Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2025-22014 (GCVE-0-2025-22014)
Vulnerability from cvelistv5 – Published: 2025-04-08 08:18 – Updated: 2026-05-11 21:10| Vendor | Product | Version | |
|---|---|---|---|
| Linux | Linux |
Affected:
fbe639b44a82755d639df1c5d147c93f02ac5a0f , < 72a222b6af10c2a05a5fad0029246229ed8912c2
(git)
Affected: fbe639b44a82755d639df1c5d147c93f02ac5a0f , < daba84612236de3ab39083e62c9e326a654ebd20 (git) Affected: fbe639b44a82755d639df1c5d147c93f02ac5a0f , < 0a566a79aca9851fae140536e0fc5b0853c90a90 (git) Affected: fbe639b44a82755d639df1c5d147c93f02ac5a0f , < f2bbfd50e95bc117360f0f59e629aa03d821ebd6 (git) Affected: fbe639b44a82755d639df1c5d147c93f02ac5a0f , < f4489260f5713c94e1966e5f20445bff262876f4 (git) Affected: fbe639b44a82755d639df1c5d147c93f02ac5a0f , < 02612f1e4c34d94d6c8ee75bf7d254ed697e22d4 (git) Affected: fbe639b44a82755d639df1c5d147c93f02ac5a0f , < 2eeb03ad9f42dfece63051be2400af487ddb96d2 (git) |
|
| Linux | Linux |
Affected:
5.7
Unaffected: 0 , < 5.7 (semver) Unaffected: 5.10.236 , ≤ 5.10.* (semver) Unaffected: 5.15.180 , ≤ 5.15.* (semver) Unaffected: 6.1.132 , ≤ 6.1.* (semver) Unaffected: 6.6.85 , ≤ 6.6.* (semver) Unaffected: 6.12.21 , ≤ 6.12.* (semver) Unaffected: 6.13.9 , ≤ 6.13.* (semver) Unaffected: 6.14 , ≤ * (original_commit_for_fix) |
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2025-11-03T19:40:58.659Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"url": "https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html"
},
{
"url": "https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Linux",
"programFiles": [
"drivers/soc/qcom/pdr_interface.c"
],
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"versions": [
{
"lessThan": "72a222b6af10c2a05a5fad0029246229ed8912c2",
"status": "affected",
"version": "fbe639b44a82755d639df1c5d147c93f02ac5a0f",
"versionType": "git"
},
{
"lessThan": "daba84612236de3ab39083e62c9e326a654ebd20",
"status": "affected",
"version": "fbe639b44a82755d639df1c5d147c93f02ac5a0f",
"versionType": "git"
},
{
"lessThan": "0a566a79aca9851fae140536e0fc5b0853c90a90",
"status": "affected",
"version": "fbe639b44a82755d639df1c5d147c93f02ac5a0f",
"versionType": "git"
},
{
"lessThan": "f2bbfd50e95bc117360f0f59e629aa03d821ebd6",
"status": "affected",
"version": "fbe639b44a82755d639df1c5d147c93f02ac5a0f",
"versionType": "git"
},
{
"lessThan": "f4489260f5713c94e1966e5f20445bff262876f4",
"status": "affected",
"version": "fbe639b44a82755d639df1c5d147c93f02ac5a0f",
"versionType": "git"
},
{
"lessThan": "02612f1e4c34d94d6c8ee75bf7d254ed697e22d4",
"status": "affected",
"version": "fbe639b44a82755d639df1c5d147c93f02ac5a0f",
"versionType": "git"
},
{
"lessThan": "2eeb03ad9f42dfece63051be2400af487ddb96d2",
"status": "affected",
"version": "fbe639b44a82755d639df1c5d147c93f02ac5a0f",
"versionType": "git"
}
]
},
{
"defaultStatus": "affected",
"product": "Linux",
"programFiles": [
"drivers/soc/qcom/pdr_interface.c"
],
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"versions": [
{
"status": "affected",
"version": "5.7"
},
{
"lessThan": "5.7",
"status": "unaffected",
"version": "0",
"versionType": "semver"
},
{
"lessThanOrEqual": "5.10.*",
"status": "unaffected",
"version": "5.10.236",
"versionType": "semver"
},
{
"lessThanOrEqual": "5.15.*",
"status": "unaffected",
"version": "5.15.180",
"versionType": "semver"
},
{
"lessThanOrEqual": "6.1.*",
"status": "unaffected",
"version": "6.1.132",
"versionType": "semver"
},
{
"lessThanOrEqual": "6.6.*",
"status": "unaffected",
"version": "6.6.85",
"versionType": "semver"
},
{
"lessThanOrEqual": "6.12.*",
"status": "unaffected",
"version": "6.12.21",
"versionType": "semver"
},
{
"lessThanOrEqual": "6.13.*",
"status": "unaffected",
"version": "6.13.9",
"versionType": "semver"
},
{
"lessThanOrEqual": "*",
"status": "unaffected",
"version": "6.14",
"versionType": "original_commit_for_fix"
}
]
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "5.10.236",
"versionStartIncluding": "5.7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "5.15.180",
"versionStartIncluding": "5.7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "6.1.132",
"versionStartIncluding": "5.7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "6.6.85",
"versionStartIncluding": "5.7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "6.12.21",
"versionStartIncluding": "5.7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "6.13.9",
"versionStartIncluding": "5.7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "6.14",
"versionStartIncluding": "5.7",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nsoc: qcom: pdr: Fix the potential deadlock\n\nWhen some client process A call pdr_add_lookup() to add the look up for\nthe service and does schedule locator work, later a process B got a new\nserver packet indicating locator is up and call pdr_locator_new_server()\nwhich eventually sets pdr-\u003elocator_init_complete to true which process A\nsees and takes list lock and queries domain list but it will timeout due\nto deadlock as the response will queued to the same qmi-\u003ewq and it is\nordered workqueue and process B is not able to complete new server\nrequest work due to deadlock on list lock.\n\nFix it by removing the unnecessary list iteration as the list iteration\nis already being done inside locator work, so avoid it here and just\ncall schedule_work() here.\n\n Process A Process B\n\n process_scheduled_works()\npdr_add_lookup() qmi_data_ready_work()\n process_scheduled_works() pdr_locator_new_server()\n pdr-\u003elocator_init_complete=true;\n pdr_locator_work()\n mutex_lock(\u0026pdr-\u003elist_lock);\n\n pdr_locate_service() mutex_lock(\u0026pdr-\u003elist_lock);\n\n pdr_get_domain_list()\n pr_err(\"PDR: %s get domain list\n txn wait failed: %d\\n\",\n req-\u003eservice_name,\n ret);\n\nTimeout error log due to deadlock:\n\n\"\n PDR: tms/servreg get domain list txn wait failed: -110\n PDR: service lookup for msm/adsp/sensor_pd:tms/servreg failed: -110\n\"\n\nThanks to Bjorn and Johan for letting me know that this commit also fixes\nan audio regression when using the in-kernel pd-mapper as that makes it\neasier to hit this race. [1]"
}
],
"providerMetadata": {
"dateUpdated": "2026-05-11T21:10:58.997Z",
"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"shortName": "Linux"
},
"references": [
{
"url": "https://git.kernel.org/stable/c/72a222b6af10c2a05a5fad0029246229ed8912c2"
},
{
"url": "https://git.kernel.org/stable/c/daba84612236de3ab39083e62c9e326a654ebd20"
},
{
"url": "https://git.kernel.org/stable/c/0a566a79aca9851fae140536e0fc5b0853c90a90"
},
{
"url": "https://git.kernel.org/stable/c/f2bbfd50e95bc117360f0f59e629aa03d821ebd6"
},
{
"url": "https://git.kernel.org/stable/c/f4489260f5713c94e1966e5f20445bff262876f4"
},
{
"url": "https://git.kernel.org/stable/c/02612f1e4c34d94d6c8ee75bf7d254ed697e22d4"
},
{
"url": "https://git.kernel.org/stable/c/2eeb03ad9f42dfece63051be2400af487ddb96d2"
}
],
"title": "soc: qcom: pdr: Fix the potential deadlock",
"x_generator": {
"engine": "bippy-1.2.0"
}
}
},
"cveMetadata": {
"assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"assignerShortName": "Linux",
"cveId": "CVE-2025-22014",
"datePublished": "2025-04-08T08:18:04.622Z",
"dateReserved": "2024-12-29T08:45:45.806Z",
"dateUpdated": "2026-05-11T21:10:58.997Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2025-22014",
"date": "2026-07-23",
"epss": "0.00151",
"percentile": "0.04774"
},
"microsoft_vex": {
"current_release_date": "2026-02-18T02:03:17.000Z",
"cve": "CVE-2025-22014",
"id": "msrc_CVE-2025-22014",
"initial_release_date": "2025-04-02T00:00:00.000Z",
"product_status:fixed": "5",
"product_status:known_affected": "5",
"source": "Microsoft CSAF VEX",
"status": "final",
"title": "soc: qcom: pdr: Fix the potential deadlock",
"url": "https://msrc.microsoft.com/csaf/vex/2025/msrc_cve-2025-22014.json",
"version": "2"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2025-22014\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2025-04-08T09:15:25.783\",\"lastModified\":\"2026-06-17T08:44:50.833\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\nsoc: qcom: pdr: Fix the potential deadlock\\n\\nWhen some client process A call pdr_add_lookup() to add the look up for\\nthe service and does schedule locator work, later a process B got a new\\nserver packet indicating locator is up and call pdr_locator_new_server()\\nwhich eventually sets pdr-\u003elocator_init_complete to true which process A\\nsees and takes list lock and queries domain list but it will timeout due\\nto deadlock as the response will queued to the same qmi-\u003ewq and it is\\nordered workqueue and process B is not able to complete new server\\nrequest work due to deadlock on list lock.\\n\\nFix it by removing the unnecessary list iteration as the list iteration\\nis already being done inside locator work, so avoid it here and just\\ncall schedule_work() here.\\n\\n Process A Process B\\n\\n process_scheduled_works()\\npdr_add_lookup() qmi_data_ready_work()\\n process_scheduled_works() pdr_locator_new_server()\\n pdr-\u003elocator_init_complete=true;\\n pdr_locator_work()\\n mutex_lock(\u0026pdr-\u003elist_lock);\\n\\n pdr_locate_service() mutex_lock(\u0026pdr-\u003elist_lock);\\n\\n pdr_get_domain_list()\\n pr_err(\\\"PDR: %s get domain list\\n txn wait failed: %d\\\\n\\\",\\n req-\u003eservice_name,\\n ret);\\n\\nTimeout error log due to deadlock:\\n\\n\\\"\\n PDR: tms/servreg get domain list txn wait failed: -110\\n PDR: service lookup for msm/adsp/sensor_pd:tms/servreg failed: -110\\n\\\"\\n\\nThanks to Bjorn and Johan for letting me know that this commit also fixes\\nan audio regression when using the in-kernel pd-mapper as that makes it\\neasier to hit this race. [1]\"},{\"lang\":\"es\",\"value\":\"En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: soc: qcom: pdr: Corrige el posible bloqueo cuando alg\u00fan proceso de cliente A llama a pdr_add_lookup() para agregar la b\u00fasqueda para el servicio y realiza el trabajo del localizador de programaci\u00f3n, m\u00e1s tarde un proceso B obtiene un nuevo paquete de servidor que indica que el localizador est\u00e1 activo y llama a pdr_locator_new_server() que finalmente establece pdr-\u0026gt;locator_init_complete en verdadero, lo que hace que el proceso A vea y tome el bloqueo de lista y consulte la lista de dominios, pero se agotar\u00e1 el tiempo de espera debido al bloqueo, ya que la respuesta se pondr\u00e1 en cola en el mismo qmi-\u0026gt;wq y se ordenar\u00e1 workqueue y el proceso B no puede completar el nuevo trabajo de solicitud del servidor debido al bloqueo en el bloqueo de lista. Arr\u00e9glelo eliminando la iteraci\u00f3n de lista innecesaria, ya que la iteraci\u00f3n de lista ya se est\u00e1 realizando dentro del trabajo del localizador, as\u00ed que ev\u00edtelo aqu\u00ed y simplemente llame a schedule_work() aqu\u00ed. Proceso A Proceso B process_scheduled_works() pdr_add_lookup() qmi_data_ready_work() process_scheduled_works() pdr_locator_new_server() pdr-\u0026gt;locator_init_complete=true; pdr_locator_work() mutex_lock(\u0026amp;pdr-\u0026gt;list_lock); pdr_locate_service() mutex_lock(\u0026amp;pdr-\u0026gt;list_lock); pdr_get_domain_list() pr_err(\\\"PDR: %s error en la espera de la transacci\u00f3n para obtener la lista de dominios: %d\\\\n\\\", req-\u0026gt;service_name, ret); Registro de errores de tiempo de espera debido a un bloqueo: \\\"PDR: tms/servreg get domain list txn wait fallo: -110 PDR: service lookup for msm/adsp/sensor_pd:tms/servreg failed: -110\\\" Gracias a Bjorn y Johan por informarme que esta confirmaci\u00f3n tambi\u00e9n corrige una regresi\u00f3n de audio al usar el pd-mapper dentro del kernel, ya que eso hace que sea m\u00e1s f\u00e1cil alcanzar esta ejecuci\u00f3n. [1]\"}],\"affected\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"affectedData\":[{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"unaffected\",\"programFiles\":[\"drivers/soc/qcom/pdr_interface.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"fbe639b44a82755d639df1c5d147c93f02ac5a0f\",\"lessThan\":\"72a222b6af10c2a05a5fad0029246229ed8912c2\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"fbe639b44a82755d639df1c5d147c93f02ac5a0f\",\"lessThan\":\"daba84612236de3ab39083e62c9e326a654ebd20\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"fbe639b44a82755d639df1c5d147c93f02ac5a0f\",\"lessThan\":\"0a566a79aca9851fae140536e0fc5b0853c90a90\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"fbe639b44a82755d639df1c5d147c93f02ac5a0f\",\"lessThan\":\"f2bbfd50e95bc117360f0f59e629aa03d821ebd6\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"fbe639b44a82755d639df1c5d147c93f02ac5a0f\",\"lessThan\":\"f4489260f5713c94e1966e5f20445bff262876f4\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"fbe639b44a82755d639df1c5d147c93f02ac5a0f\",\"lessThan\":\"02612f1e4c34d94d6c8ee75bf7d254ed697e22d4\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"fbe639b44a82755d639df1c5d147c93f02ac5a0f\",\"lessThan\":\"2eeb03ad9f42dfece63051be2400af487ddb96d2\",\"versionType\":\"git\",\"status\":\"affected\"}]},{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"affected\",\"programFiles\":[\"drivers/soc/qcom/pdr_interface.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"5.7\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"5.7\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.10.236\",\"lessThanOrEqual\":\"5.10.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.15.180\",\"lessThanOrEqual\":\"5.15.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.1.132\",\"lessThanOrEqual\":\"6.1.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.6.85\",\"lessThanOrEqual\":\"6.6.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.12.21\",\"lessThanOrEqual\":\"6.12.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.13.9\",\"lessThanOrEqual\":\"6.13.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.14\",\"lessThanOrEqual\":\"*\",\"versionType\":\"original_commit_for_fix\",\"status\":\"unaffected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":5.5,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":3.6}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-667\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.7\",\"versionEndExcluding\":\"6.1.132\",\"matchCriteriaId\":\"FC2AC519-3D9D-405E-B3B7-FFFCE9691EEC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.2\",\"versionEndExcluding\":\"6.6.85\",\"matchCriteriaId\":\"BCB56F36-C998-496A-A2E4-D9E0BB3A5BFC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.7\",\"versionEndExcluding\":\"6.12.21\",\"matchCriteriaId\":\"3B63C450-D73B-4A53-9861-98E25C16E842\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.13\",\"versionEndExcluding\":\"6.13.9\",\"matchCriteriaId\":\"FAECBE4D-58CF-4836-BBAB-5E28B800A778\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.14:rc1:*:*:*:*:*:*\",\"matchCriteriaId\":\"186716B6-2B66-4BD0-852E-D48E71C0C85F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.14:rc2:*:*:*:*:*:*\",\"matchCriteriaId\":\"0D3E781C-403A-498F-9DA9-ECEE50F41E75\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.14:rc3:*:*:*:*:*:*\",\"matchCriteriaId\":\"66619FB8-0AAF-4166-B2CF-67B24143261D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.14:rc4:*:*:*:*:*:*\",\"matchCriteriaId\":\"D3D6550E-6679-4560-902D-AF52DCFE905B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.14:rc5:*:*:*:*:*:*\",\"matchCriteriaId\":\"45B90F6B-BEC7-4D4E-883A-9DBADE021750\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.14:rc6:*:*:*:*:*:*\",\"matchCriteriaId\":\"1759FFB7-531C-41B1-9AE1-FD3D80E0D920\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.14:rc7:*:*:*:*:*:*\",\"matchCriteriaId\":\"AD948719-8628-4421-A340-1066314BBD4A\"}]}]}],\"references\":[{\"url\":\"https://git.kernel.org/stable/c/02612f1e4c34d94d6c8ee75bf7d254ed697e22d4\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/0a566a79aca9851fae140536e0fc5b0853c90a90\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/2eeb03ad9f42dfece63051be2400af487ddb96d2\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/72a222b6af10c2a05a5fad0029246229ed8912c2\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/daba84612236de3ab39083e62c9e326a654ebd20\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/f2bbfd50e95bc117360f0f59e629aa03d821ebd6\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/f4489260f5713c94e1966e5f20445bff262876f4\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}",
"redhat_vex": {
"aggregate_severity": "Moderate",
"current_release_date": "2026-06-30T00:43:52+00:00",
"cve": "CVE-2025-22014",
"id": "CVE-2025-22014",
"initial_release_date": "2025-04-08T00:00:00+00:00",
"product_status:known_not_affected": "274",
"source": "Red Hat CSAF VEX",
"status": "final",
"title": "kernel: soc: qcom: pdr: Fix the potential deadlock",
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-22014.json",
"version": "3"
}
}
}
ubuntu-cve-2025-22014
Vulnerability from osv_ubuntu
In the Linux kernel, the following vulnerability has been resolved: soc: qcom: pdr: Fix the potential deadlock When some client process A call pdr_add_lookup() to add the look up for the service and does schedule locator work, later a process B got a new server packet indicating locator is up and call pdr_locator_new_server() which eventually sets pdr->locator_init_complete to true which process A sees and takes list lock and queries domain list but it will timeout due to deadlock as the response will queued to the same qmi->wq and it is ordered workqueue and process B is not able to complete new server request work due to deadlock on list lock. Fix it by removing the unnecessary list iteration as the list iteration is already being done inside locator work, so avoid it here and just call schedule_work() here. Process A Process B process_scheduled_works() pdr_add_lookup() qmi_data_ready_work() process_scheduled_works() pdr_locator_new_server() pdr->locator_init_complete=true; pdr_locator_work() mutex_lock(&pdr->list_lock); pdr_locate_service() mutex_lock(&pdr->list_lock); pdr_get_domain_list() pr_err("PDR: %s get domain list txn wait failed: %d\n", req->service_name, ret); Timeout error log due to deadlock: " PDR: tms/servreg get domain list txn wait failed: -110 PDR: service lookup for msm/adsp/sensor_pd:tms/servreg failed: -110 " Thanks to Bjorn and Johan for letting me know that this commit also fixes an audio regression when using the in-kernel pd-mapper as that makes it easier to hit this race. [1]
{
"affected": [
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "block-modules-4.15.0-23-generic-di",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "block-modules-4.15.0-23-generic-lpae-di",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "crypto-modules-4.15.0-23-generic-di",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "crypto-modules-4.15.0-23-generic-lpae-di",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "dasd-extra-modules-4.15.0-23-generic-di",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "dasd-modules-4.15.0-23-generic-di",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "fat-modules-4.15.0-23-generic-di",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "fat-modules-4.15.0-23-generic-lpae-di",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "fb-modules-4.15.0-23-generic-di",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "firewire-core-modules-4.15.0-23-generic-di",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "floppy-modules-4.15.0-23-generic-di",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "fs-core-modules-4.15.0-23-generic-di",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "fs-core-modules-4.15.0-23-generic-lpae-di",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "fs-secondary-modules-4.15.0-23-generic-di",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "fs-secondary-modules-4.15.0-23-generic-lpae-di",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "input-modules-4.15.0-23-generic-di",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "input-modules-4.15.0-23-generic-lpae-di",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "ipmi-modules-4.15.0-23-generic-di",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "ipmi-modules-4.15.0-23-generic-lpae-di",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "irda-modules-4.15.0-23-generic-di",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "irda-modules-4.15.0-23-generic-lpae-di",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "kernel-image-4.15.0-23-generic-di",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "kernel-image-4.15.0-23-generic-lpae-di",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "linux-cloud-tools-4.15.0-23-generic",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "linux-cloud-tools-4.15.0-23-lowlatency",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "linux-headers-4.15.0-23",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "linux-headers-4.15.0-23-generic",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "linux-headers-4.15.0-23-generic-lpae",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "linux-headers-4.15.0-23-lowlatency",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "linux-hwe-edge-cloud-tools-4.15.0-23",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "linux-hwe-edge-tools-4.15.0-23",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "linux-hwe-edge-udebs-generic",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "linux-hwe-edge-udebs-generic-lpae",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "linux-image-4.15.0-23-generic",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "linux-image-4.15.0-23-generic-lpae",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "linux-image-4.15.0-23-lowlatency",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "linux-image-unsigned-4.15.0-23-generic",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "linux-image-unsigned-4.15.0-23-lowlatency",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "linux-modules-4.15.0-23-generic",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "linux-modules-4.15.0-23-generic-lpae",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "linux-modules-4.15.0-23-lowlatency",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "linux-modules-extra-4.15.0-23-generic",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "linux-source-4.15.0",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "linux-tools-4.15.0-23-generic",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "linux-tools-4.15.0-23-generic-lpae",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "linux-tools-4.15.0-23-lowlatency",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "md-modules-4.15.0-23-generic-di",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "md-modules-4.15.0-23-generic-lpae-di",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "message-modules-4.15.0-23-generic-di",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "mouse-modules-4.15.0-23-generic-di",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "mouse-modules-4.15.0-23-generic-lpae-di",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "multipath-modules-4.15.0-23-generic-di",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "multipath-modules-4.15.0-23-generic-lpae-di",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "nfs-modules-4.15.0-23-generic-di",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "nfs-modules-4.15.0-23-generic-lpae-di",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "nic-modules-4.15.0-23-generic-di",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "nic-modules-4.15.0-23-generic-lpae-di",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "nic-pcmcia-modules-4.15.0-23-generic-di",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "nic-shared-modules-4.15.0-23-generic-di",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "nic-shared-modules-4.15.0-23-generic-lpae-di",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "nic-usb-modules-4.15.0-23-generic-di",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "nic-usb-modules-4.15.0-23-generic-lpae-di",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "parport-modules-4.15.0-23-generic-di",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "parport-modules-4.15.0-23-generic-lpae-di",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "pata-modules-4.15.0-23-generic-di",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "pcmcia-modules-4.15.0-23-generic-di",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "pcmcia-storage-modules-4.15.0-23-generic-di",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "plip-modules-4.15.0-23-generic-di",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "plip-modules-4.15.0-23-generic-lpae-di",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "ppp-modules-4.15.0-23-generic-di",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "ppp-modules-4.15.0-23-generic-lpae-di",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "sata-modules-4.15.0-23-generic-di",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "sata-modules-4.15.0-23-generic-lpae-di",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "scsi-modules-4.15.0-23-generic-di",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "scsi-modules-4.15.0-23-generic-lpae-di",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "serial-modules-4.15.0-23-generic-di",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "storage-core-modules-4.15.0-23-generic-di",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "storage-core-modules-4.15.0-23-generic-lpae-di",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "usb-modules-4.15.0-23-generic-di",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "usb-modules-4.15.0-23-generic-lpae-di",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "virtio-modules-4.15.0-23-generic-di",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "vlan-modules-4.15.0-23-generic-di",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "vlan-modules-4.15.0-23-generic-lpae-di",
"binary_version": "4.15.0-23.25~16.04.1"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:16.04:LTS",
"name": "linux-hwe-edge",
"purl": "pkg:deb/ubuntu/linux-hwe-edge@4.15.0-23.25~16.04.1?arch=source\u0026distro=xenial"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"4.8.0-28.30~16.04.1",
"4.8.0-30.32~16.04.1",
"4.8.0-32.34~16.04.1",
"4.8.0-34.36~16.04.1",
"4.10.0-14.16~16.04.1",
"4.10.0-19.21~16.04.1",
"4.10.0-20.22~16.04.1",
"4.10.0-21.23~16.04.1",
"4.10.0-22.24~16.04.1",
"4.10.0-24.28~16.04.1",
"4.10.0-26.30~16.04.1",
"4.11.0-13.19~16.04.1",
"4.11.0-14.20~16.04.1",
"4.13.0-16.19~16.04.3",
"4.13.0-17.20~16.04.1",
"4.13.0-19.22~16.04.1",
"4.13.0-21.24~16.04.1",
"4.13.0-25.29~16.04.2",
"4.15.0-13.14~16.04.1",
"4.15.0-15.16~16.04.1",
"4.15.0-20.21~16.04.1",
"4.15.0-22.24~16.04.1",
"4.15.0-23.25~16.04.1"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-aws-5.0-tools-5.0.0-1027",
"binary_version": "5.0.0-1027.30"
},
{
"binary_name": "linux-aws-headers-5.0.0-1027",
"binary_version": "5.0.0-1027.30"
},
{
"binary_name": "linux-buildinfo-5.0.0-1027-aws",
"binary_version": "5.0.0-1027.30"
},
{
"binary_name": "linux-cloud-tools-5.0.0-1027-aws",
"binary_version": "5.0.0-1027.30"
},
{
"binary_name": "linux-headers-5.0.0-1027-aws",
"binary_version": "5.0.0-1027.30"
},
{
"binary_name": "linux-image-5.0.0-1027-aws",
"binary_version": "5.0.0-1027.30"
},
{
"binary_name": "linux-modules-5.0.0-1027-aws",
"binary_version": "5.0.0-1027.30"
},
{
"binary_name": "linux-modules-extra-5.0.0-1027-aws",
"binary_version": "5.0.0-1027.30"
},
{
"binary_name": "linux-tools-5.0.0-1027-aws",
"binary_version": "5.0.0-1027.30"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:18.04:LTS",
"name": "linux-aws-5.0",
"purl": "pkg:deb/ubuntu/linux-aws-5.0@5.0.0-1027.30?arch=source\u0026distro=bionic"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.0.0-1021.24~18.04.1",
"5.0.0-1022.25~18.04.1",
"5.0.0-1023.26~18.04.1",
"5.0.0-1024.27~18.04.1",
"5.0.0-1025.28",
"5.0.0-1027.30"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-aws-5.3-cloud-tools-5.3.0-1035",
"binary_version": "5.3.0-1035.37"
},
{
"binary_name": "linux-aws-5.3-headers-5.3.0-1035",
"binary_version": "5.3.0-1035.37"
},
{
"binary_name": "linux-aws-5.3-tools-5.3.0-1035",
"binary_version": "5.3.0-1035.37"
},
{
"binary_name": "linux-buildinfo-5.3.0-1035-aws",
"binary_version": "5.3.0-1035.37"
},
{
"binary_name": "linux-cloud-tools-5.3.0-1035-aws",
"binary_version": "5.3.0-1035.37"
},
{
"binary_name": "linux-headers-5.3.0-1035-aws",
"binary_version": "5.3.0-1035.37"
},
{
"binary_name": "linux-image-5.3.0-1035-aws",
"binary_version": "5.3.0-1035.37"
},
{
"binary_name": "linux-modules-5.3.0-1035-aws",
"binary_version": "5.3.0-1035.37"
},
{
"binary_name": "linux-modules-extra-5.3.0-1035-aws",
"binary_version": "5.3.0-1035.37"
},
{
"binary_name": "linux-tools-5.3.0-1035-aws",
"binary_version": "5.3.0-1035.37"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:18.04:LTS",
"name": "linux-aws-5.3",
"purl": "pkg:deb/ubuntu/linux-aws-5.3@5.3.0-1035.37?arch=source\u0026distro=bionic"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.3.0-1016.17~18.04.1",
"5.3.0-1017.18~18.04.1",
"5.3.0-1019.21~18.04.1",
"5.3.0-1023.25~18.04.1",
"5.3.0-1028.30~18.04.1",
"5.3.0-1030.32~18.04.1",
"5.3.0-1032.34~18.04.2",
"5.3.0-1033.35",
"5.3.0-1034.36",
"5.3.0-1035.37"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-azure-cloud-tools-5.0.0-1036",
"binary_version": "5.0.0-1036.38"
},
{
"binary_name": "linux-azure-headers-5.0.0-1036",
"binary_version": "5.0.0-1036.38"
},
{
"binary_name": "linux-azure-tools-5.0.0-1036",
"binary_version": "5.0.0-1036.38"
},
{
"binary_name": "linux-buildinfo-5.0.0-1036-azure",
"binary_version": "5.0.0-1036.38"
},
{
"binary_name": "linux-cloud-tools-5.0.0-1036-azure",
"binary_version": "5.0.0-1036.38"
},
{
"binary_name": "linux-headers-5.0.0-1036-azure",
"binary_version": "5.0.0-1036.38"
},
{
"binary_name": "linux-image-unsigned-5.0.0-1036-azure",
"binary_version": "5.0.0-1036.38"
},
{
"binary_name": "linux-modules-5.0.0-1036-azure",
"binary_version": "5.0.0-1036.38"
},
{
"binary_name": "linux-modules-extra-5.0.0-1036-azure",
"binary_version": "5.0.0-1036.38"
},
{
"binary_name": "linux-tools-5.0.0-1036-azure",
"binary_version": "5.0.0-1036.38"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:18.04:LTS",
"name": "linux-azure",
"purl": "pkg:deb/ubuntu/linux-azure@5.0.0-1036.38?arch=source\u0026distro=bionic"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"4.15.0-1002.2",
"4.15.0-1003.3",
"4.15.0-1004.4",
"4.15.0-1008.8",
"4.15.0-1009.9",
"4.15.0-1012.12",
"4.15.0-1013.13",
"4.15.0-1014.14",
"4.15.0-1018.18",
"4.15.0-1019.19",
"4.15.0-1021.21",
"4.15.0-1022.23",
"4.15.0-1023.24",
"4.15.0-1025.26",
"4.15.0-1028.29",
"4.15.0-1030.31",
"4.15.0-1031.32",
"4.15.0-1032.33",
"4.15.0-1035.36",
"4.15.0-1036.38",
"4.15.0-1037.39",
"4.18.0-1011.11~18.04.1",
"4.18.0-1013.13~18.04.1",
"4.18.0-1014.14~18.04.1",
"4.18.0-1018.18~18.04.1",
"4.18.0-1019.19~18.04.1",
"4.18.0-1020.20~18.04.1",
"4.18.0-1023.24~18.04.1",
"4.18.0-1024.25~18.04.1",
"4.18.0-1025.27~18.04.1",
"5.0.0-1014.14~18.04.1",
"5.0.0-1016.17~18.04.1",
"5.0.0-1018.19~18.04.1",
"5.0.0-1020.21~18.04.1",
"5.0.0-1022.23~18.04.1",
"5.0.0-1023.24~18.04.1",
"5.0.0-1025.27~18.04.1",
"5.0.0-1027.29~18.04.1",
"5.0.0-1028.30~18.04.1",
"5.0.0-1029.31~18.04.1",
"5.0.0-1031.33",
"5.0.0-1032.34",
"5.0.0-1035.37",
"5.0.0-1036.38"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-azure-5.3-cloud-tools-5.3.0-1035",
"binary_version": "5.3.0-1035.36"
},
{
"binary_name": "linux-azure-5.3-headers-5.3.0-1035",
"binary_version": "5.3.0-1035.36"
},
{
"binary_name": "linux-azure-5.3-tools-5.3.0-1035",
"binary_version": "5.3.0-1035.36"
},
{
"binary_name": "linux-buildinfo-5.3.0-1035-azure",
"binary_version": "5.3.0-1035.36"
},
{
"binary_name": "linux-cloud-tools-5.3.0-1035-azure",
"binary_version": "5.3.0-1035.36"
},
{
"binary_name": "linux-headers-5.3.0-1035-azure",
"binary_version": "5.3.0-1035.36"
},
{
"binary_name": "linux-image-unsigned-5.3.0-1035-azure",
"binary_version": "5.3.0-1035.36"
},
{
"binary_name": "linux-modules-5.3.0-1035-azure",
"binary_version": "5.3.0-1035.36"
},
{
"binary_name": "linux-modules-extra-5.3.0-1035-azure",
"binary_version": "5.3.0-1035.36"
},
{
"binary_name": "linux-tools-5.3.0-1035-azure",
"binary_version": "5.3.0-1035.36"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:18.04:LTS",
"name": "linux-azure-5.3",
"purl": "pkg:deb/ubuntu/linux-azure-5.3@5.3.0-1035.36?arch=source\u0026distro=bionic"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.3.0-1007.8~18.04.1",
"5.3.0-1008.9~18.04.1",
"5.3.0-1009.10~18.04.1",
"5.3.0-1010.11~18.04.1",
"5.3.0-1012.13~18.04.1",
"5.3.0-1013.14~18.04.1",
"5.3.0-1016.17~18.04.1",
"5.3.0-1018.19~18.04.1",
"5.3.0-1019.20~18.04.1",
"5.3.0-1020.21~18.04.1",
"5.3.0-1022.23~18.04.1",
"5.3.0-1028.29~18.04.1",
"5.3.0-1031.32~18.04.1",
"5.3.0-1032.33~18.04.1",
"5.3.0-1034.35~18.04.1",
"5.3.0-1035.36"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-azure-edge-cloud-tools-5.0.0-1012",
"binary_version": "5.0.0-1012.12~18.04.2"
},
{
"binary_name": "linux-azure-edge-tools-5.0.0-1012",
"binary_version": "5.0.0-1012.12~18.04.2"
},
{
"binary_name": "linux-azure-headers-5.0.0-1012",
"binary_version": "5.0.0-1012.12~18.04.2"
},
{
"binary_name": "linux-buildinfo-5.0.0-1012-azure",
"binary_version": "5.0.0-1012.12~18.04.2"
},
{
"binary_name": "linux-cloud-tools-5.0.0-1012-azure",
"binary_version": "5.0.0-1012.12~18.04.2"
},
{
"binary_name": "linux-headers-5.0.0-1012-azure",
"binary_version": "5.0.0-1012.12~18.04.2"
},
{
"binary_name": "linux-image-unsigned-5.0.0-1012-azure",
"binary_version": "5.0.0-1012.12~18.04.2"
},
{
"binary_name": "linux-modules-5.0.0-1012-azure",
"binary_version": "5.0.0-1012.12~18.04.2"
},
{
"binary_name": "linux-modules-extra-5.0.0-1012-azure",
"binary_version": "5.0.0-1012.12~18.04.2"
},
{
"binary_name": "linux-tools-5.0.0-1012-azure",
"binary_version": "5.0.0-1012.12~18.04.2"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:18.04:LTS",
"name": "linux-azure-edge",
"purl": "pkg:deb/ubuntu/linux-azure-edge@5.0.0-1012.12~18.04.2?arch=source\u0026distro=bionic"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"4.18.0-1006.6~18.04.1",
"4.18.0-1007.7~18.04.1",
"4.18.0-1008.8~18.04.1",
"5.0.0-1012.12~18.04.2"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-buildinfo-5.0.0-1034-gcp",
"binary_version": "5.0.0-1034.35"
},
{
"binary_name": "linux-gcp-headers-5.0.0-1034",
"binary_version": "5.0.0-1034.35"
},
{
"binary_name": "linux-gcp-tools-5.0.0-1034",
"binary_version": "5.0.0-1034.35"
},
{
"binary_name": "linux-headers-5.0.0-1034-gcp",
"binary_version": "5.0.0-1034.35"
},
{
"binary_name": "linux-image-unsigned-5.0.0-1034-gcp",
"binary_version": "5.0.0-1034.35"
},
{
"binary_name": "linux-modules-5.0.0-1034-gcp",
"binary_version": "5.0.0-1034.35"
},
{
"binary_name": "linux-modules-extra-5.0.0-1034-gcp",
"binary_version": "5.0.0-1034.35"
},
{
"binary_name": "linux-tools-5.0.0-1034-gcp",
"binary_version": "5.0.0-1034.35"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:18.04:LTS",
"name": "linux-gcp",
"purl": "pkg:deb/ubuntu/linux-gcp@5.0.0-1034.35?arch=source\u0026distro=bionic"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"4.15.0-1001.1",
"4.15.0-1003.3",
"4.15.0-1005.5",
"4.15.0-1006.6",
"4.15.0-1008.8",
"4.15.0-1009.9",
"4.15.0-1010.10",
"4.15.0-1014.14",
"4.15.0-1015.15",
"4.15.0-1017.18",
"4.15.0-1018.19",
"4.15.0-1019.20",
"4.15.0-1021.22",
"4.15.0-1023.24",
"4.15.0-1024.25",
"4.15.0-1025.26",
"4.15.0-1026.27",
"4.15.0-1027.28",
"4.15.0-1028.29",
"4.15.0-1029.31",
"4.15.0-1030.32",
"4.15.0-1032.34",
"4.15.0-1033.35",
"4.15.0-1034.36",
"4.15.0-1036.38",
"4.15.0-1037.39",
"4.15.0-1040.42",
"4.15.0-1042.45",
"4.15.0-1044.70",
"5.0.0-1020.20~18.04.1",
"5.0.0-1021.21~18.04.1",
"5.0.0-1025.26~18.04.1",
"5.0.0-1026.27~18.04.1",
"5.0.0-1028.29~18.04.1",
"5.0.0-1029.30~18.04.1",
"5.0.0-1031.32",
"5.0.0-1033.34",
"5.0.0-1034.35"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-buildinfo-5.3.0-1032-gcp",
"binary_version": "5.3.0-1032.34~18.04.1"
},
{
"binary_name": "linux-gcp-5.3-headers-5.3.0-1032",
"binary_version": "5.3.0-1032.34~18.04.1"
},
{
"binary_name": "linux-gcp-5.3-tools-5.3.0-1032",
"binary_version": "5.3.0-1032.34~18.04.1"
},
{
"binary_name": "linux-headers-5.3.0-1032-gcp",
"binary_version": "5.3.0-1032.34~18.04.1"
},
{
"binary_name": "linux-image-unsigned-5.3.0-1032-gcp",
"binary_version": "5.3.0-1032.34~18.04.1"
},
{
"binary_name": "linux-modules-5.3.0-1032-gcp",
"binary_version": "5.3.0-1032.34~18.04.1"
},
{
"binary_name": "linux-modules-extra-5.3.0-1032-gcp",
"binary_version": "5.3.0-1032.34~18.04.1"
},
{
"binary_name": "linux-tools-5.3.0-1032-gcp",
"binary_version": "5.3.0-1032.34~18.04.1"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:18.04:LTS",
"name": "linux-gcp-5.3",
"purl": "pkg:deb/ubuntu/linux-gcp-5.3@5.3.0-1032.34~18.04.1?arch=source\u0026distro=bionic"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.3.0-1008.9~18.04.1",
"5.3.0-1009.10~18.04.1",
"5.3.0-1010.11~18.04.1",
"5.3.0-1012.13~18.04.1",
"5.3.0-1014.15~18.04.1",
"5.3.0-1016.17~18.04.1",
"5.3.0-1017.18~18.04.1",
"5.3.0-1018.19~18.04.1",
"5.3.0-1020.22~18.04.1",
"5.3.0-1026.28~18.04.1",
"5.3.0-1029.31~18.04.1",
"5.3.0-1030.32~18.04.1",
"5.3.0-1032.34~18.04.1"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-buildinfo-4.15.0-1079-gke",
"binary_version": "4.15.0-1079.84"
},
{
"binary_name": "linux-gke-4.15-headers-4.15.0-1079",
"binary_version": "4.15.0-1079.84"
},
{
"binary_name": "linux-gke-4.15-tools-4.15.0-1079",
"binary_version": "4.15.0-1079.84"
},
{
"binary_name": "linux-headers-4.15.0-1079-gke",
"binary_version": "4.15.0-1079.84"
},
{
"binary_name": "linux-image-unsigned-4.15.0-1079-gke",
"binary_version": "4.15.0-1079.84"
},
{
"binary_name": "linux-modules-4.15.0-1079-gke",
"binary_version": "4.15.0-1079.84"
},
{
"binary_name": "linux-modules-extra-4.15.0-1079-gke",
"binary_version": "4.15.0-1079.84"
},
{
"binary_name": "linux-tools-4.15.0-1079-gke",
"binary_version": "4.15.0-1079.84"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:18.04:LTS",
"name": "linux-gke-4.15",
"purl": "pkg:deb/ubuntu/linux-gke-4.15@4.15.0-1079.84?arch=source\u0026distro=bionic"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"4.15.0-1030.32",
"4.15.0-1032.34",
"4.15.0-1033.35",
"4.15.0-1034.36",
"4.15.0-1036.38",
"4.15.0-1037.39",
"4.15.0-1040.42",
"4.15.0-1041.43",
"4.15.0-1042.44",
"4.15.0-1044.46",
"4.15.0-1045.48",
"4.15.0-1046.49",
"4.15.0-1048.51",
"4.15.0-1049.52",
"4.15.0-1050.53",
"4.15.0-1052.55",
"4.15.0-1055.58",
"4.15.0-1057.60",
"4.15.0-1058.61",
"4.15.0-1059.62",
"4.15.0-1063.66",
"4.15.0-1064.67",
"4.15.0-1066.69",
"4.15.0-1067.70",
"4.15.0-1069.72",
"4.15.0-1070.73",
"4.15.0-1072.76",
"4.15.0-1073.78",
"4.15.0-1074.79",
"4.15.0-1076.81",
"4.15.0-1077.82",
"4.15.0-1078.83",
"4.15.0-1079.84"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-buildinfo-5.4.0-1080-gke",
"binary_version": "5.4.0-1080.86~18.04.1"
},
{
"binary_name": "linux-gke-5.4-headers-5.4.0-1080",
"binary_version": "5.4.0-1080.86~18.04.1"
},
{
"binary_name": "linux-gke-5.4-tools-5.4.0-1080",
"binary_version": "5.4.0-1080.86~18.04.1"
},
{
"binary_name": "linux-headers-5.4.0-1080-gke",
"binary_version": "5.4.0-1080.86~18.04.1"
},
{
"binary_name": "linux-image-unsigned-5.4.0-1080-gke",
"binary_version": "5.4.0-1080.86~18.04.1"
},
{
"binary_name": "linux-modules-5.4.0-1080-gke",
"binary_version": "5.4.0-1080.86~18.04.1"
},
{
"binary_name": "linux-modules-extra-5.4.0-1080-gke",
"binary_version": "5.4.0-1080.86~18.04.1"
},
{
"binary_name": "linux-tools-5.4.0-1080-gke",
"binary_version": "5.4.0-1080.86~18.04.1"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:18.04:LTS",
"name": "linux-gke-5.4",
"purl": "pkg:deb/ubuntu/linux-gke-5.4@5.4.0-1080.86~18.04.1?arch=source\u0026distro=bionic"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.4.0-1025.25~18.04.1",
"5.4.0-1027.28~18.04.1",
"5.4.0-1029.31~18.04.1",
"5.4.0-1030.32~18.04.1",
"5.4.0-1032.34~18.04.1",
"5.4.0-1033.35~18.04.1",
"5.4.0-1035.37~18.04.1",
"5.4.0-1036.38~18.04.1",
"5.4.0-1037.39~18.04.1",
"5.4.0-1039.41~18.04.1",
"5.4.0-1040.42~18.04.1",
"5.4.0-1042.44~18.04.1",
"5.4.0-1043.45~18.04.1",
"5.4.0-1044.46~18.04.1",
"5.4.0-1046.48~18.04.1",
"5.4.0-1049.52~18.04.1",
"5.4.0-1051.54~18.04.1",
"5.4.0-1052.55~18.04.1",
"5.4.0-1053.56~18.04.1",
"5.4.0-1054.57~18.04.1",
"5.4.0-1055.58~18.04.1",
"5.4.0-1056.59~18.04.1",
"5.4.0-1057.60~18.04.1",
"5.4.0-1059.62~18.04.1",
"5.4.0-1061.64~18.04.1",
"5.4.0-1062.65~18.04.1",
"5.4.0-1063.66~18.04.1",
"5.4.0-1065.68~18.04.1",
"5.4.0-1066.69~18.04.1",
"5.4.0-1067.70~18.04.1",
"5.4.0-1068.71~18.04.1",
"5.4.0-1071.76~18.04.3",
"5.4.0-1072.77~18.04.1",
"5.4.0-1074.79~18.04.1",
"5.4.0-1076.82~18.04.1",
"5.4.0-1078.84~18.04.1",
"5.4.0-1080.86~18.04.1"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-buildinfo-5.4.0-1051-gkeop",
"binary_version": "5.4.0-1051.54~18.04.1"
},
{
"binary_name": "linux-cloud-tools-5.4.0-1051-gkeop",
"binary_version": "5.4.0-1051.54~18.04.1"
},
{
"binary_name": "linux-gkeop-5.4-cloud-tools-5.4.0-1051",
"binary_version": "5.4.0-1051.54~18.04.1"
},
{
"binary_name": "linux-gkeop-5.4-headers-5.4.0-1051",
"binary_version": "5.4.0-1051.54~18.04.1"
},
{
"binary_name": "linux-gkeop-5.4-source-5.4.0",
"binary_version": "5.4.0-1051.54~18.04.1"
},
{
"binary_name": "linux-gkeop-5.4-tools-5.4.0-1051",
"binary_version": "5.4.0-1051.54~18.04.1"
},
{
"binary_name": "linux-headers-5.4.0-1051-gkeop",
"binary_version": "5.4.0-1051.54~18.04.1"
},
{
"binary_name": "linux-image-unsigned-5.4.0-1051-gkeop",
"binary_version": "5.4.0-1051.54~18.04.1"
},
{
"binary_name": "linux-modules-5.4.0-1051-gkeop",
"binary_version": "5.4.0-1051.54~18.04.1"
},
{
"binary_name": "linux-modules-extra-5.4.0-1051-gkeop",
"binary_version": "5.4.0-1051.54~18.04.1"
},
{
"binary_name": "linux-tools-5.4.0-1051-gkeop",
"binary_version": "5.4.0-1051.54~18.04.1"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:18.04:LTS",
"name": "linux-gkeop-5.4",
"purl": "pkg:deb/ubuntu/linux-gkeop-5.4@5.4.0-1051.54~18.04.1?arch=source\u0026distro=bionic"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.4.0-1001.1",
"5.4.0-1003.3",
"5.4.0-1004.5",
"5.4.0-1005.6",
"5.4.0-1007.8~18.04.1",
"5.4.0-1008.9~18.04.1",
"5.4.0-1009.10~18.04.1",
"5.4.0-1010.11~18.04.1",
"5.4.0-1011.12~18.04.2",
"5.4.0-1012.13~18.04.1",
"5.4.0-1013.14~18.04.1",
"5.4.0-1014.15~18.04.1",
"5.4.0-1015.16~18.04.1",
"5.4.0-1016.17~18.04.1",
"5.4.0-1018.19~18.04.1",
"5.4.0-1021.22~18.04.1",
"5.4.0-1022.23~18.04.1",
"5.4.0-1023.24~18.04.1",
"5.4.0-1024.25~18.04.1",
"5.4.0-1025.26~18.04.1",
"5.4.0-1026.27~18.04.1",
"5.4.0-1027.28~18.04.1",
"5.4.0-1029.30~18.04.2",
"5.4.0-1031.32~18.04.1",
"5.4.0-1032.33~18.04.1",
"5.4.0-1033.34~18.04.1",
"5.4.0-1034.35~18.04.1",
"5.4.0-1036.37~18.04.1",
"5.4.0-1037.38~18.04.1",
"5.4.0-1038.39~18.04.1",
"5.4.0-1039.40~18.04.1",
"5.4.0-1040.41~18.04.1",
"5.4.0-1043.44~18.04.1",
"5.4.0-1046.48~18.04.1",
"5.4.0-1048.51~18.04.1",
"5.4.0-1049.52~18.04.1",
"5.4.0-1051.54~18.04.1"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "block-modules-5.3.0-76-generic-di",
"binary_version": "5.3.0-76.72"
},
{
"binary_name": "crypto-modules-5.3.0-76-generic-di",
"binary_version": "5.3.0-76.72"
},
{
"binary_name": "fat-modules-5.3.0-76-generic-di",
"binary_version": "5.3.0-76.72"
},
{
"binary_name": "fb-modules-5.3.0-76-generic-di",
"binary_version": "5.3.0-76.72"
},
{
"binary_name": "firewire-core-modules-5.3.0-76-generic-di",
"binary_version": "5.3.0-76.72"
},
{
"binary_name": "floppy-modules-5.3.0-76-generic-di",
"binary_version": "5.3.0-76.72"
},
{
"binary_name": "fs-core-modules-5.3.0-76-generic-di",
"binary_version": "5.3.0-76.72"
},
{
"binary_name": "fs-secondary-modules-5.3.0-76-generic-di",
"binary_version": "5.3.0-76.72"
},
{
"binary_name": "input-modules-5.3.0-76-generic-di",
"binary_version": "5.3.0-76.72"
},
{
"binary_name": "ipmi-modules-5.3.0-76-generic-di",
"binary_version": "5.3.0-76.72"
},
{
"binary_name": "kernel-image-5.3.0-76-generic-di",
"binary_version": "5.3.0-76.72"
},
{
"binary_name": "linux-buildinfo-5.3.0-76-generic",
"binary_version": "5.3.0-76.72"
},
{
"binary_name": "linux-buildinfo-5.3.0-76-lowlatency",
"binary_version": "5.3.0-76.72"
},
{
"binary_name": "linux-cloud-tools-5.3.0-76-generic",
"binary_version": "5.3.0-76.72"
},
{
"binary_name": "linux-cloud-tools-5.3.0-76-lowlatency",
"binary_version": "5.3.0-76.72"
},
{
"binary_name": "linux-headers-5.3.0-76-generic",
"binary_version": "5.3.0-76.72"
},
{
"binary_name": "linux-headers-5.3.0-76-lowlatency",
"binary_version": "5.3.0-76.72"
},
{
"binary_name": "linux-hwe-cloud-tools-5.3.0-76",
"binary_version": "5.3.0-76.72"
},
{
"binary_name": "linux-hwe-headers-5.3.0-76",
"binary_version": "5.3.0-76.72"
},
{
"binary_name": "linux-hwe-tools-5.3.0-76",
"binary_version": "5.3.0-76.72"
},
{
"binary_name": "linux-hwe-udebs-generic",
"binary_version": "5.3.0-76.72"
},
{
"binary_name": "linux-image-5.3.0-76-generic",
"binary_version": "5.3.0-76.72"
},
{
"binary_name": "linux-image-5.3.0-76-lowlatency",
"binary_version": "5.3.0-76.72"
},
{
"binary_name": "linux-image-unsigned-5.3.0-76-generic",
"binary_version": "5.3.0-76.72"
},
{
"binary_name": "linux-image-unsigned-5.3.0-76-lowlatency",
"binary_version": "5.3.0-76.72"
},
{
"binary_name": "linux-modules-5.3.0-76-generic",
"binary_version": "5.3.0-76.72"
},
{
"binary_name": "linux-modules-5.3.0-76-lowlatency",
"binary_version": "5.3.0-76.72"
},
{
"binary_name": "linux-modules-extra-5.3.0-76-generic",
"binary_version": "5.3.0-76.72"
},
{
"binary_name": "linux-source-5.3.0",
"binary_version": "5.3.0-76.72"
},
{
"binary_name": "linux-tools-5.3.0-76-generic",
"binary_version": "5.3.0-76.72"
},
{
"binary_name": "linux-tools-5.3.0-76-lowlatency",
"binary_version": "5.3.0-76.72"
},
{
"binary_name": "md-modules-5.3.0-76-generic-di",
"binary_version": "5.3.0-76.72"
},
{
"binary_name": "message-modules-5.3.0-76-generic-di",
"binary_version": "5.3.0-76.72"
},
{
"binary_name": "mouse-modules-5.3.0-76-generic-di",
"binary_version": "5.3.0-76.72"
},
{
"binary_name": "multipath-modules-5.3.0-76-generic-di",
"binary_version": "5.3.0-76.72"
},
{
"binary_name": "nfs-modules-5.3.0-76-generic-di",
"binary_version": "5.3.0-76.72"
},
{
"binary_name": "nic-modules-5.3.0-76-generic-di",
"binary_version": "5.3.0-76.72"
},
{
"binary_name": "nic-pcmcia-modules-5.3.0-76-generic-di",
"binary_version": "5.3.0-76.72"
},
{
"binary_name": "nic-shared-modules-5.3.0-76-generic-di",
"binary_version": "5.3.0-76.72"
},
{
"binary_name": "nic-usb-modules-5.3.0-76-generic-di",
"binary_version": "5.3.0-76.72"
},
{
"binary_name": "parport-modules-5.3.0-76-generic-di",
"binary_version": "5.3.0-76.72"
},
{
"binary_name": "pata-modules-5.3.0-76-generic-di",
"binary_version": "5.3.0-76.72"
},
{
"binary_name": "pcmcia-modules-5.3.0-76-generic-di",
"binary_version": "5.3.0-76.72"
},
{
"binary_name": "pcmcia-storage-modules-5.3.0-76-generic-di",
"binary_version": "5.3.0-76.72"
},
{
"binary_name": "plip-modules-5.3.0-76-generic-di",
"binary_version": "5.3.0-76.72"
},
{
"binary_name": "ppp-modules-5.3.0-76-generic-di",
"binary_version": "5.3.0-76.72"
},
{
"binary_name": "sata-modules-5.3.0-76-generic-di",
"binary_version": "5.3.0-76.72"
},
{
"binary_name": "scsi-modules-5.3.0-76-generic-di",
"binary_version": "5.3.0-76.72"
},
{
"binary_name": "serial-modules-5.3.0-76-generic-di",
"binary_version": "5.3.0-76.72"
},
{
"binary_name": "storage-core-modules-5.3.0-76-generic-di",
"binary_version": "5.3.0-76.72"
},
{
"binary_name": "usb-modules-5.3.0-76-generic-di",
"binary_version": "5.3.0-76.72"
},
{
"binary_name": "virtio-modules-5.3.0-76-generic-di",
"binary_version": "5.3.0-76.72"
},
{
"binary_name": "vlan-modules-5.3.0-76-generic-di",
"binary_version": "5.3.0-76.72"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:18.04:LTS",
"name": "linux-hwe",
"purl": "pkg:deb/ubuntu/linux-hwe@5.3.0-76.72?arch=source\u0026distro=bionic"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"4.18.0-13.14~18.04.1",
"4.18.0-14.15~18.04.1",
"4.18.0-15.16~18.04.1",
"4.18.0-16.17~18.04.1",
"4.18.0-17.18~18.04.1",
"4.18.0-18.19~18.04.1",
"4.18.0-20.21~18.04.1",
"4.18.0-21.22~18.04.1",
"4.18.0-22.23~18.04.1",
"4.18.0-24.25~18.04.1",
"4.18.0-25.26~18.04.1",
"5.0.0-23.24~18.04.1",
"5.0.0-25.26~18.04.1",
"5.0.0-27.28~18.04.1",
"5.0.0-29.31~18.04.1",
"5.0.0-31.33~18.04.1",
"5.0.0-32.34~18.04.2",
"5.0.0-35.38~18.04.1",
"5.0.0-36.39~18.04.1",
"5.0.0-37.40~18.04.1",
"5.3.0-26.28~18.04.1",
"5.3.0-28.30~18.04.1",
"5.3.0-40.32~18.04.1",
"5.3.0-42.34~18.04.1",
"5.3.0-45.37~18.04.1",
"5.3.0-46.38~18.04.1",
"5.3.0-51.44~18.04.2",
"5.3.0-53.47~18.04.1",
"5.3.0-59.53~18.04.1",
"5.3.0-61.55~18.04.1",
"5.3.0-62.56~18.04.1",
"5.3.0-64.58~18.04.1",
"5.3.0-65.59",
"5.3.0-66.60",
"5.3.0-67.61",
"5.3.0-68.63",
"5.3.0-69.65",
"5.3.0-70.66",
"5.3.0-72.68",
"5.3.0-73.69",
"5.3.0-74.70",
"5.3.0-75.71",
"5.3.0-76.72"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "block-modules-5.3.0-24-generic-di",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "block-modules-5.3.0-24-generic-lpae-di",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "crypto-modules-5.3.0-24-generic-di",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "crypto-modules-5.3.0-24-generic-lpae-di",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "dasd-extra-modules-5.3.0-24-generic-di",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "dasd-modules-5.3.0-24-generic-di",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "fat-modules-5.3.0-24-generic-di",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "fat-modules-5.3.0-24-generic-lpae-di",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "fb-modules-5.3.0-24-generic-di",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "firewire-core-modules-5.3.0-24-generic-di",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "floppy-modules-5.3.0-24-generic-di",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "fs-core-modules-5.3.0-24-generic-di",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "fs-core-modules-5.3.0-24-generic-lpae-di",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "fs-secondary-modules-5.3.0-24-generic-di",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "fs-secondary-modules-5.3.0-24-generic-lpae-di",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "input-modules-5.3.0-24-generic-di",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "input-modules-5.3.0-24-generic-lpae-di",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "ipmi-modules-5.3.0-24-generic-di",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "ipmi-modules-5.3.0-24-generic-lpae-di",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "kernel-image-5.3.0-24-generic-di",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "kernel-image-5.3.0-24-generic-lpae-di",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "linux-buildinfo-5.3.0-24-generic",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "linux-buildinfo-5.3.0-24-generic-lpae",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "linux-buildinfo-5.3.0-24-lowlatency",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "linux-cloud-tools-5.3.0-24-generic",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "linux-cloud-tools-5.3.0-24-lowlatency",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "linux-headers-5.3.0-24",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "linux-headers-5.3.0-24-generic",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "linux-headers-5.3.0-24-generic-lpae",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "linux-headers-5.3.0-24-lowlatency",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "linux-hwe-edge-cloud-tools-5.3.0-24",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "linux-hwe-edge-tools-5.3.0-24",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "linux-hwe-edge-udebs-generic",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "linux-hwe-edge-udebs-generic-lpae",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "linux-image-5.3.0-24-generic",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "linux-image-5.3.0-24-generic-lpae",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "linux-image-5.3.0-24-lowlatency",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "linux-image-unsigned-5.3.0-24-generic",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "linux-image-unsigned-5.3.0-24-lowlatency",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "linux-modules-5.3.0-24-generic",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "linux-modules-5.3.0-24-generic-lpae",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "linux-modules-5.3.0-24-lowlatency",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "linux-modules-extra-5.3.0-24-generic",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "linux-source-5.3.0",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "linux-tools-5.3.0-24-generic",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "linux-tools-5.3.0-24-generic-lpae",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "linux-tools-5.3.0-24-lowlatency",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "md-modules-5.3.0-24-generic-di",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "md-modules-5.3.0-24-generic-lpae-di",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "message-modules-5.3.0-24-generic-di",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "mouse-modules-5.3.0-24-generic-di",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "mouse-modules-5.3.0-24-generic-lpae-di",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "multipath-modules-5.3.0-24-generic-di",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "multipath-modules-5.3.0-24-generic-lpae-di",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "nfs-modules-5.3.0-24-generic-di",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "nfs-modules-5.3.0-24-generic-lpae-di",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "nic-modules-5.3.0-24-generic-di",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "nic-modules-5.3.0-24-generic-lpae-di",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "nic-pcmcia-modules-5.3.0-24-generic-di",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "nic-shared-modules-5.3.0-24-generic-di",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "nic-shared-modules-5.3.0-24-generic-lpae-di",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "nic-usb-modules-5.3.0-24-generic-di",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "nic-usb-modules-5.3.0-24-generic-lpae-di",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "parport-modules-5.3.0-24-generic-di",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "parport-modules-5.3.0-24-generic-lpae-di",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "pata-modules-5.3.0-24-generic-di",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "pcmcia-modules-5.3.0-24-generic-di",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "pcmcia-storage-modules-5.3.0-24-generic-di",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "plip-modules-5.3.0-24-generic-di",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "plip-modules-5.3.0-24-generic-lpae-di",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "ppp-modules-5.3.0-24-generic-di",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "ppp-modules-5.3.0-24-generic-lpae-di",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "sata-modules-5.3.0-24-generic-di",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "sata-modules-5.3.0-24-generic-lpae-di",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "scsi-modules-5.3.0-24-generic-di",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "scsi-modules-5.3.0-24-generic-lpae-di",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "serial-modules-5.3.0-24-generic-di",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "storage-core-modules-5.3.0-24-generic-di",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "storage-core-modules-5.3.0-24-generic-lpae-di",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "usb-modules-5.3.0-24-generic-di",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "usb-modules-5.3.0-24-generic-lpae-di",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "virtio-modules-5.3.0-24-generic-di",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "vlan-modules-5.3.0-24-generic-di",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "vlan-modules-5.3.0-24-generic-lpae-di",
"binary_version": "5.3.0-24.26~18.04.2"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:18.04:LTS",
"name": "linux-hwe-edge",
"purl": "pkg:deb/ubuntu/linux-hwe-edge@5.3.0-24.26~18.04.2?arch=source\u0026distro=bionic"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.0.0-15.16~18.04.1",
"5.0.0-16.17~18.04.1",
"5.0.0-17.18~18.04.1",
"5.0.0-19.20~18.04.1",
"5.0.0-20.21~18.04.1",
"5.3.0-19.20~18.04.2",
"5.3.0-22.24~18.04.1",
"5.3.0-23.25~18.04.1",
"5.3.0-23.25~18.04.2",
"5.3.0-24.26~18.04.2"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "block-modules-4.15.0-1103-oem-di",
"binary_version": "4.15.0-1103.114"
},
{
"binary_name": "crypto-modules-4.15.0-1103-oem-di",
"binary_version": "4.15.0-1103.114"
},
{
"binary_name": "fat-modules-4.15.0-1103-oem-di",
"binary_version": "4.15.0-1103.114"
},
{
"binary_name": "fb-modules-4.15.0-1103-oem-di",
"binary_version": "4.15.0-1103.114"
},
{
"binary_name": "firewire-core-modules-4.15.0-1103-oem-di",
"binary_version": "4.15.0-1103.114"
},
{
"binary_name": "floppy-modules-4.15.0-1103-oem-di",
"binary_version": "4.15.0-1103.114"
},
{
"binary_name": "fs-core-modules-4.15.0-1103-oem-di",
"binary_version": "4.15.0-1103.114"
},
{
"binary_name": "fs-secondary-modules-4.15.0-1103-oem-di",
"binary_version": "4.15.0-1103.114"
},
{
"binary_name": "input-modules-4.15.0-1103-oem-di",
"binary_version": "4.15.0-1103.114"
},
{
"binary_name": "ipmi-modules-4.15.0-1103-oem-di",
"binary_version": "4.15.0-1103.114"
},
{
"binary_name": "irda-modules-4.15.0-1103-oem-di",
"binary_version": "4.15.0-1103.114"
},
{
"binary_name": "kernel-image-4.15.0-1103-oem-di",
"binary_version": "4.15.0-1103.114"
},
{
"binary_name": "linux-buildinfo-4.15.0-1103-oem",
"binary_version": "4.15.0-1103.114"
},
{
"binary_name": "linux-headers-4.15.0-1103-oem",
"binary_version": "4.15.0-1103.114"
},
{
"binary_name": "linux-image-unsigned-4.15.0-1103-oem",
"binary_version": "4.15.0-1103.114"
},
{
"binary_name": "linux-modules-4.15.0-1103-oem",
"binary_version": "4.15.0-1103.114"
},
{
"binary_name": "linux-oem-headers-4.15.0-1103",
"binary_version": "4.15.0-1103.114"
},
{
"binary_name": "linux-oem-tools-4.15.0-1103",
"binary_version": "4.15.0-1103.114"
},
{
"binary_name": "linux-tools-4.15.0-1103-oem",
"binary_version": "4.15.0-1103.114"
},
{
"binary_name": "linux-udebs-oem",
"binary_version": "4.15.0-1103.114"
},
{
"binary_name": "md-modules-4.15.0-1103-oem-di",
"binary_version": "4.15.0-1103.114"
},
{
"binary_name": "message-modules-4.15.0-1103-oem-di",
"binary_version": "4.15.0-1103.114"
},
{
"binary_name": "mouse-modules-4.15.0-1103-oem-di",
"binary_version": "4.15.0-1103.114"
},
{
"binary_name": "multipath-modules-4.15.0-1103-oem-di",
"binary_version": "4.15.0-1103.114"
},
{
"binary_name": "nfs-modules-4.15.0-1103-oem-di",
"binary_version": "4.15.0-1103.114"
},
{
"binary_name": "nic-modules-4.15.0-1103-oem-di",
"binary_version": "4.15.0-1103.114"
},
{
"binary_name": "nic-pcmcia-modules-4.15.0-1103-oem-di",
"binary_version": "4.15.0-1103.114"
},
{
"binary_name": "nic-shared-modules-4.15.0-1103-oem-di",
"binary_version": "4.15.0-1103.114"
},
{
"binary_name": "nic-usb-modules-4.15.0-1103-oem-di",
"binary_version": "4.15.0-1103.114"
},
{
"binary_name": "parport-modules-4.15.0-1103-oem-di",
"binary_version": "4.15.0-1103.114"
},
{
"binary_name": "pata-modules-4.15.0-1103-oem-di",
"binary_version": "4.15.0-1103.114"
},
{
"binary_name": "pcmcia-modules-4.15.0-1103-oem-di",
"binary_version": "4.15.0-1103.114"
},
{
"binary_name": "pcmcia-storage-modules-4.15.0-1103-oem-di",
"binary_version": "4.15.0-1103.114"
},
{
"binary_name": "plip-modules-4.15.0-1103-oem-di",
"binary_version": "4.15.0-1103.114"
},
{
"binary_name": "ppp-modules-4.15.0-1103-oem-di",
"binary_version": "4.15.0-1103.114"
},
{
"binary_name": "sata-modules-4.15.0-1103-oem-di",
"binary_version": "4.15.0-1103.114"
},
{
"binary_name": "scsi-modules-4.15.0-1103-oem-di",
"binary_version": "4.15.0-1103.114"
},
{
"binary_name": "serial-modules-4.15.0-1103-oem-di",
"binary_version": "4.15.0-1103.114"
},
{
"binary_name": "storage-core-modules-4.15.0-1103-oem-di",
"binary_version": "4.15.0-1103.114"
},
{
"binary_name": "usb-modules-4.15.0-1103-oem-di",
"binary_version": "4.15.0-1103.114"
},
{
"binary_name": "virtio-modules-4.15.0-1103-oem-di",
"binary_version": "4.15.0-1103.114"
},
{
"binary_name": "vlan-modules-4.15.0-1103-oem-di",
"binary_version": "4.15.0-1103.114"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:18.04:LTS",
"name": "linux-oem",
"purl": "pkg:deb/ubuntu/linux-oem@4.15.0-1103.114?arch=source\u0026distro=bionic"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"4.15.0-1002.3",
"4.15.0-1004.5",
"4.15.0-1006.9",
"4.15.0-1008.11",
"4.15.0-1009.12",
"4.15.0-1012.15",
"4.15.0-1013.16",
"4.15.0-1015.18",
"4.15.0-1017.20",
"4.15.0-1018.21",
"4.15.0-1021.24",
"4.15.0-1024.29",
"4.15.0-1026.31",
"4.15.0-1028.33",
"4.15.0-1030.35",
"4.15.0-1033.38",
"4.15.0-1034.39",
"4.15.0-1035.40",
"4.15.0-1036.41",
"4.15.0-1038.43",
"4.15.0-1039.44",
"4.15.0-1043.48",
"4.15.0-1045.50",
"4.15.0-1050.57",
"4.15.0-1056.65",
"4.15.0-1057.66",
"4.15.0-1059.68",
"4.15.0-1063.72",
"4.15.0-1064.73",
"4.15.0-1065.75",
"4.15.0-1066.76",
"4.15.0-1067.77",
"4.15.0-1069.79",
"4.15.0-1073.83",
"4.15.0-1076.86",
"4.15.0-1079.89",
"4.15.0-1080.90",
"4.15.0-1081.91",
"4.15.0-1087.97",
"4.15.0-1090.100",
"4.15.0-1091.101",
"4.15.0-1093.103",
"4.15.0-1094.104",
"4.15.0-1096.106",
"4.15.0-1097.107",
"4.15.0-1099.109",
"4.15.0-1100.110",
"4.15.0-1101.112",
"4.15.0-1102.113",
"4.15.0-1103.114"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-buildinfo-5.0.0-1014-oracle",
"binary_version": "5.0.0-1014.19"
},
{
"binary_name": "linux-headers-5.0.0-1014-oracle",
"binary_version": "5.0.0-1014.19"
},
{
"binary_name": "linux-image-unsigned-5.0.0-1014-oracle",
"binary_version": "5.0.0-1014.19"
},
{
"binary_name": "linux-modules-5.0.0-1014-oracle",
"binary_version": "5.0.0-1014.19"
},
{
"binary_name": "linux-modules-extra-5.0.0-1014-oracle",
"binary_version": "5.0.0-1014.19"
},
{
"binary_name": "linux-oracle-5.0-headers-5.0.0-1014",
"binary_version": "5.0.0-1014.19"
},
{
"binary_name": "linux-oracle-5.0-tools-5.0.0-1014",
"binary_version": "5.0.0-1014.19"
},
{
"binary_name": "linux-tools-5.0.0-1014-oracle",
"binary_version": "5.0.0-1014.19"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:18.04:LTS",
"name": "linux-oracle-5.0",
"purl": "pkg:deb/ubuntu/linux-oracle-5.0@5.0.0-1014.19?arch=source\u0026distro=bionic"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.0.0-1007.12~18.04.1",
"5.0.0-1008.13~18.04.1",
"5.0.0-1009.14~18.04.1",
"5.0.0-1010.15~18.04.1",
"5.0.0-1011.16",
"5.0.0-1013.18",
"5.0.0-1014.19"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-buildinfo-5.3.0-1030-oracle",
"binary_version": "5.3.0-1030.32~18.04.1"
},
{
"binary_name": "linux-headers-5.3.0-1030-oracle",
"binary_version": "5.3.0-1030.32~18.04.1"
},
{
"binary_name": "linux-image-unsigned-5.3.0-1030-oracle",
"binary_version": "5.3.0-1030.32~18.04.1"
},
{
"binary_name": "linux-modules-5.3.0-1030-oracle",
"binary_version": "5.3.0-1030.32~18.04.1"
},
{
"binary_name": "linux-modules-extra-5.3.0-1030-oracle",
"binary_version": "5.3.0-1030.32~18.04.1"
},
{
"binary_name": "linux-oracle-5.3-headers-5.3.0-1030",
"binary_version": "5.3.0-1030.32~18.04.1"
},
{
"binary_name": "linux-oracle-5.3-tools-5.3.0-1030",
"binary_version": "5.3.0-1030.32~18.04.1"
},
{
"binary_name": "linux-tools-5.3.0-1030-oracle",
"binary_version": "5.3.0-1030.32~18.04.1"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:18.04:LTS",
"name": "linux-oracle-5.3",
"purl": "pkg:deb/ubuntu/linux-oracle-5.3@5.3.0-1030.32~18.04.1?arch=source\u0026distro=bionic"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.3.0-1011.12~18.04.1",
"5.3.0-1013.14~18.04.1",
"5.3.0-1014.15~18.04.1",
"5.3.0-1016.18~18.04.1",
"5.3.0-1018.20~18.04.1",
"5.3.0-1024.26~18.04.1",
"5.3.0-1027.29~18.04.1",
"5.3.0-1028.30~18.04.1",
"5.3.0-1030.32~18.04.1"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-aws-5.11-cloud-tools-5.11.0-1028",
"binary_version": "5.11.0-1028.31~20.04.1"
},
{
"binary_name": "linux-aws-5.11-headers-5.11.0-1028",
"binary_version": "5.11.0-1028.31~20.04.1"
},
{
"binary_name": "linux-aws-5.11-tools-5.11.0-1028",
"binary_version": "5.11.0-1028.31~20.04.1"
},
{
"binary_name": "linux-buildinfo-5.11.0-1028-aws",
"binary_version": "5.11.0-1028.31~20.04.1"
},
{
"binary_name": "linux-cloud-tools-5.11.0-1028-aws",
"binary_version": "5.11.0-1028.31~20.04.1"
},
{
"binary_name": "linux-headers-5.11.0-1028-aws",
"binary_version": "5.11.0-1028.31~20.04.1"
},
{
"binary_name": "linux-image-unsigned-5.11.0-1028-aws",
"binary_version": "5.11.0-1028.31~20.04.1"
},
{
"binary_name": "linux-modules-5.11.0-1028-aws",
"binary_version": "5.11.0-1028.31~20.04.1"
},
{
"binary_name": "linux-modules-extra-5.11.0-1028-aws",
"binary_version": "5.11.0-1028.31~20.04.1"
},
{
"binary_name": "linux-tools-5.11.0-1028-aws",
"binary_version": "5.11.0-1028.31~20.04.1"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:20.04:LTS",
"name": "linux-aws-5.11",
"purl": "pkg:deb/ubuntu/linux-aws-5.11@5.11.0-1028.31~20.04.1?arch=source\u0026distro=focal"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.11.0-1009.9~20.04.2",
"5.11.0-1014.15~20.04.1",
"5.11.0-1016.17~20.04.1",
"5.11.0-1017.18~20.04.1",
"5.11.0-1019.20~20.04.1",
"5.11.0-1020.21~20.04.2",
"5.11.0-1021.22~20.04.2",
"5.11.0-1022.23~20.04.1",
"5.11.0-1023.24~20.04.1",
"5.11.0-1025.27~20.04.1",
"5.11.0-1027.30~20.04.1",
"5.11.0-1028.31~20.04.1"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-aws-5.13-cloud-tools-5.13.0-1031",
"binary_version": "5.13.0-1031.35~20.04.1"
},
{
"binary_name": "linux-aws-5.13-headers-5.13.0-1031",
"binary_version": "5.13.0-1031.35~20.04.1"
},
{
"binary_name": "linux-aws-5.13-tools-5.13.0-1031",
"binary_version": "5.13.0-1031.35~20.04.1"
},
{
"binary_name": "linux-buildinfo-5.13.0-1031-aws",
"binary_version": "5.13.0-1031.35~20.04.1"
},
{
"binary_name": "linux-cloud-tools-5.13.0-1031-aws",
"binary_version": "5.13.0-1031.35~20.04.1"
},
{
"binary_name": "linux-headers-5.13.0-1031-aws",
"binary_version": "5.13.0-1031.35~20.04.1"
},
{
"binary_name": "linux-image-unsigned-5.13.0-1031-aws",
"binary_version": "5.13.0-1031.35~20.04.1"
},
{
"binary_name": "linux-modules-5.13.0-1031-aws",
"binary_version": "5.13.0-1031.35~20.04.1"
},
{
"binary_name": "linux-modules-extra-5.13.0-1031-aws",
"binary_version": "5.13.0-1031.35~20.04.1"
},
{
"binary_name": "linux-tools-5.13.0-1031-aws",
"binary_version": "5.13.0-1031.35~20.04.1"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:20.04:LTS",
"name": "linux-aws-5.13",
"purl": "pkg:deb/ubuntu/linux-aws-5.13@5.13.0-1031.35~20.04.1?arch=source\u0026distro=focal"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.13.0-1008.9~20.04.2",
"5.13.0-1011.12~20.04.1",
"5.13.0-1012.13~20.04.1",
"5.13.0-1014.15~20.04.1",
"5.13.0-1017.19~20.04.1",
"5.13.0-1019.21~20.04.1",
"5.13.0-1021.23~20.04.2",
"5.13.0-1022.24~20.04.1",
"5.13.0-1023.25~20.04.1",
"5.13.0-1025.27~20.04.1",
"5.13.0-1028.31~20.04.1",
"5.13.0-1029.32~20.04.1",
"5.13.0-1031.35~20.04.1"
]
},
{
"ecosystem_specific": {
"availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
"binaries": [
{
"binary_name": "linux-aws-5.15-cloud-tools-5.15.0-1086",
"binary_version": "5.15.0-1086.93~20.04.1"
},
{
"binary_name": "linux-aws-5.15-headers-5.15.0-1086",
"binary_version": "5.15.0-1086.93~20.04.1"
},
{
"binary_name": "linux-aws-5.15-tools-5.15.0-1086",
"binary_version": "5.15.0-1086.93~20.04.1"
},
{
"binary_name": "linux-buildinfo-5.15.0-1086-aws",
"binary_version": "5.15.0-1086.93~20.04.1"
},
{
"binary_name": "linux-cloud-tools-5.15.0-1086-aws",
"binary_version": "5.15.0-1086.93~20.04.1"
},
{
"binary_name": "linux-headers-5.15.0-1086-aws",
"binary_version": "5.15.0-1086.93~20.04.1"
},
{
"binary_name": "linux-image-unsigned-5.15.0-1086-aws",
"binary_version": "5.15.0-1086.93~20.04.1"
},
{
"binary_name": "linux-modules-5.15.0-1086-aws",
"binary_version": "5.15.0-1086.93~20.04.1"
},
{
"binary_name": "linux-modules-extra-5.15.0-1086-aws",
"binary_version": "5.15.0-1086.93~20.04.1"
},
{
"binary_name": "linux-tools-5.15.0-1086-aws",
"binary_version": "5.15.0-1086.93~20.04.1"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:Pro:20.04:LTS",
"name": "linux-aws-5.15",
"purl": "pkg:deb/ubuntu/linux-aws-5.15@5.15.0-1086.93~20.04.1?arch=source\u0026distro=esm-infra/focal"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "5.15.0-1086.93~20.04.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.15.0-1014.18~20.04.1",
"5.15.0-1015.19~20.04.1",
"5.15.0-1017.21~20.04.1",
"5.15.0-1019.23~20.04.1",
"5.15.0-1020.24~20.04.1",
"5.15.0-1021.25~20.04.1",
"5.15.0-1022.26~20.04.1",
"5.15.0-1023.27~20.04.1",
"5.15.0-1026.30~20.04.2",
"5.15.0-1027.31~20.04.1",
"5.15.0-1028.32~20.04.1",
"5.15.0-1030.34~20.04.1",
"5.15.0-1031.35~20.04.1",
"5.15.0-1033.37~20.04.1",
"5.15.0-1034.38~20.04.1",
"5.15.0-1035.39~20.04.1",
"5.15.0-1036.40~20.04.1",
"5.15.0-1037.41~20.04.1",
"5.15.0-1038.43~20.04.1",
"5.15.0-1039.44~20.04.1",
"5.15.0-1040.45~20.04.1",
"5.15.0-1041.46~20.04.1",
"5.15.0-1043.48~20.04.1",
"5.15.0-1044.49~20.04.1",
"5.15.0-1045.50~20.04.1",
"5.15.0-1047.52~20.04.1",
"5.15.0-1048.53~20.04.1",
"5.15.0-1049.54~20.04.1",
"5.15.0-1050.55~20.04.1",
"5.15.0-1051.56~20.04.1",
"5.15.0-1052.57~20.04.1",
"5.15.0-1053.58~20.04.1",
"5.15.0-1055.60~20.04.1",
"5.15.0-1056.61~20.04.1",
"5.15.0-1057.63~20.04.1",
"5.15.0-1058.64~20.04.1",
"5.15.0-1061.67~20.04.1",
"5.15.0-1062.68~20.04.1",
"5.15.0-1063.69~20.04.1",
"5.15.0-1064.70~20.04.1",
"5.15.0-1065.71~20.04.1",
"5.15.0-1066.72~20.04.1",
"5.15.0-1067.73~20.04.1",
"5.15.0-1068.74~20.04.1",
"5.15.0-1069.75~20.04.1",
"5.15.0-1070.76~20.04.1",
"5.15.0-1071.77~20.04.1",
"5.15.0-1072.78~20.04.1",
"5.15.0-1073.79~20.04.1",
"5.15.0-1075.82~20.04.1",
"5.15.0-1077.84~20.04.1",
"5.15.0-1080.87~20.04.1",
"5.15.0-1081.88~20.04.1",
"5.15.0-1082.89~20.04.1",
"5.15.0-1083.90~20.04.1",
"5.15.0-1084.91~20.04.1"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-aws-5.8-cloud-tools-5.8.0-1042",
"binary_version": "5.8.0-1042.44~20.04.1"
},
{
"binary_name": "linux-aws-5.8-headers-5.8.0-1042",
"binary_version": "5.8.0-1042.44~20.04.1"
},
{
"binary_name": "linux-aws-5.8-tools-5.8.0-1042",
"binary_version": "5.8.0-1042.44~20.04.1"
},
{
"binary_name": "linux-buildinfo-5.8.0-1042-aws",
"binary_version": "5.8.0-1042.44~20.04.1"
},
{
"binary_name": "linux-cloud-tools-5.8.0-1042-aws",
"binary_version": "5.8.0-1042.44~20.04.1"
},
{
"binary_name": "linux-headers-5.8.0-1042-aws",
"binary_version": "5.8.0-1042.44~20.04.1"
},
{
"binary_name": "linux-image-5.8.0-1042-aws",
"binary_version": "5.8.0-1042.44~20.04.1"
},
{
"binary_name": "linux-modules-5.8.0-1042-aws",
"binary_version": "5.8.0-1042.44~20.04.1"
},
{
"binary_name": "linux-modules-extra-5.8.0-1042-aws",
"binary_version": "5.8.0-1042.44~20.04.1"
},
{
"binary_name": "linux-tools-5.8.0-1042-aws",
"binary_version": "5.8.0-1042.44~20.04.1"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:20.04:LTS",
"name": "linux-aws-5.8",
"purl": "pkg:deb/ubuntu/linux-aws-5.8@5.8.0-1042.44~20.04.1?arch=source\u0026distro=focal"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.8.0-1035.37~20.04.1",
"5.8.0-1038.40~20.04.1",
"5.8.0-1041.43~20.04.1",
"5.8.0-1042.44~20.04.1"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-azure-5.11-cloud-tools-5.11.0-1028",
"binary_version": "5.11.0-1028.31~20.04.2"
},
{
"binary_name": "linux-azure-5.11-headers-5.11.0-1028",
"binary_version": "5.11.0-1028.31~20.04.2"
},
{
"binary_name": "linux-azure-5.11-tools-5.11.0-1028",
"binary_version": "5.11.0-1028.31~20.04.2"
},
{
"binary_name": "linux-buildinfo-5.11.0-1028-azure",
"binary_version": "5.11.0-1028.31~20.04.2"
},
{
"binary_name": "linux-cloud-tools-5.11.0-1028-azure",
"binary_version": "5.11.0-1028.31~20.04.2"
},
{
"binary_name": "linux-headers-5.11.0-1028-azure",
"binary_version": "5.11.0-1028.31~20.04.2"
},
{
"binary_name": "linux-image-unsigned-5.11.0-1028-azure",
"binary_version": "5.11.0-1028.31~20.04.2"
},
{
"binary_name": "linux-modules-5.11.0-1028-azure",
"binary_version": "5.11.0-1028.31~20.04.2"
},
{
"binary_name": "linux-modules-extra-5.11.0-1028-azure",
"binary_version": "5.11.0-1028.31~20.04.2"
},
{
"binary_name": "linux-tools-5.11.0-1028-azure",
"binary_version": "5.11.0-1028.31~20.04.2"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:20.04:LTS",
"name": "linux-azure-5.11",
"purl": "pkg:deb/ubuntu/linux-azure-5.11@5.11.0-1028.31~20.04.2?arch=source\u0026distro=focal"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.11.0-1007.7~20.04.2",
"5.11.0-1012.13~20.04.1",
"5.11.0-1013.14~20.04.1",
"5.11.0-1015.16~20.04.1",
"5.11.0-1017.18~20.04.1",
"5.11.0-1019.20~20.04.1",
"5.11.0-1020.21~20.04.1",
"5.11.0-1021.22~20.04.1",
"5.11.0-1022.23~20.04.1",
"5.11.0-1023.24~20.04.1",
"5.11.0-1025.27~20.04.1",
"5.11.0-1027.30~20.04.1",
"5.11.0-1028.31~20.04.2"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-azure-5.13-cloud-tools-5.13.0-1031",
"binary_version": "5.13.0-1031.37~20.04.1"
},
{
"binary_name": "linux-azure-5.13-headers-5.13.0-1031",
"binary_version": "5.13.0-1031.37~20.04.1"
},
{
"binary_name": "linux-azure-5.13-tools-5.13.0-1031",
"binary_version": "5.13.0-1031.37~20.04.1"
},
{
"binary_name": "linux-buildinfo-5.13.0-1031-azure",
"binary_version": "5.13.0-1031.37~20.04.1"
},
{
"binary_name": "linux-cloud-tools-5.13.0-1031-azure",
"binary_version": "5.13.0-1031.37~20.04.1"
},
{
"binary_name": "linux-headers-5.13.0-1031-azure",
"binary_version": "5.13.0-1031.37~20.04.1"
},
{
"binary_name": "linux-image-unsigned-5.13.0-1031-azure",
"binary_version": "5.13.0-1031.37~20.04.1"
},
{
"binary_name": "linux-modules-5.13.0-1031-azure",
"binary_version": "5.13.0-1031.37~20.04.1"
},
{
"binary_name": "linux-modules-extra-5.13.0-1031-azure",
"binary_version": "5.13.0-1031.37~20.04.1"
},
{
"binary_name": "linux-tools-5.13.0-1031-azure",
"binary_version": "5.13.0-1031.37~20.04.1"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:20.04:LTS",
"name": "linux-azure-5.13",
"purl": "pkg:deb/ubuntu/linux-azure-5.13@5.13.0-1031.37~20.04.1?arch=source\u0026distro=focal"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.13.0-1009.10~20.04.2",
"5.13.0-1012.14~20.04.1",
"5.13.0-1013.15~20.04.1",
"5.13.0-1014.16~20.04.1",
"5.13.0-1017.19~20.04.1",
"5.13.0-1021.24~20.04.1",
"5.13.0-1022.26~20.04.1",
"5.13.0-1023.27~20.04.1",
"5.13.0-1025.29~20.04.1",
"5.13.0-1028.33~20.04.1",
"5.13.0-1029.34~20.04.1",
"5.13.0-1031.37~20.04.1"
]
},
{
"ecosystem_specific": {
"availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
"binaries": [
{
"binary_name": "linux-azure-5.15-cloud-tools-5.15.0-1091",
"binary_version": "5.15.0-1091.100~20.04.1"
},
{
"binary_name": "linux-azure-5.15-headers-5.15.0-1091",
"binary_version": "5.15.0-1091.100~20.04.1"
},
{
"binary_name": "linux-azure-5.15-tools-5.15.0-1091",
"binary_version": "5.15.0-1091.100~20.04.1"
},
{
"binary_name": "linux-buildinfo-5.15.0-1091-azure",
"binary_version": "5.15.0-1091.100~20.04.1"
},
{
"binary_name": "linux-cloud-tools-5.15.0-1091-azure",
"binary_version": "5.15.0-1091.100~20.04.1"
},
{
"binary_name": "linux-headers-5.15.0-1091-azure",
"binary_version": "5.15.0-1091.100~20.04.1"
},
{
"binary_name": "linux-image-unsigned-5.15.0-1091-azure",
"binary_version": "5.15.0-1091.100~20.04.1"
},
{
"binary_name": "linux-modules-5.15.0-1091-azure",
"binary_version": "5.15.0-1091.100~20.04.1"
},
{
"binary_name": "linux-modules-extra-5.15.0-1091-azure",
"binary_version": "5.15.0-1091.100~20.04.1"
},
{
"binary_name": "linux-modules-involflt-5.15.0-1091-azure",
"binary_version": "5.15.0-1091.100~20.04.1"
},
{
"binary_name": "linux-tools-5.15.0-1091-azure",
"binary_version": "5.15.0-1091.100~20.04.1"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:Pro:20.04:LTS",
"name": "linux-azure-5.15",
"purl": "pkg:deb/ubuntu/linux-azure-5.15@5.15.0-1091.100~20.04.1?arch=source\u0026distro=esm-infra/focal"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "5.15.0-1091.100~20.04.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.15.0-1007.8~20.04.1",
"5.15.0-1008.9~20.04.1",
"5.15.0-1013.16~20.04.1",
"5.15.0-1014.17~20.04.1",
"5.15.0-1017.20~20.04.1",
"5.15.0-1019.24~20.04.1",
"5.15.0-1020.25~20.04.1",
"5.15.0-1021.26~20.04.1",
"5.15.0-1022.27~20.04.1",
"5.15.0-1023.29~20.04.1",
"5.15.0-1029.36~20.04.1",
"5.15.0-1030.37~20.04.1",
"5.15.0-1031.38~20.04.1",
"5.15.0-1033.40~20.04.1",
"5.15.0-1034.41~20.04.1",
"5.15.0-1035.42~20.04.1",
"5.15.0-1036.43~20.04.1",
"5.15.0-1037.44~20.04.1",
"5.15.0-1038.45~20.04.1",
"5.15.0-1039.46~20.04.1",
"5.15.0-1040.47~20.04.1",
"5.15.0-1041.48~20.04.1",
"5.15.0-1042.49~20.04.1",
"5.15.0-1043.50~20.04.1",
"5.15.0-1045.52~20.04.1",
"5.15.0-1046.53~20.04.1",
"5.15.0-1047.54~20.04.1",
"5.15.0-1049.56~20.04.1",
"5.15.0-1050.57~20.04.1",
"5.15.0-1051.59~20.04.1",
"5.15.0-1052.60~20.04.1",
"5.15.0-1053.61~20.04.1",
"5.15.0-1054.62~20.04.1",
"5.15.0-1056.64~20.04.1",
"5.15.0-1057.65~20.04.1",
"5.15.0-1058.66~20.04.2",
"5.15.0-1059.67~20.04.1",
"5.15.0-1060.69~20.04.1",
"5.15.0-1061.70~20.04.1",
"5.15.0-1063.72~20.04.1",
"5.15.0-1064.73~20.04.1",
"5.15.0-1065.74~20.04.1",
"5.15.0-1067.76~20.04.1",
"5.15.0-1068.77~20.04.1",
"5.15.0-1070.79~20.04.1",
"5.15.0-1071.80~20.04.1",
"5.15.0-1072.81~20.04.1",
"5.15.0-1073.82~20.04.1",
"5.15.0-1074.83~20.04.1",
"5.15.0-1075.84~20.04.1",
"5.15.0-1078.87~20.04.1",
"5.15.0-1079.88~20.04.1",
"5.15.0-1081.90~20.04.1",
"5.15.0-1082.91~20.04.1",
"5.15.0-1086.95~20.04.1",
"5.15.0-1087.96~20.04.1",
"5.15.0-1088.97~20.04.1",
"5.15.0-1089.98~20.04.1"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-azure-5.8-cloud-tools-5.8.0-1043",
"binary_version": "5.8.0-1043.46~20.04.1"
},
{
"binary_name": "linux-azure-5.8-headers-5.8.0-1043",
"binary_version": "5.8.0-1043.46~20.04.1"
},
{
"binary_name": "linux-azure-5.8-tools-5.8.0-1043",
"binary_version": "5.8.0-1043.46~20.04.1"
},
{
"binary_name": "linux-buildinfo-5.8.0-1043-azure",
"binary_version": "5.8.0-1043.46~20.04.1"
},
{
"binary_name": "linux-cloud-tools-5.8.0-1043-azure",
"binary_version": "5.8.0-1043.46~20.04.1"
},
{
"binary_name": "linux-headers-5.8.0-1043-azure",
"binary_version": "5.8.0-1043.46~20.04.1"
},
{
"binary_name": "linux-image-unsigned-5.8.0-1043-azure",
"binary_version": "5.8.0-1043.46~20.04.1"
},
{
"binary_name": "linux-modules-5.8.0-1043-azure",
"binary_version": "5.8.0-1043.46~20.04.1"
},
{
"binary_name": "linux-modules-extra-5.8.0-1043-azure",
"binary_version": "5.8.0-1043.46~20.04.1"
},
{
"binary_name": "linux-tools-5.8.0-1043-azure",
"binary_version": "5.8.0-1043.46~20.04.1"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:20.04:LTS",
"name": "linux-azure-5.8",
"purl": "pkg:deb/ubuntu/linux-azure-5.8@5.8.0-1043.46~20.04.1?arch=source\u0026distro=focal"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.8.0-1033.35~20.04.1",
"5.8.0-1036.38~20.04.1",
"5.8.0-1039.42~20.04.1",
"5.8.0-1040.43~20.04.1",
"5.8.0-1041.44~20.04.1",
"5.8.0-1042.45~20.04.1",
"5.8.0-1043.46~20.04.1"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-image-unsigned-5.4.0-1103-azure-fde",
"binary_version": "5.4.0-1103.109+cvm1.1"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:20.04:LTS",
"name": "linux-azure-fde",
"purl": "pkg:deb/ubuntu/linux-azure-fde@5.4.0-1103.109+cvm1.1?arch=source\u0026distro=focal"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.4.0-1063.66+cvm2.2",
"5.4.0-1063.66+cvm3.2",
"5.4.0-1064.67+cvm1.1",
"5.4.0-1065.68+cvm2.1",
"5.4.0-1067.70+cvm1.1",
"5.4.0-1068.71+cvm1.1",
"5.4.0-1069.72+cvm1.1",
"5.4.0-1070.73+cvm1.1",
"5.4.0-1072.75+cvm1.1",
"5.4.0-1073.76+cvm1.1",
"5.4.0-1074.77+cvm1.1",
"5.4.0-1076.79+cvm1.1",
"5.4.0-1078.81+cvm1.1",
"5.4.0-1080.83+cvm1.1",
"5.4.0-1083.87+cvm1.1",
"5.4.0-1085.90+cvm1.1",
"5.4.0-1085.90+cvm2.1",
"5.4.0-1086.91+cvm1.1",
"5.4.0-1089.94+cvm1.2",
"5.4.0-1090.95+cvm1.1",
"5.4.0-1091.96+cvm1.1",
"5.4.0-1092.97+cvm1.1",
"5.4.0-1095.101+cvm1.1",
"5.4.0-1098.104+cvm1.1",
"5.4.0-1100.106+cvm1.1",
"5.4.0-1103.109+cvm1.1"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-buildinfo-5.11.0-1029-gcp",
"binary_version": "5.11.0-1029.33~20.04.3"
},
{
"binary_name": "linux-gcp-5.11-headers-5.11.0-1029",
"binary_version": "5.11.0-1029.33~20.04.3"
},
{
"binary_name": "linux-gcp-5.11-tools-5.11.0-1029",
"binary_version": "5.11.0-1029.33~20.04.3"
},
{
"binary_name": "linux-headers-5.11.0-1029-gcp",
"binary_version": "5.11.0-1029.33~20.04.3"
},
{
"binary_name": "linux-image-unsigned-5.11.0-1029-gcp",
"binary_version": "5.11.0-1029.33~20.04.3"
},
{
"binary_name": "linux-modules-5.11.0-1029-gcp",
"binary_version": "5.11.0-1029.33~20.04.3"
},
{
"binary_name": "linux-modules-extra-5.11.0-1029-gcp",
"binary_version": "5.11.0-1029.33~20.04.3"
},
{
"binary_name": "linux-tools-5.11.0-1029-gcp",
"binary_version": "5.11.0-1029.33~20.04.3"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:20.04:LTS",
"name": "linux-gcp-5.11",
"purl": "pkg:deb/ubuntu/linux-gcp-5.11@5.11.0-1029.33~20.04.3?arch=source\u0026distro=focal"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.11.0-1009.10~20.04.1",
"5.11.0-1014.16~20.04.1",
"5.11.0-1017.19~20.04.1",
"5.11.0-1018.20~20.04.2",
"5.11.0-1020.22~20.04.1",
"5.11.0-1021.23~20.04.1",
"5.11.0-1022.24~20.04.1",
"5.11.0-1023.25~20.04.1",
"5.11.0-1024.26~20.04.1",
"5.11.0-1026.29~20.04.1",
"5.11.0-1028.32~20.04.1",
"5.11.0-1029.33~20.04.3"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-buildinfo-5.13.0-1033-gcp",
"binary_version": "5.13.0-1033.40~20.04.1"
},
{
"binary_name": "linux-gcp-5.13-headers-5.13.0-1033",
"binary_version": "5.13.0-1033.40~20.04.1"
},
{
"binary_name": "linux-gcp-5.13-tools-5.13.0-1033",
"binary_version": "5.13.0-1033.40~20.04.1"
},
{
"binary_name": "linux-headers-5.13.0-1033-gcp",
"binary_version": "5.13.0-1033.40~20.04.1"
},
{
"binary_name": "linux-image-unsigned-5.13.0-1033-gcp",
"binary_version": "5.13.0-1033.40~20.04.1"
},
{
"binary_name": "linux-modules-5.13.0-1033-gcp",
"binary_version": "5.13.0-1033.40~20.04.1"
},
{
"binary_name": "linux-modules-extra-5.13.0-1033-gcp",
"binary_version": "5.13.0-1033.40~20.04.1"
},
{
"binary_name": "linux-tools-5.13.0-1033-gcp",
"binary_version": "5.13.0-1033.40~20.04.1"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:20.04:LTS",
"name": "linux-gcp-5.13",
"purl": "pkg:deb/ubuntu/linux-gcp-5.13@5.13.0-1033.40~20.04.1?arch=source\u0026distro=focal"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.13.0-1008.9~20.04.3",
"5.13.0-1012.15~20.04.1",
"5.13.0-1013.16~20.04.1",
"5.13.0-1015.18~20.04.1",
"5.13.0-1019.23~20.04.1",
"5.13.0-1021.25~20.04.1",
"5.13.0-1023.28~20.04.1",
"5.13.0-1024.29~20.04.1",
"5.13.0-1025.30~20.04.1",
"5.13.0-1027.32~20.04.1",
"5.13.0-1030.36~20.04.1",
"5.13.0-1031.37~20.04.1",
"5.13.0-1033.40~20.04.1"
]
},
{
"ecosystem_specific": {
"availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
"binaries": [
{
"binary_name": "linux-buildinfo-5.15.0-1085-gcp",
"binary_version": "5.15.0-1085.94~20.04.1"
},
{
"binary_name": "linux-gcp-5.15-headers-5.15.0-1085",
"binary_version": "5.15.0-1085.94~20.04.1"
},
{
"binary_name": "linux-gcp-5.15-tools-5.15.0-1085",
"binary_version": "5.15.0-1085.94~20.04.1"
},
{
"binary_name": "linux-headers-5.15.0-1085-gcp",
"binary_version": "5.15.0-1085.94~20.04.1"
},
{
"binary_name": "linux-image-unsigned-5.15.0-1085-gcp",
"binary_version": "5.15.0-1085.94~20.04.1"
},
{
"binary_name": "linux-modules-5.15.0-1085-gcp",
"binary_version": "5.15.0-1085.94~20.04.1"
},
{
"binary_name": "linux-modules-extra-5.15.0-1085-gcp",
"binary_version": "5.15.0-1085.94~20.04.1"
},
{
"binary_name": "linux-modules-iwlwifi-5.15.0-1085-gcp",
"binary_version": "5.15.0-1085.94~20.04.1"
},
{
"binary_name": "linux-tools-5.15.0-1085-gcp",
"binary_version": "5.15.0-1085.94~20.04.1"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:Pro:20.04:LTS",
"name": "linux-gcp-5.15",
"purl": "pkg:deb/ubuntu/linux-gcp-5.15@5.15.0-1085.94~20.04.1?arch=source\u0026distro=esm-infra/focal"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "5.15.0-1085.94~20.04.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.15.0-1006.9~20.04.1",
"5.15.0-1012.17~20.04.1",
"5.15.0-1013.18~20.04.1",
"5.15.0-1016.21~20.04.1",
"5.15.0-1017.23~20.04.2",
"5.15.0-1018.24~20.04.1",
"5.15.0-1021.28~20.04.1",
"5.15.0-1022.29~20.04.1",
"5.15.0-1025.32~20.04.2",
"5.15.0-1026.33~20.04.1",
"5.15.0-1027.34~20.04.1",
"5.15.0-1029.36~20.04.1",
"5.15.0-1030.37~20.04.1",
"5.15.0-1031.38~20.04.1",
"5.15.0-1032.40~20.04.1",
"5.15.0-1033.41~20.04.1",
"5.15.0-1034.42~20.04.1",
"5.15.0-1035.43~20.04.1",
"5.15.0-1036.44~20.04.1",
"5.15.0-1037.45~20.04.1",
"5.15.0-1038.46~20.04.1",
"5.15.0-1039.47~20.04.1",
"5.15.0-1040.48~20.04.1",
"5.15.0-1041.49~20.04.1",
"5.15.0-1042.50~20.04.1",
"5.15.0-1044.52~20.04.1",
"5.15.0-1045.53~20.04.2",
"5.15.0-1046.54~20.04.1",
"5.15.0-1047.55~20.04.1",
"5.15.0-1048.56~20.04.1",
"5.15.0-1049.57~20.04.1",
"5.15.0-1051.59~20.04.1",
"5.15.0-1052.60~20.04.1",
"5.15.0-1053.61~20.04.1",
"5.15.0-1054.62~20.04.1",
"5.15.0-1055.63~20.04.1",
"5.15.0-1058.66~20.04.1",
"5.15.0-1059.67~20.04.1",
"5.15.0-1060.68~20.04.1",
"5.15.0-1062.70~20.04.1",
"5.15.0-1065.73~20.04.1",
"5.15.0-1066.74~20.04.1",
"5.15.0-1067.75~20.04.1",
"5.15.0-1068.76~20.04.1",
"5.15.0-1069.77~20.04.1",
"5.15.0-1070.78~20.04.1",
"5.15.0-1071.79~20.04.1",
"5.15.0-1072.80~20.04.1",
"5.15.0-1073.81~20.04.1",
"5.15.0-1074.83~20.04.1",
"5.15.0-1075.84~20.04.1",
"5.15.0-1077.86~20.04.1",
"5.15.0-1078.87~20.04.1",
"5.15.0-1081.90~20.04.1",
"5.15.0-1083.92~20.04.1"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-buildinfo-5.8.0-1039-gcp",
"binary_version": "5.8.0-1039.41"
},
{
"binary_name": "linux-gcp-5.8-headers-5.8.0-1039",
"binary_version": "5.8.0-1039.41"
},
{
"binary_name": "linux-gcp-5.8-tools-5.8.0-1039",
"binary_version": "5.8.0-1039.41"
},
{
"binary_name": "linux-headers-5.8.0-1039-gcp",
"binary_version": "5.8.0-1039.41"
},
{
"binary_name": "linux-image-unsigned-5.8.0-1039-gcp",
"binary_version": "5.8.0-1039.41"
},
{
"binary_name": "linux-modules-5.8.0-1039-gcp",
"binary_version": "5.8.0-1039.41"
},
{
"binary_name": "linux-modules-extra-5.8.0-1039-gcp",
"binary_version": "5.8.0-1039.41"
},
{
"binary_name": "linux-tools-5.8.0-1039-gcp",
"binary_version": "5.8.0-1039.41"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:20.04:LTS",
"name": "linux-gcp-5.8",
"purl": "pkg:deb/ubuntu/linux-gcp-5.8@5.8.0-1039.41?arch=source\u0026distro=focal"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.8.0-1032.34~20.04.1",
"5.8.0-1035.37~20.04.1",
"5.8.0-1038.40~20.04.1",
"5.8.0-1039.41"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-buildinfo-5.4.0-1105-gke",
"binary_version": "5.4.0-1105.112"
},
{
"binary_name": "linux-gke-headers-5.4.0-1105",
"binary_version": "5.4.0-1105.112"
},
{
"binary_name": "linux-gke-tools-5.4.0-1105",
"binary_version": "5.4.0-1105.112"
},
{
"binary_name": "linux-headers-5.4.0-1105-gke",
"binary_version": "5.4.0-1105.112"
},
{
"binary_name": "linux-image-unsigned-5.4.0-1105-gke",
"binary_version": "5.4.0-1105.112"
},
{
"binary_name": "linux-modules-5.4.0-1105-gke",
"binary_version": "5.4.0-1105.112"
},
{
"binary_name": "linux-modules-extra-5.4.0-1105-gke",
"binary_version": "5.4.0-1105.112"
},
{
"binary_name": "linux-tools-5.4.0-1105-gke",
"binary_version": "5.4.0-1105.112"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:20.04:LTS",
"name": "linux-gke",
"purl": "pkg:deb/ubuntu/linux-gke@5.4.0-1105.112?arch=source\u0026distro=focal"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.4.0-1033.35",
"5.4.0-1035.37",
"5.4.0-1036.38",
"5.4.0-1037.39",
"5.4.0-1039.41",
"5.4.0-1041.43",
"5.4.0-1042.44",
"5.4.0-1043.45",
"5.4.0-1044.46",
"5.4.0-1046.48",
"5.4.0-1049.52",
"5.4.0-1051.54",
"5.4.0-1052.55",
"5.4.0-1053.56",
"5.4.0-1054.57",
"5.4.0-1055.58",
"5.4.0-1056.59",
"5.4.0-1057.60",
"5.4.0-1059.62",
"5.4.0-1061.64",
"5.4.0-1062.65",
"5.4.0-1063.66",
"5.4.0-1065.68",
"5.4.0-1066.69",
"5.4.0-1067.70",
"5.4.0-1068.71",
"5.4.0-1071.76",
"5.4.0-1072.77",
"5.4.0-1074.79",
"5.4.0-1076.82",
"5.4.0-1078.84",
"5.4.0-1080.86",
"5.4.0-1081.87",
"5.4.0-1083.89",
"5.4.0-1084.90",
"5.4.0-1086.93",
"5.4.0-1087.94",
"5.4.0-1090.97",
"5.4.0-1091.98",
"5.4.0-1094.101",
"5.4.0-1095.102",
"5.4.0-1096.103",
"5.4.0-1097.104",
"5.4.0-1098.105",
"5.4.0-1099.106",
"5.4.0-1100.107",
"5.4.0-1101.108",
"5.4.0-1102.109",
"5.4.0-1103.110",
"5.4.0-1104.111",
"5.4.0-1105.112"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-buildinfo-5.15.0-1039-gke",
"binary_version": "5.15.0-1039.44~20.04.1"
},
{
"binary_name": "linux-gke-5.15-headers-5.15.0-1039",
"binary_version": "5.15.0-1039.44~20.04.1"
},
{
"binary_name": "linux-gke-5.15-tools-5.15.0-1039",
"binary_version": "5.15.0-1039.44~20.04.1"
},
{
"binary_name": "linux-headers-5.15.0-1039-gke",
"binary_version": "5.15.0-1039.44~20.04.1"
},
{
"binary_name": "linux-image-unsigned-5.15.0-1039-gke",
"binary_version": "5.15.0-1039.44~20.04.1"
},
{
"binary_name": "linux-modules-5.15.0-1039-gke",
"binary_version": "5.15.0-1039.44~20.04.1"
},
{
"binary_name": "linux-modules-extra-5.15.0-1039-gke",
"binary_version": "5.15.0-1039.44~20.04.1"
},
{
"binary_name": "linux-modules-iwlwifi-5.15.0-1039-gke",
"binary_version": "5.15.0-1039.44~20.04.1"
},
{
"binary_name": "linux-tools-5.15.0-1039-gke",
"binary_version": "5.15.0-1039.44~20.04.1"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:20.04:LTS",
"name": "linux-gke-5.15",
"purl": "pkg:deb/ubuntu/linux-gke-5.15@5.15.0-1039.44~20.04.1?arch=source\u0026distro=focal"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.15.0-1011.14~20.04.1",
"5.15.0-1014.17~20.04.1",
"5.15.0-1015.18~20.04.1",
"5.15.0-1016.19~20.04.1",
"5.15.0-1019.23~20.04.1",
"5.15.0-1020.25~20.04.1",
"5.15.0-1023.28~20.04.2",
"5.15.0-1027.32~20.04.1",
"5.15.0-1028.33~20.04.1",
"5.15.0-1029.34~20.04.1",
"5.15.0-1031.36~20.04.1",
"5.15.0-1032.37~20.04.1",
"5.15.0-1033.38~20.04.1",
"5.15.0-1034.39~20.04.1",
"5.15.0-1036.41~20.04.1",
"5.15.0-1037.42~20.04.1",
"5.15.0-1038.43~20.04.1",
"5.15.0-1039.44~20.04.1"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-buildinfo-5.4.0-1102-gkeop",
"binary_version": "5.4.0-1102.106"
},
{
"binary_name": "linux-cloud-tools-5.4.0-1102-gkeop",
"binary_version": "5.4.0-1102.106"
},
{
"binary_name": "linux-gkeop-cloud-tools-5.4.0-1102",
"binary_version": "5.4.0-1102.106"
},
{
"binary_name": "linux-gkeop-headers-5.4.0-1102",
"binary_version": "5.4.0-1102.106"
},
{
"binary_name": "linux-gkeop-source-5.4.0",
"binary_version": "5.4.0-1102.106"
},
{
"binary_name": "linux-gkeop-tools-5.4.0-1102",
"binary_version": "5.4.0-1102.106"
},
{
"binary_name": "linux-headers-5.4.0-1102-gkeop",
"binary_version": "5.4.0-1102.106"
},
{
"binary_name": "linux-image-unsigned-5.4.0-1102-gkeop",
"binary_version": "5.4.0-1102.106"
},
{
"binary_name": "linux-modules-5.4.0-1102-gkeop",
"binary_version": "5.4.0-1102.106"
},
{
"binary_name": "linux-modules-extra-5.4.0-1102-gkeop",
"binary_version": "5.4.0-1102.106"
},
{
"binary_name": "linux-tools-5.4.0-1102-gkeop",
"binary_version": "5.4.0-1102.106"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:20.04:LTS",
"name": "linux-gkeop",
"purl": "pkg:deb/ubuntu/linux-gkeop@5.4.0-1102.106?arch=source\u0026distro=focal"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.4.0-1008.9",
"5.4.0-1009.10",
"5.4.0-1010.11",
"5.4.0-1011.12",
"5.4.0-1012.13",
"5.4.0-1013.14",
"5.4.0-1014.15",
"5.4.0-1015.16",
"5.4.0-1016.17",
"5.4.0-1018.19",
"5.4.0-1021.22",
"5.4.0-1022.23",
"5.4.0-1023.24",
"5.4.0-1024.25",
"5.4.0-1025.26",
"5.4.0-1026.27",
"5.4.0-1027.28",
"5.4.0-1029.30",
"5.4.0-1031.32",
"5.4.0-1032.33",
"5.4.0-1033.34",
"5.4.0-1034.35",
"5.4.0-1036.37",
"5.4.0-1037.38",
"5.4.0-1038.39",
"5.4.0-1039.40",
"5.4.0-1040.41",
"5.4.0-1043.44",
"5.4.0-1046.48",
"5.4.0-1048.51",
"5.4.0-1049.52",
"5.4.0-1051.54",
"5.4.0-1052.55",
"5.4.0-1053.56",
"5.4.0-1054.57",
"5.4.0-1056.60",
"5.4.0-1057.61",
"5.4.0-1060.64",
"5.4.0-1061.65",
"5.4.0-1062.66",
"5.4.0-1064.68",
"5.4.0-1065.69",
"5.4.0-1066.70",
"5.4.0-1067.71",
"5.4.0-1068.72",
"5.4.0-1069.73",
"5.4.0-1070.74",
"5.4.0-1071.75",
"5.4.0-1072.76",
"5.4.0-1073.77",
"5.4.0-1074.78",
"5.4.0-1075.79",
"5.4.0-1076.80",
"5.4.0-1077.81",
"5.4.0-1078.82",
"5.4.0-1079.83",
"5.4.0-1080.84",
"5.4.0-1081.85",
"5.4.0-1083.87",
"5.4.0-1084.88",
"5.4.0-1085.89",
"5.4.0-1086.90",
"5.4.0-1087.91",
"5.4.0-1088.92",
"5.4.0-1089.93",
"5.4.0-1090.94",
"5.4.0-1091.95",
"5.4.0-1092.96",
"5.4.0-1093.97",
"5.4.0-1094.98",
"5.4.0-1095.99",
"5.4.0-1096.100",
"5.4.0-1097.101",
"5.4.0-1098.102",
"5.4.0-1099.103",
"5.4.0-1100.104",
"5.4.0-1101.105",
"5.4.0-1102.106"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-buildinfo-5.15.0-1055-gkeop",
"binary_version": "5.15.0-1055.62~20.04.1"
},
{
"binary_name": "linux-cloud-tools-5.15.0-1055-gkeop",
"binary_version": "5.15.0-1055.62~20.04.1"
},
{
"binary_name": "linux-gkeop-5.15-cloud-tools-5.15.0-1055",
"binary_version": "5.15.0-1055.62~20.04.1"
},
{
"binary_name": "linux-gkeop-5.15-headers-5.15.0-1055",
"binary_version": "5.15.0-1055.62~20.04.1"
},
{
"binary_name": "linux-gkeop-5.15-tools-5.15.0-1055",
"binary_version": "5.15.0-1055.62~20.04.1"
},
{
"binary_name": "linux-headers-5.15.0-1055-gkeop",
"binary_version": "5.15.0-1055.62~20.04.1"
},
{
"binary_name": "linux-image-unsigned-5.15.0-1055-gkeop",
"binary_version": "5.15.0-1055.62~20.04.1"
},
{
"binary_name": "linux-modules-5.15.0-1055-gkeop",
"binary_version": "5.15.0-1055.62~20.04.1"
},
{
"binary_name": "linux-modules-extra-5.15.0-1055-gkeop",
"binary_version": "5.15.0-1055.62~20.04.1"
},
{
"binary_name": "linux-tools-5.15.0-1055-gkeop",
"binary_version": "5.15.0-1055.62~20.04.1"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:20.04:LTS",
"name": "linux-gkeop-5.15",
"purl": "pkg:deb/ubuntu/linux-gkeop-5.15@5.15.0-1055.62~20.04.1?arch=source\u0026distro=focal"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.15.0-1003.5~20.04.2",
"5.15.0-1005.7~20.04.1",
"5.15.0-1007.10~20.04.1",
"5.15.0-1008.12~20.04.1",
"5.15.0-1011.15~20.04.2",
"5.15.0-1012.16~20.04.1",
"5.15.0-1013.17~20.04.1",
"5.15.0-1015.19~20.04.1",
"5.15.0-1016.21~20.04.1",
"5.15.0-1017.22~20.04.1",
"5.15.0-1018.23~20.04.1",
"5.15.0-1019.24~20.04.1",
"5.15.0-1020.25~20.04.1",
"5.15.0-1021.26~20.04.1",
"5.15.0-1022.27~20.04.1",
"5.15.0-1023.28~20.04.1",
"5.15.0-1024.29~20.04.1",
"5.15.0-1025.30~20.04.1",
"5.15.0-1026.31~20.04.1",
"5.15.0-1027.32~20.04.1",
"5.15.0-1028.33~20.04.1",
"5.15.0-1030.35~20.04.1",
"5.15.0-1031.37~20.04.1",
"5.15.0-1032.38~20.04.1",
"5.15.0-1033.39~20.04.1",
"5.15.0-1034.40~20.04.1",
"5.15.0-1035.41~20.04.1",
"5.15.0-1036.42~20.04.1",
"5.15.0-1037.43~20.04.1",
"5.15.0-1038.44~20.04.1",
"5.15.0-1039.45~20.04.1",
"5.15.0-1040.46~20.04.1",
"5.15.0-1043.50~20.04.1",
"5.15.0-1044.51~20.04.1",
"5.15.0-1045.52~20.04.1",
"5.15.0-1046.53~20.04.1",
"5.15.0-1047.54~20.04.1",
"5.15.0-1048.55~20.04.1",
"5.15.0-1049.56~20.04.1",
"5.15.0-1050.57~20.04.1",
"5.15.0-1051.58~20.04.1",
"5.15.0-1052.59~20.04.1",
"5.15.0-1053.60~20.04.1",
"5.15.0-1054.61~20.04.1",
"5.15.0-1055.62~20.04.1"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "block-modules-5.11.0-46-generic-64k-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "block-modules-5.11.0-46-generic-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "block-modules-5.11.0-46-generic-lpae-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "crypto-modules-5.11.0-46-generic-64k-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "crypto-modules-5.11.0-46-generic-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "crypto-modules-5.11.0-46-generic-lpae-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "dasd-extra-modules-5.11.0-46-generic-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "dasd-modules-5.11.0-46-generic-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "fat-modules-5.11.0-46-generic-64k-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "fat-modules-5.11.0-46-generic-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "fat-modules-5.11.0-46-generic-lpae-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "fb-modules-5.11.0-46-generic-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "firewire-core-modules-5.11.0-46-generic-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "floppy-modules-5.11.0-46-generic-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "fs-core-modules-5.11.0-46-generic-64k-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "fs-core-modules-5.11.0-46-generic-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "fs-core-modules-5.11.0-46-generic-lpae-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "fs-secondary-modules-5.11.0-46-generic-64k-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "fs-secondary-modules-5.11.0-46-generic-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "fs-secondary-modules-5.11.0-46-generic-lpae-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "input-modules-5.11.0-46-generic-64k-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "input-modules-5.11.0-46-generic-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "input-modules-5.11.0-46-generic-lpae-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "ipmi-modules-5.11.0-46-generic-64k-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "ipmi-modules-5.11.0-46-generic-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "ipmi-modules-5.11.0-46-generic-lpae-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "kernel-image-5.11.0-46-generic-64k-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "kernel-image-5.11.0-46-generic-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "kernel-image-5.11.0-46-generic-lpae-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "linux-buildinfo-5.11.0-46-generic",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "linux-buildinfo-5.11.0-46-generic-64k",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "linux-buildinfo-5.11.0-46-generic-lpae",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "linux-buildinfo-5.11.0-46-lowlatency",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "linux-cloud-tools-5.11.0-46-generic",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "linux-cloud-tools-5.11.0-46-lowlatency",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "linux-headers-5.11.0-46-generic",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "linux-headers-5.11.0-46-generic-64k",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "linux-headers-5.11.0-46-generic-lpae",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "linux-headers-5.11.0-46-lowlatency",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "linux-hwe-5.11-cloud-tools-5.11.0-46",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "linux-hwe-5.11-cloud-tools-common",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "linux-hwe-5.11-headers-5.11.0-46",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "linux-hwe-5.11-source-5.11.0",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "linux-hwe-5.11-tools-5.11.0-46",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "linux-hwe-5.11-tools-common",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "linux-hwe-5.11-tools-host",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "linux-hwe-5.11-udebs-generic",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "linux-hwe-5.11-udebs-generic-64k",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "linux-hwe-5.11-udebs-generic-lpae",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "linux-image-5.11.0-46-generic",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "linux-image-5.11.0-46-generic-lpae",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "linux-image-unsigned-5.11.0-46-generic",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "linux-image-unsigned-5.11.0-46-generic-64k",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "linux-image-unsigned-5.11.0-46-lowlatency",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "linux-modules-5.11.0-46-generic",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "linux-modules-5.11.0-46-generic-64k",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "linux-modules-5.11.0-46-generic-lpae",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "linux-modules-5.11.0-46-lowlatency",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "linux-modules-extra-5.11.0-46-generic",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "linux-tools-5.11.0-46-generic",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "linux-tools-5.11.0-46-generic-64k",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "linux-tools-5.11.0-46-generic-lpae",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "linux-tools-5.11.0-46-lowlatency",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "md-modules-5.11.0-46-generic-64k-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "md-modules-5.11.0-46-generic-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "md-modules-5.11.0-46-generic-lpae-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "message-modules-5.11.0-46-generic-64k-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "message-modules-5.11.0-46-generic-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "mouse-modules-5.11.0-46-generic-64k-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "mouse-modules-5.11.0-46-generic-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "mouse-modules-5.11.0-46-generic-lpae-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "multipath-modules-5.11.0-46-generic-64k-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "multipath-modules-5.11.0-46-generic-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "multipath-modules-5.11.0-46-generic-lpae-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "nfs-modules-5.11.0-46-generic-64k-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "nfs-modules-5.11.0-46-generic-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "nfs-modules-5.11.0-46-generic-lpae-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "nic-modules-5.11.0-46-generic-64k-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "nic-modules-5.11.0-46-generic-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "nic-modules-5.11.0-46-generic-lpae-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "nic-pcmcia-modules-5.11.0-46-generic-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "nic-shared-modules-5.11.0-46-generic-64k-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "nic-shared-modules-5.11.0-46-generic-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "nic-shared-modules-5.11.0-46-generic-lpae-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "nic-usb-modules-5.11.0-46-generic-64k-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "nic-usb-modules-5.11.0-46-generic-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "nic-usb-modules-5.11.0-46-generic-lpae-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "parport-modules-5.11.0-46-generic-64k-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "parport-modules-5.11.0-46-generic-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "parport-modules-5.11.0-46-generic-lpae-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "pata-modules-5.11.0-46-generic-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "pcmcia-modules-5.11.0-46-generic-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "pcmcia-storage-modules-5.11.0-46-generic-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "plip-modules-5.11.0-46-generic-64k-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "plip-modules-5.11.0-46-generic-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "plip-modules-5.11.0-46-generic-lpae-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "ppp-modules-5.11.0-46-generic-64k-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "ppp-modules-5.11.0-46-generic-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "ppp-modules-5.11.0-46-generic-lpae-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "sata-modules-5.11.0-46-generic-64k-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "sata-modules-5.11.0-46-generic-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "sata-modules-5.11.0-46-generic-lpae-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "scsi-modules-5.11.0-46-generic-64k-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "scsi-modules-5.11.0-46-generic-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "scsi-modules-5.11.0-46-generic-lpae-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "serial-modules-5.11.0-46-generic-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "storage-core-modules-5.11.0-46-generic-64k-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "storage-core-modules-5.11.0-46-generic-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "storage-core-modules-5.11.0-46-generic-lpae-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "usb-modules-5.11.0-46-generic-64k-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "usb-modules-5.11.0-46-generic-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "usb-modules-5.11.0-46-generic-lpae-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "virtio-modules-5.11.0-46-generic-64k-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "virtio-modules-5.11.0-46-generic-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "vlan-modules-5.11.0-46-generic-64k-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "vlan-modules-5.11.0-46-generic-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "vlan-modules-5.11.0-46-generic-lpae-di",
"binary_version": "5.11.0-46.51~20.04.1"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:20.04:LTS",
"name": "linux-hwe-5.11",
"purl": "pkg:deb/ubuntu/linux-hwe-5.11@5.11.0-46.51~20.04.1?arch=source\u0026distro=focal"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.11.0-22.23~20.04.1",
"5.11.0-25.27~20.04.1",
"5.11.0-27.29~20.04.1",
"5.11.0-34.36~20.04.1",
"5.11.0-36.40~20.04.1",
"5.11.0-37.41~20.04.2",
"5.11.0-38.42~20.04.1",
"5.11.0-40.44~20.04.2",
"5.11.0-41.45~20.04.1",
"5.11.0-43.47~20.04.2",
"5.11.0-44.48~20.04.2",
"5.11.0-46.51~20.04.1"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "block-modules-5.13.0-52-generic-64k-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "block-modules-5.13.0-52-generic-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "block-modules-5.13.0-52-generic-lpae-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "crypto-modules-5.13.0-52-generic-64k-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "crypto-modules-5.13.0-52-generic-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "crypto-modules-5.13.0-52-generic-lpae-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "dasd-extra-modules-5.13.0-52-generic-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "dasd-modules-5.13.0-52-generic-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "fat-modules-5.13.0-52-generic-64k-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "fat-modules-5.13.0-52-generic-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "fat-modules-5.13.0-52-generic-lpae-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "fb-modules-5.13.0-52-generic-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "firewire-core-modules-5.13.0-52-generic-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "floppy-modules-5.13.0-52-generic-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "fs-core-modules-5.13.0-52-generic-64k-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "fs-core-modules-5.13.0-52-generic-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "fs-core-modules-5.13.0-52-generic-lpae-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "fs-secondary-modules-5.13.0-52-generic-64k-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "fs-secondary-modules-5.13.0-52-generic-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "fs-secondary-modules-5.13.0-52-generic-lpae-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "input-modules-5.13.0-52-generic-64k-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "input-modules-5.13.0-52-generic-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "input-modules-5.13.0-52-generic-lpae-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "ipmi-modules-5.13.0-52-generic-64k-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "ipmi-modules-5.13.0-52-generic-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "ipmi-modules-5.13.0-52-generic-lpae-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "kernel-image-5.13.0-52-generic-64k-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "kernel-image-5.13.0-52-generic-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "kernel-image-5.13.0-52-generic-lpae-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "linux-buildinfo-5.13.0-52-generic",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "linux-buildinfo-5.13.0-52-generic-64k",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "linux-buildinfo-5.13.0-52-generic-lpae",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "linux-buildinfo-5.13.0-52-lowlatency",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "linux-cloud-tools-5.13.0-52-generic",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "linux-cloud-tools-5.13.0-52-lowlatency",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "linux-headers-5.13.0-52-generic",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "linux-headers-5.13.0-52-generic-64k",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "linux-headers-5.13.0-52-generic-lpae",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "linux-headers-5.13.0-52-lowlatency",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "linux-hwe-5.13-cloud-tools-5.13.0-52",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "linux-hwe-5.13-cloud-tools-common",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "linux-hwe-5.13-headers-5.13.0-52",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "linux-hwe-5.13-source-5.13.0",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "linux-hwe-5.13-tools-5.13.0-52",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "linux-hwe-5.13-tools-common",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "linux-hwe-5.13-tools-host",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "linux-hwe-5.13-udebs-generic",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "linux-hwe-5.13-udebs-generic-64k",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "linux-hwe-5.13-udebs-generic-lpae",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "linux-image-5.13.0-52-generic",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "linux-image-5.13.0-52-generic-lpae",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "linux-image-unsigned-5.13.0-52-generic",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "linux-image-unsigned-5.13.0-52-generic-64k",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "linux-image-unsigned-5.13.0-52-lowlatency",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "linux-modules-5.13.0-52-generic",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "linux-modules-5.13.0-52-generic-64k",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "linux-modules-5.13.0-52-generic-lpae",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "linux-modules-5.13.0-52-lowlatency",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "linux-modules-extra-5.13.0-52-generic",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "linux-tools-5.13.0-52-generic",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "linux-tools-5.13.0-52-generic-64k",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "linux-tools-5.13.0-52-generic-lpae",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "linux-tools-5.13.0-52-lowlatency",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "md-modules-5.13.0-52-generic-64k-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "md-modules-5.13.0-52-generic-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "md-modules-5.13.0-52-generic-lpae-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "message-modules-5.13.0-52-generic-64k-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "message-modules-5.13.0-52-generic-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "mouse-modules-5.13.0-52-generic-64k-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "mouse-modules-5.13.0-52-generic-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "mouse-modules-5.13.0-52-generic-lpae-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "multipath-modules-5.13.0-52-generic-64k-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "multipath-modules-5.13.0-52-generic-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "multipath-modules-5.13.0-52-generic-lpae-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "nfs-modules-5.13.0-52-generic-64k-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "nfs-modules-5.13.0-52-generic-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "nfs-modules-5.13.0-52-generic-lpae-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "nic-modules-5.13.0-52-generic-64k-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "nic-modules-5.13.0-52-generic-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "nic-modules-5.13.0-52-generic-lpae-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "nic-pcmcia-modules-5.13.0-52-generic-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "nic-shared-modules-5.13.0-52-generic-64k-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "nic-shared-modules-5.13.0-52-generic-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "nic-shared-modules-5.13.0-52-generic-lpae-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "nic-usb-modules-5.13.0-52-generic-64k-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "nic-usb-modules-5.13.0-52-generic-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "nic-usb-modules-5.13.0-52-generic-lpae-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "parport-modules-5.13.0-52-generic-64k-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "parport-modules-5.13.0-52-generic-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "parport-modules-5.13.0-52-generic-lpae-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "pata-modules-5.13.0-52-generic-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "pcmcia-modules-5.13.0-52-generic-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "pcmcia-storage-modules-5.13.0-52-generic-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "plip-modules-5.13.0-52-generic-64k-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "plip-modules-5.13.0-52-generic-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "plip-modules-5.13.0-52-generic-lpae-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "ppp-modules-5.13.0-52-generic-64k-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "ppp-modules-5.13.0-52-generic-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "ppp-modules-5.13.0-52-generic-lpae-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "sata-modules-5.13.0-52-generic-64k-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "sata-modules-5.13.0-52-generic-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "sata-modules-5.13.0-52-generic-lpae-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "scsi-modules-5.13.0-52-generic-64k-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "scsi-modules-5.13.0-52-generic-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "scsi-modules-5.13.0-52-generic-lpae-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "serial-modules-5.13.0-52-generic-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "storage-core-modules-5.13.0-52-generic-64k-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "storage-core-modules-5.13.0-52-generic-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "storage-core-modules-5.13.0-52-generic-lpae-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "usb-modules-5.13.0-52-generic-64k-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "usb-modules-5.13.0-52-generic-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "usb-modules-5.13.0-52-generic-lpae-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "virtio-modules-5.13.0-52-generic-64k-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "virtio-modules-5.13.0-52-generic-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "vlan-modules-5.13.0-52-generic-64k-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "vlan-modules-5.13.0-52-generic-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "vlan-modules-5.13.0-52-generic-lpae-di",
"binary_version": "5.13.0-52.59~20.04.1"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:20.04:LTS",
"name": "linux-hwe-5.13",
"purl": "pkg:deb/ubuntu/linux-hwe-5.13@5.13.0-52.59~20.04.1?arch=source\u0026distro=focal"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.13.0-21.21~20.04.1",
"5.13.0-22.22~20.04.1",
"5.13.0-23.23~20.04.2",
"5.13.0-25.26~20.04.1",
"5.13.0-27.29~20.04.1",
"5.13.0-28.31~20.04.1",
"5.13.0-30.33~20.04.1",
"5.13.0-35.40~20.04.1",
"5.13.0-37.42~20.04.1",
"5.13.0-39.44~20.04.1",
"5.13.0-40.45~20.04.1",
"5.13.0-41.46~20.04.1",
"5.13.0-44.49~20.04.1",
"5.13.0-48.54~20.04.1",
"5.13.0-51.58~20.04.1",
"5.13.0-52.59~20.04.1"
]
},
{
"ecosystem_specific": {
"availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
"binaries": [
{
"binary_name": "linux-buildinfo-5.15.0-142-generic",
"binary_version": "5.15.0-142.152~20.04.1"
},
{
"binary_name": "linux-buildinfo-5.15.0-142-generic-64k",
"binary_version": "5.15.0-142.152~20.04.1"
},
{
"binary_name": "linux-buildinfo-5.15.0-142-generic-lpae",
"binary_version": "5.15.0-142.152~20.04.1"
},
{
"binary_name": "linux-cloud-tools-5.15.0-142-generic",
"binary_version": "5.15.0-142.152~20.04.1"
},
{
"binary_name": "linux-headers-5.15.0-142-generic",
"binary_version": "5.15.0-142.152~20.04.1"
},
{
"binary_name": "linux-headers-5.15.0-142-generic-64k",
"binary_version": "5.15.0-142.152~20.04.1"
},
{
"binary_name": "linux-headers-5.15.0-142-generic-lpae",
"binary_version": "5.15.0-142.152~20.04.1"
},
{
"binary_name": "linux-hwe-5.15-cloud-tools-5.15.0-142",
"binary_version": "5.15.0-142.152~20.04.1"
},
{
"binary_name": "linux-hwe-5.15-headers-5.15.0-142",
"binary_version": "5.15.0-142.152~20.04.1"
},
{
"binary_name": "linux-hwe-5.15-tools-5.15.0-142",
"binary_version": "5.15.0-142.152~20.04.1"
},
{
"binary_name": "linux-image-5.15.0-142-generic",
"binary_version": "5.15.0-142.152~20.04.1"
},
{
"binary_name": "linux-image-5.15.0-142-generic-lpae",
"binary_version": "5.15.0-142.152~20.04.1"
},
{
"binary_name": "linux-image-unsigned-5.15.0-142-generic",
"binary_version": "5.15.0-142.152~20.04.1"
},
{
"binary_name": "linux-image-unsigned-5.15.0-142-generic-64k",
"binary_version": "5.15.0-142.152~20.04.1"
},
{
"binary_name": "linux-modules-5.15.0-142-generic",
"binary_version": "5.15.0-142.152~20.04.1"
},
{
"binary_name": "linux-modules-5.15.0-142-generic-64k",
"binary_version": "5.15.0-142.152~20.04.1"
},
{
"binary_name": "linux-modules-5.15.0-142-generic-lpae",
"binary_version": "5.15.0-142.152~20.04.1"
},
{
"binary_name": "linux-modules-extra-5.15.0-142-generic",
"binary_version": "5.15.0-142.152~20.04.1"
},
{
"binary_name": "linux-modules-iwlwifi-5.15.0-142-generic",
"binary_version": "5.15.0-142.152~20.04.1"
},
{
"binary_name": "linux-tools-5.15.0-142-generic",
"binary_version": "5.15.0-142.152~20.04.1"
},
{
"binary_name": "linux-tools-5.15.0-142-generic-64k",
"binary_version": "5.15.0-142.152~20.04.1"
},
{
"binary_name": "linux-tools-5.15.0-142-generic-lpae",
"binary_version": "5.15.0-142.152~20.04.1"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:Pro:20.04:LTS",
"name": "linux-hwe-5.15",
"purl": "pkg:deb/ubuntu/linux-hwe-5.15@5.15.0-142.152~20.04.1?arch=source\u0026distro=esm-infra/focal"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "5.15.0-142.152~20.04.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.15.0-33.34~20.04.1",
"5.15.0-41.44~20.04.1",
"5.15.0-43.46~20.04.1",
"5.15.0-46.49~20.04.1",
"5.15.0-48.54~20.04.1",
"5.15.0-50.56~20.04.1",
"5.15.0-52.58~20.04.1",
"5.15.0-53.59~20.04.1",
"5.15.0-56.62~20.04.1",
"5.15.0-57.63~20.04.1",
"5.15.0-58.64~20.04.1",
"5.15.0-60.66~20.04.1",
"5.15.0-67.74~20.04.1",
"5.15.0-69.76~20.04.1",
"5.15.0-70.77~20.04.1",
"5.15.0-71.78~20.04.1",
"5.15.0-72.79~20.04.1",
"5.15.0-73.80~20.04.1",
"5.15.0-75.82~20.04.1",
"5.15.0-76.83~20.04.1",
"5.15.0-78.85~20.04.1",
"5.15.0-79.86~20.04.2",
"5.15.0-82.91~20.04.1",
"5.15.0-83.92~20.04.1",
"5.15.0-84.93~20.04.1",
"5.15.0-86.96~20.04.1",
"5.15.0-87.97~20.04.1",
"5.15.0-88.98~20.04.1",
"5.15.0-89.99~20.04.1",
"5.15.0-91.101~20.04.1",
"5.15.0-92.102~20.04.1",
"5.15.0-94.104~20.04.1",
"5.15.0-97.107~20.04.1",
"5.15.0-100.110~20.04.1",
"5.15.0-101.111~20.04.1",
"5.15.0-102.112~20.04.1",
"5.15.0-105.115~20.04.1",
"5.15.0-106.116~20.04.1",
"5.15.0-107.117~20.04.1",
"5.15.0-113.123~20.04.1",
"5.15.0-116.126~20.04.1",
"5.15.0-117.127~20.04.1",
"5.15.0-118.128~20.04.1",
"5.15.0-119.129~20.04.1",
"5.15.0-121.131~20.04.1",
"5.15.0-122.132~20.04.1",
"5.15.0-124.134~20.04.1",
"5.15.0-125.135~20.04.1",
"5.15.0-126.136~20.04.1",
"5.15.0-127.137~20.04.1",
"5.15.0-130.140~20.04.1",
"5.15.0-131.141~20.04.1",
"5.15.0-134.145~20.04.1",
"5.15.0-136.147~20.04.1",
"5.15.0-138.148~20.04.1",
"5.15.0-139.149~20.04.1"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "block-modules-5.8.0-63-generic-64k-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "block-modules-5.8.0-63-generic-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "block-modules-5.8.0-63-generic-lpae-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "crypto-modules-5.8.0-63-generic-64k-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "crypto-modules-5.8.0-63-generic-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "crypto-modules-5.8.0-63-generic-lpae-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "dasd-extra-modules-5.8.0-63-generic-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "dasd-modules-5.8.0-63-generic-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "fat-modules-5.8.0-63-generic-64k-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "fat-modules-5.8.0-63-generic-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "fat-modules-5.8.0-63-generic-lpae-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "fb-modules-5.8.0-63-generic-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "firewire-core-modules-5.8.0-63-generic-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "floppy-modules-5.8.0-63-generic-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "fs-core-modules-5.8.0-63-generic-64k-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "fs-core-modules-5.8.0-63-generic-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "fs-core-modules-5.8.0-63-generic-lpae-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "fs-secondary-modules-5.8.0-63-generic-64k-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "fs-secondary-modules-5.8.0-63-generic-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "fs-secondary-modules-5.8.0-63-generic-lpae-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "input-modules-5.8.0-63-generic-64k-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "input-modules-5.8.0-63-generic-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "input-modules-5.8.0-63-generic-lpae-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "ipmi-modules-5.8.0-63-generic-64k-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "ipmi-modules-5.8.0-63-generic-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "ipmi-modules-5.8.0-63-generic-lpae-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "kernel-image-5.8.0-63-generic-64k-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "kernel-image-5.8.0-63-generic-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "kernel-image-5.8.0-63-generic-lpae-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "linux-buildinfo-5.8.0-63-generic",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "linux-buildinfo-5.8.0-63-generic-64k",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "linux-buildinfo-5.8.0-63-generic-lpae",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "linux-buildinfo-5.8.0-63-lowlatency",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "linux-cloud-tools-5.8.0-63-generic",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "linux-cloud-tools-5.8.0-63-lowlatency",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "linux-headers-5.8.0-63-generic",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "linux-headers-5.8.0-63-generic-64k",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "linux-headers-5.8.0-63-generic-lpae",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "linux-headers-5.8.0-63-lowlatency",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "linux-hwe-5.8-cloud-tools-5.8.0-63",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "linux-hwe-5.8-cloud-tools-common",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "linux-hwe-5.8-headers-5.8.0-63",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "linux-hwe-5.8-source-5.8.0",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "linux-hwe-5.8-tools-5.8.0-63",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "linux-hwe-5.8-tools-common",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "linux-hwe-5.8-tools-host",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "linux-hwe-5.8-udebs-generic",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "linux-hwe-5.8-udebs-generic-64k",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "linux-hwe-5.8-udebs-generic-lpae",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "linux-image-5.8.0-63-generic",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "linux-image-5.8.0-63-generic-lpae",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "linux-image-unsigned-5.8.0-63-generic",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "linux-image-unsigned-5.8.0-63-generic-64k",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "linux-image-unsigned-5.8.0-63-lowlatency",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "linux-modules-5.8.0-63-generic",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "linux-modules-5.8.0-63-generic-64k",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "linux-modules-5.8.0-63-generic-lpae",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "linux-modules-5.8.0-63-lowlatency",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "linux-modules-extra-5.8.0-63-generic",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "linux-tools-5.8.0-63-generic",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "linux-tools-5.8.0-63-generic-64k",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "linux-tools-5.8.0-63-generic-lpae",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "linux-tools-5.8.0-63-lowlatency",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "md-modules-5.8.0-63-generic-64k-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "md-modules-5.8.0-63-generic-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "md-modules-5.8.0-63-generic-lpae-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "message-modules-5.8.0-63-generic-64k-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "message-modules-5.8.0-63-generic-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "mouse-modules-5.8.0-63-generic-64k-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "mouse-modules-5.8.0-63-generic-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "mouse-modules-5.8.0-63-generic-lpae-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "multipath-modules-5.8.0-63-generic-64k-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "multipath-modules-5.8.0-63-generic-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "multipath-modules-5.8.0-63-generic-lpae-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "nfs-modules-5.8.0-63-generic-64k-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "nfs-modules-5.8.0-63-generic-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "nfs-modules-5.8.0-63-generic-lpae-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "nic-modules-5.8.0-63-generic-64k-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "nic-modules-5.8.0-63-generic-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "nic-modules-5.8.0-63-generic-lpae-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "nic-pcmcia-modules-5.8.0-63-generic-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "nic-shared-modules-5.8.0-63-generic-64k-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "nic-shared-modules-5.8.0-63-generic-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "nic-shared-modules-5.8.0-63-generic-lpae-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "nic-usb-modules-5.8.0-63-generic-64k-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "nic-usb-modules-5.8.0-63-generic-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "nic-usb-modules-5.8.0-63-generic-lpae-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "parport-modules-5.8.0-63-generic-64k-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "parport-modules-5.8.0-63-generic-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "parport-modules-5.8.0-63-generic-lpae-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "pata-modules-5.8.0-63-generic-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "pcmcia-modules-5.8.0-63-generic-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "pcmcia-storage-modules-5.8.0-63-generic-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "plip-modules-5.8.0-63-generic-64k-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "plip-modules-5.8.0-63-generic-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "plip-modules-5.8.0-63-generic-lpae-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "ppp-modules-5.8.0-63-generic-64k-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "ppp-modules-5.8.0-63-generic-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "ppp-modules-5.8.0-63-generic-lpae-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "sata-modules-5.8.0-63-generic-64k-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "sata-modules-5.8.0-63-generic-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "sata-modules-5.8.0-63-generic-lpae-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "scsi-modules-5.8.0-63-generic-64k-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "scsi-modules-5.8.0-63-generic-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "scsi-modules-5.8.0-63-generic-lpae-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "serial-modules-5.8.0-63-generic-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "storage-core-modules-5.8.0-63-generic-64k-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "storage-core-modules-5.8.0-63-generic-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "storage-core-modules-5.8.0-63-generic-lpae-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "usb-modules-5.8.0-63-generic-64k-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "usb-modules-5.8.0-63-generic-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "usb-modules-5.8.0-63-generic-lpae-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "virtio-modules-5.8.0-63-generic-64k-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "virtio-modules-5.8.0-63-generic-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "vlan-modules-5.8.0-63-generic-64k-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "vlan-modules-5.8.0-63-generic-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "vlan-modules-5.8.0-63-generic-lpae-di",
"binary_version": "5.8.0-63.71~20.04.1"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:20.04:LTS",
"name": "linux-hwe-5.8",
"purl": "pkg:deb/ubuntu/linux-hwe-5.8@5.8.0-63.71~20.04.1?arch=source\u0026distro=focal"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.8.0-23.24~20.04.1",
"5.8.0-25.26~20.04.1",
"5.8.0-28.30~20.04.1",
"5.8.0-29.31~20.04.1",
"5.8.0-31.33~20.04.1",
"5.8.0-33.36~20.04.1",
"5.8.0-34.37~20.04.2",
"5.8.0-36.40~20.04.1",
"5.8.0-38.43~20.04.1",
"5.8.0-40.45~20.04.1",
"5.8.0-41.46~20.04.1",
"5.8.0-43.49~20.04.1",
"5.8.0-44.50~20.04.1",
"5.8.0-45.51~20.04.1",
"5.8.0-48.54~20.04.1",
"5.8.0-49.55~20.04.1",
"5.8.0-50.56~20.04.1",
"5.8.0-53.60~20.04.1",
"5.8.0-55.62~20.04.1",
"5.8.0-59.66~20.04.1",
"5.8.0-63.71~20.04.1"
]
},
{
"ecosystem_specific": {
"availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
"binaries": [
{
"binary_name": "linux-buildinfo-5.15.0-1078-ibm",
"binary_version": "5.15.0-1078.81~20.04.1"
},
{
"binary_name": "linux-headers-5.15.0-1078-ibm",
"binary_version": "5.15.0-1078.81~20.04.1"
},
{
"binary_name": "linux-ibm-5.15-headers-5.15.0-1078",
"binary_version": "5.15.0-1078.81~20.04.1"
},
{
"binary_name": "linux-ibm-5.15-source-5.15.0",
"binary_version": "5.15.0-1078.81~20.04.1"
},
{
"binary_name": "linux-ibm-5.15-tools-5.15.0-1078",
"binary_version": "5.15.0-1078.81~20.04.1"
},
{
"binary_name": "linux-image-unsigned-5.15.0-1078-ibm",
"binary_version": "5.15.0-1078.81~20.04.1"
},
{
"binary_name": "linux-modules-5.15.0-1078-ibm",
"binary_version": "5.15.0-1078.81~20.04.1"
},
{
"binary_name": "linux-modules-extra-5.15.0-1078-ibm",
"binary_version": "5.15.0-1078.81~20.04.1"
},
{
"binary_name": "linux-tools-5.15.0-1078-ibm",
"binary_version": "5.15.0-1078.81~20.04.1"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:Pro:20.04:LTS",
"name": "linux-ibm-5.15",
"purl": "pkg:deb/ubuntu/linux-ibm-5.15@5.15.0-1078.81~20.04.1?arch=source\u0026distro=esm-infra/focal"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "5.15.0-1078.81~20.04.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.15.0-1033.36~20.04.1",
"5.15.0-1034.37~20.04.1",
"5.15.0-1035.38~20.04.1",
"5.15.0-1036.39~20.04.1",
"5.15.0-1037.40~20.04.1",
"5.15.0-1038.41~20.04.1",
"5.15.0-1040.43~20.04.1",
"5.15.0-1041.44~20.04.1",
"5.15.0-1042.45~20.04.1",
"5.15.0-1043.46~20.04.1",
"5.15.0-1044.47~20.04.1",
"5.15.0-1045.48~20.04.1",
"5.15.0-1046.49~20.04.1",
"5.15.0-1047.50~20.04.1",
"5.15.0-1048.51~20.04.1",
"5.15.0-1049.52~20.04.1",
"5.15.0-1050.53~20.04.1",
"5.15.0-1053.56~20.04.1",
"5.15.0-1054.57~20.04.1",
"5.15.0-1055.58~20.04.1",
"5.15.0-1057.60~20.04.1",
"5.15.0-1058.61~20.04.1",
"5.15.0-1059.62~20.04.1",
"5.15.0-1060.63~20.04.1",
"5.15.0-1061.64~20.04.1",
"5.15.0-1062.65~20.04.1",
"5.15.0-1063.66~20.04.1",
"5.15.0-1064.67~20.04.1",
"5.15.0-1065.68~20.04.1",
"5.15.0-1066.69~20.04.1",
"5.15.0-1067.70~20.04.1",
"5.15.0-1068.71~20.04.1",
"5.15.0-1069.72~20.04.1",
"5.15.0-1074.77~20.04.1",
"5.15.0-1075.78~20.04.1",
"5.15.0-1076.79~20.04.1"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-buildinfo-5.13.0-1017-intel",
"binary_version": "5.13.0-1017.19"
},
{
"binary_name": "linux-cloud-tools-5.13.0-1017-intel",
"binary_version": "5.13.0-1017.19"
},
{
"binary_name": "linux-headers-5.13.0-1017-intel",
"binary_version": "5.13.0-1017.19"
},
{
"binary_name": "linux-image-unsigned-5.13.0-1017-intel",
"binary_version": "5.13.0-1017.19"
},
{
"binary_name": "linux-intel-5.13-cloud-tools-5.13.0-1017",
"binary_version": "5.13.0-1017.19"
},
{
"binary_name": "linux-intel-5.13-cloud-tools-common",
"binary_version": "5.13.0-1017.19"
},
{
"binary_name": "linux-intel-5.13-headers-5.13.0-1017",
"binary_version": "5.13.0-1017.19"
},
{
"binary_name": "linux-intel-5.13-source-5.13.0",
"binary_version": "5.13.0-1017.19"
},
{
"binary_name": "linux-intel-5.13-tools-5.13.0-1017",
"binary_version": "5.13.0-1017.19"
},
{
"binary_name": "linux-intel-5.13-tools-common",
"binary_version": "5.13.0-1017.19"
},
{
"binary_name": "linux-intel-5.13-tools-host",
"binary_version": "5.13.0-1017.19"
},
{
"binary_name": "linux-modules-5.13.0-1017-intel",
"binary_version": "5.13.0-1017.19"
},
{
"binary_name": "linux-modules-extra-5.13.0-1017-intel",
"binary_version": "5.13.0-1017.19"
},
{
"binary_name": "linux-tools-5.13.0-1017-intel",
"binary_version": "5.13.0-1017.19"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:20.04:LTS",
"name": "linux-intel-5.13",
"purl": "pkg:deb/ubuntu/linux-intel-5.13@5.13.0-1017.19?arch=source\u0026distro=focal"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.13.0-1007.7",
"5.13.0-1008.8",
"5.13.0-1009.9",
"5.13.0-1010.10",
"5.13.0-1011.11",
"5.13.0-1014.15",
"5.13.0-1017.19"
]
},
{
"ecosystem_specific": {
"availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
"binaries": [
{
"binary_name": "linux-buildinfo-5.15.0-1083-intel-iotg",
"binary_version": "5.15.0-1083.89~20.04.1"
},
{
"binary_name": "linux-cloud-tools-5.15.0-1083-intel-iotg",
"binary_version": "5.15.0-1083.89~20.04.1"
},
{
"binary_name": "linux-headers-5.15.0-1083-intel-iotg",
"binary_version": "5.15.0-1083.89~20.04.1"
},
{
"binary_name": "linux-image-unsigned-5.15.0-1083-intel-iotg",
"binary_version": "5.15.0-1083.89~20.04.1"
},
{
"binary_name": "linux-intel-iotg-5.15-cloud-tools-5.15.0-1083",
"binary_version": "5.15.0-1083.89~20.04.1"
},
{
"binary_name": "linux-intel-iotg-5.15-cloud-tools-common",
"binary_version": "5.15.0-1083.89~20.04.1"
},
{
"binary_name": "linux-intel-iotg-5.15-headers-5.15.0-1083",
"binary_version": "5.15.0-1083.89~20.04.1"
},
{
"binary_name": "linux-intel-iotg-5.15-tools-5.15.0-1083",
"binary_version": "5.15.0-1083.89~20.04.1"
},
{
"binary_name": "linux-intel-iotg-5.15-tools-common",
"binary_version": "5.15.0-1083.89~20.04.1"
},
{
"binary_name": "linux-intel-iotg-5.15-tools-host",
"binary_version": "5.15.0-1083.89~20.04.1"
},
{
"binary_name": "linux-modules-5.15.0-1083-intel-iotg",
"binary_version": "5.15.0-1083.89~20.04.1"
},
{
"binary_name": "linux-modules-extra-5.15.0-1083-intel-iotg",
"binary_version": "5.15.0-1083.89~20.04.1"
},
{
"binary_name": "linux-modules-iwlwifi-5.15.0-1083-intel-iotg",
"binary_version": "5.15.0-1083.89~20.04.1"
},
{
"binary_name": "linux-tools-5.15.0-1083-intel-iotg",
"binary_version": "5.15.0-1083.89~20.04.1"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:Pro:20.04:LTS",
"name": "linux-intel-iotg-5.15",
"purl": "pkg:deb/ubuntu/linux-intel-iotg-5.15@5.15.0-1083.89~20.04.1?arch=source\u0026distro=esm-infra/focal"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "5.15.0-1083.89~20.04.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.15.0-1003.5~20.04.1",
"5.15.0-1008.11~20.04.1",
"5.15.0-1010.14~20.04.1",
"5.15.0-1015.20~20.04.2",
"5.15.0-1016.21~20.04.1",
"5.15.0-1017.22~20.04.1",
"5.15.0-1018.23~20.04.1",
"5.15.0-1021.26~20.04.1",
"5.15.0-1023.28~20.04.1",
"5.15.0-1025.30~20.04.1",
"5.15.0-1026.31~20.04.1",
"5.15.0-1027.32~20.04.1",
"5.15.0-1030.35~20.04.1",
"5.15.0-1031.36~20.04.1",
"5.15.0-1033.38~20.04.1",
"5.15.0-1034.39~20.04.1",
"5.15.0-1036.41~20.04.1",
"5.15.0-1037.42~20.04.1",
"5.15.0-1038.43~20.04.1",
"5.15.0-1040.46~20.04.1",
"5.15.0-1043.49~20.04.1",
"5.15.0-1045.51~20.04.1",
"5.15.0-1046.52~20.04.1",
"5.15.0-1048.54~20.04.1",
"5.15.0-1049.55~20.04.1",
"5.15.0-1050.56~20.04.1",
"5.15.0-1051.57~20.04.1",
"5.15.0-1052.58~20.04.1",
"5.15.0-1055.61~20.04.1",
"5.15.0-1058.64~20.04.1",
"5.15.0-1059.65~20.04.1",
"5.15.0-1060.66~20.04.1",
"5.15.0-1061.67~20.04.1",
"5.15.0-1062.68~20.04.1",
"5.15.0-1063.69~20.04.1",
"5.15.0-1064.70~20.04.1",
"5.15.0-1065.71~20.04.1",
"5.15.0-1066.72~20.04.1",
"5.15.0-1067.73~20.04.1",
"5.15.0-1071.77~20.04.1",
"5.15.0-1072.78~20.04.1",
"5.15.0-1073.79~20.04.2",
"5.15.0-1074.80~20.04.1",
"5.15.0-1077.83~20.04.1",
"5.15.0-1078.84~20.04.1",
"5.15.0-1079.85~20.04.1"
]
},
{
"ecosystem_specific": {
"availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
"binaries": [
{
"binary_name": "linux-buildinfo-5.15.0-142-lowlatency",
"binary_version": "5.15.0-142.152~20.04.1"
},
{
"binary_name": "linux-buildinfo-5.15.0-142-lowlatency-64k",
"binary_version": "5.15.0-142.152~20.04.1"
},
{
"binary_name": "linux-cloud-tools-5.15.0-142-lowlatency",
"binary_version": "5.15.0-142.152~20.04.1"
},
{
"binary_name": "linux-headers-5.15.0-142-lowlatency",
"binary_version": "5.15.0-142.152~20.04.1"
},
{
"binary_name": "linux-headers-5.15.0-142-lowlatency-64k",
"binary_version": "5.15.0-142.152~20.04.1"
},
{
"binary_name": "linux-image-unsigned-5.15.0-142-lowlatency",
"binary_version": "5.15.0-142.152~20.04.1"
},
{
"binary_name": "linux-image-unsigned-5.15.0-142-lowlatency-64k",
"binary_version": "5.15.0-142.152~20.04.1"
},
{
"binary_name": "linux-lowlatency-hwe-5.15-cloud-tools-5.15.0-142",
"binary_version": "5.15.0-142.152~20.04.1"
},
{
"binary_name": "linux-lowlatency-hwe-5.15-headers-5.15.0-142",
"binary_version": "5.15.0-142.152~20.04.1"
},
{
"binary_name": "linux-lowlatency-hwe-5.15-tools-5.15.0-142",
"binary_version": "5.15.0-142.152~20.04.1"
},
{
"binary_name": "linux-modules-5.15.0-142-lowlatency",
"binary_version": "5.15.0-142.152~20.04.1"
},
{
"binary_name": "linux-modules-5.15.0-142-lowlatency-64k",
"binary_version": "5.15.0-142.152~20.04.1"
},
{
"binary_name": "linux-modules-iwlwifi-5.15.0-142-lowlatency",
"binary_version": "5.15.0-142.152~20.04.1"
},
{
"binary_name": "linux-tools-5.15.0-142-lowlatency",
"binary_version": "5.15.0-142.152~20.04.1"
},
{
"binary_name": "linux-tools-5.15.0-142-lowlatency-64k",
"binary_version": "5.15.0-142.152~20.04.1"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:Pro:20.04:LTS",
"name": "linux-lowlatency-hwe-5.15",
"purl": "pkg:deb/ubuntu/linux-lowlatency-hwe-5.15@5.15.0-142.152~20.04.1?arch=source\u0026distro=esm-infra/focal"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "5.15.0-142.152~20.04.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.15.0-33.34~20.04.1",
"5.15.0-42.45~20.04.1",
"5.15.0-43.46~20.04.1",
"5.15.0-46.49~20.04.1",
"5.15.0-48.54~20.04.1",
"5.15.0-50.56~20.04.1",
"5.15.0-52.58~20.04.1",
"5.15.0-53.59~20.04.1",
"5.15.0-56.62~20.04.1",
"5.15.0-58.64~20.04.1",
"5.15.0-60.66~20.04.1",
"5.15.0-67.74~20.04.1",
"5.15.0-69.76~20.04.1",
"5.15.0-70.77~20.04.1",
"5.15.0-71.78~20.04.1",
"5.15.0-72.79~20.04.1",
"5.15.0-73.80~20.04.1",
"5.15.0-75.82~20.04.1",
"5.15.0-76.83~20.04.1",
"5.15.0-78.85~20.04.1",
"5.15.0-79.88~20.04.1",
"5.15.0-82.91~20.04.1",
"5.15.0-83.92~20.04.1",
"5.15.0-84.93~20.04.1",
"5.15.0-86.95~20.04.1",
"5.15.0-87.96~20.04.1",
"5.15.0-88.98~20.04.1",
"5.15.0-89.99~20.04.1",
"5.15.0-91.101~20.04.1",
"5.15.0-92.102~20.04.1",
"5.15.0-94.104~20.04.1",
"5.15.0-97.107~20.04.1",
"5.15.0-100.110~20.04.1",
"5.15.0-101.111~20.04.1",
"5.15.0-102.112~20.04.1",
"5.15.0-105.115~20.04.1",
"5.15.0-106.116~20.04.1",
"5.15.0-107.117~20.04.1",
"5.15.0-110.120~20.04.1",
"5.15.0-113.123~20.04.1",
"5.15.0-116.126~20.04.1",
"5.15.0-117.127~20.04.1",
"5.15.0-118.128~20.04.1",
"5.15.0-119.129~20.04.1",
"5.15.0-121.131~20.04.1",
"5.15.0-122.132~20.04.1",
"5.15.0-124.134~20.04.1",
"5.15.0-125.135~20.04.1",
"5.15.0-126.136~20.04.1",
"5.15.0-127.137~20.04.1",
"5.15.0-128.138~20.04.1",
"5.15.0-129.139~20.04.1",
"5.15.0-131.141~20.04.1",
"5.15.0-133.143~20.04.1",
"5.15.0-134.145~20.04.1",
"5.15.0-135.146~20.04.1",
"5.15.0-136.147~20.04.1",
"5.15.0-138.148~20.04.1",
"5.15.0-139.149~20.04.1",
"5.15.0-140.150~20.04.1"
]
},
{
"ecosystem_specific": {
"availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
"binaries": [
{
"binary_name": "linux-buildinfo-5.15.0-1039-nvidia-tegra",
"binary_version": "5.15.0-1039.39~20.04.1"
},
{
"binary_name": "linux-buildinfo-5.15.0-1039-nvidia-tegra-rt",
"binary_version": "5.15.0-1039.39~20.04.1"
},
{
"binary_name": "linux-headers-5.15.0-1039-nvidia-tegra",
"binary_version": "5.15.0-1039.39~20.04.1"
},
{
"binary_name": "linux-headers-5.15.0-1039-nvidia-tegra-rt",
"binary_version": "5.15.0-1039.39~20.04.1"
},
{
"binary_name": "linux-image-unsigned-5.15.0-1039-nvidia-tegra",
"binary_version": "5.15.0-1039.39~20.04.1"
},
{
"binary_name": "linux-image-unsigned-5.15.0-1039-nvidia-tegra-rt",
"binary_version": "5.15.0-1039.39~20.04.1"
},
{
"binary_name": "linux-modules-5.15.0-1039-nvidia-tegra",
"binary_version": "5.15.0-1039.39~20.04.1"
},
{
"binary_name": "linux-modules-5.15.0-1039-nvidia-tegra-rt",
"binary_version": "5.15.0-1039.39~20.04.1"
},
{
"binary_name": "linux-modules-extra-5.15.0-1039-nvidia-tegra",
"binary_version": "5.15.0-1039.39~20.04.1"
},
{
"binary_name": "linux-nvidia-tegra-5.15-headers-5.15.0-1039",
"binary_version": "5.15.0-1039.39~20.04.1"
},
{
"binary_name": "linux-nvidia-tegra-5.15-tools-5.15.0-1039",
"binary_version": "5.15.0-1039.39~20.04.1"
},
{
"binary_name": "linux-tools-5.15.0-1039-nvidia-tegra",
"binary_version": "5.15.0-1039.39~20.04.1"
},
{
"binary_name": "linux-tools-5.15.0-1039-nvidia-tegra-rt",
"binary_version": "5.15.0-1039.39~20.04.1"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:Pro:20.04:LTS",
"name": "linux-nvidia-tegra-5.15",
"purl": "pkg:deb/ubuntu/linux-nvidia-tegra-5.15@5.15.0-1039.39~20.04.1?arch=source\u0026distro=esm-infra/focal"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "5.15.0-1039.39~20.04.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.15.0-1009.9~20.04.1",
"5.15.0-1010.10~20.04.1",
"5.15.0-1012.12~20.04.1",
"5.15.0-1014.14~20.04.1",
"5.15.0-1015.15~20.04.1",
"5.15.0-1016.16~20.04.1",
"5.15.0-1017.17~20.04.1",
"5.15.0-1018.18~20.04.1",
"5.15.0-1019.19~20.04.1",
"5.15.0-1020.20~20.04.1",
"5.15.0-1022.22~20.04.1",
"5.15.0-1025.25~20.04.1",
"5.15.0-1027.27~20.04.1",
"5.15.0-1030.30~20.04.1",
"5.15.0-1032.32~20.04.1"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-buildinfo-5.10.0-1057-oem",
"binary_version": "5.10.0-1057.61"
},
{
"binary_name": "linux-headers-5.10.0-1057-oem",
"binary_version": "5.10.0-1057.61"
},
{
"binary_name": "linux-image-unsigned-5.10.0-1057-oem",
"binary_version": "5.10.0-1057.61"
},
{
"binary_name": "linux-modules-5.10.0-1057-oem",
"binary_version": "5.10.0-1057.61"
},
{
"binary_name": "linux-oem-5.10-headers-5.10.0-1057",
"binary_version": "5.10.0-1057.61"
},
{
"binary_name": "linux-oem-5.10-tools-5.10.0-1057",
"binary_version": "5.10.0-1057.61"
},
{
"binary_name": "linux-oem-5.10-tools-host",
"binary_version": "5.10.0-1057.61"
},
{
"binary_name": "linux-tools-5.10.0-1057-oem",
"binary_version": "5.10.0-1057.61"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:20.04:LTS",
"name": "linux-oem-5.10",
"purl": "pkg:deb/ubuntu/linux-oem-5.10@5.10.0-1057.61?arch=source\u0026distro=focal"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.10.0-1008.9",
"5.10.0-1011.12",
"5.10.0-1013.14",
"5.10.0-1014.15",
"5.10.0-1016.17",
"5.10.0-1017.18",
"5.10.0-1019.20",
"5.10.0-1021.22",
"5.10.0-1022.23",
"5.10.0-1023.24",
"5.10.0-1025.26",
"5.10.0-1026.27",
"5.10.0-1029.30",
"5.10.0-1032.33",
"5.10.0-1033.34",
"5.10.0-1034.35",
"5.10.0-1038.40",
"5.10.0-1044.46",
"5.10.0-1045.47",
"5.10.0-1049.51",
"5.10.0-1050.52",
"5.10.0-1051.53",
"5.10.0-1052.54",
"5.10.0-1053.55",
"5.10.0-1055.58",
"5.10.0-1057.61"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-buildinfo-5.13.0-1029-oem",
"binary_version": "5.13.0-1029.36"
},
{
"binary_name": "linux-headers-5.13.0-1029-oem",
"binary_version": "5.13.0-1029.36"
},
{
"binary_name": "linux-image-unsigned-5.13.0-1029-oem",
"binary_version": "5.13.0-1029.36"
},
{
"binary_name": "linux-modules-5.13.0-1029-oem",
"binary_version": "5.13.0-1029.36"
},
{
"binary_name": "linux-oem-5.13-headers-5.13.0-1029",
"binary_version": "5.13.0-1029.36"
},
{
"binary_name": "linux-oem-5.13-tools-5.13.0-1029",
"binary_version": "5.13.0-1029.36"
},
{
"binary_name": "linux-oem-5.13-tools-host",
"binary_version": "5.13.0-1029.36"
},
{
"binary_name": "linux-tools-5.13.0-1029-oem",
"binary_version": "5.13.0-1029.36"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:20.04:LTS",
"name": "linux-oem-5.13",
"purl": "pkg:deb/ubuntu/linux-oem-5.13@5.13.0-1029.36?arch=source\u0026distro=focal"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.13.0-1009.10",
"5.13.0-1010.11",
"5.13.0-1012.16",
"5.13.0-1014.18",
"5.13.0-1017.21",
"5.13.0-1019.23",
"5.13.0-1020.24",
"5.13.0-1021.25",
"5.13.0-1022.26",
"5.13.0-1026.32",
"5.13.0-1028.35",
"5.13.0-1029.36"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-buildinfo-5.14.0-1059-oem",
"binary_version": "5.14.0-1059.67"
},
{
"binary_name": "linux-headers-5.14.0-1059-oem",
"binary_version": "5.14.0-1059.67"
},
{
"binary_name": "linux-image-unsigned-5.14.0-1059-oem",
"binary_version": "5.14.0-1059.67"
},
{
"binary_name": "linux-modules-5.14.0-1059-oem",
"binary_version": "5.14.0-1059.67"
},
{
"binary_name": "linux-modules-iwlwifi-5.14.0-1059-oem",
"binary_version": "5.14.0-1059.67"
},
{
"binary_name": "linux-oem-5.14-headers-5.14.0-1059",
"binary_version": "5.14.0-1059.67"
},
{
"binary_name": "linux-oem-5.14-tools-5.14.0-1059",
"binary_version": "5.14.0-1059.67"
},
{
"binary_name": "linux-oem-5.14-tools-host",
"binary_version": "5.14.0-1059.67"
},
{
"binary_name": "linux-tools-5.14.0-1059-oem",
"binary_version": "5.14.0-1059.67"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:20.04:LTS",
"name": "linux-oem-5.14",
"purl": "pkg:deb/ubuntu/linux-oem-5.14@5.14.0-1059.67?arch=source\u0026distro=focal"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.14.0-1004.4",
"5.14.0-1005.5",
"5.14.0-1007.7",
"5.14.0-1008.8",
"5.14.0-1010.10",
"5.14.0-1011.11",
"5.14.0-1013.13",
"5.14.0-1018.19",
"5.14.0-1020.22",
"5.14.0-1022.24",
"5.14.0-1024.26",
"5.14.0-1027.30",
"5.14.0-1029.32",
"5.14.0-1031.34",
"5.14.0-1032.35",
"5.14.0-1033.36",
"5.14.0-1034.37",
"5.14.0-1036.40",
"5.14.0-1038.42",
"5.14.0-1042.47",
"5.14.0-1044.49",
"5.14.0-1045.51",
"5.14.0-1046.53",
"5.14.0-1047.54",
"5.14.0-1048.55",
"5.14.0-1049.56",
"5.14.0-1050.57",
"5.14.0-1051.58",
"5.14.0-1052.59",
"5.14.0-1054.61",
"5.14.0-1055.62",
"5.14.0-1056.63",
"5.14.0-1057.64",
"5.14.0-1058.66",
"5.14.0-1059.67"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-buildinfo-5.6.0-1056-oem",
"binary_version": "5.6.0-1056.60"
},
{
"binary_name": "linux-headers-5.6.0-1056-oem",
"binary_version": "5.6.0-1056.60"
},
{
"binary_name": "linux-image-unsigned-5.6.0-1056-oem",
"binary_version": "5.6.0-1056.60"
},
{
"binary_name": "linux-modules-5.6.0-1056-oem",
"binary_version": "5.6.0-1056.60"
},
{
"binary_name": "linux-oem-5.6-headers-5.6.0-1056",
"binary_version": "5.6.0-1056.60"
},
{
"binary_name": "linux-oem-5.6-tools-5.6.0-1056",
"binary_version": "5.6.0-1056.60"
},
{
"binary_name": "linux-oem-5.6-tools-host",
"binary_version": "5.6.0-1056.60"
},
{
"binary_name": "linux-tools-5.6.0-1056-oem",
"binary_version": "5.6.0-1056.60"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:20.04:LTS",
"name": "linux-oem-5.6",
"purl": "pkg:deb/ubuntu/linux-oem-5.6@5.6.0-1056.60?arch=source\u0026distro=focal"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.6.0-1007.7",
"5.6.0-1008.8",
"5.6.0-1010.10",
"5.6.0-1011.11",
"5.6.0-1013.13",
"5.6.0-1017.17",
"5.6.0-1018.18",
"5.6.0-1020.20",
"5.6.0-1021.21",
"5.6.0-1023.23",
"5.6.0-1026.26",
"5.6.0-1027.27",
"5.6.0-1028.28",
"5.6.0-1031.32",
"5.6.0-1032.33",
"5.6.0-1033.35",
"5.6.0-1034.36",
"5.6.0-1035.37",
"5.6.0-1036.39",
"5.6.0-1039.43",
"5.6.0-1042.46",
"5.6.0-1047.51",
"5.6.0-1048.52",
"5.6.0-1050.54",
"5.6.0-1052.56",
"5.6.0-1053.57",
"5.6.0-1054.58",
"5.6.0-1055.59",
"5.6.0-1056.60"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-buildinfo-5.11.0-1028-oracle",
"binary_version": "5.11.0-1028.31~20.04.1"
},
{
"binary_name": "linux-headers-5.11.0-1028-oracle",
"binary_version": "5.11.0-1028.31~20.04.1"
},
{
"binary_name": "linux-image-unsigned-5.11.0-1028-oracle",
"binary_version": "5.11.0-1028.31~20.04.1"
},
{
"binary_name": "linux-modules-5.11.0-1028-oracle",
"binary_version": "5.11.0-1028.31~20.04.1"
},
{
"binary_name": "linux-modules-extra-5.11.0-1028-oracle",
"binary_version": "5.11.0-1028.31~20.04.1"
},
{
"binary_name": "linux-oracle-5.11-headers-5.11.0-1028",
"binary_version": "5.11.0-1028.31~20.04.1"
},
{
"binary_name": "linux-oracle-5.11-tools-5.11.0-1028",
"binary_version": "5.11.0-1028.31~20.04.1"
},
{
"binary_name": "linux-tools-5.11.0-1028-oracle",
"binary_version": "5.11.0-1028.31~20.04.1"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:20.04:LTS",
"name": "linux-oracle-5.11",
"purl": "pkg:deb/ubuntu/linux-oracle-5.11@5.11.0-1028.31~20.04.1?arch=source\u0026distro=focal"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.11.0-1008.8~20.04.1",
"5.11.0-1013.14~20.04.1",
"5.11.0-1016.17~20.04.1",
"5.11.0-1017.18~20.04.1",
"5.11.0-1019.20~20.04.1",
"5.11.0-1020.21~20.04.1",
"5.11.0-1021.22~20.04.1",
"5.11.0-1022.23~20.04.1",
"5.11.0-1023.24~20.04.1",
"5.11.0-1025.27~20.04.1",
"5.11.0-1027.30~20.04.1",
"5.11.0-1028.31~20.04.1"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-buildinfo-5.13.0-1036-oracle",
"binary_version": "5.13.0-1036.43~20.04.1"
},
{
"binary_name": "linux-headers-5.13.0-1036-oracle",
"binary_version": "5.13.0-1036.43~20.04.1"
},
{
"binary_name": "linux-image-unsigned-5.13.0-1036-oracle",
"binary_version": "5.13.0-1036.43~20.04.1"
},
{
"binary_name": "linux-modules-5.13.0-1036-oracle",
"binary_version": "5.13.0-1036.43~20.04.1"
},
{
"binary_name": "linux-modules-extra-5.13.0-1036-oracle",
"binary_version": "5.13.0-1036.43~20.04.1"
},
{
"binary_name": "linux-oracle-5.13-headers-5.13.0-1036",
"binary_version": "5.13.0-1036.43~20.04.1"
},
{
"binary_name": "linux-oracle-5.13-tools-5.13.0-1036",
"binary_version": "5.13.0-1036.43~20.04.1"
},
{
"binary_name": "linux-tools-5.13.0-1036-oracle",
"binary_version": "5.13.0-1036.43~20.04.1"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:20.04:LTS",
"name": "linux-oracle-5.13",
"purl": "pkg:deb/ubuntu/linux-oracle-5.13@5.13.0-1036.43~20.04.1?arch=source\u0026distro=focal"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.13.0-1011.13~20.04.2",
"5.13.0-1015.19~20.04.1",
"5.13.0-1016.20~20.04.1",
"5.13.0-1018.22~20.04.1",
"5.13.0-1021.26~20.04.1",
"5.13.0-1025.30~20.04.1",
"5.13.0-1027.32~20.04.1",
"5.13.0-1028.33~20.04.1",
"5.13.0-1030.35~20.04.1",
"5.13.0-1033.39~20.04.1",
"5.13.0-1034.40~20.04.1",
"5.13.0-1036.43~20.04.1"
]
},
{
"ecosystem_specific": {
"availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
"binaries": [
{
"binary_name": "linux-buildinfo-5.15.0-1083-oracle",
"binary_version": "5.15.0-1083.89~20.04.1"
},
{
"binary_name": "linux-headers-5.15.0-1083-oracle",
"binary_version": "5.15.0-1083.89~20.04.1"
},
{
"binary_name": "linux-image-unsigned-5.15.0-1083-oracle",
"binary_version": "5.15.0-1083.89~20.04.1"
},
{
"binary_name": "linux-modules-5.15.0-1083-oracle",
"binary_version": "5.15.0-1083.89~20.04.1"
},
{
"binary_name": "linux-modules-extra-5.15.0-1083-oracle",
"binary_version": "5.15.0-1083.89~20.04.1"
},
{
"binary_name": "linux-oracle-5.15-headers-5.15.0-1083",
"binary_version": "5.15.0-1083.89~20.04.1"
},
{
"binary_name": "linux-oracle-5.15-tools-5.15.0-1083",
"binary_version": "5.15.0-1083.89~20.04.1"
},
{
"binary_name": "linux-tools-5.15.0-1083-oracle",
"binary_version": "5.15.0-1083.89~20.04.1"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:Pro:20.04:LTS",
"name": "linux-oracle-5.15",
"purl": "pkg:deb/ubuntu/linux-oracle-5.15@5.15.0-1083.89~20.04.1?arch=source\u0026distro=esm-infra/focal"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "5.15.0-1083.89~20.04.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.15.0-1007.9~20.04.1",
"5.15.0-1013.17~20.04.1",
"5.15.0-1016.20~20.04.1",
"5.15.0-1017.22~20.04.1",
"5.15.0-1018.23~20.04.1",
"5.15.0-1019.24~20.04.1",
"5.15.0-1021.27~20.04.1",
"5.15.0-1022.28~20.04.1",
"5.15.0-1025.31~20.04.2",
"5.15.0-1027.33~20.04.1",
"5.15.0-1029.35~20.04.1",
"5.15.0-1030.36~20.04.1",
"5.15.0-1032.38~20.04.1",
"5.15.0-1033.39~20.04.1",
"5.15.0-1034.40~20.04.1",
"5.15.0-1035.41~20.04.1",
"5.15.0-1036.42~20.04.1",
"5.15.0-1037.43~20.04.1",
"5.15.0-1038.44~20.04.1",
"5.15.0-1039.45~20.04.1",
"5.15.0-1040.46~20.04.1",
"5.15.0-1041.47~20.04.1",
"5.15.0-1042.48~20.04.1",
"5.15.0-1044.50~20.04.1",
"5.15.0-1045.51~20.04.1",
"5.15.0-1046.52~20.04.1",
"5.15.0-1047.53~20.04.1",
"5.15.0-1048.54~20.04.1",
"5.15.0-1049.55~20.04.1",
"5.15.0-1050.56~20.04.1",
"5.15.0-1051.57~20.04.1",
"5.15.0-1052.58~20.04.1",
"5.15.0-1053.59~20.04.1",
"5.15.0-1054.60~20.04.1",
"5.15.0-1055.61~20.04.1",
"5.15.0-1058.64~20.04.1",
"5.15.0-1059.65~20.04.1",
"5.15.0-1061.67~20.04.1",
"5.15.0-1062.68~20.04.1",
"5.15.0-1063.69~20.04.1",
"5.15.0-1065.71~20.04.1",
"5.15.0-1066.72~20.04.1",
"5.15.0-1067.73~20.04.1",
"5.15.0-1068.74~20.04.1",
"5.15.0-1069.75~20.04.1",
"5.15.0-1070.76~20.04.1",
"5.15.0-1071.77~20.04.1",
"5.15.0-1072.78~20.04.1",
"5.15.0-1073.79~20.04.1",
"5.15.0-1074.80~20.04.1",
"5.15.0-1075.81~20.04.1",
"5.15.0-1076.82~20.04.1",
"5.15.0-1077.83~20.04.1",
"5.15.0-1078.84~20.04.1",
"5.15.0-1079.85~20.04.1",
"5.15.0-1080.86~20.04.1",
"5.15.0-1081.87~20.04.1"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-buildinfo-5.8.0-1038-oracle",
"binary_version": "5.8.0-1038.39~20.04.1"
},
{
"binary_name": "linux-headers-5.8.0-1038-oracle",
"binary_version": "5.8.0-1038.39~20.04.1"
},
{
"binary_name": "linux-image-unsigned-5.8.0-1038-oracle",
"binary_version": "5.8.0-1038.39~20.04.1"
},
{
"binary_name": "linux-modules-5.8.0-1038-oracle",
"binary_version": "5.8.0-1038.39~20.04.1"
},
{
"binary_name": "linux-modules-extra-5.8.0-1038-oracle",
"binary_version": "5.8.0-1038.39~20.04.1"
},
{
"binary_name": "linux-oracle-5.8-headers-5.8.0-1038",
"binary_version": "5.8.0-1038.39~20.04.1"
},
{
"binary_name": "linux-oracle-5.8-tools-5.8.0-1038",
"binary_version": "5.8.0-1038.39~20.04.1"
},
{
"binary_name": "linux-tools-5.8.0-1038-oracle",
"binary_version": "5.8.0-1038.39~20.04.1"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:20.04:LTS",
"name": "linux-oracle-5.8",
"purl": "pkg:deb/ubuntu/linux-oracle-5.8@5.8.0-1038.39~20.04.1?arch=source\u0026distro=focal"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.8.0-1031.32~20.04.2",
"5.8.0-1033.34~20.04.1",
"5.8.0-1034.35~20.04.2",
"5.8.0-1037.38~20.04.1",
"5.8.0-1038.39~20.04.1"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-buildinfo-5.4.0-1006-raspi2",
"binary_version": "5.4.0-1006.6"
},
{
"binary_name": "linux-headers-5.4.0-1006-raspi2",
"binary_version": "5.4.0-1006.6"
},
{
"binary_name": "linux-image-5.4.0-1006-raspi2",
"binary_version": "5.4.0-1006.6"
},
{
"binary_name": "linux-modules-5.4.0-1006-raspi2",
"binary_version": "5.4.0-1006.6"
},
{
"binary_name": "linux-raspi2-headers-5.4.0-1006",
"binary_version": "5.4.0-1006.6"
},
{
"binary_name": "linux-raspi2-tools-5.4.0-1006",
"binary_version": "5.4.0-1006.6"
},
{
"binary_name": "linux-tools-5.4.0-1006-raspi2",
"binary_version": "5.4.0-1006.6"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:20.04:LTS",
"name": "linux-raspi2",
"purl": "pkg:deb/ubuntu/linux-raspi2@5.4.0-1006.6?arch=source\u0026distro=focal"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.3.0-1007.8",
"5.3.0-1014.16",
"5.3.0-1015.17",
"5.3.0-1017.19",
"5.4.0-1004.4",
"5.4.0-1006.6"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "block-modules-5.4.0-40-generic-di",
"binary_version": "5.4.0-40.45"
},
{
"binary_name": "crypto-modules-5.4.0-40-generic-di",
"binary_version": "5.4.0-40.45"
},
{
"binary_name": "fat-modules-5.4.0-40-generic-di",
"binary_version": "5.4.0-40.45"
},
{
"binary_name": "firewire-core-modules-5.4.0-40-generic-di",
"binary_version": "5.4.0-40.45"
},
{
"binary_name": "fs-core-modules-5.4.0-40-generic-di",
"binary_version": "5.4.0-40.45"
},
{
"binary_name": "fs-secondary-modules-5.4.0-40-generic-di",
"binary_version": "5.4.0-40.45"
},
{
"binary_name": "input-modules-5.4.0-40-generic-di",
"binary_version": "5.4.0-40.45"
},
{
"binary_name": "ipmi-modules-5.4.0-40-generic-di",
"binary_version": "5.4.0-40.45"
},
{
"binary_name": "kernel-image-5.4.0-40-generic-di",
"binary_version": "5.4.0-40.45"
},
{
"binary_name": "linux-buildinfo-5.4.0-40-generic",
"binary_version": "5.4.0-40.45"
},
{
"binary_name": "linux-headers-5.4.0-40-generic",
"binary_version": "5.4.0-40.45"
},
{
"binary_name": "linux-image-5.4.0-40-generic",
"binary_version": "5.4.0-40.45"
},
{
"binary_name": "linux-modules-5.4.0-40-generic",
"binary_version": "5.4.0-40.45"
},
{
"binary_name": "linux-modules-extra-5.4.0-40-generic",
"binary_version": "5.4.0-40.45"
},
{
"binary_name": "linux-riscv-headers-5.4.0-40",
"binary_version": "5.4.0-40.45"
},
{
"binary_name": "linux-riscv-tools-5.4.0-40",
"binary_version": "5.4.0-40.45"
},
{
"binary_name": "linux-tools-5.4.0-40-generic",
"binary_version": "5.4.0-40.45"
},
{
"binary_name": "linux-udebs-generic",
"binary_version": "5.4.0-40.45"
},
{
"binary_name": "md-modules-5.4.0-40-generic-di",
"binary_version": "5.4.0-40.45"
},
{
"binary_name": "message-modules-5.4.0-40-generic-di",
"binary_version": "5.4.0-40.45"
},
{
"binary_name": "mouse-modules-5.4.0-40-generic-di",
"binary_version": "5.4.0-40.45"
},
{
"binary_name": "multipath-modules-5.4.0-40-generic-di",
"binary_version": "5.4.0-40.45"
},
{
"binary_name": "nfs-modules-5.4.0-40-generic-di",
"binary_version": "5.4.0-40.45"
},
{
"binary_name": "nic-modules-5.4.0-40-generic-di",
"binary_version": "5.4.0-40.45"
},
{
"binary_name": "nic-shared-modules-5.4.0-40-generic-di",
"binary_version": "5.4.0-40.45"
},
{
"binary_name": "nic-usb-modules-5.4.0-40-generic-di",
"binary_version": "5.4.0-40.45"
},
{
"binary_name": "parport-modules-5.4.0-40-generic-di",
"binary_version": "5.4.0-40.45"
},
{
"binary_name": "pata-modules-5.4.0-40-generic-di",
"binary_version": "5.4.0-40.45"
},
{
"binary_name": "plip-modules-5.4.0-40-generic-di",
"binary_version": "5.4.0-40.45"
},
{
"binary_name": "ppp-modules-5.4.0-40-generic-di",
"binary_version": "5.4.0-40.45"
},
{
"binary_name": "sata-modules-5.4.0-40-generic-di",
"binary_version": "5.4.0-40.45"
},
{
"binary_name": "scsi-modules-5.4.0-40-generic-di",
"binary_version": "5.4.0-40.45"
},
{
"binary_name": "storage-core-modules-5.4.0-40-generic-di",
"binary_version": "5.4.0-40.45"
},
{
"binary_name": "usb-modules-5.4.0-40-generic-di",
"binary_version": "5.4.0-40.45"
},
{
"binary_name": "virtio-modules-5.4.0-40-generic-di",
"binary_version": "5.4.0-40.45"
},
{
"binary_name": "vlan-modules-5.4.0-40-generic-di",
"binary_version": "5.4.0-40.45"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:20.04:LTS",
"name": "linux-riscv",
"purl": "pkg:deb/ubuntu/linux-riscv@5.4.0-40.45?arch=source\u0026distro=focal"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.4.0-24.28",
"5.4.0-26.30",
"5.4.0-27.31",
"5.4.0-28.32",
"5.4.0-30.34",
"5.4.0-31.35",
"5.4.0-33.37",
"5.4.0-34.38",
"5.4.0-36.41",
"5.4.0-37.42",
"5.4.0-39.44",
"5.4.0-40.45"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-buildinfo-5.11.0-1031-generic",
"binary_version": "5.11.0-1031.35"
},
{
"binary_name": "linux-headers-5.11.0-1031-generic",
"binary_version": "5.11.0-1031.35"
},
{
"binary_name": "linux-image-5.11.0-1031-generic",
"binary_version": "5.11.0-1031.35"
},
{
"binary_name": "linux-modules-5.11.0-1031-generic",
"binary_version": "5.11.0-1031.35"
},
{
"binary_name": "linux-modules-extra-5.11.0-1031-generic",
"binary_version": "5.11.0-1031.35"
},
{
"binary_name": "linux-riscv-5.11-headers-5.11.0-1031",
"binary_version": "5.11.0-1031.35"
},
{
"binary_name": "linux-riscv-5.11-tools-5.11.0-1031",
"binary_version": "5.11.0-1031.35"
},
{
"binary_name": "linux-tools-5.11.0-1031-generic",
"binary_version": "5.11.0-1031.35"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:20.04:LTS",
"name": "linux-riscv-5.11",
"purl": "pkg:deb/ubuntu/linux-riscv-5.11@5.11.0-1031.35?arch=source\u0026distro=focal"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.11.0-1015.16~20.04.1",
"5.11.0-1017.18~20.04.1",
"5.11.0-1018.19~20.04.2",
"5.11.0-1020.21~20.04.1",
"5.11.0-1021.22~20.04.1",
"5.11.0-1022.23~20.04.1",
"5.11.0-1023.24~20.04.1",
"5.11.0-1024.25~20.04.1",
"5.11.0-1026.28~20.04.1",
"5.11.0-1028.31~20.04.1",
"5.11.0-1029.32~20.04.1",
"5.11.0-1030.34",
"5.11.0-1031.35"
]
},
{
"ecosystem_specific": {
"availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
"binaries": [
{
"binary_name": "linux-buildinfo-5.15.0-1081-generic",
"binary_version": "5.15.0-1081.85~20.04.1"
},
{
"binary_name": "linux-headers-5.15.0-1081-generic",
"binary_version": "5.15.0-1081.85~20.04.1"
},
{
"binary_name": "linux-image-5.15.0-1081-generic",
"binary_version": "5.15.0-1081.85~20.04.1"
},
{
"binary_name": "linux-modules-5.15.0-1081-generic",
"binary_version": "5.15.0-1081.85~20.04.1"
},
{
"binary_name": "linux-modules-extra-5.15.0-1081-generic",
"binary_version": "5.15.0-1081.85~20.04.1"
},
{
"binary_name": "linux-riscv-5.15-headers-5.15.0-1081",
"binary_version": "5.15.0-1081.85~20.04.1"
},
{
"binary_name": "linux-riscv-5.15-tools-5.15.0-1081",
"binary_version": "5.15.0-1081.85~20.04.1"
},
{
"binary_name": "linux-tools-5.15.0-1081-generic",
"binary_version": "5.15.0-1081.85~20.04.1"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:Pro:20.04:LTS",
"name": "linux-riscv-5.15",
"purl": "pkg:deb/ubuntu/linux-riscv-5.15@5.15.0-1081.85~20.04.1?arch=source\u0026distro=esm-infra/focal"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "5.15.0-1081.85~20.04.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.15.0-1015.17~20.04.1",
"5.15.0-1017.19~20.04.1",
"5.15.0-1018.21~20.04.1",
"5.15.0-1019.22~20.04.1",
"5.15.0-1022.26~20.04.1",
"5.15.0-1023.27~20.04.1",
"5.15.0-1026.30~20.04.2",
"5.15.0-1027.31~20.04.1",
"5.15.0-1028.32~20.04.1",
"5.15.0-1029.33~20.04.1",
"5.15.0-1030.34~20.04.1",
"5.15.0-1031.35~20.04.1",
"5.15.0-1032.36~20.04.1",
"5.15.0-1033.37~20.04.1",
"5.15.0-1034.38~20.04.1",
"5.15.0-1035.39~20.04.1",
"5.15.0-1036.40~20.04.2",
"5.15.0-1037.41~20.04.2",
"5.15.0-1038.42~20.04.2",
"5.15.0-1039.43~20.04.2",
"5.15.0-1040.44~20.04.3",
"5.15.0-1041.45~20.04.1",
"5.15.0-1043.47~20.04.1",
"5.15.0-1044.48~20.04.1",
"5.15.0-1045.49~20.04.1",
"5.15.0-1046.50~20.04.1",
"5.15.0-1047.51~20.04.1",
"5.15.0-1048.52~20.04.1",
"5.15.0-1049.53~20.04.2",
"5.15.0-1050.54~20.04.1",
"5.15.0-1051.55~20.04.1",
"5.15.0-1052.56~20.04.1",
"5.15.0-1053.57~20.04.1",
"5.15.0-1056.60~20.04.1",
"5.15.0-1057.61~20.04.1",
"5.15.0-1058.62~20.04.1",
"5.15.0-1059.63~20.04.1",
"5.15.0-1060.64~20.04.1",
"5.15.0-1061.65~20.04.1",
"5.15.0-1062.66~20.04.1",
"5.15.0-1063.67~20.04.1",
"5.15.0-1064.68~20.04.1",
"5.15.0-1065.69~20.04.1",
"5.15.0-1066.70~20.04.1",
"5.15.0-1067.71~20.04.1",
"5.15.0-1068.72~20.04.1",
"5.15.0-1069.73~20.04.1",
"5.15.0-1070.74~20.04.1",
"5.15.0-1071.75~20.04.1",
"5.15.0-1072.76~20.04.1",
"5.15.0-1073.77~20.04.1",
"5.15.0-1074.78~20.04.1",
"5.15.0-1075.79~20.04.1",
"5.15.0-1076.80~20.04.1",
"5.15.0-1077.81~20.04.1",
"5.15.0-1078.82~20.04.1",
"5.15.0-1079.83~20.04.1"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "block-modules-5.8.0-29-generic-di",
"binary_version": "5.8.0-29.31~20.04.1"
},
{
"binary_name": "crypto-modules-5.8.0-29-generic-di",
"binary_version": "5.8.0-29.31~20.04.1"
},
{
"binary_name": "fat-modules-5.8.0-29-generic-di",
"binary_version": "5.8.0-29.31~20.04.1"
},
{
"binary_name": "firewire-core-modules-5.8.0-29-generic-di",
"binary_version": "5.8.0-29.31~20.04.1"
},
{
"binary_name": "fs-core-modules-5.8.0-29-generic-di",
"binary_version": "5.8.0-29.31~20.04.1"
},
{
"binary_name": "fs-secondary-modules-5.8.0-29-generic-di",
"binary_version": "5.8.0-29.31~20.04.1"
},
{
"binary_name": "input-modules-5.8.0-29-generic-di",
"binary_version": "5.8.0-29.31~20.04.1"
},
{
"binary_name": "ipmi-modules-5.8.0-29-generic-di",
"binary_version": "5.8.0-29.31~20.04.1"
},
{
"binary_name": "kernel-image-5.8.0-29-generic-di",
"binary_version": "5.8.0-29.31~20.04.1"
},
{
"binary_name": "linux-buildinfo-5.8.0-29-generic",
"binary_version": "5.8.0-29.31~20.04.1"
},
{
"binary_name": "linux-headers-5.8.0-29-generic",
"binary_version": "5.8.0-29.31~20.04.1"
},
{
"binary_name": "linux-image-5.8.0-29-generic",
"binary_version": "5.8.0-29.31~20.04.1"
},
{
"binary_name": "linux-modules-5.8.0-29-generic",
"binary_version": "5.8.0-29.31~20.04.1"
},
{
"binary_name": "linux-modules-extra-5.8.0-29-generic",
"binary_version": "5.8.0-29.31~20.04.1"
},
{
"binary_name": "linux-riscv-5.8-headers-5.8.0-29",
"binary_version": "5.8.0-29.31~20.04.1"
},
{
"binary_name": "linux-riscv-5.8-tools-5.8.0-29",
"binary_version": "5.8.0-29.31~20.04.1"
},
{
"binary_name": "linux-tools-5.8.0-29-generic",
"binary_version": "5.8.0-29.31~20.04.1"
},
{
"binary_name": "linux-udebs-generic",
"binary_version": "5.8.0-29.31~20.04.1"
},
{
"binary_name": "md-modules-5.8.0-29-generic-di",
"binary_version": "5.8.0-29.31~20.04.1"
},
{
"binary_name": "message-modules-5.8.0-29-generic-di",
"binary_version": "5.8.0-29.31~20.04.1"
},
{
"binary_name": "mouse-modules-5.8.0-29-generic-di",
"binary_version": "5.8.0-29.31~20.04.1"
},
{
"binary_name": "multipath-modules-5.8.0-29-generic-di",
"binary_version": "5.8.0-29.31~20.04.1"
},
{
"binary_name": "nfs-modules-5.8.0-29-generic-di",
"binary_version": "5.8.0-29.31~20.04.1"
},
{
"binary_name": "nic-modules-5.8.0-29-generic-di",
"binary_version": "5.8.0-29.31~20.04.1"
},
{
"binary_name": "nic-shared-modules-5.8.0-29-generic-di",
"binary_version": "5.8.0-29.31~20.04.1"
},
{
"binary_name": "nic-usb-modules-5.8.0-29-generic-di",
"binary_version": "5.8.0-29.31~20.04.1"
},
{
"binary_name": "parport-modules-5.8.0-29-generic-di",
"binary_version": "5.8.0-29.31~20.04.1"
},
{
"binary_name": "pata-modules-5.8.0-29-generic-di",
"binary_version": "5.8.0-29.31~20.04.1"
},
{
"binary_name": "plip-modules-5.8.0-29-generic-di",
"binary_version": "5.8.0-29.31~20.04.1"
},
{
"binary_name": "ppp-modules-5.8.0-29-generic-di",
"binary_version": "5.8.0-29.31~20.04.1"
},
{
"binary_name": "sata-modules-5.8.0-29-generic-di",
"binary_version": "5.8.0-29.31~20.04.1"
},
{
"binary_name": "scsi-modules-5.8.0-29-generic-di",
"binary_version": "5.8.0-29.31~20.04.1"
},
{
"binary_name": "storage-core-modules-5.8.0-29-generic-di",
"binary_version": "5.8.0-29.31~20.04.1"
},
{
"binary_name": "usb-modules-5.8.0-29-generic-di",
"binary_version": "5.8.0-29.31~20.04.1"
},
{
"binary_name": "virtio-modules-5.8.0-29-generic-di",
"binary_version": "5.8.0-29.31~20.04.1"
},
{
"binary_name": "vlan-modules-5.8.0-29-generic-di",
"binary_version": "5.8.0-29.31~20.04.1"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:20.04:LTS",
"name": "linux-riscv-5.8",
"purl": "pkg:deb/ubuntu/linux-riscv-5.8@5.8.0-29.31~20.04.1?arch=source\u0026distro=focal"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.8.0-14.16~20.04.1",
"5.8.0-14.16~20.04.3",
"5.8.0-16.18~20.04.1",
"5.8.0-17.19~20.04.1",
"5.8.0-18.20~20.04.1",
"5.8.0-20.22~20.04.1",
"5.8.0-22.24~20.04.1",
"5.8.0-25.27~20.04.1",
"5.8.0-26.28~20.04.1",
"5.8.0-29.31~20.04.1"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "linux-buildinfo-5.15.0-142-generic",
"binary_version": "5.15.0-142.152"
},
{
"binary_name": "linux-buildinfo-5.15.0-142-generic-64k",
"binary_version": "5.15.0-142.152"
},
{
"binary_name": "linux-buildinfo-5.15.0-142-generic-lpae",
"binary_version": "5.15.0-142.152"
},
{
"binary_name": "linux-cloud-tools-5.15.0-142",
"binary_version": "5.15.0-142.152"
},
{
"binary_name": "linux-cloud-tools-5.15.0-142-generic",
"binary_version": "5.15.0-142.152"
},
{
"binary_name": "linux-cloud-tools-common",
"binary_version": "5.15.0-142.152"
},
{
"binary_name": "linux-headers-5.15.0-142",
"binary_version": "5.15.0-142.152"
},
{
"binary_name": "linux-headers-5.15.0-142-generic",
"binary_version": "5.15.0-142.152"
},
{
"binary_name": "linux-headers-5.15.0-142-generic-64k",
"binary_version": "5.15.0-142.152"
},
{
"binary_name": "linux-headers-5.15.0-142-generic-lpae",
"binary_version": "5.15.0-142.152"
},
{
"binary_name": "linux-image-5.15.0-142-generic",
"binary_version": "5.15.0-142.152"
},
{
"binary_name": "linux-image-5.15.0-142-generic-lpae",
"binary_version": "5.15.0-142.152"
},
{
"binary_name": "linux-image-unsigned-5.15.0-142-generic",
"binary_version": "5.15.0-142.152"
},
{
"binary_name": "linux-image-unsigned-5.15.0-142-generic-64k",
"binary_version": "5.15.0-142.152"
},
{
"binary_name": "linux-modules-5.15.0-142-generic",
"binary_version": "5.15.0-142.152"
},
{
"binary_name": "linux-modules-5.15.0-142-generic-64k",
"binary_version": "5.15.0-142.152"
},
{
"binary_name": "linux-modules-5.15.0-142-generic-lpae",
"binary_version": "5.15.0-142.152"
},
{
"binary_name": "linux-modules-extra-5.15.0-142-generic",
"binary_version": "5.15.0-142.152"
},
{
"binary_name": "linux-modules-iwlwifi-5.15.0-142-generic",
"binary_version": "5.15.0-142.152"
},
{
"binary_name": "linux-source-5.15.0",
"binary_version": "5.15.0-142.152"
},
{
"binary_name": "linux-tools-5.15.0-142",
"binary_version": "5.15.0-142.152"
},
{
"binary_name": "linux-tools-5.15.0-142-generic",
"binary_version": "5.15.0-142.152"
},
{
"binary_name": "linux-tools-5.15.0-142-generic-64k",
"binary_version": "5.15.0-142.152"
},
{
"binary_name": "linux-tools-5.15.0-142-generic-lpae",
"binary_version": "5.15.0-142.152"
},
{
"binary_name": "linux-tools-common",
"binary_version": "5.15.0-142.152"
},
{
"binary_name": "linux-tools-host",
"binary_version": "5.15.0-142.152"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "linux",
"purl": "pkg:deb/ubuntu/linux@5.15.0-142.152?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "5.15.0-142.152"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.13.0-19.19",
"5.15.0-17.17",
"5.15.0-18.18",
"5.15.0-22.22",
"5.15.0-23.23",
"5.15.0-25.25",
"5.15.0-27.28",
"5.15.0-30.31",
"5.15.0-33.34",
"5.15.0-35.36",
"5.15.0-37.39",
"5.15.0-39.42",
"5.15.0-40.43",
"5.15.0-41.44",
"5.15.0-43.46",
"5.15.0-46.49",
"5.15.0-47.51",
"5.15.0-48.54",
"5.15.0-50.56",
"5.15.0-52.58",
"5.15.0-53.59",
"5.15.0-56.62",
"5.15.0-57.63",
"5.15.0-58.64",
"5.15.0-60.66",
"5.15.0-67.74",
"5.15.0-69.76",
"5.15.0-70.77",
"5.15.0-71.78",
"5.15.0-72.79",
"5.15.0-73.80",
"5.15.0-75.82",
"5.15.0-76.83",
"5.15.0-78.85",
"5.15.0-79.86",
"5.15.0-82.91",
"5.15.0-83.92",
"5.15.0-84.93",
"5.15.0-86.96",
"5.15.0-87.97",
"5.15.0-88.98",
"5.15.0-89.99",
"5.15.0-91.101",
"5.15.0-92.102",
"5.15.0-94.104",
"5.15.0-97.107",
"5.15.0-100.110",
"5.15.0-101.111",
"5.15.0-102.112",
"5.15.0-105.115",
"5.15.0-106.116",
"5.15.0-107.117",
"5.15.0-112.122",
"5.15.0-113.123",
"5.15.0-116.126",
"5.15.0-117.127",
"5.15.0-118.128",
"5.15.0-119.129",
"5.15.0-121.131",
"5.15.0-122.132",
"5.15.0-124.134",
"5.15.0-125.135",
"5.15.0-126.136",
"5.15.0-127.137",
"5.15.0-128.138",
"5.15.0-130.140",
"5.15.0-131.141",
"5.15.0-133.144",
"5.15.0-134.145",
"5.15.0-135.146",
"5.15.0-136.147",
"5.15.0-138.148",
"5.15.0-139.149",
"5.15.0-140.150",
"5.15.0-141.151"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-allwinner-5.19-headers-5.19.0-1015",
"binary_version": "5.19.0-1015.15~22.04.1"
},
{
"binary_name": "linux-allwinner-5.19-tools-5.19.0-1015",
"binary_version": "5.19.0-1015.15~22.04.1"
},
{
"binary_name": "linux-buildinfo-5.19.0-1015-allwinner",
"binary_version": "5.19.0-1015.15~22.04.1"
},
{
"binary_name": "linux-headers-5.19.0-1015-allwinner",
"binary_version": "5.19.0-1015.15~22.04.1"
},
{
"binary_name": "linux-image-5.19.0-1015-allwinner",
"binary_version": "5.19.0-1015.15~22.04.1"
},
{
"binary_name": "linux-modules-5.19.0-1015-allwinner",
"binary_version": "5.19.0-1015.15~22.04.1"
},
{
"binary_name": "linux-modules-extra-5.19.0-1015-allwinner",
"binary_version": "5.19.0-1015.15~22.04.1"
},
{
"binary_name": "linux-tools-5.19.0-1015-allwinner",
"binary_version": "5.19.0-1015.15~22.04.1"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "linux-allwinner-5.19",
"purl": "pkg:deb/ubuntu/linux-allwinner-5.19@5.19.0-1015.15~22.04.1?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.19.0-1007.7~22.04.1",
"5.19.0-1009.9~22.04.1",
"5.19.0-1010.10~22.04.1",
"5.19.0-1011.11~22.04.1",
"5.19.0-1012.12~22.04.1",
"5.19.0-1013.13~22.04.1",
"5.19.0-1014.14~22.04.1",
"5.19.0-1015.15~22.04.1"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "linux-aws-cloud-tools-5.15.0-1086",
"binary_version": "5.15.0-1086.93"
},
{
"binary_name": "linux-aws-headers-5.15.0-1086",
"binary_version": "5.15.0-1086.93"
},
{
"binary_name": "linux-aws-tools-5.15.0-1086",
"binary_version": "5.15.0-1086.93"
},
{
"binary_name": "linux-buildinfo-5.15.0-1086-aws",
"binary_version": "5.15.0-1086.93"
},
{
"binary_name": "linux-buildinfo-5.15.0-1086-aws-64k",
"binary_version": "5.15.0-1086.93"
},
{
"binary_name": "linux-cloud-tools-5.15.0-1086-aws",
"binary_version": "5.15.0-1086.93"
},
{
"binary_name": "linux-cloud-tools-5.15.0-1086-aws-64k",
"binary_version": "5.15.0-1086.93"
},
{
"binary_name": "linux-headers-5.15.0-1086-aws",
"binary_version": "5.15.0-1086.93"
},
{
"binary_name": "linux-headers-5.15.0-1086-aws-64k",
"binary_version": "5.15.0-1086.93"
},
{
"binary_name": "linux-image-unsigned-5.15.0-1086-aws",
"binary_version": "5.15.0-1086.93"
},
{
"binary_name": "linux-image-unsigned-5.15.0-1086-aws-64k",
"binary_version": "5.15.0-1086.93"
},
{
"binary_name": "linux-modules-5.15.0-1086-aws",
"binary_version": "5.15.0-1086.93"
},
{
"binary_name": "linux-modules-5.15.0-1086-aws-64k",
"binary_version": "5.15.0-1086.93"
},
{
"binary_name": "linux-modules-extra-5.15.0-1086-aws",
"binary_version": "5.15.0-1086.93"
},
{
"binary_name": "linux-modules-extra-5.15.0-1086-aws-64k",
"binary_version": "5.15.0-1086.93"
},
{
"binary_name": "linux-tools-5.15.0-1086-aws",
"binary_version": "5.15.0-1086.93"
},
{
"binary_name": "linux-tools-5.15.0-1086-aws-64k",
"binary_version": "5.15.0-1086.93"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "linux-aws",
"purl": "pkg:deb/ubuntu/linux-aws@5.15.0-1086.93?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "5.15.0-1086.93"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.13.0-1005.6",
"5.15.0-1002.4",
"5.15.0-1003.5",
"5.15.0-1004.6",
"5.15.0-1005.7",
"5.15.0-1008.10",
"5.15.0-1009.11",
"5.15.0-1011.14",
"5.15.0-1013.17",
"5.15.0-1014.18",
"5.15.0-1015.19",
"5.15.0-1017.21",
"5.15.0-1019.23",
"5.15.0-1020.24",
"5.15.0-1021.25",
"5.15.0-1022.26",
"5.15.0-1023.27",
"5.15.0-1026.30",
"5.15.0-1027.31",
"5.15.0-1028.32",
"5.15.0-1030.34",
"5.15.0-1031.35",
"5.15.0-1033.37",
"5.15.0-1034.38",
"5.15.0-1035.39",
"5.15.0-1036.40",
"5.15.0-1037.41",
"5.15.0-1038.43",
"5.15.0-1039.44",
"5.15.0-1040.45",
"5.15.0-1042.47",
"5.15.0-1043.48",
"5.15.0-1044.49",
"5.15.0-1045.50",
"5.15.0-1047.52",
"5.15.0-1048.53",
"5.15.0-1049.54",
"5.15.0-1050.55",
"5.15.0-1051.56",
"5.15.0-1052.57",
"5.15.0-1053.58",
"5.15.0-1055.60",
"5.15.0-1056.61",
"5.15.0-1057.63",
"5.15.0-1060.66",
"5.15.0-1061.67",
"5.15.0-1062.68",
"5.15.0-1063.69",
"5.15.0-1064.70",
"5.15.0-1065.71",
"5.15.0-1066.72",
"5.15.0-1067.73",
"5.15.0-1068.74",
"5.15.0-1069.75",
"5.15.0-1070.76",
"5.15.0-1071.77",
"5.15.0-1072.78",
"5.15.0-1073.79",
"5.15.0-1076.83",
"5.15.0-1078.85",
"5.15.0-1079.86",
"5.15.0-1080.87",
"5.15.0-1081.88",
"5.15.0-1082.89",
"5.15.0-1083.90",
"5.15.0-1084.91",
"5.15.0-1085.92"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-aws-5.19-cloud-tools-5.19.0-1029",
"binary_version": "5.19.0-1029.30~22.04.1"
},
{
"binary_name": "linux-aws-5.19-headers-5.19.0-1029",
"binary_version": "5.19.0-1029.30~22.04.1"
},
{
"binary_name": "linux-aws-5.19-tools-5.19.0-1029",
"binary_version": "5.19.0-1029.30~22.04.1"
},
{
"binary_name": "linux-buildinfo-5.19.0-1029-aws",
"binary_version": "5.19.0-1029.30~22.04.1"
},
{
"binary_name": "linux-cloud-tools-5.19.0-1029-aws",
"binary_version": "5.19.0-1029.30~22.04.1"
},
{
"binary_name": "linux-headers-5.19.0-1029-aws",
"binary_version": "5.19.0-1029.30~22.04.1"
},
{
"binary_name": "linux-image-unsigned-5.19.0-1029-aws",
"binary_version": "5.19.0-1029.30~22.04.1"
},
{
"binary_name": "linux-modules-5.19.0-1029-aws",
"binary_version": "5.19.0-1029.30~22.04.1"
},
{
"binary_name": "linux-modules-extra-5.19.0-1029-aws",
"binary_version": "5.19.0-1029.30~22.04.1"
},
{
"binary_name": "linux-tools-5.19.0-1029-aws",
"binary_version": "5.19.0-1029.30~22.04.1"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "linux-aws-5.19",
"purl": "pkg:deb/ubuntu/linux-aws-5.19@5.19.0-1029.30~22.04.1?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.19.0-1019.20~22.04.1",
"5.19.0-1020.21~22.04.1",
"5.19.0-1022.23~22.04.1",
"5.19.0-1023.24~22.04.1",
"5.19.0-1024.25~22.04.1",
"5.19.0-1025.26~22.04.1",
"5.19.0-1026.27~22.04.1",
"5.19.0-1027.28~22.04.1",
"5.19.0-1028.29~22.04.1",
"5.19.0-1029.30~22.04.1"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-aws-6.2-cloud-tools-6.2.0-1018",
"binary_version": "6.2.0-1018.18~22.04.1"
},
{
"binary_name": "linux-aws-6.2-headers-6.2.0-1018",
"binary_version": "6.2.0-1018.18~22.04.1"
},
{
"binary_name": "linux-aws-6.2-tools-6.2.0-1018",
"binary_version": "6.2.0-1018.18~22.04.1"
},
{
"binary_name": "linux-buildinfo-6.2.0-1018-aws",
"binary_version": "6.2.0-1018.18~22.04.1"
},
{
"binary_name": "linux-cloud-tools-6.2.0-1018-aws",
"binary_version": "6.2.0-1018.18~22.04.1"
},
{
"binary_name": "linux-headers-6.2.0-1018-aws",
"binary_version": "6.2.0-1018.18~22.04.1"
},
{
"binary_name": "linux-image-unsigned-6.2.0-1018-aws",
"binary_version": "6.2.0-1018.18~22.04.1"
},
{
"binary_name": "linux-modules-6.2.0-1018-aws",
"binary_version": "6.2.0-1018.18~22.04.1"
},
{
"binary_name": "linux-modules-extra-6.2.0-1018-aws",
"binary_version": "6.2.0-1018.18~22.04.1"
},
{
"binary_name": "linux-tools-6.2.0-1018-aws",
"binary_version": "6.2.0-1018.18~22.04.1"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "linux-aws-6.2",
"purl": "pkg:deb/ubuntu/linux-aws-6.2@6.2.0-1018.18~22.04.1?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.2.0-1005.5~22.04.1",
"6.2.0-1006.6~22.04.1",
"6.2.0-1007.7~22.04.1",
"6.2.0-1008.8~22.04.1",
"6.2.0-1009.9~22.04.3",
"6.2.0-1010.10~22.04.1",
"6.2.0-1011.11~22.04.1",
"6.2.0-1012.12~22.04.1",
"6.2.0-1013.13~22.04.1",
"6.2.0-1014.14~22.04.1",
"6.2.0-1015.15~22.04.1",
"6.2.0-1016.16~22.04.1",
"6.2.0-1017.17~22.04.1",
"6.2.0-1018.18~22.04.1"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-aws-6.5-cloud-tools-6.5.0-1024",
"binary_version": "6.5.0-1024.24~22.04.1"
},
{
"binary_name": "linux-aws-6.5-headers-6.5.0-1024",
"binary_version": "6.5.0-1024.24~22.04.1"
},
{
"binary_name": "linux-aws-6.5-tools-6.5.0-1024",
"binary_version": "6.5.0-1024.24~22.04.1"
},
{
"binary_name": "linux-buildinfo-6.5.0-1024-aws",
"binary_version": "6.5.0-1024.24~22.04.1"
},
{
"binary_name": "linux-cloud-tools-6.5.0-1024-aws",
"binary_version": "6.5.0-1024.24~22.04.1"
},
{
"binary_name": "linux-headers-6.5.0-1024-aws",
"binary_version": "6.5.0-1024.24~22.04.1"
},
{
"binary_name": "linux-image-unsigned-6.5.0-1024-aws",
"binary_version": "6.5.0-1024.24~22.04.1"
},
{
"binary_name": "linux-modules-6.5.0-1024-aws",
"binary_version": "6.5.0-1024.24~22.04.1"
},
{
"binary_name": "linux-modules-extra-6.5.0-1024-aws",
"binary_version": "6.5.0-1024.24~22.04.1"
},
{
"binary_name": "linux-tools-6.5.0-1024-aws",
"binary_version": "6.5.0-1024.24~22.04.1"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "linux-aws-6.5",
"purl": "pkg:deb/ubuntu/linux-aws-6.5@6.5.0-1024.24~22.04.1?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.5.0-1008.8~22.04.1",
"6.5.0-1010.10~22.04.1",
"6.5.0-1011.11~22.04.1",
"6.5.0-1012.12~22.04.1",
"6.5.0-1014.14~22.04.1",
"6.5.0-1015.15~22.04.1",
"6.5.0-1016.16~22.04.1",
"6.5.0-1017.17~22.04.2",
"6.5.0-1018.18~22.04.1",
"6.5.0-1020.20~22.04.1",
"6.5.0-1021.21~22.04.1",
"6.5.0-1022.22~22.04.1",
"6.5.0-1023.23~22.04.1",
"6.5.0-1024.24~22.04.1"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "linux-aws-6.8-cloud-tools-6.8.0-1039",
"binary_version": "6.8.0-1039.41~22.04.1"
},
{
"binary_name": "linux-aws-6.8-headers-6.8.0-1039",
"binary_version": "6.8.0-1039.41~22.04.1"
},
{
"binary_name": "linux-aws-6.8-tools-6.8.0-1039",
"binary_version": "6.8.0-1039.41~22.04.1"
},
{
"binary_name": "linux-buildinfo-6.8.0-1039-aws",
"binary_version": "6.8.0-1039.41~22.04.1"
},
{
"binary_name": "linux-buildinfo-6.8.0-1039-aws-64k",
"binary_version": "6.8.0-1039.41~22.04.1"
},
{
"binary_name": "linux-cloud-tools-6.8.0-1039-aws",
"binary_version": "6.8.0-1039.41~22.04.1"
},
{
"binary_name": "linux-cloud-tools-6.8.0-1039-aws-64k",
"binary_version": "6.8.0-1039.41~22.04.1"
},
{
"binary_name": "linux-headers-6.8.0-1039-aws",
"binary_version": "6.8.0-1039.41~22.04.1"
},
{
"binary_name": "linux-headers-6.8.0-1039-aws-64k",
"binary_version": "6.8.0-1039.41~22.04.1"
},
{
"binary_name": "linux-image-unsigned-6.8.0-1039-aws",
"binary_version": "6.8.0-1039.41~22.04.1"
},
{
"binary_name": "linux-image-unsigned-6.8.0-1039-aws-64k",
"binary_version": "6.8.0-1039.41~22.04.1"
},
{
"binary_name": "linux-modules-6.8.0-1039-aws",
"binary_version": "6.8.0-1039.41~22.04.1"
},
{
"binary_name": "linux-modules-6.8.0-1039-aws-64k",
"binary_version": "6.8.0-1039.41~22.04.1"
},
{
"binary_name": "linux-modules-extra-6.8.0-1039-aws",
"binary_version": "6.8.0-1039.41~22.04.1"
},
{
"binary_name": "linux-modules-extra-6.8.0-1039-aws-64k",
"binary_version": "6.8.0-1039.41~22.04.1"
},
{
"binary_name": "linux-tools-6.8.0-1039-aws",
"binary_version": "6.8.0-1039.41~22.04.1"
},
{
"binary_name": "linux-tools-6.8.0-1039-aws-64k",
"binary_version": "6.8.0-1039.41~22.04.1"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "linux-aws-6.8",
"purl": "pkg:deb/ubuntu/linux-aws-6.8@6.8.0-1039.41~22.04.1?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.8.0-1039.41~22.04.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.8.0-1009.9~22.04.2",
"6.8.0-1010.10~22.04.2",
"6.8.0-1011.12~22.04.1",
"6.8.0-1013.14~22.04.1",
"6.8.0-1014.15~22.04.1",
"6.8.0-1015.16~22.04.1",
"6.8.0-1016.17~22.04.2",
"6.8.0-1017.18~22.04.1",
"6.8.0-1018.19~22.04.1",
"6.8.0-1019.21~22.04.1",
"6.8.0-1020.22~22.04.1",
"6.8.0-1021.23~22.04.1",
"6.8.0-1023.25~22.04.1",
"6.8.0-1024.26~22.04.1",
"6.8.0-1027.29~22.04.1",
"6.8.0-1028.30~22.04.1",
"6.8.0-1029.31~22.04.1",
"6.8.0-1030.32~22.04.1",
"6.8.0-1031.33~22.04.1",
"6.8.0-1032.34~22.04.1",
"6.8.0-1033.35~22.04.1",
"6.8.0-1035.37~22.04.1",
"6.8.0-1036.38~22.04.1"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "linux-azure-cloud-tools-5.15.0-1091",
"binary_version": "5.15.0-1091.100"
},
{
"binary_name": "linux-azure-headers-5.15.0-1091",
"binary_version": "5.15.0-1091.100"
},
{
"binary_name": "linux-azure-tools-5.15.0-1091",
"binary_version": "5.15.0-1091.100"
},
{
"binary_name": "linux-buildinfo-5.15.0-1091-azure",
"binary_version": "5.15.0-1091.100"
},
{
"binary_name": "linux-cloud-tools-5.15.0-1091-azure",
"binary_version": "5.15.0-1091.100"
},
{
"binary_name": "linux-headers-5.15.0-1091-azure",
"binary_version": "5.15.0-1091.100"
},
{
"binary_name": "linux-image-unsigned-5.15.0-1091-azure",
"binary_version": "5.15.0-1091.100"
},
{
"binary_name": "linux-modules-5.15.0-1091-azure",
"binary_version": "5.15.0-1091.100"
},
{
"binary_name": "linux-modules-extra-5.15.0-1091-azure",
"binary_version": "5.15.0-1091.100"
},
{
"binary_name": "linux-modules-involflt-5.15.0-1091-azure",
"binary_version": "5.15.0-1091.100"
},
{
"binary_name": "linux-tools-5.15.0-1091-azure",
"binary_version": "5.15.0-1091.100"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "linux-azure",
"purl": "pkg:deb/ubuntu/linux-azure@5.15.0-1091.100?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "5.15.0-1091.100"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.13.0-1006.7",
"5.15.0-1001.2",
"5.15.0-1002.3",
"5.15.0-1003.4",
"5.15.0-1005.6",
"5.15.0-1007.8",
"5.15.0-1008.9",
"5.15.0-1010.12",
"5.15.0-1012.15",
"5.15.0-1013.16",
"5.15.0-1014.17",
"5.15.0-1017.20",
"5.15.0-1019.24",
"5.15.0-1020.25",
"5.15.0-1021.26",
"5.15.0-1022.27",
"5.15.0-1023.29",
"5.15.0-1024.30",
"5.15.0-1029.36",
"5.15.0-1030.37",
"5.15.0-1031.38",
"5.15.0-1033.40",
"5.15.0-1034.41",
"5.15.0-1035.42",
"5.15.0-1036.43",
"5.15.0-1037.44",
"5.15.0-1038.45",
"5.15.0-1039.46",
"5.15.0-1040.47",
"5.15.0-1041.48",
"5.15.0-1042.49",
"5.15.0-1044.51",
"5.15.0-1045.52",
"5.15.0-1046.53",
"5.15.0-1047.54",
"5.15.0-1049.56",
"5.15.0-1050.57",
"5.15.0-1051.59",
"5.15.0-1052.60",
"5.15.0-1053.61",
"5.15.0-1054.62",
"5.15.0-1056.64",
"5.15.0-1057.65",
"5.15.0-1058.66",
"5.15.0-1059.67",
"5.15.0-1060.69",
"5.15.0-1061.70",
"5.15.0-1063.72",
"5.15.0-1064.73",
"5.15.0-1066.75",
"5.15.0-1067.76",
"5.15.0-1068.77",
"5.15.0-1070.79",
"5.15.0-1071.80",
"5.15.0-1072.81",
"5.15.0-1073.82",
"5.15.0-1074.83",
"5.15.0-1075.84",
"5.15.0-1078.87",
"5.15.0-1079.88",
"5.15.0-1081.90",
"5.15.0-1082.91",
"5.15.0-1084.93",
"5.15.0-1086.95",
"5.15.0-1087.96",
"5.15.0-1088.97",
"5.15.0-1089.98",
"5.15.0-1090.99"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-azure-5.19-cloud-tools-5.19.0-1027",
"binary_version": "5.19.0-1027.30~22.04.2"
},
{
"binary_name": "linux-azure-5.19-headers-5.19.0-1027",
"binary_version": "5.19.0-1027.30~22.04.2"
},
{
"binary_name": "linux-azure-5.19-tools-5.19.0-1027",
"binary_version": "5.19.0-1027.30~22.04.2"
},
{
"binary_name": "linux-buildinfo-5.19.0-1027-azure",
"binary_version": "5.19.0-1027.30~22.04.2"
},
{
"binary_name": "linux-cloud-tools-5.19.0-1027-azure",
"binary_version": "5.19.0-1027.30~22.04.2"
},
{
"binary_name": "linux-headers-5.19.0-1027-azure",
"binary_version": "5.19.0-1027.30~22.04.2"
},
{
"binary_name": "linux-image-unsigned-5.19.0-1027-azure",
"binary_version": "5.19.0-1027.30~22.04.2"
},
{
"binary_name": "linux-modules-5.19.0-1027-azure",
"binary_version": "5.19.0-1027.30~22.04.2"
},
{
"binary_name": "linux-modules-extra-5.19.0-1027-azure",
"binary_version": "5.19.0-1027.30~22.04.2"
},
{
"binary_name": "linux-tools-5.19.0-1027-azure",
"binary_version": "5.19.0-1027.30~22.04.2"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "linux-azure-5.19",
"purl": "pkg:deb/ubuntu/linux-azure-5.19@5.19.0-1027.30~22.04.2?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.19.0-1020.21~22.04.1",
"5.19.0-1021.22~22.04.1",
"5.19.0-1022.23~22.04.1",
"5.19.0-1023.24~22.04.1",
"5.19.0-1025.28~22.04.1",
"5.19.0-1026.29~22.04.1",
"5.19.0-1027.30~22.04.2"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-azure-6.2-cloud-tools-6.2.0-1019",
"binary_version": "6.2.0-1019.19~22.04.1"
},
{
"binary_name": "linux-azure-6.2-headers-6.2.0-1019",
"binary_version": "6.2.0-1019.19~22.04.1"
},
{
"binary_name": "linux-azure-6.2-tools-6.2.0-1019",
"binary_version": "6.2.0-1019.19~22.04.1"
},
{
"binary_name": "linux-buildinfo-6.2.0-1019-azure",
"binary_version": "6.2.0-1019.19~22.04.1"
},
{
"binary_name": "linux-cloud-tools-6.2.0-1019-azure",
"binary_version": "6.2.0-1019.19~22.04.1"
},
{
"binary_name": "linux-headers-6.2.0-1019-azure",
"binary_version": "6.2.0-1019.19~22.04.1"
},
{
"binary_name": "linux-image-unsigned-6.2.0-1019-azure",
"binary_version": "6.2.0-1019.19~22.04.1"
},
{
"binary_name": "linux-modules-6.2.0-1019-azure",
"binary_version": "6.2.0-1019.19~22.04.1"
},
{
"binary_name": "linux-modules-extra-6.2.0-1019-azure",
"binary_version": "6.2.0-1019.19~22.04.1"
},
{
"binary_name": "linux-tools-6.2.0-1019-azure",
"binary_version": "6.2.0-1019.19~22.04.1"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "linux-azure-6.2",
"purl": "pkg:deb/ubuntu/linux-azure-6.2@6.2.0-1019.19~22.04.1?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.2.0-1005.5~22.04.1",
"6.2.0-1006.6~22.04.1",
"6.2.0-1007.7~22.04.1",
"6.2.0-1008.8~22.04.1",
"6.2.0-1009.9~22.04.3",
"6.2.0-1011.11~22.04.1",
"6.2.0-1012.12~22.04.1",
"6.2.0-1014.14~22.04.1",
"6.2.0-1015.15~22.04.1",
"6.2.0-1016.16~22.04.1",
"6.2.0-1017.17~22.04.1",
"6.2.0-1018.18~22.04.1",
"6.2.0-1019.19~22.04.1"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-azure-6.5-cloud-tools-6.5.0-1025",
"binary_version": "6.5.0-1025.26~22.04.1"
},
{
"binary_name": "linux-azure-6.5-headers-6.5.0-1025",
"binary_version": "6.5.0-1025.26~22.04.1"
},
{
"binary_name": "linux-azure-6.5-tools-6.5.0-1025",
"binary_version": "6.5.0-1025.26~22.04.1"
},
{
"binary_name": "linux-buildinfo-6.5.0-1025-azure",
"binary_version": "6.5.0-1025.26~22.04.1"
},
{
"binary_name": "linux-cloud-tools-6.5.0-1025-azure",
"binary_version": "6.5.0-1025.26~22.04.1"
},
{
"binary_name": "linux-headers-6.5.0-1025-azure",
"binary_version": "6.5.0-1025.26~22.04.1"
},
{
"binary_name": "linux-image-unsigned-6.5.0-1025-azure",
"binary_version": "6.5.0-1025.26~22.04.1"
},
{
"binary_name": "linux-modules-6.5.0-1025-azure",
"binary_version": "6.5.0-1025.26~22.04.1"
},
{
"binary_name": "linux-modules-extra-6.5.0-1025-azure",
"binary_version": "6.5.0-1025.26~22.04.1"
},
{
"binary_name": "linux-tools-6.5.0-1025-azure",
"binary_version": "6.5.0-1025.26~22.04.1"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "linux-azure-6.5",
"purl": "pkg:deb/ubuntu/linux-azure-6.5@6.5.0-1025.26~22.04.1?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.5.0-1007.7~22.04.1",
"6.5.0-1009.9~22.04.1",
"6.5.0-1010.10~22.04.1",
"6.5.0-1011.11~22.04.1",
"6.5.0-1015.15~22.04.1",
"6.5.0-1016.16~22.04.1",
"6.5.0-1017.17~22.04.1",
"6.5.0-1018.19~22.04.2",
"6.5.0-1019.20~22.04.1",
"6.5.0-1021.22~22.04.1",
"6.5.0-1022.23~22.04.1",
"6.5.0-1023.24~22.04.1",
"6.5.0-1024.25~22.04.1",
"6.5.0-1025.26~22.04.1"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "linux-azure-6.8-cloud-tools-6.8.0-1036",
"binary_version": "6.8.0-1036.42~22.04.1"
},
{
"binary_name": "linux-azure-6.8-headers-6.8.0-1036",
"binary_version": "6.8.0-1036.42~22.04.1"
},
{
"binary_name": "linux-azure-6.8-tools-6.8.0-1036",
"binary_version": "6.8.0-1036.42~22.04.1"
},
{
"binary_name": "linux-buildinfo-6.8.0-1036-azure",
"binary_version": "6.8.0-1036.42~22.04.1"
},
{
"binary_name": "linux-cloud-tools-6.8.0-1036-azure",
"binary_version": "6.8.0-1036.42~22.04.1"
},
{
"binary_name": "linux-headers-6.8.0-1036-azure",
"binary_version": "6.8.0-1036.42~22.04.1"
},
{
"binary_name": "linux-image-unsigned-6.8.0-1036-azure",
"binary_version": "6.8.0-1036.42~22.04.1"
},
{
"binary_name": "linux-modules-6.8.0-1036-azure",
"binary_version": "6.8.0-1036.42~22.04.1"
},
{
"binary_name": "linux-modules-extra-6.8.0-1036-azure",
"binary_version": "6.8.0-1036.42~22.04.1"
},
{
"binary_name": "linux-modules-involflt-6.8.0-1036-azure",
"binary_version": "6.8.0-1036.42~22.04.1"
},
{
"binary_name": "linux-modules-iwlwifi-6.8.0-1036-azure",
"binary_version": "6.8.0-1036.42~22.04.1"
},
{
"binary_name": "linux-tools-6.8.0-1036-azure",
"binary_version": "6.8.0-1036.42~22.04.1"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "linux-azure-6.8",
"purl": "pkg:deb/ubuntu/linux-azure-6.8@6.8.0-1036.42~22.04.1?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.8.0-1036.42~22.04.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.8.0-1008.8~22.04.1",
"6.8.0-1009.9~22.04.1",
"6.8.0-1010.10~22.04.1",
"6.8.0-1012.14~22.04.1",
"6.8.0-1013.15~22.04.1",
"6.8.0-1014.16~22.04.1",
"6.8.0-1015.17~22.04.2",
"6.8.0-1017.20~22.04.1",
"6.8.0-1018.21~22.04.1",
"6.8.0-1020.23~22.04.1",
"6.8.0-1021.25~22.04.1",
"6.8.0-1025.30~22.04.1",
"6.8.0-1026.31~22.04.1",
"6.8.0-1027.32~22.04.1",
"6.8.0-1028.33~22.04.1",
"6.8.0-1029.34~22.04.1",
"6.8.0-1030.35~22.04.1",
"6.8.0-1031.36~22.04.1",
"6.8.0-1034.39~22.04.1"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-azure-fde-cloud-tools-5.15.0-1117",
"binary_version": "5.15.0-1117.126"
},
{
"binary_name": "linux-azure-fde-headers-5.15.0-1117",
"binary_version": "5.15.0-1117.126"
},
{
"binary_name": "linux-azure-fde-tools-5.15.0-1117",
"binary_version": "5.15.0-1117.126"
},
{
"binary_name": "linux-buildinfo-5.15.0-1117-azure-fde",
"binary_version": "5.15.0-1117.126"
},
{
"binary_name": "linux-cloud-tools-5.15.0-1117-azure-fde",
"binary_version": "5.15.0-1117.126"
},
{
"binary_name": "linux-headers-5.15.0-1117-azure-fde",
"binary_version": "5.15.0-1117.126"
},
{
"binary_name": "linux-image-unsigned-5.15.0-1117-azure-fde",
"binary_version": "5.15.0-1117.126"
},
{
"binary_name": "linux-modules-5.15.0-1117-azure-fde",
"binary_version": "5.15.0-1117.126"
},
{
"binary_name": "linux-modules-extra-5.15.0-1117-azure-fde",
"binary_version": "5.15.0-1117.126"
},
{
"binary_name": "linux-modules-involflt-5.15.0-1117-azure-fde",
"binary_version": "5.15.0-1117.126"
},
{
"binary_name": "linux-tools-5.15.0-1117-azure-fde",
"binary_version": "5.15.0-1117.126"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "linux-azure-fde",
"purl": "pkg:deb/ubuntu/linux-azure-fde@5.15.0-1117.126?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.15.0-1019.24.1",
"5.15.0-1024.30.1",
"5.15.0-1029.36.1",
"5.15.0-1030.37.1",
"5.15.0-1031.38.1",
"5.15.0-1033.40.1",
"5.15.0-1034.41.1",
"5.15.0-1035.42.1",
"5.15.0-1036.43.1",
"5.15.0-1037.44.1",
"5.15.0-1038.45.1",
"5.15.0-1039.46.1",
"5.15.0-1041.48.1",
"5.15.0-1042.49.1",
"5.15.0-1044.51.1",
"5.15.0-1045.52.1",
"5.15.0-1046.53.1",
"5.15.0-1047.54.1",
"5.15.0-1049.56.1",
"5.15.0-1050.57.1",
"5.15.0-1051.59.1",
"5.15.0-1052.60.1",
"5.15.0-1053.61.1",
"5.15.0-1054.62.1",
"5.15.0-1056.64.1",
"5.15.0-1057.65.1",
"5.15.0-1058.66.1",
"5.15.0-1059.67.1",
"5.15.0-1060.69.1",
"5.15.0-1061.70.1",
"5.15.0-1063.72.1",
"5.15.0-1064.73.1",
"5.15.0-1065.74.1",
"5.15.0-1067.76.1",
"5.15.0-1068.77.1",
"5.15.0-1070.79.1",
"5.15.0-1071.80.1",
"5.15.0-1072.81.1",
"5.15.0-1073.82.1",
"5.15.0-1076.85.1",
"5.15.0-1078.87.1",
"5.15.0-1081.90.1",
"5.15.0-1082.91.1",
"5.15.0-1084.93.1",
"5.15.0-1086.95.1",
"5.15.0-1087.96.1",
"5.15.0-1088.97.1",
"5.15.0-1089.98.1",
"5.15.0-1090.99.1",
"5.15.0-1091.100.1",
"5.15.0-1092.101.1",
"5.15.0-1094.103.1",
"5.15.0-1095.104.1",
"5.15.0-1096.105.1",
"5.15.0-1097.106.1",
"5.15.0-1098.107.1",
"5.15.0-1102.111.1",
"5.15.0-1109.118.1",
"5.15.0-1110.119.1",
"5.15.0-1111.120.1",
"5.15.0-1114.123",
"5.15.0-1116.125",
"5.15.0-1117.126"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-image-unsigned-5.19.0-1027-azure-fde",
"binary_version": "5.19.0-1027.30~22.04.2.1"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "linux-azure-fde-5.19",
"purl": "pkg:deb/ubuntu/linux-azure-fde-5.19@5.19.0-1027.30~22.04.2.1?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.19.0-1025.28~22.04.1.1",
"5.19.0-1026.29~22.04.1.1",
"5.19.0-1027.30~22.04.2.1"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-image-unsigned-6.2.0-1019-azure-fde",
"binary_version": "6.2.0-1019.19~22.04.1.1"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "linux-azure-fde-6.2",
"purl": "pkg:deb/ubuntu/linux-azure-fde-6.2@6.2.0-1019.19~22.04.1.1?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.2.0-1008.8~22.04.1.1",
"6.2.0-1009.9~22.04.3.1",
"6.2.0-1011.11~22.04.1.1",
"6.2.0-1012.12~22.04.1.1",
"6.2.0-1014.14~22.04.1.1",
"6.2.0-1015.15~22.04.1.1",
"6.2.0-1016.16~22.04.1.1",
"6.2.0-1017.17~22.04.1.1",
"6.2.0-1018.18~22.04.1.1",
"6.2.0-1019.19~22.04.1.1"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "linux-buildinfo-5.15.0-1085-gcp",
"binary_version": "5.15.0-1085.94"
},
{
"binary_name": "linux-gcp-headers-5.15.0-1085",
"binary_version": "5.15.0-1085.94"
},
{
"binary_name": "linux-gcp-tools-5.15.0-1085",
"binary_version": "5.15.0-1085.94"
},
{
"binary_name": "linux-headers-5.15.0-1085-gcp",
"binary_version": "5.15.0-1085.94"
},
{
"binary_name": "linux-image-unsigned-5.15.0-1085-gcp",
"binary_version": "5.15.0-1085.94"
},
{
"binary_name": "linux-modules-5.15.0-1085-gcp",
"binary_version": "5.15.0-1085.94"
},
{
"binary_name": "linux-modules-extra-5.15.0-1085-gcp",
"binary_version": "5.15.0-1085.94"
},
{
"binary_name": "linux-tools-5.15.0-1085-gcp",
"binary_version": "5.15.0-1085.94"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "linux-gcp",
"purl": "pkg:deb/ubuntu/linux-gcp@5.15.0-1085.94?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "5.15.0-1085.94"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.13.0-1005.6",
"5.15.0-1001.3",
"5.15.0-1002.5",
"5.15.0-1003.6",
"5.15.0-1004.7",
"5.15.0-1005.8",
"5.15.0-1006.9",
"5.15.0-1008.12",
"5.15.0-1010.15",
"5.15.0-1013.18",
"5.15.0-1016.21",
"5.15.0-1017.23",
"5.15.0-1018.24",
"5.15.0-1019.25",
"5.15.0-1021.28",
"5.15.0-1022.29",
"5.15.0-1025.32",
"5.15.0-1026.33",
"5.15.0-1027.34",
"5.15.0-1029.36",
"5.15.0-1030.37",
"5.15.0-1031.38",
"5.15.0-1032.40",
"5.15.0-1034.42",
"5.15.0-1035.43",
"5.15.0-1036.44",
"5.15.0-1037.45",
"5.15.0-1038.46",
"5.15.0-1039.47",
"5.15.0-1040.48",
"5.15.0-1041.49",
"5.15.0-1042.50",
"5.15.0-1044.52",
"5.15.0-1045.53",
"5.15.0-1046.54",
"5.15.0-1047.55",
"5.15.0-1048.56",
"5.15.0-1049.57",
"5.15.0-1051.59",
"5.15.0-1052.60",
"5.15.0-1053.61",
"5.15.0-1054.62",
"5.15.0-1055.63",
"5.15.0-1058.66",
"5.15.0-1059.67",
"5.15.0-1060.68",
"5.15.0-1062.70",
"5.15.0-1063.71",
"5.15.0-1064.72",
"5.15.0-1065.73",
"5.15.0-1066.74",
"5.15.0-1067.75",
"5.15.0-1068.76",
"5.15.0-1069.77",
"5.15.0-1070.78",
"5.15.0-1071.79",
"5.15.0-1072.80",
"5.15.0-1073.81",
"5.15.0-1074.83",
"5.15.0-1075.84",
"5.15.0-1077.86",
"5.15.0-1078.87",
"5.15.0-1079.88",
"5.15.0-1080.89",
"5.15.0-1081.90",
"5.15.0-1082.91",
"5.15.0-1083.92",
"5.15.0-1084.93"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-buildinfo-5.19.0-1030-gcp",
"binary_version": "5.19.0-1030.32~22.04.1"
},
{
"binary_name": "linux-gcp-5.19-headers-5.19.0-1030",
"binary_version": "5.19.0-1030.32~22.04.1"
},
{
"binary_name": "linux-gcp-5.19-tools-5.19.0-1030",
"binary_version": "5.19.0-1030.32~22.04.1"
},
{
"binary_name": "linux-headers-5.19.0-1030-gcp",
"binary_version": "5.19.0-1030.32~22.04.1"
},
{
"binary_name": "linux-image-unsigned-5.19.0-1030-gcp",
"binary_version": "5.19.0-1030.32~22.04.1"
},
{
"binary_name": "linux-modules-5.19.0-1030-gcp",
"binary_version": "5.19.0-1030.32~22.04.1"
},
{
"binary_name": "linux-modules-extra-5.19.0-1030-gcp",
"binary_version": "5.19.0-1030.32~22.04.1"
},
{
"binary_name": "linux-tools-5.19.0-1030-gcp",
"binary_version": "5.19.0-1030.32~22.04.1"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "linux-gcp-5.19",
"purl": "pkg:deb/ubuntu/linux-gcp-5.19@5.19.0-1030.32~22.04.1?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.19.0-1020.22~22.04.2",
"5.19.0-1021.23~22.04.1",
"5.19.0-1022.24~22.04.1",
"5.19.0-1024.26~22.04.1",
"5.19.0-1025.27~22.04.1",
"5.19.0-1026.28~22.04.1",
"5.19.0-1027.29~22.04.1",
"5.19.0-1030.32~22.04.1"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-buildinfo-6.2.0-1021-gcp",
"binary_version": "6.2.0-1021.23~22.04.1"
},
{
"binary_name": "linux-gcp-6.2-headers-6.2.0-1021",
"binary_version": "6.2.0-1021.23~22.04.1"
},
{
"binary_name": "linux-gcp-6.2-tools-6.2.0-1021",
"binary_version": "6.2.0-1021.23~22.04.1"
},
{
"binary_name": "linux-headers-6.2.0-1021-gcp",
"binary_version": "6.2.0-1021.23~22.04.1"
},
{
"binary_name": "linux-image-unsigned-6.2.0-1021-gcp",
"binary_version": "6.2.0-1021.23~22.04.1"
},
{
"binary_name": "linux-modules-6.2.0-1021-gcp",
"binary_version": "6.2.0-1021.23~22.04.1"
},
{
"binary_name": "linux-modules-extra-6.2.0-1021-gcp",
"binary_version": "6.2.0-1021.23~22.04.1"
},
{
"binary_name": "linux-tools-6.2.0-1021-gcp",
"binary_version": "6.2.0-1021.23~22.04.1"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "linux-gcp-6.2",
"purl": "pkg:deb/ubuntu/linux-gcp-6.2@6.2.0-1021.23~22.04.1?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.2.0-1009.9~22.04.3",
"6.2.0-1010.10~22.04.1",
"6.2.0-1011.11~22.04.1",
"6.2.0-1011.11~22.04.3",
"6.2.0-1012.12~22.04.1",
"6.2.0-1013.13~22.04.1",
"6.2.0-1014.14~22.04.1",
"6.2.0-1016.18~22.04.1",
"6.2.0-1017.19~22.04.1",
"6.2.0-1018.20~22.04.1",
"6.2.0-1019.21~22.04.1",
"6.2.0-1021.23~22.04.1"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-buildinfo-6.5.0-1025-gcp",
"binary_version": "6.5.0-1025.27~22.04.1"
},
{
"binary_name": "linux-gcp-6.5-headers-6.5.0-1025",
"binary_version": "6.5.0-1025.27~22.04.1"
},
{
"binary_name": "linux-gcp-6.5-tools-6.5.0-1025",
"binary_version": "6.5.0-1025.27~22.04.1"
},
{
"binary_name": "linux-headers-6.5.0-1025-gcp",
"binary_version": "6.5.0-1025.27~22.04.1"
},
{
"binary_name": "linux-image-unsigned-6.5.0-1025-gcp",
"binary_version": "6.5.0-1025.27~22.04.1"
},
{
"binary_name": "linux-modules-6.5.0-1025-gcp",
"binary_version": "6.5.0-1025.27~22.04.1"
},
{
"binary_name": "linux-modules-extra-6.5.0-1025-gcp",
"binary_version": "6.5.0-1025.27~22.04.1"
},
{
"binary_name": "linux-modules-iwlwifi-6.5.0-1025-gcp",
"binary_version": "6.5.0-1025.27~22.04.1"
},
{
"binary_name": "linux-tools-6.5.0-1025-gcp",
"binary_version": "6.5.0-1025.27~22.04.1"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "linux-gcp-6.5",
"purl": "pkg:deb/ubuntu/linux-gcp-6.5@6.5.0-1025.27~22.04.1?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.5.0-1010.10~22.04.3",
"6.5.0-1011.11~22.04.1",
"6.5.0-1013.13~22.04.1",
"6.5.0-1014.14~22.04.1",
"6.5.0-1015.15~22.04.1",
"6.5.0-1016.16~22.04.1",
"6.5.0-1017.17~22.04.1",
"6.5.0-1018.18~22.04.1",
"6.5.0-1020.20~22.04.1",
"6.5.0-1022.24~22.04.1",
"6.5.0-1023.25~22.04.1",
"6.5.0-1024.26~22.04.1",
"6.5.0-1025.27~22.04.1"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "linux-buildinfo-6.8.0-1040-gcp",
"binary_version": "6.8.0-1040.42~22.04.1"
},
{
"binary_name": "linux-buildinfo-6.8.0-1040-gcp-64k",
"binary_version": "6.8.0-1040.42~22.04.1"
},
{
"binary_name": "linux-gcp-6.8-headers-6.8.0-1040",
"binary_version": "6.8.0-1040.42~22.04.1"
},
{
"binary_name": "linux-gcp-6.8-tools-6.8.0-1040",
"binary_version": "6.8.0-1040.42~22.04.1"
},
{
"binary_name": "linux-headers-6.8.0-1040-gcp",
"binary_version": "6.8.0-1040.42~22.04.1"
},
{
"binary_name": "linux-headers-6.8.0-1040-gcp-64k",
"binary_version": "6.8.0-1040.42~22.04.1"
},
{
"binary_name": "linux-image-unsigned-6.8.0-1040-gcp",
"binary_version": "6.8.0-1040.42~22.04.1"
},
{
"binary_name": "linux-image-unsigned-6.8.0-1040-gcp-64k",
"binary_version": "6.8.0-1040.42~22.04.1"
},
{
"binary_name": "linux-modules-6.8.0-1040-gcp",
"binary_version": "6.8.0-1040.42~22.04.1"
},
{
"binary_name": "linux-modules-6.8.0-1040-gcp-64k",
"binary_version": "6.8.0-1040.42~22.04.1"
},
{
"binary_name": "linux-modules-extra-6.8.0-1040-gcp",
"binary_version": "6.8.0-1040.42~22.04.1"
},
{
"binary_name": "linux-modules-extra-6.8.0-1040-gcp-64k",
"binary_version": "6.8.0-1040.42~22.04.1"
},
{
"binary_name": "linux-tools-6.8.0-1040-gcp",
"binary_version": "6.8.0-1040.42~22.04.1"
},
{
"binary_name": "linux-tools-6.8.0-1040-gcp-64k",
"binary_version": "6.8.0-1040.42~22.04.1"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "linux-gcp-6.8",
"purl": "pkg:deb/ubuntu/linux-gcp-6.8@6.8.0-1040.42~22.04.1?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.8.0-1040.42~22.04.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.8.0-1010.11~22.04.1",
"6.8.0-1011.12~22.04.1",
"6.8.0-1012.13~22.04.1",
"6.8.0-1013.14~22.04.1",
"6.8.0-1014.16~22.04.1",
"6.8.0-1015.17~22.04.1",
"6.8.0-1016.18~22.04.1",
"6.8.0-1017.19~22.04.1",
"6.8.0-1018.20~22.04.1",
"6.8.0-1019.21~22.04.1",
"6.8.0-1020.22~22.04.1",
"6.8.0-1021.23~22.04.1",
"6.8.0-1024.26~22.04.1",
"6.8.0-1025.27~22.04.1",
"6.8.0-1026.28~22.04.1",
"6.8.0-1027.29~22.04.1",
"6.8.0-1028.30~22.04.1",
"6.8.0-1029.31~22.04.1",
"6.8.0-1030.32~22.04.1",
"6.8.0-1031.33~22.04.1",
"6.8.0-1032.34~22.04.1",
"6.8.0-1033.35~22.04.1",
"6.8.0-1034.36~22.04.2",
"6.8.0-1036.38~22.04.1",
"6.8.0-1037.39~22.04.1"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "linux-buildinfo-5.15.0-1083-gke",
"binary_version": "5.15.0-1083.89"
},
{
"binary_name": "linux-gke-headers-5.15.0-1083",
"binary_version": "5.15.0-1083.89"
},
{
"binary_name": "linux-gke-tools-5.15.0-1083",
"binary_version": "5.15.0-1083.89"
},
{
"binary_name": "linux-headers-5.15.0-1083-gke",
"binary_version": "5.15.0-1083.89"
},
{
"binary_name": "linux-image-unsigned-5.15.0-1083-gke",
"binary_version": "5.15.0-1083.89"
},
{
"binary_name": "linux-modules-5.15.0-1083-gke",
"binary_version": "5.15.0-1083.89"
},
{
"binary_name": "linux-modules-extra-5.15.0-1083-gke",
"binary_version": "5.15.0-1083.89"
},
{
"binary_name": "linux-tools-5.15.0-1083-gke",
"binary_version": "5.15.0-1083.89"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "linux-gke",
"purl": "pkg:deb/ubuntu/linux-gke@5.15.0-1083.89?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "5.15.0-1083.89"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.15.0-1002.2",
"5.15.0-1003.3",
"5.15.0-1004.5",
"5.15.0-1005.6",
"5.15.0-1006.7",
"5.15.0-1008.10",
"5.15.0-1010.13",
"5.15.0-1011.14",
"5.15.0-1014.17",
"5.15.0-1015.18",
"5.15.0-1016.19",
"5.15.0-1017.20",
"5.15.0-1019.23",
"5.15.0-1020.25",
"5.15.0-1023.28",
"5.15.0-1024.29",
"5.15.0-1027.32",
"5.15.0-1028.33",
"5.15.0-1030.35",
"5.15.0-1031.36",
"5.15.0-1032.37",
"5.15.0-1033.38",
"5.15.0-1034.39",
"5.15.0-1035.40",
"5.15.0-1036.41",
"5.15.0-1037.42",
"5.15.0-1038.43",
"5.15.0-1039.44",
"5.15.0-1040.45",
"5.15.0-1041.46",
"5.15.0-1042.47",
"5.15.0-1044.49",
"5.15.0-1045.50",
"5.15.0-1046.51",
"5.15.0-1047.52",
"5.15.0-1048.53",
"5.15.0-1049.54",
"5.15.0-1050.55",
"5.15.0-1051.56",
"5.15.0-1052.57",
"5.15.0-1053.58",
"5.15.0-1054.59",
"5.15.0-1057.62",
"5.15.0-1058.63",
"5.15.0-1059.64",
"5.15.0-1060.66",
"5.15.0-1061.67",
"5.15.0-1062.68",
"5.15.0-1063.69",
"5.15.0-1064.70",
"5.15.0-1065.71",
"5.15.0-1066.72",
"5.15.0-1067.73",
"5.15.0-1068.74",
"5.15.0-1069.75",
"5.15.0-1070.76",
"5.15.0-1071.77",
"5.15.0-1072.78",
"5.15.0-1073.79",
"5.15.0-1075.81",
"5.15.0-1076.82",
"5.15.0-1077.83",
"5.15.0-1078.84",
"5.15.0-1079.85",
"5.15.0-1080.86",
"5.15.0-1081.87",
"5.15.0-1082.88"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "linux-buildinfo-5.15.0-1068-gkeop",
"binary_version": "5.15.0-1068.76"
},
{
"binary_name": "linux-cloud-tools-5.15.0-1068-gkeop",
"binary_version": "5.15.0-1068.76"
},
{
"binary_name": "linux-gkeop-cloud-tools-5.15.0-1068",
"binary_version": "5.15.0-1068.76"
},
{
"binary_name": "linux-gkeop-headers-5.15.0-1068",
"binary_version": "5.15.0-1068.76"
},
{
"binary_name": "linux-gkeop-tools-5.15.0-1068",
"binary_version": "5.15.0-1068.76"
},
{
"binary_name": "linux-headers-5.15.0-1068-gkeop",
"binary_version": "5.15.0-1068.76"
},
{
"binary_name": "linux-image-unsigned-5.15.0-1068-gkeop",
"binary_version": "5.15.0-1068.76"
},
{
"binary_name": "linux-modules-5.15.0-1068-gkeop",
"binary_version": "5.15.0-1068.76"
},
{
"binary_name": "linux-modules-extra-5.15.0-1068-gkeop",
"binary_version": "5.15.0-1068.76"
},
{
"binary_name": "linux-tools-5.15.0-1068-gkeop",
"binary_version": "5.15.0-1068.76"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "linux-gkeop",
"purl": "pkg:deb/ubuntu/linux-gkeop@5.15.0-1068.76?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "5.15.0-1068.76"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.15.0-1001.2",
"5.15.0-1002.4",
"5.15.0-1003.5",
"5.15.0-1004.6",
"5.15.0-1005.7",
"5.15.0-1007.10",
"5.15.0-1008.12",
"5.15.0-1011.15",
"5.15.0-1012.16",
"5.15.0-1013.17",
"5.15.0-1015.19",
"5.15.0-1016.21",
"5.15.0-1017.22",
"5.15.0-1018.23",
"5.15.0-1019.24",
"5.15.0-1020.25",
"5.15.0-1021.26",
"5.15.0-1022.27",
"5.15.0-1023.28",
"5.15.0-1024.29",
"5.15.0-1025.30",
"5.15.0-1026.31",
"5.15.0-1027.32",
"5.15.0-1028.33",
"5.15.0-1030.35",
"5.15.0-1031.37",
"5.15.0-1032.38",
"5.15.0-1033.39",
"5.15.0-1034.40",
"5.15.0-1035.41",
"5.15.0-1036.42",
"5.15.0-1037.43",
"5.15.0-1038.44",
"5.15.0-1039.45",
"5.15.0-1040.46",
"5.15.0-1043.50",
"5.15.0-1044.51",
"5.15.0-1045.52",
"5.15.0-1046.53",
"5.15.0-1047.54",
"5.15.0-1048.55",
"5.15.0-1049.56",
"5.15.0-1050.57",
"5.15.0-1051.58",
"5.15.0-1052.59",
"5.15.0-1053.60",
"5.15.0-1054.61",
"5.15.0-1055.62",
"5.15.0-1056.63",
"5.15.0-1057.64",
"5.15.0-1058.66",
"5.15.0-1059.67",
"5.15.0-1060.68",
"5.15.0-1061.69",
"5.15.0-1062.70",
"5.15.0-1063.71",
"5.15.0-1064.72",
"5.15.0-1065.73",
"5.15.0-1066.74",
"5.15.0-1067.75"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-buildinfo-5.19.0-50-generic",
"binary_version": "5.19.0-50.50"
},
{
"binary_name": "linux-buildinfo-5.19.0-50-generic-64k",
"binary_version": "5.19.0-50.50"
},
{
"binary_name": "linux-buildinfo-5.19.0-50-generic-lpae",
"binary_version": "5.19.0-50.50"
},
{
"binary_name": "linux-cloud-tools-5.19.0-50-generic",
"binary_version": "5.19.0-50.50"
},
{
"binary_name": "linux-headers-5.19.0-50-generic",
"binary_version": "5.19.0-50.50"
},
{
"binary_name": "linux-headers-5.19.0-50-generic-64k",
"binary_version": "5.19.0-50.50"
},
{
"binary_name": "linux-headers-5.19.0-50-generic-lpae",
"binary_version": "5.19.0-50.50"
},
{
"binary_name": "linux-hwe-5.19-cloud-tools-5.19.0-50",
"binary_version": "5.19.0-50.50"
},
{
"binary_name": "linux-hwe-5.19-cloud-tools-common",
"binary_version": "5.19.0-50.50"
},
{
"binary_name": "linux-hwe-5.19-headers-5.19.0-50",
"binary_version": "5.19.0-50.50"
},
{
"binary_name": "linux-hwe-5.19-tools-5.19.0-50",
"binary_version": "5.19.0-50.50"
},
{
"binary_name": "linux-hwe-5.19-tools-common",
"binary_version": "5.19.0-50.50"
},
{
"binary_name": "linux-hwe-5.19-tools-host",
"binary_version": "5.19.0-50.50"
},
{
"binary_name": "linux-image-5.19.0-50-generic",
"binary_version": "5.19.0-50.50"
},
{
"binary_name": "linux-image-5.19.0-50-generic-lpae",
"binary_version": "5.19.0-50.50"
},
{
"binary_name": "linux-image-unsigned-5.19.0-50-generic",
"binary_version": "5.19.0-50.50"
},
{
"binary_name": "linux-image-unsigned-5.19.0-50-generic-64k",
"binary_version": "5.19.0-50.50"
},
{
"binary_name": "linux-modules-5.19.0-50-generic",
"binary_version": "5.19.0-50.50"
},
{
"binary_name": "linux-modules-5.19.0-50-generic-64k",
"binary_version": "5.19.0-50.50"
},
{
"binary_name": "linux-modules-5.19.0-50-generic-lpae",
"binary_version": "5.19.0-50.50"
},
{
"binary_name": "linux-modules-extra-5.19.0-50-generic",
"binary_version": "5.19.0-50.50"
},
{
"binary_name": "linux-modules-ipu6-5.19.0-50-generic",
"binary_version": "5.19.0-50.50"
},
{
"binary_name": "linux-modules-ivsc-5.19.0-50-generic",
"binary_version": "5.19.0-50.50"
},
{
"binary_name": "linux-modules-iwlwifi-5.19.0-50-generic",
"binary_version": "5.19.0-50.50"
},
{
"binary_name": "linux-source-5.19.0",
"binary_version": "5.19.0-50.50"
},
{
"binary_name": "linux-tools-5.19.0-50-generic",
"binary_version": "5.19.0-50.50"
},
{
"binary_name": "linux-tools-5.19.0-50-generic-64k",
"binary_version": "5.19.0-50.50"
},
{
"binary_name": "linux-tools-5.19.0-50-generic-lpae",
"binary_version": "5.19.0-50.50"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "linux-hwe-5.19",
"purl": "pkg:deb/ubuntu/linux-hwe-5.19@5.19.0-50.50?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.19.0-28.29~22.04.1",
"5.19.0-32.33~22.04.1",
"5.19.0-35.36~22.04.1",
"5.19.0-38.39~22.04.1",
"5.19.0-40.41~22.04.1",
"5.19.0-41.42~22.04.1",
"5.19.0-42.43~22.04.1",
"5.19.0-43.44~22.04.1",
"5.19.0-45.46~22.04.1",
"5.19.0-46.47~22.04.1",
"5.19.0-50.50"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-buildinfo-6.2.0-39-generic",
"binary_version": "6.2.0-39.40~22.04.1"
},
{
"binary_name": "linux-buildinfo-6.2.0-39-generic-64k",
"binary_version": "6.2.0-39.40~22.04.1"
},
{
"binary_name": "linux-buildinfo-6.2.0-39-generic-lpae",
"binary_version": "6.2.0-39.40~22.04.1"
},
{
"binary_name": "linux-cloud-tools-6.2.0-39-generic",
"binary_version": "6.2.0-39.40~22.04.1"
},
{
"binary_name": "linux-headers-6.2.0-39-generic",
"binary_version": "6.2.0-39.40~22.04.1"
},
{
"binary_name": "linux-headers-6.2.0-39-generic-64k",
"binary_version": "6.2.0-39.40~22.04.1"
},
{
"binary_name": "linux-headers-6.2.0-39-generic-lpae",
"binary_version": "6.2.0-39.40~22.04.1"
},
{
"binary_name": "linux-hwe-6.2-cloud-tools-6.2.0-39",
"binary_version": "6.2.0-39.40~22.04.1"
},
{
"binary_name": "linux-hwe-6.2-cloud-tools-common",
"binary_version": "6.2.0-39.40~22.04.1"
},
{
"binary_name": "linux-hwe-6.2-headers-6.2.0-39",
"binary_version": "6.2.0-39.40~22.04.1"
},
{
"binary_name": "linux-hwe-6.2-tools-6.2.0-39",
"binary_version": "6.2.0-39.40~22.04.1"
},
{
"binary_name": "linux-hwe-6.2-tools-common",
"binary_version": "6.2.0-39.40~22.04.1"
},
{
"binary_name": "linux-hwe-6.2-tools-host",
"binary_version": "6.2.0-39.40~22.04.1"
},
{
"binary_name": "linux-image-6.2.0-39-generic",
"binary_version": "6.2.0-39.40~22.04.1"
},
{
"binary_name": "linux-image-6.2.0-39-generic-lpae",
"binary_version": "6.2.0-39.40~22.04.1"
},
{
"binary_name": "linux-image-unsigned-6.2.0-39-generic",
"binary_version": "6.2.0-39.40~22.04.1"
},
{
"binary_name": "linux-image-unsigned-6.2.0-39-generic-64k",
"binary_version": "6.2.0-39.40~22.04.1"
},
{
"binary_name": "linux-modules-6.2.0-39-generic",
"binary_version": "6.2.0-39.40~22.04.1"
},
{
"binary_name": "linux-modules-6.2.0-39-generic-64k",
"binary_version": "6.2.0-39.40~22.04.1"
},
{
"binary_name": "linux-modules-6.2.0-39-generic-lpae",
"binary_version": "6.2.0-39.40~22.04.1"
},
{
"binary_name": "linux-modules-extra-6.2.0-39-generic",
"binary_version": "6.2.0-39.40~22.04.1"
},
{
"binary_name": "linux-modules-ipu6-6.2.0-39-generic",
"binary_version": "6.2.0-39.40~22.04.1"
},
{
"binary_name": "linux-modules-ivsc-6.2.0-39-generic",
"binary_version": "6.2.0-39.40~22.04.1"
},
{
"binary_name": "linux-modules-iwlwifi-6.2.0-39-generic",
"binary_version": "6.2.0-39.40~22.04.1"
},
{
"binary_name": "linux-source-6.2.0",
"binary_version": "6.2.0-39.40~22.04.1"
},
{
"binary_name": "linux-tools-6.2.0-39-generic",
"binary_version": "6.2.0-39.40~22.04.1"
},
{
"binary_name": "linux-tools-6.2.0-39-generic-64k",
"binary_version": "6.2.0-39.40~22.04.1"
},
{
"binary_name": "linux-tools-6.2.0-39-generic-lpae",
"binary_version": "6.2.0-39.40~22.04.1"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "linux-hwe-6.2",
"purl": "pkg:deb/ubuntu/linux-hwe-6.2@6.2.0-39.40~22.04.1?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.2.0-25.25~22.04.2",
"6.2.0-26.26~22.04.1",
"6.2.0-31.31~22.04.1",
"6.2.0-32.32~22.04.1",
"6.2.0-33.33~22.04.1",
"6.2.0-34.34~22.04.1",
"6.2.0-35.35~22.04.1",
"6.2.0-36.37~22.04.1",
"6.2.0-37.38~22.04.1",
"6.2.0-39.40~22.04.1"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-buildinfo-6.5.0-45-generic",
"binary_version": "6.5.0-45.45~22.04.1"
},
{
"binary_name": "linux-buildinfo-6.5.0-45-generic-64k",
"binary_version": "6.5.0-45.45~22.04.1"
},
{
"binary_name": "linux-cloud-tools-6.5.0-45-generic",
"binary_version": "6.5.0-45.45~22.04.1"
},
{
"binary_name": "linux-headers-6.5.0-45-generic",
"binary_version": "6.5.0-45.45~22.04.1"
},
{
"binary_name": "linux-headers-6.5.0-45-generic-64k",
"binary_version": "6.5.0-45.45~22.04.1"
},
{
"binary_name": "linux-hwe-6.5-cloud-tools-6.5.0-45",
"binary_version": "6.5.0-45.45~22.04.1"
},
{
"binary_name": "linux-hwe-6.5-cloud-tools-common",
"binary_version": "6.5.0-45.45~22.04.1"
},
{
"binary_name": "linux-hwe-6.5-headers-6.5.0-45",
"binary_version": "6.5.0-45.45~22.04.1"
},
{
"binary_name": "linux-hwe-6.5-tools-6.5.0-45",
"binary_version": "6.5.0-45.45~22.04.1"
},
{
"binary_name": "linux-hwe-6.5-tools-common",
"binary_version": "6.5.0-45.45~22.04.1"
},
{
"binary_name": "linux-hwe-6.5-tools-host",
"binary_version": "6.5.0-45.45~22.04.1"
},
{
"binary_name": "linux-image-6.5.0-45-generic",
"binary_version": "6.5.0-45.45~22.04.1"
},
{
"binary_name": "linux-image-unsigned-6.5.0-45-generic",
"binary_version": "6.5.0-45.45~22.04.1"
},
{
"binary_name": "linux-image-unsigned-6.5.0-45-generic-64k",
"binary_version": "6.5.0-45.45~22.04.1"
},
{
"binary_name": "linux-modules-6.5.0-45-generic",
"binary_version": "6.5.0-45.45~22.04.1"
},
{
"binary_name": "linux-modules-6.5.0-45-generic-64k",
"binary_version": "6.5.0-45.45~22.04.1"
},
{
"binary_name": "linux-modules-extra-6.5.0-45-generic",
"binary_version": "6.5.0-45.45~22.04.1"
},
{
"binary_name": "linux-modules-ipu6-6.5.0-45-generic",
"binary_version": "6.5.0-45.45~22.04.1"
},
{
"binary_name": "linux-modules-ivsc-6.5.0-45-generic",
"binary_version": "6.5.0-45.45~22.04.1"
},
{
"binary_name": "linux-modules-iwlwifi-6.5.0-45-generic",
"binary_version": "6.5.0-45.45~22.04.1"
},
{
"binary_name": "linux-source-6.5.0",
"binary_version": "6.5.0-45.45~22.04.1"
},
{
"binary_name": "linux-tools-6.5.0-45-generic",
"binary_version": "6.5.0-45.45~22.04.1"
},
{
"binary_name": "linux-tools-6.5.0-45-generic-64k",
"binary_version": "6.5.0-45.45~22.04.1"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "linux-hwe-6.5",
"purl": "pkg:deb/ubuntu/linux-hwe-6.5@6.5.0-45.45~22.04.1?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.5.0-14.14~22.04.1",
"6.5.0-15.15~22.04.1",
"6.5.0-17.17~22.04.1",
"6.5.0-18.18~22.04.1",
"6.5.0-21.21~22.04.1",
"6.5.0-25.25~22.04.1",
"6.5.0-26.26~22.04.1",
"6.5.0-27.28~22.04.1",
"6.5.0-28.29~22.04.1",
"6.5.0-35.35~22.04.1",
"6.5.0-41.41~22.04.2",
"6.5.0-44.44~22.04.1",
"6.5.0-45.45~22.04.1"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "linux-buildinfo-6.8.0-85-generic",
"binary_version": "6.8.0-85.85~22.04.1"
},
{
"binary_name": "linux-buildinfo-6.8.0-85-generic-64k",
"binary_version": "6.8.0-85.85~22.04.1"
},
{
"binary_name": "linux-cloud-tools-6.8.0-85-generic",
"binary_version": "6.8.0-85.85~22.04.1"
},
{
"binary_name": "linux-headers-6.8.0-85-generic",
"binary_version": "6.8.0-85.85~22.04.1"
},
{
"binary_name": "linux-headers-6.8.0-85-generic-64k",
"binary_version": "6.8.0-85.85~22.04.1"
},
{
"binary_name": "linux-hwe-6.8-cloud-tools-6.8.0-85",
"binary_version": "6.8.0-85.85~22.04.1"
},
{
"binary_name": "linux-hwe-6.8-headers-6.8.0-85",
"binary_version": "6.8.0-85.85~22.04.1"
},
{
"binary_name": "linux-hwe-6.8-tools-6.8.0-85",
"binary_version": "6.8.0-85.85~22.04.1"
},
{
"binary_name": "linux-image-6.8.0-85-generic",
"binary_version": "6.8.0-85.85~22.04.1"
},
{
"binary_name": "linux-image-unsigned-6.8.0-85-generic",
"binary_version": "6.8.0-85.85~22.04.1"
},
{
"binary_name": "linux-image-unsigned-6.8.0-85-generic-64k",
"binary_version": "6.8.0-85.85~22.04.1"
},
{
"binary_name": "linux-modules-6.8.0-85-generic",
"binary_version": "6.8.0-85.85~22.04.1"
},
{
"binary_name": "linux-modules-6.8.0-85-generic-64k",
"binary_version": "6.8.0-85.85~22.04.1"
},
{
"binary_name": "linux-modules-extra-6.8.0-85-generic",
"binary_version": "6.8.0-85.85~22.04.1"
},
{
"binary_name": "linux-modules-ipu6-6.8.0-85-generic",
"binary_version": "6.8.0-85.85~22.04.1"
},
{
"binary_name": "linux-modules-iwlwifi-6.8.0-85-generic",
"binary_version": "6.8.0-85.85~22.04.1"
},
{
"binary_name": "linux-modules-usbio-6.8.0-85-generic",
"binary_version": "6.8.0-85.85~22.04.1"
},
{
"binary_name": "linux-tools-6.8.0-85-generic",
"binary_version": "6.8.0-85.85~22.04.1"
},
{
"binary_name": "linux-tools-6.8.0-85-generic-64k",
"binary_version": "6.8.0-85.85~22.04.1"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "linux-hwe-6.8",
"purl": "pkg:deb/ubuntu/linux-hwe-6.8@6.8.0-85.85~22.04.1?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.8.0-85.85~22.04.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.8.0-38.38~22.04.1",
"6.8.0-39.39~22.04.1",
"6.8.0-40.40~22.04.3",
"6.8.0-45.45~22.04.1",
"6.8.0-47.47~22.04.1",
"6.8.0-48.48~22.04.1",
"6.8.0-49.49~22.04.1",
"6.8.0-50.51~22.04.1",
"6.8.0-51.52~22.04.1",
"6.8.0-52.53~22.04.1",
"6.8.0-57.59~22.04.1",
"6.8.0-58.60~22.04.1",
"6.8.0-59.61~22.04.1",
"6.8.0-60.63~22.04.1",
"6.8.0-64.67~22.04.1",
"6.8.0-65.68~22.04.1",
"6.8.0-78.78~22.04.1",
"6.8.0-79.79~22.04.1",
"6.8.0-83.83~22.04.1",
"6.8.0-84.84~22.04.1"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "linux-buildinfo-5.15.0-1078-ibm",
"binary_version": "5.15.0-1078.81"
},
{
"binary_name": "linux-headers-5.15.0-1078-ibm",
"binary_version": "5.15.0-1078.81"
},
{
"binary_name": "linux-ibm-cloud-tools-common",
"binary_version": "5.15.0-1078.81"
},
{
"binary_name": "linux-ibm-headers-5.15.0-1078",
"binary_version": "5.15.0-1078.81"
},
{
"binary_name": "linux-ibm-source-5.15.0",
"binary_version": "5.15.0-1078.81"
},
{
"binary_name": "linux-ibm-tools-5.15.0-1078",
"binary_version": "5.15.0-1078.81"
},
{
"binary_name": "linux-ibm-tools-common",
"binary_version": "5.15.0-1078.81"
},
{
"binary_name": "linux-image-unsigned-5.15.0-1078-ibm",
"binary_version": "5.15.0-1078.81"
},
{
"binary_name": "linux-modules-5.15.0-1078-ibm",
"binary_version": "5.15.0-1078.81"
},
{
"binary_name": "linux-modules-extra-5.15.0-1078-ibm",
"binary_version": "5.15.0-1078.81"
},
{
"binary_name": "linux-tools-5.15.0-1078-ibm",
"binary_version": "5.15.0-1078.81"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "linux-ibm",
"purl": "pkg:deb/ubuntu/linux-ibm@5.15.0-1078.81?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "5.15.0-1078.81"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.15.0-1002.2",
"5.15.0-1003.3",
"5.15.0-1004.4",
"5.15.0-1005.5",
"5.15.0-1007.8",
"5.15.0-1009.11",
"5.15.0-1010.12",
"5.15.0-1012.14",
"5.15.0-1013.15",
"5.15.0-1015.17",
"5.15.0-1017.20",
"5.15.0-1018.21",
"5.15.0-1021.24",
"5.15.0-1022.25",
"5.15.0-1023.26",
"5.15.0-1025.28",
"5.15.0-1026.29",
"5.15.0-1027.30",
"5.15.0-1028.31",
"5.15.0-1029.32",
"5.15.0-1030.33",
"5.15.0-1031.34",
"5.15.0-1032.35",
"5.15.0-1033.36",
"5.15.0-1034.37",
"5.15.0-1035.38",
"5.15.0-1036.39",
"5.15.0-1037.40",
"5.15.0-1038.41",
"5.15.0-1040.43",
"5.15.0-1041.44",
"5.15.0-1042.45",
"5.15.0-1043.46",
"5.15.0-1044.47",
"5.15.0-1045.48",
"5.15.0-1046.49",
"5.15.0-1047.50",
"5.15.0-1048.51",
"5.15.0-1049.52",
"5.15.0-1050.53",
"5.15.0-1053.56",
"5.15.0-1054.57",
"5.15.0-1055.58",
"5.15.0-1056.59",
"5.15.0-1057.60",
"5.15.0-1058.61",
"5.15.0-1059.62",
"5.15.0-1060.63",
"5.15.0-1061.64",
"5.15.0-1062.65",
"5.15.0-1063.66",
"5.15.0-1064.67",
"5.15.0-1065.68",
"5.15.0-1066.69",
"5.15.0-1067.70",
"5.15.0-1068.71",
"5.15.0-1069.72",
"5.15.0-1070.73",
"5.15.0-1071.74",
"5.15.0-1072.75",
"5.15.0-1073.76",
"5.15.0-1074.77",
"5.15.0-1075.78",
"5.15.0-1076.79",
"5.15.0-1077.80"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "linux-buildinfo-6.8.0-1037-ibm",
"binary_version": "6.8.0-1037.37~22.04.1"
},
{
"binary_name": "linux-headers-6.8.0-1037-ibm",
"binary_version": "6.8.0-1037.37~22.04.1"
},
{
"binary_name": "linux-ibm-6.8-headers-6.8.0-1037",
"binary_version": "6.8.0-1037.37~22.04.1"
},
{
"binary_name": "linux-ibm-6.8-tools-6.8.0-1037",
"binary_version": "6.8.0-1037.37~22.04.1"
},
{
"binary_name": "linux-image-unsigned-6.8.0-1037-ibm",
"binary_version": "6.8.0-1037.37~22.04.1"
},
{
"binary_name": "linux-modules-6.8.0-1037-ibm",
"binary_version": "6.8.0-1037.37~22.04.1"
},
{
"binary_name": "linux-modules-extra-6.8.0-1037-ibm",
"binary_version": "6.8.0-1037.37~22.04.1"
},
{
"binary_name": "linux-modules-iwlwifi-6.8.0-1037-ibm",
"binary_version": "6.8.0-1037.37~22.04.1"
},
{
"binary_name": "linux-tools-6.8.0-1037-ibm",
"binary_version": "6.8.0-1037.37~22.04.1"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "linux-ibm-6.8",
"purl": "pkg:deb/ubuntu/linux-ibm-6.8@6.8.0-1037.37~22.04.1?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.8.0-1037.37~22.04.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.8.0-1008.8~22.04.1",
"6.8.0-1010.10~22.04.1",
"6.8.0-1011.11~22.04.1",
"6.8.0-1012.12~22.04.1",
"6.8.0-1013.13~22.04.1",
"6.8.0-1014.14~22.04.1",
"6.8.0-1015.15~22.04.1",
"6.8.0-1016.16~22.04.1",
"6.8.0-1017.17~22.04.1",
"6.8.0-1018.18~22.04.1",
"6.8.0-1019.19~22.04.1",
"6.8.0-1023.23~22.04.1",
"6.8.0-1024.24~22.04.1",
"6.8.0-1025.25~22.04.1",
"6.8.0-1026.26~22.04.1",
"6.8.0-1027.27~22.04.1",
"6.8.0-1028.28~22.04.1",
"6.8.0-1029.29~22.04.1",
"6.8.0-1030.30~22.04.1",
"6.8.0-1033.33~22.04.1",
"6.8.0-1036.36~22.04.1"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-buildinfo-5.15.0-1073-intel-iot-realtime",
"binary_version": "5.15.0-1073.75"
},
{
"binary_name": "linux-cloud-tools-5.15.0-1073-intel-iot-realtime",
"binary_version": "5.15.0-1073.75"
},
{
"binary_name": "linux-headers-5.15.0-1073-intel-iot-realtime",
"binary_version": "5.15.0-1073.75"
},
{
"binary_name": "linux-image-unsigned-5.15.0-1073-intel-iot-realtime",
"binary_version": "5.15.0-1073.75"
},
{
"binary_name": "linux-intel-iot-realtime-cloud-tools-5.15.0-1073",
"binary_version": "5.15.0-1073.75"
},
{
"binary_name": "linux-intel-iot-realtime-cloud-tools-common",
"binary_version": "5.15.0-1073.75"
},
{
"binary_name": "linux-intel-iot-realtime-headers-5.15.0-1073",
"binary_version": "5.15.0-1073.75"
},
{
"binary_name": "linux-intel-iot-realtime-tools-5.15.0-1073",
"binary_version": "5.15.0-1073.75"
},
{
"binary_name": "linux-intel-iot-realtime-tools-common",
"binary_version": "5.15.0-1073.75"
},
{
"binary_name": "linux-intel-iot-realtime-tools-host",
"binary_version": "5.15.0-1073.75"
},
{
"binary_name": "linux-modules-5.15.0-1073-intel-iot-realtime",
"binary_version": "5.15.0-1073.75"
},
{
"binary_name": "linux-modules-extra-5.15.0-1073-intel-iot-realtime",
"binary_version": "5.15.0-1073.75"
},
{
"binary_name": "linux-tools-5.15.0-1073-intel-iot-realtime",
"binary_version": "5.15.0-1073.75"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "linux-intel-iot-realtime",
"purl": "pkg:deb/ubuntu/linux-intel-iot-realtime@5.15.0-1073.75?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.15.0-1073.75"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "linux-buildinfo-5.15.0-1081-intel-iotg",
"binary_version": "5.15.0-1081.87"
},
{
"binary_name": "linux-cloud-tools-5.15.0-1081-intel-iotg",
"binary_version": "5.15.0-1081.87"
},
{
"binary_name": "linux-headers-5.15.0-1081-intel-iotg",
"binary_version": "5.15.0-1081.87"
},
{
"binary_name": "linux-image-unsigned-5.15.0-1081-intel-iotg",
"binary_version": "5.15.0-1081.87"
},
{
"binary_name": "linux-intel-iotg-cloud-tools-5.15.0-1081",
"binary_version": "5.15.0-1081.87"
},
{
"binary_name": "linux-intel-iotg-cloud-tools-common",
"binary_version": "5.15.0-1081.87"
},
{
"binary_name": "linux-intel-iotg-headers-5.15.0-1081",
"binary_version": "5.15.0-1081.87"
},
{
"binary_name": "linux-intel-iotg-tools-5.15.0-1081",
"binary_version": "5.15.0-1081.87"
},
{
"binary_name": "linux-intel-iotg-tools-common",
"binary_version": "5.15.0-1081.87"
},
{
"binary_name": "linux-intel-iotg-tools-host",
"binary_version": "5.15.0-1081.87"
},
{
"binary_name": "linux-modules-5.15.0-1081-intel-iotg",
"binary_version": "5.15.0-1081.87"
},
{
"binary_name": "linux-modules-extra-5.15.0-1081-intel-iotg",
"binary_version": "5.15.0-1081.87"
},
{
"binary_name": "linux-modules-iwlwifi-5.15.0-1081-intel-iotg",
"binary_version": "5.15.0-1081.87"
},
{
"binary_name": "linux-tools-5.15.0-1081-intel-iotg",
"binary_version": "5.15.0-1081.87"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "linux-intel-iotg",
"purl": "pkg:deb/ubuntu/linux-intel-iotg@5.15.0-1081.87?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "5.15.0-1081.87"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.15.0-1004.6",
"5.15.0-1008.11",
"5.15.0-1010.14",
"5.15.0-1013.17",
"5.15.0-1015.20",
"5.15.0-1016.21",
"5.15.0-1017.22",
"5.15.0-1018.23",
"5.15.0-1021.26",
"5.15.0-1023.28",
"5.15.0-1025.30",
"5.15.0-1026.31",
"5.15.0-1027.32",
"5.15.0-1028.33",
"5.15.0-1030.35",
"5.15.0-1031.36",
"5.15.0-1033.38",
"5.15.0-1034.39",
"5.15.0-1035.40",
"5.15.0-1036.41",
"5.15.0-1037.42",
"5.15.0-1038.43",
"5.15.0-1039.45",
"5.15.0-1040.46",
"5.15.0-1043.49",
"5.15.0-1045.51",
"5.15.0-1046.52",
"5.15.0-1047.53",
"5.15.0-1048.54",
"5.15.0-1049.55",
"5.15.0-1050.56",
"5.15.0-1051.57",
"5.15.0-1052.58",
"5.15.0-1055.61",
"5.15.0-1057.63",
"5.15.0-1058.64",
"5.15.0-1059.65",
"5.15.0-1060.66",
"5.15.0-1061.67",
"5.15.0-1062.68",
"5.15.0-1063.69",
"5.15.0-1064.70",
"5.15.0-1065.71",
"5.15.0-1066.72",
"5.15.0-1067.73",
"5.15.0-1071.77",
"5.15.0-1072.78",
"5.15.0-1073.79",
"5.15.0-1074.80",
"5.15.0-1075.81",
"5.15.0-1076.82",
"5.15.0-1077.83",
"5.15.0-1078.84",
"5.15.0-1079.85",
"5.15.0-1080.86"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "linux-buildinfo-5.15.0-1082-kvm",
"binary_version": "5.15.0-1082.87"
},
{
"binary_name": "linux-headers-5.15.0-1082-kvm",
"binary_version": "5.15.0-1082.87"
},
{
"binary_name": "linux-image-unsigned-5.15.0-1082-kvm",
"binary_version": "5.15.0-1082.87"
},
{
"binary_name": "linux-kvm-headers-5.15.0-1082",
"binary_version": "5.15.0-1082.87"
},
{
"binary_name": "linux-kvm-tools-5.15.0-1082",
"binary_version": "5.15.0-1082.87"
},
{
"binary_name": "linux-modules-5.15.0-1082-kvm",
"binary_version": "5.15.0-1082.87"
},
{
"binary_name": "linux-tools-5.15.0-1082-kvm",
"binary_version": "5.15.0-1082.87"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "linux-kvm",
"purl": "pkg:deb/ubuntu/linux-kvm@5.15.0-1082.87?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "5.15.0-1082.87"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.13.0-1004.4",
"5.13.0-1006.6+22.04.1",
"5.13.0-1007.7+22.04.1",
"5.13.0-1010.11+22.04.1",
"5.15.0-1002.2",
"5.15.0-1004.4",
"5.15.0-1005.5",
"5.15.0-1007.7",
"5.15.0-1008.8",
"5.15.0-1010.11",
"5.15.0-1012.14",
"5.15.0-1013.16",
"5.15.0-1016.19",
"5.15.0-1017.21",
"5.15.0-1018.22",
"5.15.0-1019.23",
"5.15.0-1020.24",
"5.15.0-1021.26",
"5.15.0-1024.29",
"5.15.0-1025.30",
"5.15.0-1026.31",
"5.15.0-1028.33",
"5.15.0-1029.34",
"5.15.0-1030.35",
"5.15.0-1031.36",
"5.15.0-1032.37",
"5.15.0-1033.38",
"5.15.0-1034.39",
"5.15.0-1035.40",
"5.15.0-1037.42",
"5.15.0-1038.43",
"5.15.0-1039.44",
"5.15.0-1040.45",
"5.15.0-1041.46",
"5.15.0-1042.47",
"5.15.0-1044.49",
"5.15.0-1045.50",
"5.15.0-1046.51",
"5.15.0-1047.52",
"5.15.0-1048.53",
"5.15.0-1049.54",
"5.15.0-1050.55",
"5.15.0-1051.56",
"5.15.0-1052.57",
"5.15.0-1053.58",
"5.15.0-1054.59",
"5.15.0-1057.62",
"5.15.0-1058.63",
"5.15.0-1059.64",
"5.15.0-1060.65",
"5.15.0-1061.66",
"5.15.0-1062.67",
"5.15.0-1063.68",
"5.15.0-1064.69",
"5.15.0-1065.70",
"5.15.0-1066.71",
"5.15.0-1067.72",
"5.15.0-1068.73",
"5.15.0-1069.74",
"5.15.0-1070.75",
"5.15.0-1071.76",
"5.15.0-1072.77",
"5.15.0-1073.78",
"5.15.0-1076.81",
"5.15.0-1077.82",
"5.15.0-1078.83",
"5.15.0-1079.84",
"5.15.0-1080.85",
"5.15.0-1081.86"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "linux-buildinfo-5.15.0-142-lowlatency",
"binary_version": "5.15.0-142.152"
},
{
"binary_name": "linux-buildinfo-5.15.0-142-lowlatency-64k",
"binary_version": "5.15.0-142.152"
},
{
"binary_name": "linux-cloud-tools-5.15.0-142-lowlatency",
"binary_version": "5.15.0-142.152"
},
{
"binary_name": "linux-headers-5.15.0-142-lowlatency",
"binary_version": "5.15.0-142.152"
},
{
"binary_name": "linux-headers-5.15.0-142-lowlatency-64k",
"binary_version": "5.15.0-142.152"
},
{
"binary_name": "linux-image-unsigned-5.15.0-142-lowlatency",
"binary_version": "5.15.0-142.152"
},
{
"binary_name": "linux-image-unsigned-5.15.0-142-lowlatency-64k",
"binary_version": "5.15.0-142.152"
},
{
"binary_name": "linux-lowlatency-cloud-tools-5.15.0-142",
"binary_version": "5.15.0-142.152"
},
{
"binary_name": "linux-lowlatency-headers-5.15.0-142",
"binary_version": "5.15.0-142.152"
},
{
"binary_name": "linux-lowlatency-tools-5.15.0-142",
"binary_version": "5.15.0-142.152"
},
{
"binary_name": "linux-modules-5.15.0-142-lowlatency",
"binary_version": "5.15.0-142.152"
},
{
"binary_name": "linux-modules-5.15.0-142-lowlatency-64k",
"binary_version": "5.15.0-142.152"
},
{
"binary_name": "linux-modules-iwlwifi-5.15.0-142-lowlatency",
"binary_version": "5.15.0-142.152"
},
{
"binary_name": "linux-tools-5.15.0-142-lowlatency",
"binary_version": "5.15.0-142.152"
},
{
"binary_name": "linux-tools-5.15.0-142-lowlatency-64k",
"binary_version": "5.15.0-142.152"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "linux-lowlatency",
"purl": "pkg:deb/ubuntu/linux-lowlatency@5.15.0-142.152?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "5.15.0-142.152"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.15.0-22.22",
"5.15.0-23.23",
"5.15.0-24.24",
"5.15.0-27.28",
"5.15.0-30.31",
"5.15.0-33.34",
"5.15.0-35.36",
"5.15.0-37.39",
"5.15.0-39.42",
"5.15.0-40.43",
"5.15.0-41.44",
"5.15.0-43.46",
"5.15.0-46.49",
"5.15.0-47.53",
"5.15.0-48.54",
"5.15.0-50.56",
"5.15.0-52.58",
"5.15.0-53.59",
"5.15.0-56.62",
"5.15.0-57.63",
"5.15.0-58.64",
"5.15.0-60.66",
"5.15.0-67.74",
"5.15.0-69.76",
"5.15.0-70.77",
"5.15.0-71.78",
"5.15.0-72.79",
"5.15.0-73.80",
"5.15.0-75.82",
"5.15.0-76.83",
"5.15.0-78.85",
"5.15.0-79.88",
"5.15.0-82.91",
"5.15.0-83.92",
"5.15.0-84.93",
"5.15.0-86.95",
"5.15.0-87.96",
"5.15.0-88.98",
"5.15.0-89.99",
"5.15.0-91.101",
"5.15.0-92.102",
"5.15.0-94.104",
"5.15.0-97.107",
"5.15.0-100.110",
"5.15.0-101.111",
"5.15.0-102.112",
"5.15.0-105.115",
"5.15.0-106.116",
"5.15.0-107.117",
"5.15.0-110.120",
"5.15.0-113.123",
"5.15.0-116.126",
"5.15.0-117.127",
"5.15.0-118.128",
"5.15.0-119.129",
"5.15.0-121.131",
"5.15.0-122.132",
"5.15.0-124.134",
"5.15.0-125.135",
"5.15.0-126.136",
"5.15.0-127.137",
"5.15.0-128.138",
"5.15.0-129.139",
"5.15.0-131.141",
"5.15.0-133.143",
"5.15.0-134.145",
"5.15.0-135.146",
"5.15.0-136.147",
"5.15.0-138.148",
"5.15.0-139.149",
"5.15.0-140.150",
"5.15.0-141.151"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-buildinfo-5.19.0-1030-lowlatency",
"binary_version": "5.19.0-1030.30"
},
{
"binary_name": "linux-buildinfo-5.19.0-1030-lowlatency-64k",
"binary_version": "5.19.0-1030.30"
},
{
"binary_name": "linux-cloud-tools-5.19.0-1030-lowlatency",
"binary_version": "5.19.0-1030.30"
},
{
"binary_name": "linux-headers-5.19.0-1030-lowlatency",
"binary_version": "5.19.0-1030.30"
},
{
"binary_name": "linux-headers-5.19.0-1030-lowlatency-64k",
"binary_version": "5.19.0-1030.30"
},
{
"binary_name": "linux-image-unsigned-5.19.0-1030-lowlatency",
"binary_version": "5.19.0-1030.30"
},
{
"binary_name": "linux-image-unsigned-5.19.0-1030-lowlatency-64k",
"binary_version": "5.19.0-1030.30"
},
{
"binary_name": "linux-lowlatency-hwe-5.19-cloud-tools-5.19.0-1030",
"binary_version": "5.19.0-1030.30"
},
{
"binary_name": "linux-lowlatency-hwe-5.19-cloud-tools-common",
"binary_version": "5.19.0-1030.30"
},
{
"binary_name": "linux-lowlatency-hwe-5.19-headers-5.19.0-1030",
"binary_version": "5.19.0-1030.30"
},
{
"binary_name": "linux-lowlatency-hwe-5.19-tools-5.19.0-1030",
"binary_version": "5.19.0-1030.30"
},
{
"binary_name": "linux-lowlatency-hwe-5.19-tools-common",
"binary_version": "5.19.0-1030.30"
},
{
"binary_name": "linux-lowlatency-hwe-5.19-tools-host",
"binary_version": "5.19.0-1030.30"
},
{
"binary_name": "linux-modules-5.19.0-1030-lowlatency",
"binary_version": "5.19.0-1030.30"
},
{
"binary_name": "linux-modules-5.19.0-1030-lowlatency-64k",
"binary_version": "5.19.0-1030.30"
},
{
"binary_name": "linux-modules-ipu6-5.19.0-1030-lowlatency",
"binary_version": "5.19.0-1030.30"
},
{
"binary_name": "linux-modules-ivsc-5.19.0-1030-lowlatency",
"binary_version": "5.19.0-1030.30"
},
{
"binary_name": "linux-modules-iwlwifi-5.19.0-1030-lowlatency",
"binary_version": "5.19.0-1030.30"
},
{
"binary_name": "linux-tools-5.19.0-1030-lowlatency",
"binary_version": "5.19.0-1030.30"
},
{
"binary_name": "linux-tools-5.19.0-1030-lowlatency-64k",
"binary_version": "5.19.0-1030.30"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "linux-lowlatency-hwe-5.19",
"purl": "pkg:deb/ubuntu/linux-lowlatency-hwe-5.19@5.19.0-1030.30?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.19.0-1017.18~22.04.1",
"5.19.0-1018.19~22.04.1",
"5.19.0-1021.22~22.04.1",
"5.19.0-1022.23~22.04.1",
"5.19.0-1023.24~22.04.1",
"5.19.0-1024.25~22.04.1",
"5.19.0-1025.26~22.04.1",
"5.19.0-1027.28~22.04.1",
"5.19.0-1028.29~22.04.1",
"5.19.0-1030.30"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-buildinfo-6.2.0-1018-lowlatency",
"binary_version": "6.2.0-1018.18~22.04.1"
},
{
"binary_name": "linux-buildinfo-6.2.0-1018-lowlatency-64k",
"binary_version": "6.2.0-1018.18~22.04.1"
},
{
"binary_name": "linux-cloud-tools-6.2.0-1018-lowlatency",
"binary_version": "6.2.0-1018.18~22.04.1"
},
{
"binary_name": "linux-headers-6.2.0-1018-lowlatency",
"binary_version": "6.2.0-1018.18~22.04.1"
},
{
"binary_name": "linux-headers-6.2.0-1018-lowlatency-64k",
"binary_version": "6.2.0-1018.18~22.04.1"
},
{
"binary_name": "linux-image-unsigned-6.2.0-1018-lowlatency",
"binary_version": "6.2.0-1018.18~22.04.1"
},
{
"binary_name": "linux-image-unsigned-6.2.0-1018-lowlatency-64k",
"binary_version": "6.2.0-1018.18~22.04.1"
},
{
"binary_name": "linux-lowlatency-hwe-6.2-cloud-tools-6.2.0-1018",
"binary_version": "6.2.0-1018.18~22.04.1"
},
{
"binary_name": "linux-lowlatency-hwe-6.2-cloud-tools-common",
"binary_version": "6.2.0-1018.18~22.04.1"
},
{
"binary_name": "linux-lowlatency-hwe-6.2-headers-6.2.0-1018",
"binary_version": "6.2.0-1018.18~22.04.1"
},
{
"binary_name": "linux-lowlatency-hwe-6.2-tools-6.2.0-1018",
"binary_version": "6.2.0-1018.18~22.04.1"
},
{
"binary_name": "linux-lowlatency-hwe-6.2-tools-common",
"binary_version": "6.2.0-1018.18~22.04.1"
},
{
"binary_name": "linux-lowlatency-hwe-6.2-tools-host",
"binary_version": "6.2.0-1018.18~22.04.1"
},
{
"binary_name": "linux-modules-6.2.0-1018-lowlatency",
"binary_version": "6.2.0-1018.18~22.04.1"
},
{
"binary_name": "linux-modules-6.2.0-1018-lowlatency-64k",
"binary_version": "6.2.0-1018.18~22.04.1"
},
{
"binary_name": "linux-modules-ipu6-6.2.0-1018-lowlatency",
"binary_version": "6.2.0-1018.18~22.04.1"
},
{
"binary_name": "linux-modules-ivsc-6.2.0-1018-lowlatency",
"binary_version": "6.2.0-1018.18~22.04.1"
},
{
"binary_name": "linux-modules-iwlwifi-6.2.0-1018-lowlatency",
"binary_version": "6.2.0-1018.18~22.04.1"
},
{
"binary_name": "linux-tools-6.2.0-1018-lowlatency",
"binary_version": "6.2.0-1018.18~22.04.1"
},
{
"binary_name": "linux-tools-6.2.0-1018-lowlatency-64k",
"binary_version": "6.2.0-1018.18~22.04.1"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "linux-lowlatency-hwe-6.2",
"purl": "pkg:deb/ubuntu/linux-lowlatency-hwe-6.2@6.2.0-1018.18~22.04.1?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.2.0-1008.8~22.04.1",
"6.2.0-1009.9~22.04.1",
"6.2.0-1011.11~22.04.1",
"6.2.0-1012.12~22.04.1",
"6.2.0-1013.13~22.04.1",
"6.2.0-1014.14~22.04.1",
"6.2.0-1015.15~22.04.1",
"6.2.0-1016.16~22.04.1",
"6.2.0-1017.17~22.04.1",
"6.2.0-1018.18~22.04.1"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-buildinfo-6.5.0-45-lowlatency",
"binary_version": "6.5.0-45.45.1~22.04.1"
},
{
"binary_name": "linux-buildinfo-6.5.0-45-lowlatency-64k",
"binary_version": "6.5.0-45.45.1~22.04.1"
},
{
"binary_name": "linux-cloud-tools-6.5.0-45-lowlatency",
"binary_version": "6.5.0-45.45.1~22.04.1"
},
{
"binary_name": "linux-headers-6.5.0-45-lowlatency",
"binary_version": "6.5.0-45.45.1~22.04.1"
},
{
"binary_name": "linux-headers-6.5.0-45-lowlatency-64k",
"binary_version": "6.5.0-45.45.1~22.04.1"
},
{
"binary_name": "linux-image-unsigned-6.5.0-45-lowlatency",
"binary_version": "6.5.0-45.45.1~22.04.1"
},
{
"binary_name": "linux-image-unsigned-6.5.0-45-lowlatency-64k",
"binary_version": "6.5.0-45.45.1~22.04.1"
},
{
"binary_name": "linux-lowlatency-hwe-6.5-cloud-tools-6.5.0-45",
"binary_version": "6.5.0-45.45.1~22.04.1"
},
{
"binary_name": "linux-lowlatency-hwe-6.5-cloud-tools-common",
"binary_version": "6.5.0-45.45.1~22.04.1"
},
{
"binary_name": "linux-lowlatency-hwe-6.5-headers-6.5.0-45",
"binary_version": "6.5.0-45.45.1~22.04.1"
},
{
"binary_name": "linux-lowlatency-hwe-6.5-lib-rust-6.5.0-45-lowlatency",
"binary_version": "6.5.0-45.45.1~22.04.1"
},
{
"binary_name": "linux-lowlatency-hwe-6.5-tools-6.5.0-45",
"binary_version": "6.5.0-45.45.1~22.04.1"
},
{
"binary_name": "linux-lowlatency-hwe-6.5-tools-common",
"binary_version": "6.5.0-45.45.1~22.04.1"
},
{
"binary_name": "linux-lowlatency-hwe-6.5-tools-host",
"binary_version": "6.5.0-45.45.1~22.04.1"
},
{
"binary_name": "linux-modules-6.5.0-45-lowlatency",
"binary_version": "6.5.0-45.45.1~22.04.1"
},
{
"binary_name": "linux-modules-6.5.0-45-lowlatency-64k",
"binary_version": "6.5.0-45.45.1~22.04.1"
},
{
"binary_name": "linux-modules-iwlwifi-6.5.0-45-lowlatency",
"binary_version": "6.5.0-45.45.1~22.04.1"
},
{
"binary_name": "linux-tools-6.5.0-45-lowlatency",
"binary_version": "6.5.0-45.45.1~22.04.1"
},
{
"binary_name": "linux-tools-6.5.0-45-lowlatency-64k",
"binary_version": "6.5.0-45.45.1~22.04.1"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "linux-lowlatency-hwe-6.5",
"purl": "pkg:deb/ubuntu/linux-lowlatency-hwe-6.5@6.5.0-45.45.1~22.04.1?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.5.0-14.14.1~22.04.1",
"6.5.0-15.15.1.1~22.04.1",
"6.5.0-17.17.1.1.1~22.04.1",
"6.5.0-21.21.1~22.04.1",
"6.5.0-25.25.1~22.04.1",
"6.5.0-26.26.1~22.04.1",
"6.5.0-27.28.1~22.04.1",
"6.5.0-28.29.1~22.04.1",
"6.5.0-35.35.1~22.04.1",
"6.5.0-41.41.1~22.04.1",
"6.5.0-42.42.1~22.04.1",
"6.5.0-44.44.1~22.04.1",
"6.5.0-45.45.1~22.04.1"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "linux-buildinfo-6.8.0-84-lowlatency",
"binary_version": "6.8.0-84.84.1~22.04.1"
},
{
"binary_name": "linux-buildinfo-6.8.0-84-lowlatency-64k",
"binary_version": "6.8.0-84.84.1~22.04.1"
},
{
"binary_name": "linux-cloud-tools-6.8.0-84-lowlatency",
"binary_version": "6.8.0-84.84.1~22.04.1"
},
{
"binary_name": "linux-headers-6.8.0-84-lowlatency",
"binary_version": "6.8.0-84.84.1~22.04.1"
},
{
"binary_name": "linux-headers-6.8.0-84-lowlatency-64k",
"binary_version": "6.8.0-84.84.1~22.04.1"
},
{
"binary_name": "linux-image-unsigned-6.8.0-84-lowlatency",
"binary_version": "6.8.0-84.84.1~22.04.1"
},
{
"binary_name": "linux-image-unsigned-6.8.0-84-lowlatency-64k",
"binary_version": "6.8.0-84.84.1~22.04.1"
},
{
"binary_name": "linux-lowlatency-hwe-6.8-cloud-tools-6.8.0-84",
"binary_version": "6.8.0-84.84.1~22.04.1"
},
{
"binary_name": "linux-lowlatency-hwe-6.8-headers-6.8.0-84",
"binary_version": "6.8.0-84.84.1~22.04.1"
},
{
"binary_name": "linux-lowlatency-hwe-6.8-lib-rust-6.8.0-84-lowlatency",
"binary_version": "6.8.0-84.84.1~22.04.1"
},
{
"binary_name": "linux-lowlatency-hwe-6.8-tools-6.8.0-84",
"binary_version": "6.8.0-84.84.1~22.04.1"
},
{
"binary_name": "linux-modules-6.8.0-84-lowlatency",
"binary_version": "6.8.0-84.84.1~22.04.1"
},
{
"binary_name": "linux-modules-6.8.0-84-lowlatency-64k",
"binary_version": "6.8.0-84.84.1~22.04.1"
},
{
"binary_name": "linux-modules-iwlwifi-6.8.0-84-lowlatency",
"binary_version": "6.8.0-84.84.1~22.04.1"
},
{
"binary_name": "linux-tools-6.8.0-84-lowlatency",
"binary_version": "6.8.0-84.84.1~22.04.1"
},
{
"binary_name": "linux-tools-6.8.0-84-lowlatency-64k",
"binary_version": "6.8.0-84.84.1~22.04.1"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "linux-lowlatency-hwe-6.8",
"purl": "pkg:deb/ubuntu/linux-lowlatency-hwe-6.8@6.8.0-84.84.1~22.04.1?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.8.0-84.84.1~22.04.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.8.0-38.38.1~22.04.2",
"6.8.0-40.40.1~22.04.1",
"6.8.0-44.44.1~22.04.1",
"6.8.0-45.45.1~22.04.1",
"6.8.0-47.47.1~22.04.1",
"6.8.0-48.48.3~22.04.1",
"6.8.0-49.49.1~22.04.1",
"6.8.0-50.51.1~22.04.1",
"6.8.0-51.52.1~22.04.1",
"6.8.0-52.53.1~22.04.1",
"6.8.0-54.56.1~22.04.1",
"6.8.0-55.57.1~22.04.1",
"6.8.0-56.58.1~22.04.1",
"6.8.0-57.59.1~22.04.1",
"6.8.0-58.60.1~22.04.1",
"6.8.0-59.61.1~22.04.1",
"6.8.0-60.63.1~22.04.1",
"6.8.0-62.65.1~22.04.1",
"6.8.0-63.66.1~22.04.1",
"6.8.0-64.67.1~22.04.1",
"6.8.0-65.68.1~22.04.1",
"6.8.0-78.78.1~22.04.1",
"6.8.0-79.79.1~22.04.1",
"6.8.0-83.83.1~22.04.1"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "linux-buildinfo-5.15.0-1080-nvidia",
"binary_version": "5.15.0-1080.81"
},
{
"binary_name": "linux-buildinfo-5.15.0-1080-nvidia-lowlatency",
"binary_version": "5.15.0-1080.81"
},
{
"binary_name": "linux-cloud-tools-5.15.0-1080-nvidia",
"binary_version": "5.15.0-1080.81"
},
{
"binary_name": "linux-cloud-tools-5.15.0-1080-nvidia-lowlatency",
"binary_version": "5.15.0-1080.81"
},
{
"binary_name": "linux-headers-5.15.0-1080-nvidia",
"binary_version": "5.15.0-1080.81"
},
{
"binary_name": "linux-headers-5.15.0-1080-nvidia-lowlatency",
"binary_version": "5.15.0-1080.81"
},
{
"binary_name": "linux-image-unsigned-5.15.0-1080-nvidia",
"binary_version": "5.15.0-1080.81"
},
{
"binary_name": "linux-image-unsigned-5.15.0-1080-nvidia-lowlatency",
"binary_version": "5.15.0-1080.81"
},
{
"binary_name": "linux-modules-5.15.0-1080-nvidia",
"binary_version": "5.15.0-1080.81"
},
{
"binary_name": "linux-modules-5.15.0-1080-nvidia-lowlatency",
"binary_version": "5.15.0-1080.81"
},
{
"binary_name": "linux-modules-extra-5.15.0-1080-nvidia",
"binary_version": "5.15.0-1080.81"
},
{
"binary_name": "linux-modules-nvidia-fs-5.15.0-1080-nvidia",
"binary_version": "5.15.0-1080.81"
},
{
"binary_name": "linux-modules-nvidia-fs-5.15.0-1080-nvidia-lowlatency",
"binary_version": "5.15.0-1080.81"
},
{
"binary_name": "linux-nvidia-cloud-tools-5.15.0-1080",
"binary_version": "5.15.0-1080.81"
},
{
"binary_name": "linux-nvidia-cloud-tools-common",
"binary_version": "5.15.0-1080.81"
},
{
"binary_name": "linux-nvidia-headers-5.15.0-1080",
"binary_version": "5.15.0-1080.81"
},
{
"binary_name": "linux-nvidia-tools-5.15.0-1080",
"binary_version": "5.15.0-1080.81"
},
{
"binary_name": "linux-nvidia-tools-common",
"binary_version": "5.15.0-1080.81"
},
{
"binary_name": "linux-nvidia-tools-host",
"binary_version": "5.15.0-1080.81"
},
{
"binary_name": "linux-tools-5.15.0-1080-nvidia",
"binary_version": "5.15.0-1080.81"
},
{
"binary_name": "linux-tools-5.15.0-1080-nvidia-lowlatency",
"binary_version": "5.15.0-1080.81"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "linux-nvidia",
"purl": "pkg:deb/ubuntu/linux-nvidia@5.15.0-1080.81?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "5.15.0-1080.81"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.15.0-1005.5",
"5.15.0-1007.7",
"5.15.0-1010.10",
"5.15.0-1015.15",
"5.15.0-1017.17",
"5.15.0-1018.18",
"5.15.0-1023.23",
"5.15.0-1025.25",
"5.15.0-1026.26",
"5.15.0-1027.27",
"5.15.0-1028.28",
"5.15.0-1029.29",
"5.15.0-1030.30",
"5.15.0-1031.31",
"5.15.0-1032.32",
"5.15.0-1033.33",
"5.15.0-1037.37",
"5.15.0-1039.39",
"5.15.0-1040.40",
"5.15.0-1041.41",
"5.15.0-1042.42",
"5.15.0-1043.43",
"5.15.0-1044.44",
"5.15.0-1045.45",
"5.15.0-1046.46",
"5.15.0-1047.47",
"5.15.0-1048.48",
"5.15.0-1053.54",
"5.15.0-1054.55",
"5.15.0-1055.56",
"5.15.0-1058.59",
"5.15.0-1059.60",
"5.15.0-1060.61",
"5.15.0-1061.62",
"5.15.0-1062.63",
"5.15.0-1063.64",
"5.15.0-1064.65",
"5.15.0-1065.66",
"5.15.0-1066.67",
"5.15.0-1067.68",
"5.15.0-1068.69",
"5.15.0-1069.70",
"5.15.0-1070.71",
"5.15.0-1071.72",
"5.15.0-1072.73",
"5.15.0-1073.74",
"5.15.0-1074.75",
"5.15.0-1075.76",
"5.15.0-1076.77",
"5.15.0-1077.78",
"5.15.0-1078.79",
"5.15.0-1079.80"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-buildinfo-6.2.0-1015-nvidia",
"binary_version": "6.2.0-1015.15"
},
{
"binary_name": "linux-buildinfo-6.2.0-1015-nvidia-64k",
"binary_version": "6.2.0-1015.15"
},
{
"binary_name": "linux-headers-6.2.0-1015-nvidia",
"binary_version": "6.2.0-1015.15"
},
{
"binary_name": "linux-headers-6.2.0-1015-nvidia-64k",
"binary_version": "6.2.0-1015.15"
},
{
"binary_name": "linux-image-unsigned-6.2.0-1015-nvidia",
"binary_version": "6.2.0-1015.15"
},
{
"binary_name": "linux-image-unsigned-6.2.0-1015-nvidia-64k",
"binary_version": "6.2.0-1015.15"
},
{
"binary_name": "linux-modules-6.2.0-1015-nvidia",
"binary_version": "6.2.0-1015.15"
},
{
"binary_name": "linux-modules-6.2.0-1015-nvidia-64k",
"binary_version": "6.2.0-1015.15"
},
{
"binary_name": "linux-modules-extra-6.2.0-1015-nvidia",
"binary_version": "6.2.0-1015.15"
},
{
"binary_name": "linux-modules-nvidia-fs-6.2.0-1015-nvidia",
"binary_version": "6.2.0-1015.15"
},
{
"binary_name": "linux-modules-nvidia-fs-6.2.0-1015-nvidia-64k",
"binary_version": "6.2.0-1015.15"
},
{
"binary_name": "linux-nvidia-6.2-headers-6.2.0-1015",
"binary_version": "6.2.0-1015.15"
},
{
"binary_name": "linux-nvidia-6.2-tools-6.2.0-1015",
"binary_version": "6.2.0-1015.15"
},
{
"binary_name": "linux-nvidia-6.2-tools-host",
"binary_version": "6.2.0-1015.15"
},
{
"binary_name": "linux-tools-6.2.0-1015-nvidia",
"binary_version": "6.2.0-1015.15"
},
{
"binary_name": "linux-tools-6.2.0-1015-nvidia-64k",
"binary_version": "6.2.0-1015.15"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "linux-nvidia-6.2",
"purl": "pkg:deb/ubuntu/linux-nvidia-6.2@6.2.0-1015.15?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.2.0-1003.3~22.04.1",
"6.2.0-1009.9",
"6.2.0-1010.10",
"6.2.0-1011.11",
"6.2.0-1012.12",
"6.2.0-1013.13",
"6.2.0-1015.15"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-buildinfo-6.5.0-1024-nvidia",
"binary_version": "6.5.0-1024.25"
},
{
"binary_name": "linux-buildinfo-6.5.0-1024-nvidia-64k",
"binary_version": "6.5.0-1024.25"
},
{
"binary_name": "linux-headers-6.5.0-1024-nvidia",
"binary_version": "6.5.0-1024.25"
},
{
"binary_name": "linux-headers-6.5.0-1024-nvidia-64k",
"binary_version": "6.5.0-1024.25"
},
{
"binary_name": "linux-image-unsigned-6.5.0-1024-nvidia",
"binary_version": "6.5.0-1024.25"
},
{
"binary_name": "linux-image-unsigned-6.5.0-1024-nvidia-64k",
"binary_version": "6.5.0-1024.25"
},
{
"binary_name": "linux-modules-6.5.0-1024-nvidia",
"binary_version": "6.5.0-1024.25"
},
{
"binary_name": "linux-modules-6.5.0-1024-nvidia-64k",
"binary_version": "6.5.0-1024.25"
},
{
"binary_name": "linux-modules-extra-6.5.0-1024-nvidia",
"binary_version": "6.5.0-1024.25"
},
{
"binary_name": "linux-modules-nvidia-fs-6.5.0-1024-nvidia",
"binary_version": "6.5.0-1024.25"
},
{
"binary_name": "linux-modules-nvidia-fs-6.5.0-1024-nvidia-64k",
"binary_version": "6.5.0-1024.25"
},
{
"binary_name": "linux-nvidia-6.5-headers-6.5.0-1024",
"binary_version": "6.5.0-1024.25"
},
{
"binary_name": "linux-nvidia-6.5-tools-6.5.0-1024",
"binary_version": "6.5.0-1024.25"
},
{
"binary_name": "linux-nvidia-6.5-tools-host",
"binary_version": "6.5.0-1024.25"
},
{
"binary_name": "linux-tools-6.5.0-1024-nvidia",
"binary_version": "6.5.0-1024.25"
},
{
"binary_name": "linux-tools-6.5.0-1024-nvidia-64k",
"binary_version": "6.5.0-1024.25"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "linux-nvidia-6.5",
"purl": "pkg:deb/ubuntu/linux-nvidia-6.5@6.5.0-1024.25?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.5.0-1004.4",
"6.5.0-1007.7",
"6.5.0-1013.13",
"6.5.0-1014.14",
"6.5.0-1015.15",
"6.5.0-1018.18",
"6.5.0-1019.19",
"6.5.0-1021.22",
"6.5.0-1022.23",
"6.5.0-1023.24",
"6.5.0-1024.25"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "linux-buildinfo-6.8.0-1039-nvidia",
"binary_version": "6.8.0-1039.42~22.04.1"
},
{
"binary_name": "linux-buildinfo-6.8.0-1039-nvidia-64k",
"binary_version": "6.8.0-1039.42~22.04.1"
},
{
"binary_name": "linux-headers-6.8.0-1039-nvidia",
"binary_version": "6.8.0-1039.42~22.04.1"
},
{
"binary_name": "linux-headers-6.8.0-1039-nvidia-64k",
"binary_version": "6.8.0-1039.42~22.04.1"
},
{
"binary_name": "linux-image-unsigned-6.8.0-1039-nvidia",
"binary_version": "6.8.0-1039.42~22.04.1"
},
{
"binary_name": "linux-image-unsigned-6.8.0-1039-nvidia-64k",
"binary_version": "6.8.0-1039.42~22.04.1"
},
{
"binary_name": "linux-modules-6.8.0-1039-nvidia",
"binary_version": "6.8.0-1039.42~22.04.1"
},
{
"binary_name": "linux-modules-6.8.0-1039-nvidia-64k",
"binary_version": "6.8.0-1039.42~22.04.1"
},
{
"binary_name": "linux-modules-extra-6.8.0-1039-nvidia",
"binary_version": "6.8.0-1039.42~22.04.1"
},
{
"binary_name": "linux-modules-nvidia-fs-6.8.0-1039-nvidia",
"binary_version": "6.8.0-1039.42~22.04.1"
},
{
"binary_name": "linux-modules-nvidia-fs-6.8.0-1039-nvidia-64k",
"binary_version": "6.8.0-1039.42~22.04.1"
},
{
"binary_name": "linux-nvidia-6.8-headers-6.8.0-1039",
"binary_version": "6.8.0-1039.42~22.04.1"
},
{
"binary_name": "linux-nvidia-6.8-tools-6.8.0-1039",
"binary_version": "6.8.0-1039.42~22.04.1"
},
{
"binary_name": "linux-tools-6.8.0-1039-nvidia",
"binary_version": "6.8.0-1039.42~22.04.1"
},
{
"binary_name": "linux-tools-6.8.0-1039-nvidia-64k",
"binary_version": "6.8.0-1039.42~22.04.1"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "linux-nvidia-6.8",
"purl": "pkg:deb/ubuntu/linux-nvidia-6.8@6.8.0-1039.42~22.04.1?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.8.0-1039.42~22.04.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.8.0-1008.8~22.04.1",
"6.8.0-1009.9~22.04.1",
"6.8.0-1010.10~22.04.1",
"6.8.0-1011.11~22.04.1",
"6.8.0-1012.12~22.04.1",
"6.8.0-1013.14~22.04.1",
"6.8.0-1014.15~22.04.1",
"6.8.0-1015.16~22.04.1",
"6.8.0-1017.19~22.04.1",
"6.8.0-1018.20~22.04.1",
"6.8.0-1019.21~22.04.1",
"6.8.0-1020.22~22.04.1",
"6.8.0-1021.23~22.04.1",
"6.8.0-1022.25~22.04.2",
"6.8.0-1023.26~22.04.1",
"6.8.0-1024.27~22.04.1",
"6.8.0-1025.28~22.04.1",
"6.8.0-1026.29~22.04.1",
"6.8.0-1027.30~22.04.1",
"6.8.0-1028.31~22.04.1",
"6.8.0-1029.32~22.04.1",
"6.8.0-1030.33~22.04.1",
"6.8.0-1031.34~22.04.1",
"6.8.0-1032.35~22.04.1",
"6.8.0-1035.38~22.04.1",
"6.8.0-1036.39~22.04.1",
"6.8.0-1038.41~22.04.1"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "linux-buildinfo-5.15.0-1039-nvidia-tegra",
"binary_version": "5.15.0-1039.39"
},
{
"binary_name": "linux-buildinfo-5.15.0-1039-nvidia-tegra-rt",
"binary_version": "5.15.0-1039.39"
},
{
"binary_name": "linux-headers-5.15.0-1039-nvidia-tegra",
"binary_version": "5.15.0-1039.39"
},
{
"binary_name": "linux-headers-5.15.0-1039-nvidia-tegra-rt",
"binary_version": "5.15.0-1039.39"
},
{
"binary_name": "linux-image-unsigned-5.15.0-1039-nvidia-tegra",
"binary_version": "5.15.0-1039.39"
},
{
"binary_name": "linux-image-unsigned-5.15.0-1039-nvidia-tegra-rt",
"binary_version": "5.15.0-1039.39"
},
{
"binary_name": "linux-modules-5.15.0-1039-nvidia-tegra",
"binary_version": "5.15.0-1039.39"
},
{
"binary_name": "linux-modules-5.15.0-1039-nvidia-tegra-rt",
"binary_version": "5.15.0-1039.39"
},
{
"binary_name": "linux-modules-extra-5.15.0-1039-nvidia-tegra",
"binary_version": "5.15.0-1039.39"
},
{
"binary_name": "linux-nvidia-tegra-headers-5.15.0-1039",
"binary_version": "5.15.0-1039.39"
},
{
"binary_name": "linux-nvidia-tegra-tools-5.15.0-1039",
"binary_version": "5.15.0-1039.39"
},
{
"binary_name": "linux-tools-5.15.0-1039-nvidia-tegra",
"binary_version": "5.15.0-1039.39"
},
{
"binary_name": "linux-tools-5.15.0-1039-nvidia-tegra-rt",
"binary_version": "5.15.0-1039.39"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "linux-nvidia-tegra",
"purl": "pkg:deb/ubuntu/linux-nvidia-tegra@5.15.0-1039.39?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "5.15.0-1039.39"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.15.0-1009.9",
"5.15.0-1010.10",
"5.15.0-1012.12",
"5.15.0-1013.13",
"5.15.0-1014.14",
"5.15.0-1015.15",
"5.15.0-1016.16",
"5.15.0-1017.17",
"5.15.0-1018.18",
"5.15.0-1019.19",
"5.15.0-1020.20",
"5.15.0-1021.21",
"5.15.0-1022.22",
"5.15.0-1025.25",
"5.15.0-1026.26",
"5.15.0-1027.27",
"5.15.0-1028.28",
"5.15.0-1030.30",
"5.15.0-1032.32",
"5.15.0-1033.33",
"5.15.0-1034.34",
"5.15.0-1035.35",
"5.15.0-1036.36",
"5.15.0-1037.37",
"5.15.0-1038.38"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "linux-buildinfo-5.15.0-1028-nvidia-tegra-igx",
"binary_version": "5.15.0-1028.28"
},
{
"binary_name": "linux-buildinfo-5.15.0-1028-nvidia-tegra-igx-rt",
"binary_version": "5.15.0-1028.28"
},
{
"binary_name": "linux-headers-5.15.0-1028-nvidia-tegra-igx",
"binary_version": "5.15.0-1028.28"
},
{
"binary_name": "linux-headers-5.15.0-1028-nvidia-tegra-igx-rt",
"binary_version": "5.15.0-1028.28"
},
{
"binary_name": "linux-image-unsigned-5.15.0-1028-nvidia-tegra-igx",
"binary_version": "5.15.0-1028.28"
},
{
"binary_name": "linux-image-unsigned-5.15.0-1028-nvidia-tegra-igx-rt",
"binary_version": "5.15.0-1028.28"
},
{
"binary_name": "linux-modules-5.15.0-1028-nvidia-tegra-igx",
"binary_version": "5.15.0-1028.28"
},
{
"binary_name": "linux-modules-5.15.0-1028-nvidia-tegra-igx-rt",
"binary_version": "5.15.0-1028.28"
},
{
"binary_name": "linux-modules-extra-5.15.0-1028-nvidia-tegra-igx",
"binary_version": "5.15.0-1028.28"
},
{
"binary_name": "linux-nvidia-tegra-igx-headers-5.15.0-1028",
"binary_version": "5.15.0-1028.28"
},
{
"binary_name": "linux-nvidia-tegra-igx-tools-5.15.0-1028",
"binary_version": "5.15.0-1028.28"
},
{
"binary_name": "linux-tools-5.15.0-1028-nvidia-tegra-igx",
"binary_version": "5.15.0-1028.28"
},
{
"binary_name": "linux-tools-5.15.0-1028-nvidia-tegra-igx-rt",
"binary_version": "5.15.0-1028.28"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "linux-nvidia-tegra-igx",
"purl": "pkg:deb/ubuntu/linux-nvidia-tegra-igx@5.15.0-1028.28?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "5.15.0-1028.28"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.15.0-1001.1",
"5.15.0-1002.2",
"5.15.0-1004.4",
"5.15.0-1005.5",
"5.15.0-1006.6",
"5.15.0-1007.7",
"5.15.0-1008.8",
"5.15.0-1009.9",
"5.15.0-1012.12",
"5.15.0-1013.13",
"5.15.0-1015.15",
"5.15.0-1016.16",
"5.15.0-1018.18",
"5.15.0-1019.19",
"5.15.0-1020.20",
"5.15.0-1021.21",
"5.15.0-1022.22",
"5.15.0-1023.23",
"5.15.0-1024.24",
"5.15.0-1026.26",
"5.15.0-1027.27"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-buildinfo-5.17.0-1035-oem",
"binary_version": "5.17.0-1035.36"
},
{
"binary_name": "linux-headers-5.17.0-1035-oem",
"binary_version": "5.17.0-1035.36"
},
{
"binary_name": "linux-image-unsigned-5.17.0-1035-oem",
"binary_version": "5.17.0-1035.36"
},
{
"binary_name": "linux-modules-5.17.0-1035-oem",
"binary_version": "5.17.0-1035.36"
},
{
"binary_name": "linux-modules-ipu6-5.17.0-1035-oem",
"binary_version": "5.17.0-1035.36"
},
{
"binary_name": "linux-modules-ivsc-5.17.0-1035-oem",
"binary_version": "5.17.0-1035.36"
},
{
"binary_name": "linux-modules-iwlwifi-5.17.0-1035-oem",
"binary_version": "5.17.0-1035.36"
},
{
"binary_name": "linux-oem-5.17-headers-5.17.0-1035",
"binary_version": "5.17.0-1035.36"
},
{
"binary_name": "linux-oem-5.17-tools-5.17.0-1035",
"binary_version": "5.17.0-1035.36"
},
{
"binary_name": "linux-oem-5.17-tools-host",
"binary_version": "5.17.0-1035.36"
},
{
"binary_name": "linux-tools-5.17.0-1035-oem",
"binary_version": "5.17.0-1035.36"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "linux-oem-5.17",
"purl": "pkg:deb/ubuntu/linux-oem-5.17@5.17.0-1035.36?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.17.0-1003.3",
"5.17.0-1004.4",
"5.17.0-1006.6",
"5.17.0-1011.12",
"5.17.0-1012.13",
"5.17.0-1013.14",
"5.17.0-1014.15",
"5.17.0-1015.16",
"5.17.0-1016.17",
"5.17.0-1017.18",
"5.17.0-1018.19",
"5.17.0-1019.20",
"5.17.0-1020.21",
"5.17.0-1021.22",
"5.17.0-1024.25",
"5.17.0-1025.26",
"5.17.0-1026.27",
"5.17.0-1027.28",
"5.17.0-1028.29",
"5.17.0-1029.30",
"5.17.0-1030.31",
"5.17.0-1031.32",
"5.17.0-1032.33",
"5.17.0-1033.34",
"5.17.0-1034.35",
"5.17.0-1035.36"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-buildinfo-6.0.0-1021-oem",
"binary_version": "6.0.0-1021.21"
},
{
"binary_name": "linux-headers-6.0.0-1021-oem",
"binary_version": "6.0.0-1021.21"
},
{
"binary_name": "linux-image-unsigned-6.0.0-1021-oem",
"binary_version": "6.0.0-1021.21"
},
{
"binary_name": "linux-modules-6.0.0-1021-oem",
"binary_version": "6.0.0-1021.21"
},
{
"binary_name": "linux-modules-ipu6-6.0.0-1021-oem",
"binary_version": "6.0.0-1021.21"
},
{
"binary_name": "linux-modules-ivsc-6.0.0-1021-oem",
"binary_version": "6.0.0-1021.21"
},
{
"binary_name": "linux-modules-iwlwifi-6.0.0-1021-oem",
"binary_version": "6.0.0-1021.21"
},
{
"binary_name": "linux-oem-6.0-headers-6.0.0-1021",
"binary_version": "6.0.0-1021.21"
},
{
"binary_name": "linux-oem-6.0-tools-6.0.0-1021",
"binary_version": "6.0.0-1021.21"
},
{
"binary_name": "linux-oem-6.0-tools-host",
"binary_version": "6.0.0-1021.21"
},
{
"binary_name": "linux-tools-6.0.0-1021-oem",
"binary_version": "6.0.0-1021.21"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "linux-oem-6.0",
"purl": "pkg:deb/ubuntu/linux-oem-6.0@6.0.0-1021.21?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.0.0-1006.6",
"6.0.0-1007.7",
"6.0.0-1008.8",
"6.0.0-1009.9",
"6.0.0-1010.10",
"6.0.0-1011.11",
"6.0.0-1012.12",
"6.0.0-1013.13",
"6.0.0-1014.14",
"6.0.0-1015.15",
"6.0.0-1016.16",
"6.0.0-1017.17",
"6.0.0-1018.18",
"6.0.0-1019.19",
"6.0.0-1020.20",
"6.0.0-1021.21"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-buildinfo-6.1.0-1036-oem",
"binary_version": "6.1.0-1036.36"
},
{
"binary_name": "linux-headers-6.1.0-1036-oem",
"binary_version": "6.1.0-1036.36"
},
{
"binary_name": "linux-image-unsigned-6.1.0-1036-oem",
"binary_version": "6.1.0-1036.36"
},
{
"binary_name": "linux-modules-6.1.0-1036-oem",
"binary_version": "6.1.0-1036.36"
},
{
"binary_name": "linux-modules-ipu6-6.1.0-1036-oem",
"binary_version": "6.1.0-1036.36"
},
{
"binary_name": "linux-modules-ivsc-6.1.0-1036-oem",
"binary_version": "6.1.0-1036.36"
},
{
"binary_name": "linux-modules-iwlwifi-6.1.0-1036-oem",
"binary_version": "6.1.0-1036.36"
},
{
"binary_name": "linux-oem-6.1-headers-6.1.0-1036",
"binary_version": "6.1.0-1036.36"
},
{
"binary_name": "linux-oem-6.1-tools-6.1.0-1036",
"binary_version": "6.1.0-1036.36"
},
{
"binary_name": "linux-oem-6.1-tools-host",
"binary_version": "6.1.0-1036.36"
},
{
"binary_name": "linux-tools-6.1.0-1036-oem",
"binary_version": "6.1.0-1036.36"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "linux-oem-6.1",
"purl": "pkg:deb/ubuntu/linux-oem-6.1@6.1.0-1036.36?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.1.0-1004.4",
"6.1.0-1006.6",
"6.1.0-1007.7",
"6.1.0-1008.8",
"6.1.0-1009.9",
"6.1.0-1010.10",
"6.1.0-1012.12",
"6.1.0-1013.13",
"6.1.0-1014.14",
"6.1.0-1015.15",
"6.1.0-1016.16",
"6.1.0-1017.17",
"6.1.0-1019.19",
"6.1.0-1020.20",
"6.1.0-1021.21",
"6.1.0-1022.22",
"6.1.0-1023.23",
"6.1.0-1024.24",
"6.1.0-1025.25",
"6.1.0-1026.26",
"6.1.0-1027.27",
"6.1.0-1028.28",
"6.1.0-1029.29",
"6.1.0-1033.33",
"6.1.0-1034.34",
"6.1.0-1035.35",
"6.1.0-1036.36"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-buildinfo-6.5.0-1027-oem",
"binary_version": "6.5.0-1027.28"
},
{
"binary_name": "linux-headers-6.5.0-1027-oem",
"binary_version": "6.5.0-1027.28"
},
{
"binary_name": "linux-image-unsigned-6.5.0-1027-oem",
"binary_version": "6.5.0-1027.28"
},
{
"binary_name": "linux-modules-6.5.0-1027-oem",
"binary_version": "6.5.0-1027.28"
},
{
"binary_name": "linux-modules-ipu6-6.5.0-1027-oem",
"binary_version": "6.5.0-1027.28"
},
{
"binary_name": "linux-modules-ivsc-6.5.0-1027-oem",
"binary_version": "6.5.0-1027.28"
},
{
"binary_name": "linux-modules-iwlwifi-6.5.0-1027-oem",
"binary_version": "6.5.0-1027.28"
},
{
"binary_name": "linux-modules-usbio-6.5.0-1027-oem",
"binary_version": "6.5.0-1027.28"
},
{
"binary_name": "linux-oem-6.5-headers-6.5.0-1027",
"binary_version": "6.5.0-1027.28"
},
{
"binary_name": "linux-oem-6.5-lib-rust-6.5.0-1027-oem",
"binary_version": "6.5.0-1027.28"
},
{
"binary_name": "linux-oem-6.5-tools-6.5.0-1027",
"binary_version": "6.5.0-1027.28"
},
{
"binary_name": "linux-oem-6.5-tools-host",
"binary_version": "6.5.0-1027.28"
},
{
"binary_name": "linux-tools-6.5.0-1027-oem",
"binary_version": "6.5.0-1027.28"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "linux-oem-6.5",
"purl": "pkg:deb/ubuntu/linux-oem-6.5@6.5.0-1027.28?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.5.0-1003.3",
"6.5.0-1004.4",
"6.5.0-1006.6",
"6.5.0-1007.7",
"6.5.0-1008.8",
"6.5.0-1009.10",
"6.5.0-1011.12",
"6.5.0-1013.14",
"6.5.0-1014.15",
"6.5.0-1015.16",
"6.5.0-1016.17",
"6.5.0-1018.19",
"6.5.0-1019.20",
"6.5.0-1020.21",
"6.5.0-1022.23",
"6.5.0-1023.24",
"6.5.0-1024.25",
"6.5.0-1025.26",
"6.5.0-1027.28"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "linux-buildinfo-5.15.0-1083-oracle",
"binary_version": "5.15.0-1083.89"
},
{
"binary_name": "linux-headers-5.15.0-1083-oracle",
"binary_version": "5.15.0-1083.89"
},
{
"binary_name": "linux-image-unsigned-5.15.0-1083-oracle",
"binary_version": "5.15.0-1083.89"
},
{
"binary_name": "linux-modules-5.15.0-1083-oracle",
"binary_version": "5.15.0-1083.89"
},
{
"binary_name": "linux-modules-extra-5.15.0-1083-oracle",
"binary_version": "5.15.0-1083.89"
},
{
"binary_name": "linux-oracle-headers-5.15.0-1083",
"binary_version": "5.15.0-1083.89"
},
{
"binary_name": "linux-oracle-tools-5.15.0-1083",
"binary_version": "5.15.0-1083.89"
},
{
"binary_name": "linux-tools-5.15.0-1083-oracle",
"binary_version": "5.15.0-1083.89"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "linux-oracle",
"purl": "pkg:deb/ubuntu/linux-oracle@5.15.0-1083.89?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "5.15.0-1083.89"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.13.0-1008.10",
"5.15.0-1001.3",
"5.15.0-1002.4",
"5.15.0-1003.5",
"5.15.0-1006.8",
"5.15.0-1007.9",
"5.15.0-1009.12",
"5.15.0-1011.15",
"5.15.0-1013.17",
"5.15.0-1016.20",
"5.15.0-1017.22",
"5.15.0-1018.23",
"5.15.0-1019.24",
"5.15.0-1021.27",
"5.15.0-1022.28",
"5.15.0-1025.31",
"5.15.0-1026.32",
"5.15.0-1027.33",
"5.15.0-1029.35",
"5.15.0-1030.36",
"5.15.0-1032.38",
"5.15.0-1033.39",
"5.15.0-1034.40",
"5.15.0-1035.41",
"5.15.0-1036.42",
"5.15.0-1037.43",
"5.15.0-1038.44",
"5.15.0-1039.45",
"5.15.0-1040.46",
"5.15.0-1041.47",
"5.15.0-1042.48",
"5.15.0-1044.50",
"5.15.0-1045.51",
"5.15.0-1046.52",
"5.15.0-1047.53",
"5.15.0-1048.54",
"5.15.0-1049.55",
"5.15.0-1050.56",
"5.15.0-1051.57",
"5.15.0-1052.58",
"5.15.0-1053.59",
"5.15.0-1054.60",
"5.15.0-1055.61",
"5.15.0-1058.64",
"5.15.0-1059.65",
"5.15.0-1060.66",
"5.15.0-1061.67",
"5.15.0-1062.68",
"5.15.0-1063.69",
"5.15.0-1064.70",
"5.15.0-1065.71",
"5.15.0-1066.72",
"5.15.0-1067.73",
"5.15.0-1068.74",
"5.15.0-1069.75",
"5.15.0-1070.76",
"5.15.0-1071.77",
"5.15.0-1072.78",
"5.15.0-1073.79",
"5.15.0-1074.80",
"5.15.0-1075.81",
"5.15.0-1076.82",
"5.15.0-1077.83",
"5.15.0-1078.84",
"5.15.0-1079.85",
"5.15.0-1080.86",
"5.15.0-1081.87",
"5.15.0-1082.88"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-buildinfo-6.5.0-1027-oracle",
"binary_version": "6.5.0-1027.27~22.04.1"
},
{
"binary_name": "linux-buildinfo-6.5.0-1027-oracle-64k",
"binary_version": "6.5.0-1027.27~22.04.1"
},
{
"binary_name": "linux-headers-6.5.0-1027-oracle",
"binary_version": "6.5.0-1027.27~22.04.1"
},
{
"binary_name": "linux-headers-6.5.0-1027-oracle-64k",
"binary_version": "6.5.0-1027.27~22.04.1"
},
{
"binary_name": "linux-image-unsigned-6.5.0-1027-oracle",
"binary_version": "6.5.0-1027.27~22.04.1"
},
{
"binary_name": "linux-image-unsigned-6.5.0-1027-oracle-64k",
"binary_version": "6.5.0-1027.27~22.04.1"
},
{
"binary_name": "linux-modules-6.5.0-1027-oracle",
"binary_version": "6.5.0-1027.27~22.04.1"
},
{
"binary_name": "linux-modules-6.5.0-1027-oracle-64k",
"binary_version": "6.5.0-1027.27~22.04.1"
},
{
"binary_name": "linux-modules-extra-6.5.0-1027-oracle",
"binary_version": "6.5.0-1027.27~22.04.1"
},
{
"binary_name": "linux-modules-extra-6.5.0-1027-oracle-64k",
"binary_version": "6.5.0-1027.27~22.04.1"
},
{
"binary_name": "linux-oracle-6.5-headers-6.5.0-1027",
"binary_version": "6.5.0-1027.27~22.04.1"
},
{
"binary_name": "linux-oracle-6.5-tools-6.5.0-1027",
"binary_version": "6.5.0-1027.27~22.04.1"
},
{
"binary_name": "linux-tools-6.5.0-1027-oracle",
"binary_version": "6.5.0-1027.27~22.04.1"
},
{
"binary_name": "linux-tools-6.5.0-1027-oracle-64k",
"binary_version": "6.5.0-1027.27~22.04.1"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "linux-oracle-6.5",
"purl": "pkg:deb/ubuntu/linux-oracle-6.5@6.5.0-1027.27~22.04.1?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.5.0-1013.13~22.04.4",
"6.5.0-1014.14~22.04.1",
"6.5.0-1015.15~22.04.1",
"6.5.0-1016.16~22.04.1",
"6.5.0-1018.18~22.04.1",
"6.5.0-1019.19~22.04.1",
"6.5.0-1020.20~22.04.1",
"6.5.0-1021.21~22.04.1",
"6.5.0-1023.23~22.04.1",
"6.5.0-1024.24~22.04.1",
"6.5.0-1025.25~22.04.1",
"6.5.0-1026.26~22.04.1",
"6.5.0-1027.27~22.04.1"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "linux-buildinfo-6.8.0-1037-oracle",
"binary_version": "6.8.0-1037.38~22.04.1"
},
{
"binary_name": "linux-buildinfo-6.8.0-1037-oracle-64k",
"binary_version": "6.8.0-1037.38~22.04.1"
},
{
"binary_name": "linux-headers-6.8.0-1037-oracle",
"binary_version": "6.8.0-1037.38~22.04.1"
},
{
"binary_name": "linux-headers-6.8.0-1037-oracle-64k",
"binary_version": "6.8.0-1037.38~22.04.1"
},
{
"binary_name": "linux-image-unsigned-6.8.0-1037-oracle",
"binary_version": "6.8.0-1037.38~22.04.1"
},
{
"binary_name": "linux-image-unsigned-6.8.0-1037-oracle-64k",
"binary_version": "6.8.0-1037.38~22.04.1"
},
{
"binary_name": "linux-modules-6.8.0-1037-oracle",
"binary_version": "6.8.0-1037.38~22.04.1"
},
{
"binary_name": "linux-modules-6.8.0-1037-oracle-64k",
"binary_version": "6.8.0-1037.38~22.04.1"
},
{
"binary_name": "linux-modules-extra-6.8.0-1037-oracle",
"binary_version": "6.8.0-1037.38~22.04.1"
},
{
"binary_name": "linux-modules-extra-6.8.0-1037-oracle-64k",
"binary_version": "6.8.0-1037.38~22.04.1"
},
{
"binary_name": "linux-oracle-6.8-headers-6.8.0-1037",
"binary_version": "6.8.0-1037.38~22.04.1"
},
{
"binary_name": "linux-oracle-6.8-tools-6.8.0-1037",
"binary_version": "6.8.0-1037.38~22.04.1"
},
{
"binary_name": "linux-tools-6.8.0-1037-oracle",
"binary_version": "6.8.0-1037.38~22.04.1"
},
{
"binary_name": "linux-tools-6.8.0-1037-oracle-64k",
"binary_version": "6.8.0-1037.38~22.04.1"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "linux-oracle-6.8",
"purl": "pkg:deb/ubuntu/linux-oracle-6.8@6.8.0-1037.38~22.04.1?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.8.0-1037.38~22.04.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.8.0-1006.6~22.04.3",
"6.8.0-1008.8~22.04.1",
"6.8.0-1010.10~22.04.1",
"6.8.0-1011.11~22.04.1",
"6.8.0-1012.12~22.04.1",
"6.8.0-1013.13~22.04.1",
"6.8.0-1014.14~22.04.1",
"6.8.0-1015.15~22.04.1",
"6.8.0-1016.17~22.04.1",
"6.8.0-1017.18~22.04.1",
"6.8.0-1018.19~22.04.1",
"6.8.0-1019.20~22.04.1",
"6.8.0-1020.21~22.04.1",
"6.8.0-1021.22~22.04.1",
"6.8.0-1022.23~22.04.1",
"6.8.0-1023.24~22.04.1",
"6.8.0-1024.25~22.04.1",
"6.8.0-1025.26~22.04.1",
"6.8.0-1026.27~22.04.1",
"6.8.0-1027.28~22.04.1",
"6.8.0-1028.29~22.04.1",
"6.8.0-1029.30~22.04.1",
"6.8.0-1030.31~22.04.1",
"6.8.0-1032.33~22.04.1",
"6.8.0-1033.34~22.04.1",
"6.8.0-1035.36~22.04.1"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "linux-buildinfo-5.15.0-1080-raspi",
"binary_version": "5.15.0-1080.83"
},
{
"binary_name": "linux-headers-5.15.0-1080-raspi",
"binary_version": "5.15.0-1080.83"
},
{
"binary_name": "linux-image-5.15.0-1080-raspi",
"binary_version": "5.15.0-1080.83"
},
{
"binary_name": "linux-modules-5.15.0-1080-raspi",
"binary_version": "5.15.0-1080.83"
},
{
"binary_name": "linux-modules-extra-5.15.0-1080-raspi",
"binary_version": "5.15.0-1080.83"
},
{
"binary_name": "linux-raspi-headers-5.15.0-1080",
"binary_version": "5.15.0-1080.83"
},
{
"binary_name": "linux-raspi-tools-5.15.0-1080",
"binary_version": "5.15.0-1080.83"
},
{
"binary_name": "linux-tools-5.15.0-1080-raspi",
"binary_version": "5.15.0-1080.83"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "linux-raspi",
"purl": "pkg:deb/ubuntu/linux-raspi@5.15.0-1080.83?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "5.15.0-1080.83"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.13.0-1008.9",
"5.15.0-1002.2",
"5.15.0-1003.3",
"5.15.0-1004.4",
"5.15.0-1005.5",
"5.15.0-1006.6",
"5.15.0-1008.8",
"5.15.0-1011.13",
"5.15.0-1012.14",
"5.15.0-1013.15",
"5.15.0-1014.16",
"5.15.0-1015.17",
"5.15.0-1016.18",
"5.15.0-1017.19",
"5.15.0-1018.20",
"5.15.0-1021.23",
"5.15.0-1022.24",
"5.15.0-1023.25",
"5.15.0-1024.26",
"5.15.0-1025.27",
"5.15.0-1026.28",
"5.15.0-1027.29",
"5.15.0-1028.30",
"5.15.0-1029.31",
"5.15.0-1030.32",
"5.15.0-1032.35",
"5.15.0-1033.36",
"5.15.0-1034.37",
"5.15.0-1035.38",
"5.15.0-1036.39",
"5.15.0-1037.40",
"5.15.0-1038.41",
"5.15.0-1040.43",
"5.15.0-1041.44",
"5.15.0-1042.45",
"5.15.0-1043.46",
"5.15.0-1044.47",
"5.15.0-1045.48",
"5.15.0-1046.49",
"5.15.0-1047.50",
"5.15.0-1048.51",
"5.15.0-1049.52",
"5.15.0-1050.53",
"5.15.0-1053.56",
"5.15.0-1054.57",
"5.15.0-1055.58",
"5.15.0-1058.61",
"5.15.0-1059.62",
"5.15.0-1060.63",
"5.15.0-1061.64",
"5.15.0-1062.65",
"5.15.0-1063.66",
"5.15.0-1064.67",
"5.15.0-1065.68",
"5.15.0-1066.69",
"5.15.0-1067.70",
"5.15.0-1070.73",
"5.15.0-1071.74",
"5.15.0-1072.75",
"5.15.0-1073.76",
"5.15.0-1074.77",
"5.15.0-1075.78",
"5.15.0-1076.79",
"5.15.0-1077.80",
"5.15.0-1078.81",
"5.15.0-1079.82"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-buildinfo-5.15.0-1032-realtime",
"binary_version": "5.15.0-1032.35"
},
{
"binary_name": "linux-cloud-tools-5.15.0-1032-realtime",
"binary_version": "5.15.0-1032.35"
},
{
"binary_name": "linux-headers-5.15.0-1032-realtime",
"binary_version": "5.15.0-1032.35"
},
{
"binary_name": "linux-image-unsigned-5.15.0-1032-realtime",
"binary_version": "5.15.0-1032.35"
},
{
"binary_name": "linux-modules-5.15.0-1032-realtime",
"binary_version": "5.15.0-1032.35"
},
{
"binary_name": "linux-modules-extra-5.15.0-1032-realtime",
"binary_version": "5.15.0-1032.35"
},
{
"binary_name": "linux-realtime-cloud-tools-5.15.0-1032",
"binary_version": "5.15.0-1032.35"
},
{
"binary_name": "linux-realtime-cloud-tools-common",
"binary_version": "5.15.0-1032.35"
},
{
"binary_name": "linux-realtime-headers-5.15.0-1032",
"binary_version": "5.15.0-1032.35"
},
{
"binary_name": "linux-realtime-tools-5.15.0-1032",
"binary_version": "5.15.0-1032.35"
},
{
"binary_name": "linux-realtime-tools-common",
"binary_version": "5.15.0-1032.35"
},
{
"binary_name": "linux-realtime-tools-host",
"binary_version": "5.15.0-1032.35"
},
{
"binary_name": "linux-tools-5.15.0-1032-realtime",
"binary_version": "5.15.0-1032.35"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "linux-realtime",
"purl": "pkg:deb/ubuntu/linux-realtime@5.15.0-1032.35?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.15.0-1032.35"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-buildinfo-5.15.0-1028-generic",
"binary_version": "5.15.0-1028.32"
},
{
"binary_name": "linux-headers-5.15.0-1028-generic",
"binary_version": "5.15.0-1028.32"
},
{
"binary_name": "linux-image-5.15.0-1028-generic",
"binary_version": "5.15.0-1028.32"
},
{
"binary_name": "linux-modules-5.15.0-1028-generic",
"binary_version": "5.15.0-1028.32"
},
{
"binary_name": "linux-modules-extra-5.15.0-1028-generic",
"binary_version": "5.15.0-1028.32"
},
{
"binary_name": "linux-riscv-headers-5.15.0-1028",
"binary_version": "5.15.0-1028.32"
},
{
"binary_name": "linux-riscv-tools-5.15.0-1028",
"binary_version": "5.15.0-1028.32"
},
{
"binary_name": "linux-tools-5.15.0-1028-generic",
"binary_version": "5.15.0-1028.32"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "linux-riscv",
"purl": "pkg:deb/ubuntu/linux-riscv@5.15.0-1028.32?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.13.0-1004.4",
"5.13.0-1006.6+22.04.1",
"5.13.0-1007.7+22.04.1",
"5.13.0-1010.11+22.04.1",
"5.15.0-1004.4",
"5.15.0-1005.5",
"5.15.0-1006.6",
"5.15.0-1007.7",
"5.15.0-1008.8",
"5.15.0-1011.12",
"5.15.0-1012.13",
"5.15.0-1014.16",
"5.15.0-1015.17",
"5.15.0-1016.18",
"5.15.0-1017.19",
"5.15.0-1018.21",
"5.15.0-1019.22",
"5.15.0-1020.23",
"5.15.0-1022.26",
"5.15.0-1023.27",
"5.15.0-1026.30",
"5.15.0-1027.31",
"5.15.0-1028.32"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-buildinfo-5.19.0-1021-generic",
"binary_version": "5.19.0-1021.23~22.04.1"
},
{
"binary_name": "linux-headers-5.19.0-1021-generic",
"binary_version": "5.19.0-1021.23~22.04.1"
},
{
"binary_name": "linux-image-5.19.0-1021-generic",
"binary_version": "5.19.0-1021.23~22.04.1"
},
{
"binary_name": "linux-modules-5.19.0-1021-generic",
"binary_version": "5.19.0-1021.23~22.04.1"
},
{
"binary_name": "linux-modules-extra-5.19.0-1021-generic",
"binary_version": "5.19.0-1021.23~22.04.1"
},
{
"binary_name": "linux-riscv-5.19-headers-5.19.0-1021",
"binary_version": "5.19.0-1021.23~22.04.1"
},
{
"binary_name": "linux-riscv-5.19-tools-5.19.0-1021",
"binary_version": "5.19.0-1021.23~22.04.1"
},
{
"binary_name": "linux-tools-5.19.0-1021-generic",
"binary_version": "5.19.0-1021.23~22.04.1"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "linux-riscv-5.19",
"purl": "pkg:deb/ubuntu/linux-riscv-5.19@5.19.0-1021.23~22.04.1?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.19.0-1012.13~22.04.1",
"5.19.0-1015.16~22.04.1",
"5.19.0-1016.17~22.04.1",
"5.19.0-1017.18~22.04.1",
"5.19.0-1018.19~22.04.1",
"5.19.0-1019.21~22.04.1",
"5.19.0-1020.22~22.04.1",
"5.19.0-1021.23~22.04.1"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-buildinfo-6.5.0-45-generic",
"binary_version": "6.5.0-45.45.1~22.04.1"
},
{
"binary_name": "linux-headers-6.5.0-45-generic",
"binary_version": "6.5.0-45.45.1~22.04.1"
},
{
"binary_name": "linux-image-6.5.0-45-generic",
"binary_version": "6.5.0-45.45.1~22.04.1"
},
{
"binary_name": "linux-modules-6.5.0-45-generic",
"binary_version": "6.5.0-45.45.1~22.04.1"
},
{
"binary_name": "linux-modules-extra-6.5.0-45-generic",
"binary_version": "6.5.0-45.45.1~22.04.1"
},
{
"binary_name": "linux-riscv-6.5-headers-6.5.0-45",
"binary_version": "6.5.0-45.45.1~22.04.1"
},
{
"binary_name": "linux-riscv-6.5-tools-6.5.0-45",
"binary_version": "6.5.0-45.45.1~22.04.1"
},
{
"binary_name": "linux-tools-6.5.0-45-generic",
"binary_version": "6.5.0-45.45.1~22.04.1"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "linux-riscv-6.5",
"purl": "pkg:deb/ubuntu/linux-riscv-6.5@6.5.0-45.45.1~22.04.1?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.5.0-17.17.1.1~22.04.1",
"6.5.0-21.21.1~22.04.1",
"6.5.0-25.25.1~22.04.1",
"6.5.0-26.26.1~22.04.1",
"6.5.0-27.28.1~22.04.1",
"6.5.0-28.29.1~22.04.1",
"6.5.0-35.35.1~22.04.1",
"6.5.0-40.40.1~22.04.1",
"6.5.0-42.42.1~22.04.1",
"6.5.0-45.45.1~22.04.1"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "linux-buildinfo-6.8.0-84-generic",
"binary_version": "6.8.0-84.84~22.04.1"
},
{
"binary_name": "linux-headers-6.8.0-84-generic",
"binary_version": "6.8.0-84.84~22.04.1"
},
{
"binary_name": "linux-image-6.8.0-84-generic",
"binary_version": "6.8.0-84.84~22.04.1"
},
{
"binary_name": "linux-modules-6.8.0-84-generic",
"binary_version": "6.8.0-84.84~22.04.1"
},
{
"binary_name": "linux-riscv-6.8-headers-6.8.0-84",
"binary_version": "6.8.0-84.84~22.04.1"
},
{
"binary_name": "linux-riscv-6.8-tools-6.8.0-84",
"binary_version": "6.8.0-84.84~22.04.1"
},
{
"binary_name": "linux-tools-6.8.0-84-generic",
"binary_version": "6.8.0-84.84~22.04.1"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "linux-riscv-6.8",
"purl": "pkg:deb/ubuntu/linux-riscv-6.8@6.8.0-84.84~22.04.1?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.8.0-84.84~22.04.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.8.0-38.38.1~22.04.1",
"6.8.0-39.39.1~22.04.1",
"6.8.0-40.40.1~22.04.1",
"6.8.0-41.41.1~22.04.1",
"6.8.0-44.44.1~22.04.1",
"6.8.0-47.47.1~22.04.1",
"6.8.0-48.48.1~22.04.2",
"6.8.0-49.49.1~22.04.1",
"6.8.0-50.51.1~22.04.1",
"6.8.0-51.52.1~22.04.1",
"6.8.0-52.53.1~22.04.1",
"6.8.0-53.55.1~22.04.1",
"6.8.0-55.57.1~22.04.1",
"6.8.0-56.58.1~22.04.1",
"6.8.0-57.59.1~22.04.1",
"6.8.0-58.60.1~22.04.1",
"6.8.0-59.61.1~22.04.1",
"6.8.0-62.65~22.04.1",
"6.8.0-63.66~22.04.1",
"6.8.0-64.67~22.04.1",
"6.8.0-71.71~22.04.1",
"6.8.0-78.78~22.04.1",
"6.8.0-79.79~22.04.1",
"6.8.0-83.83~22.04.1"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-buildinfo-5.19.0-1020-starfive",
"binary_version": "5.19.0-1020.22~22.04.1"
},
{
"binary_name": "linux-headers-5.19.0-1020-starfive",
"binary_version": "5.19.0-1020.22~22.04.1"
},
{
"binary_name": "linux-image-5.19.0-1020-starfive",
"binary_version": "5.19.0-1020.22~22.04.1"
},
{
"binary_name": "linux-modules-5.19.0-1020-starfive",
"binary_version": "5.19.0-1020.22~22.04.1"
},
{
"binary_name": "linux-modules-extra-5.19.0-1020-starfive",
"binary_version": "5.19.0-1020.22~22.04.1"
},
{
"binary_name": "linux-starfive-5.19-headers-5.19.0-1020",
"binary_version": "5.19.0-1020.22~22.04.1"
},
{
"binary_name": "linux-starfive-5.19-tools-5.19.0-1020",
"binary_version": "5.19.0-1020.22~22.04.1"
},
{
"binary_name": "linux-tools-5.19.0-1020-starfive",
"binary_version": "5.19.0-1020.22~22.04.1"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "linux-starfive-5.19",
"purl": "pkg:deb/ubuntu/linux-starfive-5.19@5.19.0-1020.22~22.04.1?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.19.0-1014.16~22.04.1",
"5.19.0-1015.17~22.04.1",
"5.19.0-1016.18~22.04.1",
"5.19.0-1017.19~22.04.1",
"5.19.0-1018.20~22.04.1",
"5.19.0-1019.21~22.04.1",
"5.19.0-1020.22~22.04.1"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-buildinfo-6.2.0-1009-starfive",
"binary_version": "6.2.0-1009.10~22.04.1"
},
{
"binary_name": "linux-headers-6.2.0-1009-starfive",
"binary_version": "6.2.0-1009.10~22.04.1"
},
{
"binary_name": "linux-image-6.2.0-1009-starfive",
"binary_version": "6.2.0-1009.10~22.04.1"
},
{
"binary_name": "linux-modules-6.2.0-1009-starfive",
"binary_version": "6.2.0-1009.10~22.04.1"
},
{
"binary_name": "linux-modules-extra-6.2.0-1009-starfive",
"binary_version": "6.2.0-1009.10~22.04.1"
},
{
"binary_name": "linux-starfive-6.2-headers-6.2.0-1009",
"binary_version": "6.2.0-1009.10~22.04.1"
},
{
"binary_name": "linux-starfive-6.2-tools-6.2.0-1009",
"binary_version": "6.2.0-1009.10~22.04.1"
},
{
"binary_name": "linux-tools-6.2.0-1009-starfive",
"binary_version": "6.2.0-1009.10~22.04.1"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "linux-starfive-6.2",
"purl": "pkg:deb/ubuntu/linux-starfive-6.2@6.2.0-1009.10~22.04.1?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.2.0-1006.7~22.04.1",
"6.2.0-1007.8~22.04.1",
"6.2.0-1009.10~22.04.1"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-buildinfo-6.5.0-1018-starfive",
"binary_version": "6.5.0-1018.19~22.04.1"
},
{
"binary_name": "linux-headers-6.5.0-1018-starfive",
"binary_version": "6.5.0-1018.19~22.04.1"
},
{
"binary_name": "linux-image-6.5.0-1018-starfive",
"binary_version": "6.5.0-1018.19~22.04.1"
},
{
"binary_name": "linux-modules-6.5.0-1018-starfive",
"binary_version": "6.5.0-1018.19~22.04.1"
},
{
"binary_name": "linux-modules-extra-6.5.0-1018-starfive",
"binary_version": "6.5.0-1018.19~22.04.1"
},
{
"binary_name": "linux-starfive-6.5-headers-6.5.0-1018",
"binary_version": "6.5.0-1018.19~22.04.1"
},
{
"binary_name": "linux-starfive-6.5-tools-6.5.0-1018",
"binary_version": "6.5.0-1018.19~22.04.1"
},
{
"binary_name": "linux-tools-6.5.0-1018-starfive",
"binary_version": "6.5.0-1018.19~22.04.1"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "linux-starfive-6.5",
"purl": "pkg:deb/ubuntu/linux-starfive-6.5@6.5.0-1018.19~22.04.1?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.5.0-1007.8~22.04.1",
"6.5.0-1008.9~22.04.1",
"6.5.0-1009.10~22.04.1",
"6.5.0-1010.11~22.04.1",
"6.5.0-1011.12~22.04.1",
"6.5.0-1012.13~22.04.1",
"6.5.0-1014.15~22.04.1",
"6.5.0-1015.16~22.04.1",
"6.5.0-1016.17~22.04.1",
"6.5.0-1017.18~22.04.1",
"6.5.0-1018.19~22.04.1"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "linux-buildinfo-5.15.0-1050-xilinx-zynqmp",
"binary_version": "5.15.0-1050.54"
},
{
"binary_name": "linux-headers-5.15.0-1050-xilinx-zynqmp",
"binary_version": "5.15.0-1050.54"
},
{
"binary_name": "linux-image-5.15.0-1050-xilinx-zynqmp",
"binary_version": "5.15.0-1050.54"
},
{
"binary_name": "linux-modules-5.15.0-1050-xilinx-zynqmp",
"binary_version": "5.15.0-1050.54"
},
{
"binary_name": "linux-tools-5.15.0-1050-xilinx-zynqmp",
"binary_version": "5.15.0-1050.54"
},
{
"binary_name": "linux-xilinx-zynqmp-headers-5.15.0-1050",
"binary_version": "5.15.0-1050.54"
},
{
"binary_name": "linux-xilinx-zynqmp-tools-5.15.0-1050",
"binary_version": "5.15.0-1050.54"
},
{
"binary_name": "linux-xilinx-zynqmp-tools-common",
"binary_version": "5.15.0-1050.54"
},
{
"binary_name": "linux-xilinx-zynqmp-tools-host",
"binary_version": "5.15.0-1050.54"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "linux-xilinx-zynqmp",
"purl": "pkg:deb/ubuntu/linux-xilinx-zynqmp@5.15.0-1050.54?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "5.15.0-1050.54"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.15.0-1022.26",
"5.15.0-1023.27",
"5.15.0-1025.29",
"5.15.0-1027.31",
"5.15.0-1030.34",
"5.15.0-1031.35",
"5.15.0-1035.39",
"5.15.0-1036.40",
"5.15.0-1037.41",
"5.15.0-1038.42",
"5.15.0-1039.43",
"5.15.0-1041.45",
"5.15.0-1044.48",
"5.15.0-1046.50"
]
},
{
"ecosystem_specific": {
"availability": "Available for NVIDIA BlueField platforms",
"binaries": [
{
"binary_name": "linux-bluefield-cloud-tools-common",
"binary_version": "5.15.0-1069.71"
},
{
"binary_name": "linux-bluefield-headers-5.15.0-1069",
"binary_version": "5.15.0-1069.71"
},
{
"binary_name": "linux-bluefield-tools-5.15.0-1069",
"binary_version": "5.15.0-1069.71"
},
{
"binary_name": "linux-bluefield-tools-host",
"binary_version": "5.15.0-1069.71"
},
{
"binary_name": "linux-buildinfo-5.15.0-1069-bluefield",
"binary_version": "5.15.0-1069.71"
},
{
"binary_name": "linux-headers-5.15.0-1069-bluefield",
"binary_version": "5.15.0-1069.71"
},
{
"binary_name": "linux-image-unsigned-5.15.0-1069-bluefield",
"binary_version": "5.15.0-1069.71"
},
{
"binary_name": "linux-modules-5.15.0-1069-bluefield",
"binary_version": "5.15.0-1069.71"
},
{
"binary_name": "linux-modules-extra-5.15.0-1069-bluefield",
"binary_version": "5.15.0-1069.71"
},
{
"binary_name": "linux-tools-5.15.0-1069-bluefield",
"binary_version": "5.15.0-1069.71"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:Nvidia-BlueField:22.04:LTS",
"name": "linux-bluefield",
"purl": "pkg:deb/ubuntu/linux-bluefield@5.15.0-1069.71?arch=source\u0026distro=bluefield/jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "5.15.0-1069.71"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.15.0-1011.13",
"5.15.0-1014.16",
"5.15.0-1015.17",
"5.15.0-1017.19",
"5.15.0-1019.21",
"5.15.0-1021.23",
"5.15.0-1022.24",
"5.15.0-1023.25",
"5.15.0-1024.26",
"5.15.0-1027.29",
"5.15.0-1028.30",
"5.15.0-1031.33",
"5.15.0-1032.34",
"5.15.0-1033.35",
"5.15.0-1035.37",
"5.15.0-1036.38",
"5.15.0-1037.39",
"5.15.0-1038.40",
"5.15.0-1040.42",
"5.15.0-1042.44",
"5.15.0-1043.45",
"5.15.0-1044.46",
"5.15.0-1045.47",
"5.15.0-1047.49",
"5.15.0-1048.50",
"5.15.0-1050.52",
"5.15.0-1051.53",
"5.15.0-1052.54",
"5.15.0-1053.55",
"5.15.0-1054.56",
"5.15.0-1056.58",
"5.15.0-1057.59",
"5.15.0-1058.60",
"5.15.0-1059.61",
"5.15.0-1060.62",
"5.15.0-1061.63",
"5.15.0-1062.64",
"5.15.0-1063.65",
"5.15.0-1064.66",
"5.15.0-1065.67",
"5.15.0-1066.68",
"5.15.0-1067.69"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-aws-fips-cloud-tools-5.15.0-1051",
"binary_version": "5.15.0-1051.56+fips1"
},
{
"binary_name": "linux-aws-fips-headers-5.15.0-1051",
"binary_version": "5.15.0-1051.56+fips1"
},
{
"binary_name": "linux-aws-fips-tools-5.15.0-1051",
"binary_version": "5.15.0-1051.56+fips1"
},
{
"binary_name": "linux-buildinfo-5.15.0-1051-aws-fips",
"binary_version": "5.15.0-1051.56+fips1"
},
{
"binary_name": "linux-cloud-tools-5.15.0-1051-aws-fips",
"binary_version": "5.15.0-1051.56+fips1"
},
{
"binary_name": "linux-headers-5.15.0-1051-aws-fips",
"binary_version": "5.15.0-1051.56+fips1"
},
{
"binary_name": "linux-image-unsigned-5.15.0-1051-aws-fips",
"binary_version": "5.15.0-1051.56+fips1"
},
{
"binary_name": "linux-image-unsigned-hmac-5.15.0-1051-aws-fips",
"binary_version": "5.15.0-1051.56+fips1"
},
{
"binary_name": "linux-modules-5.15.0-1051-aws-fips",
"binary_version": "5.15.0-1051.56+fips1"
},
{
"binary_name": "linux-modules-extra-5.15.0-1051-aws-fips",
"binary_version": "5.15.0-1051.56+fips1"
},
{
"binary_name": "linux-tools-5.15.0-1051-aws-fips",
"binary_version": "5.15.0-1051.56+fips1"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:Pro:FIPS-preview:22.04:LTS",
"name": "linux-aws-fips",
"purl": "pkg:deb/ubuntu/linux-aws-fips@5.15.0-1051.56+fips1?arch=source\u0026distro=fips-preview/jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.15.0-1042.47+fips1",
"5.15.0-1051.56+fips1"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-azure-fips-cloud-tools-5.15.0-1053",
"binary_version": "5.15.0-1053.61+fips1"
},
{
"binary_name": "linux-azure-fips-headers-5.15.0-1053",
"binary_version": "5.15.0-1053.61+fips1"
},
{
"binary_name": "linux-azure-fips-tools-5.15.0-1053",
"binary_version": "5.15.0-1053.61+fips1"
},
{
"binary_name": "linux-buildinfo-5.15.0-1053-azure-fips",
"binary_version": "5.15.0-1053.61+fips1"
},
{
"binary_name": "linux-cloud-tools-5.15.0-1053-azure-fips",
"binary_version": "5.15.0-1053.61+fips1"
},
{
"binary_name": "linux-headers-5.15.0-1053-azure-fips",
"binary_version": "5.15.0-1053.61+fips1"
},
{
"binary_name": "linux-image-unsigned-5.15.0-1053-azure-fips",
"binary_version": "5.15.0-1053.61+fips1"
},
{
"binary_name": "linux-image-unsigned-hmac-5.15.0-1053-azure-fips",
"binary_version": "5.15.0-1053.61+fips1"
},
{
"binary_name": "linux-modules-5.15.0-1053-azure-fips",
"binary_version": "5.15.0-1053.61+fips1"
},
{
"binary_name": "linux-modules-extra-5.15.0-1053-azure-fips",
"binary_version": "5.15.0-1053.61+fips1"
},
{
"binary_name": "linux-tools-5.15.0-1053-azure-fips",
"binary_version": "5.15.0-1053.61+fips1"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:Pro:FIPS-preview:22.04:LTS",
"name": "linux-azure-fips",
"purl": "pkg:deb/ubuntu/linux-azure-fips@5.15.0-1053.61+fips1?arch=source\u0026distro=fips-preview/jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.15.0-1053.61+fips1"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-buildinfo-5.15.0-73-fips",
"binary_version": "5.15.0-73.80+fips1"
},
{
"binary_name": "linux-fips-headers-5.15.0-73",
"binary_version": "5.15.0-73.80+fips1"
},
{
"binary_name": "linux-fips-tools-5.15.0-73",
"binary_version": "5.15.0-73.80+fips1"
},
{
"binary_name": "linux-fips-tools-host",
"binary_version": "5.15.0-73.80+fips1"
},
{
"binary_name": "linux-headers-5.15.0-73-fips",
"binary_version": "5.15.0-73.80+fips1"
},
{
"binary_name": "linux-image-unsigned-5.15.0-73-fips",
"binary_version": "5.15.0-73.80+fips1"
},
{
"binary_name": "linux-image-unsigned-hmac-5.15.0-73-fips",
"binary_version": "5.15.0-73.80+fips1"
},
{
"binary_name": "linux-modules-5.15.0-73-fips",
"binary_version": "5.15.0-73.80+fips1"
},
{
"binary_name": "linux-modules-extra-5.15.0-73-fips",
"binary_version": "5.15.0-73.80+fips1"
},
{
"binary_name": "linux-modules-iwlwifi-5.15.0-73-fips",
"binary_version": "5.15.0-73.80+fips1"
},
{
"binary_name": "linux-tools-5.15.0-73-fips",
"binary_version": "5.15.0-73.80+fips1"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:Pro:FIPS-preview:22.04:LTS",
"name": "linux-fips",
"purl": "pkg:deb/ubuntu/linux-fips@5.15.0-73.80+fips1?arch=source\u0026distro=fips-preview/jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.15.0-73.80+fips1"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-buildinfo-5.15.0-1048-gcp-fips",
"binary_version": "5.15.0-1048.56+fips1"
},
{
"binary_name": "linux-gcp-fips-headers-5.15.0-1048",
"binary_version": "5.15.0-1048.56+fips1"
},
{
"binary_name": "linux-gcp-fips-tools-5.15.0-1048",
"binary_version": "5.15.0-1048.56+fips1"
},
{
"binary_name": "linux-headers-5.15.0-1048-gcp-fips",
"binary_version": "5.15.0-1048.56+fips1"
},
{
"binary_name": "linux-image-unsigned-5.15.0-1048-gcp-fips",
"binary_version": "5.15.0-1048.56+fips1"
},
{
"binary_name": "linux-image-unsigned-hmac-5.15.0-1048-gcp-fips",
"binary_version": "5.15.0-1048.56+fips1"
},
{
"binary_name": "linux-modules-5.15.0-1048-gcp-fips",
"binary_version": "5.15.0-1048.56+fips1"
},
{
"binary_name": "linux-modules-extra-5.15.0-1048-gcp-fips",
"binary_version": "5.15.0-1048.56+fips1"
},
{
"binary_name": "linux-tools-5.15.0-1048-gcp-fips",
"binary_version": "5.15.0-1048.56+fips1"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:Pro:FIPS-preview:22.04:LTS",
"name": "linux-gcp-fips",
"purl": "pkg:deb/ubuntu/linux-gcp-fips@5.15.0-1048.56+fips1?arch=source\u0026distro=fips-preview/jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.15.0-1048.56+fips1"
]
},
{
"ecosystem_specific": {
"availability": "Available with Ubuntu Pro: https://ubuntu.com/pro",
"binaries": [
{
"binary_name": "linux-aws-fips-cloud-tools-5.15.0-1086",
"binary_version": "5.15.0-1086.93+fips1"
},
{
"binary_name": "linux-aws-fips-headers-5.15.0-1086",
"binary_version": "5.15.0-1086.93+fips1"
},
{
"binary_name": "linux-aws-fips-tools-5.15.0-1086",
"binary_version": "5.15.0-1086.93+fips1"
},
{
"binary_name": "linux-buildinfo-5.15.0-1086-aws-fips",
"binary_version": "5.15.0-1086.93+fips1"
},
{
"binary_name": "linux-cloud-tools-5.15.0-1086-aws-fips",
"binary_version": "5.15.0-1086.93+fips1"
},
{
"binary_name": "linux-headers-5.15.0-1086-aws-fips",
"binary_version": "5.15.0-1086.93+fips1"
},
{
"binary_name": "linux-image-unsigned-5.15.0-1086-aws-fips",
"binary_version": "5.15.0-1086.93+fips1"
},
{
"binary_name": "linux-image-unsigned-hmac-5.15.0-1086-aws-fips",
"binary_version": "5.15.0-1086.93+fips1"
},
{
"binary_name": "linux-modules-5.15.0-1086-aws-fips",
"binary_version": "5.15.0-1086.93+fips1"
},
{
"binary_name": "linux-modules-extra-5.15.0-1086-aws-fips",
"binary_version": "5.15.0-1086.93+fips1"
},
{
"binary_name": "linux-tools-5.15.0-1086-aws-fips",
"binary_version": "5.15.0-1086.93+fips1"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:Pro:FIPS-updates:22.04:LTS",
"name": "linux-aws-fips",
"purl": "pkg:deb/ubuntu/linux-aws-fips@5.15.0-1086.93+fips1?arch=source\u0026distro=fips-updates/jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "5.15.0-1086.93+fips1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.15.0-1051.56+fips1",
"5.15.0-1052.57+fips1",
"5.15.0-1053.58+fips1",
"5.15.0-1055.60+fips1",
"5.15.0-1056.61+fips1",
"5.15.0-1057.63+fips1",
"5.15.0-1060.66+fips1",
"5.15.0-1061.67+fips1",
"5.15.0-1062.68+fips1",
"5.15.0-1063.69+fips1",
"5.15.0-1064.70+fips1",
"5.15.0-1065.71+fips1",
"5.15.0-1066.72+fips1",
"5.15.0-1067.73+fips1",
"5.15.0-1068.74+fips1",
"5.15.0-1069.75+fips1",
"5.15.0-1070.76+fips1",
"5.15.0-1071.77+fips1",
"5.15.0-1072.78+fips1",
"5.15.0-1073.79+fips1",
"5.15.0-1076.83+fips1",
"5.15.0-1077.84+fips1",
"5.15.0-1078.85+fips1",
"5.15.0-1079.86+fips1",
"5.15.0-1080.87+fips1",
"5.15.0-1081.88+fips1",
"5.15.0-1082.89+fips1",
"5.15.0-1083.90+fips1",
"5.15.0-1084.91+fips1",
"5.15.0-1085.92+fips1"
]
},
{
"ecosystem_specific": {
"availability": "Available with Ubuntu Pro: https://ubuntu.com/pro",
"binaries": [
{
"binary_name": "linux-azure-fips-cloud-tools-5.15.0-1091",
"binary_version": "5.15.0-1091.100+fips1"
},
{
"binary_name": "linux-azure-fips-headers-5.15.0-1091",
"binary_version": "5.15.0-1091.100+fips1"
},
{
"binary_name": "linux-azure-fips-tools-5.15.0-1091",
"binary_version": "5.15.0-1091.100+fips1"
},
{
"binary_name": "linux-buildinfo-5.15.0-1091-azure-fips",
"binary_version": "5.15.0-1091.100+fips1"
},
{
"binary_name": "linux-cloud-tools-5.15.0-1091-azure-fips",
"binary_version": "5.15.0-1091.100+fips1"
},
{
"binary_name": "linux-headers-5.15.0-1091-azure-fips",
"binary_version": "5.15.0-1091.100+fips1"
},
{
"binary_name": "linux-image-unsigned-5.15.0-1091-azure-fips",
"binary_version": "5.15.0-1091.100+fips1"
},
{
"binary_name": "linux-image-unsigned-hmac-5.15.0-1091-azure-fips",
"binary_version": "5.15.0-1091.100+fips1"
},
{
"binary_name": "linux-modules-5.15.0-1091-azure-fips",
"binary_version": "5.15.0-1091.100+fips1"
},
{
"binary_name": "linux-modules-extra-5.15.0-1091-azure-fips",
"binary_version": "5.15.0-1091.100+fips1"
},
{
"binary_name": "linux-modules-involflt-5.15.0-1091-azure-fips",
"binary_version": "5.15.0-1091.100+fips1"
},
{
"binary_name": "linux-tools-5.15.0-1091-azure-fips",
"binary_version": "5.15.0-1091.100+fips1"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:Pro:FIPS-updates:22.04:LTS",
"name": "linux-azure-fips",
"purl": "pkg:deb/ubuntu/linux-azure-fips@5.15.0-1091.100+fips1?arch=source\u0026distro=fips-updates/jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "5.15.0-1091.100+fips1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.15.0-1053.61+fips1",
"5.15.0-1058.66+fips1",
"5.15.0-1059.67+fips1",
"5.15.0-1060.69+fips1",
"5.15.0-1061.70+fips1",
"5.15.0-1063.72+fips1",
"5.15.0-1064.73+fips1",
"5.15.0-1065.74+fips1",
"5.15.0-1067.76+fips1",
"5.15.0-1068.77+fips1",
"5.15.0-1070.79+fips1",
"5.15.0-1071.80+fips1",
"5.15.0-1072.81+fips1",
"5.15.0-1073.82+fips1",
"5.15.0-1074.83+fips1",
"5.15.0-1075.84+fips1",
"5.15.0-1078.87+fips1",
"5.15.0-1079.88+fips1",
"5.15.0-1080.89+fips1",
"5.15.0-1082.91+fips1",
"5.15.0-1083.92+fips1",
"5.15.0-1085.94+fips1",
"5.15.0-1087.96+fips1",
"5.15.0-1088.97+fips1",
"5.15.0-1089.98+fips1",
"5.15.0-1090.99+fips1"
]
},
{
"ecosystem_specific": {
"availability": "Available with Ubuntu Pro: https://ubuntu.com/pro",
"binaries": [
{
"binary_name": "linux-buildinfo-5.15.0-142-fips",
"binary_version": "5.15.0-142.152+fips1"
},
{
"binary_name": "linux-fips-headers-5.15.0-142",
"binary_version": "5.15.0-142.152+fips1"
},
{
"binary_name": "linux-fips-tools-5.15.0-142",
"binary_version": "5.15.0-142.152+fips1"
},
{
"binary_name": "linux-headers-5.15.0-142-fips",
"binary_version": "5.15.0-142.152+fips1"
},
{
"binary_name": "linux-image-unsigned-5.15.0-142-fips",
"binary_version": "5.15.0-142.152+fips1"
},
{
"binary_name": "linux-image-unsigned-hmac-5.15.0-142-fips",
"binary_version": "5.15.0-142.152+fips1"
},
{
"binary_name": "linux-modules-5.15.0-142-fips",
"binary_version": "5.15.0-142.152+fips1"
},
{
"binary_name": "linux-modules-extra-5.15.0-142-fips",
"binary_version": "5.15.0-142.152+fips1"
},
{
"binary_name": "linux-modules-iwlwifi-5.15.0-142-fips",
"binary_version": "5.15.0-142.152+fips1"
},
{
"binary_name": "linux-tools-5.15.0-142-fips",
"binary_version": "5.15.0-142.152+fips1"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:Pro:FIPS-updates:22.04:LTS",
"name": "linux-fips",
"purl": "pkg:deb/ubuntu/linux-fips@5.15.0-142.152+fips1?arch=source\u0026distro=fips-updates/jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "5.15.0-142.152+fips1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.15.0-73.80+fips1",
"5.15.0-92.102+fips1",
"5.15.0-94.104+fips1",
"5.15.0-97.107+fips1",
"5.15.0-100.110+fips1",
"5.15.0-101.111+fips1",
"5.15.0-102.112+fips1",
"5.15.0-105.115+fips1",
"5.15.0-106.116+fips1",
"5.15.0-107.117+fips1",
"5.15.0-111.121+fips1",
"5.15.0-113.123+fips1",
"5.15.0-115.125+fips1",
"5.15.0-117.127+fips1",
"5.15.0-118.128+fips1",
"5.15.0-119.129+fips1",
"5.15.0-121.131+fips1",
"5.15.0-122.132+fips1",
"5.15.0-124.134+fips1",
"5.15.0-125.135+fips1",
"5.15.0-127.137+fips1",
"5.15.0-128.138+fips1",
"5.15.0-130.140+fips1",
"5.15.0-131.141+fips1",
"5.15.0-133.144+fips1",
"5.15.0-134.145+fips1",
"5.15.0-135.146+fips1",
"5.15.0-136.147+fips1",
"5.15.0-138.148+fips1",
"5.15.0-139.149+fips1",
"5.15.0-140.150+fips1",
"5.15.0-141.151+fips1"
]
},
{
"ecosystem_specific": {
"availability": "Available with Ubuntu Pro: https://ubuntu.com/pro",
"binaries": [
{
"binary_name": "linux-buildinfo-5.15.0-1085-gcp-fips",
"binary_version": "5.15.0-1085.94+fips1"
},
{
"binary_name": "linux-gcp-fips-headers-5.15.0-1085",
"binary_version": "5.15.0-1085.94+fips1"
},
{
"binary_name": "linux-gcp-fips-tools-5.15.0-1085",
"binary_version": "5.15.0-1085.94+fips1"
},
{
"binary_name": "linux-headers-5.15.0-1085-gcp-fips",
"binary_version": "5.15.0-1085.94+fips1"
},
{
"binary_name": "linux-image-unsigned-5.15.0-1085-gcp-fips",
"binary_version": "5.15.0-1085.94+fips1"
},
{
"binary_name": "linux-image-unsigned-hmac-5.15.0-1085-gcp-fips",
"binary_version": "5.15.0-1085.94+fips1"
},
{
"binary_name": "linux-modules-5.15.0-1085-gcp-fips",
"binary_version": "5.15.0-1085.94+fips1"
},
{
"binary_name": "linux-modules-extra-5.15.0-1085-gcp-fips",
"binary_version": "5.15.0-1085.94+fips1"
},
{
"binary_name": "linux-tools-5.15.0-1085-gcp-fips",
"binary_version": "5.15.0-1085.94+fips1"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:Pro:FIPS-updates:22.04:LTS",
"name": "linux-gcp-fips",
"purl": "pkg:deb/ubuntu/linux-gcp-fips@5.15.0-1085.94+fips1?arch=source\u0026distro=fips-updates/jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "5.15.0-1085.94+fips1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.15.0-1048.56+fips1",
"5.15.0-1055.63+fips2",
"5.15.0-1058.66+fips1",
"5.15.0-1059.67+fips1",
"5.15.0-1060.68+fips1",
"5.15.0-1062.70+fips1",
"5.15.0-1063.71+fips1",
"5.15.0-1064.72+fips1",
"5.15.0-1065.73+fips1",
"5.15.0-1066.74+fips1",
"5.15.0-1067.75+fips1",
"5.15.0-1068.76+fips1",
"5.15.0-1069.77+fips1",
"5.15.0-1070.78+fips1",
"5.15.0-1071.79+fips1",
"5.15.0-1072.80+fips1",
"5.15.0-1073.81+fips1",
"5.15.0-1074.83+fips1",
"5.15.0-1075.84+fips1",
"5.15.0-1077.86+fips1",
"5.15.0-1078.87+fips1",
"5.15.0-1079.88+fips1",
"5.15.0-1080.89+fips1",
"5.15.0-1081.90+fips1",
"5.15.0-1082.91+fips1",
"5.15.0-1083.92+fips1",
"5.15.0-1084.93+fips1"
]
},
{
"ecosystem_specific": {
"availability": "Available with Ubuntu Pro: https://ubuntu.com/pro",
"binaries": [
{
"binary_name": "linux-buildinfo-5.15.0-1079-intel-iot-realtime",
"binary_version": "5.15.0-1079.81"
},
{
"binary_name": "linux-cloud-tools-5.15.0-1079-intel-iot-realtime",
"binary_version": "5.15.0-1079.81"
},
{
"binary_name": "linux-headers-5.15.0-1079-intel-iot-realtime",
"binary_version": "5.15.0-1079.81"
},
{
"binary_name": "linux-image-unsigned-5.15.0-1079-intel-iot-realtime",
"binary_version": "5.15.0-1079.81"
},
{
"binary_name": "linux-intel-iot-realtime-cloud-tools-5.15.0-1079",
"binary_version": "5.15.0-1079.81"
},
{
"binary_name": "linux-intel-iot-realtime-cloud-tools-common",
"binary_version": "5.15.0-1079.81"
},
{
"binary_name": "linux-intel-iot-realtime-headers-5.15.0-1079",
"binary_version": "5.15.0-1079.81"
},
{
"binary_name": "linux-intel-iot-realtime-tools-5.15.0-1079",
"binary_version": "5.15.0-1079.81"
},
{
"binary_name": "linux-intel-iot-realtime-tools-common",
"binary_version": "5.15.0-1079.81"
},
{
"binary_name": "linux-intel-iot-realtime-tools-host",
"binary_version": "5.15.0-1079.81"
},
{
"binary_name": "linux-modules-5.15.0-1079-intel-iot-realtime",
"binary_version": "5.15.0-1079.81"
},
{
"binary_name": "linux-modules-extra-5.15.0-1079-intel-iot-realtime",
"binary_version": "5.15.0-1079.81"
},
{
"binary_name": "linux-tools-5.15.0-1079-intel-iot-realtime",
"binary_version": "5.15.0-1079.81"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:Pro:Realtime:22.04:LTS",
"name": "linux-intel-iot-realtime",
"purl": "pkg:deb/ubuntu/linux-intel-iot-realtime@5.15.0-1079.81?arch=source\u0026distro=realtime/jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "5.15.0-1079.81"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.15.0-1021.26",
"5.15.0-1022.27",
"5.15.0-1023.28",
"5.15.0-1024.29",
"5.15.0-1028.33",
"5.15.0-1033.35",
"5.15.0-1034.36",
"5.15.0-1035.37",
"5.15.0-1036.38",
"5.15.0-1037.39",
"5.15.0-1038.40",
"5.15.0-1039.41",
"5.15.0-1040.42",
"5.15.0-1041.43",
"5.15.0-1042.44",
"5.15.0-1043.45",
"5.15.0-1044.46",
"5.15.0-1046.48",
"5.15.0-1047.49",
"5.15.0-1048.50",
"5.15.0-1049.51",
"5.15.0-1050.52",
"5.15.0-1053.55",
"5.15.0-1054.56",
"5.15.0-1055.57",
"5.15.0-1056.58",
"5.15.0-1057.59",
"5.15.0-1058.60",
"5.15.0-1059.61",
"5.15.0-1060.62",
"5.15.0-1061.63",
"5.15.0-1063.65",
"5.15.0-1064.66",
"5.15.0-1066.68",
"5.15.0-1071.73",
"5.15.0-1072.74",
"5.15.0-1073.75",
"5.15.0-1074.76",
"5.15.0-1075.77",
"5.15.0-1076.78",
"5.15.0-1077.79",
"5.15.0-1078.80"
]
},
{
"ecosystem_specific": {
"availability": "Available with Ubuntu Pro: https://ubuntu.com/pro",
"binaries": [
{
"binary_name": "linux-buildinfo-5.15.0-1086-realtime",
"binary_version": "5.15.0-1086.95"
},
{
"binary_name": "linux-cloud-tools-5.15.0-1086-realtime",
"binary_version": "5.15.0-1086.95"
},
{
"binary_name": "linux-headers-5.15.0-1086-realtime",
"binary_version": "5.15.0-1086.95"
},
{
"binary_name": "linux-image-unsigned-5.15.0-1086-realtime",
"binary_version": "5.15.0-1086.95"
},
{
"binary_name": "linux-modules-5.15.0-1086-realtime",
"binary_version": "5.15.0-1086.95"
},
{
"binary_name": "linux-modules-extra-5.15.0-1086-realtime",
"binary_version": "5.15.0-1086.95"
},
{
"binary_name": "linux-modules-iwlwifi-5.15.0-1086-realtime",
"binary_version": "5.15.0-1086.95"
},
{
"binary_name": "linux-realtime-cloud-tools-5.15.0-1086",
"binary_version": "5.15.0-1086.95"
},
{
"binary_name": "linux-realtime-cloud-tools-common",
"binary_version": "5.15.0-1086.95"
},
{
"binary_name": "linux-realtime-headers-5.15.0-1086",
"binary_version": "5.15.0-1086.95"
},
{
"binary_name": "linux-realtime-tools-5.15.0-1086",
"binary_version": "5.15.0-1086.95"
},
{
"binary_name": "linux-realtime-tools-common",
"binary_version": "5.15.0-1086.95"
},
{
"binary_name": "linux-realtime-tools-host",
"binary_version": "5.15.0-1086.95"
},
{
"binary_name": "linux-tools-5.15.0-1086-realtime",
"binary_version": "5.15.0-1086.95"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:Pro:Realtime:22.04:LTS",
"name": "linux-realtime",
"purl": "pkg:deb/ubuntu/linux-realtime@5.15.0-1086.95?arch=source\u0026distro=realtime/jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "5.15.0-1086.95"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.15.0-1006.6",
"5.15.0-1007.7",
"5.15.0-1009.9",
"5.15.0-1011.11",
"5.15.0-1014.14",
"5.15.0-1015.15",
"5.15.0-1016.16",
"5.15.0-1019.19",
"5.15.0-1020.20",
"5.15.0-1021.21",
"5.15.0-1022.22",
"5.15.0-1024.25",
"5.15.0-1025.28",
"5.15.0-1028.31",
"5.15.0-1029.32",
"5.15.0-1030.33",
"5.15.0-1032.35",
"5.15.0-1033.36",
"5.15.0-1034.37",
"5.15.0-1036.39",
"5.15.0-1037.40",
"5.15.0-1038.41",
"5.15.0-1039.42",
"5.15.0-1040.45",
"5.15.0-1041.46",
"5.15.0-1042.47",
"5.15.0-1043.48",
"5.15.0-1044.49",
"5.15.0-1045.50",
"5.15.0-1046.52",
"5.15.0-1048.54",
"5.15.0-1049.55",
"5.15.0-1050.56",
"5.15.0-1051.57",
"5.15.0-1052.58",
"5.15.0-1053.59",
"5.15.0-1054.60",
"5.15.0-1055.62",
"5.15.0-1056.63",
"5.15.0-1057.64",
"5.15.0-1058.66",
"5.15.0-1061.69",
"5.15.0-1062.70",
"5.15.0-1063.71",
"5.15.0-1064.72",
"5.15.0-1065.73",
"5.15.0-1066.74",
"5.15.0-1067.75",
"5.15.0-1068.76",
"5.15.0-1069.77",
"5.15.0-1070.78",
"5.15.0-1071.79",
"5.15.0-1072.80",
"5.15.0-1073.81",
"5.15.0-1074.82",
"5.15.0-1075.83",
"5.15.0-1076.84",
"5.15.0-1077.85",
"5.15.0-1078.86",
"5.15.0-1079.87",
"5.15.0-1080.88",
"5.15.0-1081.89",
"5.15.0-1082.91",
"5.15.0-1083.92",
"5.15.0-1084.93",
"5.15.0-1085.94"
]
},
{
"ecosystem_specific": {
"availability": "Available with Ubuntu Pro: https://ubuntu.com/pro",
"binaries": [
{
"binary_name": "linux-buildinfo-6.8.1-1034-realtime",
"binary_version": "6.8.1-1034.35~22.04.1"
},
{
"binary_name": "linux-cloud-tools-6.8.1-1034-realtime",
"binary_version": "6.8.1-1034.35~22.04.1"
},
{
"binary_name": "linux-headers-6.8.1-1034-realtime",
"binary_version": "6.8.1-1034.35~22.04.1"
},
{
"binary_name": "linux-image-unsigned-6.8.1-1034-realtime",
"binary_version": "6.8.1-1034.35~22.04.1"
},
{
"binary_name": "linux-modules-6.8.1-1034-realtime",
"binary_version": "6.8.1-1034.35~22.04.1"
},
{
"binary_name": "linux-modules-extra-6.8.1-1034-realtime",
"binary_version": "6.8.1-1034.35~22.04.1"
},
{
"binary_name": "linux-modules-iwlwifi-6.8.1-1034-realtime",
"binary_version": "6.8.1-1034.35~22.04.1"
},
{
"binary_name": "linux-realtime-6.8-cloud-tools-6.8.1-1034",
"binary_version": "6.8.1-1034.35~22.04.1"
},
{
"binary_name": "linux-realtime-6.8-headers-6.8.1-1034",
"binary_version": "6.8.1-1034.35~22.04.1"
},
{
"binary_name": "linux-realtime-6.8-tools-6.8.1-1034",
"binary_version": "6.8.1-1034.35~22.04.1"
},
{
"binary_name": "linux-tools-6.8.1-1034-realtime",
"binary_version": "6.8.1-1034.35~22.04.1"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:Pro:Realtime:22.04:LTS",
"name": "linux-realtime-6.8",
"purl": "pkg:deb/ubuntu/linux-realtime-6.8@6.8.1-1034.35~22.04.1?arch=source\u0026distro=realtime/jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.8.1-1034.35~22.04.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.8.1-1004.4~22.04.1",
"6.8.1-1005.5~22.04.2",
"6.8.1-1006.6~22.04.1",
"6.8.1-1007.7~22.04.1",
"6.8.1-1008.8~22.04.1",
"6.8.1-1009.9~22.04.1",
"6.8.1-1010.10~22.04.1",
"6.8.1-1011.11~22.04.1",
"6.8.1-1012.12~22.04.1",
"6.8.1-1013.14~22.04.1",
"6.8.1-1014.15~22.04.1",
"6.8.1-1015.16~22.04.1",
"6.8.1-1016.17~22.04.1",
"6.8.1-1017.18~22.04.1",
"6.8.1-1018.19~22.04.1",
"6.8.1-1019.20~22.04.1",
"6.8.1-1020.21~22.04.1",
"6.8.1-1021.22~22.04.1",
"6.8.1-1022.23~22.04.1",
"6.8.1-1023.24~22.04.1",
"6.8.1-1024.25~22.04.1",
"6.8.1-1025.26~22.04.1",
"6.8.1-1026.27~22.04.1",
"6.8.1-1030.31~22.04.1",
"6.8.1-1031.32~22.04.1"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "linux-buildinfo-6.8.0-84-generic",
"binary_version": "6.8.0-84.84"
},
{
"binary_name": "linux-buildinfo-6.8.0-84-generic-64k",
"binary_version": "6.8.0-84.84"
},
{
"binary_name": "linux-cloud-tools-6.8.0-84",
"binary_version": "6.8.0-84.84"
},
{
"binary_name": "linux-cloud-tools-6.8.0-84-generic",
"binary_version": "6.8.0-84.84"
},
{
"binary_name": "linux-cloud-tools-common",
"binary_version": "6.8.0-84.84"
},
{
"binary_name": "linux-headers-6.8.0-84",
"binary_version": "6.8.0-84.84"
},
{
"binary_name": "linux-headers-6.8.0-84-generic",
"binary_version": "6.8.0-84.84"
},
{
"binary_name": "linux-headers-6.8.0-84-generic-64k",
"binary_version": "6.8.0-84.84"
},
{
"binary_name": "linux-image-6.8.0-84-generic",
"binary_version": "6.8.0-84.84"
},
{
"binary_name": "linux-image-unsigned-6.8.0-84-generic",
"binary_version": "6.8.0-84.84"
},
{
"binary_name": "linux-image-unsigned-6.8.0-84-generic-64k",
"binary_version": "6.8.0-84.84"
},
{
"binary_name": "linux-lib-rust-6.8.0-84-generic",
"binary_version": "6.8.0-84.84"
},
{
"binary_name": "linux-modules-6.8.0-84-generic",
"binary_version": "6.8.0-84.84"
},
{
"binary_name": "linux-modules-6.8.0-84-generic-64k",
"binary_version": "6.8.0-84.84"
},
{
"binary_name": "linux-modules-extra-6.8.0-84-generic",
"binary_version": "6.8.0-84.84"
},
{
"binary_name": "linux-modules-ipu6-6.8.0-84-generic",
"binary_version": "6.8.0-84.84"
},
{
"binary_name": "linux-modules-iwlwifi-6.8.0-84-generic",
"binary_version": "6.8.0-84.84"
},
{
"binary_name": "linux-modules-usbio-6.8.0-84-generic",
"binary_version": "6.8.0-84.84"
},
{
"binary_name": "linux-source-6.8.0",
"binary_version": "6.8.0-84.84"
},
{
"binary_name": "linux-tools-6.8.0-84",
"binary_version": "6.8.0-84.84"
},
{
"binary_name": "linux-tools-6.8.0-84-generic",
"binary_version": "6.8.0-84.84"
},
{
"binary_name": "linux-tools-6.8.0-84-generic-64k",
"binary_version": "6.8.0-84.84"
},
{
"binary_name": "linux-tools-common",
"binary_version": "6.8.0-84.84"
},
{
"binary_name": "linux-tools-host",
"binary_version": "6.8.0-84.84"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:24.04:LTS",
"name": "linux",
"purl": "pkg:deb/ubuntu/linux@6.8.0-84.84?arch=source\u0026distro=noble"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.8.0-84.84"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.5.0-9.9",
"6.6.0-14.14",
"6.8.0-11.11",
"6.8.0-20.20",
"6.8.0-22.22",
"6.8.0-28.28",
"6.8.0-31.31",
"6.8.0-35.35",
"6.8.0-36.36",
"6.8.0-38.38",
"6.8.0-39.39",
"6.8.0-40.40",
"6.8.0-41.41",
"6.8.0-44.44",
"6.8.0-45.45",
"6.8.0-47.47",
"6.8.0-48.48",
"6.8.0-49.49",
"6.8.0-50.51",
"6.8.0-51.52",
"6.8.0-52.53",
"6.8.0-53.55",
"6.8.0-54.56",
"6.8.0-55.57",
"6.8.0-56.58",
"6.8.0-57.59",
"6.8.0-58.60",
"6.8.0-59.61",
"6.8.0-60.63",
"6.8.0-62.65",
"6.8.0-63.66",
"6.8.0-64.67",
"6.8.0-71.71",
"6.8.0-78.78",
"6.8.0-79.79",
"6.8.0-83.83"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "linux-aws-cloud-tools-6.8.0-1039",
"binary_version": "6.8.0-1039.41"
},
{
"binary_name": "linux-aws-headers-6.8.0-1039",
"binary_version": "6.8.0-1039.41"
},
{
"binary_name": "linux-aws-tools-6.8.0-1039",
"binary_version": "6.8.0-1039.41"
},
{
"binary_name": "linux-buildinfo-6.8.0-1039-aws",
"binary_version": "6.8.0-1039.41"
},
{
"binary_name": "linux-buildinfo-6.8.0-1039-aws-64k",
"binary_version": "6.8.0-1039.41"
},
{
"binary_name": "linux-cloud-tools-6.8.0-1039-aws",
"binary_version": "6.8.0-1039.41"
},
{
"binary_name": "linux-cloud-tools-6.8.0-1039-aws-64k",
"binary_version": "6.8.0-1039.41"
},
{
"binary_name": "linux-headers-6.8.0-1039-aws",
"binary_version": "6.8.0-1039.41"
},
{
"binary_name": "linux-headers-6.8.0-1039-aws-64k",
"binary_version": "6.8.0-1039.41"
},
{
"binary_name": "linux-image-unsigned-6.8.0-1039-aws",
"binary_version": "6.8.0-1039.41"
},
{
"binary_name": "linux-image-unsigned-6.8.0-1039-aws-64k",
"binary_version": "6.8.0-1039.41"
},
{
"binary_name": "linux-modules-6.8.0-1039-aws",
"binary_version": "6.8.0-1039.41"
},
{
"binary_name": "linux-modules-6.8.0-1039-aws-64k",
"binary_version": "6.8.0-1039.41"
},
{
"binary_name": "linux-modules-extra-6.8.0-1039-aws",
"binary_version": "6.8.0-1039.41"
},
{
"binary_name": "linux-modules-extra-6.8.0-1039-aws-64k",
"binary_version": "6.8.0-1039.41"
},
{
"binary_name": "linux-tools-6.8.0-1039-aws",
"binary_version": "6.8.0-1039.41"
},
{
"binary_name": "linux-tools-6.8.0-1039-aws-64k",
"binary_version": "6.8.0-1039.41"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:24.04:LTS",
"name": "linux-aws",
"purl": "pkg:deb/ubuntu/linux-aws@6.8.0-1039.41?arch=source\u0026distro=noble"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.8.0-1039.41"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.5.0-1008.8",
"6.6.0-1001.1",
"6.8.0-1001.1",
"6.8.0-1006.6",
"6.8.0-1008.8",
"6.8.0-1009.9",
"6.8.0-1010.10",
"6.8.0-1011.12",
"6.8.0-1012.13",
"6.8.0-1013.14",
"6.8.0-1014.15",
"6.8.0-1015.16",
"6.8.0-1016.17",
"6.8.0-1017.18",
"6.8.0-1018.20",
"6.8.0-1019.21",
"6.8.0-1020.22",
"6.8.0-1021.23",
"6.8.0-1023.25",
"6.8.0-1024.26",
"6.8.0-1025.27",
"6.8.0-1026.28",
"6.8.0-1027.29",
"6.8.0-1028.30",
"6.8.0-1029.31",
"6.8.0-1030.32",
"6.8.0-1031.33",
"6.8.0-1032.34",
"6.8.0-1033.35",
"6.8.0-1035.37",
"6.8.0-1036.38",
"6.8.0-1038.40"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "linux-azure-cloud-tools-6.8.0-1038",
"binary_version": "6.8.0-1038.44"
},
{
"binary_name": "linux-azure-headers-6.8.0-1038",
"binary_version": "6.8.0-1038.44"
},
{
"binary_name": "linux-azure-tools-6.8.0-1038",
"binary_version": "6.8.0-1038.44"
},
{
"binary_name": "linux-buildinfo-6.8.0-1038-azure",
"binary_version": "6.8.0-1038.44"
},
{
"binary_name": "linux-cloud-tools-6.8.0-1038-azure",
"binary_version": "6.8.0-1038.44"
},
{
"binary_name": "linux-headers-6.8.0-1038-azure",
"binary_version": "6.8.0-1038.44"
},
{
"binary_name": "linux-image-unsigned-6.8.0-1038-azure",
"binary_version": "6.8.0-1038.44"
},
{
"binary_name": "linux-modules-6.8.0-1038-azure",
"binary_version": "6.8.0-1038.44"
},
{
"binary_name": "linux-modules-extra-6.8.0-1038-azure",
"binary_version": "6.8.0-1038.44"
},
{
"binary_name": "linux-modules-involflt-6.8.0-1038-azure",
"binary_version": "6.8.0-1038.44"
},
{
"binary_name": "linux-modules-iwlwifi-6.8.0-1038-azure",
"binary_version": "6.8.0-1038.44"
},
{
"binary_name": "linux-tools-6.8.0-1038-azure",
"binary_version": "6.8.0-1038.44"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:24.04:LTS",
"name": "linux-azure",
"purl": "pkg:deb/ubuntu/linux-azure@6.8.0-1038.44?arch=source\u0026distro=noble"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.8.0-1038.44"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.5.0-1007.7",
"6.6.0-1001.1",
"6.8.0-1001.1",
"6.8.0-1005.5",
"6.8.0-1006.6",
"6.8.0-1007.7",
"6.8.0-1008.8",
"6.8.0-1009.9",
"6.8.0-1010.10",
"6.8.0-1012.14",
"6.8.0-1013.15",
"6.8.0-1014.16",
"6.8.0-1015.17",
"6.8.0-1016.18",
"6.8.0-1017.20",
"6.8.0-1018.21",
"6.8.0-1020.23",
"6.8.0-1021.25",
"6.8.0-1025.30",
"6.8.0-1026.31",
"6.8.0-1027.32",
"6.8.0-1028.33",
"6.8.0-1029.34",
"6.8.0-1030.35",
"6.8.0-1031.36",
"6.8.0-1034.39"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "linux-azure-6.11-cloud-tools-6.11.0-1018",
"binary_version": "6.11.0-1018.18~24.04.1"
},
{
"binary_name": "linux-azure-6.11-headers-6.11.0-1018",
"binary_version": "6.11.0-1018.18~24.04.1"
},
{
"binary_name": "linux-azure-6.11-tools-6.11.0-1018",
"binary_version": "6.11.0-1018.18~24.04.1"
},
{
"binary_name": "linux-buildinfo-6.11.0-1018-azure",
"binary_version": "6.11.0-1018.18~24.04.1"
},
{
"binary_name": "linux-cloud-tools-6.11.0-1018-azure",
"binary_version": "6.11.0-1018.18~24.04.1"
},
{
"binary_name": "linux-headers-6.11.0-1018-azure",
"binary_version": "6.11.0-1018.18~24.04.1"
},
{
"binary_name": "linux-image-unsigned-6.11.0-1018-azure",
"binary_version": "6.11.0-1018.18~24.04.1"
},
{
"binary_name": "linux-modules-6.11.0-1018-azure",
"binary_version": "6.11.0-1018.18~24.04.1"
},
{
"binary_name": "linux-modules-extra-6.11.0-1018-azure",
"binary_version": "6.11.0-1018.18~24.04.1"
},
{
"binary_name": "linux-modules-iwlwifi-6.11.0-1018-azure",
"binary_version": "6.11.0-1018.18~24.04.1"
},
{
"binary_name": "linux-tools-6.11.0-1018-azure",
"binary_version": "6.11.0-1018.18~24.04.1"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:24.04:LTS",
"name": "linux-azure-6.11",
"purl": "pkg:deb/ubuntu/linux-azure-6.11@6.11.0-1018.18~24.04.1?arch=source\u0026distro=noble"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.11.0-1018.18~24.04.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.11.0-1008.8~24.04.1",
"6.11.0-1012.12~24.04.1",
"6.11.0-1013.13~24.04.1",
"6.11.0-1014.14~24.04.1",
"6.11.0-1015.15~24.04.1",
"6.11.0-1017.17~24.04.1"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "linux-azure-nvidia-cloud-tools-6.8.0-1025",
"binary_version": "6.8.0-1025.27"
},
{
"binary_name": "linux-azure-nvidia-cloud-tools-common",
"binary_version": "6.8.0-1025.27"
},
{
"binary_name": "linux-azure-nvidia-headers-6.8.0-1025",
"binary_version": "6.8.0-1025.27"
},
{
"binary_name": "linux-azure-nvidia-tools-6.8.0-1025",
"binary_version": "6.8.0-1025.27"
},
{
"binary_name": "linux-buildinfo-6.8.0-1025-azure-nvidia",
"binary_version": "6.8.0-1025.27"
},
{
"binary_name": "linux-cloud-tools-6.8.0-1025-azure-nvidia",
"binary_version": "6.8.0-1025.27"
},
{
"binary_name": "linux-headers-6.8.0-1025-azure-nvidia",
"binary_version": "6.8.0-1025.27"
},
{
"binary_name": "linux-image-unsigned-6.8.0-1025-azure-nvidia",
"binary_version": "6.8.0-1025.27"
},
{
"binary_name": "linux-modules-6.8.0-1025-azure-nvidia",
"binary_version": "6.8.0-1025.27"
},
{
"binary_name": "linux-modules-extra-6.8.0-1025-azure-nvidia",
"binary_version": "6.8.0-1025.27"
},
{
"binary_name": "linux-tools-6.8.0-1025-azure-nvidia",
"binary_version": "6.8.0-1025.27"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:24.04:LTS",
"name": "linux-azure-nvidia",
"purl": "pkg:deb/ubuntu/linux-azure-nvidia@6.8.0-1025.27?arch=source\u0026distro=noble"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.8.0-1025.27"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.8.0-1013.14",
"6.8.0-1014.15",
"6.8.0-1016.17",
"6.8.0-1018.19",
"6.8.0-1019.20",
"6.8.0-1022.23"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "linux-buildinfo-6.8.0-1040-gcp",
"binary_version": "6.8.0-1040.42"
},
{
"binary_name": "linux-buildinfo-6.8.0-1040-gcp-64k",
"binary_version": "6.8.0-1040.42"
},
{
"binary_name": "linux-gcp-headers-6.8.0-1040",
"binary_version": "6.8.0-1040.42"
},
{
"binary_name": "linux-gcp-tools-6.8.0-1040",
"binary_version": "6.8.0-1040.42"
},
{
"binary_name": "linux-headers-6.8.0-1040-gcp",
"binary_version": "6.8.0-1040.42"
},
{
"binary_name": "linux-headers-6.8.0-1040-gcp-64k",
"binary_version": "6.8.0-1040.42"
},
{
"binary_name": "linux-image-unsigned-6.8.0-1040-gcp",
"binary_version": "6.8.0-1040.42"
},
{
"binary_name": "linux-image-unsigned-6.8.0-1040-gcp-64k",
"binary_version": "6.8.0-1040.42"
},
{
"binary_name": "linux-modules-6.8.0-1040-gcp",
"binary_version": "6.8.0-1040.42"
},
{
"binary_name": "linux-modules-6.8.0-1040-gcp-64k",
"binary_version": "6.8.0-1040.42"
},
{
"binary_name": "linux-modules-extra-6.8.0-1040-gcp",
"binary_version": "6.8.0-1040.42"
},
{
"binary_name": "linux-modules-extra-6.8.0-1040-gcp-64k",
"binary_version": "6.8.0-1040.42"
},
{
"binary_name": "linux-tools-6.8.0-1040-gcp",
"binary_version": "6.8.0-1040.42"
},
{
"binary_name": "linux-tools-6.8.0-1040-gcp-64k",
"binary_version": "6.8.0-1040.42"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:24.04:LTS",
"name": "linux-gcp",
"purl": "pkg:deb/ubuntu/linux-gcp@6.8.0-1040.42?arch=source\u0026distro=noble"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.8.0-1040.42"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.5.0-1007.7",
"6.6.0-1001.1",
"6.8.0-1002.2",
"6.8.0-1005.5",
"6.8.0-1006.6",
"6.8.0-1007.7",
"6.8.0-1008.9",
"6.8.0-1009.10",
"6.8.0-1010.11",
"6.8.0-1011.12",
"6.8.0-1012.13",
"6.8.0-1013.14",
"6.8.0-1014.16",
"6.8.0-1015.17",
"6.8.0-1016.18",
"6.8.0-1017.19",
"6.8.0-1018.20",
"6.8.0-1019.21",
"6.8.0-1020.22",
"6.8.0-1021.23",
"6.8.0-1024.26",
"6.8.0-1025.27",
"6.8.0-1026.28",
"6.8.0-1027.29",
"6.8.0-1028.30",
"6.8.0-1029.31",
"6.8.0-1030.32",
"6.8.0-1031.33",
"6.8.0-1032.34",
"6.8.0-1033.35",
"6.8.0-1034.36",
"6.8.0-1036.38",
"6.8.0-1037.39",
"6.8.0-1039.41"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "linux-buildinfo-6.11.0-1016-gcp",
"binary_version": "6.11.0-1016.16~24.04.1"
},
{
"binary_name": "linux-buildinfo-6.11.0-1016-gcp-64k",
"binary_version": "6.11.0-1016.16~24.04.1"
},
{
"binary_name": "linux-gcp-6.11-headers-6.11.0-1016",
"binary_version": "6.11.0-1016.16~24.04.1"
},
{
"binary_name": "linux-gcp-6.11-lib-rust-6.11.0-1016-gcp",
"binary_version": "6.11.0-1016.16~24.04.1"
},
{
"binary_name": "linux-gcp-6.11-tools-6.11.0-1016",
"binary_version": "6.11.0-1016.16~24.04.1"
},
{
"binary_name": "linux-headers-6.11.0-1016-gcp",
"binary_version": "6.11.0-1016.16~24.04.1"
},
{
"binary_name": "linux-headers-6.11.0-1016-gcp-64k",
"binary_version": "6.11.0-1016.16~24.04.1"
},
{
"binary_name": "linux-image-unsigned-6.11.0-1016-gcp",
"binary_version": "6.11.0-1016.16~24.04.1"
},
{
"binary_name": "linux-image-unsigned-6.11.0-1016-gcp-64k",
"binary_version": "6.11.0-1016.16~24.04.1"
},
{
"binary_name": "linux-modules-6.11.0-1016-gcp",
"binary_version": "6.11.0-1016.16~24.04.1"
},
{
"binary_name": "linux-modules-6.11.0-1016-gcp-64k",
"binary_version": "6.11.0-1016.16~24.04.1"
},
{
"binary_name": "linux-modules-extra-6.11.0-1016-gcp",
"binary_version": "6.11.0-1016.16~24.04.1"
},
{
"binary_name": "linux-modules-extra-6.11.0-1016-gcp-64k",
"binary_version": "6.11.0-1016.16~24.04.1"
},
{
"binary_name": "linux-tools-6.11.0-1016-gcp",
"binary_version": "6.11.0-1016.16~24.04.1"
},
{
"binary_name": "linux-tools-6.11.0-1016-gcp-64k",
"binary_version": "6.11.0-1016.16~24.04.1"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:24.04:LTS",
"name": "linux-gcp-6.11",
"purl": "pkg:deb/ubuntu/linux-gcp-6.11@6.11.0-1016.16~24.04.1?arch=source\u0026distro=noble"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.11.0-1016.16~24.04.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.11.0-1006.6~24.04.2",
"6.11.0-1011.11~24.04.1",
"6.11.0-1013.13~24.04.1",
"6.11.0-1014.14~24.04.1",
"6.11.0-1015.15~24.04.1"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "linux-buildinfo-6.8.0-1036-gke",
"binary_version": "6.8.0-1036.40"
},
{
"binary_name": "linux-buildinfo-6.8.0-1036-gke-64k",
"binary_version": "6.8.0-1036.40"
},
{
"binary_name": "linux-gke-headers-6.8.0-1036",
"binary_version": "6.8.0-1036.40"
},
{
"binary_name": "linux-gke-tools-6.8.0-1036",
"binary_version": "6.8.0-1036.40"
},
{
"binary_name": "linux-headers-6.8.0-1036-gke",
"binary_version": "6.8.0-1036.40"
},
{
"binary_name": "linux-headers-6.8.0-1036-gke-64k",
"binary_version": "6.8.0-1036.40"
},
{
"binary_name": "linux-image-unsigned-6.8.0-1036-gke",
"binary_version": "6.8.0-1036.40"
},
{
"binary_name": "linux-image-unsigned-6.8.0-1036-gke-64k",
"binary_version": "6.8.0-1036.40"
},
{
"binary_name": "linux-modules-6.8.0-1036-gke",
"binary_version": "6.8.0-1036.40"
},
{
"binary_name": "linux-modules-6.8.0-1036-gke-64k",
"binary_version": "6.8.0-1036.40"
},
{
"binary_name": "linux-modules-extra-6.8.0-1036-gke",
"binary_version": "6.8.0-1036.40"
},
{
"binary_name": "linux-modules-extra-6.8.0-1036-gke-64k",
"binary_version": "6.8.0-1036.40"
},
{
"binary_name": "linux-modules-iwlwifi-6.8.0-1036-gke",
"binary_version": "6.8.0-1036.40"
},
{
"binary_name": "linux-tools-6.8.0-1036-gke",
"binary_version": "6.8.0-1036.40"
},
{
"binary_name": "linux-tools-6.8.0-1036-gke-64k",
"binary_version": "6.8.0-1036.40"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:24.04:LTS",
"name": "linux-gke",
"purl": "pkg:deb/ubuntu/linux-gke@6.8.0-1036.40?arch=source\u0026distro=noble"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.8.0-1036.40"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.8.0-1003.5",
"6.8.0-1004.7",
"6.8.0-1005.8",
"6.8.0-1006.9",
"6.8.0-1007.10",
"6.8.0-1008.11",
"6.8.0-1009.12",
"6.8.0-1010.13",
"6.8.0-1011.14",
"6.8.0-1012.15",
"6.8.0-1013.17",
"6.8.0-1014.18",
"6.8.0-1015.19",
"6.8.0-1016.20",
"6.8.0-1017.21",
"6.8.0-1019.23",
"6.8.0-1020.24",
"6.8.0-1021.25",
"6.8.0-1022.26",
"6.8.0-1023.27",
"6.8.0-1024.28",
"6.8.0-1025.29",
"6.8.0-1026.30",
"6.8.0-1027.31",
"6.8.0-1028.32",
"6.8.0-1029.33",
"6.8.0-1032.36",
"6.8.0-1033.37",
"6.8.0-1035.39"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "linux-buildinfo-6.8.0-1023-gkeop",
"binary_version": "6.8.0-1023.25"
},
{
"binary_name": "linux-cloud-tools-6.8.0-1023-gkeop",
"binary_version": "6.8.0-1023.25"
},
{
"binary_name": "linux-gkeop-cloud-tools-6.8.0-1023",
"binary_version": "6.8.0-1023.25"
},
{
"binary_name": "linux-gkeop-headers-6.8.0-1023",
"binary_version": "6.8.0-1023.25"
},
{
"binary_name": "linux-gkeop-tools-6.8.0-1023",
"binary_version": "6.8.0-1023.25"
},
{
"binary_name": "linux-headers-6.8.0-1023-gkeop",
"binary_version": "6.8.0-1023.25"
},
{
"binary_name": "linux-image-unsigned-6.8.0-1023-gkeop",
"binary_version": "6.8.0-1023.25"
},
{
"binary_name": "linux-modules-6.8.0-1023-gkeop",
"binary_version": "6.8.0-1023.25"
},
{
"binary_name": "linux-modules-extra-6.8.0-1023-gkeop",
"binary_version": "6.8.0-1023.25"
},
{
"binary_name": "linux-tools-6.8.0-1023-gkeop",
"binary_version": "6.8.0-1023.25"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:24.04:LTS",
"name": "linux-gkeop",
"purl": "pkg:deb/ubuntu/linux-gkeop@6.8.0-1023.25?arch=source\u0026distro=noble"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.8.0-1023.25"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.8.0-1001.3",
"6.8.0-1002.4",
"6.8.0-1003.5",
"6.8.0-1004.6",
"6.8.0-1006.8",
"6.8.0-1007.9",
"6.8.0-1008.10",
"6.8.0-1009.11",
"6.8.0-1010.12",
"6.8.0-1011.13",
"6.8.0-1012.14",
"6.8.0-1013.15",
"6.8.0-1014.16",
"6.8.0-1015.17",
"6.8.0-1016.18",
"6.8.0-1019.21",
"6.8.0-1020.22",
"6.8.0-1022.24"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "linux-buildinfo-6.11.0-28-generic",
"binary_version": "6.11.0-28.28~24.04.1"
},
{
"binary_name": "linux-buildinfo-6.11.0-28-generic-64k",
"binary_version": "6.11.0-28.28~24.04.1"
},
{
"binary_name": "linux-cloud-tools-6.11.0-28-generic",
"binary_version": "6.11.0-28.28~24.04.1"
},
{
"binary_name": "linux-headers-6.11.0-28-generic",
"binary_version": "6.11.0-28.28~24.04.1"
},
{
"binary_name": "linux-headers-6.11.0-28-generic-64k",
"binary_version": "6.11.0-28.28~24.04.1"
},
{
"binary_name": "linux-hwe-6.11-cloud-tools-6.11.0-28",
"binary_version": "6.11.0-28.28~24.04.1"
},
{
"binary_name": "linux-hwe-6.11-headers-6.11.0-28",
"binary_version": "6.11.0-28.28~24.04.1"
},
{
"binary_name": "linux-hwe-6.11-lib-rust-6.11.0-28-generic",
"binary_version": "6.11.0-28.28~24.04.1"
},
{
"binary_name": "linux-hwe-6.11-tools-6.11.0-28",
"binary_version": "6.11.0-28.28~24.04.1"
},
{
"binary_name": "linux-image-6.11.0-28-generic",
"binary_version": "6.11.0-28.28~24.04.1"
},
{
"binary_name": "linux-image-unsigned-6.11.0-28-generic",
"binary_version": "6.11.0-28.28~24.04.1"
},
{
"binary_name": "linux-image-unsigned-6.11.0-28-generic-64k",
"binary_version": "6.11.0-28.28~24.04.1"
},
{
"binary_name": "linux-modules-6.11.0-28-generic",
"binary_version": "6.11.0-28.28~24.04.1"
},
{
"binary_name": "linux-modules-6.11.0-28-generic-64k",
"binary_version": "6.11.0-28.28~24.04.1"
},
{
"binary_name": "linux-modules-extra-6.11.0-28-generic",
"binary_version": "6.11.0-28.28~24.04.1"
},
{
"binary_name": "linux-modules-ipu6-6.11.0-28-generic",
"binary_version": "6.11.0-28.28~24.04.1"
},
{
"binary_name": "linux-modules-ipu7-6.11.0-28-generic",
"binary_version": "6.11.0-28.28~24.04.1"
},
{
"binary_name": "linux-modules-iwlwifi-6.11.0-28-generic",
"binary_version": "6.11.0-28.28~24.04.1"
},
{
"binary_name": "linux-modules-usbio-6.11.0-28-generic",
"binary_version": "6.11.0-28.28~24.04.1"
},
{
"binary_name": "linux-modules-vision-6.11.0-28-generic",
"binary_version": "6.11.0-28.28~24.04.1"
},
{
"binary_name": "linux-tools-6.11.0-28-generic",
"binary_version": "6.11.0-28.28~24.04.1"
},
{
"binary_name": "linux-tools-6.11.0-28-generic-64k",
"binary_version": "6.11.0-28.28~24.04.1"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:24.04:LTS",
"name": "linux-hwe-6.11",
"purl": "pkg:deb/ubuntu/linux-hwe-6.11@6.11.0-28.28~24.04.1?arch=source\u0026distro=noble"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.11.0-28.28~24.04.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.11.0-17.17~24.04.2",
"6.11.0-19.19~24.04.1",
"6.11.0-21.21~24.04.1",
"6.11.0-24.24~24.04.1",
"6.11.0-25.25~24.04.1",
"6.11.0-26.26~24.04.1"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "linux-buildinfo-6.8.0-1037-ibm",
"binary_version": "6.8.0-1037.37"
},
{
"binary_name": "linux-headers-6.8.0-1037-ibm",
"binary_version": "6.8.0-1037.37"
},
{
"binary_name": "linux-ibm-headers-6.8.0-1037",
"binary_version": "6.8.0-1037.37"
},
{
"binary_name": "linux-ibm-tools-6.8.0-1037",
"binary_version": "6.8.0-1037.37"
},
{
"binary_name": "linux-image-unsigned-6.8.0-1037-ibm",
"binary_version": "6.8.0-1037.37"
},
{
"binary_name": "linux-modules-6.8.0-1037-ibm",
"binary_version": "6.8.0-1037.37"
},
{
"binary_name": "linux-modules-extra-6.8.0-1037-ibm",
"binary_version": "6.8.0-1037.37"
},
{
"binary_name": "linux-modules-iwlwifi-6.8.0-1037-ibm",
"binary_version": "6.8.0-1037.37"
},
{
"binary_name": "linux-tools-6.8.0-1037-ibm",
"binary_version": "6.8.0-1037.37"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:24.04:LTS",
"name": "linux-ibm",
"purl": "pkg:deb/ubuntu/linux-ibm@6.8.0-1037.37?arch=source\u0026distro=noble"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.8.0-1037.37"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.5.0-1009.9",
"6.8.0-1001.1",
"6.8.0-1003.3",
"6.8.0-1004.4",
"6.8.0-1005.5",
"6.8.0-1006.6",
"6.8.0-1007.7",
"6.8.0-1008.8",
"6.8.0-1009.9",
"6.8.0-1010.10",
"6.8.0-1011.11",
"6.8.0-1012.12",
"6.8.0-1013.13",
"6.8.0-1014.14",
"6.8.0-1015.15",
"6.8.0-1016.16",
"6.8.0-1017.17",
"6.8.0-1018.18",
"6.8.0-1019.19",
"6.8.0-1022.22",
"6.8.0-1023.23",
"6.8.0-1024.24",
"6.8.0-1025.25",
"6.8.0-1026.26",
"6.8.0-1027.27",
"6.8.0-1028.28",
"6.8.0-1029.29",
"6.8.0-1030.30",
"6.8.0-1033.33",
"6.8.0-1036.36"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-buildinfo-6.8.0-1007-intel",
"binary_version": "6.8.0-1007.14"
},
{
"binary_name": "linux-cloud-tools-6.8.0-1007-intel",
"binary_version": "6.8.0-1007.14"
},
{
"binary_name": "linux-headers-6.8.0-1007-intel",
"binary_version": "6.8.0-1007.14"
},
{
"binary_name": "linux-image-unsigned-6.8.0-1007-intel",
"binary_version": "6.8.0-1007.14"
},
{
"binary_name": "linux-intel-cloud-tools-6.8.0-1007",
"binary_version": "6.8.0-1007.14"
},
{
"binary_name": "linux-intel-headers-6.8.0-1007",
"binary_version": "6.8.0-1007.14"
},
{
"binary_name": "linux-intel-tools-6.8.0-1007",
"binary_version": "6.8.0-1007.14"
},
{
"binary_name": "linux-modules-6.8.0-1007-intel",
"binary_version": "6.8.0-1007.14"
},
{
"binary_name": "linux-modules-extra-6.8.0-1007-intel",
"binary_version": "6.8.0-1007.14"
},
{
"binary_name": "linux-modules-iwlwifi-6.8.0-1007-intel",
"binary_version": "6.8.0-1007.14"
},
{
"binary_name": "linux-tools-6.8.0-1007-intel",
"binary_version": "6.8.0-1007.14"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:24.04:LTS",
"name": "linux-intel",
"purl": "pkg:deb/ubuntu/linux-intel@6.8.0-1007.14?arch=source\u0026distro=noble"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.8.0-1005.12",
"6.8.0-1006.13",
"6.8.0-1007.14"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "linux-buildinfo-6.8.0-84-lowlatency",
"binary_version": "6.8.0-84.84.1"
},
{
"binary_name": "linux-buildinfo-6.8.0-84-lowlatency-64k",
"binary_version": "6.8.0-84.84.1"
},
{
"binary_name": "linux-cloud-tools-6.8.0-84-lowlatency",
"binary_version": "6.8.0-84.84.1"
},
{
"binary_name": "linux-headers-6.8.0-84-lowlatency",
"binary_version": "6.8.0-84.84.1"
},
{
"binary_name": "linux-headers-6.8.0-84-lowlatency-64k",
"binary_version": "6.8.0-84.84.1"
},
{
"binary_name": "linux-image-unsigned-6.8.0-84-lowlatency",
"binary_version": "6.8.0-84.84.1"
},
{
"binary_name": "linux-image-unsigned-6.8.0-84-lowlatency-64k",
"binary_version": "6.8.0-84.84.1"
},
{
"binary_name": "linux-lowlatency-cloud-tools-6.8.0-84",
"binary_version": "6.8.0-84.84.1"
},
{
"binary_name": "linux-lowlatency-headers-6.8.0-84",
"binary_version": "6.8.0-84.84.1"
},
{
"binary_name": "linux-lowlatency-lib-rust-6.8.0-84-lowlatency",
"binary_version": "6.8.0-84.84.1"
},
{
"binary_name": "linux-lowlatency-tools-6.8.0-84",
"binary_version": "6.8.0-84.84.1"
},
{
"binary_name": "linux-modules-6.8.0-84-lowlatency",
"binary_version": "6.8.0-84.84.1"
},
{
"binary_name": "linux-modules-6.8.0-84-lowlatency-64k",
"binary_version": "6.8.0-84.84.1"
},
{
"binary_name": "linux-modules-iwlwifi-6.8.0-84-lowlatency",
"binary_version": "6.8.0-84.84.1"
},
{
"binary_name": "linux-tools-6.8.0-84-lowlatency",
"binary_version": "6.8.0-84.84.1"
},
{
"binary_name": "linux-tools-6.8.0-84-lowlatency-64k",
"binary_version": "6.8.0-84.84.1"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:24.04:LTS",
"name": "linux-lowlatency",
"purl": "pkg:deb/ubuntu/linux-lowlatency@6.8.0-84.84.1?arch=source\u0026distro=noble"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.8.0-84.84.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.5.0-9.9.1",
"6.6.0-14.14.1",
"6.8.0-7.7.1",
"6.8.0-25.25.3",
"6.8.0-28.28.1",
"6.8.0-31.31.1",
"6.8.0-35.35.1",
"6.8.0-36.36.1",
"6.8.0-38.38.1",
"6.8.0-39.39.1",
"6.8.0-40.40.1",
"6.8.0-41.41.1",
"6.8.0-44.44.1",
"6.8.0-45.45.1",
"6.8.0-47.47.1",
"6.8.0-48.48.3",
"6.8.0-49.49.1",
"6.8.0-50.51.1",
"6.8.0-51.52.1",
"6.8.0-52.53.1",
"6.8.0-53.55.2",
"6.8.0-54.56.1",
"6.8.0-55.57.1",
"6.8.0-56.58.1",
"6.8.0-57.59.1",
"6.8.0-58.60.1",
"6.8.0-59.61.1",
"6.8.0-60.63.1",
"6.8.0-62.65.1",
"6.8.0-63.66.1",
"6.8.0-64.67.1",
"6.8.0-65.68.1",
"6.8.0-78.78.1",
"6.8.0-79.79.1",
"6.8.0-83.83.1"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "linux-buildinfo-6.11.0-1015-lowlatency",
"binary_version": "6.11.0-1015.16~24.04.2"
},
{
"binary_name": "linux-buildinfo-6.11.0-1015-lowlatency-64k",
"binary_version": "6.11.0-1015.16~24.04.2"
},
{
"binary_name": "linux-cloud-tools-6.11.0-1015-lowlatency",
"binary_version": "6.11.0-1015.16~24.04.2"
},
{
"binary_name": "linux-headers-6.11.0-1015-lowlatency",
"binary_version": "6.11.0-1015.16~24.04.2"
},
{
"binary_name": "linux-headers-6.11.0-1015-lowlatency-64k",
"binary_version": "6.11.0-1015.16~24.04.2"
},
{
"binary_name": "linux-image-unsigned-6.11.0-1015-lowlatency",
"binary_version": "6.11.0-1015.16~24.04.2"
},
{
"binary_name": "linux-image-unsigned-6.11.0-1015-lowlatency-64k",
"binary_version": "6.11.0-1015.16~24.04.2"
},
{
"binary_name": "linux-lowlatency-hwe-6.11-cloud-tools-6.11.0-1015",
"binary_version": "6.11.0-1015.16~24.04.2"
},
{
"binary_name": "linux-lowlatency-hwe-6.11-headers-6.11.0-1015",
"binary_version": "6.11.0-1015.16~24.04.2"
},
{
"binary_name": "linux-lowlatency-hwe-6.11-lib-rust-6.11.0-1015-lowlatency",
"binary_version": "6.11.0-1015.16~24.04.2"
},
{
"binary_name": "linux-lowlatency-hwe-6.11-tools-6.11.0-1015",
"binary_version": "6.11.0-1015.16~24.04.2"
},
{
"binary_name": "linux-modules-6.11.0-1015-lowlatency",
"binary_version": "6.11.0-1015.16~24.04.2"
},
{
"binary_name": "linux-modules-6.11.0-1015-lowlatency-64k",
"binary_version": "6.11.0-1015.16~24.04.2"
},
{
"binary_name": "linux-modules-iwlwifi-6.11.0-1015-lowlatency",
"binary_version": "6.11.0-1015.16~24.04.2"
},
{
"binary_name": "linux-tools-6.11.0-1015-lowlatency",
"binary_version": "6.11.0-1015.16~24.04.2"
},
{
"binary_name": "linux-tools-6.11.0-1015-lowlatency-64k",
"binary_version": "6.11.0-1015.16~24.04.2"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:24.04:LTS",
"name": "linux-lowlatency-hwe-6.11",
"purl": "pkg:deb/ubuntu/linux-lowlatency-hwe-6.11@6.11.0-1015.16~24.04.2?arch=source\u0026distro=noble"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.11.0-1015.16~24.04.2"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.11.0-1009.10~24.04.1",
"6.11.0-1011.12~24.04.1",
"6.11.0-1012.13~24.04.1",
"6.11.0-1013.14~24.04.1",
"6.11.0-1014.15~24.04.1"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "linux-buildinfo-6.8.0-1039-nvidia",
"binary_version": "6.8.0-1039.42"
},
{
"binary_name": "linux-buildinfo-6.8.0-1039-nvidia-64k",
"binary_version": "6.8.0-1039.42"
},
{
"binary_name": "linux-headers-6.8.0-1039-nvidia",
"binary_version": "6.8.0-1039.42"
},
{
"binary_name": "linux-headers-6.8.0-1039-nvidia-64k",
"binary_version": "6.8.0-1039.42"
},
{
"binary_name": "linux-image-unsigned-6.8.0-1039-nvidia",
"binary_version": "6.8.0-1039.42"
},
{
"binary_name": "linux-image-unsigned-6.8.0-1039-nvidia-64k",
"binary_version": "6.8.0-1039.42"
},
{
"binary_name": "linux-modules-6.8.0-1039-nvidia",
"binary_version": "6.8.0-1039.42"
},
{
"binary_name": "linux-modules-6.8.0-1039-nvidia-64k",
"binary_version": "6.8.0-1039.42"
},
{
"binary_name": "linux-modules-extra-6.8.0-1039-nvidia",
"binary_version": "6.8.0-1039.42"
},
{
"binary_name": "linux-modules-nvidia-fs-6.8.0-1039-nvidia",
"binary_version": "6.8.0-1039.42"
},
{
"binary_name": "linux-modules-nvidia-fs-6.8.0-1039-nvidia-64k",
"binary_version": "6.8.0-1039.42"
},
{
"binary_name": "linux-nvidia-headers-6.8.0-1039",
"binary_version": "6.8.0-1039.42"
},
{
"binary_name": "linux-nvidia-tools-6.8.0-1039",
"binary_version": "6.8.0-1039.42"
},
{
"binary_name": "linux-tools-6.8.0-1039-nvidia",
"binary_version": "6.8.0-1039.42"
},
{
"binary_name": "linux-tools-6.8.0-1039-nvidia-64k",
"binary_version": "6.8.0-1039.42"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:24.04:LTS",
"name": "linux-nvidia",
"purl": "pkg:deb/ubuntu/linux-nvidia@6.8.0-1039.42?arch=source\u0026distro=noble"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.8.0-1039.42"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.8.0-1007.7",
"6.8.0-1008.8",
"6.8.0-1009.9",
"6.8.0-1010.10",
"6.8.0-1011.11",
"6.8.0-1012.12",
"6.8.0-1013.14",
"6.8.0-1014.15",
"6.8.0-1015.16",
"6.8.0-1017.19",
"6.8.0-1018.20",
"6.8.0-1019.21",
"6.8.0-1020.22",
"6.8.0-1021.23",
"6.8.0-1022.25",
"6.8.0-1023.26",
"6.8.0-1024.27",
"6.8.0-1025.28",
"6.8.0-1026.29",
"6.8.0-1027.30",
"6.8.0-1028.31",
"6.8.0-1029.32",
"6.8.0-1030.33",
"6.8.0-1031.34",
"6.8.0-1032.35",
"6.8.0-1035.38",
"6.8.0-1036.39",
"6.8.0-1038.41"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "linux-buildinfo-6.11.0-1012-nvidia",
"binary_version": "6.11.0-1012.12"
},
{
"binary_name": "linux-buildinfo-6.11.0-1012-nvidia-64k",
"binary_version": "6.11.0-1012.12"
},
{
"binary_name": "linux-headers-6.11.0-1012-nvidia",
"binary_version": "6.11.0-1012.12"
},
{
"binary_name": "linux-headers-6.11.0-1012-nvidia-64k",
"binary_version": "6.11.0-1012.12"
},
{
"binary_name": "linux-image-unsigned-6.11.0-1012-nvidia",
"binary_version": "6.11.0-1012.12"
},
{
"binary_name": "linux-image-unsigned-6.11.0-1012-nvidia-64k",
"binary_version": "6.11.0-1012.12"
},
{
"binary_name": "linux-modules-6.11.0-1012-nvidia",
"binary_version": "6.11.0-1012.12"
},
{
"binary_name": "linux-modules-6.11.0-1012-nvidia-64k",
"binary_version": "6.11.0-1012.12"
},
{
"binary_name": "linux-modules-extra-6.11.0-1012-nvidia",
"binary_version": "6.11.0-1012.12"
},
{
"binary_name": "linux-modules-extra-6.11.0-1012-nvidia-64k",
"binary_version": "6.11.0-1012.12"
},
{
"binary_name": "linux-modules-nvidia-fs-6.11.0-1012-nvidia",
"binary_version": "6.11.0-1012.12"
},
{
"binary_name": "linux-modules-nvidia-fs-6.11.0-1012-nvidia-64k",
"binary_version": "6.11.0-1012.12"
},
{
"binary_name": "linux-nvidia-6.11-headers-6.11.0-1012",
"binary_version": "6.11.0-1012.12"
},
{
"binary_name": "linux-nvidia-6.11-lib-rust-6.11.0-1012-nvidia",
"binary_version": "6.11.0-1012.12"
},
{
"binary_name": "linux-nvidia-6.11-tools-6.11.0-1012",
"binary_version": "6.11.0-1012.12"
},
{
"binary_name": "linux-tools-6.11.0-1012-nvidia",
"binary_version": "6.11.0-1012.12"
},
{
"binary_name": "linux-tools-6.11.0-1012-nvidia-64k",
"binary_version": "6.11.0-1012.12"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:24.04:LTS",
"name": "linux-nvidia-6.11",
"purl": "pkg:deb/ubuntu/linux-nvidia-6.11@6.11.0-1012.12?arch=source\u0026distro=noble"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.11.0-1012.12"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.11.0-1002.2",
"6.11.0-1003.3",
"6.11.0-1007.7",
"6.11.0-1010.10",
"6.11.0-1011.11"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "linux-buildinfo-6.8.0-1039-nvidia-lowlatency",
"binary_version": "6.8.0-1039.42.1"
},
{
"binary_name": "linux-buildinfo-6.8.0-1039-nvidia-lowlatency-64k",
"binary_version": "6.8.0-1039.42.1"
},
{
"binary_name": "linux-headers-6.8.0-1039-nvidia-lowlatency",
"binary_version": "6.8.0-1039.42.1"
},
{
"binary_name": "linux-headers-6.8.0-1039-nvidia-lowlatency-64k",
"binary_version": "6.8.0-1039.42.1"
},
{
"binary_name": "linux-image-unsigned-6.8.0-1039-nvidia-lowlatency",
"binary_version": "6.8.0-1039.42.1"
},
{
"binary_name": "linux-image-unsigned-6.8.0-1039-nvidia-lowlatency-64k",
"binary_version": "6.8.0-1039.42.1"
},
{
"binary_name": "linux-modules-6.8.0-1039-nvidia-lowlatency",
"binary_version": "6.8.0-1039.42.1"
},
{
"binary_name": "linux-modules-6.8.0-1039-nvidia-lowlatency-64k",
"binary_version": "6.8.0-1039.42.1"
},
{
"binary_name": "linux-modules-extra-6.8.0-1039-nvidia-lowlatency",
"binary_version": "6.8.0-1039.42.1"
},
{
"binary_name": "linux-modules-nvidia-fs-6.8.0-1039-nvidia-lowlatency",
"binary_version": "6.8.0-1039.42.1"
},
{
"binary_name": "linux-modules-nvidia-fs-6.8.0-1039-nvidia-lowlatency-64k",
"binary_version": "6.8.0-1039.42.1"
},
{
"binary_name": "linux-nvidia-lowlatency-headers-6.8.0-1039",
"binary_version": "6.8.0-1039.42.1"
},
{
"binary_name": "linux-nvidia-lowlatency-tools-6.8.0-1039",
"binary_version": "6.8.0-1039.42.1"
},
{
"binary_name": "linux-tools-6.8.0-1039-nvidia-lowlatency",
"binary_version": "6.8.0-1039.42.1"
},
{
"binary_name": "linux-tools-6.8.0-1039-nvidia-lowlatency-64k",
"binary_version": "6.8.0-1039.42.1"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:24.04:LTS",
"name": "linux-nvidia-lowlatency",
"purl": "pkg:deb/ubuntu/linux-nvidia-lowlatency@6.8.0-1039.42.1?arch=source\u0026distro=noble"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.8.0-1039.42.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.8.0-1009.9.1",
"6.8.0-1011.11.1",
"6.8.0-1012.12.1",
"6.8.0-1013.14.1",
"6.8.0-1014.15.1",
"6.8.0-1015.16.1",
"6.8.0-1017.19.1",
"6.8.0-1018.20.1",
"6.8.0-1019.21.1",
"6.8.0-1020.22.1",
"6.8.0-1021.23.1",
"6.8.0-1022.25.2",
"6.8.0-1023.26.1",
"6.8.0-1024.27.1",
"6.8.0-1025.28.1",
"6.8.0-1026.29.1",
"6.8.0-1027.30.1",
"6.8.0-1028.31.1",
"6.8.0-1029.32.1",
"6.8.0-1030.33.1",
"6.8.0-1031.34.1",
"6.8.0-1032.35.1",
"6.8.0-1035.38.1",
"6.8.0-1036.39.1",
"6.8.0-1038.41.1"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "linux-buildinfo-6.8.0-1010-nvidia-tegra",
"binary_version": "6.8.0-1010.10"
},
{
"binary_name": "linux-buildinfo-6.8.0-1010-nvidia-tegra-rt",
"binary_version": "6.8.0-1010.10"
},
{
"binary_name": "linux-headers-6.8.0-1010-nvidia-tegra",
"binary_version": "6.8.0-1010.10"
},
{
"binary_name": "linux-headers-6.8.0-1010-nvidia-tegra-rt",
"binary_version": "6.8.0-1010.10"
},
{
"binary_name": "linux-image-unsigned-6.8.0-1010-nvidia-tegra",
"binary_version": "6.8.0-1010.10"
},
{
"binary_name": "linux-image-unsigned-6.8.0-1010-nvidia-tegra-rt",
"binary_version": "6.8.0-1010.10"
},
{
"binary_name": "linux-modules-6.8.0-1010-nvidia-tegra",
"binary_version": "6.8.0-1010.10"
},
{
"binary_name": "linux-modules-6.8.0-1010-nvidia-tegra-rt",
"binary_version": "6.8.0-1010.10"
},
{
"binary_name": "linux-modules-extra-6.8.0-1010-nvidia-tegra",
"binary_version": "6.8.0-1010.10"
},
{
"binary_name": "linux-modules-extra-6.8.0-1010-nvidia-tegra-rt",
"binary_version": "6.8.0-1010.10"
},
{
"binary_name": "linux-nvidia-tegra-headers-6.8.0-1010",
"binary_version": "6.8.0-1010.10"
},
{
"binary_name": "linux-nvidia-tegra-tools-6.8.0-1010",
"binary_version": "6.8.0-1010.10"
},
{
"binary_name": "linux-tools-6.8.0-1010-nvidia-tegra",
"binary_version": "6.8.0-1010.10"
},
{
"binary_name": "linux-tools-6.8.0-1010-nvidia-tegra-rt",
"binary_version": "6.8.0-1010.10"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:24.04:LTS",
"name": "linux-nvidia-tegra",
"purl": "pkg:deb/ubuntu/linux-nvidia-tegra@6.8.0-1010.10?arch=source\u0026distro=noble"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.8.0-1010.10"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.8.0-1003.3",
"6.8.0-1004.4",
"6.8.0-1008.8",
"6.8.0-1009.9"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "linux-buildinfo-6.11.0-1024-oem",
"binary_version": "6.11.0-1024.24"
},
{
"binary_name": "linux-headers-6.11.0-1024-oem",
"binary_version": "6.11.0-1024.24"
},
{
"binary_name": "linux-image-unsigned-6.11.0-1024-oem",
"binary_version": "6.11.0-1024.24"
},
{
"binary_name": "linux-modules-6.11.0-1024-oem",
"binary_version": "6.11.0-1024.24"
},
{
"binary_name": "linux-modules-ipu6-6.11.0-1024-oem",
"binary_version": "6.11.0-1024.24"
},
{
"binary_name": "linux-modules-ipu7-6.11.0-1024-oem",
"binary_version": "6.11.0-1024.24"
},
{
"binary_name": "linux-modules-iwlwifi-6.11.0-1024-oem",
"binary_version": "6.11.0-1024.24"
},
{
"binary_name": "linux-modules-usbio-6.11.0-1024-oem",
"binary_version": "6.11.0-1024.24"
},
{
"binary_name": "linux-modules-vision-6.11.0-1024-oem",
"binary_version": "6.11.0-1024.24"
},
{
"binary_name": "linux-oem-6.11-headers-6.11.0-1024",
"binary_version": "6.11.0-1024.24"
},
{
"binary_name": "linux-oem-6.11-tools-6.11.0-1024",
"binary_version": "6.11.0-1024.24"
},
{
"binary_name": "linux-tools-6.11.0-1024-oem",
"binary_version": "6.11.0-1024.24"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:24.04:LTS",
"name": "linux-oem-6.11",
"purl": "pkg:deb/ubuntu/linux-oem-6.11@6.11.0-1024.24?arch=source\u0026distro=noble"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.11.0-1024.24"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.11.0-1007.7",
"6.11.0-1008.8",
"6.11.0-1009.9",
"6.11.0-1010.10",
"6.11.0-1011.11",
"6.11.0-1012.12",
"6.11.0-1013.13",
"6.11.0-1015.15",
"6.11.0-1016.16",
"6.11.0-1017.17",
"6.11.0-1018.18",
"6.11.0-1020.20",
"6.11.0-1021.21",
"6.11.0-1022.22",
"6.11.0-1023.23"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-buildinfo-6.8.0-1032-oem",
"binary_version": "6.8.0-1032.32"
},
{
"binary_name": "linux-headers-6.8.0-1032-oem",
"binary_version": "6.8.0-1032.32"
},
{
"binary_name": "linux-image-unsigned-6.8.0-1032-oem",
"binary_version": "6.8.0-1032.32"
},
{
"binary_name": "linux-modules-6.8.0-1032-oem",
"binary_version": "6.8.0-1032.32"
},
{
"binary_name": "linux-modules-ipu6-6.8.0-1032-oem",
"binary_version": "6.8.0-1032.32"
},
{
"binary_name": "linux-modules-iwlwifi-6.8.0-1032-oem",
"binary_version": "6.8.0-1032.32"
},
{
"binary_name": "linux-modules-usbio-6.8.0-1032-oem",
"binary_version": "6.8.0-1032.32"
},
{
"binary_name": "linux-oem-6.8-headers-6.8.0-1032",
"binary_version": "6.8.0-1032.32"
},
{
"binary_name": "linux-oem-6.8-tools-6.8.0-1032",
"binary_version": "6.8.0-1032.32"
},
{
"binary_name": "linux-tools-6.8.0-1032-oem",
"binary_version": "6.8.0-1032.32"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:24.04:LTS",
"name": "linux-oem-6.8",
"purl": "pkg:deb/ubuntu/linux-oem-6.8@6.8.0-1032.32?arch=source\u0026distro=noble"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.8.0-1003.3",
"6.8.0-1004.4",
"6.8.0-1005.5",
"6.8.0-1006.6",
"6.8.0-1007.7",
"6.8.0-1008.8",
"6.8.0-1009.9",
"6.8.0-1010.10",
"6.8.0-1011.11",
"6.8.0-1012.12",
"6.8.0-1013.13",
"6.8.0-1014.14",
"6.8.0-1016.16",
"6.8.0-1017.17",
"6.8.0-1018.18",
"6.8.0-1019.19",
"6.8.0-1020.20",
"6.8.0-1024.24",
"6.8.0-1025.25",
"6.8.0-1026.26",
"6.8.0-1027.27",
"6.8.0-1028.28",
"6.8.0-1029.29",
"6.8.0-1030.30",
"6.8.0-1031.31",
"6.8.0-1032.32"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "linux-buildinfo-6.8.0-1037-oracle",
"binary_version": "6.8.0-1037.38"
},
{
"binary_name": "linux-buildinfo-6.8.0-1037-oracle-64k",
"binary_version": "6.8.0-1037.38"
},
{
"binary_name": "linux-headers-6.8.0-1037-oracle",
"binary_version": "6.8.0-1037.38"
},
{
"binary_name": "linux-headers-6.8.0-1037-oracle-64k",
"binary_version": "6.8.0-1037.38"
},
{
"binary_name": "linux-image-unsigned-6.8.0-1037-oracle",
"binary_version": "6.8.0-1037.38"
},
{
"binary_name": "linux-image-unsigned-6.8.0-1037-oracle-64k",
"binary_version": "6.8.0-1037.38"
},
{
"binary_name": "linux-modules-6.8.0-1037-oracle",
"binary_version": "6.8.0-1037.38"
},
{
"binary_name": "linux-modules-6.8.0-1037-oracle-64k",
"binary_version": "6.8.0-1037.38"
},
{
"binary_name": "linux-modules-extra-6.8.0-1037-oracle",
"binary_version": "6.8.0-1037.38"
},
{
"binary_name": "linux-modules-extra-6.8.0-1037-oracle-64k",
"binary_version": "6.8.0-1037.38"
},
{
"binary_name": "linux-oracle-headers-6.8.0-1037",
"binary_version": "6.8.0-1037.38"
},
{
"binary_name": "linux-oracle-tools-6.8.0-1037",
"binary_version": "6.8.0-1037.38"
},
{
"binary_name": "linux-tools-6.8.0-1037-oracle",
"binary_version": "6.8.0-1037.38"
},
{
"binary_name": "linux-tools-6.8.0-1037-oracle-64k",
"binary_version": "6.8.0-1037.38"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:24.04:LTS",
"name": "linux-oracle",
"purl": "pkg:deb/ubuntu/linux-oracle@6.8.0-1037.38?arch=source\u0026distro=noble"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.8.0-1037.38"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.5.0-1010.10",
"6.6.0-1001.1",
"6.8.0-1001.1",
"6.8.0-1004.4",
"6.8.0-1005.5",
"6.8.0-1006.6",
"6.8.0-1008.8",
"6.8.0-1010.10",
"6.8.0-1011.11",
"6.8.0-1012.12",
"6.8.0-1013.13",
"6.8.0-1014.14",
"6.8.0-1015.16",
"6.8.0-1016.17",
"6.8.0-1017.18",
"6.8.0-1018.19",
"6.8.0-1019.20",
"6.8.0-1020.21",
"6.8.0-1021.22",
"6.8.0-1022.23",
"6.8.0-1023.24",
"6.8.0-1024.25",
"6.8.0-1025.26",
"6.8.0-1026.27",
"6.8.0-1027.28",
"6.8.0-1028.29",
"6.8.0-1029.30",
"6.8.0-1030.31",
"6.8.0-1032.33",
"6.8.0-1033.34",
"6.8.0-1035.36"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "linux-buildinfo-6.8.0-1039-raspi",
"binary_version": "6.8.0-1039.43"
},
{
"binary_name": "linux-headers-6.8.0-1039-raspi",
"binary_version": "6.8.0-1039.43"
},
{
"binary_name": "linux-image-6.8.0-1039-raspi",
"binary_version": "6.8.0-1039.43"
},
{
"binary_name": "linux-modules-6.8.0-1039-raspi",
"binary_version": "6.8.0-1039.43"
},
{
"binary_name": "linux-raspi-headers-6.8.0-1039",
"binary_version": "6.8.0-1039.43"
},
{
"binary_name": "linux-raspi-tools-6.8.0-1039",
"binary_version": "6.8.0-1039.43"
},
{
"binary_name": "linux-tools-6.8.0-1039-raspi",
"binary_version": "6.8.0-1039.43"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:24.04:LTS",
"name": "linux-raspi",
"purl": "pkg:deb/ubuntu/linux-raspi@6.8.0-1039.43?arch=source\u0026distro=noble"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.8.0-1039.43"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.5.0-1005.7",
"6.7.0-1001.1",
"6.8.0-1001.1",
"6.8.0-1002.2",
"6.8.0-1003.3",
"6.8.0-1004.4",
"6.8.0-1005.5",
"6.8.0-1006.6",
"6.8.0-1007.7",
"6.8.0-1008.8",
"6.8.0-1009.10",
"6.8.0-1010.11",
"6.8.0-1011.12",
"6.8.0-1012.13",
"6.8.0-1013.14",
"6.8.0-1014.16",
"6.8.0-1015.17",
"6.8.0-1016.18",
"6.8.0-1017.19",
"6.8.0-1018.20",
"6.8.0-1019.23",
"6.8.0-1020.24",
"6.8.0-1024.28",
"6.8.0-1028.32",
"6.8.0-1029.33",
"6.8.0-1030.34",
"6.8.0-1031.35",
"6.8.0-1032.36",
"6.8.0-1035.39",
"6.8.0-1036.40",
"6.8.0-1038.42"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-buildinfo-6.8.0-2019-raspi-realtime",
"binary_version": "6.8.0-2019.20"
},
{
"binary_name": "linux-headers-6.8.0-2019-raspi-realtime",
"binary_version": "6.8.0-2019.20"
},
{
"binary_name": "linux-image-6.8.0-2019-raspi-realtime",
"binary_version": "6.8.0-2019.20"
},
{
"binary_name": "linux-modules-6.8.0-2019-raspi-realtime",
"binary_version": "6.8.0-2019.20"
},
{
"binary_name": "linux-raspi-realtime-headers-6.8.0-2019",
"binary_version": "6.8.0-2019.20"
},
{
"binary_name": "linux-raspi-realtime-tools-6.8.0-2019",
"binary_version": "6.8.0-2019.20"
},
{
"binary_name": "linux-tools-6.8.0-2019-raspi-realtime",
"binary_version": "6.8.0-2019.20"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:24.04:LTS",
"name": "linux-raspi-realtime",
"purl": "pkg:deb/ubuntu/linux-raspi-realtime@6.8.0-2019.20?arch=source\u0026distro=noble"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.8.0-2019.20"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-buildinfo-6.8.1-1015-realtime",
"binary_version": "6.8.1-1015.16"
},
{
"binary_name": "linux-cloud-tools-6.8.1-1015-realtime",
"binary_version": "6.8.1-1015.16"
},
{
"binary_name": "linux-headers-6.8.1-1015-realtime",
"binary_version": "6.8.1-1015.16"
},
{
"binary_name": "linux-image-unsigned-6.8.1-1015-realtime",
"binary_version": "6.8.1-1015.16"
},
{
"binary_name": "linux-modules-6.8.1-1015-realtime",
"binary_version": "6.8.1-1015.16"
},
{
"binary_name": "linux-modules-extra-6.8.1-1015-realtime",
"binary_version": "6.8.1-1015.16"
},
{
"binary_name": "linux-modules-iwlwifi-6.8.1-1015-realtime",
"binary_version": "6.8.1-1015.16"
},
{
"binary_name": "linux-realtime-cloud-tools-6.8.1-1015",
"binary_version": "6.8.1-1015.16"
},
{
"binary_name": "linux-realtime-headers-6.8.1-1015",
"binary_version": "6.8.1-1015.16"
},
{
"binary_name": "linux-realtime-tools-6.8.1-1015",
"binary_version": "6.8.1-1015.16"
},
{
"binary_name": "linux-tools-6.8.1-1015-realtime",
"binary_version": "6.8.1-1015.16"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:24.04:LTS",
"name": "linux-realtime",
"purl": "pkg:deb/ubuntu/linux-realtime@6.8.1-1015.16?arch=source\u0026distro=noble"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.8.1-1015.16"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-buildinfo-6.8.0-60-generic",
"binary_version": "6.8.0-60.63.1"
},
{
"binary_name": "linux-headers-6.8.0-60-generic",
"binary_version": "6.8.0-60.63.1"
},
{
"binary_name": "linux-image-6.8.0-60-generic",
"binary_version": "6.8.0-60.63.1"
},
{
"binary_name": "linux-modules-6.8.0-60-generic",
"binary_version": "6.8.0-60.63.1"
},
{
"binary_name": "linux-riscv-headers-6.8.0-60",
"binary_version": "6.8.0-60.63.1"
},
{
"binary_name": "linux-riscv-tools-6.8.0-60",
"binary_version": "6.8.0-60.63.1"
},
{
"binary_name": "linux-tools-6.8.0-60-generic",
"binary_version": "6.8.0-60.63.1"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:24.04:LTS",
"name": "linux-riscv",
"purl": "pkg:deb/ubuntu/linux-riscv@6.8.0-60.63.1?arch=source\u0026distro=noble"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.5.0-9.9.1",
"6.8.0-20.20.1",
"6.8.0-28.28.1",
"6.8.0-31.31.1",
"6.8.0-35.35.1",
"6.8.0-36.36.1",
"6.8.0-38.38.1",
"6.8.0-39.39.1",
"6.8.0-40.40.1",
"6.8.0-41.41.1",
"6.8.0-44.44.1",
"6.8.0-47.47.1",
"6.8.0-48.48.1",
"6.8.0-49.49.1",
"6.8.0-50.51.1",
"6.8.0-51.52.1",
"6.8.0-52.53.1",
"6.8.0-53.55.1",
"6.8.0-55.57.1",
"6.8.0-56.58.1",
"6.8.0-57.59.1",
"6.8.0-58.60.1",
"6.8.0-59.61.1",
"6.8.0-60.63.1"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "linux-buildinfo-6.8.0-1018-xilinx",
"binary_version": "6.8.0-1018.19"
},
{
"binary_name": "linux-headers-6.8.0-1018-xilinx",
"binary_version": "6.8.0-1018.19"
},
{
"binary_name": "linux-image-6.8.0-1018-xilinx",
"binary_version": "6.8.0-1018.19"
},
{
"binary_name": "linux-modules-6.8.0-1018-xilinx",
"binary_version": "6.8.0-1018.19"
},
{
"binary_name": "linux-tools-6.8.0-1018-xilinx",
"binary_version": "6.8.0-1018.19"
},
{
"binary_name": "linux-xilinx-headers-6.8.0-1018",
"binary_version": "6.8.0-1018.19"
},
{
"binary_name": "linux-xilinx-tools-6.8.0-1018",
"binary_version": "6.8.0-1018.19"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:24.04:LTS",
"name": "linux-xilinx",
"purl": "pkg:deb/ubuntu/linux-xilinx@6.8.0-1018.19?arch=source\u0026distro=noble"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.8.0-1018.19"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.8.0-1008.9",
"6.8.0-1009.10",
"6.8.0-1011.12",
"6.8.0-1012.13",
"6.8.0-1013.14",
"6.8.0-1014.15",
"6.8.0-1015.16",
"6.8.0-1017.18"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-bluefield-headers-6.8.0-1026",
"binary_version": "6.8.0-1026.30"
},
{
"binary_name": "linux-bluefield-tools-6.8.0-1026",
"binary_version": "6.8.0-1026.30"
},
{
"binary_name": "linux-buildinfo-6.8.0-1026-bluefield",
"binary_version": "6.8.0-1026.30"
},
{
"binary_name": "linux-buildinfo-6.8.0-1026-bluefield-64k",
"binary_version": "6.8.0-1026.30"
},
{
"binary_name": "linux-headers-6.8.0-1026-bluefield",
"binary_version": "6.8.0-1026.30"
},
{
"binary_name": "linux-headers-6.8.0-1026-bluefield-64k",
"binary_version": "6.8.0-1026.30"
},
{
"binary_name": "linux-image-unsigned-6.8.0-1026-bluefield",
"binary_version": "6.8.0-1026.30"
},
{
"binary_name": "linux-image-unsigned-6.8.0-1026-bluefield-64k",
"binary_version": "6.8.0-1026.30"
},
{
"binary_name": "linux-modules-6.8.0-1026-bluefield",
"binary_version": "6.8.0-1026.30"
},
{
"binary_name": "linux-modules-6.8.0-1026-bluefield-64k",
"binary_version": "6.8.0-1026.30"
},
{
"binary_name": "linux-modules-extra-6.8.0-1026-bluefield",
"binary_version": "6.8.0-1026.30"
},
{
"binary_name": "linux-modules-extra-6.8.0-1026-bluefield-64k",
"binary_version": "6.8.0-1026.30"
},
{
"binary_name": "linux-tools-6.8.0-1026-bluefield",
"binary_version": "6.8.0-1026.30"
},
{
"binary_name": "linux-tools-6.8.0-1026-bluefield-64k",
"binary_version": "6.8.0-1026.30"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:Nvidia-BlueField:24.04:LTS",
"name": "linux-bluefield",
"purl": "pkg:deb/ubuntu/linux-bluefield@6.8.0-1026.30?arch=source\u0026distro=bluefield/noble"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.8.0-1011.15",
"6.8.0-1012.16",
"6.8.0-1013.17",
"6.8.0-1014.18",
"6.8.0-1016.20",
"6.8.0-1017.21",
"6.8.0-1022.26",
"6.8.0-1023.27",
"6.8.0-1026.30"
]
},
{
"ecosystem_specific": {
"availability": "Available with Ubuntu Pro: https://ubuntu.com/pro",
"binaries": [
{
"binary_name": "linux-aws-fips-cloud-tools-6.8.0-1039",
"binary_version": "6.8.0-1039.41+fips1"
},
{
"binary_name": "linux-aws-fips-headers-6.8.0-1039",
"binary_version": "6.8.0-1039.41+fips1"
},
{
"binary_name": "linux-aws-fips-tools-6.8.0-1039",
"binary_version": "6.8.0-1039.41+fips1"
},
{
"binary_name": "linux-buildinfo-6.8.0-1039-aws-fips",
"binary_version": "6.8.0-1039.41+fips1"
},
{
"binary_name": "linux-cloud-tools-6.8.0-1039-aws-fips",
"binary_version": "6.8.0-1039.41+fips1"
},
{
"binary_name": "linux-headers-6.8.0-1039-aws-fips",
"binary_version": "6.8.0-1039.41+fips1"
},
{
"binary_name": "linux-image-unsigned-6.8.0-1039-aws-fips",
"binary_version": "6.8.0-1039.41+fips1"
},
{
"binary_name": "linux-image-unsigned-hmac-6.8.0-1039-aws-fips",
"binary_version": "6.8.0-1039.41+fips1"
},
{
"binary_name": "linux-modules-6.8.0-1039-aws-fips",
"binary_version": "6.8.0-1039.41+fips1"
},
{
"binary_name": "linux-modules-extra-6.8.0-1039-aws-fips",
"binary_version": "6.8.0-1039.41+fips1"
},
{
"binary_name": "linux-tools-6.8.0-1039-aws-fips",
"binary_version": "6.8.0-1039.41+fips1"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:Pro:FIPS-updates:24.04:LTS",
"name": "linux-aws-fips",
"purl": "pkg:deb/ubuntu/linux-aws-fips@6.8.0-1039.41+fips1?arch=source\u0026distro=fips-updates/noble"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.8.0-1039.41+fips1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.8.0-1035.37+fips1",
"6.8.0-1036.38+fips1",
"6.8.0-1038.40+fips1"
]
},
{
"ecosystem_specific": {
"availability": "Available with Ubuntu Pro: https://ubuntu.com/pro",
"binaries": [
{
"binary_name": "linux-azure-fips-cloud-tools-6.8.0-1040",
"binary_version": "6.8.0-1040.46+fips1"
},
{
"binary_name": "linux-azure-fips-headers-6.8.0-1040",
"binary_version": "6.8.0-1040.46+fips1"
},
{
"binary_name": "linux-azure-fips-tools-6.8.0-1040",
"binary_version": "6.8.0-1040.46+fips1"
},
{
"binary_name": "linux-buildinfo-6.8.0-1040-azure-fips",
"binary_version": "6.8.0-1040.46+fips1"
},
{
"binary_name": "linux-cloud-tools-6.8.0-1040-azure-fips",
"binary_version": "6.8.0-1040.46+fips1"
},
{
"binary_name": "linux-headers-6.8.0-1040-azure-fips",
"binary_version": "6.8.0-1040.46+fips1"
},
{
"binary_name": "linux-image-unsigned-6.8.0-1040-azure-fips",
"binary_version": "6.8.0-1040.46+fips1"
},
{
"binary_name": "linux-image-unsigned-hmac-6.8.0-1040-azure-fips",
"binary_version": "6.8.0-1040.46+fips1"
},
{
"binary_name": "linux-modules-6.8.0-1040-azure-fips",
"binary_version": "6.8.0-1040.46+fips1"
},
{
"binary_name": "linux-modules-extra-6.8.0-1040-azure-fips",
"binary_version": "6.8.0-1040.46+fips1"
},
{
"binary_name": "linux-modules-involflt-6.8.0-1040-azure-fips",
"binary_version": "6.8.0-1040.46+fips1"
},
{
"binary_name": "linux-modules-iwlwifi-6.8.0-1040-azure-fips",
"binary_version": "6.8.0-1040.46+fips1"
},
{
"binary_name": "linux-tools-6.8.0-1040-azure-fips",
"binary_version": "6.8.0-1040.46+fips1"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:Pro:FIPS-updates:24.04:LTS",
"name": "linux-azure-fips",
"purl": "pkg:deb/ubuntu/linux-azure-fips@6.8.0-1040.46+fips1?arch=source\u0026distro=fips-updates/noble"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.8.0-1040.46+fips1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.8.0-1034.39+fips1"
]
},
{
"ecosystem_specific": {
"availability": "Available with Ubuntu Pro: https://ubuntu.com/pro",
"binaries": [
{
"binary_name": "linux-buildinfo-6.8.0-84-fips",
"binary_version": "6.8.0-84.84+fips1"
},
{
"binary_name": "linux-fips-headers-6.8.0-84",
"binary_version": "6.8.0-84.84+fips1"
},
{
"binary_name": "linux-fips-lib-rust-6.8.0-84-fips",
"binary_version": "6.8.0-84.84+fips1"
},
{
"binary_name": "linux-fips-tools-6.8.0-84",
"binary_version": "6.8.0-84.84+fips1"
},
{
"binary_name": "linux-headers-6.8.0-84-fips",
"binary_version": "6.8.0-84.84+fips1"
},
{
"binary_name": "linux-image-6.8.0-84-fips",
"binary_version": "6.8.0-84.84+fips1"
},
{
"binary_name": "linux-image-hmac-6.8.0-84-fips",
"binary_version": "6.8.0-84.84+fips1"
},
{
"binary_name": "linux-image-unsigned-6.8.0-84-fips",
"binary_version": "6.8.0-84.84+fips1"
},
{
"binary_name": "linux-image-unsigned-hmac-6.8.0-84-fips",
"binary_version": "6.8.0-84.84+fips1"
},
{
"binary_name": "linux-modules-6.8.0-84-fips",
"binary_version": "6.8.0-84.84+fips1"
},
{
"binary_name": "linux-modules-extra-6.8.0-84-fips",
"binary_version": "6.8.0-84.84+fips1"
},
{
"binary_name": "linux-modules-ipu6-6.8.0-84-fips",
"binary_version": "6.8.0-84.84+fips1"
},
{
"binary_name": "linux-modules-iwlwifi-6.8.0-84-fips",
"binary_version": "6.8.0-84.84+fips1"
},
{
"binary_name": "linux-modules-usbio-6.8.0-84-fips",
"binary_version": "6.8.0-84.84+fips1"
},
{
"binary_name": "linux-tools-6.8.0-84-fips",
"binary_version": "6.8.0-84.84+fips1"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:Pro:FIPS-updates:24.04:LTS",
"name": "linux-fips",
"purl": "pkg:deb/ubuntu/linux-fips@6.8.0-84.84+fips1?arch=source\u0026distro=fips-updates/noble"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.8.0-84.84+fips1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.8.0-38.38+fips4",
"6.8.0-78.78+fips1",
"6.8.0-79.79+fips1",
"6.8.0-83.83+fips1"
]
},
{
"ecosystem_specific": {
"availability": "Available with Ubuntu Pro: https://ubuntu.com/pro",
"binaries": [
{
"binary_name": "linux-buildinfo-6.8.0-1040-gcp-fips",
"binary_version": "6.8.0-1040.42+fips1"
},
{
"binary_name": "linux-gcp-fips-headers-6.8.0-1040",
"binary_version": "6.8.0-1040.42+fips1"
},
{
"binary_name": "linux-gcp-fips-tools-6.8.0-1040",
"binary_version": "6.8.0-1040.42+fips1"
},
{
"binary_name": "linux-headers-6.8.0-1040-gcp-fips",
"binary_version": "6.8.0-1040.42+fips1"
},
{
"binary_name": "linux-image-unsigned-6.8.0-1040-gcp-fips",
"binary_version": "6.8.0-1040.42+fips1"
},
{
"binary_name": "linux-image-unsigned-hmac-6.8.0-1040-gcp-fips",
"binary_version": "6.8.0-1040.42+fips1"
},
{
"binary_name": "linux-modules-6.8.0-1040-gcp-fips",
"binary_version": "6.8.0-1040.42+fips1"
},
{
"binary_name": "linux-modules-extra-6.8.0-1040-gcp-fips",
"binary_version": "6.8.0-1040.42+fips1"
},
{
"binary_name": "linux-tools-6.8.0-1040-gcp-fips",
"binary_version": "6.8.0-1040.42+fips1"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:Pro:FIPS-updates:24.04:LTS",
"name": "linux-gcp-fips",
"purl": "pkg:deb/ubuntu/linux-gcp-fips@6.8.0-1040.42+fips1?arch=source\u0026distro=fips-updates/noble"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.8.0-1040.42+fips1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.8.0-1036.38+fips1",
"6.8.0-1037.39+fips1",
"6.8.0-1039.41+fips1"
]
},
{
"ecosystem_specific": {
"availability": "Available with Ubuntu Pro: https://ubuntu.com/pro",
"binaries": [
{
"binary_name": "linux-buildinfo-6.8.0-2030-raspi-realtime",
"binary_version": "6.8.0-2030.31"
},
{
"binary_name": "linux-headers-6.8.0-2030-raspi-realtime",
"binary_version": "6.8.0-2030.31"
},
{
"binary_name": "linux-image-6.8.0-2030-raspi-realtime",
"binary_version": "6.8.0-2030.31"
},
{
"binary_name": "linux-modules-6.8.0-2030-raspi-realtime",
"binary_version": "6.8.0-2030.31"
},
{
"binary_name": "linux-raspi-realtime-headers-6.8.0-2030",
"binary_version": "6.8.0-2030.31"
},
{
"binary_name": "linux-raspi-realtime-tools-6.8.0-2030",
"binary_version": "6.8.0-2030.31"
},
{
"binary_name": "linux-tools-6.8.0-2030-raspi-realtime",
"binary_version": "6.8.0-2030.31"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:Pro:Realtime:24.04:LTS",
"name": "linux-raspi-realtime",
"purl": "pkg:deb/ubuntu/linux-raspi-realtime@6.8.0-2030.31?arch=source\u0026distro=realtime/noble"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.8.0-2030.31"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.7.0-2001.1",
"6.8.0-2001.1",
"6.8.0-2002.2",
"6.8.0-2004.4",
"6.8.0-2005.5",
"6.8.0-2006.6",
"6.8.0-2007.7",
"6.8.0-2008.8",
"6.8.0-2009.9",
"6.8.0-2010.10",
"6.8.0-2011.11",
"6.8.0-2012.12",
"6.8.0-2013.14",
"6.8.0-2014.15",
"6.8.0-2015.16",
"6.8.0-2016.17",
"6.8.0-2017.18",
"6.8.0-2018.19",
"6.8.0-2019.20",
"6.8.0-2022.23",
"6.8.0-2023.24",
"6.8.0-2024.25",
"6.8.0-2025.26",
"6.8.0-2026.27",
"6.8.0-2028.29",
"6.8.0-2029.30"
]
},
{
"ecosystem_specific": {
"availability": "Available with Ubuntu Pro: https://ubuntu.com/pro",
"binaries": [
{
"binary_name": "linux-buildinfo-6.8.1-1034-realtime",
"binary_version": "6.8.1-1034.35"
},
{
"binary_name": "linux-cloud-tools-6.8.1-1034-realtime",
"binary_version": "6.8.1-1034.35"
},
{
"binary_name": "linux-headers-6.8.1-1034-realtime",
"binary_version": "6.8.1-1034.35"
},
{
"binary_name": "linux-image-unsigned-6.8.1-1034-realtime",
"binary_version": "6.8.1-1034.35"
},
{
"binary_name": "linux-modules-6.8.1-1034-realtime",
"binary_version": "6.8.1-1034.35"
},
{
"binary_name": "linux-modules-extra-6.8.1-1034-realtime",
"binary_version": "6.8.1-1034.35"
},
{
"binary_name": "linux-modules-iwlwifi-6.8.1-1034-realtime",
"binary_version": "6.8.1-1034.35"
},
{
"binary_name": "linux-realtime-cloud-tools-6.8.1-1034",
"binary_version": "6.8.1-1034.35"
},
{
"binary_name": "linux-realtime-headers-6.8.1-1034",
"binary_version": "6.8.1-1034.35"
},
{
"binary_name": "linux-realtime-tools-6.8.1-1034",
"binary_version": "6.8.1-1034.35"
},
{
"binary_name": "linux-tools-6.8.1-1034-realtime",
"binary_version": "6.8.1-1034.35"
}
],
"priority_reason": "The vulnerability depends entirely on kernel-internal prerequisite events (QMI locator service initialization and driver probe timing on Qualcomm SoCs) that an attacker can neither invoke nor influence from userspace."
},
"package": {
"ecosystem": "Ubuntu:Pro:Realtime:24.04:LTS",
"name": "linux-realtime",
"purl": "pkg:deb/ubuntu/linux-realtime@6.8.1-1034.35?arch=source\u0026distro=realtime/noble"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.8.1-1034.35"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.8.0-1008.19",
"6.8.1-1001.1",
"6.8.1-1002.2",
"6.8.1-1003.3",
"6.8.1-1004.4",
"6.8.1-1005.5",
"6.8.1-1006.6",
"6.8.1-1007.7",
"6.8.1-1008.8",
"6.8.1-1009.9",
"6.8.1-1010.10",
"6.8.1-1011.11",
"6.8.1-1012.12",
"6.8.1-1013.14",
"6.8.1-1014.15",
"6.8.1-1015.16",
"6.8.1-1016.17",
"6.8.1-1017.18",
"6.8.1-1018.19",
"6.8.1-1019.20",
"6.8.1-1020.21",
"6.8.1-1021.22",
"6.8.1-1022.23",
"6.8.1-1023.24",
"6.8.1-1024.25",
"6.8.1-1025.26",
"6.8.1-1026.27",
"6.8.1-1030.31",
"6.8.1-1031.32",
"6.8.1-1033.34"
]
}
],
"aliases": [],
"details": "In the Linux kernel, the following vulnerability has been resolved: soc: qcom: pdr: Fix the potential deadlock When some client process A call pdr_add_lookup() to add the look up for the service and does schedule locator work, later a process B got a new server packet indicating locator is up and call pdr_locator_new_server() which eventually sets pdr-\u003elocator_init_complete to true which process A sees and takes list lock and queries domain list but it will timeout due to deadlock as the response will queued to the same qmi-\u003ewq and it is ordered workqueue and process B is not able to complete new server request work due to deadlock on list lock. Fix it by removing the unnecessary list iteration as the list iteration is already being done inside locator work, so avoid it here and just call schedule_work() here. Process A Process B process_scheduled_works() pdr_add_lookup() qmi_data_ready_work() process_scheduled_works() pdr_locator_new_server() pdr-\u003elocator_init_complete=true; pdr_locator_work() mutex_lock(\u0026pdr-\u003elist_lock); pdr_locate_service() mutex_lock(\u0026pdr-\u003elist_lock); pdr_get_domain_list() pr_err(\"PDR: %s get domain list txn wait failed: %d\\n\", req-\u003eservice_name, ret); Timeout error log due to deadlock: \" PDR: tms/servreg get domain list txn wait failed: -110 PDR: service lookup for msm/adsp/sensor_pd:tms/servreg failed: -110 \" Thanks to Bjorn and Johan for letting me know that this commit also fixes an audio regression when using the in-kernel pd-mapper as that makes it easier to hit this race. [1]",
"id": "UBUNTU-CVE-2025-22014",
"modified": "2026-07-23T12:15:35Z",
"published": "2025-04-08T09:15:00Z",
"references": [
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2025-22014"
},
{
"type": "REPORT",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22014"
},
{
"type": "REPORT",
"url": "https://git.kernel.org/linus/2eeb03ad9f42dfece63051be2400af487ddb96d2"
},
{
"type": "REPORT",
"url": "https://git.kernel.org/stable/c/02612f1e4c34d94d6c8ee75bf7d254ed697e22d4"
},
{
"type": "REPORT",
"url": "https://git.kernel.org/stable/c/0a566a79aca9851fae140536e0fc5b0853c90a90"
},
{
"type": "REPORT",
"url": "https://git.kernel.org/stable/c/2eeb03ad9f42dfece63051be2400af487ddb96d2"
},
{
"type": "REPORT",
"url": "https://git.kernel.org/stable/c/f2bbfd50e95bc117360f0f59e629aa03d821ebd6"
},
{
"type": "REPORT",
"url": "https://git.kernel.org/stable/c/f4489260f5713c94e1966e5f20445bff262876f4"
},
{
"type": "ADVISORY",
"url": "https://ubuntu.com/security/notices/USN-7591-1"
},
{
"type": "ADVISORY",
"url": "https://ubuntu.com/security/notices/USN-7591-2"
},
{
"type": "ADVISORY",
"url": "https://ubuntu.com/security/notices/USN-7591-3"
},
{
"type": "ADVISORY",
"url": "https://ubuntu.com/security/notices/USN-7592-1"
},
{
"type": "ADVISORY",
"url": "https://ubuntu.com/security/notices/USN-7593-1"
},
{
"type": "ADVISORY",
"url": "https://ubuntu.com/security/notices/USN-7591-4"
},
{
"type": "ADVISORY",
"url": "https://ubuntu.com/security/notices/USN-7597-1"
},
{
"type": "ADVISORY",
"url": "https://ubuntu.com/security/notices/USN-7597-2"
},
{
"type": "ADVISORY",
"url": "https://ubuntu.com/security/notices/USN-7598-1"
},
{
"type": "ADVISORY",
"url": "https://ubuntu.com/security/notices/USN-7602-1"
},
{
"type": "ADVISORY",
"url": "https://ubuntu.com/security/notices/USN-7605-1"
},
{
"type": "ADVISORY",
"url": "https://ubuntu.com/security/notices/USN-7606-1"
},
{
"type": "ADVISORY",
"url": "https://ubuntu.com/security/notices/USN-7591-5"
},
{
"type": "ADVISORY",
"url": "https://ubuntu.com/security/notices/USN-7605-2"
},
{
"type": "ADVISORY",
"url": "https://ubuntu.com/security/notices/USN-7628-1"
},
{
"type": "ADVISORY",
"url": "https://ubuntu.com/security/notices/USN-7591-6"
},
{
"type": "ADVISORY",
"url": "https://ubuntu.com/security/notices/USN-7655-1"
},
{
"type": "ADVISORY",
"url": "https://ubuntu.com/security/notices/USN-7764-1"
},
{
"type": "ADVISORY",
"url": "https://ubuntu.com/security/notices/USN-7765-1"
},
{
"type": "ADVISORY",
"url": "https://ubuntu.com/security/notices/USN-7766-1"
},
{
"type": "ADVISORY",
"url": "https://ubuntu.com/security/notices/USN-7767-1"
},
{
"type": "ADVISORY",
"url": "https://ubuntu.com/security/notices/USN-7779-1"
},
{
"type": "ADVISORY",
"url": "https://ubuntu.com/security/notices/USN-7767-2"
},
{
"type": "ADVISORY",
"url": "https://ubuntu.com/security/notices/USN-7764-2"
},
{
"type": "ADVISORY",
"url": "https://ubuntu.com/security/notices/USN-7790-1"
},
{
"type": "ADVISORY",
"url": "https://ubuntu.com/security/notices/USN-7800-1"
},
{
"type": "ADVISORY",
"url": "https://ubuntu.com/security/notices/USN-7801-1"
},
{
"type": "ADVISORY",
"url": "https://ubuntu.com/security/notices/USN-7802-1"
},
{
"type": "ADVISORY",
"url": "https://ubuntu.com/security/notices/USN-7801-2"
},
{
"type": "ADVISORY",
"url": "https://ubuntu.com/security/notices/USN-7809-1"
},
{
"type": "ADVISORY",
"url": "https://ubuntu.com/security/notices/USN-7801-3"
}
],
"related": [
"USN-7591-1",
"USN-7591-2",
"USN-7591-3",
"USN-7592-1",
"USN-7593-1",
"USN-7591-4",
"USN-7597-1",
"USN-7597-2",
"USN-7598-1",
"USN-7602-1",
"USN-7605-1",
"USN-7606-1",
"USN-7591-5",
"USN-7605-2",
"USN-7628-1",
"USN-7591-6",
"USN-7655-1",
"USN-7764-1",
"USN-7765-1",
"USN-7766-1",
"USN-7767-1",
"USN-7779-1",
"USN-7767-2",
"USN-7764-2",
"USN-7790-1",
"USN-7800-1",
"USN-7801-1",
"USN-7802-1",
"USN-7801-2",
"USN-7809-1",
"USN-7801-3"
],
"schema_version": "1.7.0",
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
],
"upstream": [
"CVE-2025-22014"
]
}
WID-SEC-W-2025-0732
Vulnerability from csaf_certbund - Published: 2025-04-07 22:00 - Updated: 2026-06-04 22:00| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SolarWinds Security Event Manager <2025.2.1
SolarWinds / Security Event Manager
|
<2025.2.1 | ||
|
Debian Linux
Debian
|
cpe:/o:debian:debian_linux:-
|
— | |
|
SUSE Linux
SUSE
|
cpe:/o:suse:suse_linux:-
|
— | |
|
Ubuntu Linux
Ubuntu
|
cpe:/o:canonical:ubuntu_linux:-
|
— | |
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Open Source Linux Kernel
Open Source
|
cpe:/o:linux:linux_kernel:-
|
— |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SolarWinds Security Event Manager <2025.2.1
SolarWinds / Security Event Manager
|
<2025.2.1 | ||
|
Debian Linux
Debian
|
cpe:/o:debian:debian_linux:-
|
— | |
|
SUSE Linux
SUSE
|
cpe:/o:suse:suse_linux:-
|
— | |
|
Ubuntu Linux
Ubuntu
|
cpe:/o:canonical:ubuntu_linux:-
|
— | |
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Open Source Linux Kernel
Open Source
|
cpe:/o:linux:linux_kernel:-
|
— |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SolarWinds Security Event Manager <2025.2.1
SolarWinds / Security Event Manager
|
<2025.2.1 | ||
|
Debian Linux
Debian
|
cpe:/o:debian:debian_linux:-
|
— | |
|
SUSE Linux
SUSE
|
cpe:/o:suse:suse_linux:-
|
— | |
|
Ubuntu Linux
Ubuntu
|
cpe:/o:canonical:ubuntu_linux:-
|
— | |
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Open Source Linux Kernel
Open Source
|
cpe:/o:linux:linux_kernel:-
|
— |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SolarWinds Security Event Manager <2025.2.1
SolarWinds / Security Event Manager
|
<2025.2.1 | ||
|
Debian Linux
Debian
|
cpe:/o:debian:debian_linux:-
|
— | |
|
SUSE Linux
SUSE
|
cpe:/o:suse:suse_linux:-
|
— | |
|
Ubuntu Linux
Ubuntu
|
cpe:/o:canonical:ubuntu_linux:-
|
— | |
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Open Source Linux Kernel
Open Source
|
cpe:/o:linux:linux_kernel:-
|
— |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SolarWinds Security Event Manager <2025.2.1
SolarWinds / Security Event Manager
|
<2025.2.1 | ||
|
Debian Linux
Debian
|
cpe:/o:debian:debian_linux:-
|
— | |
|
SUSE Linux
SUSE
|
cpe:/o:suse:suse_linux:-
|
— | |
|
Ubuntu Linux
Ubuntu
|
cpe:/o:canonical:ubuntu_linux:-
|
— | |
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Open Source Linux Kernel
Open Source
|
cpe:/o:linux:linux_kernel:-
|
— |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SolarWinds Security Event Manager <2025.2.1
SolarWinds / Security Event Manager
|
<2025.2.1 | ||
|
Debian Linux
Debian
|
cpe:/o:debian:debian_linux:-
|
— | |
|
SUSE Linux
SUSE
|
cpe:/o:suse:suse_linux:-
|
— | |
|
Ubuntu Linux
Ubuntu
|
cpe:/o:canonical:ubuntu_linux:-
|
— | |
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Open Source Linux Kernel
Open Source
|
cpe:/o:linux:linux_kernel:-
|
— |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SolarWinds Security Event Manager <2025.2.1
SolarWinds / Security Event Manager
|
<2025.2.1 | ||
|
Debian Linux
Debian
|
cpe:/o:debian:debian_linux:-
|
— | |
|
SUSE Linux
SUSE
|
cpe:/o:suse:suse_linux:-
|
— | |
|
Ubuntu Linux
Ubuntu
|
cpe:/o:canonical:ubuntu_linux:-
|
— | |
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Open Source Linux Kernel
Open Source
|
cpe:/o:linux:linux_kernel:-
|
— |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SolarWinds Security Event Manager <2025.2.1
SolarWinds / Security Event Manager
|
<2025.2.1 | ||
|
Debian Linux
Debian
|
cpe:/o:debian:debian_linux:-
|
— | |
|
SUSE Linux
SUSE
|
cpe:/o:suse:suse_linux:-
|
— | |
|
Ubuntu Linux
Ubuntu
|
cpe:/o:canonical:ubuntu_linux:-
|
— | |
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Open Source Linux Kernel
Open Source
|
cpe:/o:linux:linux_kernel:-
|
— |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SolarWinds Security Event Manager <2025.2.1
SolarWinds / Security Event Manager
|
<2025.2.1 | ||
|
Debian Linux
Debian
|
cpe:/o:debian:debian_linux:-
|
— | |
|
SUSE Linux
SUSE
|
cpe:/o:suse:suse_linux:-
|
— | |
|
Ubuntu Linux
Ubuntu
|
cpe:/o:canonical:ubuntu_linux:-
|
— | |
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Open Source Linux Kernel
Open Source
|
cpe:/o:linux:linux_kernel:-
|
— |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SolarWinds Security Event Manager <2025.2.1
SolarWinds / Security Event Manager
|
<2025.2.1 | ||
|
Debian Linux
Debian
|
cpe:/o:debian:debian_linux:-
|
— | |
|
SUSE Linux
SUSE
|
cpe:/o:suse:suse_linux:-
|
— | |
|
Ubuntu Linux
Ubuntu
|
cpe:/o:canonical:ubuntu_linux:-
|
— | |
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Open Source Linux Kernel
Open Source
|
cpe:/o:linux:linux_kernel:-
|
— |
| URL | Category |
|---|---|
| https://wid.cert-bund.de/.well-known/csaf/white/2… | self |
| https://wid.cert-bund.de/portal/wid/securityadvis… | self |
| https://ubuntu.com/security/notices/USN-7597-2 | external |
| https://ubuntu.com/security/notices/USN-7597-1 | external |
| https://ubuntu.com/security/notices/USN-7591-4 | external |
| https://ubuntu.com/security/notices/USN-7598-1 | external |
| https://lore.kernel.org/linux-cve-announce/ | external |
| https://lore.kernel.org/linux-cve-announce/202504… | external |
| https://lore.kernel.org/linux-cve-announce/202504… | external |
| https://lore.kernel.org/linux-cve-announce/202504… | external |
| https://lore.kernel.org/linux-cve-announce/202504… | external |
| https://lore.kernel.org/linux-cve-announce/202504… | external |
| https://lore.kernel.org/linux-cve-announce/202504… | external |
| https://lore.kernel.org/linux-cve-announce/202504… | external |
| https://lore.kernel.org/linux-cve-announce/202504… | external |
| https://lore.kernel.org/linux-cve-announce/202504… | external |
| https://lore.kernel.org/linux-cve-announce/202504… | external |
| https://lists.debian.org/debian-security-announce… | external |
| https://ubuntu.com/security/notices/USN-7591-1 | external |
| https://ubuntu.com/security/notices/USN-7591-2 | external |
| https://ubuntu.com/security/notices/USN-7593-1 | external |
| https://ubuntu.com/security/notices/USN-7591-3 | external |
| https://ubuntu.com/security/notices/USN-7592-1 | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://lists.debian.org/debian-lts-announce/2025… | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://lists.debian.org/debian-lts-announce/2025… | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://ubuntu.com/security/notices/USN-7602-1 | external |
| https://ubuntu.com/security/notices/USN-7605-1 | external |
| https://ubuntu.com/security/notices/USN-7606-1 | external |
| https://documentation.solarwinds.com/en/success_c… | external |
| https://ubuntu.com/security/notices/USN-7605-2 | external |
| https://ubuntu.com/security/notices/USN-7591-5 | external |
| https://ubuntu.com/security/notices/USN-7628-1 | external |
| https://linux.oracle.com/errata/ELSA-2025-20470.html | external |
| https://ubuntu.com/security/notices/USN-7591-6 | external |
| https://ubuntu.com/security/notices/USN-7655-1 | external |
| https://ubuntu.com/security/notices/USN-7764-1 | external |
| https://ubuntu.com/security/notices/USN-7765-1 | external |
| https://ubuntu.com/security/notices/USN-7766-1 | external |
| https://ubuntu.com/security/notices/USN-7767-1 | external |
| https://ubuntu.com/security/notices/USN-7779-1 | external |
| https://ubuntu.com/security/notices/USN-7767-2 | external |
| https://ubuntu.com/security/notices/USN-7764-2 | external |
| https://ubuntu.com/security/notices/USN-7790-1 | external |
| https://ubuntu.com/security/notices/USN-7802-1 | external |
| https://ubuntu.com/security/notices/USN-7801-1 | external |
| https://ubuntu.com/security/notices/USN-7800-1 | external |
| https://ubuntu.com/security/notices/USN-7801-2 | external |
| https://ubuntu.com/security/notices/USN-7809-1 | external |
| https://ubuntu.com/security/notices/USN-7801-3 | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://linux.oracle.com/errata/ELSA-2026-50261.html | external |
| https://oss.oracle.com/pipermail/el-errata/2026-M… | external |
| http://linux.oracle.com/errata/ELSA-2026-50294.html | external |
{
"document": {
"aggregate_severity": {
"text": "hoch"
},
"category": "csaf_base",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "de-DE",
"notes": [
{
"category": "legal_disclaimer",
"text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
},
{
"category": "description",
"text": "Der Kernel stellt den Kern des Linux Betriebssystems dar.",
"title": "Produktbeschreibung"
},
{
"category": "summary",
"text": "Ein Angreifer kann mehrere Schwachstellen im Linux-Kernel ausnutzen, um einen Denial-of-Service-Zustand zu erzeugen oder nicht spezifizierte Angriffe durchzuf\u00fchren.",
"title": "Angriff"
},
{
"category": "general",
"text": "- Linux",
"title": "Betroffene Betriebssysteme"
}
],
"publisher": {
"category": "other",
"contact_details": "csaf-provider@cert-bund.de",
"name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
"namespace": "https://www.bsi.bund.de"
},
"references": [
{
"category": "self",
"summary": "WID-SEC-W-2025-0732 - CSAF Version",
"url": "https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-0732.json"
},
{
"category": "self",
"summary": "WID-SEC-2025-0732 - Portal Version",
"url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-0732"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-7597-2 vom 2025-06-24",
"url": "https://ubuntu.com/security/notices/USN-7597-2"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-7597-1 vom 2025-06-24",
"url": "https://ubuntu.com/security/notices/USN-7597-1"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-7591-4 vom 2025-06-24",
"url": "https://ubuntu.com/security/notices/USN-7591-4"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-7598-1 vom 2025-06-24",
"url": "https://ubuntu.com/security/notices/USN-7598-1"
},
{
"category": "external",
"summary": "Kernel CVE Announce Mailingliste",
"url": "https://lore.kernel.org/linux-cve-announce/"
},
{
"category": "external",
"summary": "Linux Kernel CVE Announcement CVE-2025-22008",
"url": "https://lore.kernel.org/linux-cve-announce/2025040841-CVE-2025-22008-af1a@gregkh/"
},
{
"category": "external",
"summary": "Linux Kernel CVE Announcement CVE-2025-22009",
"url": "https://lore.kernel.org/linux-cve-announce/2025040842-CVE-2025-22009-2b2b@gregkh/"
},
{
"category": "external",
"summary": "Linux Kernel CVE Announcement CVE-2025-22010",
"url": "https://lore.kernel.org/linux-cve-announce/2025040843-CVE-2025-22010-82d7@gregkh/"
},
{
"category": "external",
"summary": "Linux Kernel CVE Announcement CVE-2025-22011",
"url": "https://lore.kernel.org/linux-cve-announce/2025040843-CVE-2025-22011-9e83@gregkh/"
},
{
"category": "external",
"summary": "Linux Kernel CVE Announcement CVE-2025-22012",
"url": "https://lore.kernel.org/linux-cve-announce/2025040843-CVE-2025-22012-e03f@gregkh/"
},
{
"category": "external",
"summary": "Linux Kernel CVE Announcement CVE-2025-22013",
"url": "https://lore.kernel.org/linux-cve-announce/2025040843-CVE-2025-22013-c885@gregkh/"
},
{
"category": "external",
"summary": "Linux Kernel CVE Announcement CVE-2025-22014",
"url": "https://lore.kernel.org/linux-cve-announce/2025040843-CVE-2025-22014-9c4f@gregkh/"
},
{
"category": "external",
"summary": "Linux Kernel CVE Announcement CVE-2025-22015",
"url": "https://lore.kernel.org/linux-cve-announce/2025040843-CVE-2025-22015-3408@gregkh/"
},
{
"category": "external",
"summary": "Linux Kernel CVE Announcement CVE-2025-22016",
"url": "https://lore.kernel.org/linux-cve-announce/2025040844-CVE-2025-22016-ac9d@gregkh/"
},
{
"category": "external",
"summary": "Linux Kernel CVE Announcement CVE-2025-22017",
"url": "https://lore.kernel.org/linux-cve-announce/2025040844-CVE-2025-22017-a66e@gregkh/"
},
{
"category": "external",
"summary": "Debian Security Advisory DSA-5900 vom 2025-04-12",
"url": "https://lists.debian.org/debian-security-announce/2025/msg00062.html"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-7591-1 vom 2025-06-24",
"url": "https://ubuntu.com/security/notices/USN-7591-1"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-7591-2 vom 2025-06-24",
"url": "https://ubuntu.com/security/notices/USN-7591-2"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-7593-1 vom 2025-06-24",
"url": "https://ubuntu.com/security/notices/USN-7593-1"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-7591-3 vom 2025-06-24",
"url": "https://ubuntu.com/security/notices/USN-7591-3"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-7592-1 vom 2025-06-24",
"url": "https://ubuntu.com/security/notices/USN-7592-1"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2025:01600-1 vom 2025-05-20",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2025-May/020854.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2025:01614-1 vom 2025-05-21",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2025-May/020870.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2025:01707-1 vom 2025-05-26",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2025-May/020902.html"
},
{
"category": "external",
"summary": "Debian Security Advisory DLA-4178 vom 2025-05-26",
"url": "https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2025:20344-1 vom 2025-05-29",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2025-May/020964.html"
},
{
"category": "external",
"summary": "Debian Security Advisory DLA-4193 vom 2025-05-30",
"url": "https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2025:20343-1 vom 2025-05-29",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2025-May/020965.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2025:20355-1 vom 2025-06-02",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2025-June/021015.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2025:20354-1 vom 2025-06-02",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2025-June/021016.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2025:20283-1 vom 2025-06-04",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2025-June/021049.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2025:20270-1 vom 2025-06-04",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2025-June/021056.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2025:20206-1 vom 2025-06-04",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2025-June/021137.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2025:20192-1 vom 2025-06-04",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2025-June/021150.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2025:01919-1 vom 2025-06-12",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2025-June/021477.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2025:01951-1 vom 2025-06-13",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2025-June/021509.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2025:01964-1 vom 2025-06-16",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2025-June/021531.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2025:01967-1 vom 2025-06-16",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2025-June/021533.html"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-7602-1 vom 2025-06-26",
"url": "https://ubuntu.com/security/notices/USN-7602-1"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-7605-1 vom 2025-06-30",
"url": "https://ubuntu.com/security/notices/USN-7605-1"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-7606-1 vom 2025-06-30",
"url": "https://ubuntu.com/security/notices/USN-7606-1"
},
{
"category": "external",
"summary": "SEM 2025.2.1 release notes vom 2025-07-02",
"url": "https://documentation.solarwinds.com/en/success_center/sem/content/release_notes/sem_2025-2-1_release_notes.htm"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-7605-2 vom 2025-07-04",
"url": "https://ubuntu.com/security/notices/USN-7605-2"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-7591-5 vom 2025-07-04",
"url": "https://ubuntu.com/security/notices/USN-7591-5"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-7628-1 vom 2025-07-09",
"url": "https://ubuntu.com/security/notices/USN-7628-1"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2025-20470 vom 2025-07-16",
"url": "https://linux.oracle.com/errata/ELSA-2025-20470.html"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-7591-6 vom 2025-07-17",
"url": "https://ubuntu.com/security/notices/USN-7591-6"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-7655-1 vom 2025-07-18",
"url": "https://ubuntu.com/security/notices/USN-7655-1"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-7764-1 vom 2025-09-24",
"url": "https://ubuntu.com/security/notices/USN-7764-1"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-7765-1 vom 2025-09-24",
"url": "https://ubuntu.com/security/notices/USN-7765-1"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-7766-1 vom 2025-09-24",
"url": "https://ubuntu.com/security/notices/USN-7766-1"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-7767-1 vom 2025-09-24",
"url": "https://ubuntu.com/security/notices/USN-7767-1"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-7779-1 vom 2025-09-25",
"url": "https://ubuntu.com/security/notices/USN-7779-1"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-7767-2 vom 2025-09-25",
"url": "https://ubuntu.com/security/notices/USN-7767-2"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-7764-2 vom 2025-09-26",
"url": "https://ubuntu.com/security/notices/USN-7764-2"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-7790-1 vom 2025-10-01",
"url": "https://ubuntu.com/security/notices/USN-7790-1"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-7802-1 vom 2025-10-02",
"url": "https://ubuntu.com/security/notices/USN-7802-1"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-7801-1 vom 2025-10-02",
"url": "https://ubuntu.com/security/notices/USN-7801-1"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-7800-1 vom 2025-10-02",
"url": "https://ubuntu.com/security/notices/USN-7800-1"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-7801-2 vom 2025-10-06",
"url": "https://ubuntu.com/security/notices/USN-7801-2"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-7809-1 vom 2025-10-08",
"url": "https://ubuntu.com/security/notices/USN-7809-1"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-7801-3 vom 2025-10-15",
"url": "https://ubuntu.com/security/notices/USN-7801-3"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:20327-1 vom 2026-02-13",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-February/024168.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:20326-1 vom 2026-02-13",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-February/024169.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:20294-1 vom 2026-02-13",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-February/024193.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:20300-1 vom 2026-02-13",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-February/024190.html"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2026-50261 vom 2026-05-12",
"url": "https://linux.oracle.com/errata/ELSA-2026-50261.html"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2026-50280 vom 2026-05-22",
"url": "https://oss.oracle.com/pipermail/el-errata/2026-May/020528.html"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2026-50294 vom 2026-06-04",
"url": "http://linux.oracle.com/errata/ELSA-2026-50294.html"
}
],
"source_lang": "en-US",
"title": "Linux Kernel: Mehrere Schwachstellen",
"tracking": {
"current_release_date": "2026-06-04T22:00:00.000+00:00",
"generator": {
"date": "2026-06-05T07:49:40.084+00:00",
"engine": {
"name": "BSI-WID",
"version": "1.6.0"
}
},
"id": "WID-SEC-W-2025-0732",
"initial_release_date": "2025-04-07T22:00:00.000+00:00",
"revision_history": [
{
"date": "2025-04-07T22:00:00.000+00:00",
"number": "1",
"summary": "Initiale Fassung"
},
{
"date": "2025-04-13T22:00:00.000+00:00",
"number": "2",
"summary": "Neue Updates von Debian aufgenommen"
},
{
"date": "2025-05-20T22:00:00.000+00:00",
"number": "3",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2025-05-21T22:00:00.000+00:00",
"number": "4",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2025-05-26T22:00:00.000+00:00",
"number": "5",
"summary": "Neue Updates von SUSE und Debian aufgenommen"
},
{
"date": "2025-05-29T22:00:00.000+00:00",
"number": "6",
"summary": "Neue Updates von SUSE und Debian aufgenommen"
},
{
"date": "2025-06-02T22:00:00.000+00:00",
"number": "7",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2025-06-03T22:00:00.000+00:00",
"number": "8",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2025-06-11T22:00:00.000+00:00",
"number": "9",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2025-06-15T22:00:00.000+00:00",
"number": "10",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2025-06-16T22:00:00.000+00:00",
"number": "11",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2025-06-23T22:00:00.000+00:00",
"number": "12",
"summary": "Neue Updates von Ubuntu aufgenommen"
},
{
"date": "2025-06-24T22:00:00.000+00:00",
"number": "13",
"summary": "Neue Updates von Ubuntu aufgenommen"
},
{
"date": "2025-06-26T22:00:00.000+00:00",
"number": "14",
"summary": "Neue Updates von Ubuntu aufgenommen"
},
{
"date": "2025-06-30T22:00:00.000+00:00",
"number": "15",
"summary": "Neue Updates von Ubuntu aufgenommen"
},
{
"date": "2025-07-01T22:00:00.000+00:00",
"number": "16",
"summary": "Neue Updates aufgenommen"
},
{
"date": "2025-07-06T22:00:00.000+00:00",
"number": "17",
"summary": "Neue Updates von Ubuntu aufgenommen"
},
{
"date": "2025-07-08T22:00:00.000+00:00",
"number": "18",
"summary": "Neue Updates von Ubuntu aufgenommen"
},
{
"date": "2025-07-15T22:00:00.000+00:00",
"number": "19",
"summary": "Neue Updates von Oracle Linux aufgenommen"
},
{
"date": "2025-07-17T22:00:00.000+00:00",
"number": "20",
"summary": "Neue Updates von Ubuntu aufgenommen"
},
{
"date": "2025-07-31T22:00:00.000+00:00",
"number": "21",
"summary": "Referenz(en) aufgenommen:"
},
{
"date": "2025-09-23T22:00:00.000+00:00",
"number": "22",
"summary": "Neue Updates von Ubuntu aufgenommen"
},
{
"date": "2025-09-24T22:00:00.000+00:00",
"number": "23",
"summary": "Neue Updates von Ubuntu aufgenommen"
},
{
"date": "2025-09-25T22:00:00.000+00:00",
"number": "24",
"summary": "Neue Updates von Ubuntu aufgenommen"
},
{
"date": "2025-10-01T22:00:00.000+00:00",
"number": "25",
"summary": "Neue Updates von Ubuntu aufgenommen"
},
{
"date": "2025-10-05T22:00:00.000+00:00",
"number": "26",
"summary": "Neue Updates von Ubuntu aufgenommen"
},
{
"date": "2025-10-06T22:00:00.000+00:00",
"number": "27",
"summary": "Neue Updates von Ubuntu aufgenommen"
},
{
"date": "2025-10-07T22:00:00.000+00:00",
"number": "28",
"summary": "Neue Updates von Ubuntu aufgenommen"
},
{
"date": "2025-10-15T22:00:00.000+00:00",
"number": "29",
"summary": "Neue Updates von Ubuntu aufgenommen"
},
{
"date": "2026-02-15T23:00:00.000+00:00",
"number": "30",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2026-02-16T23:00:00.000+00:00",
"number": "31",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2026-05-12T22:00:00.000+00:00",
"number": "32",
"summary": "Neue Updates von Oracle Linux aufgenommen"
},
{
"date": "2026-05-21T22:00:00.000+00:00",
"number": "33",
"summary": "Neue Updates von Oracle Linux aufgenommen"
},
{
"date": "2026-06-04T22:00:00.000+00:00",
"number": "34",
"summary": "Neue Updates von Oracle Linux aufgenommen"
}
],
"status": "final",
"version": "34"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Debian Linux",
"product": {
"name": "Debian Linux",
"product_id": "2951",
"product_identification_helper": {
"cpe": "cpe:/o:debian:debian_linux:-"
}
}
}
],
"category": "vendor",
"name": "Debian"
},
{
"branches": [
{
"category": "product_name",
"name": "Open Source Linux Kernel",
"product": {
"name": "Open Source Linux Kernel",
"product_id": "T042485",
"product_identification_helper": {
"cpe": "cpe:/o:linux:linux_kernel:-"
}
}
}
],
"category": "vendor",
"name": "Open Source"
},
{
"branches": [
{
"category": "product_name",
"name": "Oracle Linux",
"product": {
"name": "Oracle Linux",
"product_id": "T004914",
"product_identification_helper": {
"cpe": "cpe:/o:oracle:linux:-"
}
}
}
],
"category": "vendor",
"name": "Oracle"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux",
"product": {
"name": "SUSE Linux",
"product_id": "T002207",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse_linux:-"
}
}
}
],
"category": "vendor",
"name": "SUSE"
},
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c2025.2.1",
"product": {
"name": "SolarWinds Security Event Manager \u003c2025.2.1",
"product_id": "T044986"
}
},
{
"category": "product_version",
"name": "2025.2.1",
"product": {
"name": "SolarWinds Security Event Manager 2025.2.1",
"product_id": "T044986-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:solarwinds:security_event_manager:2025.2.1"
}
}
}
],
"category": "product_name",
"name": "Security Event Manager"
}
],
"category": "vendor",
"name": "SolarWinds"
},
{
"branches": [
{
"category": "product_name",
"name": "Ubuntu Linux",
"product": {
"name": "Ubuntu Linux",
"product_id": "T000126",
"product_identification_helper": {
"cpe": "cpe:/o:canonical:ubuntu_linux:-"
}
}
}
],
"category": "vendor",
"name": "Ubuntu"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-22008",
"product_status": {
"known_affected": [
"T044986",
"2951",
"T002207",
"T000126",
"T004914",
"T042485"
]
},
"release_date": "2025-04-07T22:00:00.000+00:00",
"title": "CVE-2025-22008"
},
{
"cve": "CVE-2025-22009",
"product_status": {
"known_affected": [
"T044986",
"2951",
"T002207",
"T000126",
"T004914",
"T042485"
]
},
"release_date": "2025-04-07T22:00:00.000+00:00",
"title": "CVE-2025-22009"
},
{
"cve": "CVE-2025-22010",
"product_status": {
"known_affected": [
"T044986",
"2951",
"T002207",
"T000126",
"T004914",
"T042485"
]
},
"release_date": "2025-04-07T22:00:00.000+00:00",
"title": "CVE-2025-22010"
},
{
"cve": "CVE-2025-22011",
"product_status": {
"known_affected": [
"T044986",
"2951",
"T002207",
"T000126",
"T004914",
"T042485"
]
},
"release_date": "2025-04-07T22:00:00.000+00:00",
"title": "CVE-2025-22011"
},
{
"cve": "CVE-2025-22012",
"product_status": {
"known_affected": [
"T044986",
"2951",
"T002207",
"T000126",
"T004914",
"T042485"
]
},
"release_date": "2025-04-07T22:00:00.000+00:00",
"title": "CVE-2025-22012"
},
{
"cve": "CVE-2025-22013",
"product_status": {
"known_affected": [
"T044986",
"2951",
"T002207",
"T000126",
"T004914",
"T042485"
]
},
"release_date": "2025-04-07T22:00:00.000+00:00",
"title": "CVE-2025-22013"
},
{
"cve": "CVE-2025-22014",
"product_status": {
"known_affected": [
"T044986",
"2951",
"T002207",
"T000126",
"T004914",
"T042485"
]
},
"release_date": "2025-04-07T22:00:00.000+00:00",
"title": "CVE-2025-22014"
},
{
"cve": "CVE-2025-22015",
"product_status": {
"known_affected": [
"T044986",
"2951",
"T002207",
"T000126",
"T004914",
"T042485"
]
},
"release_date": "2025-04-07T22:00:00.000+00:00",
"title": "CVE-2025-22015"
},
{
"cve": "CVE-2025-22016",
"product_status": {
"known_affected": [
"T044986",
"2951",
"T002207",
"T000126",
"T004914",
"T042485"
]
},
"release_date": "2025-04-07T22:00:00.000+00:00",
"title": "CVE-2025-22016"
},
{
"cve": "CVE-2025-22017",
"product_status": {
"known_affected": [
"T044986",
"2951",
"T002207",
"T000126",
"T004914",
"T042485"
]
},
"release_date": "2025-04-07T22:00:00.000+00:00",
"title": "CVE-2025-22017"
}
]
}
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.