Your submission was sent successfully! Close

You have successfully unsubscribed! Close

Thank you for signing up for our newsletter!
In these regular emails you will find the latest updates about Ubuntu and upcoming events where you can meet our team.Close

CVE-2022-48674

Published: 3 May 2024

In the Linux kernel, the following vulnerability has been resolved: erofs: fix pcluster use-after-free on UP platforms During stress testing with CONFIG_SMP disabled, KASAN reports as below: ================================================================== BUG: KASAN: use-after-free in __mutex_lock+0xe5/0xc30 Read of size 8 at addr ffff8881094223f8 by task stress/7789 CPU: 0 PID: 7789 Comm: stress Not tainted 6.0.0-rc1-00002-g0d53d2e882f9 #3 Hardware name: Red Hat KVM, BIOS 0.5.1 01/01/2011 Call Trace: <TASK> .. __mutex_lock+0xe5/0xc30 .. z_erofs_do_read_page+0x8ce/0x1560 .. z_erofs_readahead+0x31c/0x580 .. Freed by task 7787 kasan_save_stack+0x1e/0x40 kasan_set_track+0x20/0x30 kasan_set_free_info+0x20/0x40 __kasan_slab_free+0x10c/0x190 kmem_cache_free+0xed/0x380 rcu_core+0x3d5/0xc90 __do_softirq+0x12d/0x389 Last potentially related work creation: kasan_save_stack+0x1e/0x40 __kasan_record_aux_stack+0x97/0xb0 call_rcu+0x3d/0x3f0 erofs_shrink_workstation+0x11f/0x210 erofs_shrink_scan+0xdc/0x170 shrink_slab.constprop.0+0x296/0x530 drop_slab+0x1c/0x70 drop_caches_sysctl_handler+0x70/0x80 proc_sys_call_handler+0x20a/0x2f0 vfs_write+0x555/0x6c0 ksys_write+0xbe/0x160 do_syscall_64+0x3b/0x90 The root cause is that erofs_workgroup_unfreeze() doesn't reset to orig_val thus it causes a race that the pcluster reuses unexpectedly before freeing. Since UP platforms are quite rare now, such path becomes unnecessary. Let's drop such specific-designed path directly instead.

Priority

Medium

Cvss 3 Severity Score

7.8

Score breakdown

Status

Package Release Status
linux
Launchpad, Ubuntu, Debian
bionic Not vulnerable
(4.13.0-16.19)
focal Pending
(5.4.0-192.212)
jammy
Released (5.15.0-57.63)
mantic Not vulnerable
(6.2.0-20.20)
noble Not vulnerable
(6.5.0-9.9)
trusty Not vulnerable
(3.11.0-12.19)
upstream
Released (6.0~rc5, 5.15.68)
xenial Not vulnerable
(4.4.0-2.16)
Patches:
Introduced by

73f5c66df3e26ab750cefcb9a3e08c71c9f79cad

Fixed by 2f44013e39984c127c6efedf70e6b5f4e9dcf315
linux-allwinner-5.19
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Ignored
(end of kernel support)
mantic Does not exist

noble Does not exist

upstream Ignored
(end of life)
linux-aws
Launchpad, Ubuntu, Debian
bionic Not vulnerable
(4.15.0-1001.1)
focal Needed

jammy
Released (5.15.0-1027.31)
mantic Not vulnerable
(6.2.0-1003.3)
noble Not vulnerable
(6.5.0-1008.8)
trusty Not vulnerable
(4.4.0-1002.2)
upstream
Released (6.0~rc5, 5.15.68)
xenial Not vulnerable
(4.4.0-1001.10)
linux-aws-5.0
Launchpad, Ubuntu, Debian
bionic Ignored
(superseded by linux-aws-5.3)
focal Does not exist

jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-aws-5.3)
linux-aws-5.11
Launchpad, Ubuntu, Debian
focal Ignored
(superseded by linux-aws-5.13)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-aws-5.13)
linux-aws-5.13
Launchpad, Ubuntu, Debian
focal Ignored
(superseded by linux-aws-5.15)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-aws-5.15)
linux-aws-5.15
Launchpad, Ubuntu, Debian
focal
Released (5.15.0-1027.31~20.04.1)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream
Released (6.0~rc5, 5.15.68)
linux-aws-5.19
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Ignored
(superseded by linux-aws-6.2)
mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-aws-6.2)
linux-aws-5.3
Launchpad, Ubuntu, Debian
bionic Ignored
(superseded by linux-aws-5.4)
focal Does not exist

jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-aws-5.4)
linux-aws-5.4
Launchpad, Ubuntu, Debian
bionic Ignored
(ESM criteria, was needed)
focal Does not exist

jammy Does not exist

mantic Does not exist

noble Does not exist

upstream
Released (6.0~rc5, 5.15.68)
linux-aws-5.8
Launchpad, Ubuntu, Debian
focal Ignored
(superseded by linux-aws-5.11)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-aws-5.11)
linux-aws-6.2
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Ignored
(superseded by linux-aws-6.5)
mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-aws-6.5)
linux-aws-6.5
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Not vulnerable
(6.5.0-1008.8~22.04.1)
mantic Does not exist

noble Does not exist

upstream
Released (6.0~rc5, 5.15.68)
linux-aws-fips
Launchpad, Ubuntu, Debian
bionic Does not exist

focal Does not exist

jammy Does not exist

mantic Does not exist

noble Does not exist

trusty Does not exist

upstream
Released (6.0~rc5, 5.15.68)
xenial Does not exist

linux-aws-hwe
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Does not exist

mantic Does not exist

noble Does not exist

upstream
Released (6.0~rc5, 5.15.68)
xenial Not vulnerable
(4.15.0-1030.31~16.04.1)
linux-azure
Launchpad, Ubuntu, Debian
bionic Ignored
(superseded by linux-azure-5.3)
focal Needed

jammy
Released (5.15.0-1030.37)
mantic Not vulnerable
(6.2.0-1003.3)
noble Not vulnerable
(6.5.0-1007.7)
trusty Not vulnerable
(4.15.0-1023.24~14.04.1)
upstream
Released (6.0~rc5, 5.15.68)
xenial Not vulnerable
(4.11.0-1009.9)
linux-azure-4.15
Launchpad, Ubuntu, Debian
bionic Not vulnerable
(4.15.0-1082.92)
focal Does not exist

jammy Does not exist

mantic Does not exist

noble Does not exist

upstream
Released (6.0~rc5, 5.15.68)
linux-azure-5.11
Launchpad, Ubuntu, Debian
focal Ignored
(superseded by linux-azure-5.13)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-azure-5.13)
linux-azure-5.13
Launchpad, Ubuntu, Debian
focal Ignored
(superseded by linux-azure-5.15)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-azure-5.15)
linux-azure-5.15
Launchpad, Ubuntu, Debian
focal
Released (5.15.0-1030.37~20.04.1)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream
Released (6.0~rc5, 5.15.68)
linux-azure-5.19
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Ignored
(superseded by linux-azure-6.2)
mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-azure-6.2)
linux-azure-5.3
Launchpad, Ubuntu, Debian
bionic Ignored
(superseded by linux-azure-5.4)
focal Does not exist

jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-azure-5.4)
linux-azure-5.4
Launchpad, Ubuntu, Debian
bionic Ignored
(ESM criteria, was needed)
focal Does not exist

jammy Does not exist

mantic Does not exist

noble Does not exist

upstream
Released (6.0~rc5, 5.15.68)
linux-azure-5.8
Launchpad, Ubuntu, Debian
focal Ignored
(superseded by linux-azure-5.11)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-azure-5.11)
linux-azure-6.2
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Ignored
(superseded by linux-azure-6.5)
mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-azure-6.5)
linux-azure-6.5
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Not vulnerable
(6.5.0-1007.7~22.04.1)
mantic Does not exist

noble Does not exist

upstream
Released (6.0~rc5, 5.15.68)
linux-azure-edge
Launchpad, Ubuntu, Debian
bionic Ignored
(superseded by linux-azure-5.3)
focal Does not exist

jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-azure-5.3)
linux-azure-fde
Launchpad, Ubuntu, Debian
focal Ignored
(superseded by linux-azure-fde-5.15)
jammy
Released (5.15.0-1030.37.1)
mantic Does not exist

noble Does not exist

upstream
Released (6.0~rc5, 5.15.68)
linux-azure-fde-5.15
Launchpad, Ubuntu, Debian
focal
Released (5.15.0-1030.37~20.04.1.1)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream
Released (6.0~rc5, 5.15.68)
linux-azure-fde-5.19
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Ignored
(superseded by linux-azure-fde-6.2)
mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-azure-fde-6.2)
linux-azure-fde-6.2
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Ignored
(replaced by linux-azure-6.5)
mantic Does not exist

