Your submission was sent successfully! Close

You have successfully unsubscribed! Close

Thank you for signing up for our newsletter!
In these regular emails you will find the latest updates about Ubuntu and upcoming events where you can meet our team.Close

CVE-2023-52610

Published: 18 March 2024

In the Linux kernel, the following vulnerability has been resolved: net/sched: act_ct: fix skb leak and crash on ooo frags act_ct adds skb->users before defragmentation. If frags arrive in order, the last frag's reference is reset in: inet_frag_reasm_prepare skb_morph which is not straightforward. However when frags arrive out of order, nobody unref the last frag, and all frags are leaked. The situation is even worse, as initiating packet capture can lead to a crash[0] when skb has been cloned and shared at the same time. Fix the issue by removing skb_get() before defragmentation. act_ct returns TC_ACT_CONSUMED when defrag failed or in progress. [0]: [ 843.804823] ------------[ cut here ]------------ [ 843.809659] kernel BUG at net/core/skbuff.c:2091! [ 843.814516] invalid opcode: 0000 [#1] PREEMPT SMP [ 843.819296] CPU: 7 PID: 0 Comm: swapper/7 Kdump: loaded Tainted: G S 6.7.0-rc3 #2 [ 843.824107] Hardware name: XFUSION 1288H V6/BC13MBSBD, BIOS 1.29 11/25/2022 [ 843.828953] RIP: 0010:pskb_expand_head+0x2ac/0x300 [ 843.833805] Code: 8b 70 28 48 85 f6 74 82 48 83 c6 08 bf 01 00 00 00 e8 38 bd ff ff 8b 83 c0 00 00 00 48 03 83 c8 00 00 00 e9 62 ff ff ff 0f 0b <0f> 0b e8 8d d0 ff ff e9 b3 fd ff ff 81 7c 24 14 40 01 00 00 4c 89 [ 843.843698] RSP: 0018:ffffc9000cce07c0 EFLAGS: 00010202 [ 843.848524] RAX: 0000000000000002 RBX: ffff88811a211d00 RCX: 0000000000000820 [ 843.853299] RDX: 0000000000000640 RSI: 0000000000000000 RDI: ffff88811a211d00 [ 843.857974] RBP: ffff888127d39518 R08: 00000000bee97314 R09: 0000000000000000 [ 843.862584] R10: 0000000000000000 R11: ffff8881109f0000 R12: 0000000000000880 [ 843.867147] R13: ffff888127d39580 R14: 0000000000000640 R15: ffff888170f7b900 [ 843.871680] FS: 0000000000000000(0000) GS:ffff889ffffc0000(0000) knlGS:0000000000000000 [ 843.876242] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 843.880778] CR2: 00007fa42affcfb8 CR3: 000000011433a002 CR4: 0000000000770ef0 [ 843.885336] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 843.889809] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 843.894229] PKRU: 55555554 [ 843.898539] Call Trace: [ 843.902772] <IRQ> [ 843.906922] ? __die_body+0x1e/0x60 [ 843.911032] ? die+0x3c/0x60 [ 843.915037] ? do_trap+0xe2/0x110 [ 843.918911] ? pskb_expand_head+0x2ac/0x300 [ 843.922687] ? do_error_trap+0x65/0x80 [ 843.926342] ? pskb_expand_head+0x2ac/0x300 [ 843.929905] ? exc_invalid_op+0x50/0x60 [ 843.933398] ? pskb_expand_head+0x2ac/0x300 [ 843.936835] ? asm_exc_invalid_op+0x1a/0x20 [ 843.940226] ? pskb_expand_head+0x2ac/0x300 [ 843.943580] inet_frag_reasm_prepare+0xd1/0x240 [ 843.946904] ip_defrag+0x5d4/0x870 [ 843.950132] nf_ct_handle_fragments+0xec/0x130 [nf_conntrack] [ 843.953334] tcf_ct_act+0x252/0xd90 [act_ct] [ 843.956473] ? tcf_mirred_act+0x516/0x5a0 [act_mirred] [ 843.959657] tcf_action_exec+0xa1/0x160 [ 843.962823] fl_classify+0x1db/0x1f0 [cls_flower] [ 843.966010] ? skb_clone+0x53/0xc0 [ 843.969173] tcf_classify+0x24d/0x420 [ 843.972333] tc_run+0x8f/0xf0 [ 843.975465] __netif_receive_skb_core+0x67a/0x1080 [ 843.978634] ? dev_gro_receive+0x249/0x730 [ 843.981759] __netif_receive_skb_list_core+0x12d/0x260 [ 843.984869] netif_receive_skb_list_internal+0x1cb/0x2f0 [ 843.987957] ? mlx5e_handle_rx_cqe_mpwrq_rep+0xfa/0x1a0 [mlx5_core] [ 843.991170] napi_complete_done+0x72/0x1a0 [ 843.994305] mlx5e_napi_poll+0x28c/0x6d0 [mlx5_core] [ 843.997501] __napi_poll+0x25/0x1b0 [ 844.000627] net_rx_action+0x256/0x330 [ 844.003705] __do_softirq+0xb3/0x29b [ 844.006718] irq_exit_rcu+0x9e/0xc0 [ 844.009672] common_interrupt+0x86/0xa0 [ 844.012537] </IRQ> [ 844.015285] <TASK> [ 844.017937] asm_common_interrupt+0x26/0x40 [ 844.020591] RIP: 0010:acpi_safe_halt+0x1b/0x20 [ 844.023247] Code: ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 65 48 8b 04 25 00 18 03 00 48 8b 00 a8 08 75 0c 66 90 0f 00 2d 81 d0 44 00 fb ---truncated---

