CVE-2021-4203

Published: 25 March 2022

A use-after-free read flaw was found in sock_getsockopt() in net/core/sock.c due to SO_PEERCRED and SO_PEERGROUPS race with listen() (and connect()) in the Linux kernel. In this flaw, an attacker with a user privileges may crash the system or leak internal kernel information.

From the Ubuntu Security Team

Jann Horn discovered that the socket subsystem in the Linux kernel contained a race condition when handling listen() and connect() operations, leading to a read-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly expose sensitive information.

Priority

Cvss 3 Severity Score

6.8

Score breakdown

Status

Package	Release	Status
linux-nvidia Launchpad, Ubuntu, Debian	trusty	Does not exist
	xenial	Does not exist
	bionic	Does not exist
	focal	Does not exist
	jammy	Not vulnerable
	kinetic	Does not exist
	lunar	Does not exist
	upstream	Needs triage
linux Launchpad, Ubuntu, Debian	bionic	Released (4.15.0-163.171)
	focal	Released (5.4.0-91.102)
	impish	Released (5.13.0-23.23)
	jammy	Not vulnerable (5.15.0-17.17)
	kinetic	Not vulnerable (5.15.0-25.25)
	lunar	Not vulnerable (5.19.0-21.21)
	upstream	Released (5.15~rc4)
	xenial	Released (4.4.0-239.273) Available with Ubuntu Pro or Ubuntu Pro (Infra-only)
	hirsute	Ignored (end of life)
	trusty	Ignored (ESM criteria, was needed)
	Patches: Introduced by 109f6e39fa07c48f580125f531f46cb7c245b528 Fixed by 35306eb23814444bd4021f8a1c3047d3cb0c8b2b
linux-aws Launchpad, Ubuntu, Debian	bionic	Released (4.15.0-1116.123)
	focal	Released (5.4.0-1060.63)
	impish	Released (5.13.0-1008.9)
	jammy	Not vulnerable (5.15.0-1002.4)
	kinetic	Not vulnerable (5.15.0-1004.6)
	lunar	Not vulnerable (5.19.0-1009.9)
	upstream	Released (5.15~rc4)
	hirsute	Ignored (end of life)
	xenial	Released (4.4.0-1155.170) Available with Ubuntu Pro or Ubuntu Pro (Infra-only)
	trusty	Released (4.4.0-1117.123) Available with Ubuntu Pro or Ubuntu Pro (Infra-only)
linux-aws-5.0 Launchpad, Ubuntu, Debian	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	upstream	Released (5.15~rc4)
	trusty	Does not exist
	xenial	Does not exist
	bionic	Ignored (superseded by linux-aws-5.3)
	focal	Does not exist
	hirsute	Does not exist
	impish	Does not exist
linux-aws-5.11 Launchpad, Ubuntu, Debian	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	trusty	Does not exist
	upstream	Released (5.15~rc4)
	xenial	Does not exist
	bionic	Does not exist
	hirsute	Does not exist
	focal	Released (5.11.0-1023.24~20.04.1)
linux-aws-5.13 Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Not vulnerable (5.13.0-1008.9~20.04.2)
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	trusty	Does not exist
	upstream	Released (5.15~rc4)
	xenial	Does not exist
	lunar	Does not exist
linux-aws-5.15 Launchpad, Ubuntu, Debian	bionic	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	trusty	Does not exist
	upstream	Released (5.15~rc4)
	xenial	Does not exist
	focal	Not vulnerable (5.15.0-1014.18~20.04.1)
	lunar	Does not exist
linux-aws-5.3 Launchpad, Ubuntu, Debian	bionic	Ignored (superseded by linux-aws-5.4)
	focal	Does not exist
	hirsute	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	trusty	Does not exist
	upstream	Released (5.15~rc4)
	xenial	Does not exist
linux-aws-5.4 Launchpad, Ubuntu, Debian	bionic	Released (5.4.0-1060.63~18.04.1)
	focal	Does not exist
	hirsute	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	trusty	Does not exist
	upstream	Released (5.15~rc4)
	xenial	Does not exist
linux-aws-5.8 Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Ignored (end of life, was needs-triage)
	hirsute	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	trusty	Does not exist
	upstream	Released (5.15~rc4)
	xenial	Does not exist
linux-aws-hwe Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Does not exist
	hirsute	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	trusty	Does not exist
	upstream	Released (5.15~rc4)
	xenial	Released (4.15.0-1116.123~16.04.1) Available with Ubuntu Pro or Ubuntu Pro (Infra-only)
linux-azure Launchpad, Ubuntu, Debian	bionic	Ignored (superseded by linux-azure-5.3)
	focal	Released (5.4.0-1064.67)
	impish	Released (5.13.0-1009.10)
	jammy	Not vulnerable (5.15.0-1001.2)
	kinetic	Not vulnerable (5.15.0-1003.4)
	lunar	Not vulnerable (5.19.0-1008.8)
	trusty	Released (4.15.0-1127.140~14.04.1) Available with Ubuntu Pro or Ubuntu Pro (Infra-only)
	upstream	Released (5.15~rc4)
	hirsute	Ignored (end of life)
	xenial	Released (4.15.0-1127.140~16.04.1) Available with Ubuntu Pro or Ubuntu Pro (Infra-only)
linux-azure-4.15 Launchpad, Ubuntu, Debian	focal	Does not exist
	hirsute	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	trusty	Does not exist
	xenial	Does not exist
	bionic	Released (4.15.0-1127.140)
	upstream	Released (5.15~rc4)
linux-azure-5.11 Launchpad, Ubuntu, Debian	hirsute	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	trusty	Does not exist
	xenial	Does not exist
	bionic	Does not exist
	focal	Released (5.11.0-1023.24~20.04.1)
	upstream	Released (5.15~rc4)
linux-azure-5.13 Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Not vulnerable (5.13.0-1009.10~20.04.2)
	jammy	Does not exist
	kinetic	Does not exist
	trusty	Does not exist
	xenial	Does not exist
	upstream	Released (5.15~rc4)
	impish	Does not exist
	lunar	Does not exist
linux-azure-5.15 Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Not vulnerable (5.15.0-1007.8~20.04.1)
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	trusty	Does not exist
	upstream	Released (5.15~rc4)
	xenial	Does not exist
linux-azure-5.19 Launchpad, Ubuntu, Debian	lunar	Does not exist
	trusty	Does not exist
	xenial	Does not exist
	bionic	Does not exist
	focal	Does not exist
	kinetic	Does not exist
	jammy	Not vulnerable (5.19.0-1020.21~22.04.1)
	upstream	Released (5.15~rc4)
linux-azure-5.3 Launchpad, Ubuntu, Debian	bionic	Ignored (superseded by linux-azure-5.4)
	focal	Does not exist
	hirsute	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	trusty	Does not exist
	upstream	Released (5.15~rc4)
	xenial	Does not exist
linux-azure-5.4 Launchpad, Ubuntu, Debian	bionic	Released (5.4.0-1064.67~18.04.1)
	focal	Does not exist
	hirsute	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	trusty	Does not exist
	upstream	Released (5.15~rc4)
	xenial	Does not exist
linux-azure-5.8 Launchpad, Ubuntu, Debian	focal	Ignored (end of life, was needs-triage)
	hirsute	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	trusty	Does not exist
	upstream	Released (5.15~rc4)
	xenial	Does not exist
	bionic	Does not exist
linux-azure-edge Launchpad, Ubuntu, Debian	bionic	Ignored (superseded by linux-azure-5.3)
	focal	Does not exist
	hirsute	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	trusty	Does not exist
	upstream	Released (5.15~rc4)
	xenial	Does not exist
linux-azure-fde Launchpad, Ubuntu, Debian	bionic	Does not exist
	impish	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	trusty	Does not exist
	xenial	Does not exist
	focal	Released (5.4.0-1064.67)
	upstream	Released (5.15~rc4)
	jammy	Not vulnerable (5.15.0-1001.2)
linux-azure-fde-5.15 Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Not vulnerable (5.15.0-1007.8~20.04.1)
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	trusty	Does not exist
	upstream	Released (5.15~rc4)
	xenial	Does not exist
linux-azure-fde-5.19 Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Does not exist
	jammy	Not vulnerable
	kinetic	Does not exist
	lunar	Does not exist
	trusty	Does not exist
	upstream	Needs triage
	xenial	Does not exist
linux-bluefield Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Released (5.4.0-1022.25)
	hirsute	Does not exist
	impish	Does not exist
	jammy	Not vulnerable (5.15.0-1011.13)
	kinetic	Does not exist
	lunar	Does not exist
	trusty	Does not exist
	upstream	Released (5.15~rc4)
	xenial	Does not exist
linux-dell300x Launchpad, Ubuntu, Debian	bionic	Released (4.15.0-1031.36)
	focal	Does not exist
	hirsute	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	trusty	Does not exist
	upstream	Released (5.15~rc4)
	xenial	Does not exist
linux-fips Launchpad, Ubuntu, Debian	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	trusty	Does not exist
	bionic	Does not exist
	focal	Does not exist
	hirsute	Does not exist
	impish	Does not exist
	upstream	Released (5.15~rc4)
	xenial	Ignored (end of standard support)
linux-gcp Launchpad, Ubuntu, Debian	bionic	Ignored (superseded by linux-gcp-5.3)
	impish	Released (5.13.0-1008.9)
	jammy	Not vulnerable (5.15.0-1001.3)
	kinetic	Not vulnerable (5.15.0-1003.6)
	lunar	Not vulnerable (5.19.0-1008.8)
	trusty	Does not exist
	upstream	Released (5.15~rc4)
	xenial	Released (4.15.0-1112.126~16.04.1) Available with Ubuntu Pro or Ubuntu Pro (Infra-only)
	hirsute	Ignored (end of life)
	focal	Released (5.4.0-1058.62)
linux-gcp-4.15 Launchpad, Ubuntu, Debian	bionic	Released (4.15.0-1112.126)
	focal	Does not exist
	hirsute	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	trusty	Does not exist
	upstream	Released (5.15~rc4)
	xenial	Does not exist
linux-gcp-5.11 Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Released (5.11.0-1024.26~20.04.1)
	hirsute	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	trusty	Does not exist
	upstream	Released (5.15~rc4)
	xenial	Does not exist
linux-gcp-5.13 Launchpad, Ubuntu, Debian	bionic	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	trusty	Does not exist
	xenial	Does not exist
	focal	Not vulnerable (5.13.0-1008.9~20.04.3)
	upstream	Released (5.15~rc4)
linux-gcp-5.15 Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Not vulnerable (5.15.0-1006.9~20.04.1)
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	trusty	Does not exist
	upstream	Released (5.15~rc4)
	xenial	Does not exist
linux-gcp-5.3 Launchpad, Ubuntu, Debian	bionic	Ignored (superseded by linux-gcp-5.4)
	focal	Does not exist
	hirsute	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	trusty	Does not exist
	upstream	Released (5.15~rc4)
	xenial	Does not exist
linux-gcp-5.4 Launchpad, Ubuntu, Debian	bionic	Released (5.4.0-1058.62~18.04.1)
	focal	Does not exist
	hirsute	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	trusty	Does not exist
	upstream	Released (5.15~rc4)
	xenial	Does not exist
linux-gcp-5.8 Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Ignored (end of life, was needs-triage)
	hirsute	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	trusty	Does not exist
	upstream	Released (5.15~rc4)
	xenial	Does not exist
linux-gke Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Released (5.4.0-1056.59)
	hirsute	Does not exist
	impish	Does not exist
	jammy	Not vulnerable (5.15.0-1002.2)
	kinetic	Does not exist
	lunar	Does not exist
	trusty	Does not exist
	xenial	Ignored (end of standard support)
	upstream	Released (5.15~rc4)
linux-gke-4.15 Launchpad, Ubuntu, Debian	bionic	Ignored (end of life, was needs-triage)
	focal	Does not exist
	hirsute	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	trusty	Does not exist
	xenial	Does not exist
	upstream	Released (5.15~rc4)
linux-gke-5.0 Launchpad, Ubuntu, Debian	focal	Does not exist
	hirsute	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	trusty	Does not exist
	xenial	Does not exist
	bionic	Ignored (end of standard support, was needs-triage)
	upstream	Released (5.15~rc4)
linux-gke-5.15 Launchpad, Ubuntu, Debian	bionic	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	trusty	Does not exist
	xenial	Does not exist
	focal	Not vulnerable (5.15.0-1011.14~20.04.1)
	upstream	Released (5.15~rc4)
linux-gke-5.3 Launchpad, Ubuntu, Debian	focal	Does not exist
	hirsute	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	trusty	Does not exist
	xenial	Does not exist
	bionic	Ignored (end of standard support, was needs-triage)
	upstream	Released (5.15~rc4)
linux-gke-5.4 Launchpad, Ubuntu, Debian	focal	Does not exist
	hirsute	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	trusty	Does not exist
	upstream	Released (5.15~rc4)
	xenial	Does not exist
	bionic	Released (5.4.0-1056.59~18.04.1)
linux-gkeop Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Released (5.4.0-1027.28)
	hirsute	Does not exist
	impish	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	trusty	Does not exist
	upstream	Released (5.15~rc4)
	xenial	Does not exist
	jammy	Not vulnerable (5.15.0-1001.2)
linux-gkeop-5.4 Launchpad, Ubuntu, Debian	bionic	Released (5.4.0-1027.28~18.04.1)
	focal	Does not exist
	hirsute	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	trusty	Does not exist
	upstream	Released (5.15~rc4)
	xenial	Does not exist
	impish	Does not exist
linux-hwe Launchpad, Ubuntu, Debian	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	upstream	Released (5.15~rc4)
	xenial	Released (4.15.0-163.171~16.04.1) Available with Ubuntu Pro or Ubuntu Pro (Infra-only)
	trusty	Does not exist
	bionic	Ignored (replaced by linux-hwe-5.4)
	focal	Does not exist
	hirsute	Does not exist
	impish	Does not exist
linux-hwe-5.11 Launchpad, Ubuntu, Debian	focal	Ignored (end of life, was needs-triage)
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	upstream	Released (5.15~rc4)
	trusty	Does not exist
	xenial	Does not exist
	bionic	Does not exist
	hirsute	Does not exist
	impish	Does not exist
linux-hwe-5.13 Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Released (5.13.0-23.23~20.04.2)
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	trusty	Does not exist
	upstream	Released (5.15~rc4)
	xenial	Does not exist
linux-hwe-5.15 Launchpad, Ubuntu, Debian	kinetic	Does not exist
	lunar	Does not exist
	trusty	Does not exist
	xenial	Does not exist
	bionic	Does not exist
	jammy	Does not exist
	focal	Not vulnerable (5.15.0-33.34~20.04.1)
	upstream	Released (5.15~rc4)
linux-hwe-5.19 Launchpad, Ubuntu, Debian	focal	Does not exist
	jammy	Not vulnerable (5.19.0-28.29~22.04.1)
	kinetic	Does not exist
	lunar	Does not exist
	trusty	Does not exist
	upstream	Released (5.15~rc4)
	xenial	Does not exist
	bionic	Does not exist
linux-hwe-5.4 Launchpad, Ubuntu, Debian	bionic	Released (5.4.0-91.102~18.04.1)
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	upstream	Released (5.15~rc4)
	trusty	Does not exist
	xenial	Does not exist
	focal	Does not exist
	hirsute	Does not exist
	impish	Does not exist
linux-hwe-5.8 Launchpad, Ubuntu, Debian	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	trusty	Does not exist
	xenial	Does not exist
	bionic	Does not exist
	hirsute	Does not exist
	impish	Does not exist
	focal	Ignored (end of life, was needs-triage)
	upstream	Released (5.15~rc4)
linux-hwe-edge Launchpad, Ubuntu, Debian	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	trusty	Does not exist
	xenial	Ignored (superseded by linux-hwe)
	bionic	Ignored (superseded by linux-hwe-5.4)
	focal	Does not exist
	hirsute	Does not exist
	impish	Does not exist
	upstream	Released (5.15~rc4)
linux-ibm Launchpad, Ubuntu, Debian	bionic	Does not exist
	hirsute	Does not exist
	impish	Does not exist
	jammy	Not vulnerable (5.15.0-1002.2)
	kinetic	Not vulnerable (5.15.0-1002.2)
	lunar	Not vulnerable (5.19.0-1008.8)
	trusty	Does not exist
	xenial	Does not exist
	focal	Released (5.4.0-1008.9)
	upstream	Released (5.15~rc4)
linux-ibm-5.4 Launchpad, Ubuntu, Debian	focal	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	trusty	Does not exist
	xenial	Does not exist
	bionic	Not vulnerable (5.4.0-1010.11~18.04.2)
	upstream	Released (5.15~rc4)
linux-intel-5.13 Launchpad, Ubuntu, Debian	bionic	Does not exist
	hirsute	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	trusty	Does not exist
	xenial	Does not exist
	focal	Ignored (end of life, was needs-triage)
	upstream	Released (5.15~rc4)
linux-intel-iotg Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Does not exist
	impish	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	trusty	Does not exist
	xenial	Does not exist
	jammy	Not vulnerable (5.15.0-1004.6)
	upstream	Released (5.15~rc4)
linux-intel-iotg-5.15 Launchpad, Ubuntu, Debian	bionic	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	trusty	Does not exist
	xenial	Does not exist
	focal	Not vulnerable (5.15.0-1003.5~20.04.1)
	upstream	Released (5.15~rc4)
linux-kvm Launchpad, Ubuntu, Debian	jammy	Not vulnerable (5.13.0-1007.7+22.04.1)
	kinetic	Not vulnerable (5.15.0-1004.4)
	lunar	Not vulnerable (5.19.0-1008.8)
	trusty	Does not exist
	hirsute	Ignored (end of life)
	bionic	Released (4.15.0-1103.105)
	focal	Released (5.4.0-1050.52)
	impish	Released (5.13.0-1007.7)
	upstream	Released (5.15~rc4)
	xenial	Released (4.4.0-1118.128) Available with Ubuntu Pro or Ubuntu Pro (Infra-only)
linux-lowlatency Launchpad, Ubuntu, Debian	jammy	Not vulnerable (5.15.0-22.22)
	kinetic	Not vulnerable (5.15.0-24.24)
	lunar	Not vulnerable (5.19.0-1007.7)
	upstream	Released (5.15~rc4)
	trusty	Does not exist
	xenial	Does not exist
	bionic	Does not exist
	focal	Does not exist
	impish	Does not exist
linux-lowlatency-hwe-5.15 Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Not vulnerable (5.15.0-33.34~20.04.1)
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	trusty	Does not exist
	upstream	Released (5.15~rc4)
	xenial	Does not exist
linux-lowlatency-hwe-5.19 Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Does not exist
	jammy	Not vulnerable (5.19.0-1017.18~22.04.1)
	kinetic	Does not exist
	lunar	Does not exist
	trusty	Does not exist
	xenial	Does not exist
	upstream	Released (5.15~rc4)
linux-lts-xenial Launchpad, Ubuntu, Debian	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	xenial	Does not exist
	bionic	Does not exist
	focal	Does not exist
	hirsute	Does not exist
	impish	Does not exist
	upstream	Released (5.15~rc4)
	trusty	Released (4.4.0-239.273~14.04.1) Available with Ubuntu Pro or Ubuntu Pro (Infra-only)
linux-oem Launchpad, Ubuntu, Debian	focal	Does not exist
	hirsute	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	trusty	Does not exist
	bionic	Ignored (end of life, was needs-triage)
	xenial	Ignored (end of standard support)
	upstream	Released (5.15~rc4)
linux-oem-5.10 Launchpad, Ubuntu, Debian	bionic	Does not exist
	hirsute	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	trusty	Does not exist
	xenial	Does not exist
	focal	Released (5.10.0-1051.53)
	upstream	Released (5.15~rc4)
linux-oem-5.13 Launchpad, Ubuntu, Debian	bionic	Does not exist
	hirsute	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	trusty	Does not exist
	xenial	Does not exist
	focal	Released (5.13.0-1026.32)
	upstream	Released (5.15~rc4)
linux-oem-5.14 Launchpad, Ubuntu, Debian	bionic	Does not exist
	hirsute	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	trusty	Does not exist
	xenial	Does not exist
	focal	Released (5.14.0-1007.7)
	upstream	Released (5.15~rc4)
linux-oem-5.17 Launchpad, Ubuntu, Debian	jammy	Not vulnerable (5.17.0-1003.3)
	kinetic	Not vulnerable (5.17.0-1003.3)
	lunar	Does not exist
	upstream	Released (5.15~rc4)
	trusty	Does not exist
	xenial	Does not exist
	bionic	Does not exist
	focal	Does not exist
	impish	Does not exist
linux-oem-5.6 Launchpad, Ubuntu, Debian	bionic	Does not exist
	hirsute	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	trusty	Does not exist
	xenial	Does not exist
	focal	Ignored (end of life, was needs-triage)
	upstream	Released (5.15~rc4)
linux-oem-6.0 Launchpad, Ubuntu, Debian	lunar	Does not exist
	trusty	Does not exist
	xenial	Does not exist
	bionic	Does not exist
	focal	Does not exist
	kinetic	Does not exist
	jammy	Not vulnerable (6.0.0-1006.6)
	upstream	Released (5.15~rc4)
linux-oem-6.1 Launchpad, Ubuntu, Debian	jammy	Not vulnerable (6.1.0-1004.4)
	lunar	Does not exist
	trusty	Does not exist
	xenial	Does not exist
	bionic	Does not exist
	focal	Does not exist
	kinetic	Does not exist
	upstream	Released (5.15~rc4)
linux-oem-osp1 Launchpad, Ubuntu, Debian	bionic	Ignored (end of standard support, was needs-triage)
	focal	Does not exist
	hirsute	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	trusty	Does not exist
	upstream	Released (5.15~rc4)
	xenial	Does not exist
linux-oracle Launchpad, Ubuntu, Debian	bionic	Released (4.15.0-1084.92)
	focal	Released (5.4.0-1058.62)
	impish	Released (5.13.0-1011.13)
	jammy	Not vulnerable (5.15.0-1001.3)
	kinetic	Not vulnerable (5.15.0-1002.4)
	lunar	Not vulnerable (5.19.0-1008.8)
	trusty	Does not exist
	upstream	Released (5.15~rc4)
	xenial	Released (4.15.0-1084.92~16.04.1) Available with Ubuntu Pro or Ubuntu Pro (Infra-only)
	hirsute	Ignored (end of life)
linux-oracle-5.0 Launchpad, Ubuntu, Debian	bionic	Ignored (superseded by linux-oracle-5.3)
	focal	Does not exist
	hirsute	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	trusty	Does not exist
	upstream	Released (5.15~rc4)
	xenial	Does not exist
linux-oracle-5.11 Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Released (5.11.0-1023.24~20.04.1)
	hirsute	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	trusty	Does not exist
	xenial	Does not exist
	upstream	Released (5.15~rc4)
linux-oracle-5.13 Launchpad, Ubuntu, Debian	bionic	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	trusty	Does not exist
	xenial	Does not exist
	focal	Not vulnerable (5.13.0-1011.13~20.04.2)
	upstream	Released (5.15~rc4)
linux-oracle-5.15 Launchpad, Ubuntu, Debian	kinetic	Does not exist
	lunar	Does not exist
	trusty	Does not exist
	xenial	Does not exist
	bionic	Does not exist
	jammy	Does not exist
	focal	Not vulnerable (5.15.0-1007.9~20.04.1)
	upstream	Released (5.15~rc4)
linux-oracle-5.3 Launchpad, Ubuntu, Debian	bionic	Ignored (superseded by linux-oracle-5.4)
	focal	Does not exist
	hirsute	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	trusty	Does not exist
	upstream	Released (5.15~rc4)
	xenial	Does not exist
linux-oracle-5.4 Launchpad, Ubuntu, Debian	bionic	Released (5.4.0-1058.62~18.04.1)
	focal	Does not exist
	hirsute	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	trusty	Does not exist
	xenial	Does not exist
	upstream	Released (5.15~rc4)
linux-oracle-5.8 Launchpad, Ubuntu, Debian	bionic	Does not exist
	hirsute	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	trusty	Does not exist
	xenial	Does not exist
	focal	Ignored (end of life, was needs-triage)
	upstream	Released (5.15~rc4)
linux-raspi Launchpad, Ubuntu, Debian	bionic	Does not exist
	impish	Released (5.13.0-1012.14)
	jammy	Not vulnerable (5.15.0-1002.2)
	kinetic	Not vulnerable (5.15.0-1005.5)
	lunar	Not vulnerable (5.19.0-1004.10)
	trusty	Does not exist
	upstream	Released (5.15~rc4)
	xenial	Does not exist
	hirsute	Ignored (end of life)
	focal	Released (5.4.0-1047.52)
linux-raspi-5.4 Launchpad, Ubuntu, Debian	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	trusty	Does not exist
	upstream	Released (5.15~rc4)
	xenial	Does not exist
	focal	Does not exist
	hirsute	Does not exist
	bionic	Released (5.4.0-1047.52~18.04.1)
linux-raspi2 Launchpad, Ubuntu, Debian	focal	Ignored (replaced by linux-raspi)
	hirsute	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	trusty	Does not exist
	upstream	Released (5.15~rc4)
	bionic	Released (4.15.0-1099.106)
	xenial	Ignored (end of standard support, was needs-triage)
linux-raspi2-5.3 Launchpad, Ubuntu, Debian	focal	Does not exist
	hirsute	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	trusty	Does not exist
	xenial	Does not exist
	bionic	Ignored (end of standard support, was needs-triage)
	upstream	Released (5.15~rc4)
linux-riscv Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Ignored (superseded by linux-riscv-5.8)
	jammy	Not vulnerable (5.13.0-1007.7+22.04.1)
	kinetic	Not vulnerable (5.15.0-1007.7)
	lunar	Not vulnerable (5.19.0-1004.4)
	trusty	Does not exist
	upstream	Released (5.15~rc4)
	xenial	Does not exist
	impish	Released (5.13.0-1007.7)
	hirsute	Ignored (end of life)
linux-riscv-5.11 Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Released (5.11.0-1024.25~20.04.1)
	hirsute	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	trusty	Does not exist
	upstream	Released (5.15~rc4)
	xenial	Does not exist
linux-riscv-5.15 Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Not vulnerable
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	trusty	Does not exist
	upstream	Needs triage
	xenial	Does not exist
linux-riscv-5.8 Launchpad, Ubuntu, Debian	bionic	Does not exist
	hirsute	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	trusty	Does not exist
	xenial	Does not exist
	focal	Ignored (end of life, was needs-triage)
	upstream	Released (5.15~rc4)
linux-snapdragon Launchpad, Ubuntu, Debian	focal	Does not exist
	hirsute	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	trusty	Does not exist
	bionic	Released (4.15.0-1116.125)
	upstream	Released (5.15~rc4)
	xenial	Ignored (end of standard support, was needs-triage)
linux-gkeop-5.15 Launchpad, Ubuntu, Debian	trusty	Does not exist
	xenial	Does not exist
	bionic	Does not exist
	focal	Not vulnerable
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	upstream	Needs triage
linux-aws-5.19 Launchpad, Ubuntu, Debian	trusty	Does not exist
	xenial	Does not exist
	bionic	Does not exist
	focal	Does not exist
	jammy	Not vulnerable
	kinetic	Does not exist
	lunar	Does not exist
	upstream	Needs triage
linux-gcp-5.19 Launchpad, Ubuntu, Debian	trusty	Does not exist
	xenial	Does not exist
	bionic	Does not exist
	focal	Does not exist
	jammy	Not vulnerable
