-docs: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2024-47732](https://patchblox.com/security/data/cve/CVE-2024-47732.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2024-50041](https://patchblox.com/security/data/cve/CVE-2024-50041.md) | Routine | kernel-64kb: i40e: Fix macvlan leak by synchronizing access to mac_filter_hash (bsc#1231907). | 5.5 | 0.0023 |  |
| [CVE-2024-50013](https://patchblox.com/security/data/cve/CVE-2024-50013.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 6.1 | 0.0023 |  |
| [CVE-2024-26943](https://patchblox.com/security/data/cve/CVE-2024-26943.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2024-46775](https://patchblox.com/security/data/cve/CVE-2024-46775.md) | Routine | drm/amd/display: Validate function returns | 5.5 | 0.0022 |  |
| [CVE-2024-47671](https://patchblox.com/security/data/cve/CVE-2024-47671.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0022 |  |
| [CVE-2024-47743](https://patchblox.com/security/data/cve/CVE-2024-47743.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0022 |  |
| [CVE-2024-50017](https://patchblox.com/security/data/cve/CVE-2024-50017.md) | Routine | kernel-syms: Security update for the Linux Kernel | 5.5 | 0.0022 |  |
| [CVE-2024-50049](https://patchblox.com/security/data/cve/CVE-2024-50049.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0022 |  |
| [CVE-2024-47720](https://patchblox.com/security/data/cve/CVE-2024-47720.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0022 |  |
| [CVE-2024-46846](https://patchblox.com/security/data/cve/CVE-2024-46846.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0022 |  |
| [CVE-2024-46848](https://patchblox.com/security/data/cve/CVE-2024-46848.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0022 |  |
| [CVE-2024-47715](https://patchblox.com/security/data/cve/CVE-2024-47715.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0022 |  |
| [CVE-2024-47756](https://patchblox.com/security/data/cve/CVE-2024-47756.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0022 |  |
| [CVE-2024-50064](https://patchblox.com/security/data/cve/CVE-2024-50064.md) | Routine | kernel-64kb: zram: free secondary algorithms names (bsc#1231901). | 5.5 | 0.0022 |  |
| [CVE-2024-50075](https://patchblox.com/security/data/cve/CVE-2024-50075.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 6.0 | 0.0022 |  |
| [CVE-2024-47669](https://patchblox.com/security/data/cve/CVE-2024-47669.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0022 |  |
| [CVE-2024-47705](https://patchblox.com/security/data/cve/CVE-2024-47705.md) | Routine | kernel-64kb: block: fix potential invalid pointer dereference in blk_add_partition (bsc#1231872). | 5.5 | 0.0022 |  |
| [CVE-2024-50028](https://patchblox.com/security/data/cve/CVE-2024-50028.md) | Routine | kernel-64kb: thermal: core: Reference count the zone in thermal_zone_get_by_id() (bsc#1231950). | 5.5 | 0.0022 |  |
| [CVE-2024-49858](https://patchblox.com/security/data/cve/CVE-2024-49858.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2024-50077](https://patchblox.com/security/data/cve/CVE-2024-50077.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2024-50078](https://patchblox.com/security/data/cve/CVE-2024-50078.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2024-47663](https://patchblox.com/security/data/cve/CVE-2024-47663.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2024-47702](https://patchblox.com/security/data/cve/CVE-2024-47702.md) | Routine | bpf: Fail verification for sign-extension of packet data/data_end/data_meta | 5.5 | 0.0021 |  |
| [CVE-2024-26758](https://patchblox.com/security/data/cve/CVE-2024-26758.md) | Routine | md: Don't ignore suspended array in md_check_recovery() | 5.5 | 0.0021 |  |
| [CVE-2024-44958](https://patchblox.com/security/data/cve/CVE-2024-44958.md) | Routine | dtb-aarch64: sched/smt: Fix unbalance sched_smt_present dec/inc (bsc#1230179). | 5.5 | 0.0021 |  |
| [CVE-2024-47667](https://patchblox.com/security/data/cve/CVE-2024-47667.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2024-49972](https://patchblox.com/security/data/cve/CVE-2024-49972.md) | Routine | drm/amd/display: Deallocate DML memory if allocation fails | 5.5 | 0.0021 |  |
| [CVE-2024-50025](https://patchblox.com/security/data/cve/CVE-2024-50025.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2024-47665](https://patchblox.com/security/data/cve/CVE-2024-47665.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2024-47704](https://patchblox.com/security/data/cve/CVE-2024-47704.md) | Routine | drm/amd/display: Check link_res->hpo_dp_link_enc before using it | 5.5 | 0.0021 |  |
| [CVE-2024-47754](https://patchblox.com/security/data/cve/CVE-2024-47754.md) | Routine | kernel-64kb: media: mediatek: vcodec: Fix H264 multi stateless decoder smatch warning (bsc#1232131). | 5.5 | 0.0021 |  |
