# SUSE-SU-2024:2802-1: Security update for 13 packages

SUSE-SU-2024:2802-1, released August 7, 2024, fixes 118 CVEs across 13 products. None of them is reported as exploited. Patch Radar priority: Urgent.

- Web page: https://patchblox.com/security/fix/linux/suse-su-2024-2802-1
- Platform: Linux
- Released: Aug 7, 2024
- Priority: Urgent (Closes CVE-2024-36912, rated Critical)
- CVEs: 118, exploited: 0, on CISA KEV: 0
- Vendor advisory: https://osv.dev/vulnerability/SUSE-SU-2024:2802-1

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [dtb-aarch64](https://patchblox.com/security/data/product/linux/dtb-aarch64.md) | opensuse-leap 15.6 | 6.4.0-150600.23.17.1 |
| [kernel-64kb](https://patchblox.com/security/data/product/linux/kernel-64kb.md) | opensuse-leap 15.6 | 6.4.0-150600.23.17.1 |
| [kernel-64kb](https://patchblox.com/security/data/product/linux/kernel-64kb.md) | sles 15.6 | 6.4.0-150600.23.17.1 |
| [kernel-debug](https://patchblox.com/security/data/product/linux/kernel-debug.md) | opensuse-leap 15.6 | 6.4.0-150600.23.17.1 |
| [kernel-default](https://patchblox.com/security/data/product/linux/kernel-default.md) | opensuse-leap 15.6 | 6.4.0-150600.23.17.1 |
| [kernel-default](https://patchblox.com/security/data/product/linux/kernel-default.md) | sles 15.6 | 6.4.0-150600.23.17.1 |
| [kernel-default-base](https://patchblox.com/security/data/product/linux/kernel-default-base.md) | opensuse-leap 15.6 | 6.4.0-150600.23.17.1.150600.12.6.2 |
| [kernel-default-base](https://patchblox.com/security/data/product/linux/kernel-default-base.md) | sles 15.6 | 6.4.0-150600.23.17.1.150600.12.6.2 |
| [kernel-docs](https://patchblox.com/security/data/product/linux/kernel-docs.md) | opensuse-leap 15.6 | 6.4.0-150600.23.17.3 |
| [kernel-docs](https://patchblox.com/security/data/product/linux/kernel-docs.md) | sles 15.6 | 6.4.0-150600.23.17.3 |
| [kernel-kvmsmall](https://patchblox.com/security/data/product/linux/kernel-kvmsmall.md) | opensuse-leap 15.6 | 6.4.0-150600.23.17.1 |
| [kernel-livepatch-SLE15-SP6_Update_3](https://patchblox.com/security/data/product/linux/kernel-livepatch-sle15-sp6-update-3.md) | sles 15.6 | 1-150600.13.3.1 |
| [kernel-obs-build](https://patchblox.com/security/data/product/linux/kernel-obs-build.md) | opensuse-leap 15.6 | 6.4.0-150600.23.17.1 |
| [kernel-obs-build](https://patchblox.com/security/data/product/linux/kernel-obs-build.md) | sles 15.6 | 6.4.0-150600.23.17.1 |
| [kernel-obs-qa](https://patchblox.com/security/data/product/linux/kernel-obs-qa.md) | opensuse-leap 15.6 | 6.4.0-150600.23.17.1 |
| [kernel-source](https://patchblox.com/security/data/product/linux/kernel-source.md) | opensuse-leap 15.6 | 6.4.0-150600.23.17.1 |
| [kernel-source](https://patchblox.com/security/data/product/linux/kernel-source.md) | sles 15.6 | 6.4.0-150600.23.17.1 |
| [kernel-syms](https://patchblox.com/security/data/product/linux/kernel-syms.md) | opensuse-leap 15.6 | 6.4.0-150600.23.17.1 |
| [kernel-syms](https://patchblox.com/security/data/product/linux/kernel-syms.md) | sles 15.6 | 6.4.0-150600.23.17.1 |
| [kernel-zfcpdump](https://patchblox.com/security/data/product/linux/kernel-zfcpdump.md) | opensuse-leap 15.6 | 6.4.0-150600.23.17.1 |
