Azure Linux 3.0 Security Update: kernel (CVE-2024-56769)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-56769 advisory. - In the Linux kernel, the following vulnerability has been resolved: media: dvb-frontends: dib3000mb: fix...

Azure Linux 3.0 Security Update: hyperv-daemons (CVE-2024-35810)

The version of hyperv-daemons installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-35810 advisory. - In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Fix the lifetime of...

Azure Linux 3.0 Security Update: kernel (CVE-2024-42314)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-42314 advisory. - In the Linux kernel, the following vulnerability has been resolved: btrfs: fix extent map use-after-free whe...

Azure Linux 3.0 Security Update: hyperv-daemons (CVE-2024-27005)

"The version of hyperv-daemons installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-27005 advisory. - In the Linux kernel, the following vulnerability has been resolved: interconnect: Don't access...

Azure Linux 3.0 Security Update: kernel (CVE-2024-46821)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-46821 advisory. - In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: Fix negative array index rea...

Azure Linux 3.0 Security Update: kernel (CVE-2024-40952)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-40952 advisory. - In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix NULL pointer dereference in...

Azure Linux 3.0 Security Update: kernel (CVE-2024-50023)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-50023 advisory. - In the Linux kernel, the following vulnerability has been resolved: net: phy: Remove LED entry from LEDs lis...

Azure Linux 3.0 Security Update: kernel (CVE-2024-49870)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-49870 advisory. - In the Linux kernel, the following vulnerability has been resolved: cachefiles: fix dentry leak in...

Azure Linux 3.0 Security Update: kernel (CVE-2025-38142)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-38142 advisory. - In the Linux kernel, the following vulnerability has been resolved: hwmon: asus-ec-sensors check sensor inde...

Azure Linux 3.0 Security Update: kernel (CVE-2024-46797)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-46797 advisory. - In the Linux kernel, the following vulnerability has been resolved: powerpc/qspinlock: Fix deadlock in MCS...

Azure Linux 3.0 Security Update: kernel (CVE-2025-38416)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-38416 advisory. - In the Linux kernel, the following vulnerability has been resolved: NFC: nci: uart: Set tty-discdata only in...

Azure Linux 3.0 Security Update: kernel (CVE-2024-58237)

"The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-58237 advisory. - In the Linux kernel, the following vulnerability has been resolved: bpf: consider that tail calls invalidat...

Azure Linux 3.0 Security Update: kernel (CVE-2025-37947)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-37947 advisory. - In the Linux kernel, the following vulnerability has been resolved: ksmbd: prevent out-of-bounds stream writ...

Azure Linux 3.0 Security Update: kernel (CVE-2024-46765)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-46765 advisory. - In the Linux kernel, the following vulnerability has been resolved: ice: protect XDP configuration with a...

CVE-2026-22976 net/sched: sch_qfq: Fix NULL deref when deactivating inactive aggregate in qfq_reset

In the Linux kernel, the following vulnerability has been resolved: net/sched: schqfq: Fix NULL deref when deactivating inactive aggregate in qfqreset qfqclass-leafqdisc-q.qlen 0 does not imply that the class itself is active. Two qfqclass objects may point to the same leafqdisc. This happens whe...

PT-2026-43751

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the AppArmor module where the aa get buffer function unconditionally decrements the cache-hold variable when pulling from the per-cpu list. If hold reaches 0 while cou...

SUSE CVE-2025-68821

In the Linux kernel, the following vulnerability has been resolved: fuse: fix readahead reclaim deadlock Commit e26ee4efbc79 "fuse: allocate ff-releaseargs only if release is needed" skips allocating ff-releaseargs if the server does not implement open. However in doing so, fusepreparerelease now...

SUSE CVE-2025-71134

In the Linux kernel, the following vulnerability has been resolved: mm/pagealloc: change all pageblocks migrate type on coalescing When a page is freed it coalesces with a buddy into a higher order page while possible. When the buddy page migrate type differs, it is expected to be updated to matc...

SUSE CVE-2025-71105

In the Linux kernel, the following vulnerability has been resolved: f2fs: use global inlinexattrslab instead of per-sb slab cache As Hong Yun reported in mailing list: loop7: detected capacity change from 0 to 131072 ------------ cut here ------------ kmemcache of name 'f2fsxattrentry-7:7' alread...

SUSE CVE-2025-71129

In the Linux kernel, the following vulnerability has been resolved: LoongArch: BPF: Sign extend kfunc call arguments The kfunc calls are native calls so they should follow LoongArch calling conventions. Sign extend its arguments properly to avoid kernel panic. This is done by adding a new...