# SUSE-SU-2024:2135-1: Security update for 3 packages

SUSE-SU-2024:2135-1, released June 21, 2024, fixes 411 CVEs across 3 products. None of them is reported as exploited. Patch Radar priority: Urgent.

- Web page: https://patchblox.com/security/fix/linux/suse-su-2024-2135-1
- Platform: Linux
- Released: Jun 21, 2024
- Priority: Urgent (Closes CVE-2024-26828, rated Critical)
- CVEs: 411, exploited: 0, on CISA KEV: 0
- Vendor advisory: https://osv.dev/vulnerability/SUSE-SU-2024:2135-1

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [kernel-azure](https://patchblox.com/security/data/product/linux/kernel-azure.md) | opensuse-leap 15.6 | 6.4.0-150600.8.5.4 |
| [kernel-azure](https://patchblox.com/security/data/product/linux/kernel-azure.md) | sles 15.6 | 6.4.0-150600.8.5.4 |
| [kernel-source-azure](https://patchblox.com/security/data/product/linux/kernel-source-azure.md) | opensuse-leap 15.6 | 6.4.0-150600.8.5.4 |
| [kernel-source-azure](https://patchblox.com/security/data/product/linux/kernel-source-azure.md) | sles 15.6 | 6.4.0-150600.8.5.4 |
| [kernel-syms-azure](https://patchblox.com/security/data/product/linux/kernel-syms-azure.md) | opensuse-leap 15.6 | 6.4.0-150600.8.5.1 |
| [kernel-syms-azure](https://patchblox.com/security/data/product/linux/kernel-syms-azure.md) | sles 15.6 | 6.4.0-150600.8.5.1 |

## CVEs this fix closes

| CVE | Priority | Title | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2024-26828](https://patchblox.com/security/data/cve/CVE-2024-26828.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved:  cifs: fix underflow in parse_server_interfaces()... | 9.4 | 0.0075 |  |
| [CVE-2024-35869](https://patchblox.com/security/data/cve/CVE-2024-35869.md) | Urgent | kernel-source: Guarantee refcounted children from parent session (bsc#1224679). | 9.8 | 0.0065 |  |
| [CVE-2024-35870](https://patchblox.com/security/data/cve/CVE-2024-35870.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved:  smb: client: fix UAF in smb2_reconnect_server()... | 9.8 | 0.0062 |  |
| [CVE-2024-35960](https://patchblox.com/security/data/cve/CVE-2024-35960.md) | High | dtb-aarch64: Security update for the Linux Kernel | 9.1 | 0.0141 |  |
| [CVE-2024-27405](https://patchblox.com/security/data/cve/CVE-2024-27405.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.5 | 0.0130 |  |
| [CVE-2024-35955](https://patchblox.com/security/data/cve/CVE-2024-35955.md) | High | dtb-aarch64: Security update for the Linux Kernel | 8.8 | 0.0118 |  |
| [CVE-2024-35845](https://patchblox.com/security/data/cve/CVE-2024-35845.md) | High | bpftool: Important: kernel security and bug fix update | 9.1 | 0.0117 |  |
| [CVE-2023-52434](https://patchblox.com/security/data/cve/CVE-2023-52434.md) | High | dtb-aarch64: Fixed potential OOBs in smb2_parse_contexts() (bsc#1220148). | 8.0 | 0.0102 |  |
| [CVE-2024-36896](https://patchblox.com/security/data/cve/CVE-2024-36896.md) | High | kernel-livepatch-SLE15-SP6-RT_Update_1: Security update for the Linux Kernel | 9.1 | 0.0092 |  |
| [CVE-2024-27398](https://patchblox.com/security/data/cve/CVE-2024-27398.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0083 |  |
| [CVE-2023-52696](https://patchblox.com/security/data/cve/CVE-2023-52696.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.5 | 0.0082 |  |
| [CVE-2024-27393](https://patchblox.com/security/data/cve/CVE-2024-27393.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  xen-netfront: Add missing skb_mark_for_recycle... | 7.5 | 0.0077 |  |
| [CVE-2024-26736](https://patchblox.com/security/data/cve/CVE-2024-26736.md) | High | kernel-azure: Security update for the Linux Kernel | 7.8 | 0.0073 |  |
| [CVE-2024-26854](https://patchblox.com/security/data/cve/CVE-2024-26854.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.5 | 0.0071 |  |
| [CVE-2024-26882](https://patchblox.com/security/data/cve/CVE-2024-26882.md) | High | dtb-aarch64: Fixed net/ip_tunnel to make sure to pull inner header in ip_tunnel_rcv() (bsc#1223034). | 7.8 | 0.0070 |  |
| [CVE-2023-52669](https://patchblox.com/security/data/cve/CVE-2023-52669.md) | High | kernel-default: Security update for the Linux Kernel | 7.8 | 0.0068 |  |
| [CVE-2024-35861](https://patchblox.com/security/data/cve/CVE-2024-35861.md) | High | dtb-aarch64: Fixed potential UAF in cifs_signal_cifsd_for_reconnect() (bsc#1224766). | 7.8 | 0.0066 |  |
| [CVE-2024-35862](https://patchblox.com/security/data/cve/CVE-2024-35862.md) | High | smb: client: fix potential UAF in smb2_is_network_name_deleted() | 7.8 | 0.0066 |  |
| [CVE-2024-35863](https://patchblox.com/security/data/cve/CVE-2024-35863.md) | High | kernel-zfcpdump: Fixed potential UAF in is_valid_oplock_break() (bsc#1224763). | 7.8 | 0.0066 |  |
| [CVE-2024-35864](https://patchblox.com/security/data/cve/CVE-2024-35864.md) | High | smb: client: fix potential UAF in smb2_is_valid_lease_break() | 7.8 | 0.0066 |  |
| [CVE-2024-26769](https://patchblox.com/security/data/cve/CVE-2024-26769.md) | High | kernel-azure: Security update for the Linux Kernel | 7.8 | 0.0064 |  |
| [CVE-2024-35865](https://patchblox.com/security/data/cve/CVE-2024-35865.md) | High | smb: client: fix potential UAF in smb2_is_valid_oplock_break() | 9.8 | 0.0063 |  |
| [CVE-2024-35835](https://patchblox.com/security/data/cve/CVE-2024-35835.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  net/mlx5e: fix a double-free in arfs_create_grou... | 7.8 | 0.0063 |  |
| [CVE-2024-26857](https://patchblox.com/security/data/cve/CVE-2024-26857.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  geneve: make sure to pull inner header in geneve... | 7.3 | 0.0061 |  |
| [CVE-2024-36013](https://patchblox.com/security/data/cve/CVE-2024-36013.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  Bluetooth: L2CAP: Fix slab-use-after-free in l2c... | 8.8 | 0.0048 |  |
| [CVE-2024-35999](https://patchblox.com/security/data/cve/CVE-2024-35999.md) | High | smb3: missing lock when picking channel | 7.5 | 0.0038 |  |
| [CVE-2024-35969](https://patchblox.com/security/data/cve/CVE-2024-35969.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  ipv6: fix race condition between ipv6_get_ifaddr... | 8.8 | 0.0038 |  |
| [CVE-2024-35789](https://patchblox.com/security/data/cve/CVE-2024-35789.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0036 |  |
| [CVE-2024-36032](https://patchblox.com/security/data/cve/CVE-2024-36032.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.1 | 0.0035 |  |
| [CVE-2024-36921](https://patchblox.com/security/data/cve/CVE-2024-36921.md) | High | wifi: iwlwifi: mvm: guard against invalid STA ID on removal | 7.8 | 0.0035 |  |
| [CVE-2024-35937](https://patchblox.com/security/data/cve/CVE-2024-35937.md) | High | wifi: cfg80211: check A-MSDU format more carefully | 7.1 | 0.0034 |  |
| [CVE-2024-35887](https://patchblox.com/security/data/cve/CVE-2024-35887.md) | High | ax25: fix use-after-free bugs caused by ax25_ds_del_timer | 7.8 | 0.0034 |  |
| [CVE-2024-27000](https://patchblox.com/security/data/cve/CVE-2024-27000.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0033 |  |
| [CVE-2024-26856](https://patchblox.com/security/data/cve/CVE-2024-26856.md) | High | dtb-aarch64: Fixed use-after-free inside sparx5_del_mact_entry (bsc#1223052). | 7.8 | 0.0032 |  |
| [CVE-2024-26898](https://patchblox.com/security/data/cve/CVE-2024-26898.md) | High | kernel-azure: Security update for the Linux Kernel | 7.8 | 0.0031 |  |
| [CVE-2024-27008](https://patchblox.com/security/data/cve/CVE-2024-27008.md) | High | kernel-source-azure: Security update for the Linux Kernel | 7.8 | 0.0030 |  |
| [CVE-2024-27401](https://patchblox.com/security/data/cve/CVE-2024-27401.md) | High | kernel-zfcpdump: Fixed user_length taken into account when fetching packet contents (bsc#1224181). | 7.1 | 0.0030 |  |
| [CVE-2024-26793](https://patchblox.com/security/data/cve/CVE-2024-26793.md) | High | dtb-aarch64: Fixed an use-after-free and null-ptr-deref in gtp_newlink() in gtp (bsc#1222428). | 7.8 | 0.0029 |  |
| [CVE-2024-27029](https://patchblox.com/security/data/cve/CVE-2024-27029.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.1 | 0.0028 |  |
| [CVE-2024-26779](https://patchblox.com/security/data/cve/CVE-2024-26779.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  wifi: mac80211: fix race condition on enabling f... | 8.8 | 0.0028 |  |
| [CVE-2024-27036](https://patchblox.com/security/data/cve/CVE-2024-27036.md) | High | dtb-aarch64: Fixed writeback data corruption (bsc#1223810). | 7.8 | 0.0028 |  |
