Search CVE reports


Toggle filters

51 – 60 of 1463 results


CVE-2019-11487

Low priority

Some fixes available 43 of 55

The Linux kernel before 5.1-rc5 allows page->_refcount reference count overflow, with resultant use-after-free issues, if about 140 GiB of RAM exists. This is related to fs/fuse/dev.c, fs/pipe.c, fs/splice.c, include/linux/mm.h,...

130 affected packages

linux-gke, linux-azure-fde-5.15, linux-aws-fips, linux-azure-fips, linux-gcp-fips...

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
linux-gke Not affected Not affected Not affected Ignored Not in release
linux-azure-fde-5.15 Not in release Not in release Not in release Fixed Not in release
linux-aws-fips Not in release Not affected Not affected Not affected Fixed
linux-azure-fips Not in release Not affected Not affected Not affected Fixed
linux-gcp-fips Not in release Not affected Not affected Not affected Not affected
linux-xilinx Not in release Not affected Not in release Not in release Not in release
linux-nvidia-bos Not affected Not in release Not in release Not in release Not in release
linux-nvidia-7.0 Not in release Not affected Not in release Not in release Not in release
linux-hwe-7.0 Not in release Not affected Not in release Not in release Not in release
linux-oem-7.0 Not affected Not in release Not in release Not in release Not in release
linux-aws-7.0 Not in release Not affected Not in release Not in release Not in release
linux-riscv-7.0 Not in release Not affected Not in release Not in release Not in release
linux-azure-7.0 Not in release Not affected Not in release Not in release Not in release
linux-azure-fde-7.0 Not in release Not affected Not in release Not in release Not in release
linux-gcp-7.0 Not in release Not affected Not in release Not in release Not in release
linux-oracle-7.0 Not in release Not affected Not in release Not in release Not in release
linux Not affected Not affected Not affected Not affected Fixed
linux-aws Not affected Not affected Not affected Not affected Fixed
linux-aws-5.0 Not in release Not in release Not in release Not in release Not affected
linux-aws-5.15 Not in release Not in release Not in release Not affected Not in release
linux-aws-5.4 Not in release Not in release Not in release Not in release Not affected
linux-aws-6.14 Not in release Not affected Not in release Not in release Not in release
linux-aws-6.17 Not in release Not affected Not in release Not in release Not in release
linux-aws-6.8 Not in release Not in release Not affected Not in release Not in release
linux-aws-hwe Not in release Not in release Not in release Not in release Not in release
linux-azure Not affected Not affected Not affected Not affected Fixed
linux-azure-4.15 Not in release Not in release Not in release Not in release Not affected
linux-azure-5.15 Not in release Not in release Not in release Not affected Not in release
linux-azure-5.3 Not in release Not in release Not in release Not in release Not affected
linux-azure-5.4 Not in release Not in release Not in release Not in release Not affected
linux-azure-6.11 Not in release Not affected Not in release Not in release Not in release
linux-azure-6.14 Not in release Not affected Not in release Not in release Not in release
linux-azure-6.17 Not in release Not affected Not in release Not in release Not in release
linux-azure-6.8 Not in release Not in release Not affected Not in release Not in release
linux-azure-edge Not in release Not in release Not in release Not in release Fixed
linux-azure-fde Not affected Not affected Not affected Ignored Not in release
linux-azure-fde-6.14 Not in release Not affected Not in release Not in release Not in release
linux-azure-fde-6.17 Not in release Not affected Not in release Not in release Not in release
linux-azure-fde-6.8 Not in release Not in release Not affected Not in release Not in release
linux-azure-nvidia Not in release Not affected Not in release Not in release Not in release
linux-azure-nvidia-6.14 Not in release Not affected Not in release Not in release Not in release
linux-bluefield Not in release Not in release Not in release Not affected Not in release
linux-euclid — — — Not in release Not in release
linux-fips Not in release Not affected Not affected Not affected Fixed
linux-flo — — — Not in release Not in release
linux-gcp Not affected Not affected Not affected Not affected Fixed
linux-gcp-4.15 Not in release Not in release Not in release Not in release Not affected
linux-gcp-5.15 Not in release Not in release Not in release Not affected Not in release
linux-gcp-5.3 Not in release Not in release Not in release Not in release Not affected
linux-gcp-5.4 Not in release Not in release Not in release Not in release Not affected
linux-gcp-6.11 Not in release Not affected Not in release Not in release Not in release
linux-gcp-6.14 Not in release Not affected Not in release Not in release Not in release
linux-gcp-6.17 Not in release Not affected Not in release Not in release Not in release
linux-gcp-6.8 Not in release Not in release Not affected Not in release Not in release
linux-gcp-edge — — — Not in release Fixed
linux-gke-4.15 Not in release Not in release Not in release Not in release Fixed
linux-gke-5.0 Not in release Not in release Not in release Not in release Not affected
linux-gkeop Not in release Not affected Not affected Not affected Not in release
linux-gkeop-5.15 Not in release Not in release Not in release Not affected Not in release
linux-goldfish — — — Not in release Not in release
linux-grouper — — — Not in release Not in release
linux-hwe Not in release Not in release Not in release Not in release Fixed
linux-hwe-5.15 Not in release Not in release Not in release Not affected Not in release
