Your submission was sent successfully! Close

You have successfully unsubscribed! Close

Thank you for signing up for our newsletter!
In these regular emails you will find the latest updates about Ubuntu and upcoming events where you can meet our team.Close

CVE-2019-19448

Published: 8 December 2019

In the Linux kernel 5.0.21 and 5.3.11, mounting a crafted btrfs filesystem image, performing some operations, and then making a syncfs system call can lead to a use-after-free in try_merge_free_space in fs/btrfs/free-space-cache.c because the pointer to a left data structure can be the same as the pointer to a right data structure.

From the Ubuntu Security Team

It was discovered that the btrfs file system in the Linux kernel contained a use-after-free vulnerability when merging free space. An attacker could use this to construct a malicious btrfs image that, when mounted and operated on, could cause a denial of service (system crash).

Notes

AuthorNote
tyhicks
Exploiting this vulnerability requires a crafted filesystem image to
be mounted
sbeattie
it's asserted that the btrfs enhanced tree-checker should
address this issue; this was backported to at least the 4.15 kernels.

Priority

Low

Cvss 3 Severity Score

7.8

Score breakdown

Status

Package Release Status
linux-gke
Launchpad, Ubuntu, Debian
xenial Ignored
(end of standard support)
bionic Does not exist

groovy Does not exist

trusty Does not exist

hirsute Does not exist

focal Not vulnerable
(5.4.0-1033.35)
upstream
Released (5.9~rc1)
impish Does not exist

jammy Not vulnerable
(5.15.0-1002.2)
kinetic Does not exist

lunar Does not exist

mantic Does not exist

linux-aws-5.8
Launchpad, Ubuntu, Debian
trusty Does not exist

bionic Does not exist

groovy Does not exist

hirsute Does not exist

xenial Does not exist

focal Not vulnerable
(5.8.0-1035.37~20.04.1)
upstream
Released (5.9~rc1)
impish Does not exist

lunar Does not exist

jammy Does not exist

kinetic Does not exist

mantic Does not exist

linux-azure-5.8
Launchpad, Ubuntu, Debian
bionic Does not exist

trusty Does not exist

xenial Does not exist

groovy Does not exist

hirsute Does not exist

focal Not vulnerable
(5.8.0-1033.35~20.04.1)
upstream
Released (5.9~rc1)
impish Does not exist

lunar Does not exist

jammy Does not exist

kinetic Does not exist

mantic Does not exist

linux-gcp-5.8
Launchpad, Ubuntu, Debian
bionic Does not exist

groovy Does not exist

trusty Does not exist

xenial Does not exist

hirsute Does not exist

focal Not vulnerable
(5.8.0-1032.34~20.04.1)
upstream
Released (5.9~rc1)
impish Does not exist

jammy Does not exist

kinetic Does not exist

lunar Does not exist

mantic Does not exist

linux-oracle-5.8
Launchpad, Ubuntu, Debian
bionic Does not exist

groovy Does not exist

trusty Does not exist

xenial Does not exist

hirsute Does not exist

focal Not vulnerable
(5.8.0-1031.32~20.04.2)
upstream
Released (5.9~rc1)
impish Does not exist

jammy Does not exist

kinetic Does not exist

lunar Does not exist

mantic Does not exist

linux-riscv-5.8
Launchpad, Ubuntu, Debian
bionic Does not exist

groovy Does not exist

hirsute Does not exist

trusty Does not exist

xenial Does not exist

focal Not vulnerable
(5.8.0-14.16~20.04.1)
upstream
Released (5.9~rc1)
impish Does not exist

jammy Does not exist

kinetic Does not exist

lunar Does not exist

mantic Does not exist

linux-hwe
Launchpad, Ubuntu, Debian
focal Does not exist

groovy Does not exist

impish Does not exist

jammy Does not exist

disco Does not exist

eoan Does not exist

trusty Does not exist

kinetic Does not exist

bionic Ignored
(replaced by linux-hwe-5.4, was needed)
hirsute Does not exist

lunar Does not exist

upstream
Released (5.9~rc1)
xenial
Released (4.15.0-120.122~16.04.1)
mantic Does not exist

linux-hwe-5.11
Launchpad, Ubuntu, Debian
focal Not vulnerable
(5.11.0-22.23~20.04.1)
upstream
Released (5.9~rc1)
bionic Does not exist

hirsute Does not exist

impish Does not exist

jammy Does not exist

kinetic Does not exist

lunar Does not exist

trusty Does not exist

xenial Does not exist

mantic Does not exist

linux-riscv-5.11
Launchpad, Ubuntu, Debian
focal Not vulnerable
(5.11.0-1015.16~20.04.1)
upstream
Released (5.9~rc1)
bionic Does not exist

hirsute Does not exist

impish Does not exist

jammy Does not exist

kinetic Does not exist

lunar Does not exist

trusty Does not exist

xenial Does not exist

mantic Does not exist

linux-oem-5.13
Launchpad, Ubuntu, Debian
bionic Does not exist

focal Not vulnerable
(5.13.0-1009.10)
hirsute Does not exist

trusty Does not exist

upstream
Released (5.9~rc1)
xenial Does not exist

impish Does not exist

jammy Does not exist

kinetic Does not exist

lunar Does not exist

mantic Does not exist

linux-aws-5.11
Launchpad, Ubuntu, Debian
bionic Does not exist

focal Not vulnerable
(5.11.0-1009.9~20.04.2)
upstream
Released (5.9~rc1)
impish Does not exist

jammy Does not exist

lunar Does not exist

hirsute Does not exist

kinetic Does not exist

trusty Does not exist

xenial Does not exist

mantic Does not exist

linux-azure-5.11
Launchpad, Ubuntu, Debian
focal Not vulnerable
(5.11.0-1007.7~20.04.2)
impish Does not exist

