CVE-2023-26544
Published: 25 February 2023
In the Linux kernel 6.0.8, there is a use-after-free in run_unpack in fs/ntfs3/run.c, related to a difference between NTFS sector size and media sector size.
From the Ubuntu Security Team
It was discovered that the NTFS file system implementation in the Linux kernel did not properly validate the size of attributes when parsing MFT. A local attacker could possibly use this to cause a denial of service (system crash) or expose sensitive information (kernel memory).
Notes
Author | Note |
---|---|
sbeattie | reproducer in gist |
sbeattie | SUSE believes this was fixed in 887bfc546097 ("fs/ntfs3: Fix slab-out-of-bounds read in run_unpack") |
Priority
Status
Package | Release | Status |
---|---|---|
linux-nvidia Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
focal |
Does not exist
|
|
jammy |
Not vulnerable
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
upstream |
Needs triage
|
|
mantic |
Does not exist
|
|
linux-gkeop-5.15 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
focal |
Not vulnerable
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
upstream |
Needs triage
|
|
mantic |
Does not exist
|
|
linux-aws-5.19 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
focal |
Does not exist
|
|
jammy |
Not vulnerable
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
upstream |
Ignored
(superseded by linux-aws-6.2, was needs-triage)
|
|
linux-gcp-5.19 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
focal |
Does not exist
|
|
jammy |
Not vulnerable
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
upstream |
Ignored
(superseded by linux-gcp-6.2, was needs-triage)
|
|
mantic |
Does not exist
|
|
linux-riscv-5.19 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
focal |
Does not exist
|
|
jammy |
Not vulnerable
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
upstream |
Ignored
(end of life, was needs-triage)
|
|
mantic |
Does not exist
|
|
linux-allwinner Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
focal |
Does not exist
|
|
jammy |
Does not exist
|
|
kinetic |
Not vulnerable
|
|
lunar |
Not vulnerable
|
|
mantic |
Does not exist
|
|
upstream |
Ignored
(end of life, was needs-triage)
|
|
linux-allwinner-5.19 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
focal |
Does not exist
|
|
jammy |
Not vulnerable
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
upstream |
Ignored
(end of life, was needs-triage)
|
|
linux-starfive Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
focal |
Does not exist
|
|
jammy |
Does not exist
|
|
kinetic |
Not vulnerable
|
|
lunar |
Not vulnerable
|
|
upstream |
Needs triage
|
|
mantic |
Not vulnerable
|
|
linux-starfive-5.19 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
focal |
Does not exist
|
|
jammy |
Not vulnerable
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
upstream |
Ignored
(end of life, was needs-triage)
|
|
linux-raspi2-5.3 Launchpad, Ubuntu, Debian |
kinetic |
Does not exist
|
trusty |
Does not exist
|
|
upstream |
Ignored
(superseded by linux-raspi2-5.4)
|
|
xenial |
Does not exist
|
|
bionic |
Ignored
(end of standard support)
|
|
focal |
Does not exist
|
|
jammy |
Does not exist
|
|
linux-aws-6.2 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
focal |
Does not exist
|
|
jammy |
Not vulnerable
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
upstream |
Ignored
(superseded by linux-aws-6.5, was needs-triage)
|
|
linux-hwe-6.2 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
focal |
Does not exist
|
|
jammy |
Not vulnerable
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
upstream |
Ignored
(superseded by linux-hwe-6.5, was needs-triage)
|
|
linux-lowlatency-hwe-6.2 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
focal |
Does not exist
|
|
jammy |
Not vulnerable
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
upstream |
Ignored
(superseded by linux-lowlatency-hwe-6.5, was needs-triage)
|
|
linux-ibm-5.15 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
focal |
Not vulnerable
|
|
jammy |
Does not exist
|
|
lunar |
Does not exist
|
|
upstream |
Needs triage
|
|
mantic |
Does not exist
|
|
