Your submission was sent successfully! Close

You have successfully unsubscribed! Close

Thank you for signing up for our newsletter!
In these regular emails you will find the latest updates about Ubuntu and upcoming events where you can meet our team.Close

CVE-2022-48689

Published: 3 May 2024

In the Linux kernel, the following vulnerability has been resolved: tcp: TX zerocopy should not sense pfmemalloc status We got a recent syzbot report [1] showing a possible misuse of pfmemalloc page status in TCP zerocopy paths. Indeed, for pages coming from user space or other layers, using page_is_pfmemalloc() is moot, and possibly could give false positives. There has been attempts to make page_is_pfmemalloc() more robust, but not using it in the first place in this context is probably better, removing cpu cycles. Note to stable teams : You need to backport 84ce071e38a6 ("net: introduce __skb_fill_page_desc_noacc") as a prereq. Race is more probable after commit c07aea3ef4d4 ("mm: add a signature in struct page") because page_is_pfmemalloc() is now using low order bit from page->lru.next, which can change more often than page->index. Low order bit should never be set for lru.next (when used as an anchor in LRU list), so KCSAN report is mostly a false positive. Backporting to older kernel versions seems not necessary. [1] BUG: KCSAN: data-race in lru_add_fn / tcp_build_frag write to 0xffffea0004a1d2c8 of 8 bytes by task 18600 on cpu 0: __list_add include/linux/list.h:73 [inline] list_add include/linux/list.h:88 [inline] lruvec_add_folio include/linux/mm_inline.h:105 [inline] lru_add_fn+0x440/0x520 mm/swap.c:228 folio_batch_move_lru+0x1e1/0x2a0 mm/swap.c:246 folio_batch_add_and_move mm/swap.c:263 [inline] folio_add_lru+0xf1/0x140 mm/swap.c:490 filemap_add_folio+0xf8/0x150 mm/filemap.c:948 __filemap_get_folio+0x510/0x6d0 mm/filemap.c:1981 pagecache_get_page+0x26/0x190 mm/folio-compat.c:104 grab_cache_page_write_begin+0x2a/0x30 mm/folio-compat.c:116 ext4_da_write_begin+0x2dd/0x5f0 fs/ext4/inode.c:2988 generic_perform_write+0x1d4/0x3f0 mm/filemap.c:3738 ext4_buffered_write_iter+0x235/0x3e0 fs/ext4/file.c:270 ext4_file_write_iter+0x2e3/0x1210 call_write_iter include/linux/fs.h:2187 [inline] new_sync_write fs/read_write.c:491 [inline] vfs_write+0x468/0x760 fs/read_write.c:578 ksys_write+0xe8/0x1a0 fs/read_write.c:631 __do_sys_write fs/read_write.c:643 [inline] __se_sys_write fs/read_write.c:640 [inline] __x64_sys_write+0x3e/0x50 fs/read_write.c:640 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x2b/0x70 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd read to 0xffffea0004a1d2c8 of 8 bytes by task 18611 on cpu 1: page_is_pfmemalloc include/linux/mm.h:1740 [inline] __skb_fill_page_desc include/linux/skbuff.h:2422 [inline] skb_fill_page_desc include/linux/skbuff.h:2443 [inline] tcp_build_frag+0x613/0xb20 net/ipv4/tcp.c:1018 do_tcp_sendpages+0x3e8/0xaf0 net/ipv4/tcp.c:1075 tcp_sendpage_locked net/ipv4/tcp.c:1140 [inline] tcp_sendpage+0x89/0xb0 net/ipv4/tcp.c:1150 inet_sendpage+0x7f/0xc0 net/ipv4/af_inet.c:833 kernel_sendpage+0x184/0x300 net/socket.c:3561 sock_sendpage+0x5a/0x70 net/socket.c:1054 pipe_to_sendpage+0x128/0x160 fs/splice.c:361 splice_from_pipe_feed fs/splice.c:415 [inline] __splice_from_pipe+0x222/0x4d0 fs/splice.c:559 splice_from_pipe fs/splice.c:594 [inline] generic_splice_sendpage+0x89/0xc0 fs/splice.c:743 do_splice_from fs/splice.c:764 [inline] direct_splice_actor+0x80/0xa0 fs/splice.c:931 splice_direct_to_actor+0x305/0x620 fs/splice.c:886 do_splice_direct+0xfb/0x180 fs/splice.c:974 do_sendfile+0x3bf/0x910 fs/read_write.c:1249 __do_sys_sendfile64 fs/read_write.c:1317 [inline] __se_sys_sendfile64 fs/read_write.c:1303 [inline] __x64_sys_sendfile64+0x10c/0x150 fs/read_write.c:1303 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x2b/0x70 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd value changed: 0x0000000000000000 -> 0xffffea0004a1d288 Reported by Kernel Concurrency Sanitizer on: CPU: 1 PID: 18611 Comm: syz-executor.4 Not tainted 6.0.0-rc2-syzkaller-00248-ge022620b5d05-dirty #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022

Priority

Medium

Cvss 3 Severity Score

7.0

Score breakdown

Status

Package Release Status
linux
Launchpad, Ubuntu, Debian
bionic Not vulnerable
(4.13.0-16.19)
focal Not vulnerable
(5.4.0-9.12)
jammy Pending
(5.15.0-57.63)
mantic Not vulnerable
(6.2.0-20.20)
noble Not vulnerable
(6.5.0-9.9)
trusty Not vulnerable
(3.11.0-12.19)
upstream
Released (6.0~rc5, 5.15.68)
xenial Not vulnerable
(4.4.0-2.16)
Patches:
Introduced by

c07aea3ef4d4076f18f567b98ed01e082e02ed51

Fixed by 3261400639463a853ba2b3be8bd009c2a8089775
linux-allwinner-5.19
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Ignored
(end of kernel support)
mantic Does not exist

noble Does not exist

upstream Ignored
(end of life)
linux-aws
Launchpad, Ubuntu, Debian
bionic Not vulnerable
(4.15.0-1001.1)
focal Not vulnerable
(5.4.0-1005.5)
jammy Pending
(5.15.0-1027.31)
mantic Not vulnerable
(6.2.0-1003.3)
noble Not vulnerable
(6.5.0-1008.8)
trusty Not vulnerable
(4.4.0-1002.2)
upstream
Released (6.0~rc5, 5.15.68)
xenial Not vulnerable
(4.4.0-1001.10)
linux-aws-5.0
Launchpad, Ubuntu, Debian
bionic Ignored
(superseded by linux-aws-5.3)
focal Does not exist

jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-aws-5.3)
linux-aws-5.11
Launchpad, Ubuntu, Debian
focal Ignored
(superseded by linux-aws-5.13)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-aws-5.13)
linux-aws-5.13
Launchpad, Ubuntu, Debian
focal Ignored
(superseded by linux-aws-5.15)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-aws-5.15)
linux-aws-5.15
Launchpad, Ubuntu, Debian
focal Pending
(5.15.0-1027.31~20.04.1)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream
Released (6.0~rc5, 5.15.68)
linux-aws-5.19
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Ignored
(superseded by linux-aws-6.2)
mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-aws-6.2)
linux-aws-5.3
Launchpad, Ubuntu, Debian
bionic Ignored
(superseded by linux-aws-5.4)
focal Does not exist

jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-aws-5.4)
linux-aws-5.4
Launchpad, Ubuntu, Debian
bionic Not vulnerable
(5.4.0-1018.18~18.04.1)
focal Does not exist

jammy Does not exist

mantic Does not exist

noble Does not exist

upstream
Released (6.0~rc5, 5.15.68)
linux-aws-5.8
Launchpad, Ubuntu, Debian
focal Ignored
(superseded by linux-aws-5.11)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-aws-5.11)
linux-aws-6.2
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Ignored
(superseded by linux-aws-6.5)
mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-aws-6.5)
linux-aws-6.5
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Not vulnerable
(6.5.0-1008.8~22.04.1)
mantic Does not exist

noble Does not exist

upstream
Released (6.0~rc5, 5.15.68)
linux-aws-fips
Launchpad, Ubuntu, Debian
bionic Does not exist

focal Does not exist

jammy Does not exist

mantic Does not exist

noble Does not exist

trusty Does not exist

upstream
Released (6.0~rc5, 5.15.68)
xenial Does not exist

linux-aws-hwe
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Does not exist

mantic Does not exist

noble Does not exist

upstream
Released (6.0~rc5, 5.15.68)
xenial Not vulnerable
(4.15.0-1030.31~16.04.1)
linux-azure
Launchpad, Ubuntu, Debian
bionic Ignored
(superseded by linux-azure-5.3)
focal Not vulnerable
(5.4.0-1006.6)
jammy Pending
(5.15.0-1030.37)
mantic Not vulnerable
(6.2.0-1003.3)
noble Not vulnerable
(6.5.0-1007.7)
trusty Not vulnerable
(4.15.0-1023.24~14.04.1)
upstream
Released (6.0~rc5, 5.15.68)
xenial Not vulnerable
(4.11.0-1009.9)
linux-azure-4.15
Launchpad, Ubuntu, Debian
bionic Not vulnerable
(4.15.0-1082.92)
focal Does not exist

jammy Does not exist

mantic Does not exist

noble Does not exist

upstream
Released (6.0~rc5, 5.15.68)
linux-azure-5.11
Launchpad, Ubuntu, Debian
focal Ignored
(superseded by linux-azure-5.13)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-azure-5.13)
linux-azure-5.13
Launchpad, Ubuntu, Debian
focal Ignored
(superseded by linux-azure-5.15)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-azure-5.15)
linux-azure-5.15
Launchpad, Ubuntu, Debian
focal Pending
(5.15.0-1030.37~20.04.1)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream
Released (6.0~rc5, 5.15.68)
linux-azure-5.19
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Ignored
(superseded by linux-azure-6.2)
mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-azure-6.2)
linux-azure-5.3
Launchpad, Ubuntu, Debian
bionic Ignored
(superseded by linux-azure-5.4)
focal Does not exist

jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-azure-5.4)
linux-azure-5.4
Launchpad, Ubuntu, Debian
bionic Not vulnerable
(5.4.0-1020.20~18.04.1)
focal Does not exist

jammy Does not exist

mantic Does not exist

noble Does not exist

upstream
Released (6.0~rc5, 5.15.68)
linux-azure-5.8
Launchpad, Ubuntu, Debian
focal Ignored
(superseded by linux-azure-5.11)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-azure-5.11)
linux-azure-6.2
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Ignored
(superseded by linux-azure-6.5)
mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-azure-6.5)
linux-azure-6.5
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Not vulnerable
(6.5.0-1007.7~22.04.1)
mantic Does not exist

noble Does not exist

upstream
Released (6.0~rc5, 5.15.68)
linux-azure-edge
Launchpad, Ubuntu, Debian
bionic Ignored
(superseded by linux-azure-5.3)
focal Does not exist

jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-azure-5.3)
linux-azure-fde
Launchpad, Ubuntu, Debian
focal Ignored
(superseded by linux-azure-fde-5.15)
jammy
Released (5.15.0-1030.37.1)
mantic Does not exist

noble Does not exist

upstream
Released (6.0~rc5, 5.15.68)
linux-azure-fde-5.15
Launchpad, Ubuntu, Debian
focal
Released (5.15.0-1030.37~20.04.1.1)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream
Released (6.0~rc5, 5.15.68)
linux-azure-fde-5.19
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Ignored
(superseded by linux-azure-fde-6.2)
mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-azure-fde-6.2)
linux-azure-fde-6.2
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Ignored
(replaced by linux-azure-6.5)
mantic Does not exist

noble Does not exist

upstream Ignored
(replaced by linux-azure-6.5)
linux-azure-fips
Launchpad, Ubuntu, Debian
bionic Does not exist

focal Does not exist

jammy Does not exist

mantic Does not exist

noble Does not exist

trusty Does not exist

upstream
Released (6.0~rc5, 5.15.68)
xenial Does not exist

linux-bluefield
Launchpad, Ubuntu, Debian
focal Not vulnerable
(5.4.0-1007.10)
jammy Not vulnerable
(5.15.0-1011.13)
mantic Does not exist

noble Does not exist

upstream
Released (6.0~rc5, 5.15.68)
linux-fips
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Does not exist

mantic Does not exist

noble Does not exist

upstream
Released (6.0~rc5, 5.15.68)
linux-gcp
Launchpad, Ubuntu, Debian
bionic Ignored
(superseded by linux-gcp-5.3)
focal Not vulnerable
(5.4.0-1005.5)
jammy Pending
(5.15.0-1026.33)
mantic Not vulnerable
(6.2.0-1005.5)
noble Not vulnerable
(6.5.0-1007.7)
upstream
Released (6.0~rc5, 5.15.68)
xenial Not vulnerable
(4.10.0-1004.4)
linux-gcp-4.15
Launchpad, Ubuntu, Debian
bionic Not vulnerable
(4.15.0-1071.81)
focal Does not exist

jammy Does not exist

mantic Does not exist

noble Does not exist

upstream
Released (6.0~rc5, 5.15.68)
linux-gcp-5.11
Launchpad, Ubuntu, Debian
focal Ignored
(superseded by linux-gcp-5.13)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-gcp-5.13)
linux-gcp-5.13
Launchpad, Ubuntu, Debian
focal Ignored
(superseded by linux-gcp-5.15)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-gcp-5.15)
linux-gcp-5.15
Launchpad, Ubuntu, Debian
focal Pending
(5.15.0-1026.33~20.04.1)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream
Released (6.0~rc5, 5.15.68)
linux-gcp-5.19
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Ignored
(superseded by linux-gcp-6.2)
mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-gcp-6.2)
linux-gcp-5.3
Launchpad, Ubuntu, Debian
bionic Ignored
(superseded by linux-gcp-5.4)
focal Does not exist

jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-gcp-5.4)
linux-gcp-5.4
Launchpad, Ubuntu, Debian
bionic Not vulnerable
(5.4.0-1019.19~18.04.2)
focal Does not exist

jammy Does not exist

mantic Does not exist

noble Does not exist

upstream
Released (6.0~rc5, 5.15.68)
linux-gcp-5.8
Launchpad, Ubuntu, Debian
focal Ignored
(superseded by linux-gcp-5.11)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-gcp-5.11)
linux-gcp-6.2
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Ignored
(superseded by linux-gcp-6.5)
mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-gcp-6.5)
linux-gcp-6.5
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Not vulnerable
(6.5.0-1010.10~22.04.3)
mantic Does not exist

noble Does not exist

upstream
Released (6.0~rc5, 5.15.68)
linux-gcp-fips
Launchpad, Ubuntu, Debian
bionic Does not exist

focal Does not exist

jammy Does not exist

mantic Does not exist

noble Does not exist

trusty Does not exist

upstream
Released (6.0~rc5, 5.15.68)
xenial Does not exist

linux-gke
Launchpad, Ubuntu, Debian
focal Ignored
(end of kernel support)
jammy Pending
(5.15.0-1024.29)
mantic Does not exist

noble Not vulnerable
(6.8.0-1003.5)
upstream
Released (6.0~rc5, 5.15.68)
linux-gke-4.15
Launchpad, Ubuntu, Debian
bionic Ignored
(superseded by linux-gke-5.0)
focal Does not exist

jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-gke-5.0)
linux-gke-5.15
Launchpad, Ubuntu, Debian
focal Ignored
(end of kernel support)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(end of life)
linux-gke-5.4
Launchpad, Ubuntu, Debian
bionic Ignored
(end of kernel support)
focal Does not exist

jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(end of life)
linux-gkeop
Launchpad, Ubuntu, Debian
focal Not vulnerable
(5.4.0-1008.9)
jammy Pending
(5.15.0-1012.16)
mantic Does not exist

noble Does not exist

upstream
Released (6.0~rc5, 5.15.68)
linux-gkeop-5.15
Launchpad, Ubuntu, Debian
focal Pending
(5.15.0-1012.16~20.04.1)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream
Released (6.0~rc5, 5.15.68)
linux-gkeop-5.4
Launchpad, Ubuntu, Debian
bionic Ignored
(end of kernel support)
focal Does not exist

jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(end of life)
linux-hwe
Launchpad, Ubuntu, Debian
bionic Ignored
(replaced by linux-hwe-5.4)
focal Does not exist

jammy Does not exist

mantic Does not exist

noble Does not exist

upstream
Released (6.0~rc5, 5.15.68)
xenial Not vulnerable
(4.8.0-39.42~16.04.1)
linux-hwe-5.11
Launchpad, Ubuntu, Debian
focal Ignored
(superseded by linux-hwe-5.13)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-hwe-5.13)
linux-hwe-5.13
Launchpad, Ubuntu, Debian
focal Ignored
(superseded by linux-hwe-5.15)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-hwe-5.15)
linux-hwe-5.15
Launchpad, Ubuntu, Debian
focal Pending
(5.15.0-57.63~20.04.1)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream
Released (6.0~rc5, 5.15.68)
linux-hwe-5.19
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Ignored
(superseded by linux-hwe-6.2)
mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-hwe-6.2)
linux-hwe-5.4
Launchpad, Ubuntu, Debian
bionic Not vulnerable
(5.4.0-37.41~18.04.1)
focal Does not exist

jammy Does not exist

mantic Does not exist

noble Does not exist

upstream
Released (6.0~rc5, 5.15.68)
linux-hwe-5.8
Launchpad, Ubuntu, Debian
focal Ignored
(superseded by linux-hwe-5.11)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-hwe-5.11)
linux-hwe-6.2
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Ignored
(superseded by linux-hwe-6.5)
mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-hwe-6.5)
linux-hwe-6.5
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Not vulnerable
(6.5.0-14.14~22.04.1)
mantic Does not exist

noble Does not exist

upstream
Released (6.0~rc5, 5.15.68)
linux-hwe-edge
Launchpad, Ubuntu, Debian
bionic Ignored
(superseded by linux-hwe-5.4)
focal Does not exist

jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(end of life)
xenial Ignored
(superseded by linux-hwe)
linux-ibm
Launchpad, Ubuntu, Debian
focal Not vulnerable
(5.4.0-1003.4)
jammy Pending
(5.15.0-1022.25)
mantic Ignored
(end of kernel support)
noble Not vulnerable
(6.5.0-1009.9)
upstream
Released (6.0~rc5, 5.15.68)
linux-ibm-5.15
Launchpad, Ubuntu, Debian
focal Not vulnerable
(5.15.0-1033.36~20.04.1)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream
Released (6.0~rc5, 5.15.68)
linux-ibm-5.4
Launchpad, Ubuntu, Debian
bionic Not vulnerable
(5.4.0-1010.11~18.04.2)
focal Does not exist

jammy Does not exist

mantic Does not exist

noble Does not exist

upstream
Released (6.0~rc5, 5.15.68)
linux-intel
Launchpad, Ubuntu, Debian
bionic Does not exist

focal Does not exist

jammy Does not exist

mantic Does not exist

noble Not vulnerable
(6.8.0-1001.6)
trusty Does not exist

upstream
Released (6.0~rc5, 5.15.68)
xenial Does not exist

linux-intel-5.13
Launchpad, Ubuntu, Debian
focal Ignored
(end of kernel support)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(end of life)
linux-intel-iotg
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Pending
(5.15.0-1023.28)
mantic Does not exist

noble Does not exist

upstream
Released (6.0~rc5, 5.15.68)
linux-intel-iotg-5.15
Launchpad, Ubuntu, Debian
focal Pending
(5.15.0-1023.28~20.04.1)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream
Released (6.0~rc5, 5.15.68)
linux-iot
Launchpad, Ubuntu, Debian
focal Not vulnerable
(5.4.0-1001.3)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream
Released (6.0~rc5, 5.15.68)
linux-kvm
Launchpad, Ubuntu, Debian
bionic Not vulnerable
(4.15.0-1002.2)
focal Not vulnerable
(5.4.0-1004.4)
jammy Pending
(5.15.0-1025.30)
mantic Does not exist

noble Does not exist

upstream
Released (6.0~rc5, 5.15.68)
xenial Not vulnerable
(4.4.0-1004.9)
linux-laptop
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Does not exist

mantic Not vulnerable
(6.5.0-1003.6)
noble Does not exist

upstream
Released (6.0~rc5, 5.15.68)
linux-lowlatency
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Pending
(5.15.0-57.63)
mantic Not vulnerable
(6.2.0-1003.3)
noble Not vulnerable
(6.5.0-9.9.1)
upstream
Released (6.0~rc5, 5.15.68)
linux-lowlatency-hwe-5.15
Launchpad, Ubuntu, Debian
focal Pending
(5.15.0-58.64~20.04.1)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream
Released (6.0~rc5, 5.15.68)
linux-lowlatency-hwe-5.19
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Ignored
(superseded by linux-lowlatency-hwe-6.2)
mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-lowlatency-hwe-6.2)
linux-lowlatency-hwe-6.2
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Ignored
(superseded by linux-lowlatency-hwe-6.5)
mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-lowlatency-hwe-6.5)
linux-lowlatency-hwe-6.5
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Not vulnerable
(6.5.0-14.14.1~22.04.1)
mantic Does not exist

noble Does not exist

upstream
Released (6.0~rc5, 5.15.68)
linux-lts-xenial
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Does not exist

mantic Does not exist

noble Does not exist

trusty Not vulnerable
(4.4.0-13.29~14.04.1)
upstream
Released (6.0~rc5, 5.15.68)
linux-nvidia
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Pending
(5.15.0-1015.15)
mantic Does not exist

noble Not vulnerable
(6.8.0-1007.7)
upstream
Released (6.0~rc5, 5.15.68)
linux-nvidia-6.2
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Ignored
(superseded by linux-nvidia-6.5)
mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-nvidia-6.5)
linux-nvidia-6.5
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Not vulnerable
(6.5.0-1004.4)
mantic Does not exist

noble Does not exist

upstream
Released (6.0~rc5, 5.15.68)
linux-oem
Launchpad, Ubuntu, Debian
bionic Ignored
(replaced by linux-hwe-5.4)
focal Does not exist

jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(end of life)
linux-oem-5.10
Launchpad, Ubuntu, Debian
focal Ignored
(superseded by linux-oem-5.13)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-oem-5.13)
linux-oem-5.13
Launchpad, Ubuntu, Debian
focal Ignored
(superseded by linux-oem-5.14)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-oem-5.14)
linux-oem-5.14
Launchpad, Ubuntu, Debian
focal Ignored
(replaced by linux-hwe-5.15)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(replaced by linux-hwe-5.15)
linux-oem-5.17
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Ignored
(superseded by linux-oem-6.1)
mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-oem-6.1)
linux-oem-5.6
Launchpad, Ubuntu, Debian
focal Ignored
(superseded by linux-oem-5.10)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-oem-5.10)
linux-oem-6.0
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Ignored
(superseded by linux-oem-6.1)
mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-oem-6.1)
linux-oem-6.1
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Ignored
(superseded by linux-oem-6.5)
mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-oem-6.5)
linux-oem-6.5
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Not vulnerable
(6.5.0-1003.3)
mantic Does not exist

noble Does not exist

upstream
Released (6.0~rc5, 5.15.68)
linux-oem-6.8
Launchpad, Ubuntu, Debian
bionic Does not exist

focal Does not exist

jammy Does not exist

mantic Does not exist

noble Not vulnerable
(6.8.0-1003.3)
trusty Does not exist

upstream
Released (6.0~rc5, 5.15.68)
xenial Does not exist

linux-oracle
Launchpad, Ubuntu, Debian
bionic Not vulnerable
(4.15.0-1007.9)
focal Not vulnerable
(5.4.0-1005.5)
jammy Pending
(5.15.0-1026.32)
mantic Not vulnerable
(6.2.0-1003.3)
noble Not vulnerable
(6.5.0-1010.10)
upstream
Released (6.0~rc5, 5.15.68)
xenial Not vulnerable
(4.15.0-1007.9~16.04.1)
linux-oracle-5.0
Launchpad, Ubuntu, Debian
bionic Ignored
(superseded by linux-oracle-5.3)
focal Does not exist

jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-oracle-5.3)
linux-oracle-5.11
Launchpad, Ubuntu, Debian
focal Ignored
(superseded by linux-oracle-5.13)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-oracle-5.13)
linux-oracle-5.13
Launchpad, Ubuntu, Debian
focal Ignored
(superseded by linux-oracle-5.15)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-oracle-5.15)
linux-oracle-5.15
Launchpad, Ubuntu, Debian
focal Pending
(5.15.0-1027.33~20.04.1)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream
Released (6.0~rc5, 5.15.68)
linux-oracle-5.3
Launchpad, Ubuntu, Debian
bionic Ignored
(superseded by linux-oracle-5.4)
focal Does not exist

jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-oracle-5.4)
linux-oracle-5.4
Launchpad, Ubuntu, Debian
bionic Not vulnerable
(5.4.0-1019.19~18.04.1)
focal Does not exist

jammy Does not exist

mantic Does not exist

noble Does not exist

upstream
Released (6.0~rc5, 5.15.68)
linux-oracle-5.8
Launchpad, Ubuntu, Debian
focal Ignored
(superseded by linux-oracle-5.11)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-oracle-5.11)
linux-oracle-6.5
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Not vulnerable
(6.5.0-1013.13~22.04.4)
mantic Does not exist

noble Does not exist

upstream
Released (6.0~rc5, 5.15.68)
linux-raspi
Launchpad, Ubuntu, Debian
focal Not vulnerable
(5.4.0-1007.7)
jammy Pending
(5.15.0-1022.24)
mantic Not vulnerable
(6.2.0-1004.5)
noble Not vulnerable
(6.5.0-1005.7)
upstream
Released (6.0~rc5, 5.15.68)
linux-raspi-5.4
Launchpad, Ubuntu, Debian
bionic Not vulnerable
(5.4.0-1013.13~18.04.1)
focal Does not exist

jammy Does not exist

mantic Does not exist

noble Does not exist

upstream
Released (6.0~rc5, 5.15.68)
linux-raspi2
Launchpad, Ubuntu, Debian
focal Ignored
(replaced by linux-raspi)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(replaced by linux-raspi)
linux-riscv
Launchpad, Ubuntu, Debian
focal Ignored
(superseded by linux-riscv-5.8)
jammy Ignored
(end of kernel support)
mantic Not vulnerable
(6.2.0-19.19.1)
noble Not vulnerable
(6.5.0-9.9.1)
upstream
Released (6.0~rc5, 5.15.68)
linux-riscv-5.11
Launchpad, Ubuntu, Debian
focal Ignored
(superseded by linux-riscv-5.13)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-riscv-5.13)
linux-riscv-5.15
Launchpad, Ubuntu, Debian
focal Pending
(5.15.0-1027.31~20.04.1)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream
Released (6.0~rc5, 5.15.68)
linux-riscv-5.19
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Ignored
(end of kernel support)
mantic Does not exist

noble Does not exist

upstream Ignored
(end of life)
linux-riscv-5.8
Launchpad, Ubuntu, Debian
focal Ignored
(superseded by linux-riscv-5.11)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-riscv-5.11)
linux-riscv-6.5
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Not vulnerable
(6.5.0-17.17.1.1~22.04.1)
mantic Does not exist

noble Does not exist

upstream
Released (6.0~rc5, 5.15.68)
linux-starfive
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Does not exist

mantic Not vulnerable
(6.5.0-1002.3)
noble Does not exist

upstream
Released (6.0~rc5, 5.15.68)
linux-starfive-5.19
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Ignored
(end of kernel support)
mantic Does not exist

noble Does not exist

upstream Ignored
(end of life)
linux-starfive-6.2
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Ignored
(superseded by linux-starfive-6.5)
mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-starfive-6.5)
linux-starfive-6.5
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Not vulnerable
(6.5.0-1007.8~22.04.1)
mantic Does not exist

noble Does not exist

upstream
Released (6.0~rc5, 5.15.68)
linux-xilinx-zynqmp
Launchpad, Ubuntu, Debian
focal Not vulnerable
(5.4.0-1020.24)
jammy Not vulnerable
(5.15.0-1022.26)
mantic Does not exist

noble Does not exist

upstream
Released (6.0~rc5, 5.15.68)

Severity score breakdown

Parameter Value
Base score 7.0
Attack vector Local
Attack complexity High
Privileges required Low
User interaction None
Scope Unchanged
Confidentiality High
Integrity impact High
Availability impact High
Vector CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H