| [CVE-2023-52918](https://patchblox.com/security/data/cve/CVE-2023-52918.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2024-47752](https://patchblox.com/security/data/cve/CVE-2024-47752.md) | Routine | kernel-64kb: media: mediatek: vcodec: Fix H264 stateless decoder smatch warning (bsc#1232130). | 5.5 | 0.0021 |  |
| [CVE-2023-52919](https://patchblox.com/security/data/cve/CVE-2023-52919.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2024-46857](https://patchblox.com/security/data/cve/CVE-2024-46857.md) | Routine | kernel-64kb: net/mlx5: Fix bridge mode operations when there are no VFs (bsc#1231087). | 5.5 | 0.0021 |  |
| [CVE-2024-47673](https://patchblox.com/security/data/cve/CVE-2024-47673.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2024-47753](https://patchblox.com/security/data/cve/CVE-2024-47753.md) | Routine | kernel-64kb: media: mediatek: vcodec: Fix VP8 stateless decoder smatch warning (bsc#1231868). | 5.5 | 0.0021 |  |
| [CVE-2024-49850](https://patchblox.com/security/data/cve/CVE-2024-49850.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2024-46860](https://patchblox.com/security/data/cve/CVE-2024-46860.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2024-46861](https://patchblox.com/security/data/cve/CVE-2024-46861.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2024-46864](https://patchblox.com/security/data/cve/CVE-2024-46864.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2024-47664](https://patchblox.com/security/data/cve/CVE-2024-47664.md) | Routine | kernel-64kb: spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware (bsc#1231442). | 5.5 | 0.0021 |  |
| [CVE-2024-50069](https://patchblox.com/security/data/cve/CVE-2024-50069.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2024-50080](https://patchblox.com/security/data/cve/CVE-2024-50080.md) | Routine | kernel-64kb: ublk: do not allow user copy for unprivileged device (bsc#1232502). | 5.5 | 0.0021 |  |
| [CVE-2024-50081](https://patchblox.com/security/data/cve/CVE-2024-50081.md) | Routine | kernel-azure: blk-mq: setup queue ->tag_set before initializing hctx (bsc#1232501). | 5.5 | 0.0021 |  |
| [CVE-2024-50020](https://patchblox.com/security/data/cve/CVE-2024-50020.md) | Routine | kernel-64kb: ice: Fix improper handling of refcount in ice_sriov_set_msix_vec_count() (bsc#1231989). | 5.5 | 0.0021 |  |
| [CVE-2024-50021](https://patchblox.com/security/data/cve/CVE-2024-50021.md) | Routine | kernel-64kb: ice: Fix improper handling of refcount in ice_dpll_init_rclk_pins() (bsc#1231957). | 5.5 | 0.0021 |  |
| [CVE-2024-49985](https://patchblox.com/security/data/cve/CVE-2024-49985.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0020 |  |
| [CVE-2024-49965](https://patchblox.com/security/data/cve/CVE-2024-49965.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0020 |  |
| [CVE-2024-47735](https://patchblox.com/security/data/cve/CVE-2024-47735.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0019 |  |
| [CVE-2024-50044](https://patchblox.com/security/data/cve/CVE-2024-50044.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 4.7 | 0.0019 |  |
| [CVE-2024-47662](https://patchblox.com/security/data/cve/CVE-2024-47662.md) | Routine | drm/amd/display: Remove register from DCN35 DMCUB diagnostic collection | 5.5 | 0.0018 |  |
| [CVE-2024-49866](https://patchblox.com/security/data/cve/CVE-2024-49866.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 4.7 | 0.0018 |  |
| [CVE-2024-46678](https://patchblox.com/security/data/cve/CVE-2024-46678.md) | Routine | bonding: change ipsec_lock from spin lock to mutex | 5.5 | 0.0017 |  |
| [CVE-2024-46851](https://patchblox.com/security/data/cve/CVE-2024-46851.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 4.7 | 0.0017 |  |
| [CVE-2024-47668](https://patchblox.com/security/data/cve/CVE-2024-47668.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 4.7 | 0.0017 |  |
| [CVE-2024-47744](https://patchblox.com/security/data/cve/CVE-2024-47744.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0017 |  |
| [CVE-2024-46797](https://patchblox.com/security/data/cve/CVE-2024-46797.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0016 |  |
| [CVE-2024-47660](https://patchblox.com/security/data/cve/CVE-2024-47660.md) | Routine | kernel-64kb: fsnotify: clear PARENT_WATCHED flags lazily (bsc#1231439). | 4.7 | 0.0016 |  |
| [CVE-2024-46870](https://patchblox.com/security/data/cve/CVE-2024-46870.md) | Routine | drm/amd/display: Disable DMCUB timeout for DCN35 | 4.7 | 0.0013 |  |
| [CVE-2024-47672](https://patchblox.com/security/data/cve/CVE-2024-47672.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | n/a |  |
| [CVE-2024-49993](https://patchblox.com/security/data/cve/CVE-2024-49993.md) | Routine | linux: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | 5.5 | n/a |  |
| [CVE-2023-52917](https://patchblox.com/security/data/cve/CVE-2023-52917.md) | Routine | linux: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | 4.4 | n/a |  |

---

Data as of 2026-11-11T01:43:54Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.