linux-hwe-5.4 Not in release Not in release Not in release Not in release Not affected
linux-hwe-6.11 Not in release Not affected Not in release Not in release Not in release
linux-hwe-6.14 Not in release Not affected Not in release Not in release Not in release
linux-hwe-6.17 Not in release Not affected Not in release Not in release Not in release
linux-hwe-6.8 Not in release Not in release Not affected Not in release Not in release
linux-hwe-edge Not in release Not in release Not in release Not in release Ignored
linux-ibm Not affected Not affected Not affected Not affected Not in release
linux-ibm-5.15 Not in release Not in release Not in release Not affected Not in release
linux-ibm-5.4 Not in release Not in release Not in release Not in release Not affected
linux-ibm-6.8 Not in release Not in release Not affected Not in release Not in release
linux-intel Not in release Not affected Not in release Not in release Not in release
linux-intel-iot-realtime Not in release Not in release Not affected Not in release Not in release
linux-intel-iotg Not in release Not in release Not affected Not in release Not in release
linux-intel-iotg-5.15 Not in release Not in release Not in release Not affected Not in release
linux-iot Not in release Not in release Not in release Not affected Not in release
linux-kvm Not in release Not in release Not affected Not affected Fixed
linux-lowlatency Not in release Not affected Not affected Not in release Not in release
linux-lowlatency-hwe-5.15 Not in release Not in release Not in release Not affected Not in release
linux-lowlatency-hwe-6.11 Not in release Not affected Not in release Not in release Not in release
linux-lowlatency-hwe-6.8 Not in release Not in release Not affected Not in release Not in release
linux-lts-trusty — — — Not in release Not in release
linux-lts-utopic — — — Not in release Not in release
linux-lts-vivid — — — Not in release Not in release
linux-lts-wily — — — Not in release Not in release
linux-lts-xenial Not in release Not in release Not in release Not in release Not in release
linux-maguro — — — Not in release Not in release
linux-mako — — — Not in release Not in release
linux-manta — — — Not in release Not in release
linux-nvidia Not affected Not affected Not affected Not in release Not in release
linux-nvidia-6.11 Not in release Not affected Not in release Not in release Not in release
linux-nvidia-6.17 Not in release Not affected Not in release Not in release Not in release
linux-nvidia-6.5 Not in release Not in release Not affected Not in release Not in release
linux-nvidia-6.8 Not in release Not in release Not affected Not in release Not in release
linux-nvidia-bos-7.0 Not in release Not in release Not in release Not in release Not in release
linux-nvidia-lowlatency Not in release Not affected Not in release Not in release Not in release
linux-nvidia-tegra Not in release Not affected Not affected Not in release Not in release
linux-nvidia-tegra-5.15 Not in release Not in release Not in release Not affected Not in release
linux-nvidia-tegra-igx Not in release Not in release Not affected Not in release Not in release
linux-oem Not in release Not in release Not in release Not in release Fixed
linux-oem-6.11 Not in release Not affected Not in release Not in release Not in release
linux-oem-6.14 Not in release Not affected Not in release Not in release Not in release
linux-oem-6.17 Not in release Not affected Not in release Not in release Not in release
linux-oem-6.8 Not in release Not affected Not in release Not in release Not in release
linux-oem-osp1 Not in release Not in release Not in release Not in release Fixed
linux-oracle Not affected Not affected Not affected Not affected Fixed
linux-oracle-5.0 Not in release Not in release Not in release Not in release Not affected
linux-oracle-5.15 Not in release Not in release Not in release Not affected Not in release
linux-oracle-5.4 Not in release Not in release Not in release Not in release Not affected
linux-oracle-6.14 Not in release Not affected Not in release Not in release Not in release
linux-oracle-6.17 Not in release Not affected Not in release Not in release Not in release
linux-oracle-6.8 Not in release Not in release Not affected Not in release Not in release
linux-raspi Not affected Not affected Not affected Not affected Not in release
linux-raspi-5.4 Not in release Not in release Not in release Not in release Not affected
linux-raspi-realtime Not in release Not affected Not in release Not in release Not in release
linux-raspi2 Not in release Not in release Not in release Not affected Fixed
linux-raspi2-5.3 Not in release Not in release Not in release Not in release Not affected
linux-realtime Not affected Not affected Not affected Not in release Not in release
linux-realtime-6.14 Not in release Not affected Not in release Not in release Not in release
linux-realtime-6.17 Not in release Not affected Not in release Not in release Not in release
linux-realtime-6.8 Not in release Not in release Not affected Not in release Not in release
linux-riscv Not affected Not affected Ignored Ignored Not in release
linux-riscv-5.15 Not in release Not in release Not in release Not affected Not in release
linux-riscv-6.14 Not in release Not affected Not in release Not in release Not in release
linux-riscv-6.17 Not in release Not affected Not in release Not in release Not in release
linux-riscv-6.8 Not in release Not in release Not affected Not in release Not in release
linux-snapdragon Not in release Not in release Not in release Not in release Fixed
linux-xilinx-zynqmp Not in release Not in release Not affected Not affected Not in release
Show all 130 packages Show less packages