| [kernel-zfcpdump](https://patchblox.com/security/data/product/linux/kernel-zfcpdump.md) | sles 15.6 | 6.4.0-150600.23.17.1 |

## CVEs this fix closes

| CVE | Priority | Title | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2024-36912](https://patchblox.com/security/data/cve/CVE-2024-36912.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved:  Drivers: hv: vmbus: Track decrypted status in vm... | 9.6 | 0.0097 |  |
| [CVE-2024-36913](https://patchblox.com/security/data/cve/CVE-2024-36913.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved:  Drivers: hv: vmbus: Leak pages if set_memory_enc... | 9.3 | 0.0066 |  |
| [CVE-2024-38558](https://patchblox.com/security/data/cve/CVE-2024-38558.md) | High | dtb-aarch64: net: openvswitch: fix overwriting ct original tuple for ICMPv6 (bsc#1226783). | 7.8 | 0.0082 |  |
| [CVE-2024-35853](https://patchblox.com/security/data/cve/CVE-2024-35853.md) | High | bpftool: Important: kernel security and bug fix update | 7.0 | 0.0073 |  |
| [CVE-2024-26665](https://patchblox.com/security/data/cve/CVE-2024-26665.md) | High | dtb-aarch64: tunnels: fix out of bounds access when building IPv6 PMTU error (bsc#1222328). | 7.8 | 0.0068 |  |
| [CVE-2023-52775](https://patchblox.com/security/data/cve/CVE-2023-52775.md) | High | dtb-aarch64: net/smc: avoid data corruption caused by decline (bsc#1225088). | 7.8 | 0.0067 |  |
| [CVE-2024-26826](https://patchblox.com/security/data/cve/CVE-2024-26826.md) | High | kernel-zfcpdump-modules-extra: kernel: mptcp: fix data re-injection from stale subflow | 7.0 | 0.0065 |  |
| [CVE-2024-35854](https://patchblox.com/security/data/cve/CVE-2024-35854.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  mlxsw: spectrum_acl_tcam: Fix possible use-after... | 7.8 | 0.0058 |  |
| [CVE-2023-51780](https://patchblox.com/security/data/cve/CVE-2023-51780.md) | High | dtb-aarch64: Security update for the Linux Kernel | 8.0 | 0.0051 |  |
| [CVE-2024-36922](https://patchblox.com/security/data/cve/CVE-2024-36922.md) | High | wifi: iwlwifi: read txq->read_ptr under lock | 7.8 | 0.0035 |  |
| [CVE-2024-40901](https://patchblox.com/security/data/cve/CVE-2024-40901.md) | High | dtb-aarch64: scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory (bsc#1227762). | 7.8 | 0.0031 |  |
| [CVE-2024-39502](https://patchblox.com/security/data/cve/CVE-2024-39502.md) | High | kernel-tools: RHSA-2024:5101: kernel security update (Important) | 7.8 | 0.0031 |  |
| [CVE-2024-39494](https://patchblox.com/security/data/cve/CVE-2024-39494.md) | High | dtb-aarch64: ima: Fix use-after-free on a dentry's dname.name (bsc#1227716). | 7.8 | 0.0031 |  |
| [CVE-2024-40906](https://patchblox.com/security/data/cve/CVE-2024-40906.md) | High | dtb-aarch64: net/mlx5: Always stop health timer during driver removal (bsc#1227763). | 7.8 | 0.0031 |  |
| [CVE-2024-39496](https://patchblox.com/security/data/cve/CVE-2024-39496.md) | High | dtb-aarch64: btrfs: zoned: fix use-after-free due to race with dev replace (bsc#1227719). | 7.8 | 0.0029 |  |
| [CVE-2024-36902](https://patchblox.com/security/data/cve/CVE-2024-36902.md) | High | kernel-64kb: ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action() (bsc#1225719). | 7.8 | 0.0029 |  |
| [CVE-2024-36974](https://patchblox.com/security/data/cve/CVE-2024-36974.md) | High | dtb-aarch64: net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP (bsc#1226519). | 7.8 | 0.0028 |  |
| [CVE-2024-40998](https://patchblox.com/security/data/cve/CVE-2024-40998.md) | High | dtb-aarch64: ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() (bsc#1227866). | 7.8 | 0.0027 |  |
| [CVE-2024-40960](https://patchblox.com/security/data/cve/CVE-2024-40960.md) | High | dtb-aarch64: ipv6: prevent possible NULL dereference in rt6_probe() (bsc#1227813). | 7.8 | 0.0027 |  |
| [CVE-2024-27065](https://patchblox.com/security/data/cve/CVE-2024-27065.md) | High | kernel-rt: RHSA-2024:5102: kernel-rt security update (Important) | 7.8 | 0.0026 |  |
| [CVE-2024-36901](https://patchblox.com/security/data/cve/CVE-2024-36901.md) | High | kernel-livepatch-SLE15-SP6-RT_Update_1: ipv6: prevent NULL dereference in ip6_output() (bsc#1225711) | 7.8 | 0.0026 |  |
| [CVE-2024-40935](https://patchblox.com/security/data/cve/CVE-2024-40935.md) | High | dtb-aarch64: cachefiles: flush all requests after setting CACHEFILES_DEAD (bsc#1227797). | 7.8 | 0.0026 |  |
| [CVE-2024-40940](https://patchblox.com/security/data/cve/CVE-2024-40940.md) | High | kernel-zfcpdump: net/mlx5: Fix tainted pointer delete is case of flow rules creation fail (bsc#1227800). | 7.8 | 0.0026 |  |
| [CVE-2024-41090](https://patchblox.com/security/data/cve/CVE-2024-41090.md) | High | kernel-uek: ELSA-2024-12546: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0026 |  |
| [CVE-2024-41091](https://patchblox.com/security/data/cve/CVE-2024-41091.md) | High | kernel-uek: ELSA-2024-12546: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0026 |  |
| [CVE-2024-40931](https://patchblox.com/security/data/cve/CVE-2024-40931.md) | High | dtb-aarch64: mptcp: ensure snd_una is properly initialized on connect (bsc#1227780). | 7.8 | 0.0025 |  |
| [CVE-2024-38586](https://patchblox.com/security/data/cve/CVE-2024-38586.md) | High | kernel-rt-modules: kernel: r8169: Fix possible ring buffer corruption on fragmented Tx packets. | 7.8 | 0.0025 |  |
| [CVE-2024-36914](https://patchblox.com/security/data/cve/CVE-2024-36914.md) | High | kernel-default: drm/amd/display: Skip on writeback when it's not applicable (bsc#1225757). | 7.8 | 0.0025 |  |
| [CVE-2024-36910](https://patchblox.com/security/data/cve/CVE-2024-36910.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  uio_hv_generic: Don't free decrypted memory  In... | 8.4 | 0.0025 |  |
| [CVE-2024-36940](https://patchblox.com/security/data/cve/CVE-2024-36940.md) | High | kernel-zfcpdump-core: Important: kernel security update | 7.8 | 0.0025 |  |
| [CVE-2024-39487](https://patchblox.com/security/data/cve/CVE-2024-39487.md) | High | kernel-doc: RHSA-2024:5101: kernel security update (Important) | 7.1 | 0.0025 |  |
| [CVE-2024-36004](https://patchblox.com/security/data/cve/CVE-2024-36004.md) | High | dtb-aarch64: i40e: Do not use WQ_MEM_RECLAIM flag for workqueue (bsc#1224545) | 7.0 | 0.0025 |  |