| [CVE-2024-26982](https://patchblox.com/security/data/cve/CVE-2024-26982.md) | High | kernel-modules-extra: Important: kernel security and bug fix update | 7.1 | 0.0028 |  |
| [CVE-2024-26988](https://patchblox.com/security/data/cve/CVE-2024-26988.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0028 |  |
| [CVE-2023-52675](https://patchblox.com/security/data/cve/CVE-2023-52675.md) | High | kernel-obs-build: Security update for the Linux Kernel | 7.0 | 0.0028 |  |
| [CVE-2024-26739](https://patchblox.com/security/data/cve/CVE-2024-26739.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0028 |  |
| [CVE-2024-26928](https://patchblox.com/security/data/cve/CVE-2024-26928.md) | High | dtb-aarch64: Fix potential UAF in cifs_debug_files_proc_show() (bsc#1223532). | 7.8 | 0.0028 |  |
| [CVE-2023-52591](https://patchblox.com/security/data/cve/CVE-2023-52591.md) | High | kernel-azure: Fixed a possible reiserfs filesystem corruption via directory renaming (bsc#1221044). | 7.8 | 0.0028 |  |
| [CVE-2023-52664](https://patchblox.com/security/data/cve/CVE-2023-52664.md) | High | kernel-docs: Security update for the Linux Kernel | 7.8 | 0.0028 |  |
| [CVE-2024-26981](https://patchblox.com/security/data/cve/CVE-2024-26981.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0027 |  |
| [CVE-2024-27013](https://patchblox.com/security/data/cve/CVE-2024-27013.md) | High | kernel-syms: Fixed tun limit printing rate when illegal packet received by tun device (bsc#1223745). | 7.8 | 0.0027 |  |
| [CVE-2024-27022](https://patchblox.com/security/data/cve/CVE-2024-27022.md) | High | dtb-aarch64: Fixed linking file vma until vma is fully initialized (bsc#1223774). | 7.8 | 0.0027 |  |
| [CVE-2023-52667](https://patchblox.com/security/data/cve/CVE-2023-52667.md) | High | kernel-default: Security update for the Linux Kernel | 7.8 | 0.0027 |  |
| [CVE-2024-26704](https://patchblox.com/security/data/cve/CVE-2024-26704.md) | High | dtb-aarch64: Fixed a double-free of blocks due to wrong extents moved_len in ext4 (bsc#1222422). | 7.8 | 0.0027 |  |
| [CVE-2024-35867](https://patchblox.com/security/data/cve/CVE-2024-35867.md) | High | dtb-aarch64: Fixed potential UAF in cifs_stats_proc_show() (bsc#1224664). | 7.8 | 0.0027 |  |
| [CVE-2024-26925](https://patchblox.com/security/data/cve/CVE-2024-26925.md) | High | kernel-debug-core: Important: kernel security update | 7.0 | 0.0027 |  |
| [CVE-2024-26772](https://patchblox.com/security/data/cve/CVE-2024-26772.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  ext4: avoid allocating blocks from corrupted gro... | 7.8 | 0.0027 |  |
| [CVE-2024-36016](https://patchblox.com/security/data/cve/CVE-2024-36016.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  tty: n_gsm: fix possible out-of-bounds in gsm0_r... | 7.8 | 0.0027 |  |
| [CVE-2024-26674](https://patchblox.com/security/data/cve/CVE-2024-26674.md) | High | dtb-aarch64: Revert to _ASM_EXTABLE_UA() for {get,put}_user() fixups (bsc#1222378). | 7.1 | 0.0026 |  |
| [CVE-2024-35966](https://patchblox.com/security/data/cve/CVE-2024-35966.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.1 | 0.0026 |  |
| [CVE-2023-52503](https://patchblox.com/security/data/cve/CVE-2023-52503.md) | High | dtb-aarch64: Fixed tee/amdtee use-after-free vulnerability in amdtee_close_session (bsc#1220915). | 7.0 | 0.0026 |  |
| [CVE-2024-26654](https://patchblox.com/security/data/cve/CVE-2024-26654.md) | High | dtb-aarch64: Fixed use after free in ALSA/sh/aica (bsc#1222304). | 7.0 | 0.0026 |  |
| [CVE-2024-35849](https://patchblox.com/security/data/cve/CVE-2024-35849.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.1 | 0.0026 |  |
| [CVE-2024-35958](https://patchblox.com/security/data/cve/CVE-2024-35958.md) | High | kernel-zfcpdump: Security update for the Linux Kernel | 7.0 | 0.0026 |  |
| [CVE-2024-27410](https://patchblox.com/security/data/cve/CVE-2024-27410.md) | High | kernel-tools: Important: kernel security and bug fix update | 7.0 | 0.0026 |  |
| [CVE-2024-35852](https://patchblox.com/security/data/cve/CVE-2024-35852.md) | High | bpftool: Important: kernel security and bug fix update | 7.0 | 0.0026 |  |
| [CVE-2024-26956](https://patchblox.com/security/data/cve/CVE-2024-26956.md) | High | kernel-azure: Security update for the Linux Kernel | 7.8 | 0.0026 |  |
| [CVE-2024-35959](https://patchblox.com/security/data/cve/CVE-2024-35959.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.0 | 0.0026 |  |
| [CVE-2024-23848](https://patchblox.com/security/data/cve/CVE-2024-23848.md) | High | dtb-aarch64: Fixed media/cec for possible use-after-free in cec_queue_msg_fh (bsc#1219104). | 7.8 | 0.0025 |  |
| [CVE-2024-35877](https://patchblox.com/security/data/cve/CVE-2024-35877.md) | High | dtb-aarch64: Fixed VM_PAT handling in COW mappings (bsc#1224525). | 7.8 | 0.0025 |  |
| [CVE-2024-26675](https://patchblox.com/security/data/cve/CVE-2024-26675.md) | High | kernel-azure: Security update for the Linux Kernel | 7.0 | 0.0025 |  |
| [CVE-2024-26737](https://patchblox.com/security/data/cve/CVE-2024-26737.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  bpf: Fix racing between bpf_timer_cancel_and_fre... | 7.8 | 0.0025 |  |
| [CVE-2024-26883](https://patchblox.com/security/data/cve/CVE-2024-26883.md) | High | dtb-aarch64: Fixed bpf stackmap overflow check on 32-bit arches (bsc#1223035). | 7.8 | 0.0025 |  |
| [CVE-2024-26906](https://patchblox.com/security/data/cve/CVE-2024-26906.md) | High | python3-perf: kernel: x86/mm: Disallow vsyscall page read for copy_from_kernel_nofault() | 7.0 | 0.0025 |  |
| [CVE-2023-52683](https://patchblox.com/security/data/cve/CVE-2023-52683.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0025 |  |
| [CVE-2024-35964](https://patchblox.com/security/data/cve/CVE-2024-35964.md) | High | dtb-aarch64: Fixed not validating setsockopt user input (bsc#1224581). | 7.1 | 0.0025 |  |
| [CVE-2023-52686](https://patchblox.com/security/data/cve/CVE-2023-52686.md) | High | kernel-default-base: Security update for the Linux Kernel | 7.0 | 0.0025 |  |
| [CVE-2024-26884](https://patchblox.com/security/data/cve/CVE-2024-26884.md) | High | dtb-aarch64: Fixed bpf hashtab overflow check on 32-bit arches (bsc#1223189). | 7.8 | 0.0025 |  |
| [CVE-2024-26855](https://patchblox.com/security/data/cve/CVE-2024-26855.md) | High | dtb-aarch64: Fixed net/ice potential NULL pointer dereference in ice_bridge_setlink() (bsc#1223051). | 7.8 | 0.0025 |  |
| [CVE-2024-26885](https://patchblox.com/security/data/cve/CVE-2024-26885.md) | High | dtb-aarch64: Fixed bpf DEVMAP_HASH overflow check on 32-bit arches (bsc#1223190). | 7.8 | 0.0025 |  |
| [CVE-2024-36015](https://patchblox.com/security/data/cve/CVE-2024-36015.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0025 |  |
| [CVE-2024-36880](https://patchblox.com/security/data/cve/CVE-2024-36880.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0025 |  |
| [CVE-2023-52679](https://patchblox.com/security/data/cve/CVE-2023-52679.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0025 |  |
| [CVE-2023-52691](https://patchblox.com/security/data/cve/CVE-2023-52691.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0025 |  |
| [CVE-2024-35847](https://patchblox.com/security/data/cve/CVE-2024-35847.md) | High | bpftool: Important: kernel security update | 7.8 | 0.0025 |  |
| [CVE-2024-26791](https://patchblox.com/security/data/cve/CVE-2024-26791.md) | High | dtb-aarch64: Fixed properly validate device names in btrfs (bsc#1222793) | 7.1 | 0.0025 |  |
| [CVE-2024-26958](https://patchblox.com/security/data/cve/CVE-2024-26958.md) | High | kernel-debug-core: Important: kernel security update | 7.8 | 0.0025 |  |
| [CVE-2023-52640](https://patchblox.com/security/data/cve/CVE-2023-52640.md) | High | kernel-syms-azure: Fix oob in ntfs_listxattr The length of name cannot exceed the space occupied by ea (bsc#1222301). | 7.1 | 0.0025 |  |
| [CVE-2024-26742](https://patchblox.com/security/data/cve/CVE-2024-26742.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0025 |  |
| [CVE-2024-26950](https://patchblox.com/security/data/cve/CVE-2024-26950.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  wireguard: netlink: access device through ctx in... | 7.8 | 0.0024 |  |
| [CVE-2024-27395](https://patchblox.com/security/data/cve/CVE-2024-27395.md) | High | kernel-rt-debug-kvm: Important: kernel-rt security update | 7.8 | 0.0024 |  |
| [CVE-2024-27396](https://patchblox.com/security/data/cve/CVE-2024-27396.md) | High | dtb-aarch64: Fixed Use-After-Free in gtp_dellink (bsc#1224096). | 7.8 | 0.0024 |  |
| [CVE-2023-52772](https://patchblox.com/security/data/cve/CVE-2023-52772.md) | High | dtb-aarch64: Fixed use-after-free in unix_stream_read_actor() (bsc#1224989). | 7.8 | 0.0024 |  |
| [CVE-2024-36019](https://patchblox.com/security/data/cve/CVE-2024-36019.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.1 | 0.0024 |  |
| [CVE-2024-26961](https://patchblox.com/security/data/cve/CVE-2024-26961.md) | High | bpftool: Important: kernel security update | 7.8 | 0.0024 |  |
| [CVE-2024-35866](https://patchblox.com/security/data/cve/CVE-2024-35866.md) | High | kernel-docs: Fixed potential UAF in cifs_dump_full_key() (bsc#1224667). | 7.8 | 0.0024 |  |
| [CVE-2024-26957](https://patchblox.com/security/data/cve/CVE-2024-26957.md) | High | kernel-azure: Security update for the Linux Kernel | 7.8 | 0.0024 |  |
| [CVE-2024-35965](https://patchblox.com/security/data/cve/CVE-2024-35965.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.1 | 0.0024 |  |
| [CVE-2024-26989](https://patchblox.com/security/data/cve/CVE-2024-26989.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0024 |  |
| [CVE-2024-35963](https://patchblox.com/security/data/cve/CVE-2024-35963.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.1 | 0.0024 |  |
| [CVE-2024-35967](https://patchblox.com/security/data/cve/CVE-2024-35967.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.1 | 0.0024 |  |
| [CVE-2024-26995](https://patchblox.com/security/data/cve/CVE-2024-26995.md) | High | kernel-livepatch-SLE15-SP6-RT_Update_1: Security update for the Linux Kernel | 7.8 | 0.0024 |  |
| [CVE-2024-35791](https://patchblox.com/security/data/cve/CVE-2024-35791.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0024 |  |
| [CVE-2024-35868](https://patchblox.com/security/data/cve/CVE-2024-35868.md) | High | dtb-aarch64: Fixed potential UAF in cifs_stats_proc_write() (bsc#1224678). | 7.8 | 0.0024 |  |
| [CVE-2024-26673](https://patchblox.com/security/data/cve/CVE-2024-26673.md) | High | dtb-aarch64: Fixed netfilter/nft_ct layer 3 and 4 protocol sanitization (bsc#1222368). | 7.1 | 0.0024 |  |
| [CVE-2024-35814](https://patchblox.com/security/data/cve/CVE-2024-35814.md) | High | dtb-aarch64: Security update for the Linux Kernel | 8.8 | 0.0024 |  |
| [CVE-2024-26945](https://patchblox.com/security/data/cve/CVE-2024-26945.md) | High | dtb-aarch64: Fixed nr_cpus &lt; nr_iaa case (bsc#1223732). | 8.4 | 0.0024 |  |
| [CVE-2024-35921](https://patchblox.com/security/data/cve/CVE-2024-35921.md) | High | dtb-aarch64: Fixed oops when HEVC init fails (bsc#1224477). | 7.8 | 0.0024 |  |
| [CVE-2024-36898](https://patchblox.com/security/data/cve/CVE-2024-36898.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0024 |  |
| [CVE-2024-26656](https://patchblox.com/security/data/cve/CVE-2024-26656.md) | High | kernel-livepatch-SLE15-SP6-RT_Update_1: Security update for the Linux Kernel | 7.0 | 0.0024 |  |
| [CVE-2024-26996](https://patchblox.com/security/data/cve/CVE-2024-26996.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0024 |  |
| [CVE-2024-26951](https://patchblox.com/security/data/cve/CVE-2024-26951.md) | High | dtb-aarch64: Fixed wireguard/netlink check for dangling peer via is_dead instead of empty list (bsc#1223660). | 7.8 | 0.0023 |  |
| [CVE-2024-35944](https://patchblox.com/security/data/cve/CVE-2024-35944.md) | High | kernel-livepatch-SLE15-SP6-RT_Update_1: Fixed memcpy() run-time warning in dg_dispatch_as_host() (bsc#1224648). | 7.8 | 0.0023 |  |
| [CVE-2024-36895](https://patchblox.com/security/data/cve/CVE-2024-36895.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0023 |  |
| [CVE-2024-36906](https://patchblox.com/security/data/cve/CVE-2024-36906.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0023 |  |
| [CVE-2023-52483](https://patchblox.com/security/data/cve/CVE-2023-52483.md) | High | kernel-azure: Perform route lookups under a RCU read-side lock (bsc#1220738). | 7.8 | 0.0023 |  |
| [CVE-2024-26786](https://patchblox.com/security/data/cve/CVE-2024-26786.md) | High | kernel-default-base: Security update for the Linux Kernel | 7.8 | 0.0023 |  |
| [CVE-2024-36931](https://patchblox.com/security/data/cve/CVE-2024-36931.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.1 | 0.0023 |  |
| [CVE-2024-36007](https://patchblox.com/security/data/cve/CVE-2024-36007.md) | High | kernel-modules-extra: Important: kernel security and bug fix update | 7.0 | 0.0023 |  |
| [CVE-2024-26983](https://patchblox.com/security/data/cve/CVE-2024-26983.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0023 |  |
| [CVE-2024-35838](https://patchblox.com/security/data/cve/CVE-2024-35838.md) | High | bpftool: Important: kernel security and bug fix update | 7.0 | 0.0023 |  |
| [CVE-2024-26836](https://patchblox.com/security/data/cve/CVE-2024-26836.md) | High | kernel-livepatch-SLE15-SP6-RT_Update_1: Fixed platform/x86/think-lmi password opcode ordering for workstations (bsc#1222968). | 7.8 | 0.0023 |  |
| [CVE-2024-36928](https://patchblox.com/security/data/cve/CVE-2024-36928.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  s390/qeth: Fix kernel panic after setting hsuid... | 7.8 | 0.0023 |  |
| [CVE-2024-35905](https://patchblox.com/security/data/cve/CVE-2024-35905.md) | High | kernel-livepatch-SLE15-SP6-RT_Update_1: Security update for the Linux Kernel | 7.8 | 0.0023 |  |
| [CVE-2023-6531](https://patchblox.com/security/data/cve/CVE-2023-6531.md) | High | kernel-azure: Security update for the Linux Kernel | 7.0 | 0.0022 |  |
| [CVE-2024-26638](https://patchblox.com/security/data/cve/CVE-2024-26638.md) | High | dtb-aarch64: Fixed uninitialize struct msghdr completely (bsc#1221649 . | 7.8 | 0.0022 |  |
| [CVE-2024-35911](https://patchblox.com/security/data/cve/CVE-2024-35911.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0022 |  |
| [CVE-2024-35986](https://patchblox.com/security/data/cve/CVE-2024-35986.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  phy: ti: tusb1210: Resolve charger-det crash if... | 7.0 | 0.0022 |  |
| [CVE-2024-26846](https://patchblox.com/security/data/cve/CVE-2024-26846.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0022 |  |
| [CVE-2024-26932](https://patchblox.com/security/data/cve/CVE-2024-26932.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0022 |  |
| [CVE-2024-35932](https://patchblox.com/security/data/cve/CVE-2024-35932.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0021 |  |
| [CVE-2024-35989](https://patchblox.com/security/data/cve/CVE-2024-35989.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0021 |  |
| [CVE-2024-36012](https://patchblox.com/security/data/cve/CVE-2024-36012.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0021 |  |
| [CVE-2023-52697](https://patchblox.com/security/data/cve/CVE-2023-52697.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.1 | 0.0021 |  |
| [CVE-2024-26923](https://patchblox.com/security/data/cve/CVE-2024-26923.md) | High | dtb-aarch64: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223384). | 7.8 | 0.0021 |  |
| [CVE-2024-26984](https://patchblox.com/security/data/cve/CVE-2024-26984.md) | High | kernel-obs-build: Security update for the Linux Kernel | 7.5 | 0.0020 |  |
| [CVE-2024-36894](https://patchblox.com/security/data/cve/CVE-2024-36894.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  usb: gadget: f_fs: Fix race between aio_cancel()... | 7.8 | 0.0020 |  |
| [CVE-2024-21823](https://patchblox.com/security/data/cve/CVE-2024-21823.md) | High | kernel-64kb: Fixed safety flag to struct ends (bsc#1223625). | 7.5 | 0.0020 |  |
| [CVE-2024-35809](https://patchblox.com/security/data/cve/CVE-2024-35809.md) | High | kernel-source-azure: Security update for the Linux Kernel | 7.8 | 0.0020 |  |
| [CVE-2024-26934](https://patchblox.com/security/data/cve/CVE-2024-26934.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0019 |  |
| [CVE-2024-26671](https://patchblox.com/security/data/cve/CVE-2024-26671.md) | High | dtb-aarch64: Fixed blk-mq IO hang from sbitmap wakeup race (bsc#1222357). | 8.0 | 0.0019 |  |
| [CVE-2024-26614](https://patchblox.com/security/data/cve/CVE-2024-26614.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  tcp: make sure init the accept_queue's spinlocks... | 7.8 | 0.0018 |  |
| [CVE-2024-27062](https://patchblox.com/security/data/cve/CVE-2024-27062.md) | High | nouveau: lock the client object tree. | 7.8 | 0.0018 |  |
| [CVE-2024-26960](https://patchblox.com/security/data/cve/CVE-2024-26960.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  mm: swap: fix race between free_swap_and_cache()... | 7.0 | 0.0018 |  |
| [CVE-2024-26933](https://patchblox.com/security/data/cve/CVE-2024-26933.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0018 |  |
| [CVE-2024-26972](https://patchblox.com/security/data/cve/CVE-2024-26972.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  ubifs: ubifs_symlink: Fix memleak of inode->i_li... | n/a | n/a |  |
| [CVE-2024-27028](https://patchblox.com/security/data/cve/CVE-2024-27028.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 6.5 | 0.0118 |  |
| [CVE-2024-27388](https://patchblox.com/security/data/cve/CVE-2024-27388.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0096 |  |
| [CVE-2024-35823](https://patchblox.com/security/data/cve/CVE-2024-35823.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0092 |  |
| [CVE-2023-52654](https://patchblox.com/security/data/cve/CVE-2023-52654.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 4.7 | 0.0089 |  |
| [CVE-2024-26901](https://patchblox.com/security/data/cve/CVE-2024-26901.md) | Routine | kernel-debug-core: kernel: RDMA/srpt: Do not register event handler until srpt device is fully setup (CVE-2024-26872) * kernel: usb: ulp... | 5.5 | 0.0083 |  |
| [CVE-2024-26731](https://patchblox.com/security/data/cve/CVE-2024-26731.md) | Routine | kernel-64kb: Fixed NULL pointer dereference in sk_psock_verdict_data_ready() (bsc#1222371). | 5.3 | 0.0083 |  |
| [CVE-2024-35878](https://patchblox.com/security/data/cve/CVE-2024-35878.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0079 |  |
| [CVE-2023-52618](https://patchblox.com/security/data/cve/CVE-2023-52618.md) | Routine | dtb-aarch64: Fixed string overflow in block/rnbd-srv (bsc#1221615). | 5.3 | 0.0074 |  |
| [CVE-2024-26881](https://patchblox.com/security/data/cve/CVE-2024-26881.md) | Routine | dtb-aarch64: Fixed net/hns3 kernel crash when 1588 is received on HIP08 devices (bsc#1223041). | 5.5 | 0.0069 |  |
| [CVE-2024-35971](https://patchblox.com/security/data/cve/CVE-2024-35971.md) | Routine | net: ks8851: Handle softirqs at the end of IRQ thread to fix hang | 5.5 | 0.0069 |  |
| [CVE-2024-26760](https://patchblox.com/security/data/cve/CVE-2024-26760.md) | Routine | dtb-aarch64: Fixed bio_put() for error case (bsc#1222596 cve-2024-267600). | 5.5 | 0.0065 |  |
| [CVE-2024-26611](https://patchblox.com/security/data/cve/CVE-2024-26611.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0065 |  |
| [CVE-2024-35916](https://patchblox.com/security/data/cve/CVE-2024-35916.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.3 | 0.0064 |  |
| [CVE-2024-26853](https://patchblox.com/security/data/cve/CVE-2024-26853.md) | Routine | igc: avoid returning frame twice in XDP_REDIRECT | 5.5 | 0.0063 |  |
| [CVE-2024-27436](https://patchblox.com/security/data/cve/CVE-2024-27436.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0062 |  |
| [CVE-2024-26868](https://patchblox.com/security/data/cve/CVE-2024-26868.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0061 |  |
| [CVE-2024-35891](https://patchblox.com/security/data/cve/CVE-2024-35891.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0061 |  |
| [CVE-2024-22099](https://patchblox.com/security/data/cve/CVE-2024-22099.md) | Routine | dtb-aarch64: Fixed a null-pointer-dereference in rfcomm_check_security (bsc#1219170). | 5.7 | 0.0061 |  |
| [CVE-2023-52687](https://patchblox.com/security/data/cve/CVE-2023-52687.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0060 |  |
| [CVE-2024-35821](https://patchblox.com/security/data/cve/CVE-2024-35821.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0058 |  |
| [CVE-2024-26692](https://patchblox.com/security/data/cve/CVE-2024-26692.md) | Routine | dtb-aarch64: Fixed regression in writes when non-standard maximum write size negotiated (bsc#1222464). | 5.5 | 0.0053 |  |
| [CVE-2024-35901](https://patchblox.com/security/data/cve/CVE-2024-35901.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0047 |  |
| [CVE-2024-35834](https://patchblox.com/security/data/cve/CVE-2024-35834.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0041 |  |
| [CVE-2024-26921](https://patchblox.com/security/data/cve/CVE-2024-26921.md) | Routine | kernel-headers: (CVE-2021-47579) * (CVE-2024-36927) * (CVE-2024-39276) * (CVE-2024-33621) * (CVE-2024-27010) * (CVE-2024-26960) * (CV... | 5.5 | 0.0040 |  |
| [CVE-2024-27435](https://patchblox.com/security/data/cve/CVE-2024-27435.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0040 |  |
| [CVE-2024-35889](https://patchblox.com/security/data/cve/CVE-2024-35889.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0038 |  |
| [CVE-2023-47233](https://patchblox.com/security/data/cve/CVE-2023-47233.md) | Routine | kernel-azure: Security update for the Linux Kernel | 4.3 | 0.0037 |  |
| [CVE-2024-27416](https://patchblox.com/security/data/cve/CVE-2024-27416.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0036 |  |
| [CVE-2024-35811](https://patchblox.com/security/data/cve/CVE-2024-35811.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0035 |  |
| [CVE-2024-35915](https://patchblox.com/security/data/cve/CVE-2024-35915.md) | Routine | kernel-docs: Security update for the Linux Kernel | 5.5 | 0.0032 |  |
| [CVE-2024-26922](https://patchblox.com/security/data/cve/CVE-2024-26922.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0032 |  |
| [CVE-2024-26773](https://patchblox.com/security/data/cve/CVE-2024-26773.md) | Routine | kernel-syms: Fixed ext4 block allocation from corrupted group in ext4_mb_try_best_found() (bsc#1222618). | 5.5 | 0.0031 |  |
| [CVE-2024-35914](https://patchblox.com/security/data/cve/CVE-2024-35914.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0031 |  |
| [CVE-2024-26816](https://patchblox.com/security/data/cve/CVE-2024-26816.md) | Routine | dtb-aarch64: Fixed relocations in .notes section when building with CONFIG_XEN_PV=y (bsc#1222624). | 5.5 | 0.0031 |  |
| [CVE-2024-27399](https://patchblox.com/security/data/cve/CVE-2024-27399.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0030 |  |
| [CVE-2024-26652](https://patchblox.com/security/data/cve/CVE-2024-26652.md) | Routine | kernel-azure: Security update for the Linux Kernel | 6.7 | 0.0030 |  |
| [CVE-2024-27046](https://patchblox.com/security/data/cve/CVE-2024-27046.md) | Routine | dtb-aarch64: Fixed nfp/flower handling acti_netdevs allocation failure (bsc#1223827). | 5.5 | 0.0030 |  |
| [CVE-2024-26994](https://patchblox.com/security/data/cve/CVE-2024-26994.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0030 |  |
| [CVE-2024-27434](https://patchblox.com/security/data/cve/CVE-2024-27434.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0030 |  |
| [CVE-2024-26601](https://patchblox.com/security/data/cve/CVE-2024-26601.md) | Routine | kernel-syms: Fixed ext4 buddy bitmap corruption via fast commit replay (bsc#1220342). | 5.5 | 0.0029 |  |
| [CVE-2023-6238](https://patchblox.com/security/data/cve/CVE-2023-6238.md) | Routine | kernel-64kb: Fixed kcalloc() arguments order (bsc#1217384). | n/a | 0.0029 |  |
| [CVE-2023-0160](https://patchblox.com/security/data/cve/CVE-2023-0160.md) | Routine | kernel-syms: Fixed deadlock flaw in BPF that could allow a local user to potentially crash the system (bsc#1209657). | 5.5 | 0.0029 |  |
| [CVE-2024-26900](https://patchblox.com/security/data/cve/CVE-2024-26900.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 6.0 | 0.0029 |  |
| [CVE-2023-52670](https://patchblox.com/security/data/cve/CVE-2023-52670.md) | Routine | rpmsg: virtio: Free driver_override when rpmsg_remove() | 6.6 | 0.0029 |  |
| [CVE-2024-26815](https://patchblox.com/security/data/cve/CVE-2024-26815.md) | Routine | dtb-aarch64: Fixed improper TCA_TAPRIO_TC_ENTRY_INDEX check (bsc#1222635). | 5.5 | 0.0029 |  |
| [CVE-2023-7042](https://patchblox.com/security/data/cve/CVE-2023-7042.md) | Routine | linux: A null pointer dereference vulnerability was found in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev() in drivers/net/wirele... | 5.5 | 0.0028 |  |
| [CVE-2024-26870](https://patchblox.com/security/data/cve/CVE-2024-26870.md) | Routine | kernel-rt: kernel: NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102 | 5.5 | 0.0028 |  |
| [CVE-2024-27001](https://patchblox.com/security/data/cve/CVE-2024-27001.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0028 |  |
| [CVE-2024-35978](https://patchblox.com/security/data/cve/CVE-2024-35978.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0028 |  |
| [CVE-2024-26903](https://patchblox.com/security/data/cve/CVE-2024-26903.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0028 |  |
| [CVE-2023-52653](https://patchblox.com/security/data/cve/CVE-2023-52653.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0028 |  |
