Search CVE reports

51 – 60 of 1091 results

Detailed view

Sort by:

CVE-2017-15127

Medium priority

Some fixes available 2 of 11

A flaw was found in the hugetlb_mcopy_atomic_pte function in mm/hugetlb.c in the Linux kernel before 4.13. A superfluous implicit page unlock for VM_SHARED hugetlbfs mapping could trigger a local denial of service (BUG).

32 affected packages

linux, linux-armadaxp, linux-aws, linux-azure, linux-euclid...

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS	16.04 LTS
linux	—	—	—	Not affected	Not affected
linux-armadaxp	—	—	—	Not in release	Not in release
linux-aws	—	—	—	Not affected	Not affected
linux-azure	—	—	—	Not affected	Fixed
linux-euclid	—	—	—	Not in release	Ignored
linux-flo	—	—	—	Not in release	Ignored
linux-gcp	—	—	—	Not affected	Not affected
linux-gke	—	—	—	Not in release	Ignored
linux-goldfish	—	—	—	Not in release	Ignored
linux-grouper	—	—	—	Not in release	Not in release
linux-hwe	—	—	—	Not affected	Not affected
linux-hwe-edge	—	—	—	Fixed	Not affected
linux-kvm	—	—	—	Not affected	Not affected
linux-linaro-omap	—	—	—	Not in release	Not in release
linux-linaro-shared	—	—	—	Not in release	Not in release
linux-linaro-vexpress	—	—	—	Not in release	Not in release
linux-lts-quantal	—	—	—	Not in release	Not in release
linux-lts-raring	—	—	—	Not in release	Not in release
linux-lts-saucy	—	—	—	Not in release	Not in release
linux-lts-trusty	—	—	—	Not in release	Not in release
linux-lts-utopic	—	—	—	Not in release	Not in release
linux-lts-vivid	—	—	—	Not in release	Not in release
linux-lts-wily	—	—	—	Not in release	Not in release
linux-lts-xenial	—	—	—	Not in release	Not in release
linux-maguro	—	—	—	Not in release	Not in release
linux-mako	—	—	—	Not in release	Ignored
linux-manta	—	—	—	Not in release	Not in release
linux-oem	—	—	—	Not affected	Not affected
linux-qcm-msm	—	—	—	Not in release	Not in release
linux-raspi2	—	—	—	Not affected	Not affected
linux-snapdragon	—	—	—	Not affected	Not affected
linux-ti-omap4	—	—	—	Not in release	Not in release

CVE-2017-15126

Medium priority

Some fixes available 3 of 11

A use-after-free flaw was found in fs/userfaultfd.c in the Linux kernel before 4.13.6. The issue is related to the handling of fork failure when dealing with event messages. Failure to fork correctly can lead to a situation where...

32 affected packages

linux, linux-armadaxp, linux-aws, linux-azure, linux-euclid...

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS	16.04 LTS
linux	—	—	—	—	Not affected
linux-armadaxp	—	—	—	—	Not in release
linux-aws	—	—	—	—	Not affected
linux-azure	—	—	—	—	Fixed
linux-euclid	—	—	—	—	Ignored
linux-flo	—	—	—	—	Ignored
linux-gcp	—	—	—	—	Not affected
linux-gke	—	—	—	—	Not affected
linux-goldfish	—	—	—	—	Not affected
linux-grouper	—	—	—	—	Not in release
linux-hwe	—	—	—	—	Not affected
linux-hwe-edge	—	—	—	—	Not affected
linux-kvm	—	—	—	—	Not affected
linux-linaro-omap	—	—	—	—	Not in release
linux-linaro-shared	—	—	—	—	Not in release
linux-linaro-vexpress	—	—	—	—	Not in release
linux-lts-quantal	—	—	—	—	Not in release
linux-lts-raring	—	—	—	—	Not in release
linux-lts-saucy	—	—	—	—	Not in release
linux-lts-trusty	—	—	—	—	Not in release
linux-lts-utopic	—	—	—	—	Not in release
linux-lts-vivid	—	—	—	—	Not in release
linux-lts-wily	—	—	—	—	Not in release
linux-lts-xenial	—	—	—	—	Not in release
linux-maguro	—	—	—	—	Not in release
linux-mako	—	—	—	—	Ignored
linux-manta	—	—	—	—	Not in release
linux-oem	—	—	—	—	Not affected
linux-qcm-msm	—	—	—	—	Not in release
linux-raspi2	—	—	—	—	Not affected
linux-snapdragon	—	—	—	—	Not affected
linux-ti-omap4	—	—	—	—	Not in release

CVE-2017-13222

Medium priority

Ignored

An information disclosure vulnerability in the Upstream kernel kernel. Product: Android. Versions: Android kernel. Android ID: A-38159576.

32 affected packages

linux, linux-armadaxp, linux-aws, linux-azure, linux-euclid...

