CVE-2022-33744
Published: 5 July 2022
Arm guests can cause Dom0 DoS via PV devices When mapping pages of guests on Arm, dom0 is using an rbtree to keep track of the foreign mappings. Updating of that rbtree is not always done completely with the related lock held, resulting in a small race window, which can be used by unprivileged guests via PV devices to cause inconsistencies of the rbtree. These inconsistencies can lead to Denial of Service (DoS) of dom0, e.g. by causing crashes or the inability to perform further mappings of other guests' memory pages.
From the Ubuntu Security Team
Oleksandr Tyshchenko discovered that the Xen paravirtualization platform in the Linux kernel on ARM platforms contained a race condition in certain situations. An attacker in a guest VM could use this to cause a denial of service in the host OS.
Notes
| Author | Note |
|---|---|
| sbeattie | according to the Xen advisory, introduced in 3.13. |
Priority
Status
| Package | Release | Status |
|---|---|---|
|
linux-hwe Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| bionic |
Ignored
(replaced by linux-hwe-5.4)
|
|
| focal |
Does not exist
|
|
| impish |
Does not exist
|
|
| jammy |
Does not exist
|
|
| upstream |
Released
(5.19~rc6)
|
|
| xenial |
Released
(4.15.0-194.205~16.04.1)
|
|
| kinetic |
Does not exist
|
|
|
linux-hwe-5.4 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| focal |
Does not exist
|
|
| impish |
Does not exist
|
|
| jammy |
Does not exist
|
|
| upstream |
Released
(5.19~rc6)
|
|
| bionic |
Released
(5.4.0-128.144~18.04.1)
|
|
| kinetic |
Does not exist
|
|
|
linux-hwe-5.8 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| focal |
Ignored
(superseded by linux-hwe-5.11)
|
|
| impish |
Does not exist
|
|
| jammy |
Does not exist
|
|
| upstream |
Released
(5.19~rc6)
|
|
| kinetic |
Does not exist
|
|
|
linux-hwe-5.11 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| focal |
Ignored
(superseded by linux-hwe-5.13)
|
|
| impish |
Does not exist
|
|
| jammy |
Does not exist
|
|
| upstream |
Released
(5.19~rc6)
|
|
| kinetic |
Does not exist
|
|
|
linux-hwe-5.13 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| impish |
Does not exist
|
|
| jammy |
Does not exist
|
|
| focal |
Ignored
(was needs-triage now end-of-life)
|
|
| upstream |
Released
(5.19~rc6)
|
|
| kinetic |
Does not exist
|
|
|
linux-hwe-edge Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Ignored
(superseded by linux-hwe)
|
|
| bionic |
Ignored
(superseded by linux-hwe-5.4)
|
|
| focal |
Does not exist
|
|
| impish |
Does not exist
|
|
| jammy |
Does not exist
|
|
| upstream |
Released
(5.19~rc6)
|
|
| kinetic |
Does not exist
|
|
|
linux-lts-xenial Launchpad, Ubuntu, Debian |
xenial |
Does not exist
|
| bionic |
Does not exist
|
|
| focal |
Does not exist
|
|
| impish |
Does not exist
|
|
| jammy |
Does not exist
|
|
| trusty |
Ignored
(was needed ESM criteria)
|
|
| upstream |
Released
(5.19~rc6)
|
|
| kinetic |
Does not exist
|
|
|
linux-kvm Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| impish |
Ignored
(reached end-of-life)
|
|
| focal |
Released
(5.4.0-1076.81)
|
|
| upstream |
Released
(5.19~rc6)
|
|
| xenial |
Ignored
(was needed ESM criteria)
|
|
| jammy |
Released
(5.15.0-1018.22)
|
|
| bionic |
Released
(4.15.0-1128.133)
|
|
| kinetic |
Not vulnerable
(5.19.0-1004.4)
|
|
|
linux-aws Launchpad, Ubuntu, Debian |
bionic |
Released
(4.15.0-1142.154)
|
| focal |
Released
(5.4.0-1086.93)
|
|
| impish |
Ignored
(reached end-of-life)
|
|
| trusty |
Ignored
(was needed ESM criteria)
|
|
| upstream |
Released
(5.19~rc6)
|
|
| xenial |
Ignored
(was needed ESM criteria)
|
|
| jammy |
Released
(5.15.0-1020.24)
|
|
| kinetic |
Not vulnerable
