CVE-2022-0500
Published: 25 March 2022
A flaw was found in unrestricted eBPF usage by the BPF_BTF_LOAD, leading to a possible out-of-bounds memory write in the Linux kernel’s BPF subsystem due to the way a user loads BTF. This flaw allows a local user to crash or escalate their privileges on the system.
From the Ubuntu Security Team
It was discovered that the eBPF implementation in the Linux kernel did not properly prevent writes to kernel objects in BPF_BTF_LOAD commands. A privileged local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code.
Notes
| Author | Note |
|---|---|
| sbeattie | unprivileged eBPF has been disabled by default in Ubuntu kernels as of 2022-03-08, requires CAP_SYS_ADMIN or CAP_BPF privileges. |
Priority
Status
| Package | Release | Status |
|---|---|---|
|
linux-azure-5.13 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| focal |
Ignored
(was needed now end-of-life)
|
|
| impish |
Does not exist
|
|
| upstream |
Released
(5.17~rc1)
|
|
| jammy |
Does not exist
|
|
| kinetic |
Does not exist
|
|
|
linux-aws Launchpad, Ubuntu, Debian |
upstream |
Released
(5.17~rc1)
|
| bionic |
Not vulnerable
(4.15.0-1001.1)
|
|
| focal |
Not vulnerable
(5.4.0-1005.5)
|
|
| impish |
Ignored
(reached end-of-life)
|
|
| trusty |
Not vulnerable
(4.4.0-1002.2)
|
|
| xenial |
Not vulnerable
(4.4.0-1001.10)
|
|
| jammy |
Released
(5.15.0-1015.19)
|
|
| kinetic |
Not vulnerable
(5.19.0-1005.5)
|
|
|
linux-aws-5.0 Launchpad, Ubuntu, Debian |
upstream |
Released
(5.17~rc1)
|
| trusty |
Does not exist
|
|
| xenial |
Does not exist
|
|
| bionic |
Ignored
(superseded by linux-aws-5.3)
|
|
| focal |
Does not exist
|
|
| impish |
Does not exist
|
|
| jammy |
Does not exist
|
|
| kinetic |
Does not exist
|
|
|
linux-aws-5.3 Launchpad, Ubuntu, Debian |
upstream |
Released
(5.17~rc1)
|
| trusty |
Does not exist
|
|
| xenial |
Does not exist
|
|
| bionic |
Ignored
(superseded by linux-aws-5.4)
|
|
| focal |
Does not exist
|
|
| impish |
Does not exist
|
|
| jammy |
Does not exist
|
|
| kinetic |
Does not exist
|
|
|
linux-aws-5.4 Launchpad, Ubuntu, Debian |
upstream |
Released
(5.17~rc1)
|
| trusty |
Does not exist
|
|
| xenial |
Does not exist
|
|
| bionic |
Not vulnerable
(5.4.0-1018.18~18.04.1)
|
|
| focal |
Does not exist
|
|
| impish |
Does not exist
|
|
| jammy |
Does not exist
|
|
| kinetic |
Does not exist
|
|
|
linux-aws-5.8 Launchpad, Ubuntu, Debian |
upstream |
Released
(5.17~rc1)
|
| trusty |
Does not exist
|
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| focal |
Ignored
(superseded by linux-aws-5.11)
|
|
| impish |
Does not exist
|
|
| jammy |
Does not exist
|
|
| kinetic |
Does not exist
|
|
|
linux-aws-hwe Launchpad, Ubuntu, Debian |
upstream |
Released
(5.17~rc1)
|
| trusty |
Does not exist
|
|
| bionic |
Does not exist
|
|
| focal |
Does not exist
|
|
| impish |
Does not exist
|
|
| xenial |
Not vulnerable
(4.15.0-1030.31~16.04.1)
|
|
| jammy |
Does not exist
|
|
| kinetic |
Does not exist
|
|
|
linux-azure Launchpad, Ubuntu, Debian |
focal |
Not vulnerable
(5.4.0-1006.6)
|
| impish |
Ignored
(reached end-of-life)
|
|
| upstream |
Released
(5.17~rc1)
|
|
| bionic |
Ignored
(superseded by linux-azure-5.3)
|
|
| trusty |
Not vulnerable
(4.15.0-1023.24~14.04.1)
|
|
| xenial |
Not vulnerable
(4.11.0-1009.9)
|
|
| jammy |
Released
(5.15.0-1014.17)
|
|
| kinetic |
Not vulnerable
(5.19.0-1004.4)
|
|
|
linux-azure-4.15 Launchpad, Ubuntu, Debian |
bionic |
Not vulnerable
(4.15.0-1082.92)
|
| upstream |
Released
(5.17~rc1)
|
|
| trusty |
Does not exist
|
|
| xenial |
Does not exist
|
|
| focal |
Does not exist
|
|
| impish |
Does not exist
|
|
| jammy |
Does not exist
|
|
| kinetic |
Does not exist
|
|
|
linux-azure-5.4 Launchpad, Ubuntu, Debian |
upstream |
Released
(5.17~rc1)
|
| trusty |
Does not exist
|
|
| xenial |
Does not exist
|
|
| bionic |
Not vulnerable
(5.4.0-1020.20~18.04.1)
|
|
| focal |
Does not exist
|
|
| impish |
Does not exist
|
|
| jammy |
Does not exist
|
|
| kinetic |
Does not exist
|
|
|
linux-azure-5.8 Launchpad, Ubuntu, Debian |
upstream |
Released
(5.17~rc1)
|
| trusty |
Does not exist
|
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| focal |
Ignored
(superseded by linux-azure-5.11)
|
|
| impish |
Does not exist
|
|
| jammy |
Does not exist
|
|
| kinetic |
Does not exist
|
|
|
linux-azure-edge Launchpad, Ubuntu, Debian |
upstream |
Released
(5.17~rc1)
|
| trusty |
Does not exist
|
|
| xenial |
Does not exist
|
|
| bionic |
Ignored
(superseded by linux-azure-5.3)
|
|
| focal |
Does not exist
|
|
| impish |
Does not exist
|
|
| jammy |
Does not exist
|
|
| kinetic |
Does not exist
|
|
|
linux-azure-fde Launchpad, Ubuntu, Debian |
upstream |
Released
(5.17~rc1)
|
| trusty |
Does not exist
|
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| impish |
Does not exist
|
|
| focal |
Not vulnerable
(5.4.0-1063.66+cvm2.2)
|
|
| jammy |
Released
(5.15.0-1014.17)
|
|
| kinetic |
Does not exist
|
|
|
linux-bluefield Launchpad, Ubuntu, Debian |
upstream |
Released
(5.17~rc1)
|
| trusty |
Does not exist
|
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| impish |
Does not exist
|
|
| focal |
Not vulnerable
(5.4.0-1007.10)
|
|
| jammy |
Not vulnerable
|
|
| kinetic |
Does not exist
|
|
|
linux-dell300x Launchpad, Ubuntu, Debian |
upstream |
Released
(5.17~rc1)
|
| trusty |
Does not exist
|
|
| xenial |
Does not exist
|
|
| focal |
Does not exist
|
|
| impish |
Does not exist
|
|
| bionic |
Not vulnerable
(4.15.0-1005.8)
|
|
| jammy |
Does not exist
|
|
| kinetic |
Does not exist
|
|
|
linux-fips Launchpad, Ubuntu, Debian |
upstream |
Released
(5.17~rc1)
|
| trusty |
Does not exist
|
|
| bionic |
Does not exist
|
|
| focal |
Does not exist
|
|
| hirsute |
Does not exist
|
|
| impish |
Does not exist
|
|
| jammy |
Does not exist
|
|
| xenial |
Ignored
(out of standard support)
|
|
| kinetic |
Does not exist
|
|
|
linux-gcp Launchpad, Ubuntu, Debian |
focal |
Not vulnerable
(5.4.0-1005.5)
|
| impish |
Ignored
(reached end-of-life)
|
|
| upstream |
Released
(5.17~rc1)
|
|
| trusty |
Does not exist
|
|
| bionic |
Ignored
(superseded by linux-gcp-5.3)
|
|
| xenial |
Not vulnerable
(4.10.0-1004.4)
|
|
| jammy |
Released
(5.15.0-1013.18)
|
|
| kinetic |
Not vulnerable
(5.19.0-1004.4)
|
|
|
linux-gcp-4.15 Launchpad, Ubuntu, Debian |
upstream |
Released
(5.17~rc1)
|
| trusty |
Does not exist
|
|
| xenial |
Does not exist
|
|
| focal |
Does not exist
|
|
| impish |
Does not exist
|
|