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS	16.04 LTS
linux	—	—	—	—	Not affected
linux-armadaxp	—	—	—	—	Not in release
linux-aws	—	—	—	—	Not affected
linux-azure	—	—	—	—	Not affected
linux-euclid	—	—	—	—	Not affected
linux-flo	—	—	—	—	Ignored
linux-gcp	—	—	—	—	Not affected
linux-gke	—	—	—	—	Not affected
linux-goldfish	—	—	—	—	Not affected
linux-grouper	—	—	—	—	Not in release
linux-hwe	—	—	—	—	Not affected
linux-hwe-edge	—	—	—	—	Not affected
linux-kvm	—	—	—	—	Not affected
linux-linaro-omap	—	—	—	—	Not in release
linux-linaro-shared	—	—	—	—	Not in release
linux-linaro-vexpress	—	—	—	—	Not in release
linux-lts-quantal	—	—	—	—	Not in release
linux-lts-raring	—	—	—	—	Not in release
linux-lts-saucy	—	—	—	—	Not in release
linux-lts-trusty	—	—	—	—	Not in release
linux-lts-utopic	—	—	—	—	Not in release
linux-lts-vivid	—	—	—	—	Not in release
linux-lts-wily	—	—	—	—	Not in release
linux-lts-xenial	—	—	—	—	Not in release
linux-maguro	—	—	—	—	Not in release
linux-mako	—	—	—	—	Ignored
linux-manta	—	—	—	—	Not in release
linux-oem	—	—	—	—	Not affected
linux-qcm-msm	—	—	—	—	Not in release
linux-raspi2	—	—	—	—	Not affected
linux-snapdragon	—	—	—	—	Not affected
linux-ti-omap4	—	—	—	—	Not in release

CVE-2017-13221

Medium priority

Ignored

An elevation of privilege vulnerability in the Upstream kernel wifi driver. Product: Android. Versions: Android kernel. Android ID: A-64709938.

32 affected packages

linux, linux-armadaxp, linux-aws, linux-azure, linux-euclid...

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS	16.04 LTS
linux	—	—	—	—	Not affected
linux-armadaxp	—	—	—	—	Not in release
linux-aws	—	—	—	—	Not affected
linux-azure	—	—	—	—	Not affected
linux-euclid	—	—	—	—	Ignored
linux-flo	—	—	—	—	Ignored
linux-gcp	—	—	—	—	Not affected
linux-gke	—	—	—	—	Not affected
linux-goldfish	—	—	—	—	Not affected
linux-grouper	—	—	—	—	Not in release
linux-hwe	—	—	—	—	Not affected
linux-hwe-edge	—	—	—	—	Not affected
linux-kvm	—	—	—	—	Not affected
linux-linaro-omap	—	—	—	—	Not in release
linux-linaro-shared	—	—	—	—	Not in release
linux-linaro-vexpress	—	—	—	—	Not in release
linux-lts-quantal	—	—	—	—	Not in release
linux-lts-raring	—	—	—	—	Not in release
linux-lts-saucy	—	—	—	—	Not in release
linux-lts-trusty	—	—	—	—	Not in release
linux-lts-utopic	—	—	—	—	Not in release
linux-lts-vivid	—	—	—	—	Not in release
linux-lts-wily	—	—	—	—	Not in release
linux-lts-xenial	—	—	—	—	Not in release
linux-maguro	—	—	—	—	Not in release
linux-mako	—	—	—	—	Ignored
linux-manta	—	—	—	—	Not in release
linux-oem	—	—	—	—	Not affected
linux-qcm-msm	—	—	—	—	Not in release
linux-raspi2	—	—	—	—	Not affected
linux-snapdragon	—	—	—	—	Not affected
linux-ti-omap4	—	—	—	—	Not in release

CVE-2017-13216

Medium priority

Ignored

In ashmem_ioctl of ashmem.c, there is an out-of-bounds write due to insufficient locking when accessing asma. This could lead to a local elevation of privilege enabling code execution as a privileged process with no additional...

78 affected packages

linux, linux-aws, linux-aws-5.15, linux-aws-5.4, linux-aws-6.8...

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS	16.04 LTS
linux	Not affected	Not affected	Not affected	Not affected	Not affected
linux-aws	Not affected	Not affected	Not affected	Not affected	Not affected
linux-aws-5.15	Not in release	Not in release	Not affected	Not in release	Not in release
linux-aws-5.4	Not in release	Not in release	Not in release	Not affected	Not in release
linux-aws-6.8	Not in release	Not affected	Not in release	Not in release	Not in release
linux-aws-fips	Not in release	Not in release	Not in release	Not in release	Ignored
linux-aws-hwe	Not in release	Not in release	Not in release	Not in release	Not affected
linux-azure	Not affected	Not affected	Not affected	Not affected	Not affected
linux-azure-4.15	Not in release	Not in release	Not in release	Not affected	Not in release
linux-azure-5.15	Not in release	Not in release	Not affected	Not in release	Not in release
linux-azure-5.4	Not in release	Not in release	Not in release	Not affected	Not in release
linux-azure-6.8	Not in release	Not affected	Not in release	Not in release	Not in release
linux-azure-fde	Not in release	Not affected	Ignored	Not in release	Not in release
linux-azure-fde-5.15	Not in release	Not in release	Not affected	Not in release	Not in release
linux-azure-fips	Not in release	Not in release	Not in release	Not in release	Ignored
linux-bluefield	Not in release	Not in release	Not affected	Not in release	Not in release
linux-euclid	—	—	—	Not in release	Not affected
linux-fips	Not in release	Not in release	Not in release	Not in release	Not in release
linux-flo	—	—	—	Not in release	Ignored
linux-gcp	Not affected	Not affected	Not affected	Not affected	Not affected
linux-gcp-4.15	Not in release	Not in release	Not in release	Not affected	Not in release
linux-gcp-5.15	Not in release	Not in release	Not affected	Not in release	Not in release
linux-gcp-5.4	Not in release	Not in release	Not in release	Not affected	Not in release
linux-gcp-6.8	Not in release	Not affected	Not in release	Not in release	Not in release
linux-gcp-fips	Not in release	Not in release	Not in release	Not in release	Ignored
linux-gke	Not affected	Not affected	Ignored	Not in release	Not affected
linux-gkeop	Not in release	Not affected	Not affected	Not in release	Not in release
linux-gkeop-5.15	Not in release	Not in release	Not affected	Not in release	Not in release
linux-goldfish	—	—	—	Not in release	Ignored
linux-grouper	—	—	—	Not in release	Not in release
linux-hwe	Not in release	Not in release	Not in release	Not affected	Not affected
linux-hwe-5.15	Not in release	Not in release	Not affected	Not in release	Not in release
linux-hwe-5.4	Not in release	Not in release	Not in release	Not affected	Not in release
linux-hwe-6.8	Not in release	Not affected	Not in release	Not in release	Not in release
linux-hwe-edge	Not in release	Not in release	Not in release	Not affected	Not affected
linux-ibm	Not affected	Not affected	Not affected	Not in release	Not in release
linux-ibm-5.15	Not in release	Not in release	Not affected	Not in release	Not in release
linux-ibm-5.4	Not in release	Not in release	Not in release	Not affected	Not in release
linux-intel	Not affected	Not in release	Not in release	Not in release	Not in release
linux-intel-iot-realtime	Not in release	Not in release	Not in release	Not in release	Not in release
linux-intel-iotg	Not in release	Not affected	Not in release	Not in release	Not in release
linux-intel-iotg-5.15	Not in release	Not in release	Not affected	Not in release	Not in release
linux-iot	Not in release	Not in release	Not affected	Not in release	Not in release
linux-kvm	Not in release	Not affected	Not affected	Not affected	Not affected
linux-lowlatency	Not affected	Not affected	Not in release	Not in release	Not in release
linux-lowlatency-hwe-5.15	Not in release	Not in release	Not affected	Not in release	Not in release
linux-lowlatency-hwe-6.8	Not in release	Not affected	Not in release	Not in release	Not in release
linux-lts-quantal	—	—	—	Not in release	Not in release
linux-lts-raring	—	—	—	Not in release	Not in release
linux-lts-saucy	—	—	—	Not in release	Not in release
linux-lts-trusty	—	—	—	Not in release	Not in release
linux-lts-utopic	—	—	—	Not in release	Not in release
linux-lts-vivid	—	—	—	Not in release	Not in release
linux-lts-wily	—	—	—	Not in release	Not in release
linux-lts-xenial	Not in release	Not in release	Not in release	Not in release	Not in release
linux-maguro	—	—	—	Not in release	Not in release
linux-mako	—	—	—	Not in release	Ignored
linux-manta	—	—	—	Not in release	Not in release
linux-nvidia	Not affected	Not affected	Not in release	Not in release	Not in release
linux-nvidia-6.5	Not in release	Not affected	Not in release	Not in release	Not in release
linux-nvidia-6.8	Not in release	Not affected	Not in release	Not in release	Not in release
linux-nvidia-lowlatency	Not affected	Not in release	Not in release	Not in release	Not in release
linux-oem	Not in release	Not in release	Not in release	Not affected	Not affected
linux-oem-6.8	Not affected	Not in release	Not in release	Not in release	Not in release
linux-oracle	Not affected	Not affected	Not affected	Not affected	Not affected
linux-oracle-5.15	Not in release	Not in release	Not affected	Not in release	Not in release
linux-oracle-5.4	Not in release	Not in release	Not in release	Not affected	Not in release
linux-oracle-6.8	Not in release	Not affected	Not in release	Not in release	Not in release
linux-raspi	Not affected	Not affected	Not affected	Not in release	Not in release
linux-raspi-5.4	Not in release	Not in release	Not in release	Not affected	Not in release
linux-raspi-realtime	Not in release	Not in release	Not in release	Not in release	Not in release
linux-raspi2	Not in release	Not in release	Ignored	Not affected	Not affected
linux-realtime	Not in release	Ignored	Not in release	Not in release	Not in release
linux-riscv	Not affected	Ignored	Ignored	Not in release	Not in release
linux-riscv-5.15	Not in release	Not in release	Not affected	Not in release	Not in release
linux-riscv-6.8	Not in release	Not affected	Not in release	Not in release	Not in release
linux-snapdragon	Not in release	Not in release	Not in release	Not affected	Not affected
linux-xilinx-zynqmp	Not in release	Not affected	Not affected	Not in release	Not in release

CVE-2017-13215

Medium priority

Some fixes available 2 of 6

A elevation of privilege vulnerability in the Upstream kernel skcipher. Product: Android. Versions: Android kernel. Android ID: A-64386293. References: Upstream kernel.