(5.19.0-1005.5)
|
|
|
linux-aws-5.0 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| bionic |
Ignored
(superseded by linux-aws-5.3)
|
|
| focal |
Does not exist
|
|
| impish |
Does not exist
|
|
| jammy |
Does not exist
|
|
| upstream |
Released
(5.19~rc6)
|
|
| kinetic |
Does not exist
|
|
|
linux-aws-5.3 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| bionic |
Ignored
(superseded by linux-aws-5.4)
|
|
| focal |
Does not exist
|
|
| impish |
Does not exist
|
|
| jammy |
Does not exist
|
|
| upstream |
Released
(5.19~rc6)
|
|
| kinetic |
Does not exist
|
|
|
linux-aws-5.4 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| focal |
Does not exist
|
|
| impish |
Does not exist
|
|
| jammy |
Does not exist
|
|
| bionic |
Released
(5.4.0-1086.93~18.04.1)
|
|
| upstream |
Released
(5.19~rc6)
|
|
| kinetic |
Does not exist
|
|
|
linux-aws-5.8 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| focal |
Ignored
(superseded by linux-aws-5.11)
|
|
| impish |
Does not exist
|
|
| jammy |
Does not exist
|
|
| upstream |
Released
(5.19~rc6)
|
|
| kinetic |
Does not exist
|
|
|
linux-aws-5.11 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| impish |
Does not exist
|
|
| jammy |
Does not exist
|
|
| focal |
Ignored
(was needs-triage now end-of-life)
|
|
| upstream |
Released
(5.19~rc6)
|
|
| kinetic |
Does not exist
|
|
|
linux-aws-5.13 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| impish |
Does not exist
|
|
| jammy |
Does not exist
|
|
| focal |
Ignored
(was needs-triage now end-of-life)
|
|
| upstream |
Released
(5.19~rc6)
|
|
| kinetic |
Does not exist
|
|
|
linux-aws-hwe Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| bionic |
Does not exist
|
|
| focal |
Does not exist
|
|
| impish |
Does not exist
|
|
| jammy |
Does not exist
|
|
| upstream |
Released
(5.19~rc6)
|
|
| xenial |
Released
(4.15.0-1142.154~16.04.1)
|
|
| kinetic |
Does not exist
|
|
|
linux-azure Launchpad, Ubuntu, Debian |
bionic |
Ignored
(superseded by linux-azure-5.3)
|
| impish |
Ignored
(reached end-of-life)
|
|
| focal |
Released
(5.4.0-1094.100)
|
|
| trusty |
Released
(4.15.0-1153.168~14.04.1)
|
|
| upstream |
Released
(5.19~rc6)
|
|
| jammy |
Released
(5.15.0-1020.25)
|
|
| xenial |
Released
(4.15.0-1153.168~16.04.1)
|
|
| kinetic |
Not vulnerable
(5.19.0-1004.4)
|
|
|
linux-azure-4.15 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| focal |
Does not exist
|
|
| impish |
Does not exist
|
|
| jammy |
Does not exist
|
|
| upstream |
Released
(5.19~rc6)
|
|
| bionic |
Released
(4.15.0-1153.168)
|
|
| kinetic |
Does not exist
|
|
|
linux-azure-5.3 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| bionic |
Ignored
(superseded by linux-azure-5.4)
|
|
| focal |
Does not exist
|
|
| impish |
Does not exist
|
|
| jammy |
Does not exist
|
|
| upstream |
Released
(5.19~rc6)
|
|
| kinetic |
Does not exist
|
|
|
linux-azure-5.4 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| focal |
Does not exist
|
|
| impish |
Does not exist
|
|
| jammy |
Does not exist
|
|
| upstream |
Released
(5.19~rc6)
|
|
| bionic |
Released
(5.4.0-1094.100~18.04.1)
|
|
| kinetic |
Does not exist
|
|
|
linux-azure-5.8 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| focal |
Ignored
(superseded by linux-azure-5.11)
|
|
| impish |
Does not exist
|
|
| jammy |
Does not exist
|
|
| upstream |
Released
(5.19~rc6)
|
|
| kinetic |
Does not exist
|
|
|
linux-azure-5.11 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| impish |
Does not exist
|
|
| jammy |
Does not exist
|
|
| focal |
Ignored
(was needs-triage now end-of-life)
|
|
| upstream |
Released
(5.19~rc6)
|
|
| kinetic |
Does not exist
|
|
|
