# SUSE-SU-2024:3383-1: Security update for 13 packages

SUSE-SU-2024:3383-1, released September 23, 2024, fixes 394 CVEs across 13 products. None of them is reported as exploited. Patch Radar priority: High.

- Web page: https://patchblox.com/security/fix/linux/suse-su-2024-3383-1
- Platform: Linux
- Released: Sep 23, 2024
- Priority: High (Closes CVE-2023-52735, high severity)
- CVEs: 394, exploited: 0, on CISA KEV: 0
- Vendor advisory: https://osv.dev/vulnerability/SUSE-SU-2024:3383-1

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [dtb-aarch64](https://patchblox.com/security/data/product/linux/dtb-aarch64.md) | opensuse-leap 15.6 | 6.4.0-150600.23.22.1 |
| [kernel-64kb](https://patchblox.com/security/data/product/linux/kernel-64kb.md) | opensuse-leap 15.6 | 6.4.0-150600.23.22.1 |
| [kernel-64kb](https://patchblox.com/security/data/product/linux/kernel-64kb.md) | sles 15.6 | 6.4.0-150600.23.22.1 |
| [kernel-debug](https://patchblox.com/security/data/product/linux/kernel-debug.md) | opensuse-leap 15.6 | 6.4.0-150600.23.22.1 |
| [kernel-default](https://patchblox.com/security/data/product/linux/kernel-default.md) | opensuse-leap 15.6 | 6.4.0-150600.23.22.1 |
| [kernel-default](https://patchblox.com/security/data/product/linux/kernel-default.md) | sles 15.6 | 6.4.0-150600.23.22.1 |
| [kernel-default-base](https://patchblox.com/security/data/product/linux/kernel-default-base.md) | opensuse-leap 15.6 | 6.4.0-150600.23.22.1.150600.12.8.3 |
| [kernel-default-base](https://patchblox.com/security/data/product/linux/kernel-default-base.md) | sles 15.6 | 6.4.0-150600.23.22.1.150600.12.8.3 |
| [kernel-docs](https://patchblox.com/security/data/product/linux/kernel-docs.md) | opensuse-leap 15.6 | 6.4.0-150600.23.22.1 |
| [kernel-docs](https://patchblox.com/security/data/product/linux/kernel-docs.md) | sles 15.6 | 6.4.0-150600.23.22.1 |
| [kernel-kvmsmall](https://patchblox.com/security/data/product/linux/kernel-kvmsmall.md) | opensuse-leap 15.6 | 6.4.0-150600.23.22.1 |
| [kernel-livepatch-SLE15-SP6_Update_4](https://patchblox.com/security/data/product/linux/kernel-livepatch-sle15-sp6-update-4.md) | sles 15.6 | 1-150600.13.3.3 |
| [kernel-obs-build](https://patchblox.com/security/data/product/linux/kernel-obs-build.md) | opensuse-leap 15.6 | 6.4.0-150600.23.22.1 |
| [kernel-obs-build](https://patchblox.com/security/data/product/linux/kernel-obs-build.md) | sles 15.6 | 6.4.0-150600.23.22.1 |
| [kernel-obs-qa](https://patchblox.com/security/data/product/linux/kernel-obs-qa.md) | opensuse-leap 15.6 | 6.4.0-150600.23.22.1 |
| [kernel-source](https://patchblox.com/security/data/product/linux/kernel-source.md) | opensuse-leap 15.6 | 6.4.0-150600.23.22.1 |
| [kernel-source](https://patchblox.com/security/data/product/linux/kernel-source.md) | sles 15.6 | 6.4.0-150600.23.22.1 |
| [kernel-syms](https://patchblox.com/security/data/product/linux/kernel-syms.md) | opensuse-leap 15.6 | 6.4.0-150600.23.22.1 |
| [kernel-syms](https://patchblox.com/security/data/product/linux/kernel-syms.md) | sles 15.6 | 6.4.0-150600.23.22.1 |
| [kernel-zfcpdump](https://patchblox.com/security/data/product/linux/kernel-zfcpdump.md) | opensuse-leap 15.6 | 6.4.0-150600.23.22.1 |
| [kernel-zfcpdump](https://patchblox.com/security/data/product/linux/kernel-zfcpdump.md) | sles 15.6 | 6.4.0-150600.23.22.1 |

## CVEs this fix closes

| CVE | Priority | Title | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2023-52735](https://patchblox.com/security/data/cve/CVE-2023-52735.md) | High | dtb-aarch64: Security update for the Linux Kernel | 9.1 | 0.0122 |  |
| [CVE-2024-41040](https://patchblox.com/security/data/cve/CVE-2024-41040.md) | High | dtb-aarch64: net/sched: Fix UAF when resolving a clash (bsc#1228518). | 7.8 | 0.0100 |  |
| [CVE-2024-42284](https://patchblox.com/security/data/cve/CVE-2024-42284.md) | High | dtb-aarch64: tipc: Return non-zero value from tipc_udp_addr2str() on error (bsc#1229382) | 7.8 | 0.0092 |  |
| [CVE-2024-42285](https://patchblox.com/security/data/cve/CVE-2024-42285.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0087 |  |
| [CVE-2024-43847](https://patchblox.com/security/data/cve/CVE-2024-43847.md) | High | dtb-aarch64: Security update for the Linux Kernel | 8.8 | 0.0081 |  |
| [CVE-2024-41007](https://patchblox.com/security/data/cve/CVE-2024-41007.md) | High | dtb-aarch64: tcp: use signed arithmetic in tcp_rtx_probe0_timed_out() (bsc#1227863). | 7.8 | 0.0077 |  |
| [CVE-2024-42152](https://patchblox.com/security/data/cve/CVE-2024-42152.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0073 |  |
| [CVE-2024-41073](https://patchblox.com/security/data/cve/CVE-2024-41073.md) | High | dtb-aarch64: Security update for the Linux Kernel | 8.1 | 0.0067 |  |
| [CVE-2024-43883](https://patchblox.com/security/data/cve/CVE-2024-43883.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.1 | 0.0065 |  |
| [CVE-2024-35854](https://patchblox.com/security/data/cve/CVE-2024-35854.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  mlxsw: spectrum_acl_tcam: Fix possible use-after... | 7.8 | 0.0058 |  |
| [CVE-2023-52885](https://patchblox.com/security/data/cve/CVE-2023-52885.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0056 |  |
| [CVE-2024-42225](https://patchblox.com/security/data/cve/CVE-2024-42225.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0053 |  |
| [CVE-2024-40920](https://patchblox.com/security/data/cve/CVE-2024-40920.md) | High | kernel-default-base: net: bridge: mst: fix suspicious rcu usage in br_mst_set_state (bsc#1227781). | 7.8 | 0.0041 |  |
| [CVE-2024-40911](https://patchblox.com/security/data/cve/CVE-2024-40911.md) | High | kernel-zfcpdump: Security update for the Linux Kernel | 7.8 | 0.0041 |  |
| [CVE-2024-40941](https://patchblox.com/security/data/cve/CVE-2024-40941.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0040 |  |
| [CVE-2024-40929](https://patchblox.com/security/data/cve/CVE-2024-40929.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0036 |  |
| [CVE-2024-40902](https://patchblox.com/security/data/cve/CVE-2024-40902.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0032 |  |
| [CVE-2024-40978](https://patchblox.com/security/data/cve/CVE-2024-40978.md) | High | dtb-aarch64: scsi: qedi: Fix crash while reading debugfs attribute (bsc#1227929). | 7.8 | 0.0032 |  |
| [CVE-2024-27024](https://patchblox.com/security/data/cve/CVE-2024-27024.md) | High | dtb-aarch64: net/rds: fix WARNING in rds_conn_connect_if_down (bsc#1223777). | 7.8 | 0.0031 |  |
| [CVE-2024-41038](https://patchblox.com/security/data/cve/CVE-2024-41038.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0031 |  |
| [CVE-2024-42162](https://patchblox.com/security/data/cve/CVE-2024-42162.md) | High | dtb-aarch64: gve: Account for stopped queues when reading NIC stats (bsc#1228706). | 7.0 | 0.0031 |  |
| [CVE-2024-43881](https://patchblox.com/security/data/cve/CVE-2024-43881.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.1 | 0.0031 |  |
| [CVE-2024-41028](https://patchblox.com/security/data/cve/CVE-2024-41028.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0030 |  |
| [CVE-2024-40989](https://patchblox.com/security/data/cve/CVE-2024-40989.md) | High | KVM: arm64: Disassociate vcpus from redistributor region on teardown | 7.8 | 0.0030 |  |
| [CVE-2024-41000](https://patchblox.com/security/data/cve/CVE-2024-41000.md) | High | dtb-aarch64: block/ioctl: prefer different overflow check (bsc#1227867). | 7.8 | 0.0030 |  |
| [CVE-2024-41035](https://patchblox.com/security/data/cve/CVE-2024-41035.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0030 |  |
| [CVE-2024-39499](https://patchblox.com/security/data/cve/CVE-2024-39499.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0030 |  |
| [CVE-2023-52489](https://patchblox.com/security/data/cve/CVE-2023-52489.md) | High | dtb-aarch64: mm/sparsemem: fix race in accessing memory_section->usage (bsc#1221326). | 8.0 | 0.0029 |  |
| [CVE-2024-40927](https://patchblox.com/security/data/cve/CVE-2024-40927.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0029 |  |
| [CVE-2024-41041](https://patchblox.com/security/data/cve/CVE-2024-41041.md) | High | dtb-aarch64: udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port() (bsc#1228520). | 7.8 | 0.0029 |  |
