# SUSE-SU-2024:4314-1: Security update for 5 packages

SUSE-SU-2024:4314-1, released December 13, 2024, fixes 241 CVEs across 5 products. 2 of them are being exploited (CVE-2024-53104); 2 on CISA KEV. Patch Radar priority: Patch now.

- Web page: https://patchblox.com/security/fix/linux/suse-su-2024-4314-1
- Platform: Linux
- Released: Dec 13, 2024
- Priority: Patch now (Closes CVE-2024-53104, exploited (CISA KEV))
- CVEs: 241, exploited: 2, on CISA KEV: 2
- Vendor advisory: https://osv.dev/vulnerability/SUSE-SU-2024:4314-1

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [kernel-livepatch-SLE15-SP6-RT_Update_6](https://patchblox.com/security/data/product/linux/kernel-livepatch-sle15-sp6-rt-update-6.md) | sles 15.6 | 1-150600.1.3.1 |
| [kernel-rt](https://patchblox.com/security/data/product/linux/kernel-rt.md) | opensuse-leap 15.6 | 6.4.0-150600.10.20.1 |
| [kernel-rt_debug](https://patchblox.com/security/data/product/linux/kernel-rt-debug-kernel-rt-debug.md) | opensuse-leap 15.6 | 6.4.0-150600.10.20.1 |
| [kernel-source-rt](https://patchblox.com/security/data/product/linux/kernel-source-rt.md) | opensuse-leap 15.6 | 6.4.0-150600.10.20.1 |
| [kernel-syms-rt](https://patchblox.com/security/data/product/linux/kernel-syms-rt.md) | opensuse-leap 15.6 | 6.4.0-150600.10.20.1 |

## CVEs this fix closes

| CVE | Priority | Title | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2024-53104](https://patchblox.com/security/data/cve/CVE-2024-53104.md) | Patch now | kernel-coco: Security update for the Linux Kernel | 7.8 | 0.0340 | CISA KEV |
| [CVE-2024-50302](https://patchblox.com/security/data/cve/CVE-2024-50302.md) | Patch now | kernel-64kb: Security update for the Linux Kernel | 6.4 | 0.0081 | CISA KEV |
| [CVE-2024-53095](https://patchblox.com/security/data/cve/CVE-2024-53095.md) | Urgent | kernel-azure: Security update for the Linux Kernel | 9.8 | 0.0058 |  |
| [CVE-2024-36886](https://patchblox.com/security/data/cve/CVE-2024-36886.md) | High | kernel-rt: kernel: TIPC message reassembly use-after-free remote code execution vulnerability | 7.8 | 0.0131 |  |
| [CVE-2024-36031](https://patchblox.com/security/data/cve/CVE-2024-36031.md) | High | dtb-aarch64: Security update for the Linux Kernel | 9.8 | 0.0075 |  |
| [CVE-2024-26782](https://patchblox.com/security/data/cve/CVE-2024-26782.md) | High | dtb-aarch64: mptcp: fix double-free on socket dismantle (bsc#1222590). | 7.8 | 0.0072 |  |
| [CVE-2024-50276](https://patchblox.com/security/data/cve/CVE-2024-50276.md) | High | kernel-64kb: net: vertexcom: mse102x: Fix possible double free of TX skb (bsc#1233465). | 7.8 | 0.0066 |  |
| [CVE-2024-50215](https://patchblox.com/security/data/cve/CVE-2024-50215.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0063 |  |
| [CVE-2024-26864](https://patchblox.com/security/data/cve/CVE-2024-26864.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  tcp: Fix refcnt handling in __inet_hash_connect() | 7.8 | 0.0061 |  |
| [CVE-2024-35888](https://patchblox.com/security/data/cve/CVE-2024-35888.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  erspan: make sure erspan_base_hdr is present in... | 7.3 | 0.0061 |  |
| [CVE-2024-50154](https://patchblox.com/security/data/cve/CVE-2024-50154.md) | High | kernel-livepatch-SLE15-SP6-RT_Update_2: tcp/dccp: Do not use timer_pending() in reqsk_queue_unlink() (bsc#1233072). | 7.0 | 0.0056 |  |
| [CVE-2024-53059](https://patchblox.com/security/data/cve/CVE-2024-53059.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0040 |  |
| [CVE-2024-41023](https://patchblox.com/security/data/cve/CVE-2024-41023.md) | High | sched/deadline: Fix task_struct reference leak | 7.8 | 0.0036 |  |
| [CVE-2024-50264](https://patchblox.com/security/data/cve/CVE-2024-50264.md) | High | kernel-64kb: vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (bsc#1233453). | 7.8 | 0.0035 |  |
| [CVE-2024-53096](https://patchblox.com/security/data/cve/CVE-2024-53096.md) | High | kernel-coco: Security update for the Linux Kernel | 7.8 | 0.0034 |  |
| [CVE-2024-50125](https://patchblox.com/security/data/cve/CVE-2024-50125.md) | High | kernel-64kb: Bluetooth: SCO: Fix UAF on sco_sock_timeout (bsc#1232928). | 7.8 | 0.0034 |  |
| [CVE-2024-49894](https://patchblox.com/security/data/cve/CVE-2024-49894.md) | High | kernel-64kb: drm/amd/display: Fix index out of bounds in degamma hardware format translation (bsc#1232354). | 7.8 | 0.0033 |  |
| [CVE-2024-50124](https://patchblox.com/security/data/cve/CVE-2024-50124.md) | High | kernel-coco_debug: Bluetooth: ISO: Fix UAF on iso_sock_timeout (bsc#1232926). | 7.8 | 0.0032 |  |
| [CVE-2024-36883](https://patchblox.com/security/data/cve/CVE-2024-36883.md) | High | kernel-syms: net: fix out-of-bounds access in ops_init (bsc#1225725). | 7.8 | 0.0031 |  |
| [CVE-2024-53061](https://patchblox.com/security/data/cve/CVE-2024-53061.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0031 |  |
| [CVE-2024-46800](https://patchblox.com/security/data/cve/CVE-2024-46800.md) | High | dtb-aarch64: sch/netem: fix use after free in netem_dequeue (bsc#1230827). | 7.8 | 0.0030 |  |
