CVE-2021-3600
Published: 22 June 2021
It was discovered that the eBPF implementation in the Linux kernel did not properly track bounds information for 32 bit registers when performing div and mod operations. A local attacker could use this to possibly execute arbitrary code.
From the Ubuntu security team
It was discovered that the eBPF implementation in the Linux kernel did not properly track bounds information for 32 bit registers when performing div and mod operations. A local attacker could use this to possibly execute arbitrary code.
Priority
Status
Package | Release | Status |
---|---|---|
linux Launchpad, Ubuntu, Debian |
trusty |
Not vulnerable
(3.11.0-12.19)
|
xenial |
Not vulnerable
(commit f1174f77b50c not present)
|
|
bionic |
Released
(4.15.0-147.151)
|
|
focal |
Released
(5.4.0-70.78)
|
|
hirsute |
Not vulnerable
(5.11.0-11.12)
|
|
upstream |
Released
(5.11)
|
|
groovy |
Released
(5.8.0-48.54)
|
|
impish |
Not vulnerable
(5.11.0-16.17)
|
|
jammy |
Not vulnerable
(5.13.0-19.19)
|
|
linux-hwe Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Released
(4.15.0-147.151~16.04.1)
|
|
bionic |
Ignored
(replaced by linux-hwe-5.4)
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
upstream |
Released
(5.11)
|
|
impish |
Does not exist
|
|
jammy |
Does not exist
|
|
linux-hwe-5.4 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
upstream |
Released
(5.11)
|
|
bionic |
Released
(5.4.0-70.78~18.04.1)
|
|
impish |
Does not exist
|
|
jammy |
Does not exist
|
|
linux-hwe-5.8 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
upstream |
Released
(5.11)
|
|
focal |
Released
(5.8.0-48.54~20.04.1)
|
|
impish |
Does not exist
|
|
jammy |
Does not exist
|
|
linux-hwe-edge Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Ignored
(superseded by linux-hwe)
|
|
bionic |
Ignored
(superseded by linux-hwe-5.4)
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
upstream |
Released
(5.11)
|
|
impish |
Does not exist
|
|
jammy |
Does not exist
|
|
linux-lts-xenial Launchpad, Ubuntu, Debian |
xenial |
Does not exist
|
bionic |
Does not exist
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
upstream |
Released
(5.11)
|
|
trusty |
Not vulnerable
(commit f1174f77b50c not present)
|
|
impish |
Does not exist
|
|
jammy |
Does not exist
|
|
linux-kvm Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
bionic |
Released
(4.15.0-1094.96)
|
|
hirsute |
Not vulnerable
(5.11.0-1003.3)
|
|
upstream |
Released
(5.11)
|
|
focal |
Released
(5.4.0-1036.37)
|
|
groovy |
Released
(5.8.0-1022.24)
|
|
xenial |
Not vulnerable
(commit f1174f77b50c not present)
|
|
impish |
Not vulnerable
(5.11.0-1006.6)
|
|
jammy |
Not vulnerable
(5.13.0-1004.4)
|
|
linux-aws Launchpad, Ubuntu, Debian |
trusty |
Not vulnerable
(commit f1174f77b50c not present)
|
xenial |
Not vulnerable
(commit f1174f77b50c not present)
|
|
bionic |
Released
(4.15.0-1106.113)
|
|
hirsute |
Not vulnerable
(5.11.0-1003.3)
|
|
upstream |
Released
(5.11)
|
|
focal |
Released
(5.4.0-1041.43)
|
|
groovy |
Released
(5.8.0-1027.29)
|
|
impish |
Not vulnerable
(5.11.0-1006.6)
|
|
jammy |
Not vulnerable
(5.13.0-1005.6)
|
|
linux-aws-5.0 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Ignored
(superseded by linux-aws-5.3)
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
upstream |
Released
(5.11)
|
|
impish |
Does not exist
|
|
jammy |
Does not exist
|
|
linux-aws-5.3 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Ignored
(superseded by linux-aws-5.4)
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
upstream |
Released
(5.11)
|
|
impish |
Does not exist
|
|
jammy |
Does not exist
|
|
linux-aws-5.4 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
upstream |
Released