| bionic |
Not vulnerable
(4.15.0-1071.81)
|
|
| jammy |
Does not exist
|
|
| kinetic |
Does not exist
|
|
|
linux-gcp-5.11 Launchpad, Ubuntu, Debian |
upstream |
Released
(5.17~rc1)
|
| trusty |
Does not exist
|
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| impish |
Does not exist
|
|
| focal |
Ignored
(was needs-triage now end-of-life)
|
|
| jammy |
Does not exist
|
|
| kinetic |
Does not exist
|
|
|
linux-gcp-5.13 Launchpad, Ubuntu, Debian |
focal |
Ignored
(was needed now end-of-life)
|
| upstream |
Released
(5.17~rc1)
|
|
| trusty |
Does not exist
|
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| impish |
Does not exist
|
|
| jammy |
Does not exist
|
|
| kinetic |
Does not exist
|
|
|
linux-gcp-5.3 Launchpad, Ubuntu, Debian |
upstream |
Released
(5.17~rc1)
|
| trusty |
Does not exist
|
|
| xenial |
Does not exist
|
|
| bionic |
Ignored
(superseded by linux-gcp-5.4)
|
|
| focal |
Does not exist
|
|
| impish |
Does not exist
|
|
| jammy |
Does not exist
|
|
| kinetic |
Does not exist
|
|
|
linux-gcp-5.4 Launchpad, Ubuntu, Debian |
upstream |
Released
(5.17~rc1)
|
| trusty |
Does not exist
|
|
| xenial |
Does not exist
|
|
| focal |
Does not exist
|
|
| impish |
Does not exist
|
|
| bionic |
Not vulnerable
(5.4.0-1019.19~18.04.2)
|
|
| jammy |
Does not exist
|
|
| kinetic |
Does not exist
|
|
|
linux-gcp-5.8 Launchpad, Ubuntu, Debian |
upstream |
Released
(5.17~rc1)
|
| trusty |
Does not exist
|
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| focal |
Ignored
(superseded by linux-gcp-5.11)
|
|
| impish |
Does not exist
|
|
| jammy |
Does not exist
|
|
| kinetic |
Does not exist
|
|
|
linux-gke-5.0 Launchpad, Ubuntu, Debian |
upstream |
Released
(5.17~rc1)
|
| trusty |
Does not exist
|
|
| xenial |
Does not exist
|
|
| bionic |
Ignored
(superseded by linux-gke-5.3)
|
|
| focal |
Does not exist
|
|
| impish |
Does not exist
|
|
| jammy |
Does not exist
|
|
| kinetic |
Does not exist
|
|
|
linux-gke-5.3 Launchpad, Ubuntu, Debian |
upstream |
Released
(5.17~rc1)
|
| trusty |
Does not exist
|
|
| xenial |
Does not exist
|
|
| bionic |
Ignored
(superseded by linux-gke-5.4)
|
|
| focal |
Does not exist
|
|
| impish |
Does not exist
|
|
| jammy |
Does not exist
|
|
| kinetic |
Does not exist
|
|
|
linux-gke-5.4 Launchpad, Ubuntu, Debian |
bionic |
Not vulnerable
(5.4.0-1025.25~18.04.1)
|
| upstream |
Released
(5.17~rc1)
|
|
| trusty |
Does not exist
|
|
| xenial |
Does not exist
|
|
| focal |
Does not exist
|
|
| impish |
Does not exist
|
|
| jammy |
Does not exist
|
|
| kinetic |
Does not exist
|
|
|
linux-gkeop Launchpad, Ubuntu, Debian |
upstream |
Released
(5.17~rc1)
|
| trusty |
Does not exist
|
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| impish |
Does not exist
|
|
| focal |
Not vulnerable
(5.4.0-1008.9)
|
|
| jammy |
Released
(5.15.0-1002.4)
|
|
| kinetic |
Does not exist
|
|
|
linux-gkeop-5.4 Launchpad, Ubuntu, Debian |
upstream |
Released
(5.17~rc1)
|
| trusty |
Does not exist
|
|
| xenial |
Does not exist
|
|
| focal |
Does not exist
|
|
| impish |
Does not exist
|
|
| bionic |
Not vulnerable
(5.4.0-1001.1)
|
|
| jammy |
Does not exist
|
|
| kinetic |
Does not exist
|
|
|
linux-hwe Launchpad, Ubuntu, Debian |
upstream |
Released
(5.17~rc1)
|
| trusty |
Does not exist
|
|
| bionic |
Ignored
(replaced by linux-hwe-5.4)
|
|
| focal |
Does not exist
|
|
| impish |
Does not exist
|
|
| xenial |
Not vulnerable
(4.8.0-39.42~16.04.1)
|
|
| jammy |
Does not exist
|
|
| kinetic |
Does not exist
|
|
|
linux-hwe-5.11 Launchpad, Ubuntu, Debian |
upstream |
Released
(5.17~rc1)
|
| trusty |
Does not exist
|
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| focal |
Ignored
(superseded by linux-hwe-5.13)
|
|
| impish |
Does not exist
|
|
| jammy |
Does not exist
|
|
| kinetic |
Does not exist
|
|
|
linux-hwe-5.13 Launchpad, Ubuntu, Debian |
focal |
Ignored
(was needed now end-of-life)
|
| upstream |
Released
(5.17~rc1)
|
|
| trusty |
Does not exist
|
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| impish |
Does not exist
|
|
| jammy |
Does not exist
|
|
| kinetic |
Does not exist
|
|
|
linux-hwe-5.4 Launchpad, Ubuntu, Debian |
upstream |
Released
(5.17~rc1)
|
| trusty |
Does not exist
|
|
| xenial |
Does not exist
|
|
| focal |
Does not exist
|
|
| impish |
Does not exist
|
|
| bionic |
Not vulnerable
(5.4.0-37.41~18.04.1)
|
|
| jammy |
Does not exist
|
|
| kinetic |
Does not exist
|
|
|
linux-hwe-5.8 Launchpad, Ubuntu, Debian |
upstream |
Released
(5.17~rc1)
|
| trusty |
Does not exist
|
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| focal |
Ignored
(superseded by linux-hwe-5.11)
|
|
| impish |
Does not exist
|
|
| jammy |
Does not exist
|
|
| kinetic |
Does not exist
|
|
|
linux-hwe-edge Launchpad, Ubuntu, Debian |
upstream |
Released
(5.17~rc1)
|
| trusty |
Does not exist
|
|
| xenial |
Ignored
(superseded by linux-hwe)
|
|
| bionic |
Ignored
(superseded by linux-hwe-5.4)
|
|
| focal |
Does not exist
|
|
| impish |
Does not exist
|
|
| jammy |
Does not exist
|
|
| kinetic |
Does not exist
|
|
|
linux-ibm Launchpad, Ubuntu, Debian |
upstream |
Released
(5.17~rc1)
|
| trusty |
Does not exist
|
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| impish |
Does not exist
|
|
| focal |
Not vulnerable
(5.4.0-1003.4)
|
|
| jammy |
Released
(5.15.0-1010.12)
|
|
| kinetic |
Not vulnerable
(5.19.0-1004.4)
|
|
|
linux-ibm-5.4 Launchpad, Ubuntu, Debian |
upstream |
Released
(5.17~rc1)
|
| trusty |
Does not exist
|
|
| xenial |
Does not exist
|
|
| focal |
Does not exist
|
|
| impish |
Does not exist
|
|
| bionic |
Not vulnerable
(5.4.0-1010.11~18.04.2)
|
|
| jammy |
Does not exist
|
|
| kinetic |
Does not exist
|
|
|
linux-intel-5.13 Launchpad, Ubuntu, Debian |
upstream |
Released
(5.17~rc1)
|
| trusty |
Does not exist
|
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| impish |
Does not exist
|
|
| focal |
Ignored
(was needs-triage now end-of-life)
|
|
| jammy |
Does not exist
|
|
| kinetic |
Does not exist
|
|
|
linux-kvm Launchpad, Ubuntu, Debian |
impish |
Ignored
(reached end-of-life)
|
| upstream |
Released
(5.17~rc1)
|
|
| trusty |
Does not exist
|
|
| xenial |
Not vulnerable
(4.4.0-1004.9)
|
|
| bionic |
Not vulnerable
(4.15.0-1002.2)
|
|
| focal |
Not vulnerable
(5.4.0-1004.4)
|
|
| jammy |
Released
(5.15.0-1013.16)
|
|
| kinetic |
Not vulnerable
(5.19.0-1004.4)
|
|
|
linux-lts-xenial Launchpad, Ubuntu, Debian |
upstream |
Released
(5.17~rc1)