	kinetic	Does not exist
	lunar	Does not exist
	upstream	Needs triage
linux-riscv-5.19 Launchpad, Ubuntu, Debian	trusty	Does not exist
	xenial	Does not exist
	bionic	Does not exist
	focal	Does not exist
	jammy	Not vulnerable
	kinetic	Does not exist
	lunar	Does not exist
	upstream	Needs triage
linux-allwinner Launchpad, Ubuntu, Debian	trusty	Does not exist
	xenial	Does not exist
	bionic	Does not exist
	focal	Does not exist
	jammy	Does not exist
	kinetic	Not vulnerable
	lunar	Not vulnerable
	upstream	Needs triage
linux-allwinner-5.19 Launchpad, Ubuntu, Debian	trusty	Does not exist
	xenial	Does not exist
	bionic	Does not exist
	focal	Does not exist
	jammy	Not vulnerable
	kinetic	Does not exist
	lunar	Does not exist
	upstream	Needs triage
linux-starfive Launchpad, Ubuntu, Debian	trusty	Does not exist
	xenial	Does not exist
	bionic	Does not exist
	focal	Does not exist
	jammy	Does not exist
	kinetic	Not vulnerable
	lunar	Not vulnerable
	upstream	Needs triage
linux-starfive-5.19 Launchpad, Ubuntu, Debian	trusty	Does not exist
	xenial	Does not exist
	bionic	Does not exist
	focal	Does not exist
	jammy	Not vulnerable
	kinetic	Does not exist
	lunar	Does not exist
	upstream	Needs triage
linux-aws-6.2 Launchpad, Ubuntu, Debian	trusty	Does not exist
	xenial	Does not exist
	bionic	Does not exist
	focal	Does not exist
	jammy	Not vulnerable
	lunar	Does not exist
	upstream	Needs triage
linux-hwe-6.2 Launchpad, Ubuntu, Debian	trusty	Does not exist
	xenial	Does not exist
	bionic	Does not exist
	focal	Does not exist
	jammy	Not vulnerable
	lunar	Does not exist
	upstream	Needs triage
linux-lowlatency-hwe-6.2 Launchpad, Ubuntu, Debian	trusty	Does not exist
	xenial	Does not exist
	bionic	Does not exist
	focal	Does not exist
	jammy	Not vulnerable
	lunar	Does not exist
	upstream	Needs triage
linux-ibm-5.15 Launchpad, Ubuntu, Debian	trusty	Does not exist
	xenial	Does not exist
	bionic	Does not exist
	focal	Not vulnerable
	jammy	Does not exist
	lunar	Does not exist
	upstream	Needs triage
linux-gcp-6.2 Launchpad, Ubuntu, Debian	trusty	Does not exist
	xenial	Does not exist
	bionic	Does not exist
	focal	Does not exist
	jammy	Not vulnerable
	lunar	Does not exist
	upstream	Needs triage
linux-azure-6.2 Launchpad, Ubuntu, Debian	trusty	Does not exist
	xenial	Does not exist
	bionic	Does not exist
	focal	Does not exist
	jammy	Not vulnerable
	lunar	Does not exist
	upstream	Needs triage
linux-azure-fde-6.2 Launchpad, Ubuntu, Debian	trusty	Does not exist
	xenial	Does not exist
	bionic	Does not exist
	focal	Does not exist
	jammy	Not vulnerable
	lunar	Does not exist
	upstream	Needs triage
linux-iot Launchpad, Ubuntu, Debian	trusty	Does not exist
	xenial	Does not exist
	bionic	Does not exist
	focal	Not vulnerable
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	upstream	Needs triage
linux-xilinx-zynqmp Launchpad, Ubuntu, Debian	trusty	Does not exist
	xenial	Does not exist
	bionic	Does not exist
	focal	Not vulnerable
	jammy	Not vulnerable
	kinetic	Does not exist
	lunar	Does not exist
	upstream	Needs triage

Severity score breakdown

Parameter	Value
Base score	6.8
Attack vector	Network
Attack complexity	High
Privileges required	Low
User interaction	None
Scope	Unchanged
Confidentiality	High
Integrity impact	None
Availability impact	High
Vector	CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H

References

Bugs

https://bugzilla.redhat.com/show_bug.cgi?id=2036934

Join the discussion

Canonical is offering Expanded Security Maintenance

Canonical is offering Ubuntu Expanded Security Maintenance (ESM) for security fixes and essential packages.

Find out more about ESM ›