# ALAS2023-2025-809: Security update for 21 packages ALAS2023-2025-809, released January 21, 2025, fixes 111 CVEs across 21 products. None of them is reported as exploited. Patch Radar priority: High. - Web page: https://patchblox.com/security/fix/linux/alas2023-2025-809 - Platform: Linux - Released: Jan 21, 2025 - Priority: High (Closes CVE-2024-56644, high severity) - CVEs: 111, exploited: 0, on CISA KEV: 0 - Vendor advisory: https://alas.aws.amazon.com/AL2023/ALAS-2025-809.html ## Applies to | Product | Release | Fixed in | |---|---|---| | [bpftool](https://patchblox.com/security/data/product/linux/bpftool.md) | amzn 2023 | 6.1.124-134.200.amzn2023 | | [bpftool-debuginfo](https://patchblox.com/security/data/product/linux/bpftool-debuginfo.md) | amzn 2023 | 6.1.124-134.200.amzn2023 | | [kernel](https://patchblox.com/security/data/product/linux/kernel.md) | amzn 2023 | 6.1.124-134.200.amzn2023 | | [kernel-debuginfo](https://patchblox.com/security/data/product/linux/kernel-debuginfo.md) | amzn 2023 | 6.1.124-134.200.amzn2023 | | [kernel-debuginfo-common-aarch64](https://patchblox.com/security/data/product/linux/kernel-debuginfo-common-aarch64.md) | amzn 2023 | 6.1.124-134.200.amzn2023 | | [kernel-debuginfo-common-x86_64](https://patchblox.com/security/data/product/linux/kernel-debuginfo-common-x86-64.md) | amzn 2023 | 6.1.124-134.200.amzn2023 | | [kernel-devel](https://patchblox.com/security/data/product/linux/kernel-devel.md) | amzn 2023 | 6.1.124-134.200.amzn2023 | | [kernel-headers](https://patchblox.com/security/data/product/linux/kernel-headers.md) | amzn 2023 | 6.1.124-134.200.amzn2023 | | [kernel-libbpf](https://patchblox.com/security/data/product/linux/kernel-libbpf.md) | amzn 2023 | 6.1.124-134.200.amzn2023 | | [kernel-libbpf-devel](https://patchblox.com/security/data/product/linux/kernel-libbpf-devel.md) | amzn 2023 | 6.1.124-134.200.amzn2023 | | [kernel-libbpf-static](https://patchblox.com/security/data/product/linux/kernel-libbpf-static.md) | amzn 2023 | 6.1.124-134.200.amzn2023 | | [kernel-livepatch-6.1.124-134.200](https://patchblox.com/security/data/product/linux/kernel-livepatch-6.1.124-134.200.md) | amzn 2023 | 1.0-0.amzn2023 | | [kernel-modules-extra](https://patchblox.com/security/data/product/linux/kernel-modules-extra.md) | amzn 2023 | 6.1.124-134.200.amzn2023 | | [kernel-modules-extra-common](https://patchblox.com/security/data/product/linux/kernel-modules-extra-common.md) | amzn 2023 | 6.1.124-134.200.amzn2023 | | [kernel-tools](https://patchblox.com/security/data/product/linux/kernel-tools.md) | amzn 2023 | 6.1.124-134.200.amzn2023 | | [kernel-tools-debuginfo](https://patchblox.com/security/data/product/linux/kernel-tools-debuginfo.md) | amzn 2023 | 6.1.124-134.200.amzn2023 | | [kernel-tools-devel](https://patchblox.com/security/data/product/linux/kernel-tools-devel.md) | amzn 2023 | 6.1.124-134.200.amzn2023 | | [perf](https://patchblox.com/security/data/product/linux/perf.md) | amzn 2023 | 6.1.124-134.200.amzn2023 | | [perf-debuginfo](https://patchblox.com/security/data/product/linux/perf-debuginfo.md) | amzn 2023 | 6.1.124-134.200.amzn2023 | | [python3-perf](https://patchblox.com/security/data/product/linux/python3-perf.md) | amzn 2023 | 6.1.124-134.200.amzn2023 | | [python3-perf-debuginfo](https://patchblox.com/security/data/product/linux/python3-perf-debuginfo.md) | amzn 2023 | 6.1.124-134.200.amzn2023 | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2024-56644](https://patchblox.com/security/data/cve/CVE-2024-56644.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.1 | 0.0071 | | | [CVE-2024-56645](https://patchblox.com/security/data/cve/CVE-2024-56645.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0068 | | | [CVE-2024-53206](https://patchblox.com/security/data/cve/CVE-2024-53206.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0063 | | | [CVE-2024-53141](https://patchblox.com/security/data/cve/CVE-2024-53141.md) | High | kernel-64kb: netfilter: ipset: add missing range check in bitmap_ip_uadt (bsc#1234381). | 7.8 | 0.0040 | | | [CVE-2024-27407](https://patchblox.com/security/data/cve/CVE-2024-27407.md) | High | kernel-source-coco: Security update for the Linux Kernel | 7.8 | 0.0028 | | | [CVE-2024-47745](https://patchblox.com/security/data/cve/CVE-2024-47745.md) | High | mm: call the security_mmap_file() LSM hook in remap_file_pages() | 7.8 | 0.0028 | | | [CVE-2024-56633](https://patchblox.com/security/data/cve/CVE-2024-56633.md) | High | kernel-64kb: selftests/bpf: Add apply_bytes test to test_txmsg_redir_wait_sndmem in test_sockmap (bsc#1235485). | 7.8 | 0.0028 | | | [CVE-2024-56672](https://patchblox.com/security/data/cve/CVE-2024-56672.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0027 | | | [CVE-2024-56709](https://patchblox.com/security/data/cve/CVE-2024-56709.md) | High | io_uring: check if iowq is killed before queuing | 7.8 | 0.0027 | | | [CVE-2024-57901](https://patchblox.com/security/data/cve/CVE-2024-57901.md) | High | kernel-devel-matched: kernel: af_packet: fix vlan_get_protocol_dgram() vs MSG_PEEK | 7.8 | 0.0027 | | | [CVE-2024-57902](https://patchblox.com/security/data/cve/CVE-2024-57902.md) | High | kernel-devel: kernel: af_packet: fix vlan_get_tci() vs MSG_PEEK | 7.8 | 0.0027 | | | [CVE-2024-53173](https://patchblox.com/security/data/cve/CVE-2024-53173.md) | High | kernel-azure: Security update for the Linux Kernel | 7.8 | 0.0027 | | | [CVE-2024-56615](https://patchblox.com/security/data/cve/CVE-2024-56615.md) | High | kernel-64kb: bpf: fix OOB devmap writes when deleting elements (bsc#1235426). | 7.8 | 0.0026 | | | [CVE-2024-53174](https://patchblox.com/security/data/cve/CVE-2024-53174.md) | High | kernel-azure: Security update for the Linux Kernel | 7.8 | 0.0026 | | | [CVE-2024-57900](https://patchblox.com/security/data/cve/CVE-2024-57900.md) | High | kernel-64kb: ila: serialize calls to nf_register_net_hooks() (bsc#1235973). | 7.8 | 0.0026 | | | [CVE-2024-53214](https://patchblox.com/security/data/cve/CVE-2024-53214.md) | High | kernel-64kb: vfio/pci: Properly hide first-in-list PCIe extended capability (bsc#1235004). | 7.8 | 0.0026 | | | [CVE-2024-52332](https://patchblox.com/security/data/cve/CVE-2024-52332.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0026 | | | [CVE-2024-56614](https://patchblox.com/security/data/cve/CVE-2024-56614.md) | High | kernel-64kb: xsk: fix OOB map writes when deleting elements (bsc#1235424). | 7.8 | 0.0026 | | | [CVE-2024-50055](https://patchblox.com/security/data/cve/CVE-2024-50055.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0025 | | | [CVE-2024-53142](https://patchblox.com/security/data/cve/CVE-2024-53142.md) | High | kernel-uek: ELSA-2025-20095: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0025 | | | [CVE-2024-56600](https://patchblox.com/security/data/cve/CVE-2024-56600.md) | High | kernel-64kb: net: inet6: do not leave a dangling sk pointer in inet6_create() (bsc#1235217). | 7.8 | 0.0025 | | | [CVE-2024-56601](https://patchblox.com/security/data/cve/CVE-2024-56601.md) | High | kernel-64kb: net: inet: do not leave a dangling sk pointer in inet_create() (bsc#1235230). | 7.8 | 0.0025 | | | [CVE-2024-56606](https://patchblox.com/security/data/cve/CVE-2024-56606.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0025 | | | [CVE-2024-56642](https://patchblox.com/security/data/cve/CVE-2024-56642.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0025 | | | [CVE-2024-56693](https://patchblox.com/security/data/cve/CVE-2024-56693.md) | High | kernel-64kb: brd: defer automatic disk creation until module initialization succeeds (bsc#1235418). | 7.8 | 0.0025 | | | [CVE-2024-56570](https://patchblox.com/security/data/cve/CVE-2024-56570.md) | High | kernel-default-base: ovl: Filter invalid inodes with missing lookup function (bsc#1235035). | 7.8 | 0.0024 | | | [CVE-2024-56558](https://patchblox.com/security/data/cve/CVE-2024-56558.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0024 | | | [CVE-2024-49861](https://patchblox.com/security/data/cve/CVE-2024-49861.md) | High | bpf: Fix helper writes to read-only maps | 7.1 | 0.0024 | | | [CVE-2024-50275](https://patchblox.com/security/data/cve/CVE-2024-50275.md) | High | kernel-64kb: arm64/sve: Discard stale CPU state when handling SVE traps (bsc#1233464). | 7.0 | 0.0024 | | | [CVE-2023-52926](https://patchblox.com/security/data/cve/CVE-2023-52926.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0024 | | | [CVE-2024-56603](https://patchblox.com/security/data/cve/CVE-2024-56603.md) | High | kernel-64kb: net: af_can: do not leave a dangling sk pointer in can_create() (bsc#1235415). | 8.1 | 0.0024 | | | [CVE-2024-56581](https://patchblox.com/security/data/cve/CVE-2024-56581.md) | High | kernel-uek: ELSA-2025-20095: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0024 | | | [CVE-2024-56658](https://patchblox.com/security/data/cve/CVE-2024-56658.md) | High | kernel-64kb: net: defer final 'struct net' free in netns dismantle (bsc#1235441). | 7.8 | 0.0024 | | | [CVE-2024-53194](https://patchblox.com/security/data/cve/CVE-2024-53194.md) | High | kernel-uek: ELSA-2025-20095: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0024 | | | [CVE-2024-56582](https://patchblox.com/security/data/cve/CVE-2024-56582.md) | High | kernel-64kb: btrfs: fix use-after-free in btrfs_encoded_read_endio() (bsc#1235128). | 7.8 | 0.0024 | | | [CVE-2024-41014](https://patchblox.com/security/data/cve/CVE-2024-41014.md) | High | dtb-aarch64: xfs: add bounds checking to xlog_recover_process_data (bsc#1228408). | 7.8 | 0.0024 | | | [CVE-2024-50121](https://patchblox.com/security/data/cve/CVE-2024-50121.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0023 | | | [CVE-2024-56739](https://patchblox.com/security/data/cve/CVE-2024-56739.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0023 | | | [CVE-2024-53099](https://patchblox.com/security/data/cve/CVE-2024-53099.md) | High | kernel-64kb: bpf: Check validity of link->type in bpf_link_show_fdinfo() (bsc#1233772). | 7.1 | 0.0023 | | | [CVE-2024-53680](https://patchblox.com/security/data/cve/CVE-2024-53680.md) | High | kernel-64kb: ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (bsc#1235715). | 7.8 | 0.0023 | | | [CVE-2024-56675](https://patchblox.com/security/data/cve/CVE-2024-56675.md) | High | kernel-64kb: bpf: Fix UAF via mismatching bpf_prog/attachment RCU flavors (bsc#1235555). | 7.8 | 0.0023 | | | [CVE-2024-56759](https://patchblox.com/security/data/cve/CVE-2024-56759.md) | High | kernel-coco: btrfs: fix use-after-free when COWing tree bock and tracing is enabled (bsc#1235645). | 7.8 | 0.0022 | | | [CVE-2024-57798](https://patchblox.com/security/data/cve/CVE-2024-57798.md) | High | drm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req() | 7.8 | 0.0022 | | | [CVE-2024-56616](https://patchblox.com/security/data/cve/CVE-2024-56616.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0022 | | | [CVE-2024-57896](https://patchblox.com/security/data/cve/CVE-2024-57896.md) | High | kernel-64kb: btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount (bsc#1235965). | 7.8 | 0.0021 | | | [CVE-2024-56690](https://patchblox.com/security/data/cve/CVE-2024-56690.md) | High | kernel-rt-64k-modules: kernel: crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY | 7.8 | 0.0019 | | | [CVE-2024-57876](https://patchblox.com/security/data/cve/CVE-2024-57876.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.0 | 0.0016 | | | [CVE-2024-53217](https://patchblox.com/security/data/cve/CVE-2024-53217.md) | Routine | kernel-azure: Security update for the Linux Kernel | 5.5 | 0.0073 | | | [CVE-2024-53240](https://patchblox.com/security/data/cve/CVE-2024-53240.md) | Routine | kernel-64kb: xen/netfront: fix crash when removing device (XSA-465 bsc#1234281). | 6.8 | 0.0062 | | | [CVE-2024-56779](https://patchblox.com/security/data/cve/CVE-2024-56779.md) | Routine | kernel-coco: Security update for the Linux Kernel | 6.3 | 0.0055 | | | [CVE-2024-53146](https://patchblox.com/security/data/cve/CVE-2024-53146.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0055 | | | [CVE-2024-56688](https://patchblox.com/security/data/cve/CVE-2024-56688.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0055 | | | [CVE-2024-57882](https://patchblox.com/security/data/cve/CVE-2024-57882.md) | Routine | kernel-64kb: mptcp: fix TCP options overflow | 5.5 | 0.0052 | | | [CVE-2025-21629](https://patchblox.com/security/data/cve/CVE-2025-21629.md) | Routine | net: reenable NETIF_F_IPV6_CSUM offload for BIG TCP packets | 5.5 | 0.0043 | | | [CVE-2024-56694](https://patchblox.com/security/data/cve/CVE-2024-56694.md) | Routine | kernel-64kb: bpf: fix recursive lock when verdict program return SK_PASS (bsc#1235412). | 5.5 | 0.0042 | | | [CVE-2024-56770](https://patchblox.com/security/data/cve/CVE-2024-56770.md) | Routine | kernel-64kb: net/sched: netem: account for backlog updates from child qdisc (bsc#1235637). | 5.5 | 0.0027 | | | [CVE-2024-53164](https://patchblox.com/security/data/cve/CVE-2024-53164.md) | Routine | kernel-64kb: net: sched: fix ordering of qlen adjustment (bsc#1234863). | 5.5 | 0.0027 | | | [CVE-2024-56636](https://patchblox.com/security/data/cve/CVE-2024-56636.md) | Routine | kernel-64kb: geneve: do not assume mac header is set in geneve_xmit_skb() (bsc#1235520). | 5.5 | 0.0027 | | | [CVE-2024-48881](https://patchblox.com/security/data/cve/CVE-2024-48881.md) | Routine | kernel-64kb: bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again (bsc#1235727). | 5.5 | 0.0026 | | | [CVE-2024-49934](https://patchblox.com/security/data/cve/CVE-2024-49934.md) | Routine | fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name | 4.6 | 0.0026 | | | [CVE-2024-56587](https://patchblox.com/security/data/cve/CVE-2024-56587.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0026 | | | [CVE-2024-56634](https://patchblox.com/security/data/cve/CVE-2024-56634.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0026 | | | [CVE-2024-45828](https://patchblox.com/security/data/cve/CVE-2024-45828.md) | Routine | kernel-uek: ELSA-2025-20480: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0025 | | | [CVE-2024-56369](https://patchblox.com/security/data/cve/CVE-2024-56369.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0025 | | | [CVE-2024-56648](https://patchblox.com/security/data/cve/CVE-2024-56648.md) | Routine | kernel-64kb: net: hsr: avoid potential out-of-bound access in fill_frame_info() (bsc#1235451). | 5.5 | 0.0025 | | | [CVE-2024-46841](https://patchblox.com/security/data/cve/CVE-2024-46841.md) | Routine | kernel-64kb: btrfs: do not BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc() (bsc#1231094). | 5.5 | 0.0025 | | | [CVE-2024-53198](https://patchblox.com/security/data/cve/CVE-2024-53198.md) | Routine | kernel-uek: ELSA-2025-20095: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0024 | | | [CVE-2024-56720](https://patchblox.com/security/data/cve/CVE-2024-56720.md) | Routine | kernel-64kb: bpf, sockmap: Several fixes to bpf_msg_pop_data (bsc#1235592). | 5.5 | 0.0024 | | | [CVE-2024-56569](https://patchblox.com/security/data/cve/CVE-2024-56569.md) | Routine | kernel-64kb: ftrace: Fix regression with module command in stack_trace_filter (bsc#1235031). | 5.5 | 0.0024 | | | [CVE-2024-56584](https://patchblox.com/security/data/cve/CVE-2024-56584.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0024 | | | [CVE-2024-53175](https://patchblox.com/security/data/cve/CVE-2024-53175.md) | Routine | kernel-64kb: ipc: fix memleak if msg_init_ns failed in create_ipc_ns (bsc#1234893). | 5.5 | 0.0024 | | | [CVE-2024-49926](https://patchblox.com/security/data/cve/CVE-2024-49926.md) | Routine | rcu-tasks: Fix access non-existent percpu rtpcp variable in rcu_tasks_need_gpcb() | 5.5 | 0.0024 | | | [CVE-2024-53105](https://patchblox.com/security/data/cve/CVE-2024-53105.md) | Routine | kernel-64kb: mm: page_alloc: move mlocked flag clearance into free_pages_prepare() (bsc#1234069). | 5.5 | 0.0024 | | | [CVE-2024-50146](https://patchblox.com/security/data/cve/CVE-2024-50146.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0023 | | | [CVE-2024-53157](https://patchblox.com/security/data/cve/CVE-2024-53157.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0023 | | | [CVE-2024-53125](https://patchblox.com/security/data/cve/CVE-2024-53125.md) | Routine | kernel-64kb: bpf: sync_linked_regs() must preserve subreg_def (bsc#1234156). | 5.5 | 0.0023 | | | [CVE-2024-35956](https://patchblox.com/security/data/cve/CVE-2024-35956.md) | Routine | dtb-aarch64: Fixed qgroup prealloc rsv leak in subvolume operations (bsc#1224674) | 5.5 | 0.0023 | | | [CVE-2024-56562](https://patchblox.com/security/data/cve/CVE-2024-56562.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0023 | | | [CVE-2024-55916](https://patchblox.com/security/data/cve/CVE-2024-55916.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0023 | | | [CVE-2024-53210](https://patchblox.com/security/data/cve/CVE-2024-53210.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 6.1 | 0.0022 | | | [CVE-2024-53196](https://patchblox.com/security/data/cve/CVE-2024-53196.md) | Routine | dtb-aarch64: KVM: arm64: Do not retire aborted MMIO instruction (bsc#1234906). | 5.5 | 0.0022 | | | [CVE-2024-53233](https://patchblox.com/security/data/cve/CVE-2024-53233.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0022 | | | [CVE-2024-56610](https://patchblox.com/security/data/cve/CVE-2024-56610.md) | Routine | kernel-64kb: kcsan: Turn report_filterlist_lock into a raw_spinlock (bsc#1235390). | 5.5 | 0.0022 | | | [CVE-2024-57841](https://patchblox.com/security/data/cve/CVE-2024-57841.md) | Routine | kernel-default: CVE-2026-53260: net: fix memory leak in tcp_conn_request() (bsc#1235944 bsc#1269731). | 5.5 | 0.0022 | | | [CVE-2024-57931](https://patchblox.com/security/data/cve/CVE-2024-57931.md) | Routine | kernel-64kb: selinux: ignore unknown extended permissions (bsc#1236192). | 5.5 | 0.0022 | | | [CVE-2024-50248](https://patchblox.com/security/data/cve/CVE-2024-50248.md) | Routine | ntfs3: Add bounds checking to mi_enum_attr() | 5.5 | 0.0022 | | | [CVE-2024-56756](https://patchblox.com/security/data/cve/CVE-2024-56756.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0022 | | | [CVE-2024-56751](https://patchblox.com/security/data/cve/CVE-2024-56751.md) | Routine | kernel-docs: ipv6: release nexthop on device removal (bsc#1234936). | 6.4 | 0.0022 | | | [CVE-2024-56660](https://patchblox.com/security/data/cve/CVE-2024-56660.md) | Routine | kernel-64kb: net/mlx5: DR, prevent potential error pointer dereference (bsc#1235437). | 5.5 | 0.0022 | | | [CVE-2024-56665](https://patchblox.com/security/data/cve/CVE-2024-56665.md) | Routine | bpf,perf: Fix invalid prog_array access in perf_event_detach_bpf_prog | 5.5 | 0.0022 | | | [CVE-2024-56780](https://patchblox.com/security/data/cve/CVE-2024-56780.md) | Routine | kernel-coco_debug: Security update for the Linux Kernel | 5.5 | 0.0022 | | | [CVE-2024-57884](https://patchblox.com/security/data/cve/CVE-2024-57884.md) | Routine | kernel-64kb: mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (bsc#1235948). | 5.5 | 0.0022 | | | [CVE-2024-50258](https://patchblox.com/security/data/cve/CVE-2024-50258.md) | Routine | kernel-64kb: net: fix crash when config small gso_max_size/gso_ipv4_max_size (bsc#1233221). | 5.5 | 0.0022 | | | [CVE-2024-57890](https://patchblox.com/security/data/cve/CVE-2024-57890.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0022 | | | [CVE-2024-42252](https://patchblox.com/security/data/cve/CVE-2024-42252.md) | Routine | dtb-aarch64: closures: Change BUG_ON() to WARN_ON() (bsc#1229004). | 5.5 | 0.0021 | | | [CVE-2024-57938](https://patchblox.com/security/data/cve/CVE-2024-57938.md) | Routine | kernel-azure: net/sctp: Prevent autoclose integer overflow in sctp_association_init() (bsc#1236182). | 5.5 | 0.0021 | | | [CVE-2024-56745](https://patchblox.com/security/data/cve/CVE-2024-56745.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 6.1 | 0.0021 | | | [CVE-2024-55881](https://patchblox.com/security/data/cve/CVE-2024-55881.md) | Routine | kernel-64kb: KVM: x86: Play nice with protected guests in complete_hypercall_exit() (bsc#1235745). | 5.5 | 0.0021 | | | [CVE-2024-56625](https://patchblox.com/security/data/cve/CVE-2024-56625.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0021 | | | [CVE-2024-56716](https://patchblox.com/security/data/cve/CVE-2024-56716.md) | Routine | kernel-64kb: netdevsim: prevent bad user input in nsim_dev_health_break_write() (bsc#1235587). | 5.5 | 0.0021 | | | [CVE-2024-56763](https://patchblox.com/security/data/cve/CVE-2024-56763.md) | Routine | kernel-64kb: tracing: Prevent bad count for tracing_cpumask_write (bsc#1235638). | 5.5 | 0.0021 | | | [CVE-2024-56774](https://patchblox.com/security/data/cve/CVE-2024-56774.md) | Routine | kernel-64kb: btrfs: add a sanity check for btrfs root in btrfs_search_slot() (bsc#1235653). | 5.5 | 0.0021 | | | [CVE-2024-56755](https://patchblox.com/security/data/cve/CVE-2024-56755.md) | Routine | kernel-64kb: netfs/fscache: Add a memory barrier for FSCACHE_VOLUME_CREATING (bsc#1234920). | 5.5 | 0.0021 | | | [CVE-2024-57874](https://patchblox.com/security/data/cve/CVE-2024-57874.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 6.1 | 0.0021 | | | [CVE-2024-56783](https://patchblox.com/security/data/cve/CVE-2024-56783.md) | Routine | kernel-uek: ELSA-2025-20480: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0021 | | | [CVE-2024-57903](https://patchblox.com/security/data/cve/CVE-2024-57903.md) | Routine | kernel-64kb: net: restrict SO_REUSEPORT to inet sockets (bsc#1235967). | 5.5 | 0.0020 | | | [CVE-2024-56637](https://patchblox.com/security/data/cve/CVE-2024-56637.md) | Routine | kernel-64kb: netfilter: ipset: Hold module reference while requesting a module (bsc#1235523). | 4.7 | 0.0018 | | | [CVE-2024-43098](https://patchblox.com/security/data/cve/CVE-2024-43098.md) | Routine | kernel-uek: ELSA-2025-20480: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0017 | | | [CVE-2024-57946](https://patchblox.com/security/data/cve/CVE-2024-57946.md) | Routine | kernel-64kb: virtio-blk: do not keep queue frozen during system suspend (bsc#1236247). | 5.5 | 0.0017 | | | [CVE-2024-56568](https://patchblox.com/security/data/cve/CVE-2024-56568.md) | Routine | kernel-64kb: iommu/arm-smmu: Defer probe of clients after smmu device bound (bsc#1235032). | 5.5 | 0.0016 | | | [CVE-2024-56687](https://patchblox.com/security/data/cve/CVE-2024-56687.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0016 | | --- Data as of 2026-11-11T07:45:43Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.