| [CVE-2023-52922](https://patchblox.com/security/data/cve/CVE-2023-52922.md) | High | kernel-debug-devel: kernel: can: bcm: Fix UAF in bcm_proc_show() | 7.8 | 0.0030 |  |
| [CVE-2024-27407](https://patchblox.com/security/data/cve/CVE-2024-27407.md) | High | kernel-source-coco: Security update for the Linux Kernel | 7.8 | 0.0028 |  |
| [CVE-2024-50267](https://patchblox.com/security/data/cve/CVE-2024-50267.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0028 |  |
| [CVE-2024-50301](https://patchblox.com/security/data/cve/CVE-2024-50301.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.1 | 0.0028 |  |
| [CVE-2024-50230](https://patchblox.com/security/data/cve/CVE-2024-50230.md) | High | kernel-64kb: nilfs2: fix kernel bug due to missing clearing of checked flag (bsc#1233206). | 7.8 | 0.0028 |  |
| [CVE-2024-49884](https://patchblox.com/security/data/cve/CVE-2024-49884.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0028 |  |
| [CVE-2024-49883](https://patchblox.com/security/data/cve/CVE-2024-49883.md) | High | kernel-64kb: ext4: aovid use-after-free in ext4_ext_insert_extent() (bsc#1232199). | 7.8 | 0.0028 |  |
| [CVE-2024-50282](https://patchblox.com/security/data/cve/CVE-2024-50282.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0027 |  |
| [CVE-2024-49895](https://patchblox.com/security/data/cve/CVE-2024-49895.md) | High | kernel-coco_debug: drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation (bsc#1232352). | 7.8 | 0.0027 |  |
| [CVE-2024-50269](https://patchblox.com/security/data/cve/CVE-2024-50269.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0027 |  |
| [CVE-2024-50268](https://patchblox.com/security/data/cve/CVE-2024-50268.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.1 | 0.0026 |  |
| [CVE-2024-50279](https://patchblox.com/security/data/cve/CVE-2024-50279.md) | High | kernel-default: dm cache: fix out-of-bounds access to the dirty bitset when resizing (bsc#1233468). | 7.1 | 0.0026 |  |
| [CVE-2024-49989](https://patchblox.com/security/data/cve/CVE-2024-49989.md) | High | kernel-64kb: drm/amd/display: fix double free issue during amdgpu module unload (bsc#1232483). | 7.8 | 0.0026 |  |
| [CVE-2024-50257](https://patchblox.com/security/data/cve/CVE-2024-50257.md) | High | kernel-64kb: netfilter: Fix use-after-free in get_info() (bsc#1233244). | 7.8 | 0.0026 |  |
| [CVE-2024-50180](https://patchblox.com/security/data/cve/CVE-2024-50180.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0026 |  |
| [CVE-2024-50167](https://patchblox.com/security/data/cve/CVE-2024-50167.md) | High | kernel-64kb: be2net: fix potential memory leak in be_xmit() (bsc#1233049). | 7.1 | 0.0025 |  |
| [CVE-2024-46828](https://patchblox.com/security/data/cve/CVE-2024-46828.md) | High | dtb-aarch64: sched: sch_cake: fix bulk flow accounting logic for host fairness (bsc#1231114). | 7.8 | 0.0025 |  |
| [CVE-2024-49983](https://patchblox.com/security/data/cve/CVE-2024-49983.md) | High | kernel-64kb: ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free (bsc#1232096). | 7.8 | 0.0025 |  |
| [CVE-2024-47701](https://patchblox.com/security/data/cve/CVE-2024-47701.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0025 |  |
| [CVE-2024-50127](https://patchblox.com/security/data/cve/CVE-2024-50127.md) | High | kernel-64kb: net: sched: fix use-after-free in taprio_change() (bsc#1232907). | 7.8 | 0.0025 |  |
| [CVE-2024-50131](https://patchblox.com/security/data/cve/CVE-2024-50131.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0025 |  |
| [CVE-2024-50115](https://patchblox.com/security/data/cve/CVE-2024-50115.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.1 | 0.0025 |  |
| [CVE-2024-50150](https://patchblox.com/security/data/cve/CVE-2024-50150.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0024 |  |
| [CVE-2024-50221](https://patchblox.com/security/data/cve/CVE-2024-50221.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0024 |  |
| [CVE-2024-50235](https://patchblox.com/security/data/cve/CVE-2024-50235.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0024 |  |
| [CVE-2024-53108](https://patchblox.com/security/data/cve/CVE-2024-53108.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.1 | 0.0024 |  |
| [CVE-2024-53082](https://patchblox.com/security/data/cve/CVE-2024-53082.md) | High | kernel-azure: virtio_net: Add hash_key_length check (bsc#1233573). | 7.1 | 0.0024 |  |
| [CVE-2024-50275](https://patchblox.com/security/data/cve/CVE-2024-50275.md) | High | kernel-64kb: arm64/sve: Discard stale CPU state when handling SVE traps (bsc#1233464). | 7.0 | 0.0024 |  |
| [CVE-2024-53106](https://patchblox.com/security/data/cve/CVE-2024-53106.md) | High | kernel-azure: Security update for the Linux Kernel | 7.8 | 0.0024 |  |
| [CVE-2024-46845](https://patchblox.com/security/data/cve/CVE-2024-46845.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0024 |  |
| [CVE-2024-50067](https://patchblox.com/security/data/cve/CVE-2024-50067.md) | High | uprobe: avoid out-of-bounds memory access of fetching args | 7.8 | 0.0024 |  |
| [CVE-2024-50121](https://patchblox.com/security/data/cve/CVE-2024-50121.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0023 |  |
| [CVE-2024-50195](https://patchblox.com/security/data/cve/CVE-2024-50195.md) | High | kernel-64kb: posix-clock: Fix missing timespec64 check in pc_clock_settime() (bsc#1233103). | 7.8 | 0.0023 |  |
| [CVE-2024-50274](https://patchblox.com/security/data/cve/CVE-2024-50274.md) | High | kernel-64kb: idpf: avoid vport access in idpf_get_link_ksettings (bsc#1233463). | 7.8 | 0.0023 |  |
| [CVE-2023-52921](https://patchblox.com/security/data/cve/CVE-2023-52921.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0023 |  |
| [CVE-2024-50186](https://patchblox.com/security/data/cve/CVE-2024-50186.md) | High | kernel-64kb: net: explicitly clear the sk pointer, when pf->create fails (bsc#1233110). | 7.8 | 0.0023 |  |
| [CVE-2024-50155](https://patchblox.com/security/data/cve/CVE-2024-50155.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0023 |  |
| [CVE-2024-36920](https://patchblox.com/security/data/cve/CVE-2024-36920.md) | High | scsi: mpi3mr: Avoid memcpy field-spanning write WARNING | 7.8 | 0.0023 |  |
| [CVE-2024-50130](https://patchblox.com/security/data/cve/CVE-2024-50130.md) | High | kernel-64kb: netfilter: bpf: must hold reference on net namespace (bsc#1232894). | 7.8 | 0.0023 |  |
| [CVE-2024-50128](https://patchblox.com/security/data/cve/CVE-2024-50128.md) | High | kernel-64kb: net: wwan: fix global oob in wwan_rtnl_policy (bsc#1232905). | 7.1 | 0.0023 |  |
| [CVE-2024-50250](https://patchblox.com/security/data/cve/CVE-2024-50250.md) | High | kernel-64kb: fsdax: dax_unshare_iter needs to copy entire blocks (bsc#1233226). | 7.1 | 0.0023 |  |
| [CVE-2024-50158](https://patchblox.com/security/data/cve/CVE-2024-50158.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0023 |  |
| [CVE-2024-50159](https://patchblox.com/security/data/cve/CVE-2024-50159.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0022 |  |
| [CVE-2024-50246](https://patchblox.com/security/data/cve/CVE-2024-50246.md) | High | kernel-64kb: fs/ntfs3: Add rough attr alloc_size check (bsc#1233207). | 7.8 | 0.0022 |  |
| [CVE-2024-50261](https://patchblox.com/security/data/cve/CVE-2024-50261.md) | High | kernel-64kb: macsec: Fix use-after-free while sending the offloading packet (bsc#1233253). | 7.8 | 0.0022 |  |
| [CVE-2024-53068](https://patchblox.com/security/data/cve/CVE-2024-53068.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0022 |  |
| [CVE-2024-50209](https://patchblox.com/security/data/cve/CVE-2024-50209.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0022 |  |
| [CVE-2024-50088](https://patchblox.com/security/data/cve/CVE-2024-50088.md) | High | kernel-64kb: btrfs: fix uninitialized pointer free in add_inode_ref() (bsc#1232498). | 7.8 | 0.0021 |  |
| [CVE-2024-50200](https://patchblox.com/security/data/cve/CVE-2024-50200.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.1 | 0.0021 |  |
| [CVE-2024-49852](https://patchblox.com/security/data/cve/CVE-2024-49852.md) | High | kernel-64kb: scsi: elx: libefc: Fix potential use after free in efc_nport_vport_del() (bsc#1232819). | 7.8 | 0.0021 |  |
| [CVE-2024-47679](https://patchblox.com/security/data/cve/CVE-2024-47679.md) | High | kernel-64kb: vfs: fix race between evice_inodes() and find_inode()&iput() (bsc#1231930). | 7.8 | 0.0020 |  |
| [CVE-2024-50234](https://patchblox.com/security/data/cve/CVE-2024-50234.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.0 | 0.0019 |  |
| [CVE-2024-53052](https://patchblox.com/security/data/cve/CVE-2024-53052.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0018 |  |
| [CVE-2024-50228](https://patchblox.com/security/data/cve/CVE-2024-50228.md) | High | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | 7.0 | n/a |  |
| [CVE-2024-50095](https://patchblox.com/security/data/cve/CVE-2024-50095.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0074 |  |
| [CVE-2024-26953](https://patchblox.com/security/data/cve/CVE-2024-26953.md) | Routine | dtb-aarch64: net: esp: fix bad handling of pages from page_pool (bsc#1223656). | 5.5 | 0.0066 |  |
| [CVE-2024-53066](https://patchblox.com/security/data/cve/CVE-2024-53066.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0066 |  |
| [CVE-2024-53093](https://patchblox.com/security/data/cve/CVE-2024-53093.md) | Routine | nvme-multipath: defer partition scanning | 5.5 | 0.0061 |  |
| [CVE-2024-53058](https://patchblox.com/security/data/cve/CVE-2024-53058.md) | Routine | kernel-64kb: net: stmmac: TSO: Fix unbalanced DMA map/unmap for non-paged SKB data (bsc#1233552). | 5.5 | 0.0061 |  |
| [CVE-2024-53094](https://patchblox.com/security/data/cve/CVE-2024-53094.md) | Routine | RDMA/siw: Add sendpage_ok() check to disable MSG_SPLICE_PAGES | 5.5 | 0.0060 |  |
| [CVE-2024-50145](https://patchblox.com/security/data/cve/CVE-2024-50145.md) | Routine | kernel-64kb: octeon_ep: add SKB allocation failures handling in __octep_oq_process_rx() (bsc#1233044). | 5.5 | 0.0058 |  |
| [CVE-2024-53138](https://patchblox.com/security/data/cve/CVE-2024-53138.md) | Routine | kernel-64kb: net/mlx5e: kTLS, Fix incorrect page refcounting (bsc#1234223). | 5.5 | 0.0055 |  |
| [CVE-2024-36905](https://patchblox.com/security/data/cve/CVE-2024-36905.md) | Routine | kernel-64kb: tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets (bsc#1225742). | 5.5 | 0.0033 |  |
| [CVE-2024-53051](https://patchblox.com/security/data/cve/CVE-2024-53051.md) | Routine | drm/i915/hdcp: Add encoder check in intel_hdcp_get_capability | 5.5 | 0.0031 |  |
| [CVE-2024-50265](https://patchblox.com/security/data/cve/CVE-2024-50265.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0031 |  |
| [CVE-2024-36484](https://patchblox.com/security/data/cve/CVE-2024-36484.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0030 |  |
| [CVE-2024-27017](https://patchblox.com/security/data/cve/CVE-2024-27017.md) | Routine | dtb-aarch64: netfilter: nft_set_pipapo: walk over current view on netlink dump (bsc#1223733). | 5.5 | 0.0029 |  |
| [CVE-2024-36968](https://patchblox.com/security/data/cve/CVE-2024-36968.md) | Routine | kernel-docs: Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init() (bsc#1226130). | 6.5 | 0.0029 |  |
| [CVE-2024-49921](https://patchblox.com/security/data/cve/CVE-2024-49921.md) | Routine | kernel-64kb: drm/amd/display: Check null pointers before used (bsc#1232371). | 5.5 | 0.0029 |  |
| [CVE-2024-50273](https://patchblox.com/security/data/cve/CVE-2024-50273.md) | Routine | kernel-64kb: btrfs: reinitialize delayed ref list after deleting it from the list (bsc#1233462). | 5.5 | 0.0029 |  |
| [CVE-2024-49868](https://patchblox.com/security/data/cve/CVE-2024-49868.md) | Routine | kernel-64kb: btrfs: fix a NULL pointer dereference when failed to start a new trasacntion (bsc#1232272). | 5.5 | 0.0029 |  |
| [CVE-2024-49952](https://patchblox.com/security/data/cve/CVE-2024-49952.md) | Routine | kernel-64kb: netfilter: nf_tables: prevent nf_skb_duplicated corruption (bsc#1232157). | 5.5 | 0.0029 |  |
| [CVE-2024-53063](https://patchblox.com/security/data/cve/CVE-2024-53063.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0028 |  |
| [CVE-2024-53114](https://patchblox.com/security/data/cve/CVE-2024-53114.md) | Routine | x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client | 5.5 | 0.0028 |  |
| [CVE-2024-46681](https://patchblox.com/security/data/cve/CVE-2024-46681.md) | Routine | pktgen: use cpus_read_lock() in pg_net_init() | 5.5 | 0.0028 |  |
| [CVE-2024-40914](https://patchblox.com/security/data/cve/CVE-2024-40914.md) | Routine | dtb-aarch64: mm/huge_memory: do not unpoison huge_zero_folio (bsc#1227842). | 5.5 | 0.0028 |  |
| [CVE-2024-49944](https://patchblox.com/security/data/cve/CVE-2024-49944.md) | Routine | kernel-64kb: sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start (bsc#1232166). | 5.5 | 0.0028 |  |
| [CVE-2024-49945](https://patchblox.com/security/data/cve/CVE-2024-49945.md) | Routine | net/ncsi: Disable the ncsi work before freeing the associated structure | 5.5 | 0.0027 |  |
| [CVE-2024-50099](https://patchblox.com/security/data/cve/CVE-2024-50099.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0027 |  |
| [CVE-2024-49925](https://patchblox.com/security/data/cve/CVE-2024-49925.md) | Routine | fbdev: efifb: Register sysfs groups through driver core | 5.5 | 0.0027 |  |
| [CVE-2024-50237](https://patchblox.com/security/data/cve/CVE-2024-50237.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0027 |  |
| [CVE-2024-50218](https://patchblox.com/security/data/cve/CVE-2024-50218.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0027 |  |
| [CVE-2024-26741](https://patchblox.com/security/data/cve/CVE-2024-26741.md) | Routine | dtb-aarch64: dccp/tcp: Unhash sk from ehash for tb2 alloc failure after check_estalblished() (bsc#1222587). | 5.5 | 0.0027 |  |
| [CVE-2024-50233](https://patchblox.com/security/data/cve/CVE-2024-50233.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0027 |  |
| [CVE-2024-53042](https://patchblox.com/security/data/cve/CVE-2024-53042.md) | Routine | kernel-livepatch-SLE15-SP6_Update_3: ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_init_flow() (bsc#1233678). | 5.5 | 0.0027 |  |
| [CVE-2024-49899](https://patchblox.com/security/data/cve/CVE-2024-49899.md) | Routine | kernel-64kb: drm/amd/display: Initialize denominators' default to 1 (bsc#1232358). | 5.5 | 0.0026 |  |
| [CVE-2024-50148](https://patchblox.com/security/data/cve/CVE-2024-50148.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0026 |  |
| [CVE-2024-50236](https://patchblox.com/security/data/cve/CVE-2024-50236.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0026 |  |
| [CVE-2024-49934](https://patchblox.com/security/data/cve/CVE-2024-49934.md) | Routine | fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name | 4.6 | 0.0026 |  |
| [CVE-2024-53055](https://patchblox.com/security/data/cve/CVE-2024-53055.md) | Routine | kernel-livepatch-SLE15-SP6-RT_Update_6: wifi: iwlwifi: mvm: fix 6 GHz scan construction (bsc#1233550). | 5.5 | 0.0026 |  |
| [CVE-2024-50153](https://patchblox.com/security/data/cve/CVE-2024-50153.md) | Routine | dtb-aarch64: scsi: target: core: Fix null-ptr-deref in target_alloc_device() (bsc#1233061). | 5.5 | 0.0026 |  |
| [CVE-2024-53060](https://patchblox.com/security/data/cve/CVE-2024-53060.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0026 |  |
| [CVE-2024-49959](https://patchblox.com/security/data/cve/CVE-2024-49959.md) | Routine | kernel-64kb: jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error (bsc#1232149). | 5.5 | 0.0026 |  |
| [CVE-2024-53112](https://patchblox.com/security/data/cve/CVE-2024-53112.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0026 |  |
| [CVE-2024-42102](https://patchblox.com/security/data/cve/CVE-2024-42102.md) | Routine | dtb-aarch64: Revert 'mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again' (bsc#1233132). | 4.7 | 0.0026 |  |
| [CVE-2024-50110](https://patchblox.com/security/data/cve/CVE-2024-50110.md) | Routine | kernel-64kb: xfrm: fix one more kernel-infoleak in algo dumping (bsc#1232885). | 5.5 | 0.0026 |  |
| [CVE-2023-52920](https://patchblox.com/security/data/cve/CVE-2023-52920.md) | Routine | bpf: support non-r10 register spill/fill to/from stack in precision tracking | 5.5 | 0.0025 |  |
| [CVE-2024-50117](https://patchblox.com/security/data/cve/CVE-2024-50117.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0025 |  |
| [CVE-2024-50287](https://patchblox.com/security/data/cve/CVE-2024-50287.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0025 |  |
| [CVE-2024-50290](https://patchblox.com/security/data/cve/CVE-2024-50290.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0025 |  |
| [CVE-2024-50296](https://patchblox.com/security/data/cve/CVE-2024-50296.md) | Routine | kernel-64kb: net: hns3: fix kernel crash when uninstalling driver (bsc#1233485). | 5.5 | 0.0025 |  |
| [CVE-2024-50134](https://patchblox.com/security/data/cve/CVE-2024-50134.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0025 |  |
| [CVE-2024-49881](https://patchblox.com/security/data/cve/CVE-2024-49881.md) | Routine | kernel-64kb: ext4: update orig_path in ext4_find_extent() (bsc#1232201). | 5.5 | 0.0025 |  |
| [CVE-2024-49975](https://patchblox.com/security/data/cve/CVE-2024-49975.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0025 |  |
| [CVE-2024-50141](https://patchblox.com/security/data/cve/CVE-2024-50141.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0025 |  |
| [CVE-2024-36954](https://patchblox.com/security/data/cve/CVE-2024-36954.md) | Routine | kernel-rt-debug-core: (CVE-2024-36950) * (CVE-2024-38575) * (CVE-2024-36917) * (CVE-2024-36016) * (CVE-2023-52762) * (CVE-2024-27025) * (CV... | 5.5 | 0.0025 |  |
| [CVE-2024-50232](https://patchblox.com/security/data/cve/CVE-2024-50232.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0025 |  |
| [CVE-2024-53101](https://patchblox.com/security/data/cve/CVE-2024-53101.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0025 |  |
| [CVE-2024-49913](https://patchblox.com/security/data/cve/CVE-2024-49913.md) | Routine | kernel-64kb: drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream (bsc#1232307). | 5.5 | 0.0025 |  |
| [CVE-2024-46680](https://patchblox.com/security/data/cve/CVE-2024-46680.md) | Routine | dtb-aarch64: Bluetooth: btnxpuart: Fix random crash seen while removing driver (bsc#1230557). | 5.5 | 0.0025 |  |
| [CVE-2024-49968](https://patchblox.com/security/data/cve/CVE-2024-49968.md) | Routine | kernel-64kb: ext4: filesystems without casefold feature cannot be mounted with siphash (bsc#1232264). | 5.5 | 0.0025 |  |
| [CVE-2024-50101](https://patchblox.com/security/data/cve/CVE-2024-50101.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0025 |  |
| [CVE-2024-53043](https://patchblox.com/security/data/cve/CVE-2024-53043.md) | Routine | kernel-64kb: mctp i2c: handle NULL header address (bsc#1233523). | 5.5 | 0.0025 |  |
| [CVE-2024-46765](https://patchblox.com/security/data/cve/CVE-2024-46765.md) | Routine | ice: protect XDP configuration with a mutex | 5.5 | 0.0024 |  |
| [CVE-2024-50096](https://patchblox.com/security/data/cve/CVE-2024-50096.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2024-50116](https://patchblox.com/security/data/cve/CVE-2024-50116.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2024-53110](https://patchblox.com/security/data/cve/CVE-2024-53110.md) | Routine | kernel-64kb: vp_vdpa: fix id_table array not null terminated error (bsc#1234085). | 5.5 | 0.0024 |  |
| [CVE-2024-26596](https://patchblox.com/security/data/cve/CVE-2024-26596.md) | Routine | kernel-64kb: net: dsa: fix netdev_priv() dereference before check on non-DSA netdevice events (bsc#1220355). | 5.5 | 0.0024 |  |
| [CVE-2024-49933](https://patchblox.com/security/data/cve/CVE-2024-49933.md) | Routine | kernel-64kb: blk_iocost: fix more out of bound shifts (bsc#1232368). | 5.5 | 0.0024 |  |
| [CVE-2024-50015](https://patchblox.com/security/data/cve/CVE-2024-50015.md) | Routine | kernel-64kb: ext4: dax: fix overflowing extents beyond inode size when partially writing (bsc#1232079). | 5.5 | 0.0024 |  |
| [CVE-2024-50171](https://patchblox.com/security/data/cve/CVE-2024-50171.md) | Routine | kernel-64kb: net: systemport: fix potential memory leak in bcm_sysport_xmit() (bsc#1233057). | 5.5 | 0.0024 |  |
| [CVE-2023-52778](https://patchblox.com/security/data/cve/CVE-2023-52778.md) | Routine | dtb-aarch64: mptcp: deal with large GSO size (bsc#1224948). | 5.5 | 0.0024 |  |
| [CVE-2024-50102](https://patchblox.com/security/data/cve/CVE-2024-50102.md) | Routine | x86: fix user address masking non-canonical speculation issue | 5.5 | 0.0024 |  |
| [CVE-2024-50289](https://patchblox.com/security/data/cve/CVE-2024-50289.md) | Routine | kernel-syms: media: av7110: fix a spectre vulnerability (bsc#1233478). | 5.5 | 0.0024 |  |
| [CVE-2024-49897](https://patchblox.com/security/data/cve/CVE-2024-49897.md) | Routine | drm/amd/display: Check phantom_stream before it is used | 5.5 | 0.0024 |  |
| [CVE-2024-49905](https://patchblox.com/security/data/cve/CVE-2024-49905.md) | Routine | drm/amd/display: Add null check for 'afb' in amdgpu_dm_plane_handle_cursor_update (v2) | 5.5 | 0.0024 |  |
| [CVE-2024-49909](https://patchblox.com/security/data/cve/CVE-2024-49909.md) | Routine | drm/amd/display: Add NULL check for function pointer in dcn32_set_output_transfer_func | 5.5 | 0.0024 |  |
| [CVE-2024-49911](https://patchblox.com/security/data/cve/CVE-2024-49911.md) | Routine | drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func | 5.5 | 0.0024 |  |
| [CVE-2024-49912](https://patchblox.com/security/data/cve/CVE-2024-49912.md) | Routine | drm/amd/display: Handle null 'stream_status' in 'planes_changed_for_existing_stream' | 5.5 | 0.0024 |  |
| [CVE-2024-53072](https://patchblox.com/security/data/cve/CVE-2024-53072.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2024-49922](https://patchblox.com/security/data/cve/CVE-2024-49922.md) | Routine | kernel-64kb: drm/amd/display: Check null pointers before using them (bsc#1232374). | 5.5 | 0.0024 |  |
| [CVE-2024-49923](https://patchblox.com/security/data/cve/CVE-2024-49923.md) | Routine | drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags | 5.5 | 0.0024 |  |
| [CVE-2024-53056](https://patchblox.com/security/data/cve/CVE-2024-53056.md) | Routine | drm/mediatek: Fix potential NULL dereference in mtk_crtc_destroy() | 5.5 | 0.0024 |  |
| [CVE-2024-49901](https://patchblox.com/security/data/cve/CVE-2024-49901.md) | Routine | kernel-64kb: drm/msm/adreno: Assign msm_gpu->pdev earlier to avoid nullptrs (bsc#1232305). | 5.5 | 0.0024 |  |
| [CVE-2024-50093](https://patchblox.com/security/data/cve/CVE-2024-50093.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2024-50103](https://patchblox.com/security/data/cve/CVE-2024-50103.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2024-49987](https://patchblox.com/security/data/cve/CVE-2024-49987.md) | Routine | bpftool: Fix undefined behavior in qsort(NULL 0 ...) | 5.5 | 0.0024 |  |
| [CVE-2024-50026](https://patchblox.com/security/data/cve/CVE-2024-50026.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2024-50098](https://patchblox.com/security/data/cve/CVE-2024-50098.md) | Routine | kernel-64kb: scsi: ufs: core: Set SDEV_OFFLINE when UFS is shut down (bsc#1232881). | 5.5 | 0.0024 |  |
| [CVE-2024-50100](https://patchblox.com/security/data/cve/CVE-2024-50100.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2024-50108](https://patchblox.com/security/data/cve/CVE-2024-50108.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2024-50224](https://patchblox.com/security/data/cve/CVE-2024-50224.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2024-50271](https://patchblox.com/security/data/cve/CVE-2024-50271.md) | Routine | kernel-64kb: signal: restore the override_rlimit logic (bsc#1233460). | 5.5 | 0.0023 |  |
| [CVE-2024-50179](https://patchblox.com/security/data/cve/CVE-2024-50179.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2024-50182](https://patchblox.com/security/data/cve/CVE-2024-50182.md) | Routine | kernel-64kb: secretmem: disable memfd_secret() if arch cannot set direct map (bsc#1233129). | 5.5 | 0.0023 |  |
| [CVE-2024-50009](https://patchblox.com/security/data/cve/CVE-2024-50009.md) | Routine | cpufreq: amd-pstate: add check for cpufreq_cpu_get's return value | 5.5 | 0.0023 |  |
| [CVE-2024-50012](https://patchblox.com/security/data/cve/CVE-2024-50012.md) | Routine | kernel-64kb: cpufreq: Avoid a bad reference count on CPU node (bsc#1232386). | 5.5 | 0.0023 |  |
| [CVE-2024-50146](https://patchblox.com/security/data/cve/CVE-2024-50146.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2024-50147](https://patchblox.com/security/data/cve/CVE-2024-50147.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2024-50216](https://patchblox.com/security/data/cve/CVE-2024-50216.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2024-50175](https://patchblox.com/security/data/cve/CVE-2024-50175.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2024-50187](https://patchblox.com/security/data/cve/CVE-2024-50187.md) | Routine | drm/vc4: Stop the active perfmon before being destroyed | 5.5 | 0.0023 |  |
| [CVE-2024-50194](https://patchblox.com/security/data/cve/CVE-2024-50194.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2024-50205](https://patchblox.com/security/data/cve/CVE-2024-50205.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2024-50292](https://patchblox.com/security/data/cve/CVE-2024-50292.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2024-50295](https://patchblox.com/security/data/cve/CVE-2024-50295.md) | Routine | kernel-64kb: net: arc: fix the device for dma_map_single/dma_unmap_single (bsc#1233484). | 5.5 | 0.0023 |  |
| [CVE-2024-53081](https://patchblox.com/security/data/cve/CVE-2024-53081.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2024-50184](https://patchblox.com/security/data/cve/CVE-2024-50184.md) | Routine | kernel-64kb: virtio_pmem: Check device status before requesting flush (bsc#1233135). | 5.5 | 0.0023 |  |
| [CVE-2024-50208](https://patchblox.com/security/data/cve/CVE-2024-50208.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2024-53076](https://patchblox.com/security/data/cve/CVE-2024-53076.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2024-50139](https://patchblox.com/security/data/cve/CVE-2024-50139.md) | Routine | kernel-64kb: KVM: arm64: Fix shift-out-of-bounds bug (bsc#1233062). | 5.5 | 0.0023 |  |
| [CVE-2024-26703](https://patchblox.com/security/data/cve/CVE-2024-26703.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2024-36000](https://patchblox.com/security/data/cve/CVE-2024-36000.md) | Routine | kernel-rt: kernel: mm/hugetlb: fix missing hugetlb_lock for resv uncharge | 5.5 | 0.0023 |  |
| [CVE-2024-50188](https://patchblox.com/security/data/cve/CVE-2024-50188.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2024-50014](https://patchblox.com/security/data/cve/CVE-2024-50014.md) | Routine | kernel-64kb: ext4: fix access to uninitialised lock in fc replay path (bsc#1232446). | 5.5 | 0.0022 |  |
| [CVE-2024-50082](https://patchblox.com/security/data/cve/CVE-2024-50082.md) | Routine | kernel-64kb: blk-rq-qos: fix crash on rq_qos_wait vs | 4.7 | 0.0022 |  |
| [CVE-2024-50176](https://patchblox.com/security/data/cve/CVE-2024-50176.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0022 |  |
| [CVE-2024-50138](https://patchblox.com/security/data/cve/CVE-2024-50138.md) | Routine | kernel-64kb: bpf: Use raw_spinlock_t in ringbuf (bsc#1232935). | 5.5 | 0.0022 |  |
| [CVE-2024-50231](https://patchblox.com/security/data/cve/CVE-2024-50231.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0022 |  |
| [CVE-2024-50003](https://patchblox.com/security/data/cve/CVE-2024-50003.md) | Routine | kernel-64kb: drm/amd/display: Fix system hang while resume with TBT monitor (bsc#1232385). | 5.5 | 0.0022 |  |
| [CVE-2024-50004](https://patchblox.com/security/data/cve/CVE-2024-50004.md) | Routine | drm/amd/display: update DML2 policy EnhancedPrefetchScheduleAccelerationFinal DCN35 | 5.5 | 0.0022 |  |
| [CVE-2024-50248](https://patchblox.com/security/data/cve/CVE-2024-50248.md) | Routine | ntfs3: Add bounds checking to mi_enum_attr() | 5.5 | 0.0022 |  |
| [CVE-2024-50255](https://patchblox.com/security/data/cve/CVE-2024-50255.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0022 |  |
| [CVE-2024-50136](https://patchblox.com/security/data/cve/CVE-2024-50136.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0022 |  |
| [CVE-2024-50245](https://patchblox.com/security/data/cve/CVE-2024-50245.md) | Routine | kernel-64kb: fs/ntfs3: Fix possible deadlock in mi_read (bsc#1233203). | 5.5 | 0.0022 |  |
| [CVE-2024-50249](https://patchblox.com/security/data/cve/CVE-2024-50249.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0022 |  |
| [CVE-2024-50169](https://patchblox.com/security/data/cve/CVE-2024-50169.md) | Routine | kernel-64kb: vsock: Update rx_bytes on read_skb() (bsc#1233320). | 5.5 | 0.0022 |  |
| [CVE-2024-50252](https://patchblox.com/security/data/cve/CVE-2024-50252.md) | Routine | kernel-64kb: mlxsw: spectrum_ipip: Fix memory leak when changing remote IPv6 address (bsc#1233201). | 5.5 | 0.0022 |  |
| [CVE-2024-50298](https://patchblox.com/security/data/cve/CVE-2024-50298.md) | Routine | kernel-64kb: net: enetc: allocate vf_state during PF probes (bsc#1233487). | 5.5 | 0.0022 |  |
| [CVE-2024-47703](https://patchblox.com/security/data/cve/CVE-2024-47703.md) | Routine | bpf, lsm: Add check for BPF LSM return value | 5.5 | 0.0022 |  |
| [CVE-2024-50156](https://patchblox.com/security/data/cve/CVE-2024-50156.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0022 |  |
| [CVE-2024-50160](https://patchblox.com/security/data/cve/CVE-2024-50160.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0022 |  |
| [CVE-2024-50157](https://patchblox.com/security/data/cve/CVE-2024-50157.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0022 |  |
| [CVE-2024-50166](https://patchblox.com/security/data/cve/CVE-2024-50166.md) | Routine | kernel-64kb: fsl/fman: Fix refcount handling of fman-related devices (bsc#1233050). | 5.5 | 0.0022 |  |
| [CVE-2024-50189](https://patchblox.com/security/data/cve/CVE-2024-50189.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0022 |  |
| [CVE-2024-46788](https://patchblox.com/security/data/cve/CVE-2024-46788.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2024-50087](https://patchblox.com/security/data/cve/CVE-2024-50087.md) | Routine | kernel-64kb: btrfs: fix uninitialized pointer free on read_alloc_one_name() error (bsc#1232499). | 5.5 | 0.0021 |  |
| [CVE-2024-50225](https://patchblox.com/security/data/cve/CVE-2024-50225.md) | Routine | btrfs: fix error propagation of split bios | 5.5 | 0.0021 |  |
| [CVE-2024-50201](https://patchblox.com/security/data/cve/CVE-2024-50201.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2024-50172](https://patchblox.com/security/data/cve/CVE-2024-50172.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2024-49908](https://patchblox.com/security/data/cve/CVE-2024-49908.md) | Routine | drm/amd/display: Add null check for 'afb' in amdgpu_dm_update_cursor (v2) | 5.5 | 0.0021 |  |
| [CVE-2024-50084](https://patchblox.com/security/data/cve/CVE-2024-50084.md) | Routine | kernel-64kb: net: microchip: vcap api: Fix memory leaks in vcap_api_encode_rule_test() (bsc#1232494). | 5.5 | 0.0021 |  |
| [CVE-2024-47666](https://patchblox.com/security/data/cve/CVE-2024-47666.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2024-50192](https://patchblox.com/security/data/cve/CVE-2024-50192.md) | Routine | kernel-64kb: irqchip/gic-v4: Do not allow a VMOVP on a dying VPE (bsc#1233106). | 5.5 | 0.0021 |  |
| [CVE-2024-50196](https://patchblox.com/security/data/cve/CVE-2024-50196.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2024-50198](https://patchblox.com/security/data/cve/CVE-2024-50198.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2024-50229](https://patchblox.com/security/data/cve/CVE-2024-50229.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2024-50080](https://patchblox.com/security/data/cve/CVE-2024-50080.md) | Routine | kernel-64kb: ublk: do not allow user copy for unprivileged device (bsc#1232502). | 5.5 | 0.0021 |  |
| [CVE-2024-50081](https://patchblox.com/security/data/cve/CVE-2024-50081.md) | Routine | kernel-azure: blk-mq: setup queue ->tag_set before initializing hctx (bsc#1232501). | 5.5 | 0.0021 |  |
| [CVE-2024-50240](https://patchblox.com/security/data/cve/CVE-2024-50240.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2024-53048](https://patchblox.com/security/data/cve/CVE-2024-53048.md) | Routine | kernel-64kb: ice: fix crash on probe for DPLL enabled E810 LOM (bsc#1233721). | 5.5 | 0.0021 |  |
| [CVE-2024-53121](https://patchblox.com/security/data/cve/CVE-2024-53121.md) | Routine | kernel-64kb: net/mlx5: fs, lock FTE when checking if active (bsc#1234078). | 5.5 | 0.0021 |  |
| [CVE-2024-53045](https://patchblox.com/security/data/cve/CVE-2024-53045.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0020 |  |
| [CVE-2024-38589](https://patchblox.com/security/data/cve/CVE-2024-38589.md) | Routine | dtb-aarch64: netrom: fix possible dead-lock in nr_rt_ioctl() (bsc#1226748). | 5.5 | 0.0020 |  |
| [CVE-2024-44995](https://patchblox.com/security/data/cve/CVE-2024-44995.md) | Routine | dtb-aarch64: net: hns3: fix a deadlock problem when config TC during resetting (bsc#1230231). | 5.5 | 0.0019 |  |
| [CVE-2024-50177](https://patchblox.com/security/data/cve/CVE-2024-50177.md) | Routine | drm/amd/display: fix a UBSAN warning in DML2.1 | 5.5 | 0.0019 |  |
| [CVE-2024-50006](https://patchblox.com/security/data/cve/CVE-2024-50006.md) | Routine | kernel-64kb: ext4: fix i_data_sem unlock order in ext4_ind_migrate() (bsc#1232442). | 4.7 | 0.0019 |  |
| [CVE-2024-53074](https://patchblox.com/security/data/cve/CVE-2024-53074.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0019 |  |
| [CVE-2024-53088](https://patchblox.com/security/data/cve/CVE-2024-53088.md) | Routine | kernel-coco: Security update for the Linux Kernel | 4.7 | 0.0019 |  |
| [CVE-2024-49866](https://patchblox.com/security/data/cve/CVE-2024-49866.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 4.7 | 0.0018 |  |
| [CVE-2024-36927](https://patchblox.com/security/data/cve/CVE-2024-36927.md) | Routine | kernel-uek: ipv4: Fix uninit-value access in __ip_make_skb() (Shigeru Yoshida) [Orabug: 36683410] | 5.5 | 0.0018 |  |
| [CVE-2024-49976](https://patchblox.com/security/data/cve/CVE-2024-49976.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0018 |  |
| [CVE-2024-53079](https://patchblox.com/security/data/cve/CVE-2024-53079.md) | Routine | mm/thp: fix deferred split unqueue naming and locking | 5.5 | 0.0018 |  |
| [CVE-2024-53085](https://patchblox.com/security/data/cve/CVE-2024-53085.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0017 |  |
| [CVE-2024-50210](https://patchblox.com/security/data/cve/CVE-2024-50210.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0017 |  |
| [CVE-2024-53100](https://patchblox.com/security/data/cve/CVE-2024-53100.md) | Routine | nvme: tcp: avoid race between queue_lock lock and destroy | 4.7 | 0.0017 |  |
| [CVE-2024-50135](https://patchblox.com/security/data/cve/CVE-2024-50135.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 4.7 | 0.0017 |  |
| [CVE-2024-50183](https://patchblox.com/security/data/cve/CVE-2024-50183.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 4.7 | 0.0016 |  |
| [CVE-2024-50089](https://patchblox.com/security/data/cve/CVE-2024-50089.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  unicode: Don't special case ignorable code point... | 5.5 | n/a |  |
| [CVE-2024-50181](https://patchblox.com/security/data/cve/CVE-2024-50181.md) | Routine | linux: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | 5.5 | n/a |  |

---

Data as of 2026-11-11T01:43:54Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.
