Search CVE reports

131 – 140 of 595 results

Detailed view

Sort by:

CVE-2018-18653

Medium priority

Some fixes available 6 of 10

The Linux kernel, as used in Ubuntu 18.10 and when booted with UEFI Secure Boot enabled, allows privileged local users to bypass intended Secure Boot restrictions and execute untrusted code by loading arbitrary kernel modules....

27 affected packages

linux, linux-aws, linux-aws-hwe, linux-azure, linux-azure-edge...

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS	16.04 LTS
linux	—	—	—	Not affected	Not affected
linux-aws	—	—	—	Not affected	Not affected
linux-aws-hwe	—	—	—	Not in release	Not affected
linux-azure	—	—	—	Not affected	Not affected
linux-azure-edge	—	—	—	Not affected	Not affected
linux-euclid	—	—	—	Not in release	Ignored
linux-flo	—	—	—	Not in release	Ignored
linux-gcp	—	—	—	Not affected	Not affected
linux-gcp-edge	—	—	—	Not affected	Not in release
linux-gke	—	—	—	Not in release	Ignored
linux-goldfish	—	—	—	Not in release	Ignored
linux-grouper	—	—	—	Not in release	Not in release
linux-hwe	—	—	—	Not affected	Not affected
linux-hwe-edge	—	—	—	Not affected	Not affected
linux-kvm	—	—	—	Not affected	Not affected
linux-lts-trusty	—	—	—	Not in release	Not in release
linux-lts-utopic	—	—	—	Not in release	Not in release
linux-lts-vivid	—	—	—	Not in release	Not in release
linux-lts-wily	—	—	—	Not in release	Not in release
linux-lts-xenial	—	—	—	Not in release	Not in release
linux-maguro	—	—	—	Not in release	Not in release
linux-mako	—	—	—	Not in release	Ignored
linux-manta	—	—	—	Not in release	Not in release
linux-oem	—	—	—	Not affected	Ignored
linux-oracle	—	—	—	Not affected	Not affected
linux-raspi2	—	—	—	Not affected	Not affected
linux-snapdragon	—	—	—	Not affected	Not affected

CVE-2018-18559

Medium priority

Some fixes available 11 of 18

In the Linux kernel through 4.19, a use-after-free can occur due to a race condition between fanout_add from setsockopt and bind on an AF_PACKET socket. This issue exists because of the 15fe076edea787807a7cdc168df832544b58eba6...

24 affected packages

linux, linux-aws, linux-azure, linux-azure-edge, linux-euclid...

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS	16.04 LTS
linux	—	—	—	Not affected	Fixed
linux-aws	—	—	—	Not affected	Fixed
linux-azure	—	—	—	Not affected	Fixed
linux-azure-edge	—	—	—	Not affected	Not affected
linux-euclid	—	—	—	Not in release	Ignored
linux-flo	—	—	—	Not in release	Ignored
linux-gcp	—	—	—	Not affected	Fixed
linux-gke	—	—	—	Not in release	Ignored
linux-goldfish	—	—	—	Not in release	Ignored
linux-grouper	—	—	—	Not in release	Not in release
linux-hwe	—	—	—	Not affected	Fixed
linux-hwe-edge	—	—	—	Not affected	Fixed
linux-kvm	—	—	—	Not affected	Fixed
linux-lts-trusty	—	—	—	Not in release	Not in release
linux-lts-utopic	—	—	—	Not in release	Not in release
linux-lts-vivid	—	—	—	Not in release	Not in release
linux-lts-wily	—	—	—	Not in release	Not in release
linux-lts-xenial	—	—	—	Not in release	Not in release
linux-maguro	—	—	—	Not in release	Not in release
linux-mako	—	—	—	Not in release	Ignored
linux-manta	—	—	—	Not in release	Not in release
linux-oem	—	—	—	Not affected	Ignored
linux-raspi2	—	—	—	Not affected	Fixed
linux-snapdragon	—	—	—	Not affected	Fixed

CVE-2018-6559

Low priority

Some fixes available 21 of 25

The Linux kernel, as used in Ubuntu 18.04 LTS and Ubuntu 18.10, allows local users to obtain names of files in which they would not normally be able to access via an overlayfs mount inside of a user namespace.