| [CVE-2024-40904](https://patchblox.com/security/data/cve/CVE-2024-40904.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0029 |  |
| [CVE-2024-42132](https://patchblox.com/security/data/cve/CVE-2024-42132.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.1 | 0.0029 |  |
| [CVE-2024-41039](https://patchblox.com/security/data/cve/CVE-2024-41039.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0029 |  |
| [CVE-2024-39506](https://patchblox.com/security/data/cve/CVE-2024-39506.md) | High | kernel-livepatch-SLE15-SP6_Update_4: liquidio: adjust a NULL pointer handling path in lio_vf_rep_copy_packet (bsc#1227729). | 7.8 | 0.0029 |  |
| [CVE-2024-40913](https://patchblox.com/security/data/cve/CVE-2024-40913.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0029 |  |
| [CVE-2024-41044](https://patchblox.com/security/data/cve/CVE-2024-41044.md) | High | dtb-aarch64: ppp: reject claimed-as-LCP but actually malformed packets (bsc#1228530). | 7.8 | 0.0029 |  |
| [CVE-2024-40995](https://patchblox.com/security/data/cve/CVE-2024-40995.md) | High | dtb-aarch64: net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc() (bsc#1227830). | 7.8 | 0.0029 |  |
| [CVE-2024-27050](https://patchblox.com/security/data/cve/CVE-2024-27050.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  libbpf: Use OPTS_SET() macro in bpf_xdp_query()... | 7.8 | 0.0029 |  |
| [CVE-2024-41045](https://patchblox.com/security/data/cve/CVE-2024-41045.md) | High | bpf: Defer work in bpf_timer_cancel_and_free | 7.8 | 0.0029 |  |
| [CVE-2024-39510](https://patchblox.com/security/data/cve/CVE-2024-39510.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0028 |  |
| [CVE-2024-40899](https://patchblox.com/security/data/cve/CVE-2024-40899.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0028 |  |
| [CVE-2024-40900](https://patchblox.com/security/data/cve/CVE-2024-40900.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0028 |  |
| [CVE-2024-40903](https://patchblox.com/security/data/cve/CVE-2024-40903.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0028 |  |
| [CVE-2024-41050](https://patchblox.com/security/data/cve/CVE-2024-41050.md) | High | dtb-aarch64: cachefiles: cyclic allocation of msg_id to avoid reuse (bsc#1228499). | 7.8 | 0.0028 |  |
| [CVE-2024-41058](https://patchblox.com/security/data/cve/CVE-2024-41058.md) | High | dtb-aarch64: cachefiles: fix slab-use-after-free in fscache_withdraw_volume() (bsc#1228459). | 7.8 | 0.0028 |  |
| [CVE-2024-42119](https://patchblox.com/security/data/cve/CVE-2024-42119.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0028 |  |
| [CVE-2024-41049](https://patchblox.com/security/data/cve/CVE-2024-41049.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.0 | 0.0028 |  |
| [CVE-2024-40988](https://patchblox.com/security/data/cve/CVE-2024-40988.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0028 |  |
| [CVE-2024-40909](https://patchblox.com/security/data/cve/CVE-2024-40909.md) | High | dtb-aarch64: bpf: Fix a potential use-after-free in bpf_link_free() (bsc#1227798). | 7.8 | 0.0028 |  |
| [CVE-2024-41057](https://patchblox.com/security/data/cve/CVE-2024-41057.md) | High | dtb-aarch64: cachefiles: fix slab-use-after-free in cachefiles_withdraw_cookie() (bsc#1228462). | 7.0 | 0.0028 |  |
| [CVE-2024-27049](https://patchblox.com/security/data/cve/CVE-2024-27049.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0028 |  |
| [CVE-2024-40994](https://patchblox.com/security/data/cve/CVE-2024-40994.md) | High | dtb-aarch64: ptp: fix integer overflow in max_vclocks_store (bsc#1227829). | 7.8 | 0.0028 |  |
| [CVE-2024-40959](https://patchblox.com/security/data/cve/CVE-2024-40959.md) | High | dtb-aarch64: xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr() (bsc#1227884). | 7.8 | 0.0028 |  |
| [CVE-2024-41051](https://patchblox.com/security/data/cve/CVE-2024-41051.md) | High | dtb-aarch64: cachefiles: wait for ondemand_object_worker to finish when dropping object (bsc#1228468). | 7.8 | 0.0028 |  |
| [CVE-2024-26735](https://patchblox.com/security/data/cve/CVE-2024-26735.md) | High | dtb-aarch64: ipv6: sr: fix possible use-after-free and null-ptr-deref (bsc#1222372). | 7.0 | 0.0027 |  |
| [CVE-2024-41092](https://patchblox.com/security/data/cve/CVE-2024-41092.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0027 |  |
| [CVE-2024-41059](https://patchblox.com/security/data/cve/CVE-2024-41059.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.1 | 0.0027 |  |
| [CVE-2024-40956](https://patchblox.com/security/data/cve/CVE-2024-40956.md) | High | dtb-aarch64: dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list (bsc#1227810). | 7.8 | 0.0027 |  |
| [CVE-2024-40958](https://patchblox.com/security/data/cve/CVE-2024-40958.md) | High | kernel-default-base: netns: Make get_net_ns() handle zero refcount net (bsc#1227812). | 7.8 | 0.0027 |  |
| [CVE-2024-40997](https://patchblox.com/security/data/cve/CVE-2024-40997.md) | High | kernel-azure: Security update for the Linux Kernel | 7.8 | 0.0027 |  |
| [CVE-2024-26976](https://patchblox.com/security/data/cve/CVE-2024-26976.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  KVM: Always flush async #PF workqueue when vCPU... | 7.8 | 0.0026 |  |
| [CVE-2024-42120](https://patchblox.com/security/data/cve/CVE-2024-42120.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0026 |  |
| [CVE-2024-42104](https://patchblox.com/security/data/cve/CVE-2024-42104.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0026 |  |
| [CVE-2024-42105](https://patchblox.com/security/data/cve/CVE-2024-42105.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0026 |  |
| [CVE-2024-42121](https://patchblox.com/security/data/cve/CVE-2024-42121.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0026 |  |
| [CVE-2024-40939](https://patchblox.com/security/data/cve/CVE-2024-40939.md) | High | dtb-aarch64: net: wwan: iosm: Fix tainted pointer delete is case of region creation fail (bsc#1227799). | 7.8 | 0.0026 |  |
| [CVE-2024-26808](https://patchblox.com/security/data/cve/CVE-2024-26808.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  netfilter: nft_chain_filter: handle NETDEV_UNREG... | 7.8 | 0.0026 |  |
| [CVE-2024-36979](https://patchblox.com/security/data/cve/CVE-2024-36979.md) | High | kernel-default-base: net: bridge: mst: fix vlan use-after-free (bsc#1226604). | 7.8 | 0.0026 |  |
| [CVE-2024-42148](https://patchblox.com/security/data/cve/CVE-2024-42148.md) | High | dtb-aarch64: bnx2x: Fix multiple UBSAN array-index-out-of-bounds (bsc#1228487). | 7.8 | 0.0026 |  |
| [CVE-2023-52581](https://patchblox.com/security/data/cve/CVE-2023-52581.md) | High | kernel-default-base: netfilter: nf_tables: fix memleak when more than 255 elements expired (bsc#1220877). | 8.0 | 0.0026 |  |
| [CVE-2024-40954](https://patchblox.com/security/data/cve/CVE-2024-40954.md) | High | dtb-aarch64: net: do not leave a dangling sk pointer, when socket creation fails (bsc#1227808) | 7.8 | 0.0026 |  |
| [CVE-2024-42124](https://patchblox.com/security/data/cve/CVE-2024-42124.md) | High | dtb-aarch64: scsi: qedf: Make qedf_execute_tmf() non-preemptible (bsc#1228705). | 7.8 | 0.0026 |  |
| [CVE-2024-43839](https://patchblox.com/security/data/cve/CVE-2024-43839.md) | High | dtb-aarch64: bna: adjust 'name' buf size of bna_tcb and bna_ccb structures (bsc#1229301). | 7.8 | 0.0025 |  |
| [CVE-2024-41056](https://patchblox.com/security/data/cve/CVE-2024-41056.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0025 |  |
| [CVE-2024-42131](https://patchblox.com/security/data/cve/CVE-2024-42131.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0025 |  |
| [CVE-2024-43830](https://patchblox.com/security/data/cve/CVE-2024-43830.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0025 |  |
| [CVE-2024-36910](https://patchblox.com/security/data/cve/CVE-2024-36910.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  uio_hv_generic: Don't free decrypted memory  In... | 8.4 | 0.0025 |  |
| [CVE-2024-42292](https://patchblox.com/security/data/cve/CVE-2024-42292.md) | High | dtb-aarch64: Security update for the Linux Kernel | 8.0 | 0.0025 |  |
| [CVE-2024-41060](https://patchblox.com/security/data/cve/CVE-2024-41060.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0025 |  |
