Your submission was sent successfully! Close

You have successfully unsubscribed! Close

Thank you for signing up for our newsletter!
In these regular emails you will find the latest updates about Ubuntu and upcoming events where you can meet our team.Close

CVE-2024-39291

Published: 24 June 2024

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix buffer size in gfx_v9_4_3_init_ cp_compute_microcode() and rlc_microcode() The function gfx_v9_4_3_init_microcode in gfx_v9_4_3.c was generating about potential truncation of output when using the snprintf function. The issue was due to the size of the buffer 'ucode_prefix' being too small to accommodate the maximum possible length of the string being written into it. The string being written is "amdgpu/%s_mec.bin" or "amdgpu/%s_rlc.bin", where %s is replaced by the value of 'chip_name'. The length of this string without the %s is 16 characters. The warning message indicated that 'chip_name' could be up to 29 characters long, resulting in a total of 45 characters, which exceeds the buffer size of 30 characters. To resolve this issue, the size of the 'ucode_prefix' buffer has been reduced from 30 to 15. This ensures that the maximum possible length of the string being written into the buffer will not exceed its size, thus preventing potential buffer overflow and truncation issues. Fixes the below with gcc W=1: drivers/gpu/drm/amd/amdgpu/gfx_v9_4_3.c: In function ‘gfx_v9_4_3_early_init’: drivers/gpu/drm/amd/amdgpu/gfx_v9_4_3.c:379:52: warning: ‘%s’ directive output may be truncated writing up to 29 bytes into a region of size 23 [-Wformat-truncation=] 379 | snprintf(fw_name, sizeof(fw_name), "amdgpu/%s_rlc.bin", chip_name); | ^~ ...... 439 | r = gfx_v9_4_3_init_rlc_microcode(adev, ucode_prefix); | ~~~~~~~~~~~~ drivers/gpu/drm/amd/amdgpu/gfx_v9_4_3.c:379:9: note: ‘snprintf’ output between 16 and 45 bytes into a destination of size 30 379 | snprintf(fw_name, sizeof(fw_name), "amdgpu/%s_rlc.bin", chip_name); | ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/gpu/drm/amd/amdgpu/gfx_v9_4_3.c:413:52: warning: ‘%s’ directive output may be truncated writing up to 29 bytes into a region of size 23 [-Wformat-truncation=] 413 | snprintf(fw_name, sizeof(fw_name), "amdgpu/%s_mec.bin", chip_name); | ^~ ...... 443 | r = gfx_v9_4_3_init_cp_compute_microcode(adev, ucode_prefix); | ~~~~~~~~~~~~ drivers/gpu/drm/amd/amdgpu/gfx_v9_4_3.c:413:9: note: ‘snprintf’ output between 16 and 45 bytes into a destination of size 30 413 | snprintf(fw_name, sizeof(fw_name), "amdgpu/%s_mec.bin", chip_name); | ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Priority

Medium

Cvss 3 Severity Score

7.8

Score breakdown

Status

Package Release Status
linux
Launchpad, Ubuntu, Debian
bionic Not vulnerable
(4.13.0-16.19)
focal Not vulnerable
(5.4.0-9.12)
jammy Not vulnerable
(5.13.0-19.19)
mantic Ignored
(end of life, was needed)
noble Needed

trusty Not vulnerable
(3.11.0-12.19)
upstream
Released (6.10~rc1, 6.8.y)
xenial Not vulnerable
(4.4.0-2.16)
Patches:
Introduced by

86301129698be52f8398f92ea8564168f6bfcae1

Fixed by acce6479e30f73ab0872e93a75aed1fb791d04ec
linux-allwinner-5.19
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Ignored
(end of kernel support)
mantic Does not exist

noble Does not exist

upstream Ignored
(end of life)
linux-aws
Launchpad, Ubuntu, Debian
bionic Not vulnerable
(4.15.0-1001.1)
focal Not vulnerable
(5.4.0-1005.5)
jammy Not vulnerable
(5.13.0-1005.6)
mantic Ignored
(end of life, was needed)
noble Needed

trusty Not vulnerable
(4.4.0-1002.2)
upstream
Released (6.10~rc1, 6.8.y)
xenial Not vulnerable
(4.4.0-1001.10)
linux-aws-5.0
Launchpad, Ubuntu, Debian
bionic Ignored
(superseded by linux-aws-5.3)
focal Does not exist

jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-aws-5.3)
linux-aws-5.11
Launchpad, Ubuntu, Debian
focal Ignored
(superseded by linux-aws-5.13)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-aws-5.13)
linux-aws-5.13
Launchpad, Ubuntu, Debian
focal Ignored
(superseded by linux-aws-5.15)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-aws-5.15)
linux-aws-5.15
Launchpad, Ubuntu, Debian
focal Not vulnerable
(5.15.0-1014.18~20.04.1)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream
Released (6.10~rc1, 6.8.y)
linux-aws-5.19
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Ignored
(superseded by linux-aws-6.2)
mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-aws-6.2)
linux-aws-5.3
Launchpad, Ubuntu, Debian
bionic Ignored
(superseded by linux-aws-5.4)
focal Does not exist

jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-aws-5.4)
linux-aws-5.4
Launchpad, Ubuntu, Debian
bionic Not vulnerable
(5.4.0-1018.18~18.04.1)
focal Does not exist

jammy Does not exist

mantic Does not exist

noble Does not exist

upstream
Released (6.10~rc1, 6.8.y)
linux-aws-5.8
Launchpad, Ubuntu, Debian
focal Ignored
(superseded by linux-aws-5.11)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-aws-5.11)
linux-aws-6.2
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Ignored
(superseded by linux-aws-6.5)
mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-aws-6.5)
linux-aws-6.5
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Needed

mantic Does not exist

noble Does not exist

upstream
Released (6.10~rc1, 6.8.y)
linux-aws-fips
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Does not exist

mantic Does not exist

noble Does not exist

upstream
Released (6.10~rc1, 6.8.y)
linux-aws-hwe
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Does not exist

mantic Does not exist

noble Does not exist

upstream
Released (6.10~rc1, 6.8.y)
xenial Not vulnerable
(4.15.0-1030.31~16.04.1)
linux-azure
Launchpad, Ubuntu, Debian
bionic Ignored
(superseded by linux-azure-5.3)
focal Not vulnerable
(5.4.0-1006.6)
jammy Not vulnerable
(5.13.0-1006.7)
mantic Ignored
(end of life, was needed)
noble Needed

trusty Not vulnerable
(4.15.0-1023.24~14.04.1)
upstream
Released (6.10~rc1, 6.8.y)
xenial Not vulnerable
(4.11.0-1009.9)
linux-azure-4.15
Launchpad, Ubuntu, Debian
bionic Not vulnerable
(4.15.0-1082.92)
focal Does not exist

jammy Does not exist

mantic Does not exist

noble Does not exist

upstream
Released (6.10~rc1, 6.8.y)
linux-azure-5.11
Launchpad, Ubuntu, Debian
focal Ignored
(superseded by linux-azure-5.13)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-azure-5.13)
linux-azure-5.13
Launchpad, Ubuntu, Debian
focal Ignored
(superseded by linux-azure-5.15)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-azure-5.15)
linux-azure-5.15
Launchpad, Ubuntu, Debian
focal Not vulnerable
(5.15.0-1007.8~20.04.1)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream
Released (6.10~rc1, 6.8.y)
linux-azure-5.19
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Ignored
(superseded by linux-azure-6.2)
mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-azure-6.2)
linux-azure-5.3
Launchpad, Ubuntu, Debian
bionic Ignored
(superseded by linux-azure-5.4)
focal Does not exist

jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-azure-5.4)
linux-azure-5.4
Launchpad, Ubuntu, Debian
bionic Not vulnerable
(5.4.0-1020.20~18.04.1)
focal Does not exist

jammy Does not exist

mantic Does not exist

noble Does not exist

upstream
Released (6.10~rc1, 6.8.y)
linux-azure-5.8
Launchpad, Ubuntu, Debian
focal Ignored
(superseded by linux-azure-5.11)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-azure-5.11)
linux-azure-6.2
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Ignored
(superseded by linux-azure-6.5)
mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-azure-6.5)
linux-azure-6.5
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Needed

mantic Does not exist

noble Does not exist

upstream
Released (6.10~rc1, 6.8.y)
linux-azure-edge
Launchpad, Ubuntu, Debian
bionic Ignored
(superseded by linux-azure-5.3)
focal Does not exist

jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-azure-5.3)
linux-azure-fde
Launchpad, Ubuntu, Debian
focal Ignored
(superseded by linux-azure-fde-5.15)
jammy Not vulnerable
(5.15.0-1019.24.1)
mantic Does not exist

noble Does not exist

upstream
Released (6.10~rc1, 6.8.y)
linux-azure-fde-5.15
Launchpad, Ubuntu, Debian
focal Not vulnerable
(5.15.0-1019.24~20.04.1.1)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream
Released (6.10~rc1, 6.8.y)
linux-azure-fde-5.19
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Ignored
(superseded by linux-azure-fde-6.2)
mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-azure-fde-6.2)
linux-azure-fde-6.2
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Ignored
(replaced by linux-azure-6.5)
mantic Does not exist

noble Does not exist

upstream Ignored
(replaced by linux-azure-6.5)
linux-azure-fips
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Does not exist

mantic Does not exist

noble Does not exist

upstream
Released (6.10~rc1, 6.8.y)
linux-bluefield
Launchpad, Ubuntu, Debian
focal Not vulnerable
(5.4.0-1007.10)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream
Released (6.10~rc1, 6.8.y)
linux-fips
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Does not exist

mantic Does not exist

noble Does not exist

upstream
Released (6.10~rc1, 6.8.y)
linux-gcp
Launchpad, Ubuntu, Debian
bionic Ignored
(superseded by linux-gcp-5.3)
focal Not vulnerable
(5.4.0-1005.5)
jammy Not vulnerable
(5.13.0-1005.6)
mantic Ignored
(end of life, was needed)
noble Needed

upstream
Released (6.10~rc1, 6.8.y)
xenial Not vulnerable
(4.10.0-1004.4)
linux-gcp-4.15
Launchpad, Ubuntu, Debian
bionic Not vulnerable
(4.15.0-1071.81)
focal Does not exist

jammy Does not exist

mantic Does not exist

noble Does not exist

upstream
Released (6.10~rc1, 6.8.y)
linux-gcp-5.11
Launchpad, Ubuntu, Debian
focal Ignored
(superseded by linux-gcp-5.13)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-gcp-5.13)
linux-gcp-5.13
Launchpad, Ubuntu, Debian
focal Ignored
(superseded by linux-gcp-5.15)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-gcp-5.15)
linux-gcp-5.15
Launchpad, Ubuntu, Debian
focal Not vulnerable
(5.15.0-1006.9~20.04.1)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream
Released (6.10~rc1, 6.8.y)
linux-gcp-5.19
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Ignored
(superseded by linux-gcp-6.2)
mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-gcp-6.2)
linux-gcp-5.3
Launchpad, Ubuntu, Debian
bionic Ignored
(superseded by linux-gcp-5.4)
focal Does not exist

jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-gcp-5.4)
linux-gcp-5.4
Launchpad, Ubuntu, Debian
bionic Not vulnerable
(5.4.0-1019.19~18.04.2)
focal Does not exist

jammy Does not exist

mantic Does not exist

noble Does not exist

upstream
Released (6.10~rc1, 6.8.y)
linux-gcp-5.8
Launchpad, Ubuntu, Debian
focal Ignored
(superseded by linux-gcp-5.11)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-gcp-5.11)
linux-gcp-6.2
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Ignored
(superseded by linux-gcp-6.5)
mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-gcp-6.5)
linux-gcp-6.5
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Needed

mantic Does not exist

noble Does not exist

upstream
Released (6.10~rc1, 6.8.y)
linux-gcp-fips
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Does not exist

mantic Does not exist

noble Does not exist

upstream
Released (6.10~rc1, 6.8.y)
linux-gke
Launchpad, Ubuntu, Debian
focal Ignored
(end of kernel support)
jammy Not vulnerable
(5.15.0-1002.2)
mantic Does not exist

noble Needed

upstream
Released (6.10~rc1, 6.8.y)
linux-gke-4.15
Launchpad, Ubuntu, Debian
bionic Ignored
(superseded by linux-gke-5.0)
focal Does not exist

jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-gke-5.0)
linux-gke-5.15
Launchpad, Ubuntu, Debian
focal Ignored
(end of kernel support)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(end of life)
linux-gke-5.4
Launchpad, Ubuntu, Debian
bionic Ignored
(end of kernel support)
focal Does not exist

jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(end of life)
linux-gkeop
Launchpad, Ubuntu, Debian
focal Not vulnerable
(5.4.0-1008.9)
jammy Not vulnerable
(5.15.0-1001.2)
mantic Does not exist

noble Does not exist

upstream
Released (6.10~rc1, 6.8.y)
linux-gkeop-5.15
Launchpad, Ubuntu, Debian
focal Not vulnerable
(5.15.0-1003.5~20.04.2)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream
Released (6.10~rc1, 6.8.y)
linux-gkeop-5.4
Launchpad, Ubuntu, Debian
bionic Ignored
(end of kernel support)
focal Does not exist

jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(end of life)
linux-hwe
Launchpad, Ubuntu, Debian
bionic Ignored
(replaced by linux-hwe-5.4)
focal Does not exist

jammy Does not exist

mantic Does not exist

noble Does not exist

upstream
Released (6.10~rc1, 6.8.y)
xenial Not vulnerable
(4.8.0-39.42~16.04.1)
linux-hwe-5.11
Launchpad, Ubuntu, Debian
focal Ignored
(superseded by linux-hwe-5.13)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-hwe-5.13)
linux-hwe-5.13
Launchpad, Ubuntu, Debian
focal Ignored
(superseded by linux-hwe-5.15)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-hwe-5.15)
linux-hwe-5.15
Launchpad, Ubuntu, Debian
focal Not vulnerable
(5.15.0-33.34~20.04.1)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream
Released (6.10~rc1, 6.8.y)
linux-hwe-5.19
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Ignored
(superseded by linux-hwe-6.2)
mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-hwe-6.2)
linux-hwe-5.4
Launchpad, Ubuntu, Debian
bionic Not vulnerable
(5.4.0-37.41~18.04.1)
focal Does not exist

jammy Does not exist

mantic Does not exist

noble Does not exist

upstream
Released (6.10~rc1, 6.8.y)
linux-hwe-5.8
Launchpad, Ubuntu, Debian
focal Ignored
(superseded by linux-hwe-5.11)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-hwe-5.11)
linux-hwe-6.2
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Ignored
(superseded by linux-hwe-6.5)
mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-hwe-6.5)
linux-hwe-6.5
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Ignored
(superseded by linux-hwe-6.8, was needed)
mantic Does not exist

noble Does not exist

upstream
Released (6.10~rc1, 6.8.y)
linux-hwe-edge
Launchpad, Ubuntu, Debian
bionic Ignored
(superseded by linux-hwe-5.4)
focal Does not exist

jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(end of life)
xenial Ignored
(superseded by linux-hwe)
linux-ibm
Launchpad, Ubuntu, Debian
focal Not vulnerable
(5.4.0-1003.4)
jammy Not vulnerable
(5.15.0-1002.2)
mantic Ignored
(end of kernel support)
noble Needed

upstream
Released (6.10~rc1, 6.8.y)
linux-ibm-5.15
Launchpad, Ubuntu, Debian
focal Not vulnerable
(5.15.0-1033.36~20.04.1)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream
Released (6.10~rc1, 6.8.y)
linux-ibm-5.4
Launchpad, Ubuntu, Debian
bionic Not vulnerable
(5.4.0-1010.11~18.04.2)
focal Does not exist

jammy Does not exist

mantic Does not exist

noble Does not exist

upstream
Released (6.10~rc1, 6.8.y)
linux-intel
Launchpad, Ubuntu, Debian
bionic Does not exist

focal Does not exist

jammy Does not exist

mantic Does not exist

noble Needed

trusty Does not exist

upstream
Released (6.10~rc1, 6.8.y)
xenial Does not exist

linux-intel-5.13
Launchpad, Ubuntu, Debian
focal Ignored
(end of kernel support)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(end of life)
linux-intel-iotg
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Not vulnerable
(5.15.0-1004.6)
mantic Does not exist

noble Does not exist

upstream
Released (6.10~rc1, 6.8.y)
linux-intel-iotg-5.15
Launchpad, Ubuntu, Debian
focal Not vulnerable
(5.15.0-1003.5~20.04.1)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream
Released (6.10~rc1, 6.8.y)
linux-iot
Launchpad, Ubuntu, Debian
focal Not vulnerable
(5.4.0-1001.3)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream
Released (6.10~rc1, 6.8.y)
linux-kvm
Launchpad, Ubuntu, Debian
bionic Not vulnerable
(4.15.0-1002.2)
focal Not vulnerable
(5.4.0-1004.4)
jammy Not vulnerable
(5.13.0-1004.4)
mantic Does not exist

noble Does not exist

upstream
Released (6.10~rc1, 6.8.y)
xenial Not vulnerable
(4.4.0-1004.9)
linux-laptop
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Does not exist

mantic Ignored
(end of life, was needed)
noble Does not exist

upstream
Released (6.10~rc1, 6.8.y)
linux-lowlatency
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Not vulnerable
(5.15.0-22.22)
mantic Ignored
(end of life, was needed)
noble Needed

upstream
Released (6.10~rc1, 6.8.y)
linux-lowlatency-hwe-5.15
Launchpad, Ubuntu, Debian
focal Not vulnerable
(5.15.0-33.34~20.04.1)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream
Released (6.10~rc1, 6.8.y)
linux-lowlatency-hwe-5.19
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Ignored
(superseded by linux-lowlatency-hwe-6.2)
mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-lowlatency-hwe-6.2)
linux-lowlatency-hwe-6.2
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Ignored
(superseded by linux-lowlatency-hwe-6.5)
mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-lowlatency-hwe-6.5)
linux-lowlatency-hwe-6.5
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Ignored
(superseded by linux-lowlatency-hwe-6.8, was needed)
mantic Does not exist

noble Does not exist

upstream
Released (6.10~rc1, 6.8.y)
linux-lts-xenial
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Does not exist

mantic Does not exist

noble Does not exist

trusty Not vulnerable
(4.4.0-13.29~14.04.1)
upstream
Released (6.10~rc1, 6.8.y)
linux-nvidia
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Not vulnerable
(5.15.0-1005.5)
mantic Does not exist

noble Needed

upstream
Released (6.10~rc1, 6.8.y)
linux-nvidia-6.2
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Ignored
(superseded by linux-nvidia-6.5)
mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-nvidia-6.5)
linux-nvidia-6.5
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Needed

mantic Does not exist

noble Does not exist

upstream
Released (6.10~rc1, 6.8.y)
linux-oem
Launchpad, Ubuntu, Debian
bionic Ignored
(replaced by linux-hwe-5.4)
focal Does not exist

jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(end of life)
linux-oem-5.10
Launchpad, Ubuntu, Debian
focal Ignored
(superseded by linux-oem-5.13)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-oem-5.13)
linux-oem-5.13
Launchpad, Ubuntu, Debian
focal Ignored
(superseded by linux-oem-5.14)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-oem-5.14)
linux-oem-5.14
Launchpad, Ubuntu, Debian
focal Ignored
(replaced by linux-hwe-5.15)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(replaced by linux-hwe-5.15)
linux-oem-5.17
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Ignored
(superseded by linux-oem-6.1)
mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-oem-6.1)
linux-oem-5.6
Launchpad, Ubuntu, Debian
focal Ignored
(superseded by linux-oem-5.10)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-oem-5.10)
linux-oem-6.0
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Ignored
(superseded by linux-oem-6.1)
mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-oem-6.1)
linux-oem-6.1
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Ignored
(superseded by linux-oem-6.5)
mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-oem-6.5)
linux-oem-6.5
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Needed

mantic Does not exist

noble Does not exist

upstream
Released (6.10~rc1, 6.8.y)
linux-oem-6.8
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Does not exist

mantic Does not exist

noble Needed

upstream
Released (6.10~rc1, 6.8.y)
linux-oracle
Launchpad, Ubuntu, Debian
bionic Not vulnerable
(4.15.0-1007.9)
focal Not vulnerable
(5.4.0-1005.5)
jammy Not vulnerable
(5.13.0-1008.10)
mantic Ignored
(end of life, was needed)
noble Needed

upstream
Released (6.10~rc1, 6.8.y)
xenial Not vulnerable
(4.15.0-1007.9~16.04.1)
linux-oracle-5.0
Launchpad, Ubuntu, Debian
bionic Ignored
(superseded by linux-oracle-5.3)
focal Does not exist

jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-oracle-5.3)
linux-oracle-5.11
Launchpad, Ubuntu, Debian
focal Ignored
(superseded by linux-oracle-5.13)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-oracle-5.13)
linux-oracle-5.13
Launchpad, Ubuntu, Debian
focal Ignored
(superseded by linux-oracle-5.15)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-oracle-5.15)
linux-oracle-5.15
Launchpad, Ubuntu, Debian
focal Not vulnerable
(5.15.0-1007.9~20.04.1)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream
Released (6.10~rc1, 6.8.y)
linux-oracle-5.3
Launchpad, Ubuntu, Debian
bionic Ignored
(superseded by linux-oracle-5.4)
focal Does not exist

jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-oracle-5.4)
linux-oracle-5.4
Launchpad, Ubuntu, Debian
bionic Not vulnerable
(5.4.0-1019.19~18.04.1)
focal Does not exist

jammy Does not exist

mantic Does not exist

noble Does not exist

upstream
Released (6.10~rc1, 6.8.y)
linux-oracle-5.8
Launchpad, Ubuntu, Debian
focal Ignored
(superseded by linux-oracle-5.11)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-oracle-5.11)
linux-oracle-6.5
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Needed

mantic Does not exist

noble Does not exist

upstream
Released (6.10~rc1, 6.8.y)
linux-raspi
Launchpad, Ubuntu, Debian
focal Not vulnerable
(5.4.0-1007.7)
jammy Not vulnerable
(5.13.0-1008.9)
mantic Ignored
(end of life, was needed)
noble Needed

upstream
Released (6.10~rc1, 6.8.y)
linux-raspi-5.4
Launchpad, Ubuntu, Debian
bionic Not vulnerable
(5.4.0-1013.13~18.04.1)
focal Does not exist

jammy Does not exist

mantic Does not exist

noble Does not exist

upstream
Released (6.10~rc1, 6.8.y)
linux-raspi2
Launchpad, Ubuntu, Debian
focal Ignored
(replaced by linux-raspi)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(replaced by linux-raspi)
linux-riscv
Launchpad, Ubuntu, Debian
focal Ignored
(superseded by linux-riscv-5.8)
jammy Ignored
(end of kernel support)
mantic Ignored
(end of life, was needed)
noble Needed

upstream
Released (6.10~rc1, 6.8.y)
linux-riscv-5.11
Launchpad, Ubuntu, Debian
focal Ignored
(superseded by linux-riscv-5.13)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-riscv-5.13)
linux-riscv-5.15
Launchpad, Ubuntu, Debian
focal Not vulnerable
(5.15.0-1015.17~20.04.1)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream
Released (6.10~rc1, 6.8.y)
linux-riscv-5.19
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Ignored
(end of kernel support)
mantic Does not exist

noble Does not exist

upstream Ignored
(end of life)
linux-riscv-5.8
Launchpad, Ubuntu, Debian
focal Ignored
(superseded by linux-riscv-5.11)
jammy Does not exist

mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-riscv-5.11)
linux-riscv-6.5
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Needed

mantic Does not exist

noble Does not exist

upstream
Released (6.10~rc1, 6.8.y)
linux-starfive
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Does not exist

mantic Ignored
(end of life, was needed)
noble Does not exist

upstream
Released (6.10~rc1, 6.8.y)
linux-starfive-5.19
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Ignored
(end of kernel support)
mantic Does not exist

noble Does not exist

upstream Ignored
(end of life)
linux-starfive-6.2
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Ignored
(superseded by linux-starfive-6.5)
mantic Does not exist

noble Does not exist

upstream Ignored
(superseded by linux-starfive-6.5)
linux-starfive-6.5
Launchpad, Ubuntu, Debian
focal Does not exist

jammy Needed

mantic Does not exist

noble Does not exist

upstream
Released (6.10~rc1, 6.8.y)
linux-xilinx-zynqmp
Launchpad, Ubuntu, Debian
focal Not vulnerable
(5.4.0-1020.24)
jammy Not vulnerable
(5.15.0-1022.26)
mantic Does not exist

noble Does not exist

upstream
Released (6.10~rc1, 6.8.y)

Severity score breakdown

Parameter Value
Base score 7.8
Attack vector Local
Attack complexity Low
Privileges required Low
User interaction None
Scope Unchanged
Confidentiality High
Integrity impact High
Availability impact High
Vector CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H