| [CVE-2023-52655](https://patchblox.com/security/data/cve/CVE-2023-52655.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0027 |  |
| [CVE-2023-52652](https://patchblox.com/security/data/cve/CVE-2023-52652.md) | Routine | dtb-aarch64: Fixed NTB for possible name leak in ntb_register_device() (bsc#1223686). | 5.5 | 0.0027 |  |
| [CVE-2023-52492](https://patchblox.com/security/data/cve/CVE-2023-52492.md) | Routine | kernel-azure: Security update for the Linux Kernel | 4.4 | 0.0027 |  |
| [CVE-2023-52882](https://patchblox.com/security/data/cve/CVE-2023-52882.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0027 |  |
| [CVE-2024-26937](https://patchblox.com/security/data/cve/CVE-2024-26937.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0027 |  |
| [CVE-2024-26642](https://patchblox.com/security/data/cve/CVE-2024-26642.md) | Routine | dtb-aarch64: Fixed the set of anonymous timeout flag in netfilter nf_tables (bsc#1221830). | 5.5 | 0.0027 |  |
| [CVE-2024-26993](https://patchblox.com/security/data/cve/CVE-2024-26993.md) | Routine | kernel-rt: kernel: fs: sysfs: Fix reference leak in sysfs_break_active_protection() | 5.5 | 0.0027 |  |
| [CVE-2024-35947](https://patchblox.com/security/data/cve/CVE-2024-35947.md) | Routine | kernel-rt-debug-modules-extra: kernel: dyndbg: fix old BUG_ON in &gt;control parser | 5.5 | 0.0027 |  |
| [CVE-2024-27027](https://patchblox.com/security/data/cve/CVE-2024-27027.md) | Routine | kernel-livepatch-SLE15-SP6_Update_1: Security update for the Linux Kernel | 5.5 | 0.0026 |  |
| [CVE-2024-26697](https://patchblox.com/security/data/cve/CVE-2024-26697.md) | Routine | kernel-azure: Security update for the Linux Kernel | 5.5 | 0.0026 |  |
| [CVE-2023-52658](https://patchblox.com/security/data/cve/CVE-2023-52658.md) | Routine | perf: kernel: Revert &#34;net/mlx5: Block entering switchdev mode with ns inconsistency&#34 | 5.5 | 0.0026 |  |
| [CVE-2024-35982](https://patchblox.com/security/data/cve/CVE-2024-35982.md) | Routine | kernel-default: Security update for the Linux Kernel | 5.5 | 0.0026 |  |
| [CVE-2024-35950](https://patchblox.com/security/data/cve/CVE-2024-35950.md) | Routine | kernel-syms-azure: Security update for the Linux Kernel | 5.5 | 0.0026 |  |
| [CVE-2024-35984](https://patchblox.com/security/data/cve/CVE-2024-35984.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0026 |  |
| [CVE-2024-36020](https://patchblox.com/security/data/cve/CVE-2024-36020.md) | Routine | kernel-rt: RHSA-2024:5102: kernel-rt security update (Important) | 5.5 | 0.0026 |  |
| [CVE-2024-26726](https://patchblox.com/security/data/cve/CVE-2024-26726.md) | Routine | kernel-source-azure: Do not drop extent_map for free space inode on write error (bsc#1222532) | 5.5 | 0.0026 |  |
| [CVE-2024-26733](https://patchblox.com/security/data/cve/CVE-2024-26733.md) | Routine | kernel-syms: Fixed an overflow in arp_req_get() in arp (bsc#1222585). | 5.5 | 0.0026 |  |
| [CVE-2024-26973](https://patchblox.com/security/data/cve/CVE-2024-26973.md) | Routine | kernel-zfcpdump-core: kernel: fat: fix uninitialized field in nostale filehandles | 5.5 | 0.0026 |  |
| [CVE-2024-35875](https://patchblox.com/security/data/cve/CVE-2024-35875.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0025 |  |
| [CVE-2024-35973](https://patchblox.com/security/data/cve/CVE-2024-35973.md) | Routine | kernel-obs-build: Security update for the Linux Kernel | 5.5 | 0.0025 |  |
| [CVE-2024-27056](https://patchblox.com/security/data/cve/CVE-2024-27056.md) | Routine | bpftool: Moderate: kernel update | 5.5 | 0.0025 |  |
| [CVE-2024-36025](https://patchblox.com/security/data/cve/CVE-2024-36025.md) | Routine | bpftool: Important: kernel security update | 5.5 | 0.0025 |  |
| [CVE-2024-26685](https://patchblox.com/security/data/cve/CVE-2024-26685.md) | Routine | dtb-aarch64: Fixed nilfs2 potential bug in end_buffer_async_write (bsc#1222437). | 5.5 | 0.0025 |  |
| [CVE-2024-26909](https://patchblox.com/security/data/cve/CVE-2024-26909.md) | Routine | dtb-aarch64: Fixed drm bridge use-after-free (bsc#1223143). | 5.5 | 0.0025 |  |
| [CVE-2023-52693](https://patchblox.com/security/data/cve/CVE-2023-52693.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0025 |  |
| [CVE-2024-26997](https://patchblox.com/security/data/cve/CVE-2024-26997.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0025 |  |
| [CVE-2024-35815](https://patchblox.com/security/data/cve/CVE-2024-35815.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0025 |  |
| [CVE-2024-25739](https://patchblox.com/security/data/cve/CVE-2024-25739.md) | Routine | dtb-aarch64: Fixed possible crash in create_empty_lvol() in drivers/mtd/ubi/vtbl.c (bsc#1219834). | 5.5 | 0.0025 |  |
| [CVE-2024-35813](https://patchblox.com/security/data/cve/CVE-2024-35813.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0025 |  |
| [CVE-2024-36014](https://patchblox.com/security/data/cve/CVE-2024-36014.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0025 |  |
| [CVE-2024-26764](https://patchblox.com/security/data/cve/CVE-2024-26764.md) | Routine | dtb-aarch64: Fixed IOCB_AIO_RW check in fs/aio before the struct aio_kiocb conversion (bsc#1222721). | 3.3 | 0.0025 |  |
| [CVE-2024-35951](https://patchblox.com/security/data/cve/CVE-2024-35951.md) | Routine | drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr() | 5.5 | 0.0025 |  |
| [CVE-2024-27412](https://patchblox.com/security/data/cve/CVE-2024-27412.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0025 |  |
| [CVE-2024-27413](https://patchblox.com/security/data/cve/CVE-2024-27413.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0025 |  |
| [CVE-2023-52463](https://patchblox.com/security/data/cve/CVE-2023-52463.md) | Routine | kernel-azure: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2024-26783](https://patchblox.com/security/data/cve/CVE-2024-26783.md) | Routine | dtb-aarch64: Fixed mm/vmscan bug when calling wakeup_kswapd() with a wrong zone index (bsc#1222615). | 5.5 | 0.0024 |  |
| [CVE-2024-27400](https://patchblox.com/security/data/cve/CVE-2024-27400.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2023-52616](https://patchblox.com/security/data/cve/CVE-2023-52616.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2024-26805](https://patchblox.com/security/data/cve/CVE-2024-26805.md) | Routine | dtb-aarch64: Fixed a kernel-infoleak-after-free in __skb_datagram_iter in netlink (bsc#1222630). | 5.5 | 0.0024 |  |
| [CVE-2024-26935](https://patchblox.com/security/data/cve/CVE-2024-26935.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2024-35830](https://patchblox.com/security/data/cve/CVE-2024-35830.md) | Routine | kernel-syms: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2024-26946](https://patchblox.com/security/data/cve/CVE-2024-26946.md) | Routine | dtb-aarch64: Fixed copy_from_kernel_nofault() to read from unsafe address (bsc#1223669). | 5.5 | 0.0024 |  |
| [CVE-2024-26949](https://patchblox.com/security/data/cve/CVE-2024-26949.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2024-35954](https://patchblox.com/security/data/cve/CVE-2024-35954.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2024-26990](https://patchblox.com/security/data/cve/CVE-2024-26990.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2024-35817](https://patchblox.com/security/data/cve/CVE-2024-35817.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2023-52641](https://patchblox.com/security/data/cve/CVE-2023-52641.md) | Routine | dtb-aarch64: Fixed NULL ptr dereference checking at the end of attr_allocate_frame() (bsc#1222303) | 5.5 | 0.0024 |  |
| [CVE-2023-52860](https://patchblox.com/security/data/cve/CVE-2023-52860.md) | Routine | dtb-aarch64: Fixed null pointer dereference in hisi_hns3 (bsc#1224936). | 5.5 | 0.0024 |  |
| [CVE-2024-27417](https://patchblox.com/security/data/cve/CVE-2024-27417.md) | Routine | dtb-aarch64: Fixed potential 'struct net' leak in inet6_rtm_getaddr() (bsc#1224721) | 5.5 | 0.0024 |  |
| [CVE-2024-35943](https://patchblox.com/security/data/cve/CVE-2024-35943.md) | Routine | dtb-aarch64: Fixed a null pointer dereference in omap_prm_domain_init (bsc#1224649). | 5.5 | 0.0024 |  |
| [CVE-2024-36029](https://patchblox.com/security/data/cve/CVE-2024-36029.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2024-26632](https://patchblox.com/security/data/cve/CVE-2024-26632.md) | Routine | dtb-aarch64: Fixed iterating over an empty bio with bio_for_each_folio_all (bsc#1221635). | 5.5 | 0.0024 |  |
