# SUSE-SU-2024:3553-1: Security update for 4 packages SUSE-SU-2024:3553-1, released October 8, 2024, fixes 146 CVEs across 4 products. None of them is reported as exploited. Patch Radar priority: High. - Web page: https://patchblox.com/security/fix/linux/suse-su-2024-3553-1 - Platform: Linux - Released: Oct 8, 2024 - Priority: High (Closes CVE-2024-44986, high severity) - CVEs: 146, exploited: 0, on CISA KEV: 0 - Vendor advisory: https://osv.dev/vulnerability/SUSE-SU-2024:3553-1 ## Applies to | Product | Release | Fixed in | |---|---|---| | [kernel-coco](https://patchblox.com/security/data/product/linux/kernel-coco.md) | sles 15.6 | 6.4.0-15061.6.coco15sp6.1 | | [kernel-coco_debug](https://patchblox.com/security/data/product/linux/kernel-coco-debug.md) | sles 15.6 | 6.4.0-15061.6.coco15sp6.1 | | [kernel-source-coco](https://patchblox.com/security/data/product/linux/kernel-source-coco.md) | sles 15.6 | 6.4.0-15061.6.coco15sp6.1 | | [kernel-syms-coco](https://patchblox.com/security/data/product/linux/kernel-syms-coco.md) | sles 15.6 | 6.4.0-15061.6.coco15sp6.1 | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2024-44986](https://patchblox.com/security/data/cve/CVE-2024-44986.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0072 | | | [CVE-2024-44970](https://patchblox.com/security/data/cve/CVE-2024-44970.md) | High | net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink | 7.8 | 0.0057 | | | [CVE-2024-44988](https://patchblox.com/security/data/cve/CVE-2024-44988.md) | High | dtb-aarch64: net: dsa: mv88e6xxx: Fix out-of-bound access (bsc#1230192). | 7.1 | 0.0036 | | | [CVE-2024-46744](https://patchblox.com/security/data/cve/CVE-2024-46744.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0030 | | | [CVE-2024-46673](https://patchblox.com/security/data/cve/CVE-2024-46673.md) | High | dtb-aarch64: scsi: aacraid: Fix double-free on probe failure (bsc#1230506). | 7.8 | 0.0030 | | | [CVE-2024-46743](https://patchblox.com/security/data/cve/CVE-2024-46743.md) | High | dtb-aarch64: of/irq: Prevent device address out-of-bounds read in interrupt map walk (bsc#1230756). | 7.1 | 0.0030 | | | [CVE-2024-46759](https://patchblox.com/security/data/cve/CVE-2024-46759.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0028 | | | [CVE-2024-38538](https://patchblox.com/security/data/cve/CVE-2024-38538.md) | High | dtb-aarch64: net: bridge: xmit: make sure we have at least eth header len bytes (bsc#1226606). | 7.1 | 0.0028 | | | [CVE-2024-46674](https://patchblox.com/security/data/cve/CVE-2024-46674.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0028 | | | [CVE-2024-46747](https://patchblox.com/security/data/cve/CVE-2024-46747.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.1 | 0.0028 | | | [CVE-2024-46738](https://patchblox.com/security/data/cve/CVE-2024-46738.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0028 | | | [CVE-2024-46774](https://patchblox.com/security/data/cve/CVE-2024-46774.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.1 | 0.0027 | | | [CVE-2024-26759](https://patchblox.com/security/data/cve/CVE-2024-26759.md) | High | mm/swap: fix race when skipping swapcache | 7.0 | 0.0026 | | | [CVE-2024-44999](https://patchblox.com/security/data/cve/CVE-2024-44999.md) | High | dtb-aarch64: gtp: pull network headers in gtp_dev_xmit() (bsc#1230233). | 7.1 | 0.0026 | | | [CVE-2024-42154](https://patchblox.com/security/data/cve/CVE-2024-42154.md) | High | dtb-aarch64: tcp_metrics: validate source addr length (bsc#1228507). | 7.8 | 0.0026 | | | [CVE-2024-44987](https://patchblox.com/security/data/cve/CVE-2024-44987.md) | High | dtb-aarch64: ipv6: prevent UAF in ip6_send_skb() (bsc#1230185). | 7.8 | 0.0026 | | | [CVE-2024-44977](https://patchblox.com/security/data/cve/CVE-2024-44977.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0025 | | | [CVE-2024-46689](https://patchblox.com/security/data/cve/CVE-2024-46689.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0025 | | | [CVE-2024-46722](https://patchblox.com/security/data/cve/CVE-2024-46722.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.1 | 0.0025 | | | [CVE-2024-46723](https://patchblox.com/security/data/cve/CVE-2024-46723.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.1 | 0.0025 | | | [CVE-2024-46746](https://patchblox.com/security/data/cve/CVE-2024-46746.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0025 | | | [CVE-2024-26804](https://patchblox.com/security/data/cve/CVE-2024-26804.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: net: ip_tunnel: prevent perpetual headroom growt... | 7.8 | 0.0025 | | | [CVE-2023-52752](https://patchblox.com/security/data/cve/CVE-2023-52752.md) | High | dtb-aarch64: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225487). | 7.8 | 0.0025 | | | [CVE-2024-46741](https://patchblox.com/security/data/cve/CVE-2024-46741.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0024 | | | [CVE-2024-46724](https://patchblox.com/security/data/cve/CVE-2024-46724.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.1 | 0.0024 | | | [CVE-2024-44990](https://patchblox.com/security/data/cve/CVE-2024-44990.md) | High | dtb-aarch64: bonding: fix null pointer deref in bond_ipsec_offload_ok (bsc#1230194). | 8.0 | 0.0024 | | | [CVE-2024-45026](https://patchblox.com/security/data/cve/CVE-2024-45026.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0024 | | | [CVE-2024-46725](https://patchblox.com/security/data/cve/CVE-2024-46725.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0024 | | | [CVE-2024-46731](https://patchblox.com/security/data/cve/CVE-2024-46731.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.1 | 0.0024 | | | [CVE-2024-36953](https://patchblox.com/security/data/cve/CVE-2024-36953.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0023 | | | [CVE-2024-46786](https://patchblox.com/security/data/cve/CVE-2024-46786.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0023 | | | [CVE-2024-44967](https://patchblox.com/security/data/cve/CVE-2024-44967.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0022 | | | [CVE-2023-52916](https://patchblox.com/security/data/cve/CVE-2023-52916.md) | High | dtb-aarch64: media: aspeed: Fix memory overwrite if timing is 1600x900 (bsc#1230269). | 7.8 | 0.0022 | | | [CVE-2024-46798](https://patchblox.com/security/data/cve/CVE-2024-46798.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0022 | | | [CVE-2024-44997](https://patchblox.com/security/data/cve/CVE-2024-44997.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0021 | | | [CVE-2024-46729](https://patchblox.com/security/data/cve/CVE-2024-46729.md) | High | dtb-aarch64: drm/amd/display: Fix incorrect size calculation for loop (bsc#1230704). | 7.8 | 0.0021 | | | [CVE-2024-46687](https://patchblox.com/security/data/cve/CVE-2024-46687.md) | High | dtb-aarch64: btrfs: fix a use-after-free when hitting errors inside btrfs_submit_chunk() (bsc#1230518). | 7.8 | 0.0021 | | | [CVE-2024-45023](https://patchblox.com/security/data/cve/CVE-2024-45023.md) | High | dtb-aarch64: md/raid1: Fix data corruption for degraded array with slow disk (bsc#1230455). | 7.1 | 0.0019 | | | [CVE-2024-46756](https://patchblox.com/security/data/cve/CVE-2024-46756.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: hwmon: (w83627ehf) Fix underflows seen when writ... | 7.8 | n/a | | | [CVE-2024-46757](https://patchblox.com/security/data/cve/CVE-2024-46757.md) | High | linux-6.1: In the Linux kernel, the following vulnerability has been resolved: hwmon: (nct6775-core) Fix underflows seen when w... | 7.8 | n/a | | | [CVE-2024-46758](https://patchblox.com/security/data/cve/CVE-2024-46758.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: hwmon: (lm95234) Fix underflows seen when writin... | 7.8 | n/a | | | [CVE-2024-44947](https://patchblox.com/security/data/cve/CVE-2024-44947.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0089 | | | [CVE-2024-40983](https://patchblox.com/security/data/cve/CVE-2024-40983.md) | Routine | dtb-aarch64: tipc: force a dst refcount before doing decryption (bsc#1227819). | 5.5 | 0.0088 | | | [CVE-2024-44946](https://patchblox.com/security/data/cve/CVE-2024-44946.md) | Routine | dtb-aarch64: kcm: Serialise kcm_sendmsg() for the same socket (bsc#1230015). | 5.5 | 0.0086 | | | [CVE-2024-46737](https://patchblox.com/security/data/cve/CVE-2024-46737.