27 affected packages

linux, linux-aws, linux-aws-hwe, linux-azure, linux-azure-edge...

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS	16.04 LTS
linux	—	—	—	Fixed	Not affected
linux-aws	—	—	—	Fixed	Not affected
linux-aws-hwe	—	—	—	Not in release	Not affected
linux-azure	—	—	—	Fixed	Fixed
linux-azure-edge	—	—	—	Fixed	Fixed
linux-euclid	—	—	—	Not in release	Ignored
linux-flo	—	—	—	Not in release	Ignored
linux-gcp	—	—	—	Fixed	Fixed
linux-gcp-edge	—	—	—	Not affected	Not in release
linux-gke	—	—	—	Not in release	Ignored
linux-goldfish	—	—	—	Not in release	Ignored
linux-grouper	—	—	—	Not in release	Not in release
linux-hwe	—	—	—	Not affected	Fixed
linux-hwe-edge	—	—	—	Not affected	Fixed
linux-kvm	—	—	—	Fixed	Not affected
linux-lts-trusty	—	—	—	Not in release	Not in release
linux-lts-utopic	—	—	—	Not in release	Not in release
linux-lts-vivid	—	—	—	Not in release	Not in release
linux-lts-wily	—	—	—	Not in release	Not in release
linux-lts-xenial	—	—	—	Not in release	Not in release
linux-maguro	—	—	—	Not in release	Not in release
linux-mako	—	—	—	Not in release	Ignored
linux-manta	—	—	—	Not in release	Not in release
linux-oem	—	—	—	Fixed	Ignored
linux-oracle	—	—	—	Not affected	Not affected
linux-raspi2	—	—	—	Fixed	Not affected
linux-snapdragon	—	—	—	Not affected	Not affected

CVE-2018-18445

Medium priority

Some fixes available 22 of 25

In the Linux kernel 4.14.x, 4.15.x, 4.16.x, 4.17.x, and 4.18.x before 4.18.13, faulty computation of numeric bounds in the BPF verifier permits out-of-bounds memory accesses because adjust_scalar_min_max_vals...

27 affected packages

linux, linux-aws, linux-aws-hwe, linux-azure, linux-azure-edge...

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS	16.04 LTS
linux	—	—	—	Fixed	Not affected
linux-aws	—	—	—	Fixed	Not affected
linux-aws-hwe	—	—	—	Not in release	Fixed
linux-azure	—	—	—	Fixed	Fixed
linux-azure-edge	—	—	—	Fixed	Fixed
linux-euclid	—	—	—	Not in release	Not affected
linux-flo	—	—	—	Not in release	Ignored
linux-gcp	—	—	—	Fixed	Fixed
linux-gcp-edge	—	—	—	Not affected	Not in release
linux-gke	—	—	—	Not in release	Ignored
linux-goldfish	—	—	—	Not in release	Ignored
linux-grouper	—	—	—	Not in release	Not in release
linux-hwe	—	—	—	Not affected	Fixed
linux-hwe-edge	—	—	—	Not affected	Fixed
linux-kvm	—	—	—	Fixed	Not affected
linux-lts-trusty	—	—	—	Not in release	Not in release
linux-lts-utopic	—	—	—	Not in release	Not in release
linux-lts-vivid	—	—	—	Not in release	Not in release
linux-lts-wily	—	—	—	Not in release	Not in release
linux-lts-xenial	—	—	—	Not in release	Not in release
linux-maguro	—	—	—	Not in release	Not in release
linux-mako	—	—	—	Not in release	Ignored
linux-manta	—	—	—	Not in release	Not in release
linux-oem	—	—	—	Fixed	Ignored
linux-oracle	—	—	—	Not affected	Not affected
linux-raspi2	—	—	—	Fixed	Not affected
linux-snapdragon	—	—	—	Not affected	Not affected