Notes

AuthorNote
rodrigo-zaiden
USN-6765-1 for linux-oem-6.5 wrongly stated that this CVE
was fixed in version 6.5.0-1022.23. The mentioned notice was revoked and
the state of the fix for linux-oem-6.5 was recovered to the previous
state.

Priority

Medium

Status

Package Release Status
linux
Launchpad, Ubuntu, Debian
bionic Not vulnerable
(4.13.0-16.19)
focal Needed

jammy
Released (5.15.0-102.112)
mantic
Released (6.5.0-41.41)
noble Not vulnerable
(6.8.0-11.11)
trusty Not vulnerable
(3.11.0-12.19)
upstream
Released (6.8~rc1)
xenial Not vulnerable
(4.4.0-2.16)
Patches:
Introduced by

b57dc7c13ea90e09ae15f821d2583fa0231b4935

Fixed by 3f14b377d01d8357eba032b4cabc8c1149b458b6
linux-allwinner-5.19
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Ignored
(end of kernel support)
mantic Does not exist

noble Does not exist

upstream Ignored
(end of life)
linux-aws
Launchpad, Ubuntu, Debian
bionic Not vulnerable
(4.15.0-1001.1)
focal Needed

jammy
Released (5.15.0-1057.63)
mantic
Released (6.5.0-1021.21)
noble Not vulnerable
(6.8.0-1001.1)
trusty Not vulnerable
(4.4.0-1002.2)
upstream
Released (6.8~rc1)
xenial Not vulnerable
(4.4.0-1001.10)
linux-aws-5.0
Launchpad, Ubuntu, Debian
bionic Ignored
(superseded by linux-aws-5.3)
focal Does not exist

jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-aws-5.3)
linux-aws-5.11
Launchpad, Ubuntu, Debian
focal Ignored
(superseded by linux-aws-5.13)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-aws-5.13)
linux-aws-5.13
Launchpad, Ubuntu, Debian
focal Ignored
(superseded by linux-aws-5.15)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-aws-5.15)
linux-aws-5.15
Launchpad, Ubuntu, Debian
focal
Released (5.15.0-1057.63~20.04.1)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream
Released (6.8~rc1)
linux-aws-5.19
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Ignored
(superseded by linux-aws-6.2)
mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-aws-6.2)
linux-aws-5.3
Launchpad, Ubuntu, Debian
bionic Ignored
(superseded by linux-aws-5.4)
focal Does not exist

jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-aws-5.4)
linux-aws-5.4
Launchpad, Ubuntu, Debian
bionic Ignored
(ESM criteria, was needed)
focal Does not exist