linux-azure-5.13 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| impish |
Does not exist
|
|
| jammy |
Does not exist
|
|
| focal |
Ignored
(was needs-triage now end-of-life)
|
|
| upstream |
Released
(5.19~rc6)
|
|
| kinetic |
Does not exist
|
|
|
linux-azure-fde Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| focal |
Released
(5.4.0-1092.97+cvm1.1)
|
|
| impish |
Does not exist
|
|
| upstream |
Released
(5.19~rc6)
|
|
| jammy |
Released
(5.15.0-1020.25)
|
|
| kinetic |
Does not exist
|
|
|
linux-bluefield Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| impish |
Does not exist
|
|
| jammy |
Not vulnerable
(5.15.0-1011.13)
|
|
| focal |
Released
(5.4.0-1047.52)
|
|
| upstream |
Released
(5.19~rc6)
|
|
| kinetic |
Does not exist
|
|
|
linux-dell300x Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| focal |
Does not exist
|
|
| impish |
Does not exist
|
|
| jammy |
Does not exist
|
|
| upstream |
Released
(5.19~rc6)
|
|
| kinetic |
Does not exist
|
|
| bionic |
Released
(4.15.0-1054.59)
|
|
|
linux-azure-edge Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| bionic |
Ignored
(superseded by linux-azure-5.3)
|
|
| focal |
Does not exist
|
|
| impish |
Does not exist
|
|
| jammy |
Does not exist
|
|
| upstream |
Released
(5.19~rc6)
|
|
| kinetic |
Does not exist
|
|
|
linux-fips Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| bionic |
Does not exist
|
|
| focal |
Does not exist
|
|
| hirsute |
Does not exist
|
|
| impish |
Does not exist
|
|
| jammy |
Does not exist
|
|
| upstream |
Released
(5.19~rc6)
|
|
| xenial |
Ignored
(out of standard support)
|
|
| kinetic |
Does not exist
|
|
|
linux-gcp Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| bionic |
Ignored
(superseded by linux-gcp-5.3)
|
|
| impish |
Ignored
(reached end-of-life)
|
|
| jammy |
Released
(5.15.0-1018.24)
|
|
| upstream |
Released
(5.19~rc6)
|
|
| xenial |
Released
(4.15.0-1137.153~16.04.1)
|
|
| focal |
Released
(5.4.0-1090.98)
|
|
| kinetic |
Not vulnerable
(5.19.0-1004.4)
|
|
|
linux-gcp-4.15 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| focal |
Does not exist
|
|
| impish |
Does not exist
|
|
| jammy |
Does not exist
|
|
| bionic |
Released
(4.15.0-1137.153)
|
|
| upstream |
Released
(5.19~rc6)
|
|
| kinetic |
Does not exist
|
|
|
linux-gcp-5.3 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| bionic |
Ignored
(superseded by linux-gcp-5.4)
|
|
| focal |
Does not exist
|
|
| impish |
Does not exist
|
|
| jammy |
Does not exist
|
|
| upstream |
Released
(5.19~rc6)
|
|
| kinetic |
Does not exist
|
|
|
linux-gcp-5.4 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| focal |
Does not exist
|
|
| impish |
Does not exist
|
|
| jammy |
Does not exist
|
|
| bionic |
Released
(5.4.0-1092.101~18.04.1)
|
|
| upstream |
Released
(5.19~rc6)
|
|
| kinetic |
Does not exist
|
|
|
linux-gcp-5.8 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| focal |
Ignored
(superseded by linux-gcp-5.11)
|
|
| impish |
Does not exist
|
|
| jammy |
Does not exist
|
|
| upstream |
Released
(5.19~rc6)
|
|
| kinetic |
Does not exist
|
|
|
linux-gcp-5.11 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| impish |
Does not exist
|
|
| jammy |
Does not exist
|
|
| focal |
Ignored
(was needs-triage now end-of-life)
|
|
| upstream |
Released
(5.19~rc6)
|
|
| kinetic |
Does not exist
|
|
|
linux-gcp-5.13 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| focal |
Ignored
(was needs-triage now end-of-life)
|
|
| impish |
Does not exist
|
|
| jammy |
Does not exist
|
|
| upstream |
Released
(5.19~rc6)
|
|
| kinetic |
Does not exist
|
|
|
linux-gke Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Ignored
(reached end of standard support)
|
|
| bionic |
Does not exist