CVE-2018-18386

Medium priority

Some fixes available 13 of 17

drivers/tty/n_tty.c in the Linux kernel before 4.14.11 allows local attackers (who are able to access pseudo terminals) to hang/block further usage of any pseudo terminal devices due to an EXTPROC versus ICANON confusion in TIOCINQ.

27 affected packages

linux, linux-aws, linux-aws-hwe, linux-azure, linux-azure-edge...

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS	16.04 LTS
linux	—	—	—	Not affected	Fixed
linux-aws	—	—	—	Not affected	Fixed
linux-aws-hwe	—	—	—	Not in release	Not affected
linux-azure	—	—	—	Not affected	Fixed
linux-azure-edge	—	—	—	Not affected	Fixed
linux-euclid	—	—	—	Not in release	Ignored
linux-flo	—	—	—	Not in release	Ignored
linux-gcp	—	—	—	Not affected	Fixed
linux-gcp-edge	—	—	—	Not affected	Not in release
linux-gke	—	—	—	Not in release	Ignored
linux-goldfish	—	—	—	Not in release	Ignored
linux-grouper	—	—	—	Not in release	Not in release
linux-hwe	—	—	—	Not affected	Fixed
linux-hwe-edge	—	—	—	Not affected	Fixed
linux-kvm	—	—	—	Not affected	Fixed
linux-lts-trusty	—	—	—	Not in release	Not in release
linux-lts-utopic	—	—	—	Not in release	Not in release
linux-lts-vivid	—	—	—	Not in release	Not in release
linux-lts-wily	—	—	—	Not in release	Not in release
linux-lts-xenial	—	—	—	Not in release	Not in release
linux-maguro	—	—	—	Not in release	Not in release
linux-mako	—	—	—	Not in release	Ignored
linux-manta	—	—	—	Not in release	Not in release
linux-oem	—	—	—	Not affected	Ignored
linux-oracle	—	—	—	Not affected	Not affected
linux-raspi2	—	—	—	Not affected	Fixed
linux-snapdragon	—	—	—	Not affected	Fixed

CVE-2018-14656

Medium priority

Ignored

A missing address check in the callers of the show_opcodes() in the Linux kernel allows an attacker to dump the kernel memory at an arbitrary kernel address into the dmesg log.

24 affected packages

linux, linux-aws, linux-azure, linux-azure-edge, linux-euclid...

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS	16.04 LTS
linux	—	—	—	Not affected	Not affected
linux-aws	—	—	—	Not affected	Not affected
linux-azure	—	—	—	Not affected	Not affected
linux-azure-edge	—	—	—	Not affected	Not affected
linux-euclid	—	—	—	Not in release	Not affected
linux-flo	—	—	—	Not in release	Ignored
linux-gcp	—	—	—	Not affected	Not affected
linux-gke	—	—	—	Not in release	Ignored
linux-goldfish	—	—	—	Not in release	Ignored
linux-grouper	—	—	—	Not in release	Not in release
linux-hwe	—	—	—	Not affected	Not affected
linux-hwe-edge	—	—	—	Not affected	Not affected
linux-kvm	—	—	—	Not affected	Not affected
linux-lts-trusty	—	—	—	Not in release	Not in release
linux-lts-utopic	—	—	—	Not in release	Not in release
linux-lts-vivid	—	—	—	Not in release	Not in release
linux-lts-wily	—	—	—	Not in release	Not in release
linux-lts-xenial	—	—	—	Not in release	Not in release
linux-maguro	—	—	—	Not in release	Not in release
linux-mako	—	—	—	Not in release	Ignored
linux-manta	—	—	—	Not in release	Not in release
linux-oem	—	—	—	Not affected	Not affected
linux-raspi2	—	—	—	Not affected	Not affected
linux-snapdragon	—	—	—	Not affected	Not affected

CVE-2018-17977

Medium priority

Vulnerable

The Linux kernel 4.14.67 mishandles certain interaction among XFRM Netlink messages, IPPROTO_AH packets, and IPPROTO_IP packets, which allows local users to cause a denial of service (memory consumption and system hang)...

140 affected packages

linux, linux-allwinner, linux-allwinner-5.19, linux-aws, linux-aws-5.0...

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS	16.04 LTS
linux	Vulnerable	Vulnerable	Vulnerable	Vulnerable	Vulnerable
linux-allwinner	Not in release	Not in release	Not in release	Not in release	Not in release
linux-allwinner-5.19	Not in release	Ignored	Not in release	Not in release	Not in release
linux-aws	Vulnerable	Vulnerable	Vulnerable	Vulnerable	Vulnerable
linux-aws-5.0	Not in release	Not in release	Not in release	Ignored	Not in release
linux-aws-5.11	Not in release	Not in release	Ignored	Not in release	Not in release
linux-aws-5.13	Not in release	Not in release	Ignored	Not in release	Not in release
linux-aws-5.15	Not in release	Not in release	Vulnerable	Not in release	Not in release
linux-aws-5.19	Not in release	Ignored	Not in release	Not in release	Not in release
linux-aws-5.3	Not in release	Not in release	Not in release	Ignored	Not in release
linux-aws-5.4	Not in release	Not in release	Not in release	Vulnerable	Not in release
linux-aws-5.8	Not in release	Not in release	Ignored	Not in release	Not in release
linux-aws-6.2	Not in release	Ignored	Not in release	Not in release	Not in release
linux-aws-6.5	Not in release	Ignored	Not in release	Not in release	Not in release
linux-aws-fips	Not in release	Not in release	Not in release	Not in release	Not in release
linux-aws-hwe	Not in release	Not in release	Not in release	Not in release	Vulnerable
linux-azure	Vulnerable	Vulnerable	Vulnerable	Ignored	Vulnerable
linux-azure-4.15	Not in release	Not in release	Not in release	Vulnerable	Not in release
linux-azure-5.11	Not in release	Not in release	Ignored	Not in release	Not in release
linux-azure-5.13	Not in release	Not in release	Ignored	Not in release	Not in release
linux-azure-5.15	Not in release	Not in release	Vulnerable	Not in release	Not in release
linux-azure-5.19	Not in release	Ignored	Not in release	Not in release	Not in release
linux-azure-5.4	Not in release	Not in release	Not in release	Vulnerable	Not in release
linux-azure-5.8	Not in release	Not in release	Ignored	Not in release	Not in release
linux-azure-6.2	Not in release	Ignored	Not in release	Not in release	Not in release
linux-azure-6.5	Not in release	Ignored	Not in release	Not in release	Not in release
linux-azure-edge	Not in release	Not in release	Not in release	Ignored	Not in release
linux-azure-fde	Not in release	Needs evaluation	Ignored	Not in release	Not in release
linux-azure-fde-5.15	Not in release	Not in release	Vulnerable	Not in release	Not in release
linux-azure-fde-5.19	Not in release	Ignored	Not in release	Not in release	Not in release
linux-azure-fde-6.2	Not in release	Ignored	Not in release	Not in release	Not in release
linux-azure-fips	Not in release	Not in release	Not in release	Not in release	Not in release
linux-bluefield	Not in release	Not in release	Vulnerable	Not in release	Not in release
linux-dell300x	Not in release	Not in release	Not in release	Ignored	Not in release
linux-euclid	Not in release	Not in release	Not in release	Not in release	Ignored
linux-fips	Not in release	Not in release	Not in release	Not in release	Ignored
linux-flo	Not in release	Not in release	Not in release	Not in release	Ignored
linux-gcp	Vulnerable	Vulnerable	Vulnerable	Ignored	Vulnerable
linux-gcp-4.15	Not in release	Not in release	Not in release	Vulnerable	Not in release
linux-gcp-5.11	Not in release	Not in release	Ignored	Not in release	Not in release
linux-gcp-5.13	Not in release	Not in release	Ignored	Not in release	Not in release
linux-gcp-5.15	Not in release	Not in release	Vulnerable	Not in release	Not in release
linux-gcp-5.19	Not in release	Ignored	Not in release	Not in release	Not in release
linux-gcp-5.3	Not in release	Not in release	Not in release	Ignored	Not in release
linux-gcp-5.4	Not in release	Not in release	Not in release	Vulnerable	Not in release
linux-gcp-5.8	Not in release	Not in release	Ignored	Not in release	Not in release
linux-gcp-6.2	Not in release	Ignored	Not in release	Not in release	Not in release
linux-gcp-6.5	Not in release	Ignored	Not in release	Not in release	Not in release
linux-gcp-edge	Not in release	Not in release	Not in release	Vulnerable	Not in release
linux-gcp-fips	Not in release	Not in release	Not in release	Not in release	Not in release
linux-gke	Needs evaluation	Needs evaluation	Ignored	Not in release	Ignored
linux-gke-4.15	Not in release	Not in release	Not in release	Ignored	Not in release
linux-gke-5.0	Not in release	Not in release	Not in release	Ignored	Not in release
linux-gke-5.15	Not in release	Not in release	Ignored	Not in release	Not in release
linux-gke-5.3	Not in release	Not in release	Not in release	Ignored	Not in release
linux-gke-5.4	Not in release	Not in release	Not in release	Ignored	Not in release
linux-gkeop	Not in release	Needs evaluation	Vulnerable	Not in release	Not in release
linux-gkeop-5.15	Not in release	Not in release	Needs evaluation	Not in release	Not in release
linux-gkeop-5.4	Not in release	Not in release	Not in release	Ignored	Not in release
linux-goldfish	Not in release	Not in release	Not in release	Not in release	Ignored
linux-grouper	Not in release	Not in release	Not in release	Not in release	Not in release
linux-hwe	Not in release	Not in release	Not in release	Ignored	Vulnerable
linux-hwe-5.11	Not in release	Not in release	Ignored	Not in release	Not in release
linux-hwe-5.13	Not in release	Not in release	Ignored	Not in release	Not in release
linux-hwe-5.15	Not in release	Not in release	Vulnerable	Not in release	Not in release
linux-hwe-5.19	Not in release	Ignored	Not in release	Not in release	Not in release
linux-hwe-5.4	Not in release	Not in release	Not in release	Vulnerable	Not in release
linux-hwe-5.8	Not in release	Not in release	Ignored	Not in release	Not in release
linux-hwe-6.2	Not in release	Ignored	Not in release	Not in release	Not in release
linux-hwe-6.5	Not in release	Vulnerable	Not in release	Not in release	Not in release
linux-hwe-6.8	Not in release	Vulnerable	Not in release	Not in release	Not in release
linux-hwe-edge	Not in release	Not in release	Not in release	Ignored	Ignored
linux-ibm	Needs evaluation	Needs evaluation	Vulnerable	Not in release	Not in release
linux-ibm-5.15	Not in release	Not in release	Needs evaluation	Not in release	Not in release
linux-ibm-5.4	Not in release	Not in release	Not in release	Ignored	Not in release
linux-intel	Vulnerable	Not in release	Not in release	Not in release	Not in release
linux-intel-5.13	Not in release	Not in release	Ignored	Not in release	Not in release
linux-intel-iot-realtime	Not in release	Not in release	Not in release	Not in release	Not in release
linux-intel-iotg	Not in release	Vulnerable	Not in release	Not in release	Not in release
linux-intel-iotg-5.15	Not in release	Not in release	Vulnerable	Not in release	Not in release
linux-iot	Not in release	Not in release	Vulnerable	Not in release	Not in release
linux-kvm	Not in release	Vulnerable	Vulnerable	Vulnerable	Vulnerable
linux-laptop	Not in release	Not in release	Not in release	Not in release	Not in release
linux-lowlatency	Vulnerable	Vulnerable	Not in release	Not in release	Not in release
linux-lowlatency-hwe-5.15	Not in release	Not in release	Vulnerable	Not in release	Not in release
linux-lowlatency-hwe-5.19	Not in release	Ignored	Not in release	Not in release	Not in release
linux-lowlatency-hwe-6.2	Not in release	Ignored	Not in release	Not in release	Not in release
linux-lowlatency-hwe-6.5	Not in release	Vulnerable	Not in release	Not in release	Not in release
linux-lowlatency-hwe-6.8	Not in release	Vulnerable	Not in release	Not in release	Not in release
linux-lts-trusty	Not in release	Not in release	Not in release	Not in release	Not in release
linux-lts-utopic	Not in release	Not in release	Not in release	Not in release	Not in release
linux-lts-vivid	Not in release	Not in release	Not in release	Not in release	Not in release
linux-lts-wily	Not in release	Not in release	Not in release	Not in release	Not in release
linux-lts-xenial	Not in release	Not in release	Not in release	Not in release	Not in release
linux-maguro	Not in release	Not in release	Not in release	Not in release	Not in release
linux-mako	Not in release	Not in release	Not in release	Not in release	Ignored
linux-manta	Not in release	Not in release	Not in release	Not in release	Not in release
linux-nvidia	Needs evaluation	Vulnerable	Not in release	Not in release	Not in release
linux-nvidia-6.2	Not in release	Ignored	Not in release	Not in release	Not in release
linux-nvidia-6.5	Not in release	Vulnerable	Not in release	Not in release	Not in release
linux-nvidia-6.8	Not in release	Needs evaluation	Not in release	Not in release	Not in release
linux-nvidia-lowlatency	Needs evaluation	Not in release	Not in release	Not in release	Not in release
linux-oem	Not in release	Not in release	Not in release	Ignored	Ignored
linux-oem-5.10	Not in release	Not in release	Ignored	Not in release	Not in release
linux-oem-5.14	Not in release	Not in release	Ignored	Not in release	Not in release
linux-oem-5.17	Not in release	Ignored	Not in release	Not in release	Not in release
linux-oem-5.6	Not in release	Not in release	Ignored	Not in release	Not in release
linux-oem-6.0	Not in release	Ignored	Not in release	Not in release	Not in release
linux-oem-6.1	Not in release	Ignored	Not in release	Not in release	Not in release
linux-oem-6.5	Not in release	Ignored	Not in release	Not in release	Not in release
linux-oem-6.8	Vulnerable	Not in release	Not in release	Not in release	Not in release
linux-oem-osp1	Not in release	Not in release	Not in release	Ignored	Not in release
linux-oracle	Vulnerable	Vulnerable	Vulnerable	Vulnerable	Vulnerable
linux-oracle-5.0	Not in release	Not in release	Not in release	Ignored	Not in release
linux-oracle-5.11	Not in release	Not in release	Ignored	Not in release	Not in release
linux-oracle-5.13	Not in release	Not in release	Ignored	Not in release	Not in release
linux-oracle-5.15	Not in release	Not in release	Vulnerable	Not in release	Not in release
linux-oracle-5.3	Not in release	Not in release	Not in release	Ignored	Not in release
linux-oracle-5.4	Not in release	Not in release	Not in release	Vulnerable	Not in release
linux-oracle-5.8	Not in release	Not in release	Ignored	Not in release	Not in release
linux-oracle-6.5	Not in release	Ignored	Not in release	Not in release	Not in release
linux-raspi	Vulnerable	Vulnerable	Vulnerable	Not in release	Not in release
linux-raspi-5.4	Not in release	Not in release	Not in release	Vulnerable	Not in release
linux-raspi-realtime	Not in release	Not in release	Not in release	Not in release	Not in release
linux-raspi2	Not in release	Not in release	Ignored	Ignored	Ignored
linux-raspi2-5.3	Not in release	Not in release	Not in release	Ignored	Not in release
linux-realtime	Not in release	Ignored	Not in release	Not in release	Not in release
linux-riscv	Vulnerable	Ignored	Ignored	Not in release	Not in release
linux-riscv-5.11	Not in release	Not in release	Ignored	Not in release	Not in release
linux-riscv-5.15	Not in release	Not in release	Vulnerable	Not in release	Not in release
linux-riscv-5.19	Not in release	Ignored	Not in release	Not in release	Not in release
linux-riscv-5.8	Not in release	Not in release	Ignored	Not in release	Not in release
linux-riscv-6.5	Not in release	Ignored	Not in release	Not in release	Not in release
linux-riscv-6.8	Not in release	Vulnerable	Not in release	Not in release	Not in release
linux-snapdragon	Not in release	Not in release	Not in release	Ignored	Ignored
linux-starfive	Not in release	Not in release	Not in release	Not in release	Not in release
linux-starfive-5.19	Not in release	Ignored	Not in release	Not in release	Not in release
linux-starfive-6.2	Not in release	Ignored	Not in release	Not in release	Not in release
linux-starfive-6.5	Not in release	Ignored	Not in release	Not in release	Not in release
linux-xilinx-zynqmp	Not in release	Needs evaluation	Vulnerable	Not in release	Not in release

CVE-2018-18021

Medium priority

Some fixes available 11 of 16

arch/arm64/kvm/guest.c in KVM in the Linux kernel before 4.18.12 on the arm64 platform mishandles the KVM_SET_ON_REG ioctl. This is exploitable by attackers who can create virtual machines. An attacker can arbitrarily redirect the...

27 affected packages

linux, linux-aws, linux-aws-hwe, linux-azure, linux-azure-edge...

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS	16.04 LTS
linux	—	—	—	Fixed	Fixed
linux-aws	—	—	—	Not affected	Not affected
linux-aws-hwe	—	—	—	Not in release	Fixed
linux-azure	—	—	—	Not affected	Not affected
linux-azure-edge	—	—	—	Not affected	Not affected
linux-euclid	—	—	—	Not in release	Ignored
linux-flo	—	—	—	Not in release	Ignored
linux-gcp	—	—	—	Not affected	Not affected
linux-gcp-edge	—	—	—	Not affected	Not in release
linux-gke	—	—	—	Not in release	Ignored
linux-goldfish	—	—	—	Not in release	Ignored
linux-grouper	—	—	—	Not in release	Not in release
linux-hwe	—	—	—	Not affected	Fixed
linux-hwe-edge	—	—	—	Not affected	Fixed
linux-kvm	—	—	—	Not affected	Not affected
linux-lts-trusty	—	—	—	Not in release	Not in release
linux-lts-utopic	—	—	—	Not in release	Not in release
linux-lts-vivid	—	—	—	Not in release	Not in release
linux-lts-wily	—	—	—	Not in release	Not in release
linux-lts-xenial	—	—	—	Not in release	Not in release
linux-maguro	—	—	—	Not in release	Not in release
linux-mako	—	—	—	Not in release	Ignored
linux-manta	—	—	—	Not in release	Not in release
linux-oem	—	—	—	Not affected	Ignored
linux-oracle	—	—	—	Fixed	Fixed
linux-raspi2	—	—	—	Fixed	Fixed
linux-snapdragon	—	—	—	Not affected	Fixed

CVE-2018-17972

Medium priority

Some fixes available 32 of 36

An issue was discovered in the proc_pid_stack function in fs/proc/base.c in the Linux kernel through 4.18.11. It does not ensure that only root may inspect the kernel stack of an arbitrary task, allowing a local attacker...

27 affected packages

linux, linux-aws, linux-aws-hwe, linux-azure, linux-azure-edge...

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS	16.04 LTS
linux	—	—	—	Fixed	Fixed
linux-aws	—	—	—	Fixed	Fixed
linux-aws-hwe	—	—	—	Not in release	Fixed
linux-azure	—	—	—	Fixed	Fixed
linux-azure-edge	—	—	—	Fixed	Fixed
linux-euclid	—	—	—	Not in release	Ignored
linux-flo	—	—	—	Not in release	Ignored
linux-gcp	—	—	—	Fixed	Fixed
linux-gcp-edge	—	—	—	Not affected	Not in release
linux-gke	—	—	—	Not in release	Ignored
linux-goldfish	—	—	—	Not in release	Ignored
linux-grouper	—	—	—	Not in release	Not in release
linux-hwe	—	—	—	Not affected	Fixed
linux-hwe-edge	—	—	—	Not affected	Fixed
linux-kvm	—	—	—	Fixed	Fixed
linux-lts-trusty	—	—	—	Not in release	Not in release
linux-lts-utopic	—	—	—	Not in release	Not in release
linux-lts-vivid	—	—	—	Not in release	Not in release
linux-lts-wily	—	—	—	Not in release	Not in release
linux-lts-xenial	—	—	—	Not in release	Not in release
linux-maguro	—	—	—	Not in release	Not in release
linux-mako	—	—	—	Not in release	Ignored
linux-manta	—	—	—	Not in release	Not in release
linux-oem	—	—	—	Fixed	Ignored
linux-oracle	—	—	—	Fixed	Fixed
linux-raspi2	—	—	—	Fixed	Fixed
linux-snapdragon	—	—	—	Not affected	Fixed

CVE-2018-14634

High priority

Some fixes available 11 of 14

An integer overflow flaw was found in the Linux kernel's create_elf_tables() function. An unprivileged local user with access to SUID (or otherwise privileged) binary could use this flaw to escalate their privileges on the system....

24 affected packages

linux, linux-aws, linux-azure, linux-azure-edge, linux-euclid...

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS	16.04 LTS
linux	—	—	—	Not affected	Fixed
linux-aws	—	—	—	Not affected	Fixed
linux-azure	—	—	—	Not affected	Not affected
linux-azure-edge	—	—	—	Not affected	Not affected
linux-euclid	—	—	—	Not in release	Fixed
linux-flo	—	—	—	Not in release	Ignored
linux-gcp	—	—	—	Not affected	Fixed
linux-gke	—	—	—	Not in release	Ignored
linux-goldfish	—	—	—	Not in release	Ignored
linux-grouper	—	—	—	Not in release	Not in release
linux-hwe	—	—	—	Not affected	Fixed
linux-hwe-edge	—	—	—	Not affected	Fixed
linux-kvm	—	—	—	Not affected	Fixed
linux-lts-trusty	—	—	—	Not in release	Not in release
linux-lts-utopic	—	—	—	Not in release	Not in release
linux-lts-vivid	—	—	—	Not in release	Not in release
linux-lts-wily	—	—	—	Not in release	Not in release
linux-lts-xenial	—	—	—	Not in release	Not in release
linux-maguro	—	—	—	Not in release	Not in release
linux-mako	—	—	—	Not in release	Ignored
linux-manta	—	—	—	Not in release	Not in release
linux-oem	—	—	—	Not affected	Not affected
linux-raspi2	—	—	—	Not affected	Fixed
linux-snapdragon	—	—	—	Not affected	Fixed

Export to JSON

Results by page: