# SUSE-SU-2025:0153-1: Security update for 5 packages

SUSE-SU-2025:0153-1, released January 17, 2025, fixes 114 CVEs across 5 products. One of them is being exploited (CVE-2024-53150); 1 on CISA KEV. Patch Radar priority: Patch now.

- Web page: https://patchblox.com/security/fix/linux/suse-su-2025-0153-1
- Platform: Linux
- Released: Jan 17, 2025
- Priority: Patch now (Closes CVE-2024-53150, exploited (CISA KEV))
- CVEs: 114, exploited: 1, on CISA KEV: 1
- Vendor advisory: https://osv.dev/vulnerability/SUSE-SU-2025:0153-1

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [kernel-livepatch-SLE15-SP6-RT_Update_7](https://patchblox.com/security/data/product/linux/kernel-livepatch-sle15-sp6-rt-update-7.md) | sles 15.6 | 1-150600.1.3.1 |
| [kernel-rt](https://patchblox.com/security/data/product/linux/kernel-rt.md) | opensuse-leap 15.6 | 6.4.0-150600.10.23.1 |
| [kernel-rt_debug](https://patchblox.com/security/data/product/linux/kernel-rt-debug-kernel-rt-debug.md) | opensuse-leap 15.6 | 6.4.0-150600.10.23.1 |
| [kernel-source-rt](https://patchblox.com/security/data/product/linux/kernel-source-rt.md) | opensuse-leap 15.6 | 6.4.0-150600.10.23.1 |
| [kernel-syms-rt](https://patchblox.com/security/data/product/linux/kernel-syms-rt.md) | opensuse-leap 15.6 | 6.4.0-150600.10.23.1 |

## CVEs this fix closes

| CVE | Priority | Title | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2024-53150](https://patchblox.com/security/data/cve/CVE-2024-53150.md) | Patch now | kernel-64kb: Security update for the Linux Kernel | 7.1 | 0.0135 | CISA KEV |
| [CVE-2024-8805](https://patchblox.com/security/data/cve/CVE-2024-8805.md) | High | kernel-64kb: Security update for the Linux Kernel | 8.8 | 0.0204 |  |
| [CVE-2024-26924](https://patchblox.com/security/data/cve/CVE-2024-26924.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  netfilter: nft_set_pipapo: do not free live elem... | 7.8 | 0.0085 |  |
| [CVE-2024-56645](https://patchblox.com/security/data/cve/CVE-2024-56645.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0068 |  |
| [CVE-2024-53090](https://patchblox.com/security/data/cve/CVE-2024-53090.md) | High | afs: Fix lock recursion | 7.8 | 0.0068 |  |
| [CVE-2024-53206](https://patchblox.com/security/data/cve/CVE-2024-53206.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0063 |  |
| [CVE-2024-53179](https://patchblox.com/security/data/cve/CVE-2024-53179.md) | High | kernel-azure: smb: client: fix use-after-free of signing key (bsc#1234921). | 7.8 | 0.0062 |  |
| [CVE-2024-50154](https://patchblox.com/security/data/cve/CVE-2024-50154.md) | High | kernel-livepatch-SLE15-SP6-RT_Update_2: tcp/dccp: Do not use timer_pending() in reqsk_queue_unlink() (bsc#1233072). | 7.0 | 0.0056 |  |
| [CVE-2024-50047](https://patchblox.com/security/data/cve/CVE-2024-50047.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0052 |  |
| [CVE-2024-53141](https://patchblox.com/security/data/cve/CVE-2024-53141.md) | High | kernel-64kb: netfilter: ipset: add missing range check in bitmap_ip_uadt (bsc#1234381). | 7.8 | 0.0040 |  |
| [CVE-2024-53171](https://patchblox.com/security/data/cve/CVE-2024-53171.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0033 |  |
| [CVE-2024-41042](https://patchblox.com/security/data/cve/CVE-2024-41042.md) | High | dtb-aarch64: Prefer nft_chain_validate (bsc#1228526). | 7.8 | 0.0032 |  |