|
|
| impish |
Does not exist
|
|
| jammy |
Released
(5.15.0-1016.19)
|
|
| upstream |
Released
(5.19~rc6)
|
|
| focal |
Released
(5.4.0-1084.90)
|
|
| kinetic |
Does not exist
|
|
|
linux-gke-4.15 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| focal |
Does not exist
|
|
| impish |
Does not exist
|
|
| jammy |
Does not exist
|
|
| bionic |
Ignored
(was needs-triage now end-of-life)
|
|
| upstream |
Released
(5.19~rc6)
|
|
| kinetic |
Does not exist
|
|
|
linux-gke-5.0 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| bionic |
Ignored
(superseded by linux-gke-5.3)
|
|
| focal |
Does not exist
|
|
| impish |
Does not exist
|
|
| jammy |
Does not exist
|
|
| upstream |
Released
(5.19~rc6)
|
|
| kinetic |
Does not exist
|
|
|
linux-gke-5.3 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| bionic |
Ignored
(superseded by linux-gke-5.4)
|
|
| focal |
Does not exist
|
|
| impish |
Does not exist
|
|
| jammy |
Does not exist
|
|
| upstream |
Released
(5.19~rc6)
|
|
| kinetic |
Does not exist
|
|
|
linux-gke-5.4 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| focal |
Does not exist
|
|
| impish |
Does not exist
|
|
| jammy |
Does not exist
|
|
| bionic |
Ignored
(was needs-triage now end-of-life)
|
|
| upstream |
Released
(5.19~rc6)
|
|
| kinetic |
Does not exist
|
|
|
linux-gkeop Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| impish |
Does not exist
|
|
| jammy |
Released
(5.15.0-1003.5)
|
|
| focal |
Released
(5.4.0-1054.57)
|
|
| upstream |
Released
(5.19~rc6)
|
|
| kinetic |
Does not exist
|
|
|
linux-gkeop-5.4 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| focal |
Does not exist
|
|
| impish |
Does not exist
|
|
| jammy |
Does not exist
|
|
| bionic |
Ignored
(was needs-triage now end-of-life)
|
|
| upstream |
Released
(5.19~rc6)
|
|
| kinetic |
Does not exist
|
|
|
linux-ibm Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| impish |
Does not exist
|
|
| upstream |
Released
(5.19~rc6)
|
|
| jammy |
Released
(5.15.0-1015.17)
|
|
| focal |
Released
(5.4.0-1034.38)
|
|
| kinetic |
Not vulnerable
(5.19.0-1004.4)
|
|
|
linux-ibm-5.4 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| focal |
Does not exist
|
|
| impish |
Does not exist
|
|
| jammy |
Does not exist
|
|
| upstream |
Released
(5.19~rc6)
|
|
| bionic |
Released
(5.4.0-1034.38~18.04.1)
|
|
| kinetic |
Does not exist
|
|
|
linux-intel-5.13 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| impish |
Does not exist
|
|
| jammy |
Does not exist
|
|
| focal |
Ignored
(was needs-triage now end-of-life)
|
|
| upstream |
Released
(5.19~rc6)
|
|
| kinetic |
Does not exist
|
|
|
linux-intel-iotg Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| focal |
Does not exist
|
|
| impish |
Does not exist
|
|
| jammy |
Released
(5.15.0-1016.21)
|
|
| upstream |
Released
(5.19~rc6)
|
|
| kinetic |
Does not exist
|
|
|
linux-intel-iotg-5.15 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| impish |
Does not exist
|
|
| jammy |
Does not exist
|
|
| focal |
Pending
(5.15.0-1016.21~20.04.1)
|
|
| upstream |
Released
(5.19~rc6)
|
|
| kinetic |
Does not exist
|
|
|
linux-lowlatency Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| focal |
Does not exist
|
|
| impish |
Does not exist
|
|
| upstream |
Released
(5.19~rc6)
|
|
| jammy |
Released
(5.15.0-48.54)
|
|
| kinetic |
Not vulnerable
(5.19.0-1003.3)
|
|
|
linux-oracle Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| impish |
Ignored
(reached end-of-life)
|
|
| bionic |
Released
(4.15.0-1107.118)
|
|
| jammy |
Released
(5.15.0-1018.23)
|
|
| upstream |
Released
(5.19~rc6)
|
|
| focal |
Released
(5.4.0-1084.92)
|
|
| xenial |
Released
(4.15.0-1107.118~16.04.1)
|
|
| kinetic |
Not vulnerable
(5.19.0-1004.4)
|
|
|
linux-oracle-5.0 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| bionic |
Ignored
(superseded by linux-oracle-5.3)
|
|
| focal |
Does not exist
|
|
| impish |
Does not exist
|
|
| jammy |
Does not exist
|
|
| upstream |
Released
(5.19~rc6)
|
|
| kinetic |
Does not exist
|
|
|
linux-oracle-5.3 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| bionic |
Ignored
(superseded by linux-oracle-5.4)
|
|
| focal |
Does not exist
|
|
| impish |
Does not exist
|
|
| jammy |
Does not exist
|
|
| upstream |
Released
(5.19~rc6)
|
|
| kinetic |
Does not exist
|
|
|
linux-oracle-5.4 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| focal |
Does not exist
|
|
| impish |
Does not exist
|
|
| jammy |
Does not exist
|
|
| upstream |
Released
(5.19~rc6)
|
|
| bionic |
Released
(5.4.0-1084.92~18.04.1)
|
|
| kinetic |
Does not exist
|
|
|
linux-oracle-5.8 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| focal |
Ignored
(superseded by linux-oracle-5.11)
|
|
| impish |
Does not exist
|
|
| jammy |
Does not exist
|
|
| upstream |
Released
(5.19~rc6)
|
|
| kinetic |
Does not exist
|
|
|
linux-oracle-5.11 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| impish |
Does not exist
|
|
| jammy |
Does not exist
|
|
| focal |
Ignored
(was needs-triage now end-of-life)
|
|
| upstream |
Released
(5.19~rc6)
|
|
| kinetic |
Does not exist
|
|
|
linux-oracle-5.13 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| impish |
Does not exist
|
|
| jammy |
Does not exist
|
|
| focal |
Ignored
(was needs-triage now end-of-life)
|
|
| upstream |
Released
(5.19~rc6)
|
|
| kinetic |
Does not exist
|
|
|
linux-oem Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Ignored
(superseded by linux-hwe)
|
|
| bionic |
Ignored
(was needs-triage now end-of-life)
|
|
| focal |
Does not exist
|
|
| impish |
Does not exist
|
|
| jammy |
Does not exist
|
|
| upstream |
Released
(5.19~rc6)
|
|
| kinetic |
Does not exist
|
|
|
linux-oem-5.6 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| impish |
Does not exist
|
|
| jammy |
Does not exist
|
|
| focal |
Ignored
(was needs-triage now end-of-life)
|
|
| upstream |
Released
(5.19~rc6)
|
|
| kinetic |
Does not exist
|
|
|
linux-oem-5.10 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| impish |
Does not exist
|
|
| jammy |
Does not exist
|
|
| focal |
Ignored
(was needs-triage now end-of-life)
|
|
| upstream |
Released
(5.19~rc6)
|
|
| kinetic |
Does not exist
|
|
|
linux-oem-5.13 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| impish |
Does not exist
|
|
| jammy |
Does not exist
|
|
| focal |
Ignored
(was needs-triage now end-of-life)
|
|
| upstream |
Released
(5.19~rc6)
|
|
| kinetic |
Does not exist
|
|
|
linux-oem-5.14 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| impish |
Does not exist
|
|
| jammy |
Does not exist
|
|
| focal |
Ignored
(ARM only)
|
|
| upstream |
Released
(5.19~rc6)
|
|
| kinetic |
Does not exist
|
|
|
linux-oem-5.17 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| focal |
Does not exist
|
|
| impish |
Does not exist
|
|
| jammy |
Ignored
(ARM only)
|
|
| upstream |
Released
(5.19~rc6)
|
|
| kinetic |
Ignored
(was needs-triage now end-of-life)
|
|
|
linux-oem-osp1 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| focal |
Does not exist
|
|
| impish |
Does not exist
|
|
| jammy |
Does not exist
|
|
| bionic |
Ignored
(was needs-triage now end-of-life)
|
|
| upstream |
Released
(5.19~rc6)
|
|
| kinetic |
Does not exist
|
|
|
linux-raspi Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| impish |
Ignored
(reached end-of-life)
|
|
| focal |
Released
(5.4.0-1071.81)
|
|
| jammy |
Released
(5.15.0-1015.17)
|
