Not Affected — disabled features

Overview: These CVE groups have no reachable code path on the Root Lock kernel because the feature is not compiled in. Confirm a gate with grep CONFIG_<GATE> /boot/config-$(uname -r).

Compiled-in residuals and write-ups: Compiled-in CVEs. Method: Kernel Security Transparency.

Root Lock is built for production servers, regulated workstations, build infrastructure, and AI agent sandboxes. The kernel does not include subsystems these workloads do not require. Each absent subsystem eliminates the full class of vulnerabilities that subsystem carries, without requiring per-CVE evaluation.

Where a CVE in this section achieves root privilege, Lockdown provides the same backstop described in CVE-2026-31431. An attacker who already has root still cannot persist and still cannot edit the allowlist. The files are immutable. The kernel refuses the write.

BPF Syscall Interface

Status: Not Affected
Config gate: CONFIG_BPF_SYSCALL not set
CVEs covered: CVE-2021-20194

The BPF syscall interface is the kernel entry point through which user-space programs load and run BPF programs in kernel context. CVE-2021-20194 describes a heap overflow in the BPF verifier reachable by a local user who submits a crafted BPF program, gaining elevated privilege.

CONFIG_BPF_SYSCALL is not compiled on 5.19.6 and is not compiled on the 6.18 pin (bpf() returns ENOSYS). There is no verifier, no BPF program store, and no reachable code path for this CVE.

Netfilter nftables

Status: Not Affected
Component: CONFIG_NF_TABLES built as kernel module (m) per HS-DEV-004 Docker capability stack
CVEs covered: CVE-2023-32233, CVE-2023-0179

nftables is the in-kernel packet classification and filtering framework. CVE-2023-32233 describes a use-after-free in anonymous set handling reachable via crafted netlink messages by a local user with CAP_NET_ADMIN. CVE-2023-0179 describes a stack-based buffer overflow in the nftables netlink implementation reachable from a user namespace.

CONFIG_NF_TABLES is built as a loadable module for container networking (HS-DEV-004). It is not loaded at boot on a default Root Lock install — nftables netlink handlers and rule objects are absent until the module is explicitly loaded (for example when Docker or container networking is enabled). Root Lock install scripts ship no nftables rules. If you load the module and configure nftables rules, the relevant code paths become reachable.

Network Traffic Control Schedulers

Status: Not Affected
Config gate: CONFIG_NET_SCH_QFQ, CONFIG_NET_CLS_TCINDEX not set
CVEs covered: CVE-2023-31436, CVE-2023-1829, CVE-2023-1281

These CVEs cover two traffic control components: the QFQ (Quick Fair Queueing) scheduler and the TCINDEX traffic control filter. CVE-2023-31436 describes an out-of-bounds write in the QFQ scheduler reachable via tc qdisc add. CVE-2023-1829 and CVE-2023-1281 both describe use-after-free conditions in the TCINDEX filter reachable by a local user with CAP_NET_ADMIN.

Neither CONFIG_NET_SCH_QFQ nor the TCINDEX traffic control filter is compiled into the Root Lock kernel. The relevant scheduler and filter code does not exist and cannot be reached via tc.

Bluetooth Stack

Status: Not Affected
Config gate: CONFIG_BT not set
CVEs covered: CVE-2022-42896, CVE-2022-45934, CVE-2022-3564, CVE-2022-3640, CVE-2023-1989, and 3 additional CVEs in this group

These CVEs cover the kernel Bluetooth stack across the L2CAP, HCI, and RFCOMM layers. They include type confusion, use-after-free, and memory corruption conditions reachable by an attacker in proximity to the target device over Bluetooth, or by a local user with socket access to the Bluetooth subsystem.

CONFIG_BT is not compiled into the Root Lock kernel. The Bluetooth socket family, HCI layer, and all Bluetooth protocol drivers are not present — there is no reachable code path for any CVE in this group.

Protocol Families: TLS, RDS, ROSE, MCTP, and AF_RXRPC

Status: Not Affected
Config gate: CONFIG_TLS, CONFIG_RDS, CONFIG_ROSE, CONFIG_MCTP, CONFIG_AF_RXRPC not set
CVEs covered: CVE-2023-28466, CVE-2023-1078, CVE-2022-2961, CVE-2022-3977, CVE-2023-2006

These CVEs cover five distinct socket protocol families, each gated by its own config option:

• TLS (CVE-2023-28466) — a race condition in the in-kernel TLS record layer reachable via a socket configured with SO_TLS_TX
• RDS (CVE-2023-1078) — a heap out-of-bounds write in the Reliable Datagram Sockets implementation
• ROSE (CVE-2022-2961) — a race condition in the X.25 ROSE packet radio protocol socket layer
• MCTP (CVE-2022-3977) — a use-after-free in the Management Component Transport Protocol socket layer
• AF_RXRPC (CVE-2023-2006) — a race condition in the RxRPC remote procedure call socket family

None of these protocol families is compiled into the Root Lock kernel. Attempting to open a socket in any of them returns EAFNOSUPPORT — there is no reachable code path for any CVE in this group.

NFS Server

Status: Not Affected
Config gate: CONFIG_NFSD not set
CVEs covered: CVE-2022-43945, CVE-2022-4379, CVE-2023-1652

The kernel NFS server (nfsd) allows a Linux host to export filesystems to NFS clients over the network. CVE-2022-43945 describes a buffer overflow in the NFSv4 XDR decoder reachable from the network. CVE-2022-4379 describes a use-after-free in the NFSv4.1 setclientid_confirm handler. CVE-2023-1652 describes a use-after-free in the NFSv4 lease handling.

CONFIG_NFSD is not compiled into the Root Lock kernel. The kernel NFS server is not present — no NFS exports are possible and there is no reachable code path for any CVE in this group.

Filesystem Drivers

Status: Not Affected
Config gate: CONFIG_NTFS3_FS, CONFIG_NTFS_FS, CONFIG_JFS_FS, CONFIG_NILFS2_FS not set
CVEs covered: CVE-2022-48423, CVE-2022-48424, CVE-2022-48425, CVE-2023-26544, CVE-2023-26506, CVE-2023-26507, CVE-2023-2124, CVE-2020-27815, CVE-2022-2978

These CVEs cover four filesystem drivers absent from the Root Lock kernel. The CVEs include out-of-bounds reads and writes and use-after-free conditions across the NTFS3 driver (CONFIG_NTFS3_FS), the legacy NTFS driver (CONFIG_NTFS_FS), JFS (CONFIG_JFS_FS), and NILFS2 (CONFIG_NILFS2_FS). Several are triggerable by mounting a crafted filesystem image. (CONFIG_XFS_FS is documented separately — it is built as module m on the 6.18.x kernel.)

None of these four filesystems is compiled into the Root Lock kernel. Mounting an image in any of these formats returns an error — the filesystem code does not exist in the running kernel and there is no reachable code path for any CVE in this group.

Hardware-Specific and Virtualization Drivers

Status: Not Affected
Config gate: CONFIG_DVB_CORE, CONFIG_SGI_GRU, CONFIG_FPGA, CONFIG_KVM_INTEL not set
CVEs covered: CVE-2022-45884, CVE-2022-45885, CVE-2022-45886, CVE-2022-45919, CVE-2022-3424, CVE-2023-26242, CVE-2022-2196

These CVEs cover four hardware-specific drivers absent from the Root Lock kernel:

• DVB Core (CVE-2022-45884, CVE-2022-45885, CVE-2022-45886, CVE-2022-45919) — use-after-free conditions in the Digital Video Broadcast core driver, reachable by a local user with access to a DVB device
• SGI GRU (CVE-2022-3424) — a use-after-free in the SGI UV coprocessor driver triggered via ioctl on the GRU device
• Intel FPGA (CVE-2023-26242) — a memory safety issue in the Intel FPGA BMC secure update driver
• KVM Intel (CVE-2022-2196) — a guest-to-host isolation bypass in nested VMX (nVMX) handling, reachable from inside a guest VM

CONFIG_DVB_CORE, CONFIG_SGI_GRU, the Intel FPGA driver, and CONFIG_KVM_INTEL are not compiled into the Root Lock kernel. Root Lock runs as a guest under other hypervisors — it does not host virtual machines. None of the hardware interfaces these drivers expose is available, and there is no reachable code path for any CVE in this group.

USB Network Adapter and SMB Server

Status: Not Affected
Config gate: CONFIG_USB_NET_RNDIS_WLAN, CONFIG_SMB_SERVER not set
CVEs covered: CVE-2023-23559, CVE-2023-0210

• USB RNDIS WLAN (CVE-2023-23559) — an integer overflow in the RNDIS wireless USB adapter driver triggerable by a physically present attacker with a crafted USB device
• SMB Server / ksmbd (CVE-2023-0210) — a heap out-of-bounds read in ksmbd, the in-kernel SMB server, reachable from the network without authentication via a crafted SMB2 NEGOTIATE request

Neither CONFIG_USB_NET_RNDIS_WLAN nor CONFIG_SMB_SERVER is compiled into the Root Lock kernel. There is no RNDIS driver to probe and no ksmbd listener to reach — there is no reachable code path for either CVE in this group.

Ntfs3 Fs

Status: Not Affected Config gate: CONFIG_NTFS3_FS not set CVEs covered: CVE-2022-48502

CONFIG_NTFS3_FS is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

Traffic Control: cls_flower

Status: Not Affected Config gate: CONFIG_NET_CLS_FLOWER not set CVEs covered: CVE-2023-35788

CONFIG_NET_CLS_FLOWER is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

CAN Bus

Status: Not Affected Config gate: CONFIG_CAN not set CVEs covered: CVE-2023-3090, CVE-2023-3389, CVE-2023-3609, CVE-2023-3611, CVE-2023-3776, CVE-2023-4206, CVE-2023-4207, CVE-2023-4208, CVE-2023-4622, CVE-2023-4921, CVE-2023-5717, CVE-2023-46813, CVE-2023-6931, CVE-2023-6932, CVE-2023-6546, CVE-2023-6270, CVE-2024-25744, CVE-2023-52438, CVE-2023-52439, CVE-2023-52474, CVE-2023-52501

CONFIG_CAN is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

Smb Server

Status: Not Affected Config gate: CONFIG_SMB_SERVER not set CVEs covered: CVE-2023-32250, CVE-2023-32254, CVE-2023-32247, CVE-2023-32248, CVE-2023-32252, CVE-2023-32257, CVE-2023-32258, CVE-2024-22705, CVE-2023-52441, CVE-2024-26592, CVE-2024-26594, CVE-2023-52480

CONFIG_SMB_SERVER is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

HFS Filesystem

Status: Not Affected Config gate: CONFIG_HFS_FS not set CVEs covered: CVE-2023-4623

CONFIG_HFS_FS is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

Ceph Filesystem

Status: Not Affected Config gate: CONFIG_CEPH_FS not set CVEs covered: CVE-2023-44466

CONFIG_CEPH_FS is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

NVMe Driver

Status: Not Affected Config gate: CONFIG_NVME_CORE not set CVEs covered: CVE-2023-5178, CVE-2023-6356, CVE-2023-6536

CONFIG_NVME_CORE is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

CIFS/SMB Client

Status: Not Affected Config gate: CONFIG_CIFS not set CVEs covered: CVE-2023-1194, CVE-2023-52434, CVE-2023-52440

CONFIG_CIFS is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

ATM Protocol

Status: Not Affected Config gate: CONFIG_ATM not set CVEs covered: CVE-2023-51780

CONFIG_ATM is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

Rose

Status: Not Affected Config gate: CONFIG_ROSE not set CVEs covered: CVE-2023-51782

CONFIG_ROSE is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

Tls

Status: Not Affected Config gate: CONFIG_TLS not set CVEs covered: CVE-2024-0646

CONFIG_TLS is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

DCCP Protocol

Status: Not Affected Config gate: CONFIG_IP_DCCP not set CVEs covered: CVE-2023-39197

CONFIG_IP_DCCP is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

AMD GPU (amdgpu)

Status: Not Affected Config gate: CONFIG_DRM_AMDGPU not set CVEs covered: CVE-2023-51042

CONFIG_DRM_AMDGPU is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

F2FS Filesystem

Status: Not Affected Config gate: CONFIG_F2FS_FS not set CVEs covered: CVE-2023-52436, CVE-2023-52444

CONFIG_F2FS_FS is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

Atheros Wireless Driver

Status: Not Affected Config gate: CONFIG_ATH not set CVEs covered: CVE-2023-52464

CONFIG_ATH is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

Mctp

Status: Not Affected Config gate: CONFIG_MCTP not set CVEs covered: CVE-2023-52483

CONFIG_MCTP is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

FUSE Filesystem

Status: Not Affected Config gate: CONFIG_FUSE_FS not set CVEs covered: CVE-2023-52504

CONFIG_FUSE_FS is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

NFC

Status: Not Affected Config gate: CONFIG_NFC not set CVEs covered: CVE-2023-52507

CONFIG_NFC is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

Renesas Ethernet AVB Driver

Status: Not Affected Config gate: CONFIG_RAVB not set CVEs covered: CVE-2023-52509

CONFIG_RAVB is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

IEEE 802.15.4 (WPAN)

Status: Not Affected Config gate: CONFIG_IEEE802154 not set CVEs covered: CVE-2023-52510

CONFIG_IEEE802154 is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

InfiniBand / RDMA

Status: Not Affected Config gate: CONFIG_INFINIBAND not set CVEs covered: CVE-2023-52515, CVE-2024-26872

CONFIG_INFINIBAND is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

Spi Sun6I

Status: Not Affected Config gate: CONFIG_SPI_SUN6I not set CVEs covered: CVE-2023-52517

CONFIG_SPI_SUN6I is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

Intel WiFi (iwlwifi)

Status: Not Affected Config gate: CONFIG_IWLWIFI not set CVEs covered: CVE-2023-52531, CVE-2024-26610

CONFIG_IWLWIFI is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

Security Tomoyo

Status: Not Affected Config gate: CONFIG_SECURITY_TOMOYO not set CVEs covered: CVE-2024-26622

CONFIG_SECURITY_TOMOYO is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

Drm Msm

Status: Not Affected Config gate: CONFIG_DRM_MSM not set CVEs covered: CVE-2023-52586

CONFIG_DRM_MSM is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

S390

Status: Not Affected Config gate: CONFIG_S390 not set CVEs covered: CVE-2023-52598, CVE-2024-26957

CONFIG_S390 is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

Jfs Fs

Status: Not Affected Config gate: CONFIG_JFS_FS not set CVEs covered: CVE-2023-52599, CVE-2023-52600, CVE-2023-52603, CVE-2023-52604

CONFIG_JFS_FS is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

Llc

Status: Not Affected Component: CONFIG_LLC built as kernel module (m); not auto-loaded at boot CVEs covered: CVE-2024-26625

CONFIG_LLC is built as a loadable module on the 6.18.x Root Lock kernel but is not loaded at boot on a default install. The LLC protocol stack is absent from the running kernel until the module is explicitly loaded. There is no reachable code path for any CVE in this group on a default Root Lock deployment.

Mhi Bus

Status: Not Affected Config gate: CONFIG_MHI_BUS not set CVEs covered: CVE-2023-52494

CONFIG_MHI_BUS is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

Ip Tunnel

Status: Not Affected Config gate: CONFIG_IP_TUNNEL not set CVEs covered: CVE-2024-26665

CONFIG_IP_TUNNEL is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

Afs Fs

Status: Not Affected Config gate: CONFIG_AFS_FS not set CVEs covered: CVE-2024-26736

CONFIG_AFS_FS is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

Traffic Control: act_mirred

Status: Not Affected Config gate: CONFIG_NET_ACT_MIRRED not set CVEs covered: CVE-2024-26739

CONFIG_NET_ACT_MIRRED is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

Usb Cdns3

Status: Not Affected Config gate: CONFIG_USB_CDNS3 not set CVEs covered: CVE-2024-26748, CVE-2024-26749

CONFIG_USB_CDNS3 is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

Crypto Dev Virtio

Status: Not Affected Config gate: CONFIG_CRYPTO_DEV_VIRTIO not set CVEs covered: CVE-2024-26753

CONFIG_CRYPTO_DEV_VIRTIO is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

Gtp

Status: Not Affected Config gate: CONFIG_GTP not set CVEs covered: CVE-2024-26754, CVE-2024-26793

CONFIG_GTP is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

Dm Crypt

Status: Not Affected Config gate: CONFIG_DM_CRYPT not set CVEs covered: CVE-2024-26763

CONFIG_DM_CRYPT is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

MPTCP

Status: Not Affected Config gate: CONFIG_MPTCP not set CVEs covered: CVE-2024-26782

CONFIG_MPTCP is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

Btrfs Filesystem

Status: Not Affected Component: CONFIG_BTRFS_FS built as kernel module (m); not auto-loaded at boot CVEs covered: CVE-2024-26791, CVE-2024-26944, CVE-2024-35849, CVE-2024-35949, CVE-2024-39496, CVE-2024-42314, CVE-2024-50217, CVE-2024-56581, CVE-2024-56582, CVE-2024-56759, CVE-2024-57896, CVE-2025-39738, CVE-2025-39759, CVE-2022-50300

CONFIG_BTRFS_FS is built as a loadable module on the 6.18.x Root Lock kernel but is not loaded at boot on a default install. Mounting a Btrfs volume requires explicitly loading the module. There is no reachable code path for any CVE in this group unless you load the module and mount Btrfs.

Thinkpad Lmi

Status: Not Affected Config gate: CONFIG_THINKPAD_LMI not set CVEs covered: CVE-2024-26836

CONFIG_THINKPAD_LMI is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

Sparx5 Switch

Status: Not Affected Config gate: CONFIG_SPARX5_SWITCH not set CVEs covered: CVE-2024-26856

CONFIG_SPARX5_SWITCH is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

Rds

Status: Not Affected Config gate: CONFIG_RDS not set CVEs covered: CVE-2024-26865, CVE-2022-48637, CVE-2024-27024

CONFIG_RDS is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

TUN/TAP Driver

Status: Not Affected Config gate: CONFIG_TUN not set CVEs covered: CVE-2024-26882

CONFIG_TUN is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

Mlxbf I2C

Status: Not Affected Config gate: CONFIG_MLXBF_I2C not set CVEs covered: CVE-2022-48632

CONFIG_MLXBF_I2C is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

ARM64 Architecture

Status: Not Affected Config gate: CONFIG_ARM64 not set CVEs covered: CVE-2022-48657, CVE-2024-26989

CONFIG_ARM64 is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

Nilfs2 Fs

Status: Not Affected Config gate: CONFIG_NILFS2_FS not set CVEs covered: CVE-2024-26955, CVE-2024-26956, CVE-2024-26981

CONFIG_NILFS2_FS is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

Common Clk Qcom

Status: Not Affected Config gate: CONFIG_COMMON_CLK_QCOM not set CVEs covered: CVE-2024-26965

CONFIG_COMMON_CLK_QCOM is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

USB Gadget

Status: Not Affected Config gate: CONFIG_USB_GADGET not set CVEs covered: CVE-2024-26996

CONFIG_USB_GADGET is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

Nouveau (NVIDIA open-source)

Status: Not Affected Config gate: CONFIG_DRM_NOUVEAU not set CVEs covered: CVE-2024-27008

CONFIG_DRM_NOUVEAU is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

Dvb Core

Status: Not Affected Config gate: CONFIG_DVB_CORE not set CVEs covered: CVE-2024-27075

CONFIG_DVB_CORE is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

Peci

Status: Not Affected Config gate: CONFIG_PECI not set CVEs covered: CVE-2022-48670

CONFIG_PECI is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

Of

Status: Not Affected Config gate: CONFIG_OF not set CVEs covered: CVE-2022-48672

CONFIG_OF is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

EROFS Filesystem

Status: Not Affected Config gate: CONFIG_EROFS_FS not set CVEs covered: CVE-2022-48674

CONFIG_EROFS_FS is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

Open vSwitch

Status: Not Affected Config gate: CONFIG_OPENVSWITCH not set CVEs covered: CVE-2024-27395

CONFIG_OPENVSWITCH is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

FireWire

Status: Not Affected Config gate: CONFIG_FIREWIRE not set CVEs covered: CVE-2024-27401

CONFIG_FIREWIRE is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

Kvm

Status: Not Affected Config gate: CONFIG_KVM not set CVEs covered: CVE-2024-35791

CONFIG_KVM is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

Aquantia Atlantic Driver

Status: Not Affected Config gate: CONFIG_ATLANTIC not set CVEs covered: CVE-2023-52664

CONFIG_ATLANTIC is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

Mellanox mlx5 Driver

Status: Not Affected Config gate: CONFIG_MLX5_CORE not set CVEs covered: CVE-2023-52667

CONFIG_MLX5_CORE is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

AX.25 / Ham Radio

Status: Not Affected Config gate: CONFIG_AX25 not set CVEs covered: CVE-2024-35887

CONFIG_AX25 is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

Dma Direct Remap

Status: Not Affected Config gate: CONFIG_DMA_DIRECT_REMAP not set CVEs covered: CVE-2024-35939

CONFIG_DMA_DIRECT_REMAP is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

Fb

Status: Not Affected Config gate: CONFIG_FB not set CVEs covered: CVE-2023-52731

CONFIG_FB is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

GFS2 Shared Filesystem

Status: Not Affected Config gate: CONFIG_GFS2_FS not set CVEs covered: CVE-2023-52760

CONFIG_GFS2_FS is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

GSPCA USB Webcam Driver

Status: Not Affected Config gate: CONFIG_USB_GSPCA_CORE not set CVEs covered: CVE-2023-52764

CONFIG_USB_GSPCA_CORE is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

SMC (RDMA over Converged Ethernet)

Status: Not Affected Config gate: CONFIG_SMC not set CVEs covered: CVE-2023-52775

CONFIG_SMC is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

IPVLAN Driver

Status: Not Affected Config gate: CONFIG_IPVLAN not set CVEs covered: CVE-2023-52796

CONFIG_IPVLAN is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

HiSilicon HNS3 Driver

Status: Not Affected Config gate: CONFIG_HNS3 not set CVEs covered: CVE-2023-52807

CONFIG_HNS3 is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

KVM AMD

Status: Not Affected Config gate: CONFIG_KVM_AMD not set CVEs covered: CVE-2023-52816

CONFIG_KVM_AMD is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

Network Block Device (NBD)

Status: Not Affected Config gate: CONFIG_BLK_DEV_NBD not set CVEs covered: CVE-2023-52837

CONFIG_BLK_DEV_NBD is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

Synaptics RMI4 Driver

Status: Not Affected Config gate: CONFIG_RMI4_CORE not set CVEs covered: CVE-2023-52840

CONFIG_RMI4_CORE is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

Bt848 Video Capture Driver

Status: Not Affected Config gate: CONFIG_VIDEO_BT848 not set CVEs covered: CVE-2023-52847

CONFIG_VIDEO_BT848 is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

Hw Perf Events Hisi

Status: Not Affected Config gate: CONFIG_HW_PERF_EVENTS_HISI not set CVEs covered: CVE-2023-52859

CONFIG_HW_PERF_EVENTS_HISI is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

WMI Driver

Status: Not Affected Config gate: CONFIG_WMI not set CVEs covered: CVE-2023-52864

CONFIG_WMI is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

AMD Radeon GPU

Status: Not Affected Config gate: CONFIG_DRM_RADEON not set CVEs covered: CVE-2023-52867

CONFIG_DRM_RADEON is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

Parallel Port Device

Status: Not Affected Config gate: CONFIG_PPDEV not set CVEs covered: CVE-2024-36015

CONFIG_PPDEV is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

TIPC Protocol

Status: Not Affected Config gate: CONFIG_TIPC not set CVEs covered: CVE-2024-36886

CONFIG_TIPC is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

GPIO Library

Status: Not Affected Config gate: CONFIG_GPIOLIB not set CVEs covered: CVE-2024-36898, CVE-2024-36899

CONFIG_GPIOLIB is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

Pin Controller Subsystem

Status: Not Affected Config gate: CONFIG_PINCTRL not set CVEs covered: CVE-2024-36940

CONFIG_PINCTRL is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

VMware SVGA (vmwgfx)

Status: Not Affected Config gate: CONFIG_DRM_VMWGFX not set CVEs covered: CVE-2024-36960

CONFIG_DRM_VMWGFX is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

Traffic Control: sch_multiq

Status: Not Affected Config gate: CONFIG_NET_SCH_MULTIQ not set CVEs covered: CVE-2024-36978

CONFIG_NET_SCH_MULTIQ is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

IMA (Integrity Measurement Architecture)

Status: Not Affected Config gate: CONFIG_IMA not set CVEs covered: CVE-2024-38667

CONFIG_IMA is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

IMA’s measurement and appraisal functions — runtime file integrity checking and boot-time measurement logs — are also absent as a result. Boot-path protection in Root Lock is provided structurally: the kernel image directory and /boot are sealed under Lockdown using chattr +i immutability, preventing modification while the Root Lock kernel is running. CONFIG_KEXEC_FILE (the signed-image kexec variant) is also not set. Secure Boot is not enforced or verified by Root Lock; if Secure Boot is required, it must be configured at the firmware and bootloader level independently.

PowerPC Architecture

Status: Not Affected Config gate: CONFIG_PPC not set CVEs covered: CVE-2024-40974

CONFIG_PPC is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

Xfs Fs

Status: Not Affected Component: CONFIG_XFS_FS built as kernel module (m); not auto-loaded at boot CVEs covered: CVE-2024-41013, CVE-2024-41014

CONFIG_XFS_FS is built as a loadable module on the 6.18.x Root Lock kernel but is not loaded at boot on a default install. Mounting an XFS volume requires explicitly loading the module. There is no reachable code path for any CVE in this group unless you load the module and mount XFS.

HFS+ Filesystem

Status: Not Affected Config gate: CONFIG_HFSPLUS_FS not set CVEs covered: CVE-2024-41059

CONFIG_HFSPLUS_FS is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

ISDN

Status: Not Affected Config gate: CONFIG_ISDN not set CVEs covered: CVE-2024-42280

CONFIG_ISDN is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

Platform X86

Status: Not Affected Config gate: CONFIG_PLATFORM_X86 not set CVEs covered: CVE-2024-46859

CONFIG_PLATFORM_X86 is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

OCFS2 Filesystem

Status: Not Affected Config gate: CONFIG_OCFS2_FS not set CVEs covered: CVE-2024-47670

CONFIG_OCFS2_FS is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

Xen Hypervisor

Status: Not Affected Config gate: CONFIG_XEN not set CVEs covered: CVE-2024-49936

CONFIG_XEN is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

PPP

Status: Not Affected Config gate: CONFIG_PPP not set CVEs covered: CVE-2024-50033, CVE-2024-50035

CONFIG_PPP is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

QCOM RmNet Driver

Status: Not Affected Config gate: CONFIG_RMNET not set CVEs covered: CVE-2024-50128

CONFIG_RMNET is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

UDF Filesystem

Status: Not Affected Config gate: CONFIG_UDF_FS not set CVEs covered: CVE-2024-50143

CONFIG_UDF_FS is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

LoongArch Architecture

Status: Not Affected Config gate: CONFIG_LOONGARCH not set CVEs covered: CVE-2024-56628

CONFIG_LOONGARCH is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

Realtek WiFi Driver

Status: Not Affected Config gate: CONFIG_RTLWIFI not set CVEs covered: CVE-2024-58072

CONFIG_RTLWIFI is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

Broadcom WiFi Driver

Status: Not Affected Config gate: CONFIG_BRCMFMAC not set CVEs covered: CVE-2022-49740

CONFIG_BRCMFMAC is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

MemStick Driver

Status: Not Affected Config gate: CONFIG_MEMSTICK not set CVEs covered: CVE-2025-22020

CONFIG_MEMSTICK is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

SCTP Protocol

Status: Not Affected Config gate: CONFIG_IP_SCTP not set CVEs covered: CVE-2025-23142

CONFIG_IP_SCTP is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

Ntfs Fs

Status: Not Affected Config gate: CONFIG_NTFS_FS not set CVEs covered: CVE-2022-49763

CONFIG_NTFS_FS is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

Net Sch Qfq

Status: Not Affected Config gate: CONFIG_NET_SCH_QFQ not set CVEs covered: CVE-2025-37913

CONFIG_NET_SCH_QFQ is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

Af Rxrpc

Status: Not Affected Config gate: CONFIG_AF_RXRPC not set CVEs covered: CVE-2023-53218

CONFIG_AF_RXRPC is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

Marvell WiFi Driver

Status: Not Affected Config gate: CONFIG_MWIFIEX not set CVEs covered: CVE-2025-39891

CONFIG_MWIFIEX is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

Microchip WILC1000 WiFi Driver

Status: Not Affected Config gate: CONFIG_WILC1000 not set CVEs covered: CVE-2025-39952

CONFIG_WILC1000 is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

Traffic Control: cls_u32

Status: Not Affected Config gate: CONFIG_NET_CLS_U32 not set CVEs covered: CVE-2026-23204

CONFIG_NET_CLS_U32 is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

SAA7134 Media Driver

Status: Not Affected Config gate: CONFIG_VIDEO_SAA7134 not set CVEs covered: CVE-2023-35823

CONFIG_VIDEO_SAA7134 is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

DM1105 DVB Driver

Status: Not Affected Config gate: CONFIG_VIDEO_DM1105 not set CVEs covered: CVE-2023-35824

CONFIG_VIDEO_DM1105 is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

Allwinner Cedrus Video Codec

Status: Not Affected Config gate: CONFIG_VIDEO_SUNXI_CEDRUS not set CVEs covered: CVE-2023-35826

CONFIG_VIDEO_SUNXI_CEDRUS is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

Renesas USB3 Driver

Status: Not Affected Config gate: CONFIG_USB_RENESAS_USBHS3 not set CVEs covered: CVE-2023-35828

CONFIG_USB_RENESAS_USBHS3 is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

Rockchip Video Decoder

Status: Not Affected Config gate: CONFIG_VIDEO_RKVDEC not set CVEs covered: CVE-2023-35829

CONFIG_VIDEO_RKVDEC is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

Intel IGB Ethernet Driver

Status: Not Affected Config gate: CONFIG_IGB not set CVEs covered: CVE-2023-45871

CONFIG_IGB is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

AppleTalk Protocol

Status: Not Affected Config gate: CONFIG_ATALK not set CVEs covered: CVE-2023-51781

CONFIG_ATALK is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

Hauppauge pvrusb2 Driver

Status: Not Affected Config gate: CONFIG_VIDEO_PVRUSB2 not set CVEs covered: CVE-2023-52445

CONFIG_VIDEO_PVRUSB2 is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

PWM Subsystem

Status: Not Affected Config gate: CONFIG_PWM not set CVEs covered: CVE-2024-26599

CONFIG_PWM is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

Griffin PowerMate Driver

Status: Not Affected Config gate: CONFIG_INPUT_POWERMATE not set CVEs covered: CVE-2023-52475

CONFIG_INPUT_POWERMATE is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

TEE Subsystem

Status: Not Affected Config gate: CONFIG_TEE not set CVEs covered: CVE-2023-52503

CONFIG_TEE is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

Bonding

Status: Not Affected Config gate: CONFIG_BONDING not set CVEs covered: CVE-2024-39487, CVE-2026-23099

CONFIG_BONDING is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

Vmware Vmci

Status: Not Affected Config gate: CONFIG_VMWARE_VMCI not set CVEs covered: CVE-2024-39499, CVE-2024-46738, CVE-2025-38403

CONFIG_VMWARE_VMCI is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

Wwan

Status: Not Affected Config gate: CONFIG_WWAN not set CVEs covered: CVE-2024-40939

CONFIG_WWAN is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

Cachefiles

Status: Not Affected Config gate: CONFIG_CACHEFILES not set CVEs covered: CVE-2024-41050, CVE-2024-41057, CVE-2024-41074

CONFIG_CACHEFILES is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

Snd Soc

Status: Not Affected Config gate: CONFIG_SND_SOC not set CVEs covered: CVE-2024-41069, CVE-2022-50325

CONFIG_SND_SOC is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

Iio

Status: Not Affected Config gate: CONFIG_IIO not set CVEs covered: CVE-2024-42086, CVE-2024-57906, CVE-2024-57907, CVE-2024-57908, CVE-2024-57910, CVE-2024-57911, CVE-2024-57912, CVE-2022-49792, CVE-2025-38485

CONFIG_IIO is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

Vhost Vsock

Status: Not Affected Config gate: CONFIG_VHOST_VSOCK not set CVEs covered: CVE-2024-43873

CONFIG_VHOST_VSOCK is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

Net Fou

Status: Not Affected Config gate: CONFIG_NET_FOU not set CVEs covered: CVE-2024-44940, CVE-2026-23083

CONFIG_NET_FOU is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

Parisc

Status: Not Affected Config gate: CONFIG_PARISC not set CVEs covered: CVE-2024-44949, CVE-2022-50518

CONFIG_PARISC is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

Net Sch Netem

Status: Not Affected Config gate: CONFIG_NET_SCH_NETEM not set CVEs covered: CVE-2024-46800

CONFIG_NET_SCH_NETEM is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

Uml

Status: Not Affected Config gate: CONFIG_UML not set CVEs covered: CVE-2024-46844

CONFIG_UML is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

Spi Nxp Flexspi

Status: Not Affected Config gate: CONFIG_SPI_NXP_FLEXSPI not set CVEs covered: CVE-2024-46853

CONFIG_SPI_NXP_FLEXSPI is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

Vdpa

Status: Not Affected Config gate: CONFIG_VDPA not set CVEs covered: CVE-2024-47748, CVE-2024-53126, CVE-2023-53082, CVE-2023-53543

CONFIG_VDPA is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

Usb Serial

Status: Not Affected Config gate: CONFIG_USB_SERIAL not set CVEs covered: CVE-2024-50267

CONFIG_USB_SERIAL is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

Usb Musb Hdrc

Status: Not Affected Config gate: CONFIG_USB_MUSB_HDRC not set CVEs covered: CVE-2024-50269

CONFIG_USB_MUSB_HDRC is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

Superh

Status: Not Affected Config gate: CONFIG_SUPERH not set CVEs covered: CVE-2024-53165

CONFIG_SUPERH is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

Spi Mpc52Xx

Status: Not Affected Config gate: CONFIG_SPI_MPC52xx not set CVEs covered: CVE-2024-50051

CONFIG_SPI_MPC52xx is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

Pktgen

Status: Not Affected Config gate: CONFIG_PKTGEN not set CVEs covered: CVE-2025-21680

CONFIG_PKTGEN is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

Orangefs Fs

Status: Not Affected Config gate: CONFIG_ORANGEFS_FS not set CVEs covered: CVE-2025-21782

CONFIG_ORANGEFS_FS is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

Geneve

Status: Not Affected Config gate: CONFIG_GENEVE not set CVEs covered: CVE-2025-21858

CONFIG_GENEVE is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

Slimbus

Status: Not Affected Config gate: CONFIG_SLIMBUS not set CVEs covered: CVE-2025-21914

CONFIG_SLIMBUS is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

Udmabuf

Status: Not Affected Config gate: CONFIG_UDMABUF not set CVEs covered: CVE-2025-37803

CONFIG_UDMABUF is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

Mcb

Status: Not Affected Config gate: CONFIG_MCB not set CVEs covered: CVE-2025-37817

CONFIG_MCB is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

Staging

Status: Not Affected Config gate: CONFIG_STAGING not set CVEs covered: CVE-2022-49956, CVE-2023-53554

CONFIG_STAGING is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

Coresight

Status: Not Affected Config gate: CONFIG_CORESIGHT not set CVEs covered: CVE-2025-38131

CONFIG_CORESIGHT is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

Ipv6 Seg6 Lwtunnel

Status: Not Affected Config gate: CONFIG_IPV6_SEG6_LWTUNNEL not set CVEs covered: CVE-2025-38476

CONFIG_IPV6_SEG6_LWTUNNEL is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

Comedi

Status: Not Affected Config gate: CONFIG_COMEDI not set CVEs covered: CVE-2025-38482, CVE-2025-38483, CVE-2025-38529, CVE-2025-38530, CVE-2025-39685, CVE-2025-39686

CONFIG_COMEDI is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

Nubus

Status: Not Affected Config gate: CONFIG_NUBUS not set CVEs covered: CVE-2023-53217

CONFIG_NUBUS is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

Xdp Sockets

Status: Not Affected Config gate: CONFIG_XDP_SOCKETS not set CVEs covered: CVE-2023-53426

CONFIG_XDP_SOCKETS is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

Ptp 1588 Clock Ocp

Status: Not Affected Config gate: CONFIG_PTP_1588_CLOCK_OCP not set CVEs covered: CVE-2025-39859

CONFIG_PTP_1588_CLOCK_OCP is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

Trace Buf

Status: Not Affected Config gate: CONFIG_TRACE_BUF not set CVEs covered: CVE-2023-53587

CONFIG_TRACE_BUF is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

Dlm

Status: Not Affected Config gate: CONFIG_DLM not set CVEs covered: CVE-2023-53629

CONFIG_DLM is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

Net Team

Status: Not Affected Config gate: CONFIG_NET_TEAM not set CVEs covered: CVE-2025-71091

CONFIG_NET_TEAM is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

Macvlan

Status: Not Affected Config gate: CONFIG_MACVLAN not set CVEs covered: CVE-2026-23001

CONFIG_MACVLAN is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

Security Apparmor

Status: Not Affected Config gate: CONFIG_SECURITY_APPARMOR not set CVEs covered: CVE-2026-23408

CONFIG_SECURITY_APPARMOR is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

Rcu Nocb Cpu

Status: Not Affected Config gate: CONFIG_RCU_NOCB_CPU not set CVEs covered: CVE-2024-35929, CVE-2025-38704

CONFIG_RCU_NOCB_CPU is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

Debug Mutexes

Status: Not Affected Config gate: CONFIG_DEBUG_MUTEXES not set CVEs covered: CVE-2023-52836

CONFIG_DEBUG_MUTEXES is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

Stm

Status: Not Affected Config gate: CONFIG_STM not set CVEs covered: CVE-2024-38627

CONFIG_STM is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

Greybus

Status: Not Affected Config gate: CONFIG_GREYBUS not set CVEs covered: CVE-2024-39495

CONFIG_GREYBUS is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

Ionic

Status: Not Affected Config gate: CONFIG_IONIC not set CVEs covered: CVE-2024-39502

CONFIG_IONIC is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

Crypto Dev Hisi Sec2

Status: Not Affected Config gate: CONFIG_CRYPTO_DEV_HISI_SEC2 not set CVEs covered: CVE-2024-42147, CVE-2024-47730

CONFIG_CRYPTO_DEV_HISI_SEC2 is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

Bna

Status: Not Affected Config gate: CONFIG_BNA not set CVEs covered: CVE-2024-43839

CONFIG_BNA is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

Drm Aspeed Gfx

Status: Not Affected Config gate: CONFIG_DRM_ASPEED_GFX not set CVEs covered: CVE-2023-52916

CONFIG_DRM_ASPEED_GFX is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

Pci Kirin

Status: Not Affected Config gate: CONFIG_PCI_KIRIN not set CVEs covered: CVE-2024-47751

CONFIG_PCI_KIRIN is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

Drm Stm

Status: Not Affected Config gate: CONFIG_DRM_STM not set CVEs covered: CVE-2024-49992

CONFIG_DRM_STM is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

Hi Gmac

Status: Not Affected Config gate: CONFIG_HI_GMAC not set CVEs covered: CVE-2022-48960, CVE-2022-48962

CONFIG_HI_GMAC is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

Hsr

Status: Not Affected Config gate: CONFIG_HSR not set CVEs covered: CVE-2022-49015

CONFIG_HSR is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

Typec

Status: Not Affected Config gate: CONFIG_TYPEC not set CVEs covered: CVE-2024-50150

CONFIG_TYPEC is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

Mse102X

Status: Not Affected Config gate: CONFIG_MSE102X not set CVEs covered: CVE-2024-50276

CONFIG_MSE102X is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

Video S5P Jpeg

Status: Not Affected Config gate: CONFIG_VIDEO_S5P_JPEG not set CVEs covered: CVE-2024-53061

CONFIG_VIDEO_S5P_JPEG is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

Arm Scmi Protocol

Status: Not Affected Config gate: CONFIG_ARM_SCMI_PROTOCOL not set CVEs covered: CVE-2024-53068

CONFIG_ARM_SCMI_PROTOCOL is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

Intel Xe GPU Driver

Status: Not Affected Config gate: CONFIG_DRM_XE not set CVEs covered: CVE-2024-53098

CONFIG_DRM_XE is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

Hyperv Vsockets

Status: Not Affected Config gate: CONFIG_HYPERV_VSOCKETS not set CVEs covered: CVE-2024-53103

CONFIG_HYPERV_VSOCKETS is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

Usb Lan78Xx

Status: Not Affected Config gate: CONFIG_USB_LAN78XX not set CVEs covered: CVE-2024-53213

CONFIG_USB_LAN78XX is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

Drm Xlnx

Status: Not Affected Config gate: CONFIG_DRM_XLNX not set CVEs covered: CVE-2024-56538

CONFIG_DRM_XLNX is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

Usb Net Cdcether

Status: Not Affected Config gate: CONFIG_USB_NET_CDCETHER not set CVEs covered: CVE-2025-38153

CONFIG_USB_NET_CDCETHER is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

Md Raid10

Status: Not Affected Config gate: CONFIG_MD_RAID10 not set CVEs covered: CVE-2023-53357

CONFIG_MD_RAID10 is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.

Video Adv748X

Status: Not Affected Config gate: CONFIG_VIDEO_ADV748X not set CVEs covered: CVE-2025-71136

CONFIG_VIDEO_ADV748X is not compiled into the Root Lock kernel. There is no reachable code path for any CVE in this group.