CVE-2023-4194

Published: 7 August 2023

A flaw was found in the Linux kernel's TUN/TAP functionality. This issue could allow a local user to bypass network filters and gain unauthorized access to some resources. The original patches fixing CVE-2023-1076 are incorrect or incomplete. The problem is that the following upstream commits - a096ccca6e50 ("tun: tun_chr_open(): correctly initialize socket uid"), - 66b2c338adce ("tap: tap_open(): correctly initialize socket uid"), pass "inode->i_uid" to sock_init_data_uid() as the last parameter and that turns out to not be accurate.

From the Ubuntu Security Team

It was discovered that the TUN/TAP driver in the Linux kernel did not properly initialize socket data. A local attacker could use this to cause a denial of service (system crash).

Notes

Author	Note
rodrigo-zaiden	incomplete fix from CVE-2023-1076.

Priority

Cvss 3 Severity Score

5.5

Score breakdown

Status

Package	Release	Status
linux Launchpad, Ubuntu, Debian	bionic	Not vulnerable (4.13.0-16.19)
	focal	Pending (5.4.0-164.181)
	jammy	Pending (5.15.0-86.96)
	lunar	Pending (6.2.0-34.34)
	trusty	Not vulnerable (3.11.0-12.19)
	upstream	Released (6.5~rc5)
	xenial	Not vulnerable (4.4.0-2.16)
	Patches: Introduced by a096ccca6e503a5c575717ff8a36ace27510ab0a Fixed by 9bc3047374d5bec163e83e743709e23753376f0c Introduced by 66b2c338adce580dfce2199591e65e2bab889cff Fixed by 5c9241f3ceab3257abe2923a59950db0dc8bb737
linux-hwe Launchpad, Ubuntu, Debian	trusty	Does not exist
	bionic	Needs triage
	focal	Does not exist
	jammy	Does not exist
	lunar	Does not exist
	upstream	Released (6.5~rc5)
	xenial	Not vulnerable (4.8.0-39.42~16.04.1)
linux-hwe-5.4 Launchpad, Ubuntu, Debian	trusty	Does not exist
	xenial	Does not exist
	focal	Does not exist
	jammy	Does not exist
	lunar	Does not exist
	bionic	Pending (5.4.0-164.181~18.04.1)
	upstream	Released (6.5~rc5)
linux-hwe-5.8 Launchpad, Ubuntu, Debian	trusty	Does not exist
	xenial	Does not exist
	bionic	Does not exist
	focal	Ignored (superseded by linux-hwe-5.11)
	jammy	Does not exist
	lunar	Does not exist
	upstream	Ignored (superseded by linux-hwe-5.11)
linux-hwe-5.11 Launchpad, Ubuntu, Debian	trusty	Does not exist
	xenial	Does not exist
	bionic	Does not exist
	focal	Ignored (superseded by linux-hwe-5.13)
	jammy	Does not exist
	lunar	Does not exist
	upstream	Ignored (superseded by linux-hwe-5.13)
linux-hwe-5.13 Launchpad, Ubuntu, Debian	trusty	Does not exist
	xenial	Does not exist
	bionic	Does not exist
	focal	Ignored (superseded by linux-hwe-5.15)
	jammy	Does not exist
	lunar	Does not exist
	upstream	Ignored (superseded by linux-hwe-5.15)
linux-hwe-5.15 Launchpad, Ubuntu, Debian	trusty	Does not exist
	xenial	Does not exist
	bionic	Does not exist
	jammy	Does not exist
	lunar	Does not exist
	upstream	Released (6.5~rc5)
	focal	Pending (5.15.0-86.96~20.04.1)
linux-hwe-5.19 Launchpad, Ubuntu, Debian	trusty	Does not exist
	xenial	Does not exist
	bionic	Does not exist
	focal	Does not exist
	lunar	Does not exist
	upstream	Released (6.5~rc5)
	jammy	Ignored (end of life, was pending)
linux-hwe-edge Launchpad, Ubuntu, Debian	trusty	Does not exist
	xenial	Ignored (superseded by linux-hwe)
	bionic	Ignored (superseded by linux-hwe-5.4)
	focal	Does not exist
	jammy	Does not exist
	lunar	Does not exist
	upstream	Released (6.5~rc5)
linux-lts-xenial Launchpad, Ubuntu, Debian	xenial	Does not exist
	bionic	Does not exist
	focal	Does not exist
	jammy	Does not exist
	lunar	Does not exist
	trusty	Not vulnerable (4.4.0-13.29~14.04.1)
	upstream	Released (6.5~rc5)
linux-kvm Launchpad, Ubuntu, Debian	trusty	Does not exist
	bionic	Not vulnerable (4.15.0-1002.2)
	focal	Pending (5.4.0-1100.106)
	jammy	Pending (5.15.0-1044.49)
	upstream	Released (6.5~rc5)
	xenial	Not vulnerable (4.4.0-1004.9)
	lunar	Pending (6.2.0-1014.14)
linux-allwinner Launchpad, Ubuntu, Debian	trusty	Does not exist
	xenial	Does not exist
	bionic	Does not exist
	focal	Does not exist
	jammy	Does not exist
	lunar	Ignored (end of life, was needs-triage)
	upstream	Released (6.5~rc5)
linux-allwinner-5.19 Launchpad, Ubuntu, Debian	trusty	Does not exist
	xenial	Does not exist
	bionic	Does not exist
	focal	Does not exist
	lunar	Does not exist
	jammy	Ignored (end of life, was needed)
	upstream	Released (6.5~rc5)
linux-aws-5.0 Launchpad, Ubuntu, Debian	trusty	Does not exist
	xenial	Does not exist
	bionic	Ignored (superseded by linux-hwe-5.3)
	focal	Does not exist
	jammy	Does not exist
	lunar	Does not exist
	upstream	Released (6.5~rc5)
linux-aws-5.3 Launchpad, Ubuntu, Debian	trusty	Does not exist
	xenial	Does not exist
	bionic	Ignored (superseded by linux-hwe-5.4)
	focal	Does not exist
	jammy	Does not exist
	lunar	Does not exist
	upstream	Ignored (superseded by linux-aws-5.4)
linux-aws-5.4 Launchpad, Ubuntu, Debian	trusty	Does not exist
	xenial	Does not exist
	focal	Does not exist
	jammy	Does not exist
	lunar	Does not exist
	bionic	Pending (5.4.0-1111.120~18.04.1)
	upstream	Released (6.5~rc5)
linux-aws-5.8 Launchpad, Ubuntu, Debian	trusty	Does not exist
	xenial	Does not exist
	bionic	Does not exist
	focal	Ignored (superseded by linux-aws-5.11)
	jammy	Does not exist
	lunar	Does not exist
	upstream	Ignored (superseded by linux-aws-5.11)
linux-aws-5.11 Launchpad, Ubuntu, Debian	trusty	Does not exist
	xenial	Does not exist
	bionic	Does not exist
	focal	Ignored (superseded by linux-aws-5.13)
	jammy	Does not exist
	lunar	Does not exist
	upstream	Ignored (superseded by linux-aws-5.13)
linux-aws-5.13 Launchpad, Ubuntu, Debian	trusty	Does not exist
	xenial	Does not exist
	bionic	Does not exist
	focal	Ignored (superseded by linux-aws-5.15)
	jammy	Does not exist
	lunar	Does not exist
	upstream	Ignored (superseded by linux-aws-5.15)
linux-aws-5.15 Launchpad, Ubuntu, Debian	trusty	Does not exist
	xenial	Does not exist
	bionic	Does not exist
	focal	Pending (5.15.0-1047.52~20.04.1)
	jammy	Does not exist
	lunar	Does not exist
	upstream	Released (6.5~rc5)
linux-aws-5.19 Launchpad, Ubuntu, Debian	trusty	Does not exist
	xenial	Does not exist
	bionic	Does not exist
	focal	Does not exist
	lunar	Does not exist
	jammy	Ignored (end of life, was needs-triage)
	upstream	Released (6.5~rc5)
linux-aws-hwe Launchpad, Ubuntu, Debian	trusty	Does not exist
	bionic	Does not exist
	focal	Does not exist
	jammy	Does not exist
	lunar	Does not exist
	upstream	Released (6.5~rc5)
	xenial	Not vulnerable (4.15.0-1030.31~16.04.1)
linux-azure Launchpad, Ubuntu, Debian	bionic	Ignored (superseded by linux-azure-5.3)
	focal	Pending (5.4.0-1117.124)
	jammy	Pending (5.15.0-1049.56)
	trusty	Not vulnerable (4.15.0-1023.24~14.04.1)
	upstream	Released (6.5~rc5)
	xenial	Not vulnerable (4.11.0-1009.9)
	lunar	Pending (6.2.0-1014.14)
linux-azure-4.15 Launchpad, Ubuntu, Debian	trusty	Does not exist
	xenial	Does not exist
	focal	Does not exist
	jammy	Does not exist
	lunar	Does not exist
	bionic	Not vulnerable (4.15.0-1082.92)
	upstream	Released (6.5~rc5)
linux-azure-5.3 Launchpad, Ubuntu, Debian	trusty	Does not exist
	xenial	Does not exist
	bionic	Ignored (superseded by linux-azure-5.4)
	focal	Does not exist
	jammy	Does not exist
	lunar	Does not exist
	upstream	Ignored (superseded by linux-azure-5.4)
linux-azure-5.4 Launchpad, Ubuntu, Debian	trusty	Does not exist
	xenial	Does not exist
	focal	Does not exist
	jammy	Does not exist
	lunar	Does not exist
	bionic	Pending (5.4.0-1117.124~18.04.1)
	upstream	Released (6.5~rc5)
linux-azure-5.8 Launchpad, Ubuntu, Debian	trusty	Does not exist
	xenial	Does not exist
	bionic	Does not exist
	focal	Ignored (superseded by linux-azure-5.11)
	jammy	Does not exist
	lunar	Does not exist
	upstream	Ignored (superseded by linux-azure-5.11)
linux-azure-5.11 Launchpad, Ubuntu, Debian	trusty	Does not exist
	xenial	Does not exist
	bionic	Does not exist
	focal	Ignored (superseded by linux-azure-5.13)
	jammy	Does not exist
	lunar	Does not exist
	upstream	Ignored (superseded by linux-azure-5.13)
linux-azure-5.13 Launchpad, Ubuntu, Debian	trusty	Does not exist
	xenial	Does not exist
	bionic	Does not exist
	focal	Ignored (superseded by linux-azure-5.15)
	jammy	Does not exist
	lunar	Does not exist
	upstream	Ignored (superseded by linux-azure-5.15)
linux-azure-5.15 Launchpad, Ubuntu, Debian	trusty	Does not exist
	xenial	Does not exist
	bionic	Does not exist
	jammy	Does not exist
	lunar	Does not exist
	focal	Pending (5.15.0-1049.56~20.04.1)
	upstream	Released (6.5~rc5)
linux-azure-5.19 Launchpad, Ubuntu, Debian	trusty	Does not exist
	xenial	Does not exist
	bionic	Does not exist
	focal	Does not exist
	lunar	Does not exist
	jammy	Ignored (end of life, was needs-triage)
	upstream	Released (6.5~rc5)
linux-azure-fde Launchpad, Ubuntu, Debian	trusty	Does not exist
	xenial	Does not exist
	bionic	Does not exist
	lunar	Does not exist
	focal	Ignored (end of life, was pending [5.4.0-1117.124])
	upstream	Released (6.5~rc5)
	jammy	Pending (5.15.0-1049.56)
linux-azure-fde-5.15 Launchpad, Ubuntu, Debian	trusty	Does not exist
	xenial	Does not exist
	bionic	Does not exist
	jammy	Does not exist
	lunar	Does not exist
	upstream	Released (6.5~rc5)
	focal	Pending (5.15.0-1049.56~20.04.1)
linux-azure-fde-5.19 Launchpad, Ubuntu, Debian	trusty	Does not exist
	xenial	Does not exist
	bionic	Does not exist
	focal	Does not exist
	jammy	Ignored (end of life, was needs-triage)
	lunar	Does not exist
	upstream	Released (6.5~rc5)
linux-bluefield Launchpad, Ubuntu, Debian	trusty	Does not exist
	xenial	Does not exist
	bionic	Does not exist
	lunar	Does not exist
	focal	Pending (5.4.0-1072.78)
	upstream	Released (6.5~rc5)
	jammy	Not vulnerable (5.15.0-1011.13)
linux-dell300x Launchpad, Ubuntu, Debian	trusty	Does not exist
	xenial	Does not exist
	bionic	Ignored (end of standard support)
	focal	Does not exist
	jammy	Does not exist
	lunar	Does not exist
	upstream	Released (6.5~rc5)
linux-azure-edge Launchpad, Ubuntu, Debian	trusty	Does not exist
	xenial	Does not exist
	bionic	Ignored (superseded by linux-azure-5.3)
	focal	Does not exist
	jammy	Does not exist
	lunar	Does not exist
	upstream	Released (6.5~rc5)
linux-fips Launchpad, Ubuntu, Debian	trusty	Ignored (end of standard support)
	xenial	Ignored (end of standard support)
	bionic	Does not exist
	focal	Does not exist
	jammy	Does not exist
	lunar	Does not exist
	upstream	Released (6.5~rc5)
linux-gcp Launchpad, Ubuntu, Debian	trusty	Does not exist
	bionic	Ignored (superseded by linux-gcp-5.3)
	upstream	Released (6.5~rc5)
	xenial	Not vulnerable (4.10.0-1004.4)
	focal	Pending (5.4.0-1115.124)
	jammy	Pending (5.15.0-1044.52)
	lunar	Pending (6.2.0-1016.18)
linux-gcp-4.15 Launchpad, Ubuntu, Debian	trusty	Does not exist
	xenial	Does not exist
	focal	Does not exist
	jammy	Does not exist
	lunar	Does not exist
	bionic	Not vulnerable (4.15.0-1071.81)
	upstream	Released (6.5~rc5)
linux-gcp-5.3 Launchpad, Ubuntu, Debian	trusty	Does not exist
	xenial	Does not exist
	bionic	Ignored (superseded by linux-gcp-5.4)
	focal	Does not exist
	jammy	Does not exist
	lunar	Does not exist
	upstream	Ignored (superseded by linux-gcp-5.4)
linux-gcp-5.4 Launchpad, Ubuntu, Debian	trusty	Does not exist
	xenial	Does not exist
	focal	Does not exist
	jammy	Does not exist
	lunar	Does not exist
	upstream	Released (6.5~rc5)
	bionic	Pending (5.4.0-1115.124~18.04.1)
linux-gcp-5.8 Launchpad, Ubuntu, Debian	trusty	Does not exist
	xenial	Does not exist
	bionic	Does not exist
	focal	Ignored (superseded by linux-gcp-5.11)
	jammy	Does not exist
	lunar	Does not exist
	upstream	Ignored (superseded by linux-gcp-5.11)
linux-gcp-5.11 Launchpad, Ubuntu, Debian	trusty	Does not exist
	xenial	Does not exist
	bionic	Does not exist
	focal	Ignored (superseded by linux-gcp-5.13)
	jammy	Does not exist
	lunar	Does not exist
	upstream	Ignored (superseded by linux-gcp-5.13)
linux-gcp-5.13 Launchpad, Ubuntu, Debian	trusty	Does not exist
	xenial	Does not exist
	bionic	Does not exist
	focal	Ignored (superseded by linux-gcp-5.15)
	jammy	Does not exist
	lunar	Does not exist
	upstream	Ignored (superseded by linux-gcp-5.15)
linux-gcp-5.15 Launchpad, Ubuntu, Debian	trusty	Does not exist
	xenial	Does not exist
	bionic	Does not exist
	jammy	Does not exist
	lunar	Does not exist
	upstream	Released (6.5~rc5)
	focal	Pending (5.15.0-1044.52~20.04.1)
linux-gcp-5.19 Launchpad, Ubuntu, Debian	trusty	Does not exist
	xenial	Does not exist
	bionic	Does not exist
	focal	Does not exist
	lunar	Does not exist
	jammy	Ignored (end of life, was needs-triage)
	upstream	Released (6.5~rc5)
linux-gke Launchpad, Ubuntu, Debian	trusty	Does not exist
	xenial	Ignored (end of standard support)
	bionic	Does not exist
	lunar	Does not exist
	focal	Ignored (end of life, was needs-triage)
	upstream	Released (6.5~rc5)
	jammy	Pending (5.15.0-1044.49)
linux-gke-4.15 Launchpad, Ubuntu, Debian	trusty	Does not exist
	xenial	Does not exist
	bionic	Needs triage
	focal	Does not exist
	jammy	Does not exist
	lunar	Does not exist
	upstream	Released (6.5~rc5)
linux-gke-5.0 Launchpad, Ubuntu, Debian	trusty	Does not exist
	xenial	Does not exist
	bionic	Ignored (end of standard support)
	focal	Does not exist
	jammy	Does not exist
	lunar	Does not exist