|
| upstream |
Released
(5.19~rc6)
|
|
| kinetic |
Not vulnerable
(5.19.0-1001.3)
|
|
|
linux-raspi2 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Ignored
(end of standard support)
|
|
| focal |
Ignored
(replaced by linux-raspi)
|
|
| impish |
Does not exist
|
|
| jammy |
Does not exist
|
|
| upstream |
Released
(5.19~rc6)
|
|
| kinetic |
Does not exist
|
|
| bionic |
Released
(4.15.0-1120.128)
|
|
|
linux-raspi2-5.3 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| bionic |
Ignored
(superseded by linux-raspi-5.4)
|
|
| focal |
Does not exist
|
|
| impish |
Does not exist
|
|
| jammy |
Does not exist
|
|
| upstream |
Released
(5.19~rc6)
|
|
| kinetic |
Does not exist
|
|
|
linux-raspi-5.4 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| bionic |
Released
(5.4.0-1071.81~18.04.1)
|
|
| focal |
Does not exist
|
|
| impish |
Does not exist
|
|
| jammy |
Does not exist
|
|
| upstream |
Released
(5.19~rc6)
|
|
| kinetic |
Does not exist
|
|
|
linux-riscv Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| focal |
Ignored
(superseded by linux-riscv-5.8)
|
|
| jammy |
Released
(5.15.0-1019.22)
|
|
| upstream |
Released
(5.19~rc6)
|
|
| impish |
Ignored
(reached end-of-life)
|
|
| kinetic |
Not vulnerable
(5.19.0-1002.2)
|
|
|
linux-riscv-5.8 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| focal |
Ignored
(superseded by linux-riscv-5.11)
|
|
| impish |
Does not exist
|
|
| jammy |
Does not exist
|
|
| upstream |
Released
(5.19~rc6)
|
|
| kinetic |
Does not exist
|
|
|
linux-riscv-5.11 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| focal |
Ignored
(was needs-triage now end-of-life)
|
|
| impish |
Does not exist
|
|
| jammy |
Does not exist
|
|
| upstream |
Released
(5.19~rc6)
|
|
| kinetic |
Does not exist
|
|
|
linux-snapdragon Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Ignored
(end of standard support)
|
|
| bionic |
Released
(4.15.0-1138.148)
|
|
| focal |
Does not exist
|
|
| impish |
Does not exist
|
|
| jammy |
Does not exist
|
|
| upstream |
Released
(5.19~rc6)
|
|
| kinetic |
Does not exist
|
|
|
xen Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Needs triage
|
|
| bionic |
Needs triage
|
|
| focal |
Needs triage
|
|
| jammy |
Needs triage
|
|
| upstream |
Needs triage
|
|
| impish |
Ignored
(reached end-of-life)
|
|
| kinetic |
Needs triage
|
|
|
Patches: upstream: https://xenbits.xen.org/xsa/xsa406-linux.patch |
||
| Binaries built from this source package are in Universe and so are supported by the community. | ||
|
linux Launchpad, Ubuntu, Debian |
impish |
Ignored
(reached end-of-life)
|
| bionic |
Released
(4.15.0-194.205)
|
|
| trusty |
Ignored
(was needed ESM criteria)
|
|
| upstream |
Released
(5.19~rc6)
|
|
| xenial |
Ignored
(was needed ESM criteria)
|
|
| jammy |
Released
(5.15.0-48.54)
|
|
| focal |
Released
(5.4.0-128.144)
|
|
| kinetic |
Not vulnerable
(5.19.0-15.15)
|
|
|
Patches: Introduced by 4a19138c6505e224d9f4cc2fe9ada9188d7100ea |
||
|
linux-lowlatency-hwe-5.15 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| jammy |
Does not exist
|
|
| upstream |
Released
(5.19~rc6)
|
|
| focal |
Released
(5.15.0-48.54~20.04.1)
|
|
| kinetic |
Does not exist
|
|
|
linux-hwe-5.15 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| focal |
Released
(5.15.0-48.54~20.04.1)
|
|
| jammy |
Does not exist
|
|
| upstream |
Released
(5.19~rc6)
|
|
| kinetic |
Does not exist
|
|
|
linux-aws-5.15 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| jammy |
Does not exist
|
|
| focal |
Released
(5.15.0-1020.24~20.04.1)
|
|
| upstream |
Released
(5.19~rc6)
|
|
| kinetic |
Does not exist
|
|
|
linux-gcp-5.15 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| jammy |