32 affected packages

linux, linux-armadaxp, linux-aws, linux-azure, linux-euclid...

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS	16.04 LTS
linux	—	—	—	Not affected	Not affected
linux-armadaxp	—	—	—	Not in release	Not in release
linux-aws	—	—	—	Not affected	Not affected
linux-azure	—	—	—	Not affected	Not affected
linux-euclid	—	—	—	Not in release	Not affected
linux-flo	—	—	—	Not in release	Ignored
linux-gcp	—	—	—	Not affected	Not affected
linux-gke	—	—	—	Not in release	Not affected
linux-goldfish	—	—	—	Not in release	Ignored
linux-grouper	—	—	—	Not in release	Not in release
linux-hwe	—	—	—	Not affected	Not affected
linux-hwe-edge	—	—	—	Fixed	Not affected
linux-kvm	—	—	—	Not affected	Not affected
linux-linaro-omap	—	—	—	Not in release	Not in release
linux-linaro-shared	—	—	—	Not in release	Not in release
linux-linaro-vexpress	—	—	—	Not in release	Not in release
linux-lts-quantal	—	—	—	Not in release	Not in release
linux-lts-raring	—	—	—	Not in release	Not in release
linux-lts-saucy	—	—	—	Not in release	Not in release
linux-lts-trusty	—	—	—	Not in release	Not in release
linux-lts-utopic	—	—	—	Not in release	Not in release
linux-lts-vivid	—	—	—	Not in release	Not in release
linux-lts-wily	—	—	—	Not in release	Not in release
linux-lts-xenial	—	—	—	Not in release	Not in release
linux-maguro	—	—	—	Not in release	Not in release
linux-mako	—	—	—	Not in release	Ignored
linux-manta	—	—	—	Not in release	Not in release
linux-oem	—	—	—	Not affected	Not affected
linux-qcm-msm	—	—	—	Not in release	Not in release
linux-raspi2	—	—	—	Not affected	Not affected
linux-snapdragon	—	—	—	Not affected	Not affected
linux-ti-omap4	—	—	—	Not in release	Not in release

CVE-2018-5344

Medium priority

Some fixes available 16 of 23

In the Linux kernel through 4.14.13, drivers/block/loop.c mishandles lo_release serialization, which allows attackers to cause a denial of service (__lock_acquire use-after-free) or possibly have unspecified other impact.

78 affected packages

linux, linux-aws, linux-aws-5.15, linux-aws-5.4, linux-aws-6.8...