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| focal |
Does not exist
|
|
| impish |
Does not exist
|
|
| trusty |
Not vulnerable
(4.4.0-13.29~14.04.1)
|
|
| jammy |
Does not exist
|
|
| kinetic |
Does not exist
|
|
|
linux-oem-5.6 Launchpad, Ubuntu, Debian |
upstream |
Released
(5.17~rc1)
|
| trusty |
Does not exist
|
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| impish |
Does not exist
|
|
| focal |
Ignored
(was needs-triage now end-of-life)
|
|
| jammy |
Does not exist
|
|
| kinetic |
Does not exist
|
|
|
linux-oem-osp1 Launchpad, Ubuntu, Debian |
upstream |
Released
(5.17~rc1)
|
| trusty |
Does not exist
|
|
| xenial |
Does not exist
|
|
| focal |
Does not exist
|
|
| impish |
Does not exist
|
|
| bionic |
Ignored
(was needs-triage now end-of-life)
|
|
| jammy |
Does not exist
|
|
| kinetic |
Does not exist
|
|
|
linux-oracle Launchpad, Ubuntu, Debian |
impish |
Ignored
(reached end-of-life)
|
| upstream |
Released
(5.17~rc1)
|
|
| trusty |
Does not exist
|
|
| xenial |
Not vulnerable
(4.15.0-1007.9~16.04.1)
|
|
| bionic |
Not vulnerable
(4.15.0-1007.9)
|
|
| focal |
Not vulnerable
(5.4.0-1005.5)
|
|
| jammy |
Released
(5.15.0-1013.17)
|
|
| kinetic |
Not vulnerable
(5.19.0-1004.4)
|
|
|
linux-oracle-5.0 Launchpad, Ubuntu, Debian |
upstream |
Released
(5.17~rc1)
|
| trusty |
Does not exist
|
|
| xenial |
Does not exist
|
|
| bionic |
Ignored
(superseded by linux-oracle-5.3)
|
|
| focal |
Does not exist
|
|
| impish |
Does not exist
|
|
| jammy |
Does not exist
|
|
| kinetic |
Does not exist
|
|
|
linux-oracle-5.11 Launchpad, Ubuntu, Debian |
upstream |
Released
(5.17~rc1)
|
| trusty |
Does not exist
|
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| impish |
Does not exist
|
|
| focal |
Ignored
(was needs-triage now end-of-life)
|
|
| jammy |
Does not exist
|
|
| kinetic |
Does not exist
|
|
|
linux-oracle-5.13 Launchpad, Ubuntu, Debian |
focal |
Ignored
(was needed now end-of-life)
|
| upstream |
Released
(5.17~rc1)
|
|
| trusty |
Does not exist
|
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| impish |
Does not exist
|
|
| jammy |
Does not exist
|
|
| kinetic |
Does not exist
|
|
|
linux-oracle-5.3 Launchpad, Ubuntu, Debian |
upstream |
Released
(5.17~rc1)
|
| trusty |
Does not exist
|
|
| xenial |
Does not exist
|
|
| bionic |
Ignored
(superseded by linux-oracle-5.4)
|
|
| focal |
Does not exist
|
|
| impish |
Does not exist
|
|
| jammy |
Does not exist
|
|
| kinetic |
Does not exist
|
|
|
linux-oracle-5.4 Launchpad, Ubuntu, Debian |
upstream |
Released
(5.17~rc1)
|
| trusty |
Does not exist
|
|
| xenial |
Does not exist
|
|
| focal |
Does not exist
|
|
| impish |
Does not exist
|
|
| bionic |
Not vulnerable
(5.4.0-1019.19~18.04.1)
|
|
| jammy |
Does not exist
|
|
| kinetic |
Does not exist
|
|
|
linux-oracle-5.8 Launchpad, Ubuntu, Debian |
upstream |
Released
(5.17~rc1)
|
| trusty |
Does not exist
|
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| focal |
Ignored
(superseded by linux-oracle-5.11)
|
|
| impish |
Does not exist
|
|
| jammy |
Does not exist
|
|
| kinetic |
Does not exist
|
|
|
linux-raspi Launchpad, Ubuntu, Debian |
impish |
Ignored
(reached end-of-life)
|
| upstream |
Released
(5.17~rc1)
|
|
| trusty |
Does not exist
|
