CVE-2021-20292
Published: 24 March 2021
There is a flaw reported in the Linux kernel in versions before 5.9 in drivers/gpu/drm/nouveau/nouveau_sgdma.c in nouveau_sgdma_create_ttm in Nouveau DRM subsystem. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker with a local account with a root privilege, can leverage this vulnerability to escalate privileges and execute code in the context of the kernel.
From the Ubuntu security team
It was discovered that the DRM subsystem in the Linux kernel contained double-free vulnerabilities. A privileged attacker could possibly use this to cause a denial of service (system crash) or possibly execute arbitrary code.
CVSS 3 base score: 6.7
Status
Package | Release | Status |
---|---|---|
linux-aws-5.8 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
focal |
Not vulnerable
(5.8.0-1035.37~20.04.1)
|
|
upstream |
Released
(5.9~rc1)
|
|
impish |
Does not exist
|
|
jammy |
Does not exist
|
|
linux-azure-5.8 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
focal |
Not vulnerable
(5.8.0-1033.35~20.04.1)
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
upstream |
Released
(5.9~rc1)
|
|
impish |
Does not exist
|
|
jammy |
Does not exist
|
|
linux-gcp-5.8 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
focal |
Not vulnerable
(5.8.0-1032.34~20.04.1)
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
upstream |
Released
(5.9~rc1)
|
|
impish |
Does not exist
|
|
jammy |
Does not exist
|
|
linux-oracle-5.8 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
focal |
Not vulnerable
(5.8.0-1031.32~20.04.2)
|
|
upstream |
Released
(5.9~rc1)
|
|
impish |
Does not exist
|
|
jammy |
Does not exist
|
|
linux-riscv-5.8 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
focal |
Not vulnerable
(5.8.0-14.16~20.04.1)
|
|
upstream |
Released
(5.9~rc1)
|
|
impish |
Does not exist
|
|
jammy |
Does not exist
|
|
linux-hwe-5.11 Launchpad, Ubuntu, Debian |
focal |
Not vulnerable
(5.11.0-22.23~20.04.1)
|
upstream |
Released
(5.9~rc1)
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
hirsute |
Does not exist
|
|
impish |
Does not exist
|
|
jammy |
Does not exist
|
|
linux-riscv-5.11 Launchpad, Ubuntu, Debian |
focal |
Not vulnerable
(5.11.0-1015.16~20.04.1)
|
upstream |
Released
(5.9~rc1)
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
hirsute |
Does not exist
|
|
impish |
Does not exist
|
|
jammy |
Does not exist
|
|
linux-bluefield Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
hirsute |
Does not exist
|
|
focal |
Not vulnerable
(5.4.0-1007.10)
|
|
upstream |
Released
(5.9~rc1)
|
|
impish |
Does not exist
|
|
jammy |
Does not exist
|
|
linux-oem-5.13 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
focal |
Not vulnerable
(5.13.0-1009.10)
|
|
hirsute |
Does not exist
|
|
upstream |
Released
(5.9~rc1)
|
|
impish |
Does not exist
|
|
jammy |
Does not exist
|
|
linux-aws-5.11 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
hirsute |
Does not exist
|
|
upstream |
Released
(5.9~rc1)
|
|
impish |
Does not exist
|
|
focal |
Not vulnerable
(5.11.0-1009.9~20.04.2)
|
|
jammy |
Does not exist
|
|
linux-azure-5.11 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
focal |
Not vulnerable
(5.11.0-1007.7~20.04.2)
|
|
hirsute |
Does not exist
|
|
upstream |
Released
(5.9~rc1)
|
|
impish |
Does not exist
|
|
jammy |
Does not exist
|
|
linux-oracle-5.11 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
focal |
Not vulnerable
(5.11.0-1008.8~20.04.1)
|
|
hirsute |
Does not exist
|
|
upstream |
Released
(5.9~rc1)
|
|
impish |
Does not exist
|
|
jammy |
Does not exist
|
|
linux Launchpad, Ubuntu, Debian |
impish |
Not vulnerable
(5.11.0-16.17)
|
bionic |
Released
(4.15.0-143.147)
|
|
groovy |
Not vulnerable
(5.8.0-18.19)
|
|
hirsute |
Not vulnerable
(5.8.0-36.40+21.04.1)
|
|
precise |
Ignored
(was needs-triage ESM criteria)
|
|
trusty |
Ignored
(was needed ESM criteria)
|
|
upstream |
Released
(5.9~rc1)
|
|
xenial |
Released
(4.4.0-222.255)
|
|
focal |
Released
(5.4.0-48.52)
|
|
jammy |
Not vulnerable
(5.13.0-19.19)
|
|
linux-hwe Launchpad, Ubuntu, Debian |
impish |
Does not exist
|
precise |
Does not exist
|
|
trusty |
Does not exist
|
|
bionic |
Ignored
(replaced by linux-hwe-5.4)
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
upstream |
Released
(5.9~rc1)
|
|
xenial |
Released
(4.15.0-143.147~16.04.3)
|
|
jammy |
Does not exist
|
|
linux-hwe-5.4 Launchpad, Ubuntu, Debian |
impish |
Does not exist
|
precise |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
upstream |
Released
(5.9~rc1)
|
|
bionic |
Released
(5.4.0-48.52~18.04.1)
|
|
jammy |
Does not exist
|
|
linux-hwe-5.8 Launchpad, Ubuntu, Debian |
impish |
Does not exist
|
precise |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
focal |
Not vulnerable
(5.8.0-23.24~20.04.1)
|
|
upstream |
Released
(5.9~rc1)
|
|
jammy |
Does not exist
|
|
linux-hwe-edge Launchpad, Ubuntu, Debian |
impish |
Does not exist
|
precise |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Ignored
(superseded by linux-hwe)
|
|
bionic |
Ignored
(superseded by linux-hwe-5.4)
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
upstream |
Released
(5.9~rc1)
|
|
jammy |
Does not exist
|
|
linux-lts-trusty Launchpad, Ubuntu, Debian |
impish |
Does not exist
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
precise |
Ignored
(was needs-triage ESM criteria)
|
|
upstream |
Released
(5.9~rc1)
|
|
jammy |
Does not exist
|
|
linux-lts-xenial Launchpad, Ubuntu, Debian |
impish |
Does not exist
|
precise |
Does not exist
|
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
trusty |
Released
(4.4.0-222.255~14.04.1)
|
|
upstream |
Released
(5.9~rc1)
|
|
jammy |
Does not exist
|
|
linux-kvm Launchpad, Ubuntu, Debian |
impish |
Not vulnerable
(5.11.0-1006.6)
|
precise |
Does not exist
|
|
trusty |
Does not exist
|
|
bionic |
Released
(4.15.0-1091.93)
|
|
groovy |
Not vulnerable
(5.8.0-1001.1)
|
|
hirsute |
Not vulnerable
(5.8.0-1010.11+21.04.1)
|
|
upstream |
Released
(5.9~rc1)
|
|
focal |
Released
(5.4.0-1024.24)
|
|
xenial |
Released
(4.4.0-1103.112)
|
|
jammy |
Not vulnerable
(5.13.0-1004.4)
|
|
linux-aws Launchpad, Ubuntu, Debian |
impish |
Not vulnerable
(5.11.0-1006.6)
|
precise |
Does not exist
|
|
bionic |
Released
(4.15.0-1102.109)
|
|
groovy |
Not vulnerable
(5.8.0-1004.4)
|
|
hirsute |
Not vulnerable
(5.8.0-1018.20+21.04.1)
|
|
trusty |
Released
(4.4.0-1102.107)
|
|
upstream |
Released
(5.9~rc1)
|
|
xenial |
Released
(4.4.0-1138.152)
|
|
focal |
Released
(5.4.0-1025.25)
|
|
jammy |
Not vulnerable
(5.13.0-1005.6)
|
|
linux-aws-5.0 Launchpad, Ubuntu, Debian |
impish |
Does not exist
|
precise |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
bionic |
Ignored
(superseded by linux-aws-5.3)
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
upstream |
Released
(5.9~rc1)
|
|
jammy |
Does not exist
|
|
linux-aws-5.3 Launchpad, Ubuntu, Debian |