	upstream	Released (6.5~rc5)
linux-gke-5.3 Launchpad, Ubuntu, Debian	trusty	Does not exist
	xenial	Does not exist
	bionic	Ignored (end of standard support)
	focal	Does not exist
	jammy	Does not exist
	lunar	Does not exist
	upstream	Ignored (superseded by linux-gke-5.4)
linux-gke-5.4 Launchpad, Ubuntu, Debian	trusty	Does not exist
	xenial	Does not exist
	bionic	Needs triage
	focal	Does not exist
	jammy	Does not exist
	lunar	Does not exist
	upstream	Released (6.5~rc5)
linux-gke-5.15 Launchpad, Ubuntu, Debian	trusty	Does not exist
	xenial	Does not exist
	bionic	Does not exist
	focal	Ignored (end of life, was needs-triage)
	jammy	Does not exist
	lunar	Does not exist
	upstream	Released (6.5~rc5)
linux-gkeop Launchpad, Ubuntu, Debian	trusty	Does not exist
	xenial	Does not exist
	bionic	Does not exist
	lunar	Does not exist
	upstream	Released (6.5~rc5)
	focal	Pending (5.4.0-1078.82)
	jammy	Pending (5.15.0-1030.35)
linux-gkeop-5.4 Launchpad, Ubuntu, Debian	trusty	Does not exist
	xenial	Does not exist
	bionic	Needs triage
	focal	Does not exist
	jammy	Does not exist
	lunar	Does not exist
	upstream	Released (6.5~rc5)
linux-gkeop-5.15 Launchpad, Ubuntu, Debian	trusty	Does not exist
	xenial	Does not exist
	bionic	Does not exist
	jammy	Does not exist
	lunar	Does not exist
	upstream	Released (6.5~rc5)
	focal	Pending (5.15.0-1030.35~20.04.1)
linux-ibm Launchpad, Ubuntu, Debian	trusty	Does not exist
	xenial	Does not exist
	bionic	Does not exist
	lunar	Ignored (end of life, was needed)
	upstream	Released (6.5~rc5)
	jammy	Pending (5.15.0-1040.43)
	focal	Pending (5.4.0-1058.63)
linux-ibm-5.4 Launchpad, Ubuntu, Debian	trusty	Does not exist
	xenial	Does not exist
	focal	Does not exist
	jammy	Does not exist
	lunar	Does not exist
	bionic	Pending (5.4.0-1058.63~18.04.1)
	upstream	Released (6.5~rc5)
linux-intel-5.13 Launchpad, Ubuntu, Debian	trusty	Does not exist
	xenial	Does not exist
	bionic	Does not exist
	jammy	Does not exist
	lunar	Does not exist
	focal	Ignored (end of life, was needs-triage)
	upstream	Released (6.5~rc5)
linux-intel-iotg Launchpad, Ubuntu, Debian	trusty	Does not exist
	xenial	Does not exist
	bionic	Does not exist
	focal	Does not exist
	lunar	Does not exist
	upstream	Released (6.5~rc5)
	jammy	Pending (5.15.0-1042.48)
linux-intel-iotg-5.15 Launchpad, Ubuntu, Debian	trusty	Does not exist
	xenial	Does not exist
	bionic	Does not exist
	jammy	Does not exist
	lunar	Does not exist
	focal	Pending (5.15.0-1041.47~20.04.1)
	upstream	Released (6.5~rc5)
linux-iot Launchpad, Ubuntu, Debian	trusty	Does not exist
	xenial	Does not exist
	bionic	Does not exist
	jammy	Does not exist
	lunar	Does not exist
	focal	Pending (5.4.0-1023.24)
	upstream	Released (6.5~rc5)
linux-lowlatency Launchpad, Ubuntu, Debian	trusty	Does not exist
	xenial	Does not exist
	bionic	Does not exist
	focal	Does not exist
	upstream	Released (6.5~rc5)
	lunar	Pending (6.2.0-1014.14)
	jammy	Pending (5.15.0-86.95)
linux-lowlatency-hwe-5.15 Launchpad, Ubuntu, Debian	trusty	Does not exist
	xenial	Does not exist
	bionic	Does not exist
	jammy	Does not exist
	lunar	Does not exist
	upstream	Released (6.5~rc5)
	focal	Pending (5.15.0-86.95~20.04.1)
linux-lowlatency-hwe-5.19 Launchpad, Ubuntu, Debian	trusty	Does not exist
	xenial	Does not exist
	bionic	Does not exist
	focal	Does not exist
	lunar	Does not exist
	upstream	Released (6.5~rc5)
	jammy	Ignored (end of life, was needed)
linux-nvidia Launchpad, Ubuntu, Debian	trusty	Does not exist
	xenial	Does not exist
	bionic	Does not exist
	focal	Does not exist
	lunar	Does not exist
	upstream	Released (6.5~rc5)
	jammy	Pending (5.15.0-1037.37)
linux-oracle Launchpad, Ubuntu, Debian	trusty	Does not exist
	bionic	Not vulnerable (4.15.0-1007.9)
	focal	Pending (5.4.0-1110.119)
	upstream	Released (6.5~rc5)
	xenial	Not vulnerable (4.15.0-1007.9~16.04.1)
	jammy	Pending (5.15.0-1045.51)
	lunar	Pending (6.2.0-1013.13)
linux-oracle-5.0 Launchpad, Ubuntu, Debian	trusty	Does not exist
	xenial	Does not exist
	bionic	Ignored (superseded by linux-oracle-5.3)
	focal	Does not exist
	jammy	Does not exist
	lunar	Does not exist
	upstream	Released (6.5~rc5)
linux-oracle-5.3 Launchpad, Ubuntu, Debian	trusty	Does not exist
	xenial	Does not exist
	bionic	Ignored (superseded by linux-oracle-5.4)
	focal	Does not exist
	jammy	Does not exist
	lunar	Does not exist
	upstream	Ignored (superseded by linux-oracle-5.4)
linux-oracle-5.4 Launchpad, Ubuntu, Debian	trusty	Does not exist
	xenial	Does not exist
	focal	Does not exist
	jammy	Does not exist
	lunar	Does not exist
	upstream	Released (6.5~rc5)
	bionic	Pending (5.4.0-1110.119~18.04.1)
linux-oracle-5.8 Launchpad, Ubuntu, Debian	trusty	Does not exist
	xenial	Does not exist
	bionic	Does not exist
	focal	Ignored (superseded by linux-oracle-5.11)
	jammy	Does not exist
	lunar	Does not exist
	upstream	Ignored (superseded by linux-oracle-5.11)
linux-oracle-5.11 Launchpad, Ubuntu, Debian	trusty	Does not exist
	xenial	Does not exist
	bionic	Does not exist
	focal	Ignored (superseded by linux-oracle-5.13)
	jammy	Does not exist
	lunar	Does not exist
	upstream	Ignored (superseded by linux-oracle-5.13)
linux-oracle-5.13 Launchpad, Ubuntu, Debian	trusty	Does not exist
	xenial	Does not exist
	bionic	Does not exist
	jammy	Does not exist
	lunar	Does not exist
	focal	Ignored (end of life, was needs-triage)
	upstream	Released (6.5~rc5)
linux-oracle-5.15 Launchpad, Ubuntu, Debian	trusty	Does not exist
	xenial	Does not exist
	bionic	Does not exist
	jammy	Does not exist
	lunar	Does not exist
	upstream	Released (6.5~rc5)
	focal	Pending (5.15.0-1045.51~20.04.1)
linux-oem Launchpad, Ubuntu, Debian	trusty	Does not exist
	xenial	Ignored (end of standard support)
	bionic	Needs triage
	focal	Does not exist
	jammy	Does not exist
	lunar	Does not exist
	upstream	Released (6.5~rc5)
linux-oem-5.6 Launchpad, Ubuntu, Debian	trusty	Does not exist
	xenial	Does not exist
	bionic	Does not exist
	jammy	Does not exist
	lunar	Does not exist
	focal	Ignored (end of life, was needs-triage)
	upstream	Released (6.5~rc5)
linux-oem-5.10 Launchpad, Ubuntu, Debian	trusty	Does not exist
	xenial	Does not exist
	bionic	Does not exist
	jammy	Does not exist
	lunar	Does not exist
	upstream	Released (6.5~rc5)
	focal	Ignored (end of life, was needs-triage)
linux-oem-5.13 Launchpad, Ubuntu, Debian	trusty	Does not exist
	xenial	Does not exist
	bionic	Does not exist
	focal	Ignored (superseded by linux-oem-5.14)
	jammy	Does not exist
	lunar	Does not exist
	upstream	Ignored (superseded by linux-oem-5.14)
linux-oem-5.14 Launchpad, Ubuntu, Debian	trusty	Does not exist
	xenial	Does not exist
	bionic	Does not exist
	jammy	Does not exist
	lunar	Does not exist
	upstream	Released (6.5~rc5)
	focal	Ignored (end of life, was needs-triage)
linux-oem-5.17 Launchpad, Ubuntu, Debian	trusty	Does not exist
	xenial	Does not exist
	bionic	Does not exist
	focal	Does not exist
	lunar	Does not exist
	jammy	Not vulnerable (5.17.0-1003.3)
	upstream	Released (6.5~rc5)
linux-oem-6.0 Launchpad, Ubuntu, Debian	trusty	Does not exist
	xenial	Does not exist
	bionic	Does not exist
	focal	Does not exist
	lunar	Does not exist
	jammy	Not vulnerable (6.0.0-1006.6)
	upstream	Released (6.5~rc5)
linux-oem-6.1 Launchpad, Ubuntu, Debian	trusty	Does not exist
	xenial	Does not exist
	bionic	Does not exist
	focal	Does not exist
	lunar	Does not exist
	upstream	Released (6.5~rc5)
	jammy	Released (6.1.0-1021.21)
linux-oem-osp1 Launchpad, Ubuntu, Debian	trusty	Does not exist
	xenial	Does not exist
	bionic	Ignored (end of standard support)
	focal	Does not exist
	jammy	Does not exist
	lunar	Does not exist
	upstream	Released (6.5~rc5)
linux-raspi Launchpad, Ubuntu, Debian	trusty	Does not exist
	xenial	Does not exist
	bionic	Does not exist
	upstream	Released (6.5~rc5)
	focal	Pending (5.4.0-1095.106)
	jammy	Pending (5.15.0-1040.43)
	lunar	Pending (6.2.0-1014.16)
linux-raspi2 Launchpad, Ubuntu, Debian	trusty	Does not exist
	xenial	Ignored (end of standard support)
	bionic	Ignored (end of standard support)
	focal	Ignored (replaced by linux-raspi)
	jammy	Does not exist
	lunar	Does not exist
	upstream	Released (6.5~rc5)
linux-raspi2-5.3 Launchpad, Ubuntu, Debian	trusty	Does not exist
	xenial	Does not exist
	bionic	Ignored (end of standard support)
	focal	Does not exist
	jammy	Does not exist
	lunar	Does not exist
	upstream	Ignored (superseded by linux-raspi2-5.4)
linux-raspi-5.4 Launchpad, Ubuntu, Debian	trusty	Does not exist
	xenial	Does not exist
	focal	Does not exist
	jammy	Does not exist
	lunar	Does not exist
	upstream	Released (6.5~rc5)
	bionic	Pending (5.4.0-1095.106~18.04.1)
linux-riscv Launchpad, Ubuntu, Debian	trusty	Does not exist
	xenial	Does not exist
	bionic	Does not exist
	focal	Ignored (superseded by linux-riscv-5.8)
	jammy	Ignored (end of life, was needs-triage)
	upstream	Released (6.5~rc5)
	lunar	Pending (6.2.0-34.34.1)
linux-riscv-5.8 Launchpad, Ubuntu, Debian	trusty	Does not exist
	xenial	Does not exist
	bionic	Does not exist
	focal	Ignored (superseded by linux-riscv-5.11)
	jammy	Does not exist
	lunar	Does not exist
	upstream	Ignored (superseded by linux-riscv-5.11)
linux-riscv-5.11 Launchpad, Ubuntu, Debian	trusty	Does not exist
	xenial	Does not exist
	bionic	Does not exist
	focal	Ignored (superseded by linux-riscv-5.13)
	jammy	Does not exist
	lunar	Does not exist
	upstream	Ignored (superseded by linux-riscv-5.13)
linux-riscv-5.15 Launchpad, Ubuntu, Debian	trusty	Does not exist
	xenial	Does not exist
	bionic	Does not exist
	jammy	Does not exist
	lunar	Does not exist
	upstream	Released (6.5~rc5)
	focal	Pending (5.15.0-1043.47~20.04.1)
linux-riscv-5.19 Launchpad, Ubuntu, Debian	trusty	Does not exist
	xenial	Does not exist
	bionic	Does not exist
	focal	Does not exist
	lunar	Does not exist
	jammy	Ignored (end of life, was needs-triage)
	upstream	Released (6.5~rc5)
linux-snapdragon Launchpad, Ubuntu, Debian	trusty	Does not exist
	xenial	Ignored (end of standard support)
	bionic	Ignored (end of standard support)
	focal	Does not exist
	jammy	Does not exist
	lunar	Does not exist
	upstream	Released (6.5~rc5)
linux-starfive Launchpad, Ubuntu, Debian	trusty	Does not exist
	xenial	Does not exist
	bionic	Does not exist
	focal	Does not exist
	jammy	Does not exist
	upstream	Released (6.5~rc5)
	lunar	Pending (6.2.0-1006.7)
linux-starfive-5.19 Launchpad, Ubuntu, Debian	trusty	Does not exist
	xenial	Does not exist
	bionic	Does not exist
	focal	Does not exist
	lunar	Does not exist
	jammy	Ignored (end of life, was needs-triage)
	upstream	Released (6.5~rc5)
linux-xilinx-zynqmp Launchpad, Ubuntu, Debian	trusty	Does not exist
	xenial	Does not exist
	bionic	Does not exist
	lunar	Does not exist
	jammy	Ignored (end of life, was needs-triage)
	upstream	Released (6.5~rc5)
	focal	Pending (5.4.0-1031.35)
linux-aws-6.2 Launchpad, Ubuntu, Debian	trusty	Does not exist
	xenial	Does not exist
	bionic	Does not exist
	focal	Does not exist
	jammy	Pending (6.2.0-1013.13~22.04.1)
	lunar	Does not exist
	upstream	Released (6.5~rc5)
linux-hwe-6.2 Launchpad, Ubuntu, Debian	trusty	Does not exist
	xenial	Does not exist
	bionic	Does not exist
	focal	Does not exist
	jammy	Pending (6.2.0-34.34~22.04.1)
	lunar	Does not exist
	upstream	Released (6.5~rc5)
linux-lowlatency-hwe-6.2 Launchpad, Ubuntu, Debian	trusty	Does not exist
	xenial	Does not exist
	bionic	Does not exist
	focal	Does not exist
	jammy	Pending (6.2.0-1014.14~22.04.1)
	lunar	Does not exist
	upstream	Released (6.5~rc5)
linux-ibm-5.15 Launchpad, Ubuntu, Debian	trusty	Does not exist
	xenial	Does not exist
	bionic	Does not exist
	jammy	Does not exist
	lunar	Does not exist
	upstream	Released (6.5~rc5)
	focal	Pending (5.15.0-1040.43~20.04.1)
linux-gcp-6.2 Launchpad, Ubuntu, Debian	trusty	Does not exist
	xenial	Does not exist
	bionic	Does not exist
	focal	Does not exist
	jammy	Pending (6.2.0-1015.15~22.04.1)
	lunar	Does not exist
	upstream	Released (6.5~rc5)
linux-aws Launchpad, Ubuntu, Debian	bionic	Not vulnerable (4.15.0-1001.1)
	focal	Pending (5.4.0-1111.120)
	jammy	Pending (5.15.0-1047.52)
	lunar	Pending (6.2.0-1013.13)
	trusty	Not vulnerable (4.4.0-1002.2)
	upstream	Released (6.5~rc5)
	xenial	Not vulnerable (4.4.0-1001.10)
linux-azure-6.2 Launchpad, Ubuntu, Debian	trusty	Does not exist
	xenial	Does not exist
	bionic	Does not exist
	focal	Does not exist
	lunar	Does not exist
	upstream	Released (6.5~rc5)
	jammy	Pending (6.2.0-1014.14~22.04.1)
linux-azure-fde-6.2 Launchpad, Ubuntu, Debian	trusty	Does not exist
	xenial	Does not exist
	bionic	Does not exist
	focal	Does not exist
	lunar	Does not exist
	upstream	Released (6.5~rc5)
	jammy	Pending (6.2.0-1014.14~22.04.1)

Severity score breakdown

Parameter	Value
Base score	5.5
Attack vector	Local
Attack complexity	Low
Privileges required	Low
User interaction	None
Scope	Unchanged
Confidentiality	None
Integrity impact	High
Availability impact	None
Vector	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

References

Bugs

Join the discussion

Canonical is offering Expanded Security Maintenance

Canonical is offering Ubuntu Expanded Security Maintenance (ESM) for security fixes and essential packages.

Find out more about ESM ›