| [CVE-2024-38659](https://patchblox.com/security/data/cve/CVE-2024-38659.md) | High | dtb-aarch64: enic: Validate length of nl attributes in enic_set_vf_port (bsc#1226883). | 7.1 | 0.0025 |  |
| [CVE-2023-52751](https://patchblox.com/security/data/cve/CVE-2023-52751.md) | High | kernel-default-base: smb: client: fix use-after-free in smb2_query_info_compound() (bsc#1225489). | 7.8 | 0.0024 |  |
| [CVE-2024-36955](https://patchblox.com/security/data/cve/CVE-2024-36955.md) | High | kernel-source: Security update for the Linux Kernel | 7.7 | 0.0024 |  |
| [CVE-2024-35890](https://patchblox.com/security/data/cve/CVE-2024-35890.md) | High | kernel-syms-azure: gro: fix ownership transfer (bsc#1224516). | 7.0 | 0.0024 |  |
| [CVE-2024-26944](https://patchblox.com/security/data/cve/CVE-2024-26944.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0024 |  |
| [CVE-2024-26734](https://patchblox.com/security/data/cve/CVE-2024-26734.md) | High | kernel-64kb: devlink: fix possible use-after-free and memory leaks in devlink_init() (bsc#1222438). | 7.8 | 0.0024 |  |
| [CVE-2024-41014](https://patchblox.com/security/data/cve/CVE-2024-41014.md) | High | dtb-aarch64: xfs: add bounds checking to xlog_recover_process_data (bsc#1228408). | 7.8 | 0.0024 |  |
| [CVE-2024-41011](https://patchblox.com/security/data/cve/CVE-2024-41011.md) | High | kernel-default: Security update for the Linux Kernel | 7.8 | 0.0022 |  |
| [CVE-2024-41013](https://patchblox.com/security/data/cve/CVE-2024-41013.md) | High | dtb-aarch64: xfs: do not walk off the end of a directory data block (bsc#1228405). | 7.8 | 0.0022 |  |
| [CVE-2024-40972](https://patchblox.com/security/data/cve/CVE-2024-40972.md) | High | dtb-aarch64: ext4: fold quota accounting into ext4_xattr_inode_lookup_create() (bsc#1227910). | 7.8 | 0.0022 |  |
| [CVE-2024-27020](https://patchblox.com/security/data/cve/CVE-2024-27020.md) | High | kernel-rt: RHSA-2024:5102: kernel-rt security update (Important) | 7.0 | 0.0022 |  |
| [CVE-2024-39479](https://patchblox.com/security/data/cve/CVE-2024-39479.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0022 |  |
| [CVE-2024-35899](https://patchblox.com/security/data/cve/CVE-2024-35899.md) | High | kernel-64kb: netfilter: nf_tables: flush pending destroy work before exit_net release (bsc#1224499) | 7.3 | 0.0020 |  |
| [CVE-2024-40923](https://patchblox.com/security/data/cve/CVE-2024-40923.md) | Routine | dtb-aarch64: vmxnet3: disable rx data ring on dma allocation failure (bsc#1227786). | 5.5 | 0.0079 |  |
| [CVE-2024-40937](https://patchblox.com/security/data/cve/CVE-2024-40937.md) | Routine | kernel-livepatch-SLE15-SP6-RT_Update_1: gve: Clear napi->skb before dev_kfree_skb_any() (bsc#1227836). | 5.5 | 0.0074 |  |
| [CVE-2024-40999](https://patchblox.com/security/data/cve/CVE-2024-40999.md) | Routine | net: ena: Add validation for completion descriptors consistency | 5.5 | 0.0069 |  |
| [CVE-2024-36911](https://patchblox.com/security/data/cve/CVE-2024-36911.md) | Routine | hv_netvsc: Don't free decrypted memory | 5.5 | 0.0063 |  |
| [CVE-2024-26641](https://patchblox.com/security/data/cve/CVE-2024-26641.md) | Routine | dtb-aarch64: ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv() (bsc#1221654). | 5.5 | 0.0058 |  |
| [CVE-2024-39468](https://patchblox.com/security/data/cve/CVE-2024-39468.md) | Routine | kernel-docs: smb: client: fix deadlock in smb2_find_smb_tcon() (bsc#1227103. | 5.5 | 0.0053 |  |
| [CVE-2024-36947](https://patchblox.com/security/data/cve/CVE-2024-36947.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0048 |  |
| [CVE-2023-38417](https://patchblox.com/security/data/cve/CVE-2023-38417.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 4.3 | 0.0043 |  |
| [CVE-2024-27404](https://patchblox.com/security/data/cve/CVE-2024-27404.md) | Routine | dtb-aarch64: mptcp: fix data races on remote_id (bsc#1224422) | 5.5 | 0.0042 |  |
| [CVE-2023-47210](https://patchblox.com/security/data/cve/CVE-2023-47210.md) | Routine | dtb-aarch64: wifi: iwlwifi: bump FW API to 90 for BZ/SC devices (bsc#1225601, bsc#1225600). | 4.7 | 0.0036 |  |
| [CVE-2024-27016](https://patchblox.com/security/data/cve/CVE-2024-27016.md) | Routine | dtb-aarch64: netfilter: flowtable: validate pppoe header (bsc#1223807). | 5.5 | 0.0034 |  |
| [CVE-2024-26633](https://patchblox.com/security/data/cve/CVE-2024-26633.md) | Routine | dtb-aarch64: ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim() (bsc#1221647). | 5.5 | 0.0033 |  |
| [CVE-2024-25741](https://patchblox.com/security/data/cve/CVE-2024-25741.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0031 |  |
| [CVE-2024-40979](https://patchblox.com/security/data/cve/CVE-2024-40979.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0030 |  |
| [CVE-2024-40970](https://patchblox.com/security/data/cve/CVE-2024-40970.md) | Routine | dtb-aarch64: Avoid hw_desc array overrun in dw-axi-dmac (bsc#1227899). | 5.6 | 0.0030 |  |
| [CVE-2024-40925](https://patchblox.com/security/data/cve/CVE-2024-40925.md) | Routine | kernel-livepatch-SLE15-SP6_Update_3: block: fix request.queuelist usage in flush (bsc#1227789). | 5.5 | 0.0030 |  |
| [CVE-2024-39507](https://patchblox.com/security/data/cve/CVE-2024-39507.md) | Routine | kernel-syms-azure: net: hns3: fix kernel crash problem in concurrent scenario (bsc#1227730). | 5.5 | 0.0030 |  |
| [CVE-2024-27025](https://patchblox.com/security/data/cve/CVE-2024-27025.md) | Routine | kernel-rt: (CVE-2021-47548) * (CVE-2023-52619) | 5.5 | 0.0029 |  |
| [CVE-2024-40919](https://patchblox.com/security/data/cve/CVE-2024-40919.md) | Routine | kernel-livepatch-SLE15-SP6_Update_3: bnxt_en: Adjust logging of firmware messages in case of released token in __hwrm_send() (bsc#1227779). | 5.5 | 0.0029 |  |
| [CVE-2024-40966](https://patchblox.com/security/data/cve/CVE-2024-40966.md) | Routine | tty: add the option to have a tty reject a new ldisc | 5.5 | 0.0029 |  |
| [CVE-2024-40975](https://patchblox.com/security/data/cve/CVE-2024-40975.md) | Routine | dtb-aarch64: platform/x86: x86-android-tablets: Unregister devices in reverse order (bsc#1227926). | 5.5 | 0.0029 |  |
| [CVE-2024-40908](https://patchblox.com/security/data/cve/CVE-2024-40908.md) | Routine | kernel-source: bpf: Set run context for rawtp test_run callback (bsc#1227783). | 5.5 | 0.0028 |  |
| [CVE-2023-52472](https://patchblox.com/security/data/cve/CVE-2023-52472.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0027 |  |
| [CVE-2024-27012](https://patchblox.com/security/data/cve/CVE-2024-27012.md) | Routine | dtb-aarch64: netfilter: nf_tables: restore set elements when delete set fails (bsc#1223804). | 5.5 | 0.0027 |  |
| [CVE-2024-39504](https://patchblox.com/security/data/cve/CVE-2024-39504.md) | Routine | dtb-aarch64: netfilter: nft_inner: validate mandatory meta and payload (bsc#1227757). | 5.5 | 0.0027 |  |
| [CVE-2024-36889](https://patchblox.com/security/data/cve/CVE-2024-36889.md) | Routine | kernel-modules-extra: Important: kernel security update | 5.5 | 0.0027 |  |
| [CVE-2024-36946](https://patchblox.com/security/data/cve/CVE-2024-36946.md) | Routine | dtb-aarch64: phonet: fix rtm_phonet_notify() skb allocation (bsc#1225851). | 5.5 | 0.0027 |  |
| [CVE-2024-40961](https://patchblox.com/security/data/cve/CVE-2024-40961.md) | Routine | kernel-64kb: ipv6: prevent possible NULL deref in fib6_nh_init() (bsc#1227814). | 5.5 | 0.0027 |  |
| [CVE-2024-40947](https://patchblox.com/security/data/cve/CVE-2024-40947.md) | Routine | dtb-aarch64: ima: Avoid blocking in RCU read-side critical section (bsc#1227803). | 5.5 | 0.0026 |  |
| [CVE-2024-36950](https://patchblox.com/security/data/cve/CVE-2024-36950.md) | Routine | kernel-default-base: Security update for the Linux Kernel | 4.4 | 0.0026 |  |
| [CVE-2024-26615](https://patchblox.com/security/data/cve/CVE-2024-26615.md) | Routine | dtb-aarch64: net/smc: fix illegal rmb_desc access in SMC-D connection dump (bsc#1220942). | 5.5 | 0.0026 |  |
| [CVE-2024-36959](https://patchblox.com/security/data/cve/CVE-2024-36959.md) | Routine | kernel-docs: Security update for the Linux Kernel | 5.5 | 0.0025 |  |
| [CVE-2024-39472](https://patchblox.com/security/data/cve/CVE-2024-39472.md) | Routine | kernel-devel: RHSA-2024:5101: kernel security update (Important) | 5.5 | 0.0025 |  |
| [CVE-2024-26663](https://patchblox.com/security/data/cve/CVE-2024-26663.md) | Routine | dtb-aarch64: tipc: Check the bearer type before calling tipc_udp_nl_bearer_add() (bsc#1222326). | 5.5 | 0.0025 |  |
| [CVE-2024-26863](https://patchblox.com/security/data/cve/CVE-2024-26863.md) | Routine | dtb-aarch64: hsr: Fix uninit-value access in hsr_get_node() (bsc#1223021). | 5.5 | 0.0025 |  |
| [CVE-2024-40948](https://patchblox.com/security/data/cve/CVE-2024-40948.md) | Routine | dtb-aarch64: mm/page_table_check: fix crash on ZONE_DEVICE (bsc#1227801). | 5.5 | 0.0025 |  |
| [CVE-2024-41017](https://patchblox.com/security/data/cve/CVE-2024-41017.md) | Routine | dtb-aarch64: jfs: do not walk off the end of ealist (bsc#1228403). | 5.5 | 0.0025 |  |
| [CVE-2024-26635](https://patchblox.com/security/data/cve/CVE-2024-26635.md) | Routine | kernel-obs-build: llc: Drop support for ETH_P_TR_802_2 (bsc#1221656). | 5.5 | 0.0024 |  |
| [CVE-2024-41006](https://patchblox.com/security/data/cve/CVE-2024-41006.md) | Routine | kernel-obs-build: netrom: Fix a memory leak in nr_heartbeat_expiry() (bsc#1227862). | 5.5 | 0.0024 |  |
| [CVE-2024-36909](https://patchblox.com/security/data/cve/CVE-2024-36909.md) | Routine | Drivers: hv: vmbus: Don't free ring buffers that couldn't be re-encrypted | 5.5 | 0.0024 |  |
| [CVE-2024-26636](https://patchblox.com/security/data/cve/CVE-2024-26636.md) | Routine | dtb-aarch64: llc: make llc_ui_sendmsg() more robust against bonding changes (bsc#1221659). | 5.5 | 0.0024 |  |
| [CVE-2024-36941](https://patchblox.com/security/data/cve/CVE-2024-36941.md) | Routine | kernel-doc: RHSA-2024:5101: kernel security update (Important) | 5.7 | 0.0024 |  |
| [CVE-2024-39482](https://patchblox.com/security/data/cve/CVE-2024-39482.md) | Routine | dtb-aarch64: bcache: fix variable length array abuse in btree_iter (bsc#1227447). | 5.5 | 0.0024 |  |
| [CVE-2024-39498](https://patchblox.com/security/data/cve/CVE-2024-39498.md) | Routine | dtb-aarch64: drm/mst: Fix NULL pointer dereference at drm_dp_add_payload_part2 (bsc#1227723) | 5.5 | 0.0024 |  |
| [CVE-2024-35893](https://patchblox.com/security/data/cve/CVE-2024-35893.md) | Routine | bpftool: kernel: net/sched: act_skbmod: prevent kernel-infoleak | 5.5 | 0.0023 |  |
| [CVE-2023-52435](https://patchblox.com/security/data/cve/CVE-2023-52435.md) | Routine | dtb-aarch64: net: prevent mss overflow in skb_segment() (bsc#1220138). | 5.5 | 0.0023 |  |
| [CVE-2024-39276](https://patchblox.com/security/data/cve/CVE-2024-39276.md) | Routine | kernel-devel: (CVE-2024-33621) * (CVE-2024-27010) * (CVE-2024-26960) * (CVE-2024-38596) * (CVE-2022-48743) * (CVE-2024-26733) * (CV... | 5.5 | 0.0023 |  |
| [CVE-2024-27015](https://patchblox.com/security/data/cve/CVE-2024-27015.md) | Routine | dtb-aarch64: netfilter: flowtable: incorrect pppoe tuple (bsc#1223806). | 5.5 | 0.0023 |  |
| [CVE-2024-39475](https://patchblox.com/security/data/cve/CVE-2024-39475.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2024-40928](https://patchblox.com/security/data/cve/CVE-2024-40928.md) | Routine | bpftool: net: ethtool: fix the error condition in ethtool_get_phy_stats_ethtool() (CKI Backport Bot) [RHEL-47902] | 5.5 | 0.0023 |  |
| [CVE-2024-36930](https://patchblox.com/security/data/cve/CVE-2024-36930.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2024-26623](https://patchblox.com/security/data/cve/CVE-2024-26623.md) | Routine | dtb-aarch64: pds_core: Prevent race issues involving the adminq (bsc#1221057). | 4.7 | 0.0023 |  |
| [CVE-2024-26785](https://patchblox.com/security/data/cve/CVE-2024-26785.md) | Routine | kernel-livepatch-SLE15-SP6-RT_Update_1: iommufd: Fix protection fault in iommufd_test_syz_conv_iova (bsc#1222779). | 5.5 | 0.0023 |  |
| [CVE-2024-39474](https://patchblox.com/security/data/cve/CVE-2024-39474.md) | Routine | kernel-default: mm/vmalloc: fix vmalloc which may return null if called with __GFP_NOFAIL (bsc#1227434). | 5.5 | 0.0022 |  |
| [CVE-2024-39490](https://patchblox.com/security/data/cve/CVE-2024-39490.md) | Routine | kernel-livepatch-SLE15-SP6-RT_Update_1: ipv6: sr: fix missing sk_buff release in seg6_input_core (bsc#1227626). | 6.2 | 0.0022 |  |
| [CVE-2024-36949](https://patchblox.com/security/data/cve/CVE-2024-36949.md) | Routine | kernel-syms: Security update for the Linux Kernel | 4.7 | 0.0022 |  |
| [CVE-2024-27402](https://patchblox.com/security/data/cve/CVE-2024-27402.md) | Routine | kernel-64kb: phonet/pep: fix racy skb_queue_empty() use (bsc#1224414). | 5.8 | 0.0022 |  |
| [CVE-2024-27064](https://patchblox.com/security/data/cve/CVE-2024-27064.md) | Routine | dtb-aarch64: netfilter: nf_tables: Fix a memory leak in nf_tables_updchain (bsc#1223740). | 5.5 | 0.0022 |  |
| [CVE-2024-36951](https://patchblox.com/security/data/cve/CVE-2024-36951.md) | Routine | kernel-obs-build: Security update for the Linux Kernel | 5.5 | 0.0022 |  |
| [CVE-2024-39481](https://patchblox.com/security/data/cve/CVE-2024-39481.md) | Routine | kernel-syms: Security update for the Linux Kernel | 5.5 | 0.0022 |  |
| [CVE-2024-35934](https://patchblox.com/security/data/cve/CVE-2024-35934.md) | Routine | dtb-aarch64: net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list() (bsc#1224641) | 5.5 | 0.0021 |  |
| [CVE-2024-27019](https://patchblox.com/security/data/cve/CVE-2024-27019.md) | Routine | bpftool: Important: kernel security update | 5.5 | 0.0021 |  |
| [CVE-2024-35908](https://patchblox.com/security/data/cve/CVE-2024-35908.md) | Routine | dtb-aarch64: tls: get psock ref after taking rxlock to avoid leak (bsc#1224490) | 5.5 | 0.0021 |  |
| [CVE-2024-35942](https://patchblox.com/security/data/cve/CVE-2024-35942.md) | Routine | kernel-source-azure: pmdomain: imx8mp-blk-ctrl: imx8mp_blk: Add fdcc clock to hdmimix domain (bsc#1224589). | 5.5 | 0.0021 |  |
| [CVE-2024-39473](https://patchblox.com/security/data/cve/CVE-2024-39473.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2024-38604](https://patchblox.com/security/data/cve/CVE-2024-38604.md) | Routine | dtb-aarch64: block: refine the EOF check in blkdev_iomap_begin (bsc#1226866). | 5.5 | 0.0021 |  |
| [CVE-2024-38598](https://patchblox.com/security/data/cve/CVE-2024-38598.md) | Routine | kernel-headers: Important: kernel security update | 5.5 | 0.0020 |  |
| [CVE-2024-40953](https://patchblox.com/security/data/cve/CVE-2024-40953.md) | Routine | dtb-aarch64: KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin() (bsc#1227806). | 4.7 | 0.0020 |  |
| [CVE-2024-26691](https://patchblox.com/security/data/cve/CVE-2024-26691.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0018 |  |
| [CVE-2024-35805](https://patchblox.com/security/data/cve/CVE-2024-35805.md) | Routine | dtb-aarch64: dm snapshot: fix lockup in dm_exception_table_exit (bsc#1224743). | 5.5 | 0.0018 |  |
| [CVE-2024-36003](https://patchblox.com/security/data/cve/CVE-2024-36003.md) | Routine | dtb-aarch64: ice: fix LAG and VF lock dependency in ice_reset_vf() (bsc#1224544). | 5.5 | 0.0017 |  |
| [CVE-2024-36944](https://patchblox.com/security/data/cve/CVE-2024-36944.md) | Routine | kernel-livepatch-SLE15-SP6_Update_1: Security update for the Linux Kernel | 5.5 | 0.0017 |  |
| [CVE-2024-36942](https://patchblox.com/security/data/cve/CVE-2024-36942.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  Bluetooth: qca: fix firmware check error path  A... | 5.5 | n/a |  |

---

Data as of 2026-11-11T13:47:35Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.