CVE-2021-3656
Published: 16 August 2021
A flaw was found in the KVM's AMD code for supporting SVM nested virtualization. The flaw occurs when processing the VMCB (virtual machine control block) provided by the L1 guest to spawn/handle a nested guest (L2). Due to improper validation of the "virt_ext" field, this issue could allow a malicious L1 to disable both VMLOAD/VMSAVE intercepts and VLS (Virtual VMLOAD/VMSAVE) for the L2 guest. As a result, the L2 guest would be allowed to read/write physical pages of the host, resulting in a crash of the entire system, leak of sensitive data or potential guest-to-host escape.
From the Ubuntu Security Team
Maxim Levitsky and Paolo Bonzini discovered that the KVM hypervisor implementation for AMD processors in the Linux kernel allowed a guest VM to disable restrictions on VMLOAD/VMSAVE in a nested guest. An attacker in a guest VM could use this to read or write portions of the host's physical memory.
Mitigation
Disable nested virtualisation when loading the KVM AMD module: modprobe kvm_amd nested=0
Priority
Status
Package | Release | Status |
---|---|---|
linux-azure-5.8 Launchpad, Ubuntu, Debian |
focal |
Released
(5.8.0-1041.44~20.04.1)
|
impish |
Does not exist
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(5.14~rc7)
|
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
hirsute |
Does not exist
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
linux Launchpad, Ubuntu, Debian |
jammy |
Not vulnerable
(5.13.0-19.19)
|
kinetic |
Not vulnerable
(5.15.0-25.25)
|
|
bionic |
Released
(4.15.0-156.163)
|
|
upstream |
Released
(5.14~rc7)
|
|
impish |
Not vulnerable
(5.13.0-16.16)
|
|
trusty |
Not vulnerable
(3.11.0-12.19)
|
|
xenial |
Not vulnerable
(4.4.0-2.16)
|
|
focal |
Released
(5.4.0-84.94)
|
|
hirsute |
Released
(5.11.0-34.36)
|
|
lunar |
Not vulnerable
(5.15.0-25.25)
|
|
mantic |
Not vulnerable
(5.15.0-25.25)
|
|
Patches: Introduced by 89c8a4984fc98e625517bfe5083342d77ee35811 |
||
linux-aws Launchpad, Ubuntu, Debian |
jammy |
Not vulnerable
(5.13.0-1005.6)
|
kinetic |
Not vulnerable
(5.15.0-1004.6)
|
|
upstream |
Released
(5.14~rc7)
|
|
impish |
Not vulnerable
(5.13.0-1005.6)
|
|
trusty |
Not vulnerable
(4.4.0-1002.2)
|
|
xenial |
Not vulnerable
(4.4.0-1001.10)
|
|
focal |
Released
(5.4.0-1056.59)
|
|
hirsute |
Released
(5.11.0-1017.18)
|
|
bionic |
Released
(4.15.0-1111.118)
|
|
lunar |
Not vulnerable
(5.15.0-1004.6)
|
|
mantic |
Not vulnerable
(5.15.0-1004.6)
|
|
linux-aws-5.0 Launchpad, Ubuntu, Debian |
impish |
Does not exist
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
bionic |
Ignored
(superseded by linux-aws-5.3)
|
|
focal |
Does not exist
|
|
hirsute |
Does not exist
|
|
upstream |
Released
(5.14~rc7)
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
linux-aws-5.11 Launchpad, Ubuntu, Debian |
hirsute |
Does not exist
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
impish |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
upstream |
Released
(5.14~rc7)
|
|
focal |
Released
(5.11.0-1017.18~20.04.1)
|
|
mantic |
Does not exist
|
|
linux-aws-5.13 Launchpad, Ubuntu, Debian |
jammy |
Does not exist
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
bionic |
Does not exist
|
|
impish |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
focal |
Not vulnerable
(5.13.0-1008.9~20.04.2)
|
|
upstream |
Released
(5.14~rc7)
|
|
mantic |
Does not exist
|
|
linux-aws-5.15 Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Needs triage
|
|
xenial |
Does not exist
|
|
focal |
Not vulnerable
|
|
mantic |
Does not exist
|
|
linux-aws-5.3 Launchpad, Ubuntu, Debian |
impish |
Does not exist
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
bionic |
Ignored
(superseded by linux-aws-5.4)
|
|
focal |
Does not exist
|
|
hirsute |
Does not exist
|
|
upstream |
Released
(5.14~rc7)
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
linux-aws-5.4 Launchpad, Ubuntu, Debian |
impish |
Does not exist
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
focal |
Does not exist
|
|
hirsute |
Does not exist
|
|
upstream |
Released
(5.14~rc7)
|
|
bionic |
Released
(5.4.0-1056.59~18.04.1)
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
linux-aws-5.8 Launchpad, Ubuntu, Debian |
impish |
Does not exist
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
hirsute |
Does not exist
|
|
focal |
Ignored
(end of life, was needs-triage)
|
|
upstream |
Released
(5.14~rc7)
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
linux-aws-hwe Launchpad, Ubuntu, Debian |
impish |
Does not exist
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Released
(4.15.0-1111.118~16.04.1)
Available with Ubuntu Pro or Ubuntu Pro (Infra-only) |
|
bionic |
Does not exist
|
|
focal |
Does not exist
|
|
hirsute |
Does not exist
|
|
upstream |
Released
(5.14~rc7)
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
linux-azure Launchpad, Ubuntu, Debian |
impish |
Not vulnerable
(5.13.0-1004.5)
|
jammy |
Not vulnerable
(5.13.0-1006.7)
|
|
kinetic |
Not vulnerable
(5.15.0-1003.4)
|
|
trusty |
Released
(4.15.0-1123.136~14.04.1)
Available with Ubuntu Pro or Ubuntu Pro (Infra-only) |
|
upstream |
Released
(5.14~rc7)
|
|
xenial |
Released
(4.15.0-1123.136~16.04.1)
Available with Ubuntu Pro or Ubuntu Pro (Infra-only) |
|
bionic |
Ignored
(superseded by linux-azure-5.3)
|
|
focal |
Released
(5.4.0-1058.60)
|
|
hirsute |
Released
(5.11.0-1015.16)
|
|
lunar |
Not vulnerable
(5.15.0-1003.4)
|
|
mantic |
Not vulnerable
(5.15.0-1003.4)
|
|
linux-azure-4.15 Launchpad, Ubuntu, Debian |
impish |
Does not exist
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(5.14~rc7)
|
|
xenial |
Does not exist
|
|
focal |
Does not exist
|
|
hirsute |
Does not exist
|
|
bionic |
Released
(4.15.0-1123.136)
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
linux-azure-5.11 Launchpad, Ubuntu, Debian |
hirsute |
Does not exist
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
impish |
Does not exist
|
|
bionic |
Does not exist
|
|
upstream |
Released
(5.14~rc7)
|
|
focal |
Released
(5.11.0-1015.16~20.04.1)
|
|
mantic |
Does not exist
|
|
linux-azure-5.13 Launchpad, Ubuntu, Debian |
jammy |
Does not exist
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
bionic |
Does not exist
|
|
impish |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
focal |
Not vulnerable
(5.13.0-1009.10~20.04.2)
|
|
upstream |
Released
(5.14~rc7)
|
|
mantic |
Does not exist
|
|
linux-azure-5.15 Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Not vulnerable
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Needs triage
|
|
xenial |
Does not exist
|
|
mantic |
Does not exist
|
|
linux-azure-5.19 Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Does not exist
|
|
jammy |
Not vulnerable
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Needs triage
|
|
xenial |
Does not exist
|
|
mantic |
Does not exist
|
|
linux-azure-5.3 Launchpad, Ubuntu, Debian |
impish |
Does not exist
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(5.14~rc7)
|
|
xenial |
Does not exist
|
|
bionic |
Ignored
(superseded by linux-azure-5.4)
|
|
focal |
Does not exist
|
|
hirsute |
Does not exist
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
linux-azure-5.4 Launchpad, Ubuntu, Debian |
hirsute |
Does not exist
|
impish |
Does not exist
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(5.14~rc7)
|
|
xenial |
Does not exist
|
|
focal |
Does not exist
|
|
bionic |
Released
(5.4.0-1058.60~18.04.1)
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
linux-azure-edge Launchpad, Ubuntu, Debian |
impish |
Does not exist
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(5.14~rc7)
|
|
xenial |
Does not exist
|
|
bionic |
Ignored
(superseded by linux-azure-5.3)
|
|
focal |
Does not exist
|
|
hirsute |
Does not exist
|
|
mantic |
Does not exist
|
|
linux-azure-fde Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
impish |
Does not exist
|
|
jammy |
Needs triage
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
focal |
Released
(5.4.0-1058.60)
|
|
upstream |
Released
(5.14~rc7)
|
|
mantic |
Does not exist
|
|
linux-azure-fde-5.15 Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Needs triage
|
|
xenial |
Does not exist
|
|
focal |
Not vulnerable
(5.15.0-1007.8~20.04.1)
|
|
mantic |
Does not exist
|
|
linux-azure-fde-5.19 Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Does not exist
|
|
jammy |
Not vulnerable
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Needs triage
|
|
xenial |
Does not exist
|
|
mantic |
Does not exist
|
|
linux-bluefield Launchpad, Ubuntu, Debian |
impish |
Does not exist
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(5.14~rc7)
|
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
hirsute |
Does not exist
|
|
focal |
Released
(5.4.0-1019.22)
|
|
jammy |
Not vulnerable
(5.15.0-1011.13)
|
|
mantic |
Does not exist
|
|
linux-dell300x Launchpad, Ubuntu, Debian |
impish |
Does not exist
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
focal |
Does not exist
|
|
hirsute |
Does not exist
|
|
upstream |
Released
(5.14~rc7)
|
|
bionic |
Released
(4.15.0-1027.32)
|
|
mantic |
Does not exist
|
|
linux-fips Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Does not exist
|
|
hirsute |
Does not exist
|
|
impish |
Does not exist
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(5.14~rc7)
|
|
xenial |
Ignored
(end of standard support)
|
|
mantic |
Does not exist
|
|
linux-gcp Launchpad, Ubuntu, Debian |
impish |
Not vulnerable
(5.13.0-1003.4)
|
jammy |
Not vulnerable
(5.13.0-1005.6)
|
|
kinetic |
Not vulnerable
(5.15.0-1003.6)
|
|
lunar |
Not vulnerable
(5.15.0-1003.6)
|
|
trusty |
Does not exist
|
|
bionic |
Ignored
(superseded by linux-gcp-5.3)
|
|
xenial |
Released
(4.15.0-1108.122~16.04.1)
Available with Ubuntu Pro or Ubuntu Pro (Infra-only) |
|
upstream |
Released
(5.14~rc7)
|
|
focal |
Released
(5.4.0-1052.56)
|
|
hirsute |
Released
(5.11.0-1018.20)
|
|
mantic |
Not vulnerable
(5.15.0-1003.6)
|
|
linux-gcp-4.15 Launchpad, Ubuntu, Debian |
jammy |
Does not exist
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
focal |
Does not exist
|
|
hirsute |
Does not exist
|
|
trusty |
Does not exist
|
|
impish |
Does not exist
|
|
xenial |
Does not exist
|
|
upstream |
Released
(5.14~rc7)
|
|
bionic |
Released
(4.15.0-1108.122)
|
|
mantic |
Does not exist
|
|
linux-gcp-5.11 Launchpad, Ubuntu, Debian |
impish |
Does not exist
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
hirsute |
Does not exist
|
|
focal |
Released
(5.11.0-1018.20~20.04.2)
|
|
upstream |
Released
(5.14~rc7)
|
|
mantic |
Does not exist
|
|
linux-gcp-5.13 Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Not vulnerable
(5.13.0-1008.9~20.04.3)
|
|
impish |
Does not exist
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(5.14~rc7)
|
|
xenial |
Does not exist
|
|
mantic |
Does not exist
|
|
linux-gcp-5.15 Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Not vulnerable
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Needs triage
|
|
xenial |
Does not exist
|
|
mantic |
Does not exist
|
|
linux-gcp-5.3 Launchpad, Ubuntu, Debian |
jammy |
Does not exist
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
bionic |
Ignored
(superseded by linux-gcp-5.4)
|
|
focal |
Does not exist
|
|
hirsute |
Does not exist
|
|
upstream |
Released
(5.14~rc7)
|
|
impish |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
mantic |
Does not exist
|
|
linux-gcp-5.4 Launchpad, Ubuntu, Debian |
jammy |
Does not exist
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
focal |
Does not exist
|
|
hirsute |
Does not exist
|
|
impish |
Does not exist
|
|
upstream |
Released
(5.14~rc7)
|
|
bionic |
Released
(5.4.0-1052.56~18.04.1)
|
|
mantic |
Does not exist
|
|
linux-gcp-5.8 Launchpad, Ubuntu, Debian |
impish |
Does not exist
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
hirsute |
Does not exist
|
|
focal |
Ignored
(end of life, was needs-triage)
|
|
upstream |
Released
(5.14~rc7)
|
|
mantic |
Does not exist
|
|
linux-gcp-edge Launchpad, Ubuntu, Debian |
focal |
Does not exist
|
hirsute |
Does not exist
|
|
impish |
Does not exist
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
bionic |
Ignored
(superseded by linux-gcp-5.3)
|
|
upstream |
Released
(5.14~rc7)
|
|
mantic |
Does not exist
|
|
linux-gke Launchpad, Ubuntu, Debian |
impish |
Does not exist
|
jammy |
Not vulnerable
(5.15.0-1002.2)
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
trusty |
Does not exist
|
|
bionic |
Does not exist
|
|
hirsute |
Does not exist
|
|
upstream |
Released
(5.14~rc7)
|
|
focal |
Released
(5.4.0-1052.55)
|
|
xenial |
Ignored
(end of standard support)
|
|
mantic |
Does not exist
|
|
linux-gke-4.15 Launchpad, Ubuntu, Debian |