noble Does not exist

upstream Ignored
(replaced by linux-azure-6.5)
linux-azure-fips
Launchpad, Ubuntu, Debian
bionic Does not exist

focal Does not exist

jammy Does not exist

mantic Does not exist

noble Does not exist

trusty Does not exist

upstream
Released (6.0~rc5, 5.15.68)
xenial Does not exist

linux-bluefield
Launchpad, Ubuntu, Debian
focal Needed

jammy Not vulnerable
(5.15.0-1011.13)
mantic Does not exist

noble Does not exist

upstream
Released (6.0~rc5, 5.15.68)
linux-fips
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Does not exist

mantic Does not exist

noble Does not exist

upstream
Released (6.0~rc5, 5.15.68)
linux-gcp
Launchpad, Ubuntu, Debian
bionic Ignored
(superseded by linux-gcp-5.3)
focal Needed

jammy
Released (5.15.0-1026.33)
mantic Not vulnerable
(6.2.0-1005.5)
noble Not vulnerable
(6.5.0-1007.7)
upstream
Released (6.0~rc5, 5.15.68)
xenial Not vulnerable
(4.10.0-1004.4)
linux-gcp-4.15
Launchpad, Ubuntu, Debian
bionic Not vulnerable
(4.15.0-1071.81)
focal Does not exist

jammy Does not exist

mantic Does not exist

noble Does not exist

upstream
Released (6.0~rc5, 5.15.68)
linux-gcp-5.11
Launchpad, Ubuntu, Debian
focal Ignored
(superseded by linux-gcp-5.13)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-gcp-5.13)
linux-gcp-5.13
Launchpad, Ubuntu, Debian
focal Ignored
(superseded by linux-gcp-5.15)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-gcp-5.15)
linux-gcp-5.15
Launchpad, Ubuntu, Debian
focal
Released (5.15.0-1026.33~20.04.1)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream
Released (6.0~rc5, 5.15.68)
linux-gcp-5.19
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Ignored
(superseded by linux-gcp-6.2)
mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-gcp-6.2)
linux-gcp-5.3
Launchpad, Ubuntu, Debian
bionic Ignored
(superseded by linux-gcp-5.4)
focal Does not exist

jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-gcp-5.4)
linux-gcp-5.4
Launchpad, Ubuntu, Debian
bionic Ignored
(ESM criteria, was needed)
focal Does not exist

jammy Does not exist

mantic Does not exist

noble Does not exist

upstream
Released (6.0~rc5, 5.15.68)
linux-gcp-5.8
Launchpad, Ubuntu, Debian
focal Ignored
(superseded by linux-gcp-5.11)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-gcp-5.11)
linux-gcp-6.2
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Ignored
(superseded by linux-gcp-6.5)
mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-gcp-6.5)
linux-gcp-6.5
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Not vulnerable
(6.5.0-1010.10~22.04.3)
mantic Does not exist

noble Does not exist

upstream
Released (6.0~rc5, 5.15.68)
linux-gcp-fips
Launchpad, Ubuntu, Debian
bionic Does not exist

focal Does not exist

jammy Does not exist

mantic Does not exist

noble Does not exist

trusty Does not exist

upstream
Released (6.0~rc5, 5.15.68)
xenial Does not exist

linux-gke
Launchpad, Ubuntu, Debian
focal Ignored
(end of kernel support)
jammy
Released (5.15.0-1024.29)
mantic Does not exist

noble Not vulnerable
(6.8.0-1003.5)
upstream
Released (6.0~rc5, 5.15.68)
linux-gke-4.15
Launchpad, Ubuntu, Debian
bionic Ignored
(superseded by linux-gke-5.0)
focal Does not exist

jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-gke-5.0)
linux-gke-5.15
Launchpad, Ubuntu, Debian
focal Ignored
(end of kernel support)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(end of life)
linux-gke-5.4
Launchpad, Ubuntu, Debian
bionic Ignored
(end of kernel support)
focal Does not exist

jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(end of life)
linux-gkeop
Launchpad, Ubuntu, Debian
focal Needed

jammy
Released (5.15.0-1012.16)
mantic Does not exist

noble Does not exist

upstream
Released (6.0~rc5, 5.15.68)
linux-gkeop-5.15
Launchpad, Ubuntu, Debian
focal
Released (5.15.0-1012.16~20.04.1)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream
Released (6.0~rc5, 5.15.68)
linux-gkeop-5.4
Launchpad, Ubuntu, Debian
bionic Ignored
(end of kernel support)
focal Does not exist

jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(end of life)
linux-hwe
Launchpad, Ubuntu, Debian
bionic Ignored
(replaced by linux-hwe-5.4)
focal Does not exist

jammy Does not exist

mantic Does not exist

noble Does not exist

upstream
Released (6.0~rc5, 5.15.68)
xenial Not vulnerable
(4.8.0-39.42~16.04.1)
linux-hwe-5.11
Launchpad, Ubuntu, Debian
focal Ignored
(superseded by linux-hwe-5.13)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-hwe-5.13)
linux-hwe-5.13
Launchpad, Ubuntu, Debian
focal Ignored
(superseded by linux-hwe-5.15)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-hwe-5.15)
linux-hwe-5.15
Launchpad, Ubuntu, Debian
focal
Released (5.15.0-57.63~20.04.1)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream
Released (6.0~rc5, 5.15.68)
linux-hwe-5.19
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Ignored
(superseded by linux-hwe-6.2)
mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-hwe-6.2)
linux-hwe-5.4
Launchpad, Ubuntu, Debian
bionic Ignored
(ESM criteria, was needed)
focal Does not exist

jammy Does not exist

mantic Does not exist

noble Does not exist

upstream
Released (6.0~rc5, 5.15.68)
linux-hwe-5.8
Launchpad, Ubuntu, Debian
focal Ignored
(superseded by linux-hwe-5.11)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-hwe-5.11)
linux-hwe-6.2
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Ignored
(superseded by linux-hwe-6.5)
mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-hwe-6.5)
linux-hwe-6.5
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Not vulnerable
(6.5.0-14.14~22.04.1)
mantic Does not exist

noble Does not exist

upstream
Released (6.0~rc5, 5.15.68)
linux-hwe-edge
Launchpad, Ubuntu, Debian
bionic Ignored
(superseded by linux-hwe-5.4)
focal Does not exist

jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(end of life)
xenial Ignored
(superseded by linux-hwe)
linux-ibm
Launchpad, Ubuntu, Debian
focal Needed

jammy
Released (5.15.0-1022.25)
mantic Ignored
(end of kernel support)
noble Not vulnerable
(6.5.0-1009.9)
upstream
Released (6.0~rc5, 5.15.68)
linux-ibm-5.15
Launchpad, Ubuntu, Debian
focal Not vulnerable
(5.15.0-1033.36~20.04.1)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream
Released (6.0~rc5, 5.15.68)
linux-ibm-5.4
Launchpad, Ubuntu, Debian
bionic Ignored
(ESM criteria, was needed)
focal Does not exist

jammy Does not exist

mantic Does not exist

noble Does not exist

upstream
Released (6.0~rc5, 5.15.68)
linux-intel
Launchpad, Ubuntu, Debian
bionic Does not exist

focal Does not exist

jammy Does not exist

mantic Does not exist

noble Not vulnerable
(6.8.0-1001.6)
trusty Does not exist

upstream
Released (6.0~rc5, 5.15.68)
xenial Does not exist

linux-intel-5.13
Launchpad, Ubuntu, Debian
focal Ignored
(end of kernel support)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(end of life)
linux-intel-iotg
Launchpad, Ubuntu, Debian
focal Does not exist

jammy
Released (5.15.0-1023.28)
mantic Does not exist

noble Does not exist

upstream
Released (6.0~rc5, 5.15.68)
linux-intel-iotg-5.15
Launchpad, Ubuntu, Debian
focal
Released (5.15.0-1023.28~20.04.1)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream
Released (6.0~rc5, 5.15.68)
linux-iot
Launchpad, Ubuntu, Debian
focal Needed

jammy Does not exist

mantic Does not exist

noble Does not exist

upstream
Released (6.0~rc5, 5.15.68)
linux-kvm
Launchpad, Ubuntu, Debian
bionic Not vulnerable
(4.15.0-1002.2)
focal Needed

jammy
Released (5.15.0-1025.30)
mantic Does not exist

noble Does not exist

upstream
Released (6.0~rc5, 5.15.68)
xenial Not vulnerable
(4.4.0-1004.9)
linux-laptop
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Does not exist

mantic Not vulnerable
(6.5.0-1003.6)
noble Does not exist

upstream
Released (6.0~rc5, 5.15.68)
linux-lowlatency
Launchpad, Ubuntu, Debian
focal Does not exist

jammy
Released (5.15.0-57.63)
mantic Not vulnerable
(6.2.0-1003.3)
noble Not vulnerable
(6.5.0-9.9.1)
upstream
Released (6.0~rc5, 5.15.68)
linux-lowlatency-hwe-5.15
Launchpad, Ubuntu, Debian
focal
Released (5.15.0-58.64~20.04.1)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream
Released (6.0~rc5, 5.15.68)
linux-lowlatency-hwe-5.19
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Ignored
(superseded by linux-lowlatency-hwe-6.2)
mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-lowlatency-hwe-6.2)
linux-lowlatency-hwe-6.2
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Ignored
(superseded by linux-lowlatency-hwe-6.5)
mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-lowlatency-hwe-6.5)
linux-lowlatency-hwe-6.5
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Not vulnerable
(6.5.0-14.14.1~22.04.1)
mantic Does not exist

noble Does not exist

upstream
Released (6.0~rc5, 5.15.68)
linux-lts-xenial
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Does not exist

mantic Does not exist

noble Does not exist

trusty Not vulnerable
(4.4.0-13.29~14.04.1)
upstream
Released (6.0~rc5, 5.15.68)
linux-nvidia
Launchpad, Ubuntu, Debian
focal Does not exist

jammy
Released (5.15.0-1015.15)
mantic Does not exist

noble Not vulnerable
(6.8.0-1007.7)
upstream
Released (6.0~rc5, 5.15.68)
linux-nvidia-6.2
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Ignored
(superseded by linux-nvidia-6.5)
mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-nvidia-6.5)
linux-nvidia-6.5
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Not vulnerable
(6.5.0-1004.4)
mantic Does not exist

noble Does not exist

upstream
Released (6.0~rc5, 5.15.68)
linux-oem
Launchpad, Ubuntu, Debian
bionic Ignored
(replaced by linux-hwe-5.4)
focal Does not exist

jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(end of life)
linux-oem-5.10
Launchpad, Ubuntu, Debian
focal Ignored
(superseded by linux-oem-5.13)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-oem-5.13)
linux-oem-5.13
Launchpad, Ubuntu, Debian
focal Ignored
(superseded by linux-oem-5.14)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-oem-5.14)
linux-oem-5.14
Launchpad, Ubuntu, Debian
focal Ignored
(replaced by linux-hwe-5.15)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(replaced by linux-hwe-5.15)
linux-oem-5.17
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Ignored
(superseded by linux-oem-6.1)
mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-oem-6.1)
linux-oem-5.6
Launchpad, Ubuntu, Debian
focal Ignored
(superseded by linux-oem-5.10)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-oem-5.10)
linux-oem-6.0
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Ignored
(superseded by linux-oem-6.1)
mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-oem-6.1)
linux-oem-6.1
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Ignored
(superseded by linux-oem-6.5)
mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-oem-6.5)
linux-oem-6.5
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Not vulnerable
(6.5.0-1003.3)
mantic Does not exist

noble Does not exist

upstream
Released (6.0~rc5, 5.15.68)
linux-oem-6.8
Launchpad, Ubuntu, Debian
bionic Does not exist

focal Does not exist

jammy Does not exist

mantic Does not exist

noble Not vulnerable
(6.8.0-1003.3)
trusty Does not exist

upstream
Released (6.0~rc5, 5.15.68)
xenial Does not exist

linux-oracle
Launchpad, Ubuntu, Debian
bionic Not vulnerable
(4.15.0-1007.9)
focal Needed

jammy
Released (5.15.0-1026.32)
mantic Not vulnerable
(6.2.0-1003.3)
noble Not vulnerable
(6.5.0-1010.10)
upstream
Released (6.0~rc5, 5.15.68)
xenial Not vulnerable
(4.15.0-1007.9~16.04.1)
linux-oracle-5.0
Launchpad, Ubuntu, Debian
bionic Ignored
(superseded by linux-oracle-5.3)
focal Does not exist

jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-oracle-5.3)
linux-oracle-5.11
Launchpad, Ubuntu, Debian
focal Ignored
(superseded by linux-oracle-5.13)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-oracle-5.13)
linux-oracle-5.13
Launchpad, Ubuntu, Debian
focal Ignored
(superseded by linux-oracle-5.15)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-oracle-5.15)
linux-oracle-5.15
Launchpad, Ubuntu, Debian
focal
Released (5.15.0-1027.33~20.04.1)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream
Released (6.0~rc5, 5.15.68)
linux-oracle-5.3
Launchpad, Ubuntu, Debian
bionic Ignored
(superseded by linux-oracle-5.4)
focal Does not exist

jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-oracle-5.4)
linux-oracle-5.4
Launchpad, Ubuntu, Debian
bionic Ignored
(ESM criteria, was needed)
focal Does not exist

jammy Does not exist

mantic Does not exist

noble Does not exist

upstream
Released (6.0~rc5, 5.15.68)
linux-oracle-5.8
Launchpad, Ubuntu, Debian
focal Ignored
(superseded by linux-oracle-5.11)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-oracle-5.11)
linux-oracle-6.5
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Not vulnerable
(6.5.0-1013.13~22.04.4)
mantic Does not exist

noble Does not exist

upstream
Released (6.0~rc5, 5.15.68)
linux-raspi
Launchpad, Ubuntu, Debian
focal Needed

jammy
Released (5.15.0-1022.24)
mantic Not vulnerable
(6.2.0-1004.5)
noble Not vulnerable
(6.5.0-1005.7)
upstream
Released (6.0~rc5, 5.15.68)
linux-raspi-5.4
Launchpad, Ubuntu, Debian
bionic Ignored
(ESM criteria, was needed)
focal Does not exist

jammy Does not exist

mantic Does not exist

noble Does not exist

upstream
Released (6.0~rc5, 5.15.68)
linux-raspi2
Launchpad, Ubuntu, Debian
focal Ignored
(replaced by linux-raspi)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(replaced by linux-raspi)
linux-riscv
Launchpad, Ubuntu, Debian
focal Ignored
(superseded by linux-riscv-5.8)
jammy Ignored
(end of kernel support)
mantic Not vulnerable
(6.2.0-19.19.1)
noble Not vulnerable
(6.5.0-9.9.1)
upstream
Released (6.0~rc5, 5.15.68)
linux-riscv-5.11
Launchpad, Ubuntu, Debian
focal Ignored
(superseded by linux-riscv-5.13)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-riscv-5.13)
linux-riscv-5.15
Launchpad, Ubuntu, Debian
focal
Released (5.15.0-1027.31~20.04.1)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream
Released (6.0~rc5, 5.15.68)
linux-riscv-5.19
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Ignored
(end of kernel support)
mantic Does not exist

noble Does not exist

upstream Ignored
(end of life)
linux-riscv-5.8
Launchpad, Ubuntu, Debian
focal Ignored
(superseded by linux-riscv-5.11)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-riscv-5.11)
linux-riscv-6.5
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Not vulnerable
(6.5.0-17.17.1.1~22.04.1)
mantic Does not exist

noble Does not exist

upstream
Released (6.0~rc5, 5.15.68)
linux-starfive
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Does not exist

mantic Not vulnerable
(6.5.0-1002.3)
noble Does not exist

upstream
Released (6.0~rc5, 5.15.68)
linux-starfive-5.19
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Ignored
(end of kernel support)
mantic Does not exist

noble Does not exist

upstream Ignored
(end of life)
linux-starfive-6.2
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Ignored
(superseded by linux-starfive-6.5)
mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-starfive-6.5)
linux-starfive-6.5
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Not vulnerable
(6.5.0-1007.8~22.04.1)
mantic Does not exist

noble Does not exist

upstream
Released (6.0~rc5, 5.15.68)
linux-xilinx-zynqmp
Launchpad, Ubuntu, Debian
focal Needed

jammy Not vulnerable
(5.15.0-1022.26)
mantic Does not exist

noble Does not exist

upstream
Released (6.0~rc5, 5.15.68)

Severity score breakdown

Parameter Value
Base score 7.8
Attack vector Local
Attack complexity Low
Privileges required Low
User interaction None
Scope Unchanged
Confidentiality High
Integrity impact High
Availability impact High
Vector CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H