(5.11)
|
|
bionic |
Released
(5.4.0-1041.43~18.04.1)
|
|
impish |
Does not exist
|
|
jammy |
Does not exist
|
|
linux-aws-hwe Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Released
(4.15.0-1106.113~16.04.1)
|
|
bionic |
Does not exist
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
upstream |
Released
(5.11)
|
|
impish |
Does not exist
|
|
jammy |
Does not exist
|
|
linux-azure Launchpad, Ubuntu, Debian |
trusty |
Released
(4.15.0-1118.131~14.04.1)
|
xenial |
Released
(4.15.0-1118.131~16.04.1)
|
|
bionic |
Ignored
(superseded by linux-azure-5.3)
|
|
focal |
Released
(5.4.0-1043.45)
|
|
hirsute |
Not vulnerable
(5.11.0-1002.2)
|
|
upstream |
Released
(5.11)
|
|
groovy |
Released
(5.8.0-1026.28)
|
|
impish |
Not vulnerable
(5.11.0-1004.4)
|
|
jammy |
Not vulnerable
(5.13.0-1006.7)
|
|
linux-azure-4.15 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
bionic |
Released
(4.15.0-1118.131)
|
|
upstream |
Released
(5.11)
|
|
impish |
Does not exist
|
|
jammy |
Does not exist
|
|
linux-azure-5.3 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Ignored
(superseded by linux-azure-5.4)
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
upstream |
Released
(5.11)
|
|
impish |
Does not exist
|
|
jammy |
Does not exist
|
|
linux-azure-5.4 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
upstream |
Released
(5.11)
|
|
bionic |
Released
(5.4.0-1043.45~18.04.1)
|
|
impish |
Does not exist
|
|
jammy |
Does not exist
|
|
linux-dell300x Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
bionic |
Released
(4.15.0-1022.26)
|
|
upstream |
Released
(5.11)
|
|
impish |
Does not exist
|
|
jammy |
Does not exist
|
|
linux-azure-edge Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Ignored
(superseded by linux-azure-5.3)
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
upstream |
Released
(5.11)
|
|
impish |
Does not exist
|
|
jammy |
Does not exist
|
|
linux-gcp Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Released
(4.15.0-1103.116~16.04.1)
|
|
bionic |
Ignored
(superseded by linux-gcp-5.3)
|
|
focal |
Released
(5.4.0-1040.43)
|
|
hirsute |
Not vulnerable
(5.11.0-1003.3)
|
|
upstream |
Released
(5.11)
|
|
groovy |
Released
(5.8.0-1026.27)
|
|
impish |
Not vulnerable
(5.11.0-1006.6)
|
|
jammy |
Not vulnerable
(5.13.0-1005.6)
|
|
linux-gcp-4.15 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
bionic |
Released
(4.15.0-1103.116)
|
|
upstream |
Released
(5.11)
|
|
impish |
Does not exist
|
|
jammy |
Does not exist
|
|
linux-gcp-5.3 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Ignored
(superseded by linux-gcp-5.4)
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
upstream |
Released
(5.11)
|
|
impish |
Does not exist
|
|
jammy |
Does not exist
|
|
linux-gcp-5.4 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
upstream |
Released
(5.11)
|
|
bionic |
Released
(5.4.0-1040.43~18.04.1)
|
|
impish |
Does not exist
|
|
jammy |
Does not exist
|
|
linux-gcp-edge Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Ignored
(superseded by linux-gcp-5.3)
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
upstream |
Released
(5.11)
|
|
impish |
Does not exist
|
|
jammy |
Does not exist
|
|
linux-gke Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
bionic |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
xenial |
Ignored
(reached end of standard support)
|
|
upstream |
Released
(5.11)
|
|
focal |
Released
(5.4.0-1039.41)
|
|
impish |
Does not exist
|
|
jammy |
Not vulnerable
(5.15.0-1002.2)
|
|
linux-gke-4.15 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
bionic |
Ignored
(was needs-triage now end-of-life)
|
|
upstream |
Released
(5.11)
|
|
impish |
Does not exist
|
|
jammy |
Does not exist
|
|
linux-gke-5.0 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
bionic |
Ignored
(was needs-triage now end-of-life)
|
|
upstream |
Released
(5.11)
|
|
impish |
Does not exist
|
|
jammy |
Does not exist
|
|
linux-gke-5.3 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
upstream |
Released
(5.11)
|
|
bionic |
Released
(5.3.0-1041.44)
|
|
impish |
Does not exist
|
|
jammy |
Does not exist
|
|
linux-gke-5.4 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
upstream |
Released
(5.11)
|
|
bionic |
Released
(5.4.0-1039.41~18.04.1)
|
|
impish |
Does not exist
|
|
jammy |
Does not exist
|
|
linux-gkeop Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
upstream |
Released
(5.11)
|
|
focal |
Released
(5.4.0-1012.13)
|
|
impish |
Does not exist
|
|
jammy |
Does not exist
|
|
linux-gkeop-5.4 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
upstream |
Released
(5.11)
|
|
bionic |
Released
(5.4.0-1012.13~18.04.1)
|
|
impish |
Does not exist
|
|
jammy |
Does not exist
|
|
linux-oracle Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Released
(4.15.0-1075.83~16.04.1)
|
|
focal |
Released
(5.4.0-1041.44)
|
|
bionic |
Released
(4.15.0-1075.83)
|
|
hirsute |
Not vulnerable
(5.11.0-1002.2)
|
|
upstream |
Released
(5.11)
|
|
groovy |
Released
(5.8.0-1024.25)
|
|
impish |
Not vulnerable
(5.11.0-1005.5)
|
|
jammy |
Not vulnerable
(5.13.0-1008.10)
|
|
linux-oracle-5.0 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Ignored
(superseded by linux-oracle-5.3)
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
upstream |
Released
(5.11)
|
|
impish |
Does not exist
|
|
jammy |
Does not exist
|
|
linux-oracle-5.3 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Ignored
(superseded by linux-oracle-5.4)
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
upstream |
Released
(5.11)
|
|
impish |
Does not exist
|
|
jammy |
Does not exist
|
|
linux-oracle-5.4 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
upstream |
Released
(5.11)
|
|
bionic |
Released
(5.4.0-1041.44~18.04.1)
|
|
impish |
Does not exist
|
|
jammy |
Does not exist
|
|
linux-oem Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Ignored
(superseded by linux-hwe)
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
bionic |
Ignored
(was needs-triage now end-of-life)
|
|
upstream |
Released
(5.11)
|
|
impish |
Does not exist
|
|
jammy |
Does not exist
|
|
linux-oem-5.6 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
focal |
Ignored
(was needs-triage now end-of-life)
|
|
upstream |
Released
(5.11)
|
|
impish |
Does not exist
|
|
jammy |
Does not exist
|
|
linux-oem-5.10 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
focal |
Released
(5.10.0-1017.18)
|
|
upstream |
Released
(5.11)
|
|
impish |
Does not exist
|
|
jammy |
Does not exist
|
|
linux-oem-osp1 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
bionic |
Ignored
(was needs-triage now end-of-life)
|
|
upstream |
Released
(5.11)
|
|
impish |
Does not exist
|
|
jammy |
Does not exist
|
|
linux-raspi Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
upstream |
Released
(5.11)
|
|
hirsute |
Not vulnerable
(5.11.0-1003.3)
|
|
focal |
Released
(5.4.0-1032.35)
|
|
groovy |
Released
(5.8.0-1019.22)
|
|
impish |
Not vulnerable
(5.11.0-1007.7)
|
|
jammy |
Not vulnerable
(5.13.0-1008.9)
|
|
linux-raspi2 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
focal |
Ignored
(replaced by linux-raspi)
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
bionic |
Released
(4.15.0-1089.94)
|
|
upstream |
Released
(5.11)
|
|
xenial |
Ignored
(was needs-triage now end-of-life)
|
|
impish |
Does not exist
|
|
jammy |
Does not exist
|
|
linux-raspi2-5.3 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
upstream |
Released
(5.11)
|
|
bionic |
Released
(5.3.0-1038.40)
|
|
impish |
Does not exist
|
|
jammy |
Does not exist
|
|
linux-raspi-5.4 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
upstream |
Released
(5.11)
|
|
bionic |
Released
(5.4.0-1032.35~18.04.1)
|
|
impish |
Does not exist
|
|
jammy |
Does not exist
|
|
linux-riscv Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
upstream |
Released
(5.11)
|
|
focal |
Ignored
(was needs-triage now end-of-life)
|
|
hirsute |
Not vulnerable
(5.11.0-1004.4)
|
|
groovy |
Released
(5.8.0-20.22)
|
|
impish |
Not vulnerable
(5.11.0-1007.7)
|
|
jammy |
Not vulnerable
(5.13.0-1004.4)
|
|
linux-snapdragon Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
focal |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
bionic |
Released
(4.15.0-1106.115)
|
|
upstream |
Released
(5.11)
|
|
xenial |
Ignored
(was needs-triage now end-of-life)
|
|
impish |
Does not exist
|
|
jammy |
Does not exist
|
|
linux-aws-5.8 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
focal |
Not vulnerable
(5.8.0-1035.37~20.04.1)
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
upstream |
Released
(5.11)
|
|
impish |
Does not exist
|
|
jammy |
Does not exist
|
|
linux-azure-5.8 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
focal |
Not vulnerable
(5.8.0-1033.35~20.04.1)
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
upstream |
Released
(5.11)
|
|
impish |
Does not exist
|
|
jammy |
Does not exist
|
|
linux-gcp-5.8 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
focal |
Not vulnerable
(5.8.0-1032.34~20.04.1)
|
|
upstream |
Released
(5.11)
|
|
impish |
Does not exist
|
|
jammy |
Does not exist
|
|
linux-oracle-5.8 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
focal |
Not vulnerable
(5.8.0-1031.32~20.04.2)
|
|
upstream |
Released
(5.11)
|
|
impish |
Does not exist
|
|
jammy |
Does not exist
|
|
linux-riscv-5.8 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
groovy |
Does not exist
|
|
hirsute |
Does not exist
|
|
upstream |
Released
(5.11)
|
|
focal |
Released
(5.8.0-20.22~20.04.1)
|
|
impish |
Does not exist
|
|
jammy |
Does not exist
|
|
linux-bluefield Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
hirsute |
Does not exist
|
|
focal |
Released
(5.4.0-1011.14)
|
|
upstream |
Released
(5.11)
|
|
impish |
Does not exist
|
|
jammy |
Does not exist
|
|
linux-hwe-5.11 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
hirsute |
Does not exist
|
|
focal |
Not vulnerable
(5.11.0-22.23~20.04.1)
|
|
upstream |
Released
(5.11)
|
|
impish |
Does not exist
|
|
jammy |
Does not exist
|
|
linux-riscv-5.11 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
hirsute |
Does not exist
|
|
focal |
Not vulnerable
(5.11.0-1015.16~20.04.1)
|
|
upstream |
Released
(5.11)
|
|
impish |
Does not exist
|
|
jammy |
Does not exist
|
|
linux-oem-5.13 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
focal |
Not vulnerable
(5.13.0-1009.10)
|
|
hirsute |
Does not exist
|
|
upstream |
Released
(5.11)
|
|
impish |
Does not exist
|
|
jammy |
Does not exist
|
|
linux-aws-5.11 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
hirsute |
Does not exist
|
|
upstream |
Released
(5.11)
|
|
impish |
Does not exist
|
|
focal |
Not vulnerable
(5.11.0-1009.9~20.04.2)
|
|
jammy |
Does not exist
|
|
linux-azure-5.11 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
hirsute |
Does not exist
|
|
impish |
Does not exist
|
|
focal |
Not vulnerable
(5.11.0-1007.7~20.04.2)
|
|
upstream |
Released
(5.11)
|
|
jammy |
Does not exist
|
|
linux-oracle-5.11 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
hirsute |
Does not exist
|
|
impish |
Does not exist
|
|
focal |
Not vulnerable
(5.11.0-1008.8~20.04.1)
|
|
upstream |
Released
(5.11)
|
|
jammy |
Does not exist
|
|
linux-ibm Launchpad, Ubuntu, Debian |
impish |
Does not exist
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
hirsute |
Does not exist
|
|
focal |
Not vulnerable
(5.4.0-1003.4)
|
|
upstream |
Released
(5.11)
|
|
jammy |
Not vulnerable
(5.15.0-1002.2)
|
|
linux-gcp-5.11 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
hirsute |
Does not exist
|
|
impish |
Does not exist
|
|
focal |
Not vulnerable
(5.11.0-1009.10~20.04.1)
|
|
upstream |
Released
(5.11)
|
|
jammy |
Does not exist
|
|
linux-oem-5.14 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
hirsute |
Does not exist
|
|
impish |
Does not exist
|
|
focal |
Not vulnerable
(5.14.0-1004.4)
|
|
upstream |
Released
(5.11)
|
|
jammy |
Does not exist
|
|
linux-intel-5.13 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
focal |
Not vulnerable
|
|
hirsute |
Does not exist
|
|
impish |
Does not exist
|
|
upstream |
Released
(5.11)
|
|
jammy |
Does not exist
|
|
linux-azure-5.13 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
impish |
Does not exist
|
|
focal |
Not vulnerable
(5.13.0-1009.10~20.04.2)
|
|
upstream |
Released
(5.11)
|
|
jammy |
Does not exist
|
|
linux-hwe-5.13 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
impish |
Does not exist
|
|
focal |
Not vulnerable
(5.13.0-21.21~20.04.1)
|
|
upstream |
Released
(5.11)
|
|
jammy |
Does not exist
|
|
linux-aws-5.13 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
impish |
Does not exist
|
|
focal |
Not vulnerable
(5.13.0-1008.9~20.04.2)
|
|
upstream |
Released
(5.11)
|
|
jammy |
Does not exist
|
|
linux-fips Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
bionic |
Does not exist
|
|
focal |
Does not exist
|
|
hirsute |
Does not exist
|
|
impish |
Does not exist
|
|
upstream |
Released
(5.11)
|
|
xenial |
Needed
|
|
jammy |
Does not exist
|
|
linux-oracle-5.13 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
impish |
Does not exist
|
|
focal |
Not vulnerable
(5.13.0-1011.13~20.04.2)
|
|
upstream |
Released
(5.11)
|
|
jammy |
Does not exist
|
|
linux-gcp-5.13 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
impish |
Does not exist
|
|
focal |
Not vulnerable
(5.13.0-1008.9~20.04.3)
|
|
upstream |
Released
(5.11)
|
|
jammy |
Does not exist
|
|
linux-ibm-5.4 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
focal |
Does not exist
|
|
impish |
Does not exist
|
|
bionic |
Not vulnerable
(5.4.0-1010.11~18.04.2)
|
|
upstream |
Released
(5.11)
|
|
jammy |
Does not exist
|
|
linux-azure-fde Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
impish |
Does not exist
|
|
focal |
Not vulnerable
(5.4.0-1063.66+cvm2.2)
|
|
upstream |
Released
(5.11)
|
|
jammy |
Does not exist
|
|
linux-lowlatency Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
focal |
Does not exist
|
|
impish |
Does not exist
|
|
jammy |
Not vulnerable
|
|
upstream |
Needs triage
|
|
linux-oem-5.17 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
focal |
Does not exist
|
|
impish |
Does not exist
|
|
jammy |
Not vulnerable
|
|
upstream |
Needs triage
|
Notes
Author | Note |
---|---|
sbeattie | 4.15 kernels the only ubuntu kernels that have not yet had the fix applied for 4.15 kernels, f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0 exception") is needed as a prerequisite but introduces CVE-2021-3444 |
cascardo | Commit f1174f77b50c is also necessary to exploit, and is not present on 4.4 kernels. |
References
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3600
- https://git.kernel.org/linus/e88b2c6e5a4d9ce30d75391e4d950da74bb2bd90
- https://ubuntu.com/security/notices/USN-5003-1
- NVD
- Launchpad
- Debian