CVE-2020-10781
Published: 18 June 2020
A flaw was found in the Linux Kernel before 5.8-rc6 in the ZRAM kernel module, where a user with a local account and the ability to read the /sys/class/zram-control/hot_add file can create ZRAM device nodes in the /dev/ directory. This read allocates kernel memory and is not accounted for a user that triggers the creation of that ZRAM device. With this vulnerability, continually reading the device may consume a large amount of system memory and cause the Out-of-Memory (OOM) killer to activate and terminate random userspace processes, possibly making the system inoperable.
From the Ubuntu Security Team
Luca Bruno discovered that the zram module in the Linux kernel did not properly restrict unprivileged users from accessing the hot_add sysfs file. A local attacker could use this to cause a denial of service (memory exhaustion).
Notes
Author | Note |
---|---|
sbeattie | zram module is not loaded by default, but is enabled. |
Priority
Status
Package | Release | Status |
---|---|---|
linux-aws-5.8 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
focal |
Not vulnerable
(5.8.0-1035.37~20.04.1)
|
|
upstream |
Released
(5.8~rc6)
|
|
impish |
Does not exist
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
linux-azure-5.8 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
focal |
Not vulnerable
(5.8.0-1033.35~20.04.1)
|
|
upstream |
Released
(5.8~rc6)
|
|
impish |
Does not exist
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
linux-gcp-5.8 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
focal |
Not vulnerable
(5.8.0-1032.34~20.04.1)
|
|
upstream |
Released
(5.8~rc6)
|
|
impish |
Does not exist
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
linux-oracle-5.8 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
focal |
Not vulnerable
(5.8.0-1031.32~20.04.2)
|
|
upstream |
Released
(5.8~rc6)
|
|
impish |
Does not exist
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
linux-riscv-5.8 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
focal |
Not vulnerable
(5.8.0-14.16~20.04.1)
|
|
upstream |
Released
(5.8~rc6)
|
|
impish |
Does not exist
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
linux-hwe-5.11 Launchpad, Ubuntu, Debian |
focal |
Not vulnerable
(5.11.0-22.23~20.04.1)
|
upstream |
Released
(5.8~rc6)
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
hirsute |
Does not exist
|
|
impish |
Does not exist
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
linux-riscv-5.11 Launchpad, Ubuntu, Debian |
focal |
Not vulnerable
(5.11.0-1015.16~20.04.1)
|
upstream |
Released
(5.8~rc6)
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
hirsute |
Does not exist
|
|
impish |
Does not exist
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
linux-oem-5.13 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
focal |
Not vulnerable
(5.13.0-1009.10)
|
|
hirsute |
Does not exist
|
|
upstream |
Released
(5.8~rc6)
|
|
impish |
Does not exist
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
linux-aws-5.11 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
hirsute |
Does not exist
|
|
impish |
Does not exist
|
|
focal |
Not vulnerable
(5.11.0-1009.9~20.04.2)
|
|
upstream |
Released
(5.8~rc6)
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
linux-azure-5.11 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
hirsute |
Does not exist
|
|
impish |
Does not exist
|
|
focal |
Not vulnerable
(5.11.0-1007.7~20.04.2)
|
|
upstream |
Released
(5.8~rc6)
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
linux-oracle-5.11 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
hirsute |
Does not exist
|
|
impish |
Does not exist
|
|
focal |
Not vulnerable
(5.11.0-1008.8~20.04.1)
|
|
upstream |
Released
(5.8~rc6)
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
linux-gke-5.3 Launchpad, Ubuntu, Debian |
bionic |
Ignored
(was needed now end-of-life)
|
hirsute |
Does not exist
|
|
impish |
Does not exist
|
|
upstream |
Released
(5.8~rc6)
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
eoan |
Does not exist
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
linux-raspi2-5.3 Launchpad, Ubuntu, Debian |
bionic |
Ignored
(was needed now end-of-life)
|
hirsute |
Does not exist
|
|
impish |
Does not exist
|
|
upstream |
Released
(5.8~rc6)
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
eoan |
Does not exist
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
linux-bluefield Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
hirsute |
Does not exist
|
|
focal |
Not vulnerable
(5.4.0-1007.10)
|
|
upstream |
Released
(5.8~rc6)
|
|
impish |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
jammy |
Not vulnerable
(5.15.0-1011.13)
|
|
linux-hwe Launchpad, Ubuntu, Debian |
hirsute |
Does not exist
|
impish |
Does not exist
|
|
bionic |
Ignored
(was needed now end-of-life)
|
|
upstream |
Released
(5.8~rc6)
|
|
trusty |
Does not exist
|
|
xenial |
Released
(4.15.0-115.116~16.04.1)
|
|
eoan |
Does not exist
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
linux-hwe-edge Launchpad, Ubuntu, Debian |
hirsute |
Does not exist
|
impish |
Does not exist
|
|
upstream |
Released
(5.8~rc6)
|
|
trusty |
Does not exist
|
|
bionic |
Ignored
(was needs-triage now end-of-life)
|
|
eoan |
Does not exist
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
jammy |
Does not exist
|
|
xenial |
Ignored
(was needs-triage ESM criteria)
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
linux-lts-trusty Launchpad, Ubuntu, Debian |
hirsute |
Does not exist
|
impish |
Does not exist
|
|
upstream |
Released
(5.8~rc6)
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
eoan |
Does not exist
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
linux-lts-xenial Launchpad, Ubuntu, Debian |
hirsute |
Does not exist
|
impish |
Does not exist
|
|
trusty |
Not vulnerable
(4.4.0-13.29~14.04.1)
|
|
upstream |
Released
(5.8~rc6)
|
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
eoan |
Does not exist
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
linux-kvm Launchpad, Ubuntu, Debian |
hirsute |
Not vulnerable
(5.8.0-1010.11+21.04.1)
|
impish |
Not vulnerable
(5.11.0-1006.6)
|
|
upstream |
Released
(5.8~rc6)
|
|
trusty |
Does not exist
|
|
xenial |
Not vulnerable
(4.4.0-1004.9)
|
|
bionic |
Released
(4.15.0-1072.73)
|
|
eoan |
Ignored
(reached end-of-life)
|
|
focal |
Released
(5.4.0-1021.21)
|
|
groovy |
Not vulnerable
(5.8.0-1001.1)
|
|
jammy |
Not vulnerable
(5.13.0-1004.4)
|
|
kinetic |
Not vulnerable
(5.15.0-1004.4)
|
|
lunar |
Not vulnerable
(5.15.0-1004.4)
|
|
linux-aws-5.0 Launchpad, Ubuntu, Debian |
hirsute |
Does not exist
|
impish |
Does not exist
|
|
upstream |
Released
(5.8~rc6)
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
bionic |
Ignored
(was needs-triage now end-of-life)
|
|
eoan |
Does not exist
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
linux-aws-5.3 Launchpad, Ubuntu, Debian |
hirsute |
Does not exist
|
impish |
Does not exist
|
|
upstream |
Released
(5.8~rc6)
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
bionic |
Ignored
(was needed now end-of-life)
|
|
eoan |
Does not exist
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
linux-aws-hwe Launchpad, Ubuntu, Debian |
hirsute |
Does not exist
|
impish |
Does not exist
|
|
upstream |
Released
(5.8~rc6)
|
|
trusty |
Does not exist
|
|
xenial |
Released
(4.15.0-1080.84~16.04.1)
|
|
bionic |
Does not exist
|
|
eoan |
Does not exist
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
linux-azure-4.15 Launchpad, Ubuntu, Debian |
hirsute |
Does not exist
|
impish |
Does not exist
|
|
upstream |
Released
(5.8~rc6)
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
bionic |
Released
(4.15.0-1093.103)
|
|
eoan |
Does not exist
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
linux-azure-5.3 Launchpad, Ubuntu, Debian |
hirsute |
Does not exist
|
impish |
Does not exist
|
|
upstream |
Released
(5.8~rc6)
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
bionic |
Ignored
(was needed now end-of-life)
|
|
eoan |
Does not exist
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
linux-azure-edge Launchpad, Ubuntu, Debian |
hirsute |
Does not exist
|
impish |
Does not exist
|
|
upstream |
Released
(5.8~rc6)
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
bionic |
Ignored
(was needs-triage now end-of-life)
|
|
eoan |
Does not exist
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
linux-gcp-4.15 Launchpad, Ubuntu, Debian |
hirsute |
Does not exist
|
impish |
Does not exist
|
|
upstream |
Released
(5.8~rc6)
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
bionic |
Released
(4.15.0-1081.92)
|
|
eoan |
Does not exist
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
linux-gcp-5.3 Launchpad, Ubuntu, Debian |
hirsute |
Does not exist
|
impish |
Does not exist
|
|
upstream |
Released
(5.8~rc6)
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
bionic |
Ignored
(was needed now end-of-life)
|
|
eoan |
Does not exist
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
linux-gcp-edge Launchpad, Ubuntu, Debian |
hirsute |
Does not exist
|
impish |
Does not exist
|
|
upstream |
Released
(5.8~rc6)
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
bionic |
Ignored
(was needs-triage now end-of-life)
|
|
eoan |
Does not exist
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
linux-gke-4.15 Launchpad, Ubuntu, Debian |
hirsute |
Does not exist
|
impish |
Does not exist
|
|
upstream |
Released
(5.8~rc6)
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
bionic |
Released
(4.15.0-1067.70)
|
|
eoan |
Does not exist
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
linux-gke-5.0 Launchpad, Ubuntu, Debian |
hirsute |
Does not exist
|
impish |
Does not exist
|
|
bionic |
Ignored
(was needed now end-of-life)
|
|
upstream |
Released
(5.8~rc6)
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
eoan |
Does not exist
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
linux-aws Launchpad, Ubuntu, Debian |
hirsute |
Not vulnerable
(5.8.0-1018.20+21.04.1)
|
impish |
Not vulnerable
(5.11.0-1006.6)
|
|
trusty |
Not vulnerable
(4.4.0-1002.2)
|
|
upstream |
Released
(5.8~rc6)
|
|
xenial |
Not vulnerable
(4.4.0-1001.10)
|
|
bionic |
Released
(4.15.0-1080.84)
|
|
eoan |
Ignored
(reached end-of-life)
|
|
focal |
Released
(5.4.0-1022.22)
|
|
groovy |
Not vulnerable
(5.8.0-1004.4)
|
|
jammy |
Not vulnerable
(5.13.0-1005.6)
|
|
kinetic |
Not vulnerable
(5.15.0-1004.6)
|
|
lunar |
Not vulnerable
(5.15.0-1004.6)
|
|
linux-oracle-5.0 Launchpad, Ubuntu, Debian |
hirsute |
Does not exist
|
impish |
Does not exist
|
|
upstream |
Released
(5.8~rc6)
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
bionic |
Ignored
(was needs-triage now end-of-life)
|
|
eoan |
Does not exist
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
linux-oracle-5.3 Launchpad, Ubuntu, Debian |
hirsute |
Does not exist
|
impish |
Does not exist
|
|
upstream |
Released
(5.8~rc6)
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
bionic |
Ignored
(was needed now end-of-life)
|
|
eoan |
Does not exist
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
linux-oem Launchpad, Ubuntu, Debian |
hirsute |
Does not exist
|
impish |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(5.8~rc6)
|
|
bionic |
Released
(4.15.0-1094.104)
|
|
eoan |
Ignored
(reached end-of-life)
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
xenial |
Ignored
(was needs-triage now end-of-life)
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
linux-oem-5.6 Launchpad, Ubuntu, Debian |
hirsute |
Does not exist
|
impish |
Does not exist
|
|
upstream |
Released
(5.8~rc6)
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
eoan |
Does not exist
|
|
focal |
Released
(5.6.0-1053.57)
|
|
groovy |
Does not exist
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
linux-oem-osp1 Launchpad, Ubuntu, Debian |
hirsute |
Does not exist
|
impish |
Does not exist
|
|
bionic |
Ignored
(was needed now end-of-life)
|
|
upstream |
Released
(5.8~rc6)
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
eoan |
Ignored
(reached end-of-life)
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
linux-raspi2 Launchpad, Ubuntu, Debian |
hirsute |
Does not exist
|
impish |
Does not exist
|
|
upstream |
Released
(5.8~rc6)
|
|
trusty |
Does not exist
|
|
xenial |
Not vulnerable
(4.2.0-1013.19)
|
|
eoan |
Ignored
(reached end-of-life)
|
|
focal |
Ignored
(was needs-triage now end-of-life)
|
|
groovy |
Does not exist
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
bionic |
Released
(4.15.0-1068.72)
|
|
lunar |
Does not exist
|
|
linux-snapdragon Launchpad, Ubuntu, Debian |
hirsute |
Does not exist
|
impish |
Does not exist
|
|
upstream |
Released
(5.8~rc6)
|
|
trusty |
Does not exist
|
|
xenial |
Not vulnerable
(4.4.0-1013.15)
|
|
bionic |
Released
(4.15.0-1084.92)
|
|
eoan |
Does not exist
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
linux-hwe-5.4 Launchpad, Ubuntu, Debian |
hirsute |
Does not exist
|
impish |
Does not exist
|
|
upstream |
Released
(5.8~rc6)
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
bionic |
Released
(5.4.0-45.49~18.04.2)
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
linux-raspi-5.4 Launchpad, Ubuntu, Debian |
hirsute |
Does not exist
|
impish |
Does not exist
|
|
upstream |
Released
(5.8~rc6)
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
bionic |
Released
(5.4.0-1016.17~18.04.1)
|
|
lunar |
Does not exist
|
|
linux-azure-5.4 Launchpad, Ubuntu, Debian |
hirsute |
Does not exist
|
impish |
Does not exist
|
|
upstream |
Released
(5.8~rc6)
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
bionic |
Released
(5.4.0-1023.23~18.04.1)
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
linux-raspi Launchpad, Ubuntu, Debian |
hirsute |
Not vulnerable
(5.8.0-1008.11+21.04.1)
|
impish |
Not vulnerable
(5.11.0-1007.7)
|
|
upstream |
Released
(5.8~rc6)
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
eoan |
Does not exist
|
|
focal |
Released
(5.4.0-1016.17)
|
|
groovy |
Not vulnerable
(5.4.0-1016.17)
|
|
jammy |
Not vulnerable
(5.13.0-1008.9)
|
|
kinetic |
Not vulnerable
(5.15.0-1005.5)
|
|
lunar |
Not vulnerable
(5.15.0-1005.5)
|
|
linux-oracle-5.4 Launchpad, Ubuntu, Debian |
hirsute |
Does not exist
|
impish |
Does not exist
|
|
upstream |
Released
(5.8~rc6)
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
bionic |
Released
(5.4.0-1022.22~18.04.1)
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
linux-gcp-5.4 Launchpad, Ubuntu, Debian |
hirsute |
Does not exist
|
impish |
Does not exist
|
|
upstream |
Released
(5.8~rc6)
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
bionic |
Released
(5.4.0-1022.22~18.04.1)
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
linux-aws-5.4 Launchpad, Ubuntu, Debian |
hirsute |
Does not exist
|
impish |
Does not exist
|
|
upstream |
Released
(5.8~rc6)
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
bionic |
Released
(5.4.0-1022.22~18.04.1)
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
linux Launchpad, Ubuntu, Debian |
impish |
Not vulnerable
(5.11.0-16.17)
|
hirsute |
Not vulnerable
(5.8.0-36.40+21.04.1)
|
|
xenial |
Not vulnerable
(4.4.0-2.16)
|
|
upstream |
Released
(5.8~rc6)
|
|
bionic |
Released
(4.15.0-115.116)
|
|
eoan |
Ignored
(reached end-of-life)
|
|
focal |
Released
(5.4.0-45.49)
|
|
groovy |
Not vulnerable
(5.8.0-16.17)
|
|
trusty |
Not vulnerable
(3.11.0-12.19)
|
|
jammy |
Not vulnerable
(5.13.0-19.19)
|
|
kinetic |
Not vulnerable
(5.15.0-25.25)
|
|
lunar |
Not vulnerable
(5.15.0-25.25)
|
|
Patches: Introduced by f40609d1591fbbd9d391f1f8220173237911ab23 |
||
linux-azure Launchpad, Ubuntu, Debian |
impish |
Not vulnerable
(5.11.0-1004.4)
|
hirsute |
Not vulnerable
(5.8.0-1016.17+21.04.1)
|
|
upstream |
Released
(5.8~rc6)
|
|
trusty |
Released
(4.15.0-1093.103~14.04.1)
|
|
xenial |
Released
(4.15.0-1093.103~16.04.1)
|
|
bionic |
Ignored
(was needs-triage now end-of-life)
|
|
eoan |
Ignored
(reached end-of-life)
|
|
focal |
Released
(5.4.0-1023.23)
|
|
groovy |
Not vulnerable
(5.8.0-1004.4)
|
|
jammy |
Not vulnerable
(5.13.0-1006.7)
|
|
kinetic |
Not vulnerable
(5.15.0-1003.4)
|
|
lunar |
Not vulnerable
(5.15.0-1003.4)
|
|
linux-gcp Launchpad, Ubuntu, Debian |
impish |
Not vulnerable
(5.11.0-1006.6)
|
hirsute |
Not vulnerable
(5.8.0-1015.15+21.04.1)
|
|
upstream |
Released
(5.8~rc6)
|
|
trusty |
Does not exist
|
|
xenial |
Released
(4.15.0-1081.92~16.04.1)
|
|
bionic |
Ignored
(was needs-triage now end-of-life)
|
|
eoan |
Ignored
(reached end-of-life)
|
|
focal |
Released
(5.4.0-1022.22)
|
|
groovy |
Not vulnerable
(5.8.0-1002.2)
|
|
jammy |
Not vulnerable
(5.13.0-1005.6)
|
|
kinetic |
Not vulnerable
(5.15.0-1003.6)
|
|
lunar |
Not vulnerable
(5.15.0-1003.6)
|
|
linux-oracle Launchpad, Ubuntu, Debian |
impish |
Not vulnerable
(5.11.0-1005.5)
|
hirsute |
Not vulnerable
(5.8.0-1014.14+21.04.1)
|
|
upstream |
Released
(5.8~rc6)
|
|
trusty |
Does not exist
|
|
xenial |
Released
(4.15.0-1051.55~16.04.1)
|
|
bionic |
Released
(4.15.0-1051.55)
|
|
eoan |
Ignored
(reached end-of-life)
|
|
focal |
Released
(5.4.0-1022.22)
|
|
groovy |
Not vulnerable
(5.8.0-1001.1)
|
|
jammy |
Not vulnerable
(5.13.0-1008.10)
|
|
kinetic |
Not vulnerable
(5.15.0-1002.4)
|
|
lunar |
Not vulnerable
(5.15.0-1002.4)
|
|
linux-riscv Launchpad, Ubuntu, Debian |
impish |
Not vulnerable
(5.11.0-1007.7)
|
hirsute |
Not vulnerable
(5.8.0-10.12+21.04.1)
|
|
upstream |
Released
(5.8~rc6)
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
eoan |
Does not exist
|
|
focal |
Released
(5.4.0-31.35)
|
|
groovy |
Not vulnerable
(5.8.0-1.1)
|
|
jammy |
Not vulnerable
(5.13.0-1004.4)
|
|
kinetic |
Not vulnerable
(5.15.0-1007.7)
|
|
lunar |
Not vulnerable
(5.15.0-1007.7)
|
|
linux-hwe-5.8 Launchpad, Ubuntu, Debian |
impish |
Does not exist
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
focal |
Not vulnerable
(5.8.0-23.24~20.04.1)
|
|
upstream |
Released
(5.8~rc6)
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
linux-gke-5.4 Launchpad, Ubuntu, Debian |
impish |
Does not exist
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
bionic |
Not vulnerable
(5.4.0-1025.25~18.04.1)
|
|
upstream |
Released
(5.8~rc6)
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
linux-gkeop-5.4 Launchpad, Ubuntu, Debian |
impish |
Does not exist
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
bionic |
Not vulnerable
(5.4.0-1001.1)
|
|
upstream |
Released
(5.8~rc6)
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
linux-dell300x Launchpad, Ubuntu, Debian |
impish |
Does not exist
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
bionic |
Not vulnerable
(4.15.0-1005.8)
|
|
upstream |
Released
(5.8~rc6)
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
linux-oem-5.10 Launchpad, Ubuntu, Debian |
impish |
Does not exist
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
focal |
Not vulnerable
(5.10.0-1008.9)
|
|
upstream |
Released
(5.8~rc6)
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
linux-gkeop Launchpad, Ubuntu, Debian |
impish |
Does not exist
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
focal |
Not vulnerable
(5.4.0-1008.9)
|
|
upstream |
Released
(5.8~rc6)
|
|
jammy |
Needs triage
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
linux-gke Launchpad, Ubuntu, Debian |
impish |
Does not exist
|
trusty |
Does not exist
|
|
bionic |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
focal |
Not vulnerable
(5.4.0-1033.35)
|
|
upstream |
Released
(5.8~rc6)
|
|
jammy |
Not vulnerable
(5.15.0-1002.2)
|
|
kinetic |
Does not exist
|
|
xenial |
Ignored
(reached end of standard support)
|
|
lunar |
Does not exist
|
|
linux-ibm Launchpad, Ubuntu, Debian |
impish |
Does not exist
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
hirsute |
Does not exist
|
|
focal |
Not vulnerable
(5.4.0-1003.4)
|
|
upstream |
Released
(5.8~rc6)
|
|
jammy |
Not vulnerable
(5.15.0-1002.2)
|
|
kinetic |
Not vulnerable
(5.15.0-1002.2)
|
|
lunar |
Not vulnerable
(5.15.0-1002.2)
|
|
linux-gcp-5.11 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
hirsute |
Does not exist
|
|
impish |
Does not exist
|
|
focal |
Not vulnerable
(5.11.0-1009.10~20.04.1)
|
|
upstream |
Released
(5.8~rc6)
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
linux-oem-5.14 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
hirsute |
Does not exist
|
|
impish |
Does not exist
|
|
focal |
Not vulnerable
(5.14.0-1004.4)
|
|
upstream |
Released
(5.8~rc6)
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
linux-intel-5.13 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
hirsute |
Does not exist
|
|
impish |
Does not exist
|
|
focal |
Not vulnerable
(5.13.0-1007.7)
|
|
upstream |
Released
(5.8~rc6)
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
linux-fips Launchpad, Ubuntu, Debian |
xenial |
Ignored
(out of standard support)
|
trusty |
Does not exist
|
|
bionic |
Does not exist
|
|
focal |
Does not exist
|
|
hirsute |
Does not exist
|
|
impish |
Does not exist
|
|
upstream |
Released
(5.8~rc6)
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
linux-azure-5.13 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
impish |
Does not exist
|
|
focal |
Not vulnerable
(5.13.0-1009.10~20.04.2)
|
|
upstream |
Released
(5.8~rc6)
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
linux-hwe-5.13 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
impish |
Does not exist
|
|
focal |
Not vulnerable
(5.13.0-21.21~20.04.1)
|
|
upstream |
Released
(5.8~rc6)
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
linux-aws-5.13 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
impish |
Does not exist
|
|
focal |
Not vulnerable
(5.13.0-1008.9~20.04.2)
|
|
upstream |
Released
(5.8~rc6)
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
linux-oracle-5.13 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
impish |
Does not exist
|
|
focal |
Not vulnerable
(5.13.0-1011.13~20.04.2)
|
|
upstream |
Released
(5.8~rc6)
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
linux-gcp-5.13 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
impish |
Does not exist
|
|
focal |
Not vulnerable
(5.13.0-1008.9~20.04.3)
|
|
upstream |
Released
(5.8~rc6)
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
linux-ibm-5.4 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
focal |
Does not exist
|
|
impish |
Does not exist
|
|
bionic |
Not vulnerable
(5.4.0-1010.11~18.04.2)
|
|
upstream |
Released
(5.8~rc6)
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
linux-azure-fde Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
impish |
Does not exist
|
|
focal |
Released
(5.4.0-1023.23)
|
|
upstream |
Released
(5.8~rc6)
|
|
jammy |
Needs triage
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
linux-lowlatency Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
focal |
Does not exist
|
|
impish |
Does not exist
|
|
jammy |
Not vulnerable
(5.15.0-22.22)
|
|
upstream |
Released
(5.8~rc6)
|
|
kinetic |
Not vulnerable
(5.15.0-24.24)
|
|
lunar |
Not vulnerable
(5.15.0-24.24)
|
|
linux-oem-5.17 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
focal |
Does not exist
|
|
impish |
Does not exist
|
|
jammy |
Not vulnerable
(5.17.0-1003.3)
|
|
upstream |
Released
(5.8~rc6)
|
|
kinetic |
Not vulnerable
(5.17.0-1003.3)
|
|
lunar |
Does not exist
|
|
linux-intel-iotg Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
focal |
Does not exist
|
|
impish |
Does not exist
|
|
upstream |
Needs triage
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
jammy |
Not vulnerable
(5.15.0-1004.6)
|
|
linux-intel-iotg-5.15 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
impish |
Does not exist
|
|
jammy |
Does not exist
|
|
upstream |
Needs triage
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
focal |
Not vulnerable
(5.15.0-1003.5~20.04.1)
|
|
linux-lowlatency-hwe-5.15 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
focal |
Not vulnerable
|
|
jammy |
Does not exist
|
|
upstream |
Needs triage
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
linux-hwe-5.15 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
focal |
Not vulnerable
|
|
jammy |
Does not exist
|
|
upstream |
Needs triage
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
linux-aws-5.15 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
jammy |
Does not exist
|
|
upstream |
Needs triage
|
|
focal |
Not vulnerable
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
linux-gcp-5.15 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
focal |
Not vulnerable
|
|
jammy |
Does not exist
|
|
upstream |
Needs triage
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
linux-gke-5.15 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
focal |
Not vulnerable
|
|
jammy |
Does not exist
|
|
upstream |
Needs triage
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
linux-azure-5.15 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
focal |
Not vulnerable
|
|
jammy |
Does not exist
|
|
upstream |
Needs triage
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
linux-oracle-5.15 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
focal |
Not vulnerable
|
|
jammy |
Does not exist
|
|
upstream |
Needs triage
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
linux-azure-fde-5.15 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
upstream |
Needs triage
|
|
lunar |
Does not exist
|
|
focal |
Not vulnerable
(5.15.0-1007.8~20.04.1)
|
|
linux-oem-6.0 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
focal |
Does not exist
|
|
jammy |
Needs triage
|
|
kinetic |
Does not exist
|
|
upstream |
Needs triage
|
|
lunar |
Does not exist
|
|
linux-oem-6.1 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
focal |
Does not exist
|
|
jammy |
Not vulnerable
|
|
kinetic |
Does not exist
|
|
upstream |
Needs triage
|
|
lunar |
Does not exist
|
|
linux-hwe-5.19 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
focal |
Does not exist
|
|
jammy |
Not vulnerable
|
|
kinetic |
Does not exist
|
|
upstream |
Needs triage
|
|
lunar |
Does not exist
|
|
linux-lowlatency-hwe-5.19 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
focal |
Does not exist
|
|
jammy |
Not vulnerable
|
|
kinetic |
Does not exist
|
|
upstream |
Needs triage
|
|
lunar |
Does not exist
|
|
linux-azure-5.19 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
focal |
Does not exist
|
|
jammy |
Not vulnerable
|
|
kinetic |
Does not exist
|
|
upstream |
Needs triage
|
|
lunar |
Does not exist
|
|
linux-iot Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
focal |
Not vulnerable
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
upstream |
Needs triage
|
|
linux-riscv-5.15 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
focal |
Not vulnerable
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
upstream |
Needs triage
|
|
linux-azure-fde-5.19 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
focal |
Does not exist
|
|
jammy |
Not vulnerable
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
upstream |
Needs triage
|
|
linux-xilinx-zynqmp Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
focal |
Not vulnerable
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
upstream |
Needs triage
|
Severity score breakdown
Parameter | Value |
---|---|
Base score | 5.5 |
Attack vector | Local |
Attack complexity | Low |
Privileges required | Low |
User interaction | None |
Scope | Unchanged |
Confidentiality | None |
Integrity impact | None |
Availability impact | High |
Vector | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
References
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10781
- https://www.openwall.com/lists/oss-security/2020/06/18/1
- https://lore.kernel.org/linux-block/20200617103412.GA2027053@kroah.com/
- https://ubuntu.com/security/notices/USN-4483-1
- https://ubuntu.com/security/notices/USN-4485-1
- NVD
- Launchpad
- Debian