Does not exist
|
|
| focal |
Released
(5.15.0-1018.24~20.04.1)
|
|
| upstream |
Released
(5.19~rc6)
|
|
| kinetic |
Does not exist
|
|
|
linux-gke-5.15 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| jammy |
Does not exist
|
|
| focal |
Released
(5.15.0-1016.19~20.04.1)
|
|
| upstream |
Released
(5.19~rc6)
|
|
| kinetic |
Does not exist
|
|
|
linux-azure-5.15 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| jammy |
Does not exist
|
|
| upstream |
Released
(5.19~rc6)
|
|
| focal |
Released
(5.15.0-1020.25~20.04.1)
|
|
| kinetic |
Does not exist
|
|
|
linux-oracle-5.15 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| jammy |
Does not exist
|
|
| kinetic |
Does not exist
|
|
| upstream |
Released
(5.19~rc6)
|
|
| focal |
Released
(5.15.0-1018.23~20.04.1)
|
|
|
linux-azure-fde-5.15 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| focal |
Needed
|
|
| jammy |
Does not exist
|
|
| kinetic |
Does not exist
|
|
| upstream |
Released
(5.19~rc6)
|
|
|
linux-oem-6.0 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| focal |
Does not exist
|
|
| jammy |
Not vulnerable
(6.0.0-1006.6)
|
|
| kinetic |
Does not exist
|
|
| upstream |
Released
(5.19~rc6)
|
|
|
linux-oem-6.1 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| focal |
Does not exist
|
|
| kinetic |
Does not exist
|
|
| jammy |
Not vulnerable
(6.1.0-1004.4)
|
|
| upstream |
Released
(5.19~rc6)
|
|
|
linux-hwe-5.19 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| focal |
Does not exist
|
|
| kinetic |
Does not exist
|
|
| jammy |
Not vulnerable
(5.19.0-28.29~22.04.1)
|
|
| upstream |
Released
(5.19~rc6)
|
|
|
linux-lowlatency-hwe-5.19 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| focal |
Does not exist
|
|
| kinetic |
Does not exist
|
|
| jammy |
Not vulnerable
(5.19.0-1017.18~22.04.1)
|
|
| upstream |
Released
(5.19~rc6)
|
|
|
linux-azure-5.19 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| focal |
Does not exist
|
|
| jammy |
Not vulnerable
|
|
| kinetic |
Does not exist
|
|
| upstream |
Needs triage
|
|
Severity score breakdown
| Parameter | Value |
|---|---|
| Base score | 4.7 |
| Attack vector | Local |
| Attack complexity | High |
| Privileges required | Low |
| User interaction | None |
| Scope | Unchanged |
| Confidentiality | None |
| Integrity impact | None |
| Availability impact | High |
| Vector | CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H |
References
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-33744
- https://xenbits.xen.org/xsa/advisory-406.html
- https://xenbits.xenproject.org/xsa/advisory-406.txt
- http://xenbits.xen.org/xsa/advisory-406.html
- http://www.openwall.com/lists/oss-security/2022/07/05/4
- https://ubuntu.com/security/notices/USN-5623-1
- https://ubuntu.com/security/notices/USN-5624-1
- https://ubuntu.com/security/notices/USN-5633-1
- https://ubuntu.com/security/notices/USN-5635-1
- https://ubuntu.com/security/notices/USN-5640-1
- https://ubuntu.com/security/notices/USN-5644-1
- https://ubuntu.com/security/notices/USN-5648-1
- https://ubuntu.com/security/notices/USN-5655-1
- https://ubuntu.com/security/notices/USN-5668-1
- https://ubuntu.com/security/notices/USN-5669-1
- https://ubuntu.com/security/notices/USN-5669-2
- https://ubuntu.com/security/notices/USN-5677-1
- https://ubuntu.com/security/notices/USN-5678-1
- https://ubuntu.com/security/notices/USN-5679-1
- https://ubuntu.com/security/notices/USN-5682-1
- https://ubuntu.com/security/notices/USN-5683-1
- https://ubuntu.com/security/notices/USN-5684-1
- https://ubuntu.com/security/notices/USN-5687-1
- https://ubuntu.com/security/notices/USN-5695-1
- https://ubuntu.com/security/notices/USN-5706-1
- NVD
- Launchpad
- Debian