bionic |
Ignored
(end of life, was needs-triage)
|
impish |
Does not exist
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
focal |
Does not exist
|
|
hirsute |
Does not exist
|
|
upstream |
Released
(5.14~rc7)
|
|
mantic |
Does not exist
|
|
linux-gke-5.0 Launchpad, Ubuntu, Debian |
bionic |
Ignored
(end of standard support, was needs-triage)
|
impish |
Does not exist
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
focal |
Does not exist
|
|
hirsute |
Does not exist
|
|
upstream |
Released
(5.14~rc7)
|
|
mantic |
Does not exist
|
|
linux-gke-5.15 Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Not vulnerable
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Needs triage
|
|
xenial |
Does not exist
|
|
mantic |
Does not exist
|
|
linux-gke-5.3 Launchpad, Ubuntu, Debian |
impish |
Does not exist
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
focal |
Does not exist
|
|
hirsute |
Does not exist
|
|
bionic |
Ignored
(end of standard support, was needs-triage)
|
|
upstream |
Released
(5.14~rc7)
|
|
mantic |
Does not exist
|
|
linux-gke-5.4 Launchpad, Ubuntu, Debian |
impish |
Does not exist
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
focal |
Does not exist
|
|
hirsute |
Does not exist
|
|
upstream |
Released
(5.14~rc7)
|
|
bionic |
Released
(5.4.0-1052.55~18.04.1)
|
|
mantic |
Does not exist
|
|
linux-gkeop Launchpad, Ubuntu, Debian |
impish |
Does not exist
|
jammy |
Needs triage
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
hirsute |
Does not exist
|
|
upstream |
Released
(5.14~rc7)
|
|
focal |
Released
(5.4.0-1023.24)
|
|
mantic |
Does not exist
|
|
linux-gkeop-5.4 Launchpad, Ubuntu, Debian |
impish |
Does not exist
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
focal |
Does not exist
|
|
hirsute |
Does not exist
|
|
upstream |
Released
(5.14~rc7)
|
|
bionic |
Released
(5.4.0-1023.24~18.04.1)
|
|
mantic |
Does not exist
|
|
linux-hwe Launchpad, Ubuntu, Debian |
impish |
Does not exist
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Released
(4.15.0-156.163~16.04.1)
Available with Ubuntu Pro or Ubuntu Pro (Infra-only) |
|
bionic |
Ignored
(replaced by linux-hwe-5.4)
|
|
focal |
Does not exist
|
|
hirsute |
Does not exist
|
|
upstream |
Released
(5.14~rc7)
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
linux-hwe-5.11 Launchpad, Ubuntu, Debian |
impish |
Does not exist
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
hirsute |
Does not exist
|
|
upstream |
Released
(5.14~rc7)
|
|
focal |
Released
(5.11.0-34.36~20.04.1)
|
|
mantic |
Does not exist
|
|
linux-hwe-5.13 Launchpad, Ubuntu, Debian |
impish |
Does not exist
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
focal |
Not vulnerable
(5.13.0-21.21~20.04.1)
|
|
upstream |
Released
(5.14~rc7)
|
|
mantic |
Does not exist
|
|
linux-hwe-5.15 Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Not vulnerable
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Needs triage
|
|
xenial |
Does not exist
|
|
mantic |
Does not exist
|
|
linux-hwe-5.19 Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Does not exist
|
|
jammy |
Not vulnerable
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Needs triage
|
|
xenial |
Does not exist
|
|
mantic |
Does not exist
|
|
linux-hwe-5.4 Launchpad, Ubuntu, Debian |
impish |
Does not exist
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
focal |
Does not exist
|
|
hirsute |
Does not exist
|
|
bionic |
Released
(5.4.0-84.94~18.04.1)
|
|
upstream |
Released
(5.14~rc7)
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
linux-hwe-5.8 Launchpad, Ubuntu, Debian |
impish |
Does not exist
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
hirsute |
Does not exist
|
|
focal |
Ignored
(end of life, was pending)
|
|
upstream |
Released
(5.14~rc7)
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
linux-hwe-edge Launchpad, Ubuntu, Debian |
impish |
Does not exist
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(5.14~rc7)
|
|
xenial |
Ignored
(superseded by linux-hwe)
|
|
bionic |
Ignored
(superseded by linux-hwe-5.4)
|
|
focal |
Does not exist
|
|
hirsute |
Does not exist
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
linux-ibm Launchpad, Ubuntu, Debian |
impish |
Does not exist
|
jammy |
Not vulnerable
(5.15.0-1002.2)
|
|
kinetic |
Not vulnerable
(5.15.0-1002.2)
|
|
lunar |
Not vulnerable
(5.15.0-1002.2)
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
focal |
Released
(5.4.0-1004.5)
|
|
hirsute |
Does not exist
|
|
upstream |
Released
(5.14~rc7)
|
|
mantic |
Not vulnerable
(5.15.0-1002.2)
|
|
linux-ibm-5.4 Launchpad, Ubuntu, Debian |
bionic |
Not vulnerable
(5.4.0-1010.11~18.04.2)
|
focal |
Does not exist
|
|
impish |
Does not exist
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(5.14~rc7)
|
|
xenial |
Does not exist
|
|
mantic |
Does not exist
|
|
linux-intel-5.13 Launchpad, Ubuntu, Debian |
jammy |
Does not exist
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
bionic |
Does not exist
|
|
hirsute |
Does not exist
|
|
impish |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
focal |
Not vulnerable
(5.13.0-1007.7)
|
|
upstream |
Released
(5.14~rc7)
|
|
mantic |
Does not exist
|
|
linux-intel-iotg Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Does not exist
|
|
impish |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
upstream |
Needs triage
|
|
jammy |
Not vulnerable
(5.15.0-1004.6)
|
|
mantic |
Does not exist
|
|
linux-intel-iotg-5.15 Launchpad, Ubuntu, Debian |
kinetic |
Does not exist
|
lunar |
Does not exist
|
|
bionic |
Does not exist
|
|
impish |
Does not exist
|
|
jammy |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Needs triage
|
|
xenial |
Does not exist
|
|
focal |
Not vulnerable
(5.15.0-1003.5~20.04.1)
|
|
mantic |
Does not exist
|
|
linux-iot Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Not vulnerable
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Needs triage
|
|
xenial |
Does not exist
|
|
mantic |
Does not exist
|
|
linux-kvm Launchpad, Ubuntu, Debian |
bionic |
Released
(4.15.0-1099.101)
|
impish |
Not vulnerable
(5.13.0-1002.2)
|
|
jammy |
Not vulnerable
(5.13.0-1004.4)
|
|
kinetic |
Not vulnerable
(5.15.0-1004.4)
|
|
trusty |
Does not exist
|
|
upstream |
Released
(5.14~rc7)
|
|
xenial |
Not vulnerable
(4.4.0-1004.9)
|
|
focal |
Released
(5.4.0-1046.48)
|
|
hirsute |
Released
(5.11.0-1015.16)
|
|
lunar |
Not vulnerable
(5.15.0-1004.4)
|
|
mantic |
Does not exist
|
|
linux-lowlatency Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Does not exist
|
|
impish |
Does not exist
|
|
jammy |
Not vulnerable
(5.15.0-22.22)
|
|
kinetic |
Not vulnerable
(5.15.0-24.24)
|
|
lunar |
Not vulnerable
(5.15.0-24.24)
|
|
trusty |
Does not exist
|
|
upstream |
Released
(5.14~rc7)
|
|
xenial |
Does not exist
|
|
mantic |
Not vulnerable
(5.15.0-24.24)
|
|
linux-lowlatency-hwe-5.15 Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Not vulnerable
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Needs triage
|
|
xenial |
Does not exist
|
|
mantic |
Does not exist
|
|
linux-lowlatency-hwe-5.19 Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Does not exist
|
|
jammy |
Not vulnerable
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Needs triage
|
|
xenial |
Does not exist
|
|
mantic |
Does not exist
|
|
linux-lts-xenial Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Does not exist
|
|
impish |
Does not exist
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
trusty |
Not vulnerable
(4.4.0-13.29~14.04.1)
|
|
xenial |
Does not exist
|
|
hirsute |
Does not exist
|
|
upstream |
Released
(5.14~rc7)
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
linux-oem Launchpad, Ubuntu, Debian |
impish |
Does not exist
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
trusty |
Does not exist
|
|
focal |
Does not exist
|
|
hirsute |
Does not exist
|
|
bionic |
Ignored
(end of life, was needs-triage)
|
|
upstream |
Released
(5.14~rc7)
|
|
xenial |
Ignored
(end of standard support)
|
|
mantic |
Does not exist
|
|
linux-oem-5.10 Launchpad, Ubuntu, Debian |
impish |
Does not exist
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
hirsute |
Does not exist
|
|
upstream |
Released
(5.14~rc7)
|
|
focal |
Released
(5.10.0-1045.47)
|
|
mantic |
Does not exist
|
|
linux-oem-5.13 Launchpad, Ubuntu, Debian |
hirsute |
Does not exist
|
impish |
Does not exist
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(5.14~rc7)
|
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
focal |
Released
(5.13.0-1012.16)
|
|
mantic |
Does not exist
|
|
linux-oem-6.0 Launchpad, Ubuntu, Debian |
jammy |
Not vulnerable
(6.0.0-1006.6)
|
bionic |
Does not exist
|
|
focal |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Needs triage
|
|
xenial |
Does not exist
|
|
mantic |
Does not exist
|
|
linux-oem-5.14 Launchpad, Ubuntu, Debian |
jammy |
Does not exist
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
hirsute |
Does not exist
|
|
impish |
Does not exist
|
|
focal |
Not vulnerable
(5.14.0-1004.4)
|
|
upstream |
Released
(5.14~rc7)
|
|
mantic |
Does not exist
|
|
linux-oem-5.17 Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Does not exist
|
|
impish |
Does not exist
|
|
jammy |
Not vulnerable
(5.17.0-1003.3)
|
|
kinetic |
Not vulnerable
(5.17.0-1003.3)
|
|
lunar |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(5.14~rc7)
|
|
xenial |
Does not exist
|
|
mantic |
Does not exist
|
|
linux-oem-5.6 Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
impish |
Does not exist
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
hirsute |
Does not exist
|
|
focal |
Ignored
(end of life, was needs-triage)
|
|
upstream |
Released
(5.14~rc7)
|
|
mantic |
Does not exist
|
|
linux-oem-6.1 Launchpad, Ubuntu, Debian |
jammy |
Not vulnerable
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Needs triage
|
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
focal |
Does not exist
|
|
mantic |
Does not exist
|
|
linux-oem-osp1 Launchpad, Ubuntu, Debian |
bionic |
Ignored
(end of standard support, was needs-triage)
|
impish |
Does not exist
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(5.14~rc7)
|
|
xenial |
Does not exist
|
|
focal |
Does not exist
|
|
hirsute |
Does not exist
|
|
mantic |
Does not exist
|
|
linux-oracle Launchpad, Ubuntu, Debian |
bionic |
Released
(4.15.0-1080.88)
|
impish |
Not vulnerable
(5.13.0-1008.10)
|
|
jammy |
Not vulnerable
(5.13.0-1008.10)
|
|
kinetic |
Not vulnerable
(5.15.0-1002.4)
|
|
lunar |
Not vulnerable
(5.15.0-1002.4)
|
|
trusty |
Does not exist
|
|
upstream |
Released
(5.14~rc7)
|
|
xenial |
Released
(4.15.0-1080.88~16.04.1)
Available with Ubuntu Pro or Ubuntu Pro (Infra-only) |
|
focal |
Released
(5.4.0-1054.58)
|
|
hirsute |
Released
(5.11.0-1017.18)
|
|
mantic |
Not vulnerable
(5.15.0-1002.4)
|
|
linux-oracle-5.0 Launchpad, Ubuntu, Debian |
impish |
Does not exist
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
bionic |
Ignored
(superseded by linux-oracle-5.3)
|
|
focal |
Does not exist
|
|
hirsute |
Does not exist
|
|
upstream |
Released
(5.14~rc7)
|
|
mantic |
Does not exist
|
|
linux-oracle-5.11 Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
hirsute |
Does not exist
|
|
impish |
Does not exist
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
upstream |
Released
(5.14~rc7)
|
|
focal |
Released
(5.11.0-1017.18~20.04.1)
|
|
mantic |
Does not exist
|
|
linux-oracle-5.13 Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Not vulnerable
(5.13.0-1011.13~20.04.2)
|
|
impish |
Does not exist
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(5.14~rc7)
|
|
xenial |
Does not exist
|
|
mantic |
Does not exist
|
|
linux-oracle-5.15 Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Not vulnerable
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Needs triage
|
|
xenial |
Does not exist
|
|
mantic |
Does not exist
|
|
linux-oracle-5.3 Launchpad, Ubuntu, Debian |
impish |
Does not exist
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
bionic |
Ignored
(superseded by linux-oracle-5.4)
|
|
focal |
Does not exist
|
|
hirsute |
Does not exist
|
|
upstream |
Released
(5.14~rc7)
|
|
mantic |
Does not exist
|
|
linux-oracle-5.4 Launchpad, Ubuntu, Debian |
impish |
Does not exist
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
focal |
Does not exist
|
|
hirsute |
Does not exist
|
|
upstream |
Released
(5.14~rc7)
|
|
bionic |
Released
(5.4.0-1054.58~18.04.1)
|
|
mantic |
Does not exist
|
|
linux-oracle-5.8 Launchpad, Ubuntu, Debian |
impish |
Does not exist
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
hirsute |
Does not exist
|
|
focal |
Ignored
(end of life, was needs-triage)
|
|
upstream |
Released
(5.14~rc7)
|
|
mantic |
Does not exist
|
|
linux-raspi Launchpad, Ubuntu, Debian |
impish |
Not vulnerable
(AMD processors only)
|
jammy |
Not vulnerable
(AMD processors only)
|
|
kinetic |
Not vulnerable
(AMD processors only)
|
|
lunar |
Not vulnerable
(AMD processors only)
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
focal |
Not vulnerable
(AMD processors only)
|
|
upstream |
Released
(5.14~rc7)
|
|
hirsute |
Released
(5.11.0-1017.18)
|
|
mantic |
Not vulnerable
(AMD processors only)
|
|
linux-raspi-5.4 Launchpad, Ubuntu, Debian |
bionic |
Not vulnerable
(AMD processors only)
|
impish |
Does not exist
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
focal |
Does not exist
|
|
hirsute |
Does not exist
|
|
upstream |
Released
(5.14~rc7)
|
|
mantic |
Does not exist
|
|
linux-raspi2 Launchpad, Ubuntu, Debian |
bionic |
Not vulnerable
(AMD processors only)
|
impish |
Does not exist
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
trusty |
Does not exist
|
|
focal |
Not vulnerable
(AMD processors only)
|
|
hirsute |
Does not exist
|
|
upstream |
Released
(5.14~rc7)
|
|
xenial |
Not vulnerable
(AMD processors only)
|
|
mantic |
Does not exist
|
|
linux-raspi2-5.3 Launchpad, Ubuntu, Debian |
bionic |
Not vulnerable
(AMD processors only)
|
impish |
Does not exist
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
focal |
Does not exist
|
|
hirsute |
Does not exist
|
|
upstream |
Released
(5.14~rc7)
|
|
mantic |
Does not exist
|
|
linux-riscv Launchpad, Ubuntu, Debian |
impish |
Not vulnerable
(AMD processors only)
|
jammy |
Not vulnerable
(AMD processors only)
|
|
kinetic |
Not vulnerable
(AMD processors only)
|
|
lunar |
Not vulnerable
(AMD processors only)
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
focal |
Not vulnerable
(AMD processors only)
|
|
upstream |
Released
(5.14~rc7)
|
|
hirsute |
Released
(5.11.0-1018.19)
|
|
mantic |
Not vulnerable
(AMD processors only)
|
|
linux-riscv-5.11 Launchpad, Ubuntu, Debian |
impish |
Does not exist
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
hirsute |
Does not exist
|
|
upstream |
Released
(5.14~rc7)
|
|
focal |
Released
(5.11.0-1018.19~20.04.2)
|
|
mantic |
Does not exist
|
|
linux-riscv-5.15 Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Not vulnerable
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Needs triage
|
|
xenial |
Does not exist
|
|
mantic |
Does not exist
|
|
linux-riscv-5.8 Launchpad, Ubuntu, Debian |
impish |
Does not exist
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
hirsute |
Does not exist
|
|
focal |
Not vulnerable
(AMD processors only)
|
|
upstream |
Released
(5.14~rc7)
|
|
mantic |
Does not exist
|
|
linux-snapdragon Launchpad, Ubuntu, Debian |
impish |
Does not exist
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
trusty |
Does not exist
|
|
focal |
Does not exist
|
|
hirsute |
Does not exist
|
|
upstream |
Released
(5.14~rc7)
|
|
bionic |
Released
(4.15.0-1112.121)
|
|
xenial |
Not vulnerable
(AMD processors only)
|
|
mantic |
Does not exist
|
|
linux-xilinx-zynqmp Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Not vulnerable
|
|
jammy |
Not vulnerable
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Needs triage
|
|
xenial |
Does not exist
|
|
mantic |
Does not exist
|
|
linux-nvidia Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
focal |
Does not exist
|
|
jammy |
Not vulnerable
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
upstream |
Needs triage
|
|
mantic |
Does not exist
|
|
linux-gkeop-5.15 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
focal |
Needs triage
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
upstream |
Needs triage
|
|
mantic |
Does not exist
|
|
linux-aws-5.19 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
focal |
Does not exist
|
|
jammy |
Not vulnerable
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
upstream |
Needs triage
|
|
mantic |
Does not exist
|
|
linux-gcp-5.19 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
focal |
Does not exist
|
|
jammy |
Not vulnerable
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
upstream |
Needs triage
|
|
mantic |
Does not exist
|
|
linux-riscv-5.19 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
focal |
Does not exist
|
|
jammy |
Not vulnerable
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
upstream |
Needs triage
|
|
mantic |
Does not exist
|
|
linux-allwinner Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
focal |
Does not exist
|
|
jammy |
Does not exist
|
|
kinetic |
Not vulnerable
|
|
lunar |
Not vulnerable
|
|
upstream |
Needs triage
|
|
mantic |
Does not exist
|
|
linux-allwinner-5.19 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
focal |
Does not exist
|
|
jammy |
Not vulnerable
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
upstream |
Needs triage
|
|
mantic |
Does not exist
|
|
linux-starfive Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
focal |
Does not exist
|
|
jammy |
Does not exist
|
|
kinetic |
Not vulnerable
|
|
lunar |
Not vulnerable
|
|
upstream |
Needs triage
|
|
mantic |
Not vulnerable
|
|
linux-starfive-5.19 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
focal |
Does not exist
|
|
jammy |
Not vulnerable
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
upstream |
Needs triage
|
|
mantic |
Does not exist
|
|
linux-aws-6.2 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
focal |
Does not exist
|
|
jammy |
Not vulnerable
|
|
lunar |
Does not exist
|
|
upstream |
Needs triage
|
|
mantic |
Does not exist
|
|
linux-hwe-6.2 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
focal |
Does not exist
|
|
jammy |
Not vulnerable
|
|
lunar |
Does not exist
|
|
upstream |
Needs triage
|
|
mantic |
Does not exist
|
|
linux-lowlatency-hwe-6.2 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
focal |
Does not exist
|
|
jammy |
Not vulnerable
|
|
lunar |
Does not exist
|
|
upstream |
Needs triage
|
|
mantic |
Does not exist
|
|
linux-ibm-5.15 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
focal |
Not vulnerable
|
|
jammy |
Does not exist
|
|
lunar |
Does not exist
|
|
upstream |
Needs triage
|
|
mantic |
Does not exist
|
|
linux-gcp-6.2 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
focal |
Does not exist
|
|
jammy |
Not vulnerable
|
|
lunar |
Does not exist
|
|
upstream |
Needs triage
|
|
mantic |
Does not exist
|
|
linux-azure-6.2 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
focal |
Does not exist
|
|
jammy |
Not vulnerable
|
|
lunar |
Does not exist
|
|
upstream |
Needs triage
|
|
mantic |
Does not exist
|
|
linux-azure-fde-6.2 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
focal |
Does not exist
|
|
jammy |
Not vulnerable
|
|
lunar |
Does not exist
|
|
upstream |
Needs triage
|
|
mantic |
Does not exist
|
|
linux-nvidia-6.2 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
focal |
Does not exist
|
|
jammy |
Not vulnerable
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
upstream |
Needs triage
|
|
linux-starfive-6.2 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
focal |
Does not exist
|
|
jammy |
Not vulnerable
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
upstream |
Needs triage
|
|
linux-laptop Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
focal |
Does not exist
|
|
jammy |
Does not exist
|
|
lunar |
Does not exist
|
|
mantic |
Not vulnerable
|
|
upstream |
Needs triage
|
|
linux-oem-6.5 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
focal |
Does not exist
|
|
jammy |
Not vulnerable
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
upstream |
Needs triage
|
Severity score breakdown
Parameter | Value |
---|---|
Base score | 8.8 |
Attack vector | Local |
Attack complexity | Low |
Privileges required | Low |
User interaction | None |
Scope | Changed |
Confidentiality | High |
Integrity impact | High |
Availability impact | High |
Vector | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H |
References
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3656
- https://github.com/torvalds/linux/commit/89c8a4984fc9
- https://www.openwall.com/lists/oss-security/2021/08/16/1
- https://ubuntu.com/security/notices/USN-5070-1
- https://ubuntu.com/security/notices/USN-5071-1
- https://ubuntu.com/security/notices/USN-5072-1
- https://ubuntu.com/security/notices/USN-5073-1
- https://ubuntu.com/security/notices/USN-5071-2
- https://ubuntu.com/security/notices/USN-5082-1
- https://ubuntu.com/security/notices/USN-5073-2
- NVD
- Launchpad
- Debian