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS	16.04 LTS
linux	Not affected	Not affected	Not affected	Not affected	Fixed
linux-aws	Not affected	Not affected	Not affected	Not affected	Fixed
linux-aws-5.15	Not in release	Not in release	Not affected	Not in release	Not in release
linux-aws-5.4	Not in release	Not in release	Not in release	Not affected	Not in release
linux-aws-6.8	Not in release	Not affected	Not in release	Not in release	Not in release
linux-aws-fips	Not in release	Not in release	Not in release	Not in release	Ignored
linux-aws-hwe	Not in release	Not in release	Not in release	Not in release	Not affected
linux-azure	Not affected	Not affected	Not affected	Not affected	Fixed
linux-azure-4.15	Not in release	Not in release	Not in release	Not affected	Not in release
linux-azure-5.15	Not in release	Not in release	Not affected	Not in release	Not in release
linux-azure-5.4	Not in release	Not in release	Not in release	Not affected	Not in release
linux-azure-6.8	Not in release	Not affected	Not in release	Not in release	Not in release
linux-azure-fde	Not in release	Not affected	Ignored	Not in release	Not in release
linux-azure-fde-5.15	Not in release	Not in release	Not affected	Not in release	Not in release
linux-azure-fips	Not in release	Not in release	Not in release	Not in release	Ignored
linux-bluefield	Not in release	Not in release	Not affected	Not in release	Not in release
linux-euclid	—	—	—	Not in release	Ignored
linux-fips	Not in release	Not in release	Not in release	Not in release	Not in release
linux-flo	—	—	—	Not in release	Ignored
linux-gcp	Not affected	Not affected	Not affected	Not affected	Fixed
linux-gcp-4.15	Not in release	Not in release	Not in release	Not affected	Not in release
linux-gcp-5.15	Not in release	Not in release	Not affected	Not in release	Not in release
linux-gcp-5.4	Not in release	Not in release	Not in release	Not affected	Not in release
linux-gcp-6.8	Not in release	Not affected	Not in release	Not in release	Not in release
linux-gcp-fips	Not in release	Not in release	Not in release	Not in release	Ignored
linux-gke	Not affected	Not affected	Ignored	Not in release	Ignored
linux-gkeop	Not in release	Not affected	Not affected	Not in release	Not in release
linux-gkeop-5.15	Not in release	Not in release	Not affected	Not in release	Not in release
linux-goldfish	—	—	—	Not in release	Ignored
linux-grouper	—	—	—	Not in release	Not in release
linux-hwe	Not in release	Not in release	Not in release	Not affected	Fixed
linux-hwe-5.15	Not in release	Not in release	Not affected	Not in release	Not in release
linux-hwe-5.4	Not in release	Not in release	Not in release	Not affected	Not in release
linux-hwe-6.8	Not in release	Not affected	Not in release	Not in release	Not in release
linux-hwe-edge	Not in release	Not in release	Not in release	Not affected	Fixed
linux-ibm	Not affected	Not affected	Not affected	Not in release	Not in release
linux-ibm-5.15	Not in release	Not in release	Not affected	Not in release	Not in release
linux-ibm-5.4	Not in release	Not in release	Not in release	Not affected	Not in release
linux-intel	Not affected	Not in release	Not in release	Not in release	Not in release
linux-intel-iot-realtime	Not in release	Not in release	Not in release	Not in release	Not in release
linux-intel-iotg	Not in release	Not affected	Not in release	Not in release	Not in release
linux-intel-iotg-5.15	Not in release	Not in release	Not affected	Not in release	Not in release
linux-iot	Not in release	Not in release	Not affected	Not in release	Not in release
linux-kvm	Not in release	Not affected	Not affected	Not affected	Fixed
linux-lowlatency	Not affected	Not affected	Not in release	Not in release	Not in release
linux-lowlatency-hwe-5.15	Not in release	Not in release	Not affected	Not in release	Not in release
linux-lowlatency-hwe-6.8	Not in release	Not affected	Not in release	Not in release	Not in release
linux-lts-quantal	—	—	—	Not in release	Not in release
linux-lts-raring	—	—	—	Not in release	Not in release
linux-lts-saucy	—	—	—	Not in release	Not in release
linux-lts-trusty	—	—	—	Not in release	Not in release
linux-lts-utopic	—	—	—	Not in release	Not in release
linux-lts-vivid	—	—	—	Not in release	Not in release
linux-lts-wily	—	—	—	Not in release	Not in release
linux-lts-xenial	Not in release	Not in release	Not in release	Not in release	Not in release
linux-maguro	—	—	—	Not in release	Not in release
linux-mako	—	—	—	Not in release	Ignored
linux-manta	—	—	—	Not in release	Not in release
linux-nvidia	Not affected	Not affected	Not in release	Not in release	Not in release
linux-nvidia-6.5	Not in release	Not affected	Not in release	Not in release	Not in release
linux-nvidia-6.8	Not in release	Not affected	Not in release	Not in release	Not in release
linux-nvidia-lowlatency	Not affected	Not in release	Not in release	Not in release	Not in release
linux-oem	Not in release	Not in release	Not in release	Not affected	Fixed
linux-oem-6.8	Not affected	Not in release	Not in release	Not in release	Not in release
linux-oracle	Not affected	Not affected	Not affected	Not affected	Not affected
linux-oracle-5.15	Not in release	Not in release	Not affected	Not in release	Not in release
linux-oracle-5.4	Not in release	Not in release	Not in release	Not affected	Not in release
linux-oracle-6.8	Not in release	Not affected	Not in release	Not in release	Not in release
linux-raspi	Not affected	Not affected	Not affected	Not in release	Not in release
linux-raspi-5.4	Not in release	Not in release	Not in release	Not affected	Not in release
linux-raspi-realtime	Not in release	Not in release	Not in release	Not in release	Not in release
linux-raspi2	Not in release	Not in release	Ignored	Not affected	Fixed
linux-realtime	Not in release	Ignored	Not in release	Not in release	Not in release
linux-riscv	Not affected	Ignored	Ignored	Not in release	Not in release
linux-riscv-5.15	Not in release	Not in release	Not affected	Not in release	Not in release
linux-riscv-6.8	Not in release	Not affected	Not in release	Not in release	Not in release
linux-snapdragon	Not in release	Not in release	Not in release	Not affected	Fixed
linux-xilinx-zynqmp	Not in release	Not affected	Not affected	Not in release	Not in release

CVE-2018-5333

Medium priority

Some fixes available 16 of 23

In the Linux kernel through 4.14.13, the rds_cmsg_atomic function in net/rds/rdma.c mishandles cases where page pinning fails or an invalid address is supplied, leading to an rds_atomic_free_op NULL pointer dereference.

78 affected packages

linux, linux-aws, linux-aws-5.15, linux-aws-5.4, linux-aws-6.8...

