# ALAS2023-2025-794: Security update for 21 packages

ALAS2023-2025-794, released January 6, 2025, fixes 111 CVEs across 21 products. None of them is reported as exploited. Patch Radar priority: High.

- Web page: https://patchblox.com/security/fix/linux/alas2023-2025-794
- Platform: Linux
- Released: Jan 6, 2025
- Priority: High (Closes CVE-2024-47685, high severity)
- CVEs: 111, exploited: 0, on CISA KEV: 0
- Vendor advisory: https://alas.aws.amazon.com/AL2023/ALAS-2025-794.html

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [bpftool](https://patchblox.com/security/data/product/linux/bpftool.md) | amzn 2023 | 6.1.115-126.197.amzn2023 |
| [bpftool-debuginfo](https://patchblox.com/security/data/product/linux/bpftool-debuginfo.md) | amzn 2023 | 6.1.115-126.197.amzn2023 |
| [kernel](https://patchblox.com/security/data/product/linux/kernel.md) | amzn 2023 | 6.1.115-126.197.amzn2023 |
| [kernel-debuginfo](https://patchblox.com/security/data/product/linux/kernel-debuginfo.md) | amzn 2023 | 6.1.115-126.197.amzn2023 |
| [kernel-debuginfo-common-aarch64](https://patchblox.com/security/data/product/linux/kernel-debuginfo-common-aarch64.md) | amzn 2023 | 6.1.115-126.197.amzn2023 |
| [kernel-debuginfo-common-x86_64](https://patchblox.com/security/data/product/linux/kernel-debuginfo-common-x86-64.md) | amzn 2023 | 6.1.115-126.197.amzn2023 |
| [kernel-devel](https://patchblox.com/security/data/product/linux/kernel-devel.md) | amzn 2023 | 6.1.115-126.197.amzn2023 |
| [kernel-headers](https://patchblox.com/security/data/product/linux/kernel-headers.md) | amzn 2023 | 6.1.115-126.197.amzn2023 |
| [kernel-libbpf](https://patchblox.com/security/data/product/linux/kernel-libbpf.md) | amzn 2023 | 6.1.115-126.197.amzn2023 |
| [kernel-libbpf-devel](https://patchblox.com/security/data/product/linux/kernel-libbpf-devel.md) | amzn 2023 | 6.1.115-126.197.amzn2023 |
| [kernel-libbpf-static](https://patchblox.com/security/data/product/linux/kernel-libbpf-static.md) | amzn 2023 | 6.1.115-126.197.amzn2023 |
| [kernel-livepatch-6.1.115-126.197](https://patchblox.com/security/data/product/linux/kernel-livepatch-6.1.115-126.197.md) | amzn 2023 | 1.0-0.amzn2023 |
| [kernel-modules-extra](https://patchblox.com/security/data/product/linux/kernel-modules-extra.md) | amzn 2023 | 6.1.115-126.197.amzn2023 |
| [kernel-modules-extra-common](https://patchblox.com/security/data/product/linux/kernel-modules-extra-common.md) | amzn 2023 | 6.1.115-126.197.amzn2023 |
| [kernel-tools](https://patchblox.com/security/data/product/linux/kernel-tools.md) | amzn 2023 | 6.1.115-126.197.amzn2023 |
| [kernel-tools-debuginfo](https://patchblox.com/security/data/product/linux/kernel-tools-debuginfo.md) | amzn 2023 | 6.1.115-126.197.amzn2023 |
| [kernel-tools-devel](https://patchblox.com/security/data/product/linux/kernel-tools-devel.md) | amzn 2023 | 6.1.115-126.197.amzn2023 |
| [perf](https://patchblox.com/security/data/product/linux/perf.md) | amzn 2023 | 6.1.115-126.197.amzn2023 |
| [perf-debuginfo](https://patchblox.com/security/data/product/linux/perf-debuginfo.md) | amzn 2023 | 6.1.115-126.197.amzn2023 |
| [python3-perf](https://patchblox.com/security/data/product/linux/python3-perf.md) | amzn 2023 | 6.1.115-126.197.amzn2023 |
| [python3-perf-debuginfo](https://patchblox.com/security/data/product/linux/python3-perf-debuginfo.md) | amzn 2023 | 6.1.115-126.197.amzn2023 |

## CVEs this fix closes

| CVE | Priority | Title | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2024-47685](https://patchblox.com/security/data/cve/CVE-2024-47685.md) | High | kernel-64kb: netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (bsc#1231998). | 9.1 | 0.0136 |  |
| [CVE-2024-50083](https://patchblox.com/security/data/cve/CVE-2024-50083.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.5 | 0.0087 |  |
| [CVE-2024-47696](https://patchblox.com/security/data/cve/CVE-2024-47696.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0073 |  |
| [CVE-2024-50154](https://patchblox.com/security/data/cve/CVE-2024-50154.md) | High | kernel-livepatch-SLE15-SP6-RT_Update_2: tcp/dccp: Do not use timer_pending() in reqsk_queue_unlink() (bsc#1233072). | 7.0 | 0.0056 |  |
| [CVE-2024-47682](https://patchblox.com/security/data/cve/CVE-2024-47682.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0054 |  |
| [CVE-2024-49855](https://patchblox.com/security/data/cve/CVE-2024-49855.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.0 | 0.0046 |  |
| [CVE-2024-49882](https://patchblox.com/security/data/cve/CVE-2024-49882.md) | High | kernel-64kb: ext4: fix double brelse() the buffer of the extents path (bsc#1232200). | 7.8 | 0.0032 |  |
| [CVE-2024-47742](https://patchblox.com/security/data/cve/CVE-2024-47742.md) | High | kernel-livepatch-SLE15-SP6_Update_6: Security update for the Linux Kernel | 7.8 | 0.0029 |  |
| [CVE-2024-50151](https://patchblox.com/security/data/cve/CVE-2024-50151.md) | High | dtb-aarch64: smb: client: fix OOBs when building SMB2_IOCTL request (bsc#1233055). | 7.8 | 0.0028 |  |
| [CVE-2024-49884](https://patchblox.com/security/data/cve/CVE-2024-49884.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0028 |  |
| [CVE-2024-50143](https://patchblox.com/security/data/cve/CVE-2024-50143.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0028 |  |
| [CVE-2024-49883](https://patchblox.com/security/data/cve/CVE-2024-49883.md) | High | kernel-64kb: ext4: aovid use-after-free in ext4_ext_insert_extent() (bsc#1232199). | 7.8 | 0.0028 |  |
| [CVE-2024-49936](https://patchblox.com/security/data/cve/CVE-2024-49936.md) | High | kernel-64kb: net/xen-netback: prevent UAF in xenvif_flush_hash() (bsc#1232424). | 7.8 | 0.0027 |  |
| [CVE-2024-49889](https://patchblox.com/security/data/cve/CVE-2024-49889.md) | High | bpftool: ext4: avoid use-after-free in ext4_ext_show_leaf() (Baokun Li) [Orabug: 37205705] | 7.8 | 0.0026 |  |
| [CVE-2024-49860](https://patchblox.com/security/data/cve/CVE-2024-49860.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.1 | 0.0025 |  |
| [CVE-2024-49983](https://patchblox.com/security/data/cve/CVE-2024-49983.md) | High | kernel-64kb: ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free (bsc#1232096). | 7.8 | 0.0025 |  |
| [CVE-2024-47701](https://patchblox.com/security/data/cve/CVE-2024-47701.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0025 |  |
| [CVE-2024-50127](https://patchblox.com/security/data/cve/CVE-2024-50127.md) | High | kernel-64kb: net: sched: fix use-after-free in taprio_change() (bsc#1232907). | 7.8 | 0.0025 |  |
| [CVE-2024-50131](https://patchblox.com/security/data/cve/CVE-2024-50131.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0025 |  |
| [CVE-2024-50115](https://patchblox.com/security/data/cve/CVE-2024-50115.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.1 | 0.0025 |  |
| [CVE-2024-50150](https://patchblox.com/security/data/cve/CVE-2024-50150.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0024 |  |
| [CVE-2023-52751](https://patchblox.com/security/data/cve/CVE-2023-52751.md) | High | kernel-default-base: smb: client: fix use-after-free in smb2_query_info_compound() (bsc#1225489). | 7.8 | 0.0024 |  |
| [CVE-2024-35963](https://patchblox.com/security/data/cve/CVE-2024-35963.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.1 | 0.0024 |  |
| [CVE-2024-50195](https://patchblox.com/security/data/cve/CVE-2024-50195.md) | High | kernel-64kb: posix-clock: Fix missing timespec64 check in pc_clock_settime() (bsc#1233103). | 7.8 | 0.0023 |  |
| [CVE-2024-50186](https://patchblox.com/security/data/cve/CVE-2024-50186.md) | High | kernel-64kb: net: explicitly clear the sk pointer, when pf->create fails (bsc#1233110). | 7.8 | 0.0023 |  |
| [CVE-2024-50155](https://patchblox.com/security/data/cve/CVE-2024-50155.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0023 |  |
| [CVE-2024-50128](https://patchblox.com/security/data/cve/CVE-2024-50128.md) | High | kernel-64kb: net: wwan: fix global oob in wwan_rtnl_policy (bsc#1232905). | 7.1 | 0.0023 |  |
| [CVE-2024-50060](https://patchblox.com/security/data/cve/CVE-2024-50060.md) | High | kernel-64kb: io_uring: check if we need to reschedule during overflow flush (bsc#1232417). | 7.8 | 0.0022 |  |
| [CVE-2024-49851](https://patchblox.com/security/data/cve/CVE-2024-49851.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.1 | 0.0022 |  |
| [CVE-2024-50088](https://patchblox.com/security/data/cve/CVE-2024-50088.md) | High | kernel-64kb: btrfs: fix uninitialized pointer free in add_inode_ref() (bsc#1232498). | 7.8 | 0.0021 |  |
| [CVE-2024-50200](https://patchblox.com/security/data/cve/CVE-2024-50200.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.1 | 0.0021 |  |
| [CVE-2024-47679](https://patchblox.com/security/data/cve/CVE-2024-47679.md) | High | kernel-64kb: vfs: fix race between evice_inodes() and find_inode()&iput() (bsc#1231930). | 7.8 | 0.0020 |  |
| [CVE-2023-45896](https://patchblox.com/security/data/cve/CVE-2023-45896.md) | High | kernel-uek64k: fs/ntfs3: Add more attributes checks in mi_enum_attr() (Konstantin Komarov) | 7.1 | 0.0020 |  |
| [CVE-2024-47692](https://patchblox.com/security/data/cve/CVE-2024-47692.md) | Routine | kernel-64kb: nfsd: return -EINVAL when namelen is 0 (bsc#1231857). | 6.5 | 0.0116 |  |
| [CVE-2024-47693](https://patchblox.com/security/data/cve/CVE-2024-47693.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 6.5 | 0.0098 |  |
| [CVE-2024-50095](https://patchblox.com/security/data/cve/CVE-2024-50095.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0074 |  |
| [CVE-2024-47739](https://patchblox.com/security/data/cve/CVE-2024-47739.md) | Routine | kernel-64kb: padata: use integer wrap around to prevent deadlock on seq_nr overflow (bsc#1232124). | 5.5 | 0.0068 |  |
| [CVE-2024-49978](https://patchblox.com/security/data/cve/CVE-2024-49978.md) | Routine | gso: fix udp gso fraglist segmentation after pull from frag_list | 5.5 | 0.0066 |  |
| [CVE-2024-50045](https://patchblox.com/security/data/cve/CVE-2024-50045.md) | Routine | kernel-64kb: netfilter: br_netfilter: fix panic with metadata_dst skb (bsc#1231903). | 5.5 | 0.0061 |  |
| [CVE-2024-47678](https://patchblox.com/security/data/cve/CVE-2024-47678.md) | Routine | icmp: change the order of rate limits | 5.5 | 0.0061 |  |
| [CVE-2024-50046](https://patchblox.com/security/data/cve/CVE-2024-50046.md) | Routine | kernel-64kb: NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies() (bsc#1231902). | 5.5 | 0.0058 |  |
| [CVE-2024-50185](https://patchblox.com/security/data/cve/CVE-2024-50185.md) | Routine | kernel-64kb: kABI fix for mptcp: handle consistently DSS corruption (bsc#1233109). | 5.5 | 0.0056 |  |
| [CVE-2024-49875](https://patchblox.com/security/data/cve/CVE-2024-49875.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0054 |  |
| [CVE-2024-46695](https://patchblox.com/security/data/cve/CVE-2024-46695.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 6.3 | 0.0053 |  |
| [CVE-2024-50162](https://patchblox.com/security/data/cve/CVE-2024-50162.md) | Routine | kernel-64kb: bpf: selftests: send packet to devmap redirect XDP (bsc#1233075). | 5.5 | 0.0052 |  |
| [CVE-2024-50085](https://patchblox.com/security/data/cve/CVE-2024-50085.md) | Routine | kernel-64kb: mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow (bsc#1232508). | 5.5 | 0.0048 |  |
| [CVE-2024-49955](https://patchblox.com/security/data/cve/CVE-2024-49955.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0034 |  |
| [CVE-2024-50001](https://patchblox.com/security/data/cve/CVE-2024-50001.md) | Routine | kernel-64kb: net/mlx5: Fix error path in multi-packet WQE transmit (bsc#1232084). | 5.5 | 0.0033 |  |
| [CVE-2024-49867](https://patchblox.com/security/data/cve/CVE-2024-49867.md) | Routine | kernel-64kb: btrfs: wait for fixup workers before stopping cleaner kthread during umount (bsc#1232262). | 5.5 | 0.0030 |  |
| [CVE-2024-49878](https://patchblox.com/security/data/cve/CVE-2024-49878.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0030 |  |
| [CVE-2024-49948](https://patchblox.com/security/data/cve/CVE-2024-49948.md) | Routine | kernel-64kb: net: add more sanity checks to qdisc_pkt_len_init() (bsc#1232161). | 5.5 | 0.0029 |  |
| [CVE-2024-49868](https://patchblox.com/security/data/cve/CVE-2024-49868.md) | Routine | kernel-64kb: btrfs: fix a NULL pointer dereference when failed to start a new trasacntion (bsc#1232272). | 5.5 | 0.0029 |  |
| [CVE-2024-49952](https://patchblox.com/security/data/cve/CVE-2024-49952.md) | Routine | kernel-64kb: netfilter: nf_tables: prevent nf_skb_duplicated corruption (bsc#1232157). | 5.5 | 0.0029 |  |
| [CVE-2024-49949](https://patchblox.com/security/data/cve/CVE-2024-49949.md) | Routine | kernel-64kb: net: avoid potential underflow in qdisc_pkt_len_init() with UFO (bsc#1232160). | 5.5 | 0.0028 |  |
| [CVE-2024-50024](https://patchblox.com/security/data/cve/CVE-2024-50024.md) | Routine | kernel-64kb: net: Fix an unsafe loop on the list (bsc#1231954). | 5.5 | 0.0028 |  |
| [CVE-2024-47684](https://patchblox.com/security/data/cve/CVE-2024-47684.md) | Routine | kernel-64kb: tcp: check skb is non-NULL in tcp_rto_delta_us() (bsc#1231987). | 5.5 | 0.0028 |  |
| [CVE-2024-47737](https://patchblox.com/security/data/cve/CVE-2024-47737.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0028 |  |
| [CVE-2024-49944](https://patchblox.com/security/data/cve/CVE-2024-49944.md) | Routine | kernel-64kb: sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start (bsc#1232166). | 5.5 | 0.0028 |  |
| [CVE-2024-39497](https://patchblox.com/security/data/cve/CVE-2024-39497.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0028 |  |
| [CVE-2024-50099](https://patchblox.com/security/data/cve/CVE-2024-50099.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0027 |  |
| [CVE-2024-49973](https://patchblox.com/security/data/cve/CVE-2024-49973.md) | Routine | kernel-64kb: r8169: add tally counter fields added with RTL8125 (bsc#1232105). | 5.5 | 0.0026 |  |
| [CVE-2024-50142](https://patchblox.com/security/data/cve/CVE-2024-50142.md) | Routine | kernel-64kb: xfrm: validate new SA's prefixlen using SA family when sel.family is unset (bsc#1233028). | 5.5 | 0.0026 |  |
| [CVE-2024-50040](https://patchblox.com/security/data/cve/CVE-2024-50040.md) | Routine | kernel-64kb: igb: Do not bring the device up after non-fatal error (bsc#1231908). | 5.5 | 0.0026 |  |
| [CVE-2024-50153](https://patchblox.com/security/data/cve/CVE-2024-50153.md) | Routine | dtb-aarch64: scsi: target: core: Fix null-ptr-deref in target_alloc_device() (bsc#1233061). | 5.5 | 0.0026 |  |
| [CVE-2024-49959](https://patchblox.com/security/data/cve/CVE-2024-49959.md) | Routine | kernel-64kb: jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error (bsc#1232149). | 5.5 | 0.0026 |  |
| [CVE-2024-50110](https://patchblox.com/security/data/cve/CVE-2024-50110.md) | Routine | kernel-64kb: xfrm: fix one more kernel-infoleak in algo dumping (bsc#1232885). | 5.5 | 0.0026 |  |
| [CVE-2024-50039](https://patchblox.com/security/data/cve/CVE-2024-50039.md) | Routine | kernel-64kb: kABI: Restore deleted EXPORT_SYMBOL(__qdisc_calculate_pkt_len) (bsc#1231909). | 5.5 | 0.0025 |  |
| [CVE-2024-49881](https://patchblox.com/security/data/cve/CVE-2024-49881.md) | Routine | kernel-64kb: ext4: update orig_path in ext4_find_extent() (bsc#1232201). | 5.5 | 0.0025 |  |
| [CVE-2024-49957](https://patchblox.com/security/data/cve/CVE-2024-49957.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0025 |  |
| [CVE-2024-49975](https://patchblox.com/security/data/cve/CVE-2024-49975.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0025 |  |
| [CVE-2024-50141](https://patchblox.com/security/data/cve/CVE-2024-50141.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0025 |  |
| [CVE-2024-47709](https://patchblox.com/security/data/cve/CVE-2024-47709.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0025 |  |
| [CVE-2024-49935](https://patchblox.com/security/data/cve/CVE-2024-49935.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0025 |  |
| [CVE-2024-50048](https://patchblox.com/security/data/cve/CVE-2024-50048.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0025 |  |
| [CVE-2024-47706](https://patchblox.com/security/data/cve/CVE-2024-47706.md) | Routine | kernel-64kb: block, bfq: fix possible UAF for bfqq->bic with merge chain (bsc#1231942). | 5.5 | 0.0025 |  |
| [CVE-2024-50058](https://patchblox.com/security/data/cve/CVE-2024-50058.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0025 |  |
| [CVE-2024-50101](https://patchblox.com/security/data/cve/CVE-2024-50101.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0025 |  |
| [CVE-2024-50019](https://patchblox.com/security/data/cve/CVE-2024-50019.md) | Routine | kernel-livepatch-SLE15-SP6_Update_6: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2024-49933](https://patchblox.com/security/data/cve/CVE-2024-49933.md) | Routine | kernel-64kb: blk_iocost: fix more out of bound shifts (bsc#1232368). | 5.5 | 0.0024 |  |
| [CVE-2024-50015](https://patchblox.com/security/data/cve/CVE-2024-50015.md) | Routine | kernel-64kb: ext4: dax: fix overflowing extents beyond inode size when partially writing (bsc#1232079). | 5.5 | 0.0024 |  |
| [CVE-2024-47707](https://patchblox.com/security/data/cve/CVE-2024-47707.md) | Routine | kernel-64kb: ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev() (bsc#1231935). | 5.5 | 0.0024 |  |
| [CVE-2024-47734](https://patchblox.com/security/data/cve/CVE-2024-47734.md) | Routine | bpftool: bonding: Fix unnecessary warnings and logs from bond_xdp_get_xmit_slave() (Jiwon Kim) [Orabug: 37200774] | 5.5 | 0.0024 |  |
| [CVE-2024-49870](https://patchblox.com/security/data/cve/CVE-2024-49870.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 6.1 | 0.0024 |  |
| [CVE-2024-47728](https://patchblox.com/security/data/cve/CVE-2024-47728.md) | Routine | bpf: Zero former ARG_PTR_TO_{LONGINT} args in case of error | 5.5 | 0.0024 |  |
| [CVE-2024-49927](https://patchblox.com/security/data/cve/CVE-2024-49927.md) | Routine | bpftool: x86/ioapic: Handle allocation failures gracefully (Thomas Gleixner) [Orabug: 37205954] | 5.5 | 0.0024 |  |
| [CVE-2024-49954](https://patchblox.com/security/data/cve/CVE-2024-49954.md) | Routine | kernel-64kb: static_call: Replace pointless WARN_ON() in static_call_module_notify() (bsc#1232155). | 5.5 | 0.0024 |  |
| [CVE-2024-50000](https://patchblox.com/security/data/cve/CVE-2024-50000.md) | Routine | kernel-64kb: net/mlx5e: Fix NULL deref in mlx5e_tir_builder_alloc() (bsc#1232085). | 5.5 | 0.0024 |  |
| [CVE-2024-50002](https://patchblox.com/security/data/cve/CVE-2024-50002.md) | Routine | dtb-aarch64: static_call: Handle module init failure correctly in static_call_del_module() (bsc#1232083). | 5.5 | 0.0024 |  |
| [CVE-2024-50179](https://patchblox.com/security/data/cve/CVE-2024-50179.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2024-50038](https://patchblox.com/security/data/cve/CVE-2024-50038.md) | Routine | kernel-64kb: netfilter: xtables: fix typo causing some targets not to load on IPv6 (bsc#1231910). | 5.5 | 0.0023 |  |
| [CVE-2024-50182](https://patchblox.com/security/data/cve/CVE-2024-50182.md) | Routine | kernel-64kb: secretmem: disable memfd_secret() if arch cannot set direct map (bsc#1233129). | 5.5 | 0.0023 |  |
| [CVE-2024-47710](https://patchblox.com/security/data/cve/CVE-2024-47710.md) | Routine | kernel-64kb: sock_map: Add a cond_resched() in sock_hash_free() (bsc#1232049). | 5.5 | 0.0023 |  |
| [CVE-2024-50147](https://patchblox.com/security/data/cve/CVE-2024-50147.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2024-50194](https://patchblox.com/security/data/cve/CVE-2024-50194.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2024-38632](https://patchblox.com/security/data/cve/CVE-2024-38632.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2024-50013](https://patchblox.com/security/data/cve/CVE-2024-50013.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 6.1 | 0.0023 |  |
| [CVE-2024-50082](https://patchblox.com/security/data/cve/CVE-2024-50082.md) | Routine | kernel-64kb: blk-rq-qos: fix crash on rq_qos_wait vs | 4.7 | 0.0022 |  |
| [CVE-2024-50010](https://patchblox.com/security/data/cve/CVE-2024-50010.md) | Routine | bpftool: exec: don't WARN for racy path_noexec check (Mateusz Guzik) [Orabug: 37206344] | 5.5 | 0.0022 |  |
| [CVE-2024-50199](https://patchblox.com/security/data/cve/CVE-2024-50199.md) | Routine | kernel-64kb: mm/swapfile: skip HugeTLB pages for unuse_vma (bsc#1233112). | 5.5 | 0.0022 |  |
| [CVE-2024-47743](https://patchblox.com/security/data/cve/CVE-2024-47743.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0022 |  |
| [CVE-2024-50138](https://patchblox.com/security/data/cve/CVE-2024-50138.md) | Routine | kernel-64kb: bpf: Use raw_spinlock_t in ringbuf (bsc#1232935). | 5.5 | 0.0022 |  |
| [CVE-2024-50136](https://patchblox.com/security/data/cve/CVE-2024-50136.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0022 |  |
| [CVE-2024-47705](https://patchblox.com/security/data/cve/CVE-2024-47705.md) | Routine | kernel-64kb: block: fix potential invalid pointer dereference in blk_add_partition (bsc#1231872). | 5.5 | 0.0022 |  |
| [CVE-2024-50163](https://patchblox.com/security/data/cve/CVE-2024-50163.md) | Routine | kernel-64kb: bpf: Make sure internal and UAPI bpf_redirect flags do not overlap (bsc#1233098). | 5.5 | 0.0022 |  |
| [CVE-2024-49858](https://patchblox.com/security/data/cve/CVE-2024-49858.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2024-50087](https://patchblox.com/security/data/cve/CVE-2024-50087.md) | Routine | kernel-64kb: btrfs: fix uninitialized pointer free on read_alloc_one_name() error (bsc#1232499). | 5.5 | 0.0021 |  |
| [CVE-2024-50201](https://patchblox.com/security/data/cve/CVE-2024-50201.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2024-49850](https://patchblox.com/security/data/cve/CVE-2024-49850.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2024-50192](https://patchblox.com/security/data/cve/CVE-2024-50192.md) | Routine | kernel-64kb: irqchip/gic-v4: Do not allow a VMOVP on a dying VPE (bsc#1233106). | 5.5 | 0.0021 |  |
| [CVE-2024-50191](https://patchblox.com/security/data/cve/CVE-2024-50191.md) | Routine | bpftool: ext4: don't set SB_RDONLY after filesystem errors (Jan Kara) [Orabug: 37264225] | 5.5 | 0.0021 |  |
| [CVE-2024-50006](https://patchblox.com/security/data/cve/CVE-2024-50006.md) | Routine | kernel-64kb: ext4: fix i_data_sem unlock order in ext4_ind_migrate() (bsc#1232442). | 4.7 | 0.0019 |  |

---

Data as of 2026-11-11T13:47:35Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.