| [CVE-2024-40977](https://patchblox.com/security/data/cve/CVE-2024-40977.md) | High | wifi: mt76: mt7921s: fix potential hung tasks during chip recovery | 7.8 | 0.0025 |  |
| [CVE-2024-41087](https://patchblox.com/security/data/cve/CVE-2024-41087.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0024 |  |
| [CVE-2024-42280](https://patchblox.com/security/data/cve/CVE-2024-42280.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0024 |  |
| [CVE-2024-43882](https://patchblox.com/security/data/cve/CVE-2024-43882.md) | High | dtb-aarch64: Fixed ToCToU between perm check and set-uid/gid usage | 7.0 | 0.0024 |  |
| [CVE-2023-52859](https://patchblox.com/security/data/cve/CVE-2023-52859.md) | High | dtb-aarch64: perf: hisi: Fix use-after-free when register pmu fails (bsc#1225582). | 7.8 | 0.0024 |  |
| [CVE-2024-35949](https://patchblox.com/security/data/cve/CVE-2024-35949.md) | High | dtb-aarch64: btrfs: make sure that WRITTEN is set on all metadata blocks (bsc#1224700). | 7.8 | 0.0024 |  |
| [CVE-2024-26668](https://patchblox.com/security/data/cve/CVE-2024-26668.md) | High | dtb-aarch64: netfilter: nft_limit: reject configurations that cause integer overflow (bsc#1222335). | 7.1 | 0.0024 |  |
| [CVE-2024-26944](https://patchblox.com/security/data/cve/CVE-2024-26944.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0024 |  |
| [CVE-2024-41096](https://patchblox.com/security/data/cve/CVE-2024-41096.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0024 |  |
| [CVE-2024-42228](https://patchblox.com/security/data/cve/CVE-2024-42228.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0024 |  |
| [CVE-2024-41064](https://patchblox.com/security/data/cve/CVE-2024-41064.md) | High | dtb-aarch64: powerpc/eeh: avoid possible crash when edev->pdev changes (bsc#1228599). | 7.8 | 0.0024 |  |
| [CVE-2024-42086](https://patchblox.com/security/data/cve/CVE-2024-42086.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0024 |  |
| [CVE-2024-43871](https://patchblox.com/security/data/cve/CVE-2024-43871.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0024 |  |
| [CVE-2024-42096](https://patchblox.com/security/data/cve/CVE-2024-42096.md) | High | dtb-aarch64: x86: stop playing stack games in profile_pc() (bsc#1228633). | 7.8 | 0.0024 |  |
| [CVE-2024-26669](https://patchblox.com/security/data/cve/CVE-2024-26669.md) | High | dtb-aarch64: kABI fix for net/sched: flower: Fix chain template offload (bsc#1222350). | 7.1 | 0.0024 |  |
| [CVE-2024-43858](https://patchblox.com/security/data/cve/CVE-2024-43858.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0024 |  |
| [CVE-2024-42271](https://patchblox.com/security/data/cve/CVE-2024-42271.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0024 |  |
| [CVE-2024-41097](https://patchblox.com/security/data/cve/CVE-2024-41097.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0023 |  |
| [CVE-2024-42136](https://patchblox.com/security/data/cve/CVE-2024-42136.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0023 |  |
| [CVE-2024-42138](https://patchblox.com/security/data/cve/CVE-2024-42138.md) | High | dtb-aarch64: mlxsw: core_linecards: Fix double memory deallocation in case of invalid INI file (bsc#1228500). | 7.8 | 0.0023 |  |
| [CVE-2024-42147](https://patchblox.com/security/data/cve/CVE-2024-42147.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0023 |  |
| [CVE-2024-42301](https://patchblox.com/security/data/cve/CVE-2024-42301.md) | High | dtb-aarch64: dev/parport: fix the array out-of-bounds risk (bsc#1229407). | 7.8 | 0.0023 |  |
| [CVE-2024-43825](https://patchblox.com/security/data/cve/CVE-2024-43825.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0023 |  |
| [CVE-2024-36939](https://patchblox.com/security/data/cve/CVE-2024-36939.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0023 |  |
| [CVE-2024-42117](https://patchblox.com/security/data/cve/CVE-2024-42117.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0023 |  |
| [CVE-2024-35855](https://patchblox.com/security/data/cve/CVE-2024-35855.md) | High | kernel-syms: Security update for the Linux Kernel | 7.8 | 0.0023 |  |
| [CVE-2024-42246](https://patchblox.com/security/data/cve/CVE-2024-42246.md) | High | dtb-aarch64: net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket (bsc#1228989). | 7.8 | 0.0023 |  |
| [CVE-2024-41070](https://patchblox.com/security/data/cve/CVE-2024-41070.md) | High | dtb-aarch64: KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group() (bsc#1228581). | 7.8 | 0.0023 |  |
| [CVE-2024-42313](https://patchblox.com/security/data/cve/CVE-2024-42313.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0023 |  |
| [CVE-2024-42093](https://patchblox.com/security/data/cve/CVE-2024-42093.md) | High | dtb-aarch64: net/dpaa2: Avoid explicit cpumask var allocation on stack (bsc#1228680). | 7.3 | 0.0023 |  |
| [CVE-2024-39486](https://patchblox.com/security/data/cve/CVE-2024-39486.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.0 | 0.0023 |  |
| [CVE-2024-27433](https://patchblox.com/security/data/cve/CVE-2024-27433.md) | High | dtb-aarch64: clk: mediatek: mt7622-apmixedsys: Fix an error handling path in clk_mt8135_apmixed_probe() (bsc#1224711). | 7.8 | 0.0023 |  |
| [CVE-2024-41012](https://patchblox.com/security/data/cve/CVE-2024-41012.md) | High | dtb-aarch64: filelock: Remove locks reliably when fcntl/close race is detected (bsc#1228247). | 7.8 | 0.0023 |  |
| [CVE-2024-42302](https://patchblox.com/security/data/cve/CVE-2024-42302.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0023 |  |
| [CVE-2024-42314](https://patchblox.com/security/data/cve/CVE-2024-42314.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0023 |  |
| [CVE-2024-42322](https://patchblox.com/security/data/cve/CVE-2024-42322.md) | High | dtb-aarch64: ipvs: properly dereference pe in ip_vs_add_service (bsc#1229347) | 8.0 | 0.0023 |  |
| [CVE-2024-41065](https://patchblox.com/security/data/cve/CVE-2024-41065.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0023 |  |
| [CVE-2024-40912](https://patchblox.com/security/data/cve/CVE-2024-40912.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0022 |  |
| [CVE-2024-41011](https://patchblox.com/security/data/cve/CVE-2024-41011.md) | High | kernel-default: Security update for the Linux Kernel | 7.8 | 0.0022 |  |
| [CVE-2024-42092](https://patchblox.com/security/data/cve/CVE-2024-42092.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0022 |  |
| [CVE-2024-42159](https://patchblox.com/security/data/cve/CVE-2024-42159.md) | High | dtb-aarch64: scsi: mpi3mr: fix sanitise num_phys (bsc#1228754). | 7.8 | 0.0022 |  |
| [CVE-2024-35939](https://patchblox.com/security/data/cve/CVE-2024-35939.md) | High | dma-direct: Leak pages on dma_set_decrypted() failure | 7.1 | 0.0022 |  |
| [CVE-2024-39508](https://patchblox.com/security/data/cve/CVE-2024-39508.md) | High | io_uring/io-wq: Use set_bit() and test_bit() at worker->flags | 7.0 | 0.0022 |  |
| [CVE-2024-41069](https://patchblox.com/security/data/cve/CVE-2024-41069.md) | High | dtb-aarch64: ASoC: topology: Fix route memory corruption (bsc#1228644). | 7.8 | 0.0022 |  |
| [CVE-2024-41074](https://patchblox.com/security/data/cve/CVE-2024-41074.md) | High | dtb-aarch64: cachefiles: Set object to close if ondemand_id < 0 in copen (bsc#1228643). | 7.8 | 0.0022 |  |
| [CVE-2024-41061](https://patchblox.com/security/data/cve/CVE-2024-41061.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0022 |  |
| [CVE-2024-42240](https://patchblox.com/security/data/cve/CVE-2024-42240.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0022 |  |
| [CVE-2024-43877](https://patchblox.com/security/data/cve/CVE-2024-43877.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.1 | 0.0022 |  |
| [CVE-2023-52688](https://patchblox.com/security/data/cve/CVE-2023-52688.md) | High | kernel-source-azure: Security update for the Linux Kernel | 7.8 | 0.0022 |  |
| [CVE-2024-43842](https://patchblox.com/security/data/cve/CVE-2024-43842.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0022 |  |
| [CVE-2024-43873](https://patchblox.com/security/data/cve/CVE-2024-43873.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0022 |  |
| [CVE-2024-43900](https://patchblox.com/security/data/cve/CVE-2024-43900.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0022 |  |
| [CVE-2024-42237](https://patchblox.com/security/data/cve/CVE-2024-42237.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0021 |  |
| [CVE-2024-42238](https://patchblox.com/security/data/cve/CVE-2024-42238.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0021 |  |
| [CVE-2024-41076](https://patchblox.com/security/data/cve/CVE-2024-41076.md) | High | dtb-aarch64: NFSv4: Fix memory leak in nfs4_set_security_label (bsc#1228649). | 7.8 | 0.0021 |  |
| [CVE-2024-42090](https://patchblox.com/security/data/cve/CVE-2024-42090.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0019 |  |
| [CVE-2024-42114](https://patchblox.com/security/data/cve/CVE-2024-42114.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0018 |  |
| [CVE-2024-39501](https://patchblox.com/security/data/cve/CVE-2024-39501.md) | High | linux: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | 7.8 | n/a |  |
| [CVE-2024-41071](https://patchblox.com/security/data/cve/CVE-2024-41071.md) | High | linux: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | 7.8 | n/a |  |
| [CVE-2024-42226](https://patchblox.com/security/data/cve/CVE-2024-42226.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | n/a |  |
| [CVE-2024-36929](https://patchblox.com/security/data/cve/CVE-2024-36929.md) | Routine | kernel-obs-build: net: core: reject skb_copy(_expand) for fraglist GSO skbs (bsc#1225814). | 5.5 | 0.0090 |  |
| [CVE-2024-42286](https://patchblox.com/security/data/cve/CVE-2024-42286.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0089 |  |
| [CVE-2024-41081](https://patchblox.com/security/data/cve/CVE-2024-41081.md) | Routine | dtb-aarch64: ila: block BH in ila_output() (bsc#1228617). | 5.5 | 0.0087 |  |
| [CVE-2024-42145](https://patchblox.com/security/data/cve/CVE-2024-42145.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0087 |  |
| [CVE-2024-41048](https://patchblox.com/security/data/cve/CVE-2024-41048.md) | Routine | dtb-aarch64: skmsg: Skip zero length skb in sk_msg_recvmsg (bsc#1228565). | 5.5 | 0.0082 |  |
| [CVE-2024-42232](https://patchblox.com/security/data/cve/CVE-2024-42232.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0076 |  |
| [CVE-2024-41036](https://patchblox.com/security/data/cve/CVE-2024-41036.md) | Routine | dtb-aarch64: net: ks8851: Fix deadlock with the SPI chip variant (bsc#1228496). | 5.5 | 0.0075 |  |
| [CVE-2024-36288](https://patchblox.com/security/data/cve/CVE-2024-36288.md) | Routine | kernel-default-base: Security update for the Linux Kernel | 5.5 | 0.0074 |  |
| [CVE-2024-26851](https://patchblox.com/security/data/cve/CVE-2024-26851.md) | Routine | kernel-zfcpdump: netfilter: nf_conntrack_h323: Add protection for bmp length out of range (bsc#1223074) | 5.5 | 0.0074 |  |
| [CVE-2024-40957](https://patchblox.com/security/data/cve/CVE-2024-40957.md) | Routine | kernel-64kb: seg6: fix parameter passing when calling NF_HOOK() in End.DX4 and End.DX6 behaviors (bsc#1227811). | 5.5 | 0.0073 |  |
| [CVE-2024-42247](https://patchblox.com/security/data/cve/CVE-2024-42247.md) | Routine | dtb-aarch64: wireguard: allowedips: avoid unaligned 64-bit memory accesses (bsc#1228988). | 5.5 | 0.0072 |  |
| [CVE-2023-52887](https://patchblox.com/security/data/cve/CVE-2023-52887.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0067 |  |
| [CVE-2024-42110](https://patchblox.com/security/data/cve/CVE-2024-42110.md) | Routine | net: ntb_netdev: Move ntb_netdev_rx_handler() to call netif_rx() from __netif_rx() | 5.5 | 0.0065 |  |
| [CVE-2024-41079](https://patchblox.com/security/data/cve/CVE-2024-41079.md) | Routine | nvmet: always initialize cqe.result | 5.5 | 0.0064 |  |
| [CVE-2024-36911](https://patchblox.com/security/data/cve/CVE-2024-36911.md) | Routine | hv_netvsc: Don't free decrypted memory | 5.5 | 0.0063 |  |
| [CVE-2024-40992](https://patchblox.com/security/data/cve/CVE-2024-40992.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0061 |  |
| [CVE-2024-41066](https://patchblox.com/security/data/cve/CVE-2024-41066.md) | Routine | ibmvnic: Add tx check to prevent skb leak | 6.4 | 0.0053 |  |
| [CVE-2024-43864](https://patchblox.com/security/data/cve/CVE-2024-43864.md) | Routine | dtb-aarch64: net/mlx5e: Fix CT entry update leaks of modify header context (bsc#1229496). | 5.5 | 0.0047 |  |
| [CVE-2024-40910](https://patchblox.com/security/data/cve/CVE-2024-40910.md) | Routine | kernel-azure: Security update for the Linux Kernel | 5.5 | 0.0045 |  |
| [CVE-2024-43856](https://patchblox.com/security/data/cve/CVE-2024-43856.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0042 |  |
| [CVE-2024-43872](https://patchblox.com/security/data/cve/CVE-2024-43872.md) | Routine | RDMA/hns: Fix soft lockup under heavy CEQE load | 5.5 | 0.0039 |  |
| [CVE-2024-41010](https://patchblox.com/security/data/cve/CVE-2024-41010.md) | Routine | kernel-64kb: bpf: Fix too early release of tcx_entry (bsc#1228021). | 5.5 | 0.0037 |  |
| [CVE-2024-42287](https://patchblox.com/security/data/cve/CVE-2024-42287.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 4.7 | 0.0034 |  |
| [CVE-2023-52886](https://patchblox.com/security/data/cve/CVE-2023-52886.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 6.4 | 0.0033 |  |
| [CVE-2024-42139](https://patchblox.com/security/data/cve/CVE-2024-42139.md) | Routine | ice: Fix improper extts handling | 5.5 | 0.0032 |  |
| [CVE-2024-41062](https://patchblox.com/security/data/cve/CVE-2024-41062.md) | Routine | bluetooth/l2cap: sync sock recv cb and release | 5.5 | 0.0031 |  |
| [CVE-2024-41032](https://patchblox.com/security/data/cve/CVE-2024-41032.md) | Routine | dtb-aarch64: mm: vmalloc: check if a hash-index is in cpu_possible_mask (bsc#1228460). | 5.5 | 0.0030 |  |
| [CVE-2024-39509](https://patchblox.com/security/data/cve/CVE-2024-39509.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0030 |  |
| [CVE-2024-42318](https://patchblox.com/security/data/cve/CVE-2024-42318.md) | Routine | dtb-aarch64: landlock: Do not lose track of restrictions on cred_transfer (bsc#1229351). | 5.5 | 0.0030 |  |
| [CVE-2024-40924](https://patchblox.com/security/data/cve/CVE-2024-40924.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0030 |  |
| [CVE-2024-40984](https://patchblox.com/security/data/cve/CVE-2024-40984.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0030 |  |
| [CVE-2024-42133](https://patchblox.com/security/data/cve/CVE-2024-42133.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0030 |  |
| [CVE-2024-36933](https://patchblox.com/security/data/cve/CVE-2024-36933.md) | Routine | kernel-modules: Important: kernel security update | 5.9 | 0.0030 |  |
| [CVE-2024-26809](https://patchblox.com/security/data/cve/CVE-2024-26809.md) | Routine | dtb-aarch64: netfilter: nft_set_pipapo: release elements in clone only from destroy path (bsc#1222633). | 5.5 | 0.0029 |  |
| [CVE-2024-40916](https://patchblox.com/security/data/cve/CVE-2024-40916.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0029 |  |
| [CVE-2024-40921](https://patchblox.com/security/data/cve/CVE-2024-40921.md) | Routine | dtb-aarch64: net: bridge: mst: pass vlan group directly to br_mst_vlan_set_state (bsc#1227784). | 5.5 | 0.0029 |  |
| [CVE-2024-40964](https://patchblox.com/security/data/cve/CVE-2024-40964.md) | Routine | kernel-zfcpdump: Security update for the Linux Kernel | 5.5 | 0.0029 |  |
| [CVE-2024-41025](https://patchblox.com/security/data/cve/CVE-2024-41025.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0029 |  |
| [CVE-2024-43819](https://patchblox.com/security/data/cve/CVE-2024-43819.md) | Routine | kvm: s390: Reject memory region operations for ucontrol VMs | 5.5 | 0.0029 |  |
| [CVE-2024-42311](https://patchblox.com/security/data/cve/CVE-2024-42311.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0028 |  |
| [CVE-2024-41004](https://patchblox.com/security/data/cve/CVE-2024-41004.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0028 |  |
| [CVE-2024-26889](https://patchblox.com/security/data/cve/CVE-2024-26889.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0028 |  |
| [CVE-2024-42070](https://patchblox.com/security/data/cve/CVE-2024-42070.md) | Routine | dtb-aarch64: netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers (bsc#1228470). | 5.5 | 0.0028 |  |
| [CVE-2024-39505](https://patchblox.com/security/data/cve/CVE-2024-39505.md) | Routine | kernel-default-base: Security update for the Linux Kernel | 5.5 | 0.0028 |  |
| [CVE-2024-40990](https://patchblox.com/security/data/cve/CVE-2024-40990.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0028 |  |
| [CVE-2024-40987](https://patchblox.com/security/data/cve/CVE-2024-40987.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0028 |  |
| [CVE-2024-40942](https://patchblox.com/security/data/cve/CVE-2024-40942.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 6.1 | 0.0028 |  |
| [CVE-2024-36286](https://patchblox.com/security/data/cve/CVE-2024-36286.md) | Routine | kernel-core: Important: kernel security update | 5.5 | 0.0028 |  |
| [CVE-2024-39497](https://patchblox.com/security/data/cve/CVE-2024-39497.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0028 |  |
| [CVE-2024-41037](https://patchblox.com/security/data/cve/CVE-2024-41037.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0027 |  |
| [CVE-2024-41002](https://patchblox.com/security/data/cve/CVE-2024-41002.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0027 |  |
| [CVE-2024-41009](https://patchblox.com/security/data/cve/CVE-2024-41009.md) | Routine | dtb-aarch64: bpf: Fix overrunning reservations in ringbuf (bsc#1228020). | 5.5 | 0.0027 |  |
| [CVE-2024-41001](https://patchblox.com/security/data/cve/CVE-2024-41001.md) | Routine | kernel-livepatch-SLE15-SP6_Update_4: Security update for the Linux Kernel | 5.5 | 0.0027 |  |
| [CVE-2024-43824](https://patchblox.com/security/data/cve/CVE-2024-43824.md) | Routine | PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init() | 5.5 | 0.0027 |  |
| [CVE-2024-40905](https://patchblox.com/security/data/cve/CVE-2024-40905.md) | Routine | dtb-aarch64: ipv6: fix possible race in __fib6_drop_pcpu_from() (bsc#1227761) | 4.7 | 0.0027 |  |
| [CVE-2024-42079](https://patchblox.com/security/data/cve/CVE-2024-42079.md) | Routine | dtb-aarch64: gfs2: Fix NULL pointer dereference in gfs2_log_flush (bsc#1228672). | 5.5 | 0.0027 |  |
| [CVE-2024-42106](https://patchblox.com/security/data/cve/CVE-2024-42106.md) | Routine | dtb-aarch64: inet_diag: Initialize pad field in struct inet_diag_req_v2 (bsc#1228493). | 5.5 | 0.0027 |  |
| [CVE-2024-42259](https://patchblox.com/security/data/cve/CVE-2024-42259.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0027 |  |
| [CVE-2024-43884](https://patchblox.com/security/data/cve/CVE-2024-43884.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.7 | 0.0026 |  |
| [CVE-2024-41098](https://patchblox.com/security/data/cve/CVE-2024-41098.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0026 |  |
| [CVE-2024-36270](https://patchblox.com/security/data/cve/CVE-2024-36270.md) | Routine | kernel-devel: Important: kernel security update | 5.5 | 0.0026 |  |
| [CVE-2024-42101](https://patchblox.com/security/data/cve/CVE-2024-42101.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0026 |  |
| [CVE-2024-40934](https://patchblox.com/security/data/cve/CVE-2024-40934.md) | Routine | kernel-syms: Security update for the Linux Kernel | 5.5 | 0.0026 |  |
| [CVE-2024-42115](https://patchblox.com/security/data/cve/CVE-2024-42115.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0026 |  |
| [CVE-2024-42155](https://patchblox.com/security/data/cve/CVE-2024-42155.md) | Routine | s390/pkey: Wipe copies of protected- and secure-keys | 1.9 | 0.0026 |  |
| [CVE-2024-31076](https://patchblox.com/security/data/cve/CVE-2024-31076.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0026 |  |
| [CVE-2024-40932](https://patchblox.com/security/data/cve/CVE-2024-40932.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0026 |  |
| [CVE-2024-27079](https://patchblox.com/security/data/cve/CVE-2024-27079.md) | Routine | iommu/vt-d: Fix NULL domain on device release | 5.5 | 0.0026 |  |
| [CVE-2024-40945](https://patchblox.com/security/data/cve/CVE-2024-40945.md) | Routine | kernel-syms-azure: Security update for the Linux Kernel | 5.5 | 0.0026 |  |
| [CVE-2024-43893](https://patchblox.com/security/data/cve/CVE-2024-43893.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0026 |  |
| [CVE-2024-26920](https://patchblox.com/security/data/cve/CVE-2024-26920.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0026 |  |
| [CVE-2024-42122](https://patchblox.com/security/data/cve/CVE-2024-42122.md) | Routine | dtb-aarch64: drm/amd/display: Add NULL pointer check for kzalloc (bsc#1228591). | 5.5 | 0.0026 |  |
| [CVE-2024-36489](https://patchblox.com/security/data/cve/CVE-2024-36489.md) | Routine | kernel-source-azure: Fix missing memory barrier in tls_init (bsc#1226874) | 6.1 | 0.0025 |  |
| [CVE-2024-26812](https://patchblox.com/security/data/cve/CVE-2024-26812.md) | Routine | dtb-aarch64: kABI: vfio: struct virqfd kABI workaround (bsc#1222808). | 5.5 | 0.0025 |  |
| [CVE-2024-35897](https://patchblox.com/security/data/cve/CVE-2024-35897.md) | Routine | kernel-livepatch-SLE15-SP6_Update_4: netfilter: nf_tables: discard table flag update with pending basechain deletion (bsc#1224510). | 5.5 | 0.0025 |  |
| [CVE-2024-38548](https://patchblox.com/security/data/cve/CVE-2024-38548.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0025 |  |
| [CVE-2024-40936](https://patchblox.com/security/data/cve/CVE-2024-40936.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0025 |  |
| [CVE-2024-40938](https://patchblox.com/security/data/cve/CVE-2024-40938.md) | Routine | dtb-aarch64: landlock: fix d_parent walk (bsc#1227840). | 5.5 | 0.0025 |  |
| [CVE-2024-42082](https://patchblox.com/security/data/cve/CVE-2024-42082.md) | Routine | dtb-aarch64: xdp: Remove WARN() from __xdp_reg_mem_model() (bsc#1228482). | 5.5 | 0.0025 |  |
| [CVE-2024-42109](https://patchblox.com/security/data/cve/CVE-2024-42109.md) | Routine | dtb-aarch64: netfilter: nf_tables: unconditionally flush pending work before notifier (bsc#1228505). | 5.5 | 0.0025 |  |
| [CVE-2024-44931](https://patchblox.com/security/data/cve/CVE-2024-44931.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0025 |  |
| [CVE-2024-44939](https://patchblox.com/security/data/cve/CVE-2024-44939.md) | Routine | jfs: fix null ptr deref in dtInsertEntry | 5.5 | 0.0025 |  |
| [CVE-2024-41015](https://patchblox.com/security/data/cve/CVE-2024-41015.md) | Routine | dtb-aarch64: ocfs2: add bounds checking to ocfs2_check_dir_entry() (bsc#1228409). | 5.5 | 0.0025 |  |
| [CVE-2024-41016](https://patchblox.com/security/data/cve/CVE-2024-41016.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0025 |  |
| [CVE-2024-43834](https://patchblox.com/security/data/cve/CVE-2024-43834.md) | Routine | dtb-aarch64: xdp: fix invalid wait context of page_pool_destroy() (bsc#1229314) | 5.5 | 0.0025 |  |
| [CVE-2024-43892](https://patchblox.com/security/data/cve/CVE-2024-43892.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 4.7 | 0.0025 |  |
| [CVE-2024-42276](https://patchblox.com/security/data/cve/CVE-2024-42276.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0025 |  |
| [CVE-2024-42288](https://patchblox.com/security/data/cve/CVE-2024-42288.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2024-40930](https://patchblox.com/security/data/cve/CVE-2024-40930.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.7 | 0.0024 |  |
| [CVE-2024-41068](https://patchblox.com/security/data/cve/CVE-2024-41068.md) | Routine | dtb-aarch64: s390/sclp: Fix sclp_init() cleanup on failure (bsc#1228579). | 5.5 | 0.0024 |  |
| [CVE-2024-42283](https://patchblox.com/security/data/cve/CVE-2024-42283.md) | Routine | dtb-aarch64: net: nexthop: Initialize all fields in dumped nexthops (bsc#1229383) | 5.5 | 0.0024 |  |
| [CVE-2024-42289](https://patchblox.com/security/data/cve/CVE-2024-42289.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2024-26677](https://patchblox.com/security/data/cve/CVE-2024-26677.md) | Routine | dtb-aarch64: blacklist.conf: Add e7870cf13d20 ('rxrpc: Fix delayed ACKs to not set the reference serial number') (bsc#1222387) | 5.5 | 0.0024 |  |
| [CVE-2024-36909](https://patchblox.com/security/data/cve/CVE-2024-36909.md) | Routine | Drivers: hv: vmbus: Don't free ring buffers that couldn't be re-encrypted | 5.5 | 0.0024 |  |
| [CVE-2024-42236](https://patchblox.com/security/data/cve/CVE-2024-42236.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2024-27437](https://patchblox.com/security/data/cve/CVE-2024-27437.md) | Routine | kernel-64kb: vfio/pci: Disable auto-enable of exclusive INTx IRQ (bsc#1222625). | 5.5 | 0.0024 |  |
| [CVE-2024-41022](https://patchblox.com/security/data/cve/CVE-2024-41022.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2024-27403](https://patchblox.com/security/data/cve/CVE-2024-27403.md) | Routine | dtb-aarch64: kabi: restore const specifier in flow_offload_route_init() (bsc#1224415). | 5.5 | 0.0024 |  |
| [CVE-2024-36881](https://patchblox.com/security/data/cve/CVE-2024-36881.md) | Routine | dtb-aarch64: mm/userfaultfd: Fix reset ptes when close() for wr-protected (bsc#1225718). | 5.5 | 0.0024 |  |
| [CVE-2024-40944](https://patchblox.com/security/data/cve/CVE-2024-40944.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2024-40962](https://patchblox.com/security/data/cve/CVE-2024-40962.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2024-42113](https://patchblox.com/security/data/cve/CVE-2024-42113.md) | Routine | dtb-aarch64: net: txgbe: initialize num_q_vectors for MSI/INTx interrupts (bsc#1228568). | 5.5 | 0.0024 |  |
| [CVE-2024-42127](https://patchblox.com/security/data/cve/CVE-2024-42127.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2024-43817](https://patchblox.com/security/data/cve/CVE-2024-43817.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2024-40926](https://patchblox.com/security/data/cve/CVE-2024-40926.md) | Routine | kernel-zfcpdump: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2024-39488](https://patchblox.com/security/data/cve/CVE-2024-39488.md) | Routine | kernel-docs: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2024-39489](https://patchblox.com/security/data/cve/CVE-2024-39489.md) | Routine | dtb-aarch64: ipv6: sr: fix memleak in seg6_hmac_init_algo (bsc#1227623) | 5.5 | 0.0024 |  |
| [CVE-2024-39493](https://patchblox.com/security/data/cve/CVE-2024-39493.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2024-42281](https://patchblox.com/security/data/cve/CVE-2024-42281.md) | Routine | dtb-aarch64: bpf: Fix a segment issue when downgrading gso_size (bsc#1229386). | 5.5 | 0.0024 |  |
| [CVE-2024-41089](https://patchblox.com/security/data/cve/CVE-2024-41089.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2024-41095](https://patchblox.com/security/data/cve/CVE-2024-41095.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2024-43829](https://patchblox.com/security/data/cve/CVE-2024-43829.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2024-43889](https://patchblox.com/security/data/cve/CVE-2024-43889.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2024-42224](https://patchblox.com/security/data/cve/CVE-2024-42224.md) | Routine | dtb-aarch64: net: dsa: mv88e6xxx: Correct check for empty list (bsc#1228723). | 6.1 | 0.0024 |  |
| [CVE-2024-42279](https://patchblox.com/security/data/cve/CVE-2024-42279.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2024-42295](https://patchblox.com/security/data/cve/CVE-2024-42295.md) | Routine | dtb-aarch64: nilfs2: handle inconsistent state in nilfs_btnode_create_block() (bsc#1229370). | 5.5 | 0.0023 |  |
| [CVE-2024-43854](https://patchblox.com/security/data/cve/CVE-2024-43854.md) | Routine | dtb-aarch64: block: initialize integrity buffer to zero before writing it to media (bsc#1229345) | 5.5 | 0.0023 |  |
| [CVE-2024-26835](https://patchblox.com/security/data/cve/CVE-2024-26835.md) | Routine | dtb-aarch64: netfilter: nf_tables: set dormant flag on hook register failure (bsc#1222967). | 5.5 | 0.0023 |  |
| [CVE-2024-41072](https://patchblox.com/security/data/cve/CVE-2024-41072.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2024-42069](https://patchblox.com/security/data/cve/CVE-2024-42069.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2024-42089](https://patchblox.com/security/data/cve/CVE-2024-42089.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2024-42137](https://patchblox.com/security/data/cve/CVE-2024-42137.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2024-42223](https://patchblox.com/security/data/cve/CVE-2024-42223.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2024-27011](https://patchblox.com/security/data/cve/CVE-2024-27011.md) | Routine | kernel-obs-build: netfilter: nf_tables: fix memleak in map from abort path (bsc#1223803). | 5.5 | 0.0023 |  |
| [CVE-2023-52889](https://patchblox.com/security/data/cve/CVE-2023-52889.md) | Routine | dtb-aarch64: apparmor: Fix null pointer deref when receiving skb during sock creation (bsc#1229287). | 5.5 | 0.0023 |  |
| [CVE-2024-42097](https://patchblox.com/security/data/cve/CVE-2024-42097.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2024-42290](https://patchblox.com/security/data/cve/CVE-2024-42290.md) | Routine | dtb-aarch64: irqchip/imx-irqsteer: Handle runtime power management correctly (bsc#1229379). | 5.5 | 0.0023 |  |
| [CVE-2024-43840](https://patchblox.com/security/data/cve/CVE-2024-43840.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2024-43846](https://patchblox.com/security/data/cve/CVE-2024-43846.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 6.1 | 0.0023 |  |
| [CVE-2024-42080](https://patchblox.com/security/data/cve/CVE-2024-42080.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2024-43894](https://patchblox.com/security/data/cve/CVE-2024-43894.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2024-40981](https://patchblox.com/security/data/cve/CVE-2024-40981.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2024-42244](https://patchblox.com/security/data/cve/CVE-2024-42244.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2024-39484](https://patchblox.com/security/data/cve/CVE-2024-39484.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2024-42077](https://patchblox.com/security/data/cve/CVE-2024-42077.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2024-42087](https://patchblox.com/security/data/cve/CVE-2024-42087.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2024-42126](https://patchblox.com/security/data/cve/CVE-2024-42126.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2024-42309](https://patchblox.com/security/data/cve/CVE-2024-42309.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2024-42310](https://patchblox.com/security/data/cve/CVE-2024-42310.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2024-42229](https://patchblox.com/security/data/cve/CVE-2024-42229.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 4.1 | 0.0023 |  |
| [CVE-2024-41084](https://patchblox.com/security/data/cve/CVE-2024-41084.md) | Routine | dtb-aarch64: cxl/region: Avoid null pointer dereference in region lookup (bsc#1228472). | 5.5 | 0.0023 |  |
| [CVE-2024-41088](https://patchblox.com/security/data/cve/CVE-2024-41088.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2024-41094](https://patchblox.com/security/data/cve/CVE-2024-41094.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2024-43826](https://patchblox.com/security/data/cve/CVE-2024-43826.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2024-43861](https://patchblox.com/security/data/cve/CVE-2024-43861.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2024-43880](https://patchblox.com/security/data/cve/CVE-2024-43880.md) | Routine | dtb-aarch64: kabi: lib: objagg: Put back removed metod in struct objagg_ops (bsc#1229481). | 5.5 | 0.0023 |  |
| [CVE-2024-35913](https://patchblox.com/security/data/cve/CVE-2024-35913.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2024-42269](https://patchblox.com/security/data/cve/CVE-2024-42269.md) | Routine | dtb-aarch64: netfilter: iptables: Fix potential null-ptr-deref in ip6table_nat_table_init() (bsc#1229402). | 5.5 | 0.0023 |  |
| [CVE-2024-42270](https://patchblox.com/security/data/cve/CVE-2024-42270.md) | Routine | dtb-aarch64: netfilter: iptables: Fix null-ptr-deref in iptable_nat_table_init() (bsc#1229404). | 5.5 | 0.0023 |  |
