CVE reports
The Common Vulnerabilities and Exposures (CVE) system is used to identify, define, and catalog publicly disclosed cybersecurity vulnerabilities. Canonical keeps track of all CVEs affecting Ubuntu, and releases a security notice when an issue is fixed.
Canonical also produces Open Vulnerability and Assessment Language (OVAL) data, which is machine-readable, to enable auditing for CVEs and to determine whether a particular patch, via an Ubuntu Security Notice (USN), is appropriate for the local system.
Search
Recent CVEs affecting Ubuntu
| ID | Priority | Package |
14.04 ESM
|
16.04 ESM
|
18.04 ESM
|
20.04 LTS
|
22.04 LTS
|
23.04
|
23.10
|
|---|---|---|---|---|---|---|---|---|---|
| CVE-2023-39070 |
medium
|
cppcheck |
Needs triage
|
Needs triage
|
Needs triage
|
Needs triage
|
Needs triage
|
Needs triage
|
— |
| CVE-2023-4881 |
high
|
linux-hwe |
Does not exist
|
Needed
|
Ignored
|
Does not exist
|
Does not exist
|
Does not exist
|
— |
| linux-hwe-5.4 |
Does not exist
|
Does not exist
|
Needed
|
Does not exist
|
Does not exist
|
Does not exist
|
— | ||
| linux-hwe-5.8 |
Does not exist
|
Does not exist
|
Does not exist
|
Ignored
|
Does not exist
|
Does not exist
|
— | ||
| linux-hwe-5.11 |
Does not exist
|
Does not exist
|
Does not exist
|
Ignored
|
Does not exist
|
Does not exist
|
— | ||
| linux-hwe-5.13 |
Does not exist
|
Does not exist
|
Does not exist
|
Ignored
|
Does not exist
|
Does not exist
|
— | ||
| linux-hwe-5.15 |
Does not exist
|
Does not exist
|
Does not exist
|
Needed
|
Does not exist
|
Does not exist
|
— | ||
| linux-hwe-5.19 |
Does not exist
|
Does not exist
|
Does not exist
|
Does not exist
|
Ignored
|
Does not exist
|
— | ||
| linux-hwe-6.2 |
Does not exist
|
Does not exist
|
Does not exist
|
Does not exist
|
Needed
|
Does not exist
|
— | ||
| linux-hwe-edge |
Does not exist
|
Ignored
|
Ignored
|
Does not exist
|
Does not exist
|
Does not exist
|
— | ||
| linux-lts-xenial |
Needed
|
Does not exist
|
Does not exist
|
Does not exist
|
Does not exist
|
Does not exist
|
— | ||
| linux-kvm |
Does not exist
|
Needed
|
Needed
|
Needed
|
Needed
|
Needed
|
— | ||
| linux-allwinner |
Does not exist
|
Does not exist
|
Does not exist
|
Does not exist
|
Does not exist
|
Ignored
|
— | ||
| linux-allwinner-5.19 |
Does not exist
|
Does not exist
|
Does not exist
|
Does not exist
|
Ignored
|
Does not exist
|
— | ||
| linux-aws-5.0 |
Does not exist
|
Does not exist
|
Ignored
|
Does not exist
|
Does not exist
|
Does not exist
|
— | ||
| linux-aws-5.3 |
Does not exist
|
Does not exist
|
Ignored
|
Does not exist
|
Does not exist
|
Does not exist
|
— | ||
| linux-aws-5.4 |
Does not exist
|
Does not exist
|
Needed
|
Does not exist
|
Does not exist
|
Does not exist
|
— | ||
| linux-aws-5.8 |
Does not exist
|
Does not exist
|
Does not exist
|
Ignored
|
Does not exist
|
Does not exist
|
— | ||
| linux-aws-5.11 |
Does not exist
|
Does not exist
|
Does not exist
|
Ignored
|
Does not exist
|
Does not exist
|
— | ||
| linux-aws-5.13 |
Does not exist
|
Does not exist
|
Does not exist
|
Ignored
|
Does not exist
|
Does not exist
|
— | ||
| linux-aws-5.15 |
Does not exist
|
Does not exist
|
Does not exist
|
Needed
|
Does not exist
|
Does not exist
|
— | ||
| linux-aws-5.19 |
Does not exist
|
Does not exist
|
Does not exist
|
Does not exist
|
Ignored
|
Does not exist
|
— | ||
| linux-aws-6.2 |
Does not exist
|
Does not exist
|
Does not exist
|
Does not exist
|
Needed
|
Does not exist
|
— | ||
| linux-aws-hwe |
Does not exist
|
Needed
|
Does not exist
|
Does not exist
|
Does not exist
|
Does not exist
|
— | ||
| linux-azure |
Needed
|
Needed
|
Ignored
|
Needed
|
Needed
|
Needed
|
— | ||
| linux-azure-4.15 |
Does not exist
|
Does not exist
|
Needed
|
Does not exist
|
Does not exist
|
Does not exist
|
— | ||
| linux-azure-5.3 |
Does not exist
|
Does not exist
|
Ignored
|
Does not exist
|
Does not exist
|
Does not exist
|
— | ||
| linux-azure-5.4 |
Does not exist
|
Does not exist
|
Needed
|
Does not exist
|
Does not exist
|
Does not exist
|
— | ||
| linux-azure-5.8 |
Does not exist
|
Does not exist
|
Does not exist
|
Ignored
|
Does not exist
|
Does not exist
|
— | ||
| linux-azure-5.11 |
Does not exist
|
Does not exist
|
Does not exist
|
Ignored
|
Does not exist
|
Does not exist
|
— | ||
| linux-azure-5.13 |
Does not exist
|
Does not exist
|
Does not exist
|
Ignored
|
Does not exist
|
Does not exist
|
— | ||
| linux-azure-5.15 |
Does not exist
|
Does not exist
|
Does not exist
|
Needed
|
Does not exist
|
Does not exist
|
— | ||
| linux-azure-5.19 |
Does not exist
|
Does not exist
|
Does not exist
|
Does not exist
|
Ignored
|
Does not exist
|
— | ||
| linux-azure-fde |
Does not exist
|
Does not exist
|
Does not exist
|
Ignored
|
Needed
|
Does not exist
|
— | ||
| linux-azure-fde-5.15 |
Does not exist
|
Does not exist
|
Does not exist
|
Needed
|
Does not exist
|
Does not exist
|
— | ||
| linux-azure-fde-5.19 |
Does not exist
|
Does not exist
|
Does not exist
|
Does not exist
|
Ignored
|
Does not exist
|
— | ||
| linux-bluefield |
Does not exist
|
Does not exist
|
Does not exist
|
Needed
|
Needed
|
Does not exist
|
— | ||
| linux-dell300x |
Does not exist
|
Does not exist
|
Ignored
|
Does not exist
|
Does not exist
|
Does not exist
|
— | ||
| linux-azure-edge |
Does not exist
|
Does not exist
|
Ignored
|
Does not exist
|
Does not exist
|
Does not exist
|
— | ||
| linux-fips |
Ignored
|
Ignored
|
Does not exist
|
Does not exist
|
Does not exist
|
Does not exist
|
— | ||
| linux-gcp |
Does not exist
|
Needed
|
Ignored
|
Needed
|
Needed
|
Needed
|
— | ||
| linux-gcp-4.15 |
Does not exist
|
Does not exist
|
Needed
|
Does not exist
|
Does not exist
|
Does not exist
|
— | ||
| linux-gcp-5.3 |
Does not exist
|
Does not exist
|
Ignored
|
Does not exist
|
Does not exist
|
Does not exist
|
— | ||
| linux-gcp-5.4 |
Does not exist
|
Does not exist
|
Needed
|
Does not exist
|
Does not exist
|
Does not exist
|
— | ||
| linux-gcp-5.8 |
Does not exist
|
Does not exist
|
Does not exist
|
Ignored
|
Does not exist
|
Does not exist
|
— | ||
| linux-gcp-5.11 |
Does not exist
|
Does not exist
|
Does not exist
|
Ignored
|
Does not exist
|
Does not exist
|
— | ||
| linux-gcp-5.13 |
Does not exist
|
Does not exist
|
Does not exist
|
Ignored
|
Does not exist
|
Does not exist
|
— | ||
| linux-gcp-5.15 |
Does not exist
|
Does not exist
|
Does not exist
|
Needed
|
Does not exist
|
Does not exist
|
— | ||
| linux-gcp-5.19 |
Does not exist
|
Does not exist
|
Does not exist
|
Does not exist
|
Ignored
|
Does not exist
|
— | ||
| linux-gcp-6.2 |
Does not exist
|
Does not exist
|
Does not exist
|
Does not exist
|
Needed
|
Does not exist
|
— | ||
| linux-gke |
Does not exist
|
Ignored
|
Does not exist
|
Ignored
|
Needed
|
Does not exist
|
— | ||
| linux-gke-4.15 |
Does not exist
|
Does not exist
|
Ignored
|
Does not exist
|
Does not exist
|
Does not exist
|
— | ||
| linux-gke-5.0 |
Does not exist
|
Does not exist
|
Ignored
|
Does not exist
|
Does not exist
|
Does not exist
|
— | ||
| linux-gke-5.3 |
Does not exist
|
Does not exist
|
Ignored
|
Does not exist
|
Does not exist
|
Does not exist
|
— | ||
| linux-gke-5.4 |
Does not exist
|
Does not exist
|
Ignored
|
Does not exist
|
Does not exist
|
Does not exist
|
— | ||
| linux-gke-5.15 |
Does not exist
|
Does not exist
|
Does not exist
|
Ignored
|
Does not exist
|
Does not exist
|
— | ||
| linux-gkeop |
Does not exist
|
Does not exist
|
Does not exist
|
Needed
|
Needed
|
Does not exist
|
— | ||
| linux-gkeop-5.4 |
Does not exist
|
Does not exist
|
Ignored
|
Does not exist
|
Does not exist
|
Does not exist
|
— | ||
| linux-gkeop-5.15 |
Does not exist
|
Does not exist
|
Does not exist
|
Needed
|
Does not exist
|
Does not exist
|
— | ||
| linux-ibm |
Does not exist
|
Does not exist
|
Does not exist
|
Needed
|
Needed
|
Needed
|
— | ||
| linux-ibm-5.4 |
Does not exist
|
Does not exist
|
Needed
|
Does not exist
|
Does not exist
|
Does not exist
|
— | ||
| linux-ibm-5.15 |
Does not exist
|
Does not exist
|
Does not exist
|
Needed
|
Does not exist
|
Does not exist
|
— | ||
| linux-intel-5.13 |
Does not exist
|
Does not exist
|
Does not exist
|
Ignored
|
Does not exist
|
Does not exist
|
— | ||
| linux-intel-iotg |
Does not exist
|
Does not exist
|
Does not exist
|
Does not exist
|
Needed
|
Does not exist
|
— | ||
| linux-intel-iotg-5.15 |
Does not exist
|
Does not exist
|
Does not exist
|
Needed
|
Does not exist
|
Does not exist
|
— | ||
| linux-iot |
Does not exist
|
Does not exist
|
Does not exist
|
Needed
|
Does not exist
|
Does not exist