impish |
Does not exist
|
precise |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
bionic |
Ignored
(superseded by linux-aws-5.4)
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
upstream |
Released
(5.9~rc1)
|
|
jammy |
Does not exist
|
|
linux-aws-5.4 Launchpad, Ubuntu, Debian |
impish |
Does not exist
|
precise |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
upstream |
Released
(5.9~rc1)
|
|
bionic |
Released
(5.4.0-1025.25~18.04.1)
|
|
jammy |
Does not exist
|
|
linux-aws-hwe Launchpad, Ubuntu, Debian |
impish |
Does not exist
|
precise |
Does not exist
|
|
trusty |
Does not exist
|
|
bionic |
Does not exist
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
upstream |
Released
(5.9~rc1)
|
|
xenial |
Released
(4.15.0-1102.109~16.04.1)
|
|
jammy |
Does not exist
|
|
linux-azure Launchpad, Ubuntu, Debian |
impish |
Not vulnerable
(5.11.0-1004.4)
|
precise |
Does not exist
|
|
bionic |
Ignored
(superseded by linux-azure-5.3)
|
|
groovy |
Not vulnerable
(5.8.0-1004.4)
|
|
hirsute |
Not vulnerable
(5.8.0-1016.17+21.04.1)
|
|
trusty |
Released
(4.15.0-1114.127~14.04.1)
|
|
upstream |
Released
(5.9~rc1)
|
|
xenial |
Ignored
(was needed now end-of-life)
|
|
focal |
Released
(5.4.0-1026.26)
|
|
jammy |
Not vulnerable
(5.13.0-1006.7)
|
|
linux-azure-4.15 Launchpad, Ubuntu, Debian |
impish |
Does not exist
|
precise |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
bionic |
Released
(4.15.0-1114.127)
|
|
upstream |
Released
(5.9~rc1)
|
|
jammy |
Does not exist
|
|
linux-azure-5.3 Launchpad, Ubuntu, Debian |
impish |
Does not exist
|
precise |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
bionic |
Ignored
(superseded by linux-azure-5.4)
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
upstream |
Released
(5.9~rc1)
|
|
jammy |
Does not exist
|
|
linux-azure-5.4 Launchpad, Ubuntu, Debian |
impish |
Does not exist
|
precise |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
upstream |
Released
(5.9~rc1)
|
|
bionic |
Released
(5.4.0-1026.26~18.04.1)
|
|
jammy |
Does not exist
|
|
linux-dell300x Launchpad, Ubuntu, Debian |
impish |
Does not exist
|
precise |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
bionic |
Released
(4.15.0-1018.22)
|
|
upstream |
Released
(5.9~rc1)
|
|
jammy |
Does not exist
|
|
linux-azure-edge Launchpad, Ubuntu, Debian |
impish |
Does not exist
|
precise |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
bionic |
Ignored
(superseded by linux-azure-5.3)
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
upstream |
Released
(5.9~rc1)
|
|
jammy |
Does not exist
|
|
linux-gcp Launchpad, Ubuntu, Debian |
impish |
Not vulnerable
(5.11.0-1006.6)
|
precise |
Does not exist
|
|
trusty |
Does not exist
|
|
bionic |
Ignored
(superseded by linux-gcp-5.3)
|
|
groovy |
Not vulnerable
(5.8.0-1002.2)
|
|
hirsute |
Not vulnerable
(5.8.0-1015.15+21.04.1)
|
|
upstream |
Released
(5.9~rc1)
|
|
xenial |
Released
(4.15.0-1099.112~16.04.1)
|
|
focal |
Released
(5.4.0-1025.25)
|
|
jammy |
Not vulnerable
(5.13.0-1005.6)
|
|
linux-gcp-4.15 Launchpad, Ubuntu, Debian |
impish |
Does not exist
|
precise |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
bionic |
Released
(4.15.0-1099.112)
|
|
upstream |
Released
(5.9~rc1)
|
|
jammy |
Does not exist
|
|
linux-gcp-5.3 Launchpad, Ubuntu, Debian |
impish |
Does not exist
|
precise |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
bionic |
Ignored
(superseded by linux-gcp-5.4)
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
upstream |
Released
(5.9~rc1)
|
|
jammy |
Does not exist
|
|
linux-gcp-5.4 Launchpad, Ubuntu, Debian |
impish |
Does not exist
|
precise |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
upstream |
Released
(5.9~rc1)
|
|
bionic |
Released
(5.4.0-1025.25~18.04.1)
|
|
jammy |
Does not exist
|
|
linux-gcp-edge Launchpad, Ubuntu, Debian |
impish |
Does not exist
|
precise |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
bionic |
Ignored
(superseded by linux-gcp-5.3)
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
upstream |
Released
(5.9~rc1)
|
|
jammy |
Does not exist
|
|
linux-gke-4.15 Launchpad, Ubuntu, Debian |
impish |
Does not exist
|
precise |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
bionic |
Ignored
(was needs-triage now end-of-life)
|
|
upstream |
Released
(5.9~rc1)
|
|
jammy |
Does not exist
|
|
linux-gke-5.0 Launchpad, Ubuntu, Debian |
impish |
Does not exist
|
precise |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
bionic |
Ignored
(was needs-triage now end-of-life)
|
|
upstream |
Released
(5.9~rc1)
|
|
jammy |
Does not exist
|
|
linux-gke-5.3 Launchpad, Ubuntu, Debian |
impish |
Does not exist
|
precise |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
bionic |
Ignored
(was needed now end-of-life)
|
|
upstream |
Released
(5.9~rc1)
|
|
jammy |
Does not exist
|
|
linux-gke-5.4 Launchpad, Ubuntu, Debian |
impish |
Does not exist
|
precise |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
bionic |
Not vulnerable
(5.4.0-1025.25~18.04.1)
|
|
upstream |
Released
(5.9~rc1)
|
|
jammy |
Does not exist
|
|
linux-gkeop Launchpad, Ubuntu, Debian |
impish |
Does not exist
|
precise |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
focal |
Not vulnerable
(5.4.0-1008.9)
|
|
upstream |
Released
(5.9~rc1)
|
|
jammy |
Does not exist
|
|
linux-gkeop-5.4 Launchpad, Ubuntu, Debian |
impish |
Does not exist
|
precise |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
bionic |
Not vulnerable
(5.4.0-1001.1)
|
|
upstream |
Released
(5.9~rc1)
|
|
jammy |
Does not exist
|
|
linux-oracle Launchpad, Ubuntu, Debian |
impish |
Not vulnerable
(5.11.0-1005.5)
|
precise |
Does not exist
|
|
trusty |
Does not exist
|
|
groovy |
Not vulnerable
(5.8.0-1001.1)
|
|
hirsute |
Not vulnerable
(5.8.0-1014.14+21.04.1)
|
|
upstream |
Released
(5.9~rc1)
|
|
focal |
Released
(5.4.0-1025.25)
|
|
bionic |
Released
(4.15.0-1071.79)
|
|
xenial |
Released
(4.15.0-1071.79~16.04.1)
|
|
jammy |
Not vulnerable
(5.13.0-1008.10)
|
|
linux-oracle-5.0 Launchpad, Ubuntu, Debian |
impish |
Does not exist
|
precise |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
bionic |
Ignored
(superseded by linux-oracle-5.3)
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
upstream |
Released
(5.9~rc1)
|
|
jammy |
Does not exist
|
|
linux-oracle-5.3 Launchpad, Ubuntu, Debian |
impish |
Does not exist
|
precise |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
bionic |
Ignored
(superseded by linux-oracle-5.4)
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
upstream |
Released
(5.9~rc1)
|
|
jammy |
Does not exist
|
|
linux-oracle-5.4 Launchpad, Ubuntu, Debian |
impish |
Does not exist
|
precise |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
upstream |
Released
(5.9~rc1)
|
|
bionic |
Released
(5.4.0-1025.25~18.04.1)
|
|
jammy |
Does not exist
|
|
linux-oem Launchpad, Ubuntu, Debian |
impish |
Does not exist
|
precise |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Ignored
(superseded by linux-hwe)
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
bionic |
Ignored
(was needs-triage now end-of-life)
|
|
upstream |
Released
(5.9~rc1)
|
|
jammy |
Does not exist
|
|
linux-oem-5.6 Launchpad, Ubuntu, Debian |
impish |
Does not exist
|
precise |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
focal |
Ignored
(was needed now end-of-life)
|
|
upstream |
Released
(5.9~rc1)
|
|
jammy |
Does not exist
|
|
linux-oem-5.10 Launchpad, Ubuntu, Debian |
impish |
Does not exist
|
precise |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
focal |
Not vulnerable
(5.10.0-1008.9)
|
|
upstream |
Released
(5.9~rc1)
|
|
jammy |
Does not exist
|
|
linux-oem-osp1 Launchpad, Ubuntu, Debian |
impish |
Does not exist
|
precise |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
bionic |
Ignored
(was needs-triage now end-of-life)
|
|
upstream |
Released
(5.9~rc1)
|
|
jammy |
Does not exist
|
|
linux-raspi Launchpad, Ubuntu, Debian |
impish |
Not vulnerable
(5.11.0-1007.7)
|
precise |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
groovy |
Not vulnerable
(5.8.0-1002.5)
|
|
hirsute |
Not vulnerable
(5.8.0-1008.11+21.04.1)
|
|
upstream |
Released
(5.9~rc1)
|
|
focal |
Released
(5.4.0-1019.21)
|
|
jammy |
Not vulnerable
(5.13.0-1008.9)
|
|
linux-raspi2 Launchpad, Ubuntu, Debian |
impish |
Does not exist
|
precise |
Does not exist
|
|
trusty |
Does not exist
|
|
focal |
Ignored
(replaced by linux-raspi)
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
bionic |
Released
(4.15.0-1085.90)
|
|
upstream |
Released
(5.9~rc1)
|
|
xenial |
Ignored
(was needed now end-of-life)
|
|
jammy |
Does not exist
|
|
linux-raspi2-5.3 Launchpad, Ubuntu, Debian |
impish |
Does not exist
|
precise |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
bionic |
Ignored
(was needed now end-of-life)
|
|
upstream |
Released
(5.9~rc1)
|
|
jammy |
Does not exist
|
|
linux-raspi-5.4 Launchpad, Ubuntu, Debian |
impish |
Does not exist
|
precise |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
upstream |
Released
(5.9~rc1)
|
|
bionic |
Released
(5.4.0-1019.21~18.04.1)
|
|
jammy |
Does not exist
|
|
linux-riscv Launchpad, Ubuntu, Debian |
impish |
Not vulnerable
(5.11.0-1007.7)
|
precise |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
focal |
Ignored
(was needs-triage now end-of-life)
|
|
groovy |
Not vulnerable
(5.8.0-1.1)
|
|
hirsute |
Not vulnerable
(5.8.0-10.12+21.04.1)
|
|
upstream |
Released
(5.9~rc1)
|
|
jammy |
Not vulnerable
(5.13.0-1004.4)
|
|
linux-snapdragon Launchpad, Ubuntu, Debian |
impish |
Does not exist
|
precise |
Does not exist
|
|
trusty |
Does not exist
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
bionic |
Released
(4.15.0-1102.111)
|
|
upstream |
Released
(5.9~rc1)
|
|
xenial |
Ignored
(was needed now end-of-life)
|
|
jammy |
Does not exist
|
|
linux-gke Launchpad, Ubuntu, Debian |
impish |
Does not exist
|
precise |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Ignored
(reached end of standard support)
|
|
bionic |
Does not exist
|
|
focal |
Not vulnerable
(5.4.0-1033.35)
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
upstream |
Released
(5.9~rc1)
|
|
jammy |
Not vulnerable
(5.15.0-1002.2)
|
|
linux-ibm Launchpad, Ubuntu, Debian |
impish |
Does not exist
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
hirsute |
Does not exist
|
|
focal |
Not vulnerable
(5.4.0-1003.4)
|
|
upstream |
Released
(5.9~rc1)
|
|
jammy |
Not vulnerable
(5.15.0-1002.2)
|
|
linux-gcp-5.11 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
hirsute |
Does not exist
|
|
impish |
Does not exist
|
|
focal |
Not vulnerable
(5.11.0-1009.10~20.04.1)
|
|
upstream |
Released
(5.9~rc1)
|
|
jammy |
Does not exist
|
|
linux-oem-5.14 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
focal |
Not vulnerable
(5.14.0-1004.4)
|
|
hirsute |
Does not exist
|
|
impish |
Does not exist
|
|
upstream |
Released
(5.9~rc1)
|
|
jammy |
Does not exist
|
|
linux-intel-5.13 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
focal |
Not vulnerable
|
|
hirsute |
Does not exist
|
|
impish |
Does not exist
|
|
upstream |
Released
(5.9~rc1)
|
|
jammy |
Does not exist
|
|
linux-azure-5.13 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
impish |
Does not exist
|
|
focal |
Not vulnerable
(5.13.0-1009.10~20.04.2)
|
|
upstream |
Released
(5.9~rc1)
|
|
jammy |
Does not exist
|
|
linux-hwe-5.13 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
impish |
Does not exist
|
|
focal |
Not vulnerable
(5.13.0-21.21~20.04.1)
|
|
upstream |
Released
(5.9~rc1)
|
|
jammy |
Does not exist
|
|
linux-aws-5.13 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
impish |
Does not exist
|
|
focal |
Not vulnerable
(5.13.0-1008.9~20.04.2)
|
|
upstream |
Released
(5.9~rc1)
|
|
jammy |
Does not exist
|
|
linux-fips Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
bionic |
Does not exist
|
|
focal |
Does not exist
|
|
hirsute |
Does not exist
|
|
impish |
Does not exist
|
|
upstream |
Released
(5.9~rc1)
|
|
xenial |
Not vulnerable
(4.4.0-1073.79)
|
|
jammy |
Does not exist
|
|
linux-oracle-5.13 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
impish |
Does not exist
|
|
focal |
Not vulnerable
(5.13.0-1011.13~20.04.2)
|
|
upstream |
Released
(5.9~rc1)
|
|
jammy |
Does not exist
|
|
linux-gcp-5.13 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
impish |
Does not exist
|
|
focal |
Not vulnerable
(5.13.0-1008.9~20.04.3)
|
|
upstream |
Released
(5.9~rc1)
|
|
jammy |
Does not exist
|
|
linux-ibm-5.4 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
focal |
Does not exist
|
|
impish |
Does not exist
|
|
bionic |
Not vulnerable
(5.4.0-1010.11~18.04.2)
|
|
upstream |
Released
(5.9~rc1)
|
|
jammy |
Does not exist
|
|
linux-azure-fde Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
impish |
Does not exist
|
|
focal |
Not vulnerable
(5.4.0-1063.66+cvm2.2)
|
|
upstream |
Released
(5.9~rc1)
|
|
jammy |
Does not exist
|
|
linux-lowlatency Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
focal |
Does not exist
|
|
impish |
Does not exist
|
|
jammy |
Not vulnerable
|
|
upstream |
Needs triage
|
|
linux-oem-5.17 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
focal |
Does not exist
|
|
impish |
Does not exist
|
|
jammy |
Not vulnerable
|
|
upstream |
Needs triage
|
Notes
Author | Note |
---|---|
sbeattie | kernels with CONFIG_SLAB_FREELIST_HARDENED=y (which Ubuntu enables) are probably not affected. |
References
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20292
- https://bugzilla.redhat.com/show_bug.cgi?id=1939686
- https://git.kernel.org/linus/5de5b6ecf97a021f29403aa272cb4e03318ef586
- https://ubuntu.com/security/notices/USN-4946-1
- https://ubuntu.com/security/notices/USN-5343-1
- NVD
- Launchpad
- Debian