# SUSE-SU-2025:0499-1: Security update for 13 packages

SUSE-SU-2025:0499-1, released February 13, 2025, fixes 257 CVEs across 13 products. One of them is being exploited (CVE-2024-53197); 1 on CISA KEV. Patch Radar priority: Patch now.

- Web page: https://patchblox.com/security/fix/linux/suse-su-2025-0499-1
- Platform: Linux
- Released: Feb 13, 2025
- Priority: Patch now (Closes CVE-2024-53197, exploited (CISA KEV))
- CVEs: 257, exploited: 1, on CISA KEV: 1
- Vendor advisory: https://osv.dev/vulnerability/SUSE-SU-2025:0499-1

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [dtb-aarch64](https://patchblox.com/security/data/product/linux/dtb-aarch64.md) | opensuse-leap 15.6 | 6.4.0-150600.23.38.1 |
| [kernel-64kb](https://patchblox.com/security/data/product/linux/kernel-64kb.md) | opensuse-leap 15.6 | 6.4.0-150600.23.38.1 |
| [kernel-64kb](https://patchblox.com/security/data/product/linux/kernel-64kb.md) | sles 15.6 | 6.4.0-150600.23.38.1 |
| [kernel-debug](https://patchblox.com/security/data/product/linux/kernel-debug.md) | opensuse-leap 15.6 | 6.4.0-150600.23.38.1 |
| [kernel-default](https://patchblox.com/security/data/product/linux/kernel-default.md) | opensuse-leap 15.6 | 6.4.0-150600.23.38.1 |
| [kernel-default](https://patchblox.com/security/data/product/linux/kernel-default.md) | sles 15.6 | 6.4.0-150600.23.38.1 |
| [kernel-default-base](https://patchblox.com/security/data/product/linux/kernel-default-base.md) | opensuse-leap 15.6 | 6.4.0-150600.23.38.1.150600.12.16.2 |
| [kernel-default-base](https://patchblox.com/security/data/product/linux/kernel-default-base.md) | sles 15.6 | 6.4.0-150600.23.38.1.150600.12.16.2 |
| [kernel-docs](https://patchblox.com/security/data/product/linux/kernel-docs.md) | opensuse-leap 15.6 | 6.4.0-150600.23.38.1 |
| [kernel-docs](https://patchblox.com/security/data/product/linux/kernel-docs.md) | sles 15.6 | 6.4.0-150600.23.38.1 |
| [kernel-kvmsmall](https://patchblox.com/security/data/product/linux/kernel-kvmsmall.md) | opensuse-leap 15.6 | 6.4.0-150600.23.38.1 |
| [kernel-livepatch-SLE15-SP6_Update_8](https://patchblox.com/security/data/product/linux/kernel-livepatch-sle15-sp6-update-8.md) | sles 15.6 | 1-150600.13.3.2 |
| [kernel-obs-build](https://patchblox.com/security/data/product/linux/kernel-obs-build.md) | opensuse-leap 15.6 | 6.4.0-150600.23.38.1 |
| [kernel-obs-build](https://patchblox.com/security/data/product/linux/kernel-obs-build.md) | sles 15.6 | 6.4.0-150600.23.38.1 |
| [kernel-obs-qa](https://patchblox.com/security/data/product/linux/kernel-obs-qa.md) | opensuse-leap 15.6 | 6.4.0-150600.23.38.1 |
| [kernel-source](https://patchblox.com/security/data/product/linux/kernel-source.md) | opensuse-leap 15.6 | 6.4.0-150600.23.38.1 |
| [kernel-source](https://patchblox.com/security/data/product/linux/kernel-source.md) | sles 15.6 | 6.4.0-150600.23.38.1 |
| [kernel-syms](https://patchblox.com/security/data/product/linux/kernel-syms.md) | opensuse-leap 15.6 | 6.4.0-150600.23.38.1 |
| [kernel-syms](https://patchblox.com/security/data/product/linux/kernel-syms.md) | sles 15.6 | 6.4.0-150600.23.38.1 |
| [kernel-zfcpdump](https://patchblox.com/security/data/product/linux/kernel-zfcpdump.md) | opensuse-leap 15.6 | 6.4.0-150600.23.38.1 |
| [kernel-zfcpdump](https://patchblox.com/security/data/product/linux/kernel-zfcpdump.md) | sles 15.6 | 6.4.0-150600.23.38.1 |

## CVEs this fix closes

| CVE | Priority | Title | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2024-53197](https://patchblox.com/security/data/cve/CVE-2024-53197.md) | Patch now | kernel-uek: ELSA-2025-20095: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0412 | CISA KEV |
| [CVE-2024-53095](https://patchblox.com/security/data/cve/CVE-2024-53095.md) | Urgent | kernel-azure: Security update for the Linux Kernel | 9.8 | 0.0058 |  |
| [CVE-2024-57791](https://patchblox.com/security/data/cve/CVE-2024-57791.md) | High | kernel-livepatch-SLE15-SP6_Update_8: net/smc: check return value of sock_recvmsg when draining clc data (bsc#1235759). | 7.5 | 0.0077 |  |
| [CVE-2024-56644](https://patchblox.com/security/data/cve/CVE-2024-56644.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.1 | 0.0071 |  |
| [CVE-2024-56662](https://patchblox.com/security/data/cve/CVE-2024-56662.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0061 |  |
| [CVE-2024-46858](https://patchblox.com/security/data/cve/CVE-2024-46858.md) | High | kernel-64kb: mptcp: pm: Fix uaf in __timer_delete_sync (bsc#1231088). | 7.0 | 0.0059 |  |
| [CVE-2024-50106](https://patchblox.com/security/data/cve/CVE-2024-50106.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.0 | 0.0050 |  |
| [CVE-2024-56651](https://patchblox.com/security/data/cve/CVE-2024-56651.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0033 |  |
| [CVE-2024-57899](https://patchblox.com/security/data/cve/CVE-2024-57899.md) | High | wifi: mac80211: fix mbss changed flags corruption on 32 bit systems | 7.8 | 0.0032 |  |
| [CVE-2023-52489](https://patchblox.com/security/data/cve/CVE-2023-52489.md) | High | dtb-aarch64: mm/sparsemem: fix race in accessing memory_section->usage (bsc#1221326). | 8.0 | 0.0029 |  |
| [CVE-2024-53239](https://patchblox.com/security/data/cve/CVE-2024-53239.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0029 |  |
| [CVE-2024-56631](https://patchblox.com/security/data/cve/CVE-2024-56631.md) | High | kernel-64kb: scsi: sg: Fix slab-use-after-free read in sg_release() (bsc#1235480). | 7.8 | 0.0029 |  |
| [CVE-2024-50151](https://patchblox.com/security/data/cve/CVE-2024-50151.md) | High | dtb-aarch64: smb: client: fix OOBs when building SMB2_IOCTL request (bsc#1233055). | 7.8 | 0.0028 |  |
| [CVE-2024-53203](https://patchblox.com/security/data/cve/CVE-2024-53203.md) | High | kernel-64kb: usb: typec: fix potential array underflow in ucsi_ccg_sync_control() (bsc#1235001). | 7.8 | 0.0027 |  |
| [CVE-2024-56672](https://patchblox.com/security/data/cve/CVE-2024-56672.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0027 |  |
| [CVE-2024-56650](https://patchblox.com/security/data/cve/CVE-2024-56650.md) | High | kernel-64kb: netfilter: x_tables: fix LED ID check in led_tg_check() (bsc#1235430). | 7.1 | 0.0027 |  |
| [CVE-2024-56709](https://patchblox.com/security/data/cve/CVE-2024-56709.md) | High | io_uring: check if iowq is killed before queuing | 7.8 | 0.0027 |  |
| [CVE-2024-56538](https://patchblox.com/security/data/cve/CVE-2024-56538.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0027 |  |
| [CVE-2024-57912](https://patchblox.com/security/data/cve/CVE-2024-57912.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.1 | 0.0027 |  |
| [CVE-2024-53227](https://patchblox.com/security/data/cve/CVE-2024-53227.md) | High | kernel-64kb: scsi: bfa: Fix use-after-free in bfad_im_module_exit() (bsc#1235011). | 7.8 | 0.0027 |  |
| [CVE-2024-57857](https://patchblox.com/security/data/cve/CVE-2024-57857.md) | High | RDMA/siw: Remove direct link to net_device | 7.8 | 0.0027 |  |
| [CVE-2024-57911](https://patchblox.com/security/data/cve/CVE-2024-57911.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.1 | 0.0026 |  |
| [CVE-2024-56596](https://patchblox.com/security/data/cve/CVE-2024-56596.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0026 |  |
| [CVE-2024-56598](https://patchblox.com/security/data/cve/CVE-2024-56598.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0026 |  |
| [CVE-2024-57792](https://patchblox.com/security/data/cve/CVE-2024-57792.md) | High | kernel-azure: Security update for the Linux Kernel | 7.8 | 0.0026 |  |
| [CVE-2024-57929](https://patchblox.com/security/data/cve/CVE-2024-57929.md) | High | kernel-64kb: dm array: fix releasing a faulty array block twice in dm_array_cursor_end (bsc#1236096). | 7.1 | 0.0026 |  |
| [CVE-2024-56615](https://patchblox.com/security/data/cve/CVE-2024-56615.md) | High | kernel-64kb: bpf: fix OOB devmap writes when deleting elements (bsc#1235426). | 7.8 | 0.0026 |  |
| [CVE-2024-50051](https://patchblox.com/security/data/cve/CVE-2024-50051.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0026 |  |
| [CVE-2024-56608](https://patchblox.com/security/data/cve/CVE-2024-56608.md) | High | kernel-64kb: drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create' (bsc#1235487). | 7.8 | 0.0026 |  |
| [CVE-2024-52332](https://patchblox.com/security/data/cve/CVE-2024-52332.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0026 |  |
| [CVE-2024-57850](https://patchblox.com/security/data/cve/CVE-2024-57850.md) | High | kernel-source: Security update for the Linux Kernel | 7.8 | 0.0026 |  |
| [CVE-2024-56614](https://patchblox.com/security/data/cve/CVE-2024-56614.md) | High | kernel-64kb: xsk: fix OOB map writes when deleting elements (bsc#1235424). | 7.8 | 0.0026 |  |
| [CVE-2024-56708](https://patchblox.com/security/data/cve/CVE-2024-56708.md) | High | kernel-64kb: EDAC/igen6: Avoid segmentation fault on module unload (bsc#1235564). | 7.8 | 0.0025 |  |
| [CVE-2025-21655](https://patchblox.com/security/data/cve/CVE-2025-21655.md) | High | kernel-64kb: io_uring/eventfd: ensure io_eventfd_signal() defers another RCU period (bsc#1236163). | 7.8 | 0.0025 |  |
| [CVE-2024-56557](https://patchblox.com/security/data/cve/CVE-2024-56557.md) | High | iio: adc: ad7923: Fix buffer overflow for tx_buf and ring_xfer | 7.8 | 0.0025 |  |
| [CVE-2025-21650](https://patchblox.com/security/data/cve/CVE-2025-21650.md) | High | kernel-64kb: net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue (bsc#1236144). | 7.8 | 0.0025 |  |
| [CVE-2024-53168](https://patchblox.com/security/data/cve/CVE-2024-53168.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0025 |  |
| [CVE-2024-57926](https://patchblox.com/security/data/cve/CVE-2024-57926.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0025 |  |
| [CVE-2024-56595](https://patchblox.com/security/data/cve/CVE-2024-56595.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0025 |  |
| [CVE-2024-56600](https://patchblox.com/security/data/cve/CVE-2024-56600.md) | High | kernel-64kb: net: inet6: do not leave a dangling sk pointer in inet6_create() (bsc#1235217). | 7.8 | 0.0025 |  |
| [CVE-2024-56601](https://patchblox.com/security/data/cve/CVE-2024-56601.md) | High | kernel-64kb: net: inet: do not leave a dangling sk pointer in inet_create() (bsc#1235230). | 7.8 | 0.0025 |  |
| [CVE-2024-56606](https://patchblox.com/security/data/cve/CVE-2024-56606.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0025 |  |
| [CVE-2024-56548](https://patchblox.com/security/data/cve/CVE-2024-56548.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0025 |  |
| [CVE-2024-56642](https://patchblox.com/security/data/cve/CVE-2024-56642.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0025 |  |
| [CVE-2024-56693](https://patchblox.com/security/data/cve/CVE-2024-56693.md) | High | kernel-64kb: brd: defer automatic disk creation until module initialization succeeds (bsc#1235418). | 7.8 | 0.0025 |  |
| [CVE-2024-56704](https://patchblox.com/security/data/cve/CVE-2024-56704.md) | High | kernel-64kb: 9p/xen: fix release of IRQ (bsc#1235584). | 7.8 | 0.0025 |  |
| [CVE-2024-56570](https://patchblox.com/security/data/cve/CVE-2024-56570.md) | High | kernel-default-base: ovl: Filter invalid inodes with missing lookup function (bsc#1235035). | 7.8 | 0.0024 |  |
| [CVE-2024-56558](https://patchblox.com/security/data/cve/CVE-2024-56558.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0024 |  |
| [CVE-2024-53170](https://patchblox.com/security/data/cve/CVE-2024-53170.md) | High | kernel-64kb: block: fix uaf for flush rq while iterating tags (bsc#1234888). | 7.8 | 0.0024 |  |
| [CVE-2024-56603](https://patchblox.com/security/data/cve/CVE-2024-56603.md) | High | kernel-64kb: net: af_can: do not leave a dangling sk pointer in can_create() (bsc#1235415). | 8.1 | 0.0024 |  |
| [CVE-2024-56658](https://patchblox.com/security/data/cve/CVE-2024-56658.md) | High | kernel-64kb: net: defer final 'struct net' free in netns dismantle (bsc#1235441). | 7.8 | 0.0024 |  |
| [CVE-2024-53194](https://patchblox.com/security/data/cve/CVE-2024-53194.md) | High | kernel-uek: ELSA-2025-20095: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0024 |  |
| [CVE-2024-57904](https://patchblox.com/security/data/cve/CVE-2024-57904.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0024 |  |
| [CVE-2024-56597](https://patchblox.com/security/data/cve/CVE-2024-56597.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.1 | 0.0024 |  |
| [CVE-2025-21669](https://patchblox.com/security/data/cve/CVE-2025-21669.md) | High | kernel-64kb: vsock/virtio: discard packets if the transport changes (bsc#1236683). | 7.1 | 0.0023 |  |
| [CVE-2024-56739](https://patchblox.com/security/data/cve/CVE-2024-56739.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0023 |  |
| [CVE-2024-56602](https://patchblox.com/security/data/cve/CVE-2024-56602.md) | High | kernel-64kb: net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (bsc#1235521). | 7.8 | 0.0023 |  |
| [CVE-2024-56675](https://patchblox.com/security/data/cve/CVE-2024-56675.md) | High | kernel-64kb: bpf: Fix UAF via mismatching bpf_prog/attachment RCU flavors (bsc#1235555). | 7.8 | 0.0023 |  |
| [CVE-2024-56663](https://patchblox.com/security/data/cve/CVE-2024-56663.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.1 | 0.0023 |  |
| [CVE-2024-56609](https://patchblox.com/security/data/cve/CVE-2024-56609.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0023 |  |
| [CVE-2024-56594](https://patchblox.com/security/data/cve/CVE-2024-56594.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.0 | 0.0023 |  |
| [CVE-2024-56678](https://patchblox.com/security/data/cve/CVE-2024-56678.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0023 |  |
| [CVE-2024-57801](https://patchblox.com/security/data/cve/CVE-2024-57801.md) | High | kernel-64kb: net/mlx5e: Skip restore TC rules for vport rep without loaded flag (bsc#1235940). | 7.8 | 0.0022 |  |
| [CVE-2024-56759](https://patchblox.com/security/data/cve/CVE-2024-56759.md) | High | kernel-coco: btrfs: fix use-after-free when COWing tree bock and tracing is enabled (bsc#1235645). | 7.8 | 0.0022 |  |
| [CVE-2024-56766](https://patchblox.com/security/data/cve/CVE-2024-56766.md) | High | kernel-source-azure: Security update for the Linux Kernel | 7.8 | 0.0022 |  |
| [CVE-2024-57795](https://patchblox.com/security/data/cve/CVE-2024-57795.md) | High | kernel-64kb: RDMA/rxe: Remove the direct link to net_device (bsc#1235906). | 7.8 | 0.0022 |  |
| [CVE-2024-57798](https://patchblox.com/security/data/cve/CVE-2024-57798.md) | High | drm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req() | 7.8 | 0.0022 |  |
| [CVE-2024-57892](https://patchblox.com/security/data/cve/CVE-2024-57892.md) | High | kernel-default-base: ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv (bsc#1235964). | 7.8 | 0.0022 |  |
| [CVE-2024-57908](https://patchblox.com/security/data/cve/CVE-2024-57908.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.1 | 0.0022 |  |
| [CVE-2024-57906](https://patchblox.com/security/data/cve/CVE-2024-57906.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.1 | 0.0022 |  |
| [CVE-2024-57910](https://patchblox.com/security/data/cve/CVE-2024-57910.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.1 | 0.0022 |  |
| [CVE-2024-56616](https://patchblox.com/security/data/cve/CVE-2024-56616.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0022 |  |
| [CVE-2024-57917](https://patchblox.com/security/data/cve/CVE-2024-57917.md) | High | kernel-64kb: topology: Keep the cpumask unchanged when printing cpumap (bsc#1236127). | 7.8 | 0.0022 |  |
| [CVE-2024-57838](https://patchblox.com/security/data/cve/CVE-2024-57838.md) | High | kernel-64kb: s390/entry: Mark IRQ entries to fix stack depot warnings (bsc#1235798). | 7.1 | 0.0022 |  |
| [CVE-2024-57907](https://patchblox.com/security/data/cve/CVE-2024-57907.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.1 | 0.0022 |  |
| [CVE-2024-56619](https://patchblox.com/security/data/cve/CVE-2024-56619.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0021 |  |
| [CVE-2024-57896](https://patchblox.com/security/data/cve/CVE-2024-57896.md) | High | kernel-64kb: btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount (bsc#1235965). | 7.8 | 0.0021 |  |
| [CVE-2024-57849](https://patchblox.com/security/data/cve/CVE-2024-57849.md) | High | kernel-64kb: Security update for the Linux Kernel | 8.8 | 0.0021 |  |
| [CVE-2024-57887](https://patchblox.com/security/data/cve/CVE-2024-57887.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0021 |  |
| [CVE-2024-56765](https://patchblox.com/security/data/cve/CVE-2024-56765.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0021 |  |
| [CVE-2025-21652](https://patchblox.com/security/data/cve/CVE-2025-21652.md) | High | kernel-64k: kernel: ipvlan: Fix use-after-free in ipvlan_get_iflink(). | 7.8 | 0.0021 |  |
| [CVE-2024-56775](https://patchblox.com/security/data/cve/CVE-2024-56775.md) | High | kernel-64kb: drm/amd/display: Fix handling of plane refcount (bsc#1235657). | 7.8 | 0.0021 |  |
| [CVE-2024-53236](https://patchblox.com/security/data/cve/CVE-2024-53236.md) | High | kernel-docs: xsk: Free skb when TX metadata options are invalid (bsc#1235000). | 7.1 | 0.0021 |  |
| [CVE-2024-26810](https://patchblox.com/security/data/cve/CVE-2024-26810.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  vfio/pci: Lock external INTx masking ops  Mask o... | 7.8 | 0.0020 |  |
| [CVE-2024-56635](https://patchblox.com/security/data/cve/CVE-2024-56635.md) | High | kernel-64kb: net: avoid potential UAF in default_operstate() (bsc#1235519). | 7.0 | 0.0019 |  |
| [CVE-2024-56690](https://patchblox.com/security/data/cve/CVE-2024-56690.md) | High | kernel-rt-64k-modules: kernel: crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY | 7.8 | 0.0019 |  |
| [CVE-2024-56664](https://patchblox.com/security/data/cve/CVE-2024-56664.md) | High | kernel-64kb: bpf, sockmap: Fix race between element replace and close() (bsc#1235249). | 7.0 | 0.0018 |  |
| [CVE-2024-57876](https://patchblox.com/security/data/cve/CVE-2024-57876.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.0 | 0.0016 |  |
| [CVE-2024-49569](https://patchblox.com/security/data/cve/CVE-2024-49569.md) | Routine | nvme-rdma: unquiesce admin_q before destroy it | 5.7 | 0.0084 |  |
| [CVE-2024-49978](https://patchblox.com/security/data/cve/CVE-2024-49978.md) | Routine | gso: fix udp gso fraglist segmentation after pull from frag_list | 5.5 | 0.0066 |  |
| [CVE-2024-36476](https://patchblox.com/security/data/cve/CVE-2024-36476.md) | Routine | kernel-source: Security update for the Linux Kernel | 5.5 | 0.0065 |  |
| [CVE-2024-50299](https://patchblox.com/security/data/cve/CVE-2024-50299.md) | Routine | kernel-64kb: sctp: properly validate chunk size in sctp_sf_ootb() (bsc#1233488). | 5.5 | 0.0062 |  |
| [CVE-2024-57802](https://patchblox.com/security/data/cve/CVE-2024-57802.md) | Routine | kernel-64kb: netrom: check buffer length before accessing it (bsc#1235941). | 5.5 | 0.0061 |  |
| [CVE-2024-56779](https://patchblox.com/security/data/cve/CVE-2024-56779.md) | Routine | kernel-coco: Security update for the Linux Kernel | 6.3 | 0.0055 |  |
| [CVE-2024-56688](https://patchblox.com/security/data/cve/CVE-2024-56688.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0055 |  |
| [CVE-2024-50251](https://patchblox.com/security/data/cve/CVE-2024-50251.md) | Routine | kernel-64kb: netfilter: nft_payload: sanitize offset and length before calling skb_checksum() (bsc#1233248). | 6.2 | 0.0053 |  |
| [CVE-2024-56641](https://patchblox.com/security/data/cve/CVE-2024-56641.md) | Routine | net/smc: initialize close_work early to avoid warning | 5.5 | 0.0053 |  |
| [CVE-2024-57882](https://patchblox.com/security/data/cve/CVE-2024-57882.md) | Routine | kernel-64kb: mptcp: fix TCP options overflow | 5.5 | 0.0052 |  |
| [CVE-2024-53185](https://patchblox.com/security/data/cve/CVE-2024-53185.md) | Routine | kernel-64kb: smb: client: fix NULL ptr deref in crypto_aead_setkey() (bsc#1234901). | 5.5 | 0.0048 |  |
| [CVE-2025-21646](https://patchblox.com/security/data/cve/CVE-2025-21646.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0045 |  |
| [CVE-2025-21676](https://patchblox.com/security/data/cve/CVE-2025-21676.md) | Routine | kernel-64kb: net: fec: handle page_pool_dev_alloc_pages error (bsc#1236696). | 5.5 | 0.0045 |  |
| [CVE-2024-57932](https://patchblox.com/security/data/cve/CVE-2024-57932.md) | Routine | kernel-64kb: gve: guard XDP xmit NDO on existence of xdp queues (bsc#1236190). | 5.5 | 0.0045 |  |
| [CVE-2024-56694](https://patchblox.com/security/data/cve/CVE-2024-56694.md) | Routine | kernel-64kb: bpf: fix recursive lock when verdict program return SK_PASS (bsc#1235412). | 5.5 | 0.0042 |  |
| [CVE-2025-21663](https://patchblox.com/security/data/cve/CVE-2025-21663.md) | Routine | kernel-64kb: net: stmmac: dwmac-tegra: Read iommu stream id from device tree (bsc#1236260). | 5.5 | 0.0042 |  |
| [CVE-2024-57936](https://patchblox.com/security/data/cve/CVE-2024-57936.md) | Routine | kernel-obs-build: Security update for the Linux Kernel | 5.5 | 0.0040 |  |
| [CVE-2024-56656](https://patchblox.com/security/data/cve/CVE-2024-56656.md) | Routine | kernel-64kb: bnxt_en: Fix aggregation ID mask to prevent oops on 5760X chips (bsc#1235444). | 5.5 | 0.0037 |  |
| [CVE-2024-56632](https://patchblox.com/security/data/cve/CVE-2024-56632.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 6.1 | 0.0033 |  |
| [CVE-2024-49948](https://patchblox.com/security/data/cve/CVE-2024-49948.md) | Routine | kernel-64kb: net: add more sanity checks to qdisc_pkt_len_init() (bsc#1232161). | 5.5 | 0.0029 |  |
| [CVE-2024-56590](https://patchblox.com/security/data/cve/CVE-2024-56590.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0029 |  |
| [CVE-2024-53187](https://patchblox.com/security/data/cve/CVE-2024-53187.md) | Routine | kernel-64kb: io_uring: check for overflows in io_pin_pages (bsc#1234947). | 5.5 | 0.0028 |  |
| [CVE-2024-56677](https://patchblox.com/security/data/cve/CVE-2024-56677.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0028 |  |
| [CVE-2024-53164](https://patchblox.com/security/data/cve/CVE-2024-53164.md) | Routine | kernel-64kb: net: sched: fix ordering of qlen adjustment (bsc#1234863). | 5.5 | 0.0027 |  |
| [CVE-2024-56705](https://patchblox.com/security/data/cve/CVE-2024-56705.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0027 |  |
| [CVE-2023-52923](https://patchblox.com/security/data/cve/CVE-2023-52923.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0027 |  |
| [CVE-2024-56636](https://patchblox.com/security/data/cve/CVE-2024-56636.md) | Routine | kernel-64kb: geneve: do not assume mac header is set in geneve_xmit_skb() (bsc#1235520). | 5.5 | 0.0027 |  |
| [CVE-2024-56715](https://patchblox.com/security/data/cve/CVE-2024-56715.md) | Routine | kernel-64kb: ionic: Fix netdev notifier unregister on failure (bsc#1235612). | 5.5 | 0.0026 |  |
| [CVE-2024-48881](https://patchblox.com/security/data/cve/CVE-2024-48881.md) | Routine | kernel-64kb: bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again (bsc#1235727). | 5.5 | 0.0026 |  |
| [CVE-2024-56630](https://patchblox.com/security/data/cve/CVE-2024-56630.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0026 |  |
| [CVE-2024-56587](https://patchblox.com/security/data/cve/CVE-2024-56587.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0026 |  |
| [CVE-2024-53690](https://patchblox.com/security/data/cve/CVE-2024-53690.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0026 |  |
| [CVE-2024-56634](https://patchblox.com/security/data/cve/CVE-2024-56634.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0026 |  |
| [CVE-2024-57922](https://patchblox.com/security/data/cve/CVE-2024-57922.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0026 |  |
| [CVE-2024-45828](https://patchblox.com/security/data/cve/CVE-2024-45828.md) | Routine | kernel-uek: ELSA-2025-20480: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0025 |  |
| [CVE-2024-57804](https://patchblox.com/security/data/cve/CVE-2024-57804.md) | Routine | scsi: mpi3mr: Fix corrupt config pages PHY state is switched in sysfs | 5.5 | 0.0025 |  |
| [CVE-2024-56369](https://patchblox.com/security/data/cve/CVE-2024-56369.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0025 |  |
| [CVE-2024-57897](https://patchblox.com/security/data/cve/CVE-2024-57897.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0025 |  |
| [CVE-2024-53172](https://patchblox.com/security/data/cve/CVE-2024-53172.md) | Routine | kernel-64kb: ubi: fastmap: Fix duplicate slab cache names while attaching (bsc#1234898). | 5.5 | 0.0025 |  |
| [CVE-2024-56712](https://patchblox.com/security/data/cve/CVE-2024-56712.md) | Routine | udmabuf: fix memory leak on last export_udmabuf() error path | 5.5 | 0.0025 |  |
| [CVE-2024-56648](https://patchblox.com/security/data/cve/CVE-2024-56648.md) | Routine | kernel-64kb: net: hsr: avoid potential out-of-bound access in fill_frame_info() (bsc#1235451). | 5.5 | 0.0025 |  |
| [CVE-2025-21645](https://patchblox.com/security/data/cve/CVE-2025-21645.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0025 |  |
| [CVE-2024-50304](https://patchblox.com/security/data/cve/CVE-2024-50304.md) | Routine | kernel-64kb: ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find() (bsc#1233522). | 5.5 | 0.0025 |  |
| [CVE-2024-56372](https://patchblox.com/security/data/cve/CVE-2024-56372.md) | Routine | kernel-64kb: net: tun: fix tun_napi_alloc_frags() (bsc#1235753). | 5.5 | 0.0025 |  |
| [CVE-2024-57809](https://patchblox.com/security/data/cve/CVE-2024-57809.md) | Routine | PCI: imx6: Fix suspend/resume support on i.MX6QDL | 5.5 | 0.0025 |  |
| [CVE-2024-49951](https://patchblox.com/security/data/cve/CVE-2024-49951.md) | Routine | kernel-64kb: Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (bsc#1232158). | 5.5 | 0.0025 |  |
| [CVE-2024-53198](https://patchblox.com/security/data/cve/CVE-2024-53198.md) | Routine | kernel-uek: ELSA-2025-20095: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0024 |  |
| [CVE-2024-56681](https://patchblox.com/security/data/cve/CVE-2024-56681.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2024-56574](https://patchblox.com/security/data/cve/CVE-2024-56574.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2024-47809](https://patchblox.com/security/data/cve/CVE-2024-47809.md) | Routine | dlm: fix possible lkb_resource null dereference | 5.5 | 0.0024 |  |
| [CVE-2024-56569](https://patchblox.com/security/data/cve/CVE-2024-56569.md) | Routine | kernel-64kb: ftrace: Fix regression with module command in stack_trace_filter (bsc#1235031). | 5.5 | 0.0024 |  |
| [CVE-2024-56593](https://patchblox.com/security/data/cve/CVE-2024-56593.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2024-56707](https://patchblox.com/security/data/cve/CVE-2024-56707.md) | Routine | kernel-64kb: octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_dmac_flt.c (bsc#1235545). | 5.5 | 0.0024 |  |
| [CVE-2024-53230](https://patchblox.com/security/data/cve/CVE-2024-53230.md) | Routine | kernel-coco: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2024-53231](https://patchblox.com/security/data/cve/CVE-2024-53231.md) | Routine | kernel-azure: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2024-56572](https://patchblox.com/security/data/cve/CVE-2024-56572.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2024-56575](https://patchblox.com/security/data/cve/CVE-2024-56575.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2024-56578](https://patchblox.com/security/data/cve/CVE-2024-56578.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2024-56584](https://patchblox.com/security/data/cve/CVE-2024-56584.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2024-56589](https://patchblox.com/security/data/cve/CVE-2024-56589.md) | Routine | kernel-64kb: scsi: hisi_sas: Add cond_resched() for no forced preemption model (bsc#1235241). | 5.5 | 0.0024 |  |
| [CVE-2024-53175](https://patchblox.com/security/data/cve/CVE-2024-53175.md) | Routine | kernel-64kb: ipc: fix memleak if msg_init_ns failed in create_ipc_ns (bsc#1234893). | 5.5 | 0.0024 |  |
| [CVE-2025-21664](https://patchblox.com/security/data/cve/CVE-2025-21664.md) | Routine | kernel-64kb: dm thin: make get_first_thin use rcu-safe list first function (bsc#1236262). | 5.5 | 0.0024 |  |
| [CVE-2025-21678](https://patchblox.com/security/data/cve/CVE-2025-21678.md) | Routine | kernel-64kb: gtp: Destroy device along with udp socket's netns dismantle (bsc#1236698). | 5.5 | 0.0024 |  |
| [CVE-2024-56577](https://patchblox.com/security/data/cve/CVE-2024-56577.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2024-56588](https://patchblox.com/security/data/cve/CVE-2024-56588.md) | Routine | kernel-64kb: scsi: hisi_sas: Create all dump files during debugfs initialization (bsc#1235123). | 5.5 | 0.0024 |  |
| [CVE-2024-56573](https://patchblox.com/security/data/cve/CVE-2024-56573.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2025-21682](https://patchblox.com/security/data/cve/CVE-2025-21682.md) | Routine | eth: bnxt: always recalculate features after XDP clearing, fix null-deref | 5.5 | 0.0023 |  |
| [CVE-2024-56723](https://patchblox.com/security/data/cve/CVE-2024-56723.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2024-39282](https://patchblox.com/security/data/cve/CVE-2024-39282.md) | Routine | kernel-uek: ELSA-2025-20480: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0023 |  |
| [CVE-2024-53232](https://patchblox.com/security/data/cve/CVE-2024-53232.md) | Routine | kernel-64kb: iommu/s390: Implement blocking domain (bsc#1235050). | 5.5 | 0.0023 |  |
| [CVE-2024-56747](https://patchblox.com/security/data/cve/CVE-2024-56747.md) | Routine | kernel-64kb: scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb() (bsc#1234934). | 5.5 | 0.0023 |  |
| [CVE-2024-53685](https://patchblox.com/security/data/cve/CVE-2024-53685.md) | Routine | kernel-64kb: ceph: give up on paths longer than PATH_MAX (bsc#1235720). | 5.5 | 0.0023 |  |
| [CVE-2024-56649](https://patchblox.com/security/data/cve/CVE-2024-56649.md) | Routine | kernel-64kb: net: enetc: Do not configure preemptible TCs if SIs do not support (bsc#1235449). | 5.5 | 0.0023 |  |
| [CVE-2024-53091](https://patchblox.com/security/data/cve/CVE-2024-53091.md) | Routine | bpf: Add sk_is_inet and IS_ICSK check in tls_sw_has_ctx_tx/rx | 5.5 | 0.0023 |  |
| [CVE-2024-56748](https://patchblox.com/security/data/cve/CVE-2024-56748.md) | Routine | kernel-64kb: scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb() (bsc#1235627). | 5.5 | 0.0023 |  |
| [CVE-2024-56643](https://patchblox.com/security/data/cve/CVE-2024-56643.md) | Routine | kernel-64kb: dccp: Fix memory leak in dccp_feat_change_recv (bsc#1235132). | 5.5 | 0.0023 |  |
| [CVE-2024-56769](https://patchblox.com/security/data/cve/CVE-2024-56769.md) | Routine | kernel-default-base: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2024-56654](https://patchblox.com/security/data/cve/CVE-2024-56654.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2024-56724](https://patchblox.com/security/data/cve/CVE-2024-56724.md) | Routine | kernel-uek: ELSA-2025-20095: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0023 |  |
| [CVE-2024-56670](https://patchblox.com/security/data/cve/CVE-2024-56670.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2025-21666](https://patchblox.com/security/data/cve/CVE-2025-21666.md) | Routine | kernel-64kb: vsock: prevent null-ptr-deref in vsock_*[has_data\|has_space] (bsc#1236680). | 5.5 | 0.0023 |  |
| [CVE-2025-21670](https://patchblox.com/security/data/cve/CVE-2025-21670.md) | Routine | kernel-64kb: vsock/bpf: return early if transport is not assigned (bsc#1236685). | 5.5 | 0.0023 |  |
| [CVE-2024-55916](https://patchblox.com/security/data/cve/CVE-2024-55916.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2024-56659](https://patchblox.com/security/data/cve/CVE-2024-56659.md) | Routine | kernel-64kb: net: lapb: increase LAPB_HEADER_LEN (bsc#1235439). | 5.5 | 0.0023 |  |
| [CVE-2024-56661](https://patchblox.com/security/data/cve/CVE-2024-56661.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2024-57940](https://patchblox.com/security/data/cve/CVE-2024-57940.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2025-21675](https://patchblox.com/security/data/cve/CVE-2025-21675.md) | Routine | kernel-64kb: net/mlx5: Clear port select structure when fail to create (bsc#1236694). | 5.5 | 0.0023 |  |
| [CVE-2024-53196](https://patchblox.com/security/data/cve/CVE-2024-53196.md) | Routine | dtb-aarch64: KVM: arm64: Do not retire aborted MMIO instruction (bsc#1234906). | 5.5 | 0.0022 |  |
| [CVE-2024-53233](https://patchblox.com/security/data/cve/CVE-2024-53233.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0022 |  |
| [CVE-2024-56531](https://patchblox.com/security/data/cve/CVE-2024-56531.md) | Routine | kernel-uek: ELSA-2025-20095: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0022 |  |
| [CVE-2024-56610](https://patchblox.com/security/data/cve/CVE-2024-56610.md) | Routine | kernel-64kb: kcsan: Turn report_filterlist_lock into a raw_spinlock (bsc#1235390). | 5.5 | 0.0022 |  |
| [CVE-2024-43913](https://patchblox.com/security/data/cve/CVE-2024-43913.md) | Routine | nvme: apple: fix device reference counting | 5.5 | 0.0022 |  |
| [CVE-2024-48873](https://patchblox.com/security/data/cve/CVE-2024-48873.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0022 |  |
| [CVE-2024-50199](https://patchblox.com/security/data/cve/CVE-2024-50199.md) | Routine | kernel-64kb: mm/swapfile: skip HugeTLB pages for unuse_vma (bsc#1233112). | 5.5 | 0.0022 |  |
| [CVE-2024-56679](https://patchblox.com/security/data/cve/CVE-2024-56679.md) | Routine | kernel-64kb: octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_common.c (bsc#1235498). | 5.5 | 0.0022 |  |
| [CVE-2024-56683](https://patchblox.com/security/data/cve/CVE-2024-56683.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0022 |  |
| [CVE-2024-56722](https://patchblox.com/security/data/cve/CVE-2024-56722.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0022 |  |
| [CVE-2024-57931](https://patchblox.com/security/data/cve/CVE-2024-57931.md) | Routine | kernel-64kb: selinux: ignore unknown extended permissions (bsc#1236192). | 5.5 | 0.0022 |  |
| [CVE-2024-56623](https://patchblox.com/security/data/cve/CVE-2024-56623.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 6.0 | 0.0022 |  |
| [CVE-2024-56546](https://patchblox.com/security/data/cve/CVE-2024-56546.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0022 |  |
| [CVE-2024-46896](https://patchblox.com/security/data/cve/CVE-2024-46896.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0022 |  |
| [CVE-2024-53195](https://patchblox.com/security/data/cve/CVE-2024-53195.md) | Routine | kernel-uek: ELSA-2025-20480: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0022 |  |
| [CVE-2024-56691](https://patchblox.com/security/data/cve/CVE-2024-56691.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0022 |  |
| [CVE-2024-56700](https://patchblox.com/security/data/cve/CVE-2024-56700.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0022 |  |
| [CVE-2024-56660](https://patchblox.com/security/data/cve/CVE-2024-56660.md) | Routine | kernel-64kb: net/mlx5: DR, prevent potential error pointer dereference (bsc#1235437). | 5.5 | 0.0022 |  |
| [CVE-2024-56665](https://patchblox.com/security/data/cve/CVE-2024-56665.md) | Routine | bpf,perf: Fix invalid prog_array access in perf_event_detach_bpf_prog | 5.5 | 0.0022 |  |
| [CVE-2024-56780](https://patchblox.com/security/data/cve/CVE-2024-56780.md) | Routine | kernel-coco_debug: Security update for the Linux Kernel | 5.5 | 0.0022 |  |
| [CVE-2024-57884](https://patchblox.com/security/data/cve/CVE-2024-57884.md) | Routine | kernel-64kb: mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (bsc#1235948). | 5.5 | 0.0022 |  |
| [CVE-2024-50258](https://patchblox.com/security/data/cve/CVE-2024-50258.md) | Routine | kernel-64kb: net: fix crash when config small gso_max_size/gso_ipv4_max_size (bsc#1233221). | 5.5 | 0.0022 |  |
| [CVE-2024-55639](https://patchblox.com/security/data/cve/CVE-2024-55639.md) | Routine | kernel-64kb: net: renesas: rswitch: avoid use-after-put for a device tree node (bsc#1235737). | 5.5 | 0.0022 |  |
| [CVE-2024-56592](https://patchblox.com/security/data/cve/CVE-2024-56592.md) | Routine | kernel-64kb: bpf: Call free_htab_elem() after htab_unlock_bucket() (bsc#1235244). | 5.5 | 0.0022 |  |
| [CVE-2024-56607](https://patchblox.com/security/data/cve/CVE-2024-56607.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0022 |  |
| [CVE-2024-56746](https://patchblox.com/security/data/cve/CVE-2024-56746.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0022 |  |
| [CVE-2024-57890](https://patchblox.com/security/data/cve/CVE-2024-57890.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0022 |  |
| [CVE-2024-56532](https://patchblox.com/security/data/cve/CVE-2024-56532.md) | Routine | kernel-syms-azure: Security update for the Linux Kernel | 5.5 | 0.0022 |  |
| [CVE-2024-56543](https://patchblox.com/security/data/cve/CVE-2024-56543.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0022 |  |
| [CVE-2024-56767](https://patchblox.com/security/data/cve/CVE-2024-56767.md) | Routine | kernel-obs-build: Security update for the Linux Kernel | 5.5 | 0.0022 |  |
| [CVE-2024-56698](https://patchblox.com/security/data/cve/CVE-2024-56698.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2024-56728](https://patchblox.com/security/data/cve/CVE-2024-56728.md) | Routine | kernel-64kb: octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c (bsc#1235656). | 5.5 | 0.0021 |  |
| [CVE-2025-21653](https://patchblox.com/security/data/cve/CVE-2025-21653.md) | Routine | kernel-64kb: net_sched: cls_flow: validate TCA_FLOW_RSHIFT attribute (bsc#1236161). | 5.5 | 0.0021 |  |
| [CVE-2024-57938](https://patchblox.com/security/data/cve/CVE-2024-57938.md) | Routine | kernel-azure: net/sctp: Prevent autoclose integer overflow in sctp_association_init() (bsc#1236182). | 5.5 | 0.0021 |  |
| [CVE-2024-56745](https://patchblox.com/security/data/cve/CVE-2024-56745.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 6.1 | 0.0021 |  |
| [CVE-2024-56629](https://patchblox.com/security/data/cve/CVE-2024-56629.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2025-21649](https://patchblox.com/security/data/cve/CVE-2025-21649.md) | Routine | kernel-64kb: net: hns3: fix kernel crash when 1588 is sent on HIP08 devices (bsc#1236143). | 5.5 | 0.0021 |  |
| [CVE-2024-56533](https://patchblox.com/security/data/cve/CVE-2024-56533.md) | Routine | kernel-obs-build: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2024-55881](https://patchblox.com/security/data/cve/CVE-2024-55881.md) | Routine | kernel-64kb: KVM: x86: Play nice with protected guests in complete_hypercall_exit() (bsc#1235745). | 5.5 | 0.0021 |  |
| [CVE-2024-56622](https://patchblox.com/security/data/cve/CVE-2024-56622.md) | Routine | kernel-64kb: scsi: ufs: core: sysfs: Prevent div by zero (bsc#1235251). | 5.5 | 0.0021 |  |
| [CVE-2024-56625](https://patchblox.com/security/data/cve/CVE-2024-56625.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2024-56701](https://patchblox.com/security/data/cve/CVE-2024-56701.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2024-56716](https://patchblox.com/security/data/cve/CVE-2024-56716.md) | Routine | kernel-64kb: netdevsim: prevent bad user input in nsim_dev_health_break_write() (bsc#1235587). | 5.5 | 0.0021 |  |
| [CVE-2024-56726](https://patchblox.com/security/data/cve/CVE-2024-56726.md) | Routine | kernel-uek: ELSA-2025-20095: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0021 |  |
| [CVE-2024-56727](https://patchblox.com/security/data/cve/CVE-2024-56727.md) | Routine | kernel-livepatch-SLE15-SP6_Update_8: octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_flows.c (bsc#1235583). | 5.5 | 0.0021 |  |
| [CVE-2024-56763](https://patchblox.com/security/data/cve/CVE-2024-56763.md) | Routine | kernel-64kb: tracing: Prevent bad count for tracing_cpumask_write (bsc#1235638). | 5.5 | 0.0021 |  |
| [CVE-2024-56774](https://patchblox.com/security/data/cve/CVE-2024-56774.md) | Routine | kernel-64kb: btrfs: add a sanity check for btrfs root in btrfs_search_slot() (bsc#1235653). | 5.5 | 0.0021 |  |
| [CVE-2024-56776](https://patchblox.com/security/data/cve/CVE-2024-56776.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2024-56777](https://patchblox.com/security/data/cve/CVE-2024-56777.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2024-56778](https://patchblox.com/security/data/cve/CVE-2024-56778.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2024-56725](https://patchblox.com/security/data/cve/CVE-2024-56725.md) | Routine | kernel-uek: ELSA-2025-20480: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0021 |  |
| [CVE-2024-57888](https://patchblox.com/security/data/cve/CVE-2024-57888.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2024-57874](https://patchblox.com/security/data/cve/CVE-2024-57874.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 6.1 | 0.0021 |  |
| [CVE-2024-56787](https://patchblox.com/security/data/cve/CVE-2024-56787.md) | Routine | kernel-default: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2024-56611](https://patchblox.com/security/data/cve/CVE-2024-56611.md) | Routine | kernel-64kb: mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM (bsc#1235391). | 5.5 | 0.0021 |  |
| [CVE-2024-56617](https://patchblox.com/security/data/cve/CVE-2024-56617.md) | Routine | kernel-64kb: cacheinfo: Allocate memory during CPU hotplug if not done from the primary CPU (bsc#1235429). | 5.5 | 0.0021 |  |
| [CVE-2024-56620](https://patchblox.com/security/data/cve/CVE-2024-56620.md) | Routine | kernel-64kb: scsi: ufs: qcom: Only free platform MSIs when ESI is enabled (bsc#1235227). | 5.5 | 0.0021 |  |
| [CVE-2024-56760](https://patchblox.com/security/data/cve/CVE-2024-56760.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2024-57933](https://patchblox.com/security/data/cve/CVE-2024-57933.md) | Routine | kernel-64kb: gve: guard XSK operations on the existence of queues (bsc#1236178). | 5.5 | 0.0021 |  |
| [CVE-2025-21632](https://patchblox.com/security/data/cve/CVE-2025-21632.md) | Routine | kernel-64kb: x86/fpu: Ensure shadow stack is active before 'getting' registers (bsc#1236106). | 5.5 | 0.0021 |  |
| [CVE-2025-21656](https://patchblox.com/security/data/cve/CVE-2025-21656.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0020 |  |
| [CVE-2024-57793](https://patchblox.com/security/data/cve/CVE-2024-57793.md) | Routine | kernel-default: virt: tdx-guest: Just leak decrypted memory on unrecoverable errors (bsc#1235768). | 5.5 | 0.0020 |  |
| [CVE-2024-57916](https://patchblox.com/security/data/cve/CVE-2024-57916.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0020 |  |
| [CVE-2025-21662](https://patchblox.com/security/data/cve/CVE-2025-21662.md) | Routine | kernel-64kb: net/mlx5: Fix variable not being completed when function returns (bsc#1236198). | 5.5 | 0.0020 |  |
| [CVE-2024-56729](https://patchblox.com/security/data/cve/CVE-2024-56729.md) | Routine | kernel-64kb: smb: Initialize cfid->tcon before performing network ops (bsc#1235503). | 4.7 | 0.0020 |  |
| [CVE-2024-57903](https://patchblox.com/security/data/cve/CVE-2024-57903.md) | Routine | kernel-64kb: net: restrict SO_REUSEPORT to inet sockets (bsc#1235967). | 5.5 | 0.0020 |  |
| [CVE-2024-47143](https://patchblox.com/security/data/cve/CVE-2024-47143.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0019 |  |
| [CVE-2024-49998](https://patchblox.com/security/data/cve/CVE-2024-49998.md) | Routine | kernel-64kb: net: dsa: improve shutdown sequence (bsc#1232087). | 4.7 | 0.0019 |  |
| [CVE-2024-57913](https://patchblox.com/security/data/cve/CVE-2024-57913.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 4.7 | 0.0019 |  |
| [CVE-2024-57893](https://patchblox.com/security/data/cve/CVE-2024-57893.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 6.3 | 0.0018 |  |
| [CVE-2024-56637](https://patchblox.com/security/data/cve/CVE-2024-56637.md) | Routine | kernel-64kb: netfilter: ipset: Hold module reference while requesting a module (bsc#1235523). | 4.7 | 0.0018 |  |
| [CVE-2024-57935](https://patchblox.com/security/data/cve/CVE-2024-57935.md) | Routine | kernel-azure: Security update for the Linux Kernel | 5.5 | 0.0018 |  |
| [CVE-2025-21674](https://patchblox.com/security/data/cve/CVE-2025-21674.md) | Routine | kernel-64kb: net/mlx5e: Fix inversion dependency warning while enabling IPsec tunnel (bsc#1236688). | 5.5 | 0.0018 |  |
| [CVE-2024-47141](https://patchblox.com/security/data/cve/CVE-2024-47141.md) | Routine | pinmux: Use sequential access to access desc->pinmux data | 5.5 | 0.0017 |  |
| [CVE-2024-57946](https://patchblox.com/security/data/cve/CVE-2024-57946.md) | Routine | kernel-64kb: virtio-blk: do not keep queue frozen during system suspend (bsc#1236247). | 5.5 | 0.0017 |  |
| [CVE-2024-56568](https://patchblox.com/security/data/cve/CVE-2024-56568.md) | Routine | kernel-64kb: iommu/arm-smmu: Defer probe of clients after smmu device bound (bsc#1235032). | 5.5 | 0.0016 |  |
| [CVE-2024-56687](https://patchblox.com/security/data/cve/CVE-2024-56687.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0016 |  |
| [CVE-2025-21651](https://patchblox.com/security/data/cve/CVE-2025-21651.md) | Routine | kernel-64kb: net: hns3: do not auto enable misc vector (bsc#1236145). | 4.7 | 0.0016 |  |
| [CVE-2024-56571](https://patchblox.com/security/data/cve/CVE-2024-56571.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  media: uvcvideo: Require entities to have a non-... | 5.5 | n/a |  |
| [CVE-2024-56741](https://patchblox.com/security/data/cve/CVE-2024-56741.md) | Routine | linux: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | 5.5 | n/a |  |
| [CVE-2024-57915](https://patchblox.com/security/data/cve/CVE-2024-57915.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  usb: gadget: u_serial: Disable ep before setting... | 5.5 | n/a |  |
| [CVE-2024-54680](https://patchblox.com/security/data/cve/CVE-2024-54680.md) | Routine | linux: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | 4.4 | n/a |  |

---

Data as of 2026-11-11T19:49:26Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.