CVE-2021-3732
Published: 27 August 2021
A flaw was found in the Linux kernel's OverlayFS subsystem in the way the user mounts the TmpFS filesystem with OverlayFS. This flaw allows a local user to gain access to hidden files that should not be accessible.
From the Ubuntu Security Team
Alois Wohlschlager discovered that the overlay file system in the Linux kernel did not restrict private clones in some situations. An attacker could use this to expose sensitive information.
Priority
Status
Package | Release | Status |
---|---|---|
linux-hwe Launchpad, Ubuntu, Debian |
bionic |
Ignored
(replaced by linux-hwe-5.4)
|
focal |
Does not exist
|
|
hirsute |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Released
(4.15.0-159.167~16.04.1)
|
|
impish |
Does not exist
|
|
upstream |
Released
(5.14~rc6)
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
linux-hwe-5.4 Launchpad, Ubuntu, Debian |
focal |
Does not exist
|
hirsute |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
impish |
Does not exist
|
|
upstream |
Released
(5.14~rc6)
|
|
bionic |
Released
(5.4.0-89.100~18.04.1)
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
linux-hwe-5.8 Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
hirsute |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
impish |
Does not exist
|
|
focal |
Ignored
(was needed now end-of-life)
|
|
upstream |
Released
(5.14~rc6)
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
linux-hwe-5.11 Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
hirsute |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
impish |
Does not exist
|
|
upstream |
Released
(5.14~rc6)
|
|
focal |
Released
(5.11.0-38.42~20.04.1)
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
linux-hwe-edge Launchpad, Ubuntu, Debian |
bionic |
Ignored
(superseded by linux-hwe-5.4)
|
focal |
Does not exist
|
|
hirsute |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Ignored
(superseded by linux-hwe)
|
|
impish |
Does not exist
|
|
upstream |
Released
(5.14~rc6)
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
linux-lts-xenial Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Does not exist
|
|
hirsute |
Does not exist
|
|
xenial |
Does not exist
|
|
impish |
Does not exist
|
|
upstream |
Released
(5.14~rc6)
|
|
trusty |
Ignored
(was needed ESM criteria)
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
linux-aws Launchpad, Ubuntu, Debian |
bionic |
Released
(4.15.0-1112.119)
|
impish |
Not vulnerable
(5.13.0-1005.6)
|
|
focal |
Released
(5.4.0-1058.61)
|
|
upstream |
Released
(5.14~rc6)
|
|
trusty |
Ignored
(was needed ESM criteria)
|
|
xenial |
Ignored
(was needed ESM criteria)
|
|
hirsute |
Released
(5.11.0-1020.21)
|
|
jammy |
Not vulnerable
(5.13.0-1005.6)
|
|
kinetic |
Not vulnerable
(5.15.0-1004.6)
|
|
linux-aws-5.0 Launchpad, Ubuntu, Debian |
bionic |
Ignored
(superseded by linux-aws-5.3)
|
focal |
Does not exist
|
|
hirsute |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
impish |
Does not exist
|
|
upstream |
Released
(5.14~rc6)
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
linux-aws-5.3 Launchpad, Ubuntu, Debian |
bionic |
Ignored
(superseded by linux-aws-5.4)
|
focal |
Does not exist
|
|
hirsute |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
impish |
Does not exist
|
|
upstream |
Released
(5.14~rc6)
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
linux-aws-5.4 Launchpad, Ubuntu, Debian |
focal |
Does not exist
|
hirsute |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
impish |
Does not exist
|
|
upstream |
Released
(5.14~rc6)
|
|
bionic |
Released
(5.4.0-1058.61~18.04.3)
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
linux-aws-5.8 Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
hirsute |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
impish |
Does not exist
|
|
focal |
Ignored
(was needs-triage now end-of-life)
|
|
upstream |
Released
(5.14~rc6)
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
linux-aws-hwe Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Does not exist
|
|
hirsute |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Released
(4.15.0-1112.119~16.04.1)
|
|
impish |
Does not exist
|
|
upstream |
Released
(5.14~rc6)
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
linux-azure Launchpad, Ubuntu, Debian |
bionic |
Ignored
(superseded by linux-azure-5.3)
|
trusty |
Released
(4.15.0-1124.137~14.04.1)
|
|
xenial |
Released
(4.15.0-1124.137~16.04.1)
|
|
impish |
Not vulnerable
(5.13.0-1004.5)
|
|
focal |
Released
(5.4.0-1062.65)
|
|
upstream |
Released
(5.14~rc6)
|
|
hirsute |
Released
(5.11.0-1020.21)
|
|
jammy |
Not vulnerable
(5.13.0-1006.7)
|
|
kinetic |
Not vulnerable
(5.15.0-1003.4)
|
|
linux-azure-4.15 Launchpad, Ubuntu, Debian |
focal |
Does not exist
|
hirsute |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
impish |
Does not exist
|
|
upstream |
Released
(5.14~rc6)
|
|
bionic |
Released
(4.15.0-1124.137)
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
linux-azure-5.3 Launchpad, Ubuntu, Debian |
bionic |
Ignored
(superseded by linux-azure-5.4)
|
focal |
Does not exist
|
|
hirsute |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
impish |
Does not exist
|
|
upstream |
Released
(5.14~rc6)
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
linux-azure-5.4 Launchpad, Ubuntu, Debian |
focal |
Does not exist
|
hirsute |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
impish |
Does not exist
|
|
upstream |
Released
(5.14~rc6)
|
|
bionic |
Released
(5.4.0-1062.65~18.04.1)
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
linux-azure-5.8 Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
hirsute |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
impish |
Does not exist
|
|
upstream |
Released
(5.14~rc6)
|
|
focal |
Ignored
(was needed now end-of-life)
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
linux-bluefield Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
hirsute |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
impish |
Does not exist
|
|
upstream |
Released
(5.14~rc6)
|
|
focal |
Released
(5.4.0-1020.23)
|
|
jammy |
Not vulnerable
(5.15.0-1011.13)
|
|
kinetic |
Does not exist
|
|
linux-dell300x Launchpad, Ubuntu, Debian |
focal |
Does not exist
|
hirsute |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
impish |
Does not exist
|
|
upstream |
Released
(5.14~rc6)
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
bionic |
Released
(4.15.0-1028.33)
|
|
linux-azure-edge Launchpad, Ubuntu, Debian |
bionic |
Ignored
(superseded by linux-azure-5.3)
|
focal |
Does not exist
|
|
hirsute |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
impish |
Does not exist
|
|
upstream |
Released
(5.14~rc6)
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
linux-gcp Launchpad, Ubuntu, Debian |
bionic |
Ignored
(superseded by linux-gcp-5.3)
|
trusty |
Does not exist
|
|
xenial |
Released
(4.15.0-1109.123~16.04.1)
|
|
impish |
Not vulnerable
(5.13.0-1003.4)
|
|
hirsute |
Released
(5.11.0-1021.23)
|
|
upstream |
Released
(5.14~rc6)
|
|
focal |
Released
(5.4.0-1056.60)
|
|
jammy |
Not vulnerable
(5.13.0-1005.6)
|
|
kinetic |
Not vulnerable
(5.15.0-1003.6)
|
|
linux-gcp-4.15 Launchpad, Ubuntu, Debian |
focal |
Does not exist
|
hirsute |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
impish |
Does not exist
|
|
upstream |
Released
(5.14~rc6)
|
|
bionic |
Released
(4.15.0-1109.123)
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
linux-gcp-5.3 Launchpad, Ubuntu, Debian |
bionic |
Ignored
(superseded by linux-gcp-5.4)
|
focal |
Does not exist
|
|
hirsute |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
impish |
Does not exist
|
|
upstream |
Released
(5.14~rc6)
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
linux-gcp-5.4 Launchpad, Ubuntu, Debian |
focal |
Does not exist
|
hirsute |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
impish |
Does not exist
|
|
upstream |
Released
(5.14~rc6)
|
|
bionic |
Released
(5.4.0-1056.60~18.04.1)
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
linux-gcp-5.8 Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
hirsute |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
impish |
Does not exist
|
|
focal |
Ignored
(was needs-triage now end-of-life)
|
|
upstream |
Released
(5.14~rc6)
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
linux-gcp-edge Launchpad, Ubuntu, Debian |
bionic |
Ignored
(superseded by linux-gcp-5.3)
|
focal |
Does not exist
|
|
hirsute |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
impish |
Does not exist
|
|
upstream |
Released
(5.14~rc6)
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
linux-gke Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
hirsute |
Does not exist
|
|
trusty |
Does not exist
|
|
impish |
Does not exist
|
|
upstream |
Released
(5.14~rc6)
|
|
focal |
Released
(5.4.0-1054.57)
|
|
jammy |
Not vulnerable
(5.15.0-1002.2)
|
|
kinetic |
Does not exist
|
|
xenial |
Ignored
(reached end of standard support)
|
|
linux-gke-4.15 Launchpad, Ubuntu, Debian |
focal |
Does not exist
|
hirsute |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
impish |
Does not exist
|
|
bionic |
Ignored
(was needs-triage now end-of-life)
|
|
upstream |
Released
(5.14~rc6)
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
linux-gke-5.0 Launchpad, Ubuntu, Debian |
focal |
Does not exist
|
hirsute |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
impish |
Does not exist
|
|
bionic |
Ignored
(was needs-triage now end-of-life)
|
|
upstream |
Released
(5.14~rc6)
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
linux-gke-5.3 Launchpad, Ubuntu, Debian |
focal |
Does not exist
|
hirsute |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
impish |
Does not exist
|
|
bionic |
Ignored
(was needs-triage now end-of-life)
|
|
upstream |
Released
(5.14~rc6)
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
linux-gke-5.4 Launchpad, Ubuntu, Debian |
focal |
Does not exist
|
hirsute |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
impish |
Does not exist
|
|
upstream |
Released
(5.14~rc6)
|
|
bionic |
Released
(5.4.0-1054.57~18.04.1)
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
linux-gkeop Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
hirsute |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
impish |
Does not exist
|
|
upstream |
Released
(5.14~rc6)
|
|
focal |
Released
(5.4.0-1025.26)
|
|
jammy |
Not vulnerable
(5.15.0-1001.2)
|
|
kinetic |
Does not exist
|
|
linux-gkeop-5.4 Launchpad, Ubuntu, Debian |
focal |
Does not exist
|
hirsute |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
impish |
Does not exist
|
|
upstream |
Released
(5.14~rc6)
|
|
bionic |
Released
(5.4.0-1025.26~18.04.1)
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
linux-oracle Launchpad, Ubuntu, Debian |
focal |
Released
(5.4.0-1056.60)
|
trusty |
Does not exist
|
|
xenial |
Released
(4.15.0-1081.89~16.04.1)
|
|
impish |
Not vulnerable
(5.13.0-1008.10)
|
|
upstream |
Released
(5.14~rc6)
|
|
hirsute |
Released
(5.11.0-1020.21)
|
|
bionic |
Released
(4.15.0-1081.89)
|
|
jammy |
Not vulnerable
(5.13.0-1008.10)
|
|
kinetic |
Not vulnerable
(5.15.0-1002.4)
|
|
linux-oracle-5.0 Launchpad, Ubuntu, Debian |
bionic |
Ignored
(superseded by linux-oracle-5.3)
|
focal |
Does not exist
|
|
hirsute |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
impish |
Does not exist
|
|
upstream |
Released
(5.14~rc6)
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
linux-oracle-5.3 Launchpad, Ubuntu, Debian |
bionic |
Ignored
(superseded by linux-oracle-5.4)
|
focal |
Does not exist
|
|
hirsute |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
impish |
Does not exist
|
|
upstream |
Released
(5.14~rc6)
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
linux-oracle-5.4 Launchpad, Ubuntu, Debian |
focal |
Does not exist
|
hirsute |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
impish |
Does not exist
|
|
upstream |
Released
(5.14~rc6)
|
|
bionic |
Released
(5.4.0-1056.60~18.04.1)
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
linux-oracle-5.8 Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
hirsute |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
impish |
Does not exist
|
|
focal |
Ignored
(was needs-triage now end-of-life)
|
|
upstream |
Released
(5.14~rc6)
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
linux-oem Launchpad, Ubuntu, Debian |
focal |
Does not exist
|
hirsute |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Ignored
(superseded by linux-hwe)
|
|
impish |
Does not exist
|
|
bionic |
Ignored
(was needs-triage now end-of-life)
|
|
upstream |
Released
(5.14~rc6)
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
linux-oem-5.6 Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
hirsute |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
impish |
Does not exist
|
|
focal |
Ignored
(was needs-triage now end-of-life)
|
|
upstream |
Released
(5.14~rc6)
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
linux-oem-5.10 Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
hirsute |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
impish |
Does not exist
|
|
upstream |
Released
(5.14~rc6)
|
|
focal |
Released
(5.10.0-1050.52)
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
linux-oem-osp1 Launchpad, Ubuntu, Debian |
focal |
Does not exist
|
hirsute |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
impish |
Does not exist
|
|
bionic |
Ignored
(was needs-triage now end-of-life)
|
|
upstream |
Released
(5.14~rc6)
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
linux-raspi Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
impish |
Not vulnerable
(5.13.0-1007.8)
|
|
upstream |
Released
(5.14~rc6)
|
|
focal |
Released
(5.4.0-1045.49)
|
|
hirsute |
Released
(5.11.0-1021.22)
|
|
jammy |
Not vulnerable
(5.13.0-1008.9)
|
|
kinetic |
Not vulnerable
(5.15.0-1005.5)
|
|
linux-raspi2 Launchpad, Ubuntu, Debian |
focal |
Ignored
(replaced by linux-raspi)
|
hirsute |
Does not exist
|
|
trusty |
Does not exist
|
|
impish |
Does not exist
|
|
upstream |
Released
(5.14~rc6)
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
bionic |
Released
(4.15.0-1096.102)
|
|
xenial |
Ignored
(was needs-triage now end-of-life)
|
|
linux-raspi2-5.3 Launchpad, Ubuntu, Debian |
focal |
Does not exist
|
hirsute |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
impish |
Does not exist
|
|
bionic |
Ignored
(was needs-triage now end-of-life)
|
|
upstream |
Released
(5.14~rc6)
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
linux-raspi-5.4 Launchpad, Ubuntu, Debian |
focal |
Does not exist
|
hirsute |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
impish |
Does not exist
|
|
upstream |
Released
(5.14~rc6)
|
|
bionic |
Released
(5.4.0-1045.49~18.04.1)
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
linux-riscv Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Ignored
(superseded by linux-riscv-5.8)
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
impish |
Not vulnerable
(5.13.0-1003.3)
|
|
upstream |
Released
(5.14~rc6)
|
|
hirsute |
Released
(5.11.0-1021.22)
|
|
jammy |
Not vulnerable
(5.13.0-1004.4)
|
|
kinetic |
Not vulnerable
(5.15.0-1007.7)
|
|
linux-riscv-5.8 Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
hirsute |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
impish |
Does not exist
|
|
focal |
Ignored
(was needs-triage now end-of-life)
|
|
upstream |
Released
(5.14~rc6)
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
linux-riscv-5.11 Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
hirsute |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
impish |
Does not exist
|
|
upstream |
Released
(5.14~rc6)
|
|
focal |
Released
(5.11.0-1021.22~20.04.1)
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
linux-snapdragon Launchpad, Ubuntu, Debian |
focal |
Does not exist
|
hirsute |
Does not exist
|
|
trusty |
Does not exist
|
|
impish |
Does not exist
|
|
upstream |
Released
(5.14~rc6)
|
|
bionic |
Released
(4.15.0-1113.122)
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
xenial |
Ignored
(was needs-triage now end-of-life)
|
|
linux Launchpad, Ubuntu, Debian |
impish |
Not vulnerable
(5.13.0-16.16)
|
upstream |
Released
(5.14~rc6)
|
|
focal |
Released
(5.4.0-89.100)
|
|
trusty |
Ignored
(was needed ESM criteria)
|
|
xenial |
Pending
|
|
bionic |
Released
(4.15.0-159.167)
|
|
hirsute |
Released
(5.11.0-38.42)
|
|
jammy |
Not vulnerable
(5.13.0-19.19)
|
|
kinetic |
Not vulnerable
(5.15.0-25.25)
|
|
Patches: Introduced by c771d683a62e5d36bc46036f5c07f4f5bb7dda61 Introduced by Fixed by 427215d85e8d1476da1a86b8d67aceb485eb3631 |
||
linux-kvm Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
impish |
Not vulnerable
(5.13.0-1002.2)
|
|
upstream |
Released
(5.14~rc6)
|
|
focal |
Released
(5.4.0-1048.50)
|
|
xenial |
Ignored
(was needed ESM criteria)
|
|
bionic |
Released
(4.15.0-1100.102)
|
|
hirsute |
Released
(5.11.0-1018.19)
|
|
jammy |
Not vulnerable
(5.13.0-1004.4)
|
|
kinetic |
Not vulnerable
(5.15.0-1004.4)
|
|
linux-oem-5.13 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
impish |
Does not exist
|
|
bionic |
Does not exist
|
|
hirsute |
Does not exist
|
|
upstream |
Released
(5.14~rc6)
|
|
focal |
Released
(5.13.0-1014.18)
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
linux-aws-5.11 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
impish |
Does not exist
|
|
bionic |
Does not exist
|
|
hirsute |
Does not exist
|
|
upstream |
Released
(5.14~rc6)
|
|
focal |
Released
(5.11.0-1020.21~20.04.2)
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
linux-azure-5.11 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
impish |
Does not exist
|
|
bionic |
Does not exist
|
|
hirsute |
Does not exist
|
|
focal |
Released
(5.11.0-1020.21~20.04.1)
|
|
upstream |
Released
(5.14~rc6)
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
linux-oracle-5.11 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
impish |
Does not exist
|
|
bionic |
Does not exist
|
|
hirsute |
Does not exist
|
|
focal |
Released
(5.11.0-1020.21~20.04.1)
|
|
upstream |
Released
(5.14~rc6)
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
linux-ibm Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
impish |
Does not exist
|
|
bionic |
Does not exist
|
|
hirsute |
Does not exist
|
|
upstream |
Released
(5.14~rc6)
|
|
focal |
Released
(5.4.0-1006.7)
|
|
jammy |
Not vulnerable
(5.15.0-1002.2)
|
|
kinetic |
Not vulnerable
(5.15.0-1002.2)
|
|
linux-gcp-5.11 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
focal |
Released
(5.11.0-1021.23~20.04.1)
|
|
hirsute |
Does not exist
|
|
impish |
Does not exist
|
|
upstream |
Released
(5.14~rc6)
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
linux-oem-5.14 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
hirsute |
Does not exist
|
|
impish |
Does not exist
|
|
focal |
Not vulnerable
(5.14.0-1004.4)
|
|
upstream |
Released
(5.14~rc6)
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
linux-intel-5.13 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
focal |
Not vulnerable
(5.13.0-1007.7)
|
|
hirsute |
Does not exist
|
|
impish |
Does not exist
|
|
upstream |
Released
(5.14~rc6)
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
linux-azure-5.13 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
focal |
Not vulnerable
(5.13.0-1009.10~20.04.2)
|
|
impish |
Does not exist
|
|
upstream |
Released
(5.14~rc6)
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
linux-hwe-5.13 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
focal |
Not vulnerable
(5.13.0-21.21~20.04.1)
|
|
impish |
Does not exist
|
|
upstream |
Released
(5.14~rc6)
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
linux-aws-5.13 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
focal |
Not vulnerable
(5.13.0-1008.9~20.04.2)
|
|
impish |
Does not exist
|
|
upstream |
Released
(5.14~rc6)
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
linux-fips Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
bionic |
Does not exist
|
|
focal |
Does not exist
|
|
hirsute |
Does not exist
|
|
impish |
Does not exist
|
|
upstream |
Released
(5.14~rc6)
|
|
xenial |
Ignored
(out of standard support)
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
linux-oracle-5.13 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
impish |
Does not exist
|
|
focal |
Not vulnerable
(5.13.0-1011.13~20.04.2)
|
|
upstream |
Released
(5.14~rc6)
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
linux-gcp-5.13 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
impish |
Does not exist
|
|
focal |
Not vulnerable
(5.13.0-1008.9~20.04.3)
|
|
upstream |
Released
(5.14~rc6)
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
linux-ibm-5.4 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
focal |
Does not exist
|
|
impish |
Does not exist
|
|
bionic |
Not vulnerable
(5.4.0-1010.11~18.04.2)
|
|
upstream |
Released
(5.14~rc6)
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
linux-azure-fde Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
impish |
Does not exist
|
|
upstream |
Released
(5.14~rc6)
|
|
jammy |
Not vulnerable
(5.13.0-1006.7)
|
|
kinetic |
Does not exist
|
|
focal |
Released
(5.4.0-1062.65)
|
|
linux-lowlatency Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
focal |
Does not exist
|
|
impish |
Does not exist
|
|
jammy |
Not vulnerable
(5.15.0-22.22)
|
|
upstream |
Released
(5.14~rc6)
|
|
kinetic |
Not vulnerable
(5.15.0-24.24)
|
|
linux-oem-5.17 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
focal |
Does not exist
|
|
impish |
Does not exist
|
|
jammy |
Not vulnerable
(5.17.0-1003.3)
|
|
upstream |
Released
(5.14~rc6)
|
|
kinetic |
Not vulnerable
(5.17.0-1003.3)
|
|
linux-intel-iotg Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
focal |
Does not exist
|
|
impish |
Does not exist
|
|
kinetic |
Does not exist
|
|
jammy |
Not vulnerable
(5.15.0-1004.6)
|
|
upstream |
Released
(5.14~rc6)
|
|
linux-intel-iotg-5.15 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
impish |
Does not exist
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
focal |
Not vulnerable
(5.15.0-1003.5~20.04.1)
|
|
upstream |
Released
(5.14~rc6)
|
|
linux-lowlatency-hwe-5.15 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
focal |
Not vulnerable
(5.15.0-33.34~20.04.1)
|
|
jammy |
Does not exist
|
|
upstream |
Released
(5.14~rc6)
|
|
kinetic |
Does not exist
|
|
linux-hwe-5.15 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
focal |
Not vulnerable
(5.15.0-33.34~20.04.1)
|
|
jammy |
Does not exist
|
|
upstream |
Released
(5.14~rc6)
|
|
kinetic |
Does not exist
|
|
linux-aws-5.15 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
jammy |
Does not exist
|
|
upstream |
Released
(5.14~rc6)
|
|
focal |
Not vulnerable
(5.15.0-1014.18~20.04.1)
|
|
kinetic |
Does not exist
|
|
linux-gcp-5.15 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
focal |
Not vulnerable
(5.15.0-1006.9~20.04.1)
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
upstream |
Released
(5.14~rc6)
|
|
linux-gke-5.15 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
focal |
Not vulnerable
(5.15.0-1011.14~20.04.1)
|
|
upstream |
Released
(5.14~rc6)
|
|
linux-azure-5.15 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
focal |
Not vulnerable
(5.15.0-1007.8~20.04.1)
|
|
jammy |
Does not exist
|
|
upstream |
Released
(5.14~rc6)
|
|
kinetic |
Does not exist
|
|
linux-oracle-5.15 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
focal |
Not vulnerable
(5.15.0-1007.9~20.04.1)
|
|
jammy |
Does not exist
|
|
upstream |
Released
(5.14~rc6)
|
|
kinetic |
Does not exist
|
|
linux-azure-fde-5.15 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
focal |
Not vulnerable
(5.15.0-1007.8~20.04.1)
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
upstream |
Released
(5.14~rc6)
|
|
linux-oem-6.0 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
focal |
Does not exist
|
|
jammy |
Not vulnerable
(6.0.0-1006.6)
|
|
kinetic |
Does not exist
|
|
upstream |
Released
(5.14~rc6)
|
|
linux-oem-6.1 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
focal |
Does not exist
|
|
jammy |
Not vulnerable
(6.1.0-1004.4)
|
|
kinetic |
Does not exist
|
|
upstream |
Released
(5.14~rc6)
|
|
linux-hwe-5.19 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
focal |
Does not exist
|
|
jammy |
Not vulnerable
(5.19.0-28.29~22.04.1)
|
|
kinetic |
Does not exist
|
|
upstream |
Released
(5.14~rc6)
|
|
linux-lowlatency-hwe-5.19 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
focal |
Does not exist
|
|
jammy |
Not vulnerable
(5.19.0-1017.18~22.04.1)
|
|
kinetic |
Does not exist
|
|
upstream |
Released
(5.14~rc6)
|
|
linux-azure-5.19 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
focal |
Does not exist
|
|
jammy |
Not vulnerable
(5.19.0-1020.21~22.04.1)
|
|
kinetic |
Does not exist
|
|
upstream |
Released
(5.14~rc6)
|
Severity score breakdown
Parameter | Value |
---|---|
Base score | 5.5 |
Attack vector | Local |
Attack complexity | Low |
Privileges required | Low |
User interaction | None |
Scope | Unchanged |
Confidentiality | High |
Integrity impact | None |
Availability impact | None |
Vector | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N |
References
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3732
- https://bugzilla.redhat.com/show_bug.cgi?id=1995249
- https://git.kernel.org/linus/427215d85e8d1476da1a86b8d67aceb485eb3631
- https://ubuntu.com/security/notices/USN-5094-1
- https://ubuntu.com/security/notices/USN-5096-1
- https://ubuntu.com/security/notices/USN-5094-2
- https://ubuntu.com/security/notices/USN-5113-1
- https://ubuntu.com/security/notices/USN-5115-1
- https://ubuntu.com/security/notices/USN-5116-1
- https://ubuntu.com/security/notices/USN-5116-2
- NVD
- Launchpad
- Debian