jammy Does not exist

mantic Does not exist

noble Does not exist

upstream
Released (6.8~rc1)
linux-aws-5.8
Launchpad, Ubuntu, Debian
focal Ignored
(superseded by linux-aws-5.11)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-aws-5.11)
linux-aws-6.2
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Ignored
(superseded by linux-aws-6.5)
mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-aws-6.5)
linux-aws-6.5
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Pending
(6.5.0-1021.21~22.04.1)
mantic Does not exist

noble Does not exist

upstream
Released (6.8~rc1)
linux-aws-fips
Launchpad, Ubuntu, Debian
bionic Does not exist

focal Does not exist

jammy Does not exist

mantic Does not exist

noble Does not exist

trusty Does not exist

upstream
Released (6.8~rc1)
xenial Does not exist

linux-aws-hwe
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Does not exist

mantic Does not exist

noble Does not exist

upstream
Released (6.8~rc1)
xenial Not vulnerable
(4.15.0-1030.31~16.04.1)
linux-azure
Launchpad, Ubuntu, Debian
bionic Ignored
(superseded by linux-azure-5.3)
focal Needed

jammy
Released (5.15.0-1060.69)
mantic
Released (6.5.0-1022.23)
noble Not vulnerable
(6.8.0-1001.1)
trusty Not vulnerable
(4.15.0-1023.24~14.04.1)
upstream
Released (6.8~rc1)
xenial Not vulnerable
(4.11.0-1009.9)
linux-azure-4.15
Launchpad, Ubuntu, Debian
bionic Not vulnerable
(4.15.0-1082.92)
focal Does not exist

jammy Does not exist

mantic Does not exist

noble Does not exist

upstream
Released (6.8~rc1)
linux-azure-5.11
Launchpad, Ubuntu, Debian
focal Ignored
(superseded by linux-azure-5.13)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-azure-5.13)
linux-azure-5.13
Launchpad, Ubuntu, Debian
focal Ignored
(superseded by linux-azure-5.15)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-azure-5.15)
linux-azure-5.15
Launchpad, Ubuntu, Debian
focal
Released (5.15.0-1060.69~20.04.1)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream
Released (6.8~rc1)
linux-azure-5.19
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Ignored
(superseded by linux-azure-6.2)
mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-azure-6.2)
linux-azure-5.3
Launchpad, Ubuntu, Debian
bionic Ignored
(superseded by linux-azure-5.4)
focal Does not exist

jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-azure-5.4)
linux-azure-5.4
Launchpad, Ubuntu, Debian
bionic Ignored
(ESM criteria, was needed)
focal Does not exist

jammy Does not exist

mantic Does not exist

noble Does not exist

upstream
Released (6.8~rc1)
linux-azure-5.8
Launchpad, Ubuntu, Debian
focal Ignored
(superseded by linux-azure-5.11)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-azure-5.11)
linux-azure-6.2
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Ignored
(superseded by linux-azure-6.5)
mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-azure-6.5)
linux-azure-6.5
Launchpad, Ubuntu, Debian
focal Does not exist

jammy
Released (6.5.0-1022.23~22.04.1)
mantic Does not exist

noble Does not exist

upstream
Released (6.8~rc1)
linux-azure-edge
Launchpad, Ubuntu, Debian
bionic Ignored
(superseded by linux-azure-5.3)
focal Does not exist

jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-azure-5.3)
linux-azure-fde
Launchpad, Ubuntu, Debian
focal Ignored
(superseded by linux-azure-fde-5.15)
jammy
Released (5.15.0-1060.69.1)
mantic Does not exist

noble Does not exist

upstream
Released (6.8~rc1)
linux-azure-fde-5.15
Launchpad, Ubuntu, Debian
focal
Released (5.15.0-1060.69~20.04.1.1)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream
Released (6.8~rc1)
linux-azure-fde-5.19
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Ignored
(superseded by linux-azure-fde-6.2)
mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-azure-fde-6.2)
linux-azure-fde-6.2
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Ignored
(replaced by linux-azure-6.5)
mantic Does not exist

noble Does not exist

upstream Ignored
(replaced by linux-azure-6.5)
linux-azure-fips
Launchpad, Ubuntu, Debian
bionic Does not exist

focal Does not exist

jammy Does not exist

mantic Does not exist

noble Does not exist

trusty Does not exist

upstream
Released (6.8~rc1)
xenial Does not exist

linux-bluefield
Launchpad, Ubuntu, Debian
focal Needed

jammy
Released (5.15.0-1040.42)
mantic Does not exist

noble Does not exist

upstream
Released (6.8~rc1)
linux-fips
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Does not exist

mantic Does not exist

noble Does not exist

upstream
Released (6.8~rc1)
linux-gcp
Launchpad, Ubuntu, Debian
bionic Ignored
(superseded by linux-gcp-5.3)
focal Needed

jammy
Released (5.15.0-1055.63)
mantic
Released (6.5.0-1022.24)
noble Not vulnerable
(6.8.0-1002.2)
upstream
Released (6.8~rc1)
xenial Not vulnerable
(4.10.0-1004.4)
linux-gcp-4.15
Launchpad, Ubuntu, Debian
bionic Not vulnerable
(4.15.0-1071.81)
focal Does not exist

jammy Does not exist

mantic Does not exist

noble Does not exist

upstream
Released (6.8~rc1)
linux-gcp-5.11
Launchpad, Ubuntu, Debian
focal Ignored
(superseded by linux-gcp-5.13)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-gcp-5.13)
linux-gcp-5.13
Launchpad, Ubuntu, Debian
focal Ignored
(superseded by linux-gcp-5.15)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-gcp-5.15)
linux-gcp-5.15
Launchpad, Ubuntu, Debian
focal
Released (5.15.0-1055.63~20.04.1)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream
Released (6.8~rc1)
linux-gcp-5.19
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Ignored
(superseded by linux-gcp-6.2)
mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-gcp-6.2)
linux-gcp-5.3
Launchpad, Ubuntu, Debian
bionic Ignored
(superseded by linux-gcp-5.4)
focal Does not exist

jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-gcp-5.4)
linux-gcp-5.4
Launchpad, Ubuntu, Debian
bionic Ignored
(ESM criteria, was needed)
focal Does not exist

jammy Does not exist

mantic Does not exist

noble Does not exist

upstream
Released (6.8~rc1)
linux-gcp-5.8
Launchpad, Ubuntu, Debian
focal Ignored
(superseded by linux-gcp-5.11)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-gcp-5.11)
linux-gcp-6.2
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Ignored
(superseded by linux-gcp-6.5)
mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-gcp-6.5)
linux-gcp-6.5
Launchpad, Ubuntu, Debian
focal Does not exist

jammy
Released (6.5.0-1022.24~22.04.1)
mantic Does not exist

noble Does not exist

upstream
Released (6.8~rc1)
linux-gcp-fips
Launchpad, Ubuntu, Debian
bionic Does not exist

focal Does not exist

jammy Does not exist

mantic Does not exist

noble Does not exist

trusty Does not exist

upstream
Released (6.8~rc1)
xenial Does not exist

linux-gke
Launchpad, Ubuntu, Debian
focal Ignored
(end of kernel support)
jammy
Released (5.15.0-1054.59)
mantic Does not exist

noble Not vulnerable
(6.8.0-1003.5)
upstream
Released (6.8~rc1)
linux-gke-4.15
Launchpad, Ubuntu, Debian
bionic Ignored
(superseded by linux-gke-5.0)
focal Does not exist

jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-gke-5.0)
linux-gke-5.15
Launchpad, Ubuntu, Debian
focal Ignored
(end of kernel support)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(end of life)
linux-gke-5.4
Launchpad, Ubuntu, Debian
bionic Ignored
(end of kernel support)
focal Does not exist

jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(end of life)
linux-gkeop
Launchpad, Ubuntu, Debian
focal Needed

jammy
Released (5.15.0-1040.46)
mantic Does not exist

noble Does not exist

upstream
Released (6.8~rc1)
linux-gkeop-5.15
Launchpad, Ubuntu, Debian
focal
Released (5.15.0-1040.46~20.04.1)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream
Released (6.8~rc1)
linux-gkeop-5.4
Launchpad, Ubuntu, Debian
bionic Ignored
(end of kernel support)
focal Does not exist

jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(end of life)
linux-hwe
Launchpad, Ubuntu, Debian
bionic Ignored
(replaced by linux-hwe-5.4)
focal Does not exist

jammy Does not exist

mantic Does not exist

noble Does not exist

upstream
Released (6.8~rc1)
xenial Not vulnerable
(4.8.0-39.42~16.04.1)
linux-hwe-5.11
Launchpad, Ubuntu, Debian
focal Ignored
(superseded by linux-hwe-5.13)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-hwe-5.13)
linux-hwe-5.13
Launchpad, Ubuntu, Debian
focal Ignored
(superseded by linux-hwe-5.15)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-hwe-5.15)
linux-hwe-5.15
Launchpad, Ubuntu, Debian
focal
Released (5.15.0-102.112~20.04.1)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream
Released (6.8~rc1)
linux-hwe-5.19
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Ignored
(superseded by linux-hwe-6.2)
mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-hwe-6.2)
linux-hwe-5.4
Launchpad, Ubuntu, Debian
bionic Ignored
(ESM criteria, was needed)
focal Does not exist

jammy Does not exist

mantic Does not exist

noble Does not exist

upstream
Released (6.8~rc1)
linux-hwe-5.8
Launchpad, Ubuntu, Debian
focal Ignored
(superseded by linux-hwe-5.11)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-hwe-5.11)
linux-hwe-6.2
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Ignored
(superseded by linux-hwe-6.5)
mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-hwe-6.5)
linux-hwe-6.5
Launchpad, Ubuntu, Debian
focal Does not exist

jammy
Released (6.5.0-41.41~22.04.2)
mantic Does not exist

noble Does not exist

upstream
Released (6.8~rc1)
linux-hwe-edge
Launchpad, Ubuntu, Debian
bionic Ignored
(superseded by linux-hwe-5.4)
focal Does not exist

jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(end of life)
xenial Ignored
(superseded by linux-hwe)
linux-ibm
Launchpad, Ubuntu, Debian
focal Needed

jammy
Released (5.15.0-1050.53)
mantic Ignored
(end of kernel support)
noble Not vulnerable
(6.8.0-1001.1)
upstream
Released (6.8~rc1)
linux-ibm-5.15
Launchpad, Ubuntu, Debian
focal
Released (5.15.0-1050.53~20.04.1)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream
Released (6.8~rc1)
linux-ibm-5.4
Launchpad, Ubuntu, Debian
bionic Ignored
(ESM criteria, was needed)
focal Does not exist

jammy Does not exist

mantic Does not exist

noble Does not exist

upstream
Released (6.8~rc1)
linux-intel
Launchpad, Ubuntu, Debian
bionic Does not exist

focal Does not exist

jammy Does not exist

mantic Does not exist

noble Not vulnerable
(6.8.0-1001.6)
trusty Does not exist

upstream
Released (6.8~rc1)
xenial Does not exist

linux-intel-5.13
Launchpad, Ubuntu, Debian
focal Ignored
(end of kernel support)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(end of life)
linux-intel-iotg
Launchpad, Ubuntu, Debian
focal Does not exist

jammy
Released (5.15.0-1052.58)
mantic Does not exist

noble Does not exist

upstream
Released (6.8~rc1)
linux-intel-iotg-5.15
Launchpad, Ubuntu, Debian
focal
Released (5.15.0-1052.58~20.04.1)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream
Released (6.8~rc1)
linux-iot
Launchpad, Ubuntu, Debian
focal Needed

jammy Does not exist

mantic Does not exist

noble Does not exist

upstream
Released (6.8~rc1)
linux-kvm
Launchpad, Ubuntu, Debian
bionic Not vulnerable
(4.15.0-1002.2)
focal Needed

jammy
Released (5.15.0-1054.59)
mantic Does not exist

noble Does not exist

upstream
Released (6.8~rc1)
xenial Not vulnerable
(4.4.0-1004.9)
linux-laptop
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Does not exist

mantic
Released (6.5.0-1017.20)
noble Does not exist

upstream
Released (6.8~rc1)
linux-lowlatency
Launchpad, Ubuntu, Debian
focal Does not exist

jammy
Released (5.15.0-102.112)
mantic
Released (6.5.0-41.41.1)
noble Not vulnerable
(6.8.0-7.7.1)
upstream
Released (6.8~rc1)
linux-lowlatency-hwe-5.15
Launchpad, Ubuntu, Debian
focal
Released (5.15.0-102.112~20.04.1)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream
Released (6.8~rc1)
linux-lowlatency-hwe-5.19
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Ignored
(superseded by linux-lowlatency-hwe-6.2)
mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-lowlatency-hwe-6.2)
linux-lowlatency-hwe-6.2
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Ignored
(superseded by linux-lowlatency-hwe-6.5)
mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-lowlatency-hwe-6.5)
linux-lowlatency-hwe-6.5
Launchpad, Ubuntu, Debian
focal Does not exist

jammy
Released (6.5.0-41.41.1~22.04.1)
mantic Does not exist

noble Does not exist

upstream
Released (6.8~rc1)
linux-lts-xenial
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Does not exist

mantic Does not exist

noble Does not exist

trusty Not vulnerable
(4.4.0-13.29~14.04.1)
upstream
Released (6.8~rc1)
linux-nvidia
Launchpad, Ubuntu, Debian
focal Does not exist

jammy
Released (5.15.0-1048.48)
mantic Does not exist

noble Not vulnerable
(6.8.0-1007.7)
upstream
Released (6.8~rc1)
linux-nvidia-6.2
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Ignored
(superseded by linux-nvidia-6.5)
mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-nvidia-6.5)
linux-nvidia-6.5
Launchpad, Ubuntu, Debian
bionic Does not exist

focal Does not exist

jammy
Released (6.5.0-1021.22)
mantic Does not exist

noble Does not exist

trusty Does not exist

upstream
Released (6.8~rc1)
xenial Does not exist

linux-oem
Launchpad, Ubuntu, Debian
bionic Ignored
(replaced by linux-hwe-5.4)
focal Does not exist

jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(end of life)
linux-oem-5.10
Launchpad, Ubuntu, Debian
focal Ignored
(superseded by linux-oem-5.13)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-oem-5.13)
linux-oem-5.13
Launchpad, Ubuntu, Debian
focal Ignored
(superseded by linux-oem-5.14)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-oem-5.14)
linux-oem-5.14
Launchpad, Ubuntu, Debian
focal Ignored
(replaced by linux-hwe-5.15)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(replaced by linux-hwe-5.15)
linux-oem-5.17
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Ignored
(superseded by linux-oem-6.1)
mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-oem-6.1)
linux-oem-5.6
Launchpad, Ubuntu, Debian
focal Ignored
(superseded by linux-oem-5.10)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-oem-5.10)
linux-oem-6.0
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Ignored
(superseded by linux-oem-6.1)
mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-oem-6.1)
linux-oem-6.1
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Ignored
(superseded by linux-oem-6.5, was needs-triage)
mantic Does not exist

noble Does not exist

upstream
Released (6.8~rc1)
linux-oem-6.5
Launchpad, Ubuntu, Debian
focal Does not exist

jammy
Released (6.5.0-1024.25)
mantic Does not exist

noble Does not exist

upstream
Released (6.8~rc1)
linux-oem-6.8
Launchpad, Ubuntu, Debian
bionic Does not exist

focal Does not exist

jammy Does not exist

mantic Does not exist

noble Not vulnerable
(6.8.0-1003.3)
trusty Does not exist

upstream
Released (6.8~rc1)
xenial Does not exist

linux-oracle
Launchpad, Ubuntu, Debian
bionic Not vulnerable
(4.15.0-1007.9)
focal Needed

jammy
Released (5.15.0-1055.61)
mantic
Released (6.5.0-1024.24)
noble Not vulnerable
(6.8.0-1001.1)
upstream
Released (6.8~rc1)
xenial Not vulnerable
(4.15.0-1007.9~16.04.1)
linux-oracle-5.0
Launchpad, Ubuntu, Debian
bionic Ignored
(superseded by linux-oracle-5.3)
focal Does not exist

jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-oracle-5.3)
linux-oracle-5.11
Launchpad, Ubuntu, Debian
focal Ignored
(superseded by linux-oracle-5.13)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-oracle-5.13)
linux-oracle-5.13
Launchpad, Ubuntu, Debian
focal Ignored
(superseded by linux-oracle-5.15)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-oracle-5.15)
linux-oracle-5.15
Launchpad, Ubuntu, Debian
focal
Released (5.15.0-1055.61~20.04.1)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream
Released (6.8~rc1)
linux-oracle-5.3
Launchpad, Ubuntu, Debian
bionic Ignored
(superseded by linux-oracle-5.4)
focal Does not exist

jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-oracle-5.4)
linux-oracle-5.4
Launchpad, Ubuntu, Debian
bionic Ignored
(ESM criteria, was needed)
focal Does not exist

jammy Does not exist

mantic Does not exist

noble Does not exist

upstream
Released (6.8~rc1)
linux-oracle-5.8
Launchpad, Ubuntu, Debian
focal Ignored
(superseded by linux-oracle-5.11)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-oracle-5.11)
linux-oracle-6.5
Launchpad, Ubuntu, Debian
focal Does not exist

jammy
Released (6.5.0-1024.24~22.04.1)
mantic Does not exist

noble Does not exist

upstream
Released (6.8~rc1)
linux-raspi
Launchpad, Ubuntu, Debian
focal Needed

jammy
Released (5.15.0-1050.53)
mantic
Released (6.5.0-1018.21)
noble Not vulnerable
(6.8.0-1001.1)
upstream
Released (6.8~rc1)
linux-raspi-5.4
Launchpad, Ubuntu, Debian
bionic Ignored
(ESM criteria, was needed)
focal Does not exist

jammy Does not exist

mantic Does not exist

noble Does not exist

upstream
Released (6.8~rc1)
linux-raspi2
Launchpad, Ubuntu, Debian
focal Ignored
(replaced by linux-raspi)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(replaced by linux-raspi)
linux-riscv
Launchpad, Ubuntu, Debian
focal Ignored
(superseded by linux-riscv-5.8)
jammy Ignored
(end of kernel support)
mantic
Released (6.5.0-40.40.1)
noble Not vulnerable
(6.8.0-20.20.1)
upstream
Released (6.8~rc1)
linux-riscv-5.11
Launchpad, Ubuntu, Debian
focal Ignored
(superseded by linux-riscv-5.13)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-riscv-5.13)
linux-riscv-5.15
Launchpad, Ubuntu, Debian
focal
Released (5.15.0-1053.57~20.04.1)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream
Released (6.8~rc1)
linux-riscv-5.19
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Ignored
(end of kernel support)
mantic Does not exist

noble Does not exist

upstream Ignored
(end of life)
linux-riscv-5.8
Launchpad, Ubuntu, Debian
focal Ignored
(superseded by linux-riscv-5.11)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-riscv-5.11)
linux-riscv-6.5
Launchpad, Ubuntu, Debian
focal Does not exist

jammy
Released (6.5.0-40.40.1~22.04.1)
mantic Does not exist

noble Does not exist

upstream
Released (6.8~rc1)
linux-starfive
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Does not exist

mantic
Released (6.5.0-1015.16)
noble Does not exist

upstream
Released (6.8~rc1)
linux-starfive-5.19
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Ignored
(end of kernel support)
mantic Does not exist

noble Does not exist

upstream Ignored
(end of life)
linux-starfive-6.2
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Ignored
(superseded by linux-starfive-6.5)
mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-starfive-6.5)
linux-starfive-6.5
Launchpad, Ubuntu, Debian
focal Does not exist

jammy
Released (6.5.0-1015.16~22.04.1)
mantic Does not exist

noble Does not exist

upstream
Released (6.8~rc1)
linux-xilinx-zynqmp
Launchpad, Ubuntu, Debian
focal Needed

jammy Pending
(5.15.0-1030.34)
mantic Does not exist

noble Does not exist

upstream
Released (6.8~rc1)