| [CVE-2024-53237](https://patchblox.com/security/data/cve/CVE-2024-53237.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0032 |  |
| [CVE-2024-53241](https://patchblox.com/security/data/cve/CVE-2024-53241.md) | High | kernel-64kb: x86/xen: use new hypercall functions instead of hypercall page (XSA-466 bsc#1234282). | 7.8 | 0.0031 |  |
| [CVE-2024-49884](https://patchblox.com/security/data/cve/CVE-2024-49884.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0028 |  |
| [CVE-2024-50143](https://patchblox.com/security/data/cve/CVE-2024-50143.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0028 |  |
| [CVE-2024-39480](https://patchblox.com/security/data/cve/CVE-2024-39480.md) | High | kernel-coco_debug: Security update for the Linux Kernel | 7.8 | 0.0027 |  |
| [CVE-2024-50262](https://patchblox.com/security/data/cve/CVE-2024-50262.md) | High | kernel-64kb: bpf: Fix out-of-bounds write in trie_get_next_key() (bsc#1233239). | 7.8 | 0.0027 |  |
| [CVE-2024-53173](https://patchblox.com/security/data/cve/CVE-2024-53173.md) | High | kernel-azure: Security update for the Linux Kernel | 7.8 | 0.0027 |  |
| [CVE-2024-27397](https://patchblox.com/security/data/cve/CVE-2024-27397.md) | High | kernel-debug-modules-extra: Important: kernel security and bug fix update | 7.0 | 0.0026 |  |
| [CVE-2024-50278](https://patchblox.com/security/data/cve/CVE-2024-50278.md) | High | dtb-aarch64: CVE-2024-50280: dm cache: fix flushing uninitialized delayed_work on cache_ctr error (bsc#1233467 bsc#1233469). | 7.1 | 0.0026 |  |
| [CVE-2024-53174](https://patchblox.com/security/data/cve/CVE-2024-53174.md) | High | kernel-azure: Security update for the Linux Kernel | 7.8 | 0.0026 |  |
| [CVE-2024-53162](https://patchblox.com/security/data/cve/CVE-2024-53162.md) | High | kernel-uek: crypto: qat/qat_4xxx - fix off by one in uof_get_name() (Dan Carpenter) [Orabug: 37427536] | 7.1 | 0.0026 |  |
| [CVE-2024-53166](https://patchblox.com/security/data/cve/CVE-2024-53166.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0026 |  |
| [CVE-2024-53214](https://patchblox.com/security/data/cve/CVE-2024-53214.md) | High | kernel-64kb: vfio/pci: Properly hide first-in-list PCIe extended capability (bsc#1235004). | 7.8 | 0.0026 |  |
| [CVE-2024-50280](https://patchblox.com/security/data/cve/CVE-2024-50280.md) | High | kernel-azure: CVE-2024-50278, dm cache: fix flushing uninitialized delayed_work on cache_ctr error (bsc#1233467). | 7.8 | 0.0025 |  |
| [CVE-2024-53119](https://patchblox.com/security/data/cve/CVE-2024-53119.md) | High | kernel-coco_debug: virtio/vsock: Fix accept_queue memory leak (bsc#1234073). | 7.8 | 0.0025 |  |
| [CVE-2024-53142](https://patchblox.com/security/data/cve/CVE-2024-53142.md) | High | kernel-uek: ELSA-2025-20095: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0025 |  |
| [CVE-2024-53191](https://patchblox.com/security/data/cve/CVE-2024-53191.md) | High | kernel-uek: ELSA-2025-20480: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0024 |  |
| [CVE-2024-56605](https://patchblox.com/security/data/cve/CVE-2024-56605.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0024 |  |
| [CVE-2024-53208](https://patchblox.com/security/data/cve/CVE-2024-53208.md) | High | kernel-livepatch-SLE15-SP6-RT_Update_7: Security update for the Linux Kernel | 7.8 | 0.0024 |  |
| [CVE-2024-56551](https://patchblox.com/security/data/cve/CVE-2024-56551.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0024 |  |
| [CVE-2024-53103](https://patchblox.com/security/data/cve/CVE-2024-53103.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0024 |  |
| [CVE-2024-53156](https://patchblox.com/security/data/cve/CVE-2024-53156.md) | High | kernel-syms-azure: Security update for the Linux Kernel | 7.8 | 0.0024 |  |
| [CVE-2024-53229](https://patchblox.com/security/data/cve/CVE-2024-53229.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0024 |  |
| [CVE-2024-56582](https://patchblox.com/security/data/cve/CVE-2024-56582.md) | High | kernel-64kb: btrfs: fix use-after-free in btrfs_encoded_read_endio() (bsc#1235128). | 7.8 | 0.0024 |  |
| [CVE-2024-53155](https://patchblox.com/security/data/cve/CVE-2024-53155.md) | High | kernel-uek: ELSA-2025-20095: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.1 | 0.0024 |  |
| [CVE-2024-50203](https://patchblox.com/security/data/cve/CVE-2024-50203.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0023 |  |
| [CVE-2024-53099](https://patchblox.com/security/data/cve/CVE-2024-53099.md) | High | kernel-64kb: bpf: Check validity of link->type in bpf_link_show_fdinfo() (bsc#1233772). | 7.1 | 0.0023 |  |
| [CVE-2024-53161](https://patchblox.com/security/data/cve/CVE-2024-53161.md) | High | kernel-devel: kernel: EDAC/bluefield: Fix potential integer overflow | 7.9 | 0.0023 |  |
| [CVE-2024-53213](https://patchblox.com/security/data/cve/CVE-2024-53213.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0023 |  |
| [CVE-2024-56604](https://patchblox.com/security/data/cve/CVE-2024-56604.md) | High | kernel-64kb: Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc() (bsc#1235056). | 7.8 | 0.0022 |  |
| [CVE-2024-53222](https://patchblox.com/security/data/cve/CVE-2024-53222.md) | High | kernel-64kb: zram: fix NULL pointer in comp_algorithm_show() (bsc#1234974). | 7.8 | 0.0022 |  |
| [CVE-2024-53216](https://patchblox.com/security/data/cve/CVE-2024-53216.md) | High | kernel-coco_debug: nfsd: fix UAF when access ex_uuid or ex_stats (bsc#1235003). | 7.8 | 0.0022 |  |
| [CVE-2024-44934](https://patchblox.com/security/data/cve/CVE-2024-44934.md) | High | dtb-aarch64: net: bridge: mcast: wait for previous gc cycles when removing port (bsc#1229809). | 7.8 | 0.0022 |  |
| [CVE-2024-49854](https://patchblox.com/security/data/cve/CVE-2024-49854.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0022 |  |
| [CVE-2024-53126](https://patchblox.com/security/data/cve/CVE-2024-53126.md) | High | kernel-docs: Security update for the Linux Kernel | 7.8 | 0.0021 |  |
| [CVE-2024-53133](https://patchblox.com/security/data/cve/CVE-2024-53133.md) | High | drm/amd/display: Handle dml allocation failure to avoid crash | 7.8 | 0.0020 |  |
| [CVE-2024-53064](https://patchblox.com/security/data/cve/CVE-2024-53064.md) | High | kernel-64kb: idpf: fix idpf_vc_core_init error path (bsc#1233558 bsc#1234464). | 7.1 | 0.0020 |  |
| [CVE-2024-50228](https://patchblox.com/security/data/cve/CVE-2024-50228.md) | High | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | 7.0 | n/a |  |
| [CVE-2024-53217](https://patchblox.com/security/data/cve/CVE-2024-53217.md) | Routine | kernel-azure: Security update for the Linux Kernel | 5.5 | 0.0073 |  |
| [CVE-2024-53120](https://patchblox.com/security/data/cve/CVE-2024-53120.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0067 |  |
| [CVE-2024-53151](https://patchblox.com/security/data/cve/CVE-2024-53151.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0064 |  |
| [CVE-2024-53209](https://patchblox.com/security/data/cve/CVE-2024-53209.md) | Routine | kernel-azure: Security update for the Linux Kernel | 5.5 | 0.0063 |  |
| [CVE-2024-53240](https://patchblox.com/security/data/cve/CVE-2024-53240.md) | Routine | kernel-64kb: xen/netfront: fix crash when removing device (XSA-465 bsc#1234281). | 6.8 | 0.0062 |  |
| [CVE-2024-47678](https://patchblox.com/security/data/cve/CVE-2024-47678.md) | Routine | icmp: change the order of rate limits | 5.5 | 0.0061 |  |
| [CVE-2024-53146](https://patchblox.com/security/data/cve/CVE-2024-53146.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0055 |  |
| [CVE-2024-53169](https://patchblox.com/security/data/cve/CVE-2024-53169.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.8 | 0.0054 |  |
| [CVE-2024-50256](https://patchblox.com/security/data/cve/CVE-2024-50256.md) | Routine | netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() | 5.5 | 0.0053 |  |
| [CVE-2024-53122](https://patchblox.com/security/data/cve/CVE-2024-53122.md) | Routine | kernel-64kb: mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (bsc#1234076). | 5.9 | 0.0053 |  |
| [CVE-2024-53136](https://patchblox.com/security/data/cve/CVE-2024-53136.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 4.7 | 0.0043 |  |
| [CVE-2024-53144](https://patchblox.com/security/data/cve/CVE-2024-53144.md) | Routine | kernel-obs-build: Security update for the Linux Kernel | 5.5 | 0.0042 |  |
| [CVE-2024-53224](https://patchblox.com/security/data/cve/CVE-2024-53224.md) | Routine | RDMA/mlx5: Move events notifier registration to be after device registration | 5.5 | 0.0033 |  |
| [CVE-2024-56539](https://patchblox.com/security/data/cve/CVE-2024-56539.md) | Routine | kernel-coco: Security update for the Linux Kernel | 5.5 | 0.0030 |  |
| [CVE-2024-53158](https://patchblox.com/security/data/cve/CVE-2024-53158.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0029 |  |
| [CVE-2024-50272](https://patchblox.com/security/data/cve/CVE-2024-50272.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0027 |  |
| [CVE-2024-53201](https://patchblox.com/security/data/cve/CVE-2024-53201.md) | Routine | drm/amd/display: Fix null check for pipe_ctx->plane_state in dcn20_program_pipe | 5.5 | 0.0026 |  |
| [CVE-2024-56536](https://patchblox.com/security/data/cve/CVE-2024-56536.md) | Routine | kernel-source-coco: Security update for the Linux Kernel | 5.5 | 0.0026 |  |
| [CVE-2024-50039](https://patchblox.com/security/data/cve/CVE-2024-50039.md) | Routine | kernel-64kb: kABI: Restore deleted EXPORT_SYMBOL(__qdisc_calculate_pkt_len) (bsc#1231909). | 5.5 | 0.0025 |  |
| [CVE-2024-53148](https://patchblox.com/security/data/cve/CVE-2024-53148.md) | Routine | kernel-uek: ELSA-2025-20095: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0025 |  |
| [CVE-2024-53113](https://patchblox.com/security/data/cve/CVE-2024-53113.md) | Routine | kernel-64kb: mm: fix NULL pointer dereference in alloc_pages_bulk_noprof (bsc#1234077). | 5.5 | 0.0025 |  |
| [CVE-2024-36908](https://patchblox.com/security/data/cve/CVE-2024-36908.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0025 |  |
| [CVE-2024-53188](https://patchblox.com/security/data/cve/CVE-2024-53188.md) | Routine | kernel-default: Security update for the Linux Kernel | 5.5 | 0.0025 |  |