upstream
Released (5.9~rc1)
lunar Does not exist

bionic Does not exist

hirsute Does not exist

jammy Does not exist

kinetic Does not exist

trusty Does not exist

xenial Does not exist

mantic Does not exist

linux-oracle-5.11
Launchpad, Ubuntu, Debian
bionic Does not exist

hirsute Does not exist

xenial Does not exist

focal Not vulnerable
(5.11.0-1008.8~20.04.1)
impish Does not exist

jammy Does not exist

kinetic Does not exist

lunar Does not exist

trusty Does not exist

upstream
Released (5.9~rc1)
mantic Does not exist

linux-bluefield
Launchpad, Ubuntu, Debian
bionic Does not exist

hirsute Does not exist

trusty Does not exist

xenial Does not exist

focal Not vulnerable
(5.4.0-1007.10)
upstream
Released (5.9~rc1)
impish Does not exist

jammy Not vulnerable
(5.15.0-1011.13)
kinetic Does not exist

lunar Does not exist

mantic Does not exist

linux-nvidia
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

bionic Does not exist

focal Does not exist

jammy Not vulnerable

kinetic Does not exist

lunar Does not exist

upstream Needs triage

mantic Does not exist

linux
Launchpad, Ubuntu, Debian
bionic
Released (4.15.0-121.123)
impish Not vulnerable
(5.11.0-16.17)
hirsute Not vulnerable
(5.8.0-36.40+21.04.1)
jammy Not vulnerable
(5.13.0-19.19)
trusty Ignored
(ESM criteria, was needed)
disco Ignored
(end of life)
eoan Ignored
(end of life)
focal
Released (5.4.0-48.52)
groovy Not vulnerable
(5.8.0-18.19)
upstream
Released (5.9~rc1)
xenial
Released (4.4.0-190.220)
kinetic Not vulnerable
(5.15.0-25.25)
lunar Not vulnerable
(5.15.0-25.25)
mantic Not vulnerable
(5.15.0-25.25)
Patches:
Introduced by

963030817060e4f109be1993b9ae8f81dbf5e11a

Fixed by bf53d4687b8f3f6b752f091eb85f62369a515dfd
linux-aws
Launchpad, Ubuntu, Debian
impish Not vulnerable
(5.11.0-1006.6)
jammy Not vulnerable
(5.13.0-1005.6)
disco Ignored
(end of life)
eoan Ignored
(end of life)
trusty
Released (4.4.0-1078.82)
Available with Ubuntu Pro or Ubuntu Pro (Infra-only)
focal
Released (5.4.0-1025.25)
kinetic Not vulnerable
(5.15.0-1004.6)
lunar Not vulnerable
(5.15.0-1004.6)
bionic
Released (4.15.0-1086.91)
groovy Not vulnerable
(5.8.0-1004.4)
hirsute Not vulnerable
(5.8.0-1018.20+21.04.1)
upstream
Released (5.9~rc1)
xenial
Released (4.4.0-1114.127)
mantic Not vulnerable
(5.15.0-1004.6)
linux-aws-5.0
Launchpad, Ubuntu, Debian
impish Does not exist

jammy Does not exist

bionic Ignored
(superseded by linux-aws-5.3, was needs-triage)
disco Does not exist

eoan Does not exist

trusty Does not exist

xenial Does not exist

focal Does not exist

groovy Does not exist

kinetic Does not exist

lunar Does not exist

hirsute Does not exist

upstream
Released (5.9~rc1)
mantic Does not exist

linux-aws-hwe
Launchpad, Ubuntu, Debian
impish Does not exist

jammy Does not exist

bionic Does not exist

disco Does not exist

eoan Does not exist

focal Does not exist

groovy Does not exist

trusty Does not exist

kinetic Does not exist

lunar Does not exist

hirsute Does not exist

upstream
Released (5.9~rc1)
xenial
Released (4.15.0-1085.90~16.04.1)
mantic Does not exist

linux-azure
Launchpad, Ubuntu, Debian
impish Not vulnerable
(5.11.0-1004.4)
hirsute Not vulnerable
(5.8.0-1016.17+21.04.1)
jammy Not vulnerable
(5.13.0-1006.7)
bionic Ignored
(superseded by linux-azure-5.3, was needs-triage)
disco Ignored
(end of life)
eoan Ignored
(end of life)
kinetic Not vulnerable
(5.15.0-1003.4)
lunar Not vulnerable
(5.15.0-1003.4)
focal
Released (5.4.0-1026.26)
groovy Not vulnerable
(5.8.0-1004.4)
trusty
Released (4.15.0-1098.109~14.04.1)
Available with Ubuntu Pro or Ubuntu Pro (Infra-only)
upstream
Released (5.9~rc1)
xenial
Released (4.15.0-1098.109~16.04.1)
mantic Not vulnerable
(5.15.0-1003.4)
linux-azure-5.3
Launchpad, Ubuntu, Debian
impish Does not exist

jammy Does not exist

bionic Ignored
(superseded by linux-azure-5.4, was needs-triage)
disco Does not exist

kinetic Does not exist

lunar Does not exist

eoan Does not exist

focal Does not exist

groovy Does not exist

hirsute Does not exist

trusty Does not exist

upstream
Released (5.9~rc1)
xenial Does not exist

mantic Does not exist

linux-azure-edge
Launchpad, Ubuntu, Debian
impish Does not exist

jammy Does not exist

kinetic Does not exist

lunar Does not exist

disco Does not exist

eoan Does not exist

focal Does not exist

groovy Does not exist

hirsute Does not exist

trusty Does not exist

upstream
Released (5.9~rc1)
xenial Does not exist

mantic Does not exist

bionic Ignored
(superseded by linux-azure-5.3, was needs-triage)
linux-gcp
Launchpad, Ubuntu, Debian
impish Not vulnerable
(5.11.0-1006.6)
hirsute Not vulnerable
(5.8.0-1015.15+21.04.1)
jammy Not vulnerable
(5.13.0-1005.6)
kinetic Not vulnerable
(5.15.0-1003.6)
disco Ignored
(end of life)
eoan Ignored
(end of life)
focal
Released (5.4.0-1025.25)
groovy Not vulnerable
(5.8.0-1002.2)
lunar Not vulnerable
(5.15.0-1003.6)
trusty Does not exist

upstream
Released (5.9~rc1)
xenial
Released (4.15.0-1086.98~16.04.1)
mantic Not vulnerable
(5.15.0-1003.6)
bionic Ignored
(superseded by linux-gcp-5.3, was needs-triage)
linux-gcp-5.3
Launchpad, Ubuntu, Debian
impish Does not exist

jammy Does not exist

kinetic Does not exist

disco Does not exist

eoan Does not exist

focal Does not exist

groovy Does not exist

hirsute Does not exist

lunar Does not exist

trusty Does not exist

upstream
Released (5.9~rc1)
xenial Does not exist

mantic Does not exist

bionic Ignored
(superseded by linux-gcp-5.4, was needs-triage)
linux-gcp-edge
Launchpad, Ubuntu, Debian
impish Does not exist

jammy Does not exist

kinetic Does not exist

disco Does not exist

eoan Does not exist

focal Does not exist

groovy Does not exist

hirsute Does not exist

lunar Does not exist

trusty Does not exist

upstream
Released (5.9~rc1)
xenial Does not exist

mantic Does not exist

bionic Ignored
(end of kernel support, was needs-triage)
linux-gke-4.15
Launchpad, Ubuntu, Debian
impish Does not exist

jammy Does not exist

kinetic Does not exist

bionic
Released (4.15.0-1072.76)
disco Does not exist

eoan Does not exist

focal Does not exist

groovy Does not exist

hirsute Does not exist

lunar Does not exist

trusty Does not exist

upstream
Released (5.9~rc1)
xenial Does not exist

mantic Does not exist

linux-gke-5.0
Launchpad, Ubuntu, Debian
impish Does not exist

jammy Does not exist

kinetic Does not exist

bionic Ignored
(end of standard support, was needed)
disco Does not exist

eoan Does not exist

focal Does not exist

groovy Does not exist

hirsute Does not exist

lunar Does not exist

trusty Does not exist

upstream
Released (5.9~rc1)
xenial Does not exist

mantic Does not exist

linux-gke-5.3
Launchpad, Ubuntu, Debian
impish Does not exist

jammy Does not exist

kinetic Does not exist

bionic Ignored
(end of standard support, was needed)
eoan Does not exist

focal Does not exist

groovy Does not exist

hirsute Does not exist

lunar Does not exist

trusty Does not exist

upstream
Released (5.9~rc1)
xenial Does not exist

mantic Does not exist

linux-hwe-edge
Launchpad, Ubuntu, Debian
impish Does not exist

jammy Does not exist

bionic Ignored
(superseded by linux-hwe-5.4, was needs-triage)
disco Does not exist

eoan Does not exist

focal Does not exist

groovy Does not exist

trusty Does not exist

xenial Ignored
(was needs-triage ESM criteria)
kinetic Does not exist

hirsute Does not exist

lunar Does not exist

upstream
Released (5.9~rc1)
mantic Does not exist

linux-kvm
Launchpad, Ubuntu, Debian
impish Not vulnerable
(5.11.0-1006.6)
jammy Not vulnerable
(5.13.0-1004.4)
disco Ignored
(end of life)
eoan Ignored
(end of life)
trusty Does not exist

kinetic Not vulnerable
(5.15.0-1004.4)
bionic
Released (4.15.0-1077.79)
focal
Released (5.4.0-1024.24)
groovy Not vulnerable
(5.8.0-1001.1)
hirsute Not vulnerable
(5.8.0-1010.11+21.04.1)
lunar Not vulnerable
(5.15.0-1004.4)
upstream
Released (5.9~rc1)
xenial
Released (4.4.0-1080.87)
mantic Does not exist

linux-lts-trusty
Launchpad, Ubuntu, Debian
impish Does not exist

jammy Does not exist

bionic Does not exist

disco Does not exist

eoan Does not exist

kinetic Does not exist

focal Does not exist

groovy Does not exist

hirsute Does not exist

lunar Does not exist

trusty Does not exist

upstream
Released (5.9~rc1)
xenial Does not exist

mantic Does not exist

linux-lts-xenial
Launchpad, Ubuntu, Debian
impish Does not exist

jammy Does not exist

kinetic Does not exist

bionic Does not exist

disco Does not exist

eoan Does not exist

focal Does not exist

groovy Does not exist

hirsute Does not exist

lunar Does not exist

trusty
Released (4.4.0-190.220~14.04.1)
Available with Ubuntu Pro or Ubuntu Pro (Infra-only)
upstream
Released (5.9~rc1)
xenial Does not exist

mantic Does not exist

linux-oem
Launchpad, Ubuntu, Debian
impish Does not exist

jammy Does not exist

kinetic Does not exist

bionic
Released (4.15.0-1099.109)
disco Ignored
(end of life)
eoan Ignored
(end of life)
focal Does not exist

groovy Does not exist

hirsute Does not exist

lunar Does not exist

trusty Does not exist

upstream
Released (5.9~rc1)
xenial Ignored
(end of standard support, was needs-triage)
mantic Does not exist

linux-oem-5.6
Launchpad, Ubuntu, Debian
impish Does not exist

jammy Does not exist

kinetic Does not exist

bionic Does not exist

eoan Does not exist

groovy Does not exist

hirsute Does not exist

lunar Does not exist

trusty Does not exist

upstream
Released (5.9~rc1)
xenial Does not exist

mantic Does not exist

focal Ignored
(superseded by linux-oem-5.10, was needed)
linux-oem-osp1
Launchpad, Ubuntu, Debian
impish Does not exist

jammy Does not exist

kinetic Does not exist

bionic Ignored
(end of standard support, was needed)
disco Ignored
(end of life)
eoan Ignored
(end of life)
focal Does not exist

groovy Does not exist

hirsute Does not exist

lunar Does not exist

trusty Does not exist

upstream
Released (5.9~rc1)
xenial Does not exist

mantic Does not exist

linux-oracle
Launchpad, Ubuntu, Debian
impish Not vulnerable
(5.11.0-1005.5)
jammy Not vulnerable
(5.13.0-1008.10)
kinetic Not vulnerable
(5.15.0-1002.4)
bionic
Released (4.15.0-1057.62)
disco Ignored
(end of life)
eoan Ignored
(end of life)
focal
Released (5.4.0-1025.25)
groovy Not vulnerable
(5.8.0-1001.1)
hirsute Not vulnerable
(5.8.0-1014.14+21.04.1)
lunar Not vulnerable
(5.15.0-1002.4)
trusty Does not exist

upstream
Released (5.9~rc1)
xenial
Released (4.15.0-1056.61~16.04.1)
mantic Not vulnerable
(5.15.0-1002.4)
linux-oracle-5.0
Launchpad, Ubuntu, Debian
impish Does not exist

jammy Does not exist

kinetic Does not exist

disco Does not exist

eoan Does not exist

focal Does not exist

groovy Does not exist

hirsute Does not exist

lunar Does not exist

trusty Does not exist

upstream
Released (5.9~rc1)
xenial Does not exist

mantic Does not exist

bionic Ignored
(superseded by linux-oracle-5.3, was needs-triage)
linux-oracle-5.3
Launchpad, Ubuntu, Debian
impish Does not exist

jammy Does not exist

kinetic Does not exist

eoan Does not exist

focal Does not exist

groovy Does not exist

hirsute Does not exist

lunar Does not exist

trusty Does not exist

upstream
Released (5.9~rc1)
xenial Does not exist

mantic Does not exist

bionic Ignored
(superseded by linux-oracle-5.4, was needs-triage)
linux-raspi
Launchpad, Ubuntu, Debian
impish Not vulnerable
(5.11.0-1007.7)
jammy Not vulnerable
(5.13.0-1008.9)
kinetic Not vulnerable
(5.15.0-1005.5)
bionic Does not exist

eoan Does not exist

focal
Released (5.4.0-1019.21)
groovy Not vulnerable
(5.8.0-1002.5)
hirsute Not vulnerable
(5.8.0-1008.11+21.04.1)
lunar Not vulnerable
(5.15.0-1005.5)
trusty Does not exist

upstream
Released (5.9~rc1)
xenial Does not exist

mantic Not vulnerable
(5.15.0-1005.5)
linux-raspi2
Launchpad, Ubuntu, Debian
impish Does not exist

jammy Does not exist

kinetic Does not exist

bionic
Released (4.15.0-1073.78)
disco Ignored
(end of life)
eoan Ignored
(end of life)
groovy Does not exist

hirsute Does not exist

lunar Does not exist

trusty Does not exist

upstream
Released (5.9~rc1)
xenial
Released (4.4.0-1139.148)
mantic Does not exist

focal Ignored
(replaced by linux-raspi, was needs-triage)
linux-raspi2-5.3
Launchpad, Ubuntu, Debian
impish Does not exist

jammy Does not exist

kinetic Does not exist

bionic Ignored
(end of standard support, was needed)
eoan Does not exist

focal Does not exist

groovy Does not exist

hirsute Does not exist

lunar Does not exist

trusty Does not exist

upstream
Released (5.9~rc1)
xenial Does not exist

mantic Does not exist

linux-riscv
Launchpad, Ubuntu, Debian
impish Not vulnerable
(5.11.0-1007.7)
hirsute Not vulnerable
(5.8.0-10.12+21.04.1)
jammy Not vulnerable
(5.13.0-1004.4)
kinetic Not vulnerable
(5.15.0-1007.7)
bionic Does not exist

eoan Does not exist

focal
Released (5.4.0-34.38)
groovy Not vulnerable
(5.8.0-1.1)
lunar Not vulnerable
(5.15.0-1007.7)
trusty Does not exist

upstream
Released (5.9~rc1)
xenial Does not exist

mantic Not vulnerable
(5.15.0-1007.7)
linux-snapdragon
Launchpad, Ubuntu, Debian
impish Does not exist

jammy Does not exist

kinetic Does not exist

bionic
Released (4.15.0-1089.98)
disco Ignored
(end of life)
eoan Does not exist

focal Does not exist

groovy Does not exist

hirsute Does not exist

lunar Does not exist

trusty Does not exist

upstream
Released (5.9~rc1)
xenial
Released (4.4.0-1143.152)
mantic Does not exist

linux-aws-5.3
Launchpad, Ubuntu, Debian
impish Does not exist

jammy Does not exist

bionic Ignored
(superseded by linux-aws-5.4, was needs-triage)
eoan Does not exist

focal Does not exist

groovy Does not exist

trusty Does not exist

xenial Does not exist

lunar Does not exist

hirsute Does not exist

kinetic Does not exist

upstream
Released (5.9~rc1)
mantic Does not exist

linux-aws-5.4
Launchpad, Ubuntu, Debian
impish Does not exist

jammy Does not exist

focal Does not exist

groovy Does not exist

trusty Does not exist

xenial Does not exist

lunar Does not exist

bionic
Released (5.4.0-1025.25~18.04.1)
hirsute Does not exist

kinetic Does not exist

upstream
Released (5.9~rc1)
mantic Does not exist

linux-azure-4.15
Launchpad, Ubuntu, Debian
impish Does not exist

jammy Does not exist

eoan Does not exist

focal Does not exist

groovy Does not exist

trusty Does not exist

xenial Does not exist

lunar Does not exist

bionic
Released (4.15.0-1099.110)
hirsute Does not exist

kinetic Does not exist

upstream
Released (5.9~rc1)
mantic Does not exist

linux-azure-5.4
Launchpad, Ubuntu, Debian
impish Does not exist

jammy Does not exist

focal Does not exist

groovy Does not exist

trusty Does not exist

lunar Does not exist

bionic
Released (5.4.0-1026.26~18.04.1)
hirsute Does not exist

kinetic Does not exist

upstream
Released (5.9~rc1)
xenial Does not exist

mantic Does not exist

linux-dell300x
Launchpad, Ubuntu, Debian
impish Does not exist

focal Does not exist

groovy Does not exist

hirsute Does not exist

trusty Does not exist

xenial Does not exist

bionic Not vulnerable
(4.15.0-1005.8)
upstream
Released (5.9~rc1)
jammy Does not exist

kinetic Does not exist

lunar Does not exist

mantic Does not exist

linux-gcp-5.11
Launchpad, Ubuntu, Debian
bionic Does not exist

hirsute Does not exist

impish Does not exist

trusty Does not exist

xenial Does not exist

focal Not vulnerable
(5.11.0-1009.10~20.04.1)
upstream
Released (5.9~rc1)
jammy Does not exist

kinetic Does not exist

lunar Does not exist

mantic Does not exist

linux-intel-5.13
Launchpad, Ubuntu, Debian
bionic Does not exist

focal Not vulnerable
(5.13.0-1007.7)
hirsute Does not exist

impish Does not exist

trusty Does not exist

xenial Does not exist

upstream
Released (5.9~rc1)
jammy Does not exist

kinetic Does not exist

lunar Does not exist

mantic Does not exist

linux-oem-5.14
Launchpad, Ubuntu, Debian
bionic Does not exist

hirsute Does not exist

impish Does not exist

trusty Does not exist

xenial Does not exist

focal Not vulnerable
(5.14.0-1004.4)
upstream
Released (5.9~rc1)
jammy Does not exist

kinetic Does not exist

lunar Does not exist

mantic Does not exist

linux-azure-5.13
Launchpad, Ubuntu, Debian
focal Not vulnerable
(5.13.0-1009.10~20.04.2)
bionic Does not exist

impish Does not exist

trusty Does not exist

upstream
Released (5.9~rc1)
xenial Does not exist

lunar Does not exist

jammy Does not exist

kinetic Does not exist

mantic Does not exist

linux-gkeop-5.15
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

bionic Does not exist

focal Needs triage

jammy Does not exist

kinetic Does not exist

lunar Does not exist

upstream Needs triage

mantic Does not exist

linux-aws-5.19
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

bionic Does not exist

focal Does not exist

jammy Not vulnerable

kinetic Does not exist

lunar Does not exist

mantic Does not exist

upstream Ignored
(superseded by linux-aws-6.2, was needs-triage)
linux-gcp-5.19
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

bionic Does not exist

focal Does not exist

jammy Not vulnerable

kinetic Does not exist

lunar Does not exist

upstream Ignored
(superseded by linux-gcp-6.2, was needs-triage)
mantic Does not exist

linux-riscv-5.19
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

bionic Does not exist

focal Does not exist

jammy Not vulnerable

kinetic Does not exist

lunar Does not exist

mantic Does not exist

upstream Ignored
(end of life, was needs-triage)
linux-hwe-5.8
Launchpad, Ubuntu, Debian
bionic Does not exist

groovy Does not exist

hirsute Does not exist

trusty Does not exist

xenial Does not exist

focal Not vulnerable
(5.8.0-23.24~20.04.1)
impish Does not exist

jammy Does not exist

kinetic Does not exist

lunar Does not exist

upstream
Released (5.9~rc1)
mantic Does not exist

linux-gke-5.4
Launchpad, Ubuntu, Debian
focal Does not exist

groovy Does not exist

bionic Not vulnerable
(5.4.0-1025.25~18.04.1)
hirsute Does not exist

impish Does not exist

jammy Does not exist

kinetic Does not exist

lunar Does not exist

trusty Does not exist

upstream
Released (5.9~rc1)
xenial Does not exist

mantic Does not exist

linux-aws-5.13
Launchpad, Ubuntu, Debian
bionic Does not exist

impish Does not exist

trusty Does not exist

xenial Does not exist

focal Not vulnerable
(5.13.0-1008.9~20.04.2)
upstream
Released (5.9~rc1)
lunar Does not exist

jammy Does not exist

kinetic Does not exist

mantic Does not exist

linux-hwe-5.13
Launchpad, Ubuntu, Debian
bionic Does not exist

impish Does not exist

trusty Does not exist

focal Not vulnerable
(5.13.0-21.21~20.04.1)
upstream
Released (5.9~rc1)
jammy Does not exist

kinetic Does not exist

lunar Does not exist

xenial Does not exist

mantic Does not exist

linux-allwinner
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

bionic Does not exist

focal Does not exist

jammy Does not exist

kinetic Not vulnerable

lunar Not vulnerable

mantic Does not exist

upstream Ignored
(end of life, was needs-triage)
linux-allwinner-5.19
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

bionic Does not exist

focal Does not exist

jammy Not vulnerable

kinetic Does not exist

lunar Does not exist

mantic Does not exist

upstream Ignored
(end of life, was needs-triage)
linux-ibm
Launchpad, Ubuntu, Debian
bionic Does not exist

focal Not vulnerable
(5.4.0-1003.4)
hirsute Does not exist

impish Does not exist

jammy Not vulnerable
(5.15.0-1002.2)
kinetic Not vulnerable
(5.15.0-1002.2)
lunar Not vulnerable
(5.15.0-1002.2)
trusty Does not exist

upstream
Released (5.9~rc1)
xenial Does not exist

mantic Not vulnerable
(5.15.0-1002.2)
linux-starfive
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

bionic Does not exist

focal Does not exist

jammy Does not exist

kinetic Not vulnerable

lunar Not vulnerable

upstream Needs triage

mantic Not vulnerable

linux-starfive-5.19
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

bionic Does not exist

focal Does not exist

jammy Not vulnerable

kinetic Does not exist

lunar Does not exist

mantic Does not exist

upstream Ignored
(end of life, was needs-triage)
linux-fips
Launchpad, Ubuntu, Debian
bionic Does not exist

focal Does not exist

hirsute Does not exist

impish Does not exist

trusty Does not exist

upstream
Released (5.9~rc1)
xenial Ignored
(end of standard support)
jammy Does not exist

kinetic Does not exist

lunar Does not exist

mantic Does not exist

linux-azure-fde
Launchpad, Ubuntu, Debian
bionic Does not exist

impish Does not exist

trusty Does not exist

xenial Does not exist

upstream
Released (5.9~rc1)
jammy Needs triage

focal
Released (5.4.0-1026.26)
kinetic Does not exist

lunar Does not exist

mantic Does not exist

linux-gcp-5.13
Launchpad, Ubuntu, Debian
bionic Does not exist

impish Does not exist

trusty Does not exist

xenial Does not exist

focal Not vulnerable
(5.13.0-1008.9~20.04.3)
upstream
Released (5.9~rc1)
jammy Does not exist

kinetic Does not exist

lunar Does not exist

mantic Does not exist

linux-ibm-5.4
Launchpad, Ubuntu, Debian
focal Does not exist

impish Does not exist

trusty Does not exist

xenial Does not exist

bionic Not vulnerable
(5.4.0-1010.11~18.04.2)
upstream
Released (5.9~rc1)
jammy Does not exist

kinetic Does not exist

lunar Does not exist

mantic Does not exist

linux-oracle-5.13
Launchpad, Ubuntu, Debian
bionic Does not exist

impish Does not exist

trusty Does not exist

xenial Does not exist

focal Not vulnerable
(5.13.0-1011.13~20.04.2)
upstream
Released (5.9~rc1)
jammy Does not exist

kinetic Does not exist

lunar Does not exist

mantic Does not exist

linux-gkeop
Launchpad, Ubuntu, Debian
bionic Does not exist

groovy Does not exist

hirsute Does not exist

trusty Does not exist

xenial Does not exist

focal Not vulnerable
(5.4.0-1008.9)
upstream
Released (5.9~rc1)
jammy Needs triage

impish Does not exist

kinetic Does not exist

lunar Does not exist

mantic Does not exist

linux-oem-5.10
Launchpad, Ubuntu, Debian
bionic Does not exist

groovy Does not exist

hirsute Does not exist

focal Not vulnerable
(5.10.0-1008.9)
upstream
Released (5.9~rc1)
impish Does not exist

jammy Does not exist

kinetic Does not exist

lunar Does not exist

trusty Does not exist

xenial Does not exist

mantic Does not exist

linux-oem-6.0
Launchpad, Ubuntu, Debian
jammy Not vulnerable
(6.0.0-1006.6)
bionic Does not exist

focal Does not exist

kinetic Does not exist

trusty Does not exist

xenial Does not exist

lunar Does not exist

mantic Does not exist

upstream Ignored
(superseded by linux-oem-6.1, was needs-triage)
linux-aws-6.2
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

bionic Does not exist

focal Does not exist

jammy Not vulnerable

lunar Does not exist

upstream Ignored
(superseded by linux-aws-6.5, was needs-triage)
mantic Does not exist

linux-hwe-6.2
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

bionic Does not exist

focal Does not exist

jammy Not vulnerable

lunar Does not exist

mantic Does not exist

upstream Ignored
(superseded by linux-hwe-6.5, was needs-triage)
linux-lowlatency-hwe-6.2
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

bionic Does not exist

focal Does not exist

jammy Not vulnerable

lunar Does not exist

mantic Does not exist

upstream Ignored
(superseded by linux-lowlatency-hwe-6.5, was needs-triage)
linux-ibm-5.15
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

bionic Does not exist

focal Not vulnerable

jammy Does not exist

lunar Does not exist

upstream Needs triage

mantic Does not exist

linux-gcp-6.2
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

bionic Does not exist

focal Does not exist

jammy Not vulnerable

lunar Does not exist

mantic Does not exist

upstream Ignored
(superseded by linux-gcp-6.5, was needs-triage)
linux-azure-6.2
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

bionic Does not exist

focal Does not exist

jammy Not vulnerable

lunar Does not exist

mantic Does not exist

upstream Ignored
(superseded by linux-azure-6.5, was needs-triage)
linux-azure-fde-6.2
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

bionic Does not exist

focal Does not exist

jammy Not vulnerable

lunar Does not exist

mantic Does not exist

upstream Ignored
(replaced by linux-azure-6.5, was needs-triage)
linux-gcp-4.15
Launchpad, Ubuntu, Debian
jammy Does not exist

bionic
Released (4.15.0-1086.98)
eoan Does not exist

focal Does not exist

groovy Does not exist

hirsute Does not exist

impish Does not exist

kinetic Does not exist

lunar Does not exist

trusty Does not exist

upstream
Released (5.9~rc1)
xenial Does not exist

mantic Does not exist

linux-hwe-5.4
Launchpad, Ubuntu, Debian
jammy Does not exist

bionic
Released (5.4.0-48.52~18.04.1)
focal Does not exist

groovy Does not exist

hirsute Does not exist

impish Does not exist

kinetic Does not exist

lunar Does not exist

trusty Does not exist

upstream
Released (5.9~rc1)
xenial Does not exist

mantic Does not exist

linux-raspi-5.4
Launchpad, Ubuntu, Debian
jammy Does not exist

bionic
Released (5.4.0-1019.21~18.04.1)
focal Does not exist

groovy Does not exist

hirsute Does not exist

impish Does not exist

kinetic Does not exist

lunar Does not exist

trusty Does not exist

upstream
Released (5.9~rc1)
xenial Does not exist

mantic Does not exist

linux-oracle-5.4
Launchpad, Ubuntu, Debian
jammy Does not exist

bionic
Released (5.4.0-1025.25~18.04.1)
focal Does not exist

groovy Does not exist

hirsute Does not exist

impish Does not exist

kinetic Does not exist

lunar Does not exist

trusty Does not exist

upstream
Released (5.9~rc1)
xenial Does not exist

mantic Does not exist

linux-gcp-5.4
Launchpad, Ubuntu, Debian
jammy Does not exist

bionic
Released (5.4.0-1025.25~18.04.1)
focal Does not exist

groovy Does not exist

hirsute Does not exist

impish Does not exist

kinetic Does not exist

lunar Does not exist

trusty Does not exist

upstream
Released (5.9~rc1)
xenial Does not exist

mantic Does not exist

linux-lowlatency
Launchpad, Ubuntu, Debian
bionic Does not exist

focal Does not exist

impish Does not exist

trusty Does not exist

xenial Does not exist

jammy Not vulnerable
(5.15.0-22.22)
upstream
Released (5.9~rc1)
kinetic Not vulnerable
(5.15.0-24.24)
lunar Not vulnerable
(5.15.0-24.24)
mantic Not vulnerable
(5.15.0-24.24)
linux-oem-5.17
Launchpad, Ubuntu, Debian
bionic Does not exist

focal Does not exist

impish Does not exist

trusty Does not exist

xenial Does not exist

jammy Not vulnerable
(5.17.0-1003.3)
upstream
Released (5.9~rc1)
kinetic Not vulnerable
(5.17.0-1003.3)
lunar Does not exist

mantic Does not exist

linux-intel-iotg
Launchpad, Ubuntu, Debian
bionic Does not exist

focal Does not exist

impish Does not exist

trusty Does not exist

upstream Needs triage

xenial Does not exist

jammy Not vulnerable
(5.15.0-1004.6)
kinetic Does not exist

lunar Does not exist

mantic Does not exist

linux-intel-iotg-5.15
Launchpad, Ubuntu, Debian
bionic Does not exist

impish Does not exist

jammy Does not exist

trusty Does not exist

upstream Needs triage

xenial Does not exist

focal Not vulnerable
(5.15.0-1003.5~20.04.1)
kinetic Does not exist

lunar Does not exist

mantic Does not exist

linux-lowlatency-hwe-5.15
Launchpad, Ubuntu, Debian
bionic Does not exist

focal Not vulnerable

jammy Does not exist

trusty Does not exist

xenial Does not exist

kinetic Does not exist

lunar Does not exist

upstream Needs triage

mantic Does not exist

linux-hwe-5.15
Launchpad, Ubuntu, Debian
bionic Does not exist

focal Not vulnerable

jammy Does not exist

trusty Does not exist

kinetic Does not exist

lunar Does not exist

upstream Needs triage

xenial Does not exist

mantic Does not exist

linux-aws-5.15
Launchpad, Ubuntu, Debian
bionic Does not exist

jammy Does not exist

trusty Does not exist

upstream Needs triage

xenial Does not exist

focal Not vulnerable

lunar Does not exist

kinetic Does not exist

mantic Does not exist

linux-azure-5.15
Launchpad, Ubuntu, Debian
bionic Does not exist

focal Not vulnerable

jammy Does not exist

trusty Does not exist

upstream Needs triage

xenial Does not exist

lunar Does not exist

kinetic Does not exist

mantic Does not exist

linux-gcp-5.15
Launchpad, Ubuntu, Debian
bionic Does not exist

focal Not vulnerable

jammy Does not exist

trusty Does not exist

upstream Needs triage

xenial Does not exist

kinetic Does not exist

lunar Does not exist

mantic Does not exist

linux-gke-5.15
Launchpad, Ubuntu, Debian
bionic Does not exist

focal Not vulnerable

jammy Does not exist

trusty Does not exist

xenial Does not exist

kinetic Does not exist

lunar Does not exist

mantic Does not exist

upstream Ignored
(end of life, was needs-triage)
linux-oracle-5.15
Launchpad, Ubuntu, Debian
bionic Does not exist

focal Not vulnerable

jammy Does not exist

trusty Does not exist

upstream Needs triage

xenial Does not exist

kinetic Does not exist

lunar Does not exist

mantic Does not exist

linux-azure-fde-5.15
Launchpad, Ubuntu, Debian
bionic Does not exist

jammy Does not exist

kinetic Does not exist

trusty Does not exist

upstream Needs triage

xenial Does not exist

focal Not vulnerable
(5.15.0-1007.8~20.04.1)
lunar Does not exist

mantic Does not exist

linux-oem-6.1
Launchpad, Ubuntu, Debian
bionic Does not exist

focal Does not exist

jammy Not vulnerable

kinetic Does not exist

trusty Does not exist

upstream Needs triage

xenial Does not exist

lunar Does not exist

mantic Does not exist

linux-hwe-5.19
Launchpad, Ubuntu, Debian
bionic Does not exist

focal Does not exist

jammy Not vulnerable

kinetic Does not exist

trusty Does not exist

xenial Does not exist

lunar Does not exist

mantic Does not exist

upstream Ignored
(superseded by linux-hwe-6.2, was needs-triage)
linux-lowlatency-hwe-5.19
Launchpad, Ubuntu, Debian
bionic Does not exist

focal Does not exist

jammy Not vulnerable

kinetic Does not exist

trusty Does not exist

xenial Does not exist

lunar Does not exist

mantic Does not exist

upstream Ignored
(superseded by linux-lowlatency-hwe-6.2, was needs-triage)
linux-azure-5.19
Launchpad, Ubuntu, Debian
bionic Does not exist

focal Does not exist

jammy Not vulnerable

kinetic Does not exist

trusty Does not exist

xenial Does not exist

lunar Does not exist

mantic Does not exist

upstream Ignored
(superseded by linux-azure-6.2, was needs-triage)
linux-iot
Launchpad, Ubuntu, Debian
bionic Does not exist

focal Not vulnerable

jammy Does not exist

kinetic Does not exist

lunar Does not exist

trusty Does not exist

upstream Needs triage

xenial Does not exist

mantic Does not exist

linux-azure-fde-5.19
Launchpad, Ubuntu, Debian
bionic Does not exist

focal Does not exist

jammy Not vulnerable

kinetic Does not exist

lunar Does not exist

trusty Does not exist

xenial Does not exist

mantic Does not exist

upstream Ignored
(superseded by linux-azure-fde-6.2, was needs-triage)
linux-riscv-5.15
Launchpad, Ubuntu, Debian
bionic Does not exist

focal Not vulnerable

jammy Does not exist

kinetic Does not exist

lunar Does not exist

trusty Does not exist

upstream Needs triage

xenial Does not exist

mantic Does not exist

linux-xilinx-zynqmp
Launchpad, Ubuntu, Debian
bionic Does not exist

focal Not vulnerable

kinetic Does not exist

lunar Does not exist

trusty Does not exist

upstream Needs triage

xenial Does not exist

jammy Not vulnerable

mantic Does not exist

linux-gkeop-5.4
Launchpad, Ubuntu, Debian
bionic Not vulnerable
(5.4.0-1001.1)
focal Does not exist

groovy Does not exist

hirsute Does not exist

impish Does not exist

jammy Does not exist

kinetic Does not exist

lunar Does not exist

trusty Does not exist

upstream
Released (5.9~rc1)
xenial Does not exist

mantic Does not exist

linux-nvidia-6.2
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

bionic Does not exist

focal Does not exist

jammy Not vulnerable

lunar Does not exist

mantic Does not exist

upstream Ignored
(superseded by linux-nvidia-6.5, was needs-triage)
linux-starfive-6.2
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

bionic Does not exist

focal Does not exist

jammy Not vulnerable

lunar Does not exist

mantic Does not exist

upstream Ignored
(superseded by linux-starfive-6.5, was needs-triage)
linux-laptop
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

bionic Does not exist

focal Does not exist

jammy Does not exist

lunar Does not exist

mantic Not vulnerable

upstream Needs triage

linux-oem-6.5
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

bionic Does not exist

focal Does not exist

jammy Not vulnerable

lunar Does not exist

mantic Does not exist

upstream Needs triage

linux-hwe-6.5
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

bionic Does not exist

focal Does not exist

jammy Not vulnerable

lunar Does not exist

mantic Does not exist

upstream Needs triage

linux-lowlatency-hwe-6.5
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

bionic Does not exist

focal Does not exist

jammy Not vulnerable

lunar Does not exist

mantic Does not exist

upstream Needs triage

linux-riscv-6.5
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

bionic Does not exist

focal Does not exist

jammy Not vulnerable

mantic Does not exist

upstream Needs triage

linux-starfive-6.5
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

bionic Does not exist

focal Does not exist

jammy Not vulnerable

mantic Does not exist

upstream Needs triage

linux-aws-6.5
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

bionic Does not exist

focal Does not exist

jammy Not vulnerable

mantic Does not exist

upstream Needs triage

linux-azure-6.5
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

bionic Does not exist

focal Does not exist

jammy Not vulnerable

mantic Does not exist

upstream Needs triage

linux-gcp-6.5
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

bionic Does not exist

focal Does not exist

jammy Not vulnerable

mantic Does not exist

upstream Needs triage

linux-oracle-6.5
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

bionic Does not exist

focal Does not exist

jammy Not vulnerable

mantic Does not exist

upstream Needs triage

Severity score breakdown

Parameter Value
Base score 7.8
Attack vector Local
Attack complexity Low
Privileges required None
User interaction Required
Scope Unchanged
Confidentiality High
Integrity impact High
Availability impact High
Vector CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H