CVE-2021-3444
Published: 23 March 2021
The bpf verifier in the Linux kernel did not properly handle mod32 destination register truncation when the source register was known to be 0. A local attacker with the ability to load bpf programs could use this gain out-of-bounds reads in kernel memory leading to information disclosure (kernel memory), and possibly out-of-bounds writes that could potentially lead to code execution. This issue was addressed in the upstream kernel in commit 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero") and in Linux stable kernels 5.11.2, 5.10.19, and 5.4.101.
From the Ubuntu security team
De4dCr0w of 360 Alpha Lab discovered that the BPF verifier in the Linux kernel did not properly handle mod32 destination register truncation when the source register was known to be 0. A local attacker could use this to expose sensitive information (kernel memory) or possibly execute arbitrary code.
CVSS 3 base score: 7.8
Status
Package | Release | Status |
---|---|---|
linux-aws-5.8 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
focal |
Not vulnerable
(5.8.0-1035.37~20.04.1)
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
upstream |
Released
(5.12~rc1)
|
|
impish |
Does not exist
|
|
jammy |
Does not exist
|
|
linux-azure-5.8 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
focal |
Not vulnerable
(5.8.0-1033.35~20.04.1)
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
upstream |
Released
(5.12~rc1)
|
|
impish |
Does not exist
|
|
jammy |
Does not exist
|
|
linux-gcp-5.8 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
focal |
Not vulnerable
(5.8.0-1032.34~20.04.1)
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
upstream |
Released
(5.12~rc1)
|
|
impish |
Does not exist
|
|
jammy |
Does not exist
|
|
linux-oracle-5.8 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
focal |
Not vulnerable
(5.8.0-1031.32~20.04.2)
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
upstream |
Released
(5.12~rc1)
|
|
impish |
Does not exist
|
|
jammy |
Does not exist
|
|
linux-riscv-5.8 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
focal |
Released
(5.8.0-20.22~20.04.1)
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
upstream |
Released
(5.12~rc1)
|
|
impish |
Does not exist
|
|
jammy |
Does not exist
|
|
linux-bluefield Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
focal |
Released
(5.4.0-1011.14)
|
|
hirsute |
Does not exist
|
|
upstream |
Released
(5.12~rc1)
|
|
impish |
Does not exist
|
|
jammy |
Does not exist
|
|
linux-hwe-5.11 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
hirsute |
Does not exist
|
|
focal |
Not vulnerable
(5.11.0-22.23~20.04.1)
|
|
upstream |
Released
(5.12~rc1)
|
|
impish |
Does not exist
|
|
jammy |
Does not exist
|
|
linux-riscv-5.11 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
hirsute |
Does not exist
|
|
focal |
Not vulnerable
(5.11.0-1015.16~20.04.1)
|
|
upstream |
Released
(5.12~rc1)
|
|
impish |
Does not exist
|
|
jammy |
Does not exist
|
|
linux-oem-5.13 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
focal |
Not vulnerable
(5.13.0-1009.10)
|
|
hirsute |
Does not exist
|
|
upstream |
Released
(5.12~rc1)
|
|
impish |
Does not exist
|
|
jammy |
Does not exist
|
|
linux-aws-5.11 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
hirsute |
Does not exist
|
|
impish |
Does not exist
|
|
focal |
Not vulnerable
(5.11.0-1009.9~20.04.2)
|
|
upstream |
Released
(5.12~rc1)
|
|
jammy |
Does not exist
|
|
linux-azure-5.11 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
hirsute |
Does not exist
|
|
impish |
Does not exist
|
|
focal |
Not vulnerable
(5.11.0-1007.7~20.04.2)
|
|
upstream |
Released
(5.12~rc1)
|
|
jammy |
Does not exist
|
|
linux-oracle-5.11 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
hirsute |
Does not exist
|
|
impish |
Does not exist
|
|
focal |
Not vulnerable
(5.11.0-1008.8~20.04.1)
|
|
upstream |
Released
(5.12~rc1)
|
|
jammy |
Does not exist
|
|
linux Launchpad, Ubuntu, Debian |
impish |
Not vulnerable
(5.11.0-16.17)
|
precise |
Not vulnerable
|
|
trusty |
Not vulnerable
(3.11.0-12.19)
|
|
xenial |
Not vulnerable
(4.4.0-2.16)
|
|
focal |
Released
(5.4.0-70.78)
|
|
groovy |
Released
(5.8.0-48.54)
|
|
bionic |
Not vulnerable
(4.13.0-16.19)
|
|
hirsute |
Not vulnerable
(5.11.0-11.12)
|
|
upstream |
Released
(5.12~rc1)
|
|
jammy |
Not vulnerable
(5.13.0-19.19)
|
|
linux-hwe Launchpad, Ubuntu, Debian |
impish |
Does not exist
|
precise |
Does not exist
|
|
trusty |
Does not exist
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
bionic |
Released
(5.3.0-72.68)
|
|
upstream |
Released
(5.12~rc1)
|
|
xenial |
Not vulnerable
(4.8.0-39.42~16.04.1)
|
|
jammy |
Does not exist
|
|
linux-hwe-5.4 Launchpad, Ubuntu, Debian |
impish |
Does not exist
|
precise |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
bionic |
Released
(5.4.0-70.78~18.04.1)
|
|
upstream |
Released
(5.12~rc1)
|
|
jammy |
Does not exist
|
|
linux-hwe-5.8 Launchpad, Ubuntu, Debian |
impish |
Does not exist
|
precise |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
focal |
Released
(5.8.0-48.54~20.04.1)
|
|
upstream |
Released
(5.12~rc1)
|
|
jammy |
Does not exist
|
|
linux-hwe-edge Launchpad, Ubuntu, Debian |
impish |
Does not exist
|
precise |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Ignored
(superseded by linux-hwe)
|
|
bionic |
Ignored
(superseded by linux-hwe-5.4)
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
upstream |
Released
(5.12~rc1)
|
|
jammy |
Does not exist
|
|
linux-lts-trusty Launchpad, Ubuntu, Debian |
impish |
Does not exist
|
precise |
Ignored
(end of ESM support, was needs-triage)
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
upstream |
Released
(5.12~rc1)
|
|
jammy |
Does not exist
|
|
linux-lts-xenial Launchpad, Ubuntu, Debian |
impish |
Does not exist
|
precise |
Does not exist
|
|
trusty |
Not vulnerable
(4.4.0-13.29~14.04.1)
|
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
upstream |
Released
(5.12~rc1)
|
|
jammy |
Does not exist
|
|
linux-kvm Launchpad, Ubuntu, Debian |
impish |
Not vulnerable
(5.11.0-1006.6)
|
precise |
Does not exist
|
|
trusty |
Does not exist
|
|
focal |
Released
(5.4.0-1036.37)
|
|
groovy |
Released
(5.8.0-1022.24)
|
|
bionic |
Not vulnerable
(4.15.0-1002.2)
|
|
hirsute |
Not vulnerable
(5.11.0-1003.3)
|
|
upstream |
Released
(5.12~rc1)
|
|
xenial |
Not vulnerable
(4.4.0-1004.9)
|
|
jammy |
Not vulnerable
(5.13.0-1004.4)
|
|
linux-aws Launchpad, Ubuntu, Debian |
impish |
Not vulnerable
(5.11.0-1006.6)
|
precise |
Does not exist
|
|
trusty |
Not vulnerable
(4.4.0-1002.2)
|
|
focal |
Released
(5.4.0-1041.43)
|
|
groovy |
Released
(5.8.0-1027.29)
|
|
bionic |
Not vulnerable
(4.15.0-1001.1)
|
|
hirsute |
Not vulnerable
(5.11.0-1003.3)
|
|
upstream |
Released
(5.12~rc1)
|
|
xenial |
Not vulnerable
(4.4.0-1001.10)
|
|
jammy |
Not vulnerable
(5.13.0-1005.6)
|
|
linux-aws-5.0 Launchpad, Ubuntu, Debian |
impish |
Does not exist
|
precise |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
bionic |
Ignored
(superseded by linux-aws-5.3)
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
upstream |
Released
(5.12~rc1)
|
|
jammy |
Does not exist
|
|
linux-aws-5.3 Launchpad, Ubuntu, Debian |
impish |
Does not exist
|
precise |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
bionic |
Ignored
(superseded by linux-aws-5.4)
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
upstream |
Released
(5.12~rc1)
|
|
jammy |
Does not exist
|
|
linux-aws-5.4 Launchpad, Ubuntu, Debian |
impish |
Does not exist
|
precise |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
bionic |
Released
(5.4.0-1041.43~18.04.1)
|
|
upstream |
Released
(5.12~rc1)
|
|
jammy |
Does not exist
|
|
linux-aws-hwe Launchpad, Ubuntu, Debian |
impish |
Does not exist
|
precise |
Does not exist
|
|
trusty |
Does not exist
|
|
bionic |
Does not exist
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
upstream |
Released
(5.12~rc1)
|
|
xenial |
Not vulnerable
(4.15.0-1030.31~16.04.1)
|
|
jammy |
Does not exist
|
|
linux-azure Launchpad, Ubuntu, Debian |
impish |
Not vulnerable
(5.11.0-1004.4)
|
precise |
Does not exist
|
|
trusty |
Not vulnerable
(4.15.0-1023.24~14.04.1)
|
|
bionic |
Ignored
(superseded by linux-azure-5.3)
|
|
hirsute |
Not vulnerable
(5.11.0-1002.2)
|
|
focal |
Released
(5.4.0-1043.45)
|
|
groovy |
Released
(5.8.0-1026.28)
|
|
upstream |
Released
(5.12~rc1)
|
|
xenial |
Not vulnerable
(4.11.0-1009.9)
|
|
jammy |
Not vulnerable
(5.13.0-1006.7)
|
|
linux-azure-4.15 Launchpad, Ubuntu, Debian |
impish |
Does not exist
|
upstream |
Released
(5.12~rc1)
|
|
precise |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
bionic |
Not vulnerable
(4.15.0-1082.92)
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
jammy |
Does not exist
|
|
linux-azure-5.3 Launchpad, Ubuntu, Debian |
impish |
Does not exist
|
upstream |
Released
(5.12~rc1)
|
|
precise |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
bionic |
Ignored
(superseded by linux-azure-5.4)
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
jammy |
Does not exist
|
|
linux-azure-5.4 Launchpad, Ubuntu, Debian |
impish |
Does not exist
|
upstream |
Released
(5.12~rc1)
|
|
precise |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
bionic |
Released
(5.4.0-1043.45~18.04.1)
|
|
jammy |
Does not exist
|
|
linux-dell300x Launchpad, Ubuntu, Debian |
impish |
Does not exist
|
precise |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
bionic |
Not vulnerable
(4.15.0-1005.8)
|
|
upstream |
Released
(5.12~rc1)
|
|
jammy |
Does not exist
|
|
linux-azure-edge Launchpad, Ubuntu, Debian |
impish |
Does not exist
|
precise |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
bionic |
Ignored
(superseded by linux-azure-5.3)
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
upstream |
Released
(5.12~rc1)
|
|
jammy |
Does not exist
|
|
linux-gcp Launchpad, Ubuntu, Debian |
impish |
Not vulnerable
(5.11.0-1006.6)
|
precise |
Does not exist
|
|
trusty |
Does not exist
|
|
bionic |
Ignored
(superseded by linux-gcp-5.3)
|
|
focal |
Released
(5.4.0-1040.43)
|
|
groovy |
Released
(5.8.0-1026.27)
|
|
hirsute |
Not vulnerable
(5.11.0-1003.3)
|
|
upstream |
Released
(5.12~rc1)
|
|
xenial |
Not vulnerable
(4.10.0-1004.4)
|
|
jammy |
Not vulnerable
(5.13.0-1005.6)
|
|
linux-gcp-4.15 Launchpad, Ubuntu, Debian |
impish |
Does not exist
|
precise |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
bionic |
Not vulnerable
(4.15.0-1071.81)
|
|
upstream |
Released
(5.12~rc1)
|
|
jammy |
Does not exist
|
|
linux-gcp-5.3 Launchpad, Ubuntu, Debian |
impish |
Does not exist
|
precise |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
bionic |
Ignored
(superseded by linux-gcp-5.4)
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
upstream |
Released
(5.12~rc1)
|
|
jammy |
Does not exist
|
|
linux-gcp-5.4 Launchpad, Ubuntu, Debian |
impish |
Does not exist
|
precise |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
bionic |
Released
(5.4.0-1040.43~18.04.1)
|
|
upstream |
Released
(5.12~rc1)
|
|
jammy |
Does not exist
|
|
linux-gcp-edge Launchpad, Ubuntu, Debian |
impish |
Does not exist
|
precise |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
bionic |
Ignored
(superseded by linux-gcp-5.3)
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
upstream |
Released
(5.12~rc1)
|
|
jammy |
Does not exist
|
|
linux-gke-4.15 Launchpad, Ubuntu, Debian |
impish |
Does not exist
|
precise |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
bionic |
Ignored
(was needs-triage now end-of-life)
|
|
upstream |
Released
(5.12~rc1)
|
|
jammy |
Does not exist
|
|
linux-gke-5.0 Launchpad, Ubuntu, Debian |
impish |
Does not exist
|
precise |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
bionic |
Ignored
(was needs-triage now end-of-life)
|
|
upstream |
Released
(5.12~rc1)
|
|
jammy |
Does not exist
|
|
linux-gke-5.3 Launchpad, Ubuntu, Debian |
impish |
Does not exist
|
precise |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
bionic |
Released
(5.3.0-1041.44)
|
|
upstream |
Released
(5.12~rc1)
|
|
jammy |
Does not exist
|
|
linux-gke-5.4 Launchpad, Ubuntu, Debian |
impish |
Does not exist
|
upstream |
Released
(5.12~rc1)
|
|
precise |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
bionic |
Released
(5.4.0-1039.41~18.04.1)
|
|
jammy |
Does not exist
|
|
linux-gkeop Launchpad, Ubuntu, Debian |
impish |
Does not exist
|
upstream |
Released
(5.12~rc1)
|
|
precise |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
focal |
Released
(5.4.0-1012.13)
|
|
jammy |
Does not exist
|
|
linux-gkeop-5.4 Launchpad, Ubuntu, Debian |
impish |
Does not exist
|
upstream |
Released
(5.12~rc1)
|
|
precise |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
bionic |
Released
(5.4.0-1012.13~18.04.1)
|
|
jammy |
Does not exist
|
|
linux-oracle Launchpad, Ubuntu, Debian |
impish |
Not vulnerable
(5.11.0-1005.5)
|
precise |
Does not exist
|
|
trusty |
Does not exist
|
|
focal |
Released
(5.4.0-1041.44)
|
|
groovy |
Released
(5.8.0-1024.25)
|
|
bionic |
Not vulnerable
(4.15.0-1007.9)
|
|
hirsute |
Not vulnerable
(5.11.0-1002.2)
|
|
upstream |
Released
(5.12~rc1)
|
|
xenial |
Not vulnerable
(4.15.0-1007.9~16.04.1)
|
|
jammy |
Not vulnerable
(5.13.0-1008.10)
|
|
linux-oracle-5.0 Launchpad, Ubuntu, Debian |
impish |
Does not exist
|
precise |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
bionic |
Ignored
(superseded by linux-oracle-5.3)
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
upstream |
Released
(5.12~rc1)
|
|
jammy |
Does not exist
|
|
linux-oracle-5.3 Launchpad, Ubuntu, Debian |
impish |
Does not exist
|
precise |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
bionic |
Ignored
(superseded by linux-oracle-5.4)
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
upstream |
Released
(5.12~rc1)
|
|
jammy |
Does not exist
|
|
linux-oracle-5.4 Launchpad, Ubuntu, Debian |
impish |
Does not exist
|
precise |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
bionic |
Released
(5.4.0-1041.44~18.04.1)
|
|
upstream |
Released
(5.12~rc1)
|
|
jammy |
Does not exist
|
|
linux-oem Launchpad, Ubuntu, Debian |
impish |
Does not exist
|
upstream |
Released
(5.12~rc1)
|
|
precise |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Ignored
(superseded by linux-hwe)
|
|
bionic |
Ignored
(was needs-triage now end-of-life)
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
jammy |
Does not exist
|
|
linux-oem-5.6 Launchpad, Ubuntu, Debian |
impish |
Does not exist
|
upstream |
Released
(5.12~rc1)
|
|
precise |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
focal |
Released
(5.6.0-1052.56)
|
|
jammy |
Does not exist
|
|
linux-oem-5.10 Launchpad, Ubuntu, Debian |
impish |
Does not exist
|
upstream |
Released
(5.12~rc1)
|
|
precise |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
focal |
Released
(5.10.0-1019.20)
|
|
jammy |
Does not exist
|
|
linux-oem-osp1 Launchpad, Ubuntu, Debian |
impish |
Does not exist
|
precise |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
upstream |
Released
(5.12~rc1)
|
|
bionic |
Ignored
(was needs-triage now end-of-life)
|
|
jammy |
Does not exist
|
|
linux-raspi Launchpad, Ubuntu, Debian |
impish |
Not vulnerable
(5.11.0-1007.7)
|
precise |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
focal |
Released
(5.4.0-1032.35)
|
|
groovy |
Released
(5.8.0-1019.22)
|
|
hirsute |
Not vulnerable
(5.11.0-1003.3)
|
|
upstream |
Released
(5.12~rc1)
|
|
jammy |
Not vulnerable
(5.13.0-1008.9)
|
|
linux-raspi2 Launchpad, Ubuntu, Debian |
impish |
Does not exist
|
precise |
Does not exist
|
|
trusty |
Does not exist
|
|
focal |
Ignored
(replaced by linux-raspi)
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
bionic |
Not vulnerable
(4.13.0-1005.5)
|
|
upstream |
Released
(5.12~rc1)
|
|
xenial |
Ignored
(was needs-triage now end-of-life)
|
|
jammy |
Does not exist
|
|
linux-raspi2-5.3 Launchpad, Ubuntu, Debian |
impish |
Does not exist
|
precise |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
bionic |
Released
(5.3.0-1038.40)
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
upstream |
Released
(5.12~rc1)
|
|
jammy |
Does not exist
|
|
linux-raspi-5.4 Launchpad, Ubuntu, Debian |
impish |
Does not exist
|
upstream |
Released
(5.12~rc1)
|
|
precise |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
bionic |
Released
(5.4.0-1032.35~18.04.1)
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
jammy |
Does not exist
|
|
linux-riscv Launchpad, Ubuntu, Debian |
impish |
Not vulnerable
(5.11.0-1007.7)
|
precise |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
focal |
Ignored
(was needs-triage now end-of-life)
|
|
hirsute |
Not vulnerable
(5.11.0-1004.4)
|
|
upstream |
Released
(5.12~rc1)
|
|
groovy |
Released
(5.8.0-20.22)
|
|
jammy |
Not vulnerable
(5.13.0-1004.4)
|
|
linux-snapdragon Launchpad, Ubuntu, Debian |
impish |
Does not exist
|
precise |
Does not exist
|
|
trusty |
Does not exist
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
bionic |
Not vulnerable
(4.4.0-1077.82)
|
|
upstream |
Released
(5.12~rc1)
|
|
xenial |
Ignored
(was needs-triage now end-of-life)
|
|
jammy |
Does not exist
|
|
linux-gke Launchpad, Ubuntu, Debian |
impish |
Does not exist
|
precise |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Ignored
(reached end of standard support)
|
|
bionic |
Does not exist
|
|
focal |
Released
(5.4.0-1039.41)
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
upstream |
Released
(5.12~rc1)
|
|
jammy |
Not vulnerable
(5.15.0-1002.2)
|
|
linux-ibm Launchpad, Ubuntu, Debian |
impish |
Does not exist
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
focal |
Not vulnerable
(5.4.0-1003.4)
|
|
hirsute |
Does not exist
|
|
upstream |
Released
(5.12~rc1)
|
|
jammy |
Not vulnerable
(5.15.0-1002.2)
|
|
linux-gcp-5.11 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
hirsute |
Does not exist
|
|
impish |
Does not exist
|
|
focal |
Not vulnerable
(5.11.0-1009.10~20.04.1)
|
|
upstream |
Released
(5.12~rc1)
|
|
jammy |
Does not exist
|
|
linux-oem-5.14 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
hirsute |
Does not exist
|
|
impish |
Does not exist
|
|
focal |
Not vulnerable
(5.14.0-1004.4)
|
|
upstream |
Released
(5.12~rc1)
|
|
jammy |
Does not exist
|
|
linux-intel-5.13 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
focal |
Not vulnerable
|
|
hirsute |
Does not exist
|
|
impish |
Does not exist
|
|
upstream |
Released
(5.12~rc1)
|
|
jammy |
Does not exist
|
|
linux-azure-5.13 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
impish |
Does not exist
|
|
focal |
Not vulnerable
(5.13.0-1009.10~20.04.2)
|
|
upstream |
Released
(5.12~rc1)
|
|
jammy |
Does not exist
|
|
linux-hwe-5.13 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
impish |
Does not exist
|
|
focal |
Not vulnerable
(5.13.0-21.21~20.04.1)
|
|
upstream |
Released
(5.12~rc1)
|
|
jammy |
Does not exist
|
|
linux-aws-5.13 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
impish |
Does not exist
|
|
focal |
Not vulnerable
(5.13.0-1008.9~20.04.2)
|
|
upstream |
Released
(5.12~rc1)
|
|
jammy |
Does not exist
|
|
linux-fips Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
bionic |
Does not exist
|
|
focal |
Does not exist
|
|
hirsute |
Does not exist
|
|
impish |
Does not exist
|
|
upstream |
Released
(5.12~rc1)
|
|
xenial |
Not vulnerable
(4.4.0-1073.79)
|
|
jammy |
Does not exist
|
|
linux-oracle-5.13 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
impish |
Does not exist
|
|
focal |
Not vulnerable
(5.13.0-1011.13~20.04.2)
|
|
upstream |
Released
(5.12~rc1)
|
|
jammy |
Does not exist
|
|
linux-gcp-5.13 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
impish |
Does not exist
|
|
focal |
Not vulnerable
(5.13.0-1008.9~20.04.3)
|
|
upstream |
Released
(5.12~rc1)
|
|
jammy |
Does not exist
|
|
linux-ibm-5.4 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
focal |
Does not exist
|
|
impish |
Does not exist
|
|
bionic |
Not vulnerable
(5.4.0-1010.11~18.04.2)
|
|
upstream |
Released
(5.12~rc1)
|
|
jammy |
Does not exist
|
|
linux-azure-fde Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
impish |
Does not exist
|
|
focal |
Not vulnerable
(5.4.0-1063.66+cvm2.2)
|
|
upstream |
Released
(5.12~rc1)
|
|
jammy |
Does not exist
|
|
linux-lowlatency Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
focal |
Does not exist
|
|
impish |
Does not exist
|
|
jammy |
Not vulnerable
|
|
upstream |
Needs triage
|
|
linux-oem-5.17 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
focal |
Does not exist
|
|
impish |
Does not exist
|
|
jammy |
Not vulnerable
|
|
upstream |
Needs triage
|
Notes
Author | Note |
---|---|
sbeattie | both f6b1b3bf0d5f681631a293cfe1ca934b81716f1e and 468f6eafa6c4 are needed for a system to be vulnerable. e88b2c6e5a4d9ce30d75391e4d950da74bb2bd90 is likely needed as a prerequisite fix as well |
References
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3444
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=9b00f1b78809309163dda2d044d9e94a3c0248a3
- https://www.openwall.com/lists/oss-security/2021/03/23/2
- https://ubuntu.com/security/notices/USN-4887-1
- NVD
- Launchpad
- Debian