| [CVE-2024-53190](https://patchblox.com/security/data/cve/CVE-2024-53190.md) | Routine | kernel-source-azure: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2024-49915](https://patchblox.com/security/data/cve/CVE-2024-49915.md) | Routine | drm/amd/display: Add NULL check for clk_mgr in dcn32_init_hw | 5.5 | 0.0024 |  |
| [CVE-2024-53131](https://patchblox.com/security/data/cve/CVE-2024-53131.md) | Routine | kernel-64kb: nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint (bsc#1234220). | 5.5 | 0.0024 |  |
| [CVE-2024-53180](https://patchblox.com/security/data/cve/CVE-2024-53180.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2024-53130](https://patchblox.com/security/data/cve/CVE-2024-53130.md) | Routine | kernel-64kb: nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint (bsc#1234219). | 5.5 | 0.0024 |  |
| [CVE-2024-56567](https://patchblox.com/security/data/cve/CVE-2024-56567.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2024-53105](https://patchblox.com/security/data/cve/CVE-2024-53105.md) | Routine | kernel-64kb: mm: page_alloc: move mlocked flag clearance into free_pages_prepare() (bsc#1234069). | 5.5 | 0.0024 |  |
| [CVE-2024-56599](https://patchblox.com/security/data/cve/CVE-2024-56599.md) | Routine | kernel-64kb: wifi: ath10k: avoid NULL pointer error during sdio remove (bsc#1235138). | 5.5 | 0.0024 |  |
| [CVE-2024-53127](https://patchblox.com/security/data/cve/CVE-2024-53127.md) | Routine | kernel-docs: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2024-50202](https://patchblox.com/security/data/cve/CVE-2024-50202.md) | Routine | kernel-64kb: nilfs2: propagate directory read errors from nilfs_find_entry() (bsc#1233324). | 5.5 | 0.0023 |  |
| [CVE-2024-53157](https://patchblox.com/security/data/cve/CVE-2024-53157.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2024-56549](https://patchblox.com/security/data/cve/CVE-2024-56549.md) | Routine | kernel-source-azure: cachefiles: Fix NULL pointer dereference in object->file (bsc#1234912). | 5.5 | 0.0023 |  |
| [CVE-2024-53125](https://patchblox.com/security/data/cve/CVE-2024-53125.md) | Routine | kernel-64kb: bpf: sync_linked_regs() must preserve subreg_def (bsc#1234156). | 5.5 | 0.0023 |  |
| [CVE-2024-56562](https://patchblox.com/security/data/cve/CVE-2024-56562.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2024-53210](https://patchblox.com/security/data/cve/CVE-2024-53210.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 6.1 | 0.0022 |  |
| [CVE-2024-53215](https://patchblox.com/security/data/cve/CVE-2024-53215.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 6.0 | 0.0022 |  |
| [CVE-2024-53200](https://patchblox.com/security/data/cve/CVE-2024-53200.md) | Routine | kernel-uek: ELSA-2025-20480: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0022 |  |
| [CVE-2024-53202](https://patchblox.com/security/data/cve/CVE-2024-53202.md) | Routine | kernel-default-base: Security update for the Linux Kernel | 5.5 | 0.0022 |  |
| [CVE-2024-35839](https://patchblox.com/security/data/cve/CVE-2024-35839.md) | Routine | netfilter: bridge: replace physindev with physinif in nf_bridge_info | 5.5 | 0.0022 |  |
| [CVE-2024-56566](https://patchblox.com/security/data/cve/CVE-2024-56566.md) | Routine | kernel-64kb: mm/slub: Avoid list corruption when removing a slab from the full list (bsc#1235033). | 5.5 | 0.0022 |  |
| [CVE-2024-56756](https://patchblox.com/security/data/cve/CVE-2024-56756.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0022 |  |
| [CVE-2024-56667](https://patchblox.com/security/data/cve/CVE-2024-56667.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0022 |  |
| [CVE-2024-56754](https://patchblox.com/security/data/cve/CVE-2024-56754.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2024-50211](https://patchblox.com/security/data/cve/CVE-2024-50211.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 3.3 | 0.0021 |  |
| [CVE-2024-44996](https://patchblox.com/security/data/cve/CVE-2024-44996.md) | Routine | dtb-aarch64: vsock: fix recursive ->recvmsg calls (bsc#1230205). | 5.5 | 0.0021 |  |
| [CVE-2024-53111](https://patchblox.com/security/data/cve/CVE-2024-53111.md) | Routine | kernel-64kb: mm/mremap: fix address wraparound in move_page_tables() (bsc#1234086). | 5.5 | 0.0021 |  |
| [CVE-2024-53129](https://patchblox.com/security/data/cve/CVE-2024-53129.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2024-53234](https://patchblox.com/security/data/cve/CVE-2024-53234.md) | Routine | kernel-default-base: erofs: handle NONHEAD !delta[1] lclusters gracefully (bsc#1235045). | 5.5 | 0.0021 |  |
| [CVE-2024-56755](https://patchblox.com/security/data/cve/CVE-2024-56755.md) | Routine | kernel-64kb: netfs/fscache: Add a memory barrier for FSCACHE_VOLUME_CREATING (bsc#1234920). | 5.5 | 0.0021 |  |
| [CVE-2024-53154](https://patchblox.com/security/data/cve/CVE-2024-53154.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2024-56752](https://patchblox.com/security/data/cve/CVE-2024-56752.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2024-53134](https://patchblox.com/security/data/cve/CVE-2024-53134.md) | Routine | kernel-64kb: pmdomain: imx93-blk-ctrl: correct remove path (bsc#1234159). | 5.5 | 0.0021 |  |
| [CVE-2024-53117](https://patchblox.com/security/data/cve/CVE-2024-53117.md) | Routine | kernel-64kb: virtio/vsock: Improve MSG_ZEROCOPY error handling (bsc#1234079). | 6.1 | 0.0021 |  |
| [CVE-2024-53118](https://patchblox.com/security/data/cve/CVE-2024-53118.md) | Routine | kernel-64kb: vsock: Fix sk_error_queue memory leak (bsc#1234071). | 6.1 | 0.0021 |  |
| [CVE-2024-53050](https://patchblox.com/security/data/cve/CVE-2024-53050.md) | Routine | drm/i915/hdcp: Add encoder check in hdcp2_get_capability | 5.5 | 0.0021 |  |
| [CVE-2024-56576](https://patchblox.com/security/data/cve/CVE-2024-56576.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0018 |  |
| [CVE-2024-53207](https://patchblox.com/security/data/cve/CVE-2024-53207.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.7 | 0.0018 |  |
| [CVE-2024-53160](https://patchblox.com/security/data/cve/CVE-2024-53160.md) | Routine | kernel-64kb: rcu/kvfree: Fix data-race in __mod_timer / kvfree_call_rcu (bsc#1234810). | 6.3 | 0.0016 |  |
| [CVE-2024-50018](https://patchblox.com/security/data/cve/CVE-2024-50018.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  net: napi: Prevent overflow of napi_defer_hard_i... | 5.5 | n/a |  |
| [CVE-2024-50016](https://patchblox.com/security/data/cve/CVE-2024-50016.md) | Routine | linux: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | n/a | n/a |  |
| [CVE-2024-53159](https://patchblox.com/security/data/cve/CVE-2024-53159.md) | Routine | kernel-64kb: Security update for the Linux Kernel | n/a | n/a |  |

---

Data as of 2026-11-11T19:49:26Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.