CVE-2023-35001
Published: 5 July 2023
Linux Kernel nftables Out-Of-Bounds Read/Write Vulnerability; nft_byteorder poorly handled vm register contents when CAP_NET_ADMIN is in any user or network namespace
From the Ubuntu Security Team
Tanguy Dubroca discovered that the netfilter subsystem in the Linux kernel did not properly handle certain pointer data type, leading to an out-of- bounds write vulnerability. A privileged attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code.
Notes
Author | Note |
---|---|
eslerm |
reporter at Pwn2Own 2023 as ZDI-CAN-20721 CWE-787 |
sbeattie |
requires CAP_NET_ADMIN in any network namespace |
Mitigation
If not needed, disable the ability for unprivileged users to create namespaces. To do this temporarily, do: sudo sysctl -w kernel.unprivileged_userns_clone=0 To disable across reboots, do: echo kernel.unprivileged_userns_clone=0 | \ sudo tee /etc/sysctl.d/99-disable-unpriv-userns.conf
Priority
Status
Package | Release | Status |
---|---|---|
linux
Launchpad, Ubuntu, Debian |
bionic |
Released
(4.15.0-214.225)
Available with Ubuntu Pro or Ubuntu Pro (Infra-only) |
focal |
Released
(5.4.0-155.172)
|
|
jammy |
Released
(5.15.0-78.85)
|
|
kinetic |
Ignored
(end of life, was needs-triage)
|
|
lunar |
Released
(6.2.0-26.26)
|
|
mantic |
Not vulnerable
(6.5.0-5.5)
|
|
noble |
Not vulnerable
(6.5.0-9.9)
|
|
trusty |
Released
(3.13.0-194.245)
Available with Ubuntu Pro or Ubuntu Pro (Infra-only) |
|
upstream |
Released
(6.5~rc2, 5.4.251, 5.15.121)
|
|
xenial |
Released
(4.4.0-243.277)
Available with Ubuntu Pro or Ubuntu Pro (Infra-only) |
|
Patches:
Introduced by
96518518cc417bb0a8c80b9fb736202e28acdf96
|
||
linux-aws
Launchpad, Ubuntu, Debian |
bionic |
Released
(4.15.0-1159.172)
Available with Ubuntu Pro or Ubuntu Pro (Infra-only) |
focal |
Released
(5.4.0-1106.114)
|
|
jammy |
Released
(5.15.0-1040.45)
|
|
kinetic |
Ignored
(end of life, was needs-triage)
|
|
lunar |
Released
(6.2.0-1008.8)
|
|
mantic |
Not vulnerable
(6.5.0-1005.5)
|
|
noble |
Not vulnerable
(6.5.0-1008.8)
|
|
trusty |
Released
(4.4.0-1121.127)
Available with Ubuntu Pro or Ubuntu Pro (Infra-only) |
|
upstream |
Released
(6.5~rc2, 5.4.251, 5.15.121)
|
|
xenial |
Released
(4.4.0-1159.174)
Available with Ubuntu Pro or Ubuntu Pro (Infra-only) |
|
linux-aws-5.0
Launchpad, Ubuntu, Debian |
bionic |
Ignored
(superseded by linux-hwe-5.3)
|
focal |
Does not exist
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
noble |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(6.5~rc2, 5.4.251, 5.15.121)
|
|
xenial |
Does not exist
|
|
linux-aws-5.11
Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Ignored
(superseded by linux-aws-5.13)
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
noble |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Ignored
(superseded by linux-aws-5.13)
|
|
xenial |
Does not exist
|
|
linux-aws-5.13
Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Ignored
(superseded by linux-aws-5.15)
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
noble |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Ignored
(superseded by linux-aws-5.15)
|
|
xenial |
Does not exist
|
|
linux-aws-5.15
Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Released
(5.15.0-1040.45~20.04.1)
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
noble |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(6.5~rc2, 5.4.251, 5.15.121)
|
|
xenial |
Does not exist
|
|
linux-aws-5.19
Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Does not exist
|
|
jammy |
Released
(5.19.0-1029.30~22.04.1)
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
noble |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(6.5~rc2, 5.4.251, 5.15.121)
|
|
xenial |
Does not exist
|
|
linux-aws-5.3
Launchpad, Ubuntu, Debian |
bionic |
Ignored
(superseded by linux-hwe-5.4)
|
focal |
Does not exist
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
noble |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Ignored
(superseded by linux-aws-5.4)
|
|
xenial |
Does not exist
|
|
linux-aws-5.4
Launchpad, Ubuntu, Debian |
bionic |
Released
(5.4.0-1106.114~18.04.1)
Available with Ubuntu Pro or Ubuntu Pro (Infra-only) |
focal |
Does not exist
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
noble |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(6.5~rc2, 5.4.251, 5.15.121)
|
|
xenial |
Does not exist
|
|
linux-aws-5.8
Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Ignored
(superseded by linux-aws-5.11)
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
noble |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Ignored
(superseded by linux-aws-5.11)
|
|
xenial |
Does not exist
|
|
linux-aws-6.2
Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Does not exist
|
|
jammy |
Ignored
(superseded by linux-aws-6.5, was needs-triage)
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
noble |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(6.5~rc2, 5.4.251, 5.15.121)
|
|
xenial |
Does not exist
|
|
linux-aws-6.5
Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Does not exist
|
|
jammy |
Not vulnerable
(6.5.0-1008.8~22.04.1)
|
|
mantic |
Does not exist
|
|
noble |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(6.5~rc2, 5.4.251, 5.15.121)
|
|
xenial |
Does not exist
|
|
linux-aws-fips
Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Does not exist
|
|
jammy |
Does not exist
|
|
mantic |
Does not exist
|
|
noble |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(6.5~rc2, 5.4.251, 5.15.121)
|
|
xenial |
Does not exist
|
|
linux-aws-hwe
Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Does not exist
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
noble |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(6.5~rc2, 5.4.251, 5.15.121)
|
|
xenial |
Released
(4.15.0-1159.172~16.04.1)
Available with Ubuntu Pro or Ubuntu Pro (Infra-only) |
|
linux-azure
Launchpad, Ubuntu, Debian |
bionic |
Ignored
(superseded by linux-azure-5.3)
|
focal |
Released
(5.4.0-1112.118)
|
|
jammy |
Released
(5.15.0-1042.49)
|
|
kinetic |
Ignored
(end of life, was needs-triage)
|
|
lunar |
Released
(6.2.0-1008.8)
|
|
mantic |
Not vulnerable
(6.5.0-1004.4)
|
|
noble |
Not vulnerable
(6.5.0-1007.7)
|
|
trusty |
Released
(4.15.0-1168.183~14.04.1)
Available with Ubuntu Pro or Ubuntu Pro (Infra-only) |
|
upstream |
Released
(6.5~rc2, 5.4.251, 5.15.121)
|
|
xenial |
Released
(4.15.0-1168.183~16.04.1)
Available with Ubuntu Pro or Ubuntu Pro (Infra-only) |
|
linux-azure-4.15
Launchpad, Ubuntu, Debian |
bionic |
Released
(4.15.0-1168.183)
Available with Ubuntu Pro or Ubuntu Pro (Infra-only) |
focal |
Does not exist
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
noble |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(6.5~rc2, 5.4.251, 5.15.121)
|
|
xenial |
Does not exist
|
|
linux-azure-5.11
Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Ignored
(superseded by linux-azure-5.13)
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
noble |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Ignored
(superseded by linux-azure-5.13)
|
|
xenial |
Does not exist
|
|
linux-azure-5.13
Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Ignored
(superseded by linux-azure-5.15)
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
noble |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Ignored
(superseded by linux-azure-5.15)
|
|
xenial |
Does not exist
|
|
linux-azure-5.15
Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Released
(5.15.0-1042.49~20.04.1)
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
noble |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(6.5~rc2, 5.4.251, 5.15.121)
|
|
xenial |
Does not exist
|
|
linux-azure-5.19
Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Does not exist
|
|
jammy |
Ignored
(end of kernel support, was needs-triage)
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
noble |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(6.5~rc2, 5.4.251, 5.15.121)
|
|
xenial |
Does not exist
|
|
linux-azure-5.3
Launchpad, Ubuntu, Debian |
bionic |
Ignored
(superseded by linux-azure-5.4)
|
focal |
Does not exist
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
noble |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Ignored
(superseded by linux-azure-5.4)
|
|
xenial |
Does not exist
|
|
linux-azure-5.4
Launchpad, Ubuntu, Debian |
bionic |
Released
(5.4.0-1112.118~18.04.1)
Available with Ubuntu Pro or Ubuntu Pro (Infra-only) |
focal |
Does not exist
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
noble |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(6.5~rc2, 5.4.251, 5.15.121)
|
|
xenial |
Does not exist
|
|
linux-azure-5.8
Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Ignored
(superseded by linux-azure-5.11)
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
noble |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Ignored
(superseded by linux-azure-5.11)
|
|
xenial |
Does not exist
|
|
linux-azure-6.2
Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Does not exist
|
|
jammy |
Ignored
(superseded by linux-azure-6.5, was needs-triage)
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
noble |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(6.5~rc2, 5.4.251, 5.15.121)
|
|
xenial |
Does not exist
|
|
linux-azure-6.5
Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Does not exist
|
|
jammy |
Not vulnerable
(6.5.0-1007.7~22.04.1)
|
|
mantic |
Does not exist
|
|
noble |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(6.5~rc2, 5.4.251, 5.15.121)
|
|
xenial |
Does not exist
|
|
linux-azure-edge
Launchpad, Ubuntu, Debian |
bionic |
Ignored
(superseded by linux-azure-5.3)
|
focal |
Does not exist
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
noble |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(6.5~rc2, 5.4.251, 5.15.121)
|
|
xenial |
Does not exist
|
|
linux-azure-fde
Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Ignored
(superseded by linux-azure-fde-5.15, was pending)
|
|
jammy |
Released
(5.15.0-1042.49.1)
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
noble |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(6.5~rc2, 5.4.251, 5.15.121)
|
|
xenial |
Does not exist
|
|
linux-azure-fde-5.15
Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Released
(5.15.0-1042.49~20.04.1.1)
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
noble |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(6.5~rc2, 5.4.251, 5.15.121)
|
|
xenial |
Does not exist
|
|
linux-azure-fde-5.19
Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Does not exist
|
|
jammy |
Ignored
(superseded by linux-azure-fde-6.2, was needs-triage)
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
noble |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(6.5~rc2, 5.4.251, 5.15.121)
|
|
xenial |
Does not exist
|
|
linux-azure-fde-6.2
Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Does not exist
|
|
jammy |
Ignored
(replaced by linux-azure-6.5, was needs-triage)
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
noble |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(6.5~rc2, 5.4.251, 5.15.121)
|
|
xenial |
Does not exist
|
|
linux-azure-fips
Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Does not exist
|
|
jammy |
Does not exist
|
|
mantic |
Does not exist
|
|
noble |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(6.5~rc2, 5.4.251, 5.15.121)
|
|
xenial |
Does not exist
|
|
linux-bluefield
Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Released
(5.4.0-1068.74)
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
noble |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(6.5~rc2, 5.4.251, 5.15.121)
|
|
xenial |
Does not exist
|
|
linux-dell300x
Launchpad, Ubuntu, Debian |
bionic |
Ignored
(end of standard support)
|
focal |
Does not exist
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
noble |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(6.5~rc2, 5.4.251, 5.15.121)
|
|
xenial |
Does not exist
|
|
linux-fips
Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Does not exist
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
noble |
Does not exist
|
|
trusty |
Ignored
(end of standard support)
|
|
upstream |
Released
(6.5~rc2, 5.4.251, 5.15.121)
|
|
xenial |
Ignored
(end of standard support)
|
|
linux-gcp
Launchpad, Ubuntu, Debian |
bionic |
Ignored
(superseded by linux-gcp-5.3)
|
focal |
Released
(5.4.0-1109.118)
|
|
jammy |
Released
(5.15.0-1038.46)
|
|
kinetic |
Ignored
(end of life, was needs-triage)
|
|
lunar |
Released
(6.2.0-1010.10)
|
|
mantic |
Not vulnerable
(6.5.0-1004.4)
|
|
noble |
Not vulnerable
(6.5.0-1007.7)
|
|
trusty |
Does not exist
|
|
upstream |
Released
(6.5~rc2, 5.4.251, 5.15.121)
|
|
xenial |
Released
(4.15.0-1153.170~16.04.1)
Available with Ubuntu Pro or Ubuntu Pro (Infra-only) |
|
linux-gcp-4.15
Launchpad, Ubuntu, Debian |
bionic |
Pending
(4.15.0-1153.170)
|
focal |
Does not exist
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
noble |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(6.5~rc2, 5.4.251, 5.15.121)
|
|
xenial |
Does not exist
|
|
linux-gcp-5.11
Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Ignored
(superseded by linux-gcp-5.13)
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
noble |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Ignored
(superseded by linux-gcp-5.13)
|
|
xenial |
Does not exist
|
|
linux-gcp-5.13
Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Ignored
(superseded by linux-gcp-5.15)
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
noble |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Ignored
(superseded by linux-gcp-5.15)
|
|
xenial |
Does not exist
|
|
linux-gcp-5.15
Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Released
(5.15.0-1038.46~20.04.1)
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
noble |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(6.5~rc2, 5.4.251, 5.15.121)
|
|
xenial |
Does not exist
|
|
linux-gcp-5.19
Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Does not exist
|
|
jammy |
Released
(5.19.0-1030.32~22.04.1)
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
noble |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(6.5~rc2, 5.4.251, 5.15.121)
|
|
xenial |
Does not exist
|
|
linux-gcp-5.3
Launchpad, Ubuntu, Debian |
bionic |
Ignored
(superseded by linux-gcp-5.4)
|
focal |
Does not exist
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
noble |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Ignored
(superseded by linux-gcp-5.4)
|
|
xenial |
Does not exist
|
|
linux-gcp-5.4
Launchpad, Ubuntu, Debian |
bionic |
Released
(5.4.0-1109.118~18.04.1)
Available with Ubuntu Pro or Ubuntu Pro (Infra-only) |
focal |
Does not exist
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
noble |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(6.5~rc2, 5.4.251, 5.15.121)
|
|
xenial |
Does not exist
|
|
linux-gcp-5.8
Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Ignored
(superseded by linux-gcp-5.11)
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
noble |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Ignored
(superseded by linux-gcp-5.11)
|
|
xenial |
Does not exist
|
|
linux-gcp-6.2
Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Does not exist
|
|
jammy |
Ignored
(superseded by linux-gcp-6.5, was needs-triage)
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
noble |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(6.5~rc2, 5.4.251, 5.15.121)
|
|
xenial |
Does not exist
|
|
linux-gcp-6.5
Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Does not exist
|
|
jammy |
Not vulnerable
(6.5.0-1010.10~22.04.3)
|
|
mantic |
Does not exist
|
|
noble |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(6.5~rc2, 5.4.251, 5.15.121)
|
|
xenial |
Does not exist
|
|
linux-gcp-fips
Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Does not exist
|
|
jammy |
Does not exist
|
|
mantic |
Does not exist
|
|
noble |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(6.5~rc2, 5.4.251, 5.15.121)
|
|
xenial |
Does not exist
|
|
linux-gke
Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Released
(5.4.0-1104.111)
|
|
jammy |
Released
(5.15.0-1038.43)
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
noble |
Not vulnerable
(6.8.0-1003.5)
|
|
trusty |
Does not exist
|
|
upstream |
Released
(6.5~rc2, 5.4.251, 5.15.121)
|
|
xenial |
Ignored
(end of standard support)
|
|
linux-gke-4.15
Launchpad, Ubuntu, Debian |
bionic |
Ignored
(superseded by linux-gke-5.0, was needs-triage)
|
focal |
Does not exist
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
noble |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(6.5~rc2, 5.4.251, 5.15.121)
|
|
xenial |
Does not exist
|
|
linux-gke-5.0
Launchpad, Ubuntu, Debian |
bionic |
Ignored
(end of standard support)
|
focal |
Does not exist
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
noble |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(6.5~rc2, 5.4.251, 5.15.121)
|
|
xenial |
Does not exist
|
|
linux-gke-5.15
Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Released
(5.15.0-1038.43~20.04.1)
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
noble |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(6.5~rc2, 5.4.251, 5.15.121)
|
|
xenial |
Does not exist
|
|
linux-gke-5.3
Launchpad, Ubuntu, Debian |
bionic |
Ignored
(end of standard support)
|
focal |
Does not exist
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
noble |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Ignored
(superseded by linux-gke-5.4)
|
|
xenial |
Does not exist
|
|
linux-gke-5.4
Launchpad, Ubuntu, Debian |
bionic |
Ignored
(end of kernel support, was needs-triage)
|
focal |
Does not exist
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
noble |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(6.5~rc2, 5.4.251, 5.15.121)
|
|
xenial |
Does not exist
|
|
linux-gkeop
Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Released
(5.4.0-1073.77)
|
|
jammy |
Released
(5.15.0-1024.29)
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
noble |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(6.5~rc2, 5.4.251, 5.15.121)
|
|
xenial |
Does not exist
|
|
linux-gkeop-5.15
Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Released
(5.15.0-1024.29~20.04.1)
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
noble |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(6.5~rc2, 5.4.251, 5.15.121)
|
|
xenial |
Does not exist
|
|
linux-gkeop-5.4
Launchpad, Ubuntu, Debian |
bionic |
Ignored
(end of kernel support, was needs-triage)
|
focal |
Does not exist
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
noble |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(6.5~rc2, 5.4.251, 5.15.121)
|
|
xenial |
Does not exist
|
|
linux-hwe
Launchpad, Ubuntu, Debian |
bionic |
Ignored
(replaced by linux-hwe-5.4, was needs-triage)
|
focal |
Does not exist
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
noble |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(6.5~rc2, 5.4.251, 5.15.121)
|
|
xenial |
Released
(4.15.0-214.225~16.04.1)
Available with Ubuntu Pro or Ubuntu Pro (Infra-only) |
|
linux-hwe-5.11
Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Ignored
(superseded by linux-hwe-5.13)
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
noble |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Ignored
(superseded by linux-hwe-5.13)
|
|
xenial |
Does not exist
|
|
linux-hwe-5.13
Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Ignored
(superseded by linux-hwe-5.15)
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
noble |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Ignored
(superseded by linux-hwe-5.15)
|
|
xenial |
Does not exist
|
|
linux-hwe-5.15
Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Released
(5.15.0-78.85~20.04.1)
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
noble |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(6.5~rc2, 5.4.251, 5.15.121)
|
|
xenial |
Does not exist
|
|
linux-hwe-5.19
Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Does not exist
|
|
jammy |
Released
(5.19.0-50.50)
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
noble |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(6.5~rc2, 5.4.251, 5.15.121)
|
|
xenial |
Does not exist
|
|
linux-hwe-5.4
Launchpad, Ubuntu, Debian |
bionic |
Released
(5.4.0-155.172~18.04.1)
Available with Ubuntu Pro or Ubuntu Pro (Infra-only) |
focal |
Does not exist
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
noble |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(6.5~rc2, 5.4.251, 5.15.121)
|
|
xenial |
Does not exist
|
|
linux-hwe-5.8
Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Ignored
(superseded by linux-hwe-5.11)
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
noble |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Ignored
(superseded by linux-hwe-5.11)
|
|
xenial |
Does not exist
|
|
linux-hwe-6.2
Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Does not exist
|
|
jammy |
Released
(6.2.0-26.26~22.04.1)
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
noble |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(6.5~rc2, 5.4.251, 5.15.121)
|
|
xenial |
Does not exist
|
|
linux-hwe-6.5
Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Does not exist
|
|
jammy |
Not vulnerable
(6.5.0-14.14~22.04.1)
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
noble |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(6.5~rc2, 5.4.251, 5.15.121)
|
|
xenial |
Does not exist
|
|
linux-hwe-6.8
Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Does not exist
|
|
jammy |
Not vulnerable
(6.8.0-38.38~22.04.1)
|
|
noble |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(6.5~rc2, 5.4.251, 5.15.121)
|
|
xenial |
Does not exist
|
|
linux-hwe-edge
Launchpad, Ubuntu, Debian |
bionic |
Ignored
(superseded by linux-hwe-5.4)
|
focal |
Does not exist
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
noble |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(6.5~rc2, 5.4.251, 5.15.121)
|
|
xenial |
Ignored
(superseded by linux-hwe)
|
|
linux-ibm
Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Released
(5.4.0-1053.58)
|
|
jammy |
Released
(5.15.0-1034.37)
|
|
kinetic |
Ignored
(end of life, was needs-triage)
|
|
lunar |
Released
(6.2.0-1006.6)
|
|
mantic |
Ignored
(end of kernel support, was needed)
|
|
noble |
Not vulnerable
(6.5.0-1009.9)
|
|
trusty |
Does not exist
|
|
upstream |
Released
(6.5~rc2, 5.4.251, 5.15.121)
|
|
xenial |
Does not exist
|
|
linux-ibm-5.15
Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Released
(5.15.0-1034.37~20.04.1)
|
|
jammy |
Does not exist
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
noble |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(6.5~rc2, 5.4.251, 5.15.121)
|
|
xenial |
Does not exist
|
|
linux-ibm-5.4
Launchpad, Ubuntu, Debian |
bionic |
Released
(5.4.0-1053.58~18.04.1)
Available with Ubuntu Pro or Ubuntu Pro (Infra-only) |
focal |
Does not exist
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
noble |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(6.5~rc2, 5.4.251, 5.15.121)
|
|
xenial |
Does not exist
|
|
linux-intel
Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Does not exist
|
|
jammy |
Does not exist
|
|
mantic |
Does not exist
|
|
noble |
Not vulnerable
(6.8.0-1001.6)
|
|
trusty |
Does not exist
|
|
upstream |
Released
(6.5~rc2, 5.4.251, 5.15.121)
|
|
xenial |
Does not exist
|
|
linux-intel-5.13
Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Ignored
(end of kernel support, was needs-triage)
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
noble |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(6.5~rc2, 5.4.251, 5.15.121)
|
|
xenial |
Does not exist
|
|
linux-intel-iot-realtime
Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Does not exist
|
|
jammy |
Does not exist
|
|
noble |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(6.5~rc2, 5.4.251, 5.15.121)
|
|
xenial |
Does not exist
|
|
linux-intel-iotg
Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Does not exist
|
|
jammy |
Released
(5.15.0-1036.41)
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
noble |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(6.5~rc2, 5.4.251, 5.15.121)
|
|
xenial |
Does not exist
|
|
linux-intel-iotg-5.15
Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Released
(5.15.0-1036.41~20.04.1)
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
noble |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(6.5~rc2, 5.4.251, 5.15.121)
|
|
xenial |
Does not exist
|
|
linux-iot
Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Released
(5.4.0-1018.19)
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
noble |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(6.5~rc2, 5.4.251, 5.15.121)
|
|
xenial |
Does not exist
|
|
linux-kvm
Launchpad, Ubuntu, Debian |
bionic |
Released
(4.15.0-1143.148)
Available with Ubuntu Pro or Ubuntu Pro (Infra-only) |
focal |
Released
(5.4.0-1095.101)
|
|
jammy |
Released
(5.15.0-1038.43)
|
|
kinetic |
Ignored
(end of life, was needs-triage)
|
|
lunar |
Released
(6.2.0-1009.9)
|
|
mantic |
Does not exist
|
|
noble |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(6.5~rc2, 5.4.251, 5.15.121)
|
|
xenial |
Released
(4.4.0-1122.132)
Available with Ubuntu Pro or Ubuntu Pro (Infra-only) |
|
linux-laptop
Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Does not exist
|
|
jammy |
Does not exist
|
|
lunar |
Does not exist
|
|
mantic |
Not vulnerable
(6.5.0-1003.6)
|
|
noble |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(6.5~rc2, 5.4.251, 5.15.121)
|
|
xenial |
Does not exist
|
|
linux-lowlatency
Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Does not exist
|
|
jammy |
Released
(5.15.0-78.85)
|
|
kinetic |
Ignored
(end of life, was needs-triage)
|
|
lunar |
Released
(6.2.0-1009.9)
|
|
mantic |
Not vulnerable
(6.5.0-5.5.1)
|
|
noble |
Not vulnerable
(6.5.0-9.9.1)
|
|
trusty |
Does not exist
|
|
upstream |
Released
(6.5~rc2, 5.4.251, 5.15.121)
|
|
xenial |
Does not exist
|
|
linux-lowlatency-hwe-5.15
Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Released
(5.15.0-78.85~20.04.1)
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
noble |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(6.5~rc2, 5.4.251, 5.15.121)
|
|
xenial |
Does not exist
|
|
linux-lowlatency-hwe-5.19
Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Does not exist
|
|
jammy |
Ignored
(superseded by linux-lowlatency-hwe-6.2, was needed)
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
noble |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(6.5~rc2, 5.4.251, 5.15.121)
|
|
xenial |
Does not exist
|
|
linux-lowlatency-hwe-6.2
Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Does not exist
|
|
jammy |
Ignored
(superseded by linux-lowlatency-hwe-6.5, was needs-triage)
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
noble |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(6.5~rc2, 5.4.251, 5.15.121)
|
|
xenial |
Does not exist
|
|
linux-lowlatency-hwe-6.5
Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Does not exist
|
|
jammy |
Not vulnerable
(6.5.0-14.14.1~22.04.1)
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
noble |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(6.5~rc2, 5.4.251, 5.15.121)
|
|
xenial |
Does not exist
|
|
linux-lowlatency-hwe-6.8
Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Does not exist
|
|
jammy |
Not vulnerable
(6.8.0-38.38.1~22.04.2)
|
|
noble |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(6.5~rc2, 5.4.251, 5.15.121)
|
|
xenial |
Does not exist
|
|
linux-lts-xenial
Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Does not exist
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
noble |
Does not exist
|
|
trusty |
Released
(4.4.0-243.277~14.04.1)
Available with Ubuntu Pro or Ubuntu Pro (Infra-only) |
|
upstream |
Released
(6.5~rc2, 5.4.251, 5.15.121)
|
|
xenial |
Does not exist
|
|
linux-nvidia
Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Does not exist
|
|
jammy |
Released
(5.15.0-1029.29)
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
noble |
Not vulnerable
(6.8.0-1007.7)
|
|
trusty |
Does not exist
|
|
upstream |
Released
(6.5~rc2, 5.4.251, 5.15.121)
|
|
xenial |
Does not exist
|
|
linux-nvidia-6.2
Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Does not exist
|
|
jammy |
Ignored
(superseded by linux-nvidia-6.5, was needs-triage)
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
noble |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(6.5~rc2, 5.4.251, 5.15.121)
|
|
xenial |
Does not exist
|
|
linux-nvidia-6.5
Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Does not exist
|
|
jammy |
Not vulnerable
(6.5.0-1004.4)
|
|
mantic |
Does not exist
|
|
noble |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(6.5~rc2, 5.4.251, 5.15.121)
|
|
xenial |
Does not exist
|
|
linux-nvidia-6.8
Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Does not exist
|
|
jammy |
Not vulnerable
(6.8.0-1008.8~22.04.1)
|
|
noble |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(6.5~rc2, 5.4.251, 5.15.121)
|
|
xenial |
Does not exist
|
|
linux-nvidia-lowlatency
Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Does not exist
|
|
jammy |
Does not exist
|
|
noble |
Not vulnerable
(6.8.0-1009.9.1)
|
|
trusty |
Does not exist
|
|
upstream |
Released
(6.5~rc2, 5.4.251, 5.15.121)
|
|
xenial |
Does not exist
|
|
linux-oem
Launchpad, Ubuntu, Debian |
bionic |
Ignored
(replaced by linux-hwe-5.4, was needs-triage)
|
focal |
Does not exist
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
noble |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(6.5~rc2, 5.4.251, 5.15.121)
|
|
xenial |
Ignored
(end of standard support)
|
|
linux-oem-5.10
Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Ignored
(end of kernel support, was needs-triage)
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
noble |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(6.5~rc2, 5.4.251, 5.15.121)
|
|
xenial |
Does not exist
|
|
linux-oem-5.13
Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Ignored
(superseded by linux-oem-5.14)
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
noble |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Ignored
(superseded by linux-oem-5.14)
|
|
xenial |
Does not exist
|
|
linux-oem-5.14
Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Ignored
(end of kernel support, was needs-triage)
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
noble |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(6.5~rc2, 5.4.251, 5.15.121)
|
|
xenial |
Does not exist
|
|
linux-oem-5.17
Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Does not exist
|
|
jammy |
Released
(5.17.0-1035.36)
|
|
kinetic |
Ignored
(end of life, was needs-triage)
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
noble |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(6.5~rc2, 5.4.251, 5.15.121)
|
|
xenial |
Does not exist
|
|
linux-oem-5.6
Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Ignored
(end of kernel support, was needs-triage)
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
noble |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(6.5~rc2, 5.4.251, 5.15.121)
|
|
xenial |
Does not exist
|
|
linux-oem-6.0
Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Does not exist
|
|
jammy |
Released
(6.0.0-1020.20)
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
noble |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(6.5~rc2, 5.4.251, 5.15.121)
|
|
xenial |
Does not exist
|
|
linux-oem-6.1
Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Does not exist
|
|
jammy |
Released
(6.1.0-1019.19)
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
noble |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(6.5~rc2, 5.4.251, 5.15.121)
|
|
xenial |
Does not exist
|
|
linux-oem-6.5
Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Does not exist
|
|
jammy |
Not vulnerable
(6.5.0-1003.3)
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
noble |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(6.5~rc2, 5.4.251, 5.15.121)
|
|
xenial |
Does not exist
|
|
linux-oem-6.8
Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Does not exist
|
|
jammy |
Does not exist
|
|
mantic |
Does not exist
|
|
noble |
Not vulnerable
(6.8.0-1003.3)
|
|
trusty |
Does not exist
|
|
upstream |
Released
(6.5~rc2, 5.4.251, 5.15.121)
|
|
xenial |
Does not exist
|
|
linux-oem-osp1
Launchpad, Ubuntu, Debian |
bionic |
Ignored
(end of standard support)
|
focal |
Does not exist
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
noble |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(6.5~rc2, 5.4.251, 5.15.121)
|
|
xenial |
Does not exist
|
|
linux-oracle
Launchpad, Ubuntu, Debian |
bionic |
Released
(4.15.0-1122.133)
Available with Ubuntu Pro or Ubuntu Pro (Infra-only) |
focal |
Released
(5.4.0-1105.114)
|
|
jammy |
Released
(5.15.0-1039.45)
|
|
kinetic |
Ignored
(end of life, was needs-triage)
|
|
lunar |
Released
(6.2.0-1008.8)
|
|
mantic |
Not vulnerable
(6.5.0-1005.5)
|
|
noble |
Not vulnerable
(6.5.0-1010.10)
|
|
trusty |
Does not exist
|
|
upstream |
Released
(6.5~rc2, 5.4.251, 5.15.121)
|
|
xenial |
Released
(4.15.0-1122.133~16.04.1)
Available with Ubuntu Pro or Ubuntu Pro (Infra-only) |
|
linux-oracle-5.0
Launchpad, Ubuntu, Debian |
bionic |
Ignored
(superseded by linux-oracle-5.3)
|
focal |
Does not exist
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
noble |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(6.5~rc2, 5.4.251, 5.15.121)
|
|
xenial |
Does not exist
|
|
linux-oracle-5.11
Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Ignored
(superseded by linux-oracle-5.13)
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
noble |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Ignored
(superseded by linux-oracle-5.13)
|
|
xenial |
Does not exist
|
|
linux-oracle-5.13
Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Ignored
(end of kernel support, was needs-triage)
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
noble |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(6.5~rc2, 5.4.251, 5.15.121)
|
|
xenial |
Does not exist
|
|
linux-oracle-5.15
Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Released
(5.15.0-1039.45~20.04.1)
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
noble |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(6.5~rc2, 5.4.251, 5.15.121)
|
|
xenial |
Does not exist
|
|
linux-oracle-5.3
Launchpad, Ubuntu, Debian |
bionic |
Ignored
(superseded by linux-oracle-5.4)
|
focal |
Does not exist
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
noble |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Ignored
(superseded by linux-oracle-5.4)
|
|
xenial |
Does not exist
|
|
linux-oracle-5.4
Launchpad, Ubuntu, Debian |
bionic |
Released
(5.4.0-1105.114~18.04.1)
Available with Ubuntu Pro or Ubuntu Pro (Infra-only) |
focal |
Does not exist
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
noble |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(6.5~rc2, 5.4.251, 5.15.121)
|
|
xenial |
Does not exist
|
|
linux-oracle-5.8
Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Ignored
(superseded by linux-oracle-5.11)
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
noble |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Ignored
(superseded by linux-oracle-5.11)
|
|
xenial |
Does not exist
|
|
linux-oracle-6.5
Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Does not exist
|
|
jammy |
Not vulnerable
(6.5.0-1013.13~22.04.4)
|
|
mantic |
Does not exist
|
|
noble |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(6.5~rc2, 5.4.251, 5.15.121)
|
|
xenial |
Does not exist
|
|
linux-raspi
Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Released
(5.4.0-1090.101)
|
|
jammy |
Released
(5.15.0-1034.37)
|
|
kinetic |
Ignored
(end of life, was needs-triage)
|
|
lunar |
Released
(6.2.0-1009.11)
|
|
mantic |
Not vulnerable
(6.5.0-1002.2)
|
|
noble |
Not vulnerable
(6.5.0-1005.7)
|
|
trusty |
Does not exist
|
|
upstream |
Released
(6.5~rc2, 5.4.251, 5.15.121)
|
|
xenial |
Does not exist
|
|
linux-raspi-5.4
Launchpad, Ubuntu, Debian |
bionic |
Released
(5.4.0-1090.101~18.04.1)
Available with Ubuntu Pro or Ubuntu Pro (Infra-only) |
focal |
Does not exist
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
noble |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(6.5~rc2, 5.4.251, 5.15.121)
|
|
xenial |
Does not exist
|
|
linux-raspi-realtime
Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Does not exist
|
|
jammy |
Does not exist
|
|
noble |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(6.5~rc2, 5.4.251, 5.15.121)
|
|
xenial |
Does not exist
|
|
linux-raspi2
Launchpad, Ubuntu, Debian |
bionic |
Ignored
(end of standard support)
|
focal |
Ignored
(replaced by linux-raspi)
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
noble |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(6.5~rc2, 5.4.251, 5.15.121)
|
|
xenial |
Ignored
(end of standard support)
|
|
linux-raspi2-5.3
Launchpad, Ubuntu, Debian |
bionic |
Ignored
(end of standard support)
|
focal |
Does not exist
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
noble |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Ignored
(superseded by linux-raspi2-5.4)
|
|
xenial |
Does not exist
|
|
linux-realtime
Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Does not exist
|
|
jammy |
Ignored
(superseded by Ubuntu Pro ppa version)
|
|
noble |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(6.5~rc2, 5.4.251, 5.15.121)
|
|
xenial |
Does not exist
|
|
linux-riscv
Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Ignored
(superseded by linux-riscv-5.8)
|
|
jammy |
Ignored
(end of kernel support, was needs-triage)
|
|
kinetic |
Ignored
(end of life, was needs-triage)
|
|
lunar |
Ignored
(end of life, was pending [6.2.0-27.28.1])
|
|
mantic |
Not vulnerable
(6.5.0-9.9.1)
|
|
noble |
Not vulnerable
(6.5.0-9.9.1)
|
|
trusty |
Does not exist
|
|
upstream |
Released
(6.5~rc2, 5.4.251, 5.15.121)
|
|
xenial |
Does not exist
|
|
linux-riscv-5.11
Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Ignored
(superseded by linux-riscv-5.13)
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
noble |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Ignored
(superseded by linux-riscv-5.13)
|
|
xenial |
Does not exist
|
|
linux-riscv-5.15
Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Released
(5.15.0-1037.41~20.04.2)
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
noble |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(6.5~rc2, 5.4.251, 5.15.121)
|
|
xenial |
Does not exist
|
|
linux-riscv-5.19
Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Does not exist
|
|
jammy |
Ignored
(end of kernel support, was needed)
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
noble |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(6.5~rc2, 5.4.251, 5.15.121)
|
|
xenial |
Does not exist
|
|
linux-riscv-5.8
Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Ignored
(superseded by linux-riscv-5.11)
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
noble |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Ignored
(superseded by linux-riscv-5.11)
|
|
xenial |
Does not exist
|
|
linux-riscv-6.5
Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Does not exist
|
|
jammy |
Not vulnerable
(6.5.0-17.17.1.1~22.04.1)
|
|
mantic |
Does not exist
|
|
noble |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(6.5~rc2, 5.4.251, 5.15.121)
|
|
xenial |
Does not exist
|
|
linux-riscv-6.8
Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Does not exist
|
|
jammy |
Not vulnerable
(6.8.0-38.38.1~22.04.1)
|
|
noble |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(6.5~rc2, 5.4.251, 5.15.121)
|
|
xenial |
Does not exist
|
|
linux-snapdragon
Launchpad, Ubuntu, Debian |
bionic |
Ignored
(end of standard support)
|
focal |
Does not exist
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
noble |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(6.5~rc2, 5.4.251, 5.15.121)
|
|
xenial |
Ignored
(end of standard support)
|
|
linux-starfive
Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Does not exist
|
|
jammy |
Does not exist
|
|
mantic |
Not vulnerable
(6.5.0-1002.3)
|
|
noble |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(6.5~rc2, 5.4.251, 5.15.121)
|
|
xenial |
Does not exist
|
|
linux-starfive-6.2
Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Does not exist
|
|
jammy |
Not vulnerable
(6.2.0-1006.7~22.04.1)
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
noble |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(6.5~rc2, 5.4.251, 5.15.121)
|
|
xenial |
Does not exist
|
|
linux-starfive-6.5
Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Does not exist
|
|
jammy |
Not vulnerable
(6.5.0-1007.8~22.04.1)
|
|
mantic |
Does not exist
|
|
noble |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(6.5~rc2, 5.4.251, 5.15.121)
|
|
xenial |
Does not exist
|
|
linux-xilinx-zynqmp
Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Released
(5.4.0-1026.30)
|
|
jammy |
Released
(5.15.0-1025.29)
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
noble |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(6.5~rc2, 5.4.251, 5.15.121)
|
|
xenial |
Does not exist
|
Severity score breakdown
Parameter | Value |
---|---|
Base score | 7.8 |
Attack vector | Local |
Attack complexity | Low |
Privileges required | Low |
User interaction | None |
Scope | Unchanged |
Confidentiality | High |
Integrity impact | High |
Availability impact | High |
Vector | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
References
- https://lore.kernel.org/netfilter-devel/20230705121515.747251-1-cascardo@canonical.com/T/
- https://www.openwall.com/lists/oss-security/2023/07/05/3
- https://www.zerodayinitiative.com/advisories/ZDI-23-900/
- https://ubuntu.com/security/notices/USN-6246-1
- https://ubuntu.com/security/notices/USN-6247-1
- https://ubuntu.com/security/notices/USN-6248-1
- https://ubuntu.com/security/notices/USN-6250-1
- https://ubuntu.com/security/notices/USN-6251-1
- https://ubuntu.com/security/notices/USN-6252-1
- https://ubuntu.com/security/notices/USN-6254-1
- https://ubuntu.com/security/notices/USN-6255-1
- https://ubuntu.com/security/notices/USN-6260-1
- https://ubuntu.com/security/notices/USN-6261-1
- https://ubuntu.com/security/notices/USN-6285-1
- https://ubuntu.com/security/notices/USN-6460-1
- https://www.cve.org/CVERecord?id=CVE-2023-35001
- https://ubuntu.com/security/notices/LSN-0096-1
- https://ubuntu.com/security/notices/LSN-0097-1
- NVD
- Launchpad
- Debian