Search CVE reports


Toggle filters

1771 – 1780 of 3098 results


CVE-2018-9519

Medium priority
Not affected

In easelcomm_hw_build_scatterlist, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privilege with System privileges required. User interaction is not needed for exploitation....

24 affected packages

linux, linux-aws, linux-azure, linux-azure-edge, linux-euclid...

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
linux — — — — Not affected
linux-aws — — — — Not affected
linux-azure — — — — Not affected
linux-azure-edge — — — — Not affected
linux-euclid — — — — Not in release
linux-flo — — — — Not in release
linux-gcp — — — — Not affected
linux-gke — — — — Not in release
linux-goldfish — — — — Not in release
linux-grouper — — — — Not in release
linux-hwe — — — — Not affected
linux-hwe-edge — — — — Not affected
linux-kvm — — — — Not affected
linux-lts-trusty — — — — Not in release
linux-lts-utopic — — — — Not in release
linux-lts-vivid — — — — Not in release
linux-lts-wily — — — — Not in release
linux-lts-xenial — — — — Not in release
linux-maguro — — — — Not in release
linux-mako — — — — Not in release
linux-manta — — — — Not in release
linux-oem — — — — Not affected
linux-raspi2 — — — — Not affected
linux-snapdragon — — — — Not affected
Show all 24 packages Show less packages

CVE-2018-9517

Medium priority

Some fixes available 13 of 15

In pppol2tp_connect, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product:...

96 affected packages

linux-aws-fips, linux-azure-fips, linux-gcp-fips, linux, linux-aws...

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
linux-aws-fips — Not in release Not affected Not affected Not affected
linux-azure-fips — Not in release Not affected Not affected Not affected
linux-gcp-fips — Not in release Not affected Not affected Not affected
linux — Not affected Not affected Not affected Not affected
linux-aws — Not affected Not affected Not affected Not affected
linux-aws-5.15 — Not in release Not in release Not affected Not in release
linux-aws-5.4 — Not in release Not in release Not in release Not affected
linux-aws-6.14 — Not affected Not in release Not in release Not in release
linux-aws-6.8 — Not in release Not affected Not in release Not in release
linux-aws-hwe — Not in release Not in release Not in release Not in release
linux-azure — Not affected Not affected Not affected Not affected
linux-azure-4.15 — Not in release Not in release Not in release Not affected
linux-azure-5.15 — Not in release Not in release Not affected Not in release
linux-azure-5.4 — Not in release Not in release Not in release Not affected
linux-azure-6.11 — Ignored Not in release Not in release Not in release
linux-azure-6.8 — Not in release Not affected Not in release Not in release
linux-azure-edge — Not in release Not in release Not in release Not affected
linux-azure-fde — Not affected Not affected Ignored Not in release
linux-azure-fde-5.15 — Not in release Not in release Not affected Not in release
linux-azure-nvidia — Not affected Not in release Not in release Not in release
linux-bluefield — Not in release Not in release Not affected Not in release
linux-euclid — — — — Not in release
linux-fips — Not in release Not affected Not affected Not affected
linux-flo — — — — Not in release
linux-gcp — Not affected Not affected Not affected Not affected
linux-gcp-4.15 — Not in release Not in release Not in release Not affected
linux-gcp-5.15 — Not in release Not in release Not affected Not in release
linux-gcp-5.4 — Not in release Not in release Not in release Not affected
linux-gcp-6.11 — Ignored Not in release Not in release Not in release
linux-gcp-6.14 — Not affected Not in release Not in release Not in release
linux-gcp-6.8 — Not in release Not affected Not in release Not in release
linux-gcp-edge — — — — Not affected
linux-gke — Not affected Not affected Ignored Not in release
linux-gkeop — Not affected Not affected Not affected Not in release
linux-gkeop-5.15 — Not in release Not in release Not affected Not in release
linux-goldfish — — — — Not in release
linux-grouper — — — — Not in release
linux-hwe — Not in release Not in release Not in release Not affected
linux-hwe-5.15 — Not in release Not in release Not affected Not in release
linux-hwe-5.4 — Not in release Not in release Not in release Not affected
linux-hwe-6.11 — Ignored Not in release Not in release Not in release
linux-hwe-6.14 — Not affected Not in release Not in release Not in release
linux-hwe-6.8 — Not in release Not affected Not in release Not in release
linux-hwe-edge — Not in release Not in release Not in release Not affected
linux-ibm — Not affected Not affected Not affected Not in release
linux-ibm-5.15 — Not in release Not in release Not affected Not in release
linux-ibm-5.4 — Not in release Not in release Not in release Not affected
linux-ibm-6.8 — Not in release Not affected Not in release Not in release
linux-intel — Not affected Not in release Not in release Not in release
linux-intel-iot-realtime — Not in release Not affected Not in release Not in release
linux-intel-iotg — Not in release Not affected Not in release Not in release
linux-intel-iotg-5.15 — Not in release Not in release Not affected Not in release
linux-iot — Not in release Not in release Not affected Not in release
linux-kvm — Not in release Not affected Not affected Not affected
linux-lowlatency — Not affected Not affected Not in release Not in release
linux-lowlatency-hwe-5.15 — Not in release Not in release Not affected Not in release
linux-lowlatency-hwe-6.11 — Ignored Not in release Not in release Not in release
linux-lowlatency-hwe-6.8 — Not in release Not affected Not in release Not in release
linux-lts-trusty — — — — Not in release
linux-lts-utopic — — — — Not in release
linux-lts-vivid — — — — Not in release
linux-lts-wily — — — — Not in release
linux-lts-xenial — Not in release Not in release Not in release Not in release
linux-maguro — — — — Not in release
linux-mako — — — — Not in release
linux-manta — — — — Not in release
linux-nvidia — Not affected Not affected Not in release Not in release
linux-nvidia-6.11 — Not affected Not in release Not in release Not in release
linux-nvidia-6.5 — Not in release Not affected Not in release Not in release
linux-nvidia-6.8 — Not in release Not affected Not in release Not in release
linux-nvidia-lowlatency — Not affected Not in release Not in release Not in release
linux-nvidia-tegra — Not affected Not affected Not in release Not in release
linux-nvidia-tegra-5.15 — Not in release Not in release Not affected Not in release
linux-nvidia-tegra-igx — Not in release Not affected Not in release Not in release
linux-oem — Not in release Not in release Not in release Not affected
linux-oem-6.11 — Not affected Not in release Not in release Not in release
linux-oem-6.14 — Not affected Not in release Not in release Not in release
linux-oem-6.8 — Not affected Not in release Not in release Not in release
linux-oracle — Not affected Not affected Not affected Not affected
linux-oracle-5.15 — Not in release Not in release Not affected Not in release
linux-oracle-5.4 — Not in release Not in release Not in release Not affected
linux-oracle-6.14 — Not affected Not in release Not in release Not in release
linux-oracle-6.8 — Not in release Not affected Not in release Not in release
linux-raspi — Not affected Not affected Not affected Not in release
linux-raspi-5.4 — Not in release Not in release Not in release Not affected
linux-raspi-realtime — Not affected Not in release Not in release Not in release
linux-raspi2 — Not in release Not in release Ignored Not affected
linux-realtime — Not affected Not affected Not in release Not in release
linux-realtime-6.14 — Not affected Not in release Not in release Not in release
linux-realtime-6.8 — Not in release Not affected Not in release Not in release
linux-riscv — Not affected Ignored Ignored Not in release
linux-riscv-5.15 — Not in release Not in release Not affected Not in release
linux-riscv-6.14 — Not affected Not in release Not in release Not in release
linux-riscv-6.8 — Not in release Not affected Not in release Not in release
linux-snapdragon — Not in release Not in release Not in release Fixed
linux-xilinx-zynqmp — Not in release Not affected Not affected Not in release
Show all 96 packages Show less packages