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0076 | | | [CVE-2024-44984](https://patchblox.com/security/data/cve/CVE-2024-44984.md) | Routine | dtb-aarch64: bnxt_en: Fix double DMA unmapping for XDP_REDIRECT (bsc#1230240). | 5.5 | 0.0074 | | | [CVE-2024-45001](https://patchblox.com/security/data/cve/CVE-2024-45001.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0064 | | | [CVE-2024-46695](https://patchblox.com/security/data/cve/CVE-2024-46695.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 6.3 | 0.0053 | | | [CVE-2024-46717](https://patchblox.com/security/data/cve/CVE-2024-46717.md) | Routine | net/mlx5e: SHAMPO, Fix incorrect page release | 5.5 | 0.0053 | | | [CVE-2024-45030](https://patchblox.com/security/data/cve/CVE-2024-45030.md) | Routine | dtb-aarch64: igb: cope with large MAX_SKB_FRAGS (bsc#1230457). | 5.5 | 0.0048 | | | [CVE-2024-46755](https://patchblox.com/security/data/cve/CVE-2024-46755.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0040 | | | [CVE-2024-45013](https://patchblox.com/security/data/cve/CVE-2024-45013.md) | Routine | dtb-aarch64: nvme: move stopping keep-alive into nvme_uninit_ctrl() (bsc#1230442). | 5.5 | 0.0038 | | | [CVE-2024-40973](https://patchblox.com/security/data/cve/CVE-2024-40973.md) | Routine | dtb-aarch64: media: mtk-vcodec: potential null pointer deference in SCP (bsc#1227890). | 5.5 | 0.0029 | | | [CVE-2024-46745](https://patchblox.com/security/data/cve/CVE-2024-46745.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0029 | | | [CVE-2024-46675](https://patchblox.com/security/data/cve/CVE-2024-46675.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0028 | | | [CVE-2024-46739](https://patchblox.com/security/data/cve/CVE-2024-46739.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0028 | | | [CVE-2024-46771](https://patchblox.com/security/data/cve/CVE-2024-46771.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0027 | | | [CVE-2024-46677](https://patchblox.com/security/data/cve/CVE-2024-46677.md) | Routine | dtb-aarch64: gtp: fix a potential NULL pointer dereference (bsc#1230549). | 5.5 | 0.0026 | | | [CVE-2024-46753](https://patchblox.com/security/data/cve/CVE-2024-46753.md) | Routine | dtb-aarch64: btrfs: handle errors from btrfs_dec_ref() properly (bsc#1230796). | 5.5 | 0.0026 | | | [CVE-2024-46685](https://patchblox.com/security/data/cve/CVE-2024-46685.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0026 | | | [CVE-2024-46751](https://patchblox.com/security/data/cve/CVE-2024-46751.md) | Routine | dtb-aarch64: btrfs: do not BUG_ON() when 0 reference count at btrfs_lookup_extent_info() (bsc#1230786). | 5.5 | 0.0026 | | | [CVE-2024-43890](https://patchblox.com/security/data/cve/CVE-2024-43890.md) | Routine | dtb-aarch64: tracing: Fix overflow in get_free_elt() (bsc#1229764). | 5.5 | 0.0026 | | | [CVE-2024-45021](https://patchblox.com/security/data/cve/CVE-2024-45021.md) | Routine | dtb-aarch64: memcg_write_event_control(): fix a user-triggerable oops (bsc#1230434). | 5.5 | 0.0026 | | | [CVE-2024-45006](https://patchblox.com/security/data/cve/CVE-2024-45006.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0025 | | | [CVE-2024-46761](https://patchblox.com/security/data/cve/CVE-2024-46761.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0025 | | | [CVE-2024-46781](https://patchblox.com/security/data/cve/CVE-2024-46781.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0025 | | | [CVE-2024-46822](https://patchblox.com/security/data/cve/CVE-2024-46822.md) | Routine | dtb-aarch64: arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry (bsc#1231120). | 5.5 | 0.0025 | | | [CVE-2024-43835](https://patchblox.com/security/data/cve/CVE-2024-43835.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0025 | | | [CVE-2024-45028](https://patchblox.com/security/data/cve/CVE-2024-45028.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0025 | | | [CVE-2024-46752](https://patchblox.com/security/data/cve/CVE-2024-46752.md) | Routine | dtb-aarch64: btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info() (bsc#1230794). | 5.5 | 0.0025 | | | [CVE-2024-46679](https://patchblox.com/security/data/cve/CVE-2024-46679.md) | Routine | dtb-aarch64: ethtool: check device is present when getting link settings (bsc#1230556). | 4.7 | 0.0025 | | | [CVE-2024-44991](https://patchblox.com/security/data/cve/CVE-2024-44991.md) | Routine | dtb-aarch64: tcp: prevent concurrent execution of tcp_sk_exit_batch (bsc#1230195). | 5.5 | 0.0025 | | | [CVE-2024-46676](https://patchblox.com/security/data/cve/CVE-2024-46676.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0025 | | | [CVE-2024-46735](https://patchblox.com/security/data/cve/CVE-2024-46735.md) | Routine | dtb-aarch64: ublk_drv: fix NULL pointer dereference in ublk_ctrl_start_recovery() (bsc#1230727). | 5.5 | 0.0025 | | | [CVE-2024-44948](https://patchblox.com/security/data/cve/CVE-2024-44948.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 | | | [CVE-2024-44982](https://patchblox.com/security/data/cve/CVE-2024-44982.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 | | | [CVE-2024-44989](https://patchblox.com/security/data/cve/CVE-2024-44989.md) | Routine | dtb-aarch64: bonding: fix xfrm real_dev null pointer dereference (bsc#1230193). | 5.5 | 0.0024 | | | [CVE-2024-45018](https://patchblox.com/security/data/cve/CVE-2024-45018.md) | Routine | dtb-aarch64: netfilter: flowtable: initialise extack before use (bsc#1230431). | 5.5 | 0.0024 | | | [CVE-2024-46780](https://patchblox.com/security/data/cve/CVE-2024-46780.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 | | | [CVE-2024-44960](https://patchblox.com/security/data/cve/CVE-2024-44960.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 | | | [CVE-2024-45008](https://patchblox.com/security/data/cve/CVE-2024-45008.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 | | | [CVE-2024-46714](https://patchblox.com/security/data/cve/CVE-2024-46714.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 | | | [CVE-2024-46719](https://patchblox.com/security/data/cve/CVE-2024-46719.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 | | | [CVE-2024-46702](https://patchblox.com/security/data/cve/CVE-2024-46702.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 | | | [CVE-2024-43904](https://patchblox.com/security/data/cve/CVE-2024-43904.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 | | | [CVE-2024-46772](https://patchblox.com/security/data/cve/CVE-2024-46772.md) | Routine | dtb-aarch64: drm/amd/display: Check denominator crb_pipes before used (bsc#1230772). | 5.5 | 0.0024 | | | [CVE-2024-46773](https://patchblox.com/security/data/cve/CVE-2024-46773.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 | | | [CVE-2024-43832](https://patchblox.com/security/data/cve/CVE-2024-43832.md) | Routine | dtb-aarch64: s390/uv: Do not call folio_wait_writeback() without a folio reference (bsc#1229380). | 5.5 | 0.0024 | | | [CVE-2024-46767](https://patchblox.com/security/data/cve/CVE-2024-46767.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 | | | [CVE-2024-46776](https://patchblox.com/security/data/cve/CVE-2024-46776.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 | | | [CVE-2024-46760](https://patchblox.com/security/data/cve/CVE-2024-46760.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0023 | | | [CVE-2024-45000](https://patchblox.com/security/data/cve/CVE-2024-45000.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0023 | | | [CVE-2024-46707](https://patchblox.com/security/data/cve/CVE-2024-46707.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0023 | | | [CVE-2024-45020](https://patchblox.com/security/data/cve/CVE-2024-45020.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 6.0 | 0.0023 | | | [CVE-2024-46749](https://patchblox.com/security/data/cve/CVE-2024-46749.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0023 | | | [CVE-2024-46686](https://patchblox.com/security/data/cve/CVE-2024-46686.md) | Routine | dtb-aarch64: smb/client: avoid dereferencing rdata=NULL in smb2_new_read_req() (bsc#1230517). | 5.5 | 0.0023 | | | [CVE-2024-46732](https://patchblox.com/security/data/cve/CVE-2024-46732.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0023 | | | [CVE-2024-46783](https://patchblox.com/security/data/cve/CVE-2024-46783.md) | Routine | kernel-modules: kernel: tcp_bpf: fix return value of tcp_bpf_sendmsg() | 5.5 | 0.0023 | | | [CVE-2024-45011](https://patchblox.com/security/data/cve/CVE-2024-45011.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0023 | | | [CVE-2024-46709](https://patchblox.com/security/data/cve/CVE-2024-46709.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0023 | | | [CVE-2024-45022](https://patchblox.com/security/data/cve/CVE-2024-45022.md) | Routine | dtb-aarch64: mm/vmalloc: fix page mapping if vm_area_alloc_pages() with high order fallback to order 0 (bsc#1230435). | 5.5 | 0.0023 | | | [CVE-2024-46730](https://patchblox.com/security/data/cve/CVE-2024-46730.md) | Routine | drm/amd/display: Ensure array index tg_inst won't be -1 | 5.5 | 0.0023 | | | [CVE-2024-46694](https://patchblox.com/security/data/cve/CVE-2024-46694.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0023 | | | [CVE-2024-46726](https://patchblox.com/security/data/cve/CVE-2024-46726.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0023 | | | [CVE-2024-43914](https://patchblox.com/security/data/cve/CVE-2024-43914.md) | Routine | dtb-aarch64: md/raid5: avoid BUG_ON() while continue reshape after reassembling (bsc#1229790). | 5.5 | 0.0023 | | | [CVE-2024-46716](https://patchblox.com/security/data/cve/CVE-2024-46716.md) | Routine | dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor | 5.5 | 0.0023 | | | [CVE-2024-38632](https://patchblox.com/security/data/cve/CVE-2024-38632.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0023 | | | [CVE-2024-46710](https://patchblox.com/security/data/cve/CVE-2024-46710.md) | Routine | dtb-aarch64: drm/vmwgfx: Prevent unmapping active read buffers (bsc#1230540). | 4.7 | 0.0023 | | | [CVE-2024-45007](https://patchblox.com/security/data/cve/CVE-2024-45007.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0023 | | | [CVE-2024-45002](https://patchblox.com/security/data/cve/CVE-2024-45002.md) | Routine | dtb-aarch64: rtla/osnoise: Prevent NULL dereference in error handling (bsc#1230169). | 5.5 | 0.0022 | | | [CVE-2024-46750](https://patchblox.com/security/data/cve/CVE-2024-46750.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0022 | | | [CVE-2024-44965](https://patchblox.com/security/data/cve/CVE-2024-44965.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0022 | | | [CVE-2024-40965](https://patchblox.com/security/data/cve/CVE-2024-40965.md) | Routine | kernel-64kb: i2c: lpi2c: Avoid calling clk_get_rate during transfer (bsc#1227885). | 5.5 | 0.0022 | | | [CVE-2024-46715](https://patchblox.com/security/data/cve/CVE-2024-46715.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0022 | | | [CVE-2024-44969](https://patchblox.com/security/data/cve/CVE-2024-44969.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 6.1 | 0.0022 | | | [CVE-2024-46784](https://patchblox.com/security/data/cve/CVE-2024-46784.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0022 | | | [CVE-2024-46787](https://patchblox.com/security/data/cve/CVE-2024-46787.md) | Routine | userfaultfd: fix checks for huge PMDs | 4.7 | 0.0022 | | | [CVE-2024-46728](https://patchblox.com/security/data/cve/CVE-2024-46728.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0022 | | | [CVE-2024-46720](https://patchblox.com/security/data/cve/CVE-2024-46720.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0022 | | | [CVE-2024-46711](https://patchblox.com/security/data/cve/CVE-2024-46711.md) | Routine | bpftool: ELSA-2025-6966: kernel security update (MODERATE) | 4.7 | 0.0022 | | | [CVE-2024-46706](https://patchblox.com/security/data/cve/CVE-2024-46706.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0022 | | | [CVE-2024-42252](https://patchblox.com/security/data/cve/CVE-2024-42252.md) | Routine | dtb-aarch64: closures: Change BUG_ON() to WARN_ON() (bsc#1229004). | 5.5 | 0.0021 | | | [CVE-2024-43870](https://patchblox.com/security/data/cve/CVE-2024-43870.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0021 | | | [CVE-2024-44971](https://patchblox.com/security/data/cve/CVE-2024-44971.md) | Routine | dtb-aarch64: net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register() (bsc#1230211). | 5.5 | 0.0021 | | | [CVE-2023-52915](https://patchblox.com/security/data/cve/CVE-2023-52915.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0021 | | | [CVE-2024-44961](https://patchblox.com/security/data/cve/CVE-2024-44961.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0021 | | | [CVE-2024-44962](https://patchblox.com/security/data/cve/CVE-2024-44962.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0021 | | | [CVE-2024-45005](https://patchblox.com/security/data/cve/CVE-2024-45005.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0021 | | | [CVE-2024-46672](https://patchblox.com/security/data/cve/CVE-2024-46672.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0021 | | | [CVE-2024-46693](https://patchblox.com/security/data/cve/CVE-2024-46693.md) | Routine | dtb-aarch64: kABI workaround for soc-qcom pmic_glink changes (bsc#1230521). | 4.7 | 0.0021 | | | [CVE-2024-45012](https://patchblox.com/security/data/cve/CVE-2024-45012.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0021 | | | [CVE-2024-45015](https://patchblox.com/security/data/cve/CVE-2024-45015.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0021 | | | [CVE-2024-46691](https://patchblox.com/security/data/cve/CVE-2024-46691.md) | Routine | dtb-aarch64: usb: typec: ucsi: Move unregister out of atomic section (bsc#1230526). | 5.5 | 0.0021 | | | [CVE-2024-43886](https://patchblox.com/security/data/cve/CVE-2024-43886.md) | Routine | drm/amd/display: Add null check in resource_log_pipe_topology_update | 5.5 | 0.0020 | | | [CVE-2024-46794](https://patchblox.com/security/data/cve/CVE-2024-46794.md) | Routine | dtb-aarch64: x86/tdx: Fix data leak in mmio_read() (bsc#1230825). | 3.3 | 0.0020 | | | [CVE-2024-45017](https://patchblox.com/security/data/cve/CVE-2024-45017.md) | Routine | dtb-aarch64: net/mlx5: Fix IPsec RoCE MPV trace call (bsc#1230430). | 5.5 | 0.0019 | | | [CVE-2024-46727](https://patchblox.com/security/data/cve/CVE-2024-46727.md) | Routine | drm/amd/display: Add otg_master NULL check within resource_log_pipe_topology_update | 5.5 | 0.0019 | | | [CVE-2024-46778](https://patchblox.com/security/data/cve/CVE-2024-46778.md) | Routine | drm/amd/display: Check UnboundedRequestEnabled's value | 5.5 | 0.0019 | | | [CVE-2024-46734](https://patchblox.com/security/data/cve/CVE-2024-46734.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0019 | | | [CVE-2024-45019](https://patchblox.com/security/data/cve/CVE-2024-45019.md) | Routine | dtb-aarch64: net/mlx5e: Take state lock during tx timeout reporter (bsc#1230432). | 5.5 | 0.0018 | | | [CVE-2024-44954](https://patchblox.com/security/data/cve/CVE-2024-44954.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.0 | 0.0018 | | | [CVE-2024-45029](https://patchblox.com/security/data/cve/CVE-2024-45029.md) | Routine | dtb-aarch64: i2c: tegra: Do not mark ACPI devices as irq safe (bsc#1230451). | 5.5 | 0.0017 | | | [CVE-2024-46692](https://patchblox.com/security/data/cve/CVE-2024-46692.md) | Routine | dtb-aarch64: firmware: qcom: scm: Mark get_wq_ctx() as atomic call (bsc#1230520). | 5.5 | 0.0017 | | | [CVE-2024-46791](https://patchblox.com/security/data/cve/CVE-2024-46791.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0016 | | | [CVE-2024-44952](https://patchblox.com/security/data/cve/CVE-2024-44952.md) | Routine | linux: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | 5.5 | n/a | | | [CVE-2024-44972](https://patchblox.com/security/data/cve/CVE-2024-44972.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: btrfs: do not clear page dirty inside extent_wri... | 5.5 | n/a | | --- Data as of 2026-11-11T19:49:26Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.