| [CVE-2024-42277](https://patchblox.com/security/data/cve/CVE-2024-42277.md) | Routine | dtb-aarch64: iommu: sprd: Avoid NULL deref in sprd_iommu_hw_en (bsc#1229409). | 5.5 | 0.0023 |  |
| [CVE-2024-42291](https://patchblox.com/security/data/cve/CVE-2024-42291.md) | Routine | dtb-aarch64: ice: Add a per-VF limit on number of FDIR filters (bsc#1229374). | 5.5 | 0.0023 |  |
| [CVE-2024-43853](https://patchblox.com/security/data/cve/CVE-2024-43853.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2024-44938](https://patchblox.com/security/data/cve/CVE-2024-44938.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2024-43911](https://patchblox.com/security/data/cve/CVE-2024-43911.md) | Routine | dtb-aarch64: wifi: mac80211: fix NULL dereference at band check in starting tx ba session (bsc#1229827). | 5.7 | 0.0023 |  |
| [CVE-2024-38563](https://patchblox.com/security/data/cve/CVE-2024-38563.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2024-39483](https://patchblox.com/security/data/cve/CVE-2024-39483.md) | Routine | kernel-livepatch-SLE15-SP6-RT_Update_2: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2024-41093](https://patchblox.com/security/data/cve/CVE-2024-41093.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2024-42076](https://patchblox.com/security/data/cve/CVE-2024-42076.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2024-42141](https://patchblox.com/security/data/cve/CVE-2024-42141.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2024-42142](https://patchblox.com/security/data/cve/CVE-2024-42142.md) | Routine | dtb-aarch64: net/mlx5: E-switch, Create ingress ACL when needed (bsc#1228491). | 5.5 | 0.0023 |  |
| [CVE-2024-42278](https://patchblox.com/security/data/cve/CVE-2024-42278.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2024-42298](https://patchblox.com/security/data/cve/CVE-2024-42298.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2024-43818](https://patchblox.com/security/data/cve/CVE-2024-43818.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2024-43821](https://patchblox.com/security/data/cve/CVE-2024-43821.md) | Routine | dtb-aarch64: scsi: lpfc: Fix a possible null pointer dereference (bsc#1229315). | 5.5 | 0.0023 |  |
| [CVE-2024-43823](https://patchblox.com/security/data/cve/CVE-2024-43823.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2024-43831](https://patchblox.com/security/data/cve/CVE-2024-43831.md) | Routine | dtb-aarch64: media: mediatek: vcodec: Handle invalid decoder vsi (bsc#1229309). | 5.5 | 0.0023 |  |
| [CVE-2024-43833](https://patchblox.com/security/data/cve/CVE-2024-43833.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2024-42074](https://patchblox.com/security/data/cve/CVE-2024-42074.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0022 |  |
| [CVE-2024-26849](https://patchblox.com/security/data/cve/CVE-2024-26849.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0022 |  |
| [CVE-2024-35902](https://patchblox.com/security/data/cve/CVE-2024-35902.md) | Routine | kernel-syms-azure: Security update for the Linux Kernel | 5.5 | 0.0022 |  |
| [CVE-2024-41078](https://patchblox.com/security/data/cve/CVE-2024-41078.md) | Routine | dtb-aarch64: btrfs: qgroup: fix quota root leak after quota disable failure (bsc#1228655). | 5.5 | 0.0022 |  |
| [CVE-2024-43860](https://patchblox.com/security/data/cve/CVE-2024-43860.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0022 |  |
| [CVE-2024-26590](https://patchblox.com/security/data/cve/CVE-2024-26590.md) | Routine | kernel-syms: erofs: fix inconsistent per-file compression format (bsc#1220252). | 5.5 | 0.0022 |  |
| [CVE-2024-40967](https://patchblox.com/security/data/cve/CVE-2024-40967.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0022 |  |
| [CVE-2024-42144](https://patchblox.com/security/data/cve/CVE-2024-42144.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0022 |  |
| [CVE-2024-39500](https://patchblox.com/security/data/cve/CVE-2024-39500.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0022 |  |
| [CVE-2024-42064](https://patchblox.com/security/data/cve/CVE-2024-42064.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0022 |  |
| [CVE-2024-43897](https://patchblox.com/security/data/cve/CVE-2024-43897.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0022 |  |
| [CVE-2024-42161](https://patchblox.com/security/data/cve/CVE-2024-42161.md) | Routine | dtb-aarch64: bpf: avoid uninitialized value in BPF_CORE_READ_BITFIELD (bsc#1228756). | 6.3 | 0.0022 |  |
| [CVE-2024-41075](https://patchblox.com/security/data/cve/CVE-2024-41075.md) | Routine | dtb-aarch64: cachefiles: add consistency check for copen/cread (bsc#1228646). | 5.5 | 0.0022 |  |
| [CVE-2024-42073](https://patchblox.com/security/data/cve/CVE-2024-42073.md) | Routine | dtb-aarch64: mlxsw: spectrum_buffers: Fix memory corruptions on Spectrum-4 systems (bsc#1228457). | 5.5 | 0.0022 |  |
| [CVE-2024-43879](https://patchblox.com/security/data/cve/CVE-2024-43879.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0022 |  |
| [CVE-2024-38662](https://patchblox.com/security/data/cve/CVE-2024-38662.md) | Routine | dtb-aarch64: selftests/bpf: Cover verifier checks for mutating sockmap/sockhash (bsc#1226885). | 4.7 | 0.0022 |  |
| [CVE-2024-42157](https://patchblox.com/security/data/cve/CVE-2024-42157.md) | Routine | dtb-aarch64: s390/pkey: Wipe sensitive data on failure (bsc#1228727). | 4.1 | 0.0022 |  |
| [CVE-2024-40976](https://patchblox.com/security/data/cve/CVE-2024-40976.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0022 |  |
| [CVE-2024-43908](https://patchblox.com/security/data/cve/CVE-2024-43908.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0022 |  |
| [CVE-2024-42312](https://patchblox.com/security/data/cve/CVE-2024-42312.md) | Routine | dtb-aarch64: sysctl: always initialize i_uid/i_gid (bsc#1229357) | 5.5 | 0.0022 |  |
| [CVE-2024-43867](https://patchblox.com/security/data/cve/CVE-2024-43867.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0022 |  |
| [CVE-2024-42107](https://patchblox.com/security/data/cve/CVE-2024-42107.md) | Routine | ice: Don't process extts if PTP is disabled | 4.7 | 0.0022 |  |
| [CVE-2024-43902](https://patchblox.com/security/data/cve/CVE-2024-43902.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2024-43905](https://patchblox.com/security/data/cve/CVE-2024-43905.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2024-43907](https://patchblox.com/security/data/cve/CVE-2024-43907.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2024-43909](https://patchblox.com/security/data/cve/CVE-2024-43909.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2024-42158](https://patchblox.com/security/data/cve/CVE-2024-42158.md) | Routine | s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings | 4.1 | 0.0021 |  |
| [CVE-2024-40922](https://patchblox.com/security/data/cve/CVE-2024-40922.md) | Routine | kernel-source-azure: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2024-43875](https://patchblox.com/security/data/cve/CVE-2024-43875.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2024-42156](https://patchblox.com/security/data/cve/CVE-2024-42156.md) | Routine | dtb-aarch64: s390/pkey: Wipe copies of clear-key structures on failure (bsc#1228722). | 4.1 | 0.0021 |  |
| [CVE-2024-42241](https://patchblox.com/security/data/cve/CVE-2024-42241.md) | Routine | dtb-aarch64: mm/shmem: disable PMD-sized page cache if needed (bsc#1228986). | 5.5 | 0.0021 |  |
| [CVE-2024-43841](https://patchblox.com/security/data/cve/CVE-2024-43841.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2024-43851](https://patchblox.com/security/data/cve/CVE-2024-43851.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2024-43899](https://patchblox.com/security/data/cve/CVE-2024-43899.md) | Routine | dtb-aarch64: drm/amd/display: Fix null pointer deref in dcn20_resource.c (bsc#1229754). | 5.5 | 0.0021 |  |
| [CVE-2024-43912](https://patchblox.com/security/data/cve/CVE-2024-43912.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2024-39491](https://patchblox.com/security/data/cve/CVE-2024-39491.md) | Routine | kernel-source: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2024-42095](https://patchblox.com/security/data/cve/CVE-2024-42095.md) | Routine | dtb-aarch64: serial: 8250_omap: Fix Errata i2310 with RX FIFO level check (bsc#1228446). | 5.5 | 0.0021 |  |
| [CVE-2024-42098](https://patchblox.com/security/data/cve/CVE-2024-42098.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2024-42303](https://patchblox.com/security/data/cve/CVE-2024-42303.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2024-42316](https://patchblox.com/security/data/cve/CVE-2024-42316.md) | Routine | dtb-aarch64: mm/mglru: fix div-by-zero in vmpressure_calc_level() (bsc#1229353). | 5.5 | 0.0021 |  |
| [CVE-2024-42320](https://patchblox.com/security/data/cve/CVE-2024-42320.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2024-43837](https://patchblox.com/security/data/cve/CVE-2024-43837.md) | Routine | dtb-aarch64: bpf: Fix updating attached freplace prog in prog_array map (bsc#1229297). | 5.5 | 0.0021 |  |
| [CVE-2024-43850](https://patchblox.com/security/data/cve/CVE-2024-43850.md) | Routine | dtb-aarch64: soc: qcom: icc-bwmon: Fix refcount imbalance seen during bwmon_remove (bsc#1229316). | 5.5 | 0.0021 |  |
| [CVE-2024-43876](https://patchblox.com/security/data/cve/CVE-2024-43876.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2024-43906](https://patchblox.com/security/data/cve/CVE-2024-43906.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2024-26637](https://patchblox.com/security/data/cve/CVE-2024-26637.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | n/a | 0.0021 |  |
| [CVE-2024-42319](https://patchblox.com/security/data/cve/CVE-2024-42319.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2024-43855](https://patchblox.com/security/data/cve/CVE-2024-43855.md) | Routine | dtb-aarch64: md: fix deadlock between mddev_suspend and flush bio (bsc#1229342). | 5.5 | 0.0021 |  |
| [CVE-2024-42125](https://patchblox.com/security/data/cve/CVE-2024-42125.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2024-41080](https://patchblox.com/security/data/cve/CVE-2024-41080.md) | Routine | dtb-aarch64: io_uring: fix possible deadlock in io_register_iowq_max_workers() (bsc#1228616). | 5.5 | 0.0020 |  |
| [CVE-2024-43816](https://patchblox.com/security/data/cve/CVE-2024-43816.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 6.0 | 0.0020 |  |
| [CVE-2024-42230](https://patchblox.com/security/data/cve/CVE-2024-42230.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 4.4 | 0.0020 |  |
| [CVE-2024-40943](https://patchblox.com/security/data/cve/CVE-2024-40943.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 4.7 | 0.0020 |  |
| [CVE-2024-41020](https://patchblox.com/security/data/cve/CVE-2024-41020.md) | Routine | dtb-aarch64: filelock: Fix fcntl/close race recovery compat path (bsc#1228427). | 6.7 | 0.0020 |  |
| [CVE-2024-26682](https://patchblox.com/security/data/cve/CVE-2024-26682.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0019 |  |
| [CVE-2024-26683](https://patchblox.com/security/data/cve/CVE-2024-26683.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0019 |  |
| [CVE-2024-42227](https://patchblox.com/security/data/cve/CVE-2024-42227.md) | Routine | drm/amd/display: Fix overlapping copy within dml_core_mode_programming | 4.7 | 0.0019 |  |
| [CVE-2024-26631](https://patchblox.com/security/data/cve/CVE-2024-26631.md) | Routine | dtb-aarch64: ipv6: mcast: fix data-race in ipv6_mc_down / mld_ifc_work (bsc#1221630). | 4.7 | 0.0019 |  |
| [CVE-2024-26691](https://patchblox.com/security/data/cve/CVE-2024-26691.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0018 |  |
| [CVE-2024-41063](https://patchblox.com/security/data/cve/CVE-2024-41063.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0018 |  |
| [CVE-2024-42153](https://patchblox.com/security/data/cve/CVE-2024-42153.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0018 |  |
| [CVE-2024-43874](https://patchblox.com/security/data/cve/CVE-2024-43874.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0018 |  |
| [CVE-2024-38609](https://patchblox.com/security/data/cve/CVE-2024-38609.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | n/a | 0.0018 |  |
| [CVE-2024-39476](https://patchblox.com/security/data/cve/CVE-2024-39476.md) | Routine | kernel-devel: RHSA-2024:5101: kernel security update (Important) | 5.5 | 0.0018 |  |
| [CVE-2023-52668](https://patchblox.com/security/data/cve/CVE-2023-52668.md) | Routine | kernel-source-azure: Security update for the Linux Kernel | 5.5 | 0.0018 |  |
| [CVE-2024-27010](https://patchblox.com/security/data/cve/CVE-2024-27010.md) | Routine | net/sched: Fix mirred deadlock on device recursion | 5.5 | 0.0018 |  |
| [CVE-2024-42085](https://patchblox.com/security/data/cve/CVE-2024-42085.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0018 |  |
| [CVE-2024-42253](https://patchblox.com/security/data/cve/CVE-2024-42253.md) | Routine | gpio: pca953x: fix pca953x_irq_bus_sync_unlock race | 4.7 | 0.0017 |  |
| [CVE-2024-42250](https://patchblox.com/security/data/cve/CVE-2024-42250.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0017 |  |
| [CVE-2024-42268](https://patchblox.com/security/data/cve/CVE-2024-42268.md) | Routine | dtb-aarch64: net/mlx5: Fix missing lock on sync reset reload (bsc#1229391). | 5.5 | 0.0017 |  |
| [CVE-2024-42274](https://patchblox.com/security/data/cve/CVE-2024-42274.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0017 |  |
| [CVE-2024-42315](https://patchblox.com/security/data/cve/CVE-2024-42315.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0017 |  |
| [CVE-2024-26837](https://patchblox.com/security/data/cve/CVE-2024-26837.md) | Routine | dtb-aarch64: net: bridge: switchdev: race between creation of new group memberships and generation of the list of MDB events to re... | 5.5 | 0.0017 |  |
| [CVE-2024-42239](https://patchblox.com/security/data/cve/CVE-2024-42239.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0017 |  |
| [CVE-2024-42245](https://patchblox.com/security/data/cve/CVE-2024-42245.md) | Routine | dtb-aarch64: Revert 'sched/fair: Make sure to try to detach at least one movable task' (bsc#1228978). | 5.5 | 0.0017 |  |
| [CVE-2024-43863](https://patchblox.com/security/data/cve/CVE-2024-43863.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0017 |  |
| [CVE-2024-43849](https://patchblox.com/security/data/cve/CVE-2024-43849.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0017 |  |
| [CVE-2024-43866](https://patchblox.com/security/data/cve/CVE-2024-43866.md) | Routine | dtb-aarch64: net/mlx5: Always drain health in shutdown callback (bsc#1229495). | 4.7 | 0.0016 |  |
| [CVE-2024-36970](https://patchblox.com/security/data/cve/CVE-2024-36970.md) | Routine | kernel-64kb: Security update for the Linux Kernel | n/a | 0.0014 |  |
| [CVE-2024-42130](https://patchblox.com/security/data/cve/CVE-2024-42130.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.6 | n/a |  |
| [CVE-2024-36907](https://patchblox.com/security/data/cve/CVE-2024-36907.md) | Routine | linux: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | 5.5 | n/a |  |
| [CVE-2024-40982](https://patchblox.com/security/data/cve/CVE-2024-40982.md) | Routine | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | 5.5 | n/a |  |
| [CVE-2024-42308](https://patchblox.com/security/data/cve/CVE-2024-42308.md) | Routine | linux: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | 5.5 | n/a |  |
| [CVE-2024-43885](https://patchblox.com/security/data/cve/CVE-2024-43885.md) | Routine | linux: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | 5.5 | n/a |  |
| [CVE-2024-43895](https://patchblox.com/security/data/cve/CVE-2024-43895.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | n/a |  |
| [CVE-2024-43903](https://patchblox.com/security/data/cve/CVE-2024-43903.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  drm/amd/display: Add NULL check for 'afb' before... | 5.5 | n/a |  |
| [CVE-2024-42143](https://patchblox.com/security/data/cve/CVE-2024-42143.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.1 | n/a |  |
| [CVE-2024-41024](https://patchblox.com/security/data/cve/CVE-2024-41024.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  misc: fastrpc: Restrict untrusted app to attach... | n/a | n/a |  |

---

Data as of 2026-11-11T19:49:26Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.