linux-gcp-6.2 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
focal |
Does not exist
|
|
jammy |
Not vulnerable
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
upstream |
Ignored
(superseded by linux-gcp-6.5, was needs-triage)
|
|
linux-azure-6.2 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
focal |
Does not exist
|
|
jammy |
Not vulnerable
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
upstream |
Ignored
(superseded by linux-azure-6.5, was needs-triage)
|
|
linux-azure-fde-6.2 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
focal |
Does not exist
|
|
jammy |
Not vulnerable
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
upstream |
Ignored
(replaced by linux-azure-6.5, was needs-triage)
|
|
linux-oem-6.0 Launchpad, Ubuntu, Debian |
jammy |
Ignored
(superseded by linux-oem-6.1, was needed)
|
bionic |
Does not exist
|
|
focal |
Does not exist
|
|
kinetic |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(6.2~rc1)
|
|
xenial |
Does not exist
|
|
linux-riscv Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Ignored
(superseded by linux-riscv-5.8)
|
|
kinetic |
Released
(5.19.0-1018.19)
|
|
lunar |
Not vulnerable
(6.2.0-19.19.1)
|
|
trusty |
Does not exist
|
|
upstream |
Released
(6.2~rc1)
|
|
xenial |
Does not exist
|
|
mantic |
Not vulnerable
(6.2.0-19.19.1)
|
|
jammy |
Ignored
(end of kernel support, was needs-triage)
|
|
linux-riscv-5.11 Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Ignored
(superseded by linux-riscv-5.13)
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Ignored
(superseded by linux-riscv-5.13)
|
|
xenial |
Does not exist
|
|
linux-riscv-5.15 Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Not vulnerable
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Needs triage
|
|
xenial |
Does not exist
|
|
mantic |
Does not exist
|
|
linux-riscv-5.8 Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Ignored
(superseded by linux-riscv-5.11)
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Ignored
(superseded by linux-riscv-5.11)
|
|
xenial |
Does not exist
|
|
linux-snapdragon Launchpad, Ubuntu, Debian |
bionic |
Not vulnerable
(4.4.0-1077.82)
|
focal |
Does not exist
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(6.2~rc1)
|
|
xenial |
Ignored
(end of standard support)
|
|
linux-aws-5.0 Launchpad, Ubuntu, Debian |
bionic |
Ignored
(superseded by linux-aws-5.3)
|
focal |
Does not exist
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
upstream |
Released
(6.2~rc1)
|
|
linux-aws-5.11 Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Ignored
(superseded by linux-aws-5.13)
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Ignored
(superseded by linux-aws-5.13)
|
|
xenial |
Does not exist
|
|
linux-aws-5.13 Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Ignored
(superseded by linux-aws-5.15)
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Ignored
(superseded by linux-aws-5.15)
|
|
xenial |
Does not exist
|
|
linux-aws-5.15 Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
upstream |
Released
(6.2~rc1)
|
|
focal |
Released
(5.15.0-1033.37~20.04.1)
|
|
linux-aws-5.3 Launchpad, Ubuntu, Debian |
bionic |
Ignored
(superseded by linux-aws-5.4)
|
focal |
Does not exist
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Ignored
(superseded by linux-aws-5.4)
|
|
xenial |
Does not exist
|
|
linux-aws-5.4 Launchpad, Ubuntu, Debian |
focal |
Does not exist
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
bionic |
Not vulnerable
(5.4.0-1018.18~18.04.1)
|
|
upstream |
Released
(6.2~rc1)
|
|
linux-aws-5.8 Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Ignored
(superseded by linux-aws-5.11)
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Ignored
(superseded by linux-aws-5.11)
|
|
xenial |
Does not exist
|
|
linux-aws-hwe Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Does not exist
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Not vulnerable
(4.15.0-1030.31~16.04.1)
|
|
upstream |
Released
(6.2~rc1)
|
|
linux-azure Launchpad, Ubuntu, Debian |
bionic |
Ignored
(superseded by linux-azure-5.3)
|
focal |
Not vulnerable
(5.4.0-1006.6)
|
|
kinetic |
Released
(5.19.0-1026.29)
|
|
trusty |
Not vulnerable
(4.15.0-1023.24~14.04.1)
|
|
xenial |
Not vulnerable
(4.11.0-1009.9)
|
|
upstream |
Released
(6.2~rc1)
|
|
jammy |
Released
(5.15.0-1035.42)
|
|
lunar |
Not vulnerable
(6.2.0-1002.2)
|
|
mantic |
Not vulnerable
(6.2.0-1003.3)
|
|
linux-azure-4.15 Launchpad, Ubuntu, Debian |
focal |
Does not exist
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
bionic |
Not vulnerable
(4.15.0-1082.92)
|
|
upstream |
Released
(6.2~rc1)
|
|
linux-azure-5.11 Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Ignored
(superseded by linux-azure-5.13)
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Ignored
(superseded by linux-azure-5.13)
|
|
xenial |
Does not exist
|
|
linux-azure-5.13 Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Ignored
(superseded by linux-azure-5.15)
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Ignored
(superseded by linux-azure-5.15)
|
|
xenial |
Does not exist
|
|
linux-azure-5.15 Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Released
(5.15.0-1035.42~20.04.1)
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
upstream |
Released
(6.2~rc1)
|
|
linux-azure-5.19 Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Does not exist
|
|
kinetic |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
jammy |
Released
(5.19.0-1026.29~22.04.1)
|
|
upstream |
Released
(6.2~rc1)
|
|
linux-azure-5.3 Launchpad, Ubuntu, Debian |
bionic |
Ignored
(superseded by linux-azure-5.4)
|
focal |
Does not exist
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Ignored
(superseded by linux-azure-5.4)
|
|
xenial |
Does not exist
|
|
linux-azure-5.4 Launchpad, Ubuntu, Debian |
focal |
Does not exist
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
bionic |
Not vulnerable
(5.4.0-1020.20~18.04.1)
|
|
upstream |
Released
(6.2~rc1)
|
|
linux-azure-5.8 Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Ignored
(superseded by linux-azure-5.11)
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Ignored
(superseded by linux-azure-5.11)
|
|
xenial |
Does not exist
|
|
linux-azure-edge Launchpad, Ubuntu, Debian |
bionic |
Ignored
(superseded by linux-azure-5.3)
|
focal |
Does not exist
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
upstream |
Released
(6.2~rc1)
|
|
linux-azure-fde Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
jammy |
Released
(5.15.0-1035.42)
|
|
kinetic |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
focal |
Not vulnerable
(5.4.0-1006.6)
|
|
upstream |
Released
(6.2~rc1)
|
|
linux-azure-fde-5.15 Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
focal |
Released
(5.15.0-1035.42~20.04.1)
|
|
upstream |
Released
(6.2~rc1)
|
|
linux-azure-fde-5.19 Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Does not exist
|
|
jammy |
Not vulnerable
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
mantic |
Does not exist
|
|
upstream |
Ignored
(superseded by linux-azure-fde-6.2, was needs-triage)
|
|
linux-bluefield Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
kinetic |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
focal |
Not vulnerable
(5.4.0-1007.10)
|
|
jammy |
Pending
|
|
upstream |
Released
(6.2~rc1)
|
|
linux-dell300x Launchpad, Ubuntu, Debian |
focal |
Does not exist
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
bionic |
Not vulnerable
(4.15.0-1005.8)
|
|
upstream |
Released
(6.2~rc1)
|
|
linux-fips Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Does not exist
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
trusty |
Ignored
(end of standard support)
|
|
xenial |
Ignored
(end of standard support)
|
|
upstream |
Released
(6.2~rc1)
|
|
linux-gcp Launchpad, Ubuntu, Debian |
bionic |
Ignored
(superseded by linux-gcp-5.3)
|
jammy |
Released
(5.15.0-1031.38)
|
|
trusty |
Does not exist
|
|
focal |
Not vulnerable
(5.4.0-1005.5)
|
|
kinetic |
Released
(5.19.0-1024.26)
|
|
xenial |
Not vulnerable
(4.10.0-1004.4)
|
|
upstream |
Released
(6.2~rc1)
|
|
lunar |
Not vulnerable
(6.2.0-1004.4)
|
|
mantic |
Not vulnerable
(6.2.0-1005.5)
|
|
linux-gcp-4.15 Launchpad, Ubuntu, Debian |
focal |
Does not exist
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
bionic |
Not vulnerable
(4.15.0-1071.81)
|
|
upstream |
Released
(6.2~rc1)
|
|
linux-gcp-5.11 Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Ignored
(superseded by linux-gcp-5.13)
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Ignored
(superseded by linux-gcp-5.13)
|
|
xenial |
Does not exist
|
|
linux-gcp-5.13 Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Ignored
(superseded by linux-gcp-5.15)
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Ignored
(superseded by linux-gcp-5.15)
|
|
xenial |
Does not exist
|
|
linux-gcp-5.15 Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Released
(5.15.0-1031.38~20.04.1)
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
upstream |
Released
(6.2~rc1)
|
|
linux-gcp-5.3 Launchpad, Ubuntu, Debian |
bionic |
Ignored
(superseded by linux-gcp-5.4)
|
focal |
Does not exist
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Ignored
(superseded by linux-gcp-5.4)
|
|
xenial |
Does not exist
|
|
linux-gcp-5.4 Launchpad, Ubuntu, Debian |
focal |
Does not exist
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
bionic |
Not vulnerable
(5.4.0-1019.19~18.04.2)
|
|
upstream |
Released
(6.2~rc1)
|
|
linux-gcp-5.8 Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Ignored
(superseded by linux-gcp-5.11)
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Ignored
(superseded by linux-gcp-5.11)
|
|
xenial |
Does not exist
|
|
linux-gke Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
jammy |
Released
(5.15.0-1030.35)
|
|
kinetic |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Ignored
(end of standard support)
|
|
focal |
Not vulnerable
(5.4.0-1033.35)
|
|
upstream |
Released
(6.2~rc1)
|
|
linux-gke-4.15 Launchpad, Ubuntu, Debian |
focal |
Does not exist
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
upstream |
Released
(6.2~rc1)
|
|
bionic |
Ignored
(superseded by linux-gke-5.0, was needs-triage)
|
|
linux-gke-5.0 Launchpad, Ubuntu, Debian |
bionic |
Ignored
(end of standard support)
|
focal |
Does not exist
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
upstream |
Released
(6.2~rc1)
|
|
linux-gke-5.15 Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Released
(5.15.0-1029.34~20.04.1)
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
upstream |
Released
(6.2~rc1)
|
|
linux-gke-5.3 Launchpad, Ubuntu, Debian |
bionic |
Ignored
(end of standard support)
|
focal |
Does not exist
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Ignored
(superseded by linux-gke-5.4)
|
|
xenial |
Does not exist
|
|
linux-gke-5.4 Launchpad, Ubuntu, Debian |
focal |
Does not exist
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
upstream |
Released
(6.2~rc1)
|
|
bionic |
Ignored
(end of kernel support, was needs-triage)
|
|
linux-gkeop Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
jammy |
Released
(5.15.0-1017.22)
|
|
kinetic |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
focal |
Not vulnerable
(5.4.0-1008.9)
|
|
upstream |
Released
(6.2~rc1)
|
|
linux-gkeop-5.4 Launchpad, Ubuntu, Debian |
focal |
Does not exist
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
upstream |
Released
(6.2~rc1)
|
|
bionic |
Ignored
(end of kernel support, was needs-triage)
|
|
linux-hwe-5.19 Launchpad, Ubuntu, Debian |
kinetic |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
focal |
Does not exist
|
|
trusty |
Does not exist
|
|
jammy |
Released
(5.19.0-42.43~22.04.1)
|
|
upstream |
Released
(6.2~rc1)
|
|
linux-hwe-5.4 Launchpad, Ubuntu, Debian |
jammy |
Does not exist
|
kinetic |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
focal |
Does not exist
|
|
bionic |
Not vulnerable
(5.4.0-37.41~18.04.1)
|
|
upstream |
Released
(6.2~rc1)
|
|
linux-hwe-5.8 Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Ignored
(superseded by linux-hwe-5.11)
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Ignored
(superseded by linux-hwe-5.11)
|
|
xenial |
Does not exist
|
|
linux-hwe-edge Launchpad, Ubuntu, Debian |
bionic |
Ignored
(superseded by linux-hwe-5.4)
|
focal |
Does not exist
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Ignored
(superseded by linux-hwe)
|
|
upstream |
Released
(6.2~rc1)
|
|
linux-ibm Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
jammy |
Released
(5.15.0-1027.30)
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
focal |
Not vulnerable
(5.4.0-1003.4)
|
|
kinetic |
Released
(5.19.0-1022.24)
|
|
upstream |
Released
(6.2~rc1)
|
|
lunar |
Not vulnerable
(6.2.0-1001.1)
|
|
mantic |
Not vulnerable
(6.2.0-1001.1)
|
|
linux-ibm-5.4 Launchpad, Ubuntu, Debian |
focal |
Does not exist
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(6.2~rc1)
|
|
xenial |
Does not exist
|
|
bionic |
Not vulnerable
(5.4.0-1010.11~18.04.2)
|
|
linux-intel-5.13 Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(6.2~rc1)
|
|
xenial |
Does not exist
|
|
focal |
Ignored
(end of kernel support, was needs-triage)
|
|
linux-intel-iotg Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Does not exist
|
|
jammy |
Released
(5.15.0-1027.32)
|
|
kinetic |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(6.2~rc1)
|
|
xenial |
Does not exist
|
|
linux-intel-iotg-5.15 Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Released
(5.15.0-1027.32~20.04.1)
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(6.2~rc1)
|
|
xenial |
Does not exist
|
|
linux-kvm Launchpad, Ubuntu, Debian |
jammy |
Released
(5.15.0-1030.35)
|
trusty |
Does not exist
|
|
upstream |
Released
(6.2~rc1)
|
|
bionic |
Not vulnerable
(4.15.0-1002.2)
|
|
focal |
Not vulnerable
(5.4.0-1004.4)
|
|
kinetic |
Released
(5.19.0-1023.24)
|
|
xenial |
Not vulnerable
(4.4.0-1004.9)
|
|
lunar |
Not vulnerable
(6.2.0-1002.2)
|
|
mantic |
Does not exist
|
|
linux-lowlatency Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Does not exist
|
|
jammy |
Released
(5.15.0-69.76)
|
|
trusty |
Does not exist
|
|
upstream |
Released
(6.2~rc1)
|
|
xenial |
Does not exist
|
|
kinetic |
Released
(5.19.0-1024.25)
|
|
lunar |
Not vulnerable
(6.2.0-1002.2)
|
|
mantic |
Not vulnerable
(6.2.0-1003.3)
|
|
linux-lowlatency-hwe-5.15 Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Released
(5.15.0-69.76~20.04.1)
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(6.2~rc1)
|
|
xenial |
Does not exist
|
|
linux-lowlatency-hwe-5.19 Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Does not exist
|
|
kinetic |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(6.2~rc1)
|
|
xenial |
Does not exist
|
|
jammy |
Released
(5.19.0-1024.25~22.04.1)
|
|
linux-lts-xenial Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Does not exist
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
upstream |
Released
(6.2~rc1)
|
|
xenial |
Does not exist
|
|
trusty |
Not vulnerable
(4.4.0-13.29~14.04.1)
|
|
linux-oem Launchpad, Ubuntu, Debian |
focal |
Does not exist
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(6.2~rc1)
|
|
xenial |
Ignored
(end of standard support)
|
|
bionic |
Ignored
(replaced by linux-hwe-5.4, was needs-triage)
|
|
linux-oem-5.10 Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(6.2~rc1)
|
|
xenial |
Does not exist
|
|
focal |
Ignored
(superseded by linux-oem-5.13, was needs-triage)
|
|
linux-oem-5.13 Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Ignored
(superseded by linux-oem-5.14)
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Ignored
(superseded by linux-oem-5.14)
|
|
xenial |
Does not exist
|
|
linux-oem-5.14 Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(6.2~rc1)
|
|
xenial |
Does not exist
|
|
focal |
Not vulnerable
(5.14.0-1004.4)
|
|
linux-oem-5.17 Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(6.2~rc1)
|
|
xenial |
Does not exist
|
|
kinetic |
Ignored
(end of life, was needs-triage)
|
|
jammy |
Ignored
(superseded by linux-oem-6.1, was needed)
|
|
linux-oem-5.6 Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(6.2~rc1)
|
|
xenial |
Does not exist
|
|
focal |
Ignored
(superseded by linux-oem-5.10, was needs-triage)
|
|
linux-oem-6.1 Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Does not exist
|
|
jammy |
Released
(6.1.0-1007.7)
|
|
kinetic |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(6.2~rc1)
|
|
xenial |
Does not exist
|
|
linux-oem-osp1 Launchpad, Ubuntu, Debian |
focal |
Does not exist
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(6.2~rc1)
|
|
xenial |
Does not exist
|
|
bionic |
Ignored
(end of standard support, was needs-triage)
|
|
linux-oracle Launchpad, Ubuntu, Debian |
jammy |
Released
(5.15.0-1032.38)
|
trusty |
Does not exist
|
|
upstream |
Released
(6.2~rc1)
|
|
bionic |
Not vulnerable
(4.15.0-1007.9)
|
|
focal |
Not vulnerable
(5.4.0-1005.5)
|
|
kinetic |
Released
(5.19.0-1023.26)
|
|
xenial |
Not vulnerable
(4.15.0-1007.9~16.04.1)
|
|
lunar |
Not vulnerable
(6.2.0-1002.2)
|
|
mantic |
Not vulnerable
(6.2.0-1003.3)
|
|
linux-oracle-5.0 Launchpad, Ubuntu, Debian |
bionic |
Ignored
(superseded by linux-oracle-5.3)
|
focal |
Does not exist
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(6.2~rc1)
|
|
xenial |
Does not exist
|
|
linux-oracle-5.11 Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Ignored
(superseded by linux-oracle-5.13)
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Ignored
(superseded by linux-oracle-5.13)
|
|
xenial |
Does not exist
|
|
linux-oracle-5.13 Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(6.2~rc1)
|
|
xenial |
Does not exist
|
|
focal |
Ignored
(superseded by linux-oracle-5.15, was needs-triage)
|
|
linux-oracle-5.15 Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Released
(5.15.0-1032.38~20.04.1)
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(6.2~rc1)
|
|
xenial |
Does not exist
|
|
linux-oracle-5.3 Launchpad, Ubuntu, Debian |
bionic |
Ignored
(superseded by linux-oracle-5.4)
|
focal |
Does not exist
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Ignored
(superseded by linux-oracle-5.4)
|
|
xenial |
Does not exist
|
|
linux-oracle-5.4 Launchpad, Ubuntu, Debian |
focal |
Does not exist
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(6.2~rc1)
|
|
xenial |
Does not exist
|
|
bionic |
Not vulnerable
(5.4.0-1019.19~18.04.1)
|
|
linux-oracle-5.8 Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Ignored
(superseded by linux-oracle-5.11)
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Ignored
(superseded by linux-oracle-5.11)
|
|
xenial |
Does not exist
|
|
linux-raspi Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Not vulnerable
(5.4.0-1007.7)
|
|
jammy |
Released
(5.15.0-1026.28)
|
|
kinetic |
Released
(5.19.0-1018.25)
|
|
trusty |
Does not exist
|
|
upstream |
Released
(6.2~rc1)
|
|
xenial |
Does not exist
|
|
lunar |
Not vulnerable
(6.2.0-1003.3)
|
|
mantic |
Not vulnerable
(6.2.0-1004.5)
|
|
linux-raspi-5.4 Launchpad, Ubuntu, Debian |
focal |
Does not exist
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(6.2~rc1)
|
|
xenial |
Does not exist
|
|
bionic |
Needs triage
|
|
linux-raspi2 Launchpad, Ubuntu, Debian |
bionic |
Not vulnerable
(4.13.0-1005.5)
|
focal |
Ignored
(replaced by linux-raspi)
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(6.2~rc1)
|
|
xenial |
Ignored
(end of standard support)
|
|
linux-hwe Launchpad, Ubuntu, Debian |
bionic |
Ignored
(replaced by linux-hwe-5.4)
|
focal |
Does not exist
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(6.2~rc1)
|
|
xenial |
Not vulnerable
(4.8.0-39.42~16.04.1)
|
|
linux-hwe-5.11 Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Ignored
(superseded by linux-hwe-5.13)
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Ignored
(superseded by linux-hwe-5.13)
|
|
xenial |
Does not exist
|
|
linux-hwe-5.13 Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Ignored
(superseded by linux-hwe-5.15)
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Ignored
(superseded by linux-hwe-5.15)
|
|
xenial |
Does not exist
|
|
linux-hwe-5.15 Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
trusty |
Does not exist
|
|
xenial |
Does not exist
|
|
focal |
Released
(5.15.0-69.76~20.04.1)
|
|
upstream |
Released
(6.2~rc1)
|
|
linux Launchpad, Ubuntu, Debian |
bionic |
Not vulnerable
(4.13.0-16.19)
|
focal |
Not vulnerable
(5.4.0-9.12)
|
|
jammy |
Released
(5.15.0-69.76)
|
|
trusty |
Not vulnerable
(3.11.0-12.19)
|
|
xenial |
Not vulnerable
(4.4.0-2.16)
|
|
kinetic |
Released
(5.19.0-42.43)
|
|
upstream |
Released
(6.2~rc1)
|
|
lunar |
Not vulnerable
(6.1.0-16.16)
|
|
mantic |
Not vulnerable
(6.2.0-20.20)
|
|
Patches: Introduced by 4342306f0f0d5ff4315a204d315c1b51b914fca5 |
||
linux-aws Launchpad, Ubuntu, Debian |
bionic |
Not vulnerable
(4.15.0-1001.1)
|
focal |
Not vulnerable
(5.4.0-1005.5)
|
|
kinetic |
Released
(5.19.0-1025.26)
|
|
trusty |
Not vulnerable
(4.4.0-1002.2)
|
|
xenial |
Not vulnerable
(4.4.0-1001.10)
|
|
upstream |
Released
(6.2~rc1)
|
|
jammy |
Released
(5.15.0-1033.37)
|
|
lunar |
Not vulnerable
(6.2.0-1002.2)
|
|
mantic |
Not vulnerable
(6.2.0-1003.3)
|
|
linux-iot Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Not vulnerable
|
|
jammy |
Does not exist
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Needs triage
|
|
xenial |
Does not exist
|
|
mantic |
Does not exist
|
|
linux-xilinx-zynqmp Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
focal |
Not vulnerable
|
|
jammy |
Not vulnerable
|
|
kinetic |
Does not exist
|
|
lunar |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Needs triage
|
|
xenial |
Does not exist
|
|
mantic |
Does not exist
|
|
linux-nvidia-6.2 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
focal |
Does not exist
|
|
jammy |
Not vulnerable
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
upstream |
Ignored
(superseded by linux-nvidia-6.5, was needs-triage)
|
|
linux-starfive-6.2 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
focal |
Does not exist
|
|
jammy |
Not vulnerable
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
upstream |
Ignored
(superseded by linux-starfive-6.5, was needs-triage)
|
|
linux-laptop Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
focal |
Does not exist
|
|
jammy |
Does not exist
|
|
lunar |
Does not exist
|
|
mantic |
Not vulnerable
|
|
upstream |
Needs triage
|
|
linux-oem-6.5 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
focal |
Does not exist
|
|
jammy |
Not vulnerable
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
upstream |
Needs triage
|
|
linux-hwe-6.5 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
focal |
Does not exist
|
|
jammy |
Not vulnerable
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
upstream |
Needs triage
|
|
linux-lowlatency-hwe-6.5 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
focal |
Does not exist
|
|
jammy |
Not vulnerable
|
|
lunar |
Does not exist
|
|
mantic |
Does not exist
|
|
upstream |
Needs triage
|
|
linux-riscv-6.5 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
focal |
Does not exist
|
|
jammy |
Not vulnerable
|
|
mantic |
Does not exist
|
|
upstream |
Needs triage
|
|
linux-starfive-6.5 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
focal |
Does not exist
|
|
jammy |
Not vulnerable
|
|
mantic |
Does not exist
|
|
upstream |
Needs triage
|
|
linux-aws-6.5 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
focal |
Does not exist
|
|
jammy |
Not vulnerable
|
|
mantic |
Does not exist
|
|
upstream |
Needs triage
|
|
linux-azure-6.5 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
focal |
Does not exist
|
|
jammy |
Not vulnerable
|
|
mantic |
Does not exist
|
|
upstream |
Needs triage
|
|
linux-gcp-6.5 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
focal |
Does not exist
|
|
jammy |
Not vulnerable
|
|
mantic |
Does not exist
|
|
upstream |
Needs triage
|
|
linux-oracle-6.5 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
xenial |
Does not exist
|
|
bionic |
Does not exist
|
|
focal |
Does not exist
|
|
jammy |
Not vulnerable
|
|
mantic |
Does not exist
|
|
upstream |
Needs triage
|
Severity score breakdown
Parameter | Value |
---|---|
Base score | 7.8 |
Attack vector | Local |
Attack complexity | Low |
Privileges required | Low |
User interaction | None |
Scope | Unchanged |
Confidentiality | High |
Integrity impact | High |
Availability impact | High |
Vector | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
References
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-26544
- https://lkml.org/lkml/2023/2/20/128
- https://lore.kernel.org/all/CAGyP=7fTKyew8AWO_Lj136U6UivEXRdoASKr60ea1gpW-7d6ZA@mail.gmail.com/
- https://lore.kernel.org/all/CAEK-7JJFdTLK1_xU8oBSsLjH3J-UP2iN2mpk1cUTT13CPQ=T3w@mail.gmail.com/
- https://gist.github.com/oswalpalash/76ca8fcd92332c75a0a7efaa26269c42
- https://ubuntu.com/security/notices/USN-6079-1
- https://ubuntu.com/security/notices/USN-6091-1
- https://ubuntu.com/security/notices/USN-6096-1
- NVD
- Launchpad
- Debian