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS	16.04 LTS
linux	Not affected	Not affected	Not affected	Not affected	Fixed
linux-aws	Not affected	Not affected	Not affected	Not affected	Fixed
linux-aws-5.15	Not in release	Not in release	Not affected	Not in release	Not in release
linux-aws-5.4	Not in release	Not in release	Not in release	Not affected	Not in release
linux-aws-6.8	Not in release	Not affected	Not in release	Not in release	Not in release
linux-aws-fips	Not in release	Not in release	Not in release	Not in release	Ignored
linux-aws-hwe	Not in release	Not in release	Not in release	Not in release	Not affected
linux-azure	Not affected	Not affected	Not affected	Not affected	Fixed
linux-azure-4.15	Not in release	Not in release	Not in release	Not affected	Not in release
linux-azure-5.15	Not in release	Not in release	Not affected	Not in release	Not in release
linux-azure-5.4	Not in release	Not in release	Not in release	Not affected	Not in release
linux-azure-6.8	Not in release	Not affected	Not in release	Not in release	Not in release
linux-azure-fde	Not in release	Not affected	Ignored	Not in release	Not in release
linux-azure-fde-5.15	Not in release	Not in release	Not affected	Not in release	Not in release
linux-azure-fips	Not in release	Not in release	Not in release	Not in release	Ignored
linux-bluefield	Not in release	Not in release	Not affected	Not in release	Not in release
linux-euclid	—	—	—	Not in release	Ignored
linux-fips	Not in release	Not in release	Not in release	Not in release	Not in release
linux-flo	—	—	—	Not in release	Ignored
linux-gcp	Not affected	Not affected	Not affected	Not affected	Fixed
linux-gcp-4.15	Not in release	Not in release	Not in release	Not affected	Not in release
linux-gcp-5.15	Not in release	Not in release	Not affected	Not in release	Not in release
linux-gcp-5.4	Not in release	Not in release	Not in release	Not affected	Not in release
linux-gcp-6.8	Not in release	Not affected	Not in release	Not in release	Not in release
linux-gcp-fips	Not in release	Not in release	Not in release	Not in release	Ignored
linux-gke	Not affected	Not affected	Ignored	Not in release	Ignored
linux-gkeop	Not in release	Not affected	Not affected	Not in release	Not in release
linux-gkeop-5.15	Not in release	Not in release	Not affected	Not in release	Not in release
linux-goldfish	—	—	—	Not in release	Ignored
linux-grouper	—	—	—	Not in release	Not in release
linux-hwe	Not in release	Not in release	Not in release	Not affected	Fixed
linux-hwe-5.15	Not in release	Not in release	Not affected	Not in release	Not in release
linux-hwe-5.4	Not in release	Not in release	Not in release	Not affected	Not in release
linux-hwe-6.8	Not in release	Not affected	Not in release	Not in release	Not in release
linux-hwe-edge	Not in release	Not in release	Not in release	Not affected	Fixed
linux-ibm	Not affected	Not affected	Not affected	Not in release	Not in release
linux-ibm-5.15	Not in release	Not in release	Not affected	Not in release	Not in release
linux-ibm-5.4	Not in release	Not in release	Not in release	Not affected	Not in release
linux-intel	Not affected	Not in release	Not in release	Not in release	Not in release
linux-intel-iot-realtime	Not in release	Not in release	Not in release	Not in release	Not in release
linux-intel-iotg	Not in release	Not affected	Not in release	Not in release	Not in release
linux-intel-iotg-5.15	Not in release	Not in release	Not affected	Not in release	Not in release
linux-iot	Not in release	Not in release	Not affected	Not in release	Not in release
linux-kvm	Not in release	Not affected	Not affected	Not affected	Fixed
linux-lowlatency	Not affected	Not affected	Not in release	Not in release	Not in release
linux-lowlatency-hwe-5.15	Not in release	Not in release	Not affected	Not in release	Not in release
linux-lowlatency-hwe-6.8	Not in release	Not affected	Not in release	Not in release	Not in release
linux-lts-quantal	—	—	—	Not in release	Not in release
linux-lts-raring	—	—	—	Not in release	Not in release
linux-lts-saucy	—	—	—	Not in release	Not in release
linux-lts-trusty	—	—	—	Not in release	Not in release
linux-lts-utopic	—	—	—	Not in release	Not in release
linux-lts-vivid	—	—	—	Not in release	Not in release
linux-lts-wily	—	—	—	Not in release	Not in release
linux-lts-xenial	Not in release	Not in release	Not in release	Not in release	Not in release
linux-maguro	—	—	—	Not in release	Not in release
linux-mako	—	—	—	Not in release	Ignored
linux-manta	—	—	—	Not in release	Not in release
linux-nvidia	Not affected	Not affected	Not in release	Not in release	Not in release
linux-nvidia-6.5	Not in release	Not affected	Not in release	Not in release	Not in release
linux-nvidia-6.8	Not in release	Not affected	Not in release	Not in release	Not in release
linux-nvidia-lowlatency	Not affected	Not in release	Not in release	Not in release	Not in release
linux-oem	Not in release	Not in release	Not in release	Not affected	Fixed
linux-oem-6.8	Not affected	Not in release	Not in release	Not in release	Not in release
linux-oracle	Not affected	Not affected	Not affected	Not affected	Not affected
linux-oracle-5.15	Not in release	Not in release	Not affected	Not in release	Not in release
linux-oracle-5.4	Not in release	Not in release	Not in release	Not affected	Not in release
linux-oracle-6.8	Not in release	Not affected	Not in release	Not in release	Not in release
linux-raspi	Not affected	Not affected	Not affected	Not in release	Not in release
linux-raspi-5.4	Not in release	Not in release	Not in release	Not affected	Not in release
linux-raspi-realtime	Not in release	Not in release	Not in release	Not in release	Not in release
linux-raspi2	Not in release	Not in release	Ignored	Not affected	Fixed
linux-realtime	Not in release	Ignored	Not in release	Not in release	Not in release
linux-riscv	Not affected	Ignored	Ignored	Not in release	Not in release
linux-riscv-5.15	Not in release	Not in release	Not affected	Not in release	Not in release
linux-riscv-6.8	Not in release	Not affected	Not in release	Not in release	Not in release
linux-snapdragon	Not in release	Not in release	Not in release	Not affected	Fixed
linux-xilinx-zynqmp	Not in release	Not affected	Not affected	Not in release	Not in release

CVE-2018-5332

Medium priority

Some fixes available 16 of 23

In the Linux kernel through 3.2, the rds_message_alloc_sgs() function does not validate a value that is used during DMA page allocation, leading to a heap-based out-of-bounds write (related to the rds_rdma_extra_size function in...

78 affected packages

linux, linux-aws, linux-aws-5.15, linux-aws-5.4, linux-aws-6.8...

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS	16.04 LTS
linux	Not affected	Not affected	Not affected	Not affected	Fixed
linux-aws	Not affected	Not affected	Not affected	Not affected	Fixed
linux-aws-5.15	Not in release	Not in release	Not affected	Not in release	Not in release
linux-aws-5.4	Not in release	Not in release	Not in release	Not affected	Not in release
linux-aws-6.8	Not in release	Not affected	Not in release	Not in release	Not in release
linux-aws-fips	Not in release	Not in release	Not in release	Not in release	Ignored
linux-aws-hwe	Not in release	Not in release	Not in release	Not in release	Not affected
linux-azure	Not affected	Not affected	Not affected	Not affected	Fixed
linux-azure-4.15	Not in release	Not in release	Not in release	Not affected	Not in release
linux-azure-5.15	Not in release	Not in release	Not affected	Not in release	Not in release
linux-azure-5.4	Not in release	Not in release	Not in release	Not affected	Not in release
linux-azure-6.8	Not in release	Not affected	Not in release	Not in release	Not in release
linux-azure-fde	Not in release	Not affected	Ignored	Not in release	Not in release
linux-azure-fde-5.15	Not in release	Not in release	Not affected	Not in release	Not in release
linux-azure-fips	Not in release	Not in release	Not in release	Not in release	Ignored
linux-bluefield	Not in release	Not in release	Not affected	Not in release	Not in release
linux-euclid	—	—	—	Not in release	Ignored
linux-fips	Not in release	Not in release	Not in release	Not in release	Not in release
linux-flo	—	—	—	Not in release	Ignored
linux-gcp	Not affected	Not affected	Not affected	Not affected	Fixed
linux-gcp-4.15	Not in release	Not in release	Not in release	Not affected	Not in release
linux-gcp-5.15	Not in release	Not in release	Not affected	Not in release	Not in release
linux-gcp-5.4	Not in release	Not in release	Not in release	Not affected	Not in release
linux-gcp-6.8	Not in release	Not affected	Not in release	Not in release	Not in release
linux-gcp-fips	Not in release	Not in release	Not in release	Not in release	Ignored
linux-gke	Not affected	Not affected	Ignored	Not in release	Ignored
linux-gkeop	Not in release	Not affected	Not affected	Not in release	Not in release
linux-gkeop-5.15	Not in release	Not in release	Not affected	Not in release	Not in release
linux-goldfish	—	—	—	Not in release	Ignored
linux-grouper	—	—	—	Not in release	Not in release
linux-hwe	Not in release	Not in release	Not in release	Not affected	Fixed
linux-hwe-5.15	Not in release	Not in release	Not affected	Not in release	Not in release
linux-hwe-5.4	Not in release	Not in release	Not in release	Not affected	Not in release
linux-hwe-6.8	Not in release	Not affected	Not in release	Not in release	Not in release
linux-hwe-edge	Not in release	Not in release	Not in release	Not affected	Fixed
linux-ibm	Not affected	Not affected	Not affected	Not in release	Not in release
linux-ibm-5.15	Not in release	Not in release	Not affected	Not in release	Not in release
linux-ibm-5.4	Not in release	Not in release	Not in release	Not affected	Not in release
linux-intel	Not affected	Not in release	Not in release	Not in release	Not in release
linux-intel-iot-realtime	Not in release	Not in release	Not in release	Not in release	Not in release
linux-intel-iotg	Not in release	Not affected	Not in release	Not in release	Not in release
linux-intel-iotg-5.15	Not in release	Not in release	Not affected	Not in release	Not in release
linux-iot	Not in release	Not in release	Not affected	Not in release	Not in release
linux-kvm	Not in release	Not affected	Not affected	Not affected	Fixed
linux-lowlatency	Not affected	Not affected	Not in release	Not in release	Not in release
linux-lowlatency-hwe-5.15	Not in release	Not in release	Not affected	Not in release	Not in release
linux-lowlatency-hwe-6.8	Not in release	Not affected	Not in release	Not in release	Not in release
linux-lts-quantal	—	—	—	Not in release	Not in release
linux-lts-raring	—	—	—	Not in release	Not in release
linux-lts-saucy	—	—	—	Not in release	Not in release
linux-lts-trusty	—	—	—	Not in release	Not in release
linux-lts-utopic	—	—	—	Not in release	Not in release
linux-lts-vivid	—	—	—	Not in release	Not in release
linux-lts-wily	—	—	—	Not in release	Not in release
linux-lts-xenial	Not in release	Not in release	Not in release	Not in release	Not in release
linux-maguro	—	—	—	Not in release	Not in release
linux-mako	—	—	—	Not in release	Ignored
linux-manta	—	—	—	Not in release	Not in release
linux-nvidia	Not affected	Not affected	Not in release	Not in release	Not in release
linux-nvidia-6.5	Not in release	Not affected	Not in release	Not in release	Not in release
linux-nvidia-6.8	Not in release	Not affected	Not in release	Not in release	Not in release
linux-nvidia-lowlatency	Not affected	Not in release	Not in release	Not in release	Not in release
linux-oem	Not in release	Not in release	Not in release	Not affected	Fixed
linux-oem-6.8	Not affected	Not in release	Not in release	Not in release	Not in release
linux-oracle	Not affected	Not affected	Not affected	Not affected	Not affected
linux-oracle-5.15	Not in release	Not in release	Not affected	Not in release	Not in release
linux-oracle-5.4	Not in release	Not in release	Not in release	Not affected	Not in release
linux-oracle-6.8	Not in release	Not affected	Not in release	Not in release	Not in release
linux-raspi	Not affected	Not affected	Not affected	Not in release	Not in release
linux-raspi-5.4	Not in release	Not in release	Not in release	Not affected	Not in release
linux-raspi-realtime	Not in release	Not in release	Not in release	Not in release	Not in release
linux-raspi2	Not in release	Not in release	Ignored	Not affected	Fixed
linux-realtime	Not in release	Ignored	Not in release	Not in release	Not in release
linux-riscv	Not affected	Ignored	Ignored	Not in release	Not in release
linux-riscv-5.15	Not in release	Not in release	Not affected	Not in release	Not in release
linux-riscv-6.8	Not in release	Not affected	Not in release	Not in release	Not in release
linux-snapdragon	Not in release	Not in release	Not in release	Not affected	Fixed
linux-xilinx-zynqmp	Not in release	Not affected	Not affected	Not in release	Not in release

CVE-2017-9712

Medium priority

Ignored

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, if userspace provides a too-large IE length in wlan_hdd_cfg80211_set_ie, a buffer over-read occurs.

32 affected packages

linux, linux-armadaxp, linux-aws, linux-azure, linux-euclid...

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS	16.04 LTS
linux	—	—	—	—	Not affected
linux-armadaxp	—	—	—	—	Not in release
linux-aws	—	—	—	—	Not affected
linux-azure	—	—	—	—	Not affected
linux-euclid	—	—	—	—	Not affected
linux-flo	—	—	—	—	Ignored
linux-gcp	—	—	—	—	Not affected
linux-gke	—	—	—	—	Not affected
linux-goldfish	—	—	—	—	Not affected
linux-grouper	—	—	—	—	Not in release
linux-hwe	—	—	—	—	Not affected
linux-hwe-edge	—	—	—	—	Not affected
linux-kvm	—	—	—	—	Not affected
linux-linaro-omap	—	—	—	—	Not in release
linux-linaro-shared	—	—	—	—	Not in release
linux-linaro-vexpress	—	—	—	—	Not in release
linux-lts-quantal	—	—	—	—	Not in release
linux-lts-raring	—	—	—	—	Not in release
linux-lts-saucy	—	—	—	—	Not in release
linux-lts-trusty	—	—	—	—	Not in release
linux-lts-utopic	—	—	—	—	Not in release
linux-lts-vivid	—	—	—	—	Not in release
linux-lts-wily	—	—	—	—	Not in release
linux-lts-xenial	—	—	—	—	Not in release
linux-maguro	—	—	—	—	Not in release
linux-mako	—	—	—	—	Ignored
linux-manta	—	—	—	—	Not in release
linux-oem	—	—	—	—	Not affected
linux-qcm-msm	—	—	—	—	Not in release
linux-raspi2	—	—	—	—	Not affected
linux-snapdragon	—	—	—	—	Not affected
linux-ti-omap4	—	—	—	—	Not in release

Export to JSON

Results by page: