CVE-2018-5383
Published: 7 August 2018
Bluetooth firmware or operating system software drivers in macOS versions before 10.13, High Sierra and iOS versions before 11.4, and Android versions before the 2018-06-05 patch may not sufficiently validate elliptic curve parameters used to generate public keys during a Diffie-Hellman key exchange, which may allow a remote attacker to obtain the encryption key used by the device.
From the Ubuntu security team
Eli Biham and Lior Neumann discovered that the Bluetooth implementation in the Linux kernel did not properly validate elliptic curve parameters during Diffie-Hellman key exchange in some situations. An attacker could use this to expose sensitive information.
Priority
Medium
CVSS 3 base score: 6.8
Status
| Package | Release | Status |
|---|---|---|
|
linux-gcp Launchpad, Ubuntu, Debian |
precise |
Does not exist
|
| upstream |
Released
(4.19~rc1)
|
|
| trusty |
Does not exist
|
|
| xenial |
Released
(4.15.0-1040.42~16.04.1)
|
|
| bionic |
Released
(4.15.0-1040.42)
|
|
| cosmic |
Ignored
(reached end-of-life)
|
|
| disco |
Not vulnerable
(5.0.0-1001.1)
|
|
| eoan |
Not vulnerable
(5.0.0-1004.4)
|
|
| focal |
Not vulnerable
(5.4.0-1005.5)
|
|
| groovy |
Not vulnerable
(5.4.0-1009.9)
|
|
|
linux-hwe-5.8 Launchpad, Ubuntu, Debian |
precise |
Does not exist
|
| trusty |
Does not exist
|
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| groovy |
Does not exist
|
|
| focal |
Not vulnerable
(5.8.0-23.24~20.04.1)
|
|
| upstream |
Released
(4.19~rc1)
|
|
|
linux-gke-5.4 Launchpad, Ubuntu, Debian |
precise |
Does not exist
|
| trusty |
Does not exist
|
|
| xenial |
Does not exist
|
|
| focal |
Does not exist
|
|
| groovy |
Does not exist
|
|
| bionic |
Not vulnerable
(5.4.0-1025.25~18.04.1)
|
|
| upstream |
Released
(4.19~rc1)
|
|
|
linux-gkeop-5.4 Launchpad, Ubuntu, Debian |
precise |
Does not exist
|
| trusty |
Does not exist
|
|
| xenial |
Does not exist
|
|
| focal |
Does not exist
|
|
| groovy |
Does not exist
|
|
| bionic |
Not vulnerable
(5.4.0-1001.1)
|
|
| upstream |
Released
(4.19~rc1)
|
|
|
linux-gke Launchpad, Ubuntu, Debian |
focal |
Not vulnerable
(5.4.0-1033.35)
|
| upstream |
Released
(4.19~rc1)
|
|
| precise |
Does not exist
|
|
| trusty |
Does not exist
|
|
| xenial |
Ignored
(end-of-life)
|
|
| bionic |
Does not exist
|
|
| cosmic |
Does not exist
|
|
| disco |
Does not exist
|
|
| eoan |
Does not exist
|
|
| groovy |
Does not exist
|
|
|
linux-dell300x Launchpad, Ubuntu, Debian |
precise |
Does not exist
|
| trusty |
Does not exist
|
|
| xenial |
Does not exist
|
|
| focal |
Does not exist
|
|
| groovy |
Does not exist
|
|
| bionic |
Not vulnerable
(4.15.0-1005.8)
|
|
| upstream |
Released
(4.19~rc1)
|
|
|
linux-oem-5.10 Launchpad, Ubuntu, Debian |
precise |
Does not exist
|
| trusty |
Does not exist
|
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| groovy |
Does not exist
|
|
| focal |
Not vulnerable
(5.10.0-1008.9)
|
|
| upstream |
Released
(4.19~rc1)
|
|
|
linux-gkeop Launchpad, Ubuntu, Debian |
precise |
Does not exist
|
| trusty |
Does not exist
|
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| groovy |
Does not exist
|
|
| focal |
Not vulnerable
(5.4.0-1008.9)
|
|
| upstream |
Released
(4.19~rc1)
|
|
|
linux-firmware Launchpad, Ubuntu, Debian |
precise |
Ignored
(was needed ESM criteria)
|
| trusty |
Ignored
(was needed ESM criteria)
|
|
| upstream |
Released
(4.19~rc1)
|
|
| xenial |
Released
(1.157.23)
|
|
| bionic |
Released
(1.173.18)
|
|
| cosmic |
Not vulnerable
(1.175.4)
|
|
| disco |
Not vulnerable
(1.178.1)
|
|
| eoan |
Not vulnerable
(1.179)
|
|
| focal |
Not vulnerable
(1.179)
|
|
| groovy |
Not vulnerable
(1.179)
|
|
|
Patches: upstream: https://git.kernel.org/pub/scm/linux/kernel/git/firmware/linux-firmware.git/commit/?id=e94352cf328ae718e47e3899ebd050465755db04 (9560) upstream: https://git.kernel.org/pub/scm/linux/kernel/git/firmware/linux-firmware.git/commit/?id=897330f38d2db8986fc8965709b1852ba76896a7 (7265) upstream: https://git.kernel.org/pub/scm/linux/kernel/git/firmware/linux-firmware.git/commit/?id=c84bd6688f6e5863dd57cb1ed0512e732d436cb2 (9260) upstream: https://git.kernel.org/pub/scm/linux/kernel/git/firmware/linux-firmware.git/commit/?id=70353356f8a01b6593ea94fd6ed6e9593fd0da1f (7260 b3/b4) upstream: https://git.kernel.org/pub/scm/linux/kernel/git/firmware/linux-firmware.git/commit/?id=629a5e089e300ba153c1358cca2193a7671c2f80 (7260 b5/b6) upstream: https://git.kernel.org/pub/scm/linux/kernel/git/firmware/linux-firmware.git/commit/?id=112d300c26dfbb9cebbf63781214c007fc203611 (8265) upstream: https://git.kernel.org/pub/scm/linux/kernel/git/firmware/linux-firmware.git/commit/?id=3f8243c8c0363fb5752a1b0e9aaafccb3abc3159 (8260) upstream: https://git.kernel.org/pub/scm/linux/kernel/git/firmware/linux-firmware.git/commit/?id=6be4747ea1d731f661c5320acf3f1273a459d6da (7265 D1) upstream: https://git.kernel.org/pub/scm/linux/kernel/git/firmware/linux-firmware.git/commit/?id=9489f5524917a42637c3b46d904fff80818a0766 (7265 D0) upstream: https://git.kernel.org/pub/scm/linux/kernel/git/firmware/linux-firmware.git/commit/?id=534daf431c88b24236d23572039cdd79223b246a (atheros) vendor: https://salsa.debian.org/kernel-team/firmware-nonfree/-/commit/e062fd25f11b8cb582d8e1069f83eb54b72410ab vendor: https://salsa.debian.org/kernel-team/firmware-nonfree/-/commit/58677900ea574a55cadc0cacb956ebe092ee5ea4 |
||
|
linux Launchpad, Ubuntu, Debian |
upstream |
Released
(4.19~rc1)
|
| precise |
Ignored
(was needs-triage ESM criteria)
|
|
| trusty |
Ignored
(was needs-triage ESM criteria)
|
|
| xenial |
Released
(4.4.0-159.187)
|
|
| bionic |
Released
(4.15.0-58.64)
|
|
| cosmic |
Ignored
(reached end-of-life)
|
|
| disco |
Not vulnerable
(4.19.0-12.13)
|
|
| eoan |
Not vulnerable
(5.0.0-13.14)
|
|
| focal |
Not vulnerable
(5.4.0-9.12)
|
|
| groovy |
Not vulnerable
(5.4.0-26.30)
|
|
|
Patches: Introduced by 05ddb47a91fa591ed25ad877783a58ae44cc8212 |
||
|
linux-lts-trusty Launchpad, Ubuntu, Debian |
upstream |
Released
(4.19~rc1)
|
| precise |
Ignored
(was needs-triage ESM criteria)
|
|
| trusty |
Does not exist
|
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| cosmic |
Does not exist
|
|
| disco |
Does not exist
|
|
| eoan |
Does not exist
|
|
| focal |
Does not exist
|
|
| groovy |
Does not exist
|
|
|
linux-goldfish Launchpad, Ubuntu, Debian |
upstream |
Released
(4.19~rc1)
|
| precise |
Does not exist
|
|
| trusty |
Does not exist
(trusty was ignored [abandoned])
|
|
| xenial |
Ignored
(end-of-life)
|
|
| bionic |
Does not exist
|
|
| cosmic |
Does not exist
|
|
| disco |
Does not exist
|
|
| eoan |
Does not exist
|
|
| focal |
Does not exist
|
|
| groovy |
Does not exist
|
|
|
linux-grouper Launchpad, Ubuntu, Debian |
upstream |
Released
(4.19~rc1)
|
| precise |
Does not exist
|
|
| trusty |
Does not exist
(trusty was ignored [abandoned])
|
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| cosmic |
Does not exist
|
|
| disco |
Does not exist
|
|
| eoan |
Does not exist
|
|
| focal |
Does not exist
|
|
| groovy |
Does not exist
|
|
|
linux-maguro Launchpad, Ubuntu, Debian |
upstream |
Released
(4.19~rc1)
|
| precise |
Does not exist
|
|
| trusty |
Does not exist
(trusty was ignored [abandoned])
|
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| cosmic |
Does not exist
|
|
| disco |
Does not exist
|
|
| eoan |
Does not exist
|
|
| focal |
Does not exist
|
|
| groovy |
Does not exist
|
|
|
linux-mako Launchpad, Ubuntu, Debian |
upstream |
Released
(4.19~rc1)
|
| precise |
Does not exist
|
|
| trusty |
Does not exist
(trusty was ignored [abandoned])
|
|
| xenial |
Ignored
(abandoned)
|
|
| bionic |
Does not exist
|
|
| cosmic |
Does not exist
|
|
| disco |
Does not exist
|
|
| eoan |
Does not exist
|
|
| focal |
Does not exist
|
|
| groovy |
Does not exist
|
|
|
linux-manta Launchpad, Ubuntu, Debian |
upstream |
Released
(4.19~rc1)
|
| precise |
Does not exist
|
|
| trusty |
Does not exist
(trusty was ignored [abandoned])
|
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| cosmic |
Does not exist
|
|
| disco |
Does not exist
|
|
| eoan |
Does not exist
|
|
| focal |
Does not exist
|
|
| groovy |
Does not exist
|
|
|
linux-flo Launchpad, Ubuntu, Debian |
upstream |
Released
(4.19~rc1)
|
| precise |
Does not exist
|
|
| trusty |
Does not exist
(trusty was ignored [abandoned])
|
|
| xenial |
Ignored
(abandoned)
|
|
| bionic |
Does not exist
|
|
| cosmic |
Does not exist
|
|
| disco |
Does not exist
|
|
| eoan |
Does not exist
|
|
| focal |
Does not exist
|
|
| groovy |
Does not exist
|
|
|
linux-raspi2 Launchpad, Ubuntu, Debian |
upstream |
Released
(4.19~rc1)
|
| precise |
Does not exist
|
|
| trusty |
Does not exist
|
|
| xenial |
Released
(4.4.0-1118.127)
|
|
| bionic |
Released
(4.15.0-1043.46)
|
|
| cosmic |
Ignored
(reached end-of-life)
|
|
| disco |
Not vulnerable
(5.0.0-1004.4)
|
|
| eoan |
Not vulnerable
(5.0.0-1006.6)
|
|
| focal |
Not vulnerable
(5.4.0-1004.4)
|
|
| groovy |
Does not exist
|
|
|
linux-lts-utopic Launchpad, Ubuntu, Debian |
upstream |
Released
(4.19~rc1)
|
| precise |
Does not exist
|
|
| trusty |
Does not exist
(trusty was ignored [end-of-life])
|
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| cosmic |
Does not exist
|
|
| disco |
Does not exist
|
|
| eoan |
Does not exist
|
|
| focal |
Does not exist
|
|
| groovy |
Does not exist
|
|
|
linux-lts-vivid Launchpad, Ubuntu, Debian |
upstream |
Released
(4.19~rc1)
|
| precise |
Does not exist
|
|
| trusty |
Does not exist
(trusty was ignored [end-of-life])
|
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| cosmic |
Does not exist
|
|
| disco |
Does not exist
|
|
| eoan |
Does not exist
|
|
| focal |
Does not exist
|
|
| groovy |
Does not exist
|
|
|
linux-lts-wily Launchpad, Ubuntu, Debian |
upstream |
Released
(4.19~rc1)
|
| precise |
Does not exist
|
|
| trusty |
Does not exist
(trusty was ignored [end-of-life])
|
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| cosmic |
Does not exist
|
|
| disco |
Does not exist
|
|
| eoan |
Does not exist
|
|
| focal |
Does not exist
|
|
| groovy |
Does not exist
|
|
|
linux-lts-xenial Launchpad, Ubuntu, Debian |
upstream |
Released
(4.19~rc1)
|
| precise |
Does not exist
|
|
| trusty |
Released
(4.4.0-164.192~14.04.1)
|
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| cosmic |
Does not exist
|
|
| disco |
Does not exist
|
|
| eoan |
Does not exist
|
|
| focal |
Does not exist
|
|
| groovy |
Does not exist
|
|
|
linux-snapdragon Launchpad, Ubuntu, Debian |
upstream |
Released
(4.19~rc1)
|
| precise |
Does not exist
|
|
| trusty |
Does not exist
|
|
| xenial |
Released
(4.4.0-1122.128)
|
|
| bionic |
Released
(4.15.0-1060.66)
|
|
| cosmic |
Does not exist
|
|
| disco |
Not vulnerable
(5.0.0-1010.10)
|
|
| eoan |
Does not exist
|
|
| focal |
Does not exist
|
|
| groovy |
Does not exist
|
|
|
linux-aws Launchpad, Ubuntu, Debian |
upstream |
Released
(4.19~rc1)
|
| precise |
Does not exist
|
|
| trusty |
Released
(4.4.0-1054.58)
|
|
| xenial |
Released
(4.4.0-1090.101)
|
|
| bionic |
Released
(4.15.0-1047.49)
|
|
| cosmic |
Ignored
(reached end-of-life)
|
|
| disco |
Not vulnerable
(5.0.0-1001.1)
|
|
| eoan |
Not vulnerable
(5.0.0-1004.4)
|
|
| focal |
Not vulnerable
(5.4.0-1005.5)
|
|
| groovy |
Not vulnerable
(5.4.0-1009.9)
|
|
|
linux-hwe Launchpad, Ubuntu, Debian |
upstream |
Released
(4.19~rc1)
|
| precise |
Does not exist
|
|
| trusty |
Does not exist
|
|
| xenial |
Released
(4.15.0-58.64~16.04.1)
|
|
| bionic |
Released
(5.0.0-23.24~18.04.1)
|
|
| cosmic |
Does not exist
|
|
| disco |
Does not exist
|
|
| eoan |
Does not exist
|
|
| focal |
Does not exist
|
|
| groovy |
Does not exist
|
|
|
linux-hwe-edge Launchpad, Ubuntu, Debian |
upstream |
Released
(4.19~rc1)
|
| precise |
Does not exist
|
|
| trusty |
Does not exist
|
|
| xenial |
Released
(4.15.0-58.64~16.04.1)
|
|
| bionic |
Not vulnerable
(5.0.0-15.16~18.04.1)
|
|
| cosmic |
Does not exist
|
|
| disco |
Does not exist
|
|
| eoan |
Does not exist
|
|
| focal |
Does not exist
|
|
| groovy |
Does not exist
|
|
|
linux-gke-4.15 Launchpad, Ubuntu, Debian |
upstream |
Released
(4.19~rc1)
|
| precise |
Does not exist
|
|
| trusty |
Does not exist
|
|
| xenial |
Does not exist
|
|
| bionic |
Released
(4.15.0-1040.42)
|
|
| disco |
Does not exist
|
|
| eoan |
Does not exist
|
|
| focal |
Does not exist
|
|
| groovy |
Does not exist
|
|
|
linux-gke-5.0 Launchpad, Ubuntu, Debian |
upstream |
Released
(4.19~rc1)
|
| precise |
Does not exist
|
|
| trusty |
Does not exist
|
|
| xenial |
Does not exist
|
|
| bionic |
Not vulnerable
(5.0.0-1011.11~18.04.1)
|
|
| disco |
Does not exist
|
|
| eoan |
Does not exist
|
|
| focal |
Does not exist
|
|
| groovy |
Does not exist
|
|
|
linux-azure Launchpad, Ubuntu, Debian |
upstream |
Released
(4.19~rc1)
|
| precise |
Does not exist
|
|
| trusty |
Ignored
(was needs-triage ESM criteria)
|
|
| xenial |
Released
(4.15.0-1055.60)
|
|
| bionic |
Released
(5.0.0-1014.14~18.04.1)
|
|
| cosmic |
Ignored
(reached end-of-life)
|
|
| disco |
Not vulnerable
(5.0.0-1001.1)
|
|
| eoan |
Not vulnerable
(5.0.0-1004.4)
|
|
| focal |
Not vulnerable
(5.4.0-1006.6)
|
|
| groovy |
Not vulnerable
(5.4.0-1010.10)
|
|
|
linux-azure-edge Launchpad, Ubuntu, Debian |
upstream |
Released
(4.19~rc1)
|
| precise |
Does not exist
|
|
| trusty |
Does not exist
|
|
| xenial |
Does not exist
|
|
| bionic |
Released
(5.0.0-1014.14~18.04.1)
|
|
| cosmic |
Does not exist
|
|
| disco |
Does not exist
|
|
| eoan |
Does not exist
|
|
| focal |
Does not exist
|
|
| groovy |
Does not exist
|
|
|
linux-kvm Launchpad, Ubuntu, Debian |
upstream |
Released
(4.19~rc1)
|
| precise |
Does not exist
|
|
| trusty |
Does not exist
|
|
| xenial |
Released
(4.4.0-1054.61)
|
|
| bionic |
Released
(4.15.0-1042.42)
|
|
| cosmic |
Ignored
(reached end-of-life)
|
|
| disco |
Not vulnerable
(5.0.0-1001.1)
|
|
| eoan |
Not vulnerable
(5.0.0-1004.4)
|
|
| focal |
Not vulnerable
(5.4.0-1004.4)
|
|
| groovy |
Not vulnerable
(5.4.0-1009.9)
|
|
|
linux-euclid Launchpad, Ubuntu, Debian |
upstream |
Released
(4.19~rc1)
|
| precise |
Does not exist
|
|
| trusty |
Does not exist
|
|
| xenial |
Ignored
(was needs-triage ESM criteria)
|
|
| bionic |
Does not exist
|
|
| cosmic |
Does not exist
|
|
| disco |
Does not exist
|
|
| eoan |
Does not exist
|
|
| focal |
Does not exist
|
|
| groovy |
Does not exist
|
|
|
linux-oem Launchpad, Ubuntu, Debian |
upstream |
Released
(4.19~rc1)
|
| precise |
Does not exist
|
|
| trusty |
Does not exist
|
|
| xenial |
Ignored
(was needs-triage now end-of-life)
|
|
| bionic |
Released
(4.15.0-1050.57)
|
|
| cosmic |
Ignored
(reached end-of-life)
|
|
| disco |
Released
(4.15.0-1050.57)
|
|
| eoan |
Released
(4.15.0-1050.57)
|
|
| focal |
Does not exist
|
|
| groovy |
Does not exist
|
|
|
linux-gcp-edge Launchpad, Ubuntu, Debian |
upstream |
Released
(4.19~rc1)
|
| precise |
Does not exist
|
|
| trusty |
Does not exist
|
|
| xenial |
Does not exist
|
|
| bionic |
Released
(4.15.0-1040.42)
|
|
| cosmic |
Does not exist
|
|
| disco |
Does not exist
|
|
| eoan |
Does not exist
|
|
| focal |
Does not exist
|
|
| groovy |
Does not exist
|
|
|
linux-aws-hwe Launchpad, Ubuntu, Debian |
upstream |
Released
(4.19~rc1)
|
| precise |
Does not exist
|
|
| trusty |
Does not exist
|
|
| xenial |
Released
(4.15.0-1047.49~16.04.1)
|
|
| bionic |
Does not exist
|
|
| cosmic |
Does not exist
|
|
| disco |
Does not exist
|
|
| eoan |
Does not exist
|
|
| focal |
Does not exist
|
|
| groovy |
Does not exist
|
|
|
linux-oracle Launchpad, Ubuntu, Debian |
upstream |
Released
(4.19~rc1)
|
| precise |
Does not exist
|
|
| trusty |
Does not exist
|
|
| xenial |
Released
(4.15.0-1021.23~16.04.1)
|
|
| bionic |
Released
(4.15.0-1021.23)
|
|
| cosmic |
Ignored
(reached end-of-life)
|
|
| disco |
Released
(5.0.0-1004.8)
|
|
| eoan |
Not vulnerable
(5.3.0-1002.2)
|
|
| focal |
Not vulnerable
(5.4.0-1005.5)
|
|
| groovy |
Not vulnerable
(5.4.0-1009.9)
|
|
|
linux-oem-osp1 Launchpad, Ubuntu, Debian |
upstream |
Released
(4.19~rc1)
|
| precise |
Does not exist
|
|
| trusty |
Does not exist
|
|
| xenial |
Does not exist
|
|
| bionic |
Not vulnerable
(5.0.0-1010.11)
|
|
| disco |
Not vulnerable
(5.0.0-1010.11)
|
|
| eoan |
Not vulnerable
(5.0.0-1010.11)
|
|
| focal |
Does not exist
|
|
| groovy |
Does not exist
|
|
|
linux-aws-5.0 Launchpad, Ubuntu, Debian |
upstream |
Released
(4.19~rc1)
|
| precise |
Does not exist
|
|
| trusty |
Does not exist
|
|
| xenial |
Does not exist
|
|
| bionic |
Not vulnerable
(5.0.0-1021.24~18.04.1)
|
|
| disco |
Does not exist
|
|
| eoan |
Does not exist
|
|
| focal |
Does not exist
|
|
| groovy |
Does not exist
|
|
|
linux-azure-5.3 Launchpad, Ubuntu, Debian |
upstream |
Released
(4.19~rc1)
|
| precise |
Does not exist
|
|
| trusty |
Does not exist
|
|
| xenial |
Does not exist
|
|
| bionic |
Not vulnerable
(5.3.0-1007.8~18.04.1)
|
|
| disco |
Does not exist
|
|
| eoan |
Does not exist
|
|
| focal |
Does not exist
|
|
| groovy |
Does not exist
|
|
|
linux-gcp-5.3 Launchpad, Ubuntu, Debian |
upstream |
Released
(4.19~rc1)
|
| precise |
Does not exist
|
|
| trusty |
Does not exist
|
|
| xenial |
Does not exist
|
|
| bionic |
Not vulnerable
(5.3.0-1008.9~18.04.1)
|
|
| disco |
Does not exist
|
|
| eoan |
Does not exist
|
|
| focal |
Does not exist
|
|
| groovy |
Does not exist
|
|
|
linux-oracle-5.0 Launchpad, Ubuntu, Debian |
upstream |
Released
(4.19~rc1)
|
| precise |
Does not exist
|
|
| trusty |
Does not exist
|
|
| xenial |
Does not exist
|
|
| bionic |
Not vulnerable
(5.0.0-1007.12~18.04.1)
|
|
| disco |
Does not exist
|
|
| eoan |
Does not exist
|
|
| focal |
Does not exist
|
|
| groovy |
Does not exist
|
|
|
linux-raspi2-5.3 Launchpad, Ubuntu, Debian |
upstream |
Released
(4.19~rc1)
|
| precise |
Does not exist
|
|
| trusty |
Does not exist
|
|
| xenial |
Does not exist
|
|
| bionic |
Not vulnerable
(5.3.0-1017.19~18.04.1)
|
|
| eoan |
Does not exist
|
|
| focal |
Does not exist
|
|
| groovy |
Does not exist
|
|
|
linux-oem-5.6 Launchpad, Ubuntu, Debian |
upstream |
Released
(4.19~rc1)
|
| precise |
Does not exist
|
|
| trusty |
Does not exist
|
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| eoan |
Does not exist
|
|
| focal |
Not vulnerable
(5.6.0-1007.7)
|
|
| groovy |
Does not exist
|
|
|
linux-gke-5.3 Launchpad, Ubuntu, Debian |
upstream |
Released
(4.19~rc1)
|
| precise |
Does not exist
|
|
| trusty |
Does not exist
|
|
| xenial |
Does not exist
|
|
| bionic |
Not vulnerable
(5.3.0-1011.12~18.04.1)
|
|
| eoan |
Does not exist
|
|
| focal |
Does not exist
|
|
| groovy |
Does not exist
|
|
|
linux-oracle-5.3 Launchpad, Ubuntu, Debian |
upstream |
Released
(4.19~rc1)
|
| precise |
Does not exist
|
|
| trusty |
Does not exist
|
|
| xenial |
Does not exist
|
|
| bionic |
Not vulnerable
(5.3.0-1011.12~18.04.1)
|
|
| eoan |
Does not exist
|
|
| focal |
Does not exist
|
|
| groovy |
Does not exist
|
|
|
linux-riscv Launchpad, Ubuntu, Debian |
upstream |
Released
(4.19~rc1)
|
| precise |
Does not exist
|
|
| trusty |
Does not exist
|
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| eoan |
Does not exist
|
|
| focal |
Not vulnerable
(5.4.0-24.28)
|
|
| groovy |
Not vulnerable
(5.4.0-24.28)
|
|
|
linux-raspi Launchpad, Ubuntu, Debian |
upstream |
Released
(4.19~rc1)
|
| precise |
Does not exist
|
|
| trusty |
Does not exist
|
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| eoan |
Does not exist
|
|
| focal |
Not vulnerable
(5.4.0-1007.7)
|
|
| groovy |
Not vulnerable
(5.4.0-1008.8)
|
|
|
linux-azure-4.15 Launchpad, Ubuntu, Debian |
upstream |
Released
(4.19~rc1)
|
| precise |
Does not exist
|
|
| trusty |
Does not exist
|
|
| xenial |
Does not exist
|
|
| bionic |
Not vulnerable
(4.15.0-1082.92)
|
|
| eoan |
Does not exist
|
|
| focal |
Does not exist
|
|
| groovy |
Does not exist
|
|
|
linux-aws-5.3 Launchpad, Ubuntu, Debian |
upstream |
Released
(4.19~rc1)
|
| precise |
Does not exist
|
|
| trusty |
Does not exist
|
|
| xenial |
Does not exist
|
|
| bionic |
Not vulnerable
(5.3.0-1016.17~18.04.1)
|
|
| eoan |
Does not exist
|
|
| focal |
Does not exist
|
|
| groovy |
Does not exist
|
|
|
linux-gcp-4.15 Launchpad, Ubuntu, Debian |
upstream |
Released
(4.19~rc1)
|
| precise |
Does not exist
|
|
| trusty |
Does not exist
|
|
| xenial |
Does not exist
|
|
| bionic |
Not vulnerable
(4.15.0-1071.81)
|
|
| eoan |
Does not exist
|
|
| focal |
Does not exist
|
|
| groovy |
Does not exist
|
|
|
linux-hwe-5.4 Launchpad, Ubuntu, Debian |
upstream |
Released
(4.19~rc1)
|
| precise |
Does not exist
|
|
| trusty |
Does not exist
|
|
| xenial |
Does not exist
|
|
| bionic |
Not vulnerable
(5.4.0-37.41~18.04.1)
|
|
| focal |
Does not exist
|
|
| groovy |
Does not exist
|
|
|
linux-raspi-5.4 Launchpad, Ubuntu, Debian |
upstream |
Released
(4.19~rc1)
|
| precise |
Does not exist
|
|
| trusty |
Does not exist
|
|
| xenial |
Does not exist
|
|
| bionic |
Not vulnerable
(5.4.0-1013.13~18.04.1)
|
|
| focal |
Does not exist
|
|
| groovy |
Does not exist
|
|
|
linux-azure-5.4 Launchpad, Ubuntu, Debian |
upstream |
Released
(4.19~rc1)
|
| precise |
Does not exist
|
|
| trusty |
Does not exist
|
|
| xenial |
Does not exist
|
|
| bionic |
Not vulnerable
(5.4.0-1020.20~18.04.1)
|
|
| focal |
Does not exist
|
|
| groovy |
Does not exist
|
|
|
linux-oracle-5.4 Launchpad, Ubuntu, Debian |
upstream |
Released
(4.19~rc1)
|
| precise |
Does not exist
|
|
| trusty |
Does not exist
|
|
| xenial |
Does not exist
|
|
| bionic |
Not vulnerable
(5.4.0-1019.19~18.04.1)
|
|
| focal |
Does not exist
|
|
| groovy |
Does not exist
|
|
|
linux-gcp-5.4 Launchpad, Ubuntu, Debian |
upstream |
Released
(4.19~rc1)
|
| precise |
Does not exist
|
|
| trusty |
Does not exist
|
|
| xenial |
Does not exist
|
|
| bionic |
Not vulnerable
(5.4.0-1019.19~18.04.2)
|
|
| focal |
Does not exist
|
|
| groovy |
Does not exist
|
|
|
linux-aws-5.4 Launchpad, Ubuntu, Debian |
upstream |
Released
(4.19~rc1)
|
| precise |
Does not exist
|
|
| trusty |
Does not exist
|
|
| xenial |
Does not exist
|
|
| bionic |
Not vulnerable
(5.4.0-1018.18~18.04.1)
|
|
| focal |
Does not exist
|
|
| groovy |
Does not exist
|
|
Notes
| Author | Note |
|---|---|
| mdeslaur | bluetooth firmware blobs need version 20.60 and higher Intel recommended to use the latest FW which is now 20.70 Intel page says "Any Linux kernel version 3.19 and higher will also need an update.", adding kernel packages. |
References
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5383
- http://www.cs.technion.ac.il/~biham/BT/
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00128.html
- https://ubuntu.com/security/notices/USN-4094-1
- https://ubuntu.com/security/notices/USN-4095-1
- https://ubuntu.com/security/notices/USN-4095-2
- https://ubuntu.com/security/notices/USN-4118-1
- https://ubuntu.com/security/notices/USN-4351-1
- NVD
- Launchpad
- Debian