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| focal |
Not vulnerable
(5.4.0-1007.7)
|
|
| jammy |
Released
(5.15.0-1012.14)
|
|
| kinetic |
Not vulnerable
(5.19.0-1001.3)
|
|
|
linux-raspi-5.4 Launchpad, Ubuntu, Debian |
upstream |
Released
(5.17~rc1)
|
| trusty |
Does not exist
|
|
| xenial |
Does not exist
|
|
| focal |
Does not exist
|
|
| impish |
Does not exist
|
|
| bionic |
Not vulnerable
(5.4.0-1013.13~18.04.1)
|
|
| jammy |
Does not exist
|
|
| kinetic |
Does not exist
|
|
|
linux-raspi2 Launchpad, Ubuntu, Debian |
upstream |
Released
(5.17~rc1)
|
| trusty |
Does not exist
|
|
| xenial |
Ignored
(end of standard support)
|
|
| focal |
Ignored
(replaced by linux-raspi)
|
|
| impish |
Does not exist
|
|
| bionic |
Not vulnerable
(4.13.0-1005.5)
|
|
| jammy |
Does not exist
|
|
| kinetic |
Does not exist
|
|
|
linux-raspi2-5.3 Launchpad, Ubuntu, Debian |
upstream |
Released
(5.17~rc1)
|
| trusty |
Does not exist
|
|
| xenial |
Does not exist
|
|
| bionic |
Ignored
(superseded by linux-raspi-5.4)
|
|
| focal |
Does not exist
|
|
| impish |
Does not exist
|
|
| jammy |
Does not exist
|
|
| kinetic |
Does not exist
|
|
|
linux-riscv Launchpad, Ubuntu, Debian |
impish |
Ignored
(reached end-of-life)
|
| upstream |
Released
(5.17~rc1)
|
|
| trusty |
Does not exist
|
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| focal |
Ignored
(superseded by linux-riscv-5.8)
|
|
| jammy |
Released
(5.15.0-1015.17)
|
|
| kinetic |
Not vulnerable
(5.19.0-1002.2)
|
|
|
linux-riscv-5.11 Launchpad, Ubuntu, Debian |
upstream |
Released
(5.17~rc1)
|
| trusty |
Does not exist
|
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| focal |
Ignored
(was needs-triage now end-of-life)
|
|
| impish |
Does not exist
|
|
| jammy |
Does not exist
|
|
| kinetic |
Does not exist
|
|
|
linux-riscv-5.8 Launchpad, Ubuntu, Debian |
upstream |
Released
(5.17~rc1)
|
| trusty |
Does not exist
|
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| focal |
Ignored
(superseded by linux-riscv-5.11)
|
|
| impish |
Does not exist
|
|
| jammy |
Does not exist
|
|
| kinetic |
Does not exist
|
|
|
linux Launchpad, Ubuntu, Debian |
bionic |
Not vulnerable
(4.13.0-16.19)
|
| focal |
Not vulnerable
(5.4.0-9.12)
|
|
| impish |
Ignored
(reached end-of-life)
|
|
| upstream |
Released
(5.17~rc1)
|
|
| trusty |
Not vulnerable
(3.11.0-12.19)
|
|
| xenial |
Not vulnerable
(4.4.0-2.16)
|
|
| jammy |
Released
(5.15.0-41.44)
|
|
| kinetic |
Not vulnerable
(5.19.0-15.15)
|
|
|
Patches: Introduced by 63d9b80dcf2c67bc5ade61cbbaa09d7af21f43f1 Introduced by eaa6bcb71ef6ed3dc18fc525ee7e293b06b4882b Introduced by 4976b718c3551faba2c0616ef55ebeb74db1c5ca |
||
|
linux-aws-5.11 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| impish |
Does not exist
|
|
| upstream |
Released
(5.17~rc1)
|
|
| focal |
Ignored
(was needs-triage now end-of-life)
|
|
| jammy |
Does not exist
|
|
| kinetic |
Does not exist
|
|
|
linux-aws-5.13 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| focal |
Ignored
(was needed now end-of-life)
|
|
| impish |
Does not exist
|
|
| upstream |
Released
(5.17~rc1)
|
|
| jammy |
Does not exist
|
|
| kinetic |
Does not exist
|
|
|
linux-azure-5.3 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| bionic |
Ignored
(superseded by linux-azure-5.4)
|
|
| focal |
Does not exist
|
|
| impish |
Does not exist
|
|
| upstream |
Released
(5.17~rc1)
|
|
| jammy |
Does not exist
|
|
| kinetic |
Does not exist
|
|
|
linux-azure-5.11 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| impish |
Does not exist
|
|
| upstream |
Released
(5.17~rc1)
|
|
| focal |
Ignored
(was needs-triage now end-of-life)
|
|
| jammy |
Does not exist
|
|
| kinetic |
Does not exist
|
|
|
linux-gke Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Ignored
(reached end of standard support)
|
|
| bionic |
Does not exist
|
|
| focal |
Not vulnerable
(5.4.0-1033.35)
|
|
| impish |
Does not exist
|
|
| upstream |
Released
(5.17~rc1)
|
|
| jammy |
Released
(5.15.0-1011.14)
|
|
| kinetic |
Does not exist
|
|
|
linux-gke-4.15 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| focal |
Does not exist
|
|
| impish |
Does not exist
|
|
| upstream |
Released
(5.17~rc1)
|
|
| bionic |
Ignored
(was needs-triage now end-of-life)
|
|
| jammy |
Does not exist
|
|
| kinetic |
Does not exist
|
|
|
linux-oem Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Ignored
(superseded by linux-hwe)
|
|
| focal |
Does not exist
|
|
| impish |
Does not exist
|
|
| upstream |
Released
(5.17~rc1)
|
|
| bionic |
Ignored
(was needs-triage now end-of-life)
|
|
| jammy |
Does not exist
|
|
| kinetic |
Does not exist
|
|
|
linux-oem-5.10 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| impish |
Does not exist
|
|
| upstream |
Released
(5.17~rc1)
|
|
| focal |
Ignored
(was needs-triage now end-of-life)
|
|
| jammy |
Does not exist
|
|
| kinetic |
Does not exist
|
|
|
linux-oem-5.13 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| impish |
Does not exist
|
|
| upstream |
Released
(5.17~rc1)
|
|
| focal |
Ignored
(was needs-triage now end-of-life)
|
|
| jammy |
Does not exist
|
|
| kinetic |
Does not exist
|
|
|
linux-oem-5.14 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| focal |
Needed
|
|
| impish |
Does not exist
|
|
| upstream |
Released
(5.17~rc1)
|
|
| jammy |
Does not exist
|
|
| kinetic |
Does not exist
|
|
|
linux-snapdragon Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Ignored
(end of standard support)
|
|
| focal |
Does not exist
|
|
| impish |
Does not exist
|
|
| upstream |
Released
(5.17~rc1)
|
|
| bionic |
Not vulnerable
(4.4.0-1077.82)
|
|
| jammy |
Does not exist
|
|
| kinetic |
Does not exist
|
|
|
linux-lowlatency Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| focal |
Does not exist
|
|
| impish |
Does not exist
|
|
| jammy |
Released
(5.15.0-41.44)
|
|
| upstream |
Released
(5.17~rc1)
|
|
| kinetic |
Not vulnerable
(5.19.0-1003.3)
|
|
|
linux-oem-5.17 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| focal |
Does not exist
|
|
| impish |
Does not exist
|
|
| jammy |
Not vulnerable
(5.17.0-1003.3)
|
|
| upstream |
Released
(5.17~rc1)
|
|
| kinetic |
Not vulnerable
(5.17.0-1003.3)
|
|
|
linux-intel-iotg Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| focal |
Does not exist
|
|
| impish |
Does not exist
|
|
| jammy |
Released
(5.15.0-1013.17)
|
|
| upstream |
Released
(5.17~rc1)
|
|
| kinetic |
Does not exist
|
|
|
linux-intel-iotg-5.15 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| focal |
Pending
(5.15.0-1015.20~20.04.2)
|
|
| impish |
Does not exist
|
|
| jammy |
Does not exist
|
|
| upstream |
Released
(5.17~rc1)
|
|
| kinetic |
Does not exist
|
|
|
linux-lowlatency-hwe-5.15 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| jammy |
Does not exist
|
|
| focal |
Released
(5.15.0-42.45~20.04.1)
|
|
| upstream |
Released
(5.17~rc1)
|
|
| kinetic |
Does not exist
|
|
|
linux-hwe-5.15 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| jammy |
Does not exist
|
|
| focal |
Released
(5.15.0-41.44~20.04.1)
|
|
| upstream |
Released
(5.17~rc1)
|
|
| kinetic |
Does not exist
|
|
|
linux-aws-5.15 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| jammy |
Does not exist
|
|
| upstream |
Released
(5.17~rc1)
|
|
| focal |
Released
(5.15.0-1015.19~20.04.1)
|
|
| kinetic |
Does not exist
|
|
|
linux-gcp-5.15 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| jammy |
Does not exist
|
|
| focal |
Released
(5.15.0-1013.18~20.04.1)
|
|
| upstream |
Released
(5.17~rc1)
|
|
| kinetic |
Does not exist
|
|
|
linux-gke-5.15 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| jammy |
Does not exist
|
|
| focal |
Not vulnerable
(5.15.0-1011.14~20.04.1)
|
|
| upstream |
Released
(5.17~rc1)
|
|
| kinetic |
Does not exist
|
|
|
linux-azure-5.15 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| focal |
Released
(5.15.0-1014.17~20.04.1)
|
|
| jammy |
Does not exist
|
|
| upstream |
Released
(5.17~rc1)
|
|
| kinetic |
Does not exist
|
|
|
linux-oracle-5.15 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| focal |
Not vulnerable
|
|
| jammy |
Does not exist
|
|
| upstream |
Needs triage
|
|
| kinetic |
Does not exist
|
|
|
linux-azure-fde-5.15 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| focal |
Pending
|
|
| jammy |
Does not exist
|
|
| kinetic |
Does not exist
|
|
| upstream |
Needs triage
|
|
|
linux-oem-6.0 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| focal |
Does not exist
|
|
| jammy |
Needs triage
|
|
| kinetic |
Does not exist
|
|
| upstream |
Needs triage
|
|
|
linux-oem-6.1 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| focal |
Does not exist
|
|
| jammy |
Not vulnerable
|
|
| kinetic |
Does not exist
|
|
| upstream |
Needs triage
|
|
|
linux-hwe-5.19 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| focal |
Does not exist
|
|
| jammy |
Not vulnerable
|
|
| kinetic |
Does not exist
|
|
| upstream |
Needs triage
|
|
|
linux-lowlatency-hwe-5.19 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| focal |
Does not exist
|
|
| jammy |
Not vulnerable
|
|
| kinetic |
Does not exist
|
|
| upstream |
Needs triage
|
|
|
linux-azure-5.19 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| focal |
Does not exist
|
|
| jammy |
Not vulnerable
|
|
| kinetic |
Does not exist
|
|
| upstream |
Needs triage
|
|
Severity score breakdown
| Parameter | Value |
|---|---|
| Base score | 7.8 |
| Attack vector | Local |
| Attack complexity | Low |
| Privileges required | Low |
| User interaction | None |
| Scope | Unchanged |
| Confidentiality | High |
| Integrity impact | High |
| Availability impact | High |
| Vector | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |