Description
In the Linux kernel, the following vulnerability has been resolved:
mlxsw: spectrum_acl_tcam: Fix stack corruption
When tc filters are first added to a net device, the corresponding local
port gets bound to an ACL group in the device. The group contains a list
of ACLs. In turn, each ACL points to a different TCAM region where the
filters are stored. During forwarding, the ACLs are sequentially
evaluated until a match is found.
One reason to place filters in different regions is when they are added
with decreasing priorities and in an alternating order so that two
consecutive filters can never fit in the same region because of their
key usage.
In Spectrum-2 and newer ASICs the firmware started to report that the
maximum number of ACLs in a group is more than 16, but the layout of the
register that configures ACL groups (PAGT) was not updated to account
for that. It is therefore possible to hit stack corruption [1] in the
rare case where more than 16 ACLs in a group are required.
Fix by limiting the maximum ACL group size to the minimum between what
the firmware reports and the maximum ACLs that fit in the PAGT register.
Add a test case to make sure the machine does not crash when this
condition is hit.
[1]
Kernel panic - not syncing: stack-protector: Kernel stack is corrupted in: mlxsw_sp_acl_tcam_group_update+0x116/0x120
[...]
dump_stack_lvl+0x36/0x50
panic+0x305/0x330
__stack_chk_fail+0x15/0x20
mlxsw_sp_acl_tcam_group_update+0x116/0x120
mlxsw_sp_acl_tcam_group_region_attach+0x69/0x110
mlxsw_sp_acl_tcam_vchunk_get+0x492/0xa20
mlxsw_sp_acl_tcam_ventry_add+0x25/0xe0
mlxsw_sp_acl_rule_add+0x47/0x240
mlxsw_sp_flower_replace+0x1a9/0x1d0
tc_setup_cb_add+0xdc/0x1c0
fl_hw_replace_filter+0x146/0x1f0
fl_change+0xc17/0x1360
tc_new_tfilter+0x472/0xb90
rtnetlink_rcv_msg+0x313/0x3b0
netlink_rcv_skb+0x58/0x100
netlink_unicast+0x244/0x390
netlink_sendmsg+0x1e4/0x440
____sys_sendmsg+0x164/0x260
___sys_sendmsg+0x9a/0xe0
__sys_sendmsg+0x7a/0xc0
do_syscall_64+0x40/0xe0
entry_SYSCALL_64_after_hwframe+0x63/0x6b
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Linux | Linux | 4.19 | 5.10.209 |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | linux | 6.6.15-1 | — |
| Debian 13 | linux | 6.6.15-1 | — |
| Debian 12 | linux | 6.1.82-1 | — |
| Debian 10 | linux-5.10 | 5.10.209-2~deb10u1 | DLA-3841-1 |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Nvidia-BlueField 22.04 LTS | linux-bluefield | 5.15.0-1040.42 | — |
| Ubuntu 22.04 LTS | linux +1 | 5.15.0-102.112 | USN-6725-1 |
| Ubuntu 22.04 LTS | linux-aws | 5.15.0-1057.63 | USN-6725-2 |
| Ubuntu 22.04 LTS | linux-azure | 5.15.0-1060.69 | USN-6725-1 |
| Ubuntu 22.04 LTS | linux-azure-6.5 | 6.5.0-1022.23~22.04.1 | USN-6819-1 |
| Ubuntu 22.04 LTS | linux-azure-fde | 5.15.0-1060.69.1 | USN-6725-1 |
| Ubuntu 22.04 LTS | linux-gcp | 5.15.0-1055.63 | USN-6725-1 |
| Ubuntu 22.04 LTS | linux-gcp-6.5 | 6.5.0-1022.24~22.04.1 | USN-6818-1 |
| Ubuntu 22.04 LTS | linux-gke +1 | 5.15.0-1054.59 | USN-6725-1 |
| Ubuntu 22.04 LTS | linux-gkeop | 5.15.0-1040.46 | USN-6725-1 |
| Ubuntu 22.04 LTS | linux-hwe-6.5 | 6.5.0-41.41~22.04.2 | USN-6818-4 |
| Ubuntu 22.04 LTS | linux-ibm +1 | 5.15.0-1050.53 | USN-6725-1 |
| Ubuntu 22.04 LTS | linux-intel-iotg | 5.15.0-1052.58 | USN-6725-1 |
| Ubuntu 22.04 LTS | linux-lowlatency-hwe-6.5 | 6.5.0-41.41.1~22.04.1 | USN-6818-1 |
| Ubuntu 22.04 LTS | linux-nvidia | 5.15.0-1048.48 | USN-6725-1 |
| Ubuntu 22.04 LTS | linux-nvidia-6.5 | 6.5.0-1021.22 | USN-6818-3 |
| Ubuntu 22.04 LTS | linux-nvidia-tegra | 5.15.0-1025.25 | — |
| Ubuntu 22.04 LTS | linux-nvidia-tegra-igx | 5.15.0-1012.12 | — |
| Ubuntu 22.04 LTS | linux-oem-6.5 | 6.5.0-1024.25 | USN-6819-3 |
| Ubuntu 22.04 LTS | linux-oracle | 5.15.0-1055.61 | USN-6725-1 |
| Ubuntu 22.04 LTS | linux-oracle-6.5 | 6.5.0-1024.24~22.04.1 | USN-6819-4 |
| Ubuntu 22.04 LTS | linux-riscv +22 | No fix yet | — |
| Ubuntu 22.04 LTS | linux-riscv-6.5 | 6.5.0-40.40.1~22.04.1 | — |
| Ubuntu 22.04 LTS | linux-starfive-6.5 | 6.5.0-1015.16~22.04.1 | USN-6819-1 |
| Ubuntu 22.04 LTS | linux-xilinx-zynqmp | 5.15.0-1030.34 | — |
| Ubuntu 20.04 LTS | linux | 5.4.0-189.209 | USN-6896-1 |
| Ubuntu 20.04 LTS | linux-aws | 5.4.0-1128.138 | USN-6896-5 |
| Ubuntu 20.04 LTS | linux-aws-5.15 | 5.15.0-1057.63~20.04.1 | USN-6725-2 |
| Ubuntu 20.04 LTS | linux-azure | 5.4.0-1133.140 | USN-6896-1 |
| Ubuntu 20.04 LTS | linux-azure-5.15 | 5.15.0-1060.69~20.04.1 | USN-6725-1 |
| Ubuntu 20.04 LTS | linux-azure-fde-5.15 | 5.15.0-1060.69~20.04.1.1 | USN-6725-1 |
| Ubuntu 20.04 LTS | linux-bluefield | 5.4.0-1088.95 | USN-6896-1 |
| Ubuntu 20.04 LTS | linux-gcp | 5.4.0-1132.141 | USN-6896-1 |
| Ubuntu 20.04 LTS | linux-gcp-5.15 | 5.15.0-1055.63~20.04.1 | USN-6725-1 |
| Ubuntu 20.04 LTS | linux-gke +26 | No fix yet | — |
| Ubuntu 20.04 LTS | linux-gkeop | 5.4.0-1095.99 | USN-6896-1 |
| Ubuntu 20.04 LTS | linux-gkeop-5.15 | 5.15.0-1040.46~20.04.1 | USN-6725-1 |
| Ubuntu 20.04 LTS | linux-hwe-5.15 +1 | 5.15.0-102.112~20.04.1 | USN-6725-1 |
| Ubuntu 20.04 LTS | linux-ibm | 5.4.0-1075.80 | USN-6896-1 |
| Ubuntu 20.04 LTS | linux-ibm-5.15 | 5.15.0-1050.53~20.04.1 | USN-6725-1 |
| Ubuntu 20.04 LTS | linux-intel-iotg-5.15 | 5.15.0-1052.58~20.04.1 | USN-6725-1 |
| Ubuntu 20.04 LTS | linux-iot | 5.4.0-1040.41 | USN-6896-5 |
| Ubuntu 20.04 LTS | linux-kvm | 5.4.0-1116.123 | USN-6896-1 |
| Ubuntu 20.04 LTS | linux-nvidia-tegra-5.15 | 5.15.0-1025.25~20.04.1 | — |
| Ubuntu 20.04 LTS | linux-oracle | 5.4.0-1127.136 | USN-6896-3 |
| Ubuntu 20.04 LTS | linux-oracle-5.15 | 5.15.0-1055.61~20.04.1 | USN-6725-1 |
| Ubuntu 20.04 LTS | linux-raspi | 5.4.0-1112.124 | USN-6896-4 |
| Ubuntu 20.04 LTS | linux-riscv-5.15 | 5.15.0-1053.57~20.04.1 | — |
| Ubuntu 20.04 LTS | linux-xilinx-zynqmp | 5.4.0-1047.51 | USN-6896-3 |
| Ubuntu 18.04 LTS | linux-gcp +14 | No fix yet | — |
| Ubuntu 16.04 LTS | linux-hwe-edge | No fix yet | — |
Show 7 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro Realtime 24.04 LTS | linux-raspi-realtime | 6.8.0-2001.1 | — |
| Ubuntu Pro Realtime 22.04 LTS | linux-intel-iot-realtime | 5.15.0-1050.52 | — |
| Ubuntu Pro Realtime 22.04 LTS | linux-realtime | 5.15.0-1058.66 | — |
| Ubuntu Pro FIPS 20.04 LTS | linux-fips +3 | No fix yet | — |
| Ubuntu Pro FIPS-updates 22.04 LTS | linux-aws-fips | 5.15.0-1057.63+fips1 | — |
| Ubuntu Pro FIPS-updates 22.04 LTS | linux-azure-fips | 5.15.0-1060.69+fips1 | — |
| Ubuntu Pro FIPS-updates 22.04 LTS | linux-fips | 5.15.0-102.112+fips1 | — |
| Ubuntu Pro FIPS-updates 22.04 LTS | linux-gcp-fips | 5.15.0-1055.63+fips2 | — |
| Ubuntu Pro FIPS-updates 20.04 LTS | linux-aws-fips | 5.4.0-1128.138+fips1 | — |
| Ubuntu Pro FIPS-updates 20.04 LTS | linux-azure-fips | 5.4.0-1133.140+fips1 | — |
| Ubuntu Pro FIPS-updates 20.04 LTS | linux-fips | 5.4.0-1102.112 | — |
| Ubuntu Pro FIPS-updates 20.04 LTS | linux-gcp-fips | 5.4.0-1132.141+fips1 | — |
| Ubuntu Pro FIPS-preview 22.04 LTS | linux-fips +3 | No fix yet | — |
| Ubuntu Pro 18.04 LTS | linux-aws-5.4 | 5.4.0-1128.138~18.04.1 | USN-6896-5 |
| Ubuntu Pro 18.04 LTS | linux-azure-5.4 | 5.4.0-1133.140~18.04.1 | USN-6896-1 |
| Ubuntu Pro 18.04 LTS | linux-gcp-5.4 | 5.4.0-1132.141~18.04.1 | USN-6896-1 |
| Ubuntu Pro 18.04 LTS | linux-hwe-5.4 | 5.4.0-189.209~18.04.1 | USN-6896-2 |
| Ubuntu Pro 18.04 LTS | linux-ibm-5.4 | 5.4.0-1075.80~18.04.1 | USN-6896-1 |
| Ubuntu Pro 18.04 LTS | linux-oracle-5.4 | 5.4.0-1127.136~18.04.1 | USN-6896-2 |
| Ubuntu Pro 18.04 LTS | linux-raspi-5.4 | 5.4.0-1112.124~18.04.1 | USN-6896-4 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 9 | bpftool | 7.3.0-427.13.1.el9_4 | RHSA-2024:2394 |
| RHEL 9 | rv +64 | 5.14.0-427.13.1.el9_4 | RHSA-2024:2394 |
| RHEL 8 | kernel-rt +12 | 4.18.0-553.16.1.rt7.357.el8_10 | RHSA-2024:5102 |
| RHEL 8 | perf +26 | 4.18.0-553.16.1.el8_10 | RHSA-2024:5101 |
Show 11 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Rhev Hypervisor 4 | perf +2 | 4.18.0-372.102.1.el8_6 | RHSA-2024:2674 |
| RHEL 9.2 EUS | bpftool | 7.0.0-284.62.1.el9_2 | RHSA-2024:1881 |
| RHEL 9.2 EUS | kernel-rt +14 | 5.14.0-284.62.1.rt14.347.el9_2 | RHSA-2024:1882 |
| RHEL 9.2 EUS | perf +48 | 5.14.0-284.62.1.el9_2 | RHSA-2024:1881 |
| RHEL 9.0 EUS | kernel-rt +12 | 5.14.0-70.101.1.rt21.173.el9_0 | RHSA-2024:3414 |
| RHEL 9.0 EUS | perf +29 | 5.14.0-70.101.1.el9_0 | RHSA-2024:3421 |
| RHEL 8.8 EUS | perf +26 | 4.18.0-477.58.1.el8_8 | RHSA-2024:3810 |
| RHEL 8.6 EUS | perf +26 | 4.18.0-372.102.1.el8_6 | RHSA-2024:2674 |
| RHEL 8.4 TUS | kernel-rt +12 | 4.18.0-305.130.1.rt7.206.el8_4 | RHSA-2024:2585 |
| RHEL 8.4 TUS | perf +17 | 4.18.0-305.130.1.el8_4 | RHSA-2024:2582 |
| RHEL 8.4 E4S | perf +18 | 4.18.0-305.130.1.el8_4 | RHSA-2024:2582 |
| RHEL 8.4 AUS | perf +17 | 4.18.0-305.130.1.el8_4 | RHSA-2024:2582 |
| RHEL 8.2 TUS | kernel-rt +12 | 4.18.0-193.133.1.rt13.184.el8_2 | RHSA-2024:2008 |
| RHEL 8.2 TUS | perf +17 | 4.18.0-193.133.1.el8_2 | RHSA-2024:2006 |
| RHEL 8.2 E4S | perf +18 | 4.18.0-193.133.1.el8_2 | RHSA-2024:2006 |
| RHEL 8.2 AUS | perf +17 | 4.18.0-193.133.1.el8_2 | RHSA-2024:2006 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 9 | bpftool | 7.3.0-427.13.1.el9_4 | ALSA-2024:2394 |
| AlmaLinux 9 | rv +60 | 5.14.0-427.13.1.el9_4 | ALSA-2024:2394 |
| AlmaLinux 8 | kernel-rt +11 | 4.18.0-553.16.1.rt7.357.el8_10 | ALSA-2024:5102 |
| AlmaLinux 8 | perf +24 | 4.18.0-553.16.1.el8_10 | ALSA-2024:5101 |
Rocky Linux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Rocky Linux 8 | kernel | 4.18.0-553.16.1.el8_10 | RXSA-2024:5101, RLSA-2024:5101 |
| Rocky Linux 8 | kernel-rt | 4.18.0-553.16.1.rt7.357.el8_10 | RLSA-2024:5102 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP5 | kernel-64kb +6 | 5.14.21-150500.55.52.1 | SUSE-SU-2024:0858-1 |
| SLES 15 SP5 | kernel-azure +2 | 5.14.21-150500.33.37.1 | SUSE-SU-2024:0855-1 |
| SLES 15 SP5 | kernel-default-base | 5.14.21-150500.55.52.1.150500.6.23.1 | SUSE-SU-2024:0858-1 |
| SLES 15 SP4 | kernel-64kb +3 | 5.14.21-150400.24.111.2 | SUSE-SU-2024:0900-1 |
| SLES 15 SP4 | kernel-default-base | 5.14.21-150400.24.111.2.150400.24.52.1 | SUSE-SU-2024:0900-1 |
| SLES 15 SP4 | kernel-syms +2 | 5.14.21-150400.24.111.1 | SUSE-SU-2024:0900-1 |
| SLES 15 SP3 | kernel-64kb +6 | 5.3.18-150300.59.153.2 | SUSE-SU-2024:0857-1 |
| SLES 15 SP3 | kernel-default-base | 5.3.18-150300.59.153.2.150300.18.90.2 | SUSE-SU-2024:0857-1 |
| SLES 15 SP3 | kernel-syms | 5.3.18-150300.59.153.1 | SUSE-SU-2024:0857-1 |
| SLES 15 SP2 | kernel-default-base | 5.3.18-150200.24.183.1.150200.9.93.2 | SUSE-SU-2024:0926-1 |
| SLES 15 SP2 | kernel-docs +5 | 5.3.18-150200.24.183.1 | SUSE-SU-2024:0926-1 |
| SLES 12 SP5 | kernel-syms +2 | 4.12.14-122.266.1 | SUSE-SU-2025:02334-1 |
Show 20 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES for SAP 15 SP4 | kernel-default-base | 5.14.21-150400.24.111.2.150400.24.52.1 | SUSE-SU-2024:0900-1 |
| SLES for SAP 15 SP4 | kernel-docs +1 | 5.14.21-150400.24.111.2 | SUSE-SU-2024:0900-1 |
| SLES for SAP 15 SP4 | kernel-syms +2 | 5.14.21-150400.24.111.1 | SUSE-SU-2024:0900-1 |
| SLES for SAP 15 SP3 | kernel-default-base | 5.3.18-150300.59.153.2.150300.18.90.2 | SUSE-SU-2024:0857-1 |
| SLES for SAP 15 SP3 | kernel-docs +4 | 5.3.18-150300.59.153.2 | SUSE-SU-2024:0857-1 |
| SLES for SAP 15 SP3 | kernel-syms | 5.3.18-150300.59.153.1 | SUSE-SU-2024:0857-1 |
| SLES for SAP 15 SP2 | kernel-default-base | 5.3.18-150200.24.183.1.150200.9.93.2 | SUSE-SU-2024:0926-1 |
| SLES for SAP 15 SP2 | kernel-docs +5 | 5.3.18-150200.24.183.1 | SUSE-SU-2024:0926-1 |
| SLE Micro 5.5 | kernel-default | 5.14.21-150500.55.52.1 | SUSE-SU-2024:0858-1 |
| SLE Micro 5.5 | kernel-default-base | 5.14.21-150500.55.52.1.150500.6.23.1 | SUSE-SU-2024:0858-1 |
| SLE Micro 5.5 | kernel-rt +1 | 5.14.21-150500.13.38.1 | SUSE-SU-2024:0910-1 |
| SLE Micro 5.4 | kernel-default | 5.14.21-150400.24.111.2 | SUSE-SU-2024:0900-1 |
| SLE Micro 5.4 | kernel-default-base | 5.14.21-150400.24.111.2.150400.24.52.1 | SUSE-SU-2024:0900-1 |
| SLE Micro 5.4 | kernel-rt +1 | 5.14.21-150400.15.71.1 | SUSE-SU-2024:0977-1 |
| SLE Micro 5.3 | kernel-default | 5.14.21-150400.24.111.2 | SUSE-SU-2024:0900-1 |
| SLE Micro 5.3 | kernel-default-base | 5.14.21-150400.24.111.2.150400.24.52.1 | SUSE-SU-2024:0900-1 |
| SLE Micro 5.3 | kernel-rt +1 | 5.14.21-150400.15.71.1 | SUSE-SU-2024:0977-1 |
| SLE Micro 5.2 | kernel-default | 5.3.18-150300.59.153.2 | SUSE-SU-2024:0857-1 |
| SLE Micro 5.2 | kernel-default-base | 5.3.18-150300.59.153.2.150300.18.90.2 | SUSE-SU-2024:0857-1 |
| SLE Micro 5.2 | kernel-rt +1 | 5.3.18-150300.161.1 | SUSE-SU-2024:0856-1 |
| SLE Micro 5.1 | kernel-default | 5.3.18-150300.59.153.2 | SUSE-SU-2024:0857-1 |
| SLE Micro 5.1 | kernel-default-base | 5.3.18-150300.59.153.2.150300.18.90.2 | SUSE-SU-2024:0857-1 |
| SLE Micro 5.1 | kernel-rt +1 | 5.3.18-150300.161.1 | SUSE-SU-2024:0856-1 |
| SLE Live Patching 15 SP5 | kernel-default | 5.14.21-150500.55.52.1 | SUSE-SU-2024:0858-1 |
| SLE Live Patching 15 SP5 | kernel-livepatch-SLE15-SP5_Update_11 +1 | 1-150500.11.3.1 | SUSE-SU-2024:0910-1, SUSE-SU-2024:0858-1 |
| SLE Live Patching 15 SP4 | kernel-default | 5.14.21-150400.24.111.2 | SUSE-SU-2024:0900-1 |
| SLE Live Patching 15 SP4 | kernel-livepatch-SLE15-SP4-RT_Update_19 | 1-150400.1.3.1 | SUSE-SU-2024:0977-1 |
| SLE Live Patching 15 SP4 | kernel-livepatch-SLE15-SP4_Update_24 | 1-150400.9.3.1 | SUSE-SU-2024:0900-1 |
| SLE Live Patching 15 SP3 | kernel-default | 5.3.18-150300.59.153.2 | SUSE-SU-2024:0857-1 |
| SLE Live Patching 15 SP3 | kernel-livepatch-SLE15-SP3_Update_42 | 1-150300.7.3.2 | SUSE-SU-2024:0857-1 |
| SLE Live Patching 15 SP2 | kernel-default | 5.3.18-150200.24.183.1 | SUSE-SU-2024:0926-1 |
| SLE Live Patching 15 SP2 | kernel-livepatch-SLE15-SP2_Update_46 | 1-150200.5.3.2 | SUSE-SU-2024:0926-1 |
| SLE Live Patching 12 SP5 | kernel-default | 4.12.14-122.266.1 | SUSE-SU-2025:02334-1 |
| SLE Live Patching 12 SP5 | kgraft-patch-SLE12-SP5_Update_70 | 1-8.5.1 | SUSE-SU-2025:02334-1 |
| SLE HPC 15 SP4 | kernel-64kb +2 | 5.14.21-150400.24.111.2 | SUSE-SU-2024:0900-1 |
| SLE HPC 15 SP4 | kernel-default-base | 5.14.21-150400.24.111.2.150400.24.52.1 | SUSE-SU-2024:0900-1 |
| SLE HPC 15 SP4 | kernel-syms +2 | 5.14.21-150400.24.111.1 | SUSE-SU-2024:0900-1 |
| SLE HPC 15 SP3 | kernel-64kb +5 | 5.3.18-150300.59.153.2 | SUSE-SU-2024:0857-1 |
| SLE HPC 15 SP3 | kernel-default-base | 5.3.18-150300.59.153.2.150300.18.90.2 | SUSE-SU-2024:0857-1 |
| SLE HPC 15 SP3 | kernel-syms | 5.3.18-150300.59.153.1 | SUSE-SU-2024:0857-1 |
| SLE HPC 15 SP2 | kernel-default-base | 5.3.18-150200.24.183.1.150200.9.93.2 | SUSE-SU-2024:0926-1 |
| SLE HPC 15 SP2 | kernel-docs +5 | 5.3.18-150200.24.183.1 | SUSE-SU-2024:0926-1 |
| SUSE Real Time Module 15 SP5 | kernel-rt +3 | 5.14.21-150500.13.38.1 | SUSE-SU-2024:0910-1 |
| SUSE Manager Server 4.3 | kernel-default +1 | 5.14.21-150400.24.111.2 | SUSE-SU-2024:0900-2, SUSE-SU-2024:0900-1 |
| SUSE Manager Server 4.3 | kernel-default-base | 5.14.21-150400.24.111.2.150400.24.52.1 | SUSE-SU-2024:0900-2, SUSE-SU-2024:0900-1 |
| SUSE Manager Server 4.3 | kernel-syms +1 | 5.14.21-150400.24.111.1 | SUSE-SU-2024:0900-2, SUSE-SU-2024:0900-1 |
| SUSE Manager Proxy 4.3 | kernel-default | 5.14.21-150400.24.111.2 | SUSE-SU-2024:0900-2, SUSE-SU-2024:0900-1 |
| SUSE Manager Proxy 4.3 | kernel-default-base | 5.14.21-150400.24.111.2.150400.24.52.1 | SUSE-SU-2024:0900-2, SUSE-SU-2024:0900-1 |
| SUSE Manager Proxy 4.3 | kernel-syms +1 | 5.14.21-150400.24.111.1 | SUSE-SU-2024:0900-2, SUSE-SU-2024:0900-1 |
| SUSE Enterprise Storage 7.1 | kernel-64kb +5 | 5.3.18-150300.59.153.2 | SUSE-SU-2024:0857-1 |
| SUSE Enterprise Storage 7.1 | kernel-default-base | 5.3.18-150300.59.153.2.150300.18.90.2 | SUSE-SU-2024:0857-1 |
| SUSE Enterprise Storage 7.1 | kernel-syms | 5.3.18-150300.59.153.1 | SUSE-SU-2024:0857-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Leap 15.5 | dtb-aarch64 +10 | 5.14.21-150500.55.52.1 | SUSE-SU-2024:0858-1 |
| openSUSE Leap 15.5 | kernel-azure +2 | 5.14.21-150500.33.37.1 | SUSE-SU-2024:0855-1 |
| openSUSE Leap 15.5 | kernel-default-base | 5.14.21-150500.55.52.1.150500.6.23.1 | SUSE-SU-2024:0858-1 |
| openSUSE Leap 15.5 | kernel-rt +3 | 5.14.21-150500.13.38.1 | SUSE-SU-2024:0910-1 |
Show 2 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Leap Micro 5.4 | kernel-default | 5.14.21-150400.24.111.2 | SUSE-SU-2024:0900-1 |
| openSUSE Leap Micro 5.4 | kernel-default-base | 5.14.21-150400.24.111.2.150400.24.52.1 | SUSE-SU-2024:0900-1 |
| openSUSE Leap Micro 5.4 | kernel-rt | 5.14.21-150400.15.71.1 | SUSE-SU-2024:0977-1 |
| openSUSE Leap Micro 5.3 | kernel-default | 5.14.21-150400.24.111.2 | SUSE-SU-2024:0900-1 |
| openSUSE Leap Micro 5.3 | kernel-default-base | 5.14.21-150400.24.111.2.150400.24.52.1 | SUSE-SU-2024:0900-1 |
| openSUSE Leap Micro 5.3 | kernel-rt | 5.14.21-150400.15.71.1 | SUSE-SU-2024:0977-1 |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 9 | bpftool | 7.3.0-427.13.1.el9_4 | ELSA-2024-2394 |
| Oracle Linux 9 | rv +27 | 5.14.0-427.13.1.el9_4 | ELSA-2024-2394 |
| Oracle Linux 8 | perf +19 | 4.18.0-553.16.1.el8_10 | ELSA-2024-5101 |
Advisories 48
- RHSA-2024:5101 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Nov 13, 2026
- RHSA-2024:3810 Red Hat Security Advisory: kernel security and bug fix update Red Hat Security Advisories (RHSA) · Nov 13, 2026
- USN-6819-4 linux-oracle-6.5 vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-6818-3 linux-nvidia-6.5 vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-6818-1 linux, linux-gcp, linux-gcp-6.5, linux-lowlatency, linux-lowlatency-hwe-6.5, linux-raspi vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-6819-3 linux-oem-6.5 vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-6818-4 linux-hwe-6.5 vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-6819-1 linux-azure, linux-azure-6.5, linux-starfive, linux-starfive-6.5 vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-6725-1 linux, linux-azure, linux-azure-5.15, linux-azure-fde, linux-azure-fde-5.15, linux-gcp, linux-gcp-5.15, linux-gke, linux-gkeop, linux-gkeop-5.15, linux-hwe-5.15, linux-ibm, linux-ibm-5.15, linux-intel-iotg, linux-intel-iotg-5.15, linux-kvm, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-nvidia, linux-oracle, linux-oracle-5.15, linux-raspi vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-6725-2 linux-aws, linux-aws-5.15 vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- ALSA-2024:2394 Important: kernel security, bug fix, and enhancement update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2024:5102 Important: kernel-rt security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2024:5101 Important: kernel security update AlmaLinux Security Advisories · Oct 29, 2026
- USN-6896-1 linux, linux-azure, linux-azure-5.4, linux-bluefield, linux-gcp, linux-gcp-5.4, linux-gkeop, linux-ibm, linux-ibm-5.4, linux-kvm vulnerabilities Ubuntu Security Notices (USN) · Oct 27, 2026
- USN-6896-5 linux-aws, linux-aws-5.4, linux-iot vulnerabilities Ubuntu Security Notices (USN) · Oct 27, 2026
- USN-6896-3 linux-oracle, linux-xilinx-zynqmp vulnerabilities Ubuntu Security Notices (USN) · Oct 27, 2026
- USN-6896-2 linux-hwe-5.4, linux-oracle-5.4 vulnerabilities Ubuntu Security Notices (USN) · Oct 27, 2026
- USN-6896-4 linux-raspi, linux-raspi-5.4 vulnerabilities Ubuntu Security Notices (USN) · Oct 27, 2026
- RHSA-2024:3421 Red Hat Security Advisory: kernel security and bug fix update Red Hat Security Advisories (RHSA) · Oct 17, 2026
- RHSA-2024:5102 Red Hat Security Advisory: kernel-rt security update Red Hat Security Advisories (RHSA) · Oct 17, 2026
- RHSA-2024:2394 Red Hat Security Advisory: kernel security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Oct 17, 2026
- RHSA-2024:2585 Red Hat Security Advisory: kernel-rt security and bug fix update Red Hat Security Advisories (RHSA) · Oct 9, 2026
- RHSA-2024:2582 Red Hat Security Advisory: kernel security and bug fix update Red Hat Security Advisories (RHSA) · Oct 9, 2026
- RHSA-2024:2008 Red Hat Security Advisory: kernel-rt security update Red Hat Security Advisories (RHSA) · Oct 9, 2026
- RHSA-2024:2006 Red Hat Security Advisory: kernel security and bug fix update Red Hat Security Advisories (RHSA) · Oct 9, 2026
- RHSA-2024:3414 Red Hat Security Advisory: kernel-rt security and bug fix update Red Hat Security Advisories (RHSA) · Aug 26, 2026
- RHSA-2024:2674 Red Hat Security Advisory: kernel security and bug fix update Red Hat Security Advisories (RHSA) · Aug 26, 2026
- RHSA-2024:1882 Red Hat Security Advisory: kernel-rt security and bug fix update Red Hat Security Advisories (RHSA) · Aug 26, 2026
- RHSA-2024:1881 Red Hat Security Advisory: kernel security and bug fix update Red Hat Security Advisories (RHSA) · Aug 26, 2026
- WID-SEC-2024-1226 Red Hat OpenShift: Mehrere Schwachstellen BSI CERT-Bund (WID) · May 11, 2026
- SUSE-SU-2025:02334-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Mar 23, 2026
- DLA-3841-1 linux-5.10 - security update Debian Security (DSA / DLA) · Mar 9, 2026
- WID-SEC-2024-1913 Red Hat OpenShift Container Platform: Mehrere Schwachstellen BSI CERT-Bund (WID) · Mar 3, 2026
- WID-SEC-2024-0473 Linux Kernel: Mehrere Schwachstellen BSI CERT-Bund (WID) · Feb 16, 2026
- RXSA-2024:5101 Important: kernel security update Rocky Linux Security Advisories · Feb 5, 2026
- RLSA-2024:5102 Important: kernel-rt security update Rocky Linux Security Advisories · Feb 5, 2026
- RLSA-2024:5101 Important: kernel security update Rocky Linux Security Advisories · Feb 5, 2026
- SUSE-SU-2024:0926-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:0977-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:0858-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:0855-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:0910-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:0857-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · May 2, 2025
- SUSE-SU-2024:0900-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · May 2, 2025
- SUSE-SU-2024:0900-2 Security update for the Linux Kernel SUSE / openSUSE Security Updates · May 2, 2025
- SUSE-SU-2024:0856-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · May 2, 2025
- ELSA-2024-5101 Important: kernel security update (Oracle Linux 8) Oracle Linux Security Advisories (ELSA) · Aug 8, 2024
- ELSA-2024-2394 Important: kernel security, bug fix, and enhancement update (Oracle Linux 9) Oracle Linux Security Advisories (ELSA) · May 2, 2024
References
- https://git.kernel.org/stable/c/56750ea5d15426b5f307554e7699e8b5f76c3182
- https://git.kernel.org/stable/c/348112522a35527c5bcba933b9fefb40a4f44f15
- https://git.kernel.org/stable/c/6fd24675188d354b1cad47462969afa2ab09d819
- https://git.kernel.org/stable/c/2f5e1565740490706332c06f36211d4ce0f88e62
- https://git.kernel.org/stable/c/a361c2c1da5dbb13ca67601cf961ab3ad68af383
- https://git.kernel.org/stable/c/483ae90d8f976f8339cf81066312e1329f2d3706