CVE-2019-3901

Medium priority

Some fixes available 4 of 8

A race condition in perf_event_open() allows local attackers to leak sensitive data from setuid programs. As no relevant locks (in particular the cred_guard_mutex) are held during the ptrace_may_access() call, it is possible for...

95 affected packages

linux-aws-fips, linux-azure-fips, linux-gcp-fips, linux, linux-aws...

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
linux-aws-fips — Not in release Not affected Not affected Not affected
linux-azure-fips — Not in release Not affected Not affected Not affected
linux-gcp-fips — Not in release Not affected Not affected Not affected
linux — Not affected Not affected Not affected Not affected
linux-aws — Not affected Not affected Not affected Not affected
linux-aws-5.15 — Not in release Not in release Not affected Not in release
linux-aws-5.4 — Not in release Not in release Not in release Not affected
linux-aws-6.14 — Not affected Not in release Not in release Not in release
linux-aws-6.8 — Not in release Not affected Not in release Not in release
linux-aws-hwe — Not in release Not in release Not in release Not in release
linux-azure — Not affected Not affected Not affected Not affected
linux-azure-4.15 — Not in release Not in release Not in release Not affected
linux-azure-5.15 — Not in release Not in release Not affected Not in release
linux-azure-5.4 — Not in release Not in release Not in release Not affected
linux-azure-6.11 — Ignored Not in release Not in release Not in release
linux-azure-6.8 — Not in release Not affected Not in release Not in release
linux-azure-edge — Not in release Not in release Not in release Not affected
linux-azure-fde — Not affected Not affected Ignored Not in release
linux-azure-fde-5.15 — Not in release Not in release Ignored Not in release
linux-azure-nvidia — Not affected Not in release Not in release Not in release
linux-bluefield — Not in release Not in release Not affected Not in release
linux-euclid — — — — Not in release
linux-fips — Not in release Not affected Not affected Not affected
linux-flo — — — — Not in release
linux-gcp — Not affected Not affected Not affected Not affected
linux-gcp-4.15 — Not in release Not in release Not in release Not affected
linux-gcp-5.15 — Not in release Not in release Not affected Not in release
linux-gcp-5.4 — Not in release Not in release Not in release Not affected
linux-gcp-6.11 — Ignored Not in release Not in release Not in release
linux-gcp-6.14 — Not affected Not in release Not in release Not in release
linux-gcp-6.8 — Not in release Not affected Not in release Not in release
linux-gcp-edge — — — — Not affected
linux-gke — Not affected Not affected Ignored Not in release
linux-gkeop — Not affected Not affected Ignored Not in release
linux-gkeop-5.15 — Not in release Not in release Ignored Not in release
linux-goldfish — — — — Not in release
linux-grouper — — — — Not in release
linux-hwe — Not in release Not in release Not in release Not affected
linux-hwe-5.15 — Not in release Not in release Not affected Not in release
linux-hwe-5.4 — Not in release Not in release Not in release Not affected
linux-hwe-6.11 — Ignored Not in release Not in release Not in release
linux-hwe-6.14 — Not affected Not in release Not in release Not in release
linux-hwe-6.8 — Not in release Not affected Not in release Not in release
linux-hwe-edge — Not in release Not in release Not in release Not affected
linux-ibm — Not affected Not affected Not affected Not in release
linux-ibm-5.15 — Not in release Not in release Not affected Not in release
linux-ibm-5.4 — Not in release Not in release Not in release Not affected
linux-ibm-6.8 — Not in release Not affected Not in release Not in release
linux-intel — Not affected Not in release Not in release Not in release
linux-intel-iot-realtime — Not in release Not affected Not in release Not in release
linux-intel-iotg — Not in release Not affected Not in release Not in release
linux-intel-iotg-5.15 — Not in release Not in release Not affected Not in release
linux-iot — Not in release Not in release Not affected Not in release
linux-kvm — Not in release Not affected Not affected Not affected
linux-lowlatency — Not affected Not affected Not in release Not in release
linux-lowlatency-hwe-5.15 — Not in release Not in release Not affected Not in release
linux-lowlatency-hwe-6.11 — Ignored Not in release Not in release Not in release
linux-lowlatency-hwe-6.8 — Not in release Not affected Not in release Not in release
linux-lts-trusty — — — — Not in release
linux-lts-utopic — — — — Not in release
linux-lts-vivid — — — — Not in release
linux-lts-wily — — — — Not in release
linux-lts-xenial — Not in release Not in release Not in release Not in release
linux-maguro — — — — Not in release
linux-mako — — — — Not in release
linux-manta — — — — Not in release
linux-nvidia — Not affected Not affected Not in release Not in release
linux-nvidia-6.11 — Not affected Not in release Not in release Not in release
linux-nvidia-6.8 — Not in release Not affected Not in release Not in release
linux-nvidia-lowlatency — Not affected Not in release Not in release Not in release
linux-nvidia-tegra — Not affected Not affected Not in release Not in release
linux-nvidia-tegra-5.15 — Not in release Not in release Not affected Not in release
linux-nvidia-tegra-igx — Not in release Not affected Not in release Not in release
linux-oem — Not in release Not in release Not in release Not affected
linux-oem-6.11 — Not affected Not in release Not in release Not in release
linux-oem-6.14 — Not affected Not in release Not in release Not in release
linux-oem-6.8 — Not affected Not in release Not in release Not in release
linux-oracle — Not affected Not affected Not affected Not affected
linux-oracle-5.15 — Not in release Not in release Not affected Not in release
linux-oracle-5.4 — Not in release Not in release Not in release Not affected
linux-oracle-6.14 — Not affected Not in release Not in release Not in release
linux-oracle-6.8 — Not in release Not affected Not in release Not in release
linux-raspi — Not affected Not affected Not affected Not in release
linux-raspi-5.4 — Not in release Not in release Not in release Not affected
linux-raspi-realtime — Not affected Not in release Not in release Not in release
linux-raspi2 — Not in release Not in release Ignored Not affected
linux-realtime — Not affected Not affected Not in release Not in release
linux-realtime-6.14 — Not affected Not in release Not in release Not in release
linux-realtime-6.8 — Not in release Not affected Not in release Not in release
linux-riscv — Not affected Ignored Ignored Not in release
linux-riscv-5.15 — Not in release Not in release Not affected Not in release
linux-riscv-6.14 — Not affected Not in release Not in release Not in release
linux-riscv-6.8 — Not in release Not affected Not in release Not in release
linux-snapdragon — Not in release Not in release Not in release Not affected
linux-xilinx-zynqmp — Not in release Not affected Not affected Not in release
Show all 95 packages Show less packages

CVE-2019-9503

Medium priority

Some fixes available 54 of 56

The Broadcom brcmfmac WiFi driver prior to commit a4176ec356c73a46c07c181c6d04039fafa34a9f is vulnerable to a frame validation bypass. If the brcmfmac driver receives a firmware event frame from a remote source, the...

98 affected packages

linux-aws-fips, linux-azure-fips, linux-gcp-fips, linux, linux-aws...

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
linux-aws-fips — Not in release Not affected Not affected Not affected
linux-azure-fips — Not in release Not affected Not affected Not affected
linux-gcp-fips — Not in release Not affected Not affected Not affected
linux — Not affected Not affected Not affected Fixed
linux-aws — Not affected Not affected Not affected Fixed
linux-aws-5.15 — Not in release Not in release Not affected Not in release
linux-aws-5.4 — Not in release Not in release Not in release Not affected
linux-aws-6.14 — Not affected Not in release Not in release Not in release
linux-aws-6.8 — Not in release Not affected Not in release Not in release
linux-aws-hwe — Not in release Not in release Not in release Not in release
linux-azure — Not affected Not affected Not affected Fixed
linux-azure-4.15 — Not in release Not in release Not in release Not affected
linux-azure-5.15 — Not in release Not in release Not affected Not in release
linux-azure-5.4 — Not in release Not in release Not in release Not affected
linux-azure-6.11 — Not affected Not in release Not in release Not in release
linux-azure-6.8 — Not in release Not affected Not in release Not in release
linux-azure-edge — Not in release Not in release Not in release Fixed
linux-azure-fde — Not affected Not affected Ignored Not in release
linux-azure-fde-5.15 — Not in release Not in release Not affected Not in release
linux-azure-nvidia — Not affected Not in release Not in release Not in release
linux-bluefield — Not in release Not in release Not affected Not in release
linux-euclid — — — — Not in release
linux-fips — Not in release Not affected Not affected Not affected
linux-flo — — — — Not in release
linux-gcp — Not affected Not affected Not affected Fixed
linux-gcp-4.15 — Not in release Not in release Not in release Not affected
linux-gcp-5.15 — Not in release Not in release Not affected Not in release
linux-gcp-5.4 — Not in release Not in release Not in release Not affected
linux-gcp-6.11 — Not affected Not in release Not in release Not in release
linux-gcp-6.14 — Not affected Not in release Not in release Not in release
linux-gcp-6.8 — Not in release Not affected Not in release Not in release
linux-gcp-edge — — — — Fixed
linux-gke — Not affected Not affected Ignored Not in release
linux-gke-4.15 — Not in release Not in release Not in release Fixed
linux-gke-5.0 — Not in release Not in release Not in release Not affected
linux-gkeop — Not affected Not affected Not affected Not in release
linux-gkeop-5.15 — Not in release Not in release Not affected Not in release
linux-goldfish — — — — Not in release
linux-grouper — — — — Not in release
linux-hwe — Not in release Not in release Not in release Fixed
linux-hwe-5.15 — Not in release Not in release Not affected Not in release
linux-hwe-5.4 — Not in release Not in release Not in release Not affected
linux-hwe-6.11 — Not affected Not in release Not in release Not in release
linux-hwe-6.14 — Not affected Not in release Not in release Not in release
linux-hwe-6.8 — Not in release Not affected Not in release Not in release
linux-hwe-edge — Not in release Not in release Not in release Not affected
linux-ibm — Not affected Not affected Not affected Not in release
linux-ibm-5.15 — Not in release Not in release Not affected Not in release
linux-ibm-5.4 — Not in release Not in release Not in release Not affected
linux-ibm-6.8 — Not in release Not affected Not in release Not in release
linux-intel — Not affected Not in release Not in release Not in release
linux-intel-iot-realtime — Not in release Not affected Not in release Not in release
linux-intel-iotg — Not in release Not affected Not in release Not in release
linux-intel-iotg-5.15 — Not in release Not in release Not affected Not in release
linux-iot — Not in release Not in release Not affected Not in release
linux-kvm — Not in release Not affected Not affected Fixed
linux-lowlatency — Not affected Not affected Not in release Not in release
linux-lowlatency-hwe-5.15 — Not in release Not in release Not affected Not in release
linux-lowlatency-hwe-6.11 — Not affected Not in release Not in release Not in release
linux-lowlatency-hwe-6.8 — Not in release Not affected Not in release Not in release
linux-lts-trusty — — — — Not in release
linux-lts-utopic — — — — Not in release
linux-lts-vivid — — — — Not in release
linux-lts-wily — — — — Not in release
linux-lts-xenial — Not in release Not in release Not in release Not in release
linux-maguro — — — — Not in release
linux-mako — — — — Not in release
linux-manta — — — — Not in release
linux-nvidia — Not affected Not affected Not in release Not in release
linux-nvidia-6.11 — Not affected Not in release Not in release Not in release
linux-nvidia-6.5 — Not in release Not affected Not in release Not in release
linux-nvidia-6.8 — Not in release Not affected Not in release Not in release
linux-nvidia-lowlatency — Not affected Not in release Not in release Not in release
linux-nvidia-tegra — Not affected Not affected Not in release Not in release
linux-nvidia-tegra-5.15 — Not in release Not in release Not affected Not in release
linux-nvidia-tegra-igx — Not in release Not affected Not in release Not in release
linux-oem — Not in release Not in release Not in release Fixed
linux-oem-6.11 — Not affected Not in release Not in release Not in release
linux-oem-6.14 — Not affected Not in release Not in release Not in release
linux-oem-6.8 — Not affected Not in release Not in release Not in release
linux-oracle — Not affected Not affected Not affected Fixed
linux-oracle-5.15 — Not in release Not in release Not affected Not in release
linux-oracle-5.4 — Not in release Not in release Not in release Not affected
linux-oracle-6.14 — Not affected Not in release Not in release Not in release
linux-oracle-6.8 — Not in release Not affected Not in release Not in release
linux-raspi — Not affected Not affected Not affected Not in release
linux-raspi-5.4 — Not in release Not in release Not in release Not affected
linux-raspi-realtime — Not affected Not in release Not in release Not in release
linux-raspi2 — Not in release Not in release Ignored Fixed
linux-realtime — Not affected Not affected Not in release Not in release
linux-realtime-6.14 — Not affected Not in release Not in release Not in release
linux-realtime-6.8 — Not in release Not affected Not in release Not in release
linux-riscv — Not affected Ignored Ignored Not in release
linux-riscv-5.15 — Not in release Not in release Not affected Not in release
linux-riscv-6.14 — Not affected Not in release Not in release Not in release
linux-riscv-6.8 — Not in release Not affected Not in release Not in release
linux-snapdragon — Not in release Not in release Not in release Fixed
linux-xilinx-zynqmp — Not in release Not affected Not affected Not in release
Show all 98 packages Show less packages

CVE-2019-9500

Medium priority
Fixed

The Broadcom brcmfmac WiFi driver prior to commit 1b5e2423164b3670e8bc9174e4762d297990deff is vulnerable to a heap buffer overflow. If the Wake-up on Wireless LAN functionality is configured, a malicious event frame can be...

29 affected packages

linux, linux-aws, linux-aws-hwe, linux-azure, linux-azure-edge...

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
linux — — — — Fixed
linux-aws — — — — Fixed
linux-aws-hwe — — — — Not in release
linux-azure — — — — Fixed
linux-azure-edge — — — — Fixed
linux-euclid — — — — Not in release
linux-flo — — — — Not in release
linux-gcp — — — — Fixed
linux-gcp-edge — — — — Fixed
linux-gke — — — — Not in release
linux-gke-4.15 — — — — Fixed
linux-gke-5.0 — — — — Not affected
linux-goldfish — — — — Not in release
linux-grouper — — — — Not in release
linux-hwe — — — — Fixed
linux-hwe-edge — — — — Not affected
linux-kvm — — — — Fixed
linux-lts-trusty — — — — Not in release
linux-lts-utopic — — — — Not in release
linux-lts-vivid — — — — Not in release
linux-lts-wily — — — — Not in release
linux-lts-xenial — — — — Not in release
linux-maguro — — — — Not in release
linux-mako — — — — Not in release
linux-manta — — — — Not in release
linux-oem — — — — Fixed
linux-oracle — — — — Fixed
linux-raspi2 — — — — Fixed
linux-snapdragon — — — — Not affected
Show all 29 packages Show less packages

CVE-2019-3837

Medium priority
Fixed

It was found that the net_dma code in tcp_recvmsg() in the 2.6.32 kernel as shipped in RHEL6 is thread-unsafe. So an unprivileged multi-threaded userspace application calling recvmsg() for the same network socket in parallel...

27 affected packages

linux, linux-aws, linux-aws-hwe, linux-azure, linux-azure-edge...

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
linux — — — — Not affected
linux-aws — — — — Not affected
linux-aws-hwe — — — — Not in release
linux-azure — — — — Not affected
linux-azure-edge — — — — Not affected
linux-euclid — — — — Not in release
linux-flo — — — — Not in release
linux-gcp — — — — Not affected
linux-gcp-edge — — — — Not affected
linux-gke — — — — Not affected
linux-goldfish — — — — Not in release
linux-grouper — — — — Not in release
linux-hwe — — — — Not affected
linux-hwe-edge — — — — Not affected
linux-kvm — — — — Not affected
linux-lts-trusty — — — — Not in release
linux-lts-utopic — — — — Not in release
linux-lts-vivid — — — — Not in release
linux-lts-wily — — — — Not in release
linux-lts-xenial — — — — Not in release
linux-maguro — — — — Not in release
linux-mako — — — — Not in release
linux-manta — — — — Not in release
linux-oem — — — — Not affected
linux-oracle — — — — Not affected
linux-raspi2 — — — — Not affected
linux-snapdragon — — — — Not affected
Show all 27 packages Show less packages

CVE-2019-11191

Negligible priority

Some fixes available 38 of 40

The Linux kernel through 5.0.7, when CONFIG_IA32_AOUT is enabled and ia32_aout is loaded, allows local users to bypass ASLR on setuid a.out programs (if any exist) because install_exec_creds() is called too late...

98 affected packages

linux-aws-fips, linux-azure-fips, linux-gcp-fips, linux, linux-aws...

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
linux-aws-fips — Not in release Not affected Not affected Not affected
linux-azure-fips — Not in release Not affected Not affected Not affected
linux-gcp-fips — Not in release Not affected Not affected Not affected
linux — Not affected Not affected Not affected Fixed
linux-aws — Not affected Not affected Not affected Fixed
linux-aws-5.15 — Not in release Not in release Not affected Not in release
linux-aws-5.4 — Not in release Not in release Not in release Not affected
linux-aws-6.14 — Not affected Not in release Not in release Not in release
linux-aws-6.8 — Not in release Not affected Not in release Not in release
linux-aws-hwe — Not in release Not in release Not in release Not in release
linux-azure — Not affected Not affected Not affected Fixed
linux-azure-4.15 — Not in release Not in release Not in release Not affected
linux-azure-5.15 — Not in release Not in release Not affected Not in release
linux-azure-5.4 — Not in release Not in release Not in release Not affected
linux-azure-6.11 — Not affected Not in release Not in release Not in release
linux-azure-6.8 — Not in release Not affected Not in release Not in release
linux-azure-edge — Not in release Not in release Not in release Fixed
linux-azure-fde — Not affected Not affected Ignored Not in release
linux-azure-fde-5.15 — Not in release Not in release Ignored Not in release
linux-azure-nvidia — Not affected Not in release Not in release Not in release
linux-bluefield — Not in release Not in release Not affected Not in release
linux-euclid — — — — Not in release
linux-fips — Not in release Not affected Not affected Not affected
linux-flo — — — — Not in release
linux-gcp — Not affected Not affected Not affected Fixed
linux-gcp-4.15 — Not in release Not in release Not in release Not affected
linux-gcp-5.15 — Not in release Not in release Not affected Not in release
linux-gcp-5.4 — Not in release Not in release Not in release Not affected
linux-gcp-6.11 — Not affected Not in release Not in release Not in release
linux-gcp-6.14 — Not affected Not in release Not in release Not in release
linux-gcp-6.8 — Not in release Not affected Not in release Not in release
linux-gcp-edge — — — — Fixed
linux-gke — Not affected Not affected Ignored Not in release
linux-gke-4.15 — Not in release Not in release Not in release Fixed
linux-gke-5.0 — Not in release Not in release Not in release Not affected
linux-gkeop — Not affected Not affected Not affected Not in release
linux-gkeop-5.15 — Not in release Not in release Not affected Not in release
linux-goldfish — — — — Not in release
linux-grouper — — — — Not in release
linux-hwe — Not in release Not in release Not in release Fixed
linux-hwe-5.15 — Not in release Not in release Not affected Not in release
linux-hwe-5.4 — Not in release Not in release Not in release Not affected
linux-hwe-6.11 — Not affected Not in release Not in release Not in release
linux-hwe-6.14 — Not affected Not in release Not in release Not in release
linux-hwe-6.8 — Not in release Not affected Not in release Not in release
linux-hwe-edge — Not in release Not in release Not in release Not affected
linux-ibm — Not affected Not affected Not affected Not in release
linux-ibm-5.15 — Not in release Not in release Not affected Not in release
linux-ibm-5.4 — Not in release Not in release Not in release Not affected
linux-ibm-6.8 — Not in release Not affected Not in release Not in release
linux-intel — Not affected Not in release Not in release Not in release
linux-intel-iot-realtime — Not in release Not affected Not in release Not in release
linux-intel-iotg — Not in release Not affected Not in release Not in release
linux-intel-iotg-5.15 — Not in release Not in release Not affected Not in release
linux-iot — Not in release Not in release Not affected Not in release
linux-kvm — Not in release Not affected Not affected Fixed
linux-lowlatency — Not affected Not affected Not in release Not in release
linux-lowlatency-hwe-5.15 — Not in release Not in release Not affected Not in release
linux-lowlatency-hwe-6.11 — Not affected Not in release Not in release Not in release
linux-lowlatency-hwe-6.8 — Not in release Not affected Not in release Not in release
linux-lts-trusty — — — — Not in release
linux-lts-utopic — — — — Not in release
linux-lts-vivid — — — — Not in release
linux-lts-wily — — — — Not in release
linux-lts-xenial — Not in release Not in release Not in release Not in release
linux-maguro — — — — Not in release
linux-mako — — — — Not in release
linux-manta — — — — Not in release
linux-nvidia — Not affected Not affected Not in release Not in release
linux-nvidia-6.11 — Not affected Not in release Not in release Not in release
linux-nvidia-6.5 — Not in release Not affected Not in release Not in release
linux-nvidia-6.8 — Not in release Not affected Not in release Not in release
linux-nvidia-lowlatency — Not affected Not in release Not in release Not in release
linux-nvidia-tegra — Not affected Not affected Not in release Not in release
linux-nvidia-tegra-5.15 — Not in release Not in release Not affected Not in release
linux-nvidia-tegra-igx — Not in release Not affected Not in release Not in release
linux-oem — Not in release Not in release Not in release Fixed
linux-oem-6.11 — Not affected Not in release Not in release Not in release
linux-oem-6.14 — Not affected Not in release Not in release Not in release
linux-oem-6.8 — Not affected Not in release Not in release Not in release
linux-oracle — Not affected Not affected Not affected Fixed
linux-oracle-5.15 — Not in release Not in release Not affected Not in release
linux-oracle-5.4 — Not in release Not in release Not in release Not affected
linux-oracle-6.14 — Not affected Not in release Not in release Not in release
linux-oracle-6.8 — Not in release Not affected Not in release Not in release
linux-raspi — Not affected Not affected Not affected Not in release
linux-raspi-5.4 — Not in release Not in release Not in release Not affected
linux-raspi-realtime — Not affected Not in release Not in release Not in release
linux-raspi2 — Not in release Not in release Ignored Fixed
linux-realtime — Not affected Not affected Not in release Not in release
linux-realtime-6.14 — Not affected Not in release Not in release Not in release
linux-realtime-6.8 — Not in release Not affected Not in release Not in release
linux-riscv — Not affected Ignored Ignored Not in release
linux-riscv-5.15 — Not in release Not in release Not affected Not in release
linux-riscv-6.14 — Not affected Not in release Not in release Not in release
linux-riscv-6.8 — Not in release Not affected Not in release Not in release
linux-snapdragon — Not in release Not in release Not in release Fixed
linux-xilinx-zynqmp — Not in release Not affected Not affected Not in release
Show all 98 packages Show less packages

CVE-2019-11190

Low priority

Some fixes available 9 of 11

The Linux kernel before 4.8 allows local users to bypass ASLR on setuid programs (such as /bin/su) because install_exec_creds() is called too late in load_elf_binary() in fs/binfmt_elf.c, and thus the ptrace_may_access() check has...

96 affected packages

linux-aws-fips, linux-azure-fips, linux-gcp-fips, linux, linux-aws...

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
linux-aws-fips — Not in release Not affected Not affected Not affected
linux-azure-fips — Not in release Not affected Not affected Not affected
linux-gcp-fips — Not in release Not affected Not affected Not affected
linux — Not affected Not affected Not affected Not affected
linux-aws — Not affected Not affected Not affected Not affected
linux-aws-5.15 — Not in release Not in release Not affected Not in release
linux-aws-5.4 — Not in release Not in release Not in release Not affected
linux-aws-6.14 — Not affected Not in release Not in release Not in release
linux-aws-6.8 — Not in release Not affected Not in release Not in release
linux-aws-hwe — Not in release Not in release Not in release Not in release
linux-azure — Not affected Not affected Not affected Not affected
linux-azure-4.15 — Not in release Not in release Not in release Not affected
linux-azure-5.15 — Not in release Not in release Not affected Not in release
linux-azure-5.4 — Not in release Not in release Not in release Not affected
linux-azure-6.11 — Not affected Not in release Not in release Not in release
linux-azure-6.8 — Not in release Not affected Not in release Not in release
linux-azure-edge — Not in release Not in release Not in release Not affected
linux-azure-fde — Not affected Not affected Ignored Not in release
linux-azure-fde-5.15 — Not in release Not in release Ignored Not in release
linux-azure-nvidia — Not affected Not in release Not in release Not in release
linux-bluefield — Not in release Not in release Not affected Not in release
linux-euclid — — — — Not in release
linux-fips — Not in release Not affected Not affected Not affected
linux-flo — — — — Not in release
linux-gcp — Not affected Not affected Not affected Not affected
linux-gcp-4.15 — Not in release Not in release Not in release Not affected
linux-gcp-5.15 — Not in release Not in release Not affected Not in release
linux-gcp-5.4 — Not in release Not in release Not in release Not affected
linux-gcp-6.11 — Not affected Not in release Not in release Not in release
linux-gcp-6.14 — Not affected Not in release Not in release Not in release
linux-gcp-6.8 — Not in release Not affected Not in release Not in release
linux-gcp-edge — — — — Not affected
linux-gke — Not affected Not affected Ignored Not in release
linux-gkeop — Not affected Not affected Not affected Not in release
linux-gkeop-5.15 — Not in release Not in release Not affected Not in release
linux-goldfish — — — — Not in release
linux-grouper — — — — Not in release
linux-hwe — Not in release Not in release Not in release Not affected
linux-hwe-5.15 — Not in release Not in release Not affected Not in release
linux-hwe-5.4 — Not in release Not in release Not in release Not affected
linux-hwe-6.11 — Not affected Not in release Not in release Not in release
linux-hwe-6.14 — Not affected Not in release Not in release Not in release
linux-hwe-6.8 — Not in release Not affected Not in release Not in release
linux-hwe-edge — Not in release Not in release Not in release Not affected
linux-ibm — Not affected Not affected Not affected Not in release
linux-ibm-5.15 — Not in release Not in release Not affected Not in release
linux-ibm-5.4 — Not in release Not in release Not in release Not affected
linux-ibm-6.8 — Not in release Not affected Not in release Not in release
linux-intel — Not affected Not in release Not in release Not in release
linux-intel-iot-realtime — Not in release Not affected Not in release Not in release
linux-intel-iotg — Not in release Not affected Not in release Not in release
linux-intel-iotg-5.15 — Not in release Not in release Not affected Not in release
linux-iot — Not in release Not in release Not affected Not in release
linux-kvm — Not in release Not affected Not affected Not affected
linux-lowlatency — Not affected Not affected Not in release Not in release
linux-lowlatency-hwe-5.15 — Not in release Not in release Not affected Not in release
linux-lowlatency-hwe-6.11 — Not affected Not in release Not in release Not in release
linux-lowlatency-hwe-6.8 — Not in release Not affected Not in release Not in release
linux-lts-trusty — — — — Not in release
linux-lts-utopic — — — — Not in release
linux-lts-vivid — — — — Not in release
linux-lts-wily — — — — Not in release
linux-lts-xenial — Not in release Not in release Not in release Not in release
linux-maguro — — — — Not in release
linux-mako — — — — Not in release
linux-manta — — — — Not in release
linux-nvidia — Not affected Not affected Not in release Not in release
linux-nvidia-6.11 — Not affected Not in release Not in release Not in release
linux-nvidia-6.5 — Not in release Not affected Not in release Not in release
linux-nvidia-6.8 — Not in release Not affected Not in release Not in release
linux-nvidia-lowlatency — Not affected Not in release Not in release Not in release
linux-nvidia-tegra — Not affected Not affected Not in release Not in release
linux-nvidia-tegra-5.15 — Not in release Not in release Not affected Not in release
linux-nvidia-tegra-igx — Not in release Not affected Not in release Not in release
linux-oem — Not in release Not in release Not in release Not affected
linux-oem-6.11 — Not affected Not in release Not in release Not in release
linux-oem-6.14 — Not affected Not in release Not in release Not in release
linux-oem-6.8 — Not affected Not in release Not in release Not in release
linux-oracle — Not affected Not affected Not affected Not affected
linux-oracle-5.15 — Not in release Not in release Not affected Not in release
linux-oracle-5.4 — Not in release Not in release Not in release Not affected
linux-oracle-6.14 — Not affected Not in release Not in release Not in release
linux-oracle-6.8 — Not in release Not affected Not in release Not in release
linux-raspi — Not affected Not affected Not affected Not in release
linux-raspi-5.4 — Not in release Not in release Not in release Not affected
linux-raspi-realtime — Not affected Not in release Not in release Not in release
linux-raspi2 — Not in release Not in release Ignored Not affected
linux-realtime — Not affected Not affected Not in release Not in release
linux-realtime-6.14 — Not affected Not in release Not in release Not in release
linux-realtime-6.8 — Not in release Not affected Not in release Not in release
linux-riscv — Not affected Ignored Ignored Not in release
linux-riscv-5.15 — Not in release Not in release Not affected Not in release
linux-riscv-6.14 — Not affected Not in release Not in release Not in release
linux-riscv-6.8 — Not in release Not affected Not in release Not in release
linux-snapdragon — Not in release Not in release Not in release Fixed
linux-xilinx-zynqmp — Not in release Not affected Not affected Not in release
Show all 96 packages Show less packages

CVE-2019-3887

Medium priority
Fixed

A flaw was found in the way KVM hypervisor handled x2APIC Machine Specific Rregister (MSR) access with nested(=1) virtualization enabled. In that, L1 guest could access L0's APIC register values via L2 guest, when...

27 affected packages

linux, linux-aws, linux-aws-hwe, linux-azure, linux-azure-edge...

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
linux — — — — Not affected
linux-aws — — — — Not affected
linux-aws-hwe — — — — Not in release
linux-azure — — — — Fixed
linux-azure-edge — — — — Fixed
linux-euclid — — — — Not in release
linux-flo — — — — Not in release
linux-gcp — — — — Not affected
linux-gcp-edge — — — — Fixed
linux-gke — — — — Not affected
linux-goldfish — — — — Not in release
linux-grouper — — — — Not in release
linux-hwe — — — — Fixed
linux-hwe-edge — — — — Not affected
linux-kvm — — — — Not affected
linux-lts-trusty — — — — Not in release
linux-lts-utopic — — — — Not in release
linux-lts-vivid — — — — Not in release
linux-lts-wily — — — — Not in release
linux-lts-xenial — — — — Not in release
linux-maguro — — — — Not in release
linux-mako — — — — Not in release
linux-manta — — — — Not in release
linux-oem — — — — Not affected
linux-oracle — — — — Not affected
linux-raspi2 — — — — Not affected
linux-snapdragon — — — — Not affected
Show all 27 packages Show less packages

CVE-2018-20449

Negligible priority

Some fixes available 3 of 5

The hidma_chan_stats function in drivers/dma/qcom/hidma_dbg.c in the Linux kernel 4.14.90 allows local users to obtain sensitive address information by reading "callback=" lines in a debugfs file.

73 affected packages

linux-aws-fips, linux-azure-fips, linux-gcp-fips, linux, linux-aws...

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
linux-aws-fips — Not in release Not affected Not affected Not affected
linux-azure-fips — Not in release Not affected Not affected Not affected
linux-gcp-fips — Not in release Not affected Not affected Not affected
linux — Not affected Not affected Not affected Not affected
linux-aws — Not affected Not affected Not affected Not affected
linux-aws-5.15 — Not in release Not in release Not affected Not in release
linux-aws-5.4 — Not in release Not in release Not in release Not affected
linux-aws-hwe — Not in release Not in release Not in release Not in release
linux-azure — Not affected Not affected Not affected Not affected
linux-azure-4.15 — Not in release Not in release Not in release Not affected
linux-azure-5.15 — Not in release Not in release Not affected Not in release
linux-azure-5.4 — Not in release Not in release Not in release Not affected
linux-azure-edge — Not in release Not in release Not in release Not affected
linux-azure-fde — Not affected Not affected Ignored Not in release
linux-azure-fde-5.15 — Not in release Not in release Not affected Not in release
linux-bluefield — Not in release Not in release Not affected Not in release
linux-euclid — — — — Not in release
linux-fips — Not in release Not affected Not affected Not affected
linux-flo — — — — Not in release
linux-gcp — Not affected Not affected Not affected Not affected
linux-gcp-4.15 — Not in release Not in release Not in release Not affected
linux-gcp-5.15 — Not in release Not in release Not affected Not in release
linux-gcp-5.4 — Not in release Not in release Not in release Not affected
linux-gcp-edge — — — — Not affected
linux-gke — Not affected Not affected Ignored Not in release
linux-gkeop — Not affected Not affected Not affected Not in release
linux-gkeop-5.15 — Not in release Not in release Not affected Not in release
linux-goldfish — — — — Not in release
linux-grouper — — — — Not in release
linux-hwe — Not in release Not in release Not in release Not affected
linux-hwe-5.15 — Not in release Not in release Not affected Not in release
linux-hwe-5.4 — Not in release Not in release Not in release Not affected
linux-hwe-6.8 — Not in release Not affected Not in release Not in release
linux-hwe-edge — Not in release Not in release Not in release Not affected
linux-ibm — Not affected Not affected Not affected Not in release
linux-ibm-5.15 — Not in release Not in release Not affected Not in release
linux-ibm-5.4 — Not in release Not in release Not in release Not affected
linux-intel — Not affected Not in release Not in release Not in release
linux-intel-iot-realtime — Not in release Not affected Not in release Not in release
linux-intel-iotg — Not in release Not affected Not in release Not in release
linux-intel-iotg-5.15 — Not in release Not in release Not affected Not in release
linux-iot — Not in release Not in release Not affected Not in release
linux-kvm — Not in release Not affected Not affected Not affected
linux-lowlatency — Not affected Not affected Not in release Not in release
linux-lowlatency-hwe-5.15 — Not in release Not in release Not affected Not in release
linux-lowlatency-hwe-6.8 — Not in release Not affected Not in release Not in release
linux-lts-trusty — — — — Not in release
linux-lts-utopic — — — — Not in release
linux-lts-vivid — — — — Not in release
linux-lts-wily — — — — Not in release
linux-lts-xenial — Not in release Not in release Not in release Not in release
linux-maguro — — — — Not in release
linux-mako — — — — Not in release
linux-manta — — — — Not in release
linux-nvidia — Not affected Not affected Not in release Not in release
linux-nvidia-6.5 — Not in release Not affected Not in release Not in release
linux-nvidia-6.8 — Not in release Not affected Not in release Not in release
linux-nvidia-lowlatency — Not affected Not in release Not in release Not in release
linux-oem — Not in release Not in release Not in release Not affected
linux-oem-6.8 — Not affected Not in release Not in release Not in release
linux-oracle — Not affected Not affected Not affected Not affected
linux-oracle-5.15 — Not in release Not in release Not affected Not in release
linux-oracle-5.4 — Not in release Not in release Not in release Not affected
linux-raspi — Not affected Not affected Not affected Not in release
linux-raspi-5.4 — Not in release Not in release Not in release Not affected
linux-raspi-realtime — Not affected Not in release Not in release Not in release
linux-raspi2 — Not in release Not in release Ignored Not affected
linux-realtime — Not affected Not affected Not in release Not in release
linux-riscv — Not affected Ignored Ignored Not in release
linux-riscv-5.15 — Not in release Not in release Not affected Not in release
linux-riscv-6.8 — Not in release Not affected Not in release Not in release
linux-snapdragon — Not in release Not in release Not in release Not affected
linux-xilinx-zynqmp — Not in release Not affected Not affected Not in release
Show all 73 packages Show less packages

CVE-2019-10125

Medium priority
Not affected

An issue was discovered in aio_poll() in fs/aio.c in the Linux kernel through 5.0.4. A file may be released by aio_poll_wake() if an expected event is triggered immediately (e.g., by the close of a pair of pipes) after the return...

27 affected packages

linux, linux-aws, linux-aws-hwe, linux-azure, linux-azure-edge...

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
linux — — — — Not affected
linux-aws — — — — Not affected
linux-aws-hwe — — — — Not in release
linux-azure — — — — Not affected
linux-azure-edge — — — — Not affected
linux-euclid — — — — Not in release
linux-flo — — — — Not in release
linux-gcp — — — — Not affected
linux-gcp-edge — — — — Not affected
linux-gke — — — — Not affected
linux-goldfish — — — — Not in release
linux-grouper — — — — Not in release
linux-hwe — — — — Not affected
linux-hwe-edge — — — — Not affected
linux-kvm — — — — Not affected
linux-lts-trusty — — — — Not in release
linux-lts-utopic — — — — Not in release
linux-lts-vivid — — — — Not in release
linux-lts-wily — — — — Not in release
linux-lts-xenial — — — — Not in release
linux-maguro — — — — Not in release
linux-mako — — — — Not in release
linux-manta — — — — Not in release
linux-oem — — — — Not affected
linux-oracle — — — — Not affected
linux-raspi2 — — — — Not affected
linux-snapdragon — — — — Not affected
Show all 27 packages Show less packages