{
  "fix": "ALAS2023-2024-696",
  "url": "https://patchblox.com/security/fix/linux/alas2023-2024-696",
  "summary": "ALAS2023-2024-696, released August 1, 2024, fixes 64 CVEs across 21 products. None of them is reported as exploited. Patch Radar priority: High.",
  "platform": "linux",
  "type": "advisory",
  "title": "Security update for 21 packages",
  "released": "2024-08-01T04:06:00Z",
  "priority": "High",
  "priorityTier": 3,
  "priorityReason": "Closes CVE-2024-36031, high severity",
  "supported": true,
  "cveCount": 64,
  "exploitedCveCount": 0,
  "kevCveCount": 0,
  "ransomwareCveCount": 0,
  "maxEpss": 0.00959,
  "maxCvss": 9.8,
  "vendorAdvisory": "https://alas.aws.amazon.com/AL2023/ALAS-2024-696.html",
  "appliesTo": [
    {
      "product": "bpftool",
      "productUrl": "https://patchblox.com/security/product/linux/bpftool",
      "release": "amzn 2023",
      "fixedVersion": "6.1.84-99.169.amzn2023",
      "supported": true
    },
    {
      "product": "bpftool-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/bpftool-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "6.1.84-99.169.amzn2023",
      "supported": true
    },
    {
      "product": "kernel",
      "productUrl": "https://patchblox.com/security/product/linux/kernel",
      "release": "amzn 2023",
      "fixedVersion": "6.1.84-99.169.amzn2023",
      "supported": true
    },
    {
      "product": "kernel-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "6.1.84-99.169.amzn2023",
      "supported": true
    },
    {
      "product": "kernel-debuginfo-common-aarch64",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-debuginfo-common-aarch64",
      "release": "amzn 2023",
      "fixedVersion": "6.1.84-99.169.amzn2023",
      "supported": true
    },
    {
      "product": "kernel-debuginfo-common-x86_64",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-debuginfo-common-x86-64",
      "release": "amzn 2023",
      "fixedVersion": "6.1.84-99.169.amzn2023",
      "supported": true
    },
    {
      "product": "kernel-devel",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-devel",
      "release": "amzn 2023",
      "fixedVersion": "6.1.84-99.169.amzn2023",
      "supported": true
    },
    {
      "product": "kernel-headers",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-headers",
      "release": "amzn 2023",
      "fixedVersion": "6.1.84-99.169.amzn2023",
      "supported": true
    },
    {
      "product": "kernel-libbpf",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-libbpf",
      "release": "amzn 2023",
      "fixedVersion": "6.1.84-99.169.amzn2023",
      "supported": true
    },
    {
      "product": "kernel-libbpf-devel",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-libbpf-devel",
      "release": "amzn 2023",
      "fixedVersion": "6.1.84-99.169.amzn2023",
      "supported": true
    },
    {
      "product": "kernel-libbpf-static",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-libbpf-static",
      "release": "amzn 2023",
      "fixedVersion": "6.1.84-99.169.amzn2023",
      "supported": true
    },
    {
      "product": "kernel-livepatch-6.1.84-99.169",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-livepatch-6.1.84-99.169",
      "release": "amzn 2023",
      "fixedVersion": "1.0-0.amzn2023",
      "supported": true
    },
    {
      "product": "kernel-modules-extra",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-modules-extra",
      "release": "amzn 2023",
      "fixedVersion": "6.1.84-99.169.amzn2023",
      "supported": true
    },
    {
      "product": "kernel-modules-extra-common",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-modules-extra-common",
      "release": "amzn 2023",
      "fixedVersion": "6.1.84-99.169.amzn2023",
      "supported": true
    },
    {
      "product": "kernel-tools",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-tools",
      "release": "amzn 2023",
      "fixedVersion": "6.1.84-99.169.amzn2023",
      "supported": true
    },
    {
      "product": "kernel-tools-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-tools-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "6.1.84-99.169.amzn2023",
      "supported": true
    },
    {
      "product": "kernel-tools-devel",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-tools-devel",
      "release": "amzn 2023",
      "fixedVersion": "6.1.84-99.169.amzn2023",
      "supported": true
    },
    {
      "product": "perf",
      "productUrl": "https://patchblox.com/security/product/linux/perf",
      "release": "amzn 2023",
      "fixedVersion": "6.1.84-99.169.amzn2023",
      "supported": true
    },
    {
      "product": "perf-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/perf-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "6.1.84-99.169.amzn2023",
      "supported": true
    },
    {
      "product": "python3-perf",
      "productUrl": "https://patchblox.com/security/product/linux/python3-perf",
      "release": "amzn 2023",
      "fixedVersion": "6.1.84-99.169.amzn2023",
      "supported": true
    },
    {
      "product": "python3-perf-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/python3-perf-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "6.1.84-99.169.amzn2023",
      "supported": true
    }
  ],
  "cves": [
    {
      "cveId": "CVE-2024-36031",
      "url": "https://patchblox.com/security/cve/CVE-2024-36031",
      "title": "dtb-aarch64: Security update for the Linux Kernel",
      "priority": "High",
      "severity": "MODERATE",
      "cvss": 9.8,
      "epss": 0.00747,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-26584",
      "url": "https://patchblox.com/security/cve/CVE-2024-26584",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7,
      "epss": 0.00746,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-26880",
      "url": "https://patchblox.com/security/cve/CVE-2024-26880",
      "title": "kernel-debug: dm: call the resume method on internal suspend (Benjamin Marzinski) [RHEL-41835]",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.00716,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-26882",
      "url": "https://patchblox.com/security/cve/CVE-2024-26882",
      "title": "dtb-aarch64: Fixed net/ip_tunnel to make sure to pull inner header in ip_tunnel_rcv() (bsc#1223034).",
      "priority": "High",
      "severity": "MODERATE",
      "cvss": 7.8,
      "epss": 0.00695,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-26864",
      "url": "https://patchblox.com/security/cve/CVE-2024-26864",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  tcp: Fix refcnt handling in __inet_hash_connect()",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00613,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-26585",
      "url": "https://patchblox.com/security/cve/CVE-2024-26585",
      "title": "bpftool: tls: disable async encrypt/decrypt (Sabrina Dubroca) [RHEL-26362 RHEL-26409 RHEL-26420] {CVE-2024-26584 CVE-2024-26583",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7,
      "epss": 0.00591,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-23307",
      "url": "https://patchblox.com/security/cve/CVE-2024-23307",
      "title": "kernel: md/raid5: fix atomicity violation in raid5_cache_count (Nigel Croxon) [RHEL-27930]",
      "priority": "High",
      "severity": "MODERATE",
      "cvss": 7.8,
      "epss": 0.00585,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-26898",
      "url": "https://patchblox.com/security/cve/CVE-2024-26898",
      "title": "kernel-azure: Security update for the Linux Kernel",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00308,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-26976",
      "url": "https://patchblox.com/security/cve/CVE-2024-26976",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  KVM: Always flush async #PF workqueue when vCPU...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00264,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-27065",
      "url": "https://patchblox.com/security/cve/CVE-2024-27065",
      "title": "kernel-rt: RHSA-2024:5102: kernel-rt security update (Important)",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00263,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-26894",
      "url": "https://patchblox.com/security/cve/CVE-2024-26894",
      "title": "kernel-core: ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit() (Mark Langsdorf) [RHEL-33198]",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.00254,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-26883",
      "url": "https://patchblox.com/security/cve/CVE-2024-26883",
      "title": "dtb-aarch64: Fixed bpf stackmap overflow check on 32-bit arches (bsc#1223035).",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00253,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-26906",
      "url": "https://patchblox.com/security/cve/CVE-2024-26906",
      "title": "python3-perf: kernel: x86/mm: Disallow vsyscall page read for copy_from_kernel_nofault()",
      "priority": "High",
      "severity": "important",
      "cvss": 7,
      "epss": 0.00253,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-26958",
      "url": "https://patchblox.com/security/cve/CVE-2024-26958",
      "title": "kernel-debug-core: Important: kernel security update",
      "priority": "High",
      "severity": "important",
      "cvss": 7.8,
      "epss": 0.00246,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-26950",
      "url": "https://patchblox.com/security/cve/CVE-2024-26950",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  wireguard: netlink: access device through ctx in...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00244,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-35791",
      "url": "https://patchblox.com/security/cve/CVE-2024-35791",
      "title": "dtb-aarch64: Security update for the Linux Kernel",
      "priority": "High",
      "severity": "MODERATE",
      "cvss": 7.8,
      "epss": 0.00238,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-26951",
      "url": "https://patchblox.com/security/cve/CVE-2024-26951",
      "title": "dtb-aarch64: Fixed wireguard/netlink check for dangling peer via is_dead instead of empty list (bsc#1223660).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.00234,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-26865",
      "url": "https://patchblox.com/security/cve/CVE-2024-26865",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  rds: tcp: Fix use-after-free of net in reqsk_tim...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00231,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-26810",
      "url": "https://patchblox.com/security/cve/CVE-2024-26810",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  vfio/pci: Lock external INTx masking ops  Mask o...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00197,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-35809",
      "url": "https://patchblox.com/security/cve/CVE-2024-35809",
      "title": "kernel-source-azure: Security update for the Linux Kernel",
      "priority": "High",
      "severity": "MODERATE",
      "cvss": 7.8,
      "epss": 0.00195,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-26934",
      "url": "https://patchblox.com/security/cve/CVE-2024-26934",
      "title": "dtb-aarch64: Security update for the Linux Kernel",
      "priority": "High",
      "severity": "MODERATE",
      "cvss": 7.8,
      "epss": 0.0019,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-25742",
      "url": "https://patchblox.com/security/cve/CVE-2024-25742",
      "title": "kernel-tools: RHSA-2024:3138: kernel security, bug fix, and enhancement update (Moderate)",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8,
      "epss": 0.0018,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-26960",
      "url": "https://patchblox.com/security/cve/CVE-2024-26960",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  mm: swap: fix race between free_swap_and_cache()...",
      "priority": "High",
      "severity": "high",
      "cvss": 7,
      "epss": 0.0018,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-26933",
      "url": "https://patchblox.com/security/cve/CVE-2024-26933",
      "title": "dtb-aarch64: Security update for the Linux Kernel",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00177,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-53151",
      "url": "https://patchblox.com/security/cve/CVE-2023-53151",
      "title": "dtb-aarch64: Security update for the Linux Kernel",
      "priority": "High",
      "severity": "Important",
      "cvss": 8,
      "epss": 0.00121,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-27388",
      "url": "https://patchblox.com/security/cve/CVE-2024-27388",
      "title": "dtb-aarch64: Security update for the Linux Kernel",
      "priority": "Routine",
      "severity": "Important",
      "cvss": 5.5,
      "epss": 0.00959,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-35823",
      "url": "https://patchblox.com/security/cve/CVE-2024-35823",
      "title": "dtb-aarch64: Security update for the Linux Kernel",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00915,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-26901",
      "url": "https://patchblox.com/security/cve/CVE-2024-26901",
      "title": "kernel-debug-core: kernel: RDMA/srpt: Do not register event handler until srpt device is fully setup (CVE-2024-26872) * kernel: usb: ulp...",
      "priority": "Routine",
      "severity": "moderate",
      "cvss": 5.5,
      "epss": 0.00828,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-26868",
      "url": "https://patchblox.com/security/cve/CVE-2024-26868",
      "title": "dtb-aarch64: Security update for the Linux Kernel",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00614,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-27435",
      "url": "https://patchblox.com/security/cve/CVE-2024-27435",
      "title": "dtb-aarch64: Security update for the Linux Kernel",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00397,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-52656",
      "url": "https://patchblox.com/security/cve/CVE-2023-52656",
      "title": "kernel-docs: Dropped any code related to SCM_RIGHTS (bsc#1224187).",
      "priority": "Routine",
      "severity": "MODERATE",
      "cvss": 5.5,
      "epss": 0.00308,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-26816",
      "url": "https://patchblox.com/security/cve/CVE-2024-26816",
      "title": "dtb-aarch64: Fixed relocations in .notes section when building with CONFIG_XEN_PV=y (bsc#1222624).",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00307,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-26809",
      "url": "https://patchblox.com/security/cve/CVE-2024-26809",
      "title": "dtb-aarch64: netfilter: nft_set_pipapo: release elements in clone only from destroy path (bsc#1222633).",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00294,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-27038",
      "url": "https://patchblox.com/security/cve/CVE-2024-27038",
      "title": "bpftool: ELSA-2024-9315: kernel security update (MODERATE)",
      "priority": "Routine",
      "severity": "MODERATE",
      "cvss": 5.5,
      "epss": 0.00292,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-27025",
      "url": "https://patchblox.com/security/cve/CVE-2024-27025",
      "title": "kernel-rt: (CVE-2021-47548) * (CVE-2023-52619)",
      "priority": "Routine",
      "severity": "Important",
      "cvss": 5.5,
      "epss": 0.00291,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-26815",
      "url": "https://patchblox.com/security/cve/CVE-2024-26815",
      "title": "dtb-aarch64: Fixed improper TCA_TAPRIO_TC_ENTRY_INDEX check (bsc#1222635).",
      "priority": "Routine",
      "severity": "MODERATE",
      "cvss": 5.5,
      "epss": 0.00285,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-26870",
      "url": "https://patchblox.com/security/cve/CVE-2024-26870",
      "title": "kernel-rt: kernel: NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102",
      "priority": "Routine",
      "severity": "Important",
      "cvss": 5.5,
      "epss": 0.00283,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-27047",
      "url": "https://patchblox.com/security/cve/CVE-2024-27047",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  net: phy: fix phy_get_internal_delay accessing a...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00281,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-26937",
      "url": "https://patchblox.com/security/cve/CVE-2024-26937",
      "title": "dtb-aarch64: Security update for the Linux Kernel",
      "priority": "Routine",
      "severity": "MODERATE",
      "cvss": 5.5,
      "epss": 0.00269,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-26642",
      "url": "https://patchblox.com/security/cve/CVE-2024-26642",
      "title": "dtb-aarch64: Fixed the set of anonymous timeout flag in netfilter nf_tables (bsc#1221830).",
      "priority": "Routine",
      "severity": "MODERATE",
      "cvss": 5.5,
      "epss": 0.00268,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-26973",
      "url": "https://patchblox.com/security/cve/CVE-2024-26973",
      "title": "kernel-zfcpdump-core: kernel: fat: fix uninitialized field in nostale filehandles",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00255,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-26812",
      "url": "https://patchblox.com/security/cve/CVE-2024-26812",
      "title": "dtb-aarch64: kABI: vfio: struct virqfd kABI workaround (bsc#1222808).",
      "priority": "Routine",
      "severity": "MODERATE",
      "cvss": 5.5,
      "epss": 0.0025,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-26863",
      "url": "https://patchblox.com/security/cve/CVE-2024-26863",
      "title": "dtb-aarch64: hsr: Fix uninit-value access in hsr_get_node() (bsc#1223021).",
      "priority": "Routine",
      "severity": "MODERATE",
      "cvss": 5.5,
      "epss": 0.00249,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-35815",
      "url": "https://patchblox.com/security/cve/CVE-2024-35815",
      "title": "dtb-aarch64: Security update for the Linux Kernel",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00249,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-26935",
      "url": "https://patchblox.com/security/cve/CVE-2024-26935",
      "title": "dtb-aarch64: Security update for the Linux Kernel",
      "priority": "Routine",
      "severity": "MODERATE",
      "cvss": 5.5,
      "epss": 0.00242,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-26946",
      "url": "https://patchblox.com/security/cve/CVE-2024-26946",
      "title": "dtb-aarch64: Fixed copy_from_kernel_nofault() to read from unsafe address (bsc#1223669).",
      "priority": "Routine",
      "severity": "MODERATE",
      "cvss": 5.5,
      "epss": 0.00241,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-27437",
      "url": "https://patchblox.com/security/cve/CVE-2024-27437",
      "title": "kernel-64kb: vfio/pci: Disable auto-enable of exclusive INTx IRQ (bsc#1222625).",
      "priority": "Routine",
      "severity": "MODERATE",
      "cvss": 5.5,
      "epss": 0.0024,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-27389",
      "url": "https://patchblox.com/security/cve/CVE-2024-27389",
      "title": "kernel-uek64k: pstore: inode: Only d_invalidate() is needed (Kees Cook) [Orabug: 36598300]",
      "priority": "Routine",
      "severity": "N/A",
      "cvss": 5.5,
      "epss": 0.00237,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-35804",
      "url": "https://patchblox.com/security/cve/CVE-2024-35804",
      "title": "dtb-aarch64: Security update for the Linux Kernel",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00236,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-35801",
      "url": "https://patchblox.com/security/cve/CVE-2024-35801",
      "title": "dtb-aarch64: Security update for the Linux Kernel",
      "priority": "Routine",
      "severity": "Important",
      "cvss": 5.5,
      "epss": 0.00235,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-26891",
      "url": "https://patchblox.com/security/cve/CVE-2024-26891",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  iommu/vt-d: Don\u0027t issue ATS Invalidation request...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00231,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-26964",
      "url": "https://patchblox.com/security/cve/CVE-2024-26964",
      "title": "bpftool: kernel: usb: xhci: Add error handling in xhci_map_urb_for_dma",
      "priority": "Routine",
      "severity": "moderate",
      "cvss": 5.5,
      "epss": 0.0023,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-35800",
      "url": "https://patchblox.com/security/cve/CVE-2024-35800",
      "title": "dtb-aarch64: Security update for the Linux Kernel",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00227,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-26977",
      "url": "https://patchblox.com/security/cve/CVE-2024-26977",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  pci_iounmap(): Fix MMIO mapping leak  The #ifdef...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00226,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-27390",
      "url": "https://patchblox.com/security/cve/CVE-2024-27390",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  ipv6: mcast: remove one synchronize_net() barrie...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00223,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-26860",
      "url": "https://patchblox.com/security/cve/CVE-2024-26860",
      "title": "kernel-64kb: Fixed a memory leak when rechecking the data (bsc#1223077).",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00222,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-26938",
      "url": "https://patchblox.com/security/cve/CVE-2024-26938",
      "title": "dtb-aarch64: Security update for the Linux Kernel",
      "priority": "Routine",
      "severity": "MODERATE",
      "cvss": 5.5,
      "epss": 0.00222,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-35827",
      "url": "https://patchblox.com/security/cve/CVE-2024-35827",
      "title": "dtb-aarch64: io_uring/net: fix overflow check in io_recvmsg_mshot_prep() (bsc#1224606).",
      "priority": "Routine",
      "severity": "MODERATE",
      "cvss": 5.5,
      "epss": 0.00219,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-35826",
      "url": "https://patchblox.com/security/cve/CVE-2024-35826",
      "title": "dtb-aarch64: Security update for the Linux Kernel",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00211,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-26862",
      "url": "https://patchblox.com/security/cve/CVE-2024-26862",
      "title": "dtb-aarch64: Fixed packet annotate data-races around ignore_outgoing (bsc#1223111).",
      "priority": "Routine",
      "severity": "MODERATE",
      "cvss": 4.7,
      "epss": 0.00208,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-26643",
      "url": "https://patchblox.com/security/cve/CVE-2024-26643",
      "title": "dtb-aarch64: Fixed mark set as dead when unbinding anonymous set with timeout (bsc#1221829).",
      "priority": "Routine",
      "severity": "MODERATE",
      "cvss": 5.5,
      "epss": 0.00204,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-26878",
      "url": "https://patchblox.com/security/cve/CVE-2024-26878",
      "title": "kernel-rt-modules-extra: kernel: quota: Fix potential NULL pointer dereference",
      "priority": "Routine",
      "severity": "important",
      "cvss": 5.5,
      "epss": 0.00189,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-35805",
      "url": "https://patchblox.com/security/cve/CVE-2024-35805",
      "title": "dtb-aarch64: dm snapshot: fix lockup in dm_exception_table_exit (bsc#1224743).",
      "priority": "Routine",
      "severity": "MODERATE",
      "cvss": 5.5,
      "epss": 0.00181,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-26861",
      "url": "https://patchblox.com/security/cve/CVE-2024-26861",
      "title": "dtb-aarch64: Fixed wireguard/receive annotate data-race around receiving_counter.counter (bsc#1223076).",
      "priority": "Routine",
      "severity": "MODERATE",
      "cvss": 4.7,
      "epss": 0.00177,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    }
  ],
  "dataAsOf": "2026-11-11T07:45:43Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}