CVE-2018-9568

Medium priority

Some fixes available 13 of 15

In sk_clone_lock of sock.c, there is a possible memory corruption due to type confusion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed...

78 affected packages

linux-aws-fips, linux-azure-fips, linux-gcp-fips, linux, linux-aws...

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
linux-aws-fips — Not in release Not affected Not affected Not affected
linux-azure-fips — Not in release Not affected Not affected Not affected
linux-gcp-fips — Not in release Not affected Not affected Not affected
linux — Not affected Not affected Not affected Not affected
linux-aws — Not affected Not affected Not affected Not affected
linux-aws-5.15 — Not in release Not in release Not affected Not in release
linux-aws-5.4 — Not in release Not in release Not in release Not affected
linux-aws-6.8 — Not in release Not affected Not in release Not in release
linux-aws-hwe — Not in release Not in release Not in release Not in release
linux-azure — Not affected Not affected Not affected Not affected
linux-azure-4.15 — Not in release Not in release Not in release Not affected
linux-azure-5.15 — Not in release Not in release Not affected Not in release
linux-azure-5.4 — Not in release Not in release Not in release Not affected
linux-azure-6.8 — Not in release Not affected Not in release Not in release
linux-azure-edge — Not in release Not in release Not in release Not affected
linux-azure-fde — Not affected Not affected Ignored Not in release
linux-azure-fde-5.15 — Not in release Not in release Not affected Not in release
linux-bluefield — Not in release Not in release Not affected Not in release
linux-euclid — — — — Not in release
linux-fips — Not in release Not affected Not affected Not affected
linux-flo — — — — Not in release
linux-gcp — Not affected Not affected Not affected Not affected
linux-gcp-4.15 — Not in release Not in release Not in release Not affected
linux-gcp-5.15 — Not in release Not in release Not affected Not in release
linux-gcp-5.4 — Not in release Not in release Not in release Not affected
linux-gcp-6.8 — Not in release Not affected Not in release Not in release
linux-gcp-edge — — — — Not affected
linux-gke — Not affected Not affected Ignored Not in release
linux-gkeop — Not affected Not affected Not affected Not in release
linux-gkeop-5.15 — Not in release Not in release Not affected Not in release
linux-goldfish — — — — Not in release
linux-grouper — — — — Not in release
linux-hwe — Not in release Not in release Not in release Not affected
linux-hwe-5.15 — Not in release Not in release Not affected Not in release
linux-hwe-5.4 — Not in release Not in release Not in release Not affected
linux-hwe-6.8 — Not in release Not affected Not in release Not in release
linux-hwe-edge — Not in release Not in release Not in release Not affected
linux-ibm — Not affected Not affected Not affected Not in release
linux-ibm-5.15 — Not in release Not in release Not affected Not in release
linux-ibm-5.4 — Not in release Not in release Not in release Not affected
linux-intel — Not affected Not in release Not in release Not in release
linux-intel-iot-realtime — Not in release Not affected Not in release Not in release
linux-intel-iotg — Not in release Not affected Not in release Not in release
linux-intel-iotg-5.15 — Not in release Not in release Not affected Not in release
linux-iot — Not in release Not in release Not affected Not in release
linux-kvm — Not in release Not affected Not affected Not affected
linux-lowlatency — Not affected Not affected Not in release Not in release
linux-lowlatency-hwe-5.15 — Not in release Not in release Not affected Not in release
linux-lowlatency-hwe-6.8 — Not in release Not affected Not in release Not in release
linux-lts-trusty — — — — Not in release
linux-lts-utopic — — — — Not in release
linux-lts-vivid — — — — Not in release
linux-lts-wily — — — — Not in release
linux-lts-xenial — Not in release Not in release Not in release Not in release
linux-maguro — — — — Not in release
linux-mako — — — — Not in release
linux-manta — — — — Not in release
linux-nvidia — Not affected Not affected Not in release Not in release
linux-nvidia-6.5 — Not in release Not affected Not in release Not in release
linux-nvidia-6.8 — Not in release Not affected Not in release Not in release
linux-nvidia-lowlatency — Not affected Not in release Not in release Not in release
linux-oem — Not in release Not in release Not in release Not affected
linux-oem-6.11 — Not affected Not in release Not in release Not in release
linux-oem-6.8 — Not affected Not in release Not in release Not in release
linux-oracle — Not affected Not affected Not affected Not affected
linux-oracle-5.15 — Not in release Not in release Not affected Not in release
linux-oracle-5.4 — Not in release Not in release Not in release Not affected
linux-oracle-6.8 — Not in release Not affected Not in release Not in release
linux-raspi — Not affected Not affected Not affected Not in release
linux-raspi-5.4 — Not in release Not in release Not in release Not affected
linux-raspi-realtime — Not affected Not in release Not in release Not in release
linux-raspi2 — Not in release Not in release Ignored Not affected
linux-realtime — Not affected Not affected Not in release Not in release
linux-riscv — Not affected Ignored Ignored Not in release
linux-riscv-5.15 — Not in release Not in release Not affected Not in release
linux-riscv-6.8 — Not in release Not affected Not in release Not in release
linux-snapdragon — Not in release Not in release Not in release Not affected
linux-xilinx-zynqmp — Not in release Not affected Not affected Not in release
Show all 78 packages Show less packages

CVE-2018-19854

Medium priority
Fixed

An issue was discovered in the Linux kernel before 4.19.3. crypto_report_one() and related functions in crypto/crypto_user.c (the crypto user configuration API) do not fully initialize structures that are copied to userspace,...

27 affected packages

linux, linux-aws, linux-aws-hwe, linux-azure, linux-azure-edge...

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
linux — — — — Fixed
linux-aws — — — — Fixed
linux-aws-hwe — — — — Not in release
linux-azure — — — — Fixed
linux-azure-edge — — — — Fixed
linux-euclid — — — — Not in release
linux-flo — — — — Not in release
linux-gcp — — — — Fixed
linux-gcp-edge — — — — Fixed
linux-gke — — — — Not in release
linux-goldfish — — — — Not in release
linux-grouper — — — — Not in release
linux-hwe — — — — Fixed
linux-hwe-edge — — — — Not affected
linux-kvm — — — — Fixed
linux-lts-trusty — — — — Not in release
linux-lts-utopic — — — — Not in release
linux-lts-vivid — — — — Not in release
linux-lts-wily — — — — Not in release
linux-lts-xenial — — — — Not in release
linux-maguro — — — — Not in release
linux-mako — — — — Not in release
linux-manta — — — — Not in release
linux-oem — — — — Fixed
linux-oracle — — — — Fixed
linux-raspi2 — — — — Fixed
linux-snapdragon — — — — Not affected
Show all 27 packages Show less packages

CVE-2018-19824

Low priority

Some fixes available 36 of 38

In the Linux kernel through 4.19.6, a local user could exploit a use-after-free in the ALSA driver by supplying a malicious USB Sound device (with zero interfaces) that is mishandled in usb_audio_probe in sound/usb/card.c.

78 affected packages

linux-aws-fips, linux-azure-fips, linux-gcp-fips, linux, linux-aws...

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
linux-aws-fips — Not in release Not affected Not affected Not affected
linux-azure-fips — Not in release Not affected Not affected Not affected
linux-gcp-fips — Not in release Not affected Not affected Not affected
linux — Not affected Not affected Not affected Fixed
linux-aws — Not affected Not affected Not affected Fixed
linux-aws-5.15 — Not in release Not in release Not affected Not in release
linux-aws-5.4 — Not in release Not in release Not in release Not affected
linux-aws-6.8 — Not in release Not affected Not in release Not in release
linux-aws-hwe — Not in release Not in release Not in release Not in release
linux-azure — Not affected Not affected Not affected Fixed
linux-azure-4.15 — Not in release Not in release Not in release Not affected
linux-azure-5.15 — Not in release Not in release Not affected Not in release
linux-azure-5.4 — Not in release Not in release Not in release Not affected
linux-azure-6.8 — Not in release Not affected Not in release Not in release
linux-azure-edge — Not in release Not in release Not in release Fixed
linux-azure-fde — Not affected Not affected Ignored Not in release
linux-azure-fde-5.15 — Not in release Not in release Not affected Not in release
linux-bluefield — Not in release Not in release Not affected Not in release
linux-euclid — — — — Not in release
linux-fips — Not in release Not affected Not affected Not affected
linux-flo — — — — Not in release
linux-gcp — Not affected Not affected Not affected Fixed
linux-gcp-4.15 — Not in release Not in release Not in release Not affected
linux-gcp-5.15 — Not in release Not in release Not affected Not in release
linux-gcp-5.4 — Not in release Not in release Not in release Not affected
linux-gcp-6.8 — Not in release Not affected Not in release Not in release
linux-gcp-edge — — — — Fixed
linux-gke — Not affected Not affected Ignored Not in release
linux-gkeop — Not affected Not affected Not affected Not in release
linux-gkeop-5.15 — Not in release Not in release Not affected Not in release
linux-goldfish — — — — Not in release
linux-grouper — — — — Not in release
linux-hwe — Not in release Not in release Not in release Fixed
linux-hwe-5.15 — Not in release Not in release Not affected Not in release
linux-hwe-5.4 — Not in release Not in release Not in release Not affected
linux-hwe-6.8 — Not in release Not affected Not in release Not in release
linux-hwe-edge — Not in release Not in release Not in release Not affected
linux-ibm — Not affected Not affected Not affected Not in release
linux-ibm-5.15 — Not in release Not in release Not affected Not in release
linux-ibm-5.4 — Not in release Not in release Not in release Not affected
linux-intel — Not affected Not in release Not in release Not in release
linux-intel-iot-realtime — Not in release Not affected Not in release Not in release
linux-intel-iotg — Not in release Not affected Not in release Not in release
linux-intel-iotg-5.15 — Not in release Not in release Not affected Not in release
linux-iot — Not in release Not in release Not affected Not in release
linux-kvm — Not in release Not affected Not affected Fixed
linux-lowlatency — Not affected Not affected Not in release Not in release
linux-lowlatency-hwe-5.15 — Not in release Not in release Not affected Not in release
linux-lowlatency-hwe-6.8 — Not in release Not affected Not in release Not in release
linux-lts-trusty — — — — Not in release
linux-lts-utopic — — — — Not in release
linux-lts-vivid — — — — Not in release
linux-lts-wily — — — — Not in release
linux-lts-xenial — Not in release Not in release Not in release Not in release
linux-maguro — — — — Not in release
linux-mako — — — — Not in release
linux-manta — — — — Not in release
linux-nvidia — Not affected Not affected Not in release Not in release
linux-nvidia-6.5 — Not in release Not affected Not in release Not in release
linux-nvidia-6.8 — Not in release Not affected Not in release Not in release
linux-nvidia-lowlatency — Not affected Not in release Not in release Not in release
linux-oem — Not in release Not in release Not in release Fixed
linux-oem-6.11 — Not affected Not in release Not in release Not in release
linux-oem-6.8 — Not affected Not in release Not in release Not in release
linux-oracle — Not affected Not affected Not affected Fixed
linux-oracle-5.15 — Not in release Not in release Not affected Not in release
linux-oracle-5.4 — Not in release Not in release Not in release Not affected
linux-oracle-6.8 — Not in release Not affected Not in release Not in release
linux-raspi — Not affected Not affected Not affected Not in release
linux-raspi-5.4 — Not in release Not in release Not in release Not affected
linux-raspi-realtime — Not affected Not in release Not in release Not in release
linux-raspi2 — Not in release Not in release Ignored Fixed
linux-realtime — Not affected Not affected Not in release Not in release
linux-riscv — Not affected Ignored Ignored Not in release
linux-riscv-5.15 — Not in release Not in release Not affected Not in release
linux-riscv-6.8 — Not in release Not affected Not in release Not in release
linux-snapdragon — Not in release Not in release Not in release Fixed
linux-xilinx-zynqmp — Not in release Not affected Not affected Not in release
Show all 78 packages Show less packages

CVE-2018-14646

Medium priority
Not affected

The Linux kernel before 4.15-rc8 was found to be vulnerable to a NULL pointer dereference bug in the __netlink_ns_capable() function in the net/netlink/af_netlink.c file. A local attacker could exploit this when a net namespace...

24 affected packages

linux, linux-aws, linux-azure, linux-azure-edge, linux-euclid...

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
linux — — — — Not affected
linux-aws — — — — Not affected
linux-azure — — — — Not affected
linux-azure-edge — — — — Not affected
linux-euclid — — — — Not in release
linux-flo — — — — Not in release
linux-gcp — — — — Not affected
linux-gke — — — — Not in release
linux-goldfish — — — — Not in release
linux-grouper — — — — Not in release
linux-hwe — — — — Not affected
linux-hwe-edge — — — — Not affected
linux-kvm — — — — Not affected
linux-lts-trusty — — — — Not in release
linux-lts-utopic — — — — Not in release
linux-lts-vivid — — — — Not in release
linux-lts-wily — — — — Not in release
linux-lts-xenial — — — — Not in release
linux-maguro — — — — Not in release
linux-mako — — — — Not in release
linux-manta — — — — Not in release
linux-oem — — — — Not affected
linux-raspi2 — — — — Not affected
linux-snapdragon — — — — Not affected
Show all 24 packages Show less packages

CVE-2018-16862

Low priority

Some fixes available 34 of 44

A security flaw was found in the Linux kernel in a way that the cleancache subsystem clears an inode after the final file truncation (removal). The new file created with the same inode may contain leftover pages from cleancache...

124 affected packages

linux-gke, linux-aws-fips, linux-azure-fips, linux-gcp-fips, linux-xilinx...

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
linux-gke Not affected Not affected Not affected Ignored Not in release
linux-aws-fips Not in release Not affected Not affected Not affected Fixed
linux-azure-fips Not in release Not affected Not affected Not affected Fixed
linux-gcp-fips Not in release Not affected Not affected Not affected Not affected
linux-xilinx Not in release Not affected Not in release Not in release Not in release
linux-nvidia-bos Not affected Not in release Not in release Not in release Not in release
linux-nvidia-7.0 Not in release Not affected Not in release Not in release Not in release
linux-hwe-7.0 Not in release Not affected Not in release Not in release Not in release
linux-oem-7.0 Not affected Not in release Not in release Not in release Not in release
linux-aws-7.0 Not in release Not affected Not in release Not in release Not in release
linux-riscv-7.0 Not in release Not affected Not in release Not in release Not in release
linux-azure-7.0 Not in release Not affected Not in release Not in release Not in release
linux-azure-fde-7.0 Not in release Not affected Not in release Not in release Not in release
linux-gcp-7.0 Not in release Not affected Not in release Not in release Not in release
linux-oracle-7.0 Not in release Not affected Not in release Not in release Not in release
linux Not affected Not affected Not affected Not affected Fixed
linux-aws Not affected Not affected Not affected Not affected Fixed
linux-aws-5.15 Not in release Not in release Not in release Not affected Not in release
linux-aws-5.4 Not in release Not in release Not in release Not in release Not affected
linux-aws-6.14 Not in release Not affected Not in release Not in release Not in release
linux-aws-6.17 Not in release Not affected Not in release Not in release Not in release
linux-aws-6.8 Not in release Not in release Not affected Not in release Not in release
linux-aws-hwe Not in release Not in release Not in release Not in release Not in release
linux-azure Not affected Not affected Not affected Not affected Fixed
linux-azure-4.15 Not in release Not in release Not in release Not in release Not affected
linux-azure-5.15 Not in release Not in release Not in release Not affected Not in release
linux-azure-5.4 Not in release Not in release Not in release Not in release Not affected
linux-azure-6.11 Not in release Not affected Not in release Not in release Not in release
linux-azure-6.14 Not in release Not affected Not in release Not in release Not in release
linux-azure-6.17 Not in release Not affected Not in release Not in release Not in release
linux-azure-6.8 Not in release Not in release Not affected Not in release Not in release
linux-azure-edge Not in release Not in release Not in release Not in release Fixed
linux-azure-fde Not affected Not affected Not affected Ignored Not in release
linux-azure-fde-5.15 Not in release Not in release Not in release Not affected Not in release
linux-azure-fde-6.14 Not in release Not affected Not in release Not in release Not in release
linux-azure-fde-6.17 Not in release Not affected Not in release Not in release Not in release
linux-azure-fde-6.8 Not in release Not in release Not affected Not in release Not in release
linux-azure-nvidia Not in release Not affected Not in release Not in release Not in release
linux-azure-nvidia-6.14 Not in release Not affected Not in release Not in release Not in release
linux-bluefield Not in release Not in release Not in release Not affected Not in release
linux-euclid — — — — Not in release
linux-fips Not in release Not affected Not affected Not affected Fixed
linux-flo — — — — Not in release
linux-gcp Not affected Not affected Not affected Not affected Fixed
linux-gcp-4.15 Not in release Not in release Not in release Not in release Not affected
linux-gcp-5.15 Not in release Not in release Not in release Not affected Not in release
linux-gcp-5.4 Not in release Not in release Not in release Not in release Not affected
linux-gcp-6.11 Not in release Not affected Not in release Not in release Not in release
linux-gcp-6.14 Not in release Not affected Not in release Not in release Not in release
linux-gcp-6.17 Not in release Not affected Not in release Not in release Not in release
linux-gcp-6.8 Not in release Not in release Not affected Not in release Not in release
linux-gcp-edge — — — — Fixed
linux-gke-4.15 Not in release Not in release Not in release Not in release Fixed
linux-gke-5.0 Not in release Not in release Not in release Not in release Not affected
linux-gkeop Not in release Not affected Not affected Not affected Not in release
linux-gkeop-5.15 Not in release Not in release Not in release Not affected Not in release
linux-goldfish — — — — Not in release
linux-grouper — — — — Not in release
linux-hwe Not in release Not in release Not in release Not in release Fixed
linux-hwe-5.15 Not in release Not in release Not in release Not affected Not in release
linux-hwe-5.4 Not in release Not in release Not in release Not in release Not affected
linux-hwe-6.11 Not in release Not affected Not in release Not in release Not in release
linux-hwe-6.14 Not in release Not affected Not in release Not in release Not in release
linux-hwe-6.17 Not in release Not affected Not in release Not in release Not in release
linux-hwe-6.8 Not in release Not in release Not affected Not in release Not in release
linux-hwe-edge Not in release Not in release Not in release Not in release Not affected
linux-ibm Not affected Not affected Not affected Not affected Not in release
linux-ibm-5.15 Not in release Not in release Not in release Not affected Not in release
linux-ibm-5.4 Not in release Not in release Not in release Not in release Not affected
linux-ibm-6.8 Not in release Not in release Not affected Not in release Not in release
linux-intel Not in release Not affected Not in release Not in release Not in release
linux-intel-iot-realtime Not in release Not in release Not affected Not in release Not in release
linux-intel-iotg Not in release Not in release Not affected Not in release Not in release
linux-intel-iotg-5.15 Not in release Not in release Not in release Not affected Not in release
linux-iot Not in release Not in release Not in release Not affected Not in release
linux-kvm Not in release Not in release Not affected Not affected Fixed
linux-lowlatency Not in release Not affected Not affected Not in release Not in release
linux-lowlatency-hwe-5.15 Not in release Not in release Not in release Not affected Not in release
linux-lowlatency-hwe-6.11 Not in release Not affected Not in release Not in release Not in release
linux-lowlatency-hwe-6.8 Not in release Not in release Not affected Not in release Not in release
linux-lts-trusty — — — — Not in release
linux-lts-utopic — — — — Not in release
linux-lts-vivid — — — — Not in release
linux-lts-wily — — — — Not in release
linux-lts-xenial Not in release Not in release Not in release Not in release Not in release
linux-maguro — — — — Not in release
linux-mako — — — — Not in release
linux-manta — — — — Not in release
linux-nvidia Not affected Not affected Not affected Not in release Not in release
linux-nvidia-6.11 Not in release Not affected Not in release Not in release Not in release
linux-nvidia-6.17 Not in release Not affected Not in release Not in release Not in release
linux-nvidia-6.5 Not in release Not in release Not affected Not in release Not in release
linux-nvidia-6.8 Not in release Not in release Not affected Not in release Not in release
linux-nvidia-bos-7.0 Not in release Not in release Not in release Not in release Not in release
linux-nvidia-lowlatency Not in release Not affected Not in release Not in release Not in release
linux-nvidia-tegra Not in release Not affected Not affected Not in release Not in release
linux-nvidia-tegra-5.15 Not in release Not in release Not in release Not affected Not in release
linux-nvidia-tegra-igx Not in release Not in release Not affected Not in release Not in release
linux-oem Not in release Not in release Not in release Not in release Fixed
linux-oem-6.11 Not in release Not affected Not in release Not in release Not in release
linux-oem-6.14 Not in release Not affected Not in release Not in release Not in release
linux-oem-6.17 Not in release Not affected Not in release Not in release Not in release
linux-oem-6.8 Not in release Not affected Not in release Not in release Not in release
linux-oracle Not affected Not affected Not affected Not affected Fixed
linux-oracle-5.15 Not in release Not in release Not in release Not affected Not in release
linux-oracle-5.4 Not in release Not in release Not in release Not in release Not affected
linux-oracle-6.14 Not in release Not affected Not in release Not in release Not in release
linux-oracle-6.17 Not in release Not affected Not in release Not in release Not in release
linux-oracle-6.8 Not in release Not in release Not affected Not in release Not in release
linux-raspi Not affected Not affected Not affected Not affected Not in release
linux-raspi-5.4 Not in release Not in release Not in release Not in release Not affected
linux-raspi-realtime Not in release Not affected Not in release Not in release Not in release
linux-raspi2 Not in release Not in release Not in release Ignored Fixed
linux-realtime Not affected Not affected Not affected Not in release Not in release
linux-realtime-6.14 Not in release Not affected Not in release Not in release Not in release
linux-realtime-6.17 Not in release Not affected Not in release Not in release Not in release
linux-realtime-6.8 Not in release Not in release Not affected Not in release Not in release
linux-riscv Not affected Not affected Ignored Ignored Not in release
linux-riscv-5.15 Not in release Not in release Not in release Not affected Not in release
linux-riscv-6.14 Not in release Not affected Not in release Not in release Not in release
linux-riscv-6.17 Not in release Not affected Not in release Not in release Not in release
linux-riscv-6.8 Not in release Not in release Not affected Not in release Not in release
linux-snapdragon Not in release Not in release Not in release Not in release Fixed
linux-xilinx-zynqmp Not in release Not in release Not affected Not affected Not in release
Show all 124 packages Show less packages

CVE-2018-19406

Medium priority
Not affected

kvm_pv_send_ipi in arch/x86/kvm/lapic.c in the Linux kernel through 4.19.2 allows local users to cause a denial of service (NULL pointer dereference and BUG) via crafted system calls that reach a situation where the apic map is...

24 affected packages

linux, linux-aws, linux-azure, linux-azure-edge, linux-euclid...

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
linux — — — — Not affected
linux-aws — — — — Not affected
linux-azure — — — — Not affected
linux-azure-edge — — — — Not affected
linux-euclid — — — — Not in release
linux-flo — — — — Not in release
linux-gcp — — — — Not affected
linux-gke — — — — Not in release
linux-goldfish — — — — Not in release
linux-grouper — — — — Not in release
linux-hwe — — — — Not affected
linux-hwe-edge — — — — Not affected
linux-kvm — — — — Not affected
linux-lts-trusty — — — — Not in release
linux-lts-utopic — — — — Not in release
linux-lts-vivid — — — — Not in release
linux-lts-wily — — — — Not in release
linux-lts-xenial — — — — Not in release
linux-maguro — — — — Not in release
linux-mako — — — — Not in release
linux-manta — — — — Not in release
linux-oem — — — — Not affected
linux-raspi2 — — — — Not affected
linux-snapdragon — — — — Not affected
Show all 24 packages Show less packages

CVE-2018-19407

Medium priority

Some fixes available 31 of 33

The vcpu_scan_ioapic function in arch/x86/kvm/x86.c in the Linux kernel through 4.19.2 allows local users to cause a denial of service (NULL pointer dereference and BUG) via crafted system calls that reach a situation where ioapic...

78 affected packages

linux-aws-fips, linux-azure-fips, linux-gcp-fips, linux, linux-aws...

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
linux-aws-fips — Not in release Not affected Not affected Not affected
linux-azure-fips — Not in release Not affected Not affected Not affected
linux-gcp-fips — Not in release Not affected Not affected Not affected
linux — Not affected Not affected Not affected Fixed
linux-aws — Not affected Not affected Not affected Fixed
linux-aws-5.15 — Not in release Not in release Not affected Not in release
linux-aws-5.4 — Not in release Not in release Not in release Not affected
linux-aws-6.8 — Not in release Not affected Not in release Not in release
linux-aws-hwe — Not in release Not in release Not in release Not in release
linux-azure — Not affected Not affected Not affected Fixed
linux-azure-4.15 — Not in release Not in release Not in release Not affected
linux-azure-5.15 — Not in release Not in release Not affected Not in release
linux-azure-5.4 — Not in release Not in release Not in release Not affected
linux-azure-6.8 — Not in release Not affected Not in release Not in release
linux-azure-edge — Not in release Not in release Not in release Fixed
linux-azure-fde — Not affected Not affected Ignored Not in release
linux-azure-fde-5.15 — Not in release Not in release Not affected Not in release
linux-bluefield — Not in release Not in release Not affected Not in release
linux-euclid — — — — Not in release
linux-fips — Not in release Not affected Not affected Not affected
linux-flo — — — — Not in release
linux-gcp — Not affected Not affected Not affected Fixed
linux-gcp-4.15 — Not in release Not in release Not in release Not affected
linux-gcp-5.15 — Not in release Not in release Not affected Not in release
linux-gcp-5.4 — Not in release Not in release Not in release Not affected
linux-gcp-6.8 — Not in release Not affected Not in release Not in release
linux-gcp-edge — — — — Fixed
linux-gke — Not affected Not affected Ignored Not in release
linux-gkeop — Not affected Not affected Not affected Not in release
linux-gkeop-5.15 — Not in release Not in release Not affected Not in release
linux-goldfish — — — — Not in release
linux-grouper — — — — Not in release
linux-hwe — Not in release Not in release Not in release Fixed
linux-hwe-5.15 — Not in release Not in release Not affected Not in release
linux-hwe-5.4 — Not in release Not in release Not in release Not affected
linux-hwe-6.8 — Not in release Not affected Not in release Not in release
linux-hwe-edge — Not in release Not in release Not in release Not affected
linux-ibm — Not affected Not affected Not affected Not in release
linux-ibm-5.15 — Not in release Not in release Not affected Not in release
linux-ibm-5.4 — Not in release Not in release Not in release Not affected
linux-intel — Not affected Not in release Not in release Not in release
linux-intel-iot-realtime — Not in release Not affected Not in release Not in release
linux-intel-iotg — Not in release Not affected Not in release Not in release
linux-intel-iotg-5.15 — Not in release Not in release Not affected Not in release
linux-iot — Not in release Not in release Not affected Not in release
linux-kvm — Not in release Not affected Not affected Fixed
linux-lowlatency — Not affected Not affected Not in release Not in release
linux-lowlatency-hwe-5.15 — Not in release Not in release Not affected Not in release
linux-lowlatency-hwe-6.8 — Not in release Not affected Not in release Not in release
linux-lts-trusty — — — — Not in release
linux-lts-utopic — — — — Not in release
linux-lts-vivid — — — — Not in release
linux-lts-wily — — — — Not in release
linux-lts-xenial — Not in release Not in release Not in release Not in release
linux-maguro — — — — Not in release
linux-mako — — — — Not in release
linux-manta — — — — Not in release
linux-nvidia — Not affected Not affected Not in release Not in release
linux-nvidia-6.5 — Not in release Not affected Not in release Not in release
linux-nvidia-6.8 — Not in release Not affected Not in release Not in release
linux-nvidia-lowlatency — Not affected Not in release Not in release Not in release
linux-oem — Not in release Not in release Not in release Fixed
linux-oem-6.11 — Not affected Not in release Not in release Not in release
linux-oem-6.8 — Not affected Not in release Not in release Not in release
linux-oracle — Not affected Not affected Not affected Not affected
linux-oracle-5.15 — Not in release Not in release Not affected Not in release
linux-oracle-5.4 — Not in release Not in release Not in release Not affected
linux-oracle-6.8 — Not in release Not affected Not in release Not in release
linux-raspi — Not affected Not affected Not affected Not in release
linux-raspi-5.4 — Not in release Not in release Not in release Not affected
linux-raspi-realtime — Not affected Not in release Not in release Not in release
linux-raspi2 — Not in release Not in release Ignored Fixed
linux-realtime — Not affected Not affected Not in release Not in release
linux-riscv — Not affected Ignored Ignored Not in release
linux-riscv-5.15 — Not in release Not in release Not affected Not in release
linux-riscv-6.8 — Not in release Not affected Not in release Not in release
linux-snapdragon — Not in release Not in release Not in release Not affected
linux-xilinx-zynqmp — Not in release Not affected Not affected Not in release
Show all 78 packages Show less packages

CVE-2018-18955

Medium priority
Fixed

In the Linux kernel 4.15.x through 4.19.x before 4.19.2, map_write() in kernel/user_namespace.c allows privilege escalation because it mishandles nested user namespaces with more than 5 UID or GID ranges. A user who...

27 affected packages

linux, linux-aws, linux-aws-hwe, linux-azure, linux-azure-edge...

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
linux — — — — Fixed
linux-aws — — — — Fixed
linux-aws-hwe — — — — Not in release
linux-azure — — — — Fixed
linux-azure-edge — — — — Fixed
linux-euclid — — — — Not in release
linux-flo — — — — Not in release
linux-gcp — — — — Fixed
linux-gcp-edge — — — — Not affected
linux-gke — — — — Not in release
linux-goldfish — — — — Not in release
linux-grouper — — — — Not in release
linux-hwe — — — — Not affected
linux-hwe-edge — — — — Not affected
linux-kvm — — — — Fixed
linux-lts-trusty — — — — Not in release
linux-lts-utopic — — — — Not in release
linux-lts-vivid — — — — Not in release
linux-lts-wily — — — — Not in release
linux-lts-xenial — — — — Not in release
linux-maguro — — — — Not in release
linux-mako — — — — Not in release
linux-manta — — — — Not in release
linux-oem — — — — Fixed
linux-oracle — — — — Not affected
linux-raspi2 — — — — Fixed
linux-snapdragon — — — — Not affected
Show all 27 packages Show less packages