| [CVE-2024-26774](https://patchblox.com/security/data/cve/CVE-2024-26774.md) | Routine | dtb-aarch64: Fixed dividing by 0 in mb_update_avg_fragment_size() when block bitmap corrupt (bsc#1222622). | 5.5 | 0.0024 |  |
| [CVE-2024-26802](https://patchblox.com/security/data/cve/CVE-2024-26802.md) | Routine | kernel-rt-debug-modules-extra: kernel: stmmac: Clear variable when destroying workqueue | 5.5 | 0.0024 |  |
| [CVE-2023-52676](https://patchblox.com/security/data/cve/CVE-2023-52676.md) | Routine | bpf: Guard stack limits against 32bit overflow | 5.5 | 0.0024 |  |
| [CVE-2024-27389](https://patchblox.com/security/data/cve/CVE-2024-27389.md) | Routine | kernel-uek64k: pstore: inode: Only d_invalidate() is needed (Kees Cook) [Orabug: 36598300] | 5.5 | 0.0024 |  |
| [CVE-2024-35879](https://patchblox.com/security/data/cve/CVE-2024-35879.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2024-36890](https://patchblox.com/security/data/cve/CVE-2024-36890.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2023-52662](https://patchblox.com/security/data/cve/CVE-2023-52662.md) | Routine | kernel-azure: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2024-26807](https://patchblox.com/security/data/cve/CVE-2024-26807.md) | Routine | dtb-aarch64: Fixed spi/cadence-qspi NULL pointer reference in runtime PM hooks (bsc#1222801). | 5.5 | 0.0024 |  |
| [CVE-2024-35804](https://patchblox.com/security/data/cve/CVE-2024-35804.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2024-35810](https://patchblox.com/security/data/cve/CVE-2024-35810.md) | Routine | kernel-modules-extra: Important: kernel security update | 5.5 | 0.0024 |  |
| [CVE-2024-35860](https://patchblox.com/security/data/cve/CVE-2024-35860.md) | Routine | dtb-aarch64: struct bpf_link and bpf_link_ops kABI workaround (bsc#1224531). | 5.5 | 0.0024 |  |
| [CVE-2024-35872](https://patchblox.com/security/data/cve/CVE-2024-35872.md) | Routine | kernel-debug: Fixed GUP-fast succeeding on secretmem folios (bsc#1224530). | 5.5 | 0.0024 |  |
| [CVE-2024-36918](https://patchblox.com/security/data/cve/CVE-2024-36918.md) | Routine | kernel-default: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2023-52674](https://patchblox.com/security/data/cve/CVE-2023-52674.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  ALSA: scarlett2: Add clamp() in scarlett2_mixer_... | 5.5 | 0.0024 |  |
| [CVE-2024-35801](https://patchblox.com/security/data/cve/CVE-2024-35801.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2024-36009](https://patchblox.com/security/data/cve/CVE-2024-36009.md) | Routine | ax25: Fix netdev refcount issue | 5.5 | 0.0024 |  |
| [CVE-2024-26822](https://patchblox.com/security/data/cve/CVE-2024-26822.md) | Routine | dtb-aarch64: Set correct id, uid and cruid for multiuser automounts (bsc#1223011). | 5.5 | 0.0023 |  |
| [CVE-2024-35819](https://patchblox.com/security/data/cve/CVE-2024-35819.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2024-35850](https://patchblox.com/security/data/cve/CVE-2024-35850.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2024-35851](https://patchblox.com/security/data/cve/CVE-2024-35851.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2023-52678](https://patchblox.com/security/data/cve/CVE-2023-52678.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2024-36018](https://patchblox.com/security/data/cve/CVE-2024-36018.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2024-26992](https://patchblox.com/security/data/cve/CVE-2024-26992.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2024-27431](https://patchblox.com/security/data/cve/CVE-2024-27431.md) | Routine | dtb-aarch64: Fixed Zero-initialise xdp_rxq_info struct before running XDP program (bsc#1224718). | 5.5 | 0.0023 |  |
| [CVE-2024-35822](https://patchblox.com/security/data/cve/CVE-2024-35822.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2024-35825](https://patchblox.com/security/data/cve/CVE-2024-35825.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2024-35936](https://patchblox.com/security/data/cve/CVE-2024-35936.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2023-52458](https://patchblox.com/security/data/cve/CVE-2023-52458.md) | Routine | dtb-aarch64: Fixed check that partition length needs to be aligned with block size (bsc#1220428). | 5.5 | 0.0023 |  |
| [CVE-2024-26986](https://patchblox.com/security/data/cve/CVE-2024-26986.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2024-35885](https://patchblox.com/security/data/cve/CVE-2024-35885.md) | Routine | kernel-docs: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2024-26964](https://patchblox.com/security/data/cve/CVE-2024-26964.md) | Routine | bpftool: kernel: usb: xhci: Add error handling in xhci_map_urb_for_dma | 5.5 | 0.0023 |  |
| [CVE-2023-52635](https://patchblox.com/security/data/cve/CVE-2023-52635.md) | Routine | dtb-aarch64: Fixed PM/devfreq to synchronize devfreq_monitor_[start/stop] (bsc#1222294). | 5.5 | 0.0023 |  |
| [CVE-2024-26991](https://patchblox.com/security/data/cve/CVE-2024-26991.md) | Routine | dtb-aarch64: Fixed overflow lpage_info when checking attributes (bsc#1223695). | 5.5 | 0.0023 |  |
| [CVE-2024-35799](https://patchblox.com/security/data/cve/CVE-2024-35799.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2024-35904](https://patchblox.com/security/data/cve/CVE-2024-35904.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2024-35907](https://patchblox.com/security/data/cve/CVE-2024-35907.md) | Routine | kernel-zfcpdump: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2024-35956](https://patchblox.com/security/data/cve/CVE-2024-35956.md) | Routine | dtb-aarch64: Fixed qgroup prealloc rsv leak in subvolume operations (bsc#1224674) | 5.5 | 0.0023 |  |
| [CVE-2024-27030](https://patchblox.com/security/data/cve/CVE-2024-27030.md) | Routine | dtb-aarch64: Fixed octeontx2-af to use separate handlers for interrupts (bsc#1223790). | 6.3 | 0.0023 |  |
| [CVE-2023-52690](https://patchblox.com/security/data/cve/CVE-2023-52690.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2023-52694](https://patchblox.com/security/data/cve/CVE-2023-52694.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2024-26657](https://patchblox.com/security/data/cve/CVE-2024-26657.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2024-35790](https://patchblox.com/security/data/cve/CVE-2024-35790.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2024-35796](https://patchblox.com/security/data/cve/CVE-2024-35796.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2023-52680](https://patchblox.com/security/data/cve/CVE-2023-52680.md) | Routine | kernel-64kb: Fixed missing error checks to *_ctl_get() (bsc#1224608). | 5.5 | 0.0023 |  |
| [CVE-2024-26714](https://patchblox.com/security/data/cve/CVE-2024-26714.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2024-26858](https://patchblox.com/security/data/cve/CVE-2024-26858.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2024-26940](https://patchblox.com/security/data/cve/CVE-2024-26940.md) | Routine | kernel-rt-kvm: Important: kernel-rt security update | 5.5 | 0.0023 |  |
| [CVE-2024-26948](https://patchblox.com/security/data/cve/CVE-2024-26948.md) | Routine | dtb-aarch64: Fixed drm/amd/display by adding dc_state NULL check in dc_state_release (bsc#1223664). | 5.5 | 0.0023 |  |
| [CVE-2024-35800](https://patchblox.com/security/data/cve/CVE-2024-35800.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2024-35883](https://patchblox.com/security/data/cve/CVE-2024-35883.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2024-35961](https://patchblox.com/security/data/cve/CVE-2024-35961.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2024-35972](https://patchblox.com/security/data/cve/CVE-2024-35972.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2024-35974](https://patchblox.com/security/data/cve/CVE-2024-35974.md) | Routine | kernel-default-base: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2024-35981](https://patchblox.com/security/data/cve/CVE-2024-35981.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2024-36891](https://patchblox.com/security/data/cve/CVE-2024-36891.md) | Routine | kernel-azure: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2024-36893](https://patchblox.com/security/data/cve/CVE-2024-36893.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2024-36897](https://patchblox.com/security/data/cve/CVE-2024-36897.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2024-36030](https://patchblox.com/security/data/cve/CVE-2024-36030.md) | Routine | kernel-obs-build: Fixed the double free in rvu_npc_freemem() (bsc#1225712) | 4.4 | 0.0023 |  |
| [CVE-2024-36006](https://patchblox.com/security/data/cve/CVE-2024-36006.md) | Routine | kernel-rt-debug-modules-extra: kernel: mlxsw: spectrum_acl_tcam: Fix incorrect list API usage | 5.5 | 0.0023 |  |
| [CVE-2023-52631](https://patchblox.com/security/data/cve/CVE-2023-52631.md) | Routine | kernel-default: Fixed an NULL dereference bug (bsc#1222264 . | 5.5 | 0.0023 |  |
| [CVE-2023-52661](https://patchblox.com/security/data/cve/CVE-2023-52661.md) | Routine | kernel-livepatch-SLE15-SP6_Update_1: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2024-26844](https://patchblox.com/security/data/cve/CVE-2024-26844.md) | Routine | dtb-aarch64: Fixed WARNING in _copy_from_iter (bsc#1223015). | 5.5 | 0.0023 |  |
| [CVE-2024-26978](https://patchblox.com/security/data/cve/CVE-2024-26978.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2024-35828](https://patchblox.com/security/data/cve/CVE-2024-35828.md) | Routine | kernel-source-azure: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2024-35922](https://patchblox.com/security/data/cve/CVE-2024-35922.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2024-35930](https://patchblox.com/security/data/cve/CVE-2024-35930.md) | Routine | kernel-rt-modules: kernel: scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc() | 5.5 | 0.0023 |  |
| [CVE-2024-35933](https://patchblox.com/security/data/cve/CVE-2024-35933.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2024-35935](https://patchblox.com/security/data/cve/CVE-2024-35935.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 3.3 | 0.0023 |  |
| [CVE-2023-52663](https://patchblox.com/security/data/cve/CVE-2023-52663.md) | Routine | kernel-azure: Security update for the Linux Kernel | 5.5 | 0.0022 |  |
| [CVE-2023-52681](https://patchblox.com/security/data/cve/CVE-2023-52681.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0022 |  |
| [CVE-2023-52692](https://patchblox.com/security/data/cve/CVE-2023-52692.md) | Routine | dtb-aarch64: Fixed missing error check to scarlett2_usb_set_config() (bsc#1224628). | 5.5 | 0.0022 |  |
| [CVE-2024-35803](https://patchblox.com/security/data/cve/CVE-2024-35803.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0022 |  |
| [CVE-2024-35975](https://patchblox.com/security/data/cve/CVE-2024-35975.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0022 |  |
| [CVE-2024-36021](https://patchblox.com/security/data/cve/CVE-2024-36021.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0022 |  |
| [CVE-2024-36026](https://patchblox.com/security/data/cve/CVE-2024-36026.md) | Routine | kernel-default: Security update for the Linux Kernel | 5.5 | 0.0022 |  |
| [CVE-2023-52698](https://patchblox.com/security/data/cve/CVE-2023-52698.md) | Routine | dtb-aarch64: Fixed memory leak in netlbl_calipso_add_pass() bsc#1224621) | 5.5 | 0.0022 |  |
| [CVE-2024-26684](https://patchblox.com/security/data/cve/CVE-2024-26684.md) | Routine | dtb-aarch64: Fixed net/stmmac/xgmac handling of DPP safety error for DMA channels (bsc#1222445). | 5.5 | 0.0022 |  |
| [CVE-2024-27432](https://patchblox.com/security/data/cve/CVE-2024-27432.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0022 |  |
| [CVE-2024-35794](https://patchblox.com/security/data/cve/CVE-2024-35794.md) | Routine | dm-raid: really frozen sync_thread during suspend | 5.5 | 0.0022 |  |
| [CVE-2023-52657](https://patchblox.com/security/data/cve/CVE-2023-52657.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0022 |  |
| [CVE-2023-52671](https://patchblox.com/security/data/cve/CVE-2023-52671.md) | Routine | kernel-source: Security update for the Linux Kernel | 5.5 | 0.0022 |  |
| [CVE-2024-26832](https://patchblox.com/security/data/cve/CVE-2024-26832.md) | Routine | dtb-aarch64: Fixed missing folio cleanup in writeback race path (bsc#1223007). | 5.5 | 0.0022 |  |
| [CVE-2024-26860](https://patchblox.com/security/data/cve/CVE-2024-26860.md) | Routine | kernel-64kb: Fixed a memory leak when rechecking the data (bsc#1223077). | 5.5 | 0.0022 |  |
| [CVE-2024-26938](https://patchblox.com/security/data/cve/CVE-2024-26938.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0022 |  |
| [CVE-2024-26963](https://patchblox.com/security/data/cve/CVE-2024-26963.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0022 |  |
| [CVE-2024-27057](https://patchblox.com/security/data/cve/CVE-2024-27057.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0022 |  |
| [CVE-2024-27067](https://patchblox.com/security/data/cve/CVE-2024-27067.md) | Routine | kernel-syms-azure: Security update for the Linux Kernel | 5.5 | 0.0022 |  |
| [CVE-2023-52660](https://patchblox.com/security/data/cve/CVE-2023-52660.md) | Routine | kernel-default-base: Security update for the Linux Kernel | 5.5 | 0.0022 |  |
| [CVE-2024-27418](https://patchblox.com/security/data/cve/CVE-2024-27418.md) | Routine | dtb-aarch64: Fixed memory leak in mctp_local_output (bsc#1224720) | 5.5 | 0.0022 |  |
| [CVE-2024-35837](https://patchblox.com/security/data/cve/CVE-2024-35837.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0022 |  |
| [CVE-2023-52659](https://patchblox.com/security/data/cve/CVE-2023-52659.md) | Routine | kernel-64kb: Fixed to pfn_to_kaddr() not treated as a 64-bit type (bsc#1224442). | 5.5 | 0.0022 |  |
| [CVE-2024-35924](https://patchblox.com/security/data/cve/CVE-2024-35924.md) | Routine | bpftool: Important: kernel security update | 5.5 | 0.0022 |  |
| [CVE-2024-35841](https://patchblox.com/security/data/cve/CVE-2024-35841.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0022 |  |
| [CVE-2024-26866](https://patchblox.com/security/data/cve/CVE-2024-26866.md) | Routine | dtb-aarch64: Fixed spi/spi-fsl-lpspi by removing redundant spi_controller_put call (bsc#1223024). | 5.5 | 0.0022 |  |
| [CVE-2024-35842](https://patchblox.com/security/data/cve/CVE-2024-35842.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0022 |  |
| [CVE-2024-35990](https://patchblox.com/security/data/cve/CVE-2024-35990.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2024-35945](https://patchblox.com/security/data/cve/CVE-2024-35945.md) | Routine | kernel-docs: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2024-35946](https://patchblox.com/security/data/cve/CVE-2024-35946.md) | Routine | kernel-rt-debug: kernel: wifi: rtw89: fix null pointer access when abort scan | 5.5 | 0.0021 |  |
| [CVE-2024-27004](https://patchblox.com/security/data/cve/CVE-2024-27004.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2024-35829](https://patchblox.com/security/data/cve/CVE-2024-35829.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2024-35833](https://patchblox.com/security/data/cve/CVE-2024-35833.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2024-35940](https://patchblox.com/security/data/cve/CVE-2024-35940.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2024-35995](https://patchblox.com/security/data/cve/CVE-2024-35995.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2024-35824](https://patchblox.com/security/data/cve/CVE-2024-35824.md) | Routine | kernel-debug-modules-extra: Important: kernel security update | 5.5 | 0.0021 |  |
| [CVE-2024-35903](https://patchblox.com/security/data/cve/CVE-2024-35903.md) | Routine | kernel-64kb: Fixed IP after emitting call depth accounting (bsc#1224493). | 5.5 | 0.0021 |  |
| [CVE-2024-35909](https://patchblox.com/security/data/cve/CVE-2024-35909.md) | Routine | kernel-zfcpdump: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2024-35917](https://patchblox.com/security/data/cve/CVE-2024-35917.md) | Routine | dtb-aarch64: Fixed Fix bpf_plt pointer arithmetic (bsc#1224481). | 5.5 | 0.0021 |  |
| [CVE-2024-35927](https://patchblox.com/security/data/cve/CVE-2024-35927.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2024-35938](https://patchblox.com/security/data/cve/CVE-2024-35938.md) | Routine | bpftool: Important: kernel security update | 5.5 | 0.0021 |  |
| [CVE-2024-35992](https://patchblox.com/security/data/cve/CVE-2024-35992.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2024-36011](https://patchblox.com/security/data/cve/CVE-2024-36011.md) | Routine | kernel-source-azure: Security update for the Linux Kernel | 5.7 | 0.0021 |  |
| [CVE-2024-26899](https://patchblox.com/security/data/cve/CVE-2024-26899.md) | Routine | dtb-aarch64: Fixed deadlock between bd_link_disk_holder and partition scan (bsc#1223045). | 5.5 | 0.0021 |  |
| [CVE-2024-26756](https://patchblox.com/security/data/cve/CVE-2024-26756.md) | Routine | md: Don't register sync_thread for reshape directly | 5.5 | 0.0021 |  |
| [CVE-2024-26757](https://patchblox.com/security/data/cve/CVE-2024-26757.md) | Routine | md: Don't ignore read-only array in md_check_recovery() | 5.5 | 0.0021 |  |
| [CVE-2024-35912](https://patchblox.com/security/data/cve/CVE-2024-35912.md) | Routine | kernel-debug: Important: kernel security update | 5.5 | 0.0021 |  |
| [CVE-2024-26862](https://patchblox.com/security/data/cve/CVE-2024-26862.md) | Routine | dtb-aarch64: Fixed packet annotate data-races around ignore_outgoing (bsc#1223111). | 4.7 | 0.0021 |  |
| [CVE-2024-24861](https://patchblox.com/security/data/cve/CVE-2024-24861.md) | Routine | dtb-aarch64: Fixed an overflow due to race condition in media/xc4000 device driver in xc4000 xc4000_get_frequency() function (bsc#... | 6.3 | 0.0021 |  |
| [CVE-2024-26643](https://patchblox.com/security/data/cve/CVE-2024-26643.md) | Routine | dtb-aarch64: Fixed mark set as dead when unbinding anonymous set with timeout (bsc#1221829). | 5.5 | 0.0020 |  |
| [CVE-2024-27411](https://patchblox.com/security/data/cve/CVE-2024-27411.md) | Routine | kernel-syms-azure: Security update for the Linux Kernel | 5.5 | 0.0020 |  |
| [CVE-2023-52673](https://patchblox.com/security/data/cve/CVE-2023-52673.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0020 |  |
| [CVE-2024-27031](https://patchblox.com/security/data/cve/CVE-2024-27031.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0020 |  |
| [CVE-2023-52695](https://patchblox.com/security/data/cve/CVE-2023-52695.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0020 |  |
| [CVE-2024-35931](https://patchblox.com/security/data/cve/CVE-2024-35931.md) | Routine | drm/amdgpu: Skip do PCI error slot reset during RAS recovery | 5.5 | 0.0020 |  |
| [CVE-2024-27408](https://patchblox.com/security/data/cve/CVE-2024-27408.md) | Routine | dtb-aarch64: Fixed race condition in dmaengine w-edma/eDMA (bsc#1224430). | 4.7 | 0.0019 |  |
| [CVE-2024-26696](https://patchblox.com/security/data/cve/CVE-2024-26696.md) | Routine | kernel-azure: Security update for the Linux Kernel | 5.5 | 0.0019 |  |
| [CVE-2024-35836](https://patchblox.com/security/data/cve/CVE-2024-35836.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0019 |  |
| [CVE-2024-26878](https://patchblox.com/security/data/cve/CVE-2024-26878.md) | Routine | kernel-rt-modules-extra: kernel: quota: Fix potential NULL pointer dereference | 5.5 | 0.0019 |  |
| [CVE-2024-27080](https://patchblox.com/security/data/cve/CVE-2024-27080.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 4.7 | 0.0019 |  |
| [CVE-2024-26679](https://patchblox.com/security/data/cve/CVE-2024-26679.md) | Routine | kernel-source-azure: Read sk->sk_family once in inet_recv_error() inet_recv_error() is called without holding the socket lock | 5.5 | 0.0018 |  |
| [CVE-2024-26999](https://patchblox.com/security/data/cve/CVE-2024-26999.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0018 |  |
| [CVE-2024-26775](https://patchblox.com/security/data/cve/CVE-2024-26775.md) | Routine | aoe: avoid potential deadlock at set_capacity | 5.5 | 0.0018 |  |
| [CVE-2024-36002](https://patchblox.com/security/data/cve/CVE-2024-36002.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0018 |  |
| [CVE-2024-35895](https://patchblox.com/security/data/cve/CVE-2024-35895.md) | Routine | kernel-azure: Security update for the Linux Kernel | 5.5 | 0.0018 |  |
| [CVE-2024-26740](https://patchblox.com/security/data/cve/CVE-2024-26740.md) | Routine | dtb-aarch64: Fixed use the backlog for mirred ingress (bsc#1222563). | 5.5 | 0.0018 |  |
| [CVE-2024-35806](https://patchblox.com/security/data/cve/CVE-2024-35806.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0018 |  |
| [CVE-2024-35808](https://patchblox.com/security/data/cve/CVE-2024-35808.md) | Routine | md/dm-raid: don't call md_reap_sync_thread() directly | 5.5 | 0.0018 |  |
| [CVE-2023-52771](https://patchblox.com/security/data/cve/CVE-2023-52771.md) | Routine | dtb-aarch64: Fixed delete_endpoint() vs parent unregistration race (bsc#1225007). | 4.7 | 0.0018 |  |
| [CVE-2024-35997](https://patchblox.com/security/data/cve/CVE-2024-35997.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0018 |  |
| [CVE-2024-26861](https://patchblox.com/security/data/cve/CVE-2024-26861.md) | Routine | dtb-aarch64: Fixed wireguard/receive annotate data-race around receiving_counter.counter (bsc#1223076). | 4.7 | 0.0018 |  |
| [CVE-2024-0639](https://patchblox.com/security/data/cve/CVE-2024-0639.md) | Routine | kernel-debug-modules-extra: RHSA-2023:6583: kernel security, bug fix, and enhancement update (Important) | 5.5 | 0.0018 |  |
| [CVE-2024-27014](https://patchblox.com/security/data/cve/CVE-2024-27014.md) | Routine | kernel-64kb: Fixed net/mlx5e to prevent deadlock while disabling aRFS (bsc#1223735). | 5.5 | 0.0018 |  |
| [CVE-2024-26962](https://patchblox.com/security/data/cve/CVE-2024-26962.md) | Routine | dm-raid456, md/raid456: fix a deadlock for dm-raid456 while io concurrent with reshape | 5.5 | 0.0017 |  |
| [CVE-2024-27002](https://patchblox.com/security/data/cve/CVE-2024-27002.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0017 |  |
| [CVE-2024-27003](https://patchblox.com/security/data/cve/CVE-2024-27003.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0017 |  |
| [CVE-2024-35795](https://patchblox.com/security/data/cve/CVE-2024-35795.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0017 |  |
| [CVE-2023-52608](https://patchblox.com/security/data/cve/CVE-2023-52608.md) | Routine | kernel-azure: Security update for the Linux Kernel | 4.7 | 0.0017 |  |
| [CVE-2024-35977](https://patchblox.com/security/data/cve/CVE-2024-35977.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 4.7 | 0.0017 |  |
| [CVE-2024-35784](https://patchblox.com/security/data/cve/CVE-2024-35784.md) | Routine | kernel-source: Security update for the Linux Kernel | 5.5 | 0.0017 |  |
| [CVE-2024-35786](https://patchblox.com/security/data/cve/CVE-2024-35786.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0017 |  |
| [CVE-2023-52645](https://patchblox.com/security/data/cve/CVE-2023-52645.md) | Routine | dtb-aarch64: Fixed pmdomain/mediatek race conditions with genpd (bsc#1223033). | 4.7 | 0.0017 |  |
| [CVE-2024-35952](https://patchblox.com/security/data/cve/CVE-2024-35952.md) | Routine | kernel-rt-core: RHSA-2024:5102: kernel-rt security update (Important) | 5.5 | 0.0017 |  |
| [CVE-2024-35953](https://patchblox.com/security/data/cve/CVE-2024-35953.md) | Routine | kernel-syms-azure: Security update for the Linux Kernel | 5.5 | 0.0017 |  |
| [CVE-2024-36936](https://patchblox.com/security/data/cve/CVE-2024-36936.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0017 |  |
| [CVE-2024-35991](https://patchblox.com/security/data/cve/CVE-2024-35991.md) | Routine | dtb-aarch64: Fixed kABI workaround for struct idxd_evl (bsc#1224553). | 5.5 | 0.0016 |  |
| [CVE-2024-35812](https://patchblox.com/security/data/cve/CVE-2024-35812.md) | Routine | kernel-zfcpdump: Security update for the Linux Kernel | 5.5 | n/a |  |
| [CVE-2024-35928](https://patchblox.com/security/data/cve/CVE-2024-35928.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  drm/amd/amdgpu: Fix potential ioremap() memory l... | 5.5 | n/a |  |
| [CVE-2024-36885](https://patchblox.com/security/data/cve/CVE-2024-36885.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  drm/nouveau/firmware: Fix SG_DEBUG error with nv... | 4.4 | n/a |  |
| [CVE-2023-52685](https://patchblox.com/security/data/cve/CVE-2023-52685.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | n/a | n/a |  |
| [CVE-2024-267600](https://patchblox.com/security/data/cve/CVE-2024-267600.md) | Routine | dtb-aarch64: CVE-2024-26760: Fixed bio_put() for error case (bsc#1222596 . | n/a | n/a |  |
| [CVE-2024-26794](https://patchblox.com/security/data/cve/CVE-2024-26794.md) | Routine | linux: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | n/a | n/a |  |
| [CVE-2024-26848](https://patchblox.com/security/data/cve/CVE-2024-26848.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  afs: Fix endless loop in directory parsing  If a... | n/a | n/a |  |
| [CVE-2024-26979](https://patchblox.com/security/data/cve/CVE-2024-26979.md) | Routine | kernel-azure: Security update for the Linux Kernel | n/a | n/a |  |
| [CVE-2024-35788](https://patchblox.com/security/data/cve/CVE-2024-35788.md) | Routine | linux: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | n/a | n/a |  |

---

Data as of 2026-11-11T19:49:26Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.