|
— | ||
| linux-lowlatency |
Does not exist
|
Does not exist
|
Does not exist
|
Does not exist
|
Needed
|
Needed
|
— | ||
| linux-lowlatency-hwe-5.15 |
Does not exist
|
Does not exist
|
Does not exist
|
Needed
|
Does not exist
|
Does not exist
|
— | ||
| linux-lowlatency-hwe-5.19 |
Does not exist
|
Does not exist
|
Does not exist
|
Does not exist
|
Ignored
|
Does not exist
|
— | ||
| linux-lowlatency-hwe-6.2 |
Does not exist
|
Does not exist
|
Does not exist
|
Does not exist
|
Needed
|
Does not exist
|
— | ||
| linux-nvidia |
Does not exist
|
Does not exist
|
Does not exist
|
Does not exist
|
Needed
|
Does not exist
|
— | ||
| linux-oracle |
Does not exist
|
Needed
|
Needed
|
Needed
|
Needed
|
Needed
|
— | ||
| linux-oracle-5.0 |
Does not exist
|
Does not exist
|
Ignored
|
Does not exist
|
Does not exist
|
Does not exist
|
— | ||
| linux-oracle-5.3 |
Does not exist
|
Does not exist
|
Ignored
|
Does not exist
|
Does not exist
|
Does not exist
|
— | ||
| linux-oracle-5.4 |
Does not exist
|
Does not exist
|
Needed
|
Does not exist
|
Does not exist
|
Does not exist
|
— | ||
| linux-oracle-5.8 |
Does not exist
|
Does not exist
|
Does not exist
|
Ignored
|
Does not exist
|
Does not exist
|
— | ||
| linux-oracle-5.11 |
Does not exist
|
Does not exist
|
Does not exist
|
Ignored
|
Does not exist
|
Does not exist
|
— | ||
| linux-oracle-5.13 |
Does not exist
|
Does not exist
|
Does not exist
|
Ignored
|
Does not exist
|
Does not exist
|
— | ||
| linux-oracle-5.15 |
Does not exist
|
Does not exist
|
Does not exist
|
Needed
|
Does not exist
|
Does not exist
|
— | ||
| linux-oem |
Does not exist
|
Ignored
|
Ignored
|
Does not exist
|
Does not exist
|
Does not exist
|
— | ||
| linux-oem-5.6 |
Does not exist
|
Does not exist
|
Does not exist
|
Ignored
|
Does not exist
|
Does not exist
|
— | ||
| linux-oem-5.10 |
Does not exist
|
Does not exist
|
Does not exist
|
Ignored
|
Does not exist
|
Does not exist
|
— | ||
| linux-oem-5.13 |
Does not exist
|
Does not exist
|
Does not exist
|
Ignored
|
Does not exist
|
Does not exist
|
— | ||
| linux-oem-5.14 |
Does not exist
|
Does not exist
|
Does not exist
|
Ignored
|
Does not exist
|
Does not exist
|
— | ||
| linux-oem-5.17 |
Does not exist
|
Does not exist
|
Does not exist
|
Does not exist
|
Ignored
|
Does not exist
|
— | ||
| linux-oem-6.0 |
Does not exist
|
Does not exist
|
Does not exist
|
Does not exist
|
Ignored
|
Does not exist
|
— | ||
| linux-oem-6.1 |
Does not exist
|
Does not exist
|
Does not exist
|
Does not exist
|
Needed
|
Does not exist
|
— | ||
| linux-oem-osp1 |
Does not exist
|
Does not exist
|
Ignored
|
Does not exist
|
Does not exist
|
Does not exist
|
— | ||
| linux-raspi |
Does not exist
|
Does not exist
|
Does not exist
|
Needed
|
Needed
|
Needed
|
— | ||
| linux-raspi2 |
Does not exist
|
Ignored
|
Ignored
|
Ignored
|
Does not exist
|
Does not exist
|
— | ||
| linux-raspi2-5.3 |
Does not exist
|
Does not exist
|
Ignored
|
Does not exist
|
Does not exist
|
Does not exist
|
— | ||
| linux-raspi-5.4 |
Does not exist
|
Does not exist
|
Needed
|
Does not exist
|
Does not exist
|
Does not exist
|
— | ||
| linux-riscv |
Does not exist
|
Does not exist
|
Does not exist
|
Ignored
|
Ignored
|
Needed
|
— | ||
| linux-riscv-5.8 |
Does not exist
|
Does not exist
|
Does not exist
|
Ignored
|
Does not exist
|
Does not exist
|
— | ||
| linux-riscv-5.11 |
Does not exist
|
Does not exist
|
Does not exist
|
Ignored
|
Does not exist
|
Does not exist
|
— | ||
| linux-riscv-5.15 |
Does not exist
|
Does not exist
|
Does not exist
|
Needed
|
Does not exist
|
Does not exist
|
— | ||
| linux-riscv-5.19 |
Does not exist
|
Does not exist
|
Does not exist
|
Does not exist
|
Ignored
|
Does not exist
|
— | ||
| linux-snapdragon |
Does not exist
|
Ignored
|
Ignored
|
Does not exist
|
Does not exist
|
Does not exist
|
— | ||
| linux-starfive |
Does not exist
|
Does not exist
|
Does not exist
|
Does not exist
|
Does not exist
|
Needed
|
— | ||
| linux-starfive-5.19 |
Does not exist
|
Does not exist
|
Does not exist
|
Does not exist
|
Ignored
|
Does not exist
|
— | ||
| linux-xilinx-zynqmp |
Does not exist
|
Does not exist
|
Does not exist
|
Needed
|
Ignored
|
Does not exist
|
— | ||
| linux-azure-6.2 |
Does not exist
|
Does not exist
|
Does not exist
|
Does not exist
|
Needed
|
Does not exist
|
— | ||
| linux-azure-fde-6.2 |
Does not exist
|
Does not exist
|
Does not exist
|
Does not exist
|
Needed
|
Does not exist
|
— | ||
| linux |
Not vulnerable
|
Needed
|
Needed
|
Needed
|
Needed
|
Needed
|
— | ||
| linux-aws |
Needed
|
Needed
|
Needed
|
Needed
|
Needed
|
Needed
|
— | ||
| CVE-2023-41000 |
medium
|
gpac |
Needs triage
|
Needs triage
|
Needs triage
|
Needs triage
|
Needs triage
|
Needs triage
|
— |
| CVE-2023-4582 |
negligible
|
firefox |
Ignored
|
Ignored
|
Ignored
|
Ignored
|
Ignored
|
Ignored
|
— |
| thunderbird |
Ignored
|
Ignored
|
Ignored
|
Ignored
|
Ignored
|
Ignored
|
— | ||
| mozjs38 |
Does not exist
|
Does not exist
|
Ignored
|
Does not exist
|
Does not exist
|
Does not exist
|
— | ||
| mozjs52 |
Does not exist
|
Does not exist
|
Ignored
|
Ignored
|
Does not exist
|
Does not exist
|
— | ||
| mozjs68 |
Does not exist
|
Does not exist
|
Does not exist
|
Ignored
|
Does not exist
|
Does not exist
|
— | ||
| mozjs78 |
Does not exist
|
Does not exist
|
Does not exist
|
Does not exist
|
Ignored
|
Ignored
|
— | ||
| mozjs91 |
Does not exist
|
Does not exist
|
Does not exist
|
Does not exist
|
Ignored
|
Does not exist
|
— | ||
| mozjs102 |
Does not exist
|
Does not exist
|
Does not exist
|
Does not exist
|
Ignored
|
Ignored
|
— | ||
| CVE-2023-4576 |
negligible
|
firefox |
Ignored
|
Ignored
|
Ignored
|
Ignored
|
Ignored
|
Ignored
|
— |
| thunderbird |
Ignored
|
Ignored
|
Ignored
|
Ignored
|
Ignored
|
Ignored
|
— | ||
| mozjs38 |
Does not exist
|
Does not exist
|
Ignored
|
Does not exist
|
Does not exist
|
Does not exist
|
— | ||
| mozjs52 |
Does not exist
|
Does not exist
|
Ignored
|
Ignored
|
Does not exist
|
Does not exist
|
— | ||
| mozjs68 |
Does not exist
|
Does not exist
|
Does not exist
|
Ignored
|
Does not exist
|
Does not exist
|
— | ||
| mozjs78 |
Does not exist
|
Does not exist
|
Does not exist
|
Does not exist
|
Ignored
|
Ignored
|
— | ||
| mozjs91 |
Does not exist
|
Does not exist
|
Does not exist
|
Does not exist
|
Ignored
|
Does not exist
|
— | ||
| mozjs102 |
Does not exist
|
Does not exist
|
Does not exist
|
Does not exist
|
Ignored
|
Ignored
|
— | ||
| CVE-2023-4104 |
medium
|
mozillavpn |
Ignored
|
Ignored
|
Ignored
|
Does not exist
|
Needs triage
|
Does not exist
|
— |
| CVE-2023-4638 |
medium
|
gitlab |
Ignored
|
Needs triage
|
Ignored
|
Does not exist
|
Does not exist
|
Does not exist
|
— |
| CVE-2023-4630 |
medium
|
gitlab |
Ignored
|
Needs triage
|
Ignored
|
Does not exist
|
Does not exist
|
Does not exist
|
— |
| CVE-2023-42467 |
medium
|
qemu |
Needs triage
|
Needs triage
|
Needs triage
|
Needs triage
|
Needs triage
|
Needs triage
|
— |
| CVE-2023-40325 |
medium
|
moodle |
Ignored
|
Needs triage
|
Needs triage
|
Does not exist
|
Does not exist
|
Does not exist
|
— |
| CVE-2023-40324 |
medium
|
moodle |
Ignored
|
Needs triage
|
Needs triage
|
Does not exist
|
Does not exist
|
Does not exist
|
— |
| CVE-2023-40323 |
medium
|
moodle |
Ignored
|
Needs triage
|
Needs triage
|
Does not exist
|
Does not exist
|
Does not exist
|
— |
| CVE-2023-40322 |
medium
|
moodle |
Ignored
|
Needs triage
|
Needs triage
|
Does not exist
|
Does not exist
|
Does not exist
|
— |
| CVE-2023-40321 |
medium
|
moodle |
Ignored
|
Needs triage
|
Needs triage
|
Does not exist
|
Does not exist
|
Does not exist
|
— |
| CVE-2023-40320 |
medium
|
moodle |
Ignored
|
Needs triage
|
Needs triage
|
Does not exist
|
Does not exist
|
Does not exist
|
— |
| CVE-2023-40319 |
medium
|
moodle |
Ignored
|
Needs triage
|
Needs triage
|
Does not exist
|
Does not exist
|
Does not exist
|
— |
| CVE-2023-40318 |
medium
|
moodle |
Ignored
|
Needs triage
|
Needs triage
|
Does not exist
|
Does not exist
|
Does not exist
|
— |
| CVE-2023-40317 |
medium
|
moodle |
Ignored
|
Needs triage
|
Needs triage
|
Does not exist
|
Does not exist
|
Does not exist
|
— |
| CVE-2023-40316 |
medium
|
moodle |
Ignored
|
Needs triage
|
Needs triage
|
Does not exist
|
Does not exist
|
Does not exist
|
— |
| CVE-2023-38104 |
medium
|
gst-plugins-ugly0.10 |
Ignored
|
Ignored
|
Ignored
|
Does not exist
|
Does not exist
|
Does not exist
|
— |
| gst-plugins-ugly1.0 |
Ignored
|
Needs triage
|
Needs triage
|
Needs triage
|
Needs triage
|
Needs triage
|
— |