Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2026-46300 (GCVE-0-2026-46300)
Vulnerability from cvelistv5 – Published: 2026-05-23 11:44 – Updated: 2026-08-24 12:07
VLAI
EPSS
VEX
Title
net: skbuff: preserve shared-frag marker during coalescing
Summary
In the Linux kernel, the following vulnerability has been resolved:
net: skbuff: preserve shared-frag marker during coalescing
skb_try_coalesce() can attach paged frags from @from to @to. If @from
has SKBFL_SHARED_FRAG set, the resulting @to skb can contain the same
externally-owned or page-cache-backed frags, but the shared-frag marker
is currently lost.
That breaks the invariant relied on by later in-place writers. In
particular, ESP input checks skb_has_shared_frag() before deciding
whether an uncloned nonlinear skb can skip skb_cow_data(). If TCP
receive coalescing has moved shared frags into an unmarked skb, ESP can
see skb_has_shared_frag() as false and decrypt in place over page-cache
backed frags.
Propagate SKBFL_SHARED_FRAG when skb_try_coalesce() transfers paged
frags. The tailroom copy path does not need the marker because it copies
bytes into @to's linear data rather than transferring frag descriptors.
Severity
7.8 (High)
CWE
- CWE-123 - Write-what-where Condition
Assigner
References
50 references
Impacted products
46 products
| Vendor | Product | Version | CPE status | |
|---|---|---|---|---|
| Linux | Linux |
Affected:
cef401de7be8c4e155c6746bfccf721a4fa5fab9 , < 3599e6b3cc1ada96883d496a50a210d3afbb6987
(git)
Affected: cef401de7be8c4e155c6746bfccf721a4fa5fab9 , < 2f2b16022a2e10ca7bccfb98db5ed2ec0f72641c (git) Affected: cef401de7be8c4e155c6746bfccf721a4fa5fab9 , < 9d3e5fd19fe1063bf607219e8562fbd567b8e8d5 (git) Affected: cef401de7be8c4e155c6746bfccf721a4fa5fab9 , < 78bf6b6bb19541d19fbda6242e7cfe2c682763c0 (git) Affected: cef401de7be8c4e155c6746bfccf721a4fa5fab9 , < 760e1addc27ba1a7beb4a0a7e8b3e9ec49e7a34e (git) Affected: cef401de7be8c4e155c6746bfccf721a4fa5fab9 , < 3bd9e113d50034db99d7ef69fd8e5242d15e414a (git) Affected: cef401de7be8c4e155c6746bfccf721a4fa5fab9 , < 3884358a9286b17f389a72b1426fc4547c23c111 (git) Affected: cef401de7be8c4e155c6746bfccf721a4fa5fab9 , < f84eca5817390257cef78013d0112481c503b4a3 (git) |
guessed | |
| Linux | Linux |
Affected:
3.9
Unaffected: 0 , < 3.9 (semver) Unaffected: 5.10.257 , ≤ 5.10.* (semver) Unaffected: 5.15.208 , ≤ 5.15.* (semver) Unaffected: 6.1.174 , ≤ 6.1.* (semver) Unaffected: 6.6.141 , ≤ 6.6.* (semver) Unaffected: 6.12.91 , ≤ 6.12.* (semver) Unaffected: 6.18.33 , ≤ 6.18.* (semver) Unaffected: 7.0.10 , ≤ 7.0.* (semver) Unaffected: 7.1 , ≤ * (original_commit_for_fix) |
guessed | |
| Red Hat | NVIDIA for RHEL 10 |
Unaffected:
0:6.12.0-211.8.el10nv , < *
(rpm)
Unaffected: 0:6.12.0-231.12.el10nv , < * (rpm) cpe:/a:redhat:enterprise_linux_nvidia:10::el10 |
||
| Red Hat | Red Hat Enterprise Linux 10 |
Unaffected:
0:6.12.0-211.16.1.el10_2 , < *
(rpm)
cpe:/o:redhat:enterprise_linux:10.2 |
||
| Red Hat | Red Hat Enterprise Linux 10.0 Extended Update Support |
Unaffected:
0:6.12.0-55.75.1.el10_0 , < *
(rpm)
cpe:/o:redhat:enterprise_linux_eus:10.0 |
||
| Red Hat | Red Hat Enterprise Linux 8 |
Unaffected:
0:4.18.0-553.125.1.rt7.466.el8_10 , < *
(rpm)
cpe:/a:redhat:enterprise_linux:8::nfv |
||
| Red Hat | Red Hat Enterprise Linux 8 |
Unaffected:
0:4.18.0-553.125.1.el8_10 , < *
(rpm)
cpe:/o:redhat:enterprise_linux:8 |
||
| Red Hat | Red Hat Enterprise Linux 8 |
cpe:/o:redhat:enterprise_linux:8
|
||
| Red Hat | Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support |
Unaffected:
0:4.18.0-305.192.1.el8_4 , < *
(rpm)
cpe:/o:redhat:rhel_aus:8.4 |
||
| Red Hat | Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On |
Unaffected:
0:4.18.0-305.192.1.el8_4 , < *
(rpm)
cpe:/o:redhat:rhel_eus_long_life:8.4 |
||
| Red Hat | Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support |
Unaffected:
0:4.18.0-372.193.1.el8_6 , < *
(rpm)
cpe:/o:redhat:rhel_aus:8.6 |
||
| Red Hat | Red Hat Enterprise Linux 8.6 Telecommunications Update Service |
Unaffected:
0:4.18.0-372.193.1.el8_6 , < *
(rpm)
cpe:/o:redhat:rhel_tus:8.6 |
||
| Red Hat | Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions |
Unaffected:
0:4.18.0-372.193.1.el8_6 , < *
(rpm)
cpe:/o:redhat:rhel_e4s:8.6 |
||
| Red Hat | Red Hat Enterprise Linux 8.8 Telecommunications Update Service |
Unaffected:
0:4.18.0-477.143.1.el8_8 , < *
(rpm)
cpe:/o:redhat:rhel_tus:8.8 |
||
| Red Hat | Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions |
Unaffected:
0:4.18.0-477.143.1.el8_8 , < *
(rpm)
cpe:/o:redhat:rhel_e4s:8.8 |
||
| Red Hat | Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions |
cpe:/o:redhat:rhel_e4s:8.8
|
||
| Red Hat | Red Hat Enterprise Linux 9 |
Unaffected:
0:5.14.0-687.10.1.el9_8 , < *
(rpm)
cpe:/a:redhat:enterprise_linux:9 cpe:/o:redhat:enterprise_linux:9 |
||
| Red Hat | Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions |
Unaffected:
0:5.14.0-70.180.1.el9_0 , < *
(rpm)
cpe:/a:redhat:rhel_e4s:9.0 |
||
| Red Hat | Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions |
Unaffected:
0:5.14.0-70.180.1.rt21.252.el9_0 , < *
(rpm)
cpe:/a:redhat:rhel_e4s:9.0::nfv |
||
| Red Hat | Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions |
Unaffected:
0:5.14.0-284.172.1.el9_2 , < *
(rpm)
cpe:/a:redhat:rhel_e4s:9.2 |
||
| Red Hat | Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions |
Unaffected:
0:5.14.0-284.172.1.rt14.457.el9_2 , < *
(rpm)
cpe:/a:redhat:rhel_e4s:9.2::nfv |
||
| Red Hat | Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions |
cpe:/o:redhat:rhel_e4s:9.2
|
||
| Red Hat | Red Hat Enterprise Linux 9.4 Extended Update Support |
Unaffected:
0:5.14.0-427.126.1.el9_4 , < *
(rpm)
cpe:/a:redhat:rhel_eus:9.4 |
||
| Red Hat | Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions |
cpe:/o:redhat:rhel_e4s:9.4
|
||
| Red Hat | Red Hat Enterprise Linux 9.6 Extended Update Support |
Unaffected:
0:5.14.0-570.116.1.el9_6 , < *
(rpm)
cpe:/a:redhat:rhel_eus:9.6 |
||
| Red Hat | Red Hat Enterprise Linux 9.6 Extended Update Support |
cpe:/o:redhat:rhel_eus:9.6
|
||
| Red Hat | Red Hat OpenShift Container Platform 4.12 |
Unaffected:
412.86.202605271418-0 , < *
(rpm)
cpe:/a:redhat:openshift:4.12::el8 |
||
| Red Hat | Red Hat OpenShift Container Platform 4.13 |
Unaffected:
413.92.202605271328-0 , < *
(rpm)
cpe:/a:redhat:openshift:4.13::el9 |
||
| Red Hat | Red Hat OpenShift Container Platform 4.14 |
Unaffected:
414.92.202606231112-0 , < *
(rpm)
cpe:/a:redhat:openshift:4.14::el9 |
||
| Red Hat | Red Hat OpenShift Container Platform 4.15 |
Unaffected:
415.92.202606030318-0 , < *
(rpm)
cpe:/a:redhat:openshift:4.15::el9 |
||
| Red Hat | Red Hat OpenShift Container Platform 4.16 |
Unaffected:
416.94.202605200242-0 , < *
(rpm)
Unaffected: 416.94.202606051757-0 , < * (rpm) cpe:/a:redhat:openshift:4.16::el9 |
||
| Red Hat | Red Hat OpenShift Container Platform 4.17 |
Unaffected:
417.94.202606250942-0 , < *
(rpm)
cpe:/a:redhat:openshift:4.17::el9 |
||
| Red Hat | Red Hat OpenShift Container Platform 4.18 |
Unaffected:
418.94.202605260517-0 , < *
(rpm)
cpe:/a:redhat:openshift:4.18::el9 |
||
| Red Hat | Red Hat OpenShift Container Platform 4.19 |
Unaffected:
4.19.9.6.202606031700-0 , < *
(rpm)
cpe:/a:redhat:openshift:4.19::el9 |
||
| Red Hat | Red Hat OpenShift Container Platform 4.20 |
Unaffected:
4.20.9.6.202605270908-0 , < *
(rpm)
cpe:/a:redhat:openshift:4.20::el9 |
||
| Red Hat | Red Hat OpenShift Container Platform 4.21 |
Unaffected:
0:5.14.0-570.116.1.el9_6 , < *
(rpm)
cpe:/a:redhat:openshift:4.21::el8 |
||
| Red Hat | Red Hat OpenShift Container Platform 4.21 |
Unaffected:
0:4.21.0-202605142021.p2.geab2218.assembly.stream.el10 , < *
(rpm)
cpe:/a:redhat:openshift:4.21::el8 |
||
| Red Hat | Red Hat OpenShift Container Platform 4.21 |
Unaffected:
4.21.9.6.202606030721-0 , < *
(rpm)
cpe:/a:redhat:openshift:4.21::el9 |
||
| Red Hat | Red Hat Enterprise Linux 6 |
cpe:/o:redhat:enterprise_linux:6
|
||
| Red Hat | Red Hat Enterprise Linux 7 |
cpe:/o:redhat:enterprise_linux:7
|
||
| Siemens | SIMATIC S7-1500 CPU 1518-4 PN/DP MFP |
Affected:
V3.1.6 , < *
(custom)
|
guessed | |
| Siemens | SIMATIC S7-1500 CPU 1518-4 PN/DP MFP |
Affected:
V3.1.5 , < *
(custom)
|
guessed | |
| Siemens | SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP |
Affected:
V3.1.6 , < *
(custom)
|
guessed | |
| Siemens | SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP |
Affected:
V3.1.5 , < *
(custom)
|
guessed | |
| Siemens | SIPLUS S7-1500 CPU 1518-4 PN/DP MFP |
Affected:
V3.1.6 , < *
(custom)
|
guessed | |
| Siemens | SIPLUS S7-1500 CPU 1518-4 PN/DP MFP |
Affected:
V3.1.5 , < *
(custom)
|
guessed |
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2026-05-23T12:24:19.703Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"url": "http://www.openwall.com/lists/oss-security/2026/05/13/5"
},
{
"url": "http://www.openwall.com/lists/oss-security/2026/05/21/11"
},
{
"url": "http://www.openwall.com/lists/oss-security/2026/05/21/12"
},
{
"url": "http://www.openwall.com/lists/oss-security/2026/05/21/13"
}
],
"title": "CVE Program Container"
},
{
"affected": [
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux_nvidia:10::el10"
],
"defaultStatus": "affected",
"packageName": "kernel",
"product": "NVIDIA for RHEL 10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:6.12.0-211.8.el10nv",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "0:6.12.0-231.12.el10nv",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10.2"
],
"defaultStatus": "affected",
"packageName": "kernel",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:6.12.0-211.16.1.el10_2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux_eus:10.0"
],
"defaultStatus": "affected",
"packageName": "kernel",
"product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:6.12.0-55.75.1.el10_0",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:8::nfv"
],
"defaultStatus": "affected",
"packageName": "kernel-rt",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:4.18.0-553.125.1.rt7.466.el8_10",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "affected",
"packageName": "kernel",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:4.18.0-553.125.1.el8_10",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unaffected",
"packageName": "kpatch-patch",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:rhel_aus:8.4"
],
"defaultStatus": "affected",
"packageName": "kernel",
"product": "Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:4.18.0-305.192.1.el8_4",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:rhel_eus_long_life:8.4"
],
"defaultStatus": "affected",
"packageName": "kernel",
"product": "Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:4.18.0-305.192.1.el8_4",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:rhel_aus:8.6"
],
"defaultStatus": "affected",
"packageName": "kernel",
"product": "Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:4.18.0-372.193.1.el8_6",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:rhel_tus:8.6"
],
"defaultStatus": "affected",
"packageName": "kernel",
"product": "Red Hat Enterprise Linux 8.6 Telecommunications Update Service",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:4.18.0-372.193.1.el8_6",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:rhel_e4s:8.6"
],
"defaultStatus": "affected",
"packageName": "kernel",
"product": "Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:4.18.0-372.193.1.el8_6",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:rhel_tus:8.8"
],
"defaultStatus": "affected",
"packageName": "kernel",
"product": "Red Hat Enterprise Linux 8.8 Telecommunications Update Service",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:4.18.0-477.143.1.el8_8",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:rhel_e4s:8.8"
],
"defaultStatus": "affected",
"packageName": "kernel",
"product": "Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:4.18.0-477.143.1.el8_8",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:rhel_e4s:8.8"
],
"defaultStatus": "unaffected",
"packageName": "kpatch-patch",
"product": "Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:9",
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "kernel",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:5.14.0-687.10.1.el9_8",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_e4s:9.0"
],
"defaultStatus": "affected",
"packageName": "kernel",
"product": "Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:5.14.0-70.180.1.el9_0",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_e4s:9.0::nfv"
],
"defaultStatus": "affected",
"packageName": "kernel-rt",
"product": "Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:5.14.0-70.180.1.rt21.252.el9_0",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_e4s:9.2"
],
"defaultStatus": "affected",
"packageName": "kernel",
"product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:5.14.0-284.172.1.el9_2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_e4s:9.2::nfv"
],
"defaultStatus": "affected",
"packageName": "kernel-rt",
"product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:5.14.0-284.172.1.rt14.457.el9_2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:rhel_e4s:9.2"
],
"defaultStatus": "unaffected",
"packageName": "kpatch-patch",
"product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_eus:9.4"
],
"defaultStatus": "affected",
"packageName": "kernel",
"product": "Red Hat Enterprise Linux 9.4 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:5.14.0-427.126.1.el9_4",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:rhel_e4s:9.4"
],
"defaultStatus": "unaffected",
"packageName": "kpatch-patch",
"product": "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_eus:9.6"
],
"defaultStatus": "affected",
"packageName": "kernel",
"product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:5.14.0-570.116.1.el9_6",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:rhel_eus:9.6"
],
"defaultStatus": "unaffected",
"packageName": "kpatch-patch",
"product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4.12::el8"
],
"defaultStatus": "affected",
"packageName": "rhcos",
"product": "Red Hat OpenShift Container Platform 4.12",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "412.86.202605271418-0",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4.13::el9"
],
"defaultStatus": "affected",
"packageName": "rhcos",
"product": "Red Hat OpenShift Container Platform 4.13",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "413.92.202605271328-0",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4.14::el9"
],
"defaultStatus": "affected",
"packageName": "rhcos",
"product": "Red Hat OpenShift Container Platform 4.14",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "414.92.202606231112-0",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4.15::el9"
],
"defaultStatus": "affected",
"packageName": "rhcos",
"product": "Red Hat OpenShift Container Platform 4.15",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "415.92.202606030318-0",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4.16::el9"
],
"defaultStatus": "affected",
"packageName": "rhcos",
"product": "Red Hat OpenShift Container Platform 4.16",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "416.94.202605200242-0",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "416.94.202606051757-0",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4.17::el9"
],
"defaultStatus": "affected",
"packageName": "rhcos",
"product": "Red Hat OpenShift Container Platform 4.17",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "417.94.202606250942-0",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "rhcos",
"product": "Red Hat OpenShift Container Platform 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "418.94.202605260517-0",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "rhcos",
"product": "Red Hat OpenShift Container Platform 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "4.19.9.6.202606031700-0",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "rhcos",
"product": "Red Hat OpenShift Container Platform 4.20",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "4.20.9.6.202605270908-0",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4.21::el8"
],
"defaultStatus": "affected",
"packageName": "kernel",
"product": "Red Hat OpenShift Container Platform 4.21",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:5.14.0-570.116.1.el9_6",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4.21::el8"
],
"defaultStatus": "affected",
"packageName": "openshift",
"product": "Red Hat OpenShift Container Platform 4.21",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:4.21.0-202605142021.p2.geab2218.assembly.stream.el10",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4.21::el9"
],
"defaultStatus": "affected",
"packageName": "rhcos",
"product": "Red Hat OpenShift Container Platform 4.21",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "4.21.9.6.202606030721-0",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:6"
],
"defaultStatus": "unaffected",
"packageName": "kernel",
"product": "Red Hat Enterprise Linux 6",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:7"
],
"defaultStatus": "unaffected",
"packageName": "kernel",
"product": "Red Hat Enterprise Linux 7",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:7"
],
"defaultStatus": "unaffected",
"packageName": "kernel-rt",
"product": "Red Hat Enterprise Linux 7",
"vendor": "Red Hat"
}
],
"datePublic": "2026-05-13T12:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "A flaw was found in the Linux kernel\u0027s XFRM ESP-in-TCP subsystem. Unsafe in-place cryptographic processing allows a low-privileged local attacker to write arbitrary bytes into the page cache of read-only files, including sensitive system files. An attacker can exploit this to overwrite privileged binaries and gain root privileges."
}
],
"metrics": [
{
"other": {
"content": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"value": "Important"
},
"type": "Red Hat severity rating"
}
},
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-123",
"description": "Write-what-where Condition",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-24T12:07:12.485Z",
"orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"shortName": "redhat-SADP"
},
"references": [
{
"tags": [
"vdb-entry",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/security/cve/CVE-2026-46300"
},
{
"name": "RHBZ#2477015",
"tags": [
"issue-tracking",
"x_refsource_REDHAT"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477015"
},
{
"tags": [
"x_sadp-csaf-vex"
],
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-46300.json"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19540"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:33486"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHBA-2026:20032"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:21695"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:21690"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:28887"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:23233"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:20087"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:25044"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:34098"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:21656"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:23245"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:21702"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:23240"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:20299"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19569"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19705"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:20593"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:20054"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:20129"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19568"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19666"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:23470"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:20130"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:20051"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19521"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:23471"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:23469"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:24814"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:23468"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19664"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19711"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19875"
}
],
"solutions": [
{
"lang": "en",
"value": "RHSA-2026:19540: NVIDIA for RHEL 10"
},
{
"lang": "en",
"value": "RHSA-2026:33486: NVIDIA for RHEL 10"
},
{
"lang": "en",
"value": "RHBA-2026:20032: Red Hat OpenShift Container Platform 4.21"
},
{
"lang": "en",
"value": "RHSA-2026:21695: Red Hat OpenShift Container Platform 4.12"
},
{
"lang": "en",
"value": "RHSA-2026:21690: Red Hat OpenShift Container Platform 4.13"
},
{
"lang": "en",
"value": "RHSA-2026:28887: Red Hat OpenShift Container Platform 4.14"
},
{
"lang": "en",
"value": "RHSA-2026:23233: Red Hat OpenShift Container Platform 4.15"
},
{
"lang": "en",
"value": "RHSA-2026:20087: Red Hat OpenShift Container Platform 4.16"
},
{
"lang": "en",
"value": "RHSA-2026:25044: Red Hat OpenShift Container Platform 4.16"
},
{
"lang": "en",
"value": "RHSA-2026:34098: Red Hat OpenShift Container Platform 4.17"
},
{
"lang": "en",
"value": "RHSA-2026:21656: Red Hat OpenShift Container Platform 4.18"
},
{
"lang": "en",
"value": "RHSA-2026:23245: Red Hat OpenShift Container Platform 4.19"
},
{
"lang": "en",
"value": "RHSA-2026:21702: Red Hat OpenShift Container Platform 4.20"
},
{
"lang": "en",
"value": "RHSA-2026:23240: Red Hat OpenShift Container Platform 4.21"
},
{
"lang": "en",
"value": "RHSA-2026:20299: Red Hat Enterprise Linux AppStream EUS (v. 10.0), Red Hat Enterprise Linux BaseOS EUS (v. 10.0), Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0), Red Hat Enterprise Linux Real Time EUS (v. 10.0), Red Hat Enterprise Linux Real Time for NFV EUS (v. 10.0)"
},
{
"lang": "en",
"value": "RHSA-2026:19569: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux BaseOS (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10), Red Hat Enterprise Linux Real Time (v. 10), Red Hat Enterprise Linux Real Time for NFV (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:19705: Red Hat Enterprise Linux AppStream E4S (v.9.0), Red Hat Enterprise Linux BaseOS E4S (v.9.0)"
},
{
"lang": "en",
"value": "RHSA-2026:20593: Red Hat Enterprise Linux AppStream E4S (v.9.2), Red Hat Enterprise Linux BaseOS E4S (v.9.2)"
},
{
"lang": "en",
"value": "RHSA-2026:20054: Red Hat CodeReady Linux Builder EUS (v.9.4), Red Hat Enterprise Linux AppStream EUS (v.9.4), Red Hat Enterprise Linux BaseOS EUS (v.9.4), Red Hat Enterprise Linux Real Time EUS (v.9.4), Red Hat Enterprise Linux Real Time for NFV EUS (v.9.4)"
},
{
"lang": "en",
"value": "RHSA-2026:20129: Red Hat CodeReady Linux Builder EUS (v.9.6), Red Hat Enterprise Linux AppStream EUS (v.9.6), Red Hat Enterprise Linux BaseOS EUS (v.9.6), Red Hat Enterprise Linux Real Time EUS (v.9.6), Red Hat Enterprise Linux Real Time for NFV EUS (v.9.6)"
},
{
"lang": "en",
"value": "RHSA-2026:19568: Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux BaseOS (v. 9), Red Hat Enterprise Linux CodeReady Linux Builder (v. 9), Red Hat Enterprise Linux Real Time (v. 9), Red Hat Enterprise Linux Real Time for NFV (v. 9)"
},
{
"lang": "en",
"value": "RHSA-2026:19666: Red Hat Enterprise Linux BaseOS (v. 8), Red Hat Enterprise Linux CRB (v. 8)"
},
{
"lang": "en",
"value": "RHSA-2026:23470: Red Hat Enterprise Linux BaseOS (v. 8)"
},
{
"lang": "en",
"value": "RHSA-2026:20130: Red Hat Enterprise Linux BaseOS AUS (v.8.4), Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4)"
},
{
"lang": "en",
"value": "RHSA-2026:20051: Red Hat Enterprise Linux BaseOS AUS (v.8.6), Red Hat Enterprise Linux BaseOS E4S (v.8.6), Red Hat Enterprise Linux BaseOS TUS (v.8.6)"
},
{
"lang": "en",
"value": "RHSA-2026:19521: Red Hat Enterprise Linux BaseOS E4S (v.8.8), Red Hat Enterprise Linux BaseOS TUS (v.8.8)"
},
{
"lang": "en",
"value": "RHSA-2026:23471: Red Hat Enterprise Linux BaseOS E4S (v.8.8)"
},
{
"lang": "en",
"value": "RHSA-2026:23469: Red Hat Enterprise Linux BaseOS E4S (v.9.2)"
},
{
"lang": "en",
"value": "RHSA-2026:24814: Red Hat Enterprise Linux BaseOS E4S (v.9.4)"
},
{
"lang": "en",
"value": "RHSA-2026:23468: Red Hat Enterprise Linux BaseOS EUS (v.9.6)"
},
{
"lang": "en",
"value": "RHSA-2026:19664: Red Hat Enterprise Linux NFV (v. 8), Red Hat Enterprise Linux RT (v. 8)"
},
{
"lang": "en",
"value": "RHSA-2026:19711: Red Hat Enterprise Linux NFV E4S (v.9.0), Red Hat Enterprise Linux Real Time E4S (v.9.0)"
},
{
"lang": "en",
"value": "RHSA-2026:19875: Red Hat Enterprise Linux Real Time E4S (v.9.2), Red Hat Enterprise Linux Real Time for NFV E4S (v.9.2)"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-05-13T13:28:21.270Z",
"value": "Reported to Red Hat."
},
{
"lang": "en",
"time": "2026-05-13T12:00:00.000Z",
"value": "Made public."
}
],
"title": "kernel: \"Fragnesia\" is a variant of Dirty Frag vulnerability in the ESP/XFRM leading to Local Privilege Escalation (LPE) vulnerability in the Linux kernel",
"workarounds": [
{
"lang": "en",
"value": "See the security bulletin for a detailed mitigation procedure."
}
],
"x_adpType": "supplier",
"x_generator": {
"engine": "sadp-cli 1.0.0"
}
},
{
"affected": [
{
"defaultStatus": "unknown",
"product": "SIMATIC S7-1500 CPU 1518-4 PN/DP MFP",
"vendor": "Siemens",
"versions": [
{
"lessThan": "*",
"status": "affected",
"version": "V3.1.6",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SIMATIC S7-1500 CPU 1518-4 PN/DP MFP",
"vendor": "Siemens",
"versions": [
{
"lessThan": "*",
"status": "affected",
"version": "V3.1.5",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SIMATIC S7-1500 CPU 1518-4 PN/DP MFP",
"vendor": "Siemens",
"versions": [
{
"lessThan": "*",
"status": "affected",
"version": "V3.1.6",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SIMATIC S7-1500 CPU 1518-4 PN/DP MFP",
"vendor": "Siemens",
"versions": [
{
"lessThan": "*",
"status": "affected",
"version": "V3.1.5",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP",
"vendor": "Siemens",
"versions": [
{
"lessThan": "*",
"status": "affected",
"version": "V3.1.6",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP",
"vendor": "Siemens",
"versions": [
{
"lessThan": "*",
"status": "affected",
"version": "V3.1.5",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP",
"vendor": "Siemens",
"versions": [
{
"lessThan": "*",
"status": "affected",
"version": "V3.1.6",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP",
"vendor": "Siemens",
"versions": [
{
"lessThan": "*",
"status": "affected",
"version": "V3.1.5",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SIPLUS S7-1500 CPU 1518-4 PN/DP MFP",
"vendor": "Siemens",
"versions": [
{
"lessThan": "*",
"status": "affected",
"version": "V3.1.6",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SIPLUS S7-1500 CPU 1518-4 PN/DP MFP",
"vendor": "Siemens",
"versions": [
{
"lessThan": "*",
"status": "affected",
"version": "V3.1.5",
"versionType": "custom"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-07-14T12:49:18.977Z",
"orgId": "0b142b55-0307-4c5a-b3c9-f314f3fb7c5e",
"shortName": "siemens-SADP"
},
"references": [
{
"url": "https://cert-portal.siemens.com/productcert/html/ssa-082556.html"
},
{
"url": "https://cert-portal.siemens.com/productcert/html/ssa-019113.html"
}
],
"x_adpType": "supplier"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Linux",
"programFiles": [
"net/core/skbuff.c"
],
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"versions": [
{
"lessThan": "3599e6b3cc1ada96883d496a50a210d3afbb6987",
"status": "affected",
"version": "cef401de7be8c4e155c6746bfccf721a4fa5fab9",
"versionType": "git"
},
{
"lessThan": "2f2b16022a2e10ca7bccfb98db5ed2ec0f72641c",
"status": "affected",
"version": "cef401de7be8c4e155c6746bfccf721a4fa5fab9",
"versionType": "git"
},
{
"lessThan": "9d3e5fd19fe1063bf607219e8562fbd567b8e8d5",
"status": "affected",
"version": "cef401de7be8c4e155c6746bfccf721a4fa5fab9",
"versionType": "git"
},
{
"lessThan": "78bf6b6bb19541d19fbda6242e7cfe2c682763c0",
"status": "affected",
"version": "cef401de7be8c4e155c6746bfccf721a4fa5fab9",
"versionType": "git"
},
{
"lessThan": "760e1addc27ba1a7beb4a0a7e8b3e9ec49e7a34e",
"status": "affected",
"version": "cef401de7be8c4e155c6746bfccf721a4fa5fab9",
"versionType": "git"
},
{
"lessThan": "3bd9e113d50034db99d7ef69fd8e5242d15e414a",
"status": "affected",
"version": "cef401de7be8c4e155c6746bfccf721a4fa5fab9",
"versionType": "git"
},
{
"lessThan": "3884358a9286b17f389a72b1426fc4547c23c111",
"status": "affected",
"version": "cef401de7be8c4e155c6746bfccf721a4fa5fab9",
"versionType": "git"
},
{
"lessThan": "f84eca5817390257cef78013d0112481c503b4a3",
"status": "affected",
"version": "cef401de7be8c4e155c6746bfccf721a4fa5fab9",
"versionType": "git"
}
]
},
{
"defaultStatus": "affected",
"product": "Linux",
"programFiles": [
"net/core/skbuff.c"
],
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"versions": [
{
"status": "affected",
"version": "3.9"
},
{
"lessThan": "3.9",
"status": "unaffected",
"version": "0",
"versionType": "semver"
},
{
"lessThanOrEqual": "5.10.*",
"status": "unaffected",
"version": "5.10.257",
"versionType": "semver"
},
{
"lessThanOrEqual": "5.15.*",
"status": "unaffected",
"version": "5.15.208",
"versionType": "semver"
},
{
"lessThanOrEqual": "6.1.*",
"status": "unaffected",
"version": "6.1.174",
"versionType": "semver"
},
{
"lessThanOrEqual": "6.6.*",
"status": "unaffected",
"version": "6.6.141",
"versionType": "semver"
},
{
"lessThanOrEqual": "6.12.*",
"status": "unaffected",
"version": "6.12.91",
"versionType": "semver"
},
{
"lessThanOrEqual": "6.18.*",
"status": "unaffected",
"version": "6.18.33",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.0.*",
"status": "unaffected",
"version": "7.0.10",
"versionType": "semver"
},
{
"lessThanOrEqual": "*",
"status": "unaffected",
"version": "7.1",
"versionType": "original_commit_for_fix"
}
]
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "5.10.257",
"versionStartIncluding": "3.9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "5.15.208",
"versionStartIncluding": "3.9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "6.1.174",
"versionStartIncluding": "3.9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "6.6.141",
"versionStartIncluding": "3.9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "6.12.91",
"versionStartIncluding": "3.9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "6.18.33",
"versionStartIncluding": "3.9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "7.0.10",
"versionStartIncluding": "3.9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "7.1",
"versionStartIncluding": "3.9",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: skbuff: preserve shared-frag marker during coalescing\n\nskb_try_coalesce() can attach paged frags from @from to @to. If @from\nhas SKBFL_SHARED_FRAG set, the resulting @to skb can contain the same\nexternally-owned or page-cache-backed frags, but the shared-frag marker\nis currently lost.\n\nThat breaks the invariant relied on by later in-place writers. In\nparticular, ESP input checks skb_has_shared_frag() before deciding\nwhether an uncloned nonlinear skb can skip skb_cow_data(). If TCP\nreceive coalescing has moved shared frags into an unmarked skb, ESP can\nsee skb_has_shared_frag() as false and decrypt in place over page-cache\nbacked frags.\n\nPropagate SKBFL_SHARED_FRAG when skb_try_coalesce() transfers paged\nfrags. The tailroom copy path does not need the marker because it copies\nbytes into @to\u0027s linear data rather than transferring frag descriptors."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"scenarios": [
{
"lang": "en",
"value": "AV:L - The corruptible shared-frag condition only arises from local page splicing (sendfile/vmsplice/MSG_SPLICE_PAGES); NIC-received packets never carry SKBFL_SHARED_FRAG, and the skb must reach ESP input via loopback/local SA, so a local account is required.\nAC:L - The attacker controls the spliced file pages, the ESP key and payload, and the packet sizes/timing that drive coalescing on loopback, making the marker loss and in-place decrypt reliably reproducible.\nPR:L - An unprivileged user can splice readable file pages and obtain CAP_NET_ADMIN to install xfrm SAs/policies inside a user+network namespace (unshare -Urn); the global page cache is still corrupted from there.\nUI:N - The attacker performs the splice, IPsec setup, and packet delivery entirely on its own; no victim action is needed to trigger the in-place decrypt over shared frags.\nS:U - The corruption stays within the kernel\u0027s memory authority as a standard local memory-corruption/privilege-escalation primitive, with no crossing of a VM/IOMMU boundary.\nC:H - The write primitive into page-cache memory (e.g., overwriting a shared library\u0027s cached code) can be leveraged into code execution and arbitrary memory disclosure.\nI:H - ESP decrypts attacker-controlled plaintext in place over page-cache-backed pages, yielding an arbitrary write of chosen content into globally-shared file/code memory.\nA:H - Overwriting page-cache pages backing files or executable code corrupts shared kernel state and readily causes oopses, crashes, and system instability."
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-05T12:31:05.381Z",
"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"shortName": "Linux"
},
"references": [
{
"url": "https://git.kernel.org/stable/c/3599e6b3cc1ada96883d496a50a210d3afbb6987"
},
{
"url": "https://git.kernel.org/stable/c/2f2b16022a2e10ca7bccfb98db5ed2ec0f72641c"
},
{
"url": "https://git.kernel.org/stable/c/9d3e5fd19fe1063bf607219e8562fbd567b8e8d5"
},
{
"url": "https://git.kernel.org/stable/c/78bf6b6bb19541d19fbda6242e7cfe2c682763c0"
},
{
"url": "https://git.kernel.org/stable/c/760e1addc27ba1a7beb4a0a7e8b3e9ec49e7a34e"
},
{
"url": "https://git.kernel.org/stable/c/3bd9e113d50034db99d7ef69fd8e5242d15e414a"
},
{
"url": "https://git.kernel.org/stable/c/3884358a9286b17f389a72b1426fc4547c23c111"
},
{
"url": "https://git.kernel.org/stable/c/f84eca5817390257cef78013d0112481c503b4a3"
}
],
"title": "net: skbuff: preserve shared-frag marker during coalescing",
"x_generator": {
"engine": "bippy-1.2.0"
}
}
},
"cveMetadata": {
"assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"assignerShortName": "Linux",
"cveId": "CVE-2026-46300",
"datePublished": "2026-05-23T11:44:02.231Z",
"dateReserved": "2026-05-13T15:03:33.111Z",
"dateUpdated": "2026-08-24T12:07:12.485Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2026-46300",
"date": "2026-08-24",
"epss": "0.09481",
"percentile": "0.95045"
},
"microsoft_vex": {
"current_release_date": "2026-06-09T14:41:03.000Z",
"cve": "CVE-2026-46300",
"id": "msrc_CVE-2026-46300",
"initial_release_date": "2026-05-02T00:00:00.000Z",
"product_status:fixed": "1",
"product_status:known_affected": "1",
"source": "Microsoft CSAF VEX",
"status": "final",
"title": "net: skbuff: preserve shared-frag marker during coalescing",
"url": "https://msrc.microsoft.com/csaf/vex/2026/msrc_cve-2026-46300.json",
"version": "3"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2026-46300\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2026-05-23T12:17:02.660\",\"lastModified\":\"2026-07-23T11:10:00.120\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\nnet: skbuff: preserve shared-frag marker during coalescing\\n\\nskb_try_coalesce() can attach paged frags from @from to @to. If @from\\nhas SKBFL_SHARED_FRAG set, the resulting @to skb can contain the same\\nexternally-owned or page-cache-backed frags, but the shared-frag marker\\nis currently lost.\\n\\nThat breaks the invariant relied on by later in-place writers. In\\nparticular, ESP input checks skb_has_shared_frag() before deciding\\nwhether an uncloned nonlinear skb can skip skb_cow_data(). If TCP\\nreceive coalescing has moved shared frags into an unmarked skb, ESP can\\nsee skb_has_shared_frag() as false and decrypt in place over page-cache\\nbacked frags.\\n\\nPropagate SKBFL_SHARED_FRAG when skb_try_coalesce() transfers paged\\nfrags. The tailroom copy path does not need the marker because it copies\\nbytes into @to\u0027s linear data rather than transferring frag descriptors.\"},{\"lang\":\"es\",\"value\":\"En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\\n\\nnet: skbuff: preservar el marcador de fragmento compartido durante la coalescencia\\n\\nskb_try_coalesce() puede adjuntar fragmentos paginados de @from a @to. Si @from tiene SKBFL_SHARED_FRAG establecido, el skb @to resultante puede contener los mismos fragmentos de propiedad externa o respaldados por la cach\u00e9 de p\u00e1ginas, pero el marcador de fragmento compartido se pierde actualmente.\\n\\nEso rompe el invariante en el que conf\u00edan los escritores posteriores in situ. En particular, la entrada de ESP comprueba skb_has_shared_frag() antes de decidir si un skb no lineal no clonado puede omitir skb_cow_data(). Si la coalescencia de recepci\u00f3n TCP ha movido fragmentos compartidos a un skb sin marcar, ESP puede ver skb_has_shared_frag() como falso y descifrar in situ sobre fragmentos respaldados por la cach\u00e9 de p\u00e1ginas.\\n\\nPropagar SKBFL_SHARED_FRAG cuando skb_try_coalesce() transfiere fragmentos paginados. La ruta de copia del espacio de cola no necesita el marcador porque copia bytes en los datos lineales de @to en lugar de transferir descriptores de fragmentos.\"}],\"affected\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"affectedData\":[{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"unaffected\",\"programFiles\":[\"net/core/skbuff.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"cef401de7be8c4e155c6746bfccf721a4fa5fab9\",\"lessThan\":\"3599e6b3cc1ada96883d496a50a210d3afbb6987\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"cef401de7be8c4e155c6746bfccf721a4fa5fab9\",\"lessThan\":\"2f2b16022a2e10ca7bccfb98db5ed2ec0f72641c\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"cef401de7be8c4e155c6746bfccf721a4fa5fab9\",\"lessThan\":\"9d3e5fd19fe1063bf607219e8562fbd567b8e8d5\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"cef401de7be8c4e155c6746bfccf721a4fa5fab9\",\"lessThan\":\"78bf6b6bb19541d19fbda6242e7cfe2c682763c0\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"cef401de7be8c4e155c6746bfccf721a4fa5fab9\",\"lessThan\":\"760e1addc27ba1a7beb4a0a7e8b3e9ec49e7a34e\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"cef401de7be8c4e155c6746bfccf721a4fa5fab9\",\"lessThan\":\"3bd9e113d50034db99d7ef69fd8e5242d15e414a\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"cef401de7be8c4e155c6746bfccf721a4fa5fab9\",\"lessThan\":\"3884358a9286b17f389a72b1426fc4547c23c111\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"cef401de7be8c4e155c6746bfccf721a4fa5fab9\",\"lessThan\":\"f84eca5817390257cef78013d0112481c503b4a3\",\"versionType\":\"git\",\"status\":\"affected\"}]},{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"affected\",\"programFiles\":[\"net/core/skbuff.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"3.9\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"3.9\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.10.257\",\"lessThanOrEqual\":\"5.10.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.15.208\",\"lessThanOrEqual\":\"5.15.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.1.174\",\"lessThanOrEqual\":\"6.1.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.6.141\",\"lessThanOrEqual\":\"6.6.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.12.91\",\"lessThanOrEqual\":\"6.12.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.18.33\",\"lessThanOrEqual\":\"6.18.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"7.0.10\",\"lessThanOrEqual\":\"7.0.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"7.1\",\"lessThanOrEqual\":\"*\",\"versionType\":\"original_commit_for_fix\",\"status\":\"unaffected\"}]}]},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"affectedData\":[{\"vendor\":\"Red Hat\",\"product\":\"NVIDIA for RHEL 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"kernel\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux_nvidia:10::el10\"],\"versions\":[{\"version\":\"0:6.12.0-211.8.el10nv\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"0:6.12.0-231.12.el10nv\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"kernel\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10.2\"],\"versions\":[{\"version\":\"0:6.12.0-211.16.1.el10_2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10.0 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"kernel\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux_eus:10.0\"],\"versions\":[{\"version\":\"0:6.12.0-55.75.1.el10_0\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"kernel-rt\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:8::nfv\"],\"versions\":[{\"version\":\"0:4.18.0-553.125.1.rt7.466.el8_10\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"kernel\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"],\"versions\":[{\"version\":\"0:4.18.0-553.125.1.el8_10\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"kpatch-patch\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"kernel\",\"cpes\":[\"cpe:/o:redhat:rhel_aus:8.4\"],\"versions\":[{\"version\":\"0:4.18.0-305.192.1.el8_4\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"kernel\",\"cpes\":[\"cpe:/o:redhat:rhel_eus_long_life:8.4\"],\"versions\":[{\"version\":\"0:4.18.0-305.192.1.el8_4\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"kernel\",\"cpes\":[\"cpe:/o:redhat:rhel_aus:8.6\"],\"versions\":[{\"version\":\"0:4.18.0-372.193.1.el8_6\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.6 Telecommunications Update Service\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"kernel\",\"cpes\":[\"cpe:/o:redhat:rhel_tus:8.6\"],\"versions\":[{\"version\":\"0:4.18.0-372.193.1.el8_6\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"kernel\",\"cpes\":[\"cpe:/o:redhat:rhel_e4s:8.6\"],\"versions\":[{\"version\":\"0:4.18.0-372.193.1.el8_6\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.8 Telecommunications Update Service\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"kernel\",\"cpes\":[\"cpe:/o:redhat:rhel_tus:8.8\"],\"versions\":[{\"version\":\"0:4.18.0-477.143.1.el8_8\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"kernel\",\"cpes\":[\"cpe:/o:redhat:rhel_e4s:8.8\"],\"versions\":[{\"version\":\"0:4.18.0-477.143.1.el8_8\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"kpatch-patch\",\"cpes\":[\"cpe:/o:redhat:rhel_e4s:8.8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"kernel\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:9\",\"cpe:/o:redhat:enterprise_linux:9\"],\"versions\":[{\"version\":\"0:5.14.0-687.10.1.el9_8\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"kernel\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:9.0\"],\"versions\":[{\"version\":\"0:5.14.0-70.180.1.el9_0\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"kernel-rt\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:9.0::nfv\"],\"versions\":[{\"version\":\"0:5.14.0-70.180.1.rt21.252.el9_0\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"kernel\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:9.2\"],\"versions\":[{\"version\":\"0:5.14.0-284.172.1.el9_2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"kernel-rt\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:9.2::nfv\"],\"versions\":[{\"version\":\"0:5.14.0-284.172.1.rt14.457.el9_2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"kpatch-patch\",\"cpes\":[\"cpe:/o:redhat:rhel_e4s:9.2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.4 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"kernel\",\"cpes\":[\"cpe:/a:redhat:rhel_eus:9.4\"],\"versions\":[{\"version\":\"0:5.14.0-427.126.1.el9_4\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"kpatch-patch\",\"cpes\":[\"cpe:/o:redhat:rhel_e4s:9.4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.6 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"kernel\",\"cpes\":[\"cpe:/a:redhat:rhel_eus:9.6\"],\"versions\":[{\"version\":\"0:5.14.0-570.116.1.el9_6\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.6 Extended Update Support\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"kpatch-patch\",\"cpes\":[\"cpe:/o:redhat:rhel_eus:9.6\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.12\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhcos\",\"cpes\":[\"cpe:/a:redhat:openshift:4.12::el8\"],\"versions\":[{\"version\":\"412.86.202605271418-0\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.13\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhcos\",\"cpes\":[\"cpe:/a:redhat:openshift:4.13::el9\"],\"versions\":[{\"version\":\"413.92.202605271328-0\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.14\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhcos\",\"cpes\":[\"cpe:/a:redhat:openshift:4.14::el9\"],\"versions\":[{\"version\":\"414.92.202606231112-0\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.15\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhcos\",\"cpes\":[\"cpe:/a:redhat:openshift:4.15::el9\"],\"versions\":[{\"version\":\"415.92.202606030318-0\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.16\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhcos\",\"cpes\":[\"cpe:/a:redhat:openshift:4.16::el9\"],\"versions\":[{\"version\":\"416.94.202605200242-0\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"416.94.202606051757-0\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.17\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhcos\",\"cpes\":[\"cpe:/a:redhat:openshift:4.17::el9\"],\"versions\":[{\"version\":\"417.94.202606250942-0\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhcos\",\"cpes\":[\"cpe:/a:redhat:openshift:4.18::el9\"],\"versions\":[{\"version\":\"418.94.202605260517-0\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhcos\",\"cpes\":[\"cpe:/a:redhat:openshift:4.19::el9\"],\"versions\":[{\"version\":\"4.19.9.6.202606031700-0\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.20\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhcos\",\"cpes\":[\"cpe:/a:redhat:openshift:4.20::el9\"],\"versions\":[{\"version\":\"4.20.9.6.202605270908-0\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.21\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"kernel\",\"cpes\":[\"cpe:/a:redhat:openshift:4.21::el8\"],\"versions\":[{\"version\":\"0:5.14.0-570.116.1.el9_6\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.21\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift\",\"cpes\":[\"cpe:/a:redhat:openshift:4.21::el8\"],\"versions\":[{\"version\":\"0:4.21.0-202605142021.p2.geab2218.assembly.stream.el10\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.21\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhcos\",\"cpes\":[\"cpe:/a:redhat:openshift:4.21::el9\"],\"versions\":[{\"version\":\"4.21.9.6.202606030721-0\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 6\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"kernel\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:6\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 7\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"kernel\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:7\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 7\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"kernel-rt\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:7\"]}]},{\"source\":\"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e\",\"affectedData\":[{\"vendor\":\"Siemens\",\"product\":\"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP\",\"defaultStatus\":\"unknown\",\"versions\":[{\"version\":\"V3.1.6\",\"lessThan\":\"*\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Siemens\",\"product\":\"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP\",\"defaultStatus\":\"unknown\",\"versions\":[{\"version\":\"V3.1.5\",\"lessThan\":\"*\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Siemens\",\"product\":\"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP\",\"defaultStatus\":\"unknown\",\"versions\":[{\"version\":\"V3.1.6\",\"lessThan\":\"*\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Siemens\",\"product\":\"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP\",\"defaultStatus\":\"unknown\",\"versions\":[{\"version\":\"V3.1.5\",\"lessThan\":\"*\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Siemens\",\"product\":\"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP\",\"defaultStatus\":\"unknown\",\"versions\":[{\"version\":\"V3.1.6\",\"lessThan\":\"*\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Siemens\",\"product\":\"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP\",\"defaultStatus\":\"unknown\",\"versions\":[{\"version\":\"V3.1.5\",\"lessThan\":\"*\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Siemens\",\"product\":\"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP\",\"defaultStatus\":\"unknown\",\"versions\":[{\"version\":\"V3.1.6\",\"lessThan\":\"*\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Siemens\",\"product\":\"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP\",\"defaultStatus\":\"unknown\",\"versions\":[{\"version\":\"V3.1.5\",\"lessThan\":\"*\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Siemens\",\"product\":\"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP\",\"defaultStatus\":\"unknown\",\"versions\":[{\"version\":\"V3.1.6\",\"lessThan\":\"*\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Siemens\",\"product\":\"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP\",\"defaultStatus\":\"unknown\",\"versions\":[{\"version\":\"V3.1.5\",\"lessThan\":\"*\",\"versionType\":\"custom\",\"status\":\"affected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":7.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":5.9},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":7.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":5.9},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":7.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":5.9}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-787\"}]},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-123\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"3.9\",\"versionEndIncluding\":\"5.10.257\",\"matchCriteriaId\":\"F9A3A7BF-1E69-475E-AC2B-C86A5C85A4DC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.11\",\"versionEndExcluding\":\"5.15.208\",\"matchCriteriaId\":\"E12545D2-1AE9-4FE1-83B6-2F9BD440AA95\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.16\",\"versionEndExcluding\":\"6.1.174\",\"matchCriteriaId\":\"8190F4E2-90A8-4343-8E30-95288912FFD1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.2\",\"versionEndExcluding\":\"6.6.141\",\"matchCriteriaId\":\"97A9FFFA-22BB-4D5C-9790-5A2286E392F7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.7\",\"versionEndExcluding\":\"6.12.91\",\"matchCriteriaId\":\"C918746B-DE6F-448F-A93E-A04C5481688D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.13\",\"versionEndExcluding\":\"6.18.33\",\"matchCriteriaId\":\"96D99E49-380D-43AB-BDBA-25C3AD018A9C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.19\",\"versionEndExcluding\":\"7.0.10\",\"matchCriteriaId\":\"A13475D2-59BF-4716-94B5-7C1D239A2CF4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:7.1:rc1:*:*:*:*:*:*\",\"matchCriteriaId\":\"B1EF7059-E670-45F4-B422-54C40FA86390\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:7.1:rc2:*:*:*:*:*:*\",\"matchCriteriaId\":\"0D38F0BF-A728-4133-A358-D44A2F7EE6D6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:7.1:rc3:*:*:*:*:*:*\",\"matchCriteriaId\":\"EC732D08-5F7B-46D9-B154-E60C7F4F0A97\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:7.1:rc4:*:*:*:*:*:*\",\"matchCriteriaId\":\"E5910A9D-F60A-409A-B486-FE66BFEBA9B9\"}]}]}],\"references\":[{\"url\":\"https://git.kernel.org/stable/c/2f2b16022a2e10ca7bccfb98db5ed2ec0f72641c\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/3599e6b3cc1ada96883d496a50a210d3afbb6987\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/3884358a9286b17f389a72b1426fc4547c23c111\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/3bd9e113d50034db99d7ef69fd8e5242d15e414a\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/760e1addc27ba1a7beb4a0a7e8b3e9ec49e7a34e\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/78bf6b6bb19541d19fbda6242e7cfe2c682763c0\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/9d3e5fd19fe1063bf607219e8562fbd567b8e8d5\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/f84eca5817390257cef78013d0112481c503b4a3\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"http://www.openwall.com/lists/oss-security/2026/05/13/5\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\"]},{\"url\":\"http://www.openwall.com/lists/oss-security/2026/05/21/11\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\"]},{\"url\":\"http://www.openwall.com/lists/oss-security/2026/05/21/12\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\"]},{\"url\":\"http://www.openwall.com/lists/oss-security/2026/05/21/13\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\"]},{\"url\":\"https://access.redhat.com/errata/RHBA-2026:20032\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19521\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19540\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19568\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19569\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19664\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19666\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19705\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19711\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19875\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:20051\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:20054\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:20087\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:20129\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:20130\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:20299\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:20593\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:21656\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:21690\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:21695\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:21702\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:23233\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:23240\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:23245\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:23468\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:23469\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:23470\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:23471\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:24814\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:25044\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:28887\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:33486\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:34098\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/security/cve/CVE-2026-46300\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=2477015\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://cert-portal.siemens.com/productcert/html/ssa-019113.html\",\"source\":\"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e\"},{\"url\":\"https://cert-portal.siemens.com/productcert/html/ssa-082556.html\",\"source\":\"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e\"},{\"url\":\"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-46300.json\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"}]}}",
"redhat_vex": {
"aggregate_severity": "Important",
"current_release_date": "2026-08-21T12:22:57+00:00",
"cve": "CVE-2026-46300",
"id": "CVE-2026-46300",
"initial_release_date": "2026-05-13T12:00:00+00:00",
"product_status:fixed": "2874",
"product_status:known_not_affected": "42",
"source": "Red Hat CSAF VEX",
"status": "final",
"title": "kernel: \"Fragnesia\" is a variant of Dirty Frag vulnerability in the ESP/XFRM leading to Local Privilege Escalation (LPE) vulnerability in the Linux kernel",
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-46300.json",
"version": "3"
}
}
}
SUSE-SU-2026:22402-1
Vulnerability from csaf_suse - Published: 2026-06-24 09:32 - Updated: 2026-06-24 09:32Summary
Security update for the Linux Kernel (Live Patch 19 for SUSE Linux Enterprise Micro 6.0)
Severity
Important
Notes
Title of the patch: Security update for the Linux Kernel (Live Patch 19 for SUSE Linux Enterprise Micro 6.0)
Description of the patch:
This update for the SUSE Linux Enterprise Kernel 6.4.0-42.1 fixes various security issues
The following security issues were fixed:
- CVE-2025-54518: AMD-SN-7052: CPU OP Cache Corruption (bsc#1264096).
- CVE-2026-31402: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (bsc#1261640).
- CVE-2026-31504: net: fix fanout UAF in packet_release() via NETDEV_UP race (bsc#1263088).
- CVE-2026-31694: fuse: reject oversized dirents in page cache (bsc#1263902).
- CVE-2026-43503: final dirty.frag related fixes (bsc#1266229).
- CVE-2026-46300: FragNesia attack: another xfrm/esp based local root exploit (bsc#1265224).
- CVE-2026-46323: net: gro: don't merge zcopy skbs (bsc#1268282).
- CVE-2026-46333: ptrace: slightly saner 'get_dumpable()' logic (bsc#1265384).
- net/sched: fix pedit partial COW leading to page cache (bsc#1267625).
Patchnames: SUSE-SLE-Micro-6.0-kernel-467
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
7.4 (High)
Affected products
Recommended
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-42-default-3-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-42-default-3-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
8.2 (High)
Affected products
Recommended
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-42-default-3-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-42-default-3-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-42-default-3-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-42-default-3-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.8 (High)
Affected products
Recommended
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-42-default-3-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-42-default-3-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
8.8 (High)
Affected products
Recommended
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-42-default-3-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-42-default-3-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
8.8 (High)
Affected products
Recommended
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-42-default-3-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-42-default-3-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-42-default-3-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-42-default-3-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.8 (High)
Affected products
Recommended
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-42-default-3-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-42-default-3-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
References
54 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for the Linux Kernel (Live Patch 19 for SUSE Linux Enterprise Micro 6.0)",
"title": "Title of the patch"
},
{
"category": "description",
"text": "\nThis update for the SUSE Linux Enterprise Kernel 6.4.0-42.1 fixes various security issues\n\nThe following security issues were fixed:\n\n- CVE-2025-54518: AMD-SN-7052: CPU OP Cache Corruption (bsc#1264096).\n- CVE-2026-31402: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (bsc#1261640).\n- CVE-2026-31504: net: fix fanout UAF in packet_release() via NETDEV_UP race (bsc#1263088).\n- CVE-2026-31694: fuse: reject oversized dirents in page cache (bsc#1263902).\n- CVE-2026-43503: final dirty.frag related fixes (bsc#1266229).\n- CVE-2026-46300: FragNesia attack: another xfrm/esp based local root exploit (bsc#1265224).\n- CVE-2026-46323: net: gro: don\u0027t merge zcopy skbs (bsc#1268282).\n- CVE-2026-46333: ptrace: slightly saner \u0027get_dumpable()\u0027 logic (bsc#1265384).\n- net/sched: fix pedit partial COW leading to page cache (bsc#1267625).\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-SLE-Micro-6.0-kernel-467",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_22402-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2026:22402-1",
"url": "https://www.suse.com/support/update/announcement/2026/suse-su-202622402-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2026:22402-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-July/027202.html"
},
{
"category": "self",
"summary": "SUSE Bug 1261640",
"url": "https://bugzilla.suse.com/1261640"
},
{
"category": "self",
"summary": "SUSE Bug 1263088",
"url": "https://bugzilla.suse.com/1263088"
},
{
"category": "self",
"summary": "SUSE Bug 1263902",
"url": "https://bugzilla.suse.com/1263902"
},
{
"category": "self",
"summary": "SUSE Bug 1264096",
"url": "https://bugzilla.suse.com/1264096"
},
{
"category": "self",
"summary": "SUSE Bug 1265224",
"url": "https://bugzilla.suse.com/1265224"
},
{
"category": "self",
"summary": "SUSE Bug 1265384",
"url": "https://bugzilla.suse.com/1265384"
},
{
"category": "self",
"summary": "SUSE Bug 1266229",
"url": "https://bugzilla.suse.com/1266229"
},
{
"category": "self",
"summary": "SUSE Bug 1267625",
"url": "https://bugzilla.suse.com/1267625"
},
{
"category": "self",
"summary": "SUSE Bug 1268282",
"url": "https://bugzilla.suse.com/1268282"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-54518 page",
"url": "https://www.suse.com/security/cve/CVE-2025-54518/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-31402 page",
"url": "https://www.suse.com/security/cve/CVE-2026-31402/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-31504 page",
"url": "https://www.suse.com/security/cve/CVE-2026-31504/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-31694 page",
"url": "https://www.suse.com/security/cve/CVE-2026-31694/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43503 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43503/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46300 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46300/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46323 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46323/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46333 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46333/"
}
],
"title": "Security update for the Linux Kernel (Live Patch 19 for SUSE Linux Enterprise Micro 6.0)",
"tracking": {
"current_release_date": "2026-06-24T09:32:59Z",
"generator": {
"date": "2026-06-24T09:32:59Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2026:22402-1",
"initial_release_date": "2026-06-24T09:32:59Z",
"revision_history": [
{
"date": "2026-06-24T09:32:59Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "kernel-livepatch-6_4_0-42-default-3-1.1.s390x",
"product": {
"name": "kernel-livepatch-6_4_0-42-default-3-1.1.s390x",
"product_id": "kernel-livepatch-6_4_0-42-default-3-1.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "kernel-livepatch-6_4_0-42-default-3-1.1.x86_64",
"product": {
"name": "kernel-livepatch-6_4_0-42-default-3-1.1.x86_64",
"product_id": "kernel-livepatch-6_4_0-42-default-3-1.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Micro 6.0",
"product": {
"name": "SUSE Linux Micro 6.0",
"product_id": "SUSE Linux Micro 6.0",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sl-micro:6.0"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-livepatch-6_4_0-42-default-3-1.1.s390x as component of SUSE Linux Micro 6.0",
"product_id": "SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-42-default-3-1.1.s390x"
},
"product_reference": "kernel-livepatch-6_4_0-42-default-3-1.1.s390x",
"relates_to_product_reference": "SUSE Linux Micro 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-livepatch-6_4_0-42-default-3-1.1.x86_64 as component of SUSE Linux Micro 6.0",
"product_id": "SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-42-default-3-1.1.x86_64"
},
"product_reference": "kernel-livepatch-6_4_0-42-default-3-1.1.x86_64",
"relates_to_product_reference": "SUSE Linux Micro 6.0"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-54518",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-54518"
}
],
"notes": [
{
"category": "general",
"text": "Improper isolation of shared resources within the CPU operation cache on Zen 2-based products could allow an attacker to corrupt instructions executed at a different privilege level, potentially resulting in privilege escalation.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-42-default-3-1.1.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-42-default-3-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-54518",
"url": "https://www.suse.com/security/cve/CVE-2025-54518"
},
{
"category": "external",
"summary": "SUSE Bug 1264013 for CVE-2025-54518",
"url": "https://bugzilla.suse.com/1264013"
},
{
"category": "external",
"summary": "SUSE Bug 1264066 for CVE-2025-54518",
"url": "https://bugzilla.suse.com/1264066"
},
{
"category": "external",
"summary": "SUSE Bug 1264096 for CVE-2025-54518",
"url": "https://bugzilla.suse.com/1264096"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-42-default-3-1.1.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-42-default-3-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-42-default-3-1.1.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-42-default-3-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-24T09:32:59Z",
"details": "important"
}
],
"title": "CVE-2025-54518"
},
{
"cve": "CVE-2026-31402",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-31402"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnfsd: fix heap overflow in NFSv4.0 LOCK replay cache\n\nThe NFSv4.0 replay cache uses a fixed 112-byte inline buffer\n(rp_ibuf[NFSD4_REPLAY_ISIZE]) to store encoded operation responses.\nThis size was calculated based on OPEN responses and does not account\nfor LOCK denied responses, which include the conflicting lock owner as\na variable-length field up to 1024 bytes (NFS4_OPAQUE_LIMIT).\n\nWhen a LOCK operation is denied due to a conflict with an existing lock\nthat has a large owner, nfsd4_encode_operation() copies the full encoded\nresponse into the undersized replay buffer via read_bytes_from_xdr_buf()\nwith no bounds check. This results in a slab-out-of-bounds write of up\nto 944 bytes past the end of the buffer, corrupting adjacent heap memory.\n\nThis can be triggered remotely by an unauthenticated attacker with two\ncooperating NFSv4.0 clients: one sets a lock with a large owner string,\nthen the other requests a conflicting lock to provoke the denial.\n\nWe could fix this by increasing NFSD4_REPLAY_ISIZE to allow for a full\nopaque, but that would increase the size of every stateowner, when most\nlockowners are not that large.\n\nInstead, fix this by checking the encoded response length against\nNFSD4_REPLAY_ISIZE before copying into the replay buffer. If the\nresponse is too large, set rp_buflen to 0 to skip caching the replay\npayload. The status is still cached, and the client already received the\ncorrect response on the original request.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-42-default-3-1.1.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-42-default-3-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-31402",
"url": "https://www.suse.com/security/cve/CVE-2026-31402"
},
{
"category": "external",
"summary": "SUSE Bug 1261638 for CVE-2026-31402",
"url": "https://bugzilla.suse.com/1261638"
},
{
"category": "external",
"summary": "SUSE Bug 1261640 for CVE-2026-31402",
"url": "https://bugzilla.suse.com/1261640"
},
{
"category": "external",
"summary": "SUSE Bug 1265160 for CVE-2026-31402",
"url": "https://bugzilla.suse.com/1265160"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-42-default-3-1.1.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-42-default-3-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.2,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-42-default-3-1.1.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-42-default-3-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-24T09:32:59Z",
"details": "important"
}
],
"title": "CVE-2026-31402"
},
{
"cve": "CVE-2026-31504",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-31504"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: fix fanout UAF in packet_release() via NETDEV_UP race\n\n`packet_release()` has a race window where `NETDEV_UP` can re-register a\nsocket into a fanout group\u0027s `arr[]` array. The re-registration is not\ncleaned up by `fanout_release()`, leaving a dangling pointer in the fanout\narray.\n`packet_release()` does NOT zero `po-\u003enum` in its `bind_lock` section.\nAfter releasing `bind_lock`, `po-\u003enum` is still non-zero and `po-\u003eifindex`\nstill matches the bound device. A concurrent `packet_notifier(NETDEV_UP)`\nthat already found the socket in `sklist` can re-register the hook.\nFor fanout sockets, this re-registration calls `__fanout_link(sk, po)`\nwhich adds the socket back into `f-\u003earr[]` and increments `f-\u003enum_members`,\nbut does NOT increment `f-\u003esk_ref`.\n\nThe fix sets `po-\u003enum` to zero in `packet_release` while `bind_lock` is\nheld to prevent NETDEV_UP from linking, preventing the race window.\n\nThis bug was found following an additional audit with Claude Code based\non CVE-2025-38617.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-42-default-3-1.1.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-42-default-3-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-31504",
"url": "https://www.suse.com/security/cve/CVE-2026-31504"
},
{
"category": "external",
"summary": "SUSE Bug 1263085 for CVE-2026-31504",
"url": "https://bugzilla.suse.com/1263085"
},
{
"category": "external",
"summary": "SUSE Bug 1263088 for CVE-2026-31504",
"url": "https://bugzilla.suse.com/1263088"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-42-default-3-1.1.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-42-default-3-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-42-default-3-1.1.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-42-default-3-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-24T09:32:59Z",
"details": "important"
}
],
"title": "CVE-2026-31504"
},
{
"cve": "CVE-2026-31694",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-31694"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nfuse: reject oversized dirents in page cache\n\nfuse_add_dirent_to_cache() computes a serialized dirent size from the\nserver-controlled namelen field and copies the dirent into a single\npage-cache page. The existing logic only checks whether the dirent fits\nin the remaining space of the current page and advances to a fresh page\nif not. It never checks whether the dirent itself exceeds PAGE_SIZE.\n\nAs a result, a malicious FUSE server can return a dirent with\nnamelen=4095, producing a serialized record size of 4120 bytes. On 4 KiB\npage systems this causes memcpy() to overflow the cache page by 24 bytes\ninto the following kernel page.\n\nReject dirents that cannot fit in a single page before copying them into\nthe readdir cache.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-42-default-3-1.1.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-42-default-3-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-31694",
"url": "https://www.suse.com/security/cve/CVE-2026-31694"
},
{
"category": "external",
"summary": "SUSE Bug 1263901 for CVE-2026-31694",
"url": "https://bugzilla.suse.com/1263901"
},
{
"category": "external",
"summary": "SUSE Bug 1263902 for CVE-2026-31694",
"url": "https://bugzilla.suse.com/1263902"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-42-default-3-1.1.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-42-default-3-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-42-default-3-1.1.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-42-default-3-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-24T09:32:59Z",
"details": "important"
}
],
"title": "CVE-2026-31694"
},
{
"cve": "CVE-2026-43503",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43503"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: skbuff: propagate shared-frag marker through frag-transfer helpers\n\nTwo frag-transfer helpers (__pskb_copy_fclone() and skb_shift()) fail\nto propagate the SKBFL_SHARED_FRAG bit in skb_shinfo()-\u003eflags when\nmoving frags from source to destination. __pskb_copy_fclone() defers\nthe rest of the shinfo metadata to skb_copy_header() after copying\nfrag descriptors, but that helper only carries over gso_{size,segs,\ntype} and never touches skb_shinfo()-\u003eflags; skb_shift() moves frag\ndescriptors directly and leaves flags untouched. As a result, the\ndestination skb keeps a reference to the same externally-owned or\npage-cache-backed pages while reporting skb_has_shared_frag() as\nfalse.\n\nThe mismatch is harmful in any in-place writer that uses\nskb_has_shared_frag() to decide whether shared pages must be detoured\nthrough skb_cow_data(). ESP input is one such writer (esp4.c,\nesp6.c), and a single nft \u0027dup to \u003clocal\u003e\u0027 rule -- or any other\nnf_dup_ipv4() / xt_TEE caller -- is enough to land a pskb_copy()\u0027d\nskb in esp_input() with the marker stripped, letting an unprivileged\nuser write into the page cache of a root-owned read-only file via\nauthencesn-ESN stray writes.\n\nSet SKBFL_SHARED_FRAG on the destination whenever frag descriptors\nwere actually moved from the source. skb_copy() and skb_copy_expand()\nshare skb_copy_header() too but linearize all paged data into freshly\nallocated head storage and emerge with nr_frags == 0, so\nskb_has_shared_frag() returns false on its own; they need no change.\n\nThe same omission exists in skb_gro_receive() and skb_gro_receive_list().\nThe former moves the incoming skb\u0027s frag descriptors into the\naccumulator\u0027s last sub-skb via two paths (a direct frag-move loop and\nthe head_frag + memcpy path); the latter chains the incoming skb whole\nonto p\u0027s frag_list. Downstream skb_segment() reads only\nskb_shinfo(p)-\u003eflags, and skb_segment_list() reuses each sub-skb\u0027s\nshinfo as the nskb -- both p and lp must carry the marker.\n\nThe same omission also exists in tcp_clone_payload(), which builds an\nMTU probe skb by moving frag descriptors from skbs on sk_write_queue\ninto a freshly allocated nskb. The helper falls into the same family\nand warrants the same fix for consistency; no TCP TX-side in-place\nwriter is currently known to reach a user page through this gap, but\na future consumer depending on the marker would regress silently.\n\nThe same omission exists in skb_segment(): the per-iteration flag\nmerge takes only head_skb\u0027s flag, and the inner switch that rebinds\nfrag_skb to list_skb on head_skb-frags exhaustion does not fold the\nnew frag_skb\u0027s flag into nskb. Fold frag_skb\u0027s flag at both sites\nso segments drawing frags from frag_list members carry the marker.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-42-default-3-1.1.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-42-default-3-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43503",
"url": "https://www.suse.com/security/cve/CVE-2026-43503"
},
{
"category": "external",
"summary": "SUSE Bug 1265209 for CVE-2026-43503",
"url": "https://bugzilla.suse.com/1265209"
},
{
"category": "external",
"summary": "SUSE Bug 1265960 for CVE-2026-43503",
"url": "https://bugzilla.suse.com/1265960"
},
{
"category": "external",
"summary": "SUSE Bug 1266229 for CVE-2026-43503",
"url": "https://bugzilla.suse.com/1266229"
},
{
"category": "external",
"summary": "SUSE Bug 1269878 for CVE-2026-43503",
"url": "https://bugzilla.suse.com/1269878"
},
{
"category": "external",
"summary": "SUSE Bug 1270098 for CVE-2026-43503",
"url": "https://bugzilla.suse.com/1270098"
},
{
"category": "external",
"summary": "SUSE Bug 1270100 for CVE-2026-43503",
"url": "https://bugzilla.suse.com/1270100"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-42-default-3-1.1.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-42-default-3-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-42-default-3-1.1.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-42-default-3-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-24T09:32:59Z",
"details": "important"
}
],
"title": "CVE-2026-43503"
},
{
"cve": "CVE-2026-46300",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46300"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: skbuff: preserve shared-frag marker during coalescing\n\nskb_try_coalesce() can attach paged frags from @from to @to. If @from\nhas SKBFL_SHARED_FRAG set, the resulting @to skb can contain the same\nexternally-owned or page-cache-backed frags, but the shared-frag marker\nis currently lost.\n\nThat breaks the invariant relied on by later in-place writers. In\nparticular, ESP input checks skb_has_shared_frag() before deciding\nwhether an uncloned nonlinear skb can skip skb_cow_data(). If TCP\nreceive coalescing has moved shared frags into an unmarked skb, ESP can\nsee skb_has_shared_frag() as false and decrypt in place over page-cache\nbacked frags.\n\nPropagate SKBFL_SHARED_FRAG when skb_try_coalesce() transfers paged\nfrags. The tailroom copy path does not need the marker because it copies\nbytes into @to\u0027s linear data rather than transferring frag descriptors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-42-default-3-1.1.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-42-default-3-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46300",
"url": "https://www.suse.com/security/cve/CVE-2026-46300"
},
{
"category": "external",
"summary": "SUSE Bug 1265209 for CVE-2026-46300",
"url": "https://bugzilla.suse.com/1265209"
},
{
"category": "external",
"summary": "SUSE Bug 1265226 for CVE-2026-46300",
"url": "https://bugzilla.suse.com/1265226"
},
{
"category": "external",
"summary": "SUSE Bug 1265312 for CVE-2026-46300",
"url": "https://bugzilla.suse.com/1265312"
},
{
"category": "external",
"summary": "SUSE Bug 1265383 for CVE-2026-46300",
"url": "https://bugzilla.suse.com/1265383"
},
{
"category": "external",
"summary": "SUSE Bug 1265960 for CVE-2026-46300",
"url": "https://bugzilla.suse.com/1265960"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-42-default-3-1.1.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-42-default-3-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-42-default-3-1.1.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-42-default-3-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-24T09:32:59Z",
"details": "important"
}
],
"title": "CVE-2026-46300"
},
{
"cve": "CVE-2026-46323",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46323"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: gro: don\u0027t merge zcopy skbs\n\nskb_gro_receive() can currently copy frags between the source and GRO\nskb, without checking the zerocopy status, and in particular the\nSKBFL_MANAGED_FRAG_REFS flag.\n\nWhen SKBFL_MANAGED_FRAG_REFS is set, the skb doesn\u0027t hold a reference\non the pages in shinfo-\u003efrags. Appending those frags to another skb\u0027s\nfrags without fixing up the page refcount can lead to UAF.\n\nWhen either the last skb in the GRO chain (the one we would append\nfrags to) or the source skb is zerocopy, don\u0027t merge the skbs.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-42-default-3-1.1.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-42-default-3-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46323",
"url": "https://www.suse.com/security/cve/CVE-2026-46323"
},
{
"category": "external",
"summary": "SUSE Bug 1268029 for CVE-2026-46323",
"url": "https://bugzilla.suse.com/1268029"
},
{
"category": "external",
"summary": "SUSE Bug 1268282 for CVE-2026-46323",
"url": "https://bugzilla.suse.com/1268282"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-42-default-3-1.1.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-42-default-3-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-42-default-3-1.1.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-42-default-3-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-24T09:32:59Z",
"details": "important"
}
],
"title": "CVE-2026-46323"
},
{
"cve": "CVE-2026-46333",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46333"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nptrace: slightly saner \u0027get_dumpable()\u0027 logic\n\nThe \u0027dumpability\u0027 of a task is fundamentally about the memory image of\nthe task - the concept comes from whether it can core dump or not - and\nmakes no sense when you don\u0027t have an associated mm.\n\nAnd almost all users do in fact use it only for the case where the task\nhas a mm pointer.\n\nBut we have one odd special case: ptrace_may_access() uses \u0027dumpable\u0027 to\ncheck various other things entirely independently of the MM (typically\nexplicitly using flags like PTRACE_MODE_READ_FSCREDS). Including for\nthreads that no longer have a VM (and maybe never did, like most kernel\nthreads).\n\nIt\u0027s not what this flag was designed for, but it is what it is.\n\nThe ptrace code does check that the uid/gid matches, so you do have to\nbe uid-0 to see kernel thread details, but this means that the\ntraditional \"drop capabilities\" model doesn\u0027t make any difference for\nthis all.\n\nMake it all make a *bit* more sense by saying that if you don\u0027t have a\nMM pointer, we\u0027ll use a cached \"last dumpability\" flag if the thread\never had a MM (it will be zero for kernel threads since it is never\nset), and require a proper CAP_SYS_PTRACE capability to override.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-42-default-3-1.1.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-42-default-3-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46333",
"url": "https://www.suse.com/security/cve/CVE-2026-46333"
},
{
"category": "external",
"summary": "SUSE Bug 1265308 for CVE-2026-46333",
"url": "https://bugzilla.suse.com/1265308"
},
{
"category": "external",
"summary": "SUSE Bug 1265384 for CVE-2026-46333",
"url": "https://bugzilla.suse.com/1265384"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-42-default-3-1.1.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-42-default-3-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-42-default-3-1.1.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-42-default-3-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-24T09:32:59Z",
"details": "important"
}
],
"title": "CVE-2026-46333"
}
]
}
SUSE-SU-2026:22411-1
Vulnerability from csaf_suse - Published: 2026-06-24 09:59 - Updated: 2026-06-24 09:59Summary
Security update for the Linux Kernel RT (Live Patch 20 for SUSE Linux Enterprise Micro 6.0)
Severity
Important
Notes
Title of the patch: Security update for the Linux Kernel RT (Live Patch 20 for SUSE Linux Enterprise Micro 6.0)
Description of the patch:
This update for the SUSE Linux Enterprise Kernel 6.4.0-42.1 fixes various security issues
The following security issues were fixed:
- CVE-2025-54518: AMD-SN-7052: CPU OP Cache Corruption (bsc#1264096).
- CVE-2026-31402: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (bsc#1261640).
- CVE-2026-31504: net: fix fanout UAF in packet_release() via NETDEV_UP race (bsc#1263088).
- CVE-2026-31694: fuse: reject oversized dirents in page cache (bsc#1263902).
- CVE-2026-43503: final dirty.frag related fixes (bsc#1266229).
- CVE-2026-46300: FragNesia attack: another xfrm/esp based local root exploit (bsc#1265224).
- CVE-2026-46323: net: gro: don't merge zcopy skbs (bsc#1268282).
- CVE-2026-46333: ptrace: slightly saner 'get_dumpable()' logic (bsc#1265384).
- net/sched: fix pedit partial COW leading to page cache (bsc#1267625).
Patchnames: SUSE-SLE-Micro-6.0-kernel-478
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
7.4 (High)
Affected products
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-42-rt-3-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
8.2 (High)
Affected products
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-42-rt-3-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-42-rt-3-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.8 (High)
Affected products
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-42-rt-3-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
8.8 (High)
Affected products
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-42-rt-3-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
8.8 (High)
Affected products
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-42-rt-3-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-42-rt-3-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.8 (High)
Affected products
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-42-rt-3-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
References
54 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for the Linux Kernel RT (Live Patch 20 for SUSE Linux Enterprise Micro 6.0)",
"title": "Title of the patch"
},
{
"category": "description",
"text": "\nThis update for the SUSE Linux Enterprise Kernel 6.4.0-42.1 fixes various security issues\n\nThe following security issues were fixed:\n\n- CVE-2025-54518: AMD-SN-7052: CPU OP Cache Corruption (bsc#1264096).\n- CVE-2026-31402: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (bsc#1261640).\n- CVE-2026-31504: net: fix fanout UAF in packet_release() via NETDEV_UP race (bsc#1263088).\n- CVE-2026-31694: fuse: reject oversized dirents in page cache (bsc#1263902).\n- CVE-2026-43503: final dirty.frag related fixes (bsc#1266229).\n- CVE-2026-46300: FragNesia attack: another xfrm/esp based local root exploit (bsc#1265224).\n- CVE-2026-46323: net: gro: don\u0027t merge zcopy skbs (bsc#1268282).\n- CVE-2026-46333: ptrace: slightly saner \u0027get_dumpable()\u0027 logic (bsc#1265384).\n- net/sched: fix pedit partial COW leading to page cache (bsc#1267625).\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-SLE-Micro-6.0-kernel-478",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_22411-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2026:22411-1",
"url": "https://www.suse.com/support/update/announcement/2026/suse-su-202622411-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2026:22411-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-July/027193.html"
},
{
"category": "self",
"summary": "SUSE Bug 1261640",
"url": "https://bugzilla.suse.com/1261640"
},
{
"category": "self",
"summary": "SUSE Bug 1263088",
"url": "https://bugzilla.suse.com/1263088"
},
{
"category": "self",
"summary": "SUSE Bug 1263902",
"url": "https://bugzilla.suse.com/1263902"
},
{
"category": "self",
"summary": "SUSE Bug 1264096",
"url": "https://bugzilla.suse.com/1264096"
},
{
"category": "self",
"summary": "SUSE Bug 1265224",
"url": "https://bugzilla.suse.com/1265224"
},
{
"category": "self",
"summary": "SUSE Bug 1265384",
"url": "https://bugzilla.suse.com/1265384"
},
{
"category": "self",
"summary": "SUSE Bug 1266229",
"url": "https://bugzilla.suse.com/1266229"
},
{
"category": "self",
"summary": "SUSE Bug 1267625",
"url": "https://bugzilla.suse.com/1267625"
},
{
"category": "self",
"summary": "SUSE Bug 1268282",
"url": "https://bugzilla.suse.com/1268282"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-54518 page",
"url": "https://www.suse.com/security/cve/CVE-2025-54518/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-31402 page",
"url": "https://www.suse.com/security/cve/CVE-2026-31402/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-31504 page",
"url": "https://www.suse.com/security/cve/CVE-2026-31504/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-31694 page",
"url": "https://www.suse.com/security/cve/CVE-2026-31694/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43503 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43503/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46300 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46300/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46323 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46323/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46333 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46333/"
}
],
"title": "Security update for the Linux Kernel RT (Live Patch 20 for SUSE Linux Enterprise Micro 6.0)",
"tracking": {
"current_release_date": "2026-06-24T09:59:05Z",
"generator": {
"date": "2026-06-24T09:59:05Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2026:22411-1",
"initial_release_date": "2026-06-24T09:59:05Z",
"revision_history": [
{
"date": "2026-06-24T09:59:05Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "kernel-livepatch-6_4_0-42-rt-3-1.1.x86_64",
"product": {
"name": "kernel-livepatch-6_4_0-42-rt-3-1.1.x86_64",
"product_id": "kernel-livepatch-6_4_0-42-rt-3-1.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Micro 6.0",
"product": {
"name": "SUSE Linux Micro 6.0",
"product_id": "SUSE Linux Micro 6.0",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sl-micro:6.0"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-livepatch-6_4_0-42-rt-3-1.1.x86_64 as component of SUSE Linux Micro 6.0",
"product_id": "SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-42-rt-3-1.1.x86_64"
},
"product_reference": "kernel-livepatch-6_4_0-42-rt-3-1.1.x86_64",
"relates_to_product_reference": "SUSE Linux Micro 6.0"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-54518",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-54518"
}
],
"notes": [
{
"category": "general",
"text": "Improper isolation of shared resources within the CPU operation cache on Zen 2-based products could allow an attacker to corrupt instructions executed at a different privilege level, potentially resulting in privilege escalation.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-42-rt-3-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-54518",
"url": "https://www.suse.com/security/cve/CVE-2025-54518"
},
{
"category": "external",
"summary": "SUSE Bug 1264013 for CVE-2025-54518",
"url": "https://bugzilla.suse.com/1264013"
},
{
"category": "external",
"summary": "SUSE Bug 1264066 for CVE-2025-54518",
"url": "https://bugzilla.suse.com/1264066"
},
{
"category": "external",
"summary": "SUSE Bug 1264096 for CVE-2025-54518",
"url": "https://bugzilla.suse.com/1264096"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-42-rt-3-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-42-rt-3-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-24T09:59:05Z",
"details": "important"
}
],
"title": "CVE-2025-54518"
},
{
"cve": "CVE-2026-31402",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-31402"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnfsd: fix heap overflow in NFSv4.0 LOCK replay cache\n\nThe NFSv4.0 replay cache uses a fixed 112-byte inline buffer\n(rp_ibuf[NFSD4_REPLAY_ISIZE]) to store encoded operation responses.\nThis size was calculated based on OPEN responses and does not account\nfor LOCK denied responses, which include the conflicting lock owner as\na variable-length field up to 1024 bytes (NFS4_OPAQUE_LIMIT).\n\nWhen a LOCK operation is denied due to a conflict with an existing lock\nthat has a large owner, nfsd4_encode_operation() copies the full encoded\nresponse into the undersized replay buffer via read_bytes_from_xdr_buf()\nwith no bounds check. This results in a slab-out-of-bounds write of up\nto 944 bytes past the end of the buffer, corrupting adjacent heap memory.\n\nThis can be triggered remotely by an unauthenticated attacker with two\ncooperating NFSv4.0 clients: one sets a lock with a large owner string,\nthen the other requests a conflicting lock to provoke the denial.\n\nWe could fix this by increasing NFSD4_REPLAY_ISIZE to allow for a full\nopaque, but that would increase the size of every stateowner, when most\nlockowners are not that large.\n\nInstead, fix this by checking the encoded response length against\nNFSD4_REPLAY_ISIZE before copying into the replay buffer. If the\nresponse is too large, set rp_buflen to 0 to skip caching the replay\npayload. The status is still cached, and the client already received the\ncorrect response on the original request.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-42-rt-3-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-31402",
"url": "https://www.suse.com/security/cve/CVE-2026-31402"
},
{
"category": "external",
"summary": "SUSE Bug 1261638 for CVE-2026-31402",
"url": "https://bugzilla.suse.com/1261638"
},
{
"category": "external",
"summary": "SUSE Bug 1261640 for CVE-2026-31402",
"url": "https://bugzilla.suse.com/1261640"
},
{
"category": "external",
"summary": "SUSE Bug 1265160 for CVE-2026-31402",
"url": "https://bugzilla.suse.com/1265160"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-42-rt-3-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.2,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-42-rt-3-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-24T09:59:05Z",
"details": "important"
}
],
"title": "CVE-2026-31402"
},
{
"cve": "CVE-2026-31504",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-31504"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: fix fanout UAF in packet_release() via NETDEV_UP race\n\n`packet_release()` has a race window where `NETDEV_UP` can re-register a\nsocket into a fanout group\u0027s `arr[]` array. The re-registration is not\ncleaned up by `fanout_release()`, leaving a dangling pointer in the fanout\narray.\n`packet_release()` does NOT zero `po-\u003enum` in its `bind_lock` section.\nAfter releasing `bind_lock`, `po-\u003enum` is still non-zero and `po-\u003eifindex`\nstill matches the bound device. A concurrent `packet_notifier(NETDEV_UP)`\nthat already found the socket in `sklist` can re-register the hook.\nFor fanout sockets, this re-registration calls `__fanout_link(sk, po)`\nwhich adds the socket back into `f-\u003earr[]` and increments `f-\u003enum_members`,\nbut does NOT increment `f-\u003esk_ref`.\n\nThe fix sets `po-\u003enum` to zero in `packet_release` while `bind_lock` is\nheld to prevent NETDEV_UP from linking, preventing the race window.\n\nThis bug was found following an additional audit with Claude Code based\non CVE-2025-38617.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-42-rt-3-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-31504",
"url": "https://www.suse.com/security/cve/CVE-2026-31504"
},
{
"category": "external",
"summary": "SUSE Bug 1263085 for CVE-2026-31504",
"url": "https://bugzilla.suse.com/1263085"
},
{
"category": "external",
"summary": "SUSE Bug 1263088 for CVE-2026-31504",
"url": "https://bugzilla.suse.com/1263088"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-42-rt-3-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-42-rt-3-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-24T09:59:05Z",
"details": "important"
}
],
"title": "CVE-2026-31504"
},
{
"cve": "CVE-2026-31694",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-31694"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nfuse: reject oversized dirents in page cache\n\nfuse_add_dirent_to_cache() computes a serialized dirent size from the\nserver-controlled namelen field and copies the dirent into a single\npage-cache page. The existing logic only checks whether the dirent fits\nin the remaining space of the current page and advances to a fresh page\nif not. It never checks whether the dirent itself exceeds PAGE_SIZE.\n\nAs a result, a malicious FUSE server can return a dirent with\nnamelen=4095, producing a serialized record size of 4120 bytes. On 4 KiB\npage systems this causes memcpy() to overflow the cache page by 24 bytes\ninto the following kernel page.\n\nReject dirents that cannot fit in a single page before copying them into\nthe readdir cache.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-42-rt-3-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-31694",
"url": "https://www.suse.com/security/cve/CVE-2026-31694"
},
{
"category": "external",
"summary": "SUSE Bug 1263901 for CVE-2026-31694",
"url": "https://bugzilla.suse.com/1263901"
},
{
"category": "external",
"summary": "SUSE Bug 1263902 for CVE-2026-31694",
"url": "https://bugzilla.suse.com/1263902"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-42-rt-3-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-42-rt-3-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-24T09:59:05Z",
"details": "important"
}
],
"title": "CVE-2026-31694"
},
{
"cve": "CVE-2026-43503",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43503"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: skbuff: propagate shared-frag marker through frag-transfer helpers\n\nTwo frag-transfer helpers (__pskb_copy_fclone() and skb_shift()) fail\nto propagate the SKBFL_SHARED_FRAG bit in skb_shinfo()-\u003eflags when\nmoving frags from source to destination. __pskb_copy_fclone() defers\nthe rest of the shinfo metadata to skb_copy_header() after copying\nfrag descriptors, but that helper only carries over gso_{size,segs,\ntype} and never touches skb_shinfo()-\u003eflags; skb_shift() moves frag\ndescriptors directly and leaves flags untouched. As a result, the\ndestination skb keeps a reference to the same externally-owned or\npage-cache-backed pages while reporting skb_has_shared_frag() as\nfalse.\n\nThe mismatch is harmful in any in-place writer that uses\nskb_has_shared_frag() to decide whether shared pages must be detoured\nthrough skb_cow_data(). ESP input is one such writer (esp4.c,\nesp6.c), and a single nft \u0027dup to \u003clocal\u003e\u0027 rule -- or any other\nnf_dup_ipv4() / xt_TEE caller -- is enough to land a pskb_copy()\u0027d\nskb in esp_input() with the marker stripped, letting an unprivileged\nuser write into the page cache of a root-owned read-only file via\nauthencesn-ESN stray writes.\n\nSet SKBFL_SHARED_FRAG on the destination whenever frag descriptors\nwere actually moved from the source. skb_copy() and skb_copy_expand()\nshare skb_copy_header() too but linearize all paged data into freshly\nallocated head storage and emerge with nr_frags == 0, so\nskb_has_shared_frag() returns false on its own; they need no change.\n\nThe same omission exists in skb_gro_receive() and skb_gro_receive_list().\nThe former moves the incoming skb\u0027s frag descriptors into the\naccumulator\u0027s last sub-skb via two paths (a direct frag-move loop and\nthe head_frag + memcpy path); the latter chains the incoming skb whole\nonto p\u0027s frag_list. Downstream skb_segment() reads only\nskb_shinfo(p)-\u003eflags, and skb_segment_list() reuses each sub-skb\u0027s\nshinfo as the nskb -- both p and lp must carry the marker.\n\nThe same omission also exists in tcp_clone_payload(), which builds an\nMTU probe skb by moving frag descriptors from skbs on sk_write_queue\ninto a freshly allocated nskb. The helper falls into the same family\nand warrants the same fix for consistency; no TCP TX-side in-place\nwriter is currently known to reach a user page through this gap, but\na future consumer depending on the marker would regress silently.\n\nThe same omission exists in skb_segment(): the per-iteration flag\nmerge takes only head_skb\u0027s flag, and the inner switch that rebinds\nfrag_skb to list_skb on head_skb-frags exhaustion does not fold the\nnew frag_skb\u0027s flag into nskb. Fold frag_skb\u0027s flag at both sites\nso segments drawing frags from frag_list members carry the marker.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-42-rt-3-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43503",
"url": "https://www.suse.com/security/cve/CVE-2026-43503"
},
{
"category": "external",
"summary": "SUSE Bug 1265209 for CVE-2026-43503",
"url": "https://bugzilla.suse.com/1265209"
},
{
"category": "external",
"summary": "SUSE Bug 1265960 for CVE-2026-43503",
"url": "https://bugzilla.suse.com/1265960"
},
{
"category": "external",
"summary": "SUSE Bug 1266229 for CVE-2026-43503",
"url": "https://bugzilla.suse.com/1266229"
},
{
"category": "external",
"summary": "SUSE Bug 1269878 for CVE-2026-43503",
"url": "https://bugzilla.suse.com/1269878"
},
{
"category": "external",
"summary": "SUSE Bug 1270098 for CVE-2026-43503",
"url": "https://bugzilla.suse.com/1270098"
},
{
"category": "external",
"summary": "SUSE Bug 1270100 for CVE-2026-43503",
"url": "https://bugzilla.suse.com/1270100"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-42-rt-3-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-42-rt-3-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-24T09:59:05Z",
"details": "important"
}
],
"title": "CVE-2026-43503"
},
{
"cve": "CVE-2026-46300",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46300"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: skbuff: preserve shared-frag marker during coalescing\n\nskb_try_coalesce() can attach paged frags from @from to @to. If @from\nhas SKBFL_SHARED_FRAG set, the resulting @to skb can contain the same\nexternally-owned or page-cache-backed frags, but the shared-frag marker\nis currently lost.\n\nThat breaks the invariant relied on by later in-place writers. In\nparticular, ESP input checks skb_has_shared_frag() before deciding\nwhether an uncloned nonlinear skb can skip skb_cow_data(). If TCP\nreceive coalescing has moved shared frags into an unmarked skb, ESP can\nsee skb_has_shared_frag() as false and decrypt in place over page-cache\nbacked frags.\n\nPropagate SKBFL_SHARED_FRAG when skb_try_coalesce() transfers paged\nfrags. The tailroom copy path does not need the marker because it copies\nbytes into @to\u0027s linear data rather than transferring frag descriptors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-42-rt-3-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46300",
"url": "https://www.suse.com/security/cve/CVE-2026-46300"
},
{
"category": "external",
"summary": "SUSE Bug 1265209 for CVE-2026-46300",
"url": "https://bugzilla.suse.com/1265209"
},
{
"category": "external",
"summary": "SUSE Bug 1265226 for CVE-2026-46300",
"url": "https://bugzilla.suse.com/1265226"
},
{
"category": "external",
"summary": "SUSE Bug 1265312 for CVE-2026-46300",
"url": "https://bugzilla.suse.com/1265312"
},
{
"category": "external",
"summary": "SUSE Bug 1265383 for CVE-2026-46300",
"url": "https://bugzilla.suse.com/1265383"
},
{
"category": "external",
"summary": "SUSE Bug 1265960 for CVE-2026-46300",
"url": "https://bugzilla.suse.com/1265960"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-42-rt-3-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-42-rt-3-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-24T09:59:05Z",
"details": "important"
}
],
"title": "CVE-2026-46300"
},
{
"cve": "CVE-2026-46323",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46323"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: gro: don\u0027t merge zcopy skbs\n\nskb_gro_receive() can currently copy frags between the source and GRO\nskb, without checking the zerocopy status, and in particular the\nSKBFL_MANAGED_FRAG_REFS flag.\n\nWhen SKBFL_MANAGED_FRAG_REFS is set, the skb doesn\u0027t hold a reference\non the pages in shinfo-\u003efrags. Appending those frags to another skb\u0027s\nfrags without fixing up the page refcount can lead to UAF.\n\nWhen either the last skb in the GRO chain (the one we would append\nfrags to) or the source skb is zerocopy, don\u0027t merge the skbs.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-42-rt-3-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46323",
"url": "https://www.suse.com/security/cve/CVE-2026-46323"
},
{
"category": "external",
"summary": "SUSE Bug 1268029 for CVE-2026-46323",
"url": "https://bugzilla.suse.com/1268029"
},
{
"category": "external",
"summary": "SUSE Bug 1268282 for CVE-2026-46323",
"url": "https://bugzilla.suse.com/1268282"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-42-rt-3-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-42-rt-3-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-24T09:59:05Z",
"details": "important"
}
],
"title": "CVE-2026-46323"
},
{
"cve": "CVE-2026-46333",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46333"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nptrace: slightly saner \u0027get_dumpable()\u0027 logic\n\nThe \u0027dumpability\u0027 of a task is fundamentally about the memory image of\nthe task - the concept comes from whether it can core dump or not - and\nmakes no sense when you don\u0027t have an associated mm.\n\nAnd almost all users do in fact use it only for the case where the task\nhas a mm pointer.\n\nBut we have one odd special case: ptrace_may_access() uses \u0027dumpable\u0027 to\ncheck various other things entirely independently of the MM (typically\nexplicitly using flags like PTRACE_MODE_READ_FSCREDS). Including for\nthreads that no longer have a VM (and maybe never did, like most kernel\nthreads).\n\nIt\u0027s not what this flag was designed for, but it is what it is.\n\nThe ptrace code does check that the uid/gid matches, so you do have to\nbe uid-0 to see kernel thread details, but this means that the\ntraditional \"drop capabilities\" model doesn\u0027t make any difference for\nthis all.\n\nMake it all make a *bit* more sense by saying that if you don\u0027t have a\nMM pointer, we\u0027ll use a cached \"last dumpability\" flag if the thread\never had a MM (it will be zero for kernel threads since it is never\nset), and require a proper CAP_SYS_PTRACE capability to override.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-42-rt-3-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46333",
"url": "https://www.suse.com/security/cve/CVE-2026-46333"
},
{
"category": "external",
"summary": "SUSE Bug 1265308 for CVE-2026-46333",
"url": "https://bugzilla.suse.com/1265308"
},
{
"category": "external",
"summary": "SUSE Bug 1265384 for CVE-2026-46333",
"url": "https://bugzilla.suse.com/1265384"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-42-rt-3-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-42-rt-3-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-24T09:59:05Z",
"details": "important"
}
],
"title": "CVE-2026-46333"
}
]
}
SUSE-SU-2026:22412-1
Vulnerability from csaf_suse - Published: 2026-06-24 09:59 - Updated: 2026-06-24 09:59Summary
Security update for the Linux Kernel RT (Live Patch 21 for SUSE Linux Enterprise Micro 6.0)
Severity
Important
Notes
Title of the patch: Security update for the Linux Kernel RT (Live Patch 21 for SUSE Linux Enterprise Micro 6.0)
Description of the patch:
This update for the SUSE Linux Enterprise Kernel 6.4.0-43.1 fixes various security issues
The following security issues were fixed:
- CVE-2025-54518: AMD-SN-7052: CPU OP Cache Corruption (bsc#1264096).
- CVE-2026-31402: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (bsc#1261640).
- CVE-2026-31504: net: fix fanout UAF in packet_release() via NETDEV_UP race (bsc#1263088).
- CVE-2026-31694: fuse: reject oversized dirents in page cache (bsc#1263902).
- CVE-2026-43503: final dirty.frag related fixes (bsc#1266229).
- CVE-2026-46300: FragNesia attack: another xfrm/esp based local root exploit (bsc#1265224).
- CVE-2026-46323: net: gro: don't merge zcopy skbs (bsc#1268282).
- CVE-2026-46333: ptrace: slightly saner 'get_dumpable()' logic (bsc#1265384).
- net/sched: fix pedit partial COW leading to page cache (bsc#1267625).
Patchnames: SUSE-SLE-Micro-6.0-kernel-479
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
7.4 (High)
Affected products
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-43-rt-2-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
8.2 (High)
Affected products
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-43-rt-2-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-43-rt-2-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.8 (High)
Affected products
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-43-rt-2-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
8.8 (High)
Affected products
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-43-rt-2-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
8.8 (High)
Affected products
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-43-rt-2-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-43-rt-2-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.8 (High)
Affected products
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-43-rt-2-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
References
54 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for the Linux Kernel RT (Live Patch 21 for SUSE Linux Enterprise Micro 6.0)",
"title": "Title of the patch"
},
{
"category": "description",
"text": "\nThis update for the SUSE Linux Enterprise Kernel 6.4.0-43.1 fixes various security issues\n\nThe following security issues were fixed:\n\n- CVE-2025-54518: AMD-SN-7052: CPU OP Cache Corruption (bsc#1264096).\n- CVE-2026-31402: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (bsc#1261640).\n- CVE-2026-31504: net: fix fanout UAF in packet_release() via NETDEV_UP race (bsc#1263088).\n- CVE-2026-31694: fuse: reject oversized dirents in page cache (bsc#1263902).\n- CVE-2026-43503: final dirty.frag related fixes (bsc#1266229).\n- CVE-2026-46300: FragNesia attack: another xfrm/esp based local root exploit (bsc#1265224).\n- CVE-2026-46323: net: gro: don\u0027t merge zcopy skbs (bsc#1268282).\n- CVE-2026-46333: ptrace: slightly saner \u0027get_dumpable()\u0027 logic (bsc#1265384).\n- net/sched: fix pedit partial COW leading to page cache (bsc#1267625).\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-SLE-Micro-6.0-kernel-479",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_22412-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2026:22412-1",
"url": "https://www.suse.com/support/update/announcement/2026/suse-su-202622412-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2026:22412-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-July/027192.html"
},
{
"category": "self",
"summary": "SUSE Bug 1261640",
"url": "https://bugzilla.suse.com/1261640"
},
{
"category": "self",
"summary": "SUSE Bug 1263088",
"url": "https://bugzilla.suse.com/1263088"
},
{
"category": "self",
"summary": "SUSE Bug 1263902",
"url": "https://bugzilla.suse.com/1263902"
},
{
"category": "self",
"summary": "SUSE Bug 1264096",
"url": "https://bugzilla.suse.com/1264096"
},
{
"category": "self",
"summary": "SUSE Bug 1265224",
"url": "https://bugzilla.suse.com/1265224"
},
{
"category": "self",
"summary": "SUSE Bug 1265384",
"url": "https://bugzilla.suse.com/1265384"
},
{
"category": "self",
"summary": "SUSE Bug 1266229",
"url": "https://bugzilla.suse.com/1266229"
},
{
"category": "self",
"summary": "SUSE Bug 1267625",
"url": "https://bugzilla.suse.com/1267625"
},
{
"category": "self",
"summary": "SUSE Bug 1268282",
"url": "https://bugzilla.suse.com/1268282"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-54518 page",
"url": "https://www.suse.com/security/cve/CVE-2025-54518/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-31402 page",
"url": "https://www.suse.com/security/cve/CVE-2026-31402/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-31504 page",
"url": "https://www.suse.com/security/cve/CVE-2026-31504/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-31694 page",
"url": "https://www.suse.com/security/cve/CVE-2026-31694/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43503 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43503/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46300 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46300/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46323 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46323/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46333 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46333/"
}
],
"title": "Security update for the Linux Kernel RT (Live Patch 21 for SUSE Linux Enterprise Micro 6.0)",
"tracking": {
"current_release_date": "2026-06-24T09:59:05Z",
"generator": {
"date": "2026-06-24T09:59:05Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2026:22412-1",
"initial_release_date": "2026-06-24T09:59:05Z",
"revision_history": [
{
"date": "2026-06-24T09:59:05Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "kernel-livepatch-6_4_0-43-rt-2-1.1.x86_64",
"product": {
"name": "kernel-livepatch-6_4_0-43-rt-2-1.1.x86_64",
"product_id": "kernel-livepatch-6_4_0-43-rt-2-1.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Micro 6.0",
"product": {
"name": "SUSE Linux Micro 6.0",
"product_id": "SUSE Linux Micro 6.0",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sl-micro:6.0"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-livepatch-6_4_0-43-rt-2-1.1.x86_64 as component of SUSE Linux Micro 6.0",
"product_id": "SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-43-rt-2-1.1.x86_64"
},
"product_reference": "kernel-livepatch-6_4_0-43-rt-2-1.1.x86_64",
"relates_to_product_reference": "SUSE Linux Micro 6.0"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-54518",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-54518"
}
],
"notes": [
{
"category": "general",
"text": "Improper isolation of shared resources within the CPU operation cache on Zen 2-based products could allow an attacker to corrupt instructions executed at a different privilege level, potentially resulting in privilege escalation.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-43-rt-2-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-54518",
"url": "https://www.suse.com/security/cve/CVE-2025-54518"
},
{
"category": "external",
"summary": "SUSE Bug 1264013 for CVE-2025-54518",
"url": "https://bugzilla.suse.com/1264013"
},
{
"category": "external",
"summary": "SUSE Bug 1264066 for CVE-2025-54518",
"url": "https://bugzilla.suse.com/1264066"
},
{
"category": "external",
"summary": "SUSE Bug 1264096 for CVE-2025-54518",
"url": "https://bugzilla.suse.com/1264096"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-43-rt-2-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-43-rt-2-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-24T09:59:05Z",
"details": "important"
}
],
"title": "CVE-2025-54518"
},
{
"cve": "CVE-2026-31402",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-31402"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnfsd: fix heap overflow in NFSv4.0 LOCK replay cache\n\nThe NFSv4.0 replay cache uses a fixed 112-byte inline buffer\n(rp_ibuf[NFSD4_REPLAY_ISIZE]) to store encoded operation responses.\nThis size was calculated based on OPEN responses and does not account\nfor LOCK denied responses, which include the conflicting lock owner as\na variable-length field up to 1024 bytes (NFS4_OPAQUE_LIMIT).\n\nWhen a LOCK operation is denied due to a conflict with an existing lock\nthat has a large owner, nfsd4_encode_operation() copies the full encoded\nresponse into the undersized replay buffer via read_bytes_from_xdr_buf()\nwith no bounds check. This results in a slab-out-of-bounds write of up\nto 944 bytes past the end of the buffer, corrupting adjacent heap memory.\n\nThis can be triggered remotely by an unauthenticated attacker with two\ncooperating NFSv4.0 clients: one sets a lock with a large owner string,\nthen the other requests a conflicting lock to provoke the denial.\n\nWe could fix this by increasing NFSD4_REPLAY_ISIZE to allow for a full\nopaque, but that would increase the size of every stateowner, when most\nlockowners are not that large.\n\nInstead, fix this by checking the encoded response length against\nNFSD4_REPLAY_ISIZE before copying into the replay buffer. If the\nresponse is too large, set rp_buflen to 0 to skip caching the replay\npayload. The status is still cached, and the client already received the\ncorrect response on the original request.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-43-rt-2-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-31402",
"url": "https://www.suse.com/security/cve/CVE-2026-31402"
},
{
"category": "external",
"summary": "SUSE Bug 1261638 for CVE-2026-31402",
"url": "https://bugzilla.suse.com/1261638"
},
{
"category": "external",
"summary": "SUSE Bug 1261640 for CVE-2026-31402",
"url": "https://bugzilla.suse.com/1261640"
},
{
"category": "external",
"summary": "SUSE Bug 1265160 for CVE-2026-31402",
"url": "https://bugzilla.suse.com/1265160"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-43-rt-2-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.2,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-43-rt-2-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-24T09:59:05Z",
"details": "important"
}
],
"title": "CVE-2026-31402"
},
{
"cve": "CVE-2026-31504",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-31504"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: fix fanout UAF in packet_release() via NETDEV_UP race\n\n`packet_release()` has a race window where `NETDEV_UP` can re-register a\nsocket into a fanout group\u0027s `arr[]` array. The re-registration is not\ncleaned up by `fanout_release()`, leaving a dangling pointer in the fanout\narray.\n`packet_release()` does NOT zero `po-\u003enum` in its `bind_lock` section.\nAfter releasing `bind_lock`, `po-\u003enum` is still non-zero and `po-\u003eifindex`\nstill matches the bound device. A concurrent `packet_notifier(NETDEV_UP)`\nthat already found the socket in `sklist` can re-register the hook.\nFor fanout sockets, this re-registration calls `__fanout_link(sk, po)`\nwhich adds the socket back into `f-\u003earr[]` and increments `f-\u003enum_members`,\nbut does NOT increment `f-\u003esk_ref`.\n\nThe fix sets `po-\u003enum` to zero in `packet_release` while `bind_lock` is\nheld to prevent NETDEV_UP from linking, preventing the race window.\n\nThis bug was found following an additional audit with Claude Code based\non CVE-2025-38617.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-43-rt-2-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-31504",
"url": "https://www.suse.com/security/cve/CVE-2026-31504"
},
{
"category": "external",
"summary": "SUSE Bug 1263085 for CVE-2026-31504",
"url": "https://bugzilla.suse.com/1263085"
},
{
"category": "external",
"summary": "SUSE Bug 1263088 for CVE-2026-31504",
"url": "https://bugzilla.suse.com/1263088"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-43-rt-2-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-43-rt-2-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-24T09:59:05Z",
"details": "important"
}
],
"title": "CVE-2026-31504"
},
{
"cve": "CVE-2026-31694",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-31694"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nfuse: reject oversized dirents in page cache\n\nfuse_add_dirent_to_cache() computes a serialized dirent size from the\nserver-controlled namelen field and copies the dirent into a single\npage-cache page. The existing logic only checks whether the dirent fits\nin the remaining space of the current page and advances to a fresh page\nif not. It never checks whether the dirent itself exceeds PAGE_SIZE.\n\nAs a result, a malicious FUSE server can return a dirent with\nnamelen=4095, producing a serialized record size of 4120 bytes. On 4 KiB\npage systems this causes memcpy() to overflow the cache page by 24 bytes\ninto the following kernel page.\n\nReject dirents that cannot fit in a single page before copying them into\nthe readdir cache.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-43-rt-2-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-31694",
"url": "https://www.suse.com/security/cve/CVE-2026-31694"
},
{
"category": "external",
"summary": "SUSE Bug 1263901 for CVE-2026-31694",
"url": "https://bugzilla.suse.com/1263901"
},
{
"category": "external",
"summary": "SUSE Bug 1263902 for CVE-2026-31694",
"url": "https://bugzilla.suse.com/1263902"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-43-rt-2-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-43-rt-2-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-24T09:59:05Z",
"details": "important"
}
],
"title": "CVE-2026-31694"
},
{
"cve": "CVE-2026-43503",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43503"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: skbuff: propagate shared-frag marker through frag-transfer helpers\n\nTwo frag-transfer helpers (__pskb_copy_fclone() and skb_shift()) fail\nto propagate the SKBFL_SHARED_FRAG bit in skb_shinfo()-\u003eflags when\nmoving frags from source to destination. __pskb_copy_fclone() defers\nthe rest of the shinfo metadata to skb_copy_header() after copying\nfrag descriptors, but that helper only carries over gso_{size,segs,\ntype} and never touches skb_shinfo()-\u003eflags; skb_shift() moves frag\ndescriptors directly and leaves flags untouched. As a result, the\ndestination skb keeps a reference to the same externally-owned or\npage-cache-backed pages while reporting skb_has_shared_frag() as\nfalse.\n\nThe mismatch is harmful in any in-place writer that uses\nskb_has_shared_frag() to decide whether shared pages must be detoured\nthrough skb_cow_data(). ESP input is one such writer (esp4.c,\nesp6.c), and a single nft \u0027dup to \u003clocal\u003e\u0027 rule -- or any other\nnf_dup_ipv4() / xt_TEE caller -- is enough to land a pskb_copy()\u0027d\nskb in esp_input() with the marker stripped, letting an unprivileged\nuser write into the page cache of a root-owned read-only file via\nauthencesn-ESN stray writes.\n\nSet SKBFL_SHARED_FRAG on the destination whenever frag descriptors\nwere actually moved from the source. skb_copy() and skb_copy_expand()\nshare skb_copy_header() too but linearize all paged data into freshly\nallocated head storage and emerge with nr_frags == 0, so\nskb_has_shared_frag() returns false on its own; they need no change.\n\nThe same omission exists in skb_gro_receive() and skb_gro_receive_list().\nThe former moves the incoming skb\u0027s frag descriptors into the\naccumulator\u0027s last sub-skb via two paths (a direct frag-move loop and\nthe head_frag + memcpy path); the latter chains the incoming skb whole\nonto p\u0027s frag_list. Downstream skb_segment() reads only\nskb_shinfo(p)-\u003eflags, and skb_segment_list() reuses each sub-skb\u0027s\nshinfo as the nskb -- both p and lp must carry the marker.\n\nThe same omission also exists in tcp_clone_payload(), which builds an\nMTU probe skb by moving frag descriptors from skbs on sk_write_queue\ninto a freshly allocated nskb. The helper falls into the same family\nand warrants the same fix for consistency; no TCP TX-side in-place\nwriter is currently known to reach a user page through this gap, but\na future consumer depending on the marker would regress silently.\n\nThe same omission exists in skb_segment(): the per-iteration flag\nmerge takes only head_skb\u0027s flag, and the inner switch that rebinds\nfrag_skb to list_skb on head_skb-frags exhaustion does not fold the\nnew frag_skb\u0027s flag into nskb. Fold frag_skb\u0027s flag at both sites\nso segments drawing frags from frag_list members carry the marker.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-43-rt-2-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43503",
"url": "https://www.suse.com/security/cve/CVE-2026-43503"
},
{
"category": "external",
"summary": "SUSE Bug 1265209 for CVE-2026-43503",
"url": "https://bugzilla.suse.com/1265209"
},
{
"category": "external",
"summary": "SUSE Bug 1265960 for CVE-2026-43503",
"url": "https://bugzilla.suse.com/1265960"
},
{
"category": "external",
"summary": "SUSE Bug 1266229 for CVE-2026-43503",
"url": "https://bugzilla.suse.com/1266229"
},
{
"category": "external",
"summary": "SUSE Bug 1269878 for CVE-2026-43503",
"url": "https://bugzilla.suse.com/1269878"
},
{
"category": "external",
"summary": "SUSE Bug 1270098 for CVE-2026-43503",
"url": "https://bugzilla.suse.com/1270098"
},
{
"category": "external",
"summary": "SUSE Bug 1270100 for CVE-2026-43503",
"url": "https://bugzilla.suse.com/1270100"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-43-rt-2-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-43-rt-2-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-24T09:59:05Z",
"details": "important"
}
],
"title": "CVE-2026-43503"
},
{
"cve": "CVE-2026-46300",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46300"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: skbuff: preserve shared-frag marker during coalescing\n\nskb_try_coalesce() can attach paged frags from @from to @to. If @from\nhas SKBFL_SHARED_FRAG set, the resulting @to skb can contain the same\nexternally-owned or page-cache-backed frags, but the shared-frag marker\nis currently lost.\n\nThat breaks the invariant relied on by later in-place writers. In\nparticular, ESP input checks skb_has_shared_frag() before deciding\nwhether an uncloned nonlinear skb can skip skb_cow_data(). If TCP\nreceive coalescing has moved shared frags into an unmarked skb, ESP can\nsee skb_has_shared_frag() as false and decrypt in place over page-cache\nbacked frags.\n\nPropagate SKBFL_SHARED_FRAG when skb_try_coalesce() transfers paged\nfrags. The tailroom copy path does not need the marker because it copies\nbytes into @to\u0027s linear data rather than transferring frag descriptors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-43-rt-2-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46300",
"url": "https://www.suse.com/security/cve/CVE-2026-46300"
},
{
"category": "external",
"summary": "SUSE Bug 1265209 for CVE-2026-46300",
"url": "https://bugzilla.suse.com/1265209"
},
{
"category": "external",
"summary": "SUSE Bug 1265226 for CVE-2026-46300",
"url": "https://bugzilla.suse.com/1265226"
},
{
"category": "external",
"summary": "SUSE Bug 1265312 for CVE-2026-46300",
"url": "https://bugzilla.suse.com/1265312"
},
{
"category": "external",
"summary": "SUSE Bug 1265383 for CVE-2026-46300",
"url": "https://bugzilla.suse.com/1265383"
},
{
"category": "external",
"summary": "SUSE Bug 1265960 for CVE-2026-46300",
"url": "https://bugzilla.suse.com/1265960"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-43-rt-2-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-43-rt-2-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-24T09:59:05Z",
"details": "important"
}
],
"title": "CVE-2026-46300"
},
{
"cve": "CVE-2026-46323",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46323"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: gro: don\u0027t merge zcopy skbs\n\nskb_gro_receive() can currently copy frags between the source and GRO\nskb, without checking the zerocopy status, and in particular the\nSKBFL_MANAGED_FRAG_REFS flag.\n\nWhen SKBFL_MANAGED_FRAG_REFS is set, the skb doesn\u0027t hold a reference\non the pages in shinfo-\u003efrags. Appending those frags to another skb\u0027s\nfrags without fixing up the page refcount can lead to UAF.\n\nWhen either the last skb in the GRO chain (the one we would append\nfrags to) or the source skb is zerocopy, don\u0027t merge the skbs.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-43-rt-2-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46323",
"url": "https://www.suse.com/security/cve/CVE-2026-46323"
},
{
"category": "external",
"summary": "SUSE Bug 1268029 for CVE-2026-46323",
"url": "https://bugzilla.suse.com/1268029"
},
{
"category": "external",
"summary": "SUSE Bug 1268282 for CVE-2026-46323",
"url": "https://bugzilla.suse.com/1268282"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-43-rt-2-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-43-rt-2-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-24T09:59:05Z",
"details": "important"
}
],
"title": "CVE-2026-46323"
},
{
"cve": "CVE-2026-46333",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46333"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nptrace: slightly saner \u0027get_dumpable()\u0027 logic\n\nThe \u0027dumpability\u0027 of a task is fundamentally about the memory image of\nthe task - the concept comes from whether it can core dump or not - and\nmakes no sense when you don\u0027t have an associated mm.\n\nAnd almost all users do in fact use it only for the case where the task\nhas a mm pointer.\n\nBut we have one odd special case: ptrace_may_access() uses \u0027dumpable\u0027 to\ncheck various other things entirely independently of the MM (typically\nexplicitly using flags like PTRACE_MODE_READ_FSCREDS). Including for\nthreads that no longer have a VM (and maybe never did, like most kernel\nthreads).\n\nIt\u0027s not what this flag was designed for, but it is what it is.\n\nThe ptrace code does check that the uid/gid matches, so you do have to\nbe uid-0 to see kernel thread details, but this means that the\ntraditional \"drop capabilities\" model doesn\u0027t make any difference for\nthis all.\n\nMake it all make a *bit* more sense by saying that if you don\u0027t have a\nMM pointer, we\u0027ll use a cached \"last dumpability\" flag if the thread\never had a MM (it will be zero for kernel threads since it is never\nset), and require a proper CAP_SYS_PTRACE capability to override.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-43-rt-2-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46333",
"url": "https://www.suse.com/security/cve/CVE-2026-46333"
},
{
"category": "external",
"summary": "SUSE Bug 1265308 for CVE-2026-46333",
"url": "https://bugzilla.suse.com/1265308"
},
{
"category": "external",
"summary": "SUSE Bug 1265384 for CVE-2026-46333",
"url": "https://bugzilla.suse.com/1265384"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-43-rt-2-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-43-rt-2-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-24T09:59:05Z",
"details": "important"
}
],
"title": "CVE-2026-46333"
}
]
}
SUSE-SU-2026:22425-1
Vulnerability from csaf_suse - Published: 2026-06-25 11:37 - Updated: 2026-06-25 11:37Summary
Security update for the Linux Kernel (Live Patch 20 for SUSE Linux Enterprise Micro 6.0)
Severity
Important
Notes
Title of the patch: Security update for the Linux Kernel (Live Patch 20 for SUSE Linux Enterprise Micro 6.0)
Description of the patch:
This update for the SUSE Linux Enterprise Kernel 6.4.0-43.1 fixes various security issues
The following security issues were fixed:
- CVE-2025-54518: AMD-SN-7052: CPU OP Cache Corruption (bsc#1264096).
- CVE-2026-31402: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (bsc#1261640).
- CVE-2026-31504: net: fix fanout UAF in packet_release() via NETDEV_UP race (bsc#1263088).
- CVE-2026-31694: fuse: reject oversized dirents in page cache (bsc#1263902).
- CVE-2026-43503: final dirty.frag related fixes (bsc#1266229).
- CVE-2026-46300: FragNesia attack: another xfrm/esp based local root exploit (bsc#1265224).
- CVE-2026-46323: net: gro: don't merge zcopy skbs (bsc#1268282).
- CVE-2026-46333: ptrace: slightly saner 'get_dumpable()' logic (bsc#1265384).
- net/sched: fix pedit partial COW leading to page cache (bsc#1267625).
Patchnames: SUSE-SLE-Micro-6.0-kernel-492
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
7.4 (High)
Affected products
Recommended
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-43-default-2-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-43-default-2-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
8.2 (High)
Affected products
Recommended
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-43-default-2-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-43-default-2-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-43-default-2-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-43-default-2-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.8 (High)
Affected products
Recommended
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-43-default-2-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-43-default-2-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
8.8 (High)
Affected products
Recommended
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-43-default-2-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-43-default-2-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
8.8 (High)
Affected products
Recommended
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-43-default-2-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-43-default-2-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-43-default-2-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-43-default-2-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.8 (High)
Affected products
Recommended
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-43-default-2-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-43-default-2-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
References
54 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for the Linux Kernel (Live Patch 20 for SUSE Linux Enterprise Micro 6.0)",
"title": "Title of the patch"
},
{
"category": "description",
"text": "\nThis update for the SUSE Linux Enterprise Kernel 6.4.0-43.1 fixes various security issues\n\nThe following security issues were fixed:\n\n- CVE-2025-54518: AMD-SN-7052: CPU OP Cache Corruption (bsc#1264096).\n- CVE-2026-31402: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (bsc#1261640).\n- CVE-2026-31504: net: fix fanout UAF in packet_release() via NETDEV_UP race (bsc#1263088).\n- CVE-2026-31694: fuse: reject oversized dirents in page cache (bsc#1263902).\n- CVE-2026-43503: final dirty.frag related fixes (bsc#1266229).\n- CVE-2026-46300: FragNesia attack: another xfrm/esp based local root exploit (bsc#1265224).\n- CVE-2026-46323: net: gro: don\u0027t merge zcopy skbs (bsc#1268282).\n- CVE-2026-46333: ptrace: slightly saner \u0027get_dumpable()\u0027 logic (bsc#1265384).\n- net/sched: fix pedit partial COW leading to page cache (bsc#1267625).\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-SLE-Micro-6.0-kernel-492",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_22425-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2026:22425-1",
"url": "https://www.suse.com/support/update/announcement/2026/suse-su-202622425-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2026:22425-1",
"url": "https://lists.suse.com/pipermail/sle-updates/2026-July/047870.html"
},
{
"category": "self",
"summary": "SUSE Bug 1261640",
"url": "https://bugzilla.suse.com/1261640"
},
{
"category": "self",
"summary": "SUSE Bug 1263088",
"url": "https://bugzilla.suse.com/1263088"
},
{
"category": "self",
"summary": "SUSE Bug 1263902",
"url": "https://bugzilla.suse.com/1263902"
},
{
"category": "self",
"summary": "SUSE Bug 1264096",
"url": "https://bugzilla.suse.com/1264096"
},
{
"category": "self",
"summary": "SUSE Bug 1265224",
"url": "https://bugzilla.suse.com/1265224"
},
{
"category": "self",
"summary": "SUSE Bug 1265384",
"url": "https://bugzilla.suse.com/1265384"
},
{
"category": "self",
"summary": "SUSE Bug 1266229",
"url": "https://bugzilla.suse.com/1266229"
},
{
"category": "self",
"summary": "SUSE Bug 1267625",
"url": "https://bugzilla.suse.com/1267625"
},
{
"category": "self",
"summary": "SUSE Bug 1268282",
"url": "https://bugzilla.suse.com/1268282"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-54518 page",
"url": "https://www.suse.com/security/cve/CVE-2025-54518/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-31402 page",
"url": "https://www.suse.com/security/cve/CVE-2026-31402/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-31504 page",
"url": "https://www.suse.com/security/cve/CVE-2026-31504/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-31694 page",
"url": "https://www.suse.com/security/cve/CVE-2026-31694/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43503 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43503/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46300 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46300/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46323 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46323/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46333 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46333/"
}
],
"title": "Security update for the Linux Kernel (Live Patch 20 for SUSE Linux Enterprise Micro 6.0)",
"tracking": {
"current_release_date": "2026-06-25T11:37:22Z",
"generator": {
"date": "2026-06-25T11:37:22Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2026:22425-1",
"initial_release_date": "2026-06-25T11:37:22Z",
"revision_history": [
{
"date": "2026-06-25T11:37:22Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "kernel-livepatch-6_4_0-43-default-2-1.1.s390x",
"product": {
"name": "kernel-livepatch-6_4_0-43-default-2-1.1.s390x",
"product_id": "kernel-livepatch-6_4_0-43-default-2-1.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "kernel-livepatch-6_4_0-43-default-2-1.1.x86_64",
"product": {
"name": "kernel-livepatch-6_4_0-43-default-2-1.1.x86_64",
"product_id": "kernel-livepatch-6_4_0-43-default-2-1.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Micro 6.0",
"product": {
"name": "SUSE Linux Micro 6.0",
"product_id": "SUSE Linux Micro 6.0",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sl-micro:6.0"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-livepatch-6_4_0-43-default-2-1.1.s390x as component of SUSE Linux Micro 6.0",
"product_id": "SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-43-default-2-1.1.s390x"
},
"product_reference": "kernel-livepatch-6_4_0-43-default-2-1.1.s390x",
"relates_to_product_reference": "SUSE Linux Micro 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-livepatch-6_4_0-43-default-2-1.1.x86_64 as component of SUSE Linux Micro 6.0",
"product_id": "SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-43-default-2-1.1.x86_64"
},
"product_reference": "kernel-livepatch-6_4_0-43-default-2-1.1.x86_64",
"relates_to_product_reference": "SUSE Linux Micro 6.0"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-54518",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-54518"
}
],
"notes": [
{
"category": "general",
"text": "Improper isolation of shared resources within the CPU operation cache on Zen 2-based products could allow an attacker to corrupt instructions executed at a different privilege level, potentially resulting in privilege escalation.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-43-default-2-1.1.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-43-default-2-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-54518",
"url": "https://www.suse.com/security/cve/CVE-2025-54518"
},
{
"category": "external",
"summary": "SUSE Bug 1264013 for CVE-2025-54518",
"url": "https://bugzilla.suse.com/1264013"
},
{
"category": "external",
"summary": "SUSE Bug 1264066 for CVE-2025-54518",
"url": "https://bugzilla.suse.com/1264066"
},
{
"category": "external",
"summary": "SUSE Bug 1264096 for CVE-2025-54518",
"url": "https://bugzilla.suse.com/1264096"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-43-default-2-1.1.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-43-default-2-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-43-default-2-1.1.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-43-default-2-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-25T11:37:22Z",
"details": "important"
}
],
"title": "CVE-2025-54518"
},
{
"cve": "CVE-2026-31402",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-31402"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnfsd: fix heap overflow in NFSv4.0 LOCK replay cache\n\nThe NFSv4.0 replay cache uses a fixed 112-byte inline buffer\n(rp_ibuf[NFSD4_REPLAY_ISIZE]) to store encoded operation responses.\nThis size was calculated based on OPEN responses and does not account\nfor LOCK denied responses, which include the conflicting lock owner as\na variable-length field up to 1024 bytes (NFS4_OPAQUE_LIMIT).\n\nWhen a LOCK operation is denied due to a conflict with an existing lock\nthat has a large owner, nfsd4_encode_operation() copies the full encoded\nresponse into the undersized replay buffer via read_bytes_from_xdr_buf()\nwith no bounds check. This results in a slab-out-of-bounds write of up\nto 944 bytes past the end of the buffer, corrupting adjacent heap memory.\n\nThis can be triggered remotely by an unauthenticated attacker with two\ncooperating NFSv4.0 clients: one sets a lock with a large owner string,\nthen the other requests a conflicting lock to provoke the denial.\n\nWe could fix this by increasing NFSD4_REPLAY_ISIZE to allow for a full\nopaque, but that would increase the size of every stateowner, when most\nlockowners are not that large.\n\nInstead, fix this by checking the encoded response length against\nNFSD4_REPLAY_ISIZE before copying into the replay buffer. If the\nresponse is too large, set rp_buflen to 0 to skip caching the replay\npayload. The status is still cached, and the client already received the\ncorrect response on the original request.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-43-default-2-1.1.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-43-default-2-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-31402",
"url": "https://www.suse.com/security/cve/CVE-2026-31402"
},
{
"category": "external",
"summary": "SUSE Bug 1261638 for CVE-2026-31402",
"url": "https://bugzilla.suse.com/1261638"
},
{
"category": "external",
"summary": "SUSE Bug 1261640 for CVE-2026-31402",
"url": "https://bugzilla.suse.com/1261640"
},
{
"category": "external",
"summary": "SUSE Bug 1265160 for CVE-2026-31402",
"url": "https://bugzilla.suse.com/1265160"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-43-default-2-1.1.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-43-default-2-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.2,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-43-default-2-1.1.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-43-default-2-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-25T11:37:22Z",
"details": "important"
}
],
"title": "CVE-2026-31402"
},
{
"cve": "CVE-2026-31504",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-31504"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: fix fanout UAF in packet_release() via NETDEV_UP race\n\n`packet_release()` has a race window where `NETDEV_UP` can re-register a\nsocket into a fanout group\u0027s `arr[]` array. The re-registration is not\ncleaned up by `fanout_release()`, leaving a dangling pointer in the fanout\narray.\n`packet_release()` does NOT zero `po-\u003enum` in its `bind_lock` section.\nAfter releasing `bind_lock`, `po-\u003enum` is still non-zero and `po-\u003eifindex`\nstill matches the bound device. A concurrent `packet_notifier(NETDEV_UP)`\nthat already found the socket in `sklist` can re-register the hook.\nFor fanout sockets, this re-registration calls `__fanout_link(sk, po)`\nwhich adds the socket back into `f-\u003earr[]` and increments `f-\u003enum_members`,\nbut does NOT increment `f-\u003esk_ref`.\n\nThe fix sets `po-\u003enum` to zero in `packet_release` while `bind_lock` is\nheld to prevent NETDEV_UP from linking, preventing the race window.\n\nThis bug was found following an additional audit with Claude Code based\non CVE-2025-38617.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-43-default-2-1.1.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-43-default-2-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-31504",
"url": "https://www.suse.com/security/cve/CVE-2026-31504"
},
{
"category": "external",
"summary": "SUSE Bug 1263085 for CVE-2026-31504",
"url": "https://bugzilla.suse.com/1263085"
},
{
"category": "external",
"summary": "SUSE Bug 1263088 for CVE-2026-31504",
"url": "https://bugzilla.suse.com/1263088"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-43-default-2-1.1.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-43-default-2-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-43-default-2-1.1.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-43-default-2-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-25T11:37:22Z",
"details": "important"
}
],
"title": "CVE-2026-31504"
},
{
"cve": "CVE-2026-31694",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-31694"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nfuse: reject oversized dirents in page cache\n\nfuse_add_dirent_to_cache() computes a serialized dirent size from the\nserver-controlled namelen field and copies the dirent into a single\npage-cache page. The existing logic only checks whether the dirent fits\nin the remaining space of the current page and advances to a fresh page\nif not. It never checks whether the dirent itself exceeds PAGE_SIZE.\n\nAs a result, a malicious FUSE server can return a dirent with\nnamelen=4095, producing a serialized record size of 4120 bytes. On 4 KiB\npage systems this causes memcpy() to overflow the cache page by 24 bytes\ninto the following kernel page.\n\nReject dirents that cannot fit in a single page before copying them into\nthe readdir cache.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-43-default-2-1.1.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-43-default-2-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-31694",
"url": "https://www.suse.com/security/cve/CVE-2026-31694"
},
{
"category": "external",
"summary": "SUSE Bug 1263901 for CVE-2026-31694",
"url": "https://bugzilla.suse.com/1263901"
},
{
"category": "external",
"summary": "SUSE Bug 1263902 for CVE-2026-31694",
"url": "https://bugzilla.suse.com/1263902"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-43-default-2-1.1.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-43-default-2-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-43-default-2-1.1.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-43-default-2-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-25T11:37:22Z",
"details": "important"
}
],
"title": "CVE-2026-31694"
},
{
"cve": "CVE-2026-43503",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43503"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: skbuff: propagate shared-frag marker through frag-transfer helpers\n\nTwo frag-transfer helpers (__pskb_copy_fclone() and skb_shift()) fail\nto propagate the SKBFL_SHARED_FRAG bit in skb_shinfo()-\u003eflags when\nmoving frags from source to destination. __pskb_copy_fclone() defers\nthe rest of the shinfo metadata to skb_copy_header() after copying\nfrag descriptors, but that helper only carries over gso_{size,segs,\ntype} and never touches skb_shinfo()-\u003eflags; skb_shift() moves frag\ndescriptors directly and leaves flags untouched. As a result, the\ndestination skb keeps a reference to the same externally-owned or\npage-cache-backed pages while reporting skb_has_shared_frag() as\nfalse.\n\nThe mismatch is harmful in any in-place writer that uses\nskb_has_shared_frag() to decide whether shared pages must be detoured\nthrough skb_cow_data(). ESP input is one such writer (esp4.c,\nesp6.c), and a single nft \u0027dup to \u003clocal\u003e\u0027 rule -- or any other\nnf_dup_ipv4() / xt_TEE caller -- is enough to land a pskb_copy()\u0027d\nskb in esp_input() with the marker stripped, letting an unprivileged\nuser write into the page cache of a root-owned read-only file via\nauthencesn-ESN stray writes.\n\nSet SKBFL_SHARED_FRAG on the destination whenever frag descriptors\nwere actually moved from the source. skb_copy() and skb_copy_expand()\nshare skb_copy_header() too but linearize all paged data into freshly\nallocated head storage and emerge with nr_frags == 0, so\nskb_has_shared_frag() returns false on its own; they need no change.\n\nThe same omission exists in skb_gro_receive() and skb_gro_receive_list().\nThe former moves the incoming skb\u0027s frag descriptors into the\naccumulator\u0027s last sub-skb via two paths (a direct frag-move loop and\nthe head_frag + memcpy path); the latter chains the incoming skb whole\nonto p\u0027s frag_list. Downstream skb_segment() reads only\nskb_shinfo(p)-\u003eflags, and skb_segment_list() reuses each sub-skb\u0027s\nshinfo as the nskb -- both p and lp must carry the marker.\n\nThe same omission also exists in tcp_clone_payload(), which builds an\nMTU probe skb by moving frag descriptors from skbs on sk_write_queue\ninto a freshly allocated nskb. The helper falls into the same family\nand warrants the same fix for consistency; no TCP TX-side in-place\nwriter is currently known to reach a user page through this gap, but\na future consumer depending on the marker would regress silently.\n\nThe same omission exists in skb_segment(): the per-iteration flag\nmerge takes only head_skb\u0027s flag, and the inner switch that rebinds\nfrag_skb to list_skb on head_skb-frags exhaustion does not fold the\nnew frag_skb\u0027s flag into nskb. Fold frag_skb\u0027s flag at both sites\nso segments drawing frags from frag_list members carry the marker.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-43-default-2-1.1.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-43-default-2-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43503",
"url": "https://www.suse.com/security/cve/CVE-2026-43503"
},
{
"category": "external",
"summary": "SUSE Bug 1265209 for CVE-2026-43503",
"url": "https://bugzilla.suse.com/1265209"
},
{
"category": "external",
"summary": "SUSE Bug 1265960 for CVE-2026-43503",
"url": "https://bugzilla.suse.com/1265960"
},
{
"category": "external",
"summary": "SUSE Bug 1266229 for CVE-2026-43503",
"url": "https://bugzilla.suse.com/1266229"
},
{
"category": "external",
"summary": "SUSE Bug 1269878 for CVE-2026-43503",
"url": "https://bugzilla.suse.com/1269878"
},
{
"category": "external",
"summary": "SUSE Bug 1270098 for CVE-2026-43503",
"url": "https://bugzilla.suse.com/1270098"
},
{
"category": "external",
"summary": "SUSE Bug 1270100 for CVE-2026-43503",
"url": "https://bugzilla.suse.com/1270100"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-43-default-2-1.1.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-43-default-2-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-43-default-2-1.1.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-43-default-2-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-25T11:37:22Z",
"details": "important"
}
],
"title": "CVE-2026-43503"
},
{
"cve": "CVE-2026-46300",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46300"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: skbuff: preserve shared-frag marker during coalescing\n\nskb_try_coalesce() can attach paged frags from @from to @to. If @from\nhas SKBFL_SHARED_FRAG set, the resulting @to skb can contain the same\nexternally-owned or page-cache-backed frags, but the shared-frag marker\nis currently lost.\n\nThat breaks the invariant relied on by later in-place writers. In\nparticular, ESP input checks skb_has_shared_frag() before deciding\nwhether an uncloned nonlinear skb can skip skb_cow_data(). If TCP\nreceive coalescing has moved shared frags into an unmarked skb, ESP can\nsee skb_has_shared_frag() as false and decrypt in place over page-cache\nbacked frags.\n\nPropagate SKBFL_SHARED_FRAG when skb_try_coalesce() transfers paged\nfrags. The tailroom copy path does not need the marker because it copies\nbytes into @to\u0027s linear data rather than transferring frag descriptors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-43-default-2-1.1.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-43-default-2-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46300",
"url": "https://www.suse.com/security/cve/CVE-2026-46300"
},
{
"category": "external",
"summary": "SUSE Bug 1265209 for CVE-2026-46300",
"url": "https://bugzilla.suse.com/1265209"
},
{
"category": "external",
"summary": "SUSE Bug 1265226 for CVE-2026-46300",
"url": "https://bugzilla.suse.com/1265226"
},
{
"category": "external",
"summary": "SUSE Bug 1265312 for CVE-2026-46300",
"url": "https://bugzilla.suse.com/1265312"
},
{
"category": "external",
"summary": "SUSE Bug 1265383 for CVE-2026-46300",
"url": "https://bugzilla.suse.com/1265383"
},
{
"category": "external",
"summary": "SUSE Bug 1265960 for CVE-2026-46300",
"url": "https://bugzilla.suse.com/1265960"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-43-default-2-1.1.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-43-default-2-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-43-default-2-1.1.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-43-default-2-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-25T11:37:22Z",
"details": "important"
}
],
"title": "CVE-2026-46300"
},
{
"cve": "CVE-2026-46323",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46323"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: gro: don\u0027t merge zcopy skbs\n\nskb_gro_receive() can currently copy frags between the source and GRO\nskb, without checking the zerocopy status, and in particular the\nSKBFL_MANAGED_FRAG_REFS flag.\n\nWhen SKBFL_MANAGED_FRAG_REFS is set, the skb doesn\u0027t hold a reference\non the pages in shinfo-\u003efrags. Appending those frags to another skb\u0027s\nfrags without fixing up the page refcount can lead to UAF.\n\nWhen either the last skb in the GRO chain (the one we would append\nfrags to) or the source skb is zerocopy, don\u0027t merge the skbs.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-43-default-2-1.1.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-43-default-2-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46323",
"url": "https://www.suse.com/security/cve/CVE-2026-46323"
},
{
"category": "external",
"summary": "SUSE Bug 1268029 for CVE-2026-46323",
"url": "https://bugzilla.suse.com/1268029"
},
{
"category": "external",
"summary": "SUSE Bug 1268282 for CVE-2026-46323",
"url": "https://bugzilla.suse.com/1268282"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-43-default-2-1.1.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-43-default-2-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-43-default-2-1.1.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-43-default-2-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-25T11:37:22Z",
"details": "important"
}
],
"title": "CVE-2026-46323"
},
{
"cve": "CVE-2026-46333",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46333"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nptrace: slightly saner \u0027get_dumpable()\u0027 logic\n\nThe \u0027dumpability\u0027 of a task is fundamentally about the memory image of\nthe task - the concept comes from whether it can core dump or not - and\nmakes no sense when you don\u0027t have an associated mm.\n\nAnd almost all users do in fact use it only for the case where the task\nhas a mm pointer.\n\nBut we have one odd special case: ptrace_may_access() uses \u0027dumpable\u0027 to\ncheck various other things entirely independently of the MM (typically\nexplicitly using flags like PTRACE_MODE_READ_FSCREDS). Including for\nthreads that no longer have a VM (and maybe never did, like most kernel\nthreads).\n\nIt\u0027s not what this flag was designed for, but it is what it is.\n\nThe ptrace code does check that the uid/gid matches, so you do have to\nbe uid-0 to see kernel thread details, but this means that the\ntraditional \"drop capabilities\" model doesn\u0027t make any difference for\nthis all.\n\nMake it all make a *bit* more sense by saying that if you don\u0027t have a\nMM pointer, we\u0027ll use a cached \"last dumpability\" flag if the thread\never had a MM (it will be zero for kernel threads since it is never\nset), and require a proper CAP_SYS_PTRACE capability to override.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-43-default-2-1.1.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-43-default-2-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46333",
"url": "https://www.suse.com/security/cve/CVE-2026-46333"
},
{
"category": "external",
"summary": "SUSE Bug 1265308 for CVE-2026-46333",
"url": "https://bugzilla.suse.com/1265308"
},
{
"category": "external",
"summary": "SUSE Bug 1265384 for CVE-2026-46333",
"url": "https://bugzilla.suse.com/1265384"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-43-default-2-1.1.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-43-default-2-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-43-default-2-1.1.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-43-default-2-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-25T11:37:22Z",
"details": "important"
}
],
"title": "CVE-2026-46333"
}
]
}
SUSE-SU-2026:22462-1
Vulnerability from csaf_suse - Published: 2026-06-24 09:32 - Updated: 2026-06-24 09:32Summary
Security update for the Linux Kernel (Live Patch 19 for SUSE Linux Enterprise Micro 6.0)
Severity
Important
Notes
Title of the patch: Security update for the Linux Kernel (Live Patch 19 for SUSE Linux Enterprise Micro 6.0)
Description of the patch:
This update for the SUSE Linux Enterprise Kernel 6.4.0-42.1 fixes various security issues
The following security issues were fixed:
- CVE-2025-54518: AMD-SN-7052: CPU OP Cache Corruption (bsc#1264096).
- CVE-2026-31402: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (bsc#1261640).
- CVE-2026-31504: net: fix fanout UAF in packet_release() via NETDEV_UP race (bsc#1263088).
- CVE-2026-31694: fuse: reject oversized dirents in page cache (bsc#1263902).
- CVE-2026-43503: final dirty.frag related fixes (bsc#1266229).
- CVE-2026-46300: FragNesia attack: another xfrm/esp based local root exploit (bsc#1265224).
- CVE-2026-46323: net: gro: don't merge zcopy skbs (bsc#1268282).
- CVE-2026-46333: ptrace: slightly saner 'get_dumpable()' logic (bsc#1265384).
- net/sched: fix pedit partial COW leading to page cache (bsc#1267625).
Patchnames: SUSE-SLE-Micro-6.1-kernel-467
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
7.4 (High)
Affected products
Recommended
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-42-default-3-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-42-default-3-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
8.2 (High)
Affected products
Recommended
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-42-default-3-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-42-default-3-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-42-default-3-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-42-default-3-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.8 (High)
Affected products
Recommended
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-42-default-3-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-42-default-3-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
8.8 (High)
Affected products
Recommended
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-42-default-3-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-42-default-3-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
8.8 (High)
Affected products
Recommended
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-42-default-3-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-42-default-3-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-42-default-3-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-42-default-3-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.8 (High)
Affected products
Recommended
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-42-default-3-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-42-default-3-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
References
54 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for the Linux Kernel (Live Patch 19 for SUSE Linux Enterprise Micro 6.0)",
"title": "Title of the patch"
},
{
"category": "description",
"text": "\nThis update for the SUSE Linux Enterprise Kernel 6.4.0-42.1 fixes various security issues\n\nThe following security issues were fixed:\n\n- CVE-2025-54518: AMD-SN-7052: CPU OP Cache Corruption (bsc#1264096).\n- CVE-2026-31402: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (bsc#1261640).\n- CVE-2026-31504: net: fix fanout UAF in packet_release() via NETDEV_UP race (bsc#1263088).\n- CVE-2026-31694: fuse: reject oversized dirents in page cache (bsc#1263902).\n- CVE-2026-43503: final dirty.frag related fixes (bsc#1266229).\n- CVE-2026-46300: FragNesia attack: another xfrm/esp based local root exploit (bsc#1265224).\n- CVE-2026-46323: net: gro: don\u0027t merge zcopy skbs (bsc#1268282).\n- CVE-2026-46333: ptrace: slightly saner \u0027get_dumpable()\u0027 logic (bsc#1265384).\n- net/sched: fix pedit partial COW leading to page cache (bsc#1267625).\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-SLE-Micro-6.1-kernel-467",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_22462-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2026:22462-1",
"url": "https://www.suse.com/support/update/announcement/2026/suse-su-202622462-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2026:22462-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-July/027247.html"
},
{
"category": "self",
"summary": "SUSE Bug 1261640",
"url": "https://bugzilla.suse.com/1261640"
},
{
"category": "self",
"summary": "SUSE Bug 1263088",
"url": "https://bugzilla.suse.com/1263088"
},
{
"category": "self",
"summary": "SUSE Bug 1263902",
"url": "https://bugzilla.suse.com/1263902"
},
{
"category": "self",
"summary": "SUSE Bug 1264096",
"url": "https://bugzilla.suse.com/1264096"
},
{
"category": "self",
"summary": "SUSE Bug 1265224",
"url": "https://bugzilla.suse.com/1265224"
},
{
"category": "self",
"summary": "SUSE Bug 1265384",
"url": "https://bugzilla.suse.com/1265384"
},
{
"category": "self",
"summary": "SUSE Bug 1266229",
"url": "https://bugzilla.suse.com/1266229"
},
{
"category": "self",
"summary": "SUSE Bug 1267625",
"url": "https://bugzilla.suse.com/1267625"
},
{
"category": "self",
"summary": "SUSE Bug 1268282",
"url": "https://bugzilla.suse.com/1268282"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-54518 page",
"url": "https://www.suse.com/security/cve/CVE-2025-54518/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-31402 page",
"url": "https://www.suse.com/security/cve/CVE-2026-31402/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-31504 page",
"url": "https://www.suse.com/security/cve/CVE-2026-31504/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-31694 page",
"url": "https://www.suse.com/security/cve/CVE-2026-31694/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43503 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43503/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46300 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46300/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46323 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46323/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46333 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46333/"
}
],
"title": "Security update for the Linux Kernel (Live Patch 19 for SUSE Linux Enterprise Micro 6.0)",
"tracking": {
"current_release_date": "2026-06-24T09:32:59Z",
"generator": {
"date": "2026-06-24T09:32:59Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2026:22462-1",
"initial_release_date": "2026-06-24T09:32:59Z",
"revision_history": [
{
"date": "2026-06-24T09:32:59Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "kernel-livepatch-6_4_0-42-default-3-1.1.s390x",
"product": {
"name": "kernel-livepatch-6_4_0-42-default-3-1.1.s390x",
"product_id": "kernel-livepatch-6_4_0-42-default-3-1.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "kernel-livepatch-6_4_0-42-default-3-1.1.x86_64",
"product": {
"name": "kernel-livepatch-6_4_0-42-default-3-1.1.x86_64",
"product_id": "kernel-livepatch-6_4_0-42-default-3-1.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Micro 6.1",
"product": {
"name": "SUSE Linux Micro 6.1",
"product_id": "SUSE Linux Micro 6.1",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sl-micro:6.1"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-livepatch-6_4_0-42-default-3-1.1.s390x as component of SUSE Linux Micro 6.1",
"product_id": "SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-42-default-3-1.1.s390x"
},
"product_reference": "kernel-livepatch-6_4_0-42-default-3-1.1.s390x",
"relates_to_product_reference": "SUSE Linux Micro 6.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-livepatch-6_4_0-42-default-3-1.1.x86_64 as component of SUSE Linux Micro 6.1",
"product_id": "SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-42-default-3-1.1.x86_64"
},
"product_reference": "kernel-livepatch-6_4_0-42-default-3-1.1.x86_64",
"relates_to_product_reference": "SUSE Linux Micro 6.1"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-54518",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-54518"
}
],
"notes": [
{
"category": "general",
"text": "Improper isolation of shared resources within the CPU operation cache on Zen 2-based products could allow an attacker to corrupt instructions executed at a different privilege level, potentially resulting in privilege escalation.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-42-default-3-1.1.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-42-default-3-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-54518",
"url": "https://www.suse.com/security/cve/CVE-2025-54518"
},
{
"category": "external",
"summary": "SUSE Bug 1264013 for CVE-2025-54518",
"url": "https://bugzilla.suse.com/1264013"
},
{
"category": "external",
"summary": "SUSE Bug 1264066 for CVE-2025-54518",
"url": "https://bugzilla.suse.com/1264066"
},
{
"category": "external",
"summary": "SUSE Bug 1264096 for CVE-2025-54518",
"url": "https://bugzilla.suse.com/1264096"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-42-default-3-1.1.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-42-default-3-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-42-default-3-1.1.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-42-default-3-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-24T09:32:59Z",
"details": "important"
}
],
"title": "CVE-2025-54518"
},
{
"cve": "CVE-2026-31402",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-31402"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnfsd: fix heap overflow in NFSv4.0 LOCK replay cache\n\nThe NFSv4.0 replay cache uses a fixed 112-byte inline buffer\n(rp_ibuf[NFSD4_REPLAY_ISIZE]) to store encoded operation responses.\nThis size was calculated based on OPEN responses and does not account\nfor LOCK denied responses, which include the conflicting lock owner as\na variable-length field up to 1024 bytes (NFS4_OPAQUE_LIMIT).\n\nWhen a LOCK operation is denied due to a conflict with an existing lock\nthat has a large owner, nfsd4_encode_operation() copies the full encoded\nresponse into the undersized replay buffer via read_bytes_from_xdr_buf()\nwith no bounds check. This results in a slab-out-of-bounds write of up\nto 944 bytes past the end of the buffer, corrupting adjacent heap memory.\n\nThis can be triggered remotely by an unauthenticated attacker with two\ncooperating NFSv4.0 clients: one sets a lock with a large owner string,\nthen the other requests a conflicting lock to provoke the denial.\n\nWe could fix this by increasing NFSD4_REPLAY_ISIZE to allow for a full\nopaque, but that would increase the size of every stateowner, when most\nlockowners are not that large.\n\nInstead, fix this by checking the encoded response length against\nNFSD4_REPLAY_ISIZE before copying into the replay buffer. If the\nresponse is too large, set rp_buflen to 0 to skip caching the replay\npayload. The status is still cached, and the client already received the\ncorrect response on the original request.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-42-default-3-1.1.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-42-default-3-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-31402",
"url": "https://www.suse.com/security/cve/CVE-2026-31402"
},
{
"category": "external",
"summary": "SUSE Bug 1261638 for CVE-2026-31402",
"url": "https://bugzilla.suse.com/1261638"
},
{
"category": "external",
"summary": "SUSE Bug 1261640 for CVE-2026-31402",
"url": "https://bugzilla.suse.com/1261640"
},
{
"category": "external",
"summary": "SUSE Bug 1265160 for CVE-2026-31402",
"url": "https://bugzilla.suse.com/1265160"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-42-default-3-1.1.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-42-default-3-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.2,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-42-default-3-1.1.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-42-default-3-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-24T09:32:59Z",
"details": "important"
}
],
"title": "CVE-2026-31402"
},
{
"cve": "CVE-2026-31504",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-31504"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: fix fanout UAF in packet_release() via NETDEV_UP race\n\n`packet_release()` has a race window where `NETDEV_UP` can re-register a\nsocket into a fanout group\u0027s `arr[]` array. The re-registration is not\ncleaned up by `fanout_release()`, leaving a dangling pointer in the fanout\narray.\n`packet_release()` does NOT zero `po-\u003enum` in its `bind_lock` section.\nAfter releasing `bind_lock`, `po-\u003enum` is still non-zero and `po-\u003eifindex`\nstill matches the bound device. A concurrent `packet_notifier(NETDEV_UP)`\nthat already found the socket in `sklist` can re-register the hook.\nFor fanout sockets, this re-registration calls `__fanout_link(sk, po)`\nwhich adds the socket back into `f-\u003earr[]` and increments `f-\u003enum_members`,\nbut does NOT increment `f-\u003esk_ref`.\n\nThe fix sets `po-\u003enum` to zero in `packet_release` while `bind_lock` is\nheld to prevent NETDEV_UP from linking, preventing the race window.\n\nThis bug was found following an additional audit with Claude Code based\non CVE-2025-38617.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-42-default-3-1.1.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-42-default-3-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-31504",
"url": "https://www.suse.com/security/cve/CVE-2026-31504"
},
{
"category": "external",
"summary": "SUSE Bug 1263085 for CVE-2026-31504",
"url": "https://bugzilla.suse.com/1263085"
},
{
"category": "external",
"summary": "SUSE Bug 1263088 for CVE-2026-31504",
"url": "https://bugzilla.suse.com/1263088"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-42-default-3-1.1.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-42-default-3-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-42-default-3-1.1.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-42-default-3-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-24T09:32:59Z",
"details": "important"
}
],
"title": "CVE-2026-31504"
},
{
"cve": "CVE-2026-31694",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-31694"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nfuse: reject oversized dirents in page cache\n\nfuse_add_dirent_to_cache() computes a serialized dirent size from the\nserver-controlled namelen field and copies the dirent into a single\npage-cache page. The existing logic only checks whether the dirent fits\nin the remaining space of the current page and advances to a fresh page\nif not. It never checks whether the dirent itself exceeds PAGE_SIZE.\n\nAs a result, a malicious FUSE server can return a dirent with\nnamelen=4095, producing a serialized record size of 4120 bytes. On 4 KiB\npage systems this causes memcpy() to overflow the cache page by 24 bytes\ninto the following kernel page.\n\nReject dirents that cannot fit in a single page before copying them into\nthe readdir cache.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-42-default-3-1.1.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-42-default-3-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-31694",
"url": "https://www.suse.com/security/cve/CVE-2026-31694"
},
{
"category": "external",
"summary": "SUSE Bug 1263901 for CVE-2026-31694",
"url": "https://bugzilla.suse.com/1263901"
},
{
"category": "external",
"summary": "SUSE Bug 1263902 for CVE-2026-31694",
"url": "https://bugzilla.suse.com/1263902"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-42-default-3-1.1.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-42-default-3-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-42-default-3-1.1.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-42-default-3-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-24T09:32:59Z",
"details": "important"
}
],
"title": "CVE-2026-31694"
},
{
"cve": "CVE-2026-43503",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43503"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: skbuff: propagate shared-frag marker through frag-transfer helpers\n\nTwo frag-transfer helpers (__pskb_copy_fclone() and skb_shift()) fail\nto propagate the SKBFL_SHARED_FRAG bit in skb_shinfo()-\u003eflags when\nmoving frags from source to destination. __pskb_copy_fclone() defers\nthe rest of the shinfo metadata to skb_copy_header() after copying\nfrag descriptors, but that helper only carries over gso_{size,segs,\ntype} and never touches skb_shinfo()-\u003eflags; skb_shift() moves frag\ndescriptors directly and leaves flags untouched. As a result, the\ndestination skb keeps a reference to the same externally-owned or\npage-cache-backed pages while reporting skb_has_shared_frag() as\nfalse.\n\nThe mismatch is harmful in any in-place writer that uses\nskb_has_shared_frag() to decide whether shared pages must be detoured\nthrough skb_cow_data(). ESP input is one such writer (esp4.c,\nesp6.c), and a single nft \u0027dup to \u003clocal\u003e\u0027 rule -- or any other\nnf_dup_ipv4() / xt_TEE caller -- is enough to land a pskb_copy()\u0027d\nskb in esp_input() with the marker stripped, letting an unprivileged\nuser write into the page cache of a root-owned read-only file via\nauthencesn-ESN stray writes.\n\nSet SKBFL_SHARED_FRAG on the destination whenever frag descriptors\nwere actually moved from the source. skb_copy() and skb_copy_expand()\nshare skb_copy_header() too but linearize all paged data into freshly\nallocated head storage and emerge with nr_frags == 0, so\nskb_has_shared_frag() returns false on its own; they need no change.\n\nThe same omission exists in skb_gro_receive() and skb_gro_receive_list().\nThe former moves the incoming skb\u0027s frag descriptors into the\naccumulator\u0027s last sub-skb via two paths (a direct frag-move loop and\nthe head_frag + memcpy path); the latter chains the incoming skb whole\nonto p\u0027s frag_list. Downstream skb_segment() reads only\nskb_shinfo(p)-\u003eflags, and skb_segment_list() reuses each sub-skb\u0027s\nshinfo as the nskb -- both p and lp must carry the marker.\n\nThe same omission also exists in tcp_clone_payload(), which builds an\nMTU probe skb by moving frag descriptors from skbs on sk_write_queue\ninto a freshly allocated nskb. The helper falls into the same family\nand warrants the same fix for consistency; no TCP TX-side in-place\nwriter is currently known to reach a user page through this gap, but\na future consumer depending on the marker would regress silently.\n\nThe same omission exists in skb_segment(): the per-iteration flag\nmerge takes only head_skb\u0027s flag, and the inner switch that rebinds\nfrag_skb to list_skb on head_skb-frags exhaustion does not fold the\nnew frag_skb\u0027s flag into nskb. Fold frag_skb\u0027s flag at both sites\nso segments drawing frags from frag_list members carry the marker.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-42-default-3-1.1.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-42-default-3-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43503",
"url": "https://www.suse.com/security/cve/CVE-2026-43503"
},
{
"category": "external",
"summary": "SUSE Bug 1265209 for CVE-2026-43503",
"url": "https://bugzilla.suse.com/1265209"
},
{
"category": "external",
"summary": "SUSE Bug 1265960 for CVE-2026-43503",
"url": "https://bugzilla.suse.com/1265960"
},
{
"category": "external",
"summary": "SUSE Bug 1266229 for CVE-2026-43503",
"url": "https://bugzilla.suse.com/1266229"
},
{
"category": "external",
"summary": "SUSE Bug 1269878 for CVE-2026-43503",
"url": "https://bugzilla.suse.com/1269878"
},
{
"category": "external",
"summary": "SUSE Bug 1270098 for CVE-2026-43503",
"url": "https://bugzilla.suse.com/1270098"
},
{
"category": "external",
"summary": "SUSE Bug 1270100 for CVE-2026-43503",
"url": "https://bugzilla.suse.com/1270100"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-42-default-3-1.1.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-42-default-3-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-42-default-3-1.1.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-42-default-3-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-24T09:32:59Z",
"details": "important"
}
],
"title": "CVE-2026-43503"
},
{
"cve": "CVE-2026-46300",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46300"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: skbuff: preserve shared-frag marker during coalescing\n\nskb_try_coalesce() can attach paged frags from @from to @to. If @from\nhas SKBFL_SHARED_FRAG set, the resulting @to skb can contain the same\nexternally-owned or page-cache-backed frags, but the shared-frag marker\nis currently lost.\n\nThat breaks the invariant relied on by later in-place writers. In\nparticular, ESP input checks skb_has_shared_frag() before deciding\nwhether an uncloned nonlinear skb can skip skb_cow_data(). If TCP\nreceive coalescing has moved shared frags into an unmarked skb, ESP can\nsee skb_has_shared_frag() as false and decrypt in place over page-cache\nbacked frags.\n\nPropagate SKBFL_SHARED_FRAG when skb_try_coalesce() transfers paged\nfrags. The tailroom copy path does not need the marker because it copies\nbytes into @to\u0027s linear data rather than transferring frag descriptors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-42-default-3-1.1.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-42-default-3-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46300",
"url": "https://www.suse.com/security/cve/CVE-2026-46300"
},
{
"category": "external",
"summary": "SUSE Bug 1265209 for CVE-2026-46300",
"url": "https://bugzilla.suse.com/1265209"
},
{
"category": "external",
"summary": "SUSE Bug 1265226 for CVE-2026-46300",
"url": "https://bugzilla.suse.com/1265226"
},
{
"category": "external",
"summary": "SUSE Bug 1265312 for CVE-2026-46300",
"url": "https://bugzilla.suse.com/1265312"
},
{
"category": "external",
"summary": "SUSE Bug 1265383 for CVE-2026-46300",
"url": "https://bugzilla.suse.com/1265383"
},
{
"category": "external",
"summary": "SUSE Bug 1265960 for CVE-2026-46300",
"url": "https://bugzilla.suse.com/1265960"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-42-default-3-1.1.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-42-default-3-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-42-default-3-1.1.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-42-default-3-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-24T09:32:59Z",
"details": "important"
}
],
"title": "CVE-2026-46300"
},
{
"cve": "CVE-2026-46323",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46323"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: gro: don\u0027t merge zcopy skbs\n\nskb_gro_receive() can currently copy frags between the source and GRO\nskb, without checking the zerocopy status, and in particular the\nSKBFL_MANAGED_FRAG_REFS flag.\n\nWhen SKBFL_MANAGED_FRAG_REFS is set, the skb doesn\u0027t hold a reference\non the pages in shinfo-\u003efrags. Appending those frags to another skb\u0027s\nfrags without fixing up the page refcount can lead to UAF.\n\nWhen either the last skb in the GRO chain (the one we would append\nfrags to) or the source skb is zerocopy, don\u0027t merge the skbs.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-42-default-3-1.1.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-42-default-3-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46323",
"url": "https://www.suse.com/security/cve/CVE-2026-46323"
},
{
"category": "external",
"summary": "SUSE Bug 1268029 for CVE-2026-46323",
"url": "https://bugzilla.suse.com/1268029"
},
{
"category": "external",
"summary": "SUSE Bug 1268282 for CVE-2026-46323",
"url": "https://bugzilla.suse.com/1268282"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-42-default-3-1.1.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-42-default-3-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-42-default-3-1.1.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-42-default-3-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-24T09:32:59Z",
"details": "important"
}
],
"title": "CVE-2026-46323"
},
{
"cve": "CVE-2026-46333",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46333"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nptrace: slightly saner \u0027get_dumpable()\u0027 logic\n\nThe \u0027dumpability\u0027 of a task is fundamentally about the memory image of\nthe task - the concept comes from whether it can core dump or not - and\nmakes no sense when you don\u0027t have an associated mm.\n\nAnd almost all users do in fact use it only for the case where the task\nhas a mm pointer.\n\nBut we have one odd special case: ptrace_may_access() uses \u0027dumpable\u0027 to\ncheck various other things entirely independently of the MM (typically\nexplicitly using flags like PTRACE_MODE_READ_FSCREDS). Including for\nthreads that no longer have a VM (and maybe never did, like most kernel\nthreads).\n\nIt\u0027s not what this flag was designed for, but it is what it is.\n\nThe ptrace code does check that the uid/gid matches, so you do have to\nbe uid-0 to see kernel thread details, but this means that the\ntraditional \"drop capabilities\" model doesn\u0027t make any difference for\nthis all.\n\nMake it all make a *bit* more sense by saying that if you don\u0027t have a\nMM pointer, we\u0027ll use a cached \"last dumpability\" flag if the thread\never had a MM (it will be zero for kernel threads since it is never\nset), and require a proper CAP_SYS_PTRACE capability to override.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-42-default-3-1.1.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-42-default-3-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46333",
"url": "https://www.suse.com/security/cve/CVE-2026-46333"
},
{
"category": "external",
"summary": "SUSE Bug 1265308 for CVE-2026-46333",
"url": "https://bugzilla.suse.com/1265308"
},
{
"category": "external",
"summary": "SUSE Bug 1265384 for CVE-2026-46333",
"url": "https://bugzilla.suse.com/1265384"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-42-default-3-1.1.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-42-default-3-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-42-default-3-1.1.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-42-default-3-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-24T09:32:59Z",
"details": "important"
}
],
"title": "CVE-2026-46333"
}
]
}
SUSE-SU-2026:22474-1
Vulnerability from csaf_suse - Published: 2026-06-25 11:37 - Updated: 2026-06-25 11:37Summary
Security update for the Linux Kernel (Live Patch 20 for SUSE Linux Enterprise Micro 6.0)
Severity
Important
Notes
Title of the patch: Security update for the Linux Kernel (Live Patch 20 for SUSE Linux Enterprise Micro 6.0)
Description of the patch:
This update for the SUSE Linux Enterprise Kernel 6.4.0-43.1 fixes various security issues
The following security issues were fixed:
- CVE-2025-54518: AMD-SN-7052: CPU OP Cache Corruption (bsc#1264096).
- CVE-2026-31402: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (bsc#1261640).
- CVE-2026-31504: net: fix fanout UAF in packet_release() via NETDEV_UP race (bsc#1263088).
- CVE-2026-31694: fuse: reject oversized dirents in page cache (bsc#1263902).
- CVE-2026-43503: final dirty.frag related fixes (bsc#1266229).
- CVE-2026-46300: FragNesia attack: another xfrm/esp based local root exploit (bsc#1265224).
- CVE-2026-46323: net: gro: don't merge zcopy skbs (bsc#1268282).
- CVE-2026-46333: ptrace: slightly saner 'get_dumpable()' logic (bsc#1265384).
- net/sched: fix pedit partial COW leading to page cache (bsc#1267625).
Patchnames: SUSE-SLE-Micro-6.1-kernel-492
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
7.4 (High)
Affected products
Recommended
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-43-default-2-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-43-default-2-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
8.2 (High)
Affected products
Recommended
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-43-default-2-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-43-default-2-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-43-default-2-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-43-default-2-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.8 (High)
Affected products
Recommended
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-43-default-2-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-43-default-2-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
8.8 (High)
Affected products
Recommended
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-43-default-2-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-43-default-2-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
8.8 (High)
Affected products
Recommended
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-43-default-2-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-43-default-2-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-43-default-2-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-43-default-2-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.8 (High)
Affected products
Recommended
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-43-default-2-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-43-default-2-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
References
54 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for the Linux Kernel (Live Patch 20 for SUSE Linux Enterprise Micro 6.0)",
"title": "Title of the patch"
},
{
"category": "description",
"text": "\nThis update for the SUSE Linux Enterprise Kernel 6.4.0-43.1 fixes various security issues\n\nThe following security issues were fixed:\n\n- CVE-2025-54518: AMD-SN-7052: CPU OP Cache Corruption (bsc#1264096).\n- CVE-2026-31402: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (bsc#1261640).\n- CVE-2026-31504: net: fix fanout UAF in packet_release() via NETDEV_UP race (bsc#1263088).\n- CVE-2026-31694: fuse: reject oversized dirents in page cache (bsc#1263902).\n- CVE-2026-43503: final dirty.frag related fixes (bsc#1266229).\n- CVE-2026-46300: FragNesia attack: another xfrm/esp based local root exploit (bsc#1265224).\n- CVE-2026-46323: net: gro: don\u0027t merge zcopy skbs (bsc#1268282).\n- CVE-2026-46333: ptrace: slightly saner \u0027get_dumpable()\u0027 logic (bsc#1265384).\n- net/sched: fix pedit partial COW leading to page cache (bsc#1267625).\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-SLE-Micro-6.1-kernel-492",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_22474-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2026:22474-1",
"url": "https://www.suse.com/support/update/announcement/2026/suse-su-202622474-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2026:22474-1",
"url": "https://lists.suse.com/pipermail/sle-updates/2026-July/047932.html"
},
{
"category": "self",
"summary": "SUSE Bug 1261640",
"url": "https://bugzilla.suse.com/1261640"
},
{
"category": "self",
"summary": "SUSE Bug 1263088",
"url": "https://bugzilla.suse.com/1263088"
},
{
"category": "self",
"summary": "SUSE Bug 1263902",
"url": "https://bugzilla.suse.com/1263902"
},
{
"category": "self",
"summary": "SUSE Bug 1264096",
"url": "https://bugzilla.suse.com/1264096"
},
{
"category": "self",
"summary": "SUSE Bug 1265224",
"url": "https://bugzilla.suse.com/1265224"
},
{
"category": "self",
"summary": "SUSE Bug 1265384",
"url": "https://bugzilla.suse.com/1265384"
},
{
"category": "self",
"summary": "SUSE Bug 1266229",
"url": "https://bugzilla.suse.com/1266229"
},
{
"category": "self",
"summary": "SUSE Bug 1267625",
"url": "https://bugzilla.suse.com/1267625"
},
{
"category": "self",
"summary": "SUSE Bug 1268282",
"url": "https://bugzilla.suse.com/1268282"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-54518 page",
"url": "https://www.suse.com/security/cve/CVE-2025-54518/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-31402 page",
"url": "https://www.suse.com/security/cve/CVE-2026-31402/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-31504 page",
"url": "https://www.suse.com/security/cve/CVE-2026-31504/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-31694 page",
"url": "https://www.suse.com/security/cve/CVE-2026-31694/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43503 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43503/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46300 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46300/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46323 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46323/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46333 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46333/"
}
],
"title": "Security update for the Linux Kernel (Live Patch 20 for SUSE Linux Enterprise Micro 6.0)",
"tracking": {
"current_release_date": "2026-06-25T11:37:22Z",
"generator": {
"date": "2026-06-25T11:37:22Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2026:22474-1",
"initial_release_date": "2026-06-25T11:37:22Z",
"revision_history": [
{
"date": "2026-06-25T11:37:22Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "kernel-livepatch-6_4_0-43-default-2-1.1.s390x",
"product": {
"name": "kernel-livepatch-6_4_0-43-default-2-1.1.s390x",
"product_id": "kernel-livepatch-6_4_0-43-default-2-1.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "kernel-livepatch-6_4_0-43-default-2-1.1.x86_64",
"product": {
"name": "kernel-livepatch-6_4_0-43-default-2-1.1.x86_64",
"product_id": "kernel-livepatch-6_4_0-43-default-2-1.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Micro 6.1",
"product": {
"name": "SUSE Linux Micro 6.1",
"product_id": "SUSE Linux Micro 6.1",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sl-micro:6.1"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-livepatch-6_4_0-43-default-2-1.1.s390x as component of SUSE Linux Micro 6.1",
"product_id": "SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-43-default-2-1.1.s390x"
},
"product_reference": "kernel-livepatch-6_4_0-43-default-2-1.1.s390x",
"relates_to_product_reference": "SUSE Linux Micro 6.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-livepatch-6_4_0-43-default-2-1.1.x86_64 as component of SUSE Linux Micro 6.1",
"product_id": "SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-43-default-2-1.1.x86_64"
},
"product_reference": "kernel-livepatch-6_4_0-43-default-2-1.1.x86_64",
"relates_to_product_reference": "SUSE Linux Micro 6.1"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-54518",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-54518"
}
],
"notes": [
{
"category": "general",
"text": "Improper isolation of shared resources within the CPU operation cache on Zen 2-based products could allow an attacker to corrupt instructions executed at a different privilege level, potentially resulting in privilege escalation.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-43-default-2-1.1.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-43-default-2-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-54518",
"url": "https://www.suse.com/security/cve/CVE-2025-54518"
},
{
"category": "external",
"summary": "SUSE Bug 1264013 for CVE-2025-54518",
"url": "https://bugzilla.suse.com/1264013"
},
{
"category": "external",
"summary": "SUSE Bug 1264066 for CVE-2025-54518",
"url": "https://bugzilla.suse.com/1264066"
},
{
"category": "external",
"summary": "SUSE Bug 1264096 for CVE-2025-54518",
"url": "https://bugzilla.suse.com/1264096"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-43-default-2-1.1.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-43-default-2-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-43-default-2-1.1.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-43-default-2-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-25T11:37:22Z",
"details": "important"
}
],
"title": "CVE-2025-54518"
},
{
"cve": "CVE-2026-31402",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-31402"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnfsd: fix heap overflow in NFSv4.0 LOCK replay cache\n\nThe NFSv4.0 replay cache uses a fixed 112-byte inline buffer\n(rp_ibuf[NFSD4_REPLAY_ISIZE]) to store encoded operation responses.\nThis size was calculated based on OPEN responses and does not account\nfor LOCK denied responses, which include the conflicting lock owner as\na variable-length field up to 1024 bytes (NFS4_OPAQUE_LIMIT).\n\nWhen a LOCK operation is denied due to a conflict with an existing lock\nthat has a large owner, nfsd4_encode_operation() copies the full encoded\nresponse into the undersized replay buffer via read_bytes_from_xdr_buf()\nwith no bounds check. This results in a slab-out-of-bounds write of up\nto 944 bytes past the end of the buffer, corrupting adjacent heap memory.\n\nThis can be triggered remotely by an unauthenticated attacker with two\ncooperating NFSv4.0 clients: one sets a lock with a large owner string,\nthen the other requests a conflicting lock to provoke the denial.\n\nWe could fix this by increasing NFSD4_REPLAY_ISIZE to allow for a full\nopaque, but that would increase the size of every stateowner, when most\nlockowners are not that large.\n\nInstead, fix this by checking the encoded response length against\nNFSD4_REPLAY_ISIZE before copying into the replay buffer. If the\nresponse is too large, set rp_buflen to 0 to skip caching the replay\npayload. The status is still cached, and the client already received the\ncorrect response on the original request.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-43-default-2-1.1.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-43-default-2-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-31402",
"url": "https://www.suse.com/security/cve/CVE-2026-31402"
},
{
"category": "external",
"summary": "SUSE Bug 1261638 for CVE-2026-31402",
"url": "https://bugzilla.suse.com/1261638"
},
{
"category": "external",
"summary": "SUSE Bug 1261640 for CVE-2026-31402",
"url": "https://bugzilla.suse.com/1261640"
},
{
"category": "external",
"summary": "SUSE Bug 1265160 for CVE-2026-31402",
"url": "https://bugzilla.suse.com/1265160"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-43-default-2-1.1.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-43-default-2-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.2,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-43-default-2-1.1.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-43-default-2-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-25T11:37:22Z",
"details": "important"
}
],
"title": "CVE-2026-31402"
},
{
"cve": "CVE-2026-31504",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-31504"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: fix fanout UAF in packet_release() via NETDEV_UP race\n\n`packet_release()` has a race window where `NETDEV_UP` can re-register a\nsocket into a fanout group\u0027s `arr[]` array. The re-registration is not\ncleaned up by `fanout_release()`, leaving a dangling pointer in the fanout\narray.\n`packet_release()` does NOT zero `po-\u003enum` in its `bind_lock` section.\nAfter releasing `bind_lock`, `po-\u003enum` is still non-zero and `po-\u003eifindex`\nstill matches the bound device. A concurrent `packet_notifier(NETDEV_UP)`\nthat already found the socket in `sklist` can re-register the hook.\nFor fanout sockets, this re-registration calls `__fanout_link(sk, po)`\nwhich adds the socket back into `f-\u003earr[]` and increments `f-\u003enum_members`,\nbut does NOT increment `f-\u003esk_ref`.\n\nThe fix sets `po-\u003enum` to zero in `packet_release` while `bind_lock` is\nheld to prevent NETDEV_UP from linking, preventing the race window.\n\nThis bug was found following an additional audit with Claude Code based\non CVE-2025-38617.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-43-default-2-1.1.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-43-default-2-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-31504",
"url": "https://www.suse.com/security/cve/CVE-2026-31504"
},
{
"category": "external",
"summary": "SUSE Bug 1263085 for CVE-2026-31504",
"url": "https://bugzilla.suse.com/1263085"
},
{
"category": "external",
"summary": "SUSE Bug 1263088 for CVE-2026-31504",
"url": "https://bugzilla.suse.com/1263088"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-43-default-2-1.1.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-43-default-2-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-43-default-2-1.1.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-43-default-2-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-25T11:37:22Z",
"details": "important"
}
],
"title": "CVE-2026-31504"
},
{
"cve": "CVE-2026-31694",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-31694"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nfuse: reject oversized dirents in page cache\n\nfuse_add_dirent_to_cache() computes a serialized dirent size from the\nserver-controlled namelen field and copies the dirent into a single\npage-cache page. The existing logic only checks whether the dirent fits\nin the remaining space of the current page and advances to a fresh page\nif not. It never checks whether the dirent itself exceeds PAGE_SIZE.\n\nAs a result, a malicious FUSE server can return a dirent with\nnamelen=4095, producing a serialized record size of 4120 bytes. On 4 KiB\npage systems this causes memcpy() to overflow the cache page by 24 bytes\ninto the following kernel page.\n\nReject dirents that cannot fit in a single page before copying them into\nthe readdir cache.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-43-default-2-1.1.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-43-default-2-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-31694",
"url": "https://www.suse.com/security/cve/CVE-2026-31694"
},
{
"category": "external",
"summary": "SUSE Bug 1263901 for CVE-2026-31694",
"url": "https://bugzilla.suse.com/1263901"
},
{
"category": "external",
"summary": "SUSE Bug 1263902 for CVE-2026-31694",
"url": "https://bugzilla.suse.com/1263902"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-43-default-2-1.1.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-43-default-2-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-43-default-2-1.1.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-43-default-2-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-25T11:37:22Z",
"details": "important"
}
],
"title": "CVE-2026-31694"
},
{
"cve": "CVE-2026-43503",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43503"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: skbuff: propagate shared-frag marker through frag-transfer helpers\n\nTwo frag-transfer helpers (__pskb_copy_fclone() and skb_shift()) fail\nto propagate the SKBFL_SHARED_FRAG bit in skb_shinfo()-\u003eflags when\nmoving frags from source to destination. __pskb_copy_fclone() defers\nthe rest of the shinfo metadata to skb_copy_header() after copying\nfrag descriptors, but that helper only carries over gso_{size,segs,\ntype} and never touches skb_shinfo()-\u003eflags; skb_shift() moves frag\ndescriptors directly and leaves flags untouched. As a result, the\ndestination skb keeps a reference to the same externally-owned or\npage-cache-backed pages while reporting skb_has_shared_frag() as\nfalse.\n\nThe mismatch is harmful in any in-place writer that uses\nskb_has_shared_frag() to decide whether shared pages must be detoured\nthrough skb_cow_data(). ESP input is one such writer (esp4.c,\nesp6.c), and a single nft \u0027dup to \u003clocal\u003e\u0027 rule -- or any other\nnf_dup_ipv4() / xt_TEE caller -- is enough to land a pskb_copy()\u0027d\nskb in esp_input() with the marker stripped, letting an unprivileged\nuser write into the page cache of a root-owned read-only file via\nauthencesn-ESN stray writes.\n\nSet SKBFL_SHARED_FRAG on the destination whenever frag descriptors\nwere actually moved from the source. skb_copy() and skb_copy_expand()\nshare skb_copy_header() too but linearize all paged data into freshly\nallocated head storage and emerge with nr_frags == 0, so\nskb_has_shared_frag() returns false on its own; they need no change.\n\nThe same omission exists in skb_gro_receive() and skb_gro_receive_list().\nThe former moves the incoming skb\u0027s frag descriptors into the\naccumulator\u0027s last sub-skb via two paths (a direct frag-move loop and\nthe head_frag + memcpy path); the latter chains the incoming skb whole\nonto p\u0027s frag_list. Downstream skb_segment() reads only\nskb_shinfo(p)-\u003eflags, and skb_segment_list() reuses each sub-skb\u0027s\nshinfo as the nskb -- both p and lp must carry the marker.\n\nThe same omission also exists in tcp_clone_payload(), which builds an\nMTU probe skb by moving frag descriptors from skbs on sk_write_queue\ninto a freshly allocated nskb. The helper falls into the same family\nand warrants the same fix for consistency; no TCP TX-side in-place\nwriter is currently known to reach a user page through this gap, but\na future consumer depending on the marker would regress silently.\n\nThe same omission exists in skb_segment(): the per-iteration flag\nmerge takes only head_skb\u0027s flag, and the inner switch that rebinds\nfrag_skb to list_skb on head_skb-frags exhaustion does not fold the\nnew frag_skb\u0027s flag into nskb. Fold frag_skb\u0027s flag at both sites\nso segments drawing frags from frag_list members carry the marker.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-43-default-2-1.1.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-43-default-2-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43503",
"url": "https://www.suse.com/security/cve/CVE-2026-43503"
},
{
"category": "external",
"summary": "SUSE Bug 1265209 for CVE-2026-43503",
"url": "https://bugzilla.suse.com/1265209"
},
{
"category": "external",
"summary": "SUSE Bug 1265960 for CVE-2026-43503",
"url": "https://bugzilla.suse.com/1265960"
},
{
"category": "external",
"summary": "SUSE Bug 1266229 for CVE-2026-43503",
"url": "https://bugzilla.suse.com/1266229"
},
{
"category": "external",
"summary": "SUSE Bug 1269878 for CVE-2026-43503",
"url": "https://bugzilla.suse.com/1269878"
},
{
"category": "external",
"summary": "SUSE Bug 1270098 for CVE-2026-43503",
"url": "https://bugzilla.suse.com/1270098"
},
{
"category": "external",
"summary": "SUSE Bug 1270100 for CVE-2026-43503",
"url": "https://bugzilla.suse.com/1270100"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-43-default-2-1.1.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-43-default-2-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-43-default-2-1.1.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-43-default-2-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-25T11:37:22Z",
"details": "important"
}
],
"title": "CVE-2026-43503"
},
{
"cve": "CVE-2026-46300",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46300"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: skbuff: preserve shared-frag marker during coalescing\n\nskb_try_coalesce() can attach paged frags from @from to @to. If @from\nhas SKBFL_SHARED_FRAG set, the resulting @to skb can contain the same\nexternally-owned or page-cache-backed frags, but the shared-frag marker\nis currently lost.\n\nThat breaks the invariant relied on by later in-place writers. In\nparticular, ESP input checks skb_has_shared_frag() before deciding\nwhether an uncloned nonlinear skb can skip skb_cow_data(). If TCP\nreceive coalescing has moved shared frags into an unmarked skb, ESP can\nsee skb_has_shared_frag() as false and decrypt in place over page-cache\nbacked frags.\n\nPropagate SKBFL_SHARED_FRAG when skb_try_coalesce() transfers paged\nfrags. The tailroom copy path does not need the marker because it copies\nbytes into @to\u0027s linear data rather than transferring frag descriptors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-43-default-2-1.1.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-43-default-2-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46300",
"url": "https://www.suse.com/security/cve/CVE-2026-46300"
},
{
"category": "external",
"summary": "SUSE Bug 1265209 for CVE-2026-46300",
"url": "https://bugzilla.suse.com/1265209"
},
{
"category": "external",
"summary": "SUSE Bug 1265226 for CVE-2026-46300",
"url": "https://bugzilla.suse.com/1265226"
},
{
"category": "external",
"summary": "SUSE Bug 1265312 for CVE-2026-46300",
"url": "https://bugzilla.suse.com/1265312"
},
{
"category": "external",
"summary": "SUSE Bug 1265383 for CVE-2026-46300",
"url": "https://bugzilla.suse.com/1265383"
},
{
"category": "external",
"summary": "SUSE Bug 1265960 for CVE-2026-46300",
"url": "https://bugzilla.suse.com/1265960"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-43-default-2-1.1.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-43-default-2-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-43-default-2-1.1.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-43-default-2-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-25T11:37:22Z",
"details": "important"
}
],
"title": "CVE-2026-46300"
},
{
"cve": "CVE-2026-46323",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46323"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: gro: don\u0027t merge zcopy skbs\n\nskb_gro_receive() can currently copy frags between the source and GRO\nskb, without checking the zerocopy status, and in particular the\nSKBFL_MANAGED_FRAG_REFS flag.\n\nWhen SKBFL_MANAGED_FRAG_REFS is set, the skb doesn\u0027t hold a reference\non the pages in shinfo-\u003efrags. Appending those frags to another skb\u0027s\nfrags without fixing up the page refcount can lead to UAF.\n\nWhen either the last skb in the GRO chain (the one we would append\nfrags to) or the source skb is zerocopy, don\u0027t merge the skbs.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-43-default-2-1.1.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-43-default-2-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46323",
"url": "https://www.suse.com/security/cve/CVE-2026-46323"
},
{
"category": "external",
"summary": "SUSE Bug 1268029 for CVE-2026-46323",
"url": "https://bugzilla.suse.com/1268029"
},
{
"category": "external",
"summary": "SUSE Bug 1268282 for CVE-2026-46323",
"url": "https://bugzilla.suse.com/1268282"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-43-default-2-1.1.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-43-default-2-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-43-default-2-1.1.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-43-default-2-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-25T11:37:22Z",
"details": "important"
}
],
"title": "CVE-2026-46323"
},
{
"cve": "CVE-2026-46333",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46333"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nptrace: slightly saner \u0027get_dumpable()\u0027 logic\n\nThe \u0027dumpability\u0027 of a task is fundamentally about the memory image of\nthe task - the concept comes from whether it can core dump or not - and\nmakes no sense when you don\u0027t have an associated mm.\n\nAnd almost all users do in fact use it only for the case where the task\nhas a mm pointer.\n\nBut we have one odd special case: ptrace_may_access() uses \u0027dumpable\u0027 to\ncheck various other things entirely independently of the MM (typically\nexplicitly using flags like PTRACE_MODE_READ_FSCREDS). Including for\nthreads that no longer have a VM (and maybe never did, like most kernel\nthreads).\n\nIt\u0027s not what this flag was designed for, but it is what it is.\n\nThe ptrace code does check that the uid/gid matches, so you do have to\nbe uid-0 to see kernel thread details, but this means that the\ntraditional \"drop capabilities\" model doesn\u0027t make any difference for\nthis all.\n\nMake it all make a *bit* more sense by saying that if you don\u0027t have a\nMM pointer, we\u0027ll use a cached \"last dumpability\" flag if the thread\never had a MM (it will be zero for kernel threads since it is never\nset), and require a proper CAP_SYS_PTRACE capability to override.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-43-default-2-1.1.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-43-default-2-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46333",
"url": "https://www.suse.com/security/cve/CVE-2026-46333"
},
{
"category": "external",
"summary": "SUSE Bug 1265308 for CVE-2026-46333",
"url": "https://bugzilla.suse.com/1265308"
},
{
"category": "external",
"summary": "SUSE Bug 1265384 for CVE-2026-46333",
"url": "https://bugzilla.suse.com/1265384"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-43-default-2-1.1.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-43-default-2-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-43-default-2-1.1.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-43-default-2-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-25T11:37:22Z",
"details": "important"
}
],
"title": "CVE-2026-46333"
}
]
}
SUSE-SU-2026:22488-1
Vulnerability from csaf_suse - Published: 2026-06-24 09:59 - Updated: 2026-06-24 09:59Summary
Security update for the Linux Kernel RT (Live Patch 20 for SUSE Linux Enterprise Micro 6.0)
Severity
Important
Notes
Title of the patch: Security update for the Linux Kernel RT (Live Patch 20 for SUSE Linux Enterprise Micro 6.0)
Description of the patch:
This update for the SUSE Linux Enterprise Kernel 6.4.0-42.1 fixes various security issues
The following security issues were fixed:
- CVE-2025-54518: AMD-SN-7052: CPU OP Cache Corruption (bsc#1264096).
- CVE-2026-31402: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (bsc#1261640).
- CVE-2026-31504: net: fix fanout UAF in packet_release() via NETDEV_UP race (bsc#1263088).
- CVE-2026-31694: fuse: reject oversized dirents in page cache (bsc#1263902).
- CVE-2026-43503: final dirty.frag related fixes (bsc#1266229).
- CVE-2026-46300: FragNesia attack: another xfrm/esp based local root exploit (bsc#1265224).
- CVE-2026-46323: net: gro: don't merge zcopy skbs (bsc#1268282).
- CVE-2026-46333: ptrace: slightly saner 'get_dumpable()' logic (bsc#1265384).
- net/sched: fix pedit partial COW leading to page cache (bsc#1267625).
Patchnames: SUSE-SLE-Micro-6.1-kernel-478
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
7.4 (High)
Affected products
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-42-rt-3-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
8.2 (High)
Affected products
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-42-rt-3-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-42-rt-3-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.8 (High)
Affected products
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-42-rt-3-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
8.8 (High)
Affected products
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-42-rt-3-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
8.8 (High)
Affected products
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-42-rt-3-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-42-rt-3-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.8 (High)
Affected products
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-42-rt-3-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
References
54 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for the Linux Kernel RT (Live Patch 20 for SUSE Linux Enterprise Micro 6.0)",
"title": "Title of the patch"
},
{
"category": "description",
"text": "\nThis update for the SUSE Linux Enterprise Kernel 6.4.0-42.1 fixes various security issues\n\nThe following security issues were fixed:\n\n- CVE-2025-54518: AMD-SN-7052: CPU OP Cache Corruption (bsc#1264096).\n- CVE-2026-31402: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (bsc#1261640).\n- CVE-2026-31504: net: fix fanout UAF in packet_release() via NETDEV_UP race (bsc#1263088).\n- CVE-2026-31694: fuse: reject oversized dirents in page cache (bsc#1263902).\n- CVE-2026-43503: final dirty.frag related fixes (bsc#1266229).\n- CVE-2026-46300: FragNesia attack: another xfrm/esp based local root exploit (bsc#1265224).\n- CVE-2026-46323: net: gro: don\u0027t merge zcopy skbs (bsc#1268282).\n- CVE-2026-46333: ptrace: slightly saner \u0027get_dumpable()\u0027 logic (bsc#1265384).\n- net/sched: fix pedit partial COW leading to page cache (bsc#1267625).\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-SLE-Micro-6.1-kernel-478",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_22488-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2026:22488-1",
"url": "https://www.suse.com/support/update/announcement/2026/suse-su-202622488-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2026:22488-1",
"url": "https://lists.suse.com/pipermail/sle-updates/2026-July/047918.html"
},
{
"category": "self",
"summary": "SUSE Bug 1261640",
"url": "https://bugzilla.suse.com/1261640"
},
{
"category": "self",
"summary": "SUSE Bug 1263088",
"url": "https://bugzilla.suse.com/1263088"
},
{
"category": "self",
"summary": "SUSE Bug 1263902",
"url": "https://bugzilla.suse.com/1263902"
},
{
"category": "self",
"summary": "SUSE Bug 1264096",
"url": "https://bugzilla.suse.com/1264096"
},
{
"category": "self",
"summary": "SUSE Bug 1265224",
"url": "https://bugzilla.suse.com/1265224"
},
{
"category": "self",
"summary": "SUSE Bug 1265384",
"url": "https://bugzilla.suse.com/1265384"
},
{
"category": "self",
"summary": "SUSE Bug 1266229",
"url": "https://bugzilla.suse.com/1266229"
},
{
"category": "self",
"summary": "SUSE Bug 1267625",
"url": "https://bugzilla.suse.com/1267625"
},
{
"category": "self",
"summary": "SUSE Bug 1268282",
"url": "https://bugzilla.suse.com/1268282"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-54518 page",
"url": "https://www.suse.com/security/cve/CVE-2025-54518/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-31402 page",
"url": "https://www.suse.com/security/cve/CVE-2026-31402/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-31504 page",
"url": "https://www.suse.com/security/cve/CVE-2026-31504/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-31694 page",
"url": "https://www.suse.com/security/cve/CVE-2026-31694/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43503 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43503/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46300 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46300/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46323 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46323/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46333 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46333/"
}
],
"title": "Security update for the Linux Kernel RT (Live Patch 20 for SUSE Linux Enterprise Micro 6.0)",
"tracking": {
"current_release_date": "2026-06-24T09:59:05Z",
"generator": {
"date": "2026-06-24T09:59:05Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2026:22488-1",
"initial_release_date": "2026-06-24T09:59:05Z",
"revision_history": [
{
"date": "2026-06-24T09:59:05Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "kernel-livepatch-6_4_0-42-rt-3-1.1.x86_64",
"product": {
"name": "kernel-livepatch-6_4_0-42-rt-3-1.1.x86_64",
"product_id": "kernel-livepatch-6_4_0-42-rt-3-1.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Micro 6.1",
"product": {
"name": "SUSE Linux Micro 6.1",
"product_id": "SUSE Linux Micro 6.1",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sl-micro:6.1"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-livepatch-6_4_0-42-rt-3-1.1.x86_64 as component of SUSE Linux Micro 6.1",
"product_id": "SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-42-rt-3-1.1.x86_64"
},
"product_reference": "kernel-livepatch-6_4_0-42-rt-3-1.1.x86_64",
"relates_to_product_reference": "SUSE Linux Micro 6.1"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-54518",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-54518"
}
],
"notes": [
{
"category": "general",
"text": "Improper isolation of shared resources within the CPU operation cache on Zen 2-based products could allow an attacker to corrupt instructions executed at a different privilege level, potentially resulting in privilege escalation.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-42-rt-3-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-54518",
"url": "https://www.suse.com/security/cve/CVE-2025-54518"
},
{
"category": "external",
"summary": "SUSE Bug 1264013 for CVE-2025-54518",
"url": "https://bugzilla.suse.com/1264013"
},
{
"category": "external",
"summary": "SUSE Bug 1264066 for CVE-2025-54518",
"url": "https://bugzilla.suse.com/1264066"
},
{
"category": "external",
"summary": "SUSE Bug 1264096 for CVE-2025-54518",
"url": "https://bugzilla.suse.com/1264096"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-42-rt-3-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-42-rt-3-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-24T09:59:05Z",
"details": "important"
}
],
"title": "CVE-2025-54518"
},
{
"cve": "CVE-2026-31402",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-31402"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnfsd: fix heap overflow in NFSv4.0 LOCK replay cache\n\nThe NFSv4.0 replay cache uses a fixed 112-byte inline buffer\n(rp_ibuf[NFSD4_REPLAY_ISIZE]) to store encoded operation responses.\nThis size was calculated based on OPEN responses and does not account\nfor LOCK denied responses, which include the conflicting lock owner as\na variable-length field up to 1024 bytes (NFS4_OPAQUE_LIMIT).\n\nWhen a LOCK operation is denied due to a conflict with an existing lock\nthat has a large owner, nfsd4_encode_operation() copies the full encoded\nresponse into the undersized replay buffer via read_bytes_from_xdr_buf()\nwith no bounds check. This results in a slab-out-of-bounds write of up\nto 944 bytes past the end of the buffer, corrupting adjacent heap memory.\n\nThis can be triggered remotely by an unauthenticated attacker with two\ncooperating NFSv4.0 clients: one sets a lock with a large owner string,\nthen the other requests a conflicting lock to provoke the denial.\n\nWe could fix this by increasing NFSD4_REPLAY_ISIZE to allow for a full\nopaque, but that would increase the size of every stateowner, when most\nlockowners are not that large.\n\nInstead, fix this by checking the encoded response length against\nNFSD4_REPLAY_ISIZE before copying into the replay buffer. If the\nresponse is too large, set rp_buflen to 0 to skip caching the replay\npayload. The status is still cached, and the client already received the\ncorrect response on the original request.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-42-rt-3-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-31402",
"url": "https://www.suse.com/security/cve/CVE-2026-31402"
},
{
"category": "external",
"summary": "SUSE Bug 1261638 for CVE-2026-31402",
"url": "https://bugzilla.suse.com/1261638"
},
{
"category": "external",
"summary": "SUSE Bug 1261640 for CVE-2026-31402",
"url": "https://bugzilla.suse.com/1261640"
},
{
"category": "external",
"summary": "SUSE Bug 1265160 for CVE-2026-31402",
"url": "https://bugzilla.suse.com/1265160"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-42-rt-3-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.2,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-42-rt-3-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-24T09:59:05Z",
"details": "important"
}
],
"title": "CVE-2026-31402"
},
{
"cve": "CVE-2026-31504",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-31504"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: fix fanout UAF in packet_release() via NETDEV_UP race\n\n`packet_release()` has a race window where `NETDEV_UP` can re-register a\nsocket into a fanout group\u0027s `arr[]` array. The re-registration is not\ncleaned up by `fanout_release()`, leaving a dangling pointer in the fanout\narray.\n`packet_release()` does NOT zero `po-\u003enum` in its `bind_lock` section.\nAfter releasing `bind_lock`, `po-\u003enum` is still non-zero and `po-\u003eifindex`\nstill matches the bound device. A concurrent `packet_notifier(NETDEV_UP)`\nthat already found the socket in `sklist` can re-register the hook.\nFor fanout sockets, this re-registration calls `__fanout_link(sk, po)`\nwhich adds the socket back into `f-\u003earr[]` and increments `f-\u003enum_members`,\nbut does NOT increment `f-\u003esk_ref`.\n\nThe fix sets `po-\u003enum` to zero in `packet_release` while `bind_lock` is\nheld to prevent NETDEV_UP from linking, preventing the race window.\n\nThis bug was found following an additional audit with Claude Code based\non CVE-2025-38617.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-42-rt-3-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-31504",
"url": "https://www.suse.com/security/cve/CVE-2026-31504"
},
{
"category": "external",
"summary": "SUSE Bug 1263085 for CVE-2026-31504",
"url": "https://bugzilla.suse.com/1263085"
},
{
"category": "external",
"summary": "SUSE Bug 1263088 for CVE-2026-31504",
"url": "https://bugzilla.suse.com/1263088"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-42-rt-3-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-42-rt-3-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-24T09:59:05Z",
"details": "important"
}
],
"title": "CVE-2026-31504"
},
{
"cve": "CVE-2026-31694",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-31694"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nfuse: reject oversized dirents in page cache\n\nfuse_add_dirent_to_cache() computes a serialized dirent size from the\nserver-controlled namelen field and copies the dirent into a single\npage-cache page. The existing logic only checks whether the dirent fits\nin the remaining space of the current page and advances to a fresh page\nif not. It never checks whether the dirent itself exceeds PAGE_SIZE.\n\nAs a result, a malicious FUSE server can return a dirent with\nnamelen=4095, producing a serialized record size of 4120 bytes. On 4 KiB\npage systems this causes memcpy() to overflow the cache page by 24 bytes\ninto the following kernel page.\n\nReject dirents that cannot fit in a single page before copying them into\nthe readdir cache.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-42-rt-3-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-31694",
"url": "https://www.suse.com/security/cve/CVE-2026-31694"
},
{
"category": "external",
"summary": "SUSE Bug 1263901 for CVE-2026-31694",
"url": "https://bugzilla.suse.com/1263901"
},
{
"category": "external",
"summary": "SUSE Bug 1263902 for CVE-2026-31694",
"url": "https://bugzilla.suse.com/1263902"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-42-rt-3-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-42-rt-3-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-24T09:59:05Z",
"details": "important"
}
],
"title": "CVE-2026-31694"
},
{
"cve": "CVE-2026-43503",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43503"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: skbuff: propagate shared-frag marker through frag-transfer helpers\n\nTwo frag-transfer helpers (__pskb_copy_fclone() and skb_shift()) fail\nto propagate the SKBFL_SHARED_FRAG bit in skb_shinfo()-\u003eflags when\nmoving frags from source to destination. __pskb_copy_fclone() defers\nthe rest of the shinfo metadata to skb_copy_header() after copying\nfrag descriptors, but that helper only carries over gso_{size,segs,\ntype} and never touches skb_shinfo()-\u003eflags; skb_shift() moves frag\ndescriptors directly and leaves flags untouched. As a result, the\ndestination skb keeps a reference to the same externally-owned or\npage-cache-backed pages while reporting skb_has_shared_frag() as\nfalse.\n\nThe mismatch is harmful in any in-place writer that uses\nskb_has_shared_frag() to decide whether shared pages must be detoured\nthrough skb_cow_data(). ESP input is one such writer (esp4.c,\nesp6.c), and a single nft \u0027dup to \u003clocal\u003e\u0027 rule -- or any other\nnf_dup_ipv4() / xt_TEE caller -- is enough to land a pskb_copy()\u0027d\nskb in esp_input() with the marker stripped, letting an unprivileged\nuser write into the page cache of a root-owned read-only file via\nauthencesn-ESN stray writes.\n\nSet SKBFL_SHARED_FRAG on the destination whenever frag descriptors\nwere actually moved from the source. skb_copy() and skb_copy_expand()\nshare skb_copy_header() too but linearize all paged data into freshly\nallocated head storage and emerge with nr_frags == 0, so\nskb_has_shared_frag() returns false on its own; they need no change.\n\nThe same omission exists in skb_gro_receive() and skb_gro_receive_list().\nThe former moves the incoming skb\u0027s frag descriptors into the\naccumulator\u0027s last sub-skb via two paths (a direct frag-move loop and\nthe head_frag + memcpy path); the latter chains the incoming skb whole\nonto p\u0027s frag_list. Downstream skb_segment() reads only\nskb_shinfo(p)-\u003eflags, and skb_segment_list() reuses each sub-skb\u0027s\nshinfo as the nskb -- both p and lp must carry the marker.\n\nThe same omission also exists in tcp_clone_payload(), which builds an\nMTU probe skb by moving frag descriptors from skbs on sk_write_queue\ninto a freshly allocated nskb. The helper falls into the same family\nand warrants the same fix for consistency; no TCP TX-side in-place\nwriter is currently known to reach a user page through this gap, but\na future consumer depending on the marker would regress silently.\n\nThe same omission exists in skb_segment(): the per-iteration flag\nmerge takes only head_skb\u0027s flag, and the inner switch that rebinds\nfrag_skb to list_skb on head_skb-frags exhaustion does not fold the\nnew frag_skb\u0027s flag into nskb. Fold frag_skb\u0027s flag at both sites\nso segments drawing frags from frag_list members carry the marker.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-42-rt-3-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43503",
"url": "https://www.suse.com/security/cve/CVE-2026-43503"
},
{
"category": "external",
"summary": "SUSE Bug 1265209 for CVE-2026-43503",
"url": "https://bugzilla.suse.com/1265209"
},
{
"category": "external",
"summary": "SUSE Bug 1265960 for CVE-2026-43503",
"url": "https://bugzilla.suse.com/1265960"
},
{
"category": "external",
"summary": "SUSE Bug 1266229 for CVE-2026-43503",
"url": "https://bugzilla.suse.com/1266229"
},
{
"category": "external",
"summary": "SUSE Bug 1269878 for CVE-2026-43503",
"url": "https://bugzilla.suse.com/1269878"
},
{
"category": "external",
"summary": "SUSE Bug 1270098 for CVE-2026-43503",
"url": "https://bugzilla.suse.com/1270098"
},
{
"category": "external",
"summary": "SUSE Bug 1270100 for CVE-2026-43503",
"url": "https://bugzilla.suse.com/1270100"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-42-rt-3-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-42-rt-3-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-24T09:59:05Z",
"details": "important"
}
],
"title": "CVE-2026-43503"
},
{
"cve": "CVE-2026-46300",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46300"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: skbuff: preserve shared-frag marker during coalescing\n\nskb_try_coalesce() can attach paged frags from @from to @to. If @from\nhas SKBFL_SHARED_FRAG set, the resulting @to skb can contain the same\nexternally-owned or page-cache-backed frags, but the shared-frag marker\nis currently lost.\n\nThat breaks the invariant relied on by later in-place writers. In\nparticular, ESP input checks skb_has_shared_frag() before deciding\nwhether an uncloned nonlinear skb can skip skb_cow_data(). If TCP\nreceive coalescing has moved shared frags into an unmarked skb, ESP can\nsee skb_has_shared_frag() as false and decrypt in place over page-cache\nbacked frags.\n\nPropagate SKBFL_SHARED_FRAG when skb_try_coalesce() transfers paged\nfrags. The tailroom copy path does not need the marker because it copies\nbytes into @to\u0027s linear data rather than transferring frag descriptors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-42-rt-3-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46300",
"url": "https://www.suse.com/security/cve/CVE-2026-46300"
},
{
"category": "external",
"summary": "SUSE Bug 1265209 for CVE-2026-46300",
"url": "https://bugzilla.suse.com/1265209"
},
{
"category": "external",
"summary": "SUSE Bug 1265226 for CVE-2026-46300",
"url": "https://bugzilla.suse.com/1265226"
},
{
"category": "external",
"summary": "SUSE Bug 1265312 for CVE-2026-46300",
"url": "https://bugzilla.suse.com/1265312"
},
{
"category": "external",
"summary": "SUSE Bug 1265383 for CVE-2026-46300",
"url": "https://bugzilla.suse.com/1265383"
},
{
"category": "external",
"summary": "SUSE Bug 1265960 for CVE-2026-46300",
"url": "https://bugzilla.suse.com/1265960"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-42-rt-3-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-42-rt-3-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-24T09:59:05Z",
"details": "important"
}
],
"title": "CVE-2026-46300"
},
{
"cve": "CVE-2026-46323",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46323"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: gro: don\u0027t merge zcopy skbs\n\nskb_gro_receive() can currently copy frags between the source and GRO\nskb, without checking the zerocopy status, and in particular the\nSKBFL_MANAGED_FRAG_REFS flag.\n\nWhen SKBFL_MANAGED_FRAG_REFS is set, the skb doesn\u0027t hold a reference\non the pages in shinfo-\u003efrags. Appending those frags to another skb\u0027s\nfrags without fixing up the page refcount can lead to UAF.\n\nWhen either the last skb in the GRO chain (the one we would append\nfrags to) or the source skb is zerocopy, don\u0027t merge the skbs.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-42-rt-3-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46323",
"url": "https://www.suse.com/security/cve/CVE-2026-46323"
},
{
"category": "external",
"summary": "SUSE Bug 1268029 for CVE-2026-46323",
"url": "https://bugzilla.suse.com/1268029"
},
{
"category": "external",
"summary": "SUSE Bug 1268282 for CVE-2026-46323",
"url": "https://bugzilla.suse.com/1268282"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-42-rt-3-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-42-rt-3-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-24T09:59:05Z",
"details": "important"
}
],
"title": "CVE-2026-46323"
},
{
"cve": "CVE-2026-46333",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46333"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nptrace: slightly saner \u0027get_dumpable()\u0027 logic\n\nThe \u0027dumpability\u0027 of a task is fundamentally about the memory image of\nthe task - the concept comes from whether it can core dump or not - and\nmakes no sense when you don\u0027t have an associated mm.\n\nAnd almost all users do in fact use it only for the case where the task\nhas a mm pointer.\n\nBut we have one odd special case: ptrace_may_access() uses \u0027dumpable\u0027 to\ncheck various other things entirely independently of the MM (typically\nexplicitly using flags like PTRACE_MODE_READ_FSCREDS). Including for\nthreads that no longer have a VM (and maybe never did, like most kernel\nthreads).\n\nIt\u0027s not what this flag was designed for, but it is what it is.\n\nThe ptrace code does check that the uid/gid matches, so you do have to\nbe uid-0 to see kernel thread details, but this means that the\ntraditional \"drop capabilities\" model doesn\u0027t make any difference for\nthis all.\n\nMake it all make a *bit* more sense by saying that if you don\u0027t have a\nMM pointer, we\u0027ll use a cached \"last dumpability\" flag if the thread\never had a MM (it will be zero for kernel threads since it is never\nset), and require a proper CAP_SYS_PTRACE capability to override.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-42-rt-3-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46333",
"url": "https://www.suse.com/security/cve/CVE-2026-46333"
},
{
"category": "external",
"summary": "SUSE Bug 1265308 for CVE-2026-46333",
"url": "https://bugzilla.suse.com/1265308"
},
{
"category": "external",
"summary": "SUSE Bug 1265384 for CVE-2026-46333",
"url": "https://bugzilla.suse.com/1265384"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-42-rt-3-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-42-rt-3-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-24T09:59:05Z",
"details": "important"
}
],
"title": "CVE-2026-46333"
}
]
}
SUSE-SU-2026:22489-1
Vulnerability from csaf_suse - Published: 2026-06-24 09:59 - Updated: 2026-06-24 09:59Summary
Security update for the Linux Kernel RT (Live Patch 21 for SUSE Linux Enterprise Micro 6.0)
Severity
Important
Notes
Title of the patch: Security update for the Linux Kernel RT (Live Patch 21 for SUSE Linux Enterprise Micro 6.0)
Description of the patch:
This update for the SUSE Linux Enterprise Kernel 6.4.0-43.1 fixes various security issues
The following security issues were fixed:
- CVE-2025-54518: AMD-SN-7052: CPU OP Cache Corruption (bsc#1264096).
- CVE-2026-31402: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (bsc#1261640).
- CVE-2026-31504: net: fix fanout UAF in packet_release() via NETDEV_UP race (bsc#1263088).
- CVE-2026-31694: fuse: reject oversized dirents in page cache (bsc#1263902).
- CVE-2026-43503: final dirty.frag related fixes (bsc#1266229).
- CVE-2026-46300: FragNesia attack: another xfrm/esp based local root exploit (bsc#1265224).
- CVE-2026-46323: net: gro: don't merge zcopy skbs (bsc#1268282).
- CVE-2026-46333: ptrace: slightly saner 'get_dumpable()' logic (bsc#1265384).
- net/sched: fix pedit partial COW leading to page cache (bsc#1267625).
Patchnames: SUSE-SLE-Micro-6.1-kernel-479
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
7.4 (High)
Affected products
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-43-rt-2-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
8.2 (High)
Affected products
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-43-rt-2-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-43-rt-2-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.8 (High)
Affected products
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-43-rt-2-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
8.8 (High)
Affected products
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-43-rt-2-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
8.8 (High)
Affected products
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-43-rt-2-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-43-rt-2-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.8 (High)
Affected products
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-43-rt-2-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
References
54 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for the Linux Kernel RT (Live Patch 21 for SUSE Linux Enterprise Micro 6.0)",
"title": "Title of the patch"
},
{
"category": "description",
"text": "\nThis update for the SUSE Linux Enterprise Kernel 6.4.0-43.1 fixes various security issues\n\nThe following security issues were fixed:\n\n- CVE-2025-54518: AMD-SN-7052: CPU OP Cache Corruption (bsc#1264096).\n- CVE-2026-31402: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (bsc#1261640).\n- CVE-2026-31504: net: fix fanout UAF in packet_release() via NETDEV_UP race (bsc#1263088).\n- CVE-2026-31694: fuse: reject oversized dirents in page cache (bsc#1263902).\n- CVE-2026-43503: final dirty.frag related fixes (bsc#1266229).\n- CVE-2026-46300: FragNesia attack: another xfrm/esp based local root exploit (bsc#1265224).\n- CVE-2026-46323: net: gro: don\u0027t merge zcopy skbs (bsc#1268282).\n- CVE-2026-46333: ptrace: slightly saner \u0027get_dumpable()\u0027 logic (bsc#1265384).\n- net/sched: fix pedit partial COW leading to page cache (bsc#1267625).\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-SLE-Micro-6.1-kernel-479",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_22489-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2026:22489-1",
"url": "https://www.suse.com/support/update/announcement/2026/suse-su-202622489-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2026:22489-1",
"url": "https://lists.suse.com/pipermail/sle-updates/2026-July/047917.html"
},
{
"category": "self",
"summary": "SUSE Bug 1261640",
"url": "https://bugzilla.suse.com/1261640"
},
{
"category": "self",
"summary": "SUSE Bug 1263088",
"url": "https://bugzilla.suse.com/1263088"
},
{
"category": "self",
"summary": "SUSE Bug 1263902",
"url": "https://bugzilla.suse.com/1263902"
},
{
"category": "self",
"summary": "SUSE Bug 1264096",
"url": "https://bugzilla.suse.com/1264096"
},
{
"category": "self",
"summary": "SUSE Bug 1265224",
"url": "https://bugzilla.suse.com/1265224"
},
{
"category": "self",
"summary": "SUSE Bug 1265384",
"url": "https://bugzilla.suse.com/1265384"
},
{
"category": "self",
"summary": "SUSE Bug 1266229",
"url": "https://bugzilla.suse.com/1266229"
},
{
"category": "self",
"summary": "SUSE Bug 1267625",
"url": "https://bugzilla.suse.com/1267625"
},
{
"category": "self",
"summary": "SUSE Bug 1268282",
"url": "https://bugzilla.suse.com/1268282"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-54518 page",
"url": "https://www.suse.com/security/cve/CVE-2025-54518/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-31402 page",
"url": "https://www.suse.com/security/cve/CVE-2026-31402/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-31504 page",
"url": "https://www.suse.com/security/cve/CVE-2026-31504/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-31694 page",
"url": "https://www.suse.com/security/cve/CVE-2026-31694/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-43503 page",
"url": "https://www.suse.com/security/cve/CVE-2026-43503/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46300 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46300/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46323 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46323/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46333 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46333/"
}
],
"title": "Security update for the Linux Kernel RT (Live Patch 21 for SUSE Linux Enterprise Micro 6.0)",
"tracking": {
"current_release_date": "2026-06-24T09:59:05Z",
"generator": {
"date": "2026-06-24T09:59:05Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2026:22489-1",
"initial_release_date": "2026-06-24T09:59:05Z",
"revision_history": [
{
"date": "2026-06-24T09:59:05Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "kernel-livepatch-6_4_0-43-rt-2-1.1.x86_64",
"product": {
"name": "kernel-livepatch-6_4_0-43-rt-2-1.1.x86_64",
"product_id": "kernel-livepatch-6_4_0-43-rt-2-1.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Micro 6.1",
"product": {
"name": "SUSE Linux Micro 6.1",
"product_id": "SUSE Linux Micro 6.1",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sl-micro:6.1"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-livepatch-6_4_0-43-rt-2-1.1.x86_64 as component of SUSE Linux Micro 6.1",
"product_id": "SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-43-rt-2-1.1.x86_64"
},
"product_reference": "kernel-livepatch-6_4_0-43-rt-2-1.1.x86_64",
"relates_to_product_reference": "SUSE Linux Micro 6.1"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-54518",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-54518"
}
],
"notes": [
{
"category": "general",
"text": "Improper isolation of shared resources within the CPU operation cache on Zen 2-based products could allow an attacker to corrupt instructions executed at a different privilege level, potentially resulting in privilege escalation.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-43-rt-2-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-54518",
"url": "https://www.suse.com/security/cve/CVE-2025-54518"
},
{
"category": "external",
"summary": "SUSE Bug 1264013 for CVE-2025-54518",
"url": "https://bugzilla.suse.com/1264013"
},
{
"category": "external",
"summary": "SUSE Bug 1264066 for CVE-2025-54518",
"url": "https://bugzilla.suse.com/1264066"
},
{
"category": "external",
"summary": "SUSE Bug 1264096 for CVE-2025-54518",
"url": "https://bugzilla.suse.com/1264096"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-43-rt-2-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-43-rt-2-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-24T09:59:05Z",
"details": "important"
}
],
"title": "CVE-2025-54518"
},
{
"cve": "CVE-2026-31402",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-31402"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnfsd: fix heap overflow in NFSv4.0 LOCK replay cache\n\nThe NFSv4.0 replay cache uses a fixed 112-byte inline buffer\n(rp_ibuf[NFSD4_REPLAY_ISIZE]) to store encoded operation responses.\nThis size was calculated based on OPEN responses and does not account\nfor LOCK denied responses, which include the conflicting lock owner as\na variable-length field up to 1024 bytes (NFS4_OPAQUE_LIMIT).\n\nWhen a LOCK operation is denied due to a conflict with an existing lock\nthat has a large owner, nfsd4_encode_operation() copies the full encoded\nresponse into the undersized replay buffer via read_bytes_from_xdr_buf()\nwith no bounds check. This results in a slab-out-of-bounds write of up\nto 944 bytes past the end of the buffer, corrupting adjacent heap memory.\n\nThis can be triggered remotely by an unauthenticated attacker with two\ncooperating NFSv4.0 clients: one sets a lock with a large owner string,\nthen the other requests a conflicting lock to provoke the denial.\n\nWe could fix this by increasing NFSD4_REPLAY_ISIZE to allow for a full\nopaque, but that would increase the size of every stateowner, when most\nlockowners are not that large.\n\nInstead, fix this by checking the encoded response length against\nNFSD4_REPLAY_ISIZE before copying into the replay buffer. If the\nresponse is too large, set rp_buflen to 0 to skip caching the replay\npayload. The status is still cached, and the client already received the\ncorrect response on the original request.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-43-rt-2-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-31402",
"url": "https://www.suse.com/security/cve/CVE-2026-31402"
},
{
"category": "external",
"summary": "SUSE Bug 1261638 for CVE-2026-31402",
"url": "https://bugzilla.suse.com/1261638"
},
{
"category": "external",
"summary": "SUSE Bug 1261640 for CVE-2026-31402",
"url": "https://bugzilla.suse.com/1261640"
},
{
"category": "external",
"summary": "SUSE Bug 1265160 for CVE-2026-31402",
"url": "https://bugzilla.suse.com/1265160"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-43-rt-2-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.2,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-43-rt-2-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-24T09:59:05Z",
"details": "important"
}
],
"title": "CVE-2026-31402"
},
{
"cve": "CVE-2026-31504",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-31504"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: fix fanout UAF in packet_release() via NETDEV_UP race\n\n`packet_release()` has a race window where `NETDEV_UP` can re-register a\nsocket into a fanout group\u0027s `arr[]` array. The re-registration is not\ncleaned up by `fanout_release()`, leaving a dangling pointer in the fanout\narray.\n`packet_release()` does NOT zero `po-\u003enum` in its `bind_lock` section.\nAfter releasing `bind_lock`, `po-\u003enum` is still non-zero and `po-\u003eifindex`\nstill matches the bound device. A concurrent `packet_notifier(NETDEV_UP)`\nthat already found the socket in `sklist` can re-register the hook.\nFor fanout sockets, this re-registration calls `__fanout_link(sk, po)`\nwhich adds the socket back into `f-\u003earr[]` and increments `f-\u003enum_members`,\nbut does NOT increment `f-\u003esk_ref`.\n\nThe fix sets `po-\u003enum` to zero in `packet_release` while `bind_lock` is\nheld to prevent NETDEV_UP from linking, preventing the race window.\n\nThis bug was found following an additional audit with Claude Code based\non CVE-2025-38617.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-43-rt-2-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-31504",
"url": "https://www.suse.com/security/cve/CVE-2026-31504"
},
{
"category": "external",
"summary": "SUSE Bug 1263085 for CVE-2026-31504",
"url": "https://bugzilla.suse.com/1263085"
},
{
"category": "external",
"summary": "SUSE Bug 1263088 for CVE-2026-31504",
"url": "https://bugzilla.suse.com/1263088"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-43-rt-2-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-43-rt-2-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-24T09:59:05Z",
"details": "important"
}
],
"title": "CVE-2026-31504"
},
{
"cve": "CVE-2026-31694",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-31694"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nfuse: reject oversized dirents in page cache\n\nfuse_add_dirent_to_cache() computes a serialized dirent size from the\nserver-controlled namelen field and copies the dirent into a single\npage-cache page. The existing logic only checks whether the dirent fits\nin the remaining space of the current page and advances to a fresh page\nif not. It never checks whether the dirent itself exceeds PAGE_SIZE.\n\nAs a result, a malicious FUSE server can return a dirent with\nnamelen=4095, producing a serialized record size of 4120 bytes. On 4 KiB\npage systems this causes memcpy() to overflow the cache page by 24 bytes\ninto the following kernel page.\n\nReject dirents that cannot fit in a single page before copying them into\nthe readdir cache.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-43-rt-2-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-31694",
"url": "https://www.suse.com/security/cve/CVE-2026-31694"
},
{
"category": "external",
"summary": "SUSE Bug 1263901 for CVE-2026-31694",
"url": "https://bugzilla.suse.com/1263901"
},
{
"category": "external",
"summary": "SUSE Bug 1263902 for CVE-2026-31694",
"url": "https://bugzilla.suse.com/1263902"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-43-rt-2-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-43-rt-2-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-24T09:59:05Z",
"details": "important"
}
],
"title": "CVE-2026-31694"
},
{
"cve": "CVE-2026-43503",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-43503"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: skbuff: propagate shared-frag marker through frag-transfer helpers\n\nTwo frag-transfer helpers (__pskb_copy_fclone() and skb_shift()) fail\nto propagate the SKBFL_SHARED_FRAG bit in skb_shinfo()-\u003eflags when\nmoving frags from source to destination. __pskb_copy_fclone() defers\nthe rest of the shinfo metadata to skb_copy_header() after copying\nfrag descriptors, but that helper only carries over gso_{size,segs,\ntype} and never touches skb_shinfo()-\u003eflags; skb_shift() moves frag\ndescriptors directly and leaves flags untouched. As a result, the\ndestination skb keeps a reference to the same externally-owned or\npage-cache-backed pages while reporting skb_has_shared_frag() as\nfalse.\n\nThe mismatch is harmful in any in-place writer that uses\nskb_has_shared_frag() to decide whether shared pages must be detoured\nthrough skb_cow_data(). ESP input is one such writer (esp4.c,\nesp6.c), and a single nft \u0027dup to \u003clocal\u003e\u0027 rule -- or any other\nnf_dup_ipv4() / xt_TEE caller -- is enough to land a pskb_copy()\u0027d\nskb in esp_input() with the marker stripped, letting an unprivileged\nuser write into the page cache of a root-owned read-only file via\nauthencesn-ESN stray writes.\n\nSet SKBFL_SHARED_FRAG on the destination whenever frag descriptors\nwere actually moved from the source. skb_copy() and skb_copy_expand()\nshare skb_copy_header() too but linearize all paged data into freshly\nallocated head storage and emerge with nr_frags == 0, so\nskb_has_shared_frag() returns false on its own; they need no change.\n\nThe same omission exists in skb_gro_receive() and skb_gro_receive_list().\nThe former moves the incoming skb\u0027s frag descriptors into the\naccumulator\u0027s last sub-skb via two paths (a direct frag-move loop and\nthe head_frag + memcpy path); the latter chains the incoming skb whole\nonto p\u0027s frag_list. Downstream skb_segment() reads only\nskb_shinfo(p)-\u003eflags, and skb_segment_list() reuses each sub-skb\u0027s\nshinfo as the nskb -- both p and lp must carry the marker.\n\nThe same omission also exists in tcp_clone_payload(), which builds an\nMTU probe skb by moving frag descriptors from skbs on sk_write_queue\ninto a freshly allocated nskb. The helper falls into the same family\nand warrants the same fix for consistency; no TCP TX-side in-place\nwriter is currently known to reach a user page through this gap, but\na future consumer depending on the marker would regress silently.\n\nThe same omission exists in skb_segment(): the per-iteration flag\nmerge takes only head_skb\u0027s flag, and the inner switch that rebinds\nfrag_skb to list_skb on head_skb-frags exhaustion does not fold the\nnew frag_skb\u0027s flag into nskb. Fold frag_skb\u0027s flag at both sites\nso segments drawing frags from frag_list members carry the marker.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-43-rt-2-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-43503",
"url": "https://www.suse.com/security/cve/CVE-2026-43503"
},
{
"category": "external",
"summary": "SUSE Bug 1265209 for CVE-2026-43503",
"url": "https://bugzilla.suse.com/1265209"
},
{
"category": "external",
"summary": "SUSE Bug 1265960 for CVE-2026-43503",
"url": "https://bugzilla.suse.com/1265960"
},
{
"category": "external",
"summary": "SUSE Bug 1266229 for CVE-2026-43503",
"url": "https://bugzilla.suse.com/1266229"
},
{
"category": "external",
"summary": "SUSE Bug 1269878 for CVE-2026-43503",
"url": "https://bugzilla.suse.com/1269878"
},
{
"category": "external",
"summary": "SUSE Bug 1270098 for CVE-2026-43503",
"url": "https://bugzilla.suse.com/1270098"
},
{
"category": "external",
"summary": "SUSE Bug 1270100 for CVE-2026-43503",
"url": "https://bugzilla.suse.com/1270100"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-43-rt-2-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-43-rt-2-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-24T09:59:05Z",
"details": "important"
}
],
"title": "CVE-2026-43503"
},
{
"cve": "CVE-2026-46300",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46300"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: skbuff: preserve shared-frag marker during coalescing\n\nskb_try_coalesce() can attach paged frags from @from to @to. If @from\nhas SKBFL_SHARED_FRAG set, the resulting @to skb can contain the same\nexternally-owned or page-cache-backed frags, but the shared-frag marker\nis currently lost.\n\nThat breaks the invariant relied on by later in-place writers. In\nparticular, ESP input checks skb_has_shared_frag() before deciding\nwhether an uncloned nonlinear skb can skip skb_cow_data(). If TCP\nreceive coalescing has moved shared frags into an unmarked skb, ESP can\nsee skb_has_shared_frag() as false and decrypt in place over page-cache\nbacked frags.\n\nPropagate SKBFL_SHARED_FRAG when skb_try_coalesce() transfers paged\nfrags. The tailroom copy path does not need the marker because it copies\nbytes into @to\u0027s linear data rather than transferring frag descriptors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-43-rt-2-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46300",
"url": "https://www.suse.com/security/cve/CVE-2026-46300"
},
{
"category": "external",
"summary": "SUSE Bug 1265209 for CVE-2026-46300",
"url": "https://bugzilla.suse.com/1265209"
},
{
"category": "external",
"summary": "SUSE Bug 1265226 for CVE-2026-46300",
"url": "https://bugzilla.suse.com/1265226"
},
{
"category": "external",
"summary": "SUSE Bug 1265312 for CVE-2026-46300",
"url": "https://bugzilla.suse.com/1265312"
},
{
"category": "external",
"summary": "SUSE Bug 1265383 for CVE-2026-46300",
"url": "https://bugzilla.suse.com/1265383"
},
{
"category": "external",
"summary": "SUSE Bug 1265960 for CVE-2026-46300",
"url": "https://bugzilla.suse.com/1265960"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-43-rt-2-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-43-rt-2-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-24T09:59:05Z",
"details": "important"
}
],
"title": "CVE-2026-46300"
},
{
"cve": "CVE-2026-46323",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46323"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: gro: don\u0027t merge zcopy skbs\n\nskb_gro_receive() can currently copy frags between the source and GRO\nskb, without checking the zerocopy status, and in particular the\nSKBFL_MANAGED_FRAG_REFS flag.\n\nWhen SKBFL_MANAGED_FRAG_REFS is set, the skb doesn\u0027t hold a reference\non the pages in shinfo-\u003efrags. Appending those frags to another skb\u0027s\nfrags without fixing up the page refcount can lead to UAF.\n\nWhen either the last skb in the GRO chain (the one we would append\nfrags to) or the source skb is zerocopy, don\u0027t merge the skbs.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-43-rt-2-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46323",
"url": "https://www.suse.com/security/cve/CVE-2026-46323"
},
{
"category": "external",
"summary": "SUSE Bug 1268029 for CVE-2026-46323",
"url": "https://bugzilla.suse.com/1268029"
},
{
"category": "external",
"summary": "SUSE Bug 1268282 for CVE-2026-46323",
"url": "https://bugzilla.suse.com/1268282"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-43-rt-2-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-43-rt-2-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-24T09:59:05Z",
"details": "important"
}
],
"title": "CVE-2026-46323"
},
{
"cve": "CVE-2026-46333",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46333"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nptrace: slightly saner \u0027get_dumpable()\u0027 logic\n\nThe \u0027dumpability\u0027 of a task is fundamentally about the memory image of\nthe task - the concept comes from whether it can core dump or not - and\nmakes no sense when you don\u0027t have an associated mm.\n\nAnd almost all users do in fact use it only for the case where the task\nhas a mm pointer.\n\nBut we have one odd special case: ptrace_may_access() uses \u0027dumpable\u0027 to\ncheck various other things entirely independently of the MM (typically\nexplicitly using flags like PTRACE_MODE_READ_FSCREDS). Including for\nthreads that no longer have a VM (and maybe never did, like most kernel\nthreads).\n\nIt\u0027s not what this flag was designed for, but it is what it is.\n\nThe ptrace code does check that the uid/gid matches, so you do have to\nbe uid-0 to see kernel thread details, but this means that the\ntraditional \"drop capabilities\" model doesn\u0027t make any difference for\nthis all.\n\nMake it all make a *bit* more sense by saying that if you don\u0027t have a\nMM pointer, we\u0027ll use a cached \"last dumpability\" flag if the thread\never had a MM (it will be zero for kernel threads since it is never\nset), and require a proper CAP_SYS_PTRACE capability to override.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-43-rt-2-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46333",
"url": "https://www.suse.com/security/cve/CVE-2026-46333"
},
{
"category": "external",
"summary": "SUSE Bug 1265308 for CVE-2026-46333",
"url": "https://bugzilla.suse.com/1265308"
},
{
"category": "external",
"summary": "SUSE Bug 1265384 for CVE-2026-46333",
"url": "https://bugzilla.suse.com/1265384"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-43-rt-2-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-43-rt-2-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-24T09:59:05Z",
"details": "important"
}
],
"title": "CVE-2026-46333"
}
]
}
ubuntu-cve-2026-46300
Vulnerability from osv_ubuntu
Published
2026-05-23 12:17
Modified
2026-08-21 01:50
Summary
Details
In the Linux kernel, the following vulnerability has been resolved: net: skbuff: preserve shared-frag marker during coalescing skb_try_coalesce() can attach paged frags from @from to @to. If @from has SKBFL_SHARED_FRAG set, the resulting @to skb can contain the same externally-owned or page-cache-backed frags, but the shared-frag marker is currently lost. That breaks the invariant relied on by later in-place writers. In particular, ESP input checks skb_has_shared_frag() before deciding whether an uncloned nonlinear skb can skip skb_cow_data(). If TCP receive coalescing has moved shared frags into an unmarked skb, ESP can see skb_has_shared_frag() as false and decrypt in place over page-cache backed frags. Propagate SKBFL_SHARED_FRAG when skb_try_coalesce() transfers paged frags. The tailroom copy path does not need the marker because it copies bytes into @to's linear data rather than transferring frag descriptors.
Severity
7.8 (High)
7.8 (High)
7.8 (High)
N/A (UNKNOWN)
References
{
"affected": [
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "block-modules-4.15.0-23-generic-di",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "block-modules-4.15.0-23-generic-lpae-di",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "crypto-modules-4.15.0-23-generic-di",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "crypto-modules-4.15.0-23-generic-lpae-di",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "dasd-extra-modules-4.15.0-23-generic-di",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "dasd-modules-4.15.0-23-generic-di",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "fat-modules-4.15.0-23-generic-di",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "fat-modules-4.15.0-23-generic-lpae-di",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "fb-modules-4.15.0-23-generic-di",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "firewire-core-modules-4.15.0-23-generic-di",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "floppy-modules-4.15.0-23-generic-di",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "fs-core-modules-4.15.0-23-generic-di",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "fs-core-modules-4.15.0-23-generic-lpae-di",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "fs-secondary-modules-4.15.0-23-generic-di",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "fs-secondary-modules-4.15.0-23-generic-lpae-di",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "input-modules-4.15.0-23-generic-di",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "input-modules-4.15.0-23-generic-lpae-di",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "ipmi-modules-4.15.0-23-generic-di",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "ipmi-modules-4.15.0-23-generic-lpae-di",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "irda-modules-4.15.0-23-generic-di",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "irda-modules-4.15.0-23-generic-lpae-di",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "kernel-image-4.15.0-23-generic-di",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "kernel-image-4.15.0-23-generic-lpae-di",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "linux-cloud-tools-4.15.0-23-generic",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "linux-cloud-tools-4.15.0-23-lowlatency",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "linux-headers-4.15.0-23",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "linux-headers-4.15.0-23-generic",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "linux-headers-4.15.0-23-generic-lpae",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "linux-headers-4.15.0-23-lowlatency",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "linux-hwe-edge-cloud-tools-4.15.0-23",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "linux-hwe-edge-tools-4.15.0-23",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "linux-hwe-edge-udebs-generic",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "linux-hwe-edge-udebs-generic-lpae",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "linux-image-4.15.0-23-generic",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "linux-image-4.15.0-23-generic-lpae",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "linux-image-4.15.0-23-lowlatency",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "linux-image-unsigned-4.15.0-23-generic",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "linux-image-unsigned-4.15.0-23-lowlatency",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "linux-modules-4.15.0-23-generic",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "linux-modules-4.15.0-23-generic-lpae",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "linux-modules-4.15.0-23-lowlatency",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "linux-modules-extra-4.15.0-23-generic",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "linux-source-4.15.0",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "linux-tools-4.15.0-23-generic",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "linux-tools-4.15.0-23-generic-lpae",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "linux-tools-4.15.0-23-lowlatency",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "md-modules-4.15.0-23-generic-di",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "md-modules-4.15.0-23-generic-lpae-di",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "message-modules-4.15.0-23-generic-di",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "mouse-modules-4.15.0-23-generic-di",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "mouse-modules-4.15.0-23-generic-lpae-di",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "multipath-modules-4.15.0-23-generic-di",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "multipath-modules-4.15.0-23-generic-lpae-di",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "nfs-modules-4.15.0-23-generic-di",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "nfs-modules-4.15.0-23-generic-lpae-di",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "nic-modules-4.15.0-23-generic-di",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "nic-modules-4.15.0-23-generic-lpae-di",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "nic-pcmcia-modules-4.15.0-23-generic-di",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "nic-shared-modules-4.15.0-23-generic-di",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "nic-shared-modules-4.15.0-23-generic-lpae-di",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "nic-usb-modules-4.15.0-23-generic-di",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "nic-usb-modules-4.15.0-23-generic-lpae-di",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "parport-modules-4.15.0-23-generic-di",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "parport-modules-4.15.0-23-generic-lpae-di",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "pata-modules-4.15.0-23-generic-di",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "pcmcia-modules-4.15.0-23-generic-di",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "pcmcia-storage-modules-4.15.0-23-generic-di",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "plip-modules-4.15.0-23-generic-di",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "plip-modules-4.15.0-23-generic-lpae-di",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "ppp-modules-4.15.0-23-generic-di",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "ppp-modules-4.15.0-23-generic-lpae-di",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "sata-modules-4.15.0-23-generic-di",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "sata-modules-4.15.0-23-generic-lpae-di",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "scsi-modules-4.15.0-23-generic-di",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "scsi-modules-4.15.0-23-generic-lpae-di",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "serial-modules-4.15.0-23-generic-di",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "storage-core-modules-4.15.0-23-generic-di",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "storage-core-modules-4.15.0-23-generic-lpae-di",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "usb-modules-4.15.0-23-generic-di",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "usb-modules-4.15.0-23-generic-lpae-di",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "virtio-modules-4.15.0-23-generic-di",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "vlan-modules-4.15.0-23-generic-di",
"binary_version": "4.15.0-23.25~16.04.1"
},
{
"binary_name": "vlan-modules-4.15.0-23-generic-lpae-di",
"binary_version": "4.15.0-23.25~16.04.1"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:16.04:LTS",
"name": "linux-hwe-edge",
"purl": "pkg:deb/ubuntu/linux-hwe-edge@4.15.0-23.25~16.04.1?arch=source\u0026distro=xenial"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"4.8.0-28.30~16.04.1",
"4.8.0-30.32~16.04.1",
"4.8.0-32.34~16.04.1",
"4.8.0-34.36~16.04.1",
"4.10.0-14.16~16.04.1",
"4.10.0-19.21~16.04.1",
"4.10.0-20.22~16.04.1",
"4.10.0-21.23~16.04.1",
"4.10.0-22.24~16.04.1",
"4.10.0-24.28~16.04.1",
"4.10.0-26.30~16.04.1",
"4.11.0-13.19~16.04.1",
"4.11.0-14.20~16.04.1",
"4.13.0-16.19~16.04.3",
"4.13.0-17.20~16.04.1",
"4.13.0-19.22~16.04.1",
"4.13.0-21.24~16.04.1",
"4.13.0-25.29~16.04.2",
"4.15.0-13.14~16.04.1",
"4.15.0-15.16~16.04.1",
"4.15.0-20.21~16.04.1",
"4.15.0-22.24~16.04.1",
"4.15.0-23.25~16.04.1"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-aws-5.0-tools-5.0.0-1027",
"binary_version": "5.0.0-1027.30"
},
{
"binary_name": "linux-aws-headers-5.0.0-1027",
"binary_version": "5.0.0-1027.30"
},
{
"binary_name": "linux-buildinfo-5.0.0-1027-aws",
"binary_version": "5.0.0-1027.30"
},
{
"binary_name": "linux-cloud-tools-5.0.0-1027-aws",
"binary_version": "5.0.0-1027.30"
},
{
"binary_name": "linux-headers-5.0.0-1027-aws",
"binary_version": "5.0.0-1027.30"
},
{
"binary_name": "linux-image-5.0.0-1027-aws",
"binary_version": "5.0.0-1027.30"
},
{
"binary_name": "linux-modules-5.0.0-1027-aws",
"binary_version": "5.0.0-1027.30"
},
{
"binary_name": "linux-modules-extra-5.0.0-1027-aws",
"binary_version": "5.0.0-1027.30"
},
{
"binary_name": "linux-tools-5.0.0-1027-aws",
"binary_version": "5.0.0-1027.30"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:18.04:LTS",
"name": "linux-aws-5.0",
"purl": "pkg:deb/ubuntu/linux-aws-5.0@5.0.0-1027.30?arch=source\u0026distro=bionic"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.0.0-1021.24~18.04.1",
"5.0.0-1022.25~18.04.1",
"5.0.0-1023.26~18.04.1",
"5.0.0-1024.27~18.04.1",
"5.0.0-1025.28",
"5.0.0-1027.30"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-aws-5.3-cloud-tools-5.3.0-1035",
"binary_version": "5.3.0-1035.37"
},
{
"binary_name": "linux-aws-5.3-headers-5.3.0-1035",
"binary_version": "5.3.0-1035.37"
},
{
"binary_name": "linux-aws-5.3-tools-5.3.0-1035",
"binary_version": "5.3.0-1035.37"
},
{
"binary_name": "linux-buildinfo-5.3.0-1035-aws",
"binary_version": "5.3.0-1035.37"
},
{
"binary_name": "linux-cloud-tools-5.3.0-1035-aws",
"binary_version": "5.3.0-1035.37"
},
{
"binary_name": "linux-headers-5.3.0-1035-aws",
"binary_version": "5.3.0-1035.37"
},
{
"binary_name": "linux-image-5.3.0-1035-aws",
"binary_version": "5.3.0-1035.37"
},
{
"binary_name": "linux-modules-5.3.0-1035-aws",
"binary_version": "5.3.0-1035.37"
},
{
"binary_name": "linux-modules-extra-5.3.0-1035-aws",
"binary_version": "5.3.0-1035.37"
},
{
"binary_name": "linux-tools-5.3.0-1035-aws",
"binary_version": "5.3.0-1035.37"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:18.04:LTS",
"name": "linux-aws-5.3",
"purl": "pkg:deb/ubuntu/linux-aws-5.3@5.3.0-1035.37?arch=source\u0026distro=bionic"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.3.0-1016.17~18.04.1",
"5.3.0-1017.18~18.04.1",
"5.3.0-1019.21~18.04.1",
"5.3.0-1023.25~18.04.1",
"5.3.0-1028.30~18.04.1",
"5.3.0-1030.32~18.04.1",
"5.3.0-1032.34~18.04.2",
"5.3.0-1033.35",
"5.3.0-1034.36",
"5.3.0-1035.37"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-azure-cloud-tools-5.0.0-1036",
"binary_version": "5.0.0-1036.38"
},
{
"binary_name": "linux-azure-headers-5.0.0-1036",
"binary_version": "5.0.0-1036.38"
},
{
"binary_name": "linux-azure-tools-5.0.0-1036",
"binary_version": "5.0.0-1036.38"
},
{
"binary_name": "linux-buildinfo-5.0.0-1036-azure",
"binary_version": "5.0.0-1036.38"
},
{
"binary_name": "linux-cloud-tools-5.0.0-1036-azure",
"binary_version": "5.0.0-1036.38"
},
{
"binary_name": "linux-headers-5.0.0-1036-azure",
"binary_version": "5.0.0-1036.38"
},
{
"binary_name": "linux-image-unsigned-5.0.0-1036-azure",
"binary_version": "5.0.0-1036.38"
},
{
"binary_name": "linux-modules-5.0.0-1036-azure",
"binary_version": "5.0.0-1036.38"
},
{
"binary_name": "linux-modules-extra-5.0.0-1036-azure",
"binary_version": "5.0.0-1036.38"
},
{
"binary_name": "linux-tools-5.0.0-1036-azure",
"binary_version": "5.0.0-1036.38"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:18.04:LTS",
"name": "linux-azure",
"purl": "pkg:deb/ubuntu/linux-azure@5.0.0-1036.38?arch=source\u0026distro=bionic"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"4.15.0-1002.2",
"4.15.0-1003.3",
"4.15.0-1004.4",
"4.15.0-1008.8",
"4.15.0-1009.9",
"4.15.0-1012.12",
"4.15.0-1013.13",
"4.15.0-1014.14",
"4.15.0-1018.18",
"4.15.0-1019.19",
"4.15.0-1021.21",
"4.15.0-1022.23",
"4.15.0-1023.24",
"4.15.0-1025.26",
"4.15.0-1028.29",
"4.15.0-1030.31",
"4.15.0-1031.32",
"4.15.0-1032.33",
"4.15.0-1035.36",
"4.15.0-1036.38",
"4.15.0-1037.39",
"4.18.0-1011.11~18.04.1",
"4.18.0-1013.13~18.04.1",
"4.18.0-1014.14~18.04.1",
"4.18.0-1018.18~18.04.1",
"4.18.0-1019.19~18.04.1",
"4.18.0-1020.20~18.04.1",
"4.18.0-1023.24~18.04.1",
"4.18.0-1024.25~18.04.1",
"4.18.0-1025.27~18.04.1",
"5.0.0-1014.14~18.04.1",
"5.0.0-1016.17~18.04.1",
"5.0.0-1018.19~18.04.1",
"5.0.0-1020.21~18.04.1",
"5.0.0-1022.23~18.04.1",
"5.0.0-1023.24~18.04.1",
"5.0.0-1025.27~18.04.1",
"5.0.0-1027.29~18.04.1",
"5.0.0-1028.30~18.04.1",
"5.0.0-1029.31~18.04.1",
"5.0.0-1031.33",
"5.0.0-1032.34",
"5.0.0-1035.37",
"5.0.0-1036.38"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-azure-5.3-cloud-tools-5.3.0-1035",
"binary_version": "5.3.0-1035.36"
},
{
"binary_name": "linux-azure-5.3-headers-5.3.0-1035",
"binary_version": "5.3.0-1035.36"
},
{
"binary_name": "linux-azure-5.3-tools-5.3.0-1035",
"binary_version": "5.3.0-1035.36"
},
{
"binary_name": "linux-buildinfo-5.3.0-1035-azure",
"binary_version": "5.3.0-1035.36"
},
{
"binary_name": "linux-cloud-tools-5.3.0-1035-azure",
"binary_version": "5.3.0-1035.36"
},
{
"binary_name": "linux-headers-5.3.0-1035-azure",
"binary_version": "5.3.0-1035.36"
},
{
"binary_name": "linux-image-unsigned-5.3.0-1035-azure",
"binary_version": "5.3.0-1035.36"
},
{
"binary_name": "linux-modules-5.3.0-1035-azure",
"binary_version": "5.3.0-1035.36"
},
{
"binary_name": "linux-modules-extra-5.3.0-1035-azure",
"binary_version": "5.3.0-1035.36"
},
{
"binary_name": "linux-tools-5.3.0-1035-azure",
"binary_version": "5.3.0-1035.36"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:18.04:LTS",
"name": "linux-azure-5.3",
"purl": "pkg:deb/ubuntu/linux-azure-5.3@5.3.0-1035.36?arch=source\u0026distro=bionic"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.3.0-1007.8~18.04.1",
"5.3.0-1008.9~18.04.1",
"5.3.0-1009.10~18.04.1",
"5.3.0-1010.11~18.04.1",
"5.3.0-1012.13~18.04.1",
"5.3.0-1013.14~18.04.1",
"5.3.0-1016.17~18.04.1",
"5.3.0-1018.19~18.04.1",
"5.3.0-1019.20~18.04.1",
"5.3.0-1020.21~18.04.1",
"5.3.0-1022.23~18.04.1",
"5.3.0-1028.29~18.04.1",
"5.3.0-1031.32~18.04.1",
"5.3.0-1032.33~18.04.1",
"5.3.0-1034.35~18.04.1",
"5.3.0-1035.36"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-azure-edge-cloud-tools-5.0.0-1012",
"binary_version": "5.0.0-1012.12~18.04.2"
},
{
"binary_name": "linux-azure-edge-tools-5.0.0-1012",
"binary_version": "5.0.0-1012.12~18.04.2"
},
{
"binary_name": "linux-azure-headers-5.0.0-1012",
"binary_version": "5.0.0-1012.12~18.04.2"
},
{
"binary_name": "linux-buildinfo-5.0.0-1012-azure",
"binary_version": "5.0.0-1012.12~18.04.2"
},
{
"binary_name": "linux-cloud-tools-5.0.0-1012-azure",
"binary_version": "5.0.0-1012.12~18.04.2"
},
{
"binary_name": "linux-headers-5.0.0-1012-azure",
"binary_version": "5.0.0-1012.12~18.04.2"
},
{
"binary_name": "linux-image-unsigned-5.0.0-1012-azure",
"binary_version": "5.0.0-1012.12~18.04.2"
},
{
"binary_name": "linux-modules-5.0.0-1012-azure",
"binary_version": "5.0.0-1012.12~18.04.2"
},
{
"binary_name": "linux-modules-extra-5.0.0-1012-azure",
"binary_version": "5.0.0-1012.12~18.04.2"
},
{
"binary_name": "linux-tools-5.0.0-1012-azure",
"binary_version": "5.0.0-1012.12~18.04.2"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:18.04:LTS",
"name": "linux-azure-edge",
"purl": "pkg:deb/ubuntu/linux-azure-edge@5.0.0-1012.12~18.04.2?arch=source\u0026distro=bionic"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"4.18.0-1006.6~18.04.1",
"4.18.0-1007.7~18.04.1",
"4.18.0-1008.8~18.04.1",
"5.0.0-1012.12~18.04.2"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-buildinfo-5.0.0-1034-gcp",
"binary_version": "5.0.0-1034.35"
},
{
"binary_name": "linux-gcp-headers-5.0.0-1034",
"binary_version": "5.0.0-1034.35"
},
{
"binary_name": "linux-gcp-tools-5.0.0-1034",
"binary_version": "5.0.0-1034.35"
},
{
"binary_name": "linux-headers-5.0.0-1034-gcp",
"binary_version": "5.0.0-1034.35"
},
{
"binary_name": "linux-image-unsigned-5.0.0-1034-gcp",
"binary_version": "5.0.0-1034.35"
},
{
"binary_name": "linux-modules-5.0.0-1034-gcp",
"binary_version": "5.0.0-1034.35"
},
{
"binary_name": "linux-modules-extra-5.0.0-1034-gcp",
"binary_version": "5.0.0-1034.35"
},
{
"binary_name": "linux-tools-5.0.0-1034-gcp",
"binary_version": "5.0.0-1034.35"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:18.04:LTS",
"name": "linux-gcp",
"purl": "pkg:deb/ubuntu/linux-gcp@5.0.0-1034.35?arch=source\u0026distro=bionic"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"4.15.0-1001.1",
"4.15.0-1003.3",
"4.15.0-1005.5",
"4.15.0-1006.6",
"4.15.0-1008.8",
"4.15.0-1009.9",
"4.15.0-1010.10",
"4.15.0-1014.14",
"4.15.0-1015.15",
"4.15.0-1017.18",
"4.15.0-1018.19",
"4.15.0-1019.20",
"4.15.0-1021.22",
"4.15.0-1023.24",
"4.15.0-1024.25",
"4.15.0-1025.26",
"4.15.0-1026.27",
"4.15.0-1027.28",
"4.15.0-1028.29",
"4.15.0-1029.31",
"4.15.0-1030.32",
"4.15.0-1032.34",
"4.15.0-1033.35",
"4.15.0-1034.36",
"4.15.0-1036.38",
"4.15.0-1037.39",
"4.15.0-1040.42",
"4.15.0-1042.45",
"4.15.0-1044.70",
"5.0.0-1020.20~18.04.1",
"5.0.0-1021.21~18.04.1",
"5.0.0-1025.26~18.04.1",
"5.0.0-1026.27~18.04.1",
"5.0.0-1028.29~18.04.1",
"5.0.0-1029.30~18.04.1",
"5.0.0-1031.32",
"5.0.0-1033.34",
"5.0.0-1034.35"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-buildinfo-5.3.0-1032-gcp",
"binary_version": "5.3.0-1032.34~18.04.1"
},
{
"binary_name": "linux-gcp-5.3-headers-5.3.0-1032",
"binary_version": "5.3.0-1032.34~18.04.1"
},
{
"binary_name": "linux-gcp-5.3-tools-5.3.0-1032",
"binary_version": "5.3.0-1032.34~18.04.1"
},
{
"binary_name": "linux-headers-5.3.0-1032-gcp",
"binary_version": "5.3.0-1032.34~18.04.1"
},
{
"binary_name": "linux-image-unsigned-5.3.0-1032-gcp",
"binary_version": "5.3.0-1032.34~18.04.1"
},
{
"binary_name": "linux-modules-5.3.0-1032-gcp",
"binary_version": "5.3.0-1032.34~18.04.1"
},
{
"binary_name": "linux-modules-extra-5.3.0-1032-gcp",
"binary_version": "5.3.0-1032.34~18.04.1"
},
{
"binary_name": "linux-tools-5.3.0-1032-gcp",
"binary_version": "5.3.0-1032.34~18.04.1"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:18.04:LTS",
"name": "linux-gcp-5.3",
"purl": "pkg:deb/ubuntu/linux-gcp-5.3@5.3.0-1032.34~18.04.1?arch=source\u0026distro=bionic"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.3.0-1008.9~18.04.1",
"5.3.0-1009.10~18.04.1",
"5.3.0-1010.11~18.04.1",
"5.3.0-1012.13~18.04.1",
"5.3.0-1014.15~18.04.1",
"5.3.0-1016.17~18.04.1",
"5.3.0-1017.18~18.04.1",
"5.3.0-1018.19~18.04.1",
"5.3.0-1020.22~18.04.1",
"5.3.0-1026.28~18.04.1",
"5.3.0-1029.31~18.04.1",
"5.3.0-1030.32~18.04.1",
"5.3.0-1032.34~18.04.1"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-buildinfo-4.15.0-1079-gke",
"binary_version": "4.15.0-1079.84"
},
{
"binary_name": "linux-gke-4.15-headers-4.15.0-1079",
"binary_version": "4.15.0-1079.84"
},
{
"binary_name": "linux-gke-4.15-tools-4.15.0-1079",
"binary_version": "4.15.0-1079.84"
},
{
"binary_name": "linux-headers-4.15.0-1079-gke",
"binary_version": "4.15.0-1079.84"
},
{
"binary_name": "linux-image-unsigned-4.15.0-1079-gke",
"binary_version": "4.15.0-1079.84"
},
{
"binary_name": "linux-modules-4.15.0-1079-gke",
"binary_version": "4.15.0-1079.84"
},
{
"binary_name": "linux-modules-extra-4.15.0-1079-gke",
"binary_version": "4.15.0-1079.84"
},
{
"binary_name": "linux-tools-4.15.0-1079-gke",
"binary_version": "4.15.0-1079.84"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:18.04:LTS",
"name": "linux-gke-4.15",
"purl": "pkg:deb/ubuntu/linux-gke-4.15@4.15.0-1079.84?arch=source\u0026distro=bionic"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"4.15.0-1030.32",
"4.15.0-1032.34",
"4.15.0-1033.35",
"4.15.0-1034.36",
"4.15.0-1036.38",
"4.15.0-1037.39",
"4.15.0-1040.42",
"4.15.0-1041.43",
"4.15.0-1042.44",
"4.15.0-1044.46",
"4.15.0-1045.48",
"4.15.0-1046.49",
"4.15.0-1048.51",
"4.15.0-1049.52",
"4.15.0-1050.53",
"4.15.0-1052.55",
"4.15.0-1055.58",
"4.15.0-1057.60",
"4.15.0-1058.61",
"4.15.0-1059.62",
"4.15.0-1063.66",
"4.15.0-1064.67",
"4.15.0-1066.69",
"4.15.0-1067.70",
"4.15.0-1069.72",
"4.15.0-1070.73",
"4.15.0-1072.76",
"4.15.0-1073.78",
"4.15.0-1074.79",
"4.15.0-1076.81",
"4.15.0-1077.82",
"4.15.0-1078.83",
"4.15.0-1079.84"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-buildinfo-5.4.0-1080-gke",
"binary_version": "5.4.0-1080.86~18.04.1"
},
{
"binary_name": "linux-gke-5.4-headers-5.4.0-1080",
"binary_version": "5.4.0-1080.86~18.04.1"
},
{
"binary_name": "linux-gke-5.4-tools-5.4.0-1080",
"binary_version": "5.4.0-1080.86~18.04.1"
},
{
"binary_name": "linux-headers-5.4.0-1080-gke",
"binary_version": "5.4.0-1080.86~18.04.1"
},
{
"binary_name": "linux-image-unsigned-5.4.0-1080-gke",
"binary_version": "5.4.0-1080.86~18.04.1"
},
{
"binary_name": "linux-modules-5.4.0-1080-gke",
"binary_version": "5.4.0-1080.86~18.04.1"
},
{
"binary_name": "linux-modules-extra-5.4.0-1080-gke",
"binary_version": "5.4.0-1080.86~18.04.1"
},
{
"binary_name": "linux-tools-5.4.0-1080-gke",
"binary_version": "5.4.0-1080.86~18.04.1"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:18.04:LTS",
"name": "linux-gke-5.4",
"purl": "pkg:deb/ubuntu/linux-gke-5.4@5.4.0-1080.86~18.04.1?arch=source\u0026distro=bionic"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.4.0-1025.25~18.04.1",
"5.4.0-1027.28~18.04.1",
"5.4.0-1029.31~18.04.1",
"5.4.0-1030.32~18.04.1",
"5.4.0-1032.34~18.04.1",
"5.4.0-1033.35~18.04.1",
"5.4.0-1035.37~18.04.1",
"5.4.0-1036.38~18.04.1",
"5.4.0-1037.39~18.04.1",
"5.4.0-1039.41~18.04.1",
"5.4.0-1040.42~18.04.1",
"5.4.0-1042.44~18.04.1",
"5.4.0-1043.45~18.04.1",
"5.4.0-1044.46~18.04.1",
"5.4.0-1046.48~18.04.1",
"5.4.0-1049.52~18.04.1",
"5.4.0-1051.54~18.04.1",
"5.4.0-1052.55~18.04.1",
"5.4.0-1053.56~18.04.1",
"5.4.0-1054.57~18.04.1",
"5.4.0-1055.58~18.04.1",
"5.4.0-1056.59~18.04.1",
"5.4.0-1057.60~18.04.1",
"5.4.0-1059.62~18.04.1",
"5.4.0-1061.64~18.04.1",
"5.4.0-1062.65~18.04.1",
"5.4.0-1063.66~18.04.1",
"5.4.0-1065.68~18.04.1",
"5.4.0-1066.69~18.04.1",
"5.4.0-1067.70~18.04.1",
"5.4.0-1068.71~18.04.1",
"5.4.0-1071.76~18.04.3",
"5.4.0-1072.77~18.04.1",
"5.4.0-1074.79~18.04.1",
"5.4.0-1076.82~18.04.1",
"5.4.0-1078.84~18.04.1",
"5.4.0-1080.86~18.04.1"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-buildinfo-5.4.0-1051-gkeop",
"binary_version": "5.4.0-1051.54~18.04.1"
},
{
"binary_name": "linux-cloud-tools-5.4.0-1051-gkeop",
"binary_version": "5.4.0-1051.54~18.04.1"
},
{
"binary_name": "linux-gkeop-5.4-cloud-tools-5.4.0-1051",
"binary_version": "5.4.0-1051.54~18.04.1"
},
{
"binary_name": "linux-gkeop-5.4-headers-5.4.0-1051",
"binary_version": "5.4.0-1051.54~18.04.1"
},
{
"binary_name": "linux-gkeop-5.4-source-5.4.0",
"binary_version": "5.4.0-1051.54~18.04.1"
},
{
"binary_name": "linux-gkeop-5.4-tools-5.4.0-1051",
"binary_version": "5.4.0-1051.54~18.04.1"
},
{
"binary_name": "linux-headers-5.4.0-1051-gkeop",
"binary_version": "5.4.0-1051.54~18.04.1"
},
{
"binary_name": "linux-image-unsigned-5.4.0-1051-gkeop",
"binary_version": "5.4.0-1051.54~18.04.1"
},
{
"binary_name": "linux-modules-5.4.0-1051-gkeop",
"binary_version": "5.4.0-1051.54~18.04.1"
},
{
"binary_name": "linux-modules-extra-5.4.0-1051-gkeop",
"binary_version": "5.4.0-1051.54~18.04.1"
},
{
"binary_name": "linux-tools-5.4.0-1051-gkeop",
"binary_version": "5.4.0-1051.54~18.04.1"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:18.04:LTS",
"name": "linux-gkeop-5.4",
"purl": "pkg:deb/ubuntu/linux-gkeop-5.4@5.4.0-1051.54~18.04.1?arch=source\u0026distro=bionic"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.4.0-1001.1",
"5.4.0-1003.3",
"5.4.0-1004.5",
"5.4.0-1005.6",
"5.4.0-1007.8~18.04.1",
"5.4.0-1008.9~18.04.1",
"5.4.0-1009.10~18.04.1",
"5.4.0-1010.11~18.04.1",
"5.4.0-1011.12~18.04.2",
"5.4.0-1012.13~18.04.1",
"5.4.0-1013.14~18.04.1",
"5.4.0-1014.15~18.04.1",
"5.4.0-1015.16~18.04.1",
"5.4.0-1016.17~18.04.1",
"5.4.0-1018.19~18.04.1",
"5.4.0-1021.22~18.04.1",
"5.4.0-1022.23~18.04.1",
"5.4.0-1023.24~18.04.1",
"5.4.0-1024.25~18.04.1",
"5.4.0-1025.26~18.04.1",
"5.4.0-1026.27~18.04.1",
"5.4.0-1027.28~18.04.1",
"5.4.0-1029.30~18.04.2",
"5.4.0-1031.32~18.04.1",
"5.4.0-1032.33~18.04.1",
"5.4.0-1033.34~18.04.1",
"5.4.0-1034.35~18.04.1",
"5.4.0-1036.37~18.04.1",
"5.4.0-1037.38~18.04.1",
"5.4.0-1038.39~18.04.1",
"5.4.0-1039.40~18.04.1",
"5.4.0-1040.41~18.04.1",
"5.4.0-1043.44~18.04.1",
"5.4.0-1046.48~18.04.1",
"5.4.0-1048.51~18.04.1",
"5.4.0-1049.52~18.04.1",
"5.4.0-1051.54~18.04.1"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "block-modules-5.3.0-76-generic-di",
"binary_version": "5.3.0-76.72"
},
{
"binary_name": "crypto-modules-5.3.0-76-generic-di",
"binary_version": "5.3.0-76.72"
},
{
"binary_name": "fat-modules-5.3.0-76-generic-di",
"binary_version": "5.3.0-76.72"
},
{
"binary_name": "fb-modules-5.3.0-76-generic-di",
"binary_version": "5.3.0-76.72"
},
{
"binary_name": "firewire-core-modules-5.3.0-76-generic-di",
"binary_version": "5.3.0-76.72"
},
{
"binary_name": "floppy-modules-5.3.0-76-generic-di",
"binary_version": "5.3.0-76.72"
},
{
"binary_name": "fs-core-modules-5.3.0-76-generic-di",
"binary_version": "5.3.0-76.72"
},
{
"binary_name": "fs-secondary-modules-5.3.0-76-generic-di",
"binary_version": "5.3.0-76.72"
},
{
"binary_name": "input-modules-5.3.0-76-generic-di",
"binary_version": "5.3.0-76.72"
},
{
"binary_name": "ipmi-modules-5.3.0-76-generic-di",
"binary_version": "5.3.0-76.72"
},
{
"binary_name": "kernel-image-5.3.0-76-generic-di",
"binary_version": "5.3.0-76.72"
},
{
"binary_name": "linux-buildinfo-5.3.0-76-generic",
"binary_version": "5.3.0-76.72"
},
{
"binary_name": "linux-buildinfo-5.3.0-76-lowlatency",
"binary_version": "5.3.0-76.72"
},
{
"binary_name": "linux-cloud-tools-5.3.0-76-generic",
"binary_version": "5.3.0-76.72"
},
{
"binary_name": "linux-cloud-tools-5.3.0-76-lowlatency",
"binary_version": "5.3.0-76.72"
},
{
"binary_name": "linux-headers-5.3.0-76-generic",
"binary_version": "5.3.0-76.72"
},
{
"binary_name": "linux-headers-5.3.0-76-lowlatency",
"binary_version": "5.3.0-76.72"
},
{
"binary_name": "linux-hwe-cloud-tools-5.3.0-76",
"binary_version": "5.3.0-76.72"
},
{
"binary_name": "linux-hwe-headers-5.3.0-76",
"binary_version": "5.3.0-76.72"
},
{
"binary_name": "linux-hwe-tools-5.3.0-76",
"binary_version": "5.3.0-76.72"
},
{
"binary_name": "linux-hwe-udebs-generic",
"binary_version": "5.3.0-76.72"
},
{
"binary_name": "linux-image-5.3.0-76-generic",
"binary_version": "5.3.0-76.72"
},
{
"binary_name": "linux-image-5.3.0-76-lowlatency",
"binary_version": "5.3.0-76.72"
},
{
"binary_name": "linux-image-unsigned-5.3.0-76-generic",
"binary_version": "5.3.0-76.72"
},
{
"binary_name": "linux-image-unsigned-5.3.0-76-lowlatency",
"binary_version": "5.3.0-76.72"
},
{
"binary_name": "linux-modules-5.3.0-76-generic",
"binary_version": "5.3.0-76.72"
},
{
"binary_name": "linux-modules-5.3.0-76-lowlatency",
"binary_version": "5.3.0-76.72"
},
{
"binary_name": "linux-modules-extra-5.3.0-76-generic",
"binary_version": "5.3.0-76.72"
},
{
"binary_name": "linux-source-5.3.0",
"binary_version": "5.3.0-76.72"
},
{
"binary_name": "linux-tools-5.3.0-76-generic",
"binary_version": "5.3.0-76.72"
},
{
"binary_name": "linux-tools-5.3.0-76-lowlatency",
"binary_version": "5.3.0-76.72"
},
{
"binary_name": "md-modules-5.3.0-76-generic-di",
"binary_version": "5.3.0-76.72"
},
{
"binary_name": "message-modules-5.3.0-76-generic-di",
"binary_version": "5.3.0-76.72"
},
{
"binary_name": "mouse-modules-5.3.0-76-generic-di",
"binary_version": "5.3.0-76.72"
},
{
"binary_name": "multipath-modules-5.3.0-76-generic-di",
"binary_version": "5.3.0-76.72"
},
{
"binary_name": "nfs-modules-5.3.0-76-generic-di",
"binary_version": "5.3.0-76.72"
},
{
"binary_name": "nic-modules-5.3.0-76-generic-di",
"binary_version": "5.3.0-76.72"
},
{
"binary_name": "nic-pcmcia-modules-5.3.0-76-generic-di",
"binary_version": "5.3.0-76.72"
},
{
"binary_name": "nic-shared-modules-5.3.0-76-generic-di",
"binary_version": "5.3.0-76.72"
},
{
"binary_name": "nic-usb-modules-5.3.0-76-generic-di",
"binary_version": "5.3.0-76.72"
},
{
"binary_name": "parport-modules-5.3.0-76-generic-di",
"binary_version": "5.3.0-76.72"
},
{
"binary_name": "pata-modules-5.3.0-76-generic-di",
"binary_version": "5.3.0-76.72"
},
{
"binary_name": "pcmcia-modules-5.3.0-76-generic-di",
"binary_version": "5.3.0-76.72"
},
{
"binary_name": "pcmcia-storage-modules-5.3.0-76-generic-di",
"binary_version": "5.3.0-76.72"
},
{
"binary_name": "plip-modules-5.3.0-76-generic-di",
"binary_version": "5.3.0-76.72"
},
{
"binary_name": "ppp-modules-5.3.0-76-generic-di",
"binary_version": "5.3.0-76.72"
},
{
"binary_name": "sata-modules-5.3.0-76-generic-di",
"binary_version": "5.3.0-76.72"
},
{
"binary_name": "scsi-modules-5.3.0-76-generic-di",
"binary_version": "5.3.0-76.72"
},
{
"binary_name": "serial-modules-5.3.0-76-generic-di",
"binary_version": "5.3.0-76.72"
},
{
"binary_name": "storage-core-modules-5.3.0-76-generic-di",
"binary_version": "5.3.0-76.72"
},
{
"binary_name": "usb-modules-5.3.0-76-generic-di",
"binary_version": "5.3.0-76.72"
},
{
"binary_name": "virtio-modules-5.3.0-76-generic-di",
"binary_version": "5.3.0-76.72"
},
{
"binary_name": "vlan-modules-5.3.0-76-generic-di",
"binary_version": "5.3.0-76.72"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:18.04:LTS",
"name": "linux-hwe",
"purl": "pkg:deb/ubuntu/linux-hwe@5.3.0-76.72?arch=source\u0026distro=bionic"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"4.18.0-13.14~18.04.1",
"4.18.0-14.15~18.04.1",
"4.18.0-15.16~18.04.1",
"4.18.0-16.17~18.04.1",
"4.18.0-17.18~18.04.1",
"4.18.0-18.19~18.04.1",
"4.18.0-20.21~18.04.1",
"4.18.0-21.22~18.04.1",
"4.18.0-22.23~18.04.1",
"4.18.0-24.25~18.04.1",
"4.18.0-25.26~18.04.1",
"5.0.0-23.24~18.04.1",
"5.0.0-25.26~18.04.1",
"5.0.0-27.28~18.04.1",
"5.0.0-29.31~18.04.1",
"5.0.0-31.33~18.04.1",
"5.0.0-32.34~18.04.2",
"5.0.0-35.38~18.04.1",
"5.0.0-36.39~18.04.1",
"5.0.0-37.40~18.04.1",
"5.3.0-26.28~18.04.1",
"5.3.0-28.30~18.04.1",
"5.3.0-40.32~18.04.1",
"5.3.0-42.34~18.04.1",
"5.3.0-45.37~18.04.1",
"5.3.0-46.38~18.04.1",
"5.3.0-51.44~18.04.2",
"5.3.0-53.47~18.04.1",
"5.3.0-59.53~18.04.1",
"5.3.0-61.55~18.04.1",
"5.3.0-62.56~18.04.1",
"5.3.0-64.58~18.04.1",
"5.3.0-65.59",
"5.3.0-66.60",
"5.3.0-67.61",
"5.3.0-68.63",
"5.3.0-69.65",
"5.3.0-70.66",
"5.3.0-72.68",
"5.3.0-73.69",
"5.3.0-74.70",
"5.3.0-75.71",
"5.3.0-76.72"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "block-modules-5.3.0-24-generic-di",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "block-modules-5.3.0-24-generic-lpae-di",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "crypto-modules-5.3.0-24-generic-di",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "crypto-modules-5.3.0-24-generic-lpae-di",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "dasd-extra-modules-5.3.0-24-generic-di",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "dasd-modules-5.3.0-24-generic-di",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "fat-modules-5.3.0-24-generic-di",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "fat-modules-5.3.0-24-generic-lpae-di",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "fb-modules-5.3.0-24-generic-di",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "firewire-core-modules-5.3.0-24-generic-di",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "floppy-modules-5.3.0-24-generic-di",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "fs-core-modules-5.3.0-24-generic-di",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "fs-core-modules-5.3.0-24-generic-lpae-di",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "fs-secondary-modules-5.3.0-24-generic-di",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "fs-secondary-modules-5.3.0-24-generic-lpae-di",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "input-modules-5.3.0-24-generic-di",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "input-modules-5.3.0-24-generic-lpae-di",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "ipmi-modules-5.3.0-24-generic-di",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "ipmi-modules-5.3.0-24-generic-lpae-di",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "kernel-image-5.3.0-24-generic-di",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "kernel-image-5.3.0-24-generic-lpae-di",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "linux-buildinfo-5.3.0-24-generic",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "linux-buildinfo-5.3.0-24-generic-lpae",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "linux-buildinfo-5.3.0-24-lowlatency",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "linux-cloud-tools-5.3.0-24-generic",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "linux-cloud-tools-5.3.0-24-lowlatency",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "linux-headers-5.3.0-24",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "linux-headers-5.3.0-24-generic",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "linux-headers-5.3.0-24-generic-lpae",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "linux-headers-5.3.0-24-lowlatency",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "linux-hwe-edge-cloud-tools-5.3.0-24",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "linux-hwe-edge-tools-5.3.0-24",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "linux-hwe-edge-udebs-generic",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "linux-hwe-edge-udebs-generic-lpae",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "linux-image-5.3.0-24-generic",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "linux-image-5.3.0-24-generic-lpae",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "linux-image-5.3.0-24-lowlatency",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "linux-image-unsigned-5.3.0-24-generic",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "linux-image-unsigned-5.3.0-24-lowlatency",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "linux-modules-5.3.0-24-generic",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "linux-modules-5.3.0-24-generic-lpae",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "linux-modules-5.3.0-24-lowlatency",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "linux-modules-extra-5.3.0-24-generic",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "linux-source-5.3.0",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "linux-tools-5.3.0-24-generic",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "linux-tools-5.3.0-24-generic-lpae",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "linux-tools-5.3.0-24-lowlatency",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "md-modules-5.3.0-24-generic-di",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "md-modules-5.3.0-24-generic-lpae-di",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "message-modules-5.3.0-24-generic-di",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "mouse-modules-5.3.0-24-generic-di",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "mouse-modules-5.3.0-24-generic-lpae-di",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "multipath-modules-5.3.0-24-generic-di",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "multipath-modules-5.3.0-24-generic-lpae-di",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "nfs-modules-5.3.0-24-generic-di",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "nfs-modules-5.3.0-24-generic-lpae-di",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "nic-modules-5.3.0-24-generic-di",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "nic-modules-5.3.0-24-generic-lpae-di",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "nic-pcmcia-modules-5.3.0-24-generic-di",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "nic-shared-modules-5.3.0-24-generic-di",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "nic-shared-modules-5.3.0-24-generic-lpae-di",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "nic-usb-modules-5.3.0-24-generic-di",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "nic-usb-modules-5.3.0-24-generic-lpae-di",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "parport-modules-5.3.0-24-generic-di",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "parport-modules-5.3.0-24-generic-lpae-di",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "pata-modules-5.3.0-24-generic-di",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "pcmcia-modules-5.3.0-24-generic-di",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "pcmcia-storage-modules-5.3.0-24-generic-di",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "plip-modules-5.3.0-24-generic-di",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "plip-modules-5.3.0-24-generic-lpae-di",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "ppp-modules-5.3.0-24-generic-di",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "ppp-modules-5.3.0-24-generic-lpae-di",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "sata-modules-5.3.0-24-generic-di",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "sata-modules-5.3.0-24-generic-lpae-di",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "scsi-modules-5.3.0-24-generic-di",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "scsi-modules-5.3.0-24-generic-lpae-di",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "serial-modules-5.3.0-24-generic-di",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "storage-core-modules-5.3.0-24-generic-di",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "storage-core-modules-5.3.0-24-generic-lpae-di",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "usb-modules-5.3.0-24-generic-di",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "usb-modules-5.3.0-24-generic-lpae-di",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "virtio-modules-5.3.0-24-generic-di",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "vlan-modules-5.3.0-24-generic-di",
"binary_version": "5.3.0-24.26~18.04.2"
},
{
"binary_name": "vlan-modules-5.3.0-24-generic-lpae-di",
"binary_version": "5.3.0-24.26~18.04.2"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:18.04:LTS",
"name": "linux-hwe-edge",
"purl": "pkg:deb/ubuntu/linux-hwe-edge@5.3.0-24.26~18.04.2?arch=source\u0026distro=bionic"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.0.0-15.16~18.04.1",
"5.0.0-16.17~18.04.1",
"5.0.0-17.18~18.04.1",
"5.0.0-19.20~18.04.1",
"5.0.0-20.21~18.04.1",
"5.3.0-19.20~18.04.2",
"5.3.0-22.24~18.04.1",
"5.3.0-23.25~18.04.1",
"5.3.0-23.25~18.04.2",
"5.3.0-24.26~18.04.2"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "block-modules-4.15.0-1103-oem-di",
"binary_version": "4.15.0-1103.114"
},
{
"binary_name": "crypto-modules-4.15.0-1103-oem-di",
"binary_version": "4.15.0-1103.114"
},
{
"binary_name": "fat-modules-4.15.0-1103-oem-di",
"binary_version": "4.15.0-1103.114"
},
{
"binary_name": "fb-modules-4.15.0-1103-oem-di",
"binary_version": "4.15.0-1103.114"
},
{
"binary_name": "firewire-core-modules-4.15.0-1103-oem-di",
"binary_version": "4.15.0-1103.114"
},
{
"binary_name": "floppy-modules-4.15.0-1103-oem-di",
"binary_version": "4.15.0-1103.114"
},
{
"binary_name": "fs-core-modules-4.15.0-1103-oem-di",
"binary_version": "4.15.0-1103.114"
},
{
"binary_name": "fs-secondary-modules-4.15.0-1103-oem-di",
"binary_version": "4.15.0-1103.114"
},
{
"binary_name": "input-modules-4.15.0-1103-oem-di",
"binary_version": "4.15.0-1103.114"
},
{
"binary_name": "ipmi-modules-4.15.0-1103-oem-di",
"binary_version": "4.15.0-1103.114"
},
{
"binary_name": "irda-modules-4.15.0-1103-oem-di",
"binary_version": "4.15.0-1103.114"
},
{
"binary_name": "kernel-image-4.15.0-1103-oem-di",
"binary_version": "4.15.0-1103.114"
},
{
"binary_name": "linux-buildinfo-4.15.0-1103-oem",
"binary_version": "4.15.0-1103.114"
},
{
"binary_name": "linux-headers-4.15.0-1103-oem",
"binary_version": "4.15.0-1103.114"
},
{
"binary_name": "linux-image-unsigned-4.15.0-1103-oem",
"binary_version": "4.15.0-1103.114"
},
{
"binary_name": "linux-modules-4.15.0-1103-oem",
"binary_version": "4.15.0-1103.114"
},
{
"binary_name": "linux-oem-headers-4.15.0-1103",
"binary_version": "4.15.0-1103.114"
},
{
"binary_name": "linux-oem-tools-4.15.0-1103",
"binary_version": "4.15.0-1103.114"
},
{
"binary_name": "linux-tools-4.15.0-1103-oem",
"binary_version": "4.15.0-1103.114"
},
{
"binary_name": "linux-udebs-oem",
"binary_version": "4.15.0-1103.114"
},
{
"binary_name": "md-modules-4.15.0-1103-oem-di",
"binary_version": "4.15.0-1103.114"
},
{
"binary_name": "message-modules-4.15.0-1103-oem-di",
"binary_version": "4.15.0-1103.114"
},
{
"binary_name": "mouse-modules-4.15.0-1103-oem-di",
"binary_version": "4.15.0-1103.114"
},
{
"binary_name": "multipath-modules-4.15.0-1103-oem-di",
"binary_version": "4.15.0-1103.114"
},
{
"binary_name": "nfs-modules-4.15.0-1103-oem-di",
"binary_version": "4.15.0-1103.114"
},
{
"binary_name": "nic-modules-4.15.0-1103-oem-di",
"binary_version": "4.15.0-1103.114"
},
{
"binary_name": "nic-pcmcia-modules-4.15.0-1103-oem-di",
"binary_version": "4.15.0-1103.114"
},
{
"binary_name": "nic-shared-modules-4.15.0-1103-oem-di",
"binary_version": "4.15.0-1103.114"
},
{
"binary_name": "nic-usb-modules-4.15.0-1103-oem-di",
"binary_version": "4.15.0-1103.114"
},
{
"binary_name": "parport-modules-4.15.0-1103-oem-di",
"binary_version": "4.15.0-1103.114"
},
{
"binary_name": "pata-modules-4.15.0-1103-oem-di",
"binary_version": "4.15.0-1103.114"
},
{
"binary_name": "pcmcia-modules-4.15.0-1103-oem-di",
"binary_version": "4.15.0-1103.114"
},
{
"binary_name": "pcmcia-storage-modules-4.15.0-1103-oem-di",
"binary_version": "4.15.0-1103.114"
},
{
"binary_name": "plip-modules-4.15.0-1103-oem-di",
"binary_version": "4.15.0-1103.114"
},
{
"binary_name": "ppp-modules-4.15.0-1103-oem-di",
"binary_version": "4.15.0-1103.114"
},
{
"binary_name": "sata-modules-4.15.0-1103-oem-di",
"binary_version": "4.15.0-1103.114"
},
{
"binary_name": "scsi-modules-4.15.0-1103-oem-di",
"binary_version": "4.15.0-1103.114"
},
{
"binary_name": "serial-modules-4.15.0-1103-oem-di",
"binary_version": "4.15.0-1103.114"
},
{
"binary_name": "storage-core-modules-4.15.0-1103-oem-di",
"binary_version": "4.15.0-1103.114"
},
{
"binary_name": "usb-modules-4.15.0-1103-oem-di",
"binary_version": "4.15.0-1103.114"
},
{
"binary_name": "virtio-modules-4.15.0-1103-oem-di",
"binary_version": "4.15.0-1103.114"
},
{
"binary_name": "vlan-modules-4.15.0-1103-oem-di",
"binary_version": "4.15.0-1103.114"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:18.04:LTS",
"name": "linux-oem",
"purl": "pkg:deb/ubuntu/linux-oem@4.15.0-1103.114?arch=source\u0026distro=bionic"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"4.15.0-1002.3",
"4.15.0-1004.5",
"4.15.0-1006.9",
"4.15.0-1008.11",
"4.15.0-1009.12",
"4.15.0-1012.15",
"4.15.0-1013.16",
"4.15.0-1015.18",
"4.15.0-1017.20",
"4.15.0-1018.21",
"4.15.0-1021.24",
"4.15.0-1024.29",
"4.15.0-1026.31",
"4.15.0-1028.33",
"4.15.0-1030.35",
"4.15.0-1033.38",
"4.15.0-1034.39",
"4.15.0-1035.40",
"4.15.0-1036.41",
"4.15.0-1038.43",
"4.15.0-1039.44",
"4.15.0-1043.48",
"4.15.0-1045.50",
"4.15.0-1050.57",
"4.15.0-1056.65",
"4.15.0-1057.66",
"4.15.0-1059.68",
"4.15.0-1063.72",
"4.15.0-1064.73",
"4.15.0-1065.75",
"4.15.0-1066.76",
"4.15.0-1067.77",
"4.15.0-1069.79",
"4.15.0-1073.83",
"4.15.0-1076.86",
"4.15.0-1079.89",
"4.15.0-1080.90",
"4.15.0-1081.91",
"4.15.0-1087.97",
"4.15.0-1090.100",
"4.15.0-1091.101",
"4.15.0-1093.103",
"4.15.0-1094.104",
"4.15.0-1096.106",
"4.15.0-1097.107",
"4.15.0-1099.109",
"4.15.0-1100.110",
"4.15.0-1101.112",
"4.15.0-1102.113",
"4.15.0-1103.114"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-buildinfo-5.0.0-1014-oracle",
"binary_version": "5.0.0-1014.19"
},
{
"binary_name": "linux-headers-5.0.0-1014-oracle",
"binary_version": "5.0.0-1014.19"
},
{
"binary_name": "linux-image-unsigned-5.0.0-1014-oracle",
"binary_version": "5.0.0-1014.19"
},
{
"binary_name": "linux-modules-5.0.0-1014-oracle",
"binary_version": "5.0.0-1014.19"
},
{
"binary_name": "linux-modules-extra-5.0.0-1014-oracle",
"binary_version": "5.0.0-1014.19"
},
{
"binary_name": "linux-oracle-5.0-headers-5.0.0-1014",
"binary_version": "5.0.0-1014.19"
},
{
"binary_name": "linux-oracle-5.0-tools-5.0.0-1014",
"binary_version": "5.0.0-1014.19"
},
{
"binary_name": "linux-tools-5.0.0-1014-oracle",
"binary_version": "5.0.0-1014.19"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:18.04:LTS",
"name": "linux-oracle-5.0",
"purl": "pkg:deb/ubuntu/linux-oracle-5.0@5.0.0-1014.19?arch=source\u0026distro=bionic"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.0.0-1007.12~18.04.1",
"5.0.0-1008.13~18.04.1",
"5.0.0-1009.14~18.04.1",
"5.0.0-1010.15~18.04.1",
"5.0.0-1011.16",
"5.0.0-1013.18",
"5.0.0-1014.19"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-buildinfo-5.3.0-1030-oracle",
"binary_version": "5.3.0-1030.32~18.04.1"
},
{
"binary_name": "linux-headers-5.3.0-1030-oracle",
"binary_version": "5.3.0-1030.32~18.04.1"
},
{
"binary_name": "linux-image-unsigned-5.3.0-1030-oracle",
"binary_version": "5.3.0-1030.32~18.04.1"
},
{
"binary_name": "linux-modules-5.3.0-1030-oracle",
"binary_version": "5.3.0-1030.32~18.04.1"
},
{
"binary_name": "linux-modules-extra-5.3.0-1030-oracle",
"binary_version": "5.3.0-1030.32~18.04.1"
},
{
"binary_name": "linux-oracle-5.3-headers-5.3.0-1030",
"binary_version": "5.3.0-1030.32~18.04.1"
},
{
"binary_name": "linux-oracle-5.3-tools-5.3.0-1030",
"binary_version": "5.3.0-1030.32~18.04.1"
},
{
"binary_name": "linux-tools-5.3.0-1030-oracle",
"binary_version": "5.3.0-1030.32~18.04.1"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:18.04:LTS",
"name": "linux-oracle-5.3",
"purl": "pkg:deb/ubuntu/linux-oracle-5.3@5.3.0-1030.32~18.04.1?arch=source\u0026distro=bionic"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.3.0-1011.12~18.04.1",
"5.3.0-1013.14~18.04.1",
"5.3.0-1014.15~18.04.1",
"5.3.0-1016.18~18.04.1",
"5.3.0-1018.20~18.04.1",
"5.3.0-1024.26~18.04.1",
"5.3.0-1027.29~18.04.1",
"5.3.0-1028.30~18.04.1",
"5.3.0-1030.32~18.04.1"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-aws-5.11-cloud-tools-5.11.0-1028",
"binary_version": "5.11.0-1028.31~20.04.1"
},
{
"binary_name": "linux-aws-5.11-headers-5.11.0-1028",
"binary_version": "5.11.0-1028.31~20.04.1"
},
{
"binary_name": "linux-aws-5.11-tools-5.11.0-1028",
"binary_version": "5.11.0-1028.31~20.04.1"
},
{
"binary_name": "linux-buildinfo-5.11.0-1028-aws",
"binary_version": "5.11.0-1028.31~20.04.1"
},
{
"binary_name": "linux-cloud-tools-5.11.0-1028-aws",
"binary_version": "5.11.0-1028.31~20.04.1"
},
{
"binary_name": "linux-headers-5.11.0-1028-aws",
"binary_version": "5.11.0-1028.31~20.04.1"
},
{
"binary_name": "linux-image-unsigned-5.11.0-1028-aws",
"binary_version": "5.11.0-1028.31~20.04.1"
},
{
"binary_name": "linux-modules-5.11.0-1028-aws",
"binary_version": "5.11.0-1028.31~20.04.1"
},
{
"binary_name": "linux-modules-extra-5.11.0-1028-aws",
"binary_version": "5.11.0-1028.31~20.04.1"
},
{
"binary_name": "linux-tools-5.11.0-1028-aws",
"binary_version": "5.11.0-1028.31~20.04.1"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:20.04:LTS",
"name": "linux-aws-5.11",
"purl": "pkg:deb/ubuntu/linux-aws-5.11@5.11.0-1028.31~20.04.1?arch=source\u0026distro=focal"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.11.0-1009.9~20.04.2",
"5.11.0-1014.15~20.04.1",
"5.11.0-1016.17~20.04.1",
"5.11.0-1017.18~20.04.1",
"5.11.0-1019.20~20.04.1",
"5.11.0-1020.21~20.04.2",
"5.11.0-1021.22~20.04.2",
"5.11.0-1022.23~20.04.1",
"5.11.0-1023.24~20.04.1",
"5.11.0-1025.27~20.04.1",
"5.11.0-1027.30~20.04.1",
"5.11.0-1028.31~20.04.1"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-aws-5.13-cloud-tools-5.13.0-1031",
"binary_version": "5.13.0-1031.35~20.04.1"
},
{
"binary_name": "linux-aws-5.13-headers-5.13.0-1031",
"binary_version": "5.13.0-1031.35~20.04.1"
},
{
"binary_name": "linux-aws-5.13-tools-5.13.0-1031",
"binary_version": "5.13.0-1031.35~20.04.1"
},
{
"binary_name": "linux-buildinfo-5.13.0-1031-aws",
"binary_version": "5.13.0-1031.35~20.04.1"
},
{
"binary_name": "linux-cloud-tools-5.13.0-1031-aws",
"binary_version": "5.13.0-1031.35~20.04.1"
},
{
"binary_name": "linux-headers-5.13.0-1031-aws",
"binary_version": "5.13.0-1031.35~20.04.1"
},
{
"binary_name": "linux-image-unsigned-5.13.0-1031-aws",
"binary_version": "5.13.0-1031.35~20.04.1"
},
{
"binary_name": "linux-modules-5.13.0-1031-aws",
"binary_version": "5.13.0-1031.35~20.04.1"
},
{
"binary_name": "linux-modules-extra-5.13.0-1031-aws",
"binary_version": "5.13.0-1031.35~20.04.1"
},
{
"binary_name": "linux-tools-5.13.0-1031-aws",
"binary_version": "5.13.0-1031.35~20.04.1"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:20.04:LTS",
"name": "linux-aws-5.13",
"purl": "pkg:deb/ubuntu/linux-aws-5.13@5.13.0-1031.35~20.04.1?arch=source\u0026distro=focal"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.13.0-1008.9~20.04.2",
"5.13.0-1011.12~20.04.1",
"5.13.0-1012.13~20.04.1",
"5.13.0-1014.15~20.04.1",
"5.13.0-1017.19~20.04.1",
"5.13.0-1019.21~20.04.1",
"5.13.0-1021.23~20.04.2",
"5.13.0-1022.24~20.04.1",
"5.13.0-1023.25~20.04.1",
"5.13.0-1025.27~20.04.1",
"5.13.0-1028.31~20.04.1",
"5.13.0-1029.32~20.04.1",
"5.13.0-1031.35~20.04.1"
]
},
{
"ecosystem_specific": {
"availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
"binaries": [
{
"binary_name": "linux-aws-5.15-cloud-tools-5.15.0-1109",
"binary_version": "5.15.0-1109.116~20.04.1"
},
{
"binary_name": "linux-aws-5.15-headers-5.15.0-1109",
"binary_version": "5.15.0-1109.116~20.04.1"
},
{
"binary_name": "linux-aws-5.15-tools-5.15.0-1109",
"binary_version": "5.15.0-1109.116~20.04.1"
},
{
"binary_name": "linux-buildinfo-5.15.0-1109-aws",
"binary_version": "5.15.0-1109.116~20.04.1"
},
{
"binary_name": "linux-cloud-tools-5.15.0-1109-aws",
"binary_version": "5.15.0-1109.116~20.04.1"
},
{
"binary_name": "linux-headers-5.15.0-1109-aws",
"binary_version": "5.15.0-1109.116~20.04.1"
},
{
"binary_name": "linux-image-unsigned-5.15.0-1109-aws",
"binary_version": "5.15.0-1109.116~20.04.1"
},
{
"binary_name": "linux-modules-5.15.0-1109-aws",
"binary_version": "5.15.0-1109.116~20.04.1"
},
{
"binary_name": "linux-modules-extra-5.15.0-1109-aws",
"binary_version": "5.15.0-1109.116~20.04.1"
},
{
"binary_name": "linux-tools-5.15.0-1109-aws",
"binary_version": "5.15.0-1109.116~20.04.1"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:Pro:20.04:LTS",
"name": "linux-aws-5.15",
"purl": "pkg:deb/ubuntu/linux-aws-5.15@5.15.0-1109.116~20.04.1?arch=source\u0026distro=esm-infra/focal"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "5.15.0-1109.116~20.04.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.15.0-1014.18~20.04.1",
"5.15.0-1015.19~20.04.1",
"5.15.0-1017.21~20.04.1",
"5.15.0-1019.23~20.04.1",
"5.15.0-1020.24~20.04.1",
"5.15.0-1021.25~20.04.1",
"5.15.0-1022.26~20.04.1",
"5.15.0-1023.27~20.04.1",
"5.15.0-1026.30~20.04.2",
"5.15.0-1027.31~20.04.1",
"5.15.0-1028.32~20.04.1",
"5.15.0-1030.34~20.04.1",
"5.15.0-1031.35~20.04.1",
"5.15.0-1033.37~20.04.1",
"5.15.0-1034.38~20.04.1",
"5.15.0-1035.39~20.04.1",
"5.15.0-1036.40~20.04.1",
"5.15.0-1037.41~20.04.1",
"5.15.0-1038.43~20.04.1",
"5.15.0-1039.44~20.04.1",
"5.15.0-1040.45~20.04.1",
"5.15.0-1041.46~20.04.1",
"5.15.0-1043.48~20.04.1",
"5.15.0-1044.49~20.04.1",
"5.15.0-1045.50~20.04.1",
"5.15.0-1047.52~20.04.1",
"5.15.0-1048.53~20.04.1",
"5.15.0-1049.54~20.04.1",
"5.15.0-1050.55~20.04.1",
"5.15.0-1051.56~20.04.1",
"5.15.0-1052.57~20.04.1",
"5.15.0-1053.58~20.04.1",
"5.15.0-1055.60~20.04.1",
"5.15.0-1056.61~20.04.1",
"5.15.0-1057.63~20.04.1",
"5.15.0-1058.64~20.04.1",
"5.15.0-1061.67~20.04.1",
"5.15.0-1062.68~20.04.1",
"5.15.0-1063.69~20.04.1",
"5.15.0-1064.70~20.04.1",
"5.15.0-1065.71~20.04.1",
"5.15.0-1066.72~20.04.1",
"5.15.0-1067.73~20.04.1",
"5.15.0-1068.74~20.04.1",
"5.15.0-1069.75~20.04.1",
"5.15.0-1070.76~20.04.1",
"5.15.0-1071.77~20.04.1",
"5.15.0-1072.78~20.04.1",
"5.15.0-1073.79~20.04.1",
"5.15.0-1075.82~20.04.1",
"5.15.0-1077.84~20.04.1",
"5.15.0-1080.87~20.04.1",
"5.15.0-1081.88~20.04.1",
"5.15.0-1082.89~20.04.1",
"5.15.0-1083.90~20.04.1",
"5.15.0-1084.91~20.04.1",
"5.15.0-1086.93~20.04.1",
"5.15.0-1087.94~20.04.1",
"5.15.0-1088.95~20.04.1",
"5.15.0-1089.96~20.04.1",
"5.15.0-1090.97~20.04.1",
"5.15.0-1091.98~20.04.1",
"5.15.0-1092.99~20.04.1",
"5.15.0-1093.100~20.04.1",
"5.15.0-1095.102~20.04.1",
"5.15.0-1096.103~20.04.1",
"5.15.0-1097.104~20.04.1",
"5.15.0-1098.105~20.04.1",
"5.15.0-1099.106~20.04.1",
"5.15.0-1100.107~20.04.2",
"5.15.0-1101.108~20.04.1",
"5.15.0-1103.110~20.04.1",
"5.15.0-1104.111~20.04.1",
"5.15.0-1105.112~20.04.1",
"5.15.0-1106.113~20.04.1",
"5.15.0-1108.115~20.04.1"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-aws-5.8-cloud-tools-5.8.0-1042",
"binary_version": "5.8.0-1042.44~20.04.1"
},
{
"binary_name": "linux-aws-5.8-headers-5.8.0-1042",
"binary_version": "5.8.0-1042.44~20.04.1"
},
{
"binary_name": "linux-aws-5.8-tools-5.8.0-1042",
"binary_version": "5.8.0-1042.44~20.04.1"
},
{
"binary_name": "linux-buildinfo-5.8.0-1042-aws",
"binary_version": "5.8.0-1042.44~20.04.1"
},
{
"binary_name": "linux-cloud-tools-5.8.0-1042-aws",
"binary_version": "5.8.0-1042.44~20.04.1"
},
{
"binary_name": "linux-headers-5.8.0-1042-aws",
"binary_version": "5.8.0-1042.44~20.04.1"
},
{
"binary_name": "linux-image-5.8.0-1042-aws",
"binary_version": "5.8.0-1042.44~20.04.1"
},
{
"binary_name": "linux-modules-5.8.0-1042-aws",
"binary_version": "5.8.0-1042.44~20.04.1"
},
{
"binary_name": "linux-modules-extra-5.8.0-1042-aws",
"binary_version": "5.8.0-1042.44~20.04.1"
},
{
"binary_name": "linux-tools-5.8.0-1042-aws",
"binary_version": "5.8.0-1042.44~20.04.1"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:20.04:LTS",
"name": "linux-aws-5.8",
"purl": "pkg:deb/ubuntu/linux-aws-5.8@5.8.0-1042.44~20.04.1?arch=source\u0026distro=focal"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.8.0-1035.37~20.04.1",
"5.8.0-1038.40~20.04.1",
"5.8.0-1041.43~20.04.1",
"5.8.0-1042.44~20.04.1"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-azure-5.11-cloud-tools-5.11.0-1028",
"binary_version": "5.11.0-1028.31~20.04.2"
},
{
"binary_name": "linux-azure-5.11-headers-5.11.0-1028",
"binary_version": "5.11.0-1028.31~20.04.2"
},
{
"binary_name": "linux-azure-5.11-tools-5.11.0-1028",
"binary_version": "5.11.0-1028.31~20.04.2"
},
{
"binary_name": "linux-buildinfo-5.11.0-1028-azure",
"binary_version": "5.11.0-1028.31~20.04.2"
},
{
"binary_name": "linux-cloud-tools-5.11.0-1028-azure",
"binary_version": "5.11.0-1028.31~20.04.2"
},
{
"binary_name": "linux-headers-5.11.0-1028-azure",
"binary_version": "5.11.0-1028.31~20.04.2"
},
{
"binary_name": "linux-image-unsigned-5.11.0-1028-azure",
"binary_version": "5.11.0-1028.31~20.04.2"
},
{
"binary_name": "linux-modules-5.11.0-1028-azure",
"binary_version": "5.11.0-1028.31~20.04.2"
},
{
"binary_name": "linux-modules-extra-5.11.0-1028-azure",
"binary_version": "5.11.0-1028.31~20.04.2"
},
{
"binary_name": "linux-tools-5.11.0-1028-azure",
"binary_version": "5.11.0-1028.31~20.04.2"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:20.04:LTS",
"name": "linux-azure-5.11",
"purl": "pkg:deb/ubuntu/linux-azure-5.11@5.11.0-1028.31~20.04.2?arch=source\u0026distro=focal"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.11.0-1007.7~20.04.2",
"5.11.0-1012.13~20.04.1",
"5.11.0-1013.14~20.04.1",
"5.11.0-1015.16~20.04.1",
"5.11.0-1017.18~20.04.1",
"5.11.0-1019.20~20.04.1",
"5.11.0-1020.21~20.04.1",
"5.11.0-1021.22~20.04.1",
"5.11.0-1022.23~20.04.1",
"5.11.0-1023.24~20.04.1",
"5.11.0-1025.27~20.04.1",
"5.11.0-1027.30~20.04.1",
"5.11.0-1028.31~20.04.2"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-azure-5.13-cloud-tools-5.13.0-1031",
"binary_version": "5.13.0-1031.37~20.04.1"
},
{
"binary_name": "linux-azure-5.13-headers-5.13.0-1031",
"binary_version": "5.13.0-1031.37~20.04.1"
},
{
"binary_name": "linux-azure-5.13-tools-5.13.0-1031",
"binary_version": "5.13.0-1031.37~20.04.1"
},
{
"binary_name": "linux-buildinfo-5.13.0-1031-azure",
"binary_version": "5.13.0-1031.37~20.04.1"
},
{
"binary_name": "linux-cloud-tools-5.13.0-1031-azure",
"binary_version": "5.13.0-1031.37~20.04.1"
},
{
"binary_name": "linux-headers-5.13.0-1031-azure",
"binary_version": "5.13.0-1031.37~20.04.1"
},
{
"binary_name": "linux-image-unsigned-5.13.0-1031-azure",
"binary_version": "5.13.0-1031.37~20.04.1"
},
{
"binary_name": "linux-modules-5.13.0-1031-azure",
"binary_version": "5.13.0-1031.37~20.04.1"
},
{
"binary_name": "linux-modules-extra-5.13.0-1031-azure",
"binary_version": "5.13.0-1031.37~20.04.1"
},
{
"binary_name": "linux-tools-5.13.0-1031-azure",
"binary_version": "5.13.0-1031.37~20.04.1"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:20.04:LTS",
"name": "linux-azure-5.13",
"purl": "pkg:deb/ubuntu/linux-azure-5.13@5.13.0-1031.37~20.04.1?arch=source\u0026distro=focal"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.13.0-1009.10~20.04.2",
"5.13.0-1012.14~20.04.1",
"5.13.0-1013.15~20.04.1",
"5.13.0-1014.16~20.04.1",
"5.13.0-1017.19~20.04.1",
"5.13.0-1021.24~20.04.1",
"5.13.0-1022.26~20.04.1",
"5.13.0-1023.27~20.04.1",
"5.13.0-1025.29~20.04.1",
"5.13.0-1028.33~20.04.1",
"5.13.0-1029.34~20.04.1",
"5.13.0-1031.37~20.04.1"
]
},
{
"ecosystem_specific": {
"availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
"binaries": [
{
"binary_name": "linux-azure-5.15-cloud-tools-5.15.0-1114",
"binary_version": "5.15.0-1114.123~20.04.1"
},
{
"binary_name": "linux-azure-5.15-headers-5.15.0-1114",
"binary_version": "5.15.0-1114.123~20.04.1"
},
{
"binary_name": "linux-azure-5.15-tools-5.15.0-1114",
"binary_version": "5.15.0-1114.123~20.04.1"
},
{
"binary_name": "linux-buildinfo-5.15.0-1114-azure",
"binary_version": "5.15.0-1114.123~20.04.1"
},
{
"binary_name": "linux-cloud-tools-5.15.0-1114-azure",
"binary_version": "5.15.0-1114.123~20.04.1"
},
{
"binary_name": "linux-headers-5.15.0-1114-azure",
"binary_version": "5.15.0-1114.123~20.04.1"
},
{
"binary_name": "linux-image-unsigned-5.15.0-1114-azure",
"binary_version": "5.15.0-1114.123~20.04.1"
},
{
"binary_name": "linux-modules-5.15.0-1114-azure",
"binary_version": "5.15.0-1114.123~20.04.1"
},
{
"binary_name": "linux-modules-extra-5.15.0-1114-azure",
"binary_version": "5.15.0-1114.123~20.04.1"
},
{
"binary_name": "linux-modules-involflt-5.15.0-1114-azure",
"binary_version": "5.15.0-1114.123~20.04.1"
},
{
"binary_name": "linux-tools-5.15.0-1114-azure",
"binary_version": "5.15.0-1114.123~20.04.1"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:Pro:20.04:LTS",
"name": "linux-azure-5.15",
"purl": "pkg:deb/ubuntu/linux-azure-5.15@5.15.0-1114.123~20.04.1?arch=source\u0026distro=esm-infra/focal"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "5.15.0-1114.123~20.04.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.15.0-1007.8~20.04.1",
"5.15.0-1008.9~20.04.1",
"5.15.0-1013.16~20.04.1",
"5.15.0-1014.17~20.04.1",
"5.15.0-1017.20~20.04.1",
"5.15.0-1019.24~20.04.1",
"5.15.0-1020.25~20.04.1",
"5.15.0-1021.26~20.04.1",
"5.15.0-1022.27~20.04.1",
"5.15.0-1023.29~20.04.1",
"5.15.0-1029.36~20.04.1",
"5.15.0-1030.37~20.04.1",
"5.15.0-1031.38~20.04.1",
"5.15.0-1033.40~20.04.1",
"5.15.0-1034.41~20.04.1",
"5.15.0-1035.42~20.04.1",
"5.15.0-1036.43~20.04.1",
"5.15.0-1037.44~20.04.1",
"5.15.0-1038.45~20.04.1",
"5.15.0-1039.46~20.04.1",
"5.15.0-1040.47~20.04.1",
"5.15.0-1041.48~20.04.1",
"5.15.0-1042.49~20.04.1",
"5.15.0-1043.50~20.04.1",
"5.15.0-1045.52~20.04.1",
"5.15.0-1046.53~20.04.1",
"5.15.0-1047.54~20.04.1",
"5.15.0-1049.56~20.04.1",
"5.15.0-1050.57~20.04.1",
"5.15.0-1051.59~20.04.1",
"5.15.0-1052.60~20.04.1",
"5.15.0-1053.61~20.04.1",
"5.15.0-1054.62~20.04.1",
"5.15.0-1056.64~20.04.1",
"5.15.0-1057.65~20.04.1",
"5.15.0-1058.66~20.04.2",
"5.15.0-1059.67~20.04.1",
"5.15.0-1060.69~20.04.1",
"5.15.0-1061.70~20.04.1",
"5.15.0-1063.72~20.04.1",
"5.15.0-1064.73~20.04.1",
"5.15.0-1065.74~20.04.1",
"5.15.0-1067.76~20.04.1",
"5.15.0-1068.77~20.04.1",
"5.15.0-1070.79~20.04.1",
"5.15.0-1071.80~20.04.1",
"5.15.0-1072.81~20.04.1",
"5.15.0-1073.82~20.04.1",
"5.15.0-1074.83~20.04.1",
"5.15.0-1075.84~20.04.1",
"5.15.0-1078.87~20.04.1",
"5.15.0-1079.88~20.04.1",
"5.15.0-1081.90~20.04.1",
"5.15.0-1082.91~20.04.1",
"5.15.0-1086.95~20.04.1",
"5.15.0-1087.96~20.04.1",
"5.15.0-1088.97~20.04.1",
"5.15.0-1089.98~20.04.1",
"5.15.0-1091.100~20.04.1",
"5.15.0-1094.103~20.04.1",
"5.15.0-1095.104~20.04.1",
"5.15.0-1096.105~20.04.1",
"5.15.0-1097.106~20.04.1",
"5.15.0-1098.107~20.04.1",
"5.15.0-1102.111~20.04.1",
"5.15.0-1103.112~20.04.1",
"5.15.0-1110.119~20.04.1",
"5.15.0-1111.120~20.04.1"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-azure-5.8-cloud-tools-5.8.0-1043",
"binary_version": "5.8.0-1043.46~20.04.1"
},
{
"binary_name": "linux-azure-5.8-headers-5.8.0-1043",
"binary_version": "5.8.0-1043.46~20.04.1"
},
{
"binary_name": "linux-azure-5.8-tools-5.8.0-1043",
"binary_version": "5.8.0-1043.46~20.04.1"
},
{
"binary_name": "linux-buildinfo-5.8.0-1043-azure",
"binary_version": "5.8.0-1043.46~20.04.1"
},
{
"binary_name": "linux-cloud-tools-5.8.0-1043-azure",
"binary_version": "5.8.0-1043.46~20.04.1"
},
{
"binary_name": "linux-headers-5.8.0-1043-azure",
"binary_version": "5.8.0-1043.46~20.04.1"
},
{
"binary_name": "linux-image-unsigned-5.8.0-1043-azure",
"binary_version": "5.8.0-1043.46~20.04.1"
},
{
"binary_name": "linux-modules-5.8.0-1043-azure",
"binary_version": "5.8.0-1043.46~20.04.1"
},
{
"binary_name": "linux-modules-extra-5.8.0-1043-azure",
"binary_version": "5.8.0-1043.46~20.04.1"
},
{
"binary_name": "linux-tools-5.8.0-1043-azure",
"binary_version": "5.8.0-1043.46~20.04.1"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:20.04:LTS",
"name": "linux-azure-5.8",
"purl": "pkg:deb/ubuntu/linux-azure-5.8@5.8.0-1043.46~20.04.1?arch=source\u0026distro=focal"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.8.0-1033.35~20.04.1",
"5.8.0-1036.38~20.04.1",
"5.8.0-1039.42~20.04.1",
"5.8.0-1040.43~20.04.1",
"5.8.0-1041.44~20.04.1",
"5.8.0-1042.45~20.04.1",
"5.8.0-1043.46~20.04.1"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-image-unsigned-5.4.0-1103-azure-fde",
"binary_version": "5.4.0-1103.109+cvm1.1"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:20.04:LTS",
"name": "linux-azure-fde",
"purl": "pkg:deb/ubuntu/linux-azure-fde@5.4.0-1103.109+cvm1.1?arch=source\u0026distro=focal"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.4.0-1063.66+cvm2.2",
"5.4.0-1063.66+cvm3.2",
"5.4.0-1064.67+cvm1.1",
"5.4.0-1065.68+cvm2.1",
"5.4.0-1067.70+cvm1.1",
"5.4.0-1068.71+cvm1.1",
"5.4.0-1069.72+cvm1.1",
"5.4.0-1070.73+cvm1.1",
"5.4.0-1072.75+cvm1.1",
"5.4.0-1073.76+cvm1.1",
"5.4.0-1074.77+cvm1.1",
"5.4.0-1076.79+cvm1.1",
"5.4.0-1078.81+cvm1.1",
"5.4.0-1080.83+cvm1.1",
"5.4.0-1083.87+cvm1.1",
"5.4.0-1085.90+cvm1.1",
"5.4.0-1085.90+cvm2.1",
"5.4.0-1086.91+cvm1.1",
"5.4.0-1089.94+cvm1.2",
"5.4.0-1090.95+cvm1.1",
"5.4.0-1091.96+cvm1.1",
"5.4.0-1092.97+cvm1.1",
"5.4.0-1095.101+cvm1.1",
"5.4.0-1098.104+cvm1.1",
"5.4.0-1100.106+cvm1.1",
"5.4.0-1103.109+cvm1.1"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-buildinfo-5.11.0-1029-gcp",
"binary_version": "5.11.0-1029.33~20.04.3"
},
{
"binary_name": "linux-gcp-5.11-headers-5.11.0-1029",
"binary_version": "5.11.0-1029.33~20.04.3"
},
{
"binary_name": "linux-gcp-5.11-tools-5.11.0-1029",
"binary_version": "5.11.0-1029.33~20.04.3"
},
{
"binary_name": "linux-headers-5.11.0-1029-gcp",
"binary_version": "5.11.0-1029.33~20.04.3"
},
{
"binary_name": "linux-image-unsigned-5.11.0-1029-gcp",
"binary_version": "5.11.0-1029.33~20.04.3"
},
{
"binary_name": "linux-modules-5.11.0-1029-gcp",
"binary_version": "5.11.0-1029.33~20.04.3"
},
{
"binary_name": "linux-modules-extra-5.11.0-1029-gcp",
"binary_version": "5.11.0-1029.33~20.04.3"
},
{
"binary_name": "linux-tools-5.11.0-1029-gcp",
"binary_version": "5.11.0-1029.33~20.04.3"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:20.04:LTS",
"name": "linux-gcp-5.11",
"purl": "pkg:deb/ubuntu/linux-gcp-5.11@5.11.0-1029.33~20.04.3?arch=source\u0026distro=focal"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.11.0-1009.10~20.04.1",
"5.11.0-1014.16~20.04.1",
"5.11.0-1017.19~20.04.1",
"5.11.0-1018.20~20.04.2",
"5.11.0-1020.22~20.04.1",
"5.11.0-1021.23~20.04.1",
"5.11.0-1022.24~20.04.1",
"5.11.0-1023.25~20.04.1",
"5.11.0-1024.26~20.04.1",
"5.11.0-1026.29~20.04.1",
"5.11.0-1028.32~20.04.1",
"5.11.0-1029.33~20.04.3"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-buildinfo-5.13.0-1033-gcp",
"binary_version": "5.13.0-1033.40~20.04.1"
},
{
"binary_name": "linux-gcp-5.13-headers-5.13.0-1033",
"binary_version": "5.13.0-1033.40~20.04.1"
},
{
"binary_name": "linux-gcp-5.13-tools-5.13.0-1033",
"binary_version": "5.13.0-1033.40~20.04.1"
},
{
"binary_name": "linux-headers-5.13.0-1033-gcp",
"binary_version": "5.13.0-1033.40~20.04.1"
},
{
"binary_name": "linux-image-unsigned-5.13.0-1033-gcp",
"binary_version": "5.13.0-1033.40~20.04.1"
},
{
"binary_name": "linux-modules-5.13.0-1033-gcp",
"binary_version": "5.13.0-1033.40~20.04.1"
},
{
"binary_name": "linux-modules-extra-5.13.0-1033-gcp",
"binary_version": "5.13.0-1033.40~20.04.1"
},
{
"binary_name": "linux-tools-5.13.0-1033-gcp",
"binary_version": "5.13.0-1033.40~20.04.1"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:20.04:LTS",
"name": "linux-gcp-5.13",
"purl": "pkg:deb/ubuntu/linux-gcp-5.13@5.13.0-1033.40~20.04.1?arch=source\u0026distro=focal"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.13.0-1008.9~20.04.3",
"5.13.0-1012.15~20.04.1",
"5.13.0-1013.16~20.04.1",
"5.13.0-1015.18~20.04.1",
"5.13.0-1019.23~20.04.1",
"5.13.0-1021.25~20.04.1",
"5.13.0-1023.28~20.04.1",
"5.13.0-1024.29~20.04.1",
"5.13.0-1025.30~20.04.1",
"5.13.0-1027.32~20.04.1",
"5.13.0-1030.36~20.04.1",
"5.13.0-1031.37~20.04.1",
"5.13.0-1033.40~20.04.1"
]
},
{
"ecosystem_specific": {
"availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
"binaries": [
{
"binary_name": "linux-buildinfo-5.15.0-1109-gcp",
"binary_version": "5.15.0-1109.118~20.04.1"
},
{
"binary_name": "linux-gcp-5.15-headers-5.15.0-1109",
"binary_version": "5.15.0-1109.118~20.04.1"
},
{
"binary_name": "linux-gcp-5.15-tools-5.15.0-1109",
"binary_version": "5.15.0-1109.118~20.04.1"
},
{
"binary_name": "linux-headers-5.15.0-1109-gcp",
"binary_version": "5.15.0-1109.118~20.04.1"
},
{
"binary_name": "linux-image-unsigned-5.15.0-1109-gcp",
"binary_version": "5.15.0-1109.118~20.04.1"
},
{
"binary_name": "linux-modules-5.15.0-1109-gcp",
"binary_version": "5.15.0-1109.118~20.04.1"
},
{
"binary_name": "linux-modules-extra-5.15.0-1109-gcp",
"binary_version": "5.15.0-1109.118~20.04.1"
},
{
"binary_name": "linux-modules-iwlwifi-5.15.0-1109-gcp",
"binary_version": "5.15.0-1109.118~20.04.1"
},
{
"binary_name": "linux-tools-5.15.0-1109-gcp",
"binary_version": "5.15.0-1109.118~20.04.1"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:Pro:20.04:LTS",
"name": "linux-gcp-5.15",
"purl": "pkg:deb/ubuntu/linux-gcp-5.15@5.15.0-1109.118~20.04.1?arch=source\u0026distro=esm-infra/focal"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "5.15.0-1109.118~20.04.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.15.0-1006.9~20.04.1",
"5.15.0-1012.17~20.04.1",
"5.15.0-1013.18~20.04.1",
"5.15.0-1016.21~20.04.1",
"5.15.0-1017.23~20.04.2",
"5.15.0-1018.24~20.04.1",
"5.15.0-1021.28~20.04.1",
"5.15.0-1022.29~20.04.1",
"5.15.0-1025.32~20.04.2",
"5.15.0-1026.33~20.04.1",
"5.15.0-1027.34~20.04.1",
"5.15.0-1029.36~20.04.1",
"5.15.0-1030.37~20.04.1",
"5.15.0-1031.38~20.04.1",
"5.15.0-1032.40~20.04.1",
"5.15.0-1033.41~20.04.1",
"5.15.0-1034.42~20.04.1",
"5.15.0-1035.43~20.04.1",
"5.15.0-1036.44~20.04.1",
"5.15.0-1037.45~20.04.1",
"5.15.0-1038.46~20.04.1",
"5.15.0-1039.47~20.04.1",
"5.15.0-1040.48~20.04.1",
"5.15.0-1041.49~20.04.1",
"5.15.0-1042.50~20.04.1",
"5.15.0-1044.52~20.04.1",
"5.15.0-1045.53~20.04.2",
"5.15.0-1046.54~20.04.1",
"5.15.0-1047.55~20.04.1",
"5.15.0-1048.56~20.04.1",
"5.15.0-1049.57~20.04.1",
"5.15.0-1051.59~20.04.1",
"5.15.0-1052.60~20.04.1",
"5.15.0-1053.61~20.04.1",
"5.15.0-1054.62~20.04.1",
"5.15.0-1055.63~20.04.1",
"5.15.0-1058.66~20.04.1",
"5.15.0-1059.67~20.04.1",
"5.15.0-1060.68~20.04.1",
"5.15.0-1062.70~20.04.1",
"5.15.0-1065.73~20.04.1",
"5.15.0-1066.74~20.04.1",
"5.15.0-1067.75~20.04.1",
"5.15.0-1068.76~20.04.1",
"5.15.0-1069.77~20.04.1",
"5.15.0-1070.78~20.04.1",
"5.15.0-1071.79~20.04.1",
"5.15.0-1072.80~20.04.1",
"5.15.0-1073.81~20.04.1",
"5.15.0-1074.83~20.04.1",
"5.15.0-1075.84~20.04.1",
"5.15.0-1077.86~20.04.1",
"5.15.0-1078.87~20.04.1",
"5.15.0-1081.90~20.04.1",
"5.15.0-1083.92~20.04.1",
"5.15.0-1085.94~20.04.1",
"5.15.0-1086.95~20.04.1",
"5.15.0-1087.96~20.04.2",
"5.15.0-1088.97~20.04.1",
"5.15.0-1090.99~20.04.1",
"5.15.0-1091.100~20.04.1",
"5.15.0-1092.101~20.04.1",
"5.15.0-1093.102~20.04.1",
"5.15.0-1095.104~20.04.1",
"5.15.0-1096.105~20.04.1",
"5.15.0-1097.106~20.04.1",
"5.15.0-1098.107~20.04.1",
"5.15.0-1099.108~20.04.1",
"5.15.0-1100.109~20.04.1",
"5.15.0-1101.110~20.04.1",
"5.15.0-1103.112~20.04.1",
"5.15.0-1104.113~20.04.1",
"5.15.0-1106.115~20.04.1",
"5.15.0-1108.117~20.04.1"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-buildinfo-5.8.0-1039-gcp",
"binary_version": "5.8.0-1039.41"
},
{
"binary_name": "linux-gcp-5.8-headers-5.8.0-1039",
"binary_version": "5.8.0-1039.41"
},
{
"binary_name": "linux-gcp-5.8-tools-5.8.0-1039",
"binary_version": "5.8.0-1039.41"
},
{
"binary_name": "linux-headers-5.8.0-1039-gcp",
"binary_version": "5.8.0-1039.41"
},
{
"binary_name": "linux-image-unsigned-5.8.0-1039-gcp",
"binary_version": "5.8.0-1039.41"
},
{
"binary_name": "linux-modules-5.8.0-1039-gcp",
"binary_version": "5.8.0-1039.41"
},
{
"binary_name": "linux-modules-extra-5.8.0-1039-gcp",
"binary_version": "5.8.0-1039.41"
},
{
"binary_name": "linux-tools-5.8.0-1039-gcp",
"binary_version": "5.8.0-1039.41"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:20.04:LTS",
"name": "linux-gcp-5.8",
"purl": "pkg:deb/ubuntu/linux-gcp-5.8@5.8.0-1039.41?arch=source\u0026distro=focal"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.8.0-1032.34~20.04.1",
"5.8.0-1035.37~20.04.1",
"5.8.0-1038.40~20.04.1",
"5.8.0-1039.41"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-buildinfo-5.4.0-1105-gke",
"binary_version": "5.4.0-1105.112"
},
{
"binary_name": "linux-gke-headers-5.4.0-1105",
"binary_version": "5.4.0-1105.112"
},
{
"binary_name": "linux-gke-tools-5.4.0-1105",
"binary_version": "5.4.0-1105.112"
},
{
"binary_name": "linux-headers-5.4.0-1105-gke",
"binary_version": "5.4.0-1105.112"
},
{
"binary_name": "linux-image-unsigned-5.4.0-1105-gke",
"binary_version": "5.4.0-1105.112"
},
{
"binary_name": "linux-modules-5.4.0-1105-gke",
"binary_version": "5.4.0-1105.112"
},
{
"binary_name": "linux-modules-extra-5.4.0-1105-gke",
"binary_version": "5.4.0-1105.112"
},
{
"binary_name": "linux-tools-5.4.0-1105-gke",
"binary_version": "5.4.0-1105.112"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:20.04:LTS",
"name": "linux-gke",
"purl": "pkg:deb/ubuntu/linux-gke@5.4.0-1105.112?arch=source\u0026distro=focal"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.4.0-1033.35",
"5.4.0-1035.37",
"5.4.0-1036.38",
"5.4.0-1037.39",
"5.4.0-1039.41",
"5.4.0-1041.43",
"5.4.0-1042.44",
"5.4.0-1043.45",
"5.4.0-1044.46",
"5.4.0-1046.48",
"5.4.0-1049.52",
"5.4.0-1051.54",
"5.4.0-1052.55",
"5.4.0-1053.56",
"5.4.0-1054.57",
"5.4.0-1055.58",
"5.4.0-1056.59",
"5.4.0-1057.60",
"5.4.0-1059.62",
"5.4.0-1061.64",
"5.4.0-1062.65",
"5.4.0-1063.66",
"5.4.0-1065.68",
"5.4.0-1066.69",
"5.4.0-1067.70",
"5.4.0-1068.71",
"5.4.0-1071.76",
"5.4.0-1072.77",
"5.4.0-1074.79",
"5.4.0-1076.82",
"5.4.0-1078.84",
"5.4.0-1080.86",
"5.4.0-1081.87",
"5.4.0-1083.89",
"5.4.0-1084.90",
"5.4.0-1086.93",
"5.4.0-1087.94",
"5.4.0-1090.97",
"5.4.0-1091.98",
"5.4.0-1094.101",
"5.4.0-1095.102",
"5.4.0-1096.103",
"5.4.0-1097.104",
"5.4.0-1098.105",
"5.4.0-1099.106",
"5.4.0-1100.107",
"5.4.0-1101.108",
"5.4.0-1102.109",
"5.4.0-1103.110",
"5.4.0-1104.111",
"5.4.0-1105.112"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-buildinfo-5.15.0-1039-gke",
"binary_version": "5.15.0-1039.44~20.04.1"
},
{
"binary_name": "linux-gke-5.15-headers-5.15.0-1039",
"binary_version": "5.15.0-1039.44~20.04.1"
},
{
"binary_name": "linux-gke-5.15-tools-5.15.0-1039",
"binary_version": "5.15.0-1039.44~20.04.1"
},
{
"binary_name": "linux-headers-5.15.0-1039-gke",
"binary_version": "5.15.0-1039.44~20.04.1"
},
{
"binary_name": "linux-image-unsigned-5.15.0-1039-gke",
"binary_version": "5.15.0-1039.44~20.04.1"
},
{
"binary_name": "linux-modules-5.15.0-1039-gke",
"binary_version": "5.15.0-1039.44~20.04.1"
},
{
"binary_name": "linux-modules-extra-5.15.0-1039-gke",
"binary_version": "5.15.0-1039.44~20.04.1"
},
{
"binary_name": "linux-modules-iwlwifi-5.15.0-1039-gke",
"binary_version": "5.15.0-1039.44~20.04.1"
},
{
"binary_name": "linux-tools-5.15.0-1039-gke",
"binary_version": "5.15.0-1039.44~20.04.1"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:20.04:LTS",
"name": "linux-gke-5.15",
"purl": "pkg:deb/ubuntu/linux-gke-5.15@5.15.0-1039.44~20.04.1?arch=source\u0026distro=focal"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.15.0-1011.14~20.04.1",
"5.15.0-1014.17~20.04.1",
"5.15.0-1015.18~20.04.1",
"5.15.0-1016.19~20.04.1",
"5.15.0-1019.23~20.04.1",
"5.15.0-1020.25~20.04.1",
"5.15.0-1023.28~20.04.2",
"5.15.0-1027.32~20.04.1",
"5.15.0-1028.33~20.04.1",
"5.15.0-1029.34~20.04.1",
"5.15.0-1031.36~20.04.1",
"5.15.0-1032.37~20.04.1",
"5.15.0-1033.38~20.04.1",
"5.15.0-1034.39~20.04.1",
"5.15.0-1036.41~20.04.1",
"5.15.0-1037.42~20.04.1",
"5.15.0-1038.43~20.04.1",
"5.15.0-1039.44~20.04.1"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-buildinfo-5.4.0-1102-gkeop",
"binary_version": "5.4.0-1102.106"
},
{
"binary_name": "linux-cloud-tools-5.4.0-1102-gkeop",
"binary_version": "5.4.0-1102.106"
},
{
"binary_name": "linux-gkeop-cloud-tools-5.4.0-1102",
"binary_version": "5.4.0-1102.106"
},
{
"binary_name": "linux-gkeop-headers-5.4.0-1102",
"binary_version": "5.4.0-1102.106"
},
{
"binary_name": "linux-gkeop-source-5.4.0",
"binary_version": "5.4.0-1102.106"
},
{
"binary_name": "linux-gkeop-tools-5.4.0-1102",
"binary_version": "5.4.0-1102.106"
},
{
"binary_name": "linux-headers-5.4.0-1102-gkeop",
"binary_version": "5.4.0-1102.106"
},
{
"binary_name": "linux-image-unsigned-5.4.0-1102-gkeop",
"binary_version": "5.4.0-1102.106"
},
{
"binary_name": "linux-modules-5.4.0-1102-gkeop",
"binary_version": "5.4.0-1102.106"
},
{
"binary_name": "linux-modules-extra-5.4.0-1102-gkeop",
"binary_version": "5.4.0-1102.106"
},
{
"binary_name": "linux-tools-5.4.0-1102-gkeop",
"binary_version": "5.4.0-1102.106"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:20.04:LTS",
"name": "linux-gkeop",
"purl": "pkg:deb/ubuntu/linux-gkeop@5.4.0-1102.106?arch=source\u0026distro=focal"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.4.0-1008.9",
"5.4.0-1009.10",
"5.4.0-1010.11",
"5.4.0-1011.12",
"5.4.0-1012.13",
"5.4.0-1013.14",
"5.4.0-1014.15",
"5.4.0-1015.16",
"5.4.0-1016.17",
"5.4.0-1018.19",
"5.4.0-1021.22",
"5.4.0-1022.23",
"5.4.0-1023.24",
"5.4.0-1024.25",
"5.4.0-1025.26",
"5.4.0-1026.27",
"5.4.0-1027.28",
"5.4.0-1029.30",
"5.4.0-1031.32",
"5.4.0-1032.33",
"5.4.0-1033.34",
"5.4.0-1034.35",
"5.4.0-1036.37",
"5.4.0-1037.38",
"5.4.0-1038.39",
"5.4.0-1039.40",
"5.4.0-1040.41",
"5.4.0-1043.44",
"5.4.0-1046.48",
"5.4.0-1048.51",
"5.4.0-1049.52",
"5.4.0-1051.54",
"5.4.0-1052.55",
"5.4.0-1053.56",
"5.4.0-1054.57",
"5.4.0-1056.60",
"5.4.0-1057.61",
"5.4.0-1060.64",
"5.4.0-1061.65",
"5.4.0-1062.66",
"5.4.0-1064.68",
"5.4.0-1065.69",
"5.4.0-1066.70",
"5.4.0-1067.71",
"5.4.0-1068.72",
"5.4.0-1069.73",
"5.4.0-1070.74",
"5.4.0-1071.75",
"5.4.0-1072.76",
"5.4.0-1073.77",
"5.4.0-1074.78",
"5.4.0-1075.79",
"5.4.0-1076.80",
"5.4.0-1077.81",
"5.4.0-1078.82",
"5.4.0-1079.83",
"5.4.0-1080.84",
"5.4.0-1081.85",
"5.4.0-1083.87",
"5.4.0-1084.88",
"5.4.0-1085.89",
"5.4.0-1086.90",
"5.4.0-1087.91",
"5.4.0-1088.92",
"5.4.0-1089.93",
"5.4.0-1090.94",
"5.4.0-1091.95",
"5.4.0-1092.96",
"5.4.0-1093.97",
"5.4.0-1094.98",
"5.4.0-1095.99",
"5.4.0-1096.100",
"5.4.0-1097.101",
"5.4.0-1098.102",
"5.4.0-1099.103",
"5.4.0-1100.104",
"5.4.0-1101.105",
"5.4.0-1102.106"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-buildinfo-5.15.0-1055-gkeop",
"binary_version": "5.15.0-1055.62~20.04.1"
},
{
"binary_name": "linux-cloud-tools-5.15.0-1055-gkeop",
"binary_version": "5.15.0-1055.62~20.04.1"
},
{
"binary_name": "linux-gkeop-5.15-cloud-tools-5.15.0-1055",
"binary_version": "5.15.0-1055.62~20.04.1"
},
{
"binary_name": "linux-gkeop-5.15-headers-5.15.0-1055",
"binary_version": "5.15.0-1055.62~20.04.1"
},
{
"binary_name": "linux-gkeop-5.15-tools-5.15.0-1055",
"binary_version": "5.15.0-1055.62~20.04.1"
},
{
"binary_name": "linux-headers-5.15.0-1055-gkeop",
"binary_version": "5.15.0-1055.62~20.04.1"
},
{
"binary_name": "linux-image-unsigned-5.15.0-1055-gkeop",
"binary_version": "5.15.0-1055.62~20.04.1"
},
{
"binary_name": "linux-modules-5.15.0-1055-gkeop",
"binary_version": "5.15.0-1055.62~20.04.1"
},
{
"binary_name": "linux-modules-extra-5.15.0-1055-gkeop",
"binary_version": "5.15.0-1055.62~20.04.1"
},
{
"binary_name": "linux-tools-5.15.0-1055-gkeop",
"binary_version": "5.15.0-1055.62~20.04.1"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:20.04:LTS",
"name": "linux-gkeop-5.15",
"purl": "pkg:deb/ubuntu/linux-gkeop-5.15@5.15.0-1055.62~20.04.1?arch=source\u0026distro=focal"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.15.0-1003.5~20.04.2",
"5.15.0-1005.7~20.04.1",
"5.15.0-1007.10~20.04.1",
"5.15.0-1008.12~20.04.1",
"5.15.0-1011.15~20.04.2",
"5.15.0-1012.16~20.04.1",
"5.15.0-1013.17~20.04.1",
"5.15.0-1015.19~20.04.1",
"5.15.0-1016.21~20.04.1",
"5.15.0-1017.22~20.04.1",
"5.15.0-1018.23~20.04.1",
"5.15.0-1019.24~20.04.1",
"5.15.0-1020.25~20.04.1",
"5.15.0-1021.26~20.04.1",
"5.15.0-1022.27~20.04.1",
"5.15.0-1023.28~20.04.1",
"5.15.0-1024.29~20.04.1",
"5.15.0-1025.30~20.04.1",
"5.15.0-1026.31~20.04.1",
"5.15.0-1027.32~20.04.1",
"5.15.0-1028.33~20.04.1",
"5.15.0-1030.35~20.04.1",
"5.15.0-1031.37~20.04.1",
"5.15.0-1032.38~20.04.1",
"5.15.0-1033.39~20.04.1",
"5.15.0-1034.40~20.04.1",
"5.15.0-1035.41~20.04.1",
"5.15.0-1036.42~20.04.1",
"5.15.0-1037.43~20.04.1",
"5.15.0-1038.44~20.04.1",
"5.15.0-1039.45~20.04.1",
"5.15.0-1040.46~20.04.1",
"5.15.0-1043.50~20.04.1",
"5.15.0-1044.51~20.04.1",
"5.15.0-1045.52~20.04.1",
"5.15.0-1046.53~20.04.1",
"5.15.0-1047.54~20.04.1",
"5.15.0-1048.55~20.04.1",
"5.15.0-1049.56~20.04.1",
"5.15.0-1050.57~20.04.1",
"5.15.0-1051.58~20.04.1",
"5.15.0-1052.59~20.04.1",
"5.15.0-1053.60~20.04.1",
"5.15.0-1054.61~20.04.1",
"5.15.0-1055.62~20.04.1"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "block-modules-5.11.0-46-generic-64k-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "block-modules-5.11.0-46-generic-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "block-modules-5.11.0-46-generic-lpae-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "crypto-modules-5.11.0-46-generic-64k-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "crypto-modules-5.11.0-46-generic-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "crypto-modules-5.11.0-46-generic-lpae-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "dasd-extra-modules-5.11.0-46-generic-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "dasd-modules-5.11.0-46-generic-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "fat-modules-5.11.0-46-generic-64k-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "fat-modules-5.11.0-46-generic-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "fat-modules-5.11.0-46-generic-lpae-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "fb-modules-5.11.0-46-generic-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "firewire-core-modules-5.11.0-46-generic-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "floppy-modules-5.11.0-46-generic-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "fs-core-modules-5.11.0-46-generic-64k-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "fs-core-modules-5.11.0-46-generic-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "fs-core-modules-5.11.0-46-generic-lpae-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "fs-secondary-modules-5.11.0-46-generic-64k-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "fs-secondary-modules-5.11.0-46-generic-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "fs-secondary-modules-5.11.0-46-generic-lpae-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "input-modules-5.11.0-46-generic-64k-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "input-modules-5.11.0-46-generic-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "input-modules-5.11.0-46-generic-lpae-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "ipmi-modules-5.11.0-46-generic-64k-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "ipmi-modules-5.11.0-46-generic-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "ipmi-modules-5.11.0-46-generic-lpae-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "kernel-image-5.11.0-46-generic-64k-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "kernel-image-5.11.0-46-generic-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "kernel-image-5.11.0-46-generic-lpae-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "linux-buildinfo-5.11.0-46-generic",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "linux-buildinfo-5.11.0-46-generic-64k",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "linux-buildinfo-5.11.0-46-generic-lpae",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "linux-buildinfo-5.11.0-46-lowlatency",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "linux-cloud-tools-5.11.0-46-generic",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "linux-cloud-tools-5.11.0-46-lowlatency",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "linux-headers-5.11.0-46-generic",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "linux-headers-5.11.0-46-generic-64k",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "linux-headers-5.11.0-46-generic-lpae",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "linux-headers-5.11.0-46-lowlatency",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "linux-hwe-5.11-cloud-tools-5.11.0-46",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "linux-hwe-5.11-cloud-tools-common",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "linux-hwe-5.11-headers-5.11.0-46",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "linux-hwe-5.11-source-5.11.0",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "linux-hwe-5.11-tools-5.11.0-46",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "linux-hwe-5.11-tools-common",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "linux-hwe-5.11-tools-host",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "linux-hwe-5.11-udebs-generic",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "linux-hwe-5.11-udebs-generic-64k",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "linux-hwe-5.11-udebs-generic-lpae",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "linux-image-5.11.0-46-generic",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "linux-image-5.11.0-46-generic-lpae",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "linux-image-unsigned-5.11.0-46-generic",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "linux-image-unsigned-5.11.0-46-generic-64k",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "linux-image-unsigned-5.11.0-46-lowlatency",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "linux-modules-5.11.0-46-generic",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "linux-modules-5.11.0-46-generic-64k",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "linux-modules-5.11.0-46-generic-lpae",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "linux-modules-5.11.0-46-lowlatency",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "linux-modules-extra-5.11.0-46-generic",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "linux-tools-5.11.0-46-generic",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "linux-tools-5.11.0-46-generic-64k",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "linux-tools-5.11.0-46-generic-lpae",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "linux-tools-5.11.0-46-lowlatency",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "md-modules-5.11.0-46-generic-64k-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "md-modules-5.11.0-46-generic-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "md-modules-5.11.0-46-generic-lpae-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "message-modules-5.11.0-46-generic-64k-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "message-modules-5.11.0-46-generic-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "mouse-modules-5.11.0-46-generic-64k-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "mouse-modules-5.11.0-46-generic-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "mouse-modules-5.11.0-46-generic-lpae-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "multipath-modules-5.11.0-46-generic-64k-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "multipath-modules-5.11.0-46-generic-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "multipath-modules-5.11.0-46-generic-lpae-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "nfs-modules-5.11.0-46-generic-64k-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "nfs-modules-5.11.0-46-generic-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "nfs-modules-5.11.0-46-generic-lpae-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "nic-modules-5.11.0-46-generic-64k-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "nic-modules-5.11.0-46-generic-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "nic-modules-5.11.0-46-generic-lpae-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "nic-pcmcia-modules-5.11.0-46-generic-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "nic-shared-modules-5.11.0-46-generic-64k-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "nic-shared-modules-5.11.0-46-generic-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "nic-shared-modules-5.11.0-46-generic-lpae-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "nic-usb-modules-5.11.0-46-generic-64k-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "nic-usb-modules-5.11.0-46-generic-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "nic-usb-modules-5.11.0-46-generic-lpae-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "parport-modules-5.11.0-46-generic-64k-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "parport-modules-5.11.0-46-generic-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "parport-modules-5.11.0-46-generic-lpae-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "pata-modules-5.11.0-46-generic-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "pcmcia-modules-5.11.0-46-generic-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "pcmcia-storage-modules-5.11.0-46-generic-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "plip-modules-5.11.0-46-generic-64k-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "plip-modules-5.11.0-46-generic-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "plip-modules-5.11.0-46-generic-lpae-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "ppp-modules-5.11.0-46-generic-64k-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "ppp-modules-5.11.0-46-generic-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "ppp-modules-5.11.0-46-generic-lpae-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "sata-modules-5.11.0-46-generic-64k-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "sata-modules-5.11.0-46-generic-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "sata-modules-5.11.0-46-generic-lpae-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "scsi-modules-5.11.0-46-generic-64k-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "scsi-modules-5.11.0-46-generic-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "scsi-modules-5.11.0-46-generic-lpae-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "serial-modules-5.11.0-46-generic-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "storage-core-modules-5.11.0-46-generic-64k-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "storage-core-modules-5.11.0-46-generic-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "storage-core-modules-5.11.0-46-generic-lpae-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "usb-modules-5.11.0-46-generic-64k-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "usb-modules-5.11.0-46-generic-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "usb-modules-5.11.0-46-generic-lpae-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "virtio-modules-5.11.0-46-generic-64k-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "virtio-modules-5.11.0-46-generic-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "vlan-modules-5.11.0-46-generic-64k-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "vlan-modules-5.11.0-46-generic-di",
"binary_version": "5.11.0-46.51~20.04.1"
},
{
"binary_name": "vlan-modules-5.11.0-46-generic-lpae-di",
"binary_version": "5.11.0-46.51~20.04.1"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:20.04:LTS",
"name": "linux-hwe-5.11",
"purl": "pkg:deb/ubuntu/linux-hwe-5.11@5.11.0-46.51~20.04.1?arch=source\u0026distro=focal"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.11.0-22.23~20.04.1",
"5.11.0-25.27~20.04.1",
"5.11.0-27.29~20.04.1",
"5.11.0-34.36~20.04.1",
"5.11.0-36.40~20.04.1",
"5.11.0-37.41~20.04.2",
"5.11.0-38.42~20.04.1",
"5.11.0-40.44~20.04.2",
"5.11.0-41.45~20.04.1",
"5.11.0-43.47~20.04.2",
"5.11.0-44.48~20.04.2",
"5.11.0-46.51~20.04.1"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "block-modules-5.13.0-52-generic-64k-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "block-modules-5.13.0-52-generic-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "block-modules-5.13.0-52-generic-lpae-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "crypto-modules-5.13.0-52-generic-64k-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "crypto-modules-5.13.0-52-generic-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "crypto-modules-5.13.0-52-generic-lpae-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "dasd-extra-modules-5.13.0-52-generic-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "dasd-modules-5.13.0-52-generic-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "fat-modules-5.13.0-52-generic-64k-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "fat-modules-5.13.0-52-generic-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "fat-modules-5.13.0-52-generic-lpae-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "fb-modules-5.13.0-52-generic-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "firewire-core-modules-5.13.0-52-generic-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "floppy-modules-5.13.0-52-generic-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "fs-core-modules-5.13.0-52-generic-64k-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "fs-core-modules-5.13.0-52-generic-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "fs-core-modules-5.13.0-52-generic-lpae-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "fs-secondary-modules-5.13.0-52-generic-64k-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "fs-secondary-modules-5.13.0-52-generic-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "fs-secondary-modules-5.13.0-52-generic-lpae-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "input-modules-5.13.0-52-generic-64k-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "input-modules-5.13.0-52-generic-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "input-modules-5.13.0-52-generic-lpae-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "ipmi-modules-5.13.0-52-generic-64k-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "ipmi-modules-5.13.0-52-generic-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "ipmi-modules-5.13.0-52-generic-lpae-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "kernel-image-5.13.0-52-generic-64k-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "kernel-image-5.13.0-52-generic-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "kernel-image-5.13.0-52-generic-lpae-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "linux-buildinfo-5.13.0-52-generic",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "linux-buildinfo-5.13.0-52-generic-64k",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "linux-buildinfo-5.13.0-52-generic-lpae",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "linux-buildinfo-5.13.0-52-lowlatency",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "linux-cloud-tools-5.13.0-52-generic",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "linux-cloud-tools-5.13.0-52-lowlatency",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "linux-headers-5.13.0-52-generic",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "linux-headers-5.13.0-52-generic-64k",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "linux-headers-5.13.0-52-generic-lpae",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "linux-headers-5.13.0-52-lowlatency",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "linux-hwe-5.13-cloud-tools-5.13.0-52",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "linux-hwe-5.13-cloud-tools-common",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "linux-hwe-5.13-headers-5.13.0-52",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "linux-hwe-5.13-source-5.13.0",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "linux-hwe-5.13-tools-5.13.0-52",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "linux-hwe-5.13-tools-common",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "linux-hwe-5.13-tools-host",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "linux-hwe-5.13-udebs-generic",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "linux-hwe-5.13-udebs-generic-64k",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "linux-hwe-5.13-udebs-generic-lpae",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "linux-image-5.13.0-52-generic",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "linux-image-5.13.0-52-generic-lpae",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "linux-image-unsigned-5.13.0-52-generic",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "linux-image-unsigned-5.13.0-52-generic-64k",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "linux-image-unsigned-5.13.0-52-lowlatency",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "linux-modules-5.13.0-52-generic",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "linux-modules-5.13.0-52-generic-64k",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "linux-modules-5.13.0-52-generic-lpae",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "linux-modules-5.13.0-52-lowlatency",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "linux-modules-extra-5.13.0-52-generic",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "linux-tools-5.13.0-52-generic",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "linux-tools-5.13.0-52-generic-64k",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "linux-tools-5.13.0-52-generic-lpae",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "linux-tools-5.13.0-52-lowlatency",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "md-modules-5.13.0-52-generic-64k-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "md-modules-5.13.0-52-generic-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "md-modules-5.13.0-52-generic-lpae-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "message-modules-5.13.0-52-generic-64k-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "message-modules-5.13.0-52-generic-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "mouse-modules-5.13.0-52-generic-64k-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "mouse-modules-5.13.0-52-generic-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "mouse-modules-5.13.0-52-generic-lpae-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "multipath-modules-5.13.0-52-generic-64k-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "multipath-modules-5.13.0-52-generic-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "multipath-modules-5.13.0-52-generic-lpae-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "nfs-modules-5.13.0-52-generic-64k-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "nfs-modules-5.13.0-52-generic-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "nfs-modules-5.13.0-52-generic-lpae-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "nic-modules-5.13.0-52-generic-64k-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "nic-modules-5.13.0-52-generic-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "nic-modules-5.13.0-52-generic-lpae-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "nic-pcmcia-modules-5.13.0-52-generic-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "nic-shared-modules-5.13.0-52-generic-64k-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "nic-shared-modules-5.13.0-52-generic-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "nic-shared-modules-5.13.0-52-generic-lpae-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "nic-usb-modules-5.13.0-52-generic-64k-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "nic-usb-modules-5.13.0-52-generic-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "nic-usb-modules-5.13.0-52-generic-lpae-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "parport-modules-5.13.0-52-generic-64k-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "parport-modules-5.13.0-52-generic-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "parport-modules-5.13.0-52-generic-lpae-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "pata-modules-5.13.0-52-generic-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "pcmcia-modules-5.13.0-52-generic-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "pcmcia-storage-modules-5.13.0-52-generic-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "plip-modules-5.13.0-52-generic-64k-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "plip-modules-5.13.0-52-generic-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "plip-modules-5.13.0-52-generic-lpae-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "ppp-modules-5.13.0-52-generic-64k-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "ppp-modules-5.13.0-52-generic-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "ppp-modules-5.13.0-52-generic-lpae-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "sata-modules-5.13.0-52-generic-64k-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "sata-modules-5.13.0-52-generic-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "sata-modules-5.13.0-52-generic-lpae-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "scsi-modules-5.13.0-52-generic-64k-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "scsi-modules-5.13.0-52-generic-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "scsi-modules-5.13.0-52-generic-lpae-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "serial-modules-5.13.0-52-generic-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "storage-core-modules-5.13.0-52-generic-64k-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "storage-core-modules-5.13.0-52-generic-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "storage-core-modules-5.13.0-52-generic-lpae-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "usb-modules-5.13.0-52-generic-64k-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "usb-modules-5.13.0-52-generic-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "usb-modules-5.13.0-52-generic-lpae-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "virtio-modules-5.13.0-52-generic-64k-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "virtio-modules-5.13.0-52-generic-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "vlan-modules-5.13.0-52-generic-64k-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "vlan-modules-5.13.0-52-generic-di",
"binary_version": "5.13.0-52.59~20.04.1"
},
{
"binary_name": "vlan-modules-5.13.0-52-generic-lpae-di",
"binary_version": "5.13.0-52.59~20.04.1"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:20.04:LTS",
"name": "linux-hwe-5.13",
"purl": "pkg:deb/ubuntu/linux-hwe-5.13@5.13.0-52.59~20.04.1?arch=source\u0026distro=focal"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.13.0-21.21~20.04.1",
"5.13.0-22.22~20.04.1",
"5.13.0-23.23~20.04.2",
"5.13.0-25.26~20.04.1",
"5.13.0-27.29~20.04.1",
"5.13.0-28.31~20.04.1",
"5.13.0-30.33~20.04.1",
"5.13.0-35.40~20.04.1",
"5.13.0-37.42~20.04.1",
"5.13.0-39.44~20.04.1",
"5.13.0-40.45~20.04.1",
"5.13.0-41.46~20.04.1",
"5.13.0-44.49~20.04.1",
"5.13.0-48.54~20.04.1",
"5.13.0-51.58~20.04.1",
"5.13.0-52.59~20.04.1"
]
},
{
"ecosystem_specific": {
"availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
"binaries": [
{
"binary_name": "linux-buildinfo-5.15.0-181-generic",
"binary_version": "5.15.0-181.191~20.04.1"
},
{
"binary_name": "linux-buildinfo-5.15.0-181-generic-64k",
"binary_version": "5.15.0-181.191~20.04.1"
},
{
"binary_name": "linux-buildinfo-5.15.0-181-generic-lpae",
"binary_version": "5.15.0-181.191~20.04.1"
},
{
"binary_name": "linux-cloud-tools-5.15.0-181-generic",
"binary_version": "5.15.0-181.191~20.04.1"
},
{
"binary_name": "linux-headers-5.15.0-181-generic",
"binary_version": "5.15.0-181.191~20.04.1"
},
{
"binary_name": "linux-headers-5.15.0-181-generic-64k",
"binary_version": "5.15.0-181.191~20.04.1"
},
{
"binary_name": "linux-headers-5.15.0-181-generic-lpae",
"binary_version": "5.15.0-181.191~20.04.1"
},
{
"binary_name": "linux-hwe-5.15-cloud-tools-5.15.0-181",
"binary_version": "5.15.0-181.191~20.04.1"
},
{
"binary_name": "linux-hwe-5.15-headers-5.15.0-181",
"binary_version": "5.15.0-181.191~20.04.1"
},
{
"binary_name": "linux-hwe-5.15-tools-5.15.0-181",
"binary_version": "5.15.0-181.191~20.04.1"
},
{
"binary_name": "linux-image-5.15.0-181-generic",
"binary_version": "5.15.0-181.191~20.04.1"
},
{
"binary_name": "linux-image-5.15.0-181-generic-lpae",
"binary_version": "5.15.0-181.191~20.04.1"
},
{
"binary_name": "linux-image-unsigned-5.15.0-181-generic",
"binary_version": "5.15.0-181.191~20.04.1"
},
{
"binary_name": "linux-image-unsigned-5.15.0-181-generic-64k",
"binary_version": "5.15.0-181.191~20.04.1"
},
{
"binary_name": "linux-modules-5.15.0-181-generic",
"binary_version": "5.15.0-181.191~20.04.1"
},
{
"binary_name": "linux-modules-5.15.0-181-generic-64k",
"binary_version": "5.15.0-181.191~20.04.1"
},
{
"binary_name": "linux-modules-5.15.0-181-generic-lpae",
"binary_version": "5.15.0-181.191~20.04.1"
},
{
"binary_name": "linux-modules-extra-5.15.0-181-generic",
"binary_version": "5.15.0-181.191~20.04.1"
},
{
"binary_name": "linux-modules-iwlwifi-5.15.0-181-generic",
"binary_version": "5.15.0-181.191~20.04.1"
},
{
"binary_name": "linux-tools-5.15.0-181-generic",
"binary_version": "5.15.0-181.191~20.04.1"
},
{
"binary_name": "linux-tools-5.15.0-181-generic-64k",
"binary_version": "5.15.0-181.191~20.04.1"
},
{
"binary_name": "linux-tools-5.15.0-181-generic-lpae",
"binary_version": "5.15.0-181.191~20.04.1"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:Pro:20.04:LTS",
"name": "linux-hwe-5.15",
"purl": "pkg:deb/ubuntu/linux-hwe-5.15@5.15.0-181.191~20.04.1?arch=source\u0026distro=esm-infra/focal"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "5.15.0-181.191~20.04.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.15.0-33.34~20.04.1",
"5.15.0-41.44~20.04.1",
"5.15.0-43.46~20.04.1",
"5.15.0-46.49~20.04.1",
"5.15.0-48.54~20.04.1",
"5.15.0-50.56~20.04.1",
"5.15.0-52.58~20.04.1",
"5.15.0-53.59~20.04.1",
"5.15.0-56.62~20.04.1",
"5.15.0-57.63~20.04.1",
"5.15.0-58.64~20.04.1",
"5.15.0-60.66~20.04.1",
"5.15.0-67.74~20.04.1",
"5.15.0-69.76~20.04.1",
"5.15.0-70.77~20.04.1",
"5.15.0-71.78~20.04.1",
"5.15.0-72.79~20.04.1",
"5.15.0-73.80~20.04.1",
"5.15.0-75.82~20.04.1",
"5.15.0-76.83~20.04.1",
"5.15.0-78.85~20.04.1",
"5.15.0-79.86~20.04.2",
"5.15.0-82.91~20.04.1",
"5.15.0-83.92~20.04.1",
"5.15.0-84.93~20.04.1",
"5.15.0-86.96~20.04.1",
"5.15.0-87.97~20.04.1",
"5.15.0-88.98~20.04.1",
"5.15.0-89.99~20.04.1",
"5.15.0-91.101~20.04.1",
"5.15.0-92.102~20.04.1",
"5.15.0-94.104~20.04.1",
"5.15.0-97.107~20.04.1",
"5.15.0-100.110~20.04.1",
"5.15.0-101.111~20.04.1",
"5.15.0-102.112~20.04.1",
"5.15.0-105.115~20.04.1",
"5.15.0-106.116~20.04.1",
"5.15.0-107.117~20.04.1",
"5.15.0-113.123~20.04.1",
"5.15.0-116.126~20.04.1",
"5.15.0-117.127~20.04.1",
"5.15.0-118.128~20.04.1",
"5.15.0-119.129~20.04.1",
"5.15.0-121.131~20.04.1",
"5.15.0-122.132~20.04.1",
"5.15.0-124.134~20.04.1",
"5.15.0-125.135~20.04.1",
"5.15.0-126.136~20.04.1",
"5.15.0-127.137~20.04.1",
"5.15.0-130.140~20.04.1",
"5.15.0-131.141~20.04.1",
"5.15.0-134.145~20.04.1",
"5.15.0-136.147~20.04.1",
"5.15.0-138.148~20.04.1",
"5.15.0-139.149~20.04.1",
"5.15.0-142.152~20.04.1",
"5.15.0-143.153~20.04.1",
"5.15.0-144.157~20.04.1",
"5.15.0-145.158~20.04.1",
"5.15.0-151.161~20.04.1",
"5.15.0-152.162~20.04.1",
"5.15.0-153.163~20.04.1",
"5.15.0-156.166~20.04.1",
"5.15.0-157.167~20.04.1",
"5.15.0-160.170~20.04.1",
"5.15.0-161.171~20.04.1",
"5.15.0-163.173~20.04.1",
"5.15.0-164.174~20.04.1",
"5.15.0-168.178~20.04.1",
"5.15.0-170.180~20.04.3",
"5.15.0-171.181~20.04.1",
"5.15.0-173.183~20.04.1",
"5.15.0-176.186~20.04.1",
"5.15.0-177.187~20.04.1",
"5.15.0-179.189~20.04.1"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "block-modules-5.8.0-63-generic-64k-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "block-modules-5.8.0-63-generic-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "block-modules-5.8.0-63-generic-lpae-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "crypto-modules-5.8.0-63-generic-64k-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "crypto-modules-5.8.0-63-generic-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "crypto-modules-5.8.0-63-generic-lpae-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "dasd-extra-modules-5.8.0-63-generic-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "dasd-modules-5.8.0-63-generic-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "fat-modules-5.8.0-63-generic-64k-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "fat-modules-5.8.0-63-generic-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "fat-modules-5.8.0-63-generic-lpae-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "fb-modules-5.8.0-63-generic-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "firewire-core-modules-5.8.0-63-generic-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "floppy-modules-5.8.0-63-generic-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "fs-core-modules-5.8.0-63-generic-64k-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "fs-core-modules-5.8.0-63-generic-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "fs-core-modules-5.8.0-63-generic-lpae-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "fs-secondary-modules-5.8.0-63-generic-64k-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "fs-secondary-modules-5.8.0-63-generic-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "fs-secondary-modules-5.8.0-63-generic-lpae-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "input-modules-5.8.0-63-generic-64k-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "input-modules-5.8.0-63-generic-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "input-modules-5.8.0-63-generic-lpae-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "ipmi-modules-5.8.0-63-generic-64k-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "ipmi-modules-5.8.0-63-generic-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "ipmi-modules-5.8.0-63-generic-lpae-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "kernel-image-5.8.0-63-generic-64k-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "kernel-image-5.8.0-63-generic-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "kernel-image-5.8.0-63-generic-lpae-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "linux-buildinfo-5.8.0-63-generic",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "linux-buildinfo-5.8.0-63-generic-64k",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "linux-buildinfo-5.8.0-63-generic-lpae",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "linux-buildinfo-5.8.0-63-lowlatency",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "linux-cloud-tools-5.8.0-63-generic",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "linux-cloud-tools-5.8.0-63-lowlatency",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "linux-headers-5.8.0-63-generic",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "linux-headers-5.8.0-63-generic-64k",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "linux-headers-5.8.0-63-generic-lpae",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "linux-headers-5.8.0-63-lowlatency",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "linux-hwe-5.8-cloud-tools-5.8.0-63",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "linux-hwe-5.8-cloud-tools-common",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "linux-hwe-5.8-headers-5.8.0-63",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "linux-hwe-5.8-source-5.8.0",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "linux-hwe-5.8-tools-5.8.0-63",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "linux-hwe-5.8-tools-common",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "linux-hwe-5.8-tools-host",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "linux-hwe-5.8-udebs-generic",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "linux-hwe-5.8-udebs-generic-64k",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "linux-hwe-5.8-udebs-generic-lpae",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "linux-image-5.8.0-63-generic",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "linux-image-5.8.0-63-generic-lpae",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "linux-image-unsigned-5.8.0-63-generic",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "linux-image-unsigned-5.8.0-63-generic-64k",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "linux-image-unsigned-5.8.0-63-lowlatency",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "linux-modules-5.8.0-63-generic",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "linux-modules-5.8.0-63-generic-64k",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "linux-modules-5.8.0-63-generic-lpae",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "linux-modules-5.8.0-63-lowlatency",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "linux-modules-extra-5.8.0-63-generic",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "linux-tools-5.8.0-63-generic",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "linux-tools-5.8.0-63-generic-64k",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "linux-tools-5.8.0-63-generic-lpae",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "linux-tools-5.8.0-63-lowlatency",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "md-modules-5.8.0-63-generic-64k-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "md-modules-5.8.0-63-generic-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "md-modules-5.8.0-63-generic-lpae-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "message-modules-5.8.0-63-generic-64k-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "message-modules-5.8.0-63-generic-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "mouse-modules-5.8.0-63-generic-64k-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "mouse-modules-5.8.0-63-generic-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "mouse-modules-5.8.0-63-generic-lpae-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "multipath-modules-5.8.0-63-generic-64k-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "multipath-modules-5.8.0-63-generic-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "multipath-modules-5.8.0-63-generic-lpae-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "nfs-modules-5.8.0-63-generic-64k-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "nfs-modules-5.8.0-63-generic-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "nfs-modules-5.8.0-63-generic-lpae-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "nic-modules-5.8.0-63-generic-64k-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "nic-modules-5.8.0-63-generic-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "nic-modules-5.8.0-63-generic-lpae-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "nic-pcmcia-modules-5.8.0-63-generic-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "nic-shared-modules-5.8.0-63-generic-64k-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "nic-shared-modules-5.8.0-63-generic-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "nic-shared-modules-5.8.0-63-generic-lpae-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "nic-usb-modules-5.8.0-63-generic-64k-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "nic-usb-modules-5.8.0-63-generic-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "nic-usb-modules-5.8.0-63-generic-lpae-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "parport-modules-5.8.0-63-generic-64k-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "parport-modules-5.8.0-63-generic-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "parport-modules-5.8.0-63-generic-lpae-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "pata-modules-5.8.0-63-generic-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "pcmcia-modules-5.8.0-63-generic-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "pcmcia-storage-modules-5.8.0-63-generic-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "plip-modules-5.8.0-63-generic-64k-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "plip-modules-5.8.0-63-generic-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "plip-modules-5.8.0-63-generic-lpae-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "ppp-modules-5.8.0-63-generic-64k-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "ppp-modules-5.8.0-63-generic-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "ppp-modules-5.8.0-63-generic-lpae-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "sata-modules-5.8.0-63-generic-64k-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "sata-modules-5.8.0-63-generic-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "sata-modules-5.8.0-63-generic-lpae-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "scsi-modules-5.8.0-63-generic-64k-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "scsi-modules-5.8.0-63-generic-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "scsi-modules-5.8.0-63-generic-lpae-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "serial-modules-5.8.0-63-generic-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "storage-core-modules-5.8.0-63-generic-64k-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "storage-core-modules-5.8.0-63-generic-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "storage-core-modules-5.8.0-63-generic-lpae-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "usb-modules-5.8.0-63-generic-64k-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "usb-modules-5.8.0-63-generic-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "usb-modules-5.8.0-63-generic-lpae-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "virtio-modules-5.8.0-63-generic-64k-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "virtio-modules-5.8.0-63-generic-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "vlan-modules-5.8.0-63-generic-64k-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "vlan-modules-5.8.0-63-generic-di",
"binary_version": "5.8.0-63.71~20.04.1"
},
{
"binary_name": "vlan-modules-5.8.0-63-generic-lpae-di",
"binary_version": "5.8.0-63.71~20.04.1"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:20.04:LTS",
"name": "linux-hwe-5.8",
"purl": "pkg:deb/ubuntu/linux-hwe-5.8@5.8.0-63.71~20.04.1?arch=source\u0026distro=focal"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.8.0-23.24~20.04.1",
"5.8.0-25.26~20.04.1",
"5.8.0-28.30~20.04.1",
"5.8.0-29.31~20.04.1",
"5.8.0-31.33~20.04.1",
"5.8.0-33.36~20.04.1",
"5.8.0-34.37~20.04.2",
"5.8.0-36.40~20.04.1",
"5.8.0-38.43~20.04.1",
"5.8.0-40.45~20.04.1",
"5.8.0-41.46~20.04.1",
"5.8.0-43.49~20.04.1",
"5.8.0-44.50~20.04.1",
"5.8.0-45.51~20.04.1",
"5.8.0-48.54~20.04.1",
"5.8.0-49.55~20.04.1",
"5.8.0-50.56~20.04.1",
"5.8.0-53.60~20.04.1",
"5.8.0-55.62~20.04.1",
"5.8.0-59.66~20.04.1",
"5.8.0-63.71~20.04.1"
]
},
{
"ecosystem_specific": {
"availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
"binaries": [
{
"binary_name": "linux-buildinfo-5.15.0-1103-ibm",
"binary_version": "5.15.0-1103.106~20.04.1"
},
{
"binary_name": "linux-headers-5.15.0-1103-ibm",
"binary_version": "5.15.0-1103.106~20.04.1"
},
{
"binary_name": "linux-ibm-5.15-headers-5.15.0-1103",
"binary_version": "5.15.0-1103.106~20.04.1"
},
{
"binary_name": "linux-ibm-5.15-source-5.15.0",
"binary_version": "5.15.0-1103.106~20.04.1"
},
{
"binary_name": "linux-ibm-5.15-tools-5.15.0-1103",
"binary_version": "5.15.0-1103.106~20.04.1"
},
{
"binary_name": "linux-image-unsigned-5.15.0-1103-ibm",
"binary_version": "5.15.0-1103.106~20.04.1"
},
{
"binary_name": "linux-modules-5.15.0-1103-ibm",
"binary_version": "5.15.0-1103.106~20.04.1"
},
{
"binary_name": "linux-modules-extra-5.15.0-1103-ibm",
"binary_version": "5.15.0-1103.106~20.04.1"
},
{
"binary_name": "linux-tools-5.15.0-1103-ibm",
"binary_version": "5.15.0-1103.106~20.04.1"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:Pro:20.04:LTS",
"name": "linux-ibm-5.15",
"purl": "pkg:deb/ubuntu/linux-ibm-5.15@5.15.0-1103.106~20.04.1?arch=source\u0026distro=esm-infra/focal"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "5.15.0-1103.106~20.04.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.15.0-1033.36~20.04.1",
"5.15.0-1034.37~20.04.1",
"5.15.0-1035.38~20.04.1",
"5.15.0-1036.39~20.04.1",
"5.15.0-1037.40~20.04.1",
"5.15.0-1038.41~20.04.1",
"5.15.0-1040.43~20.04.1",
"5.15.0-1041.44~20.04.1",
"5.15.0-1042.45~20.04.1",
"5.15.0-1043.46~20.04.1",
"5.15.0-1044.47~20.04.1",
"5.15.0-1045.48~20.04.1",
"5.15.0-1046.49~20.04.1",
"5.15.0-1047.50~20.04.1",
"5.15.0-1048.51~20.04.1",
"5.15.0-1049.52~20.04.1",
"5.15.0-1050.53~20.04.1",
"5.15.0-1053.56~20.04.1",
"5.15.0-1054.57~20.04.1",
"5.15.0-1055.58~20.04.1",
"5.15.0-1057.60~20.04.1",
"5.15.0-1058.61~20.04.1",
"5.15.0-1059.62~20.04.1",
"5.15.0-1060.63~20.04.1",
"5.15.0-1061.64~20.04.1",
"5.15.0-1062.65~20.04.1",
"5.15.0-1063.66~20.04.1",
"5.15.0-1064.67~20.04.1",
"5.15.0-1065.68~20.04.1",
"5.15.0-1066.69~20.04.1",
"5.15.0-1067.70~20.04.1",
"5.15.0-1068.71~20.04.1",
"5.15.0-1069.72~20.04.1",
"5.15.0-1074.77~20.04.1",
"5.15.0-1075.78~20.04.1",
"5.15.0-1076.79~20.04.1",
"5.15.0-1078.81~20.04.1",
"5.15.0-1079.82~20.04.1",
"5.15.0-1080.83~20.04.1",
"5.15.0-1081.84~20.04.1",
"5.15.0-1083.86~20.04.1",
"5.15.0-1085.88~20.04.1",
"5.15.0-1086.89~20.04.1",
"5.15.0-1087.90~20.04.1",
"5.15.0-1089.92~20.04.1",
"5.15.0-1090.93~20.04.1",
"5.15.0-1091.94~20.04.1",
"5.15.0-1092.95~20.04.1",
"5.15.0-1093.96~20.04.1",
"5.15.0-1094.97~20.04.1",
"5.15.0-1095.98~20.04.1",
"5.15.0-1097.100~20.04.1",
"5.15.0-1098.101~20.04.1",
"5.15.0-1099.102~20.04.1",
"5.15.0-1100.103~20.04.1",
"5.15.0-1102.105~20.04.1"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-buildinfo-5.13.0-1017-intel",
"binary_version": "5.13.0-1017.19"
},
{
"binary_name": "linux-cloud-tools-5.13.0-1017-intel",
"binary_version": "5.13.0-1017.19"
},
{
"binary_name": "linux-headers-5.13.0-1017-intel",
"binary_version": "5.13.0-1017.19"
},
{
"binary_name": "linux-image-unsigned-5.13.0-1017-intel",
"binary_version": "5.13.0-1017.19"
},
{
"binary_name": "linux-intel-5.13-cloud-tools-5.13.0-1017",
"binary_version": "5.13.0-1017.19"
},
{
"binary_name": "linux-intel-5.13-cloud-tools-common",
"binary_version": "5.13.0-1017.19"
},
{
"binary_name": "linux-intel-5.13-headers-5.13.0-1017",
"binary_version": "5.13.0-1017.19"
},
{
"binary_name": "linux-intel-5.13-source-5.13.0",
"binary_version": "5.13.0-1017.19"
},
{
"binary_name": "linux-intel-5.13-tools-5.13.0-1017",
"binary_version": "5.13.0-1017.19"
},
{
"binary_name": "linux-intel-5.13-tools-common",
"binary_version": "5.13.0-1017.19"
},
{
"binary_name": "linux-intel-5.13-tools-host",
"binary_version": "5.13.0-1017.19"
},
{
"binary_name": "linux-modules-5.13.0-1017-intel",
"binary_version": "5.13.0-1017.19"
},
{
"binary_name": "linux-modules-extra-5.13.0-1017-intel",
"binary_version": "5.13.0-1017.19"
},
{
"binary_name": "linux-tools-5.13.0-1017-intel",
"binary_version": "5.13.0-1017.19"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:20.04:LTS",
"name": "linux-intel-5.13",
"purl": "pkg:deb/ubuntu/linux-intel-5.13@5.13.0-1017.19?arch=source\u0026distro=focal"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.13.0-1007.7",
"5.13.0-1008.8",
"5.13.0-1009.9",
"5.13.0-1010.10",
"5.13.0-1011.11",
"5.13.0-1014.15",
"5.13.0-1017.19"
]
},
{
"ecosystem_specific": {
"availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
"binaries": [
{
"binary_name": "linux-buildinfo-5.15.0-1104-intel-iotg",
"binary_version": "5.15.0-1104.110~20.04.1"
},
{
"binary_name": "linux-cloud-tools-5.15.0-1104-intel-iotg",
"binary_version": "5.15.0-1104.110~20.04.1"
},
{
"binary_name": "linux-headers-5.15.0-1104-intel-iotg",
"binary_version": "5.15.0-1104.110~20.04.1"
},
{
"binary_name": "linux-image-unsigned-5.15.0-1104-intel-iotg",
"binary_version": "5.15.0-1104.110~20.04.1"
},
{
"binary_name": "linux-intel-iotg-5.15-cloud-tools-5.15.0-1104",
"binary_version": "5.15.0-1104.110~20.04.1"
},
{
"binary_name": "linux-intel-iotg-5.15-cloud-tools-common",
"binary_version": "5.15.0-1104.110~20.04.1"
},
{
"binary_name": "linux-intel-iotg-5.15-headers-5.15.0-1104",
"binary_version": "5.15.0-1104.110~20.04.1"
},
{
"binary_name": "linux-intel-iotg-5.15-tools-5.15.0-1104",
"binary_version": "5.15.0-1104.110~20.04.1"
},
{
"binary_name": "linux-intel-iotg-5.15-tools-common",
"binary_version": "5.15.0-1104.110~20.04.1"
},
{
"binary_name": "linux-intel-iotg-5.15-tools-host",
"binary_version": "5.15.0-1104.110~20.04.1"
},
{
"binary_name": "linux-modules-5.15.0-1104-intel-iotg",
"binary_version": "5.15.0-1104.110~20.04.1"
},
{
"binary_name": "linux-modules-extra-5.15.0-1104-intel-iotg",
"binary_version": "5.15.0-1104.110~20.04.1"
},
{
"binary_name": "linux-modules-iwlwifi-5.15.0-1104-intel-iotg",
"binary_version": "5.15.0-1104.110~20.04.1"
},
{
"binary_name": "linux-tools-5.15.0-1104-intel-iotg",
"binary_version": "5.15.0-1104.110~20.04.1"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:Pro:20.04:LTS",
"name": "linux-intel-iotg-5.15",
"purl": "pkg:deb/ubuntu/linux-intel-iotg-5.15@5.15.0-1104.110~20.04.1?arch=source\u0026distro=esm-infra/focal"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "5.15.0-1104.110~20.04.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.15.0-1003.5~20.04.1",
"5.15.0-1008.11~20.04.1",
"5.15.0-1010.14~20.04.1",
"5.15.0-1015.20~20.04.2",
"5.15.0-1016.21~20.04.1",
"5.15.0-1017.22~20.04.1",
"5.15.0-1018.23~20.04.1",
"5.15.0-1021.26~20.04.1",
"5.15.0-1023.28~20.04.1",
"5.15.0-1025.30~20.04.1",
"5.15.0-1026.31~20.04.1",
"5.15.0-1027.32~20.04.1",
"5.15.0-1030.35~20.04.1",
"5.15.0-1031.36~20.04.1",
"5.15.0-1033.38~20.04.1",
"5.15.0-1034.39~20.04.1",
"5.15.0-1036.41~20.04.1",
"5.15.0-1037.42~20.04.1",
"5.15.0-1038.43~20.04.1",
"5.15.0-1040.46~20.04.1",
"5.15.0-1043.49~20.04.1",
"5.15.0-1045.51~20.04.1",
"5.15.0-1046.52~20.04.1",
"5.15.0-1048.54~20.04.1",
"5.15.0-1049.55~20.04.1",
"5.15.0-1050.56~20.04.1",
"5.15.0-1051.57~20.04.1",
"5.15.0-1052.58~20.04.1",
"5.15.0-1055.61~20.04.1",
"5.15.0-1058.64~20.04.1",
"5.15.0-1059.65~20.04.1",
"5.15.0-1060.66~20.04.1",
"5.15.0-1061.67~20.04.1",
"5.15.0-1062.68~20.04.1",
"5.15.0-1063.69~20.04.1",
"5.15.0-1064.70~20.04.1",
"5.15.0-1065.71~20.04.1",
"5.15.0-1066.72~20.04.1",
"5.15.0-1067.73~20.04.1",
"5.15.0-1071.77~20.04.1",
"5.15.0-1072.78~20.04.1",
"5.15.0-1073.79~20.04.2",
"5.15.0-1074.80~20.04.1",
"5.15.0-1077.83~20.04.1",
"5.15.0-1078.84~20.04.1",
"5.15.0-1079.85~20.04.1",
"5.15.0-1083.89~20.04.1",
"5.15.0-1084.90~20.04.1",
"5.15.0-1085.91~20.04.1",
"5.15.0-1086.92~20.04.1",
"5.15.0-1087.93~20.04.1",
"5.15.0-1088.94~20.04.1",
"5.15.0-1090.96~20.04.1",
"5.15.0-1091.97~20.04.1",
"5.15.0-1092.98~20.04.1",
"5.15.0-1093.99~20.04.1",
"5.15.0-1094.100~20.04.1",
"5.15.0-1095.101~20.04.1",
"5.15.0-1096.102~20.04.1",
"5.15.0-1098.104~20.04.1",
"5.15.0-1099.105~20.04.1",
"5.15.0-1100.106~20.04.1",
"5.15.0-1101.107~20.04.1",
"5.15.0-1103.109~20.04.1"
]
},
{
"ecosystem_specific": {
"availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
"binaries": [
{
"binary_name": "linux-buildinfo-5.15.0-181-lowlatency",
"binary_version": "5.15.0-181.191~20.04.1"
},
{
"binary_name": "linux-buildinfo-5.15.0-181-lowlatency-64k",
"binary_version": "5.15.0-181.191~20.04.1"
},
{
"binary_name": "linux-cloud-tools-5.15.0-181-lowlatency",
"binary_version": "5.15.0-181.191~20.04.1"
},
{
"binary_name": "linux-headers-5.15.0-181-lowlatency",
"binary_version": "5.15.0-181.191~20.04.1"
},
{
"binary_name": "linux-headers-5.15.0-181-lowlatency-64k",
"binary_version": "5.15.0-181.191~20.04.1"
},
{
"binary_name": "linux-image-unsigned-5.15.0-181-lowlatency",
"binary_version": "5.15.0-181.191~20.04.1"
},
{
"binary_name": "linux-image-unsigned-5.15.0-181-lowlatency-64k",
"binary_version": "5.15.0-181.191~20.04.1"
},
{
"binary_name": "linux-lowlatency-hwe-5.15-cloud-tools-5.15.0-181",
"binary_version": "5.15.0-181.191~20.04.1"
},
{
"binary_name": "linux-lowlatency-hwe-5.15-headers-5.15.0-181",
"binary_version": "5.15.0-181.191~20.04.1"
},
{
"binary_name": "linux-lowlatency-hwe-5.15-tools-5.15.0-181",
"binary_version": "5.15.0-181.191~20.04.1"
},
{
"binary_name": "linux-modules-5.15.0-181-lowlatency",
"binary_version": "5.15.0-181.191~20.04.1"
},
{
"binary_name": "linux-modules-5.15.0-181-lowlatency-64k",
"binary_version": "5.15.0-181.191~20.04.1"
},
{
"binary_name": "linux-modules-iwlwifi-5.15.0-181-lowlatency",
"binary_version": "5.15.0-181.191~20.04.1"
},
{
"binary_name": "linux-tools-5.15.0-181-lowlatency",
"binary_version": "5.15.0-181.191~20.04.1"
},
{
"binary_name": "linux-tools-5.15.0-181-lowlatency-64k",
"binary_version": "5.15.0-181.191~20.04.1"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:Pro:20.04:LTS",
"name": "linux-lowlatency-hwe-5.15",
"purl": "pkg:deb/ubuntu/linux-lowlatency-hwe-5.15@5.15.0-181.191~20.04.1?arch=source\u0026distro=esm-infra/focal"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "5.15.0-181.191~20.04.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.15.0-33.34~20.04.1",
"5.15.0-42.45~20.04.1",
"5.15.0-43.46~20.04.1",
"5.15.0-46.49~20.04.1",
"5.15.0-48.54~20.04.1",
"5.15.0-50.56~20.04.1",
"5.15.0-52.58~20.04.1",
"5.15.0-53.59~20.04.1",
"5.15.0-56.62~20.04.1",
"5.15.0-58.64~20.04.1",
"5.15.0-60.66~20.04.1",
"5.15.0-67.74~20.04.1",
"5.15.0-69.76~20.04.1",
"5.15.0-70.77~20.04.1",
"5.15.0-71.78~20.04.1",
"5.15.0-72.79~20.04.1",
"5.15.0-73.80~20.04.1",
"5.15.0-75.82~20.04.1",
"5.15.0-76.83~20.04.1",
"5.15.0-78.85~20.04.1",
"5.15.0-79.88~20.04.1",
"5.15.0-82.91~20.04.1",
"5.15.0-83.92~20.04.1",
"5.15.0-84.93~20.04.1",
"5.15.0-86.95~20.04.1",
"5.15.0-87.96~20.04.1",
"5.15.0-88.98~20.04.1",
"5.15.0-89.99~20.04.1",
"5.15.0-91.101~20.04.1",
"5.15.0-92.102~20.04.1",
"5.15.0-94.104~20.04.1",
"5.15.0-97.107~20.04.1",
"5.15.0-100.110~20.04.1",
"5.15.0-101.111~20.04.1",
"5.15.0-102.112~20.04.1",
"5.15.0-105.115~20.04.1",
"5.15.0-106.116~20.04.1",
"5.15.0-107.117~20.04.1",
"5.15.0-110.120~20.04.1",
"5.15.0-113.123~20.04.1",
"5.15.0-116.126~20.04.1",
"5.15.0-117.127~20.04.1",
"5.15.0-118.128~20.04.1",
"5.15.0-119.129~20.04.1",
"5.15.0-121.131~20.04.1",
"5.15.0-122.132~20.04.1",
"5.15.0-124.134~20.04.1",
"5.15.0-125.135~20.04.1",
"5.15.0-126.136~20.04.1",
"5.15.0-127.137~20.04.1",
"5.15.0-128.138~20.04.1",
"5.15.0-129.139~20.04.1",
"5.15.0-131.141~20.04.1",
"5.15.0-133.143~20.04.1",
"5.15.0-134.145~20.04.1",
"5.15.0-135.146~20.04.1",
"5.15.0-136.147~20.04.1",
"5.15.0-138.148~20.04.1",
"5.15.0-139.149~20.04.1",
"5.15.0-140.150~20.04.1",
"5.15.0-142.152~20.04.1",
"5.15.0-143.153~20.04.1",
"5.15.0-144.157~20.04.1",
"5.15.0-145.158~20.04.1",
"5.15.0-152.162~20.04.1",
"5.15.0-153.163~20.04.1",
"5.15.0-156.166~20.04.1",
"5.15.0-157.167~20.04.1",
"5.15.0-160.170~20.04.1",
"5.15.0-161.171~20.04.1",
"5.15.0-163.173~20.04.1",
"5.15.0-164.174~20.04.1",
"5.15.0-168.178~20.04.1",
"5.15.0-170.180~20.04.1",
"5.15.0-171.181~20.04.1",
"5.15.0-173.183~20.04.1",
"5.15.0-174.184~20.04.1",
"5.15.0-175.185~20.04.1",
"5.15.0-177.187~20.04.1",
"5.15.0-178.188~20.04.1",
"5.15.0-179.189~20.04.1"
]
},
{
"ecosystem_specific": {
"availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
"binaries": [
{
"binary_name": "linux-buildinfo-5.15.0-1061-nvidia-tegra",
"binary_version": "5.15.0-1061.61~20.04.1"
},
{
"binary_name": "linux-buildinfo-5.15.0-1061-nvidia-tegra-rt",
"binary_version": "5.15.0-1061.61~20.04.1"
},
{
"binary_name": "linux-headers-5.15.0-1061-nvidia-tegra",
"binary_version": "5.15.0-1061.61~20.04.1"
},
{
"binary_name": "linux-headers-5.15.0-1061-nvidia-tegra-rt",
"binary_version": "5.15.0-1061.61~20.04.1"
},
{
"binary_name": "linux-image-unsigned-5.15.0-1061-nvidia-tegra",
"binary_version": "5.15.0-1061.61~20.04.1"
},
{
"binary_name": "linux-image-unsigned-5.15.0-1061-nvidia-tegra-rt",
"binary_version": "5.15.0-1061.61~20.04.1"
},
{
"binary_name": "linux-modules-5.15.0-1061-nvidia-tegra",
"binary_version": "5.15.0-1061.61~20.04.1"
},
{
"binary_name": "linux-modules-5.15.0-1061-nvidia-tegra-rt",
"binary_version": "5.15.0-1061.61~20.04.1"
},
{
"binary_name": "linux-modules-extra-5.15.0-1061-nvidia-tegra",
"binary_version": "5.15.0-1061.61~20.04.1"
},
{
"binary_name": "linux-nvidia-tegra-5.15-headers-5.15.0-1061",
"binary_version": "5.15.0-1061.61~20.04.1"
},
{
"binary_name": "linux-nvidia-tegra-5.15-tools-5.15.0-1061",
"binary_version": "5.15.0-1061.61~20.04.1"
},
{
"binary_name": "linux-tools-5.15.0-1061-nvidia-tegra",
"binary_version": "5.15.0-1061.61~20.04.1"
},
{
"binary_name": "linux-tools-5.15.0-1061-nvidia-tegra-rt",
"binary_version": "5.15.0-1061.61~20.04.1"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:Pro:20.04:LTS",
"name": "linux-nvidia-tegra-5.15",
"purl": "pkg:deb/ubuntu/linux-nvidia-tegra-5.15@5.15.0-1061.61~20.04.1?arch=source\u0026distro=esm-infra/focal"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "5.15.0-1061.61~20.04.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.15.0-1009.9~20.04.1",
"5.15.0-1010.10~20.04.1",
"5.15.0-1012.12~20.04.1",
"5.15.0-1014.14~20.04.1",
"5.15.0-1015.15~20.04.1",
"5.15.0-1016.16~20.04.1",
"5.15.0-1017.17~20.04.1",
"5.15.0-1018.18~20.04.1",
"5.15.0-1019.19~20.04.1",
"5.15.0-1020.20~20.04.1",
"5.15.0-1022.22~20.04.1",
"5.15.0-1025.25~20.04.1",
"5.15.0-1027.27~20.04.1",
"5.15.0-1030.30~20.04.1",
"5.15.0-1032.32~20.04.1",
"5.15.0-1039.39~20.04.1",
"5.15.0-1040.40~20.04.1",
"5.15.0-1041.41~20.04.1",
"5.15.0-1042.42~20.04.1",
"5.15.0-1043.43~20.04.1",
"5.15.0-1044.44~20.04.1",
"5.15.0-1045.45~20.04.1",
"5.15.0-1046.46~20.04.1",
"5.15.0-1047.47~20.04.1",
"5.15.0-1048.48~20.04.1",
"5.15.0-1049.49~20.04.1",
"5.15.0-1050.50~20.04.1",
"5.15.0-1051.51~20.04.1",
"5.15.0-1052.52~20.04.2",
"5.15.0-1053.53~20.04.1",
"5.15.0-1055.55~20.04.1",
"5.15.0-1057.57~20.04.1",
"5.15.0-1058.58~20.04.1",
"5.15.0-1060.60~20.04.1"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-buildinfo-5.10.0-1057-oem",
"binary_version": "5.10.0-1057.61"
},
{
"binary_name": "linux-headers-5.10.0-1057-oem",
"binary_version": "5.10.0-1057.61"
},
{
"binary_name": "linux-image-unsigned-5.10.0-1057-oem",
"binary_version": "5.10.0-1057.61"
},
{
"binary_name": "linux-modules-5.10.0-1057-oem",
"binary_version": "5.10.0-1057.61"
},
{
"binary_name": "linux-oem-5.10-headers-5.10.0-1057",
"binary_version": "5.10.0-1057.61"
},
{
"binary_name": "linux-oem-5.10-tools-5.10.0-1057",
"binary_version": "5.10.0-1057.61"
},
{
"binary_name": "linux-oem-5.10-tools-host",
"binary_version": "5.10.0-1057.61"
},
{
"binary_name": "linux-tools-5.10.0-1057-oem",
"binary_version": "5.10.0-1057.61"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:20.04:LTS",
"name": "linux-oem-5.10",
"purl": "pkg:deb/ubuntu/linux-oem-5.10@5.10.0-1057.61?arch=source\u0026distro=focal"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.10.0-1008.9",
"5.10.0-1011.12",
"5.10.0-1013.14",
"5.10.0-1014.15",
"5.10.0-1016.17",
"5.10.0-1017.18",
"5.10.0-1019.20",
"5.10.0-1021.22",
"5.10.0-1022.23",
"5.10.0-1023.24",
"5.10.0-1025.26",
"5.10.0-1026.27",
"5.10.0-1029.30",
"5.10.0-1032.33",
"5.10.0-1033.34",
"5.10.0-1034.35",
"5.10.0-1038.40",
"5.10.0-1044.46",
"5.10.0-1045.47",
"5.10.0-1049.51",
"5.10.0-1050.52",
"5.10.0-1051.53",
"5.10.0-1052.54",
"5.10.0-1053.55",
"5.10.0-1055.58",
"5.10.0-1057.61"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-buildinfo-5.13.0-1029-oem",
"binary_version": "5.13.0-1029.36"
},
{
"binary_name": "linux-headers-5.13.0-1029-oem",
"binary_version": "5.13.0-1029.36"
},
{
"binary_name": "linux-image-unsigned-5.13.0-1029-oem",
"binary_version": "5.13.0-1029.36"
},
{
"binary_name": "linux-modules-5.13.0-1029-oem",
"binary_version": "5.13.0-1029.36"
},
{
"binary_name": "linux-oem-5.13-headers-5.13.0-1029",
"binary_version": "5.13.0-1029.36"
},
{
"binary_name": "linux-oem-5.13-tools-5.13.0-1029",
"binary_version": "5.13.0-1029.36"
},
{
"binary_name": "linux-oem-5.13-tools-host",
"binary_version": "5.13.0-1029.36"
},
{
"binary_name": "linux-tools-5.13.0-1029-oem",
"binary_version": "5.13.0-1029.36"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:20.04:LTS",
"name": "linux-oem-5.13",
"purl": "pkg:deb/ubuntu/linux-oem-5.13@5.13.0-1029.36?arch=source\u0026distro=focal"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.13.0-1009.10",
"5.13.0-1010.11",
"5.13.0-1012.16",
"5.13.0-1014.18",
"5.13.0-1017.21",
"5.13.0-1019.23",
"5.13.0-1020.24",
"5.13.0-1021.25",
"5.13.0-1022.26",
"5.13.0-1026.32",
"5.13.0-1028.35",
"5.13.0-1029.36"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-buildinfo-5.14.0-1059-oem",
"binary_version": "5.14.0-1059.67"
},
{
"binary_name": "linux-headers-5.14.0-1059-oem",
"binary_version": "5.14.0-1059.67"
},
{
"binary_name": "linux-image-unsigned-5.14.0-1059-oem",
"binary_version": "5.14.0-1059.67"
},
{
"binary_name": "linux-modules-5.14.0-1059-oem",
"binary_version": "5.14.0-1059.67"
},
{
"binary_name": "linux-modules-iwlwifi-5.14.0-1059-oem",
"binary_version": "5.14.0-1059.67"
},
{
"binary_name": "linux-oem-5.14-headers-5.14.0-1059",
"binary_version": "5.14.0-1059.67"
},
{
"binary_name": "linux-oem-5.14-tools-5.14.0-1059",
"binary_version": "5.14.0-1059.67"
},
{
"binary_name": "linux-oem-5.14-tools-host",
"binary_version": "5.14.0-1059.67"
},
{
"binary_name": "linux-tools-5.14.0-1059-oem",
"binary_version": "5.14.0-1059.67"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:20.04:LTS",
"name": "linux-oem-5.14",
"purl": "pkg:deb/ubuntu/linux-oem-5.14@5.14.0-1059.67?arch=source\u0026distro=focal"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.14.0-1004.4",
"5.14.0-1005.5",
"5.14.0-1007.7",
"5.14.0-1008.8",
"5.14.0-1010.10",
"5.14.0-1011.11",
"5.14.0-1013.13",
"5.14.0-1018.19",
"5.14.0-1020.22",
"5.14.0-1022.24",
"5.14.0-1024.26",
"5.14.0-1027.30",
"5.14.0-1029.32",
"5.14.0-1031.34",
"5.14.0-1032.35",
"5.14.0-1033.36",
"5.14.0-1034.37",
"5.14.0-1036.40",
"5.14.0-1038.42",
"5.14.0-1042.47",
"5.14.0-1044.49",
"5.14.0-1045.51",
"5.14.0-1046.53",
"5.14.0-1047.54",
"5.14.0-1048.55",
"5.14.0-1049.56",
"5.14.0-1050.57",
"5.14.0-1051.58",
"5.14.0-1052.59",
"5.14.0-1054.61",
"5.14.0-1055.62",
"5.14.0-1056.63",
"5.14.0-1057.64",
"5.14.0-1058.66",
"5.14.0-1059.67"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-buildinfo-5.6.0-1056-oem",
"binary_version": "5.6.0-1056.60"
},
{
"binary_name": "linux-headers-5.6.0-1056-oem",
"binary_version": "5.6.0-1056.60"
},
{
"binary_name": "linux-image-unsigned-5.6.0-1056-oem",
"binary_version": "5.6.0-1056.60"
},
{
"binary_name": "linux-modules-5.6.0-1056-oem",
"binary_version": "5.6.0-1056.60"
},
{
"binary_name": "linux-oem-5.6-headers-5.6.0-1056",
"binary_version": "5.6.0-1056.60"
},
{
"binary_name": "linux-oem-5.6-tools-5.6.0-1056",
"binary_version": "5.6.0-1056.60"
},
{
"binary_name": "linux-oem-5.6-tools-host",
"binary_version": "5.6.0-1056.60"
},
{
"binary_name": "linux-tools-5.6.0-1056-oem",
"binary_version": "5.6.0-1056.60"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:20.04:LTS",
"name": "linux-oem-5.6",
"purl": "pkg:deb/ubuntu/linux-oem-5.6@5.6.0-1056.60?arch=source\u0026distro=focal"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.6.0-1007.7",
"5.6.0-1008.8",
"5.6.0-1010.10",
"5.6.0-1011.11",
"5.6.0-1013.13",
"5.6.0-1017.17",
"5.6.0-1018.18",
"5.6.0-1020.20",
"5.6.0-1021.21",
"5.6.0-1023.23",
"5.6.0-1026.26",
"5.6.0-1027.27",
"5.6.0-1028.28",
"5.6.0-1031.32",
"5.6.0-1032.33",
"5.6.0-1033.35",
"5.6.0-1034.36",
"5.6.0-1035.37",
"5.6.0-1036.39",
"5.6.0-1039.43",
"5.6.0-1042.46",
"5.6.0-1047.51",
"5.6.0-1048.52",
"5.6.0-1050.54",
"5.6.0-1052.56",
"5.6.0-1053.57",
"5.6.0-1054.58",
"5.6.0-1055.59",
"5.6.0-1056.60"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-buildinfo-5.11.0-1028-oracle",
"binary_version": "5.11.0-1028.31~20.04.1"
},
{
"binary_name": "linux-headers-5.11.0-1028-oracle",
"binary_version": "5.11.0-1028.31~20.04.1"
},
{
"binary_name": "linux-image-unsigned-5.11.0-1028-oracle",
"binary_version": "5.11.0-1028.31~20.04.1"
},
{
"binary_name": "linux-modules-5.11.0-1028-oracle",
"binary_version": "5.11.0-1028.31~20.04.1"
},
{
"binary_name": "linux-modules-extra-5.11.0-1028-oracle",
"binary_version": "5.11.0-1028.31~20.04.1"
},
{
"binary_name": "linux-oracle-5.11-headers-5.11.0-1028",
"binary_version": "5.11.0-1028.31~20.04.1"
},
{
"binary_name": "linux-oracle-5.11-tools-5.11.0-1028",
"binary_version": "5.11.0-1028.31~20.04.1"
},
{
"binary_name": "linux-tools-5.11.0-1028-oracle",
"binary_version": "5.11.0-1028.31~20.04.1"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:20.04:LTS",
"name": "linux-oracle-5.11",
"purl": "pkg:deb/ubuntu/linux-oracle-5.11@5.11.0-1028.31~20.04.1?arch=source\u0026distro=focal"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.11.0-1008.8~20.04.1",
"5.11.0-1013.14~20.04.1",
"5.11.0-1016.17~20.04.1",
"5.11.0-1017.18~20.04.1",
"5.11.0-1019.20~20.04.1",
"5.11.0-1020.21~20.04.1",
"5.11.0-1021.22~20.04.1",
"5.11.0-1022.23~20.04.1",
"5.11.0-1023.24~20.04.1",
"5.11.0-1025.27~20.04.1",
"5.11.0-1027.30~20.04.1",
"5.11.0-1028.31~20.04.1"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-buildinfo-5.13.0-1036-oracle",
"binary_version": "5.13.0-1036.43~20.04.1"
},
{
"binary_name": "linux-headers-5.13.0-1036-oracle",
"binary_version": "5.13.0-1036.43~20.04.1"
},
{
"binary_name": "linux-image-unsigned-5.13.0-1036-oracle",
"binary_version": "5.13.0-1036.43~20.04.1"
},
{
"binary_name": "linux-modules-5.13.0-1036-oracle",
"binary_version": "5.13.0-1036.43~20.04.1"
},
{
"binary_name": "linux-modules-extra-5.13.0-1036-oracle",
"binary_version": "5.13.0-1036.43~20.04.1"
},
{
"binary_name": "linux-oracle-5.13-headers-5.13.0-1036",
"binary_version": "5.13.0-1036.43~20.04.1"
},
{
"binary_name": "linux-oracle-5.13-tools-5.13.0-1036",
"binary_version": "5.13.0-1036.43~20.04.1"
},
{
"binary_name": "linux-tools-5.13.0-1036-oracle",
"binary_version": "5.13.0-1036.43~20.04.1"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:20.04:LTS",
"name": "linux-oracle-5.13",
"purl": "pkg:deb/ubuntu/linux-oracle-5.13@5.13.0-1036.43~20.04.1?arch=source\u0026distro=focal"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.13.0-1011.13~20.04.2",
"5.13.0-1015.19~20.04.1",
"5.13.0-1016.20~20.04.1",
"5.13.0-1018.22~20.04.1",
"5.13.0-1021.26~20.04.1",
"5.13.0-1025.30~20.04.1",
"5.13.0-1027.32~20.04.1",
"5.13.0-1028.33~20.04.1",
"5.13.0-1030.35~20.04.1",
"5.13.0-1033.39~20.04.1",
"5.13.0-1034.40~20.04.1",
"5.13.0-1036.43~20.04.1"
]
},
{
"ecosystem_specific": {
"availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
"binaries": [
{
"binary_name": "linux-buildinfo-5.15.0-1106-oracle",
"binary_version": "5.15.0-1106.112~20.04.1"
},
{
"binary_name": "linux-headers-5.15.0-1106-oracle",
"binary_version": "5.15.0-1106.112~20.04.1"
},
{
"binary_name": "linux-image-unsigned-5.15.0-1106-oracle",
"binary_version": "5.15.0-1106.112~20.04.1"
},
{
"binary_name": "linux-modules-5.15.0-1106-oracle",
"binary_version": "5.15.0-1106.112~20.04.1"
},
{
"binary_name": "linux-modules-extra-5.15.0-1106-oracle",
"binary_version": "5.15.0-1106.112~20.04.1"
},
{
"binary_name": "linux-oracle-5.15-headers-5.15.0-1106",
"binary_version": "5.15.0-1106.112~20.04.1"
},
{
"binary_name": "linux-oracle-5.15-tools-5.15.0-1106",
"binary_version": "5.15.0-1106.112~20.04.1"
},
{
"binary_name": "linux-tools-5.15.0-1106-oracle",
"binary_version": "5.15.0-1106.112~20.04.1"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:Pro:20.04:LTS",
"name": "linux-oracle-5.15",
"purl": "pkg:deb/ubuntu/linux-oracle-5.15@5.15.0-1106.112~20.04.1?arch=source\u0026distro=esm-infra/focal"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "5.15.0-1106.112~20.04.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.15.0-1007.9~20.04.1",
"5.15.0-1013.17~20.04.1",
"5.15.0-1016.20~20.04.1",
"5.15.0-1017.22~20.04.1",
"5.15.0-1018.23~20.04.1",
"5.15.0-1019.24~20.04.1",
"5.15.0-1021.27~20.04.1",
"5.15.0-1022.28~20.04.1",
"5.15.0-1025.31~20.04.2",
"5.15.0-1027.33~20.04.1",
"5.15.0-1029.35~20.04.1",
"5.15.0-1030.36~20.04.1",
"5.15.0-1032.38~20.04.1",
"5.15.0-1033.39~20.04.1",
"5.15.0-1034.40~20.04.1",
"5.15.0-1035.41~20.04.1",
"5.15.0-1036.42~20.04.1",
"5.15.0-1037.43~20.04.1",
"5.15.0-1038.44~20.04.1",
"5.15.0-1039.45~20.04.1",
"5.15.0-1040.46~20.04.1",
"5.15.0-1041.47~20.04.1",
"5.15.0-1042.48~20.04.1",
"5.15.0-1044.50~20.04.1",
"5.15.0-1045.51~20.04.1",
"5.15.0-1046.52~20.04.1",
"5.15.0-1047.53~20.04.1",
"5.15.0-1048.54~20.04.1",
"5.15.0-1049.55~20.04.1",
"5.15.0-1050.56~20.04.1",
"5.15.0-1051.57~20.04.1",
"5.15.0-1052.58~20.04.1",
"5.15.0-1053.59~20.04.1",
"5.15.0-1054.60~20.04.1",
"5.15.0-1055.61~20.04.1",
"5.15.0-1058.64~20.04.1",
"5.15.0-1059.65~20.04.1",
"5.15.0-1061.67~20.04.1",
"5.15.0-1062.68~20.04.1",
"5.15.0-1063.69~20.04.1",
"5.15.0-1065.71~20.04.1",
"5.15.0-1066.72~20.04.1",
"5.15.0-1067.73~20.04.1",
"5.15.0-1068.74~20.04.1",
"5.15.0-1069.75~20.04.1",
"5.15.0-1070.76~20.04.1",
"5.15.0-1071.77~20.04.1",
"5.15.0-1072.78~20.04.1",
"5.15.0-1073.79~20.04.1",
"5.15.0-1074.80~20.04.1",
"5.15.0-1075.81~20.04.1",
"5.15.0-1076.82~20.04.1",
"5.15.0-1077.83~20.04.1",
"5.15.0-1078.84~20.04.1",
"5.15.0-1079.85~20.04.1",
"5.15.0-1080.86~20.04.1",
"5.15.0-1081.87~20.04.1",
"5.15.0-1083.89~20.04.1",
"5.15.0-1084.90~20.04.1",
"5.15.0-1085.91~20.04.3",
"5.15.0-1086.92~20.04.1",
"5.15.0-1088.94~20.04.1",
"5.15.0-1090.96~20.04.1",
"5.15.0-1091.97~20.04.1",
"5.15.0-1092.98~20.04.1",
"5.15.0-1093.99~20.04.1",
"5.15.0-1094.100~20.04.1",
"5.15.0-1095.101~20.04.1",
"5.15.0-1096.102~20.04.1",
"5.15.0-1097.103~20.04.1",
"5.15.0-1098.104~20.04.1",
"5.15.0-1100.106~20.04.1",
"5.15.0-1101.107~20.04.1",
"5.15.0-1102.108~20.04.1",
"5.15.0-1104.110~20.04.1"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-buildinfo-5.8.0-1038-oracle",
"binary_version": "5.8.0-1038.39~20.04.1"
},
{
"binary_name": "linux-headers-5.8.0-1038-oracle",
"binary_version": "5.8.0-1038.39~20.04.1"
},
{
"binary_name": "linux-image-unsigned-5.8.0-1038-oracle",
"binary_version": "5.8.0-1038.39~20.04.1"
},
{
"binary_name": "linux-modules-5.8.0-1038-oracle",
"binary_version": "5.8.0-1038.39~20.04.1"
},
{
"binary_name": "linux-modules-extra-5.8.0-1038-oracle",
"binary_version": "5.8.0-1038.39~20.04.1"
},
{
"binary_name": "linux-oracle-5.8-headers-5.8.0-1038",
"binary_version": "5.8.0-1038.39~20.04.1"
},
{
"binary_name": "linux-oracle-5.8-tools-5.8.0-1038",
"binary_version": "5.8.0-1038.39~20.04.1"
},
{
"binary_name": "linux-tools-5.8.0-1038-oracle",
"binary_version": "5.8.0-1038.39~20.04.1"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:20.04:LTS",
"name": "linux-oracle-5.8",
"purl": "pkg:deb/ubuntu/linux-oracle-5.8@5.8.0-1038.39~20.04.1?arch=source\u0026distro=focal"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.8.0-1031.32~20.04.2",
"5.8.0-1033.34~20.04.1",
"5.8.0-1034.35~20.04.2",
"5.8.0-1037.38~20.04.1",
"5.8.0-1038.39~20.04.1"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-buildinfo-5.4.0-1006-raspi2",
"binary_version": "5.4.0-1006.6"
},
{
"binary_name": "linux-headers-5.4.0-1006-raspi2",
"binary_version": "5.4.0-1006.6"
},
{
"binary_name": "linux-image-5.4.0-1006-raspi2",
"binary_version": "5.4.0-1006.6"
},
{
"binary_name": "linux-modules-5.4.0-1006-raspi2",
"binary_version": "5.4.0-1006.6"
},
{
"binary_name": "linux-raspi2-headers-5.4.0-1006",
"binary_version": "5.4.0-1006.6"
},
{
"binary_name": "linux-raspi2-tools-5.4.0-1006",
"binary_version": "5.4.0-1006.6"
},
{
"binary_name": "linux-tools-5.4.0-1006-raspi2",
"binary_version": "5.4.0-1006.6"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:20.04:LTS",
"name": "linux-raspi2",
"purl": "pkg:deb/ubuntu/linux-raspi2@5.4.0-1006.6?arch=source\u0026distro=focal"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.3.0-1007.8",
"5.3.0-1014.16",
"5.3.0-1015.17",
"5.3.0-1017.19",
"5.4.0-1004.4",
"5.4.0-1006.6"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "block-modules-5.4.0-40-generic-di",
"binary_version": "5.4.0-40.45"
},
{
"binary_name": "crypto-modules-5.4.0-40-generic-di",
"binary_version": "5.4.0-40.45"
},
{
"binary_name": "fat-modules-5.4.0-40-generic-di",
"binary_version": "5.4.0-40.45"
},
{
"binary_name": "firewire-core-modules-5.4.0-40-generic-di",
"binary_version": "5.4.0-40.45"
},
{
"binary_name": "fs-core-modules-5.4.0-40-generic-di",
"binary_version": "5.4.0-40.45"
},
{
"binary_name": "fs-secondary-modules-5.4.0-40-generic-di",
"binary_version": "5.4.0-40.45"
},
{
"binary_name": "input-modules-5.4.0-40-generic-di",
"binary_version": "5.4.0-40.45"
},
{
"binary_name": "ipmi-modules-5.4.0-40-generic-di",
"binary_version": "5.4.0-40.45"
},
{
"binary_name": "kernel-image-5.4.0-40-generic-di",
"binary_version": "5.4.0-40.45"
},
{
"binary_name": "linux-buildinfo-5.4.0-40-generic",
"binary_version": "5.4.0-40.45"
},
{
"binary_name": "linux-headers-5.4.0-40-generic",
"binary_version": "5.4.0-40.45"
},
{
"binary_name": "linux-image-5.4.0-40-generic",
"binary_version": "5.4.0-40.45"
},
{
"binary_name": "linux-modules-5.4.0-40-generic",
"binary_version": "5.4.0-40.45"
},
{
"binary_name": "linux-modules-extra-5.4.0-40-generic",
"binary_version": "5.4.0-40.45"
},
{
"binary_name": "linux-riscv-headers-5.4.0-40",
"binary_version": "5.4.0-40.45"
},
{
"binary_name": "linux-riscv-tools-5.4.0-40",
"binary_version": "5.4.0-40.45"
},
{
"binary_name": "linux-tools-5.4.0-40-generic",
"binary_version": "5.4.0-40.45"
},
{
"binary_name": "linux-udebs-generic",
"binary_version": "5.4.0-40.45"
},
{
"binary_name": "md-modules-5.4.0-40-generic-di",
"binary_version": "5.4.0-40.45"
},
{
"binary_name": "message-modules-5.4.0-40-generic-di",
"binary_version": "5.4.0-40.45"
},
{
"binary_name": "mouse-modules-5.4.0-40-generic-di",
"binary_version": "5.4.0-40.45"
},
{
"binary_name": "multipath-modules-5.4.0-40-generic-di",
"binary_version": "5.4.0-40.45"
},
{
"binary_name": "nfs-modules-5.4.0-40-generic-di",
"binary_version": "5.4.0-40.45"
},
{
"binary_name": "nic-modules-5.4.0-40-generic-di",
"binary_version": "5.4.0-40.45"
},
{
"binary_name": "nic-shared-modules-5.4.0-40-generic-di",
"binary_version": "5.4.0-40.45"
},
{
"binary_name": "nic-usb-modules-5.4.0-40-generic-di",
"binary_version": "5.4.0-40.45"
},
{
"binary_name": "parport-modules-5.4.0-40-generic-di",
"binary_version": "5.4.0-40.45"
},
{
"binary_name": "pata-modules-5.4.0-40-generic-di",
"binary_version": "5.4.0-40.45"
},
{
"binary_name": "plip-modules-5.4.0-40-generic-di",
"binary_version": "5.4.0-40.45"
},
{
"binary_name": "ppp-modules-5.4.0-40-generic-di",
"binary_version": "5.4.0-40.45"
},
{
"binary_name": "sata-modules-5.4.0-40-generic-di",
"binary_version": "5.4.0-40.45"
},
{
"binary_name": "scsi-modules-5.4.0-40-generic-di",
"binary_version": "5.4.0-40.45"
},
{
"binary_name": "storage-core-modules-5.4.0-40-generic-di",
"binary_version": "5.4.0-40.45"
},
{
"binary_name": "usb-modules-5.4.0-40-generic-di",
"binary_version": "5.4.0-40.45"
},
{
"binary_name": "virtio-modules-5.4.0-40-generic-di",
"binary_version": "5.4.0-40.45"
},
{
"binary_name": "vlan-modules-5.4.0-40-generic-di",
"binary_version": "5.4.0-40.45"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:20.04:LTS",
"name": "linux-riscv",
"purl": "pkg:deb/ubuntu/linux-riscv@5.4.0-40.45?arch=source\u0026distro=focal"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.4.0-24.28",
"5.4.0-26.30",
"5.4.0-27.31",
"5.4.0-28.32",
"5.4.0-30.34",
"5.4.0-31.35",
"5.4.0-33.37",
"5.4.0-34.38",
"5.4.0-36.41",
"5.4.0-37.42",
"5.4.0-39.44",
"5.4.0-40.45"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-buildinfo-5.11.0-1031-generic",
"binary_version": "5.11.0-1031.35"
},
{
"binary_name": "linux-headers-5.11.0-1031-generic",
"binary_version": "5.11.0-1031.35"
},
{
"binary_name": "linux-image-5.11.0-1031-generic",
"binary_version": "5.11.0-1031.35"
},
{
"binary_name": "linux-modules-5.11.0-1031-generic",
"binary_version": "5.11.0-1031.35"
},
{
"binary_name": "linux-modules-extra-5.11.0-1031-generic",
"binary_version": "5.11.0-1031.35"
},
{
"binary_name": "linux-riscv-5.11-headers-5.11.0-1031",
"binary_version": "5.11.0-1031.35"
},
{
"binary_name": "linux-riscv-5.11-tools-5.11.0-1031",
"binary_version": "5.11.0-1031.35"
},
{
"binary_name": "linux-tools-5.11.0-1031-generic",
"binary_version": "5.11.0-1031.35"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:20.04:LTS",
"name": "linux-riscv-5.11",
"purl": "pkg:deb/ubuntu/linux-riscv-5.11@5.11.0-1031.35?arch=source\u0026distro=focal"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.11.0-1015.16~20.04.1",
"5.11.0-1017.18~20.04.1",
"5.11.0-1018.19~20.04.2",
"5.11.0-1020.21~20.04.1",
"5.11.0-1021.22~20.04.1",
"5.11.0-1022.23~20.04.1",
"5.11.0-1023.24~20.04.1",
"5.11.0-1024.25~20.04.1",
"5.11.0-1026.28~20.04.1",
"5.11.0-1028.31~20.04.1",
"5.11.0-1029.32~20.04.1",
"5.11.0-1030.34",
"5.11.0-1031.35"
]
},
{
"ecosystem_specific": {
"availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
"binaries": [
{
"binary_name": "linux-buildinfo-5.15.0-1103-generic",
"binary_version": "5.15.0-1103.107~20.04.1"
},
{
"binary_name": "linux-headers-5.15.0-1103-generic",
"binary_version": "5.15.0-1103.107~20.04.1"
},
{
"binary_name": "linux-image-5.15.0-1103-generic",
"binary_version": "5.15.0-1103.107~20.04.1"
},
{
"binary_name": "linux-modules-5.15.0-1103-generic",
"binary_version": "5.15.0-1103.107~20.04.1"
},
{
"binary_name": "linux-modules-extra-5.15.0-1103-generic",
"binary_version": "5.15.0-1103.107~20.04.1"
},
{
"binary_name": "linux-riscv-5.15-headers-5.15.0-1103",
"binary_version": "5.15.0-1103.107~20.04.1"
},
{
"binary_name": "linux-riscv-5.15-tools-5.15.0-1103",
"binary_version": "5.15.0-1103.107~20.04.1"
},
{
"binary_name": "linux-tools-5.15.0-1103-generic",
"binary_version": "5.15.0-1103.107~20.04.1"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:Pro:20.04:LTS",
"name": "linux-riscv-5.15",
"purl": "pkg:deb/ubuntu/linux-riscv-5.15@5.15.0-1103.107~20.04.1?arch=source\u0026distro=esm-infra/focal"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "5.15.0-1103.107~20.04.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.15.0-1015.17~20.04.1",
"5.15.0-1017.19~20.04.1",
"5.15.0-1018.21~20.04.1",
"5.15.0-1019.22~20.04.1",
"5.15.0-1022.26~20.04.1",
"5.15.0-1023.27~20.04.1",
"5.15.0-1026.30~20.04.2",
"5.15.0-1027.31~20.04.1",
"5.15.0-1028.32~20.04.1",
"5.15.0-1029.33~20.04.1",
"5.15.0-1030.34~20.04.1",
"5.15.0-1031.35~20.04.1",
"5.15.0-1032.36~20.04.1",
"5.15.0-1033.37~20.04.1",
"5.15.0-1034.38~20.04.1",
"5.15.0-1035.39~20.04.1",
"5.15.0-1036.40~20.04.2",
"5.15.0-1037.41~20.04.2",
"5.15.0-1038.42~20.04.2",
"5.15.0-1039.43~20.04.2",
"5.15.0-1040.44~20.04.3",
"5.15.0-1041.45~20.04.1",
"5.15.0-1043.47~20.04.1",
"5.15.0-1044.48~20.04.1",
"5.15.0-1045.49~20.04.1",
"5.15.0-1046.50~20.04.1",
"5.15.0-1047.51~20.04.1",
"5.15.0-1048.52~20.04.1",
"5.15.0-1049.53~20.04.2",
"5.15.0-1050.54~20.04.1",
"5.15.0-1051.55~20.04.1",
"5.15.0-1052.56~20.04.1",
"5.15.0-1053.57~20.04.1",
"5.15.0-1056.60~20.04.1",
"5.15.0-1057.61~20.04.1",
"5.15.0-1058.62~20.04.1",
"5.15.0-1059.63~20.04.1",
"5.15.0-1060.64~20.04.1",
"5.15.0-1061.65~20.04.1",
"5.15.0-1062.66~20.04.1",
"5.15.0-1063.67~20.04.1",
"5.15.0-1064.68~20.04.1",
"5.15.0-1065.69~20.04.1",
"5.15.0-1066.70~20.04.1",
"5.15.0-1067.71~20.04.1",
"5.15.0-1068.72~20.04.1",
"5.15.0-1069.73~20.04.1",
"5.15.0-1070.74~20.04.1",
"5.15.0-1071.75~20.04.1",
"5.15.0-1072.76~20.04.1",
"5.15.0-1073.77~20.04.1",
"5.15.0-1074.78~20.04.1",
"5.15.0-1075.79~20.04.1",
"5.15.0-1076.80~20.04.1",
"5.15.0-1077.81~20.04.1",
"5.15.0-1078.82~20.04.1",
"5.15.0-1079.83~20.04.1",
"5.15.0-1081.85~20.04.1",
"5.15.0-1082.86~20.04.1",
"5.15.0-1083.87~20.04.1",
"5.15.0-1084.88~20.04.1",
"5.15.0-1085.89~20.04.1",
"5.15.0-1086.90~20.04.1",
"5.15.0-1087.91~20.04.1",
"5.15.0-1088.92~20.04.1",
"5.15.0-1090.94~20.04.1",
"5.15.0-1091.95~20.04.1",
"5.15.0-1092.96~20.04.1",
"5.15.0-1093.97~20.04.2",
"5.15.0-1094.98~20.04.1",
"5.15.0-1095.99~20.04.1",
"5.15.0-1096.100~20.04.1",
"5.15.0-1097.101~20.04.1",
"5.15.0-1098.102~20.04.1",
"5.15.0-1099.103~20.04.1",
"5.15.0-1100.104~20.04.1",
"5.15.0-1102.106~20.04.1"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "block-modules-5.8.0-29-generic-di",
"binary_version": "5.8.0-29.31~20.04.1"
},
{
"binary_name": "crypto-modules-5.8.0-29-generic-di",
"binary_version": "5.8.0-29.31~20.04.1"
},
{
"binary_name": "fat-modules-5.8.0-29-generic-di",
"binary_version": "5.8.0-29.31~20.04.1"
},
{
"binary_name": "firewire-core-modules-5.8.0-29-generic-di",
"binary_version": "5.8.0-29.31~20.04.1"
},
{
"binary_name": "fs-core-modules-5.8.0-29-generic-di",
"binary_version": "5.8.0-29.31~20.04.1"
},
{
"binary_name": "fs-secondary-modules-5.8.0-29-generic-di",
"binary_version": "5.8.0-29.31~20.04.1"
},
{
"binary_name": "input-modules-5.8.0-29-generic-di",
"binary_version": "5.8.0-29.31~20.04.1"
},
{
"binary_name": "ipmi-modules-5.8.0-29-generic-di",
"binary_version": "5.8.0-29.31~20.04.1"
},
{
"binary_name": "kernel-image-5.8.0-29-generic-di",
"binary_version": "5.8.0-29.31~20.04.1"
},
{
"binary_name": "linux-buildinfo-5.8.0-29-generic",
"binary_version": "5.8.0-29.31~20.04.1"
},
{
"binary_name": "linux-headers-5.8.0-29-generic",
"binary_version": "5.8.0-29.31~20.04.1"
},
{
"binary_name": "linux-image-5.8.0-29-generic",
"binary_version": "5.8.0-29.31~20.04.1"
},
{
"binary_name": "linux-modules-5.8.0-29-generic",
"binary_version": "5.8.0-29.31~20.04.1"
},
{
"binary_name": "linux-modules-extra-5.8.0-29-generic",
"binary_version": "5.8.0-29.31~20.04.1"
},
{
"binary_name": "linux-riscv-5.8-headers-5.8.0-29",
"binary_version": "5.8.0-29.31~20.04.1"
},
{
"binary_name": "linux-riscv-5.8-tools-5.8.0-29",
"binary_version": "5.8.0-29.31~20.04.1"
},
{
"binary_name": "linux-tools-5.8.0-29-generic",
"binary_version": "5.8.0-29.31~20.04.1"
},
{
"binary_name": "linux-udebs-generic",
"binary_version": "5.8.0-29.31~20.04.1"
},
{
"binary_name": "md-modules-5.8.0-29-generic-di",
"binary_version": "5.8.0-29.31~20.04.1"
},
{
"binary_name": "message-modules-5.8.0-29-generic-di",
"binary_version": "5.8.0-29.31~20.04.1"
},
{
"binary_name": "mouse-modules-5.8.0-29-generic-di",
"binary_version": "5.8.0-29.31~20.04.1"
},
{
"binary_name": "multipath-modules-5.8.0-29-generic-di",
"binary_version": "5.8.0-29.31~20.04.1"
},
{
"binary_name": "nfs-modules-5.8.0-29-generic-di",
"binary_version": "5.8.0-29.31~20.04.1"
},
{
"binary_name": "nic-modules-5.8.0-29-generic-di",
"binary_version": "5.8.0-29.31~20.04.1"
},
{
"binary_name": "nic-shared-modules-5.8.0-29-generic-di",
"binary_version": "5.8.0-29.31~20.04.1"
},
{
"binary_name": "nic-usb-modules-5.8.0-29-generic-di",
"binary_version": "5.8.0-29.31~20.04.1"
},
{
"binary_name": "parport-modules-5.8.0-29-generic-di",
"binary_version": "5.8.0-29.31~20.04.1"
},
{
"binary_name": "pata-modules-5.8.0-29-generic-di",
"binary_version": "5.8.0-29.31~20.04.1"
},
{
"binary_name": "plip-modules-5.8.0-29-generic-di",
"binary_version": "5.8.0-29.31~20.04.1"
},
{
"binary_name": "ppp-modules-5.8.0-29-generic-di",
"binary_version": "5.8.0-29.31~20.04.1"
},
{
"binary_name": "sata-modules-5.8.0-29-generic-di",
"binary_version": "5.8.0-29.31~20.04.1"
},
{
"binary_name": "scsi-modules-5.8.0-29-generic-di",
"binary_version": "5.8.0-29.31~20.04.1"
},
{
"binary_name": "storage-core-modules-5.8.0-29-generic-di",
"binary_version": "5.8.0-29.31~20.04.1"
},
{
"binary_name": "usb-modules-5.8.0-29-generic-di",
"binary_version": "5.8.0-29.31~20.04.1"
},
{
"binary_name": "virtio-modules-5.8.0-29-generic-di",
"binary_version": "5.8.0-29.31~20.04.1"
},
{
"binary_name": "vlan-modules-5.8.0-29-generic-di",
"binary_version": "5.8.0-29.31~20.04.1"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:20.04:LTS",
"name": "linux-riscv-5.8",
"purl": "pkg:deb/ubuntu/linux-riscv-5.8@5.8.0-29.31~20.04.1?arch=source\u0026distro=focal"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.8.0-14.16~20.04.1",
"5.8.0-14.16~20.04.3",
"5.8.0-16.18~20.04.1",
"5.8.0-17.19~20.04.1",
"5.8.0-18.20~20.04.1",
"5.8.0-20.22~20.04.1",
"5.8.0-22.24~20.04.1",
"5.8.0-25.27~20.04.1",
"5.8.0-26.28~20.04.1",
"5.8.0-29.31~20.04.1"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "linux-buildinfo-5.15.0-181-generic",
"binary_version": "5.15.0-181.191"
},
{
"binary_name": "linux-buildinfo-5.15.0-181-generic-64k",
"binary_version": "5.15.0-181.191"
},
{
"binary_name": "linux-buildinfo-5.15.0-181-generic-lpae",
"binary_version": "5.15.0-181.191"
},
{
"binary_name": "linux-cloud-tools-5.15.0-181",
"binary_version": "5.15.0-181.191"
},
{
"binary_name": "linux-cloud-tools-5.15.0-181-generic",
"binary_version": "5.15.0-181.191"
},
{
"binary_name": "linux-cloud-tools-common",
"binary_version": "5.15.0-181.191"
},
{
"binary_name": "linux-headers-5.15.0-181",
"binary_version": "5.15.0-181.191"
},
{
"binary_name": "linux-headers-5.15.0-181-generic",
"binary_version": "5.15.0-181.191"
},
{
"binary_name": "linux-headers-5.15.0-181-generic-64k",
"binary_version": "5.15.0-181.191"
},
{
"binary_name": "linux-headers-5.15.0-181-generic-lpae",
"binary_version": "5.15.0-181.191"
},
{
"binary_name": "linux-image-5.15.0-181-generic",
"binary_version": "5.15.0-181.191"
},
{
"binary_name": "linux-image-5.15.0-181-generic-lpae",
"binary_version": "5.15.0-181.191"
},
{
"binary_name": "linux-image-unsigned-5.15.0-181-generic",
"binary_version": "5.15.0-181.191"
},
{
"binary_name": "linux-image-unsigned-5.15.0-181-generic-64k",
"binary_version": "5.15.0-181.191"
},
{
"binary_name": "linux-modules-5.15.0-181-generic",
"binary_version": "5.15.0-181.191"
},
{
"binary_name": "linux-modules-5.15.0-181-generic-64k",
"binary_version": "5.15.0-181.191"
},
{
"binary_name": "linux-modules-5.15.0-181-generic-lpae",
"binary_version": "5.15.0-181.191"
},
{
"binary_name": "linux-modules-extra-5.15.0-181-generic",
"binary_version": "5.15.0-181.191"
},
{
"binary_name": "linux-modules-iwlwifi-5.15.0-181-generic",
"binary_version": "5.15.0-181.191"
},
{
"binary_name": "linux-source-5.15.0",
"binary_version": "5.15.0-181.191"
},
{
"binary_name": "linux-tools-5.15.0-181",
"binary_version": "5.15.0-181.191"
},
{
"binary_name": "linux-tools-5.15.0-181-generic",
"binary_version": "5.15.0-181.191"
},
{
"binary_name": "linux-tools-5.15.0-181-generic-64k",
"binary_version": "5.15.0-181.191"
},
{
"binary_name": "linux-tools-5.15.0-181-generic-lpae",
"binary_version": "5.15.0-181.191"
},
{
"binary_name": "linux-tools-common",
"binary_version": "5.15.0-181.191"
},
{
"binary_name": "linux-tools-host",
"binary_version": "5.15.0-181.191"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "linux",
"purl": "pkg:deb/ubuntu/linux@5.15.0-181.191?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "5.15.0-181.191"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.13.0-19.19",
"5.15.0-17.17",
"5.15.0-18.18",
"5.15.0-22.22",
"5.15.0-23.23",
"5.15.0-25.25",
"5.15.0-27.28",
"5.15.0-30.31",
"5.15.0-33.34",
"5.15.0-35.36",
"5.15.0-37.39",
"5.15.0-39.42",
"5.15.0-40.43",
"5.15.0-41.44",
"5.15.0-43.46",
"5.15.0-46.49",
"5.15.0-47.51",
"5.15.0-48.54",
"5.15.0-50.56",
"5.15.0-52.58",
"5.15.0-53.59",
"5.15.0-56.62",
"5.15.0-57.63",
"5.15.0-58.64",
"5.15.0-60.66",
"5.15.0-67.74",
"5.15.0-69.76",
"5.15.0-70.77",
"5.15.0-71.78",
"5.15.0-72.79",
"5.15.0-73.80",
"5.15.0-75.82",
"5.15.0-76.83",
"5.15.0-78.85",
"5.15.0-79.86",
"5.15.0-82.91",
"5.15.0-83.92",
"5.15.0-84.93",
"5.15.0-86.96",
"5.15.0-87.97",
"5.15.0-88.98",
"5.15.0-89.99",
"5.15.0-91.101",
"5.15.0-92.102",
"5.15.0-94.104",
"5.15.0-97.107",
"5.15.0-100.110",
"5.15.0-101.111",
"5.15.0-102.112",
"5.15.0-105.115",
"5.15.0-106.116",
"5.15.0-107.117",
"5.15.0-112.122",
"5.15.0-113.123",
"5.15.0-116.126",
"5.15.0-117.127",
"5.15.0-118.128",
"5.15.0-119.129",
"5.15.0-121.131",
"5.15.0-122.132",
"5.15.0-124.134",
"5.15.0-125.135",
"5.15.0-126.136",
"5.15.0-127.137",
"5.15.0-128.138",
"5.15.0-130.140",
"5.15.0-131.141",
"5.15.0-133.144",
"5.15.0-134.145",
"5.15.0-135.146",
"5.15.0-136.147",
"5.15.0-138.148",
"5.15.0-139.149",
"5.15.0-140.150",
"5.15.0-141.151",
"5.15.0-142.152",
"5.15.0-143.153",
"5.15.0-144.157",
"5.15.0-151.161",
"5.15.0-152.162",
"5.15.0-153.163",
"5.15.0-156.166",
"5.15.0-157.167",
"5.15.0-160.170",
"5.15.0-161.171",
"5.15.0-163.173",
"5.15.0-164.174",
"5.15.0-168.178",
"5.15.0-170.180",
"5.15.0-171.181",
"5.15.0-173.183",
"5.15.0-174.184",
"5.15.0-176.186",
"5.15.0-177.187",
"5.15.0-179.189"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-allwinner-5.19-headers-5.19.0-1015",
"binary_version": "5.19.0-1015.15~22.04.1"
},
{
"binary_name": "linux-allwinner-5.19-tools-5.19.0-1015",
"binary_version": "5.19.0-1015.15~22.04.1"
},
{
"binary_name": "linux-buildinfo-5.19.0-1015-allwinner",
"binary_version": "5.19.0-1015.15~22.04.1"
},
{
"binary_name": "linux-headers-5.19.0-1015-allwinner",
"binary_version": "5.19.0-1015.15~22.04.1"
},
{
"binary_name": "linux-image-5.19.0-1015-allwinner",
"binary_version": "5.19.0-1015.15~22.04.1"
},
{
"binary_name": "linux-modules-5.19.0-1015-allwinner",
"binary_version": "5.19.0-1015.15~22.04.1"
},
{
"binary_name": "linux-modules-extra-5.19.0-1015-allwinner",
"binary_version": "5.19.0-1015.15~22.04.1"
},
{
"binary_name": "linux-tools-5.19.0-1015-allwinner",
"binary_version": "5.19.0-1015.15~22.04.1"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "linux-allwinner-5.19",
"purl": "pkg:deb/ubuntu/linux-allwinner-5.19@5.19.0-1015.15~22.04.1?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.19.0-1007.7~22.04.1",
"5.19.0-1009.9~22.04.1",
"5.19.0-1010.10~22.04.1",
"5.19.0-1011.11~22.04.1",
"5.19.0-1012.12~22.04.1",
"5.19.0-1013.13~22.04.1",
"5.19.0-1014.14~22.04.1",
"5.19.0-1015.15~22.04.1"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "linux-aws-cloud-tools-5.15.0-1109",
"binary_version": "5.15.0-1109.116"
},
{
"binary_name": "linux-aws-headers-5.15.0-1109",
"binary_version": "5.15.0-1109.116"
},
{
"binary_name": "linux-aws-tools-5.15.0-1109",
"binary_version": "5.15.0-1109.116"
},
{
"binary_name": "linux-buildinfo-5.15.0-1109-aws",
"binary_version": "5.15.0-1109.116"
},
{
"binary_name": "linux-buildinfo-5.15.0-1109-aws-64k",
"binary_version": "5.15.0-1109.116"
},
{
"binary_name": "linux-cloud-tools-5.15.0-1109-aws",
"binary_version": "5.15.0-1109.116"
},
{
"binary_name": "linux-cloud-tools-5.15.0-1109-aws-64k",
"binary_version": "5.15.0-1109.116"
},
{
"binary_name": "linux-headers-5.15.0-1109-aws",
"binary_version": "5.15.0-1109.116"
},
{
"binary_name": "linux-headers-5.15.0-1109-aws-64k",
"binary_version": "5.15.0-1109.116"
},
{
"binary_name": "linux-image-unsigned-5.15.0-1109-aws",
"binary_version": "5.15.0-1109.116"
},
{
"binary_name": "linux-image-unsigned-5.15.0-1109-aws-64k",
"binary_version": "5.15.0-1109.116"
},
{
"binary_name": "linux-modules-5.15.0-1109-aws",
"binary_version": "5.15.0-1109.116"
},
{
"binary_name": "linux-modules-5.15.0-1109-aws-64k",
"binary_version": "5.15.0-1109.116"
},
{
"binary_name": "linux-modules-extra-5.15.0-1109-aws",
"binary_version": "5.15.0-1109.116"
},
{
"binary_name": "linux-modules-extra-5.15.0-1109-aws-64k",
"binary_version": "5.15.0-1109.116"
},
{
"binary_name": "linux-tools-5.15.0-1109-aws",
"binary_version": "5.15.0-1109.116"
},
{
"binary_name": "linux-tools-5.15.0-1109-aws-64k",
"binary_version": "5.15.0-1109.116"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "linux-aws",
"purl": "pkg:deb/ubuntu/linux-aws@5.15.0-1109.116?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "5.15.0-1109.116"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.13.0-1005.6",
"5.15.0-1002.4",
"5.15.0-1003.5",
"5.15.0-1004.6",
"5.15.0-1005.7",
"5.15.0-1008.10",
"5.15.0-1009.11",
"5.15.0-1011.14",
"5.15.0-1013.17",
"5.15.0-1014.18",
"5.15.0-1015.19",
"5.15.0-1017.21",
"5.15.0-1019.23",
"5.15.0-1020.24",
"5.15.0-1021.25",
"5.15.0-1022.26",
"5.15.0-1023.27",
"5.15.0-1026.30",
"5.15.0-1027.31",
"5.15.0-1028.32",
"5.15.0-1030.34",
"5.15.0-1031.35",
"5.15.0-1033.37",
"5.15.0-1034.38",
"5.15.0-1035.39",
"5.15.0-1036.40",
"5.15.0-1037.41",
"5.15.0-1038.43",
"5.15.0-1039.44",
"5.15.0-1040.45",
"5.15.0-1042.47",
"5.15.0-1043.48",
"5.15.0-1044.49",
"5.15.0-1045.50",
"5.15.0-1047.52",
"5.15.0-1048.53",
"5.15.0-1049.54",
"5.15.0-1050.55",
"5.15.0-1051.56",
"5.15.0-1052.57",
"5.15.0-1053.58",
"5.15.0-1055.60",
"5.15.0-1056.61",
"5.15.0-1057.63",
"5.15.0-1060.66",
"5.15.0-1061.67",
"5.15.0-1062.68",
"5.15.0-1063.69",
"5.15.0-1064.70",
"5.15.0-1065.71",
"5.15.0-1066.72",
"5.15.0-1067.73",
"5.15.0-1068.74",
"5.15.0-1069.75",
"5.15.0-1070.76",
"5.15.0-1071.77",
"5.15.0-1072.78",
"5.15.0-1073.79",
"5.15.0-1076.83",
"5.15.0-1078.85",
"5.15.0-1079.86",
"5.15.0-1080.87",
"5.15.0-1081.88",
"5.15.0-1082.89",
"5.15.0-1083.90",
"5.15.0-1084.91",
"5.15.0-1085.92",
"5.15.0-1086.93",
"5.15.0-1087.94",
"5.15.0-1088.95",
"5.15.0-1089.96",
"5.15.0-1090.97",
"5.15.0-1091.98",
"5.15.0-1092.99",
"5.15.0-1093.100",
"5.15.0-1095.102",
"5.15.0-1096.103",
"5.15.0-1097.104",
"5.15.0-1098.105",
"5.15.0-1099.106",
"5.15.0-1100.107",
"5.15.0-1101.108",
"5.15.0-1103.110",
"5.15.0-1104.111",
"5.15.0-1105.112",
"5.15.0-1106.113",
"5.15.0-1108.115"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-aws-5.19-cloud-tools-5.19.0-1029",
"binary_version": "5.19.0-1029.30~22.04.1"
},
{
"binary_name": "linux-aws-5.19-headers-5.19.0-1029",
"binary_version": "5.19.0-1029.30~22.04.1"
},
{
"binary_name": "linux-aws-5.19-tools-5.19.0-1029",
"binary_version": "5.19.0-1029.30~22.04.1"
},
{
"binary_name": "linux-buildinfo-5.19.0-1029-aws",
"binary_version": "5.19.0-1029.30~22.04.1"
},
{
"binary_name": "linux-cloud-tools-5.19.0-1029-aws",
"binary_version": "5.19.0-1029.30~22.04.1"
},
{
"binary_name": "linux-headers-5.19.0-1029-aws",
"binary_version": "5.19.0-1029.30~22.04.1"
},
{
"binary_name": "linux-image-unsigned-5.19.0-1029-aws",
"binary_version": "5.19.0-1029.30~22.04.1"
},
{
"binary_name": "linux-modules-5.19.0-1029-aws",
"binary_version": "5.19.0-1029.30~22.04.1"
},
{
"binary_name": "linux-modules-extra-5.19.0-1029-aws",
"binary_version": "5.19.0-1029.30~22.04.1"
},
{
"binary_name": "linux-tools-5.19.0-1029-aws",
"binary_version": "5.19.0-1029.30~22.04.1"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "linux-aws-5.19",
"purl": "pkg:deb/ubuntu/linux-aws-5.19@5.19.0-1029.30~22.04.1?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.19.0-1019.20~22.04.1",
"5.19.0-1020.21~22.04.1",
"5.19.0-1022.23~22.04.1",
"5.19.0-1023.24~22.04.1",
"5.19.0-1024.25~22.04.1",
"5.19.0-1025.26~22.04.1",
"5.19.0-1026.27~22.04.1",
"5.19.0-1027.28~22.04.1",
"5.19.0-1028.29~22.04.1",
"5.19.0-1029.30~22.04.1"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-aws-6.2-cloud-tools-6.2.0-1018",
"binary_version": "6.2.0-1018.18~22.04.1"
},
{
"binary_name": "linux-aws-6.2-headers-6.2.0-1018",
"binary_version": "6.2.0-1018.18~22.04.1"
},
{
"binary_name": "linux-aws-6.2-tools-6.2.0-1018",
"binary_version": "6.2.0-1018.18~22.04.1"
},
{
"binary_name": "linux-buildinfo-6.2.0-1018-aws",
"binary_version": "6.2.0-1018.18~22.04.1"
},
{
"binary_name": "linux-cloud-tools-6.2.0-1018-aws",
"binary_version": "6.2.0-1018.18~22.04.1"
},
{
"binary_name": "linux-headers-6.2.0-1018-aws",
"binary_version": "6.2.0-1018.18~22.04.1"
},
{
"binary_name": "linux-image-unsigned-6.2.0-1018-aws",
"binary_version": "6.2.0-1018.18~22.04.1"
},
{
"binary_name": "linux-modules-6.2.0-1018-aws",
"binary_version": "6.2.0-1018.18~22.04.1"
},
{
"binary_name": "linux-modules-extra-6.2.0-1018-aws",
"binary_version": "6.2.0-1018.18~22.04.1"
},
{
"binary_name": "linux-tools-6.2.0-1018-aws",
"binary_version": "6.2.0-1018.18~22.04.1"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "linux-aws-6.2",
"purl": "pkg:deb/ubuntu/linux-aws-6.2@6.2.0-1018.18~22.04.1?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.2.0-1005.5~22.04.1",
"6.2.0-1006.6~22.04.1",
"6.2.0-1007.7~22.04.1",
"6.2.0-1008.8~22.04.1",
"6.2.0-1009.9~22.04.3",
"6.2.0-1010.10~22.04.1",
"6.2.0-1011.11~22.04.1",
"6.2.0-1012.12~22.04.1",
"6.2.0-1013.13~22.04.1",
"6.2.0-1014.14~22.04.1",
"6.2.0-1015.15~22.04.1",
"6.2.0-1016.16~22.04.1",
"6.2.0-1017.17~22.04.1",
"6.2.0-1018.18~22.04.1"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-aws-6.5-cloud-tools-6.5.0-1024",
"binary_version": "6.5.0-1024.24~22.04.1"
},
{
"binary_name": "linux-aws-6.5-headers-6.5.0-1024",
"binary_version": "6.5.0-1024.24~22.04.1"
},
{
"binary_name": "linux-aws-6.5-tools-6.5.0-1024",
"binary_version": "6.5.0-1024.24~22.04.1"
},
{
"binary_name": "linux-buildinfo-6.5.0-1024-aws",
"binary_version": "6.5.0-1024.24~22.04.1"
},
{
"binary_name": "linux-cloud-tools-6.5.0-1024-aws",
"binary_version": "6.5.0-1024.24~22.04.1"
},
{
"binary_name": "linux-headers-6.5.0-1024-aws",
"binary_version": "6.5.0-1024.24~22.04.1"
},
{
"binary_name": "linux-image-unsigned-6.5.0-1024-aws",
"binary_version": "6.5.0-1024.24~22.04.1"
},
{
"binary_name": "linux-modules-6.5.0-1024-aws",
"binary_version": "6.5.0-1024.24~22.04.1"
},
{
"binary_name": "linux-modules-extra-6.5.0-1024-aws",
"binary_version": "6.5.0-1024.24~22.04.1"
},
{
"binary_name": "linux-tools-6.5.0-1024-aws",
"binary_version": "6.5.0-1024.24~22.04.1"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "linux-aws-6.5",
"purl": "pkg:deb/ubuntu/linux-aws-6.5@6.5.0-1024.24~22.04.1?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.5.0-1008.8~22.04.1",
"6.5.0-1010.10~22.04.1",
"6.5.0-1011.11~22.04.1",
"6.5.0-1012.12~22.04.1",
"6.5.0-1014.14~22.04.1",
"6.5.0-1015.15~22.04.1",
"6.5.0-1016.16~22.04.1",
"6.5.0-1017.17~22.04.2",
"6.5.0-1018.18~22.04.1",
"6.5.0-1020.20~22.04.1",
"6.5.0-1021.21~22.04.1",
"6.5.0-1022.22~22.04.1",
"6.5.0-1023.23~22.04.1",
"6.5.0-1024.24~22.04.1"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "linux-aws-6.8-cloud-tools-6.8.0-1057",
"binary_version": "6.8.0-1057.60~22.04.1"
},
{
"binary_name": "linux-aws-6.8-headers-6.8.0-1057",
"binary_version": "6.8.0-1057.60~22.04.1"
},
{
"binary_name": "linux-aws-6.8-tools-6.8.0-1057",
"binary_version": "6.8.0-1057.60~22.04.1"
},
{
"binary_name": "linux-buildinfo-6.8.0-1057-aws",
"binary_version": "6.8.0-1057.60~22.04.1"
},
{
"binary_name": "linux-buildinfo-6.8.0-1057-aws-64k",
"binary_version": "6.8.0-1057.60~22.04.1"
},
{
"binary_name": "linux-cloud-tools-6.8.0-1057-aws",
"binary_version": "6.8.0-1057.60~22.04.1"
},
{
"binary_name": "linux-cloud-tools-6.8.0-1057-aws-64k",
"binary_version": "6.8.0-1057.60~22.04.1"
},
{
"binary_name": "linux-headers-6.8.0-1057-aws",
"binary_version": "6.8.0-1057.60~22.04.1"
},
{
"binary_name": "linux-headers-6.8.0-1057-aws-64k",
"binary_version": "6.8.0-1057.60~22.04.1"
},
{
"binary_name": "linux-image-unsigned-6.8.0-1057-aws",
"binary_version": "6.8.0-1057.60~22.04.1"
},
{
"binary_name": "linux-image-unsigned-6.8.0-1057-aws-64k",
"binary_version": "6.8.0-1057.60~22.04.1"
},
{
"binary_name": "linux-modules-6.8.0-1057-aws",
"binary_version": "6.8.0-1057.60~22.04.1"
},
{
"binary_name": "linux-modules-6.8.0-1057-aws-64k",
"binary_version": "6.8.0-1057.60~22.04.1"
},
{
"binary_name": "linux-modules-extra-6.8.0-1057-aws",
"binary_version": "6.8.0-1057.60~22.04.1"
},
{
"binary_name": "linux-modules-extra-6.8.0-1057-aws-64k",
"binary_version": "6.8.0-1057.60~22.04.1"
},
{
"binary_name": "linux-tools-6.8.0-1057-aws",
"binary_version": "6.8.0-1057.60~22.04.1"
},
{
"binary_name": "linux-tools-6.8.0-1057-aws-64k",
"binary_version": "6.8.0-1057.60~22.04.1"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "linux-aws-6.8",
"purl": "pkg:deb/ubuntu/linux-aws-6.8@6.8.0-1057.60~22.04.1?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.8.0-1057.60~22.04.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.8.0-1009.9~22.04.2",
"6.8.0-1010.10~22.04.2",
"6.8.0-1011.12~22.04.1",
"6.8.0-1013.14~22.04.1",
"6.8.0-1014.15~22.04.1",
"6.8.0-1015.16~22.04.1",
"6.8.0-1016.17~22.04.2",
"6.8.0-1017.18~22.04.1",
"6.8.0-1018.19~22.04.1",
"6.8.0-1019.21~22.04.1",
"6.8.0-1020.22~22.04.1",
"6.8.0-1021.23~22.04.1",
"6.8.0-1023.25~22.04.1",
"6.8.0-1024.26~22.04.1",
"6.8.0-1027.29~22.04.1",
"6.8.0-1028.30~22.04.1",
"6.8.0-1029.31~22.04.1",
"6.8.0-1030.32~22.04.1",
"6.8.0-1031.33~22.04.1",
"6.8.0-1032.34~22.04.1",
"6.8.0-1033.35~22.04.1",
"6.8.0-1035.37~22.04.1",
"6.8.0-1036.38~22.04.1",
"6.8.0-1039.41~22.04.1",
"6.8.0-1040.42~22.04.1",
"6.8.0-1041.43~22.04.1",
"6.8.0-1042.44~22.04.1",
"6.8.0-1043.45~22.04.1",
"6.8.0-1044.46~22.04.1",
"6.8.0-1045.47~22.04.1",
"6.8.0-1046.49~22.04.1",
"6.8.0-1047.50~22.04.1",
"6.8.0-1050.53~22.04.1",
"6.8.0-1051.54~22.04.1",
"6.8.0-1052.55~22.04.1",
"6.8.0-1053.56~22.04.1",
"6.8.0-1055.58~22.04.1"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "linux-azure-cloud-tools-5.15.0-1114",
"binary_version": "5.15.0-1114.123"
},
{
"binary_name": "linux-azure-headers-5.15.0-1114",
"binary_version": "5.15.0-1114.123"
},
{
"binary_name": "linux-azure-tools-5.15.0-1114",
"binary_version": "5.15.0-1114.123"
},
{
"binary_name": "linux-buildinfo-5.15.0-1114-azure",
"binary_version": "5.15.0-1114.123"
},
{
"binary_name": "linux-cloud-tools-5.15.0-1114-azure",
"binary_version": "5.15.0-1114.123"
},
{
"binary_name": "linux-headers-5.15.0-1114-azure",
"binary_version": "5.15.0-1114.123"
},
{
"binary_name": "linux-image-unsigned-5.15.0-1114-azure",
"binary_version": "5.15.0-1114.123"
},
{
"binary_name": "linux-modules-5.15.0-1114-azure",
"binary_version": "5.15.0-1114.123"
},
{
"binary_name": "linux-modules-extra-5.15.0-1114-azure",
"binary_version": "5.15.0-1114.123"
},
{
"binary_name": "linux-modules-involflt-5.15.0-1114-azure",
"binary_version": "5.15.0-1114.123"
},
{
"binary_name": "linux-tools-5.15.0-1114-azure",
"binary_version": "5.15.0-1114.123"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "linux-azure",
"purl": "pkg:deb/ubuntu/linux-azure@5.15.0-1114.123?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "5.15.0-1114.123"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.13.0-1006.7",
"5.15.0-1001.2",
"5.15.0-1002.3",
"5.15.0-1003.4",
"5.15.0-1005.6",
"5.15.0-1007.8",
"5.15.0-1008.9",
"5.15.0-1010.12",
"5.15.0-1012.15",
"5.15.0-1013.16",
"5.15.0-1014.17",
"5.15.0-1017.20",
"5.15.0-1019.24",
"5.15.0-1020.25",
"5.15.0-1021.26",
"5.15.0-1022.27",
"5.15.0-1023.29",
"5.15.0-1024.30",
"5.15.0-1029.36",
"5.15.0-1030.37",
"5.15.0-1031.38",
"5.15.0-1033.40",
"5.15.0-1034.41",
"5.15.0-1035.42",
"5.15.0-1036.43",
"5.15.0-1037.44",
"5.15.0-1038.45",
"5.15.0-1039.46",
"5.15.0-1040.47",
"5.15.0-1041.48",
"5.15.0-1042.49",
"5.15.0-1044.51",
"5.15.0-1045.52",
"5.15.0-1046.53",
"5.15.0-1047.54",
"5.15.0-1049.56",
"5.15.0-1050.57",
"5.15.0-1051.59",
"5.15.0-1052.60",
"5.15.0-1053.61",
"5.15.0-1054.62",
"5.15.0-1056.64",
"5.15.0-1057.65",
"5.15.0-1058.66",
"5.15.0-1059.67",
"5.15.0-1060.69",
"5.15.0-1061.70",
"5.15.0-1063.72",
"5.15.0-1064.73",
"5.15.0-1066.75",
"5.15.0-1067.76",
"5.15.0-1068.77",
"5.15.0-1070.79",
"5.15.0-1071.80",
"5.15.0-1072.81",
"5.15.0-1073.82",
"5.15.0-1074.83",
"5.15.0-1075.84",
"5.15.0-1078.87",
"5.15.0-1079.88",
"5.15.0-1081.90",
"5.15.0-1082.91",
"5.15.0-1084.93",
"5.15.0-1086.95",
"5.15.0-1087.96",
"5.15.0-1088.97",
"5.15.0-1089.98",
"5.15.0-1090.99",
"5.15.0-1091.100",
"5.15.0-1092.101",
"5.15.0-1094.103",
"5.15.0-1095.104",
"5.15.0-1096.105",
"5.15.0-1097.106",
"5.15.0-1098.107",
"5.15.0-1099.108",
"5.15.0-1101.110",
"5.15.0-1102.111",
"5.15.0-1103.112",
"5.15.0-1109.118",
"5.15.0-1110.119",
"5.15.0-1111.120"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-azure-5.19-cloud-tools-5.19.0-1027",
"binary_version": "5.19.0-1027.30~22.04.2"
},
{
"binary_name": "linux-azure-5.19-headers-5.19.0-1027",
"binary_version": "5.19.0-1027.30~22.04.2"
},
{
"binary_name": "linux-azure-5.19-tools-5.19.0-1027",
"binary_version": "5.19.0-1027.30~22.04.2"
},
{
"binary_name": "linux-buildinfo-5.19.0-1027-azure",
"binary_version": "5.19.0-1027.30~22.04.2"
},
{
"binary_name": "linux-cloud-tools-5.19.0-1027-azure",
"binary_version": "5.19.0-1027.30~22.04.2"
},
{
"binary_name": "linux-headers-5.19.0-1027-azure",
"binary_version": "5.19.0-1027.30~22.04.2"
},
{
"binary_name": "linux-image-unsigned-5.19.0-1027-azure",
"binary_version": "5.19.0-1027.30~22.04.2"
},
{
"binary_name": "linux-modules-5.19.0-1027-azure",
"binary_version": "5.19.0-1027.30~22.04.2"
},
{
"binary_name": "linux-modules-extra-5.19.0-1027-azure",
"binary_version": "5.19.0-1027.30~22.04.2"
},
{
"binary_name": "linux-tools-5.19.0-1027-azure",
"binary_version": "5.19.0-1027.30~22.04.2"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "linux-azure-5.19",
"purl": "pkg:deb/ubuntu/linux-azure-5.19@5.19.0-1027.30~22.04.2?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.19.0-1020.21~22.04.1",
"5.19.0-1021.22~22.04.1",
"5.19.0-1022.23~22.04.1",
"5.19.0-1023.24~22.04.1",
"5.19.0-1025.28~22.04.1",
"5.19.0-1026.29~22.04.1",
"5.19.0-1027.30~22.04.2"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-azure-6.2-cloud-tools-6.2.0-1019",
"binary_version": "6.2.0-1019.19~22.04.1"
},
{
"binary_name": "linux-azure-6.2-headers-6.2.0-1019",
"binary_version": "6.2.0-1019.19~22.04.1"
},
{
"binary_name": "linux-azure-6.2-tools-6.2.0-1019",
"binary_version": "6.2.0-1019.19~22.04.1"
},
{
"binary_name": "linux-buildinfo-6.2.0-1019-azure",
"binary_version": "6.2.0-1019.19~22.04.1"
},
{
"binary_name": "linux-cloud-tools-6.2.0-1019-azure",
"binary_version": "6.2.0-1019.19~22.04.1"
},
{
"binary_name": "linux-headers-6.2.0-1019-azure",
"binary_version": "6.2.0-1019.19~22.04.1"
},
{
"binary_name": "linux-image-unsigned-6.2.0-1019-azure",
"binary_version": "6.2.0-1019.19~22.04.1"
},
{
"binary_name": "linux-modules-6.2.0-1019-azure",
"binary_version": "6.2.0-1019.19~22.04.1"
},
{
"binary_name": "linux-modules-extra-6.2.0-1019-azure",
"binary_version": "6.2.0-1019.19~22.04.1"
},
{
"binary_name": "linux-tools-6.2.0-1019-azure",
"binary_version": "6.2.0-1019.19~22.04.1"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "linux-azure-6.2",
"purl": "pkg:deb/ubuntu/linux-azure-6.2@6.2.0-1019.19~22.04.1?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.2.0-1005.5~22.04.1",
"6.2.0-1006.6~22.04.1",
"6.2.0-1007.7~22.04.1",
"6.2.0-1008.8~22.04.1",
"6.2.0-1009.9~22.04.3",
"6.2.0-1011.11~22.04.1",
"6.2.0-1012.12~22.04.1",
"6.2.0-1014.14~22.04.1",
"6.2.0-1015.15~22.04.1",
"6.2.0-1016.16~22.04.1",
"6.2.0-1017.17~22.04.1",
"6.2.0-1018.18~22.04.1",
"6.2.0-1019.19~22.04.1"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-azure-6.5-cloud-tools-6.5.0-1025",
"binary_version": "6.5.0-1025.26~22.04.1"
},
{
"binary_name": "linux-azure-6.5-headers-6.5.0-1025",
"binary_version": "6.5.0-1025.26~22.04.1"
},
{
"binary_name": "linux-azure-6.5-tools-6.5.0-1025",
"binary_version": "6.5.0-1025.26~22.04.1"
},
{
"binary_name": "linux-buildinfo-6.5.0-1025-azure",
"binary_version": "6.5.0-1025.26~22.04.1"
},
{
"binary_name": "linux-cloud-tools-6.5.0-1025-azure",
"binary_version": "6.5.0-1025.26~22.04.1"
},
{
"binary_name": "linux-headers-6.5.0-1025-azure",
"binary_version": "6.5.0-1025.26~22.04.1"
},
{
"binary_name": "linux-image-unsigned-6.5.0-1025-azure",
"binary_version": "6.5.0-1025.26~22.04.1"
},
{
"binary_name": "linux-modules-6.5.0-1025-azure",
"binary_version": "6.5.0-1025.26~22.04.1"
},
{
"binary_name": "linux-modules-extra-6.5.0-1025-azure",
"binary_version": "6.5.0-1025.26~22.04.1"
},
{
"binary_name": "linux-tools-6.5.0-1025-azure",
"binary_version": "6.5.0-1025.26~22.04.1"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "linux-azure-6.5",
"purl": "pkg:deb/ubuntu/linux-azure-6.5@6.5.0-1025.26~22.04.1?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.5.0-1007.7~22.04.1",
"6.5.0-1009.9~22.04.1",
"6.5.0-1010.10~22.04.1",
"6.5.0-1011.11~22.04.1",
"6.5.0-1015.15~22.04.1",
"6.5.0-1016.16~22.04.1",
"6.5.0-1017.17~22.04.1",
"6.5.0-1018.19~22.04.2",
"6.5.0-1019.20~22.04.1",
"6.5.0-1021.22~22.04.1",
"6.5.0-1022.23~22.04.1",
"6.5.0-1023.24~22.04.1",
"6.5.0-1024.25~22.04.1",
"6.5.0-1025.26~22.04.1"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "linux-azure-6.8-cloud-tools-6.8.0-1059",
"binary_version": "6.8.0-1059.65~22.04.1"
},
{
"binary_name": "linux-azure-6.8-headers-6.8.0-1059",
"binary_version": "6.8.0-1059.65~22.04.1"
},
{
"binary_name": "linux-azure-6.8-tools-6.8.0-1059",
"binary_version": "6.8.0-1059.65~22.04.1"
},
{
"binary_name": "linux-buildinfo-6.8.0-1059-azure",
"binary_version": "6.8.0-1059.65~22.04.1"
},
{
"binary_name": "linux-cloud-tools-6.8.0-1059-azure",
"binary_version": "6.8.0-1059.65~22.04.1"
},
{
"binary_name": "linux-headers-6.8.0-1059-azure",
"binary_version": "6.8.0-1059.65~22.04.1"
},
{
"binary_name": "linux-image-unsigned-6.8.0-1059-azure",
"binary_version": "6.8.0-1059.65~22.04.1"
},
{
"binary_name": "linux-modules-6.8.0-1059-azure",
"binary_version": "6.8.0-1059.65~22.04.1"
},
{
"binary_name": "linux-modules-extra-6.8.0-1059-azure",
"binary_version": "6.8.0-1059.65~22.04.1"
},
{
"binary_name": "linux-modules-involflt-6.8.0-1059-azure",
"binary_version": "6.8.0-1059.65~22.04.1"
},
{
"binary_name": "linux-modules-iwlwifi-6.8.0-1059-azure",
"binary_version": "6.8.0-1059.65~22.04.1"
},
{
"binary_name": "linux-tools-6.8.0-1059-azure",
"binary_version": "6.8.0-1059.65~22.04.1"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "linux-azure-6.8",
"purl": "pkg:deb/ubuntu/linux-azure-6.8@6.8.0-1059.65~22.04.1?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.8.0-1059.65~22.04.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.8.0-1008.8~22.04.1",
"6.8.0-1009.9~22.04.1",
"6.8.0-1010.10~22.04.1",
"6.8.0-1012.14~22.04.1",
"6.8.0-1013.15~22.04.1",
"6.8.0-1014.16~22.04.1",
"6.8.0-1015.17~22.04.2",
"6.8.0-1017.20~22.04.1",
"6.8.0-1018.21~22.04.1",
"6.8.0-1020.23~22.04.1",
"6.8.0-1021.25~22.04.1",
"6.8.0-1025.30~22.04.1",
"6.8.0-1026.31~22.04.1",
"6.8.0-1027.32~22.04.1",
"6.8.0-1028.33~22.04.1",
"6.8.0-1029.34~22.04.1",
"6.8.0-1030.35~22.04.1",
"6.8.0-1031.36~22.04.1",
"6.8.0-1034.39~22.04.1",
"6.8.0-1036.42~22.04.1",
"6.8.0-1040.46~22.04.1",
"6.8.0-1041.47~22.04.1",
"6.8.0-1044.50~22.04.1",
"6.8.0-1051.57~22.04.1",
"6.8.0-1052.58~22.04.1"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-azure-fde-cloud-tools-5.15.0-1119",
"binary_version": "5.15.0-1119.128"
},
{
"binary_name": "linux-azure-fde-headers-5.15.0-1119",
"binary_version": "5.15.0-1119.128"
},
{
"binary_name": "linux-azure-fde-tools-5.15.0-1119",
"binary_version": "5.15.0-1119.128"
},
{
"binary_name": "linux-buildinfo-5.15.0-1119-azure-fde",
"binary_version": "5.15.0-1119.128"
},
{
"binary_name": "linux-cloud-tools-5.15.0-1119-azure-fde",
"binary_version": "5.15.0-1119.128"
},
{
"binary_name": "linux-headers-5.15.0-1119-azure-fde",
"binary_version": "5.15.0-1119.128"
},
{
"binary_name": "linux-image-unsigned-5.15.0-1119-azure-fde",
"binary_version": "5.15.0-1119.128"
},
{
"binary_name": "linux-modules-5.15.0-1119-azure-fde",
"binary_version": "5.15.0-1119.128"
},
{
"binary_name": "linux-modules-extra-5.15.0-1119-azure-fde",
"binary_version": "5.15.0-1119.128"
},
{
"binary_name": "linux-modules-involflt-5.15.0-1119-azure-fde",
"binary_version": "5.15.0-1119.128"
},
{
"binary_name": "linux-tools-5.15.0-1119-azure-fde",
"binary_version": "5.15.0-1119.128"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "linux-azure-fde",
"purl": "pkg:deb/ubuntu/linux-azure-fde@5.15.0-1119.128?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.15.0-1019.24.1",
"5.15.0-1024.30.1",
"5.15.0-1029.36.1",
"5.15.0-1030.37.1",
"5.15.0-1031.38.1",
"5.15.0-1033.40.1",
"5.15.0-1034.41.1",
"5.15.0-1035.42.1",
"5.15.0-1036.43.1",
"5.15.0-1037.44.1",
"5.15.0-1038.45.1",
"5.15.0-1039.46.1",
"5.15.0-1041.48.1",
"5.15.0-1042.49.1",
"5.15.0-1044.51.1",
"5.15.0-1045.52.1",
"5.15.0-1046.53.1",
"5.15.0-1047.54.1",
"5.15.0-1049.56.1",
"5.15.0-1050.57.1",
"5.15.0-1051.59.1",
"5.15.0-1052.60.1",
"5.15.0-1053.61.1",
"5.15.0-1054.62.1",
"5.15.0-1056.64.1",
"5.15.0-1057.65.1",
"5.15.0-1058.66.1",
"5.15.0-1059.67.1",
"5.15.0-1060.69.1",
"5.15.0-1061.70.1",
"5.15.0-1063.72.1",
"5.15.0-1064.73.1",
"5.15.0-1065.74.1",
"5.15.0-1067.76.1",
"5.15.0-1068.77.1",
"5.15.0-1070.79.1",
"5.15.0-1071.80.1",
"5.15.0-1072.81.1",
"5.15.0-1073.82.1",
"5.15.0-1076.85.1",
"5.15.0-1078.87.1",
"5.15.0-1081.90.1",
"5.15.0-1082.91.1",
"5.15.0-1084.93.1",
"5.15.0-1086.95.1",
"5.15.0-1087.96.1",
"5.15.0-1088.97.1",
"5.15.0-1089.98.1",
"5.15.0-1090.99.1",
"5.15.0-1091.100.1",
"5.15.0-1092.101.1",
"5.15.0-1094.103.1",
"5.15.0-1095.104.1",
"5.15.0-1096.105.1",
"5.15.0-1097.106.1",
"5.15.0-1098.107.1",
"5.15.0-1102.111.1",
"5.15.0-1109.118.1",
"5.15.0-1110.119.1",
"5.15.0-1111.120.1",
"5.15.0-1114.123",
"5.15.0-1116.125",
"5.15.0-1117.126",
"5.15.0-1118.127",
"5.15.0-1119.128"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-image-unsigned-5.19.0-1027-azure-fde",
"binary_version": "5.19.0-1027.30~22.04.2.1"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "linux-azure-fde-5.19",
"purl": "pkg:deb/ubuntu/linux-azure-fde-5.19@5.19.0-1027.30~22.04.2.1?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.19.0-1025.28~22.04.1.1",
"5.19.0-1026.29~22.04.1.1",
"5.19.0-1027.30~22.04.2.1"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-image-unsigned-6.2.0-1019-azure-fde",
"binary_version": "6.2.0-1019.19~22.04.1.1"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "linux-azure-fde-6.2",
"purl": "pkg:deb/ubuntu/linux-azure-fde-6.2@6.2.0-1019.19~22.04.1.1?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.2.0-1008.8~22.04.1.1",
"6.2.0-1009.9~22.04.3.1",
"6.2.0-1011.11~22.04.1.1",
"6.2.0-1012.12~22.04.1.1",
"6.2.0-1014.14~22.04.1.1",
"6.2.0-1015.15~22.04.1.1",
"6.2.0-1016.16~22.04.1.1",
"6.2.0-1017.17~22.04.1.1",
"6.2.0-1018.18~22.04.1.1",
"6.2.0-1019.19~22.04.1.1"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-azure-fde-6.8-cloud-tools-6.8.0-1064",
"binary_version": "6.8.0-1064.71~22.04.1"
},
{
"binary_name": "linux-azure-fde-6.8-headers-6.8.0-1064",
"binary_version": "6.8.0-1064.71~22.04.1"
},
{
"binary_name": "linux-azure-fde-6.8-tools-6.8.0-1064",
"binary_version": "6.8.0-1064.71~22.04.1"
},
{
"binary_name": "linux-buildinfo-6.8.0-1064-azure-fde",
"binary_version": "6.8.0-1064.71~22.04.1"
},
{
"binary_name": "linux-cloud-tools-6.8.0-1064-azure-fde",
"binary_version": "6.8.0-1064.71~22.04.1"
},
{
"binary_name": "linux-headers-6.8.0-1064-azure-fde",
"binary_version": "6.8.0-1064.71~22.04.1"
},
{
"binary_name": "linux-image-unsigned-6.8.0-1064-azure-fde",
"binary_version": "6.8.0-1064.71~22.04.1"
},
{
"binary_name": "linux-modules-6.8.0-1064-azure-fde",
"binary_version": "6.8.0-1064.71~22.04.1"
},
{
"binary_name": "linux-modules-extra-6.8.0-1064-azure-fde",
"binary_version": "6.8.0-1064.71~22.04.1"
},
{
"binary_name": "linux-modules-involflt-6.8.0-1064-azure-fde",
"binary_version": "6.8.0-1064.71~22.04.1"
},
{
"binary_name": "linux-modules-iwlwifi-6.8.0-1064-azure-fde",
"binary_version": "6.8.0-1064.71~22.04.1"
},
{
"binary_name": "linux-tools-6.8.0-1064-azure-fde",
"binary_version": "6.8.0-1064.71~22.04.1"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "linux-azure-fde-6.8",
"purl": "pkg:deb/ubuntu/linux-azure-fde-6.8@6.8.0-1064.71~22.04.1?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.8.0-1041.48~22.04.1",
"6.8.0-1042.49~22.04.1",
"6.8.0-1044.51~22.04.1",
"6.8.0-1046.53~22.04.1",
"6.8.0-1053.60~22.04.1",
"6.8.0-1058.65~22.04.1",
"6.8.0-1061.68~22.04.1",
"6.8.0-1062.69~22.04.1",
"6.8.0-1063.70~22.04.1",
"6.8.0-1064.71~22.04.1"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "linux-buildinfo-5.15.0-1109-gcp",
"binary_version": "5.15.0-1109.118"
},
{
"binary_name": "linux-gcp-headers-5.15.0-1109",
"binary_version": "5.15.0-1109.118"
},
{
"binary_name": "linux-gcp-tools-5.15.0-1109",
"binary_version": "5.15.0-1109.118"
},
{
"binary_name": "linux-headers-5.15.0-1109-gcp",
"binary_version": "5.15.0-1109.118"
},
{
"binary_name": "linux-image-unsigned-5.15.0-1109-gcp",
"binary_version": "5.15.0-1109.118"
},
{
"binary_name": "linux-modules-5.15.0-1109-gcp",
"binary_version": "5.15.0-1109.118"
},
{
"binary_name": "linux-modules-extra-5.15.0-1109-gcp",
"binary_version": "5.15.0-1109.118"
},
{
"binary_name": "linux-tools-5.15.0-1109-gcp",
"binary_version": "5.15.0-1109.118"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "linux-gcp",
"purl": "pkg:deb/ubuntu/linux-gcp@5.15.0-1109.118?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "5.15.0-1109.118"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.13.0-1005.6",
"5.15.0-1001.3",
"5.15.0-1002.5",
"5.15.0-1003.6",
"5.15.0-1004.7",
"5.15.0-1005.8",
"5.15.0-1006.9",
"5.15.0-1008.12",
"5.15.0-1010.15",
"5.15.0-1013.18",
"5.15.0-1016.21",
"5.15.0-1017.23",
"5.15.0-1018.24",
"5.15.0-1019.25",
"5.15.0-1021.28",
"5.15.0-1022.29",
"5.15.0-1025.32",
"5.15.0-1026.33",
"5.15.0-1027.34",
"5.15.0-1029.36",
"5.15.0-1030.37",
"5.15.0-1031.38",
"5.15.0-1032.40",
"5.15.0-1034.42",
"5.15.0-1035.43",
"5.15.0-1036.44",
"5.15.0-1037.45",
"5.15.0-1038.46",
"5.15.0-1039.47",
"5.15.0-1040.48",
"5.15.0-1041.49",
"5.15.0-1042.50",
"5.15.0-1044.52",
"5.15.0-1045.53",
"5.15.0-1046.54",
"5.15.0-1047.55",
"5.15.0-1048.56",
"5.15.0-1049.57",
"5.15.0-1051.59",
"5.15.0-1052.60",
"5.15.0-1053.61",
"5.15.0-1054.62",
"5.15.0-1055.63",
"5.15.0-1058.66",
"5.15.0-1059.67",
"5.15.0-1060.68",
"5.15.0-1062.70",
"5.15.0-1063.71",
"5.15.0-1064.72",
"5.15.0-1065.73",
"5.15.0-1066.74",
"5.15.0-1067.75",
"5.15.0-1068.76",
"5.15.0-1069.77",
"5.15.0-1070.78",
"5.15.0-1071.79",
"5.15.0-1072.80",
"5.15.0-1073.81",
"5.15.0-1074.83",
"5.15.0-1075.84",
"5.15.0-1077.86",
"5.15.0-1078.87",
"5.15.0-1079.88",
"5.15.0-1080.89",
"5.15.0-1081.90",
"5.15.0-1082.91",
"5.15.0-1083.92",
"5.15.0-1084.93",
"5.15.0-1085.94",
"5.15.0-1086.95",
"5.15.0-1087.96",
"5.15.0-1088.97",
"5.15.0-1090.99",
"5.15.0-1091.100",
"5.15.0-1092.101",
"5.15.0-1093.102",
"5.15.0-1095.104",
"5.15.0-1096.105",
"5.15.0-1097.106",
"5.15.0-1098.107",
"5.15.0-1099.108",
"5.15.0-1100.109",
"5.15.0-1101.110",
"5.15.0-1103.112",
"5.15.0-1104.113",
"5.15.0-1105.114",
"5.15.0-1106.115",
"5.15.0-1108.117"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-buildinfo-5.19.0-1030-gcp",
"binary_version": "5.19.0-1030.32~22.04.1"
},
{
"binary_name": "linux-gcp-5.19-headers-5.19.0-1030",
"binary_version": "5.19.0-1030.32~22.04.1"
},
{
"binary_name": "linux-gcp-5.19-tools-5.19.0-1030",
"binary_version": "5.19.0-1030.32~22.04.1"
},
{
"binary_name": "linux-headers-5.19.0-1030-gcp",
"binary_version": "5.19.0-1030.32~22.04.1"
},
{
"binary_name": "linux-image-unsigned-5.19.0-1030-gcp",
"binary_version": "5.19.0-1030.32~22.04.1"
},
{
"binary_name": "linux-modules-5.19.0-1030-gcp",
"binary_version": "5.19.0-1030.32~22.04.1"
},
{
"binary_name": "linux-modules-extra-5.19.0-1030-gcp",
"binary_version": "5.19.0-1030.32~22.04.1"
},
{
"binary_name": "linux-tools-5.19.0-1030-gcp",
"binary_version": "5.19.0-1030.32~22.04.1"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "linux-gcp-5.19",
"purl": "pkg:deb/ubuntu/linux-gcp-5.19@5.19.0-1030.32~22.04.1?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.19.0-1020.22~22.04.2",
"5.19.0-1021.23~22.04.1",
"5.19.0-1022.24~22.04.1",
"5.19.0-1024.26~22.04.1",
"5.19.0-1025.27~22.04.1",
"5.19.0-1026.28~22.04.1",
"5.19.0-1027.29~22.04.1",
"5.19.0-1030.32~22.04.1"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-buildinfo-6.2.0-1021-gcp",
"binary_version": "6.2.0-1021.23~22.04.1"
},
{
"binary_name": "linux-gcp-6.2-headers-6.2.0-1021",
"binary_version": "6.2.0-1021.23~22.04.1"
},
{
"binary_name": "linux-gcp-6.2-tools-6.2.0-1021",
"binary_version": "6.2.0-1021.23~22.04.1"
},
{
"binary_name": "linux-headers-6.2.0-1021-gcp",
"binary_version": "6.2.0-1021.23~22.04.1"
},
{
"binary_name": "linux-image-unsigned-6.2.0-1021-gcp",
"binary_version": "6.2.0-1021.23~22.04.1"
},
{
"binary_name": "linux-modules-6.2.0-1021-gcp",
"binary_version": "6.2.0-1021.23~22.04.1"
},
{
"binary_name": "linux-modules-extra-6.2.0-1021-gcp",
"binary_version": "6.2.0-1021.23~22.04.1"
},
{
"binary_name": "linux-tools-6.2.0-1021-gcp",
"binary_version": "6.2.0-1021.23~22.04.1"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "linux-gcp-6.2",
"purl": "pkg:deb/ubuntu/linux-gcp-6.2@6.2.0-1021.23~22.04.1?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.2.0-1009.9~22.04.3",
"6.2.0-1010.10~22.04.1",
"6.2.0-1011.11~22.04.1",
"6.2.0-1011.11~22.04.3",
"6.2.0-1012.12~22.04.1",
"6.2.0-1013.13~22.04.1",
"6.2.0-1014.14~22.04.1",
"6.2.0-1016.18~22.04.1",
"6.2.0-1017.19~22.04.1",
"6.2.0-1018.20~22.04.1",
"6.2.0-1019.21~22.04.1",
"6.2.0-1021.23~22.04.1"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-buildinfo-6.5.0-1025-gcp",
"binary_version": "6.5.0-1025.27~22.04.1"
},
{
"binary_name": "linux-gcp-6.5-headers-6.5.0-1025",
"binary_version": "6.5.0-1025.27~22.04.1"
},
{
"binary_name": "linux-gcp-6.5-tools-6.5.0-1025",
"binary_version": "6.5.0-1025.27~22.04.1"
},
{
"binary_name": "linux-headers-6.5.0-1025-gcp",
"binary_version": "6.5.0-1025.27~22.04.1"
},
{
"binary_name": "linux-image-unsigned-6.5.0-1025-gcp",
"binary_version": "6.5.0-1025.27~22.04.1"
},
{
"binary_name": "linux-modules-6.5.0-1025-gcp",
"binary_version": "6.5.0-1025.27~22.04.1"
},
{
"binary_name": "linux-modules-extra-6.5.0-1025-gcp",
"binary_version": "6.5.0-1025.27~22.04.1"
},
{
"binary_name": "linux-modules-iwlwifi-6.5.0-1025-gcp",
"binary_version": "6.5.0-1025.27~22.04.1"
},
{
"binary_name": "linux-tools-6.5.0-1025-gcp",
"binary_version": "6.5.0-1025.27~22.04.1"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "linux-gcp-6.5",
"purl": "pkg:deb/ubuntu/linux-gcp-6.5@6.5.0-1025.27~22.04.1?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.5.0-1010.10~22.04.3",
"6.5.0-1011.11~22.04.1",
"6.5.0-1013.13~22.04.1",
"6.5.0-1014.14~22.04.1",
"6.5.0-1015.15~22.04.1",
"6.5.0-1016.16~22.04.1",
"6.5.0-1017.17~22.04.1",
"6.5.0-1018.18~22.04.1",
"6.5.0-1020.20~22.04.1",
"6.5.0-1022.24~22.04.1",
"6.5.0-1023.25~22.04.1",
"6.5.0-1024.26~22.04.1",
"6.5.0-1025.27~22.04.1"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "linux-buildinfo-6.8.0-1060-gcp",
"binary_version": "6.8.0-1060.63~22.04.1"
},
{
"binary_name": "linux-buildinfo-6.8.0-1060-gcp-64k",
"binary_version": "6.8.0-1060.63~22.04.1"
},
{
"binary_name": "linux-gcp-6.8-headers-6.8.0-1060",
"binary_version": "6.8.0-1060.63~22.04.1"
},
{
"binary_name": "linux-gcp-6.8-tools-6.8.0-1060",
"binary_version": "6.8.0-1060.63~22.04.1"
},
{
"binary_name": "linux-headers-6.8.0-1060-gcp",
"binary_version": "6.8.0-1060.63~22.04.1"
},
{
"binary_name": "linux-headers-6.8.0-1060-gcp-64k",
"binary_version": "6.8.0-1060.63~22.04.1"
},
{
"binary_name": "linux-image-unsigned-6.8.0-1060-gcp",
"binary_version": "6.8.0-1060.63~22.04.1"
},
{
"binary_name": "linux-image-unsigned-6.8.0-1060-gcp-64k",
"binary_version": "6.8.0-1060.63~22.04.1"
},
{
"binary_name": "linux-modules-6.8.0-1060-gcp",
"binary_version": "6.8.0-1060.63~22.04.1"
},
{
"binary_name": "linux-modules-6.8.0-1060-gcp-64k",
"binary_version": "6.8.0-1060.63~22.04.1"
},
{
"binary_name": "linux-modules-extra-6.8.0-1060-gcp",
"binary_version": "6.8.0-1060.63~22.04.1"
},
{
"binary_name": "linux-modules-extra-6.8.0-1060-gcp-64k",
"binary_version": "6.8.0-1060.63~22.04.1"
},
{
"binary_name": "linux-tools-6.8.0-1060-gcp",
"binary_version": "6.8.0-1060.63~22.04.1"
},
{
"binary_name": "linux-tools-6.8.0-1060-gcp-64k",
"binary_version": "6.8.0-1060.63~22.04.1"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "linux-gcp-6.8",
"purl": "pkg:deb/ubuntu/linux-gcp-6.8@6.8.0-1060.63~22.04.1?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.8.0-1060.63~22.04.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.8.0-1010.11~22.04.1",
"6.8.0-1011.12~22.04.1",
"6.8.0-1012.13~22.04.1",
"6.8.0-1013.14~22.04.1",
"6.8.0-1014.16~22.04.1",
"6.8.0-1015.17~22.04.1",
"6.8.0-1016.18~22.04.1",
"6.8.0-1017.19~22.04.1",
"6.8.0-1018.20~22.04.1",
"6.8.0-1019.21~22.04.1",
"6.8.0-1020.22~22.04.1",
"6.8.0-1021.23~22.04.1",
"6.8.0-1024.26~22.04.1",
"6.8.0-1025.27~22.04.1",
"6.8.0-1026.28~22.04.1",
"6.8.0-1027.29~22.04.1",
"6.8.0-1028.30~22.04.1",
"6.8.0-1029.31~22.04.1",
"6.8.0-1030.32~22.04.1",
"6.8.0-1031.33~22.04.1",
"6.8.0-1032.34~22.04.1",
"6.8.0-1033.35~22.04.1",
"6.8.0-1034.36~22.04.2",
"6.8.0-1036.38~22.04.1",
"6.8.0-1037.39~22.04.1",
"6.8.0-1040.42~22.04.1",
"6.8.0-1041.43~22.04.1",
"6.8.0-1042.45~22.04.1",
"6.8.0-1043.46~22.04.1",
"6.8.0-1044.47~22.04.1",
"6.8.0-1045.48~22.04.1",
"6.8.0-1046.49~22.04.1",
"6.8.0-1047.50~22.04.2",
"6.8.0-1048.51~22.04.1",
"6.8.0-1052.55~22.04.1",
"6.8.0-1053.56~22.04.1",
"6.8.0-1054.57~22.04.1",
"6.8.0-1058.61~22.04.1"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "linux-buildinfo-5.15.0-1105-gke",
"binary_version": "5.15.0-1105.111"
},
{
"binary_name": "linux-gke-headers-5.15.0-1105",
"binary_version": "5.15.0-1105.111"
},
{
"binary_name": "linux-gke-tools-5.15.0-1105",
"binary_version": "5.15.0-1105.111"
},
{
"binary_name": "linux-headers-5.15.0-1105-gke",
"binary_version": "5.15.0-1105.111"
},
{
"binary_name": "linux-image-unsigned-5.15.0-1105-gke",
"binary_version": "5.15.0-1105.111"
},
{
"binary_name": "linux-modules-5.15.0-1105-gke",
"binary_version": "5.15.0-1105.111"
},
{
"binary_name": "linux-modules-extra-5.15.0-1105-gke",
"binary_version": "5.15.0-1105.111"
},
{
"binary_name": "linux-tools-5.15.0-1105-gke",
"binary_version": "5.15.0-1105.111"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "linux-gke",
"purl": "pkg:deb/ubuntu/linux-gke@5.15.0-1105.111?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "5.15.0-1105.111"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.15.0-1002.2",
"5.15.0-1003.3",
"5.15.0-1004.5",
"5.15.0-1005.6",
"5.15.0-1006.7",
"5.15.0-1008.10",
"5.15.0-1010.13",
"5.15.0-1011.14",
"5.15.0-1014.17",
"5.15.0-1015.18",
"5.15.0-1016.19",
"5.15.0-1017.20",
"5.15.0-1019.23",
"5.15.0-1020.25",
"5.15.0-1023.28",
"5.15.0-1024.29",
"5.15.0-1027.32",
"5.15.0-1028.33",
"5.15.0-1030.35",
"5.15.0-1031.36",
"5.15.0-1032.37",
"5.15.0-1033.38",
"5.15.0-1034.39",
"5.15.0-1035.40",
"5.15.0-1036.41",
"5.15.0-1037.42",
"5.15.0-1038.43",
"5.15.0-1039.44",
"5.15.0-1040.45",
"5.15.0-1041.46",
"5.15.0-1042.47",
"5.15.0-1044.49",
"5.15.0-1045.50",
"5.15.0-1046.51",
"5.15.0-1047.52",
"5.15.0-1048.53",
"5.15.0-1049.54",
"5.15.0-1050.55",
"5.15.0-1051.56",
"5.15.0-1052.57",
"5.15.0-1053.58",
"5.15.0-1054.59",
"5.15.0-1057.62",
"5.15.0-1058.63",
"5.15.0-1059.64",
"5.15.0-1060.66",
"5.15.0-1061.67",
"5.15.0-1062.68",
"5.15.0-1063.69",
"5.15.0-1064.70",
"5.15.0-1065.71",
"5.15.0-1066.72",
"5.15.0-1067.73",
"5.15.0-1068.74",
"5.15.0-1069.75",
"5.15.0-1070.76",
"5.15.0-1071.77",
"5.15.0-1072.78",
"5.15.0-1073.79",
"5.15.0-1075.81",
"5.15.0-1076.82",
"5.15.0-1077.83",
"5.15.0-1078.84",
"5.15.0-1079.85",
"5.15.0-1080.86",
"5.15.0-1081.87",
"5.15.0-1082.88",
"5.15.0-1083.89",
"5.15.0-1084.90",
"5.15.0-1085.91",
"5.15.0-1086.92",
"5.15.0-1087.93",
"5.15.0-1088.94",
"5.15.0-1089.95",
"5.15.0-1090.96",
"5.15.0-1091.97",
"5.15.0-1092.98",
"5.15.0-1093.99",
"5.15.0-1094.100",
"5.15.0-1095.101",
"5.15.0-1096.102",
"5.15.0-1097.103",
"5.15.0-1099.105",
"5.15.0-1100.106",
"5.15.0-1101.107",
"5.15.0-1102.108",
"5.15.0-1104.110"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "linux-buildinfo-5.15.0-1092-gkeop",
"binary_version": "5.15.0-1092.100"
},
{
"binary_name": "linux-cloud-tools-5.15.0-1092-gkeop",
"binary_version": "5.15.0-1092.100"
},
{
"binary_name": "linux-gkeop-cloud-tools-5.15.0-1092",
"binary_version": "5.15.0-1092.100"
},
{
"binary_name": "linux-gkeop-headers-5.15.0-1092",
"binary_version": "5.15.0-1092.100"
},
{
"binary_name": "linux-gkeop-tools-5.15.0-1092",
"binary_version": "5.15.0-1092.100"
},
{
"binary_name": "linux-headers-5.15.0-1092-gkeop",
"binary_version": "5.15.0-1092.100"
},
{
"binary_name": "linux-image-unsigned-5.15.0-1092-gkeop",
"binary_version": "5.15.0-1092.100"
},
{
"binary_name": "linux-modules-5.15.0-1092-gkeop",
"binary_version": "5.15.0-1092.100"
},
{
"binary_name": "linux-modules-extra-5.15.0-1092-gkeop",
"binary_version": "5.15.0-1092.100"
},
{
"binary_name": "linux-tools-5.15.0-1092-gkeop",
"binary_version": "5.15.0-1092.100"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "linux-gkeop",
"purl": "pkg:deb/ubuntu/linux-gkeop@5.15.0-1092.100?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "5.15.0-1092.100"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.15.0-1001.2",
"5.15.0-1002.4",
"5.15.0-1003.5",
"5.15.0-1004.6",
"5.15.0-1005.7",
"5.15.0-1007.10",
"5.15.0-1008.12",
"5.15.0-1011.15",
"5.15.0-1012.16",
"5.15.0-1013.17",
"5.15.0-1015.19",
"5.15.0-1016.21",
"5.15.0-1017.22",
"5.15.0-1018.23",
"5.15.0-1019.24",
"5.15.0-1020.25",
"5.15.0-1021.26",
"5.15.0-1022.27",
"5.15.0-1023.28",
"5.15.0-1024.29",
"5.15.0-1025.30",
"5.15.0-1026.31",
"5.15.0-1027.32",
"5.15.0-1028.33",
"5.15.0-1030.35",
"5.15.0-1031.37",
"5.15.0-1032.38",
"5.15.0-1033.39",
"5.15.0-1034.40",
"5.15.0-1035.41",
"5.15.0-1036.42",
"5.15.0-1037.43",
"5.15.0-1038.44",
"5.15.0-1039.45",
"5.15.0-1040.46",
"5.15.0-1043.50",
"5.15.0-1044.51",
"5.15.0-1045.52",
"5.15.0-1046.53",
"5.15.0-1047.54",
"5.15.0-1048.55",
"5.15.0-1049.56",
"5.15.0-1050.57",
"5.15.0-1051.58",
"5.15.0-1052.59",
"5.15.0-1053.60",
"5.15.0-1054.61",
"5.15.0-1055.62",
"5.15.0-1056.63",
"5.15.0-1057.64",
"5.15.0-1058.66",
"5.15.0-1059.67",
"5.15.0-1060.68",
"5.15.0-1061.69",
"5.15.0-1062.70",
"5.15.0-1063.71",
"5.15.0-1064.72",
"5.15.0-1065.73",
"5.15.0-1066.74",
"5.15.0-1067.75",
"5.15.0-1068.76",
"5.15.0-1069.77",
"5.15.0-1070.78",
"5.15.0-1071.79",
"5.15.0-1073.81",
"5.15.0-1074.82",
"5.15.0-1075.83",
"5.15.0-1076.84",
"5.15.0-1078.86",
"5.15.0-1079.87",
"5.15.0-1080.88",
"5.15.0-1081.89",
"5.15.0-1082.90",
"5.15.0-1083.91",
"5.15.0-1084.92",
"5.15.0-1086.94",
"5.15.0-1087.95",
"5.15.0-1088.96",
"5.15.0-1089.97",
"5.15.0-1091.99"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-buildinfo-5.19.0-50-generic",
"binary_version": "5.19.0-50.50"
},
{
"binary_name": "linux-buildinfo-5.19.0-50-generic-64k",
"binary_version": "5.19.0-50.50"
},
{
"binary_name": "linux-buildinfo-5.19.0-50-generic-lpae",
"binary_version": "5.19.0-50.50"
},
{
"binary_name": "linux-cloud-tools-5.19.0-50-generic",
"binary_version": "5.19.0-50.50"
},
{
"binary_name": "linux-headers-5.19.0-50-generic",
"binary_version": "5.19.0-50.50"
},
{
"binary_name": "linux-headers-5.19.0-50-generic-64k",
"binary_version": "5.19.0-50.50"
},
{
"binary_name": "linux-headers-5.19.0-50-generic-lpae",
"binary_version": "5.19.0-50.50"
},
{
"binary_name": "linux-hwe-5.19-cloud-tools-5.19.0-50",
"binary_version": "5.19.0-50.50"
},
{
"binary_name": "linux-hwe-5.19-cloud-tools-common",
"binary_version": "5.19.0-50.50"
},
{
"binary_name": "linux-hwe-5.19-headers-5.19.0-50",
"binary_version": "5.19.0-50.50"
},
{
"binary_name": "linux-hwe-5.19-tools-5.19.0-50",
"binary_version": "5.19.0-50.50"
},
{
"binary_name": "linux-hwe-5.19-tools-common",
"binary_version": "5.19.0-50.50"
},
{
"binary_name": "linux-hwe-5.19-tools-host",
"binary_version": "5.19.0-50.50"
},
{
"binary_name": "linux-image-5.19.0-50-generic",
"binary_version": "5.19.0-50.50"
},
{
"binary_name": "linux-image-5.19.0-50-generic-lpae",
"binary_version": "5.19.0-50.50"
},
{
"binary_name": "linux-image-unsigned-5.19.0-50-generic",
"binary_version": "5.19.0-50.50"
},
{
"binary_name": "linux-image-unsigned-5.19.0-50-generic-64k",
"binary_version": "5.19.0-50.50"
},
{
"binary_name": "linux-modules-5.19.0-50-generic",
"binary_version": "5.19.0-50.50"
},
{
"binary_name": "linux-modules-5.19.0-50-generic-64k",
"binary_version": "5.19.0-50.50"
},
{
"binary_name": "linux-modules-5.19.0-50-generic-lpae",
"binary_version": "5.19.0-50.50"
},
{
"binary_name": "linux-modules-extra-5.19.0-50-generic",
"binary_version": "5.19.0-50.50"
},
{
"binary_name": "linux-modules-ipu6-5.19.0-50-generic",
"binary_version": "5.19.0-50.50"
},
{
"binary_name": "linux-modules-ivsc-5.19.0-50-generic",
"binary_version": "5.19.0-50.50"
},
{
"binary_name": "linux-modules-iwlwifi-5.19.0-50-generic",
"binary_version": "5.19.0-50.50"
},
{
"binary_name": "linux-source-5.19.0",
"binary_version": "5.19.0-50.50"
},
{
"binary_name": "linux-tools-5.19.0-50-generic",
"binary_version": "5.19.0-50.50"
},
{
"binary_name": "linux-tools-5.19.0-50-generic-64k",
"binary_version": "5.19.0-50.50"
},
{
"binary_name": "linux-tools-5.19.0-50-generic-lpae",
"binary_version": "5.19.0-50.50"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "linux-hwe-5.19",
"purl": "pkg:deb/ubuntu/linux-hwe-5.19@5.19.0-50.50?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.19.0-28.29~22.04.1",
"5.19.0-32.33~22.04.1",
"5.19.0-35.36~22.04.1",
"5.19.0-38.39~22.04.1",
"5.19.0-40.41~22.04.1",
"5.19.0-41.42~22.04.1",
"5.19.0-42.43~22.04.1",
"5.19.0-43.44~22.04.1",
"5.19.0-45.46~22.04.1",
"5.19.0-46.47~22.04.1",
"5.19.0-50.50"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-buildinfo-6.2.0-39-generic",
"binary_version": "6.2.0-39.40~22.04.1"
},
{
"binary_name": "linux-buildinfo-6.2.0-39-generic-64k",
"binary_version": "6.2.0-39.40~22.04.1"
},
{
"binary_name": "linux-buildinfo-6.2.0-39-generic-lpae",
"binary_version": "6.2.0-39.40~22.04.1"
},
{
"binary_name": "linux-cloud-tools-6.2.0-39-generic",
"binary_version": "6.2.0-39.40~22.04.1"
},
{
"binary_name": "linux-headers-6.2.0-39-generic",
"binary_version": "6.2.0-39.40~22.04.1"
},
{
"binary_name": "linux-headers-6.2.0-39-generic-64k",
"binary_version": "6.2.0-39.40~22.04.1"
},
{
"binary_name": "linux-headers-6.2.0-39-generic-lpae",
"binary_version": "6.2.0-39.40~22.04.1"
},
{
"binary_name": "linux-hwe-6.2-cloud-tools-6.2.0-39",
"binary_version": "6.2.0-39.40~22.04.1"
},
{
"binary_name": "linux-hwe-6.2-cloud-tools-common",
"binary_version": "6.2.0-39.40~22.04.1"
},
{
"binary_name": "linux-hwe-6.2-headers-6.2.0-39",
"binary_version": "6.2.0-39.40~22.04.1"
},
{
"binary_name": "linux-hwe-6.2-tools-6.2.0-39",
"binary_version": "6.2.0-39.40~22.04.1"
},
{
"binary_name": "linux-hwe-6.2-tools-common",
"binary_version": "6.2.0-39.40~22.04.1"
},
{
"binary_name": "linux-hwe-6.2-tools-host",
"binary_version": "6.2.0-39.40~22.04.1"
},
{
"binary_name": "linux-image-6.2.0-39-generic",
"binary_version": "6.2.0-39.40~22.04.1"
},
{
"binary_name": "linux-image-6.2.0-39-generic-lpae",
"binary_version": "6.2.0-39.40~22.04.1"
},
{
"binary_name": "linux-image-unsigned-6.2.0-39-generic",
"binary_version": "6.2.0-39.40~22.04.1"
},
{
"binary_name": "linux-image-unsigned-6.2.0-39-generic-64k",
"binary_version": "6.2.0-39.40~22.04.1"
},
{
"binary_name": "linux-modules-6.2.0-39-generic",
"binary_version": "6.2.0-39.40~22.04.1"
},
{
"binary_name": "linux-modules-6.2.0-39-generic-64k",
"binary_version": "6.2.0-39.40~22.04.1"
},
{
"binary_name": "linux-modules-6.2.0-39-generic-lpae",
"binary_version": "6.2.0-39.40~22.04.1"
},
{
"binary_name": "linux-modules-extra-6.2.0-39-generic",
"binary_version": "6.2.0-39.40~22.04.1"
},
{
"binary_name": "linux-modules-ipu6-6.2.0-39-generic",
"binary_version": "6.2.0-39.40~22.04.1"
},
{
"binary_name": "linux-modules-ivsc-6.2.0-39-generic",
"binary_version": "6.2.0-39.40~22.04.1"
},
{
"binary_name": "linux-modules-iwlwifi-6.2.0-39-generic",
"binary_version": "6.2.0-39.40~22.04.1"
},
{
"binary_name": "linux-source-6.2.0",
"binary_version": "6.2.0-39.40~22.04.1"
},
{
"binary_name": "linux-tools-6.2.0-39-generic",
"binary_version": "6.2.0-39.40~22.04.1"
},
{
"binary_name": "linux-tools-6.2.0-39-generic-64k",
"binary_version": "6.2.0-39.40~22.04.1"
},
{
"binary_name": "linux-tools-6.2.0-39-generic-lpae",
"binary_version": "6.2.0-39.40~22.04.1"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "linux-hwe-6.2",
"purl": "pkg:deb/ubuntu/linux-hwe-6.2@6.2.0-39.40~22.04.1?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.2.0-25.25~22.04.2",
"6.2.0-26.26~22.04.1",
"6.2.0-31.31~22.04.1",
"6.2.0-32.32~22.04.1",
"6.2.0-33.33~22.04.1",
"6.2.0-34.34~22.04.1",
"6.2.0-35.35~22.04.1",
"6.2.0-36.37~22.04.1",
"6.2.0-37.38~22.04.1",
"6.2.0-39.40~22.04.1"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-buildinfo-6.5.0-45-generic",
"binary_version": "6.5.0-45.45~22.04.1"
},
{
"binary_name": "linux-buildinfo-6.5.0-45-generic-64k",
"binary_version": "6.5.0-45.45~22.04.1"
},
{
"binary_name": "linux-cloud-tools-6.5.0-45-generic",
"binary_version": "6.5.0-45.45~22.04.1"
},
{
"binary_name": "linux-headers-6.5.0-45-generic",
"binary_version": "6.5.0-45.45~22.04.1"
},
{
"binary_name": "linux-headers-6.5.0-45-generic-64k",
"binary_version": "6.5.0-45.45~22.04.1"
},
{
"binary_name": "linux-hwe-6.5-cloud-tools-6.5.0-45",
"binary_version": "6.5.0-45.45~22.04.1"
},
{
"binary_name": "linux-hwe-6.5-cloud-tools-common",
"binary_version": "6.5.0-45.45~22.04.1"
},
{
"binary_name": "linux-hwe-6.5-headers-6.5.0-45",
"binary_version": "6.5.0-45.45~22.04.1"
},
{
"binary_name": "linux-hwe-6.5-tools-6.5.0-45",
"binary_version": "6.5.0-45.45~22.04.1"
},
{
"binary_name": "linux-hwe-6.5-tools-common",
"binary_version": "6.5.0-45.45~22.04.1"
},
{
"binary_name": "linux-hwe-6.5-tools-host",
"binary_version": "6.5.0-45.45~22.04.1"
},
{
"binary_name": "linux-image-6.5.0-45-generic",
"binary_version": "6.5.0-45.45~22.04.1"
},
{
"binary_name": "linux-image-unsigned-6.5.0-45-generic",
"binary_version": "6.5.0-45.45~22.04.1"
},
{
"binary_name": "linux-image-unsigned-6.5.0-45-generic-64k",
"binary_version": "6.5.0-45.45~22.04.1"
},
{
"binary_name": "linux-modules-6.5.0-45-generic",
"binary_version": "6.5.0-45.45~22.04.1"
},
{
"binary_name": "linux-modules-6.5.0-45-generic-64k",
"binary_version": "6.5.0-45.45~22.04.1"
},
{
"binary_name": "linux-modules-extra-6.5.0-45-generic",
"binary_version": "6.5.0-45.45~22.04.1"
},
{
"binary_name": "linux-modules-ipu6-6.5.0-45-generic",
"binary_version": "6.5.0-45.45~22.04.1"
},
{
"binary_name": "linux-modules-ivsc-6.5.0-45-generic",
"binary_version": "6.5.0-45.45~22.04.1"
},
{
"binary_name": "linux-modules-iwlwifi-6.5.0-45-generic",
"binary_version": "6.5.0-45.45~22.04.1"
},
{
"binary_name": "linux-source-6.5.0",
"binary_version": "6.5.0-45.45~22.04.1"
},
{
"binary_name": "linux-tools-6.5.0-45-generic",
"binary_version": "6.5.0-45.45~22.04.1"
},
{
"binary_name": "linux-tools-6.5.0-45-generic-64k",
"binary_version": "6.5.0-45.45~22.04.1"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "linux-hwe-6.5",
"purl": "pkg:deb/ubuntu/linux-hwe-6.5@6.5.0-45.45~22.04.1?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.5.0-14.14~22.04.1",
"6.5.0-15.15~22.04.1",
"6.5.0-17.17~22.04.1",
"6.5.0-18.18~22.04.1",
"6.5.0-21.21~22.04.1",
"6.5.0-25.25~22.04.1",
"6.5.0-26.26~22.04.1",
"6.5.0-27.28~22.04.1",
"6.5.0-28.29~22.04.1",
"6.5.0-35.35~22.04.1",
"6.5.0-41.41~22.04.2",
"6.5.0-44.44~22.04.1",
"6.5.0-45.45~22.04.1"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "linux-buildinfo-6.8.0-124-generic",
"binary_version": "6.8.0-124.124~22.04.1"
},
{
"binary_name": "linux-buildinfo-6.8.0-124-generic-64k",
"binary_version": "6.8.0-124.124~22.04.1"
},
{
"binary_name": "linux-cloud-tools-6.8.0-124-generic",
"binary_version": "6.8.0-124.124~22.04.1"
},
{
"binary_name": "linux-headers-6.8.0-124-generic",
"binary_version": "6.8.0-124.124~22.04.1"
},
{
"binary_name": "linux-headers-6.8.0-124-generic-64k",
"binary_version": "6.8.0-124.124~22.04.1"
},
{
"binary_name": "linux-hwe-6.8-cloud-tools-6.8.0-124",
"binary_version": "6.8.0-124.124~22.04.1"
},
{
"binary_name": "linux-hwe-6.8-headers-6.8.0-124",
"binary_version": "6.8.0-124.124~22.04.1"
},
{
"binary_name": "linux-hwe-6.8-tools-6.8.0-124",
"binary_version": "6.8.0-124.124~22.04.1"
},
{
"binary_name": "linux-image-6.8.0-124-generic",
"binary_version": "6.8.0-124.124~22.04.1"
},
{
"binary_name": "linux-image-unsigned-6.8.0-124-generic",
"binary_version": "6.8.0-124.124~22.04.1"
},
{
"binary_name": "linux-image-unsigned-6.8.0-124-generic-64k",
"binary_version": "6.8.0-124.124~22.04.1"
},
{
"binary_name": "linux-modules-6.8.0-124-generic",
"binary_version": "6.8.0-124.124~22.04.1"
},
{
"binary_name": "linux-modules-6.8.0-124-generic-64k",
"binary_version": "6.8.0-124.124~22.04.1"
},
{
"binary_name": "linux-modules-extra-6.8.0-124-generic",
"binary_version": "6.8.0-124.124~22.04.1"
},
{
"binary_name": "linux-modules-ipu6-6.8.0-124-generic",
"binary_version": "6.8.0-124.124~22.04.1"
},
{
"binary_name": "linux-modules-iwlwifi-6.8.0-124-generic",
"binary_version": "6.8.0-124.124~22.04.1"
},
{
"binary_name": "linux-modules-usbio-6.8.0-124-generic",
"binary_version": "6.8.0-124.124~22.04.1"
},
{
"binary_name": "linux-tools-6.8.0-124-generic",
"binary_version": "6.8.0-124.124~22.04.1"
},
{
"binary_name": "linux-tools-6.8.0-124-generic-64k",
"binary_version": "6.8.0-124.124~22.04.1"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "linux-hwe-6.8",
"purl": "pkg:deb/ubuntu/linux-hwe-6.8@6.8.0-124.124~22.04.1?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.8.0-124.124~22.04.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.8.0-38.38~22.04.1",
"6.8.0-39.39~22.04.1",
"6.8.0-40.40~22.04.3",
"6.8.0-45.45~22.04.1",
"6.8.0-47.47~22.04.1",
"6.8.0-48.48~22.04.1",
"6.8.0-49.49~22.04.1",
"6.8.0-50.51~22.04.1",
"6.8.0-51.52~22.04.1",
"6.8.0-52.53~22.04.1",
"6.8.0-57.59~22.04.1",
"6.8.0-58.60~22.04.1",
"6.8.0-59.61~22.04.1",
"6.8.0-60.63~22.04.1",
"6.8.0-64.67~22.04.1",
"6.8.0-65.68~22.04.1",
"6.8.0-78.78~22.04.1",
"6.8.0-79.79~22.04.1",
"6.8.0-83.83~22.04.1",
"6.8.0-84.84~22.04.1",
"6.8.0-85.85~22.04.1",
"6.8.0-86.87~22.04.1",
"6.8.0-87.88~22.04.1",
"6.8.0-88.89~22.04.2",
"6.8.0-90.91~22.04.1",
"6.8.0-94.96~22.04.1",
"6.8.0-100.100~22.04.1",
"6.8.0-101.101~22.04.1",
"6.8.0-106.106~22.04.1",
"6.8.0-107.107~22.04.1",
"6.8.0-110.110~22.04.1",
"6.8.0-111.111~22.04.1",
"6.8.0-117.117~22.04.1"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "linux-buildinfo-5.15.0-1103-ibm",
"binary_version": "5.15.0-1103.106"
},
{
"binary_name": "linux-headers-5.15.0-1103-ibm",
"binary_version": "5.15.0-1103.106"
},
{
"binary_name": "linux-ibm-cloud-tools-common",
"binary_version": "5.15.0-1103.106"
},
{
"binary_name": "linux-ibm-headers-5.15.0-1103",
"binary_version": "5.15.0-1103.106"
},
{
"binary_name": "linux-ibm-source-5.15.0",
"binary_version": "5.15.0-1103.106"
},
{
"binary_name": "linux-ibm-tools-5.15.0-1103",
"binary_version": "5.15.0-1103.106"
},
{
"binary_name": "linux-ibm-tools-common",
"binary_version": "5.15.0-1103.106"
},
{
"binary_name": "linux-image-unsigned-5.15.0-1103-ibm",
"binary_version": "5.15.0-1103.106"
},
{
"binary_name": "linux-modules-5.15.0-1103-ibm",
"binary_version": "5.15.0-1103.106"
},
{
"binary_name": "linux-modules-extra-5.15.0-1103-ibm",
"binary_version": "5.15.0-1103.106"
},
{
"binary_name": "linux-tools-5.15.0-1103-ibm",
"binary_version": "5.15.0-1103.106"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "linux-ibm",
"purl": "pkg:deb/ubuntu/linux-ibm@5.15.0-1103.106?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "5.15.0-1103.106"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.15.0-1002.2",
"5.15.0-1003.3",
"5.15.0-1004.4",
"5.15.0-1005.5",
"5.15.0-1007.8",
"5.15.0-1009.11",
"5.15.0-1010.12",
"5.15.0-1012.14",
"5.15.0-1013.15",
"5.15.0-1015.17",
"5.15.0-1017.20",
"5.15.0-1018.21",
"5.15.0-1021.24",
"5.15.0-1022.25",
"5.15.0-1023.26",
"5.15.0-1025.28",
"5.15.0-1026.29",
"5.15.0-1027.30",
"5.15.0-1028.31",
"5.15.0-1029.32",
"5.15.0-1030.33",
"5.15.0-1031.34",
"5.15.0-1032.35",
"5.15.0-1033.36",
"5.15.0-1034.37",
"5.15.0-1035.38",
"5.15.0-1036.39",
"5.15.0-1037.40",
"5.15.0-1038.41",
"5.15.0-1040.43",
"5.15.0-1041.44",
"5.15.0-1042.45",
"5.15.0-1043.46",
"5.15.0-1044.47",
"5.15.0-1045.48",
"5.15.0-1046.49",
"5.15.0-1047.50",
"5.15.0-1048.51",
"5.15.0-1049.52",
"5.15.0-1050.53",
"5.15.0-1053.56",
"5.15.0-1054.57",
"5.15.0-1055.58",
"5.15.0-1056.59",
"5.15.0-1057.60",
"5.15.0-1058.61",
"5.15.0-1059.62",
"5.15.0-1060.63",
"5.15.0-1061.64",
"5.15.0-1062.65",
"5.15.0-1063.66",
"5.15.0-1064.67",
"5.15.0-1065.68",
"5.15.0-1066.69",
"5.15.0-1067.70",
"5.15.0-1068.71",
"5.15.0-1069.72",
"5.15.0-1070.73",
"5.15.0-1071.74",
"5.15.0-1072.75",
"5.15.0-1073.76",
"5.15.0-1074.77",
"5.15.0-1075.78",
"5.15.0-1076.79",
"5.15.0-1077.80",
"5.15.0-1078.81",
"5.15.0-1079.82",
"5.15.0-1080.83",
"5.15.0-1081.84",
"5.15.0-1084.87",
"5.15.0-1085.88",
"5.15.0-1086.89",
"5.15.0-1087.90",
"5.15.0-1089.92",
"5.15.0-1090.93",
"5.15.0-1091.94",
"5.15.0-1092.95",
"5.15.0-1093.96",
"5.15.0-1094.97",
"5.15.0-1095.98",
"5.15.0-1097.100",
"5.15.0-1098.101",
"5.15.0-1099.102",
"5.15.0-1100.103",
"5.15.0-1102.105"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "linux-buildinfo-6.8.0-1057-ibm",
"binary_version": "6.8.0-1057.58~22.04.1"
},
{
"binary_name": "linux-headers-6.8.0-1057-ibm",
"binary_version": "6.8.0-1057.58~22.04.1"
},
{
"binary_name": "linux-ibm-6.8-headers-6.8.0-1057",
"binary_version": "6.8.0-1057.58~22.04.1"
},
{
"binary_name": "linux-ibm-6.8-tools-6.8.0-1057",
"binary_version": "6.8.0-1057.58~22.04.1"
},
{
"binary_name": "linux-image-unsigned-6.8.0-1057-ibm",
"binary_version": "6.8.0-1057.58~22.04.1"
},
{
"binary_name": "linux-modules-6.8.0-1057-ibm",
"binary_version": "6.8.0-1057.58~22.04.1"
},
{
"binary_name": "linux-modules-extra-6.8.0-1057-ibm",
"binary_version": "6.8.0-1057.58~22.04.1"
},
{
"binary_name": "linux-modules-iwlwifi-6.8.0-1057-ibm",
"binary_version": "6.8.0-1057.58~22.04.1"
},
{
"binary_name": "linux-tools-6.8.0-1057-ibm",
"binary_version": "6.8.0-1057.58~22.04.1"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "linux-ibm-6.8",
"purl": "pkg:deb/ubuntu/linux-ibm-6.8@6.8.0-1057.58~22.04.1?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.8.0-1057.58~22.04.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.8.0-1008.8~22.04.1",
"6.8.0-1010.10~22.04.1",
"6.8.0-1011.11~22.04.1",
"6.8.0-1012.12~22.04.1",
"6.8.0-1013.13~22.04.1",
"6.8.0-1014.14~22.04.1",
"6.8.0-1015.15~22.04.1",
"6.8.0-1016.16~22.04.1",
"6.8.0-1017.17~22.04.1",
"6.8.0-1018.18~22.04.1",
"6.8.0-1019.19~22.04.1",
"6.8.0-1023.23~22.04.1",
"6.8.0-1024.24~22.04.1",
"6.8.0-1025.25~22.04.1",
"6.8.0-1026.26~22.04.1",
"6.8.0-1027.27~22.04.1",
"6.8.0-1028.28~22.04.1",
"6.8.0-1029.29~22.04.1",
"6.8.0-1030.30~22.04.1",
"6.8.0-1033.33~22.04.1",
"6.8.0-1036.36~22.04.1",
"6.8.0-1037.37~22.04.1",
"6.8.0-1038.38~22.04.1",
"6.8.0-1039.39~22.04.1",
"6.8.0-1040.40~22.04.1",
"6.8.0-1041.41~22.04.1",
"6.8.0-1042.42~22.04.1",
"6.8.0-1043.43~22.04.1",
"6.8.0-1044.44~22.04.1",
"6.8.0-1045.45~22.04.1",
"6.8.0-1049.49~22.04.1",
"6.8.0-1050.50~22.04.1",
"6.8.0-1051.51~22.04.1",
"6.8.0-1052.52~22.04.1",
"6.8.0-1055.56~22.04.1"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-buildinfo-5.15.0-1073-intel-iot-realtime",
"binary_version": "5.15.0-1073.75"
},
{
"binary_name": "linux-cloud-tools-5.15.0-1073-intel-iot-realtime",
"binary_version": "5.15.0-1073.75"
},
{
"binary_name": "linux-headers-5.15.0-1073-intel-iot-realtime",
"binary_version": "5.15.0-1073.75"
},
{
"binary_name": "linux-image-unsigned-5.15.0-1073-intel-iot-realtime",
"binary_version": "5.15.0-1073.75"
},
{
"binary_name": "linux-intel-iot-realtime-cloud-tools-5.15.0-1073",
"binary_version": "5.15.0-1073.75"
},
{
"binary_name": "linux-intel-iot-realtime-cloud-tools-common",
"binary_version": "5.15.0-1073.75"
},
{
"binary_name": "linux-intel-iot-realtime-headers-5.15.0-1073",
"binary_version": "5.15.0-1073.75"
},
{
"binary_name": "linux-intel-iot-realtime-tools-5.15.0-1073",
"binary_version": "5.15.0-1073.75"
},
{
"binary_name": "linux-intel-iot-realtime-tools-common",
"binary_version": "5.15.0-1073.75"
},
{
"binary_name": "linux-intel-iot-realtime-tools-host",
"binary_version": "5.15.0-1073.75"
},
{
"binary_name": "linux-modules-5.15.0-1073-intel-iot-realtime",
"binary_version": "5.15.0-1073.75"
},
{
"binary_name": "linux-modules-extra-5.15.0-1073-intel-iot-realtime",
"binary_version": "5.15.0-1073.75"
},
{
"binary_name": "linux-tools-5.15.0-1073-intel-iot-realtime",
"binary_version": "5.15.0-1073.75"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "linux-intel-iot-realtime",
"purl": "pkg:deb/ubuntu/linux-intel-iot-realtime@5.15.0-1073.75?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.15.0-1073.75"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "linux-buildinfo-5.15.0-1104-intel-iotg",
"binary_version": "5.15.0-1104.110"
},
{
"binary_name": "linux-cloud-tools-5.15.0-1104-intel-iotg",
"binary_version": "5.15.0-1104.110"
},
{
"binary_name": "linux-headers-5.15.0-1104-intel-iotg",
"binary_version": "5.15.0-1104.110"
},
{
"binary_name": "linux-image-unsigned-5.15.0-1104-intel-iotg",
"binary_version": "5.15.0-1104.110"
},
{
"binary_name": "linux-intel-iotg-cloud-tools-5.15.0-1104",
"binary_version": "5.15.0-1104.110"
},
{
"binary_name": "linux-intel-iotg-cloud-tools-common",
"binary_version": "5.15.0-1104.110"
},
{
"binary_name": "linux-intel-iotg-headers-5.15.0-1104",
"binary_version": "5.15.0-1104.110"
},
{
"binary_name": "linux-intel-iotg-tools-5.15.0-1104",
"binary_version": "5.15.0-1104.110"
},
{
"binary_name": "linux-intel-iotg-tools-common",
"binary_version": "5.15.0-1104.110"
},
{
"binary_name": "linux-intel-iotg-tools-host",
"binary_version": "5.15.0-1104.110"
},
{
"binary_name": "linux-modules-5.15.0-1104-intel-iotg",
"binary_version": "5.15.0-1104.110"
},
{
"binary_name": "linux-modules-extra-5.15.0-1104-intel-iotg",
"binary_version": "5.15.0-1104.110"
},
{
"binary_name": "linux-modules-iwlwifi-5.15.0-1104-intel-iotg",
"binary_version": "5.15.0-1104.110"
},
{
"binary_name": "linux-tools-5.15.0-1104-intel-iotg",
"binary_version": "5.15.0-1104.110"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "linux-intel-iotg",
"purl": "pkg:deb/ubuntu/linux-intel-iotg@5.15.0-1104.110?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "5.15.0-1104.110"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.15.0-1004.6",
"5.15.0-1008.11",
"5.15.0-1010.14",
"5.15.0-1013.17",
"5.15.0-1015.20",
"5.15.0-1016.21",
"5.15.0-1017.22",
"5.15.0-1018.23",
"5.15.0-1021.26",
"5.15.0-1023.28",
"5.15.0-1025.30",
"5.15.0-1026.31",
"5.15.0-1027.32",
"5.15.0-1028.33",
"5.15.0-1030.35",
"5.15.0-1031.36",
"5.15.0-1033.38",
"5.15.0-1034.39",
"5.15.0-1035.40",
"5.15.0-1036.41",
"5.15.0-1037.42",
"5.15.0-1038.43",
"5.15.0-1039.45",
"5.15.0-1040.46",
"5.15.0-1043.49",
"5.15.0-1045.51",
"5.15.0-1046.52",
"5.15.0-1047.53",
"5.15.0-1048.54",
"5.15.0-1049.55",
"5.15.0-1050.56",
"5.15.0-1051.57",
"5.15.0-1052.58",
"5.15.0-1055.61",
"5.15.0-1057.63",
"5.15.0-1058.64",
"5.15.0-1059.65",
"5.15.0-1060.66",
"5.15.0-1061.67",
"5.15.0-1062.68",
"5.15.0-1063.69",
"5.15.0-1064.70",
"5.15.0-1065.71",
"5.15.0-1066.72",
"5.15.0-1067.73",
"5.15.0-1071.77",
"5.15.0-1072.78",
"5.15.0-1073.79",
"5.15.0-1074.80",
"5.15.0-1075.81",
"5.15.0-1076.82",
"5.15.0-1077.83",
"5.15.0-1078.84",
"5.15.0-1079.85",
"5.15.0-1080.86",
"5.15.0-1081.87",
"5.15.0-1082.88",
"5.15.0-1083.89",
"5.15.0-1084.90",
"5.15.0-1085.91",
"5.15.0-1086.92",
"5.15.0-1087.93",
"5.15.0-1088.94",
"5.15.0-1090.96",
"5.15.0-1091.97",
"5.15.0-1092.98",
"5.15.0-1093.99",
"5.15.0-1094.100",
"5.15.0-1095.101",
"5.15.0-1096.102",
"5.15.0-1098.104",
"5.15.0-1099.105",
"5.15.0-1100.106",
"5.15.0-1101.107",
"5.15.0-1103.109"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "linux-buildinfo-5.15.0-1101-kvm",
"binary_version": "5.15.0-1101.106"
},
{
"binary_name": "linux-headers-5.15.0-1101-kvm",
"binary_version": "5.15.0-1101.106"
},
{
"binary_name": "linux-image-unsigned-5.15.0-1101-kvm",
"binary_version": "5.15.0-1101.106"
},
{
"binary_name": "linux-kvm-headers-5.15.0-1101",
"binary_version": "5.15.0-1101.106"
},
{
"binary_name": "linux-kvm-tools-5.15.0-1101",
"binary_version": "5.15.0-1101.106"
},
{
"binary_name": "linux-modules-5.15.0-1101-kvm",
"binary_version": "5.15.0-1101.106"
},
{
"binary_name": "linux-tools-5.15.0-1101-kvm",
"binary_version": "5.15.0-1101.106"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "linux-kvm",
"purl": "pkg:deb/ubuntu/linux-kvm@5.15.0-1101.106?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "5.15.0-1101.106"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.13.0-1004.4",
"5.13.0-1006.6+22.04.1",
"5.13.0-1007.7+22.04.1",
"5.13.0-1010.11+22.04.1",
"5.15.0-1002.2",
"5.15.0-1004.4",
"5.15.0-1005.5",
"5.15.0-1007.7",
"5.15.0-1008.8",
"5.15.0-1010.11",
"5.15.0-1012.14",
"5.15.0-1013.16",
"5.15.0-1016.19",
"5.15.0-1017.21",
"5.15.0-1018.22",
"5.15.0-1019.23",
"5.15.0-1020.24",
"5.15.0-1021.26",
"5.15.0-1024.29",
"5.15.0-1025.30",
"5.15.0-1026.31",
"5.15.0-1028.33",
"5.15.0-1029.34",
"5.15.0-1030.35",
"5.15.0-1031.36",
"5.15.0-1032.37",
"5.15.0-1033.38",
"5.15.0-1034.39",
"5.15.0-1035.40",
"5.15.0-1037.42",
"5.15.0-1038.43",
"5.15.0-1039.44",
"5.15.0-1040.45",
"5.15.0-1041.46",
"5.15.0-1042.47",
"5.15.0-1044.49",
"5.15.0-1045.50",
"5.15.0-1046.51",
"5.15.0-1047.52",
"5.15.0-1048.53",
"5.15.0-1049.54",
"5.15.0-1050.55",
"5.15.0-1051.56",
"5.15.0-1052.57",
"5.15.0-1053.58",
"5.15.0-1054.59",
"5.15.0-1057.62",
"5.15.0-1058.63",
"5.15.0-1059.64",
"5.15.0-1060.65",
"5.15.0-1061.66",
"5.15.0-1062.67",
"5.15.0-1063.68",
"5.15.0-1064.69",
"5.15.0-1065.70",
"5.15.0-1066.71",
"5.15.0-1067.72",
"5.15.0-1068.73",
"5.15.0-1069.74",
"5.15.0-1070.75",
"5.15.0-1071.76",
"5.15.0-1072.77",
"5.15.0-1073.78",
"5.15.0-1076.81",
"5.15.0-1077.82",
"5.15.0-1078.83",
"5.15.0-1079.84",
"5.15.0-1080.85",
"5.15.0-1081.86",
"5.15.0-1082.87",
"5.15.0-1083.88",
"5.15.0-1084.89",
"5.15.0-1085.90",
"5.15.0-1086.91",
"5.15.0-1087.92",
"5.15.0-1088.93",
"5.15.0-1089.94",
"5.15.0-1090.95",
"5.15.0-1091.96",
"5.15.0-1092.97",
"5.15.0-1093.98",
"5.15.0-1095.100",
"5.15.0-1096.101",
"5.15.0-1097.102",
"5.15.0-1098.103",
"5.15.0-1100.105"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "linux-buildinfo-5.15.0-181-lowlatency",
"binary_version": "5.15.0-181.191"
},
{
"binary_name": "linux-buildinfo-5.15.0-181-lowlatency-64k",
"binary_version": "5.15.0-181.191"
},
{
"binary_name": "linux-cloud-tools-5.15.0-181-lowlatency",
"binary_version": "5.15.0-181.191"
},
{
"binary_name": "linux-headers-5.15.0-181-lowlatency",
"binary_version": "5.15.0-181.191"
},
{
"binary_name": "linux-headers-5.15.0-181-lowlatency-64k",
"binary_version": "5.15.0-181.191"
},
{
"binary_name": "linux-image-unsigned-5.15.0-181-lowlatency",
"binary_version": "5.15.0-181.191"
},
{
"binary_name": "linux-image-unsigned-5.15.0-181-lowlatency-64k",
"binary_version": "5.15.0-181.191"
},
{
"binary_name": "linux-lowlatency-cloud-tools-5.15.0-181",
"binary_version": "5.15.0-181.191"
},
{
"binary_name": "linux-lowlatency-headers-5.15.0-181",
"binary_version": "5.15.0-181.191"
},
{
"binary_name": "linux-lowlatency-tools-5.15.0-181",
"binary_version": "5.15.0-181.191"
},
{
"binary_name": "linux-modules-5.15.0-181-lowlatency",
"binary_version": "5.15.0-181.191"
},
{
"binary_name": "linux-modules-5.15.0-181-lowlatency-64k",
"binary_version": "5.15.0-181.191"
},
{
"binary_name": "linux-modules-iwlwifi-5.15.0-181-lowlatency",
"binary_version": "5.15.0-181.191"
},
{
"binary_name": "linux-tools-5.15.0-181-lowlatency",
"binary_version": "5.15.0-181.191"
},
{
"binary_name": "linux-tools-5.15.0-181-lowlatency-64k",
"binary_version": "5.15.0-181.191"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "linux-lowlatency",
"purl": "pkg:deb/ubuntu/linux-lowlatency@5.15.0-181.191?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "5.15.0-181.191"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.15.0-22.22",
"5.15.0-23.23",
"5.15.0-24.24",
"5.15.0-27.28",
"5.15.0-30.31",
"5.15.0-33.34",
"5.15.0-35.36",
"5.15.0-37.39",
"5.15.0-39.42",
"5.15.0-40.43",
"5.15.0-41.44",
"5.15.0-43.46",
"5.15.0-46.49",
"5.15.0-47.53",
"5.15.0-48.54",
"5.15.0-50.56",
"5.15.0-52.58",
"5.15.0-53.59",
"5.15.0-56.62",
"5.15.0-57.63",
"5.15.0-58.64",
"5.15.0-60.66",
"5.15.0-67.74",
"5.15.0-69.76",
"5.15.0-70.77",
"5.15.0-71.78",
"5.15.0-72.79",
"5.15.0-73.80",
"5.15.0-75.82",
"5.15.0-76.83",
"5.15.0-78.85",
"5.15.0-79.88",
"5.15.0-82.91",
"5.15.0-83.92",
"5.15.0-84.93",
"5.15.0-86.95",
"5.15.0-87.96",
"5.15.0-88.98",
"5.15.0-89.99",
"5.15.0-91.101",
"5.15.0-92.102",
"5.15.0-94.104",
"5.15.0-97.107",
"5.15.0-100.110",
"5.15.0-101.111",
"5.15.0-102.112",
"5.15.0-105.115",
"5.15.0-106.116",
"5.15.0-107.117",
"5.15.0-110.120",
"5.15.0-113.123",
"5.15.0-116.126",
"5.15.0-117.127",
"5.15.0-118.128",
"5.15.0-119.129",
"5.15.0-121.131",
"5.15.0-122.132",
"5.15.0-124.134",
"5.15.0-125.135",
"5.15.0-126.136",
"5.15.0-127.137",
"5.15.0-128.138",
"5.15.0-129.139",
"5.15.0-131.141",
"5.15.0-133.143",
"5.15.0-134.145",
"5.15.0-135.146",
"5.15.0-136.147",
"5.15.0-138.148",
"5.15.0-139.149",
"5.15.0-140.150",
"5.15.0-141.151",
"5.15.0-142.152",
"5.15.0-143.153",
"5.15.0-144.157",
"5.15.0-145.158",
"5.15.0-152.162",
"5.15.0-153.163",
"5.15.0-156.166",
"5.15.0-157.167",
"5.15.0-160.170",
"5.15.0-161.171",
"5.15.0-163.173",
"5.15.0-164.174",
"5.15.0-168.178",
"5.15.0-170.180",
"5.15.0-171.181",
"5.15.0-173.183",
"5.15.0-174.184",
"5.15.0-175.185",
"5.15.0-177.187",
"5.15.0-178.188",
"5.15.0-179.189"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-buildinfo-5.19.0-1030-lowlatency",
"binary_version": "5.19.0-1030.30"
},
{
"binary_name": "linux-buildinfo-5.19.0-1030-lowlatency-64k",
"binary_version": "5.19.0-1030.30"
},
{
"binary_name": "linux-cloud-tools-5.19.0-1030-lowlatency",
"binary_version": "5.19.0-1030.30"
},
{
"binary_name": "linux-headers-5.19.0-1030-lowlatency",
"binary_version": "5.19.0-1030.30"
},
{
"binary_name": "linux-headers-5.19.0-1030-lowlatency-64k",
"binary_version": "5.19.0-1030.30"
},
{
"binary_name": "linux-image-unsigned-5.19.0-1030-lowlatency",
"binary_version": "5.19.0-1030.30"
},
{
"binary_name": "linux-image-unsigned-5.19.0-1030-lowlatency-64k",
"binary_version": "5.19.0-1030.30"
},
{
"binary_name": "linux-lowlatency-hwe-5.19-cloud-tools-5.19.0-1030",
"binary_version": "5.19.0-1030.30"
},
{
"binary_name": "linux-lowlatency-hwe-5.19-cloud-tools-common",
"binary_version": "5.19.0-1030.30"
},
{
"binary_name": "linux-lowlatency-hwe-5.19-headers-5.19.0-1030",
"binary_version": "5.19.0-1030.30"
},
{
"binary_name": "linux-lowlatency-hwe-5.19-tools-5.19.0-1030",
"binary_version": "5.19.0-1030.30"
},
{
"binary_name": "linux-lowlatency-hwe-5.19-tools-common",
"binary_version": "5.19.0-1030.30"
},
{
"binary_name": "linux-lowlatency-hwe-5.19-tools-host",
"binary_version": "5.19.0-1030.30"
},
{
"binary_name": "linux-modules-5.19.0-1030-lowlatency",
"binary_version": "5.19.0-1030.30"
},
{
"binary_name": "linux-modules-5.19.0-1030-lowlatency-64k",
"binary_version": "5.19.0-1030.30"
},
{
"binary_name": "linux-modules-ipu6-5.19.0-1030-lowlatency",
"binary_version": "5.19.0-1030.30"
},
{
"binary_name": "linux-modules-ivsc-5.19.0-1030-lowlatency",
"binary_version": "5.19.0-1030.30"
},
{
"binary_name": "linux-modules-iwlwifi-5.19.0-1030-lowlatency",
"binary_version": "5.19.0-1030.30"
},
{
"binary_name": "linux-tools-5.19.0-1030-lowlatency",
"binary_version": "5.19.0-1030.30"
},
{
"binary_name": "linux-tools-5.19.0-1030-lowlatency-64k",
"binary_version": "5.19.0-1030.30"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "linux-lowlatency-hwe-5.19",
"purl": "pkg:deb/ubuntu/linux-lowlatency-hwe-5.19@5.19.0-1030.30?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.19.0-1017.18~22.04.1",
"5.19.0-1018.19~22.04.1",
"5.19.0-1021.22~22.04.1",
"5.19.0-1022.23~22.04.1",
"5.19.0-1023.24~22.04.1",
"5.19.0-1024.25~22.04.1",
"5.19.0-1025.26~22.04.1",
"5.19.0-1027.28~22.04.1",
"5.19.0-1028.29~22.04.1",
"5.19.0-1030.30"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-buildinfo-6.2.0-1018-lowlatency",
"binary_version": "6.2.0-1018.18~22.04.1"
},
{
"binary_name": "linux-buildinfo-6.2.0-1018-lowlatency-64k",
"binary_version": "6.2.0-1018.18~22.04.1"
},
{
"binary_name": "linux-cloud-tools-6.2.0-1018-lowlatency",
"binary_version": "6.2.0-1018.18~22.04.1"
},
{
"binary_name": "linux-headers-6.2.0-1018-lowlatency",
"binary_version": "6.2.0-1018.18~22.04.1"
},
{
"binary_name": "linux-headers-6.2.0-1018-lowlatency-64k",
"binary_version": "6.2.0-1018.18~22.04.1"
},
{
"binary_name": "linux-image-unsigned-6.2.0-1018-lowlatency",
"binary_version": "6.2.0-1018.18~22.04.1"
},
{
"binary_name": "linux-image-unsigned-6.2.0-1018-lowlatency-64k",
"binary_version": "6.2.0-1018.18~22.04.1"
},
{
"binary_name": "linux-lowlatency-hwe-6.2-cloud-tools-6.2.0-1018",
"binary_version": "6.2.0-1018.18~22.04.1"
},
{
"binary_name": "linux-lowlatency-hwe-6.2-cloud-tools-common",
"binary_version": "6.2.0-1018.18~22.04.1"
},
{
"binary_name": "linux-lowlatency-hwe-6.2-headers-6.2.0-1018",
"binary_version": "6.2.0-1018.18~22.04.1"
},
{
"binary_name": "linux-lowlatency-hwe-6.2-tools-6.2.0-1018",
"binary_version": "6.2.0-1018.18~22.04.1"
},
{
"binary_name": "linux-lowlatency-hwe-6.2-tools-common",
"binary_version": "6.2.0-1018.18~22.04.1"
},
{
"binary_name": "linux-lowlatency-hwe-6.2-tools-host",
"binary_version": "6.2.0-1018.18~22.04.1"
},
{
"binary_name": "linux-modules-6.2.0-1018-lowlatency",
"binary_version": "6.2.0-1018.18~22.04.1"
},
{
"binary_name": "linux-modules-6.2.0-1018-lowlatency-64k",
"binary_version": "6.2.0-1018.18~22.04.1"
},
{
"binary_name": "linux-modules-ipu6-6.2.0-1018-lowlatency",
"binary_version": "6.2.0-1018.18~22.04.1"
},
{
"binary_name": "linux-modules-ivsc-6.2.0-1018-lowlatency",
"binary_version": "6.2.0-1018.18~22.04.1"
},
{
"binary_name": "linux-modules-iwlwifi-6.2.0-1018-lowlatency",
"binary_version": "6.2.0-1018.18~22.04.1"
},
{
"binary_name": "linux-tools-6.2.0-1018-lowlatency",
"binary_version": "6.2.0-1018.18~22.04.1"
},
{
"binary_name": "linux-tools-6.2.0-1018-lowlatency-64k",
"binary_version": "6.2.0-1018.18~22.04.1"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "linux-lowlatency-hwe-6.2",
"purl": "pkg:deb/ubuntu/linux-lowlatency-hwe-6.2@6.2.0-1018.18~22.04.1?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.2.0-1008.8~22.04.1",
"6.2.0-1009.9~22.04.1",
"6.2.0-1011.11~22.04.1",
"6.2.0-1012.12~22.04.1",
"6.2.0-1013.13~22.04.1",
"6.2.0-1014.14~22.04.1",
"6.2.0-1015.15~22.04.1",
"6.2.0-1016.16~22.04.1",
"6.2.0-1017.17~22.04.1",
"6.2.0-1018.18~22.04.1"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-buildinfo-6.5.0-45-lowlatency",
"binary_version": "6.5.0-45.45.1~22.04.1"
},
{
"binary_name": "linux-buildinfo-6.5.0-45-lowlatency-64k",
"binary_version": "6.5.0-45.45.1~22.04.1"
},
{
"binary_name": "linux-cloud-tools-6.5.0-45-lowlatency",
"binary_version": "6.5.0-45.45.1~22.04.1"
},
{
"binary_name": "linux-headers-6.5.0-45-lowlatency",
"binary_version": "6.5.0-45.45.1~22.04.1"
},
{
"binary_name": "linux-headers-6.5.0-45-lowlatency-64k",
"binary_version": "6.5.0-45.45.1~22.04.1"
},
{
"binary_name": "linux-image-unsigned-6.5.0-45-lowlatency",
"binary_version": "6.5.0-45.45.1~22.04.1"
},
{
"binary_name": "linux-image-unsigned-6.5.0-45-lowlatency-64k",
"binary_version": "6.5.0-45.45.1~22.04.1"
},
{
"binary_name": "linux-lowlatency-hwe-6.5-cloud-tools-6.5.0-45",
"binary_version": "6.5.0-45.45.1~22.04.1"
},
{
"binary_name": "linux-lowlatency-hwe-6.5-cloud-tools-common",
"binary_version": "6.5.0-45.45.1~22.04.1"
},
{
"binary_name": "linux-lowlatency-hwe-6.5-headers-6.5.0-45",
"binary_version": "6.5.0-45.45.1~22.04.1"
},
{
"binary_name": "linux-lowlatency-hwe-6.5-lib-rust-6.5.0-45-lowlatency",
"binary_version": "6.5.0-45.45.1~22.04.1"
},
{
"binary_name": "linux-lowlatency-hwe-6.5-tools-6.5.0-45",
"binary_version": "6.5.0-45.45.1~22.04.1"
},
{
"binary_name": "linux-lowlatency-hwe-6.5-tools-common",
"binary_version": "6.5.0-45.45.1~22.04.1"
},
{
"binary_name": "linux-lowlatency-hwe-6.5-tools-host",
"binary_version": "6.5.0-45.45.1~22.04.1"
},
{
"binary_name": "linux-modules-6.5.0-45-lowlatency",
"binary_version": "6.5.0-45.45.1~22.04.1"
},
{
"binary_name": "linux-modules-6.5.0-45-lowlatency-64k",
"binary_version": "6.5.0-45.45.1~22.04.1"
},
{
"binary_name": "linux-modules-iwlwifi-6.5.0-45-lowlatency",
"binary_version": "6.5.0-45.45.1~22.04.1"
},
{
"binary_name": "linux-tools-6.5.0-45-lowlatency",
"binary_version": "6.5.0-45.45.1~22.04.1"
},
{
"binary_name": "linux-tools-6.5.0-45-lowlatency-64k",
"binary_version": "6.5.0-45.45.1~22.04.1"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "linux-lowlatency-hwe-6.5",
"purl": "pkg:deb/ubuntu/linux-lowlatency-hwe-6.5@6.5.0-45.45.1~22.04.1?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.5.0-14.14.1~22.04.1",
"6.5.0-15.15.1.1~22.04.1",
"6.5.0-17.17.1.1.1~22.04.1",
"6.5.0-21.21.1~22.04.1",
"6.5.0-25.25.1~22.04.1",
"6.5.0-26.26.1~22.04.1",
"6.5.0-27.28.1~22.04.1",
"6.5.0-28.29.1~22.04.1",
"6.5.0-35.35.1~22.04.1",
"6.5.0-41.41.1~22.04.1",
"6.5.0-42.42.1~22.04.1",
"6.5.0-44.44.1~22.04.1",
"6.5.0-45.45.1~22.04.1"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "linux-buildinfo-6.8.0-134-lowlatency",
"binary_version": "6.8.0-134.134.1~22.04.1"
},
{
"binary_name": "linux-buildinfo-6.8.0-134-lowlatency-64k",
"binary_version": "6.8.0-134.134.1~22.04.1"
},
{
"binary_name": "linux-cloud-tools-6.8.0-134-lowlatency",
"binary_version": "6.8.0-134.134.1~22.04.1"
},
{
"binary_name": "linux-headers-6.8.0-134-lowlatency",
"binary_version": "6.8.0-134.134.1~22.04.1"
},
{
"binary_name": "linux-headers-6.8.0-134-lowlatency-64k",
"binary_version": "6.8.0-134.134.1~22.04.1"
},
{
"binary_name": "linux-image-unsigned-6.8.0-134-lowlatency",
"binary_version": "6.8.0-134.134.1~22.04.1"
},
{
"binary_name": "linux-image-unsigned-6.8.0-134-lowlatency-64k",
"binary_version": "6.8.0-134.134.1~22.04.1"
},
{
"binary_name": "linux-lowlatency-hwe-6.8-cloud-tools-6.8.0-134",
"binary_version": "6.8.0-134.134.1~22.04.1"
},
{
"binary_name": "linux-lowlatency-hwe-6.8-headers-6.8.0-134",
"binary_version": "6.8.0-134.134.1~22.04.1"
},
{
"binary_name": "linux-lowlatency-hwe-6.8-lib-rust-6.8.0-134-lowlatency",
"binary_version": "6.8.0-134.134.1~22.04.1"
},
{
"binary_name": "linux-lowlatency-hwe-6.8-tools-6.8.0-134",
"binary_version": "6.8.0-134.134.1~22.04.1"
},
{
"binary_name": "linux-modules-6.8.0-134-lowlatency",
"binary_version": "6.8.0-134.134.1~22.04.1"
},
{
"binary_name": "linux-modules-6.8.0-134-lowlatency-64k",
"binary_version": "6.8.0-134.134.1~22.04.1"
},
{
"binary_name": "linux-modules-iwlwifi-6.8.0-134-lowlatency",
"binary_version": "6.8.0-134.134.1~22.04.1"
},
{
"binary_name": "linux-tools-6.8.0-134-lowlatency",
"binary_version": "6.8.0-134.134.1~22.04.1"
},
{
"binary_name": "linux-tools-6.8.0-134-lowlatency-64k",
"binary_version": "6.8.0-134.134.1~22.04.1"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "linux-lowlatency-hwe-6.8",
"purl": "pkg:deb/ubuntu/linux-lowlatency-hwe-6.8@6.8.0-134.134.1~22.04.1?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.8.0-134.134.1~22.04.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.8.0-38.38.1~22.04.2",
"6.8.0-40.40.1~22.04.1",
"6.8.0-44.44.1~22.04.1",
"6.8.0-45.45.1~22.04.1",
"6.8.0-47.47.1~22.04.1",
"6.8.0-48.48.3~22.04.1",
"6.8.0-49.49.1~22.04.1",
"6.8.0-50.51.1~22.04.1",
"6.8.0-51.52.1~22.04.1",
"6.8.0-52.53.1~22.04.1",
"6.8.0-54.56.1~22.04.1",
"6.8.0-55.57.1~22.04.1",
"6.8.0-56.58.1~22.04.1",
"6.8.0-57.59.1~22.04.1",
"6.8.0-58.60.1~22.04.1",
"6.8.0-59.61.1~22.04.1",
"6.8.0-60.63.1~22.04.1",
"6.8.0-62.65.1~22.04.1",
"6.8.0-63.66.1~22.04.1",
"6.8.0-64.67.1~22.04.1",
"6.8.0-65.68.1~22.04.1",
"6.8.0-78.78.1~22.04.1",
"6.8.0-79.79.1~22.04.1",
"6.8.0-83.83.1~22.04.1",
"6.8.0-84.84.1~22.04.1",
"6.8.0-85.85.1~22.04.1",
"6.8.0-86.87.1~22.04.1",
"6.8.0-87.88.1~22.04.1",
"6.8.0-88.89.1~22.04.1",
"6.8.0-90.91.1~22.04.1",
"6.8.0-94.96.1~22.04.1",
"6.8.0-100.100.1~22.04.1",
"6.8.0-101.101.1~22.04.1",
"6.8.0-106.106.1~22.04.1",
"6.8.0-107.107.1~22.04.1",
"6.8.0-110.110.1~22.04.1",
"6.8.0-111.111.1~22.04.1",
"6.8.0-117.117.1~22.04.1"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "linux-buildinfo-5.15.0-1104-nvidia",
"binary_version": "5.15.0-1104.105"
},
{
"binary_name": "linux-buildinfo-5.15.0-1104-nvidia-lowlatency",
"binary_version": "5.15.0-1104.105"
},
{
"binary_name": "linux-cloud-tools-5.15.0-1104-nvidia",
"binary_version": "5.15.0-1104.105"
},
{
"binary_name": "linux-cloud-tools-5.15.0-1104-nvidia-lowlatency",
"binary_version": "5.15.0-1104.105"
},
{
"binary_name": "linux-headers-5.15.0-1104-nvidia",
"binary_version": "5.15.0-1104.105"
},
{
"binary_name": "linux-headers-5.15.0-1104-nvidia-lowlatency",
"binary_version": "5.15.0-1104.105"
},
{
"binary_name": "linux-image-unsigned-5.15.0-1104-nvidia",
"binary_version": "5.15.0-1104.105"
},
{
"binary_name": "linux-image-unsigned-5.15.0-1104-nvidia-lowlatency",
"binary_version": "5.15.0-1104.105"
},
{
"binary_name": "linux-modules-5.15.0-1104-nvidia",
"binary_version": "5.15.0-1104.105"
},
{
"binary_name": "linux-modules-5.15.0-1104-nvidia-lowlatency",
"binary_version": "5.15.0-1104.105"
},
{
"binary_name": "linux-modules-extra-5.15.0-1104-nvidia",
"binary_version": "5.15.0-1104.105"
},
{
"binary_name": "linux-modules-nvidia-fs-5.15.0-1104-nvidia",
"binary_version": "5.15.0-1104.105"
},
{
"binary_name": "linux-modules-nvidia-fs-5.15.0-1104-nvidia-lowlatency",
"binary_version": "5.15.0-1104.105"
},
{
"binary_name": "linux-nvidia-cloud-tools-5.15.0-1104",
"binary_version": "5.15.0-1104.105"
},
{
"binary_name": "linux-nvidia-cloud-tools-common",
"binary_version": "5.15.0-1104.105"
},
{
"binary_name": "linux-nvidia-headers-5.15.0-1104",
"binary_version": "5.15.0-1104.105"
},
{
"binary_name": "linux-nvidia-tools-5.15.0-1104",
"binary_version": "5.15.0-1104.105"
},
{
"binary_name": "linux-nvidia-tools-common",
"binary_version": "5.15.0-1104.105"
},
{
"binary_name": "linux-nvidia-tools-host",
"binary_version": "5.15.0-1104.105"
},
{
"binary_name": "linux-tools-5.15.0-1104-nvidia",
"binary_version": "5.15.0-1104.105"
},
{
"binary_name": "linux-tools-5.15.0-1104-nvidia-lowlatency",
"binary_version": "5.15.0-1104.105"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "linux-nvidia",
"purl": "pkg:deb/ubuntu/linux-nvidia@5.15.0-1104.105?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "5.15.0-1104.105"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.15.0-1005.5",
"5.15.0-1007.7",
"5.15.0-1010.10",
"5.15.0-1015.15",
"5.15.0-1017.17",
"5.15.0-1018.18",
"5.15.0-1023.23",
"5.15.0-1025.25",
"5.15.0-1026.26",
"5.15.0-1027.27",
"5.15.0-1028.28",
"5.15.0-1029.29",
"5.15.0-1030.30",
"5.15.0-1031.31",
"5.15.0-1032.32",
"5.15.0-1033.33",
"5.15.0-1037.37",
"5.15.0-1039.39",
"5.15.0-1040.40",
"5.15.0-1041.41",
"5.15.0-1042.42",
"5.15.0-1043.43",
"5.15.0-1044.44",
"5.15.0-1045.45",
"5.15.0-1046.46",
"5.15.0-1047.47",
"5.15.0-1048.48",
"5.15.0-1053.54",
"5.15.0-1054.55",
"5.15.0-1055.56",
"5.15.0-1058.59",
"5.15.0-1059.60",
"5.15.0-1060.61",
"5.15.0-1061.62",
"5.15.0-1062.63",
"5.15.0-1063.64",
"5.15.0-1064.65",
"5.15.0-1065.66",
"5.15.0-1066.67",
"5.15.0-1067.68",
"5.15.0-1068.69",
"5.15.0-1069.70",
"5.15.0-1070.71",
"5.15.0-1071.72",
"5.15.0-1072.73",
"5.15.0-1073.74",
"5.15.0-1074.75",
"5.15.0-1075.76",
"5.15.0-1076.77",
"5.15.0-1077.78",
"5.15.0-1078.79",
"5.15.0-1079.80",
"5.15.0-1080.81",
"5.15.0-1081.82",
"5.15.0-1082.83",
"5.15.0-1083.84",
"5.15.0-1085.86",
"5.15.0-1086.87",
"5.15.0-1087.88",
"5.15.0-1088.89",
"5.15.0-1090.91",
"5.15.0-1091.92",
"5.15.0-1092.93",
"5.15.0-1093.94",
"5.15.0-1094.95",
"5.15.0-1095.96",
"5.15.0-1096.97",
"5.15.0-1098.99",
"5.15.0-1099.100",
"5.15.0-1100.101",
"5.15.0-1101.102",
"5.15.0-1103.104"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-buildinfo-6.2.0-1015-nvidia",
"binary_version": "6.2.0-1015.15"
},
{
"binary_name": "linux-buildinfo-6.2.0-1015-nvidia-64k",
"binary_version": "6.2.0-1015.15"
},
{
"binary_name": "linux-headers-6.2.0-1015-nvidia",
"binary_version": "6.2.0-1015.15"
},
{
"binary_name": "linux-headers-6.2.0-1015-nvidia-64k",
"binary_version": "6.2.0-1015.15"
},
{
"binary_name": "linux-image-unsigned-6.2.0-1015-nvidia",
"binary_version": "6.2.0-1015.15"
},
{
"binary_name": "linux-image-unsigned-6.2.0-1015-nvidia-64k",
"binary_version": "6.2.0-1015.15"
},
{
"binary_name": "linux-modules-6.2.0-1015-nvidia",
"binary_version": "6.2.0-1015.15"
},
{
"binary_name": "linux-modules-6.2.0-1015-nvidia-64k",
"binary_version": "6.2.0-1015.15"
},
{
"binary_name": "linux-modules-extra-6.2.0-1015-nvidia",
"binary_version": "6.2.0-1015.15"
},
{
"binary_name": "linux-modules-nvidia-fs-6.2.0-1015-nvidia",
"binary_version": "6.2.0-1015.15"
},
{
"binary_name": "linux-modules-nvidia-fs-6.2.0-1015-nvidia-64k",
"binary_version": "6.2.0-1015.15"
},
{
"binary_name": "linux-nvidia-6.2-headers-6.2.0-1015",
"binary_version": "6.2.0-1015.15"
},
{
"binary_name": "linux-nvidia-6.2-tools-6.2.0-1015",
"binary_version": "6.2.0-1015.15"
},
{
"binary_name": "linux-nvidia-6.2-tools-host",
"binary_version": "6.2.0-1015.15"
},
{
"binary_name": "linux-tools-6.2.0-1015-nvidia",
"binary_version": "6.2.0-1015.15"
},
{
"binary_name": "linux-tools-6.2.0-1015-nvidia-64k",
"binary_version": "6.2.0-1015.15"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "linux-nvidia-6.2",
"purl": "pkg:deb/ubuntu/linux-nvidia-6.2@6.2.0-1015.15?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.2.0-1003.3~22.04.1",
"6.2.0-1009.9",
"6.2.0-1010.10",
"6.2.0-1011.11",
"6.2.0-1012.12",
"6.2.0-1013.13",
"6.2.0-1015.15"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-buildinfo-6.5.0-1024-nvidia",
"binary_version": "6.5.0-1024.25"
},
{
"binary_name": "linux-buildinfo-6.5.0-1024-nvidia-64k",
"binary_version": "6.5.0-1024.25"
},
{
"binary_name": "linux-headers-6.5.0-1024-nvidia",
"binary_version": "6.5.0-1024.25"
},
{
"binary_name": "linux-headers-6.5.0-1024-nvidia-64k",
"binary_version": "6.5.0-1024.25"
},
{
"binary_name": "linux-image-unsigned-6.5.0-1024-nvidia",
"binary_version": "6.5.0-1024.25"
},
{
"binary_name": "linux-image-unsigned-6.5.0-1024-nvidia-64k",
"binary_version": "6.5.0-1024.25"
},
{
"binary_name": "linux-modules-6.5.0-1024-nvidia",
"binary_version": "6.5.0-1024.25"
},
{
"binary_name": "linux-modules-6.5.0-1024-nvidia-64k",
"binary_version": "6.5.0-1024.25"
},
{
"binary_name": "linux-modules-extra-6.5.0-1024-nvidia",
"binary_version": "6.5.0-1024.25"
},
{
"binary_name": "linux-modules-nvidia-fs-6.5.0-1024-nvidia",
"binary_version": "6.5.0-1024.25"
},
{
"binary_name": "linux-modules-nvidia-fs-6.5.0-1024-nvidia-64k",
"binary_version": "6.5.0-1024.25"
},
{
"binary_name": "linux-nvidia-6.5-headers-6.5.0-1024",
"binary_version": "6.5.0-1024.25"
},
{
"binary_name": "linux-nvidia-6.5-tools-6.5.0-1024",
"binary_version": "6.5.0-1024.25"
},
{
"binary_name": "linux-nvidia-6.5-tools-host",
"binary_version": "6.5.0-1024.25"
},
{
"binary_name": "linux-tools-6.5.0-1024-nvidia",
"binary_version": "6.5.0-1024.25"
},
{
"binary_name": "linux-tools-6.5.0-1024-nvidia-64k",
"binary_version": "6.5.0-1024.25"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "linux-nvidia-6.5",
"purl": "pkg:deb/ubuntu/linux-nvidia-6.5@6.5.0-1024.25?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.5.0-1004.4",
"6.5.0-1007.7",
"6.5.0-1013.13",
"6.5.0-1014.14",
"6.5.0-1015.15",
"6.5.0-1018.18",
"6.5.0-1019.19",
"6.5.0-1021.22",
"6.5.0-1022.23",
"6.5.0-1023.24",
"6.5.0-1024.25"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "linux-buildinfo-6.8.0-1055-nvidia",
"binary_version": "6.8.0-1055.58~22.04.1"
},
{
"binary_name": "linux-buildinfo-6.8.0-1055-nvidia-64k",
"binary_version": "6.8.0-1055.58~22.04.1"
},
{
"binary_name": "linux-headers-6.8.0-1055-nvidia",
"binary_version": "6.8.0-1055.58~22.04.1"
},
{
"binary_name": "linux-headers-6.8.0-1055-nvidia-64k",
"binary_version": "6.8.0-1055.58~22.04.1"
},
{
"binary_name": "linux-image-unsigned-6.8.0-1055-nvidia",
"binary_version": "6.8.0-1055.58~22.04.1"
},
{
"binary_name": "linux-image-unsigned-6.8.0-1055-nvidia-64k",
"binary_version": "6.8.0-1055.58~22.04.1"
},
{
"binary_name": "linux-modules-6.8.0-1055-nvidia",
"binary_version": "6.8.0-1055.58~22.04.1"
},
{
"binary_name": "linux-modules-6.8.0-1055-nvidia-64k",
"binary_version": "6.8.0-1055.58~22.04.1"
},
{
"binary_name": "linux-modules-extra-6.8.0-1055-nvidia",
"binary_version": "6.8.0-1055.58~22.04.1"
},
{
"binary_name": "linux-modules-nvidia-fs-6.8.0-1055-nvidia",
"binary_version": "6.8.0-1055.58~22.04.1"
},
{
"binary_name": "linux-modules-nvidia-fs-6.8.0-1055-nvidia-64k",
"binary_version": "6.8.0-1055.58~22.04.1"
},
{
"binary_name": "linux-nvidia-6.8-headers-6.8.0-1055",
"binary_version": "6.8.0-1055.58~22.04.1"
},
{
"binary_name": "linux-nvidia-6.8-tools-6.8.0-1055",
"binary_version": "6.8.0-1055.58~22.04.1"
},
{
"binary_name": "linux-tools-6.8.0-1055-nvidia",
"binary_version": "6.8.0-1055.58~22.04.1"
},
{
"binary_name": "linux-tools-6.8.0-1055-nvidia-64k",
"binary_version": "6.8.0-1055.58~22.04.1"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "linux-nvidia-6.8",
"purl": "pkg:deb/ubuntu/linux-nvidia-6.8@6.8.0-1055.58~22.04.1?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.8.0-1055.58~22.04.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.8.0-1008.8~22.04.1",
"6.8.0-1009.9~22.04.1",
"6.8.0-1010.10~22.04.1",
"6.8.0-1011.11~22.04.1",
"6.8.0-1012.12~22.04.1",
"6.8.0-1013.14~22.04.1",
"6.8.0-1014.15~22.04.1",
"6.8.0-1015.16~22.04.1",
"6.8.0-1017.19~22.04.1",
"6.8.0-1018.20~22.04.1",
"6.8.0-1019.21~22.04.1",
"6.8.0-1020.22~22.04.1",
"6.8.0-1021.23~22.04.1",
"6.8.0-1022.25~22.04.2",
"6.8.0-1023.26~22.04.1",
"6.8.0-1024.27~22.04.1",
"6.8.0-1025.28~22.04.1",
"6.8.0-1026.29~22.04.1",
"6.8.0-1027.30~22.04.1",
"6.8.0-1028.31~22.04.1",
"6.8.0-1029.32~22.04.1",
"6.8.0-1030.33~22.04.1",
"6.8.0-1031.34~22.04.1",
"6.8.0-1032.35~22.04.1",
"6.8.0-1035.38~22.04.1",
"6.8.0-1036.39~22.04.1",
"6.8.0-1038.41~22.04.1",
"6.8.0-1039.42~22.04.1",
"6.8.0-1040.43~22.04.1",
"6.8.0-1041.44~22.04.2",
"6.8.0-1042.45~22.04.1",
"6.8.0-1043.46~22.04.1",
"6.8.0-1044.47~22.04.1",
"6.8.0-1045.48~22.04.1",
"6.8.0-1046.49~22.04.1",
"6.8.0-1047.50~22.04.1",
"6.8.0-1049.52~22.04.1",
"6.8.0-1050.53~22.04.1",
"6.8.0-1051.54~22.04.1",
"6.8.0-1052.55~22.04.1",
"6.8.0-1054.57~22.04.1"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "linux-buildinfo-5.15.0-1061-nvidia-tegra",
"binary_version": "5.15.0-1061.61"
},
{
"binary_name": "linux-buildinfo-5.15.0-1061-nvidia-tegra-rt",
"binary_version": "5.15.0-1061.61"
},
{
"binary_name": "linux-headers-5.15.0-1061-nvidia-tegra",
"binary_version": "5.15.0-1061.61"
},
{
"binary_name": "linux-headers-5.15.0-1061-nvidia-tegra-rt",
"binary_version": "5.15.0-1061.61"
},
{
"binary_name": "linux-image-unsigned-5.15.0-1061-nvidia-tegra",
"binary_version": "5.15.0-1061.61"
},
{
"binary_name": "linux-image-unsigned-5.15.0-1061-nvidia-tegra-rt",
"binary_version": "5.15.0-1061.61"
},
{
"binary_name": "linux-modules-5.15.0-1061-nvidia-tegra",
"binary_version": "5.15.0-1061.61"
},
{
"binary_name": "linux-modules-5.15.0-1061-nvidia-tegra-rt",
"binary_version": "5.15.0-1061.61"
},
{
"binary_name": "linux-modules-extra-5.15.0-1061-nvidia-tegra",
"binary_version": "5.15.0-1061.61"
},
{
"binary_name": "linux-nvidia-tegra-headers-5.15.0-1061",
"binary_version": "5.15.0-1061.61"
},
{
"binary_name": "linux-nvidia-tegra-tools-5.15.0-1061",
"binary_version": "5.15.0-1061.61"
},
{
"binary_name": "linux-tools-5.15.0-1061-nvidia-tegra",
"binary_version": "5.15.0-1061.61"
},
{
"binary_name": "linux-tools-5.15.0-1061-nvidia-tegra-rt",
"binary_version": "5.15.0-1061.61"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "linux-nvidia-tegra",
"purl": "pkg:deb/ubuntu/linux-nvidia-tegra@5.15.0-1061.61?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "5.15.0-1061.61"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.15.0-1009.9",
"5.15.0-1010.10",
"5.15.0-1012.12",
"5.15.0-1013.13",
"5.15.0-1014.14",
"5.15.0-1015.15",
"5.15.0-1016.16",
"5.15.0-1017.17",
"5.15.0-1018.18",
"5.15.0-1019.19",
"5.15.0-1020.20",
"5.15.0-1021.21",
"5.15.0-1022.22",
"5.15.0-1025.25",
"5.15.0-1026.26",
"5.15.0-1027.27",
"5.15.0-1028.28",
"5.15.0-1030.30",
"5.15.0-1032.32",
"5.15.0-1033.33",
"5.15.0-1034.34",
"5.15.0-1035.35",
"5.15.0-1036.36",
"5.15.0-1037.37",
"5.15.0-1038.38",
"5.15.0-1039.39",
"5.15.0-1040.40",
"5.15.0-1041.41",
"5.15.0-1042.42",
"5.15.0-1043.43",
"5.15.0-1044.44",
"5.15.0-1045.45",
"5.15.0-1046.46",
"5.15.0-1047.47",
"5.15.0-1048.48",
"5.15.0-1049.49",
"5.15.0-1050.50",
"5.15.0-1051.51",
"5.15.0-1052.52",
"5.15.0-1053.53",
"5.15.0-1055.55",
"5.15.0-1056.56",
"5.15.0-1057.57",
"5.15.0-1058.58",
"5.15.0-1060.60"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "linux-buildinfo-5.15.0-1050-nvidia-tegra-igx",
"binary_version": "5.15.0-1050.50"
},
{
"binary_name": "linux-buildinfo-5.15.0-1050-nvidia-tegra-igx-rt",
"binary_version": "5.15.0-1050.50"
},
{
"binary_name": "linux-headers-5.15.0-1050-nvidia-tegra-igx",
"binary_version": "5.15.0-1050.50"
},
{
"binary_name": "linux-headers-5.15.0-1050-nvidia-tegra-igx-rt",
"binary_version": "5.15.0-1050.50"
},
{
"binary_name": "linux-image-unsigned-5.15.0-1050-nvidia-tegra-igx",
"binary_version": "5.15.0-1050.50"
},
{
"binary_name": "linux-image-unsigned-5.15.0-1050-nvidia-tegra-igx-rt",
"binary_version": "5.15.0-1050.50"
},
{
"binary_name": "linux-modules-5.15.0-1050-nvidia-tegra-igx",
"binary_version": "5.15.0-1050.50"
},
{
"binary_name": "linux-modules-5.15.0-1050-nvidia-tegra-igx-rt",
"binary_version": "5.15.0-1050.50"
},
{
"binary_name": "linux-modules-extra-5.15.0-1050-nvidia-tegra-igx",
"binary_version": "5.15.0-1050.50"
},
{
"binary_name": "linux-nvidia-tegra-igx-headers-5.15.0-1050",
"binary_version": "5.15.0-1050.50"
},
{
"binary_name": "linux-nvidia-tegra-igx-tools-5.15.0-1050",
"binary_version": "5.15.0-1050.50"
},
{
"binary_name": "linux-tools-5.15.0-1050-nvidia-tegra-igx",
"binary_version": "5.15.0-1050.50"
},
{
"binary_name": "linux-tools-5.15.0-1050-nvidia-tegra-igx-rt",
"binary_version": "5.15.0-1050.50"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "linux-nvidia-tegra-igx",
"purl": "pkg:deb/ubuntu/linux-nvidia-tegra-igx@5.15.0-1050.50?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "5.15.0-1050.50"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.15.0-1001.1",
"5.15.0-1002.2",
"5.15.0-1004.4",
"5.15.0-1005.5",
"5.15.0-1006.6",
"5.15.0-1007.7",
"5.15.0-1008.8",
"5.15.0-1009.9",
"5.15.0-1012.12",
"5.15.0-1013.13",
"5.15.0-1015.15",
"5.15.0-1016.16",
"5.15.0-1018.18",
"5.15.0-1019.19",
"5.15.0-1020.20",
"5.15.0-1021.21",
"5.15.0-1022.22",
"5.15.0-1023.23",
"5.15.0-1024.24",
"5.15.0-1026.26",
"5.15.0-1027.27",
"5.15.0-1028.28",
"5.15.0-1029.29",
"5.15.0-1030.30",
"5.15.0-1031.31",
"5.15.0-1032.32",
"5.15.0-1033.33",
"5.15.0-1034.34",
"5.15.0-1035.35",
"5.15.0-1036.36",
"5.15.0-1037.37",
"5.15.0-1038.38",
"5.15.0-1039.39",
"5.15.0-1040.40",
"5.15.0-1041.41",
"5.15.0-1042.42",
"5.15.0-1044.44",
"5.15.0-1045.45",
"5.15.0-1046.46",
"5.15.0-1047.47",
"5.15.0-1049.49"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-buildinfo-5.17.0-1035-oem",
"binary_version": "5.17.0-1035.36"
},
{
"binary_name": "linux-headers-5.17.0-1035-oem",
"binary_version": "5.17.0-1035.36"
},
{
"binary_name": "linux-image-unsigned-5.17.0-1035-oem",
"binary_version": "5.17.0-1035.36"
},
{
"binary_name": "linux-modules-5.17.0-1035-oem",
"binary_version": "5.17.0-1035.36"
},
{
"binary_name": "linux-modules-ipu6-5.17.0-1035-oem",
"binary_version": "5.17.0-1035.36"
},
{
"binary_name": "linux-modules-ivsc-5.17.0-1035-oem",
"binary_version": "5.17.0-1035.36"
},
{
"binary_name": "linux-modules-iwlwifi-5.17.0-1035-oem",
"binary_version": "5.17.0-1035.36"
},
{
"binary_name": "linux-oem-5.17-headers-5.17.0-1035",
"binary_version": "5.17.0-1035.36"
},
{
"binary_name": "linux-oem-5.17-tools-5.17.0-1035",
"binary_version": "5.17.0-1035.36"
},
{
"binary_name": "linux-oem-5.17-tools-host",
"binary_version": "5.17.0-1035.36"
},
{
"binary_name": "linux-tools-5.17.0-1035-oem",
"binary_version": "5.17.0-1035.36"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "linux-oem-5.17",
"purl": "pkg:deb/ubuntu/linux-oem-5.17@5.17.0-1035.36?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.17.0-1003.3",
"5.17.0-1004.4",
"5.17.0-1006.6",
"5.17.0-1011.12",
"5.17.0-1012.13",
"5.17.0-1013.14",
"5.17.0-1014.15",
"5.17.0-1015.16",
"5.17.0-1016.17",
"5.17.0-1017.18",
"5.17.0-1018.19",
"5.17.0-1019.20",
"5.17.0-1020.21",
"5.17.0-1021.22",
"5.17.0-1024.25",
"5.17.0-1025.26",
"5.17.0-1026.27",
"5.17.0-1027.28",
"5.17.0-1028.29",
"5.17.0-1029.30",
"5.17.0-1030.31",
"5.17.0-1031.32",
"5.17.0-1032.33",
"5.17.0-1033.34",
"5.17.0-1034.35",
"5.17.0-1035.36"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-buildinfo-6.0.0-1021-oem",
"binary_version": "6.0.0-1021.21"
},
{
"binary_name": "linux-headers-6.0.0-1021-oem",
"binary_version": "6.0.0-1021.21"
},
{
"binary_name": "linux-image-unsigned-6.0.0-1021-oem",
"binary_version": "6.0.0-1021.21"
},
{
"binary_name": "linux-modules-6.0.0-1021-oem",
"binary_version": "6.0.0-1021.21"
},
{
"binary_name": "linux-modules-ipu6-6.0.0-1021-oem",
"binary_version": "6.0.0-1021.21"
},
{
"binary_name": "linux-modules-ivsc-6.0.0-1021-oem",
"binary_version": "6.0.0-1021.21"
},
{
"binary_name": "linux-modules-iwlwifi-6.0.0-1021-oem",
"binary_version": "6.0.0-1021.21"
},
{
"binary_name": "linux-oem-6.0-headers-6.0.0-1021",
"binary_version": "6.0.0-1021.21"
},
{
"binary_name": "linux-oem-6.0-tools-6.0.0-1021",
"binary_version": "6.0.0-1021.21"
},
{
"binary_name": "linux-oem-6.0-tools-host",
"binary_version": "6.0.0-1021.21"
},
{
"binary_name": "linux-tools-6.0.0-1021-oem",
"binary_version": "6.0.0-1021.21"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "linux-oem-6.0",
"purl": "pkg:deb/ubuntu/linux-oem-6.0@6.0.0-1021.21?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.0.0-1006.6",
"6.0.0-1007.7",
"6.0.0-1008.8",
"6.0.0-1009.9",
"6.0.0-1010.10",
"6.0.0-1011.11",
"6.0.0-1012.12",
"6.0.0-1013.13",
"6.0.0-1014.14",
"6.0.0-1015.15",
"6.0.0-1016.16",
"6.0.0-1017.17",
"6.0.0-1018.18",
"6.0.0-1019.19",
"6.0.0-1020.20",
"6.0.0-1021.21"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-buildinfo-6.1.0-1036-oem",
"binary_version": "6.1.0-1036.36"
},
{
"binary_name": "linux-headers-6.1.0-1036-oem",
"binary_version": "6.1.0-1036.36"
},
{
"binary_name": "linux-image-unsigned-6.1.0-1036-oem",
"binary_version": "6.1.0-1036.36"
},
{
"binary_name": "linux-modules-6.1.0-1036-oem",
"binary_version": "6.1.0-1036.36"
},
{
"binary_name": "linux-modules-ipu6-6.1.0-1036-oem",
"binary_version": "6.1.0-1036.36"
},
{
"binary_name": "linux-modules-ivsc-6.1.0-1036-oem",
"binary_version": "6.1.0-1036.36"
},
{
"binary_name": "linux-modules-iwlwifi-6.1.0-1036-oem",
"binary_version": "6.1.0-1036.36"
},
{
"binary_name": "linux-oem-6.1-headers-6.1.0-1036",
"binary_version": "6.1.0-1036.36"
},
{
"binary_name": "linux-oem-6.1-tools-6.1.0-1036",
"binary_version": "6.1.0-1036.36"
},
{
"binary_name": "linux-oem-6.1-tools-host",
"binary_version": "6.1.0-1036.36"
},
{
"binary_name": "linux-tools-6.1.0-1036-oem",
"binary_version": "6.1.0-1036.36"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "linux-oem-6.1",
"purl": "pkg:deb/ubuntu/linux-oem-6.1@6.1.0-1036.36?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.1.0-1004.4",
"6.1.0-1006.6",
"6.1.0-1007.7",
"6.1.0-1008.8",
"6.1.0-1009.9",
"6.1.0-1010.10",
"6.1.0-1012.12",
"6.1.0-1013.13",
"6.1.0-1014.14",
"6.1.0-1015.15",
"6.1.0-1016.16",
"6.1.0-1017.17",
"6.1.0-1019.19",
"6.1.0-1020.20",
"6.1.0-1021.21",
"6.1.0-1022.22",
"6.1.0-1023.23",
"6.1.0-1024.24",
"6.1.0-1025.25",
"6.1.0-1026.26",
"6.1.0-1027.27",
"6.1.0-1028.28",
"6.1.0-1029.29",
"6.1.0-1033.33",
"6.1.0-1034.34",
"6.1.0-1035.35",
"6.1.0-1036.36"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-buildinfo-6.5.0-1027-oem",
"binary_version": "6.5.0-1027.28"
},
{
"binary_name": "linux-headers-6.5.0-1027-oem",
"binary_version": "6.5.0-1027.28"
},
{
"binary_name": "linux-image-unsigned-6.5.0-1027-oem",
"binary_version": "6.5.0-1027.28"
},
{
"binary_name": "linux-modules-6.5.0-1027-oem",
"binary_version": "6.5.0-1027.28"
},
{
"binary_name": "linux-modules-ipu6-6.5.0-1027-oem",
"binary_version": "6.5.0-1027.28"
},
{
"binary_name": "linux-modules-ivsc-6.5.0-1027-oem",
"binary_version": "6.5.0-1027.28"
},
{
"binary_name": "linux-modules-iwlwifi-6.5.0-1027-oem",
"binary_version": "6.5.0-1027.28"
},
{
"binary_name": "linux-modules-usbio-6.5.0-1027-oem",
"binary_version": "6.5.0-1027.28"
},
{
"binary_name": "linux-oem-6.5-headers-6.5.0-1027",
"binary_version": "6.5.0-1027.28"
},
{
"binary_name": "linux-oem-6.5-lib-rust-6.5.0-1027-oem",
"binary_version": "6.5.0-1027.28"
},
{
"binary_name": "linux-oem-6.5-tools-6.5.0-1027",
"binary_version": "6.5.0-1027.28"
},
{
"binary_name": "linux-oem-6.5-tools-host",
"binary_version": "6.5.0-1027.28"
},
{
"binary_name": "linux-tools-6.5.0-1027-oem",
"binary_version": "6.5.0-1027.28"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "linux-oem-6.5",
"purl": "pkg:deb/ubuntu/linux-oem-6.5@6.5.0-1027.28?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.5.0-1003.3",
"6.5.0-1004.4",
"6.5.0-1006.6",
"6.5.0-1007.7",
"6.5.0-1008.8",
"6.5.0-1009.10",
"6.5.0-1011.12",
"6.5.0-1013.14",
"6.5.0-1014.15",
"6.5.0-1015.16",
"6.5.0-1016.17",
"6.5.0-1018.19",
"6.5.0-1019.20",
"6.5.0-1020.21",
"6.5.0-1022.23",
"6.5.0-1023.24",
"6.5.0-1024.25",
"6.5.0-1025.26",
"6.5.0-1027.28"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "linux-buildinfo-5.15.0-1106-oracle",
"binary_version": "5.15.0-1106.112"
},
{
"binary_name": "linux-headers-5.15.0-1106-oracle",
"binary_version": "5.15.0-1106.112"
},
{
"binary_name": "linux-image-unsigned-5.15.0-1106-oracle",
"binary_version": "5.15.0-1106.112"
},
{
"binary_name": "linux-modules-5.15.0-1106-oracle",
"binary_version": "5.15.0-1106.112"
},
{
"binary_name": "linux-modules-extra-5.15.0-1106-oracle",
"binary_version": "5.15.0-1106.112"
},
{
"binary_name": "linux-oracle-headers-5.15.0-1106",
"binary_version": "5.15.0-1106.112"
},
{
"binary_name": "linux-oracle-tools-5.15.0-1106",
"binary_version": "5.15.0-1106.112"
},
{
"binary_name": "linux-tools-5.15.0-1106-oracle",
"binary_version": "5.15.0-1106.112"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "linux-oracle",
"purl": "pkg:deb/ubuntu/linux-oracle@5.15.0-1106.112?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "5.15.0-1106.112"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.13.0-1008.10",
"5.15.0-1001.3",
"5.15.0-1002.4",
"5.15.0-1003.5",
"5.15.0-1006.8",
"5.15.0-1007.9",
"5.15.0-1009.12",
"5.15.0-1011.15",
"5.15.0-1013.17",
"5.15.0-1016.20",
"5.15.0-1017.22",
"5.15.0-1018.23",
"5.15.0-1019.24",
"5.15.0-1021.27",
"5.15.0-1022.28",
"5.15.0-1025.31",
"5.15.0-1026.32",
"5.15.0-1027.33",
"5.15.0-1029.35",
"5.15.0-1030.36",
"5.15.0-1032.38",
"5.15.0-1033.39",
"5.15.0-1034.40",
"5.15.0-1035.41",
"5.15.0-1036.42",
"5.15.0-1037.43",
"5.15.0-1038.44",
"5.15.0-1039.45",
"5.15.0-1040.46",
"5.15.0-1041.47",
"5.15.0-1042.48",
"5.15.0-1044.50",
"5.15.0-1045.51",
"5.15.0-1046.52",
"5.15.0-1047.53",
"5.15.0-1048.54",
"5.15.0-1049.55",
"5.15.0-1050.56",
"5.15.0-1051.57",
"5.15.0-1052.58",
"5.15.0-1053.59",
"5.15.0-1054.60",
"5.15.0-1055.61",
"5.15.0-1058.64",
"5.15.0-1059.65",
"5.15.0-1060.66",
"5.15.0-1061.67",
"5.15.0-1062.68",
"5.15.0-1063.69",
"5.15.0-1064.70",
"5.15.0-1065.71",
"5.15.0-1066.72",
"5.15.0-1067.73",
"5.15.0-1068.74",
"5.15.0-1069.75",
"5.15.0-1070.76",
"5.15.0-1071.77",
"5.15.0-1072.78",
"5.15.0-1073.79",
"5.15.0-1074.80",
"5.15.0-1075.81",
"5.15.0-1076.82",
"5.15.0-1077.83",
"5.15.0-1078.84",
"5.15.0-1079.85",
"5.15.0-1080.86",
"5.15.0-1081.87",
"5.15.0-1082.88",
"5.15.0-1083.89",
"5.15.0-1084.90",
"5.15.0-1085.91",
"5.15.0-1086.92",
"5.15.0-1088.94",
"5.15.0-1089.95",
"5.15.0-1090.96",
"5.15.0-1091.97",
"5.15.0-1092.98",
"5.15.0-1093.99",
"5.15.0-1094.100",
"5.15.0-1095.101",
"5.15.0-1096.102",
"5.15.0-1097.103",
"5.15.0-1098.104",
"5.15.0-1100.106",
"5.15.0-1101.107",
"5.15.0-1102.108",
"5.15.0-1103.109",
"5.15.0-1105.111"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-buildinfo-6.5.0-1027-oracle",
"binary_version": "6.5.0-1027.27~22.04.1"
},
{
"binary_name": "linux-buildinfo-6.5.0-1027-oracle-64k",
"binary_version": "6.5.0-1027.27~22.04.1"
},
{
"binary_name": "linux-headers-6.5.0-1027-oracle",
"binary_version": "6.5.0-1027.27~22.04.1"
},
{
"binary_name": "linux-headers-6.5.0-1027-oracle-64k",
"binary_version": "6.5.0-1027.27~22.04.1"
},
{
"binary_name": "linux-image-unsigned-6.5.0-1027-oracle",
"binary_version": "6.5.0-1027.27~22.04.1"
},
{
"binary_name": "linux-image-unsigned-6.5.0-1027-oracle-64k",
"binary_version": "6.5.0-1027.27~22.04.1"
},
{
"binary_name": "linux-modules-6.5.0-1027-oracle",
"binary_version": "6.5.0-1027.27~22.04.1"
},
{
"binary_name": "linux-modules-6.5.0-1027-oracle-64k",
"binary_version": "6.5.0-1027.27~22.04.1"
},
{
"binary_name": "linux-modules-extra-6.5.0-1027-oracle",
"binary_version": "6.5.0-1027.27~22.04.1"
},
{
"binary_name": "linux-modules-extra-6.5.0-1027-oracle-64k",
"binary_version": "6.5.0-1027.27~22.04.1"
},
{
"binary_name": "linux-oracle-6.5-headers-6.5.0-1027",
"binary_version": "6.5.0-1027.27~22.04.1"
},
{
"binary_name": "linux-oracle-6.5-tools-6.5.0-1027",
"binary_version": "6.5.0-1027.27~22.04.1"
},
{
"binary_name": "linux-tools-6.5.0-1027-oracle",
"binary_version": "6.5.0-1027.27~22.04.1"
},
{
"binary_name": "linux-tools-6.5.0-1027-oracle-64k",
"binary_version": "6.5.0-1027.27~22.04.1"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "linux-oracle-6.5",
"purl": "pkg:deb/ubuntu/linux-oracle-6.5@6.5.0-1027.27~22.04.1?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.5.0-1013.13~22.04.4",
"6.5.0-1014.14~22.04.1",
"6.5.0-1015.15~22.04.1",
"6.5.0-1016.16~22.04.1",
"6.5.0-1018.18~22.04.1",
"6.5.0-1019.19~22.04.1",
"6.5.0-1020.20~22.04.1",
"6.5.0-1021.21~22.04.1",
"6.5.0-1023.23~22.04.1",
"6.5.0-1024.24~22.04.1",
"6.5.0-1025.25~22.04.1",
"6.5.0-1026.26~22.04.1",
"6.5.0-1027.27~22.04.1"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "linux-buildinfo-6.8.0-1054-oracle",
"binary_version": "6.8.0-1054.55~22.04.1"
},
{
"binary_name": "linux-buildinfo-6.8.0-1054-oracle-64k",
"binary_version": "6.8.0-1054.55~22.04.1"
},
{
"binary_name": "linux-headers-6.8.0-1054-oracle",
"binary_version": "6.8.0-1054.55~22.04.1"
},
{
"binary_name": "linux-headers-6.8.0-1054-oracle-64k",
"binary_version": "6.8.0-1054.55~22.04.1"
},
{
"binary_name": "linux-image-unsigned-6.8.0-1054-oracle",
"binary_version": "6.8.0-1054.55~22.04.1"
},
{
"binary_name": "linux-image-unsigned-6.8.0-1054-oracle-64k",
"binary_version": "6.8.0-1054.55~22.04.1"
},
{
"binary_name": "linux-modules-6.8.0-1054-oracle",
"binary_version": "6.8.0-1054.55~22.04.1"
},
{
"binary_name": "linux-modules-6.8.0-1054-oracle-64k",
"binary_version": "6.8.0-1054.55~22.04.1"
},
{
"binary_name": "linux-modules-extra-6.8.0-1054-oracle",
"binary_version": "6.8.0-1054.55~22.04.1"
},
{
"binary_name": "linux-modules-extra-6.8.0-1054-oracle-64k",
"binary_version": "6.8.0-1054.55~22.04.1"
},
{
"binary_name": "linux-oracle-6.8-headers-6.8.0-1054",
"binary_version": "6.8.0-1054.55~22.04.1"
},
{
"binary_name": "linux-oracle-6.8-tools-6.8.0-1054",
"binary_version": "6.8.0-1054.55~22.04.1"
},
{
"binary_name": "linux-tools-6.8.0-1054-oracle",
"binary_version": "6.8.0-1054.55~22.04.1"
},
{
"binary_name": "linux-tools-6.8.0-1054-oracle-64k",
"binary_version": "6.8.0-1054.55~22.04.1"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "linux-oracle-6.8",
"purl": "pkg:deb/ubuntu/linux-oracle-6.8@6.8.0-1054.55~22.04.1?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.8.0-1054.55~22.04.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.8.0-1006.6~22.04.3",
"6.8.0-1008.8~22.04.1",
"6.8.0-1010.10~22.04.1",
"6.8.0-1011.11~22.04.1",
"6.8.0-1012.12~22.04.1",
"6.8.0-1013.13~22.04.1",
"6.8.0-1014.14~22.04.1",
"6.8.0-1015.15~22.04.1",
"6.8.0-1016.17~22.04.1",
"6.8.0-1017.18~22.04.1",
"6.8.0-1018.19~22.04.1",
"6.8.0-1019.20~22.04.1",
"6.8.0-1020.21~22.04.1",
"6.8.0-1021.22~22.04.1",
"6.8.0-1022.23~22.04.1",
"6.8.0-1023.24~22.04.1",
"6.8.0-1024.25~22.04.1",
"6.8.0-1025.26~22.04.1",
"6.8.0-1026.27~22.04.1",
"6.8.0-1027.28~22.04.1",
"6.8.0-1028.29~22.04.1",
"6.8.0-1029.30~22.04.1",
"6.8.0-1030.31~22.04.1",
"6.8.0-1032.33~22.04.1",
"6.8.0-1033.34~22.04.1",
"6.8.0-1035.36~22.04.1",
"6.8.0-1037.38~22.04.1",
"6.8.0-1038.39~22.04.1",
"6.8.0-1039.40~22.04.1",
"6.8.0-1040.41~22.04.1",
"6.8.0-1041.42~22.04.1",
"6.8.0-1042.43~22.04.1",
"6.8.0-1043.44~22.04.1",
"6.8.0-1044.45~22.04.1",
"6.8.0-1047.48~22.04.1",
"6.8.0-1049.50~22.04.1",
"6.8.0-1050.51~22.04.1",
"6.8.0-1052.53~22.04.1"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "linux-buildinfo-5.15.0-1103-raspi",
"binary_version": "5.15.0-1103.106"
},
{
"binary_name": "linux-headers-5.15.0-1103-raspi",
"binary_version": "5.15.0-1103.106"
},
{
"binary_name": "linux-image-5.15.0-1103-raspi",
"binary_version": "5.15.0-1103.106"
},
{
"binary_name": "linux-modules-5.15.0-1103-raspi",
"binary_version": "5.15.0-1103.106"
},
{
"binary_name": "linux-modules-extra-5.15.0-1103-raspi",
"binary_version": "5.15.0-1103.106"
},
{
"binary_name": "linux-raspi-headers-5.15.0-1103",
"binary_version": "5.15.0-1103.106"
},
{
"binary_name": "linux-raspi-tools-5.15.0-1103",
"binary_version": "5.15.0-1103.106"
},
{
"binary_name": "linux-tools-5.15.0-1103-raspi",
"binary_version": "5.15.0-1103.106"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "linux-raspi",
"purl": "pkg:deb/ubuntu/linux-raspi@5.15.0-1103.106?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "5.15.0-1103.106"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.13.0-1008.9",
"5.15.0-1002.2",
"5.15.0-1003.3",
"5.15.0-1004.4",
"5.15.0-1005.5",
"5.15.0-1006.6",
"5.15.0-1008.8",
"5.15.0-1011.13",
"5.15.0-1012.14",
"5.15.0-1013.15",
"5.15.0-1014.16",
"5.15.0-1015.17",
"5.15.0-1016.18",
"5.15.0-1017.19",
"5.15.0-1018.20",
"5.15.0-1021.23",
"5.15.0-1022.24",
"5.15.0-1023.25",
"5.15.0-1024.26",
"5.15.0-1025.27",
"5.15.0-1026.28",
"5.15.0-1027.29",
"5.15.0-1028.30",
"5.15.0-1029.31",
"5.15.0-1030.32",
"5.15.0-1032.35",
"5.15.0-1033.36",
"5.15.0-1034.37",
"5.15.0-1035.38",
"5.15.0-1036.39",
"5.15.0-1037.40",
"5.15.0-1038.41",
"5.15.0-1040.43",
"5.15.0-1041.44",
"5.15.0-1042.45",
"5.15.0-1043.46",
"5.15.0-1044.47",
"5.15.0-1045.48",
"5.15.0-1046.49",
"5.15.0-1047.50",
"5.15.0-1048.51",
"5.15.0-1049.52",
"5.15.0-1050.53",
"5.15.0-1053.56",
"5.15.0-1054.57",
"5.15.0-1055.58",
"5.15.0-1058.61",
"5.15.0-1059.62",
"5.15.0-1060.63",
"5.15.0-1061.64",
"5.15.0-1062.65",
"5.15.0-1063.66",
"5.15.0-1064.67",
"5.15.0-1065.68",
"5.15.0-1066.69",
"5.15.0-1067.70",
"5.15.0-1070.73",
"5.15.0-1071.74",
"5.15.0-1072.75",
"5.15.0-1073.76",
"5.15.0-1074.77",
"5.15.0-1075.78",
"5.15.0-1076.79",
"5.15.0-1077.80",
"5.15.0-1078.81",
"5.15.0-1079.82",
"5.15.0-1080.83",
"5.15.0-1083.86",
"5.15.0-1084.87",
"5.15.0-1085.88",
"5.15.0-1086.89",
"5.15.0-1087.90",
"5.15.0-1089.92",
"5.15.0-1090.93",
"5.15.0-1091.94",
"5.15.0-1092.95",
"5.15.0-1093.96",
"5.15.0-1097.100",
"5.15.0-1098.101",
"5.15.0-1099.102",
"5.15.0-1100.103",
"5.15.0-1102.105"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-buildinfo-5.15.0-1032-realtime",
"binary_version": "5.15.0-1032.35"
},
{
"binary_name": "linux-cloud-tools-5.15.0-1032-realtime",
"binary_version": "5.15.0-1032.35"
},
{
"binary_name": "linux-headers-5.15.0-1032-realtime",
"binary_version": "5.15.0-1032.35"
},
{
"binary_name": "linux-image-unsigned-5.15.0-1032-realtime",
"binary_version": "5.15.0-1032.35"
},
{
"binary_name": "linux-modules-5.15.0-1032-realtime",
"binary_version": "5.15.0-1032.35"
},
{
"binary_name": "linux-modules-extra-5.15.0-1032-realtime",
"binary_version": "5.15.0-1032.35"
},
{
"binary_name": "linux-realtime-cloud-tools-5.15.0-1032",
"binary_version": "5.15.0-1032.35"
},
{
"binary_name": "linux-realtime-cloud-tools-common",
"binary_version": "5.15.0-1032.35"
},
{
"binary_name": "linux-realtime-headers-5.15.0-1032",
"binary_version": "5.15.0-1032.35"
},
{
"binary_name": "linux-realtime-tools-5.15.0-1032",
"binary_version": "5.15.0-1032.35"
},
{
"binary_name": "linux-realtime-tools-common",
"binary_version": "5.15.0-1032.35"
},
{
"binary_name": "linux-realtime-tools-host",
"binary_version": "5.15.0-1032.35"
},
{
"binary_name": "linux-tools-5.15.0-1032-realtime",
"binary_version": "5.15.0-1032.35"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "linux-realtime",
"purl": "pkg:deb/ubuntu/linux-realtime@5.15.0-1032.35?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.15.0-1032.35"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-buildinfo-5.15.0-1028-generic",
"binary_version": "5.15.0-1028.32"
},
{
"binary_name": "linux-headers-5.15.0-1028-generic",
"binary_version": "5.15.0-1028.32"
},
{
"binary_name": "linux-image-5.15.0-1028-generic",
"binary_version": "5.15.0-1028.32"
},
{
"binary_name": "linux-modules-5.15.0-1028-generic",
"binary_version": "5.15.0-1028.32"
},
{
"binary_name": "linux-modules-extra-5.15.0-1028-generic",
"binary_version": "5.15.0-1028.32"
},
{
"binary_name": "linux-riscv-headers-5.15.0-1028",
"binary_version": "5.15.0-1028.32"
},
{
"binary_name": "linux-riscv-tools-5.15.0-1028",
"binary_version": "5.15.0-1028.32"
},
{
"binary_name": "linux-tools-5.15.0-1028-generic",
"binary_version": "5.15.0-1028.32"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "linux-riscv",
"purl": "pkg:deb/ubuntu/linux-riscv@5.15.0-1028.32?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.13.0-1004.4",
"5.13.0-1006.6+22.04.1",
"5.13.0-1007.7+22.04.1",
"5.13.0-1010.11+22.04.1",
"5.15.0-1004.4",
"5.15.0-1005.5",
"5.15.0-1006.6",
"5.15.0-1007.7",
"5.15.0-1008.8",
"5.15.0-1011.12",
"5.15.0-1012.13",
"5.15.0-1014.16",
"5.15.0-1015.17",
"5.15.0-1016.18",
"5.15.0-1017.19",
"5.15.0-1018.21",
"5.15.0-1019.22",
"5.15.0-1020.23",
"5.15.0-1022.26",
"5.15.0-1023.27",
"5.15.0-1026.30",
"5.15.0-1027.31",
"5.15.0-1028.32"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-buildinfo-5.19.0-1021-generic",
"binary_version": "5.19.0-1021.23~22.04.1"
},
{
"binary_name": "linux-headers-5.19.0-1021-generic",
"binary_version": "5.19.0-1021.23~22.04.1"
},
{
"binary_name": "linux-image-5.19.0-1021-generic",
"binary_version": "5.19.0-1021.23~22.04.1"
},
{
"binary_name": "linux-modules-5.19.0-1021-generic",
"binary_version": "5.19.0-1021.23~22.04.1"
},
{
"binary_name": "linux-modules-extra-5.19.0-1021-generic",
"binary_version": "5.19.0-1021.23~22.04.1"
},
{
"binary_name": "linux-riscv-5.19-headers-5.19.0-1021",
"binary_version": "5.19.0-1021.23~22.04.1"
},
{
"binary_name": "linux-riscv-5.19-tools-5.19.0-1021",
"binary_version": "5.19.0-1021.23~22.04.1"
},
{
"binary_name": "linux-tools-5.19.0-1021-generic",
"binary_version": "5.19.0-1021.23~22.04.1"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "linux-riscv-5.19",
"purl": "pkg:deb/ubuntu/linux-riscv-5.19@5.19.0-1021.23~22.04.1?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.19.0-1012.13~22.04.1",
"5.19.0-1015.16~22.04.1",
"5.19.0-1016.17~22.04.1",
"5.19.0-1017.18~22.04.1",
"5.19.0-1018.19~22.04.1",
"5.19.0-1019.21~22.04.1",
"5.19.0-1020.22~22.04.1",
"5.19.0-1021.23~22.04.1"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-buildinfo-6.5.0-45-generic",
"binary_version": "6.5.0-45.45.1~22.04.1"
},
{
"binary_name": "linux-headers-6.5.0-45-generic",
"binary_version": "6.5.0-45.45.1~22.04.1"
},
{
"binary_name": "linux-image-6.5.0-45-generic",
"binary_version": "6.5.0-45.45.1~22.04.1"
},
{
"binary_name": "linux-modules-6.5.0-45-generic",
"binary_version": "6.5.0-45.45.1~22.04.1"
},
{
"binary_name": "linux-modules-extra-6.5.0-45-generic",
"binary_version": "6.5.0-45.45.1~22.04.1"
},
{
"binary_name": "linux-riscv-6.5-headers-6.5.0-45",
"binary_version": "6.5.0-45.45.1~22.04.1"
},
{
"binary_name": "linux-riscv-6.5-tools-6.5.0-45",
"binary_version": "6.5.0-45.45.1~22.04.1"
},
{
"binary_name": "linux-tools-6.5.0-45-generic",
"binary_version": "6.5.0-45.45.1~22.04.1"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "linux-riscv-6.5",
"purl": "pkg:deb/ubuntu/linux-riscv-6.5@6.5.0-45.45.1~22.04.1?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.5.0-17.17.1.1~22.04.1",
"6.5.0-21.21.1~22.04.1",
"6.5.0-25.25.1~22.04.1",
"6.5.0-26.26.1~22.04.1",
"6.5.0-27.28.1~22.04.1",
"6.5.0-28.29.1~22.04.1",
"6.5.0-35.35.1~22.04.1",
"6.5.0-40.40.1~22.04.1",
"6.5.0-42.42.1~22.04.1",
"6.5.0-45.45.1~22.04.1"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "linux-buildinfo-6.8.0-124-generic",
"binary_version": "6.8.0-124.124~22.04.1"
},
{
"binary_name": "linux-headers-6.8.0-124-generic",
"binary_version": "6.8.0-124.124~22.04.1"
},
{
"binary_name": "linux-image-6.8.0-124-generic",
"binary_version": "6.8.0-124.124~22.04.1"
},
{
"binary_name": "linux-modules-6.8.0-124-generic",
"binary_version": "6.8.0-124.124~22.04.1"
},
{
"binary_name": "linux-riscv-6.8-headers-6.8.0-124",
"binary_version": "6.8.0-124.124~22.04.1"
},
{
"binary_name": "linux-riscv-6.8-tools-6.8.0-124",
"binary_version": "6.8.0-124.124~22.04.1"
},
{
"binary_name": "linux-tools-6.8.0-124-generic",
"binary_version": "6.8.0-124.124~22.04.1"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "linux-riscv-6.8",
"purl": "pkg:deb/ubuntu/linux-riscv-6.8@6.8.0-124.124~22.04.1?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.8.0-124.124~22.04.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.8.0-38.38.1~22.04.1",
"6.8.0-39.39.1~22.04.1",
"6.8.0-40.40.1~22.04.1",
"6.8.0-41.41.1~22.04.1",
"6.8.0-44.44.1~22.04.1",
"6.8.0-47.47.1~22.04.1",
"6.8.0-48.48.1~22.04.2",
"6.8.0-49.49.1~22.04.1",
"6.8.0-50.51.1~22.04.1",
"6.8.0-51.52.1~22.04.1",
"6.8.0-52.53.1~22.04.1",
"6.8.0-53.55.1~22.04.1",
"6.8.0-55.57.1~22.04.1",
"6.8.0-56.58.1~22.04.1",
"6.8.0-57.59.1~22.04.1",
"6.8.0-58.60.1~22.04.1",
"6.8.0-59.61.1~22.04.1",
"6.8.0-62.65~22.04.1",
"6.8.0-63.66~22.04.1",
"6.8.0-64.67~22.04.1",
"6.8.0-71.71~22.04.1",
"6.8.0-78.78~22.04.1",
"6.8.0-79.79~22.04.1",
"6.8.0-83.83~22.04.1",
"6.8.0-84.84~22.04.1",
"6.8.0-86.87~22.04.1",
"6.8.0-87.88~22.04.1",
"6.8.0-88.89~22.04.1",
"6.8.0-90.91~22.04.1",
"6.8.0-94.96~22.04.1",
"6.8.0-100.100~22.04.1",
"6.8.0-101.101~22.04.1",
"6.8.0-106.106~22.04.1",
"6.8.0-107.107~22.04.1",
"6.8.0-110.110~22.04.1",
"6.8.0-111.111~22.04.1",
"6.8.0-117.117~22.04.1"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-buildinfo-5.19.0-1020-starfive",
"binary_version": "5.19.0-1020.22~22.04.1"
},
{
"binary_name": "linux-headers-5.19.0-1020-starfive",
"binary_version": "5.19.0-1020.22~22.04.1"
},
{
"binary_name": "linux-image-5.19.0-1020-starfive",
"binary_version": "5.19.0-1020.22~22.04.1"
},
{
"binary_name": "linux-modules-5.19.0-1020-starfive",
"binary_version": "5.19.0-1020.22~22.04.1"
},
{
"binary_name": "linux-modules-extra-5.19.0-1020-starfive",
"binary_version": "5.19.0-1020.22~22.04.1"
},
{
"binary_name": "linux-starfive-5.19-headers-5.19.0-1020",
"binary_version": "5.19.0-1020.22~22.04.1"
},
{
"binary_name": "linux-starfive-5.19-tools-5.19.0-1020",
"binary_version": "5.19.0-1020.22~22.04.1"
},
{
"binary_name": "linux-tools-5.19.0-1020-starfive",
"binary_version": "5.19.0-1020.22~22.04.1"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "linux-starfive-5.19",
"purl": "pkg:deb/ubuntu/linux-starfive-5.19@5.19.0-1020.22~22.04.1?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.19.0-1014.16~22.04.1",
"5.19.0-1015.17~22.04.1",
"5.19.0-1016.18~22.04.1",
"5.19.0-1017.19~22.04.1",
"5.19.0-1018.20~22.04.1",
"5.19.0-1019.21~22.04.1",
"5.19.0-1020.22~22.04.1"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-buildinfo-6.2.0-1009-starfive",
"binary_version": "6.2.0-1009.10~22.04.1"
},
{
"binary_name": "linux-headers-6.2.0-1009-starfive",
"binary_version": "6.2.0-1009.10~22.04.1"
},
{
"binary_name": "linux-image-6.2.0-1009-starfive",
"binary_version": "6.2.0-1009.10~22.04.1"
},
{
"binary_name": "linux-modules-6.2.0-1009-starfive",
"binary_version": "6.2.0-1009.10~22.04.1"
},
{
"binary_name": "linux-modules-extra-6.2.0-1009-starfive",
"binary_version": "6.2.0-1009.10~22.04.1"
},
{
"binary_name": "linux-starfive-6.2-headers-6.2.0-1009",
"binary_version": "6.2.0-1009.10~22.04.1"
},
{
"binary_name": "linux-starfive-6.2-tools-6.2.0-1009",
"binary_version": "6.2.0-1009.10~22.04.1"
},
{
"binary_name": "linux-tools-6.2.0-1009-starfive",
"binary_version": "6.2.0-1009.10~22.04.1"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "linux-starfive-6.2",
"purl": "pkg:deb/ubuntu/linux-starfive-6.2@6.2.0-1009.10~22.04.1?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.2.0-1006.7~22.04.1",
"6.2.0-1007.8~22.04.1",
"6.2.0-1009.10~22.04.1"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-buildinfo-6.5.0-1018-starfive",
"binary_version": "6.5.0-1018.19~22.04.1"
},
{
"binary_name": "linux-headers-6.5.0-1018-starfive",
"binary_version": "6.5.0-1018.19~22.04.1"
},
{
"binary_name": "linux-image-6.5.0-1018-starfive",
"binary_version": "6.5.0-1018.19~22.04.1"
},
{
"binary_name": "linux-modules-6.5.0-1018-starfive",
"binary_version": "6.5.0-1018.19~22.04.1"
},
{
"binary_name": "linux-modules-extra-6.5.0-1018-starfive",
"binary_version": "6.5.0-1018.19~22.04.1"
},
{
"binary_name": "linux-starfive-6.5-headers-6.5.0-1018",
"binary_version": "6.5.0-1018.19~22.04.1"
},
{
"binary_name": "linux-starfive-6.5-tools-6.5.0-1018",
"binary_version": "6.5.0-1018.19~22.04.1"
},
{
"binary_name": "linux-tools-6.5.0-1018-starfive",
"binary_version": "6.5.0-1018.19~22.04.1"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "linux-starfive-6.5",
"purl": "pkg:deb/ubuntu/linux-starfive-6.5@6.5.0-1018.19~22.04.1?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.5.0-1007.8~22.04.1",
"6.5.0-1008.9~22.04.1",
"6.5.0-1009.10~22.04.1",
"6.5.0-1010.11~22.04.1",
"6.5.0-1011.12~22.04.1",
"6.5.0-1012.13~22.04.1",
"6.5.0-1014.15~22.04.1",
"6.5.0-1015.16~22.04.1",
"6.5.0-1016.17~22.04.1",
"6.5.0-1017.18~22.04.1",
"6.5.0-1018.19~22.04.1"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "linux-buildinfo-5.15.0-1074-xilinx-zynqmp",
"binary_version": "5.15.0-1074.78"
},
{
"binary_name": "linux-headers-5.15.0-1074-xilinx-zynqmp",
"binary_version": "5.15.0-1074.78"
},
{
"binary_name": "linux-image-5.15.0-1074-xilinx-zynqmp",
"binary_version": "5.15.0-1074.78"
},
{
"binary_name": "linux-modules-5.15.0-1074-xilinx-zynqmp",
"binary_version": "5.15.0-1074.78"
},
{
"binary_name": "linux-tools-5.15.0-1074-xilinx-zynqmp",
"binary_version": "5.15.0-1074.78"
},
{
"binary_name": "linux-xilinx-zynqmp-headers-5.15.0-1074",
"binary_version": "5.15.0-1074.78"
},
{
"binary_name": "linux-xilinx-zynqmp-tools-5.15.0-1074",
"binary_version": "5.15.0-1074.78"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "linux-xilinx-zynqmp",
"purl": "pkg:deb/ubuntu/linux-xilinx-zynqmp@5.15.0-1074.78?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "5.15.0-1074.78"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.15.0-1022.26",
"5.15.0-1023.27",
"5.15.0-1025.29",
"5.15.0-1027.31",
"5.15.0-1030.34",
"5.15.0-1031.35",
"5.15.0-1035.39",
"5.15.0-1036.40",
"5.15.0-1037.41",
"5.15.0-1038.42",
"5.15.0-1039.43",
"5.15.0-1041.45",
"5.15.0-1044.48",
"5.15.0-1046.50",
"5.15.0-1050.54",
"5.15.0-1051.55",
"5.15.0-1052.56",
"5.15.0-1053.57",
"5.15.0-1054.58",
"5.15.0-1055.59",
"5.15.0-1056.60",
"5.15.0-1057.61",
"5.15.0-1059.63",
"5.15.0-1060.64",
"5.15.0-1061.65",
"5.15.0-1062.66",
"5.15.0-1063.67",
"5.15.0-1064.68",
"5.15.0-1065.69",
"5.15.0-1067.71",
"5.15.0-1068.72",
"5.15.0-1069.73",
"5.15.0-1070.74"
]
},
{
"ecosystem_specific": {
"availability": "Available for NVIDIA BlueField platforms",
"binaries": [
{
"binary_name": "linux-bluefield-cloud-tools-common",
"binary_version": "5.15.0-1093.95"
},
{
"binary_name": "linux-bluefield-headers-5.15.0-1093",
"binary_version": "5.15.0-1093.95"
},
{
"binary_name": "linux-bluefield-tools-5.15.0-1093",
"binary_version": "5.15.0-1093.95"
},
{
"binary_name": "linux-bluefield-tools-host",
"binary_version": "5.15.0-1093.95"
},
{
"binary_name": "linux-buildinfo-5.15.0-1093-bluefield",
"binary_version": "5.15.0-1093.95"
},
{
"binary_name": "linux-headers-5.15.0-1093-bluefield",
"binary_version": "5.15.0-1093.95"
},
{
"binary_name": "linux-image-unsigned-5.15.0-1093-bluefield",
"binary_version": "5.15.0-1093.95"
},
{
"binary_name": "linux-modules-5.15.0-1093-bluefield",
"binary_version": "5.15.0-1093.95"
},
{
"binary_name": "linux-modules-extra-5.15.0-1093-bluefield",
"binary_version": "5.15.0-1093.95"
},
{
"binary_name": "linux-tools-5.15.0-1093-bluefield",
"binary_version": "5.15.0-1093.95"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:Nvidia-BlueField:22.04:LTS",
"name": "linux-bluefield",
"purl": "pkg:deb/ubuntu/linux-bluefield@5.15.0-1093.95?arch=source\u0026distro=bluefield/jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "5.15.0-1093.95"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.15.0-1011.13",
"5.15.0-1014.16",
"5.15.0-1015.17",
"5.15.0-1017.19",
"5.15.0-1019.21",
"5.15.0-1021.23",
"5.15.0-1022.24",
"5.15.0-1023.25",
"5.15.0-1024.26",
"5.15.0-1027.29",
"5.15.0-1028.30",
"5.15.0-1031.33",
"5.15.0-1032.34",
"5.15.0-1033.35",
"5.15.0-1035.37",
"5.15.0-1036.38",
"5.15.0-1037.39",
"5.15.0-1038.40",
"5.15.0-1040.42",
"5.15.0-1042.44",
"5.15.0-1043.45",
"5.15.0-1044.46",
"5.15.0-1045.47",
"5.15.0-1047.49",
"5.15.0-1048.50",
"5.15.0-1050.52",
"5.15.0-1051.53",
"5.15.0-1052.54",
"5.15.0-1053.55",
"5.15.0-1054.56",
"5.15.0-1056.58",
"5.15.0-1057.59",
"5.15.0-1058.60",
"5.15.0-1059.61",
"5.15.0-1060.62",
"5.15.0-1061.63",
"5.15.0-1062.64",
"5.15.0-1063.65",
"5.15.0-1064.66",
"5.15.0-1065.67",
"5.15.0-1066.68",
"5.15.0-1067.69",
"5.15.0-1069.71",
"5.15.0-1070.72",
"5.15.0-1072.74",
"5.15.0-1074.76",
"5.15.0-1075.77",
"5.15.0-1076.78",
"5.15.0-1077.79",
"5.15.0-1079.81",
"5.15.0-1080.82",
"5.15.0-1081.83",
"5.15.0-1082.84",
"5.15.0-1083.85",
"5.15.0-1084.86",
"5.15.0-1085.87",
"5.15.0-1086.88",
"5.15.0-1087.89",
"5.15.0-1089.91",
"5.15.0-1090.92",
"5.15.0-1092.94"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-aws-fips-cloud-tools-5.15.0-1051",
"binary_version": "5.15.0-1051.56+fips1"
},
{
"binary_name": "linux-aws-fips-headers-5.15.0-1051",
"binary_version": "5.15.0-1051.56+fips1"
},
{
"binary_name": "linux-aws-fips-tools-5.15.0-1051",
"binary_version": "5.15.0-1051.56+fips1"
},
{
"binary_name": "linux-buildinfo-5.15.0-1051-aws-fips",
"binary_version": "5.15.0-1051.56+fips1"
},
{
"binary_name": "linux-cloud-tools-5.15.0-1051-aws-fips",
"binary_version": "5.15.0-1051.56+fips1"
},
{
"binary_name": "linux-headers-5.15.0-1051-aws-fips",
"binary_version": "5.15.0-1051.56+fips1"
},
{
"binary_name": "linux-image-unsigned-5.15.0-1051-aws-fips",
"binary_version": "5.15.0-1051.56+fips1"
},
{
"binary_name": "linux-image-unsigned-hmac-5.15.0-1051-aws-fips",
"binary_version": "5.15.0-1051.56+fips1"
},
{
"binary_name": "linux-modules-5.15.0-1051-aws-fips",
"binary_version": "5.15.0-1051.56+fips1"
},
{
"binary_name": "linux-modules-extra-5.15.0-1051-aws-fips",
"binary_version": "5.15.0-1051.56+fips1"
},
{
"binary_name": "linux-tools-5.15.0-1051-aws-fips",
"binary_version": "5.15.0-1051.56+fips1"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:Pro:FIPS-preview:22.04:LTS",
"name": "linux-aws-fips",
"purl": "pkg:deb/ubuntu/linux-aws-fips@5.15.0-1051.56+fips1?arch=source\u0026distro=fips-preview/jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.15.0-1042.47+fips1",
"5.15.0-1051.56+fips1"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-azure-fips-cloud-tools-5.15.0-1053",
"binary_version": "5.15.0-1053.61+fips1"
},
{
"binary_name": "linux-azure-fips-headers-5.15.0-1053",
"binary_version": "5.15.0-1053.61+fips1"
},
{
"binary_name": "linux-azure-fips-tools-5.15.0-1053",
"binary_version": "5.15.0-1053.61+fips1"
},
{
"binary_name": "linux-buildinfo-5.15.0-1053-azure-fips",
"binary_version": "5.15.0-1053.61+fips1"
},
{
"binary_name": "linux-cloud-tools-5.15.0-1053-azure-fips",
"binary_version": "5.15.0-1053.61+fips1"
},
{
"binary_name": "linux-headers-5.15.0-1053-azure-fips",
"binary_version": "5.15.0-1053.61+fips1"
},
{
"binary_name": "linux-image-unsigned-5.15.0-1053-azure-fips",
"binary_version": "5.15.0-1053.61+fips1"
},
{
"binary_name": "linux-image-unsigned-hmac-5.15.0-1053-azure-fips",
"binary_version": "5.15.0-1053.61+fips1"
},
{
"binary_name": "linux-modules-5.15.0-1053-azure-fips",
"binary_version": "5.15.0-1053.61+fips1"
},
{
"binary_name": "linux-modules-extra-5.15.0-1053-azure-fips",
"binary_version": "5.15.0-1053.61+fips1"
},
{
"binary_name": "linux-tools-5.15.0-1053-azure-fips",
"binary_version": "5.15.0-1053.61+fips1"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:Pro:FIPS-preview:22.04:LTS",
"name": "linux-azure-fips",
"purl": "pkg:deb/ubuntu/linux-azure-fips@5.15.0-1053.61+fips1?arch=source\u0026distro=fips-preview/jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.15.0-1053.61+fips1"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-buildinfo-5.15.0-73-fips",
"binary_version": "5.15.0-73.80+fips1"
},
{
"binary_name": "linux-fips-headers-5.15.0-73",
"binary_version": "5.15.0-73.80+fips1"
},
{
"binary_name": "linux-fips-tools-5.15.0-73",
"binary_version": "5.15.0-73.80+fips1"
},
{
"binary_name": "linux-fips-tools-host",
"binary_version": "5.15.0-73.80+fips1"
},
{
"binary_name": "linux-headers-5.15.0-73-fips",
"binary_version": "5.15.0-73.80+fips1"
},
{
"binary_name": "linux-image-unsigned-5.15.0-73-fips",
"binary_version": "5.15.0-73.80+fips1"
},
{
"binary_name": "linux-image-unsigned-hmac-5.15.0-73-fips",
"binary_version": "5.15.0-73.80+fips1"
},
{
"binary_name": "linux-modules-5.15.0-73-fips",
"binary_version": "5.15.0-73.80+fips1"
},
{
"binary_name": "linux-modules-extra-5.15.0-73-fips",
"binary_version": "5.15.0-73.80+fips1"
},
{
"binary_name": "linux-modules-iwlwifi-5.15.0-73-fips",
"binary_version": "5.15.0-73.80+fips1"
},
{
"binary_name": "linux-tools-5.15.0-73-fips",
"binary_version": "5.15.0-73.80+fips1"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:Pro:FIPS-preview:22.04:LTS",
"name": "linux-fips",
"purl": "pkg:deb/ubuntu/linux-fips@5.15.0-73.80+fips1?arch=source\u0026distro=fips-preview/jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.15.0-73.80+fips1"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-buildinfo-5.15.0-1048-gcp-fips",
"binary_version": "5.15.0-1048.56+fips1"
},
{
"binary_name": "linux-gcp-fips-headers-5.15.0-1048",
"binary_version": "5.15.0-1048.56+fips1"
},
{
"binary_name": "linux-gcp-fips-tools-5.15.0-1048",
"binary_version": "5.15.0-1048.56+fips1"
},
{
"binary_name": "linux-headers-5.15.0-1048-gcp-fips",
"binary_version": "5.15.0-1048.56+fips1"
},
{
"binary_name": "linux-image-unsigned-5.15.0-1048-gcp-fips",
"binary_version": "5.15.0-1048.56+fips1"
},
{
"binary_name": "linux-image-unsigned-hmac-5.15.0-1048-gcp-fips",
"binary_version": "5.15.0-1048.56+fips1"
},
{
"binary_name": "linux-modules-5.15.0-1048-gcp-fips",
"binary_version": "5.15.0-1048.56+fips1"
},
{
"binary_name": "linux-modules-extra-5.15.0-1048-gcp-fips",
"binary_version": "5.15.0-1048.56+fips1"
},
{
"binary_name": "linux-tools-5.15.0-1048-gcp-fips",
"binary_version": "5.15.0-1048.56+fips1"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:Pro:FIPS-preview:22.04:LTS",
"name": "linux-gcp-fips",
"purl": "pkg:deb/ubuntu/linux-gcp-fips@5.15.0-1048.56+fips1?arch=source\u0026distro=fips-preview/jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.15.0-1048.56+fips1"
]
},
{
"ecosystem_specific": {
"availability": "Available with Ubuntu Pro: https://ubuntu.com/pro",
"binaries": [
{
"binary_name": "linux-aws-fips-cloud-tools-5.15.0-1109",
"binary_version": "5.15.0-1109.116+fips1"
},
{
"binary_name": "linux-aws-fips-headers-5.15.0-1109",
"binary_version": "5.15.0-1109.116+fips1"
},
{
"binary_name": "linux-aws-fips-tools-5.15.0-1109",
"binary_version": "5.15.0-1109.116+fips1"
},
{
"binary_name": "linux-buildinfo-5.15.0-1109-aws-fips",
"binary_version": "5.15.0-1109.116+fips1"
},
{
"binary_name": "linux-cloud-tools-5.15.0-1109-aws-fips",
"binary_version": "5.15.0-1109.116+fips1"
},
{
"binary_name": "linux-headers-5.15.0-1109-aws-fips",
"binary_version": "5.15.0-1109.116+fips1"
},
{
"binary_name": "linux-image-unsigned-5.15.0-1109-aws-fips",
"binary_version": "5.15.0-1109.116+fips1"
},
{
"binary_name": "linux-image-unsigned-hmac-5.15.0-1109-aws-fips",
"binary_version": "5.15.0-1109.116+fips1"
},
{
"binary_name": "linux-modules-5.15.0-1109-aws-fips",
"binary_version": "5.15.0-1109.116+fips1"
},
{
"binary_name": "linux-modules-extra-5.15.0-1109-aws-fips",
"binary_version": "5.15.0-1109.116+fips1"
},
{
"binary_name": "linux-tools-5.15.0-1109-aws-fips",
"binary_version": "5.15.0-1109.116+fips1"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:Pro:FIPS-updates:22.04:LTS",
"name": "linux-aws-fips",
"purl": "pkg:deb/ubuntu/linux-aws-fips@5.15.0-1109.116+fips1?arch=source\u0026distro=fips-updates/jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "5.15.0-1109.116+fips1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.15.0-1051.56+fips1",
"5.15.0-1052.57+fips1",
"5.15.0-1053.58+fips1",
"5.15.0-1055.60+fips1",
"5.15.0-1056.61+fips1",
"5.15.0-1057.63+fips1",
"5.15.0-1060.66+fips1",
"5.15.0-1061.67+fips1",
"5.15.0-1062.68+fips1",
"5.15.0-1063.69+fips1",
"5.15.0-1064.70+fips1",
"5.15.0-1065.71+fips1",
"5.15.0-1066.72+fips1",
"5.15.0-1067.73+fips1",
"5.15.0-1068.74+fips1",
"5.15.0-1069.75+fips1",
"5.15.0-1070.76+fips1",
"5.15.0-1071.77+fips1",
"5.15.0-1072.78+fips1",
"5.15.0-1073.79+fips1",
"5.15.0-1076.83+fips1",
"5.15.0-1077.84+fips1",
"5.15.0-1078.85+fips1",
"5.15.0-1079.86+fips1",
"5.15.0-1080.87+fips1",
"5.15.0-1081.88+fips1",
"5.15.0-1082.89+fips1",
"5.15.0-1083.90+fips1",
"5.15.0-1084.91+fips1",
"5.15.0-1085.92+fips1",
"5.15.0-1086.93+fips1",
"5.15.0-1087.94+fips1",
"5.15.0-1088.95+fips1",
"5.15.0-1089.96+fips1",
"5.15.0-1090.97+fips1",
"5.15.0-1091.98+fips1",
"5.15.0-1092.99+fips1",
"5.15.0-1093.100+fips1",
"5.15.0-1095.102+fips1",
"5.15.0-1096.103+fips1",
"5.15.0-1097.104+fips1",
"5.15.0-1098.105+fips1",
"5.15.0-1099.106+fips1",
"5.15.0-1100.107+fips1",
"5.15.0-1101.108+fips1",
"5.15.0-1103.110+fips1",
"5.15.0-1104.111+fips1",
"5.15.0-1105.112+fips1",
"5.15.0-1106.113+fips1",
"5.15.0-1108.115+fips1"
]
},
{
"ecosystem_specific": {
"availability": "Available with Ubuntu Pro: https://ubuntu.com/pro",
"binaries": [
{
"binary_name": "linux-azure-fips-cloud-tools-5.15.0-1114",
"binary_version": "5.15.0-1114.123+fips1"
},
{
"binary_name": "linux-azure-fips-headers-5.15.0-1114",
"binary_version": "5.15.0-1114.123+fips1"
},
{
"binary_name": "linux-azure-fips-tools-5.15.0-1114",
"binary_version": "5.15.0-1114.123+fips1"
},
{
"binary_name": "linux-buildinfo-5.15.0-1114-azure-fips",
"binary_version": "5.15.0-1114.123+fips1"
},
{
"binary_name": "linux-cloud-tools-5.15.0-1114-azure-fips",
"binary_version": "5.15.0-1114.123+fips1"
},
{
"binary_name": "linux-headers-5.15.0-1114-azure-fips",
"binary_version": "5.15.0-1114.123+fips1"
},
{
"binary_name": "linux-image-unsigned-5.15.0-1114-azure-fips",
"binary_version": "5.15.0-1114.123+fips1"
},
{
"binary_name": "linux-image-unsigned-hmac-5.15.0-1114-azure-fips",
"binary_version": "5.15.0-1114.123+fips1"
},
{
"binary_name": "linux-modules-5.15.0-1114-azure-fips",
"binary_version": "5.15.0-1114.123+fips1"
},
{
"binary_name": "linux-modules-extra-5.15.0-1114-azure-fips",
"binary_version": "5.15.0-1114.123+fips1"
},
{
"binary_name": "linux-modules-involflt-5.15.0-1114-azure-fips",
"binary_version": "5.15.0-1114.123+fips1"
},
{
"binary_name": "linux-tools-5.15.0-1114-azure-fips",
"binary_version": "5.15.0-1114.123+fips1"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:Pro:FIPS-updates:22.04:LTS",
"name": "linux-azure-fips",
"purl": "pkg:deb/ubuntu/linux-azure-fips@5.15.0-1114.123+fips1?arch=source\u0026distro=fips-updates/jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "5.15.0-1114.123+fips1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.15.0-1053.61+fips1",
"5.15.0-1058.66+fips1",
"5.15.0-1059.67+fips1",
"5.15.0-1060.69+fips1",
"5.15.0-1061.70+fips1",
"5.15.0-1063.72+fips1",
"5.15.0-1064.73+fips1",
"5.15.0-1065.74+fips1",
"5.15.0-1067.76+fips1",
"5.15.0-1068.77+fips1",
"5.15.0-1070.79+fips1",
"5.15.0-1071.80+fips1",
"5.15.0-1072.81+fips1",
"5.15.0-1073.82+fips1",
"5.15.0-1074.83+fips1",
"5.15.0-1075.84+fips1",
"5.15.0-1078.87+fips1",
"5.15.0-1079.88+fips1",
"5.15.0-1080.89+fips1",
"5.15.0-1082.91+fips1",
"5.15.0-1083.92+fips1",
"5.15.0-1085.94+fips1",
"5.15.0-1087.96+fips1",
"5.15.0-1088.97+fips1",
"5.15.0-1089.98+fips1",
"5.15.0-1090.99+fips1",
"5.15.0-1091.100+fips1",
"5.15.0-1094.103+fips1",
"5.15.0-1095.104+fips1",
"5.15.0-1096.105+fips1",
"5.15.0-1097.106+fips1",
"5.15.0-1098.107+fips1",
"5.15.0-1101.110+fips1",
"5.15.0-1102.111+fips1",
"5.15.0-1103.112+fips1",
"5.15.0-1109.118+fips1",
"5.15.0-1110.119+fips1",
"5.15.0-1111.120+fips1"
]
},
{
"ecosystem_specific": {
"availability": "Available with Ubuntu Pro: https://ubuntu.com/pro",
"binaries": [
{
"binary_name": "linux-buildinfo-5.15.0-181-fips",
"binary_version": "5.15.0-181.191+fips1"
},
{
"binary_name": "linux-cloud-tools-5.15.0-181-fips",
"binary_version": "5.15.0-181.191+fips1"
},
{
"binary_name": "linux-fips-cloud-tools-5.15.0-181",
"binary_version": "5.15.0-181.191+fips1"
},
{
"binary_name": "linux-fips-headers-5.15.0-181",
"binary_version": "5.15.0-181.191+fips1"
},
{
"binary_name": "linux-fips-tools-5.15.0-181",
"binary_version": "5.15.0-181.191+fips1"
},
{
"binary_name": "linux-headers-5.15.0-181-fips",
"binary_version": "5.15.0-181.191+fips1"
},
{
"binary_name": "linux-image-unsigned-5.15.0-181-fips",
"binary_version": "5.15.0-181.191+fips1"
},
{
"binary_name": "linux-image-unsigned-hmac-5.15.0-181-fips",
"binary_version": "5.15.0-181.191+fips1"
},
{
"binary_name": "linux-modules-5.15.0-181-fips",
"binary_version": "5.15.0-181.191+fips1"
},
{
"binary_name": "linux-modules-extra-5.15.0-181-fips",
"binary_version": "5.15.0-181.191+fips1"
},
{
"binary_name": "linux-modules-iwlwifi-5.15.0-181-fips",
"binary_version": "5.15.0-181.191+fips1"
},
{
"binary_name": "linux-tools-5.15.0-181-fips",
"binary_version": "5.15.0-181.191+fips1"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:Pro:FIPS-updates:22.04:LTS",
"name": "linux-fips",
"purl": "pkg:deb/ubuntu/linux-fips@5.15.0-181.191+fips1?arch=source\u0026distro=fips-updates/jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "5.15.0-181.191+fips1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.15.0-73.80+fips1",
"5.15.0-92.102+fips1",
"5.15.0-94.104+fips1",
"5.15.0-97.107+fips1",
"5.15.0-100.110+fips1",
"5.15.0-101.111+fips1",
"5.15.0-102.112+fips1",
"5.15.0-105.115+fips1",
"5.15.0-106.116+fips1",
"5.15.0-107.117+fips1",
"5.15.0-111.121+fips1",
"5.15.0-113.123+fips1",
"5.15.0-115.125+fips1",
"5.15.0-117.127+fips1",
"5.15.0-118.128+fips1",
"5.15.0-119.129+fips1",
"5.15.0-121.131+fips1",
"5.15.0-122.132+fips1",
"5.15.0-124.134+fips1",
"5.15.0-125.135+fips1",
"5.15.0-127.137+fips1",
"5.15.0-128.138+fips1",
"5.15.0-130.140+fips1",
"5.15.0-131.141+fips1",
"5.15.0-133.144+fips1",
"5.15.0-134.145+fips1",
"5.15.0-135.146+fips1",
"5.15.0-136.147+fips1",
"5.15.0-138.148+fips1",
"5.15.0-139.149+fips1",
"5.15.0-140.150+fips1",
"5.15.0-141.151+fips1",
"5.15.0-142.152+fips1",
"5.15.0-143.153+fips1",
"5.15.0-144.157+fips1",
"5.15.0-145.158+fips1",
"5.15.0-152.162+fips1",
"5.15.0-153.163+fips1",
"5.15.0-156.166+fips1",
"5.15.0-157.167+fips1",
"5.15.0-160.170+fips1",
"5.15.0-161.171+fips1",
"5.15.0-163.173+fips1",
"5.15.0-164.174+fips1",
"5.15.0-168.178+fips1",
"5.15.0-170.180+fips1",
"5.15.0-171.181+fips1",
"5.15.0-173.183+fips1",
"5.15.0-174.184+fips1",
"5.15.0-176.186+fips1",
"5.15.0-177.187+fips1",
"5.15.0-179.189+fips1"
]
},
{
"ecosystem_specific": {
"availability": "Available with Ubuntu Pro: https://ubuntu.com/pro",
"binaries": [
{
"binary_name": "linux-buildinfo-5.15.0-1109-gcp-fips",
"binary_version": "5.15.0-1109.118+fips1"
},
{
"binary_name": "linux-gcp-fips-headers-5.15.0-1109",
"binary_version": "5.15.0-1109.118+fips1"
},
{
"binary_name": "linux-gcp-fips-tools-5.15.0-1109",
"binary_version": "5.15.0-1109.118+fips1"
},
{
"binary_name": "linux-headers-5.15.0-1109-gcp-fips",
"binary_version": "5.15.0-1109.118+fips1"
},
{
"binary_name": "linux-image-unsigned-5.15.0-1109-gcp-fips",
"binary_version": "5.15.0-1109.118+fips1"
},
{
"binary_name": "linux-image-unsigned-hmac-5.15.0-1109-gcp-fips",
"binary_version": "5.15.0-1109.118+fips1"
},
{
"binary_name": "linux-modules-5.15.0-1109-gcp-fips",
"binary_version": "5.15.0-1109.118+fips1"
},
{
"binary_name": "linux-modules-extra-5.15.0-1109-gcp-fips",
"binary_version": "5.15.0-1109.118+fips1"
},
{
"binary_name": "linux-tools-5.15.0-1109-gcp-fips",
"binary_version": "5.15.0-1109.118+fips1"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:Pro:FIPS-updates:22.04:LTS",
"name": "linux-gcp-fips",
"purl": "pkg:deb/ubuntu/linux-gcp-fips@5.15.0-1109.118+fips1?arch=source\u0026distro=fips-updates/jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "5.15.0-1109.118+fips1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.15.0-1048.56+fips1",
"5.15.0-1055.63+fips2",
"5.15.0-1058.66+fips1",
"5.15.0-1059.67+fips1",
"5.15.0-1060.68+fips1",
"5.15.0-1062.70+fips1",
"5.15.0-1063.71+fips1",
"5.15.0-1064.72+fips1",
"5.15.0-1065.73+fips1",
"5.15.0-1066.74+fips1",
"5.15.0-1067.75+fips1",
"5.15.0-1068.76+fips1",
"5.15.0-1069.77+fips1",
"5.15.0-1070.78+fips1",
"5.15.0-1071.79+fips1",
"5.15.0-1072.80+fips1",
"5.15.0-1073.81+fips1",
"5.15.0-1074.83+fips1",
"5.15.0-1075.84+fips1",
"5.15.0-1077.86+fips1",
"5.15.0-1078.87+fips1",
"5.15.0-1079.88+fips1",
"5.15.0-1080.89+fips1",
"5.15.0-1081.90+fips1",
"5.15.0-1082.91+fips1",
"5.15.0-1083.92+fips1",
"5.15.0-1084.93+fips1",
"5.15.0-1085.94+fips1",
"5.15.0-1086.95+fips1",
"5.15.0-1087.96+fips1",
"5.15.0-1088.97+fips1",
"5.15.0-1090.99+fips1",
"5.15.0-1091.100+fips1",
"5.15.0-1092.101+fips1",
"5.15.0-1093.102+fips1",
"5.15.0-1095.104+fips1",
"5.15.0-1096.105+fips1",
"5.15.0-1097.106+fips1",
"5.15.0-1098.107+fips1",
"5.15.0-1099.108+fips1",
"5.15.0-1100.109+fips1",
"5.15.0-1101.110+fips1",
"5.15.0-1103.112+fips1",
"5.15.0-1104.113+fips1",
"5.15.0-1105.114+fips1",
"5.15.0-1106.115+fips1",
"5.15.0-1108.117+fips1"
]
},
{
"ecosystem_specific": {
"availability": "Available with Ubuntu Pro: https://ubuntu.com/pro",
"binaries": [
{
"binary_name": "linux-buildinfo-5.15.0-1101-intel-iot-realtime",
"binary_version": "5.15.0-1101.103"
},
{
"binary_name": "linux-cloud-tools-5.15.0-1101-intel-iot-realtime",
"binary_version": "5.15.0-1101.103"
},
{
"binary_name": "linux-headers-5.15.0-1101-intel-iot-realtime",
"binary_version": "5.15.0-1101.103"
},
{
"binary_name": "linux-image-unsigned-5.15.0-1101-intel-iot-realtime",
"binary_version": "5.15.0-1101.103"
},
{
"binary_name": "linux-intel-iot-realtime-cloud-tools-5.15.0-1101",
"binary_version": "5.15.0-1101.103"
},
{
"binary_name": "linux-intel-iot-realtime-cloud-tools-common",
"binary_version": "5.15.0-1101.103"
},
{
"binary_name": "linux-intel-iot-realtime-headers-5.15.0-1101",
"binary_version": "5.15.0-1101.103"
},
{
"binary_name": "linux-intel-iot-realtime-tools-5.15.0-1101",
"binary_version": "5.15.0-1101.103"
},
{
"binary_name": "linux-intel-iot-realtime-tools-common",
"binary_version": "5.15.0-1101.103"
},
{
"binary_name": "linux-intel-iot-realtime-tools-host",
"binary_version": "5.15.0-1101.103"
},
{
"binary_name": "linux-modules-5.15.0-1101-intel-iot-realtime",
"binary_version": "5.15.0-1101.103"
},
{
"binary_name": "linux-modules-extra-5.15.0-1101-intel-iot-realtime",
"binary_version": "5.15.0-1101.103"
},
{
"binary_name": "linux-tools-5.15.0-1101-intel-iot-realtime",
"binary_version": "5.15.0-1101.103"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:Pro:Realtime:22.04:LTS",
"name": "linux-intel-iot-realtime",
"purl": "pkg:deb/ubuntu/linux-intel-iot-realtime@5.15.0-1101.103?arch=source\u0026distro=realtime/jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "5.15.0-1101.103"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.15.0-1021.26",
"5.15.0-1022.27",
"5.15.0-1023.28",
"5.15.0-1024.29",
"5.15.0-1028.33",
"5.15.0-1033.35",
"5.15.0-1034.36",
"5.15.0-1035.37",
"5.15.0-1036.38",
"5.15.0-1037.39",
"5.15.0-1038.40",
"5.15.0-1039.41",
"5.15.0-1040.42",
"5.15.0-1041.43",
"5.15.0-1042.44",
"5.15.0-1043.45",
"5.15.0-1044.46",
"5.15.0-1046.48",
"5.15.0-1047.49",
"5.15.0-1048.50",
"5.15.0-1049.51",
"5.15.0-1050.52",
"5.15.0-1053.55",
"5.15.0-1054.56",
"5.15.0-1055.57",
"5.15.0-1056.58",
"5.15.0-1057.59",
"5.15.0-1058.60",
"5.15.0-1059.61",
"5.15.0-1060.62",
"5.15.0-1061.63",
"5.15.0-1063.65",
"5.15.0-1064.66",
"5.15.0-1066.68",
"5.15.0-1071.73",
"5.15.0-1072.74",
"5.15.0-1073.75",
"5.15.0-1074.76",
"5.15.0-1075.77",
"5.15.0-1076.78",
"5.15.0-1077.79",
"5.15.0-1078.80",
"5.15.0-1079.81",
"5.15.0-1080.82",
"5.15.0-1081.83",
"5.15.0-1082.84",
"5.15.0-1083.85",
"5.15.0-1084.86",
"5.15.0-1085.87",
"5.15.0-1086.88",
"5.15.0-1087.89",
"5.15.0-1088.90",
"5.15.0-1089.91",
"5.15.0-1090.92",
"5.15.0-1091.93",
"5.15.0-1092.94",
"5.15.0-1093.95",
"5.15.0-1094.96",
"5.15.0-1096.98",
"5.15.0-1097.99",
"5.15.0-1098.100",
"5.15.0-1099.101",
"5.15.0-1100.102"
]
},
{
"ecosystem_specific": {
"availability": "Available with Ubuntu Pro: https://ubuntu.com/pro",
"binaries": [
{
"binary_name": "linux-buildinfo-5.15.0-1108-realtime",
"binary_version": "5.15.0-1108.117"
},
{
"binary_name": "linux-cloud-tools-5.15.0-1108-realtime",
"binary_version": "5.15.0-1108.117"
},
{
"binary_name": "linux-headers-5.15.0-1108-realtime",
"binary_version": "5.15.0-1108.117"
},
{
"binary_name": "linux-image-unsigned-5.15.0-1108-realtime",
"binary_version": "5.15.0-1108.117"
},
{
"binary_name": "linux-modules-5.15.0-1108-realtime",
"binary_version": "5.15.0-1108.117"
},
{
"binary_name": "linux-modules-extra-5.15.0-1108-realtime",
"binary_version": "5.15.0-1108.117"
},
{
"binary_name": "linux-modules-iwlwifi-5.15.0-1108-realtime",
"binary_version": "5.15.0-1108.117"
},
{
"binary_name": "linux-realtime-cloud-tools-5.15.0-1108",
"binary_version": "5.15.0-1108.117"
},
{
"binary_name": "linux-realtime-cloud-tools-common",
"binary_version": "5.15.0-1108.117"
},
{
"binary_name": "linux-realtime-headers-5.15.0-1108",
"binary_version": "5.15.0-1108.117"
},
{
"binary_name": "linux-realtime-tools-5.15.0-1108",
"binary_version": "5.15.0-1108.117"
},
{
"binary_name": "linux-realtime-tools-common",
"binary_version": "5.15.0-1108.117"
},
{
"binary_name": "linux-realtime-tools-host",
"binary_version": "5.15.0-1108.117"
},
{
"binary_name": "linux-tools-5.15.0-1108-realtime",
"binary_version": "5.15.0-1108.117"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:Pro:Realtime:22.04:LTS",
"name": "linux-realtime",
"purl": "pkg:deb/ubuntu/linux-realtime@5.15.0-1108.117?arch=source\u0026distro=realtime/jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "5.15.0-1108.117"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"5.15.0-1006.6",
"5.15.0-1007.7",
"5.15.0-1009.9",
"5.15.0-1011.11",
"5.15.0-1014.14",
"5.15.0-1015.15",
"5.15.0-1016.16",
"5.15.0-1019.19",
"5.15.0-1020.20",
"5.15.0-1021.21",
"5.15.0-1022.22",
"5.15.0-1024.25",
"5.15.0-1025.28",
"5.15.0-1028.31",
"5.15.0-1029.32",
"5.15.0-1030.33",
"5.15.0-1032.35",
"5.15.0-1033.36",
"5.15.0-1034.37",
"5.15.0-1036.39",
"5.15.0-1037.40",
"5.15.0-1038.41",
"5.15.0-1039.42",
"5.15.0-1040.45",
"5.15.0-1041.46",
"5.15.0-1042.47",
"5.15.0-1043.48",
"5.15.0-1044.49",
"5.15.0-1045.50",
"5.15.0-1046.52",
"5.15.0-1048.54",
"5.15.0-1049.55",
"5.15.0-1050.56",
"5.15.0-1051.57",
"5.15.0-1052.58",
"5.15.0-1053.59",
"5.15.0-1054.60",
"5.15.0-1055.62",
"5.15.0-1056.63",
"5.15.0-1057.64",
"5.15.0-1058.66",
"5.15.0-1061.69",
"5.15.0-1062.70",
"5.15.0-1063.71",
"5.15.0-1064.72",
"5.15.0-1065.73",
"5.15.0-1066.74",
"5.15.0-1067.75",
"5.15.0-1068.76",
"5.15.0-1069.77",
"5.15.0-1070.78",
"5.15.0-1071.79",
"5.15.0-1072.80",
"5.15.0-1073.81",
"5.15.0-1074.82",
"5.15.0-1075.83",
"5.15.0-1076.84",
"5.15.0-1077.85",
"5.15.0-1078.86",
"5.15.0-1079.87",
"5.15.0-1080.88",
"5.15.0-1081.89",
"5.15.0-1082.91",
"5.15.0-1083.92",
"5.15.0-1084.93",
"5.15.0-1085.94",
"5.15.0-1086.95",
"5.15.0-1087.96",
"5.15.0-1088.97",
"5.15.0-1089.98",
"5.15.0-1090.99",
"5.15.0-1091.100",
"5.15.0-1092.101",
"5.15.0-1093.102",
"5.15.0-1094.103",
"5.15.0-1095.104",
"5.15.0-1096.105",
"5.15.0-1097.106",
"5.15.0-1098.107",
"5.15.0-1099.108",
"5.15.0-1100.109",
"5.15.0-1102.111",
"5.15.0-1103.112",
"5.15.0-1104.113",
"5.15.0-1105.114",
"5.15.0-1107.116"
]
},
{
"ecosystem_specific": {
"availability": "Available with Ubuntu Pro: https://ubuntu.com/pro",
"binaries": [
{
"binary_name": "linux-buildinfo-6.8.1-1052-realtime",
"binary_version": "6.8.1-1052.53~22.04.1"
},
{
"binary_name": "linux-cloud-tools-6.8.1-1052-realtime",
"binary_version": "6.8.1-1052.53~22.04.1"
},
{
"binary_name": "linux-headers-6.8.1-1052-realtime",
"binary_version": "6.8.1-1052.53~22.04.1"
},
{
"binary_name": "linux-image-unsigned-6.8.1-1052-realtime",
"binary_version": "6.8.1-1052.53~22.04.1"
},
{
"binary_name": "linux-modules-6.8.1-1052-realtime",
"binary_version": "6.8.1-1052.53~22.04.1"
},
{
"binary_name": "linux-modules-extra-6.8.1-1052-realtime",
"binary_version": "6.8.1-1052.53~22.04.1"
},
{
"binary_name": "linux-modules-iwlwifi-6.8.1-1052-realtime",
"binary_version": "6.8.1-1052.53~22.04.1"
},
{
"binary_name": "linux-realtime-6.8-cloud-tools-6.8.1-1052",
"binary_version": "6.8.1-1052.53~22.04.1"
},
{
"binary_name": "linux-realtime-6.8-headers-6.8.1-1052",
"binary_version": "6.8.1-1052.53~22.04.1"
},
{
"binary_name": "linux-realtime-6.8-tools-6.8.1-1052",
"binary_version": "6.8.1-1052.53~22.04.1"
},
{
"binary_name": "linux-tools-6.8.1-1052-realtime",
"binary_version": "6.8.1-1052.53~22.04.1"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:Pro:Realtime:22.04:LTS",
"name": "linux-realtime-6.8",
"purl": "pkg:deb/ubuntu/linux-realtime-6.8@6.8.1-1052.53~22.04.1?arch=source\u0026distro=realtime/jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.8.1-1052.53~22.04.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.8.1-1004.4~22.04.1",
"6.8.1-1005.5~22.04.2",
"6.8.1-1006.6~22.04.1",
"6.8.1-1007.7~22.04.1",
"6.8.1-1008.8~22.04.1",
"6.8.1-1009.9~22.04.1",
"6.8.1-1010.10~22.04.1",
"6.8.1-1011.11~22.04.1",
"6.8.1-1012.12~22.04.1",
"6.8.1-1013.14~22.04.1",
"6.8.1-1014.15~22.04.1",
"6.8.1-1015.16~22.04.1",
"6.8.1-1016.17~22.04.1",
"6.8.1-1017.18~22.04.1",
"6.8.1-1018.19~22.04.1",
"6.8.1-1019.20~22.04.1",
"6.8.1-1020.21~22.04.1",
"6.8.1-1021.22~22.04.1",
"6.8.1-1022.23~22.04.1",
"6.8.1-1023.24~22.04.1",
"6.8.1-1024.25~22.04.1",
"6.8.1-1025.26~22.04.1",
"6.8.1-1026.27~22.04.1",
"6.8.1-1030.31~22.04.1",
"6.8.1-1031.32~22.04.1",
"6.8.1-1034.35~22.04.1",
"6.8.1-1035.36~22.04.1",
"6.8.1-1036.37~22.04.1",
"6.8.1-1037.38~22.04.1",
"6.8.1-1038.39~22.04.1",
"6.8.1-1039.40~22.04.1",
"6.8.1-1040.41~22.04.1",
"6.8.1-1041.42~22.04.1",
"6.8.1-1042.43~22.04.1",
"6.8.1-1045.46~22.04.1",
"6.8.1-1046.47~22.04.2",
"6.8.1-1047.48~22.04.1",
"6.8.1-1048.49~22.04.1",
"6.8.1-1051.52~22.04.1"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "linux-buildinfo-6.8.0-124-generic",
"binary_version": "6.8.0-124.124"
},
{
"binary_name": "linux-buildinfo-6.8.0-124-generic-64k",
"binary_version": "6.8.0-124.124"
},
{
"binary_name": "linux-cloud-tools-6.8.0-124",
"binary_version": "6.8.0-124.124"
},
{
"binary_name": "linux-cloud-tools-6.8.0-124-generic",
"binary_version": "6.8.0-124.124"
},
{
"binary_name": "linux-cloud-tools-common",
"binary_version": "6.8.0-124.124"
},
{
"binary_name": "linux-headers-6.8.0-124",
"binary_version": "6.8.0-124.124"
},
{
"binary_name": "linux-headers-6.8.0-124-generic",
"binary_version": "6.8.0-124.124"
},
{
"binary_name": "linux-headers-6.8.0-124-generic-64k",
"binary_version": "6.8.0-124.124"
},
{
"binary_name": "linux-image-6.8.0-124-generic",
"binary_version": "6.8.0-124.124"
},
{
"binary_name": "linux-image-unsigned-6.8.0-124-generic",
"binary_version": "6.8.0-124.124"
},
{
"binary_name": "linux-image-unsigned-6.8.0-124-generic-64k",
"binary_version": "6.8.0-124.124"
},
{
"binary_name": "linux-lib-rust-6.8.0-124-generic",
"binary_version": "6.8.0-124.124"
},
{
"binary_name": "linux-modules-6.8.0-124-generic",
"binary_version": "6.8.0-124.124"
},
{
"binary_name": "linux-modules-6.8.0-124-generic-64k",
"binary_version": "6.8.0-124.124"
},
{
"binary_name": "linux-modules-extra-6.8.0-124-generic",
"binary_version": "6.8.0-124.124"
},
{
"binary_name": "linux-modules-ipu6-6.8.0-124-generic",
"binary_version": "6.8.0-124.124"
},
{
"binary_name": "linux-modules-iwlwifi-6.8.0-124-generic",
"binary_version": "6.8.0-124.124"
},
{
"binary_name": "linux-modules-usbio-6.8.0-124-generic",
"binary_version": "6.8.0-124.124"
},
{
"binary_name": "linux-source-6.8.0",
"binary_version": "6.8.0-124.124"
},
{
"binary_name": "linux-tools-6.8.0-124",
"binary_version": "6.8.0-124.124"
},
{
"binary_name": "linux-tools-6.8.0-124-generic",
"binary_version": "6.8.0-124.124"
},
{
"binary_name": "linux-tools-6.8.0-124-generic-64k",
"binary_version": "6.8.0-124.124"
},
{
"binary_name": "linux-tools-common",
"binary_version": "6.8.0-124.124"
},
{
"binary_name": "linux-tools-host",
"binary_version": "6.8.0-124.124"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:24.04:LTS",
"name": "linux",
"purl": "pkg:deb/ubuntu/linux@6.8.0-124.124?arch=source\u0026distro=noble"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.8.0-124.124"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.5.0-9.9",
"6.6.0-14.14",
"6.8.0-11.11",
"6.8.0-20.20",
"6.8.0-22.22",
"6.8.0-28.28",
"6.8.0-31.31",
"6.8.0-35.35",
"6.8.0-36.36",
"6.8.0-38.38",
"6.8.0-39.39",
"6.8.0-40.40",
"6.8.0-41.41",
"6.8.0-44.44",
"6.8.0-45.45",
"6.8.0-47.47",
"6.8.0-48.48",
"6.8.0-49.49",
"6.8.0-50.51",
"6.8.0-51.52",
"6.8.0-52.53",
"6.8.0-53.55",
"6.8.0-54.56",
"6.8.0-55.57",
"6.8.0-56.58",
"6.8.0-57.59",
"6.8.0-58.60",
"6.8.0-59.61",
"6.8.0-60.63",
"6.8.0-62.65",
"6.8.0-63.66",
"6.8.0-64.67",
"6.8.0-71.71",
"6.8.0-78.78",
"6.8.0-79.79",
"6.8.0-83.83",
"6.8.0-84.84",
"6.8.0-85.85",
"6.8.0-86.87",
"6.8.0-87.88",
"6.8.0-88.89",
"6.8.0-90.91",
"6.8.0-94.96",
"6.8.0-100.100",
"6.8.0-101.101",
"6.8.0-106.106",
"6.8.0-107.107",
"6.8.0-110.110",
"6.8.0-111.111",
"6.8.0-117.117"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "linux-aws-cloud-tools-6.8.0-1057",
"binary_version": "6.8.0-1057.60"
},
{
"binary_name": "linux-aws-headers-6.8.0-1057",
"binary_version": "6.8.0-1057.60"
},
{
"binary_name": "linux-aws-tools-6.8.0-1057",
"binary_version": "6.8.0-1057.60"
},
{
"binary_name": "linux-buildinfo-6.8.0-1057-aws",
"binary_version": "6.8.0-1057.60"
},
{
"binary_name": "linux-buildinfo-6.8.0-1057-aws-64k",
"binary_version": "6.8.0-1057.60"
},
{
"binary_name": "linux-cloud-tools-6.8.0-1057-aws",
"binary_version": "6.8.0-1057.60"
},
{
"binary_name": "linux-cloud-tools-6.8.0-1057-aws-64k",
"binary_version": "6.8.0-1057.60"
},
{
"binary_name": "linux-headers-6.8.0-1057-aws",
"binary_version": "6.8.0-1057.60"
},
{
"binary_name": "linux-headers-6.8.0-1057-aws-64k",
"binary_version": "6.8.0-1057.60"
},
{
"binary_name": "linux-image-unsigned-6.8.0-1057-aws",
"binary_version": "6.8.0-1057.60"
},
{
"binary_name": "linux-image-unsigned-6.8.0-1057-aws-64k",
"binary_version": "6.8.0-1057.60"
},
{
"binary_name": "linux-modules-6.8.0-1057-aws",
"binary_version": "6.8.0-1057.60"
},
{
"binary_name": "linux-modules-6.8.0-1057-aws-64k",
"binary_version": "6.8.0-1057.60"
},
{
"binary_name": "linux-modules-extra-6.8.0-1057-aws",
"binary_version": "6.8.0-1057.60"
},
{
"binary_name": "linux-modules-extra-6.8.0-1057-aws-64k",
"binary_version": "6.8.0-1057.60"
},
{
"binary_name": "linux-tools-6.8.0-1057-aws",
"binary_version": "6.8.0-1057.60"
},
{
"binary_name": "linux-tools-6.8.0-1057-aws-64k",
"binary_version": "6.8.0-1057.60"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:24.04:LTS",
"name": "linux-aws",
"purl": "pkg:deb/ubuntu/linux-aws@6.8.0-1057.60?arch=source\u0026distro=noble"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.8.0-1057.60"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.5.0-1008.8",
"6.6.0-1001.1",
"6.8.0-1001.1",
"6.8.0-1006.6",
"6.8.0-1008.8",
"6.8.0-1009.9",
"6.8.0-1010.10",
"6.8.0-1011.12",
"6.8.0-1012.13",
"6.8.0-1013.14",
"6.8.0-1014.15",
"6.8.0-1015.16",
"6.8.0-1016.17",
"6.8.0-1017.18",
"6.8.0-1018.20",
"6.8.0-1019.21",
"6.8.0-1020.22",
"6.8.0-1021.23",
"6.8.0-1023.25",
"6.8.0-1024.26",
"6.8.0-1025.27",
"6.8.0-1026.28",
"6.8.0-1027.29",
"6.8.0-1028.30",
"6.8.0-1029.31",
"6.8.0-1030.32",
"6.8.0-1031.33",
"6.8.0-1032.34",
"6.8.0-1033.35",
"6.8.0-1035.37",
"6.8.0-1036.38",
"6.8.0-1038.40",
"6.8.0-1039.41",
"6.8.0-1040.42",
"6.8.0-1041.43",
"6.8.0-1042.44",
"6.8.0-1043.45",
"6.8.0-1044.46",
"6.8.0-1045.47",
"6.8.0-1046.49",
"6.8.0-1047.50",
"6.8.0-1050.53",
"6.8.0-1051.54",
"6.8.0-1052.55",
"6.8.0-1053.56",
"6.8.0-1055.58"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-aws-6.14-cloud-tools-6.14.0-1018",
"binary_version": "6.14.0-1018.18~24.04.1"
},
{
"binary_name": "linux-aws-6.14-headers-6.14.0-1018",
"binary_version": "6.14.0-1018.18~24.04.1"
},
{
"binary_name": "linux-aws-6.14-tools-6.14.0-1018",
"binary_version": "6.14.0-1018.18~24.04.1"
},
{
"binary_name": "linux-buildinfo-6.14.0-1018-aws",
"binary_version": "6.14.0-1018.18~24.04.1"
},
{
"binary_name": "linux-buildinfo-6.14.0-1018-aws-64k",
"binary_version": "6.14.0-1018.18~24.04.1"
},
{
"binary_name": "linux-cloud-tools-6.14.0-1018-aws",
"binary_version": "6.14.0-1018.18~24.04.1"
},
{
"binary_name": "linux-cloud-tools-6.14.0-1018-aws-64k",
"binary_version": "6.14.0-1018.18~24.04.1"
},
{
"binary_name": "linux-headers-6.14.0-1018-aws",
"binary_version": "6.14.0-1018.18~24.04.1"
},
{
"binary_name": "linux-headers-6.14.0-1018-aws-64k",
"binary_version": "6.14.0-1018.18~24.04.1"
},
{
"binary_name": "linux-image-unsigned-6.14.0-1018-aws",
"binary_version": "6.14.0-1018.18~24.04.1"
},
{
"binary_name": "linux-image-unsigned-6.14.0-1018-aws-64k",
"binary_version": "6.14.0-1018.18~24.04.1"
},
{
"binary_name": "linux-modules-6.14.0-1018-aws",
"binary_version": "6.14.0-1018.18~24.04.1"
},
{
"binary_name": "linux-modules-6.14.0-1018-aws-64k",
"binary_version": "6.14.0-1018.18~24.04.1"
},
{
"binary_name": "linux-modules-extra-6.14.0-1018-aws",
"binary_version": "6.14.0-1018.18~24.04.1"
},
{
"binary_name": "linux-modules-extra-6.14.0-1018-aws-64k",
"binary_version": "6.14.0-1018.18~24.04.1"
},
{
"binary_name": "linux-tools-6.14.0-1018-aws",
"binary_version": "6.14.0-1018.18~24.04.1"
},
{
"binary_name": "linux-tools-6.14.0-1018-aws-64k",
"binary_version": "6.14.0-1018.18~24.04.1"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:24.04:LTS",
"name": "linux-aws-6.14",
"purl": "pkg:deb/ubuntu/linux-aws-6.14@6.14.0-1018.18~24.04.1?arch=source\u0026distro=noble"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.14.0-1007.7~24.04.1",
"6.14.0-1009.9~24.04.1",
"6.14.0-1010.10~24.04.1",
"6.14.0-1011.11~24.04.1",
"6.14.0-1012.12~24.04.1",
"6.14.0-1013.13~24.04.1",
"6.14.0-1014.14~24.04.1",
"6.14.0-1015.15~24.04.1",
"6.14.0-1016.16~24.04.1",
"6.14.0-1017.17~24.04.1",
"6.14.0-1018.18~24.04.1"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "linux-aws-6.17-cloud-tools-6.17.0-1017",
"binary_version": "6.17.0-1017.17~24.04.1"
},
{
"binary_name": "linux-aws-6.17-headers-6.17.0-1017",
"binary_version": "6.17.0-1017.17~24.04.1"
},
{
"binary_name": "linux-aws-6.17-tools-6.17.0-1017",
"binary_version": "6.17.0-1017.17~24.04.1"
},
{
"binary_name": "linux-buildinfo-6.17.0-1017-aws",
"binary_version": "6.17.0-1017.17~24.04.1"
},
{
"binary_name": "linux-buildinfo-6.17.0-1017-aws-64k",
"binary_version": "6.17.0-1017.17~24.04.1"
},
{
"binary_name": "linux-cloud-tools-6.17.0-1017-aws",
"binary_version": "6.17.0-1017.17~24.04.1"
},
{
"binary_name": "linux-cloud-tools-6.17.0-1017-aws-64k",
"binary_version": "6.17.0-1017.17~24.04.1"
},
{
"binary_name": "linux-headers-6.17.0-1017-aws",
"binary_version": "6.17.0-1017.17~24.04.1"
},
{
"binary_name": "linux-headers-6.17.0-1017-aws-64k",
"binary_version": "6.17.0-1017.17~24.04.1"
},
{
"binary_name": "linux-image-unsigned-6.17.0-1017-aws",
"binary_version": "6.17.0-1017.17~24.04.1"
},
{
"binary_name": "linux-image-unsigned-6.17.0-1017-aws-64k",
"binary_version": "6.17.0-1017.17~24.04.1"
},
{
"binary_name": "linux-modules-6.17.0-1017-aws",
"binary_version": "6.17.0-1017.17~24.04.1"
},
{
"binary_name": "linux-modules-6.17.0-1017-aws-64k",
"binary_version": "6.17.0-1017.17~24.04.1"
},
{
"binary_name": "linux-modules-extra-6.17.0-1017-aws",
"binary_version": "6.17.0-1017.17~24.04.1"
},
{
"binary_name": "linux-modules-extra-6.17.0-1017-aws-64k",
"binary_version": "6.17.0-1017.17~24.04.1"
},
{
"binary_name": "linux-tools-6.17.0-1017-aws",
"binary_version": "6.17.0-1017.17~24.04.1"
},
{
"binary_name": "linux-tools-6.17.0-1017-aws-64k",
"binary_version": "6.17.0-1017.17~24.04.1"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:24.04:LTS",
"name": "linux-aws-6.17",
"purl": "pkg:deb/ubuntu/linux-aws-6.17@6.17.0-1017.17~24.04.1?arch=source\u0026distro=noble"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.17.0-1017.17~24.04.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.17.0-1005.5~24.04.2",
"6.17.0-1007.7~24.04.1",
"6.17.0-1009.9~24.04.2",
"6.17.0-1010.10~24.04.1",
"6.17.0-1012.12~24.04.1",
"6.17.0-1013.13~24.04.1",
"6.17.0-1015.15~24.04.1"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "linux-azure-cloud-tools-6.8.0-1058",
"binary_version": "6.8.0-1058.64"
},
{
"binary_name": "linux-azure-headers-6.8.0-1058",
"binary_version": "6.8.0-1058.64"
},
{
"binary_name": "linux-azure-tools-6.8.0-1058",
"binary_version": "6.8.0-1058.64"
},
{
"binary_name": "linux-buildinfo-6.8.0-1058-azure",
"binary_version": "6.8.0-1058.64"
},
{
"binary_name": "linux-cloud-tools-6.8.0-1058-azure",
"binary_version": "6.8.0-1058.64"
},
{
"binary_name": "linux-headers-6.8.0-1058-azure",
"binary_version": "6.8.0-1058.64"
},
{
"binary_name": "linux-image-unsigned-6.8.0-1058-azure",
"binary_version": "6.8.0-1058.64"
},
{
"binary_name": "linux-modules-6.8.0-1058-azure",
"binary_version": "6.8.0-1058.64"
},
{
"binary_name": "linux-modules-extra-6.8.0-1058-azure",
"binary_version": "6.8.0-1058.64"
},
{
"binary_name": "linux-modules-involflt-6.8.0-1058-azure",
"binary_version": "6.8.0-1058.64"
},
{
"binary_name": "linux-modules-iwlwifi-6.8.0-1058-azure",
"binary_version": "6.8.0-1058.64"
},
{
"binary_name": "linux-tools-6.8.0-1058-azure",
"binary_version": "6.8.0-1058.64"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:24.04:LTS",
"name": "linux-azure",
"purl": "pkg:deb/ubuntu/linux-azure@6.8.0-1058.64?arch=source\u0026distro=noble"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.8.0-1058.64"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.5.0-1007.7",
"6.6.0-1001.1",
"6.8.0-1001.1",
"6.8.0-1005.5",
"6.8.0-1006.6",
"6.8.0-1007.7",
"6.8.0-1008.8",
"6.8.0-1009.9",
"6.8.0-1010.10",
"6.8.0-1012.14",
"6.8.0-1013.15",
"6.8.0-1014.16",
"6.8.0-1015.17",
"6.8.0-1016.18",
"6.8.0-1017.20",
"6.8.0-1018.21",
"6.8.0-1020.23",
"6.8.0-1021.25",
"6.8.0-1025.30",
"6.8.0-1026.31",
"6.8.0-1027.32",
"6.8.0-1028.33",
"6.8.0-1029.34",
"6.8.0-1030.35",
"6.8.0-1031.36",
"6.8.0-1034.39",
"6.8.0-1038.44",
"6.8.0-1040.46",
"6.8.0-1041.47",
"6.8.0-1042.48",
"6.8.0-1044.50",
"6.8.0-1046.52",
"6.8.0-1051.57",
"6.8.0-1052.58",
"6.8.0-1054.60",
"6.8.0-1056.62"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-azure-6.11-cloud-tools-6.11.0-1018",
"binary_version": "6.11.0-1018.18~24.04.1"
},
{
"binary_name": "linux-azure-6.11-headers-6.11.0-1018",
"binary_version": "6.11.0-1018.18~24.04.1"
},
{
"binary_name": "linux-azure-6.11-tools-6.11.0-1018",
"binary_version": "6.11.0-1018.18~24.04.1"
},
{
"binary_name": "linux-buildinfo-6.11.0-1018-azure",
"binary_version": "6.11.0-1018.18~24.04.1"
},
{
"binary_name": "linux-cloud-tools-6.11.0-1018-azure",
"binary_version": "6.11.0-1018.18~24.04.1"
},
{
"binary_name": "linux-headers-6.11.0-1018-azure",
"binary_version": "6.11.0-1018.18~24.04.1"
},
{
"binary_name": "linux-image-unsigned-6.11.0-1018-azure",
"binary_version": "6.11.0-1018.18~24.04.1"
},
{
"binary_name": "linux-modules-6.11.0-1018-azure",
"binary_version": "6.11.0-1018.18~24.04.1"
},
{
"binary_name": "linux-modules-extra-6.11.0-1018-azure",
"binary_version": "6.11.0-1018.18~24.04.1"
},
{
"binary_name": "linux-modules-iwlwifi-6.11.0-1018-azure",
"binary_version": "6.11.0-1018.18~24.04.1"
},
{
"binary_name": "linux-tools-6.11.0-1018-azure",
"binary_version": "6.11.0-1018.18~24.04.1"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:24.04:LTS",
"name": "linux-azure-6.11",
"purl": "pkg:deb/ubuntu/linux-azure-6.11@6.11.0-1018.18~24.04.1?arch=source\u0026distro=noble"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.11.0-1008.8~24.04.1",
"6.11.0-1012.12~24.04.1",
"6.11.0-1013.13~24.04.1",
"6.11.0-1014.14~24.04.1",
"6.11.0-1015.15~24.04.1",
"6.11.0-1017.17~24.04.1",
"6.11.0-1018.18~24.04.1"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-azure-6.14-cloud-tools-6.14.0-1017",
"binary_version": "6.14.0-1017.17~24.04.1"
},
{
"binary_name": "linux-azure-6.14-headers-6.14.0-1017",
"binary_version": "6.14.0-1017.17~24.04.1"
},
{
"binary_name": "linux-azure-6.14-tools-6.14.0-1017",
"binary_version": "6.14.0-1017.17~24.04.1"
},
{
"binary_name": "linux-buildinfo-6.14.0-1017-azure",
"binary_version": "6.14.0-1017.17~24.04.1"
},
{
"binary_name": "linux-cloud-tools-6.14.0-1017-azure",
"binary_version": "6.14.0-1017.17~24.04.1"
},
{
"binary_name": "linux-headers-6.14.0-1017-azure",
"binary_version": "6.14.0-1017.17~24.04.1"
},
{
"binary_name": "linux-image-unsigned-6.14.0-1017-azure",
"binary_version": "6.14.0-1017.17~24.04.1"
},
{
"binary_name": "linux-modules-6.14.0-1017-azure",
"binary_version": "6.14.0-1017.17~24.04.1"
},
{
"binary_name": "linux-modules-extra-6.14.0-1017-azure",
"binary_version": "6.14.0-1017.17~24.04.1"
},
{
"binary_name": "linux-tools-6.14.0-1017-azure",
"binary_version": "6.14.0-1017.17~24.04.1"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:24.04:LTS",
"name": "linux-azure-6.14",
"purl": "pkg:deb/ubuntu/linux-azure-6.14@6.14.0-1017.17~24.04.1?arch=source\u0026distro=noble"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.14.0-1010.10~24.04.1",
"6.14.0-1012.12~24.04.1",
"6.14.0-1013.13~24.04.1",
"6.14.0-1014.14~24.04.1",
"6.14.0-1017.17~24.04.1"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "linux-azure-6.17-cloud-tools-6.17.0-1017",
"binary_version": "6.17.0-1017.17~24.04.1"
},
{
"binary_name": "linux-azure-6.17-headers-6.17.0-1017",
"binary_version": "6.17.0-1017.17~24.04.1"
},
{
"binary_name": "linux-azure-6.17-tools-6.17.0-1017",
"binary_version": "6.17.0-1017.17~24.04.1"
},
{
"binary_name": "linux-buildinfo-6.17.0-1017-azure",
"binary_version": "6.17.0-1017.17~24.04.1"
},
{
"binary_name": "linux-cloud-tools-6.17.0-1017-azure",
"binary_version": "6.17.0-1017.17~24.04.1"
},
{
"binary_name": "linux-headers-6.17.0-1017-azure",
"binary_version": "6.17.0-1017.17~24.04.1"
},
{
"binary_name": "linux-image-unsigned-6.17.0-1017-azure",
"binary_version": "6.17.0-1017.17~24.04.1"
},
{
"binary_name": "linux-modules-6.17.0-1017-azure",
"binary_version": "6.17.0-1017.17~24.04.1"
},
{
"binary_name": "linux-modules-extra-6.17.0-1017-azure",
"binary_version": "6.17.0-1017.17~24.04.1"
},
{
"binary_name": "linux-tools-6.17.0-1017-azure",
"binary_version": "6.17.0-1017.17~24.04.1"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:24.04:LTS",
"name": "linux-azure-6.17",
"purl": "pkg:deb/ubuntu/linux-azure-6.17@6.17.0-1017.17~24.04.1?arch=source\u0026distro=noble"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.17.0-1017.17~24.04.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.17.0-1008.8~24.04.1",
"6.17.0-1010.10~24.04.1",
"6.17.0-1011.11~24.04.2",
"6.17.0-1013.13~24.04.1",
"6.17.0-1015.15~24.04.1"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-azure-fde-cloud-tools-6.8.0-1064",
"binary_version": "6.8.0-1064.71"
},
{
"binary_name": "linux-azure-fde-headers-6.8.0-1064",
"binary_version": "6.8.0-1064.71"
},
{
"binary_name": "linux-azure-fde-tools-6.8.0-1064",
"binary_version": "6.8.0-1064.71"
},
{
"binary_name": "linux-buildinfo-6.8.0-1064-azure-fde",
"binary_version": "6.8.0-1064.71"
},
{
"binary_name": "linux-cloud-tools-6.8.0-1064-azure-fde",
"binary_version": "6.8.0-1064.71"
},
{
"binary_name": "linux-headers-6.8.0-1064-azure-fde",
"binary_version": "6.8.0-1064.71"
},
{
"binary_name": "linux-image-unsigned-6.8.0-1064-azure-fde",
"binary_version": "6.8.0-1064.71"
},
{
"binary_name": "linux-modules-6.8.0-1064-azure-fde",
"binary_version": "6.8.0-1064.71"
},
{
"binary_name": "linux-modules-extra-6.8.0-1064-azure-fde",
"binary_version": "6.8.0-1064.71"
},
{
"binary_name": "linux-modules-involflt-6.8.0-1064-azure-fde",
"binary_version": "6.8.0-1064.71"
},
{
"binary_name": "linux-modules-iwlwifi-6.8.0-1064-azure-fde",
"binary_version": "6.8.0-1064.71"
},
{
"binary_name": "linux-tools-6.8.0-1064-azure-fde",
"binary_version": "6.8.0-1064.71"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:24.04:LTS",
"name": "linux-azure-fde",
"purl": "pkg:deb/ubuntu/linux-azure-fde@6.8.0-1064.71?arch=source\u0026distro=noble"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.8.0-1041.48",
"6.8.0-1044.51",
"6.8.0-1046.53",
"6.8.0-1053.60",
"6.8.0-1058.65",
"6.8.0-1061.68",
"6.8.0-1062.69",
"6.8.0-1063.70",
"6.8.0-1064.71"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-azure-fde-6.14-cloud-tools-6.14.0-1017",
"binary_version": "6.14.0-1017.17~24.04.1"
},
{
"binary_name": "linux-azure-fde-6.14-headers-6.14.0-1017",
"binary_version": "6.14.0-1017.17~24.04.1"
},
{
"binary_name": "linux-azure-fde-6.14-tools-6.14.0-1017",
"binary_version": "6.14.0-1017.17~24.04.1"
},
{
"binary_name": "linux-buildinfo-6.14.0-1017-azure-fde",
"binary_version": "6.14.0-1017.17~24.04.1"
},
{
"binary_name": "linux-cloud-tools-6.14.0-1017-azure-fde",
"binary_version": "6.14.0-1017.17~24.04.1"
},
{
"binary_name": "linux-headers-6.14.0-1017-azure-fde",
"binary_version": "6.14.0-1017.17~24.04.1"
},
{
"binary_name": "linux-image-unsigned-6.14.0-1017-azure-fde",
"binary_version": "6.14.0-1017.17~24.04.1"
},
{
"binary_name": "linux-modules-6.14.0-1017-azure-fde",
"binary_version": "6.14.0-1017.17~24.04.1"
},
{
"binary_name": "linux-modules-extra-6.14.0-1017-azure-fde",
"binary_version": "6.14.0-1017.17~24.04.1"
},
{
"binary_name": "linux-tools-6.14.0-1017-azure-fde",
"binary_version": "6.14.0-1017.17~24.04.1"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:24.04:LTS",
"name": "linux-azure-fde-6.14",
"purl": "pkg:deb/ubuntu/linux-azure-fde-6.14@6.14.0-1017.17~24.04.1?arch=source\u0026distro=noble"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.14.0-1012.12~24.04.1",
"6.14.0-1013.13~24.04.1",
"6.14.0-1014.14~24.04.1",
"6.14.0-1015.15~24.04.1",
"6.14.0-1017.17~24.04.1"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-azure-nvidia-cloud-tools-6.8.0-1039",
"binary_version": "6.8.0-1039.42"
},
{
"binary_name": "linux-azure-nvidia-headers-6.8.0-1039",
"binary_version": "6.8.0-1039.42"
},
{
"binary_name": "linux-azure-nvidia-tools-6.8.0-1039",
"binary_version": "6.8.0-1039.42"
},
{
"binary_name": "linux-buildinfo-6.8.0-1039-azure-nvidia",
"binary_version": "6.8.0-1039.42"
},
{
"binary_name": "linux-cloud-tools-6.8.0-1039-azure-nvidia",
"binary_version": "6.8.0-1039.42"
},
{
"binary_name": "linux-headers-6.8.0-1039-azure-nvidia",
"binary_version": "6.8.0-1039.42"
},
{
"binary_name": "linux-image-unsigned-6.8.0-1039-azure-nvidia",
"binary_version": "6.8.0-1039.42"
},
{
"binary_name": "linux-modules-6.8.0-1039-azure-nvidia",
"binary_version": "6.8.0-1039.42"
},
{
"binary_name": "linux-modules-extra-6.8.0-1039-azure-nvidia",
"binary_version": "6.8.0-1039.42"
},
{
"binary_name": "linux-tools-6.8.0-1039-azure-nvidia",
"binary_version": "6.8.0-1039.42"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:24.04:LTS",
"name": "linux-azure-nvidia",
"purl": "pkg:deb/ubuntu/linux-azure-nvidia@6.8.0-1039.42?arch=source\u0026distro=noble"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.8.0-1013.14",
"6.8.0-1014.15",
"6.8.0-1016.17",
"6.8.0-1018.19",
"6.8.0-1019.20",
"6.8.0-1022.23",
"6.8.0-1025.27",
"6.8.0-1027.30",
"6.8.0-1029.32",
"6.8.0-1039.42"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-azure-nvidia-6.14-cloud-tools-6.14.0-1007",
"binary_version": "6.14.0-1007.7"
},
{
"binary_name": "linux-azure-nvidia-6.14-headers-6.14.0-1007",
"binary_version": "6.14.0-1007.7"
},
{
"binary_name": "linux-azure-nvidia-6.14-tools-6.14.0-1007",
"binary_version": "6.14.0-1007.7"
},
{
"binary_name": "linux-buildinfo-6.14.0-1007-azure-nvidia",
"binary_version": "6.14.0-1007.7"
},
{
"binary_name": "linux-cloud-tools-6.14.0-1007-azure-nvidia",
"binary_version": "6.14.0-1007.7"
},
{
"binary_name": "linux-headers-6.14.0-1007-azure-nvidia",
"binary_version": "6.14.0-1007.7"
},
{
"binary_name": "linux-image-unsigned-6.14.0-1007-azure-nvidia",
"binary_version": "6.14.0-1007.7"
},
{
"binary_name": "linux-modules-6.14.0-1007-azure-nvidia",
"binary_version": "6.14.0-1007.7"
},
{
"binary_name": "linux-modules-extra-6.14.0-1007-azure-nvidia",
"binary_version": "6.14.0-1007.7"
},
{
"binary_name": "linux-tools-6.14.0-1007-azure-nvidia",
"binary_version": "6.14.0-1007.7"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:24.04:LTS",
"name": "linux-azure-nvidia-6.14",
"purl": "pkg:deb/ubuntu/linux-azure-nvidia-6.14@6.14.0-1007.7?arch=source\u0026distro=noble"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.14.0-1003.3",
"6.14.0-1006.6",
"6.14.0-1007.7"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "linux-buildinfo-6.8.0-1060-gcp",
"binary_version": "6.8.0-1060.63"
},
{
"binary_name": "linux-buildinfo-6.8.0-1060-gcp-64k",
"binary_version": "6.8.0-1060.63"
},
{
"binary_name": "linux-gcp-headers-6.8.0-1060",
"binary_version": "6.8.0-1060.63"
},
{
"binary_name": "linux-gcp-tools-6.8.0-1060",
"binary_version": "6.8.0-1060.63"
},
{
"binary_name": "linux-headers-6.8.0-1060-gcp",
"binary_version": "6.8.0-1060.63"
},
{
"binary_name": "linux-headers-6.8.0-1060-gcp-64k",
"binary_version": "6.8.0-1060.63"
},
{
"binary_name": "linux-image-unsigned-6.8.0-1060-gcp",
"binary_version": "6.8.0-1060.63"
},
{
"binary_name": "linux-image-unsigned-6.8.0-1060-gcp-64k",
"binary_version": "6.8.0-1060.63"
},
{
"binary_name": "linux-modules-6.8.0-1060-gcp",
"binary_version": "6.8.0-1060.63"
},
{
"binary_name": "linux-modules-6.8.0-1060-gcp-64k",
"binary_version": "6.8.0-1060.63"
},
{
"binary_name": "linux-modules-extra-6.8.0-1060-gcp",
"binary_version": "6.8.0-1060.63"
},
{
"binary_name": "linux-modules-extra-6.8.0-1060-gcp-64k",
"binary_version": "6.8.0-1060.63"
},
{
"binary_name": "linux-tools-6.8.0-1060-gcp",
"binary_version": "6.8.0-1060.63"
},
{
"binary_name": "linux-tools-6.8.0-1060-gcp-64k",
"binary_version": "6.8.0-1060.63"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:24.04:LTS",
"name": "linux-gcp",
"purl": "pkg:deb/ubuntu/linux-gcp@6.8.0-1060.63?arch=source\u0026distro=noble"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.8.0-1060.63"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.5.0-1007.7",
"6.6.0-1001.1",
"6.8.0-1002.2",
"6.8.0-1005.5",
"6.8.0-1006.6",
"6.8.0-1007.7",
"6.8.0-1008.9",
"6.8.0-1009.10",
"6.8.0-1010.11",
"6.8.0-1011.12",
"6.8.0-1012.13",
"6.8.0-1013.14",
"6.8.0-1014.16",
"6.8.0-1015.17",
"6.8.0-1016.18",
"6.8.0-1017.19",
"6.8.0-1018.20",
"6.8.0-1019.21",
"6.8.0-1020.22",
"6.8.0-1021.23",
"6.8.0-1024.26",
"6.8.0-1025.27",
"6.8.0-1026.28",
"6.8.0-1027.29",
"6.8.0-1028.30",
"6.8.0-1029.31",
"6.8.0-1030.32",
"6.8.0-1031.33",
"6.8.0-1032.34",
"6.8.0-1033.35",
"6.8.0-1034.36",
"6.8.0-1036.38",
"6.8.0-1037.39",
"6.8.0-1039.41",
"6.8.0-1040.42",
"6.8.0-1041.43",
"6.8.0-1042.45",
"6.8.0-1043.46",
"6.8.0-1044.47",
"6.8.0-1045.48",
"6.8.0-1046.49",
"6.8.0-1047.50",
"6.8.0-1048.51",
"6.8.0-1052.55",
"6.8.0-1053.56",
"6.8.0-1054.57",
"6.8.0-1055.58",
"6.8.0-1058.61"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-buildinfo-6.11.0-1017-gcp",
"binary_version": "6.11.0-1017.17~24.04.1"
},
{
"binary_name": "linux-buildinfo-6.11.0-1017-gcp-64k",
"binary_version": "6.11.0-1017.17~24.04.1"
},
{
"binary_name": "linux-gcp-6.11-headers-6.11.0-1017",
"binary_version": "6.11.0-1017.17~24.04.1"
},
{
"binary_name": "linux-gcp-6.11-lib-rust-6.11.0-1017-gcp",
"binary_version": "6.11.0-1017.17~24.04.1"
},
{
"binary_name": "linux-gcp-6.11-tools-6.11.0-1017",
"binary_version": "6.11.0-1017.17~24.04.1"
},
{
"binary_name": "linux-headers-6.11.0-1017-gcp",
"binary_version": "6.11.0-1017.17~24.04.1"
},
{
"binary_name": "linux-headers-6.11.0-1017-gcp-64k",
"binary_version": "6.11.0-1017.17~24.04.1"
},
{
"binary_name": "linux-image-unsigned-6.11.0-1017-gcp",
"binary_version": "6.11.0-1017.17~24.04.1"
},
{
"binary_name": "linux-image-unsigned-6.11.0-1017-gcp-64k",
"binary_version": "6.11.0-1017.17~24.04.1"
},
{
"binary_name": "linux-modules-6.11.0-1017-gcp",
"binary_version": "6.11.0-1017.17~24.04.1"
},
{
"binary_name": "linux-modules-6.11.0-1017-gcp-64k",
"binary_version": "6.11.0-1017.17~24.04.1"
},
{
"binary_name": "linux-modules-extra-6.11.0-1017-gcp",
"binary_version": "6.11.0-1017.17~24.04.1"
},
{
"binary_name": "linux-modules-extra-6.11.0-1017-gcp-64k",
"binary_version": "6.11.0-1017.17~24.04.1"
},
{
"binary_name": "linux-tools-6.11.0-1017-gcp",
"binary_version": "6.11.0-1017.17~24.04.1"
},
{
"binary_name": "linux-tools-6.11.0-1017-gcp-64k",
"binary_version": "6.11.0-1017.17~24.04.1"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:24.04:LTS",
"name": "linux-gcp-6.11",
"purl": "pkg:deb/ubuntu/linux-gcp-6.11@6.11.0-1017.17~24.04.1?arch=source\u0026distro=noble"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.11.0-1006.6~24.04.2",
"6.11.0-1011.11~24.04.1",
"6.11.0-1013.13~24.04.1",
"6.11.0-1014.14~24.04.1",
"6.11.0-1015.15~24.04.1",
"6.11.0-1016.16~24.04.1",
"6.11.0-1017.17~24.04.1"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-buildinfo-6.14.0-1021-gcp",
"binary_version": "6.14.0-1021.22~24.04.1"
},
{
"binary_name": "linux-buildinfo-6.14.0-1021-gcp-64k",
"binary_version": "6.14.0-1021.22~24.04.1"
},
{
"binary_name": "linux-gcp-6.14-headers-6.14.0-1021",
"binary_version": "6.14.0-1021.22~24.04.1"
},
{
"binary_name": "linux-gcp-6.14-tools-6.14.0-1021",
"binary_version": "6.14.0-1021.22~24.04.1"
},
{
"binary_name": "linux-headers-6.14.0-1021-gcp",
"binary_version": "6.14.0-1021.22~24.04.1"
},
{
"binary_name": "linux-headers-6.14.0-1021-gcp-64k",
"binary_version": "6.14.0-1021.22~24.04.1"
},
{
"binary_name": "linux-image-unsigned-6.14.0-1021-gcp",
"binary_version": "6.14.0-1021.22~24.04.1"
},
{
"binary_name": "linux-image-unsigned-6.14.0-1021-gcp-64k",
"binary_version": "6.14.0-1021.22~24.04.1"
},
{
"binary_name": "linux-lib-rust-6.14.0-1021-gcp",
"binary_version": "6.14.0-1021.22~24.04.1"
},
{
"binary_name": "linux-modules-6.14.0-1021-gcp",
"binary_version": "6.14.0-1021.22~24.04.1"
},
{
"binary_name": "linux-modules-6.14.0-1021-gcp-64k",
"binary_version": "6.14.0-1021.22~24.04.1"
},
{
"binary_name": "linux-modules-extra-6.14.0-1021-gcp",
"binary_version": "6.14.0-1021.22~24.04.1"
},
{
"binary_name": "linux-modules-extra-6.14.0-1021-gcp-64k",
"binary_version": "6.14.0-1021.22~24.04.1"
},
{
"binary_name": "linux-tools-6.14.0-1021-gcp",
"binary_version": "6.14.0-1021.22~24.04.1"
},
{
"binary_name": "linux-tools-6.14.0-1021-gcp-64k",
"binary_version": "6.14.0-1021.22~24.04.1"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:24.04:LTS",
"name": "linux-gcp-6.14",
"purl": "pkg:deb/ubuntu/linux-gcp-6.14@6.14.0-1021.22~24.04.1?arch=source\u0026distro=noble"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.14.0-1007.7~24.04.1",
"6.14.0-1011.11~24.04.1",
"6.14.0-1012.12~24.04.1",
"6.14.0-1014.15~24.04.1",
"6.14.0-1015.16~24.04.1",
"6.14.0-1016.17~24.04.1",
"6.14.0-1017.18~24.04.1",
"6.14.0-1018.19~24.04.1",
"6.14.0-1019.20~24.04.1",
"6.14.0-1020.21~24.04.1",
"6.14.0-1021.22~24.04.1"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "linux-buildinfo-6.17.0-1018-gcp",
"binary_version": "6.17.0-1018.19~24.04.1"
},
{
"binary_name": "linux-buildinfo-6.17.0-1018-gcp-64k",
"binary_version": "6.17.0-1018.19~24.04.1"
},
{
"binary_name": "linux-gcp-6.17-headers-6.17.0-1018",
"binary_version": "6.17.0-1018.19~24.04.1"
},
{
"binary_name": "linux-gcp-6.17-tools-6.17.0-1018",
"binary_version": "6.17.0-1018.19~24.04.1"
},
{
"binary_name": "linux-headers-6.17.0-1018-gcp",
"binary_version": "6.17.0-1018.19~24.04.1"
},
{
"binary_name": "linux-headers-6.17.0-1018-gcp-64k",
"binary_version": "6.17.0-1018.19~24.04.1"
},
{
"binary_name": "linux-image-unsigned-6.17.0-1018-gcp",
"binary_version": "6.17.0-1018.19~24.04.1"
},
{
"binary_name": "linux-image-unsigned-6.17.0-1018-gcp-64k",
"binary_version": "6.17.0-1018.19~24.04.1"
},
{
"binary_name": "linux-lib-rust-6.17.0-1018-gcp",
"binary_version": "6.17.0-1018.19~24.04.1"
},
{
"binary_name": "linux-modules-6.17.0-1018-gcp",
"binary_version": "6.17.0-1018.19~24.04.1"
},
{
"binary_name": "linux-modules-6.17.0-1018-gcp-64k",
"binary_version": "6.17.0-1018.19~24.04.1"
},
{
"binary_name": "linux-modules-extra-6.17.0-1018-gcp",
"binary_version": "6.17.0-1018.19~24.04.1"
},
{
"binary_name": "linux-modules-extra-6.17.0-1018-gcp-64k",
"binary_version": "6.17.0-1018.19~24.04.1"
},
{
"binary_name": "linux-tools-6.17.0-1018-gcp",
"binary_version": "6.17.0-1018.19~24.04.1"
},
{
"binary_name": "linux-tools-6.17.0-1018-gcp-64k",
"binary_version": "6.17.0-1018.19~24.04.1"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:24.04:LTS",
"name": "linux-gcp-6.17",
"purl": "pkg:deb/ubuntu/linux-gcp-6.17@6.17.0-1018.19~24.04.1?arch=source\u0026distro=noble"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.17.0-1018.19~24.04.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.17.0-1004.4~24.04.3",
"6.17.0-1008.8~24.04.1",
"6.17.0-1009.9~24.04.3",
"6.17.0-1010.10~24.04.1",
"6.17.0-1012.12~24.04.1",
"6.17.0-1013.13~24.04.1",
"6.17.0-1016.17~24.04.1"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "linux-buildinfo-6.8.0-1055-gke",
"binary_version": "6.8.0-1055.61"
},
{
"binary_name": "linux-buildinfo-6.8.0-1055-gke-64k",
"binary_version": "6.8.0-1055.61"
},
{
"binary_name": "linux-gke-headers-6.8.0-1055",
"binary_version": "6.8.0-1055.61"
},
{
"binary_name": "linux-gke-tools-6.8.0-1055",
"binary_version": "6.8.0-1055.61"
},
{
"binary_name": "linux-headers-6.8.0-1055-gke",
"binary_version": "6.8.0-1055.61"
},
{
"binary_name": "linux-headers-6.8.0-1055-gke-64k",
"binary_version": "6.8.0-1055.61"
},
{
"binary_name": "linux-image-unsigned-6.8.0-1055-gke",
"binary_version": "6.8.0-1055.61"
},
{
"binary_name": "linux-image-unsigned-6.8.0-1055-gke-64k",
"binary_version": "6.8.0-1055.61"
},
{
"binary_name": "linux-modules-6.8.0-1055-gke",
"binary_version": "6.8.0-1055.61"
},
{
"binary_name": "linux-modules-6.8.0-1055-gke-64k",
"binary_version": "6.8.0-1055.61"
},
{
"binary_name": "linux-modules-extra-6.8.0-1055-gke",
"binary_version": "6.8.0-1055.61"
},
{
"binary_name": "linux-modules-extra-6.8.0-1055-gke-64k",
"binary_version": "6.8.0-1055.61"
},
{
"binary_name": "linux-modules-iwlwifi-6.8.0-1055-gke",
"binary_version": "6.8.0-1055.61"
},
{
"binary_name": "linux-tools-6.8.0-1055-gke",
"binary_version": "6.8.0-1055.61"
},
{
"binary_name": "linux-tools-6.8.0-1055-gke-64k",
"binary_version": "6.8.0-1055.61"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:24.04:LTS",
"name": "linux-gke",
"purl": "pkg:deb/ubuntu/linux-gke@6.8.0-1055.61?arch=source\u0026distro=noble"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.8.0-1055.61"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.8.0-1003.5",
"6.8.0-1004.7",
"6.8.0-1005.8",
"6.8.0-1006.9",
"6.8.0-1007.10",
"6.8.0-1008.11",
"6.8.0-1009.12",
"6.8.0-1010.13",
"6.8.0-1011.14",
"6.8.0-1012.15",
"6.8.0-1013.17",
"6.8.0-1014.18",
"6.8.0-1015.19",
"6.8.0-1016.20",
"6.8.0-1017.21",
"6.8.0-1019.23",
"6.8.0-1020.24",
"6.8.0-1021.25",
"6.8.0-1022.26",
"6.8.0-1023.27",
"6.8.0-1024.28",
"6.8.0-1025.29",
"6.8.0-1026.30",
"6.8.0-1027.31",
"6.8.0-1028.32",
"6.8.0-1029.33",
"6.8.0-1032.36",
"6.8.0-1033.37",
"6.8.0-1035.39",
"6.8.0-1036.40",
"6.8.0-1037.41",
"6.8.0-1038.43",
"6.8.0-1039.44",
"6.8.0-1040.45",
"6.8.0-1041.46",
"6.8.0-1042.47",
"6.8.0-1043.48",
"6.8.0-1044.49",
"6.8.0-1048.53",
"6.8.0-1049.54",
"6.8.0-1050.56",
"6.8.0-1051.57",
"6.8.0-1054.60"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "linux-buildinfo-6.8.0-1042-gkeop",
"binary_version": "6.8.0-1042.45"
},
{
"binary_name": "linux-cloud-tools-6.8.0-1042-gkeop",
"binary_version": "6.8.0-1042.45"
},
{
"binary_name": "linux-gkeop-cloud-tools-6.8.0-1042",
"binary_version": "6.8.0-1042.45"
},
{
"binary_name": "linux-gkeop-headers-6.8.0-1042",
"binary_version": "6.8.0-1042.45"
},
{
"binary_name": "linux-gkeop-tools-6.8.0-1042",
"binary_version": "6.8.0-1042.45"
},
{
"binary_name": "linux-headers-6.8.0-1042-gkeop",
"binary_version": "6.8.0-1042.45"
},
{
"binary_name": "linux-image-unsigned-6.8.0-1042-gkeop",
"binary_version": "6.8.0-1042.45"
},
{
"binary_name": "linux-modules-6.8.0-1042-gkeop",
"binary_version": "6.8.0-1042.45"
},
{
"binary_name": "linux-modules-extra-6.8.0-1042-gkeop",
"binary_version": "6.8.0-1042.45"
},
{
"binary_name": "linux-tools-6.8.0-1042-gkeop",
"binary_version": "6.8.0-1042.45"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:24.04:LTS",
"name": "linux-gkeop",
"purl": "pkg:deb/ubuntu/linux-gkeop@6.8.0-1042.45?arch=source\u0026distro=noble"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.8.0-1042.45"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.8.0-1001.3",
"6.8.0-1002.4",
"6.8.0-1003.5",
"6.8.0-1004.6",
"6.8.0-1006.8",
"6.8.0-1007.9",
"6.8.0-1008.10",
"6.8.0-1009.11",
"6.8.0-1010.12",
"6.8.0-1011.13",
"6.8.0-1012.14",
"6.8.0-1013.15",
"6.8.0-1014.16",
"6.8.0-1015.17",
"6.8.0-1016.18",
"6.8.0-1019.21",
"6.8.0-1020.22",
"6.8.0-1022.24",
"6.8.0-1023.25",
"6.8.0-1024.26",
"6.8.0-1025.28",
"6.8.0-1026.29",
"6.8.0-1027.30",
"6.8.0-1028.31",
"6.8.0-1029.32",
"6.8.0-1030.33",
"6.8.0-1031.34",
"6.8.0-1035.38",
"6.8.0-1036.39",
"6.8.0-1037.40",
"6.8.0-1038.41",
"6.8.0-1041.44"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-buildinfo-6.11.0-29-generic",
"binary_version": "6.11.0-29.29~24.04.1"
},
{
"binary_name": "linux-buildinfo-6.11.0-29-generic-64k",
"binary_version": "6.11.0-29.29~24.04.1"
},
{
"binary_name": "linux-cloud-tools-6.11.0-29-generic",
"binary_version": "6.11.0-29.29~24.04.1"
},
{
"binary_name": "linux-headers-6.11.0-29-generic",
"binary_version": "6.11.0-29.29~24.04.1"
},
{
"binary_name": "linux-headers-6.11.0-29-generic-64k",
"binary_version": "6.11.0-29.29~24.04.1"
},
{
"binary_name": "linux-hwe-6.11-cloud-tools-6.11.0-29",
"binary_version": "6.11.0-29.29~24.04.1"
},
{
"binary_name": "linux-hwe-6.11-headers-6.11.0-29",
"binary_version": "6.11.0-29.29~24.04.1"
},
{
"binary_name": "linux-hwe-6.11-lib-rust-6.11.0-29-generic",
"binary_version": "6.11.0-29.29~24.04.1"
},
{
"binary_name": "linux-hwe-6.11-tools-6.11.0-29",
"binary_version": "6.11.0-29.29~24.04.1"
},
{
"binary_name": "linux-image-6.11.0-29-generic",
"binary_version": "6.11.0-29.29~24.04.1"
},
{
"binary_name": "linux-image-unsigned-6.11.0-29-generic",
"binary_version": "6.11.0-29.29~24.04.1"
},
{
"binary_name": "linux-image-unsigned-6.11.0-29-generic-64k",
"binary_version": "6.11.0-29.29~24.04.1"
},
{
"binary_name": "linux-modules-6.11.0-29-generic",
"binary_version": "6.11.0-29.29~24.04.1"
},
{
"binary_name": "linux-modules-6.11.0-29-generic-64k",
"binary_version": "6.11.0-29.29~24.04.1"
},
{
"binary_name": "linux-modules-extra-6.11.0-29-generic",
"binary_version": "6.11.0-29.29~24.04.1"
},
{
"binary_name": "linux-modules-ipu6-6.11.0-29-generic",
"binary_version": "6.11.0-29.29~24.04.1"
},
{
"binary_name": "linux-modules-ipu7-6.11.0-29-generic",
"binary_version": "6.11.0-29.29~24.04.1"
},
{
"binary_name": "linux-modules-iwlwifi-6.11.0-29-generic",
"binary_version": "6.11.0-29.29~24.04.1"
},
{
"binary_name": "linux-modules-usbio-6.11.0-29-generic",
"binary_version": "6.11.0-29.29~24.04.1"
},
{
"binary_name": "linux-modules-vision-6.11.0-29-generic",
"binary_version": "6.11.0-29.29~24.04.1"
},
{
"binary_name": "linux-tools-6.11.0-29-generic",
"binary_version": "6.11.0-29.29~24.04.1"
},
{
"binary_name": "linux-tools-6.11.0-29-generic-64k",
"binary_version": "6.11.0-29.29~24.04.1"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:24.04:LTS",
"name": "linux-hwe-6.11",
"purl": "pkg:deb/ubuntu/linux-hwe-6.11@6.11.0-29.29~24.04.1?arch=source\u0026distro=noble"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.11.0-17.17~24.04.2",
"6.11.0-19.19~24.04.1",
"6.11.0-21.21~24.04.1",
"6.11.0-24.24~24.04.1",
"6.11.0-25.25~24.04.1",
"6.11.0-26.26~24.04.1",
"6.11.0-28.28~24.04.1",
"6.11.0-29.29~24.04.1"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-buildinfo-6.14.0-37-generic",
"binary_version": "6.14.0-37.37~24.04.1"
},
{
"binary_name": "linux-buildinfo-6.14.0-37-generic-64k",
"binary_version": "6.14.0-37.37~24.04.1"
},
{
"binary_name": "linux-cloud-tools-6.14.0-37-generic",
"binary_version": "6.14.0-37.37~24.04.1"
},
{
"binary_name": "linux-headers-6.14.0-37-generic",
"binary_version": "6.14.0-37.37~24.04.1"
},
{
"binary_name": "linux-headers-6.14.0-37-generic-64k",
"binary_version": "6.14.0-37.37~24.04.1"
},
{
"binary_name": "linux-hwe-6.14-cloud-tools-6.14.0-37",
"binary_version": "6.14.0-37.37~24.04.1"
},
{
"binary_name": "linux-hwe-6.14-headers-6.14.0-37",
"binary_version": "6.14.0-37.37~24.04.1"
},
{
"binary_name": "linux-hwe-6.14-tools-6.14.0-37",
"binary_version": "6.14.0-37.37~24.04.1"
},
{
"binary_name": "linux-image-6.14.0-37-generic",
"binary_version": "6.14.0-37.37~24.04.1"
},
{
"binary_name": "linux-image-unsigned-6.14.0-37-generic",
"binary_version": "6.14.0-37.37~24.04.1"
},
{
"binary_name": "linux-image-unsigned-6.14.0-37-generic-64k",
"binary_version": "6.14.0-37.37~24.04.1"
},
{
"binary_name": "linux-lib-rust-6.14.0-37-generic",
"binary_version": "6.14.0-37.37~24.04.1"
},
{
"binary_name": "linux-modules-6.14.0-37-generic",
"binary_version": "6.14.0-37.37~24.04.1"
},
{
"binary_name": "linux-modules-6.14.0-37-generic-64k",
"binary_version": "6.14.0-37.37~24.04.1"
},
{
"binary_name": "linux-modules-extra-6.14.0-37-generic",
"binary_version": "6.14.0-37.37~24.04.1"
},
{
"binary_name": "linux-modules-ipu6-6.14.0-37-generic",
"binary_version": "6.14.0-37.37~24.04.1"
},
{
"binary_name": "linux-modules-ipu7-6.14.0-37-generic",
"binary_version": "6.14.0-37.37~24.04.1"
},
{
"binary_name": "linux-modules-iwlwifi-6.14.0-37-generic",
"binary_version": "6.14.0-37.37~24.04.1"
},
{
"binary_name": "linux-modules-usbio-6.14.0-37-generic",
"binary_version": "6.14.0-37.37~24.04.1"
},
{
"binary_name": "linux-modules-vision-6.14.0-37-generic",
"binary_version": "6.14.0-37.37~24.04.1"
},
{
"binary_name": "linux-tools-6.14.0-37-generic",
"binary_version": "6.14.0-37.37~24.04.1"
},
{
"binary_name": "linux-tools-6.14.0-37-generic-64k",
"binary_version": "6.14.0-37.37~24.04.1"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:24.04:LTS",
"name": "linux-hwe-6.14",
"purl": "pkg:deb/ubuntu/linux-hwe-6.14@6.14.0-37.37~24.04.1?arch=source\u0026distro=noble"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.14.0-24.24~24.04.3",
"6.14.0-27.27~24.04.1",
"6.14.0-28.28~24.04.1",
"6.14.0-29.29~24.04.1",
"6.14.0-32.32~24.04.1",
"6.14.0-33.33~24.04.1",
"6.14.0-34.34~24.04.1",
"6.14.0-35.35~24.04.1",
"6.14.0-36.36~24.04.1",
"6.14.0-37.37~24.04.1"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "linux-buildinfo-6.17.0-35-generic",
"binary_version": "6.17.0-35.35~24.04.1"
},
{
"binary_name": "linux-buildinfo-6.17.0-35-generic-64k",
"binary_version": "6.17.0-35.35~24.04.1"
},
{
"binary_name": "linux-cloud-tools-6.17.0-35-generic",
"binary_version": "6.17.0-35.35~24.04.1"
},
{
"binary_name": "linux-headers-6.17.0-35-generic",
"binary_version": "6.17.0-35.35~24.04.1"
},
{
"binary_name": "linux-headers-6.17.0-35-generic-64k",
"binary_version": "6.17.0-35.35~24.04.1"
},
{
"binary_name": "linux-hwe-6.17-cloud-tools-6.17.0-35",
"binary_version": "6.17.0-35.35~24.04.1"
},
{
"binary_name": "linux-hwe-6.17-headers-6.17.0-35",
"binary_version": "6.17.0-35.35~24.04.1"
},
{
"binary_name": "linux-hwe-6.17-tools-6.17.0-35",
"binary_version": "6.17.0-35.35~24.04.1"
},
{
"binary_name": "linux-image-6.17.0-35-generic",
"binary_version": "6.17.0-35.35~24.04.1"
},
{
"binary_name": "linux-image-unsigned-6.17.0-35-generic",
"binary_version": "6.17.0-35.35~24.04.1"
},
{
"binary_name": "linux-image-unsigned-6.17.0-35-generic-64k",
"binary_version": "6.17.0-35.35~24.04.1"
},
{
"binary_name": "linux-lib-rust-6.17.0-35-generic",
"binary_version": "6.17.0-35.35~24.04.1"
},
{
"binary_name": "linux-modules-6.17.0-35-generic",
"binary_version": "6.17.0-35.35~24.04.1"
},
{
"binary_name": "linux-modules-6.17.0-35-generic-64k",
"binary_version": "6.17.0-35.35~24.04.1"
},
{
"binary_name": "linux-modules-extra-6.17.0-35-generic",
"binary_version": "6.17.0-35.35~24.04.1"
},
{
"binary_name": "linux-modules-ipu6-6.17.0-35-generic",
"binary_version": "6.17.0-35.35~24.04.1"
},
{
"binary_name": "linux-modules-ipu7-6.17.0-35-generic",
"binary_version": "6.17.0-35.35~24.04.1"
},
{
"binary_name": "linux-modules-iwlwifi-6.17.0-35-generic",
"binary_version": "6.17.0-35.35~24.04.1"
},
{
"binary_name": "linux-modules-usbio-6.17.0-35-generic",
"binary_version": "6.17.0-35.35~24.04.1"
},
{
"binary_name": "linux-modules-vision-6.17.0-35-generic",
"binary_version": "6.17.0-35.35~24.04.1"
},
{
"binary_name": "linux-tools-6.17.0-35-generic",
"binary_version": "6.17.0-35.35~24.04.1"
},
{
"binary_name": "linux-tools-6.17.0-35-generic-64k",
"binary_version": "6.17.0-35.35~24.04.1"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:24.04:LTS",
"name": "linux-hwe-6.17",
"purl": "pkg:deb/ubuntu/linux-hwe-6.17@6.17.0-35.35~24.04.1?arch=source\u0026distro=noble"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.17.0-35.35~24.04.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.17.0-14.14~24.04.1",
"6.17.0-19.19~24.04.2",
"6.17.0-20.20~24.04.1",
"6.17.0-22.22~24.04.1",
"6.17.0-23.23~24.04.1",
"6.17.0-29.29~24.04.1"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "linux-buildinfo-7.0.0-28-generic",
"binary_version": "7.0.0-28.28~24.04.1"
},
{
"binary_name": "linux-buildinfo-7.0.0-28-generic-64k",
"binary_version": "7.0.0-28.28~24.04.1"
},
{
"binary_name": "linux-cloud-tools-7.0.0-28-generic",
"binary_version": "7.0.0-28.28~24.04.1"
},
{
"binary_name": "linux-headers-7.0.0-28-generic",
"binary_version": "7.0.0-28.28~24.04.1"
},
{
"binary_name": "linux-headers-7.0.0-28-generic-64k",
"binary_version": "7.0.0-28.28~24.04.1"
},
{
"binary_name": "linux-hwe-7.0-cloud-tools-7.0.0-28",
"binary_version": "7.0.0-28.28~24.04.1"
},
{
"binary_name": "linux-hwe-7.0-headers-7.0.0-28",
"binary_version": "7.0.0-28.28~24.04.1"
},
{
"binary_name": "linux-hwe-7.0-tools-7.0.0-28",
"binary_version": "7.0.0-28.28~24.04.1"
},
{
"binary_name": "linux-image-7.0.0-28-generic",
"binary_version": "7.0.0-28.28~24.04.1"
},
{
"binary_name": "linux-image-unsigned-7.0.0-28-generic",
"binary_version": "7.0.0-28.28~24.04.1"
},
{
"binary_name": "linux-image-unsigned-7.0.0-28-generic-64k",
"binary_version": "7.0.0-28.28~24.04.1"
},
{
"binary_name": "linux-lib-rust-7.0.0-28-generic",
"binary_version": "7.0.0-28.28~24.04.1"
},
{
"binary_name": "linux-modules-7.0.0-28-generic",
"binary_version": "7.0.0-28.28~24.04.1"
},
{
"binary_name": "linux-modules-7.0.0-28-generic-64k",
"binary_version": "7.0.0-28.28~24.04.1"
},
{
"binary_name": "linux-modules-evdi-7.0.0-28-generic",
"binary_version": "7.0.0-28.28~24.04.1"
},
{
"binary_name": "linux-modules-ipu6-7.0.0-28-generic",
"binary_version": "7.0.0-28.28~24.04.1"
},
{
"binary_name": "linux-modules-ipu7-7.0.0-28-generic",
"binary_version": "7.0.0-28.28~24.04.1"
},
{
"binary_name": "linux-modules-iwlwifi-7.0.0-28-generic",
"binary_version": "7.0.0-28.28~24.04.1"
},
{
"binary_name": "linux-modules-usbio-7.0.0-28-generic",
"binary_version": "7.0.0-28.28~24.04.1"
},
{
"binary_name": "linux-modules-vision-7.0.0-28-generic",
"binary_version": "7.0.0-28.28~24.04.1"
},
{
"binary_name": "linux-tools-7.0.0-28-generic",
"binary_version": "7.0.0-28.28~24.04.1"
},
{
"binary_name": "linux-tools-7.0.0-28-generic-64k",
"binary_version": "7.0.0-28.28~24.04.1"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:24.04:LTS",
"name": "linux-hwe-7.0",
"purl": "pkg:deb/ubuntu/linux-hwe-7.0@7.0.0-28.28~24.04.1?arch=source\u0026distro=noble"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "7.0.0-28.28~24.04.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"7.0.0-14.14~24.04.3"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "linux-buildinfo-6.8.0-1057-ibm",
"binary_version": "6.8.0-1057.58"
},
{
"binary_name": "linux-headers-6.8.0-1057-ibm",
"binary_version": "6.8.0-1057.58"
},
{
"binary_name": "linux-ibm-headers-6.8.0-1057",
"binary_version": "6.8.0-1057.58"
},
{
"binary_name": "linux-ibm-tools-6.8.0-1057",
"binary_version": "6.8.0-1057.58"
},
{
"binary_name": "linux-image-unsigned-6.8.0-1057-ibm",
"binary_version": "6.8.0-1057.58"
},
{
"binary_name": "linux-modules-6.8.0-1057-ibm",
"binary_version": "6.8.0-1057.58"
},
{
"binary_name": "linux-modules-extra-6.8.0-1057-ibm",
"binary_version": "6.8.0-1057.58"
},
{
"binary_name": "linux-modules-iwlwifi-6.8.0-1057-ibm",
"binary_version": "6.8.0-1057.58"
},
{
"binary_name": "linux-tools-6.8.0-1057-ibm",
"binary_version": "6.8.0-1057.58"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:24.04:LTS",
"name": "linux-ibm",
"purl": "pkg:deb/ubuntu/linux-ibm@6.8.0-1057.58?arch=source\u0026distro=noble"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.8.0-1057.58"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.5.0-1009.9",
"6.8.0-1001.1",
"6.8.0-1003.3",
"6.8.0-1004.4",
"6.8.0-1005.5",
"6.8.0-1006.6",
"6.8.0-1007.7",
"6.8.0-1008.8",
"6.8.0-1009.9",
"6.8.0-1010.10",
"6.8.0-1011.11",
"6.8.0-1012.12",
"6.8.0-1013.13",
"6.8.0-1014.14",
"6.8.0-1015.15",
"6.8.0-1016.16",
"6.8.0-1017.17",
"6.8.0-1018.18",
"6.8.0-1019.19",
"6.8.0-1022.22",
"6.8.0-1023.23",
"6.8.0-1024.24",
"6.8.0-1025.25",
"6.8.0-1026.26",
"6.8.0-1027.27",
"6.8.0-1028.28",
"6.8.0-1029.29",
"6.8.0-1030.30",
"6.8.0-1033.33",
"6.8.0-1036.36",
"6.8.0-1037.37",
"6.8.0-1038.38",
"6.8.0-1039.39",
"6.8.0-1040.40",
"6.8.0-1041.41",
"6.8.0-1042.42",
"6.8.0-1043.43",
"6.8.0-1044.44",
"6.8.0-1045.45",
"6.8.0-1049.49",
"6.8.0-1050.50",
"6.8.0-1051.51",
"6.8.0-1052.52",
"6.8.0-1055.56"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "linux-buildinfo-6.8.0-134-lowlatency",
"binary_version": "6.8.0-134.134.1"
},
{
"binary_name": "linux-buildinfo-6.8.0-134-lowlatency-64k",
"binary_version": "6.8.0-134.134.1"
},
{
"binary_name": "linux-cloud-tools-6.8.0-134-lowlatency",
"binary_version": "6.8.0-134.134.1"
},
{
"binary_name": "linux-headers-6.8.0-134-lowlatency",
"binary_version": "6.8.0-134.134.1"
},
{
"binary_name": "linux-headers-6.8.0-134-lowlatency-64k",
"binary_version": "6.8.0-134.134.1"
},
{
"binary_name": "linux-image-unsigned-6.8.0-134-lowlatency",
"binary_version": "6.8.0-134.134.1"
},
{
"binary_name": "linux-image-unsigned-6.8.0-134-lowlatency-64k",
"binary_version": "6.8.0-134.134.1"
},
{
"binary_name": "linux-lowlatency-cloud-tools-6.8.0-134",
"binary_version": "6.8.0-134.134.1"
},
{
"binary_name": "linux-lowlatency-headers-6.8.0-134",
"binary_version": "6.8.0-134.134.1"
},
{
"binary_name": "linux-lowlatency-lib-rust-6.8.0-134-lowlatency",
"binary_version": "6.8.0-134.134.1"
},
{
"binary_name": "linux-lowlatency-tools-6.8.0-134",
"binary_version": "6.8.0-134.134.1"
},
{
"binary_name": "linux-modules-6.8.0-134-lowlatency",
"binary_version": "6.8.0-134.134.1"
},
{
"binary_name": "linux-modules-6.8.0-134-lowlatency-64k",
"binary_version": "6.8.0-134.134.1"
},
{
"binary_name": "linux-modules-iwlwifi-6.8.0-134-lowlatency",
"binary_version": "6.8.0-134.134.1"
},
{
"binary_name": "linux-tools-6.8.0-134-lowlatency",
"binary_version": "6.8.0-134.134.1"
},
{
"binary_name": "linux-tools-6.8.0-134-lowlatency-64k",
"binary_version": "6.8.0-134.134.1"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:24.04:LTS",
"name": "linux-lowlatency",
"purl": "pkg:deb/ubuntu/linux-lowlatency@6.8.0-134.134.1?arch=source\u0026distro=noble"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.8.0-134.134.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.5.0-9.9.1",
"6.6.0-14.14.1",
"6.8.0-7.7.1",
"6.8.0-25.25.3",
"6.8.0-28.28.1",
"6.8.0-31.31.1",
"6.8.0-35.35.1",
"6.8.0-36.36.1",
"6.8.0-38.38.1",
"6.8.0-39.39.1",
"6.8.0-40.40.1",
"6.8.0-41.41.1",
"6.8.0-44.44.1",
"6.8.0-45.45.1",
"6.8.0-47.47.1",
"6.8.0-48.48.3",
"6.8.0-49.49.1",
"6.8.0-50.51.1",
"6.8.0-51.52.1",
"6.8.0-52.53.1",
"6.8.0-53.55.2",
"6.8.0-54.56.1",
"6.8.0-55.57.1",
"6.8.0-56.58.1",
"6.8.0-57.59.1",
"6.8.0-58.60.1",
"6.8.0-59.61.1",
"6.8.0-60.63.1",
"6.8.0-62.65.1",
"6.8.0-63.66.1",
"6.8.0-64.67.1",
"6.8.0-65.68.1",
"6.8.0-78.78.1",
"6.8.0-79.79.1",
"6.8.0-83.83.1",
"6.8.0-84.84.1",
"6.8.0-85.85.1",
"6.8.0-86.87.1",
"6.8.0-87.88.1",
"6.8.0-88.89.1",
"6.8.0-90.91.1",
"6.8.0-94.96.1",
"6.8.0-100.100.1",
"6.8.0-101.101.1",
"6.8.0-106.106.1",
"6.8.0-107.107.1",
"6.8.0-110.110.1",
"6.8.0-111.111.1",
"6.8.0-117.117.1"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-buildinfo-6.11.0-1016-lowlatency",
"binary_version": "6.11.0-1016.17~24.04.1"
},
{
"binary_name": "linux-buildinfo-6.11.0-1016-lowlatency-64k",
"binary_version": "6.11.0-1016.17~24.04.1"
},
{
"binary_name": "linux-cloud-tools-6.11.0-1016-lowlatency",
"binary_version": "6.11.0-1016.17~24.04.1"
},
{
"binary_name": "linux-headers-6.11.0-1016-lowlatency",
"binary_version": "6.11.0-1016.17~24.04.1"
},
{
"binary_name": "linux-headers-6.11.0-1016-lowlatency-64k",
"binary_version": "6.11.0-1016.17~24.04.1"
},
{
"binary_name": "linux-image-unsigned-6.11.0-1016-lowlatency",
"binary_version": "6.11.0-1016.17~24.04.1"
},
{
"binary_name": "linux-image-unsigned-6.11.0-1016-lowlatency-64k",
"binary_version": "6.11.0-1016.17~24.04.1"
},
{
"binary_name": "linux-lowlatency-hwe-6.11-cloud-tools-6.11.0-1016",
"binary_version": "6.11.0-1016.17~24.04.1"
},
{
"binary_name": "linux-lowlatency-hwe-6.11-headers-6.11.0-1016",
"binary_version": "6.11.0-1016.17~24.04.1"
},
{
"binary_name": "linux-lowlatency-hwe-6.11-lib-rust-6.11.0-1016-lowlatency",
"binary_version": "6.11.0-1016.17~24.04.1"
},
{
"binary_name": "linux-lowlatency-hwe-6.11-tools-6.11.0-1016",
"binary_version": "6.11.0-1016.17~24.04.1"
},
{
"binary_name": "linux-modules-6.11.0-1016-lowlatency",
"binary_version": "6.11.0-1016.17~24.04.1"
},
{
"binary_name": "linux-modules-6.11.0-1016-lowlatency-64k",
"binary_version": "6.11.0-1016.17~24.04.1"
},
{
"binary_name": "linux-modules-iwlwifi-6.11.0-1016-lowlatency",
"binary_version": "6.11.0-1016.17~24.04.1"
},
{
"binary_name": "linux-tools-6.11.0-1016-lowlatency",
"binary_version": "6.11.0-1016.17~24.04.1"
},
{
"binary_name": "linux-tools-6.11.0-1016-lowlatency-64k",
"binary_version": "6.11.0-1016.17~24.04.1"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:24.04:LTS",
"name": "linux-lowlatency-hwe-6.11",
"purl": "pkg:deb/ubuntu/linux-lowlatency-hwe-6.11@6.11.0-1016.17~24.04.1?arch=source\u0026distro=noble"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.11.0-1009.10~24.04.1",
"6.11.0-1011.12~24.04.1",
"6.11.0-1012.13~24.04.1",
"6.11.0-1013.14~24.04.1",
"6.11.0-1014.15~24.04.1",
"6.11.0-1015.16~24.04.2",
"6.11.0-1016.17~24.04.1"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "linux-buildinfo-6.8.0-1055-nvidia",
"binary_version": "6.8.0-1055.58"
},
{
"binary_name": "linux-buildinfo-6.8.0-1055-nvidia-64k",
"binary_version": "6.8.0-1055.58"
},
{
"binary_name": "linux-headers-6.8.0-1055-nvidia",
"binary_version": "6.8.0-1055.58"
},
{
"binary_name": "linux-headers-6.8.0-1055-nvidia-64k",
"binary_version": "6.8.0-1055.58"
},
{
"binary_name": "linux-image-unsigned-6.8.0-1055-nvidia",
"binary_version": "6.8.0-1055.58"
},
{
"binary_name": "linux-image-unsigned-6.8.0-1055-nvidia-64k",
"binary_version": "6.8.0-1055.58"
},
{
"binary_name": "linux-modules-6.8.0-1055-nvidia",
"binary_version": "6.8.0-1055.58"
},
{
"binary_name": "linux-modules-6.8.0-1055-nvidia-64k",
"binary_version": "6.8.0-1055.58"
},
{
"binary_name": "linux-modules-nvidia-fs-6.8.0-1055-nvidia",
"binary_version": "6.8.0-1055.58"
},
{
"binary_name": "linux-modules-nvidia-fs-6.8.0-1055-nvidia-64k",
"binary_version": "6.8.0-1055.58"
},
{
"binary_name": "linux-nvidia-headers-6.8.0-1055",
"binary_version": "6.8.0-1055.58"
},
{
"binary_name": "linux-nvidia-tools-6.8.0-1055",
"binary_version": "6.8.0-1055.58"
},
{
"binary_name": "linux-tools-6.8.0-1055-nvidia",
"binary_version": "6.8.0-1055.58"
},
{
"binary_name": "linux-tools-6.8.0-1055-nvidia-64k",
"binary_version": "6.8.0-1055.58"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:24.04:LTS",
"name": "linux-nvidia",
"purl": "pkg:deb/ubuntu/linux-nvidia@6.8.0-1055.58?arch=source\u0026distro=noble"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.8.0-1055.58"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.8.0-1007.7",
"6.8.0-1008.8",
"6.8.0-1009.9",
"6.8.0-1010.10",
"6.8.0-1011.11",
"6.8.0-1012.12",
"6.8.0-1013.14",
"6.8.0-1014.15",
"6.8.0-1015.16",
"6.8.0-1017.19",
"6.8.0-1018.20",
"6.8.0-1019.21",
"6.8.0-1020.22",
"6.8.0-1021.23",
"6.8.0-1022.25",
"6.8.0-1023.26",
"6.8.0-1024.27",
"6.8.0-1025.28",
"6.8.0-1026.29",
"6.8.0-1027.30",
"6.8.0-1028.31",
"6.8.0-1029.32",
"6.8.0-1030.33",
"6.8.0-1031.34",
"6.8.0-1032.35",
"6.8.0-1035.38",
"6.8.0-1036.39",
"6.8.0-1038.41",
"6.8.0-1039.42",
"6.8.0-1040.43",
"6.8.0-1041.44",
"6.8.0-1042.45",
"6.8.0-1043.46",
"6.8.0-1044.47",
"6.8.0-1045.48",
"6.8.0-1046.49",
"6.8.0-1047.50",
"6.8.0-1049.52",
"6.8.0-1050.53",
"6.8.0-1051.54",
"6.8.0-1052.55",
"6.8.0-1054.57"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-buildinfo-6.11.0-1016-nvidia",
"binary_version": "6.11.0-1016.16"
},
{
"binary_name": "linux-buildinfo-6.11.0-1016-nvidia-64k",
"binary_version": "6.11.0-1016.16"
},
{
"binary_name": "linux-headers-6.11.0-1016-nvidia",
"binary_version": "6.11.0-1016.16"
},
{
"binary_name": "linux-headers-6.11.0-1016-nvidia-64k",
"binary_version": "6.11.0-1016.16"
},
{
"binary_name": "linux-image-unsigned-6.11.0-1016-nvidia",
"binary_version": "6.11.0-1016.16"
},
{
"binary_name": "linux-image-unsigned-6.11.0-1016-nvidia-64k",
"binary_version": "6.11.0-1016.16"
},
{
"binary_name": "linux-modules-6.11.0-1016-nvidia",
"binary_version": "6.11.0-1016.16"
},
{
"binary_name": "linux-modules-6.11.0-1016-nvidia-64k",
"binary_version": "6.11.0-1016.16"
},
{
"binary_name": "linux-modules-extra-6.11.0-1016-nvidia",
"binary_version": "6.11.0-1016.16"
},
{
"binary_name": "linux-modules-extra-6.11.0-1016-nvidia-64k",
"binary_version": "6.11.0-1016.16"
},
{
"binary_name": "linux-modules-nvidia-fs-6.11.0-1016-nvidia",
"binary_version": "6.11.0-1016.16"
},
{
"binary_name": "linux-modules-nvidia-fs-6.11.0-1016-nvidia-64k",
"binary_version": "6.11.0-1016.16"
},
{
"binary_name": "linux-nvidia-6.11-headers-6.11.0-1016",
"binary_version": "6.11.0-1016.16"
},
{
"binary_name": "linux-nvidia-6.11-lib-rust-6.11.0-1016-nvidia",
"binary_version": "6.11.0-1016.16"
},
{
"binary_name": "linux-nvidia-6.11-tools-6.11.0-1016",
"binary_version": "6.11.0-1016.16"
},
{
"binary_name": "linux-tools-6.11.0-1016-nvidia",
"binary_version": "6.11.0-1016.16"
},
{
"binary_name": "linux-tools-6.11.0-1016-nvidia-64k",
"binary_version": "6.11.0-1016.16"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:24.04:LTS",
"name": "linux-nvidia-6.11",
"purl": "pkg:deb/ubuntu/linux-nvidia-6.11@6.11.0-1016.16?arch=source\u0026distro=noble"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.11.0-1002.2",
"6.11.0-1003.3",
"6.11.0-1007.7",
"6.11.0-1010.10",
"6.11.0-1011.11",
"6.11.0-1012.12",
"6.11.0-1013.13",
"6.11.0-1016.16"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "linux-buildinfo-6.17.0-1021-nvidia",
"binary_version": "6.17.0-1021.21"
},
{
"binary_name": "linux-buildinfo-6.17.0-1021-nvidia-64k",
"binary_version": "6.17.0-1021.21"
},
{
"binary_name": "linux-headers-6.17.0-1021-nvidia",
"binary_version": "6.17.0-1021.21"
},
{
"binary_name": "linux-headers-6.17.0-1021-nvidia-64k",
"binary_version": "6.17.0-1021.21"
},
{
"binary_name": "linux-image-unsigned-6.17.0-1021-nvidia",
"binary_version": "6.17.0-1021.21"
},
{
"binary_name": "linux-image-unsigned-6.17.0-1021-nvidia-64k",
"binary_version": "6.17.0-1021.21"
},
{
"binary_name": "linux-modules-6.17.0-1021-nvidia",
"binary_version": "6.17.0-1021.21"
},
{
"binary_name": "linux-modules-6.17.0-1021-nvidia-64k",
"binary_version": "6.17.0-1021.21"
},
{
"binary_name": "linux-modules-nvidia-fs-6.17.0-1021-nvidia",
"binary_version": "6.17.0-1021.21"
},
{
"binary_name": "linux-modules-nvidia-fs-6.17.0-1021-nvidia-64k",
"binary_version": "6.17.0-1021.21"
},
{
"binary_name": "linux-nvidia-6.17-headers-6.17.0-1021",
"binary_version": "6.17.0-1021.21"
},
{
"binary_name": "linux-nvidia-6.17-tools-6.17.0-1021",
"binary_version": "6.17.0-1021.21"
},
{
"binary_name": "linux-tools-6.17.0-1021-nvidia",
"binary_version": "6.17.0-1021.21"
},
{
"binary_name": "linux-tools-6.17.0-1021-nvidia-64k",
"binary_version": "6.17.0-1021.21"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:24.04:LTS",
"name": "linux-nvidia-6.17",
"purl": "pkg:deb/ubuntu/linux-nvidia-6.17@6.17.0-1021.21?arch=source\u0026distro=noble"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.17.0-1021.21"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.17.0-1004.4",
"6.17.0-1008.8",
"6.17.0-1014.14",
"6.17.0-1018.18"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "linux-buildinfo-6.8.0-1055-nvidia-lowlatency",
"binary_version": "6.8.0-1055.58.1"
},
{
"binary_name": "linux-buildinfo-6.8.0-1055-nvidia-lowlatency-64k",
"binary_version": "6.8.0-1055.58.1"
},
{
"binary_name": "linux-headers-6.8.0-1055-nvidia-lowlatency",
"binary_version": "6.8.0-1055.58.1"
},
{
"binary_name": "linux-headers-6.8.0-1055-nvidia-lowlatency-64k",
"binary_version": "6.8.0-1055.58.1"
},
{
"binary_name": "linux-image-unsigned-6.8.0-1055-nvidia-lowlatency",
"binary_version": "6.8.0-1055.58.1"
},
{
"binary_name": "linux-image-unsigned-6.8.0-1055-nvidia-lowlatency-64k",
"binary_version": "6.8.0-1055.58.1"
},
{
"binary_name": "linux-modules-6.8.0-1055-nvidia-lowlatency",
"binary_version": "6.8.0-1055.58.1"
},
{
"binary_name": "linux-modules-6.8.0-1055-nvidia-lowlatency-64k",
"binary_version": "6.8.0-1055.58.1"
},
{
"binary_name": "linux-modules-extra-6.8.0-1055-nvidia-lowlatency",
"binary_version": "6.8.0-1055.58.1"
},
{
"binary_name": "linux-modules-nvidia-fs-6.8.0-1055-nvidia-lowlatency",
"binary_version": "6.8.0-1055.58.1"
},
{
"binary_name": "linux-modules-nvidia-fs-6.8.0-1055-nvidia-lowlatency-64k",
"binary_version": "6.8.0-1055.58.1"
},
{
"binary_name": "linux-nvidia-lowlatency-headers-6.8.0-1055",
"binary_version": "6.8.0-1055.58.1"
},
{
"binary_name": "linux-nvidia-lowlatency-tools-6.8.0-1055",
"binary_version": "6.8.0-1055.58.1"
},
{
"binary_name": "linux-tools-6.8.0-1055-nvidia-lowlatency",
"binary_version": "6.8.0-1055.58.1"
},
{
"binary_name": "linux-tools-6.8.0-1055-nvidia-lowlatency-64k",
"binary_version": "6.8.0-1055.58.1"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:24.04:LTS",
"name": "linux-nvidia-lowlatency",
"purl": "pkg:deb/ubuntu/linux-nvidia-lowlatency@6.8.0-1055.58.1?arch=source\u0026distro=noble"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.8.0-1055.58.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.8.0-1009.9.1",
"6.8.0-1011.11.1",
"6.8.0-1012.12.1",
"6.8.0-1013.14.1",
"6.8.0-1014.15.1",
"6.8.0-1015.16.1",
"6.8.0-1017.19.1",
"6.8.0-1018.20.1",
"6.8.0-1019.21.1",
"6.8.0-1020.22.1",
"6.8.0-1021.23.1",
"6.8.0-1022.25.2",
"6.8.0-1023.26.1",
"6.8.0-1024.27.1",
"6.8.0-1025.28.1",
"6.8.0-1026.29.1",
"6.8.0-1027.30.1",
"6.8.0-1028.31.1",
"6.8.0-1029.32.1",
"6.8.0-1030.33.1",
"6.8.0-1031.34.1",
"6.8.0-1032.35.1",
"6.8.0-1035.38.1",
"6.8.0-1036.39.1",
"6.8.0-1038.41.1",
"6.8.0-1039.42.1",
"6.8.0-1040.43.1",
"6.8.0-1041.44.1",
"6.8.0-1042.45.1",
"6.8.0-1043.46.1",
"6.8.0-1044.47.1",
"6.8.0-1045.48.1",
"6.8.0-1046.49.1",
"6.8.0-1047.50.1",
"6.8.0-1049.52.1",
"6.8.0-1050.53.1",
"6.8.0-1051.54.1",
"6.8.0-1052.55.1",
"6.8.0-1054.57.1"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "linux-buildinfo-6.8.0-1026-nvidia-tegra",
"binary_version": "6.8.0-1026.26"
},
{
"binary_name": "linux-buildinfo-6.8.0-1026-nvidia-tegra-rt",
"binary_version": "6.8.0-1026.26"
},
{
"binary_name": "linux-headers-6.8.0-1026-nvidia-tegra",
"binary_version": "6.8.0-1026.26"
},
{
"binary_name": "linux-headers-6.8.0-1026-nvidia-tegra-rt",
"binary_version": "6.8.0-1026.26"
},
{
"binary_name": "linux-image-unsigned-6.8.0-1026-nvidia-tegra",
"binary_version": "6.8.0-1026.26"
},
{
"binary_name": "linux-image-unsigned-6.8.0-1026-nvidia-tegra-rt",
"binary_version": "6.8.0-1026.26"
},
{
"binary_name": "linux-modules-6.8.0-1026-nvidia-tegra",
"binary_version": "6.8.0-1026.26"
},
{
"binary_name": "linux-modules-6.8.0-1026-nvidia-tegra-rt",
"binary_version": "6.8.0-1026.26"
},
{
"binary_name": "linux-modules-extra-6.8.0-1026-nvidia-tegra",
"binary_version": "6.8.0-1026.26"
},
{
"binary_name": "linux-modules-extra-6.8.0-1026-nvidia-tegra-rt",
"binary_version": "6.8.0-1026.26"
},
{
"binary_name": "linux-nvidia-tegra-headers-6.8.0-1026",
"binary_version": "6.8.0-1026.26"
},
{
"binary_name": "linux-nvidia-tegra-tools-6.8.0-1026",
"binary_version": "6.8.0-1026.26"
},
{
"binary_name": "linux-tools-6.8.0-1026-nvidia-tegra",
"binary_version": "6.8.0-1026.26"
},
{
"binary_name": "linux-tools-6.8.0-1026-nvidia-tegra-rt",
"binary_version": "6.8.0-1026.26"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:24.04:LTS",
"name": "linux-nvidia-tegra",
"purl": "pkg:deb/ubuntu/linux-nvidia-tegra@6.8.0-1026.26?arch=source\u0026distro=noble"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.8.0-1026.26"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.8.0-1003.3",
"6.8.0-1004.4",
"6.8.0-1008.8",
"6.8.0-1009.9",
"6.8.0-1010.10",
"6.8.0-1012.12",
"6.8.0-1013.13",
"6.8.0-1016.16",
"6.8.0-1019.19",
"6.8.0-1020.20",
"6.8.0-1021.21",
"6.8.0-1022.22",
"6.8.0-1023.23",
"6.8.0-1024.24",
"6.8.0-1025.25"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-buildinfo-6.11.0-1027-oem",
"binary_version": "6.11.0-1027.27"
},
{
"binary_name": "linux-headers-6.11.0-1027-oem",
"binary_version": "6.11.0-1027.27"
},
{
"binary_name": "linux-image-unsigned-6.11.0-1027-oem",
"binary_version": "6.11.0-1027.27"
},
{
"binary_name": "linux-modules-6.11.0-1027-oem",
"binary_version": "6.11.0-1027.27"
},
{
"binary_name": "linux-modules-ipu6-6.11.0-1027-oem",
"binary_version": "6.11.0-1027.27"
},
{
"binary_name": "linux-modules-ipu7-6.11.0-1027-oem",
"binary_version": "6.11.0-1027.27"
},
{
"binary_name": "linux-modules-iwlwifi-6.11.0-1027-oem",
"binary_version": "6.11.0-1027.27"
},
{
"binary_name": "linux-modules-usbio-6.11.0-1027-oem",
"binary_version": "6.11.0-1027.27"
},
{
"binary_name": "linux-modules-vision-6.11.0-1027-oem",
"binary_version": "6.11.0-1027.27"
},
{
"binary_name": "linux-oem-6.11-headers-6.11.0-1027",
"binary_version": "6.11.0-1027.27"
},
{
"binary_name": "linux-oem-6.11-tools-6.11.0-1027",
"binary_version": "6.11.0-1027.27"
},
{
"binary_name": "linux-tools-6.11.0-1027-oem",
"binary_version": "6.11.0-1027.27"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:24.04:LTS",
"name": "linux-oem-6.11",
"purl": "pkg:deb/ubuntu/linux-oem-6.11@6.11.0-1027.27?arch=source\u0026distro=noble"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.11.0-1007.7",
"6.11.0-1008.8",
"6.11.0-1009.9",
"6.11.0-1010.10",
"6.11.0-1011.11",
"6.11.0-1012.12",
"6.11.0-1013.13",
"6.11.0-1015.15",
"6.11.0-1016.16",
"6.11.0-1017.17",
"6.11.0-1018.18",
"6.11.0-1020.20",
"6.11.0-1021.21",
"6.11.0-1022.22",
"6.11.0-1023.23",
"6.11.0-1024.24",
"6.11.0-1025.25",
"6.11.0-1027.27"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-buildinfo-6.14.0-1020-oem",
"binary_version": "6.14.0-1020.20"
},
{
"binary_name": "linux-headers-6.14.0-1020-oem",
"binary_version": "6.14.0-1020.20"
},
{
"binary_name": "linux-image-unsigned-6.14.0-1020-oem",
"binary_version": "6.14.0-1020.20"
},
{
"binary_name": "linux-modules-6.14.0-1020-oem",
"binary_version": "6.14.0-1020.20"
},
{
"binary_name": "linux-modules-ipu6-6.14.0-1020-oem",
"binary_version": "6.14.0-1020.20"
},
{
"binary_name": "linux-modules-ipu7-6.14.0-1020-oem",
"binary_version": "6.14.0-1020.20"
},
{
"binary_name": "linux-modules-iwlwifi-6.14.0-1020-oem",
"binary_version": "6.14.0-1020.20"
},
{
"binary_name": "linux-modules-usbio-6.14.0-1020-oem",
"binary_version": "6.14.0-1020.20"
},
{
"binary_name": "linux-modules-vision-6.14.0-1020-oem",
"binary_version": "6.14.0-1020.20"
},
{
"binary_name": "linux-oem-6.14-headers-6.14.0-1020",
"binary_version": "6.14.0-1020.20"
},
{
"binary_name": "linux-oem-6.14-tools-6.14.0-1020",
"binary_version": "6.14.0-1020.20"
},
{
"binary_name": "linux-tools-6.14.0-1020-oem",
"binary_version": "6.14.0-1020.20"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:24.04:LTS",
"name": "linux-oem-6.14",
"purl": "pkg:deb/ubuntu/linux-oem-6.14@6.14.0-1020.20?arch=source\u0026distro=noble"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.14.0-1004.4",
"6.14.0-1005.5",
"6.14.0-1006.6",
"6.14.0-1007.7",
"6.14.0-1008.8",
"6.14.0-1010.10",
"6.14.0-1011.11",
"6.14.0-1012.12",
"6.14.0-1013.13",
"6.14.0-1014.14",
"6.14.0-1015.15",
"6.14.0-1016.16",
"6.14.0-1017.17",
"6.14.0-1018.18",
"6.14.0-1019.19",
"6.14.0-1020.20"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "linux-buildinfo-6.17.0-1024-oem",
"binary_version": "6.17.0-1024.24"
},
{
"binary_name": "linux-headers-6.17.0-1024-oem",
"binary_version": "6.17.0-1024.24"
},
{
"binary_name": "linux-image-unsigned-6.17.0-1024-oem",
"binary_version": "6.17.0-1024.24"
},
{
"binary_name": "linux-modules-6.17.0-1024-oem",
"binary_version": "6.17.0-1024.24"
},
{
"binary_name": "linux-modules-evdi-6.17.0-1024-oem",
"binary_version": "6.17.0-1024.24"
},
{
"binary_name": "linux-modules-ipu6-6.17.0-1024-oem",
"binary_version": "6.17.0-1024.24"
},
{
"binary_name": "linux-modules-ipu7-6.17.0-1024-oem",
"binary_version": "6.17.0-1024.24"
},
{
"binary_name": "linux-modules-iwlwifi-6.17.0-1024-oem",
"binary_version": "6.17.0-1024.24"
},
{
"binary_name": "linux-modules-usbio-6.17.0-1024-oem",
"binary_version": "6.17.0-1024.24"
},
{
"binary_name": "linux-modules-vision-6.17.0-1024-oem",
"binary_version": "6.17.0-1024.24"
},
{
"binary_name": "linux-oem-6.17-headers-6.17.0-1024",
"binary_version": "6.17.0-1024.24"
},
{
"binary_name": "linux-oem-6.17-tools-6.17.0-1024",
"binary_version": "6.17.0-1024.24"
},
{
"binary_name": "linux-tools-6.17.0-1024-oem",
"binary_version": "6.17.0-1024.24"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:24.04:LTS",
"name": "linux-oem-6.17",
"purl": "pkg:deb/ubuntu/linux-oem-6.17@6.17.0-1024.24?arch=source\u0026distro=noble"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.17.0-1024.24"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.17.0-1005.5",
"6.17.0-1006.6",
"6.17.0-1007.7",
"6.17.0-1008.8",
"6.17.0-1009.9",
"6.17.0-1010.10",
"6.17.0-1011.11",
"6.17.0-1012.12",
"6.17.0-1017.17",
"6.17.0-1020.20",
"6.17.0-1023.23"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-buildinfo-6.8.0-1032-oem",
"binary_version": "6.8.0-1032.32"
},
{
"binary_name": "linux-headers-6.8.0-1032-oem",
"binary_version": "6.8.0-1032.32"
},
{
"binary_name": "linux-image-unsigned-6.8.0-1032-oem",
"binary_version": "6.8.0-1032.32"
},
{
"binary_name": "linux-modules-6.8.0-1032-oem",
"binary_version": "6.8.0-1032.32"
},
{
"binary_name": "linux-modules-ipu6-6.8.0-1032-oem",
"binary_version": "6.8.0-1032.32"
},
{
"binary_name": "linux-modules-iwlwifi-6.8.0-1032-oem",
"binary_version": "6.8.0-1032.32"
},
{
"binary_name": "linux-modules-usbio-6.8.0-1032-oem",
"binary_version": "6.8.0-1032.32"
},
{
"binary_name": "linux-oem-6.8-headers-6.8.0-1032",
"binary_version": "6.8.0-1032.32"
},
{
"binary_name": "linux-oem-6.8-tools-6.8.0-1032",
"binary_version": "6.8.0-1032.32"
},
{
"binary_name": "linux-tools-6.8.0-1032-oem",
"binary_version": "6.8.0-1032.32"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:24.04:LTS",
"name": "linux-oem-6.8",
"purl": "pkg:deb/ubuntu/linux-oem-6.8@6.8.0-1032.32?arch=source\u0026distro=noble"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.8.0-1003.3",
"6.8.0-1004.4",
"6.8.0-1005.5",
"6.8.0-1006.6",
"6.8.0-1007.7",
"6.8.0-1008.8",
"6.8.0-1009.9",
"6.8.0-1010.10",
"6.8.0-1011.11",
"6.8.0-1012.12",
"6.8.0-1013.13",
"6.8.0-1014.14",
"6.8.0-1016.16",
"6.8.0-1017.17",
"6.8.0-1018.18",
"6.8.0-1019.19",
"6.8.0-1020.20",
"6.8.0-1024.24",
"6.8.0-1025.25",
"6.8.0-1026.26",
"6.8.0-1027.27",
"6.8.0-1028.28",
"6.8.0-1029.29",
"6.8.0-1030.30",
"6.8.0-1031.31",
"6.8.0-1032.32"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "linux-buildinfo-6.8.0-1054-oracle",
"binary_version": "6.8.0-1054.55"
},
{
"binary_name": "linux-buildinfo-6.8.0-1054-oracle-64k",
"binary_version": "6.8.0-1054.55"
},
{
"binary_name": "linux-headers-6.8.0-1054-oracle",
"binary_version": "6.8.0-1054.55"
},
{
"binary_name": "linux-headers-6.8.0-1054-oracle-64k",
"binary_version": "6.8.0-1054.55"
},
{
"binary_name": "linux-image-unsigned-6.8.0-1054-oracle",
"binary_version": "6.8.0-1054.55"
},
{
"binary_name": "linux-image-unsigned-6.8.0-1054-oracle-64k",
"binary_version": "6.8.0-1054.55"
},
{
"binary_name": "linux-modules-6.8.0-1054-oracle",
"binary_version": "6.8.0-1054.55"
},
{
"binary_name": "linux-modules-6.8.0-1054-oracle-64k",
"binary_version": "6.8.0-1054.55"
},
{
"binary_name": "linux-modules-extra-6.8.0-1054-oracle",
"binary_version": "6.8.0-1054.55"
},
{
"binary_name": "linux-modules-extra-6.8.0-1054-oracle-64k",
"binary_version": "6.8.0-1054.55"
},
{
"binary_name": "linux-oracle-headers-6.8.0-1054",
"binary_version": "6.8.0-1054.55"
},
{
"binary_name": "linux-oracle-tools-6.8.0-1054",
"binary_version": "6.8.0-1054.55"
},
{
"binary_name": "linux-tools-6.8.0-1054-oracle",
"binary_version": "6.8.0-1054.55"
},
{
"binary_name": "linux-tools-6.8.0-1054-oracle-64k",
"binary_version": "6.8.0-1054.55"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:24.04:LTS",
"name": "linux-oracle",
"purl": "pkg:deb/ubuntu/linux-oracle@6.8.0-1054.55?arch=source\u0026distro=noble"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.8.0-1054.55"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.5.0-1010.10",
"6.6.0-1001.1",
"6.8.0-1001.1",
"6.8.0-1004.4",
"6.8.0-1005.5",
"6.8.0-1006.6",
"6.8.0-1008.8",
"6.8.0-1010.10",
"6.8.0-1011.11",
"6.8.0-1012.12",
"6.8.0-1013.13",
"6.8.0-1014.14",
"6.8.0-1015.16",
"6.8.0-1016.17",
"6.8.0-1017.18",
"6.8.0-1018.19",
"6.8.0-1019.20",
"6.8.0-1020.21",
"6.8.0-1021.22",
"6.8.0-1022.23",
"6.8.0-1023.24",
"6.8.0-1024.25",
"6.8.0-1025.26",
"6.8.0-1026.27",
"6.8.0-1027.28",
"6.8.0-1028.29",
"6.8.0-1029.30",
"6.8.0-1030.31",
"6.8.0-1032.33",
"6.8.0-1033.34",
"6.8.0-1035.36",
"6.8.0-1037.38",
"6.8.0-1038.39",
"6.8.0-1039.40",
"6.8.0-1040.41",
"6.8.0-1041.42",
"6.8.0-1042.43",
"6.8.0-1043.44",
"6.8.0-1044.45",
"6.8.0-1047.48",
"6.8.0-1049.50",
"6.8.0-1050.51",
"6.8.0-1052.53"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-buildinfo-6.14.0-1018-oracle",
"binary_version": "6.14.0-1018.18~24.04.1"
},
{
"binary_name": "linux-buildinfo-6.14.0-1018-oracle-64k",
"binary_version": "6.14.0-1018.18~24.04.1"
},
{
"binary_name": "linux-headers-6.14.0-1018-oracle",
"binary_version": "6.14.0-1018.18~24.04.1"
},
{
"binary_name": "linux-headers-6.14.0-1018-oracle-64k",
"binary_version": "6.14.0-1018.18~24.04.1"
},
{
"binary_name": "linux-image-unsigned-6.14.0-1018-oracle",
"binary_version": "6.14.0-1018.18~24.04.1"
},
{
"binary_name": "linux-image-unsigned-6.14.0-1018-oracle-64k",
"binary_version": "6.14.0-1018.18~24.04.1"
},
{
"binary_name": "linux-modules-6.14.0-1018-oracle",
"binary_version": "6.14.0-1018.18~24.04.1"
},
{
"binary_name": "linux-modules-6.14.0-1018-oracle-64k",
"binary_version": "6.14.0-1018.18~24.04.1"
},
{
"binary_name": "linux-modules-extra-6.14.0-1018-oracle",
"binary_version": "6.14.0-1018.18~24.04.1"
},
{
"binary_name": "linux-modules-extra-6.14.0-1018-oracle-64k",
"binary_version": "6.14.0-1018.18~24.04.1"
},
{
"binary_name": "linux-oracle-6.14-headers-6.14.0-1018",
"binary_version": "6.14.0-1018.18~24.04.1"
},
{
"binary_name": "linux-oracle-6.14-tools-6.14.0-1018",
"binary_version": "6.14.0-1018.18~24.04.1"
},
{
"binary_name": "linux-tools-6.14.0-1018-oracle",
"binary_version": "6.14.0-1018.18~24.04.1"
},
{
"binary_name": "linux-tools-6.14.0-1018-oracle-64k",
"binary_version": "6.14.0-1018.18~24.04.1"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:24.04:LTS",
"name": "linux-oracle-6.14",
"purl": "pkg:deb/ubuntu/linux-oracle-6.14@6.14.0-1018.18~24.04.1?arch=source\u0026distro=noble"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.14.0-1007.7~24.04.1",
"6.14.0-1009.9~24.04.1",
"6.14.0-1010.10~24.04.1",
"6.14.0-1011.11~24.04.1",
"6.14.0-1012.12~24.04.1",
"6.14.0-1013.13~24.04.1",
"6.14.0-1014.14~24.04.1",
"6.14.0-1015.15~24.04.1",
"6.14.0-1016.16~24.04.1",
"6.14.0-1017.17~24.04.1",
"6.14.0-1018.18~24.04.1"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "linux-buildinfo-6.17.0-1016-oracle",
"binary_version": "6.17.0-1016.16~24.04.1"
},
{
"binary_name": "linux-buildinfo-6.17.0-1016-oracle-64k",
"binary_version": "6.17.0-1016.16~24.04.1"
},
{
"binary_name": "linux-headers-6.17.0-1016-oracle",
"binary_version": "6.17.0-1016.16~24.04.1"
},
{
"binary_name": "linux-headers-6.17.0-1016-oracle-64k",
"binary_version": "6.17.0-1016.16~24.04.1"
},
{
"binary_name": "linux-image-unsigned-6.17.0-1016-oracle",
"binary_version": "6.17.0-1016.16~24.04.1"
},
{
"binary_name": "linux-image-unsigned-6.17.0-1016-oracle-64k",
"binary_version": "6.17.0-1016.16~24.04.1"
},
{
"binary_name": "linux-modules-6.17.0-1016-oracle",
"binary_version": "6.17.0-1016.16~24.04.1"
},
{
"binary_name": "linux-modules-6.17.0-1016-oracle-64k",
"binary_version": "6.17.0-1016.16~24.04.1"
},
{
"binary_name": "linux-modules-extra-6.17.0-1016-oracle",
"binary_version": "6.17.0-1016.16~24.04.1"
},
{
"binary_name": "linux-modules-extra-6.17.0-1016-oracle-64k",
"binary_version": "6.17.0-1016.16~24.04.1"
},
{
"binary_name": "linux-oracle-6.17-headers-6.17.0-1016",
"binary_version": "6.17.0-1016.16~24.04.1"
},
{
"binary_name": "linux-oracle-6.17-tools-6.17.0-1016",
"binary_version": "6.17.0-1016.16~24.04.1"
},
{
"binary_name": "linux-tools-6.17.0-1016-oracle",
"binary_version": "6.17.0-1016.16~24.04.1"
},
{
"binary_name": "linux-tools-6.17.0-1016-oracle-64k",
"binary_version": "6.17.0-1016.16~24.04.1"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:24.04:LTS",
"name": "linux-oracle-6.17",
"purl": "pkg:deb/ubuntu/linux-oracle-6.17@6.17.0-1016.16~24.04.1?arch=source\u0026distro=noble"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.17.0-1016.16~24.04.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.17.0-1004.4~24.04.2",
"6.17.0-1007.7~24.04.1",
"6.17.0-1009.9~24.04.1",
"6.17.0-1010.10~24.04.1",
"6.17.0-1011.11~24.04.1",
"6.17.0-1014.14~24.04.1"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "linux-buildinfo-6.8.0-1057-raspi",
"binary_version": "6.8.0-1057.61"
},
{
"binary_name": "linux-headers-6.8.0-1057-raspi",
"binary_version": "6.8.0-1057.61"
},
{
"binary_name": "linux-image-6.8.0-1057-raspi",
"binary_version": "6.8.0-1057.61"
},
{
"binary_name": "linux-modules-6.8.0-1057-raspi",
"binary_version": "6.8.0-1057.61"
},
{
"binary_name": "linux-raspi-headers-6.8.0-1057",
"binary_version": "6.8.0-1057.61"
},
{
"binary_name": "linux-raspi-tools-6.8.0-1057",
"binary_version": "6.8.0-1057.61"
},
{
"binary_name": "linux-tools-6.8.0-1057-raspi",
"binary_version": "6.8.0-1057.61"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:24.04:LTS",
"name": "linux-raspi",
"purl": "pkg:deb/ubuntu/linux-raspi@6.8.0-1057.61?arch=source\u0026distro=noble"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.8.0-1057.61"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.5.0-1005.7",
"6.7.0-1001.1",
"6.8.0-1001.1",
"6.8.0-1002.2",
"6.8.0-1003.3",
"6.8.0-1004.4",
"6.8.0-1005.5",
"6.8.0-1006.6",
"6.8.0-1007.7",
"6.8.0-1008.8",
"6.8.0-1009.10",
"6.8.0-1010.11",
"6.8.0-1011.12",
"6.8.0-1012.13",
"6.8.0-1013.14",
"6.8.0-1014.16",
"6.8.0-1015.17",
"6.8.0-1016.18",
"6.8.0-1017.19",
"6.8.0-1018.20",
"6.8.0-1019.23",
"6.8.0-1020.24",
"6.8.0-1024.28",
"6.8.0-1028.32",
"6.8.0-1029.33",
"6.8.0-1030.34",
"6.8.0-1031.35",
"6.8.0-1032.36",
"6.8.0-1035.39",
"6.8.0-1036.40",
"6.8.0-1038.42",
"6.8.0-1039.43",
"6.8.0-1040.44",
"6.8.0-1041.45",
"6.8.0-1042.46",
"6.8.0-1043.47",
"6.8.0-1044.48",
"6.8.0-1045.49",
"6.8.0-1047.51",
"6.8.0-1048.52",
"6.8.0-1050.54",
"6.8.0-1051.55",
"6.8.0-1052.56",
"6.8.0-1053.57",
"6.8.0-1056.60"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-buildinfo-6.8.0-2019-raspi-realtime",
"binary_version": "6.8.0-2019.20"
},
{
"binary_name": "linux-headers-6.8.0-2019-raspi-realtime",
"binary_version": "6.8.0-2019.20"
},
{
"binary_name": "linux-image-6.8.0-2019-raspi-realtime",
"binary_version": "6.8.0-2019.20"
},
{
"binary_name": "linux-modules-6.8.0-2019-raspi-realtime",
"binary_version": "6.8.0-2019.20"
},
{
"binary_name": "linux-raspi-realtime-headers-6.8.0-2019",
"binary_version": "6.8.0-2019.20"
},
{
"binary_name": "linux-raspi-realtime-tools-6.8.0-2019",
"binary_version": "6.8.0-2019.20"
},
{
"binary_name": "linux-tools-6.8.0-2019-raspi-realtime",
"binary_version": "6.8.0-2019.20"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:24.04:LTS",
"name": "linux-raspi-realtime",
"purl": "pkg:deb/ubuntu/linux-raspi-realtime@6.8.0-2019.20?arch=source\u0026distro=noble"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.8.0-2019.20"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-buildinfo-6.8.1-1015-realtime",
"binary_version": "6.8.1-1015.16"
},
{
"binary_name": "linux-cloud-tools-6.8.1-1015-realtime",
"binary_version": "6.8.1-1015.16"
},
{
"binary_name": "linux-headers-6.8.1-1015-realtime",
"binary_version": "6.8.1-1015.16"
},
{
"binary_name": "linux-image-unsigned-6.8.1-1015-realtime",
"binary_version": "6.8.1-1015.16"
},
{
"binary_name": "linux-modules-6.8.1-1015-realtime",
"binary_version": "6.8.1-1015.16"
},
{
"binary_name": "linux-modules-extra-6.8.1-1015-realtime",
"binary_version": "6.8.1-1015.16"
},
{
"binary_name": "linux-modules-iwlwifi-6.8.1-1015-realtime",
"binary_version": "6.8.1-1015.16"
},
{
"binary_name": "linux-realtime-cloud-tools-6.8.1-1015",
"binary_version": "6.8.1-1015.16"
},
{
"binary_name": "linux-realtime-headers-6.8.1-1015",
"binary_version": "6.8.1-1015.16"
},
{
"binary_name": "linux-realtime-tools-6.8.1-1015",
"binary_version": "6.8.1-1015.16"
},
{
"binary_name": "linux-tools-6.8.1-1015-realtime",
"binary_version": "6.8.1-1015.16"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:24.04:LTS",
"name": "linux-realtime",
"purl": "pkg:deb/ubuntu/linux-realtime@6.8.1-1015.16?arch=source\u0026distro=noble"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.8.1-1015.16"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-buildinfo-6.8.0-60-generic",
"binary_version": "6.8.0-60.63.1"
},
{
"binary_name": "linux-headers-6.8.0-60-generic",
"binary_version": "6.8.0-60.63.1"
},
{
"binary_name": "linux-image-6.8.0-60-generic",
"binary_version": "6.8.0-60.63.1"
},
{
"binary_name": "linux-modules-6.8.0-60-generic",
"binary_version": "6.8.0-60.63.1"
},
{
"binary_name": "linux-riscv-headers-6.8.0-60",
"binary_version": "6.8.0-60.63.1"
},
{
"binary_name": "linux-riscv-tools-6.8.0-60",
"binary_version": "6.8.0-60.63.1"
},
{
"binary_name": "linux-tools-6.8.0-60-generic",
"binary_version": "6.8.0-60.63.1"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:24.04:LTS",
"name": "linux-riscv",
"purl": "pkg:deb/ubuntu/linux-riscv@6.8.0-60.63.1?arch=source\u0026distro=noble"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.5.0-9.9.1",
"6.8.0-20.20.1",
"6.8.0-28.28.1",
"6.8.0-31.31.1",
"6.8.0-35.35.1",
"6.8.0-36.36.1",
"6.8.0-38.38.1",
"6.8.0-39.39.1",
"6.8.0-40.40.1",
"6.8.0-41.41.1",
"6.8.0-44.44.1",
"6.8.0-47.47.1",
"6.8.0-48.48.1",
"6.8.0-49.49.1",
"6.8.0-50.51.1",
"6.8.0-51.52.1",
"6.8.0-52.53.1",
"6.8.0-53.55.1",
"6.8.0-55.57.1",
"6.8.0-56.58.1",
"6.8.0-57.59.1",
"6.8.0-58.60.1",
"6.8.0-59.61.1",
"6.8.0-60.63.1"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-buildinfo-6.14.0-37-generic",
"binary_version": "6.14.0-37.37.1~24.04.1"
},
{
"binary_name": "linux-headers-6.14.0-37-generic",
"binary_version": "6.14.0-37.37.1~24.04.1"
},
{
"binary_name": "linux-image-6.14.0-37-generic",
"binary_version": "6.14.0-37.37.1~24.04.1"
},
{
"binary_name": "linux-modules-6.14.0-37-generic",
"binary_version": "6.14.0-37.37.1~24.04.1"
},
{
"binary_name": "linux-riscv-6.14-headers-6.14.0-37",
"binary_version": "6.14.0-37.37.1~24.04.1"
},
{
"binary_name": "linux-riscv-6.14-tools-6.14.0-37",
"binary_version": "6.14.0-37.37.1~24.04.1"
},
{
"binary_name": "linux-tools-6.14.0-37-generic",
"binary_version": "6.14.0-37.37.1~24.04.1"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:24.04:LTS",
"name": "linux-riscv-6.14",
"purl": "pkg:deb/ubuntu/linux-riscv-6.14@6.14.0-37.37.1~24.04.1?arch=source\u0026distro=noble"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.14.0-22.22.1~24.04.1",
"6.14.0-23.23.1~24.04.1",
"6.14.0-24.24.1~24.04.1",
"6.14.0-27.27.1~24.04.1",
"6.14.0-28.28.1~24.04.1",
"6.14.0-29.29.1~24.04.1",
"6.14.0-32.32.1~24.04.1",
"6.14.0-33.33.1~24.04.1",
"6.14.0-34.34.1~24.04.1",
"6.14.0-35.35.1~24.04.1",
"6.14.0-36.36.1~24.04.1",
"6.14.0-37.37.1~24.04.1"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "linux-buildinfo-6.17.0-35-generic",
"binary_version": "6.17.0-35.35.1~24.04.1"
},
{
"binary_name": "linux-headers-6.17.0-35-generic",
"binary_version": "6.17.0-35.35.1~24.04.1"
},
{
"binary_name": "linux-image-6.17.0-35-generic",
"binary_version": "6.17.0-35.35.1~24.04.1"
},
{
"binary_name": "linux-modules-6.17.0-35-generic",
"binary_version": "6.17.0-35.35.1~24.04.1"
},
{
"binary_name": "linux-riscv-6.17-headers-6.17.0-35",
"binary_version": "6.17.0-35.35.1~24.04.1"
},
{
"binary_name": "linux-riscv-6.17-tools-6.17.0-35",
"binary_version": "6.17.0-35.35.1~24.04.1"
},
{
"binary_name": "linux-tools-6.17.0-35-generic",
"binary_version": "6.17.0-35.35.1~24.04.1"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:24.04:LTS",
"name": "linux-riscv-6.17",
"purl": "pkg:deb/ubuntu/linux-riscv-6.17@6.17.0-35.35.1~24.04.1?arch=source\u0026distro=noble"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.17.0-35.35.1~24.04.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.17.0-14.14.1~24.04.1",
"6.17.0-19.19.1~24.04.1",
"6.17.0-20.20.1~24.04.1",
"6.17.0-22.22.1~24.04.1",
"6.17.0-23.23.1~24.04.1",
"6.17.0-29.29.1~24.04.1"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "linux-buildinfo-6.8.0-1032-xilinx",
"binary_version": "6.8.0-1032.33"
},
{
"binary_name": "linux-headers-6.8.0-1032-xilinx",
"binary_version": "6.8.0-1032.33"
},
{
"binary_name": "linux-image-6.8.0-1032-xilinx",
"binary_version": "6.8.0-1032.33"
},
{
"binary_name": "linux-modules-6.8.0-1032-xilinx",
"binary_version": "6.8.0-1032.33"
},
{
"binary_name": "linux-tools-6.8.0-1032-xilinx",
"binary_version": "6.8.0-1032.33"
},
{
"binary_name": "linux-xilinx-headers-6.8.0-1032",
"binary_version": "6.8.0-1032.33"
},
{
"binary_name": "linux-xilinx-tools-6.8.0-1032",
"binary_version": "6.8.0-1032.33"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:24.04:LTS",
"name": "linux-xilinx",
"purl": "pkg:deb/ubuntu/linux-xilinx@6.8.0-1032.33?arch=source\u0026distro=noble"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.8.0-1032.33"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.8.0-1008.9",
"6.8.0-1009.10",
"6.8.0-1011.12",
"6.8.0-1012.13",
"6.8.0-1013.14",
"6.8.0-1014.15",
"6.8.0-1015.16",
"6.8.0-1017.18",
"6.8.0-1018.19",
"6.8.0-1019.20",
"6.8.0-1020.21",
"6.8.0-1021.22",
"6.8.0-1022.23",
"6.8.0-1023.24",
"6.8.0-1024.25",
"6.8.0-1028.29",
"6.8.0-1029.30"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-bluefield-headers-6.8.0-1029",
"binary_version": "6.8.0-1029.34"
},
{
"binary_name": "linux-bluefield-tools-6.8.0-1029",
"binary_version": "6.8.0-1029.34"
},
{
"binary_name": "linux-buildinfo-6.8.0-1029-bluefield",
"binary_version": "6.8.0-1029.34"
},
{
"binary_name": "linux-buildinfo-6.8.0-1029-bluefield-64k",
"binary_version": "6.8.0-1029.34"
},
{
"binary_name": "linux-headers-6.8.0-1029-bluefield",
"binary_version": "6.8.0-1029.34"
},
{
"binary_name": "linux-headers-6.8.0-1029-bluefield-64k",
"binary_version": "6.8.0-1029.34"
},
{
"binary_name": "linux-image-unsigned-6.8.0-1029-bluefield",
"binary_version": "6.8.0-1029.34"
},
{
"binary_name": "linux-image-unsigned-6.8.0-1029-bluefield-64k",
"binary_version": "6.8.0-1029.34"
},
{
"binary_name": "linux-modules-6.8.0-1029-bluefield",
"binary_version": "6.8.0-1029.34"
},
{
"binary_name": "linux-modules-6.8.0-1029-bluefield-64k",
"binary_version": "6.8.0-1029.34"
},
{
"binary_name": "linux-modules-extra-6.8.0-1029-bluefield",
"binary_version": "6.8.0-1029.34"
},
{
"binary_name": "linux-modules-extra-6.8.0-1029-bluefield-64k",
"binary_version": "6.8.0-1029.34"
},
{
"binary_name": "linux-tools-6.8.0-1029-bluefield",
"binary_version": "6.8.0-1029.34"
},
{
"binary_name": "linux-tools-6.8.0-1029-bluefield-64k",
"binary_version": "6.8.0-1029.34"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:Nvidia-BlueField:24.04:LTS",
"name": "linux-bluefield",
"purl": "pkg:deb/ubuntu/linux-bluefield@6.8.0-1029.34?arch=source\u0026distro=bluefield/noble"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.8.0-1011.15",
"6.8.0-1012.16",
"6.8.0-1013.17",
"6.8.0-1014.18",
"6.8.0-1016.20",
"6.8.0-1017.21",
"6.8.0-1022.26",
"6.8.0-1023.27",
"6.8.0-1026.30",
"6.8.0-1028.33",
"6.8.0-1029.34"
]
},
{
"ecosystem_specific": {
"availability": "Available with Ubuntu Pro: https://ubuntu.com/pro",
"binaries": [
{
"binary_name": "linux-aws-fips-cloud-tools-6.8.0-1057",
"binary_version": "6.8.0-1057.60+fips1"
},
{
"binary_name": "linux-aws-fips-headers-6.8.0-1057",
"binary_version": "6.8.0-1057.60+fips1"
},
{
"binary_name": "linux-aws-fips-tools-6.8.0-1057",
"binary_version": "6.8.0-1057.60+fips1"
},
{
"binary_name": "linux-buildinfo-6.8.0-1057-aws-fips",
"binary_version": "6.8.0-1057.60+fips1"
},
{
"binary_name": "linux-cloud-tools-6.8.0-1057-aws-fips",
"binary_version": "6.8.0-1057.60+fips1"
},
{
"binary_name": "linux-headers-6.8.0-1057-aws-fips",
"binary_version": "6.8.0-1057.60+fips1"
},
{
"binary_name": "linux-image-unsigned-6.8.0-1057-aws-fips",
"binary_version": "6.8.0-1057.60+fips1"
},
{
"binary_name": "linux-image-unsigned-hmac-6.8.0-1057-aws-fips",
"binary_version": "6.8.0-1057.60+fips1"
},
{
"binary_name": "linux-modules-6.8.0-1057-aws-fips",
"binary_version": "6.8.0-1057.60+fips1"
},
{
"binary_name": "linux-modules-extra-6.8.0-1057-aws-fips",
"binary_version": "6.8.0-1057.60+fips1"
},
{
"binary_name": "linux-tools-6.8.0-1057-aws-fips",
"binary_version": "6.8.0-1057.60+fips1"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:Pro:FIPS-updates:24.04:LTS",
"name": "linux-aws-fips",
"purl": "pkg:deb/ubuntu/linux-aws-fips@6.8.0-1057.60+fips1?arch=source\u0026distro=fips-updates/noble"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.8.0-1057.60+fips1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.8.0-1035.37+fips1",
"6.8.0-1036.38+fips1",
"6.8.0-1038.40+fips1",
"6.8.0-1039.41+fips1",
"6.8.0-1040.42+fips1",
"6.8.0-1041.43+fips1",
"6.8.0-1042.44+fips1",
"6.8.0-1043.45+fips1",
"6.8.0-1044.46+fips1",
"6.8.0-1045.47+fips1",
"6.8.0-1046.49+fips1",
"6.8.0-1047.50+fips1",
"6.8.0-1050.53+fips1",
"6.8.0-1051.54+fips1",
"6.8.0-1052.55+fips1",
"6.8.0-1053.56+fips1",
"6.8.0-1055.58+fips1"
]
},
{
"ecosystem_specific": {
"availability": "Available with Ubuntu Pro: https://ubuntu.com/pro",
"binaries": [
{
"binary_name": "linux-azure-fips-cloud-tools-6.8.0-1059",
"binary_version": "6.8.0-1059.65+fips1"
},
{
"binary_name": "linux-azure-fips-headers-6.8.0-1059",
"binary_version": "6.8.0-1059.65+fips1"
},
{
"binary_name": "linux-azure-fips-tools-6.8.0-1059",
"binary_version": "6.8.0-1059.65+fips1"
},
{
"binary_name": "linux-buildinfo-6.8.0-1059-azure-fips",
"binary_version": "6.8.0-1059.65+fips1"
},
{
"binary_name": "linux-cloud-tools-6.8.0-1059-azure-fips",
"binary_version": "6.8.0-1059.65+fips1"
},
{
"binary_name": "linux-headers-6.8.0-1059-azure-fips",
"binary_version": "6.8.0-1059.65+fips1"
},
{
"binary_name": "linux-image-unsigned-6.8.0-1059-azure-fips",
"binary_version": "6.8.0-1059.65+fips1"
},
{
"binary_name": "linux-image-unsigned-hmac-6.8.0-1059-azure-fips",
"binary_version": "6.8.0-1059.65+fips1"
},
{
"binary_name": "linux-modules-6.8.0-1059-azure-fips",
"binary_version": "6.8.0-1059.65+fips1"
},
{
"binary_name": "linux-modules-extra-6.8.0-1059-azure-fips",
"binary_version": "6.8.0-1059.65+fips1"
},
{
"binary_name": "linux-modules-involflt-6.8.0-1059-azure-fips",
"binary_version": "6.8.0-1059.65+fips1"
},
{
"binary_name": "linux-modules-iwlwifi-6.8.0-1059-azure-fips",
"binary_version": "6.8.0-1059.65+fips1"
},
{
"binary_name": "linux-tools-6.8.0-1059-azure-fips",
"binary_version": "6.8.0-1059.65+fips1"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:Pro:FIPS-updates:24.04:LTS",
"name": "linux-azure-fips",
"purl": "pkg:deb/ubuntu/linux-azure-fips@6.8.0-1059.65+fips1?arch=source\u0026distro=fips-updates/noble"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.8.0-1059.65+fips1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.8.0-1034.39+fips1",
"6.8.0-1040.46+fips1",
"6.8.0-1044.50+fips1",
"6.8.0-1046.52+fips1",
"6.8.0-1047.53+fips1",
"6.8.0-1052.58+fips1",
"6.8.0-1053.59+fips1",
"6.8.0-1054.60+fips1"
]
},
{
"ecosystem_specific": {
"availability": "Available with Ubuntu Pro: https://ubuntu.com/pro",
"binaries": [
{
"binary_name": "linux-buildinfo-6.8.0-124-fips",
"binary_version": "6.8.0-124.124+fips1"
},
{
"binary_name": "linux-cloud-tools-6.8.0-124-fips",
"binary_version": "6.8.0-124.124+fips1"
},
{
"binary_name": "linux-fips-cloud-tools-6.8.0-124",
"binary_version": "6.8.0-124.124+fips1"
},
{
"binary_name": "linux-fips-headers-6.8.0-124",
"binary_version": "6.8.0-124.124+fips1"
},
{
"binary_name": "linux-fips-lib-rust-6.8.0-124-fips",
"binary_version": "6.8.0-124.124+fips1"
},
{
"binary_name": "linux-fips-tools-6.8.0-124",
"binary_version": "6.8.0-124.124+fips1"
},
{
"binary_name": "linux-headers-6.8.0-124-fips",
"binary_version": "6.8.0-124.124+fips1"
},
{
"binary_name": "linux-image-6.8.0-124-fips",
"binary_version": "6.8.0-124.124+fips1"
},
{
"binary_name": "linux-image-hmac-6.8.0-124-fips",
"binary_version": "6.8.0-124.124+fips1"
},
{
"binary_name": "linux-image-unsigned-6.8.0-124-fips",
"binary_version": "6.8.0-124.124+fips1"
},
{
"binary_name": "linux-image-unsigned-hmac-6.8.0-124-fips",
"binary_version": "6.8.0-124.124+fips1"
},
{
"binary_name": "linux-modules-6.8.0-124-fips",
"binary_version": "6.8.0-124.124+fips1"
},
{
"binary_name": "linux-modules-extra-6.8.0-124-fips",
"binary_version": "6.8.0-124.124+fips1"
},
{
"binary_name": "linux-modules-ipu6-6.8.0-124-fips",
"binary_version": "6.8.0-124.124+fips1"
},
{
"binary_name": "linux-modules-iwlwifi-6.8.0-124-fips",
"binary_version": "6.8.0-124.124+fips1"
},
{
"binary_name": "linux-modules-usbio-6.8.0-124-fips",
"binary_version": "6.8.0-124.124+fips1"
},
{
"binary_name": "linux-tools-6.8.0-124-fips",
"binary_version": "6.8.0-124.124+fips1"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:Pro:FIPS-updates:24.04:LTS",
"name": "linux-fips",
"purl": "pkg:deb/ubuntu/linux-fips@6.8.0-124.124+fips1?arch=source\u0026distro=fips-updates/noble"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.8.0-124.124+fips1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.8.0-38.38+fips4",
"6.8.0-78.78+fips1",
"6.8.0-79.79+fips1",
"6.8.0-83.83+fips1",
"6.8.0-84.84+fips1",
"6.8.0-85.85+fips1",
"6.8.0-86.87+fips1",
"6.8.0-87.88+fips1",
"6.8.0-88.89+fips1",
"6.8.0-90.91+fips1",
"6.8.0-94.96+fips1",
"6.8.0-100.100+fips1",
"6.8.0-101.101+fips1",
"6.8.0-106.106+fips1",
"6.8.0-107.107+fips1",
"6.8.0-110.110+fips2",
"6.8.0-111.111+fips1",
"6.8.0-116.116+fips1"
]
},
{
"ecosystem_specific": {
"availability": "Available with Ubuntu Pro: https://ubuntu.com/pro",
"binaries": [
{
"binary_name": "linux-buildinfo-6.8.0-1060-gcp-fips",
"binary_version": "6.8.0-1060.63+fips1"
},
{
"binary_name": "linux-gcp-fips-headers-6.8.0-1060",
"binary_version": "6.8.0-1060.63+fips1"
},
{
"binary_name": "linux-gcp-fips-tools-6.8.0-1060",
"binary_version": "6.8.0-1060.63+fips1"
},
{
"binary_name": "linux-headers-6.8.0-1060-gcp-fips",
"binary_version": "6.8.0-1060.63+fips1"
},
{
"binary_name": "linux-image-unsigned-6.8.0-1060-gcp-fips",
"binary_version": "6.8.0-1060.63+fips1"
},
{
"binary_name": "linux-image-unsigned-hmac-6.8.0-1060-gcp-fips",
"binary_version": "6.8.0-1060.63+fips1"
},
{
"binary_name": "linux-modules-6.8.0-1060-gcp-fips",
"binary_version": "6.8.0-1060.63+fips1"
},
{
"binary_name": "linux-modules-extra-6.8.0-1060-gcp-fips",
"binary_version": "6.8.0-1060.63+fips1"
},
{
"binary_name": "linux-tools-6.8.0-1060-gcp-fips",
"binary_version": "6.8.0-1060.63+fips1"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:Pro:FIPS-updates:24.04:LTS",
"name": "linux-gcp-fips",
"purl": "pkg:deb/ubuntu/linux-gcp-fips@6.8.0-1060.63+fips1?arch=source\u0026distro=fips-updates/noble"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.8.0-1060.63+fips1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.8.0-1036.38+fips1",
"6.8.0-1037.39+fips1",
"6.8.0-1039.41+fips1",
"6.8.0-1040.42+fips1",
"6.8.0-1041.43+fips1",
"6.8.0-1042.45+fips1",
"6.8.0-1043.46+fips1",
"6.8.0-1044.47+fips1",
"6.8.0-1045.48+fips1",
"6.8.0-1046.49+fips1",
"6.8.0-1047.50+fips1",
"6.8.0-1048.51+fips1",
"6.8.0-1052.55+fips1",
"6.8.0-1053.56+fips1",
"6.8.0-1054.57+fips1",
"6.8.0-1055.58+fips1",
"6.8.0-1058.61+fips1"
]
},
{
"ecosystem_specific": {
"availability": "Available with Ubuntu Pro: https://ubuntu.com/pro",
"binaries": [
{
"binary_name": "linux-buildinfo-6.8.0-2046-raspi-realtime",
"binary_version": "6.8.0-2046.47"
},
{
"binary_name": "linux-headers-6.8.0-2046-raspi-realtime",
"binary_version": "6.8.0-2046.47"
},
{
"binary_name": "linux-image-6.8.0-2046-raspi-realtime",
"binary_version": "6.8.0-2046.47"
},
{
"binary_name": "linux-modules-6.8.0-2046-raspi-realtime",
"binary_version": "6.8.0-2046.47"
},
{
"binary_name": "linux-raspi-realtime-headers-6.8.0-2046",
"binary_version": "6.8.0-2046.47"
},
{
"binary_name": "linux-raspi-realtime-tools-6.8.0-2046",
"binary_version": "6.8.0-2046.47"
},
{
"binary_name": "linux-tools-6.8.0-2046-raspi-realtime",
"binary_version": "6.8.0-2046.47"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:Pro:Realtime:24.04:LTS",
"name": "linux-raspi-realtime",
"purl": "pkg:deb/ubuntu/linux-raspi-realtime@6.8.0-2046.47?arch=source\u0026distro=realtime/noble"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.8.0-2046.47"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.7.0-2001.1",
"6.8.0-2001.1",
"6.8.0-2002.2",
"6.8.0-2004.4",
"6.8.0-2005.5",
"6.8.0-2006.6",
"6.8.0-2007.7",
"6.8.0-2008.8",
"6.8.0-2009.9",
"6.8.0-2010.10",
"6.8.0-2011.11",
"6.8.0-2012.12",
"6.8.0-2013.14",
"6.8.0-2014.15",
"6.8.0-2015.16",
"6.8.0-2016.17",
"6.8.0-2017.18",
"6.8.0-2018.19",
"6.8.0-2019.20",
"6.8.0-2022.23",
"6.8.0-2023.24",
"6.8.0-2024.25",
"6.8.0-2025.26",
"6.8.0-2026.27",
"6.8.0-2028.29",
"6.8.0-2029.30",
"6.8.0-2030.31",
"6.8.0-2031.32",
"6.8.0-2032.33",
"6.8.0-2033.34",
"6.8.0-2034.35",
"6.8.0-2035.36",
"6.8.0-2036.37",
"6.8.0-2037.38",
"6.8.0-2038.39",
"6.8.0-2040.41",
"6.8.0-2041.42",
"6.8.0-2042.43",
"6.8.0-2043.44",
"6.8.0-2045.46"
]
},
{
"ecosystem_specific": {
"availability": "Available with Ubuntu Pro: https://ubuntu.com/pro",
"binaries": [
{
"binary_name": "linux-buildinfo-6.8.1-1052-realtime",
"binary_version": "6.8.1-1052.53"
},
{
"binary_name": "linux-cloud-tools-6.8.1-1052-realtime",
"binary_version": "6.8.1-1052.53"
},
{
"binary_name": "linux-headers-6.8.1-1052-realtime",
"binary_version": "6.8.1-1052.53"
},
{
"binary_name": "linux-image-unsigned-6.8.1-1052-realtime",
"binary_version": "6.8.1-1052.53"
},
{
"binary_name": "linux-modules-6.8.1-1052-realtime",
"binary_version": "6.8.1-1052.53"
},
{
"binary_name": "linux-modules-extra-6.8.1-1052-realtime",
"binary_version": "6.8.1-1052.53"
},
{
"binary_name": "linux-modules-iwlwifi-6.8.1-1052-realtime",
"binary_version": "6.8.1-1052.53"
},
{
"binary_name": "linux-realtime-cloud-tools-6.8.1-1052",
"binary_version": "6.8.1-1052.53"
},
{
"binary_name": "linux-realtime-headers-6.8.1-1052",
"binary_version": "6.8.1-1052.53"
},
{
"binary_name": "linux-realtime-tools-6.8.1-1052",
"binary_version": "6.8.1-1052.53"
},
{
"binary_name": "linux-tools-6.8.1-1052-realtime",
"binary_version": "6.8.1-1052.53"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:Pro:Realtime:24.04:LTS",
"name": "linux-realtime",
"purl": "pkg:deb/ubuntu/linux-realtime@6.8.1-1052.53?arch=source\u0026distro=realtime/noble"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.8.1-1052.53"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.8.0-1008.19",
"6.8.1-1001.1",
"6.8.1-1002.2",
"6.8.1-1003.3",
"6.8.1-1004.4",
"6.8.1-1005.5",
"6.8.1-1006.6",
"6.8.1-1007.7",
"6.8.1-1008.8",
"6.8.1-1009.9",
"6.8.1-1010.10",
"6.8.1-1011.11",
"6.8.1-1012.12",
"6.8.1-1013.14",
"6.8.1-1014.15",
"6.8.1-1015.16",
"6.8.1-1016.17",
"6.8.1-1017.18",
"6.8.1-1018.19",
"6.8.1-1019.20",
"6.8.1-1020.21",
"6.8.1-1021.22",
"6.8.1-1022.23",
"6.8.1-1023.24",
"6.8.1-1024.25",
"6.8.1-1025.26",
"6.8.1-1026.27",
"6.8.1-1030.31",
"6.8.1-1031.32",
"6.8.1-1033.34",
"6.8.1-1034.35",
"6.8.1-1035.36",
"6.8.1-1036.37",
"6.8.1-1037.38",
"6.8.1-1038.39",
"6.8.1-1039.40",
"6.8.1-1040.41",
"6.8.1-1041.42",
"6.8.1-1042.43",
"6.8.1-1045.46",
"6.8.1-1046.47",
"6.8.1-1047.48",
"6.8.1-1048.49",
"6.8.1-1051.52"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-buildinfo-6.14.0-1017-realtime",
"binary_version": "6.14.0-1017.17~24.04.1"
},
{
"binary_name": "linux-cloud-tools-6.14.0-1017-realtime",
"binary_version": "6.14.0-1017.17~24.04.1"
},
{
"binary_name": "linux-headers-6.14.0-1017-realtime",
"binary_version": "6.14.0-1017.17~24.04.1"
},
{
"binary_name": "linux-image-unsigned-6.14.0-1017-realtime",
"binary_version": "6.14.0-1017.17~24.04.1"
},
{
"binary_name": "linux-modules-6.14.0-1017-realtime",
"binary_version": "6.14.0-1017.17~24.04.1"
},
{
"binary_name": "linux-modules-extra-6.14.0-1017-realtime",
"binary_version": "6.14.0-1017.17~24.04.1"
},
{
"binary_name": "linux-modules-iwlwifi-6.14.0-1017-realtime",
"binary_version": "6.14.0-1017.17~24.04.1"
},
{
"binary_name": "linux-realtime-6.14-cloud-tools-6.14.0-1017",
"binary_version": "6.14.0-1017.17~24.04.1"
},
{
"binary_name": "linux-realtime-6.14-headers-6.14.0-1017",
"binary_version": "6.14.0-1017.17~24.04.1"
},
{
"binary_name": "linux-realtime-6.14-tools-6.14.0-1017",
"binary_version": "6.14.0-1017.17~24.04.1"
},
{
"binary_name": "linux-tools-6.14.0-1017-realtime",
"binary_version": "6.14.0-1017.17~24.04.1"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:Pro:Realtime:24.04:LTS",
"name": "linux-realtime-6.14",
"purl": "pkg:deb/ubuntu/linux-realtime-6.14@6.14.0-1017.17~24.04.1?arch=source\u0026distro=realtime/noble"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.14.0-1003.3~24.04.3",
"6.14.0-1010.10~24.04.1",
"6.14.0-1011.11~24.04.1",
"6.14.0-1012.12~24.04.1",
"6.14.0-1013.13~24.04.1",
"6.14.0-1014.14~24.04.1",
"6.14.0-1015.15~24.04.1",
"6.14.0-1016.16~24.04.1",
"6.14.0-1017.17~24.04.1"
]
},
{
"ecosystem_specific": {
"availability": "Available with Ubuntu Pro: https://ubuntu.com/pro",
"binaries": [
{
"binary_name": "linux-buildinfo-6.17.0-1014-realtime",
"binary_version": "6.17.0-1014.16~24.04.1"
},
{
"binary_name": "linux-cloud-tools-6.17.0-1014-realtime",
"binary_version": "6.17.0-1014.16~24.04.1"
},
{
"binary_name": "linux-headers-6.17.0-1014-realtime",
"binary_version": "6.17.0-1014.16~24.04.1"
},
{
"binary_name": "linux-image-unsigned-6.17.0-1014-realtime",
"binary_version": "6.17.0-1014.16~24.04.1"
},
{
"binary_name": "linux-modules-6.17.0-1014-realtime",
"binary_version": "6.17.0-1014.16~24.04.1"
},
{
"binary_name": "linux-modules-extra-6.17.0-1014-realtime",
"binary_version": "6.17.0-1014.16~24.04.1"
},
{
"binary_name": "linux-modules-iwlwifi-6.17.0-1014-realtime",
"binary_version": "6.17.0-1014.16~24.04.1"
},
{
"binary_name": "linux-realtime-6.17-cloud-tools-6.17.0-1014",
"binary_version": "6.17.0-1014.16~24.04.1"
},
{
"binary_name": "linux-realtime-6.17-headers-6.17.0-1014",
"binary_version": "6.17.0-1014.16~24.04.1"
},
{
"binary_name": "linux-realtime-6.17-tools-6.17.0-1014",
"binary_version": "6.17.0-1014.16~24.04.1"
},
{
"binary_name": "linux-tools-6.17.0-1014-realtime",
"binary_version": "6.17.0-1014.16~24.04.1"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:Pro:Realtime:24.04:LTS",
"name": "linux-realtime-6.17",
"purl": "pkg:deb/ubuntu/linux-realtime-6.17@6.17.0-1014.16~24.04.1?arch=source\u0026distro=realtime/noble"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.17.0-1014.16~24.04.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.17.0-1004.5~24.04.2",
"6.17.0-1006.7~24.04.1",
"6.17.0-1008.9~24.04.1",
"6.17.0-1009.10~24.04.1",
"6.17.0-1010.11~24.04.1",
"6.17.0-1011.12~24.04.1",
"6.17.0-1013.15~24.04.1"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "bpftool",
"binary_version": "7.7.0+6.17.0-35.35"
},
{
"binary_name": "linux-buildinfo-6.17.0-35-generic",
"binary_version": "6.17.0-35.35"
},
{
"binary_name": "linux-buildinfo-6.17.0-35-generic-64k",
"binary_version": "6.17.0-35.35"
},
{
"binary_name": "linux-cloud-tools-6.17.0-35",
"binary_version": "6.17.0-35.35"
},
{
"binary_name": "linux-cloud-tools-6.17.0-35-generic",
"binary_version": "6.17.0-35.35"
},
{
"binary_name": "linux-cloud-tools-common",
"binary_version": "6.17.0-35.35"
},
{
"binary_name": "linux-headers-6.17.0-35",
"binary_version": "6.17.0-35.35"
},
{
"binary_name": "linux-headers-6.17.0-35-generic",
"binary_version": "6.17.0-35.35"
},
{
"binary_name": "linux-headers-6.17.0-35-generic-64k",
"binary_version": "6.17.0-35.35"
},
{
"binary_name": "linux-image-6.17.0-35-generic",
"binary_version": "6.17.0-35.35"
},
{
"binary_name": "linux-image-unsigned-6.17.0-35-generic",
"binary_version": "6.17.0-35.35"
},
{
"binary_name": "linux-image-unsigned-6.17.0-35-generic-64k",
"binary_version": "6.17.0-35.35"
},
{
"binary_name": "linux-lib-rust-6.17.0-35-generic",
"binary_version": "6.17.0-35.35"
},
{
"binary_name": "linux-modules-6.17.0-35-generic",
"binary_version": "6.17.0-35.35"
},
{
"binary_name": "linux-modules-6.17.0-35-generic-64k",
"binary_version": "6.17.0-35.35"
},
{
"binary_name": "linux-modules-ipu6-6.17.0-35-generic",
"binary_version": "6.17.0-35.35"
},
{
"binary_name": "linux-modules-ipu7-6.17.0-35-generic",
"binary_version": "6.17.0-35.35"
},
{
"binary_name": "linux-modules-iwlwifi-6.17.0-35-generic",
"binary_version": "6.17.0-35.35"
},
{
"binary_name": "linux-modules-usbio-6.17.0-35-generic",
"binary_version": "6.17.0-35.35"
},
{
"binary_name": "linux-modules-vision-6.17.0-35-generic",
"binary_version": "6.17.0-35.35"
},
{
"binary_name": "linux-perf",
"binary_version": "6.17.0-35.35"
},
{
"binary_name": "linux-source-6.17.0",
"binary_version": "6.17.0-35.35"
},
{
"binary_name": "linux-tools-6.17.0-35",
"binary_version": "6.17.0-35.35"
},
{
"binary_name": "linux-tools-6.17.0-35-generic",
"binary_version": "6.17.0-35.35"
},
{
"binary_name": "linux-tools-6.17.0-35-generic-64k",
"binary_version": "6.17.0-35.35"
},
{
"binary_name": "linux-tools-common",
"binary_version": "6.17.0-35.35"
},
{
"binary_name": "linux-tools-host",
"binary_version": "6.17.0-35.35"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:25.10",
"name": "linux",
"purl": "pkg:deb/ubuntu/linux@6.17.0-35.35?arch=source\u0026distro=questing"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.17.0-35.35"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.14.0-15.15",
"6.15.0-3.3",
"6.15.0-4.4",
"6.16.0-13.13",
"6.16.0-16.16",
"6.17.0-3.3",
"6.17.0-4.4",
"6.17.0-5.5",
"6.17.0-6.6",
"6.17.0-7.7",
"6.17.0-8.8",
"6.17.0-12.12",
"6.17.0-14.14",
"6.17.0-19.19",
"6.17.0-20.20",
"6.17.0-22.22",
"6.17.0-23.23",
"6.17.0-29.29"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "linux-aws-cloud-tools-6.17.0-1017",
"binary_version": "6.17.0-1017.17"
},
{
"binary_name": "linux-aws-headers-6.17.0-1017",
"binary_version": "6.17.0-1017.17"
},
{
"binary_name": "linux-aws-tools-6.17.0-1017",
"binary_version": "6.17.0-1017.17"
},
{
"binary_name": "linux-buildinfo-6.17.0-1017-aws",
"binary_version": "6.17.0-1017.17"
},
{
"binary_name": "linux-buildinfo-6.17.0-1017-aws-64k",
"binary_version": "6.17.0-1017.17"
},
{
"binary_name": "linux-cloud-tools-6.17.0-1017-aws",
"binary_version": "6.17.0-1017.17"
},
{
"binary_name": "linux-cloud-tools-6.17.0-1017-aws-64k",
"binary_version": "6.17.0-1017.17"
},
{
"binary_name": "linux-headers-6.17.0-1017-aws",
"binary_version": "6.17.0-1017.17"
},
{
"binary_name": "linux-headers-6.17.0-1017-aws-64k",
"binary_version": "6.17.0-1017.17"
},
{
"binary_name": "linux-image-unsigned-6.17.0-1017-aws",
"binary_version": "6.17.0-1017.17"
},
{
"binary_name": "linux-image-unsigned-6.17.0-1017-aws-64k",
"binary_version": "6.17.0-1017.17"
},
{
"binary_name": "linux-modules-6.17.0-1017-aws",
"binary_version": "6.17.0-1017.17"
},
{
"binary_name": "linux-modules-6.17.0-1017-aws-64k",
"binary_version": "6.17.0-1017.17"
},
{
"binary_name": "linux-tools-6.17.0-1017-aws",
"binary_version": "6.17.0-1017.17"
},
{
"binary_name": "linux-tools-6.17.0-1017-aws-64k",
"binary_version": "6.17.0-1017.17"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:25.10",
"name": "linux-aws",
"purl": "pkg:deb/ubuntu/linux-aws@6.17.0-1017.17?arch=source\u0026distro=questing"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.17.0-1017.17"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.14.0-1005.5",
"6.14.0-1007.7+25.10.2",
"6.16.0-1001.1",
"6.17.0-1001.1",
"6.17.0-1002.2",
"6.17.0-1003.3",
"6.17.0-1004.4",
"6.17.0-1005.5",
"6.17.0-1006.6",
"6.17.0-1007.7",
"6.17.0-1009.9",
"6.17.0-1010.10",
"6.17.0-1012.12",
"6.17.0-1013.13",
"6.17.0-1015.15"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "linux-azure-cloud-tools-6.17.0-1017",
"binary_version": "6.17.0-1017.17"
},
{
"binary_name": "linux-azure-headers-6.17.0-1017",
"binary_version": "6.17.0-1017.17"
},
{
"binary_name": "linux-azure-tools-6.17.0-1017",
"binary_version": "6.17.0-1017.17"
},
{
"binary_name": "linux-buildinfo-6.17.0-1017-azure",
"binary_version": "6.17.0-1017.17"
},
{
"binary_name": "linux-cloud-tools-6.17.0-1017-azure",
"binary_version": "6.17.0-1017.17"
},
{
"binary_name": "linux-headers-6.17.0-1017-azure",
"binary_version": "6.17.0-1017.17"
},
{
"binary_name": "linux-image-unsigned-6.17.0-1017-azure",
"binary_version": "6.17.0-1017.17"
},
{
"binary_name": "linux-modules-6.17.0-1017-azure",
"binary_version": "6.17.0-1017.17"
},
{
"binary_name": "linux-tools-6.17.0-1017-azure",
"binary_version": "6.17.0-1017.17"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:25.10",
"name": "linux-azure",
"purl": "pkg:deb/ubuntu/linux-azure@6.17.0-1017.17?arch=source\u0026distro=questing"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.17.0-1017.17"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.14.0-1004.4",
"6.14.0-1007.7+25.10.1",
"6.16.0-1001.1",
"6.17.0-1002.2",
"6.17.0-1003.3",
"6.17.0-1004.4",
"6.17.0-1006.6",
"6.17.0-1007.7",
"6.17.0-1008.8",
"6.17.0-1010.10",
"6.17.0-1011.11",
"6.17.0-1013.13",
"6.17.0-1015.15"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-azure-fde-cloud-tools-6.17.0-1017",
"binary_version": "6.17.0-1017.17"
},
{
"binary_name": "linux-azure-fde-headers-6.17.0-1017",
"binary_version": "6.17.0-1017.17"
},
{
"binary_name": "linux-azure-fde-tools-6.17.0-1017",
"binary_version": "6.17.0-1017.17"
},
{
"binary_name": "linux-buildinfo-6.17.0-1017-azure-fde",
"binary_version": "6.17.0-1017.17"
},
{
"binary_name": "linux-cloud-tools-6.17.0-1017-azure-fde",
"binary_version": "6.17.0-1017.17"
},
{
"binary_name": "linux-headers-6.17.0-1017-azure-fde",
"binary_version": "6.17.0-1017.17"
},
{
"binary_name": "linux-image-unsigned-6.17.0-1017-azure-fde",
"binary_version": "6.17.0-1017.17"
},
{
"binary_name": "linux-modules-6.17.0-1017-azure-fde",
"binary_version": "6.17.0-1017.17"
},
{
"binary_name": "linux-tools-6.17.0-1017-azure-fde",
"binary_version": "6.17.0-1017.17"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:25.10",
"name": "linux-azure-fde",
"purl": "pkg:deb/ubuntu/linux-azure-fde@6.17.0-1017.17?arch=source\u0026distro=questing"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.17.0-1003.3",
"6.17.0-1004.4",
"6.17.0-1005.5",
"6.17.0-1007.7",
"6.17.0-1008.8",
"6.17.0-1010.10",
"6.17.0-1012.12",
"6.17.0-1014.14",
"6.17.0-1015.15",
"6.17.0-1017.17"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "linux-buildinfo-6.17.0-1018-gcp",
"binary_version": "6.17.0-1018.19"
},
{
"binary_name": "linux-buildinfo-6.17.0-1018-gcp-64k",
"binary_version": "6.17.0-1018.19"
},
{
"binary_name": "linux-gcp-headers-6.17.0-1018",
"binary_version": "6.17.0-1018.19"
},
{
"binary_name": "linux-gcp-tools-6.17.0-1018",
"binary_version": "6.17.0-1018.19"
},
{
"binary_name": "linux-headers-6.17.0-1018-gcp",
"binary_version": "6.17.0-1018.19"
},
{
"binary_name": "linux-headers-6.17.0-1018-gcp-64k",
"binary_version": "6.17.0-1018.19"
},
{
"binary_name": "linux-image-unsigned-6.17.0-1018-gcp",
"binary_version": "6.17.0-1018.19"
},
{
"binary_name": "linux-image-unsigned-6.17.0-1018-gcp-64k",
"binary_version": "6.17.0-1018.19"
},
{
"binary_name": "linux-modules-6.17.0-1018-gcp",
"binary_version": "6.17.0-1018.19"
},
{
"binary_name": "linux-modules-6.17.0-1018-gcp-64k",
"binary_version": "6.17.0-1018.19"
},
{
"binary_name": "linux-tools-6.17.0-1018-gcp",
"binary_version": "6.17.0-1018.19"
},
{
"binary_name": "linux-tools-6.17.0-1018-gcp-64k",
"binary_version": "6.17.0-1018.19"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:25.10",
"name": "linux-gcp",
"purl": "pkg:deb/ubuntu/linux-gcp@6.17.0-1018.19?arch=source\u0026distro=questing"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.17.0-1018.19"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.14.0-1006.6",
"6.14.0-1009.9+25.10.1",
"6.16.0-1001.1",
"6.17.0-1001.1",
"6.17.0-1002.2",
"6.17.0-1003.3",
"6.17.0-1004.4",
"6.17.0-1005.5",
"6.17.0-1006.6",
"6.17.0-1007.7",
"6.17.0-1009.9",
"6.17.0-1010.10",
"6.17.0-1012.12",
"6.17.0-1013.13",
"6.17.0-1016.17"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "linux-buildinfo-6.17.0-1016-oracle",
"binary_version": "6.17.0-1016.16"
},
{
"binary_name": "linux-buildinfo-6.17.0-1016-oracle-64k",
"binary_version": "6.17.0-1016.16"
},
{
"binary_name": "linux-headers-6.17.0-1016-oracle",
"binary_version": "6.17.0-1016.16"
},
{
"binary_name": "linux-headers-6.17.0-1016-oracle-64k",
"binary_version": "6.17.0-1016.16"
},
{
"binary_name": "linux-image-unsigned-6.17.0-1016-oracle",
"binary_version": "6.17.0-1016.16"
},
{
"binary_name": "linux-image-unsigned-6.17.0-1016-oracle-64k",
"binary_version": "6.17.0-1016.16"
},
{
"binary_name": "linux-modules-6.17.0-1016-oracle",
"binary_version": "6.17.0-1016.16"
},
{
"binary_name": "linux-modules-6.17.0-1016-oracle-64k",
"binary_version": "6.17.0-1016.16"
},
{
"binary_name": "linux-oracle-headers-6.17.0-1016",
"binary_version": "6.17.0-1016.16"
},
{
"binary_name": "linux-oracle-tools-6.17.0-1016",
"binary_version": "6.17.0-1016.16"
},
{
"binary_name": "linux-tools-6.17.0-1016-oracle",
"binary_version": "6.17.0-1016.16"
},
{
"binary_name": "linux-tools-6.17.0-1016-oracle-64k",
"binary_version": "6.17.0-1016.16"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:25.10",
"name": "linux-oracle",
"purl": "pkg:deb/ubuntu/linux-oracle@6.17.0-1016.16?arch=source\u0026distro=questing"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.17.0-1016.16"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.14.0-1005.5",
"6.14.0-1007.7+25.10.1",
"6.16.0-1001.1",
"6.17.0-1001.1",
"6.17.0-1002.2",
"6.17.0-1003.3",
"6.17.0-1005.5",
"6.17.0-1006.6",
"6.17.0-1007.7",
"6.17.0-1009.9",
"6.17.0-1010.10",
"6.17.0-1011.11",
"6.17.0-1012.12",
"6.17.0-1014.14"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "linux-buildinfo-6.17.0-1018-raspi",
"binary_version": "6.17.0-1018.18"
},
{
"binary_name": "linux-headers-6.17.0-1018-raspi",
"binary_version": "6.17.0-1018.18"
},
{
"binary_name": "linux-image-6.17.0-1018-raspi",
"binary_version": "6.17.0-1018.18"
},
{
"binary_name": "linux-modules-6.17.0-1018-raspi",
"binary_version": "6.17.0-1018.18"
},
{
"binary_name": "linux-raspi-headers-6.17.0-1018",
"binary_version": "6.17.0-1018.18"
},
{
"binary_name": "linux-raspi-tools-6.17.0-1018",
"binary_version": "6.17.0-1018.18"
},
{
"binary_name": "linux-tools-6.17.0-1018-raspi",
"binary_version": "6.17.0-1018.18"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:25.10",
"name": "linux-raspi",
"purl": "pkg:deb/ubuntu/linux-raspi@6.17.0-1018.18?arch=source\u0026distro=questing"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.17.0-1018.18"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.14.0-1005.5",
"6.17.0-1003.3",
"6.17.0-1004.4",
"6.17.0-1005.5",
"6.17.0-1006.6",
"6.17.0-1007.7",
"6.17.0-1008.8",
"6.17.0-1010.10",
"6.17.0-1011.11",
"6.17.0-1013.13",
"6.17.0-1014.14",
"6.17.0-1017.17"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "linux-buildinfo-6.17.0-1014-realtime",
"binary_version": "6.17.0-1014.16"
},
{
"binary_name": "linux-cloud-tools-6.17.0-1014-realtime",
"binary_version": "6.17.0-1014.16"
},
{
"binary_name": "linux-headers-6.17.0-1014-realtime",
"binary_version": "6.17.0-1014.16"
},
{
"binary_name": "linux-image-unsigned-6.17.0-1014-realtime",
"binary_version": "6.17.0-1014.16"
},
{
"binary_name": "linux-modules-6.17.0-1014-realtime",
"binary_version": "6.17.0-1014.16"
},
{
"binary_name": "linux-modules-iwlwifi-6.17.0-1014-realtime",
"binary_version": "6.17.0-1014.16"
},
{
"binary_name": "linux-realtime-cloud-tools-6.17.0-1014",
"binary_version": "6.17.0-1014.16"
},
{
"binary_name": "linux-realtime-headers-6.17.0-1014",
"binary_version": "6.17.0-1014.16"
},
{
"binary_name": "linux-realtime-tools-6.17.0-1014",
"binary_version": "6.17.0-1014.16"
},
{
"binary_name": "linux-tools-6.17.0-1014-realtime",
"binary_version": "6.17.0-1014.16"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:25.10",
"name": "linux-realtime",
"purl": "pkg:deb/ubuntu/linux-realtime@6.17.0-1014.16?arch=source\u0026distro=questing"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.17.0-1014.16"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.14.0-1002.2",
"6.17.0-1001.2",
"6.17.0-1002.3",
"6.17.0-1003.4",
"6.17.0-1004.5",
"6.17.0-1005.6",
"6.17.0-1006.7",
"6.17.0-1008.9",
"6.17.0-1009.10",
"6.17.0-1010.11",
"6.17.0-1011.12",
"6.17.0-1013.15"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "linux-buildinfo-6.17.0-35-generic",
"binary_version": "6.17.0-35.35.1"
},
{
"binary_name": "linux-headers-6.17.0-35-generic",
"binary_version": "6.17.0-35.35.1"
},
{
"binary_name": "linux-image-6.17.0-35-generic",
"binary_version": "6.17.0-35.35.1"
},
{
"binary_name": "linux-modules-6.17.0-35-generic",
"binary_version": "6.17.0-35.35.1"
},
{
"binary_name": "linux-riscv-headers-6.17.0-35",
"binary_version": "6.17.0-35.35.1"
},
{
"binary_name": "linux-riscv-tools-6.17.0-35",
"binary_version": "6.17.0-35.35.1"
},
{
"binary_name": "linux-tools-6.17.0-35-generic",
"binary_version": "6.17.0-35.35.1"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:25.10",
"name": "linux-riscv",
"purl": "pkg:deb/ubuntu/linux-riscv@6.17.0-35.35.1?arch=source\u0026distro=questing"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.17.0-35.35.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.14.0-13.13.2",
"6.17.0-4.4.1",
"6.17.0-5.5.1",
"6.17.0-6.6.1",
"6.17.0-7.7.1",
"6.17.0-8.8.1",
"6.17.0-12.12.1",
"6.17.0-14.14.1",
"6.17.0-19.19.1",
"6.17.0-20.20.1",
"6.17.0-22.22.1",
"6.17.0-23.23.1",
"6.17.0-29.29.1"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "bpftool",
"binary_version": "7.7.0+7.0.0-22.22"
},
{
"binary_name": "linux-buildinfo-7.0.0-22-generic",
"binary_version": "7.0.0-22.22"
},
{
"binary_name": "linux-buildinfo-7.0.0-22-generic-64k",
"binary_version": "7.0.0-22.22"
},
{
"binary_name": "linux-cloud-tools-7.0.0-22",
"binary_version": "7.0.0-22.22"
},
{
"binary_name": "linux-cloud-tools-7.0.0-22-generic",
"binary_version": "7.0.0-22.22"
},
{
"binary_name": "linux-cloud-tools-common",
"binary_version": "7.0.0-22.22"
},
{
"binary_name": "linux-headers-7.0.0-22",
"binary_version": "7.0.0-22.22"
},
{
"binary_name": "linux-headers-7.0.0-22-generic",
"binary_version": "7.0.0-22.22"
},
{
"binary_name": "linux-headers-7.0.0-22-generic-64k",
"binary_version": "7.0.0-22.22"
},
{
"binary_name": "linux-image-7.0.0-22-generic",
"binary_version": "7.0.0-22.22"
},
{
"binary_name": "linux-image-unsigned-7.0.0-22-generic",
"binary_version": "7.0.0-22.22"
},
{
"binary_name": "linux-image-unsigned-7.0.0-22-generic-64k",
"binary_version": "7.0.0-22.22"
},
{
"binary_name": "linux-lib-rust-7.0.0-22-generic",
"binary_version": "7.0.0-22.22"
},
{
"binary_name": "linux-modules-7.0.0-22-generic",
"binary_version": "7.0.0-22.22"
},
{
"binary_name": "linux-modules-7.0.0-22-generic-64k",
"binary_version": "7.0.0-22.22"
},
{
"binary_name": "linux-perf",
"binary_version": "7.0.0-22.22"
},
{
"binary_name": "linux-source-7.0.0",
"binary_version": "7.0.0-22.22"
},
{
"binary_name": "linux-tools-7.0.0-22",
"binary_version": "7.0.0-22.22"
},
{
"binary_name": "linux-tools-7.0.0-22-generic",
"binary_version": "7.0.0-22.22"
},
{
"binary_name": "linux-tools-7.0.0-22-generic-64k",
"binary_version": "7.0.0-22.22"
},
{
"binary_name": "linux-tools-common",
"binary_version": "7.0.0-22.22"
},
{
"binary_name": "linux-tools-host",
"binary_version": "7.0.0-22.22"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:26.04:LTS",
"name": "linux",
"purl": "pkg:deb/ubuntu/linux@7.0.0-22.22?arch=source\u0026distro=resolute"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "7.0.0-22.22"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.17.0-5.5",
"6.17.0-6.6",
"6.17.0-8.8",
"6.18.0-8.8",
"6.18.0-9.9",
"6.19.0-3.3",
"6.19.0-5.5",
"6.19.0-6.6",
"6.19.0-9.9",
"7.0.0-7.7",
"7.0.0-10.10",
"7.0.0-12.12",
"7.0.0-13.13",
"7.0.0-14.14",
"7.0.0-15.15"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "linux-aws-cloud-tools-7.0.0-1006",
"binary_version": "7.0.0-1006.6"
},
{
"binary_name": "linux-aws-headers-7.0.0-1006",
"binary_version": "7.0.0-1006.6"
},
{
"binary_name": "linux-aws-tools-7.0.0-1006",
"binary_version": "7.0.0-1006.6"
},
{
"binary_name": "linux-buildinfo-7.0.0-1006-aws",
"binary_version": "7.0.0-1006.6"
},
{
"binary_name": "linux-buildinfo-7.0.0-1006-aws-64k",
"binary_version": "7.0.0-1006.6"
},
{
"binary_name": "linux-cloud-tools-7.0.0-1006-aws",
"binary_version": "7.0.0-1006.6"
},
{
"binary_name": "linux-cloud-tools-7.0.0-1006-aws-64k",
"binary_version": "7.0.0-1006.6"
},
{
"binary_name": "linux-headers-7.0.0-1006-aws",
"binary_version": "7.0.0-1006.6"
},
{
"binary_name": "linux-headers-7.0.0-1006-aws-64k",
"binary_version": "7.0.0-1006.6"
},
{
"binary_name": "linux-image-unsigned-7.0.0-1006-aws",
"binary_version": "7.0.0-1006.6"
},
{
"binary_name": "linux-image-unsigned-7.0.0-1006-aws-64k",
"binary_version": "7.0.0-1006.6"
},
{
"binary_name": "linux-modules-7.0.0-1006-aws",
"binary_version": "7.0.0-1006.6"
},
{
"binary_name": "linux-modules-7.0.0-1006-aws-64k",
"binary_version": "7.0.0-1006.6"
},
{
"binary_name": "linux-tools-7.0.0-1006-aws",
"binary_version": "7.0.0-1006.6"
},
{
"binary_name": "linux-tools-7.0.0-1006-aws-64k",
"binary_version": "7.0.0-1006.6"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:26.04:LTS",
"name": "linux-aws",
"purl": "pkg:deb/ubuntu/linux-aws@7.0.0-1006.6?arch=source\u0026distro=resolute"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "7.0.0-1006.6"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.17.0-1002.2",
"6.17.0-1003.3",
"6.19.0-1002.2",
"6.19.0-1003.3",
"7.0.0-1001.1",
"7.0.0-1003.3",
"7.0.0-1004.4"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "linux-azure-cloud-tools-7.0.0-1007",
"binary_version": "7.0.0-1007.7"
},
{
"binary_name": "linux-azure-headers-7.0.0-1007",
"binary_version": "7.0.0-1007.7"
},
{
"binary_name": "linux-azure-tools-7.0.0-1007",
"binary_version": "7.0.0-1007.7"
},
{
"binary_name": "linux-buildinfo-7.0.0-1007-azure",
"binary_version": "7.0.0-1007.7"
},
{
"binary_name": "linux-cloud-tools-7.0.0-1007-azure",
"binary_version": "7.0.0-1007.7"
},
{
"binary_name": "linux-headers-7.0.0-1007-azure",
"binary_version": "7.0.0-1007.7"
},
{
"binary_name": "linux-image-unsigned-7.0.0-1007-azure",
"binary_version": "7.0.0-1007.7"
},
{
"binary_name": "linux-modules-7.0.0-1007-azure",
"binary_version": "7.0.0-1007.7"
},
{
"binary_name": "linux-tools-7.0.0-1007-azure",
"binary_version": "7.0.0-1007.7"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:26.04:LTS",
"name": "linux-azure",
"purl": "pkg:deb/ubuntu/linux-azure@7.0.0-1007.7?arch=source\u0026distro=resolute"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "7.0.0-1007.7"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.17.0-1003.3",
"6.17.0-1004.4",
"6.19.0-1001.1",
"6.19.0-1002.2",
"7.0.0-1001.1",
"7.0.0-1002.2",
"7.0.0-1003.3",
"7.0.0-1004.4"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-azure-fde-cloud-tools-7.0.0-1011",
"binary_version": "7.0.0-1011.11"
},
{
"binary_name": "linux-azure-fde-headers-7.0.0-1011",
"binary_version": "7.0.0-1011.11"
},
{
"binary_name": "linux-azure-fde-tools-7.0.0-1011",
"binary_version": "7.0.0-1011.11"
},
{
"binary_name": "linux-buildinfo-7.0.0-1011-azure-fde",
"binary_version": "7.0.0-1011.11"
},
{
"binary_name": "linux-cloud-tools-7.0.0-1011-azure-fde",
"binary_version": "7.0.0-1011.11"
},
{
"binary_name": "linux-headers-7.0.0-1011-azure-fde",
"binary_version": "7.0.0-1011.11"
},
{
"binary_name": "linux-image-unsigned-7.0.0-1011-azure-fde",
"binary_version": "7.0.0-1011.11"
},
{
"binary_name": "linux-modules-7.0.0-1011-azure-fde",
"binary_version": "7.0.0-1011.11"
},
{
"binary_name": "linux-tools-7.0.0-1011-azure-fde",
"binary_version": "7.0.0-1011.11"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:26.04:LTS",
"name": "linux-azure-fde",
"purl": "pkg:deb/ubuntu/linux-azure-fde@7.0.0-1011.11?arch=source\u0026distro=resolute"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"7.0.0-1003.3",
"7.0.0-1004.4",
"7.0.0-1006.6",
"7.0.0-1008.8",
"7.0.0-1009.9",
"7.0.0-1010.10",
"7.0.0-1011.11"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "linux-buildinfo-7.0.0-1005-gcp",
"binary_version": "7.0.0-1005.5"
},
{
"binary_name": "linux-buildinfo-7.0.0-1005-gcp-64k",
"binary_version": "7.0.0-1005.5"
},
{
"binary_name": "linux-gcp-headers-7.0.0-1005",
"binary_version": "7.0.0-1005.5"
},
{
"binary_name": "linux-gcp-tools-7.0.0-1005",
"binary_version": "7.0.0-1005.5"
},
{
"binary_name": "linux-headers-7.0.0-1005-gcp",
"binary_version": "7.0.0-1005.5"
},
{
"binary_name": "linux-headers-7.0.0-1005-gcp-64k",
"binary_version": "7.0.0-1005.5"
},
{
"binary_name": "linux-image-unsigned-7.0.0-1005-gcp",
"binary_version": "7.0.0-1005.5"
},
{
"binary_name": "linux-image-unsigned-7.0.0-1005-gcp-64k",
"binary_version": "7.0.0-1005.5"
},
{
"binary_name": "linux-modules-7.0.0-1005-gcp",
"binary_version": "7.0.0-1005.5"
},
{
"binary_name": "linux-modules-7.0.0-1005-gcp-64k",
"binary_version": "7.0.0-1005.5"
},
{
"binary_name": "linux-tools-7.0.0-1005-gcp",
"binary_version": "7.0.0-1005.5"
},
{
"binary_name": "linux-tools-7.0.0-1005-gcp-64k",
"binary_version": "7.0.0-1005.5"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:26.04:LTS",
"name": "linux-gcp",
"purl": "pkg:deb/ubuntu/linux-gcp@7.0.0-1005.5?arch=source\u0026distro=resolute"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "7.0.0-1005.5"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.17.0-1002.2",
"6.17.0-1003.3",
"6.19.0-1001.1",
"7.0.0-1001.1",
"7.0.0-1002.2",
"7.0.0-1003.3"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "linux-buildinfo-7.0.0-1007-ibm",
"binary_version": "7.0.0-1007.7"
},
{
"binary_name": "linux-headers-7.0.0-1007-ibm",
"binary_version": "7.0.0-1007.7"
},
{
"binary_name": "linux-ibm-headers-7.0.0-1007",
"binary_version": "7.0.0-1007.7"
},
{
"binary_name": "linux-ibm-tools-7.0.0-1007",
"binary_version": "7.0.0-1007.7"
},
{
"binary_name": "linux-image-unsigned-7.0.0-1007-ibm",
"binary_version": "7.0.0-1007.7"
},
{
"binary_name": "linux-modules-7.0.0-1007-ibm",
"binary_version": "7.0.0-1007.7"
},
{
"binary_name": "linux-tools-7.0.0-1007-ibm",
"binary_version": "7.0.0-1007.7"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:26.04:LTS",
"name": "linux-ibm",
"purl": "pkg:deb/ubuntu/linux-ibm@7.0.0-1007.7?arch=source\u0026distro=resolute"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "7.0.0-1007.7"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.19.0-1002.2",
"6.19.0-1003.3",
"7.0.0-1002.2",
"7.0.0-1004.4",
"7.0.0-1005.5"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "linux-buildinfo-7.0.0-1009-nvidia",
"binary_version": "7.0.0-1009.9"
},
{
"binary_name": "linux-buildinfo-7.0.0-1009-nvidia-64k",
"binary_version": "7.0.0-1009.9"
},
{
"binary_name": "linux-headers-7.0.0-1009-nvidia",
"binary_version": "7.0.0-1009.9"
},
{
"binary_name": "linux-headers-7.0.0-1009-nvidia-64k",
"binary_version": "7.0.0-1009.9"
},
{
"binary_name": "linux-image-unsigned-7.0.0-1009-nvidia",
"binary_version": "7.0.0-1009.9"
},
{
"binary_name": "linux-image-unsigned-7.0.0-1009-nvidia-64k",
"binary_version": "7.0.0-1009.9"
},
{
"binary_name": "linux-modules-7.0.0-1009-nvidia",
"binary_version": "7.0.0-1009.9"
},
{
"binary_name": "linux-modules-7.0.0-1009-nvidia-64k",
"binary_version": "7.0.0-1009.9"
},
{
"binary_name": "linux-nvidia-headers-7.0.0-1009",
"binary_version": "7.0.0-1009.9"
},
{
"binary_name": "linux-nvidia-tools-7.0.0-1009",
"binary_version": "7.0.0-1009.9"
},
{
"binary_name": "linux-tools-7.0.0-1009-nvidia",
"binary_version": "7.0.0-1009.9"
},
{
"binary_name": "linux-tools-7.0.0-1009-nvidia-64k",
"binary_version": "7.0.0-1009.9"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:26.04:LTS",
"name": "linux-nvidia",
"purl": "pkg:deb/ubuntu/linux-nvidia@7.0.0-1009.9?arch=source\u0026distro=resolute"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "7.0.0-1009.9"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"7.0.0-1005.5",
"7.0.0-1006.6"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "linux-buildinfo-7.0.0-1008-oem",
"binary_version": "7.0.0-1008.8"
},
{
"binary_name": "linux-headers-7.0.0-1008-oem",
"binary_version": "7.0.0-1008.8"
},
{
"binary_name": "linux-image-unsigned-7.0.0-1008-oem",
"binary_version": "7.0.0-1008.8"
},
{
"binary_name": "linux-modules-7.0.0-1008-oem",
"binary_version": "7.0.0-1008.8"
},
{
"binary_name": "linux-oem-7.0-headers-7.0.0-1008",
"binary_version": "7.0.0-1008.8"
},
{
"binary_name": "linux-oem-7.0-tools-7.0.0-1008",
"binary_version": "7.0.0-1008.8"
},
{
"binary_name": "linux-tools-7.0.0-1008-oem",
"binary_version": "7.0.0-1008.8"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:26.04:LTS",
"name": "linux-oem-7.0",
"purl": "pkg:deb/ubuntu/linux-oem-7.0@7.0.0-1008.8?arch=source\u0026distro=resolute"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "7.0.0-1008.8"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"7.0.0-1005.5"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "linux-buildinfo-7.0.0-1005-oracle",
"binary_version": "7.0.0-1005.5"
},
{
"binary_name": "linux-buildinfo-7.0.0-1005-oracle-64k",
"binary_version": "7.0.0-1005.5"
},
{
"binary_name": "linux-headers-7.0.0-1005-oracle",
"binary_version": "7.0.0-1005.5"
},
{
"binary_name": "linux-headers-7.0.0-1005-oracle-64k",
"binary_version": "7.0.0-1005.5"
},
{
"binary_name": "linux-image-unsigned-7.0.0-1005-oracle",
"binary_version": "7.0.0-1005.5"
},
{
"binary_name": "linux-image-unsigned-7.0.0-1005-oracle-64k",
"binary_version": "7.0.0-1005.5"
},
{
"binary_name": "linux-modules-7.0.0-1005-oracle",
"binary_version": "7.0.0-1005.5"
},
{
"binary_name": "linux-modules-7.0.0-1005-oracle-64k",
"binary_version": "7.0.0-1005.5"
},
{
"binary_name": "linux-oracle-headers-7.0.0-1005",
"binary_version": "7.0.0-1005.5"
},
{
"binary_name": "linux-oracle-tools-7.0.0-1005",
"binary_version": "7.0.0-1005.5"
},
{
"binary_name": "linux-tools-7.0.0-1005-oracle",
"binary_version": "7.0.0-1005.5"
},
{
"binary_name": "linux-tools-7.0.0-1005-oracle-64k",
"binary_version": "7.0.0-1005.5"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:26.04:LTS",
"name": "linux-oracle",
"purl": "pkg:deb/ubuntu/linux-oracle@7.0.0-1005.5?arch=source\u0026distro=resolute"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "7.0.0-1005.5"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.17.0-1002.2",
"6.17.0-1003.3",
"6.19.0-1001.1",
"6.19.0-1002.2",
"7.0.0-1001.1",
"7.0.0-1002.2",
"7.0.0-1003.3"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "linux-buildinfo-7.0.0-1011-raspi",
"binary_version": "7.0.0-1011.11"
},
{
"binary_name": "linux-buildinfo-7.0.0-1011-raspi-realtime",
"binary_version": "7.0.0-1011.11"
},
{
"binary_name": "linux-headers-7.0.0-1011-raspi",
"binary_version": "7.0.0-1011.11"
},
{
"binary_name": "linux-headers-7.0.0-1011-raspi-realtime",
"binary_version": "7.0.0-1011.11"
},
{
"binary_name": "linux-image-7.0.0-1011-raspi",
"binary_version": "7.0.0-1011.11"
},
{
"binary_name": "linux-image-7.0.0-1011-raspi-realtime",
"binary_version": "7.0.0-1011.11"
},
{
"binary_name": "linux-modules-7.0.0-1011-raspi",
"binary_version": "7.0.0-1011.11"
},
{
"binary_name": "linux-modules-7.0.0-1011-raspi-realtime",
"binary_version": "7.0.0-1011.11"
},
{
"binary_name": "linux-raspi-headers-7.0.0-1011",
"binary_version": "7.0.0-1011.11"
},
{
"binary_name": "linux-raspi-tools-7.0.0-1011",
"binary_version": "7.0.0-1011.11"
},
{
"binary_name": "linux-tools-7.0.0-1011-raspi",
"binary_version": "7.0.0-1011.11"
},
{
"binary_name": "linux-tools-7.0.0-1011-raspi-realtime",
"binary_version": "7.0.0-1011.11"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:26.04:LTS",
"name": "linux-raspi",
"purl": "pkg:deb/ubuntu/linux-raspi@7.0.0-1011.11?arch=source\u0026distro=resolute"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "7.0.0-1011.11"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.17.0-1003.3",
"7.0.0-1004.4",
"7.0.0-1008.8",
"7.0.0-1009.9",
"7.0.0-1010.10"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "linux-buildinfo-7.0.0-22-realtime",
"binary_version": "7.0.0-22.22.1"
},
{
"binary_name": "linux-buildinfo-7.0.0-22-realtime-64k",
"binary_version": "7.0.0-22.22.1"
},
{
"binary_name": "linux-cloud-tools-7.0.0-22-realtime",
"binary_version": "7.0.0-22.22.1"
},
{
"binary_name": "linux-headers-7.0.0-22-realtime",
"binary_version": "7.0.0-22.22.1"
},
{
"binary_name": "linux-headers-7.0.0-22-realtime-64k",
"binary_version": "7.0.0-22.22.1"
},
{
"binary_name": "linux-image-unsigned-7.0.0-22-realtime",
"binary_version": "7.0.0-22.22.1"
},
{
"binary_name": "linux-image-unsigned-7.0.0-22-realtime-64k",
"binary_version": "7.0.0-22.22.1"
},
{
"binary_name": "linux-modules-7.0.0-22-realtime",
"binary_version": "7.0.0-22.22.1"
},
{
"binary_name": "linux-modules-7.0.0-22-realtime-64k",
"binary_version": "7.0.0-22.22.1"
},
{
"binary_name": "linux-realtime-cloud-tools-7.0.0-22",
"binary_version": "7.0.0-22.22.1"
},
{
"binary_name": "linux-realtime-headers-7.0.0-22",
"binary_version": "7.0.0-22.22.1"
},
{
"binary_name": "linux-realtime-tools-7.0.0-22",
"binary_version": "7.0.0-22.22.1"
},
{
"binary_name": "linux-tools-7.0.0-22-realtime",
"binary_version": "7.0.0-22.22.1"
},
{
"binary_name": "linux-tools-7.0.0-22-realtime-64k",
"binary_version": "7.0.0-22.22.1"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:26.04:LTS",
"name": "linux-realtime",
"purl": "pkg:deb/ubuntu/linux-realtime@7.0.0-22.22.1?arch=source\u0026distro=resolute"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "7.0.0-22.22.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.17.0-1001.2",
"7.0.0-10.10.3",
"7.0.0-12.12.1",
"7.0.0-14.14.1"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "linux-buildinfo-7.0.0-22-generic",
"binary_version": "7.0.0-22.22.1"
},
{
"binary_name": "linux-headers-7.0.0-22-generic",
"binary_version": "7.0.0-22.22.1"
},
{
"binary_name": "linux-image-7.0.0-22-generic",
"binary_version": "7.0.0-22.22.1"
},
{
"binary_name": "linux-modules-7.0.0-22-generic",
"binary_version": "7.0.0-22.22.1"
},
{
"binary_name": "linux-riscv-headers-7.0.0-22",
"binary_version": "7.0.0-22.22.1"
},
{
"binary_name": "linux-riscv-tools-7.0.0-22",
"binary_version": "7.0.0-22.22.1"
},
{
"binary_name": "linux-tools-7.0.0-22-generic",
"binary_version": "7.0.0-22.22.1"
}
],
"priority_reason": "Trivial local privilege escalation"
},
"package": {
"ecosystem": "Ubuntu:26.04:LTS",
"name": "linux-riscv",
"purl": "pkg:deb/ubuntu/linux-riscv@7.0.0-22.22.1?arch=source\u0026distro=resolute"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "7.0.0-22.22.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.17.0-5.5.1",
"7.0.0-7.7.1",
"7.0.0-12.12.1",
"7.0.0-14.14.2"
]
}
],
"aliases": [],
"details": "In the Linux kernel, the following vulnerability has been resolved: net: skbuff: preserve shared-frag marker during coalescing skb_try_coalesce() can attach paged frags from @from to @to. If @from has SKBFL_SHARED_FRAG set, the resulting @to skb can contain the same externally-owned or page-cache-backed frags, but the shared-frag marker is currently lost. That breaks the invariant relied on by later in-place writers. In particular, ESP input checks skb_has_shared_frag() before deciding whether an uncloned nonlinear skb can skip skb_cow_data(). If TCP receive coalescing has moved shared frags into an unmarked skb, ESP can see skb_has_shared_frag() as false and decrypt in place over page-cache backed frags. Propagate SKBFL_SHARED_FRAG when skb_try_coalesce() transfers paged frags. The tailroom copy path does not need the marker because it copies bytes into @to\u0027s linear data rather than transferring frag descriptors.",
"id": "UBUNTU-CVE-2026-46300",
"modified": "2026-08-21T01:50:23Z",
"published": "2026-05-23T12:17:00Z",
"references": [
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2026-46300"
},
{
"type": "REPORT",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46300"
},
{
"type": "REPORT",
"url": "https://github.com/v12-security/pocs/tree/main/fragnesia"
},
{
"type": "REPORT",
"url": "https://www.openwall.com/lists/oss-security/2026/05/21/11"
},
{
"type": "REPORT",
"url": "https://git.kernel.org/pub/scm/linux/kernel/git/netdev/net.git/commit/?id=f84eca5817390257cef78013d0112481c503b4a3"
},
{
"type": "REPORT",
"url": "https://lore.kernel.org/all/agRfuVOeMI5pbHhY@v4bel/"
},
{
"type": "ADVISORY",
"url": "https://ubuntu.com/security/notices/USN-8370-1"
},
{
"type": "ADVISORY",
"url": "https://ubuntu.com/security/notices/USN-8371-1"
},
{
"type": "ADVISORY",
"url": "https://ubuntu.com/security/notices/USN-8373-1"
},
{
"type": "ADVISORY",
"url": "https://ubuntu.com/security/notices/USN-8374-1"
},
{
"type": "ADVISORY",
"url": "https://ubuntu.com/security/notices/USN-8388-1"
},
{
"type": "ADVISORY",
"url": "https://ubuntu.com/security/notices/USN-8393-1"
},
{
"type": "ADVISORY",
"url": "https://ubuntu.com/security/notices/USN-8426-1"
},
{
"type": "ADVISORY",
"url": "https://ubuntu.com/security/notices/USN-8426-2"
},
{
"type": "ADVISORY",
"url": "https://ubuntu.com/security/notices/USN-8440-1"
},
{
"type": "ADVISORY",
"url": "https://ubuntu.com/security/notices/USN-8388-2"
},
{
"type": "ADVISORY",
"url": "https://ubuntu.com/security/notices/USN-8461-1"
},
{
"type": "ADVISORY",
"url": "https://ubuntu.com/security/notices/USN-8462-1"
},
{
"type": "ADVISORY",
"url": "https://ubuntu.com/security/notices/USN-8489-1"
},
{
"type": "ADVISORY",
"url": "https://ubuntu.com/security/notices/USN-8497-1"
},
{
"type": "ADVISORY",
"url": "https://ubuntu.com/security/notices/USN-8499-1"
},
{
"type": "ADVISORY",
"url": "https://ubuntu.com/security/notices/USN-8528-1"
},
{
"type": "ADVISORY",
"url": "https://ubuntu.com/security/notices/USN-8569-1"
}
],
"related": [
"USN-8370-1",
"USN-8371-1",
"USN-8373-1",
"USN-8374-1",
"USN-8388-1",
"USN-8393-1",
"USN-8426-1",
"USN-8426-2",
"USN-8440-1",
"USN-8388-2",
"USN-8461-1",
"USN-8462-1",
"USN-8489-1",
"USN-8497-1",
"USN-8499-1",
"USN-8528-1",
"USN-8569-1"
],
"schema_version": "1.7.0",
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "high",
"type": "Ubuntu"
}
],
"upstream": [
"CVE-2026-46300"
]
}
WID-SEC-W-2026-1530
Vulnerability from csaf_certbund - Published: 2026-05-14 22:00 - Updated: 2026-08-06 22:00Summary
Linux Kernel (Fragnesia): Schwachstelle ermöglicht Erlangen von Administratorrechten
Severity
Hoch
Notes
Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.
Produktbeschreibung: Der Kernel stellt den Kern des Linux Betriebssystems dar.
Angriff: Ein lokaler Angreifer kann eine Schwachstelle in Linux Kernel ausnutzen, um Administratorrechte zu erlangen.
Betroffene Betriebssysteme: - Linux
Affected products
Known affected
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat OpenShift Container Platform <4.12.91
Red Hat / OpenShift
|
Container Platform <4.12.91 | ||
|
IBM QRadar SIEM <7.5.0 UP15 IF04
IBM / QRadar SIEM
|
<7.5.0 UP15 IF04 | ||
|
Red Hat Enterprise Linux
Red Hat / Enterprise Linux
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Debian Linux
Debian
|
cpe:/o:debian:debian_linux:-
|
— | |
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Red Hat OpenShift Container Platform <4.13.67
Red Hat / OpenShift
|
Container Platform <4.13.67 | ||
|
Open Source Linux Kernel
Open Source
|
cpe:/o:linux:linux_kernel:-
|
— | |
|
Nutanix Files
Nutanix
|
cpe:/a:nutanix:files:-
|
— | |
|
Red Hat OpenShift Container Platform <4.18.43
Red Hat / OpenShift
|
Container Platform <4.18.43 | ||
|
Siemens SIMATIC S7 1500 CPU
Siemens / SIMATIC S7
|
cpe:/h:siemens:simatic_s7:1500_cpu
|
1500 CPU | |
|
RESF Rocky Linux
RESF
|
cpe:/o:resf:rocky_linux:-
|
— | |
|
Fedora Linux
Fedora
|
cpe:/o:fedoraproject:fedora:-
|
— | |
|
Red Hat Enterprise Linux 9.2
Red Hat / Enterprise Linux
|
cpe:/o:redhat:enterprise_linux:9.2
|
9.2 | |
|
Nutanix Kubernetes Engine
Nutanix
|
cpe:/a:nutanix:kubernetes_engine:-
|
— | |
|
SUSE Linux
SUSE
|
cpe:/o:suse:suse_linux:-
|
— | |
|
Ubuntu Linux
Ubuntu
|
cpe:/o:canonical:ubuntu_linux:-
|
— | |
|
Red Hat OpenShift Container Platform
Red Hat / OpenShift
|
cpe:/a:redhat:openshift:container_platform
|
Container Platform | |
|
SUSE openSUSE
SUSE
|
cpe:/o:suse:opensuse:-
|
— | |
|
Red Hat OpenShift <4.21.19
Red Hat / OpenShift
|
<4.21.19 | ||
|
Amazon Linux 2
Amazon
|
cpe:/o:amazon:linux_2:-
|
— | |
|
Google Container-Optimized OS
Google
|
cpe:/o:google:container-optimized_os:-
|
— |
References
233 references
| URL | Category |
|---|---|
| https://wid.cert-bund.de/.well-known/csaf/white/2… | self |
| https://wid.cert-bund.de/portal/wid/securityadvis… | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=2477015 | external |
| https://github.com/v12-security/pocs/blob/main/fr… | external |
| https://access.redhat.com/security/cve/cve-2026-46300 | external |
| https://bodhi.fedoraproject.org/updates/FEDORA-20… | external |
| https://bodhi.fedoraproject.org/updates/FEDORA-20… | external |
| https://bodhi.fedoraproject.org/updates/FEDORA-20… | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://alas.aws.amazon.com/AL2/ALAS2-2026-3307.html | external |
| https://alas.aws.amazon.com/AL2/ALAS2KERNEL-5.10-… | external |
| https://alas.aws.amazon.com/AL2/ALAS2KERNEL-5.15-… | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://alas.aws.amazon.com/AL2/ALAS2KERNEL-5.4-2… | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://bodhi.fedoraproject.org/updates/FEDORA-20… | external |
| https://bodhi.fedoraproject.org/updates/FEDORA-20… | external |
| https://bodhi.fedoraproject.org/updates/FEDORA-20… | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://bodhi.fedoraproject.org/updates/FEDORA-20… | external |
| https://bodhi.fedoraproject.org/updates/FEDORA-20… | external |
| https://bodhi.fedoraproject.org/updates/FEDORA-20… | external |
| https://lists.opensuse.org/archives/list/security… | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://access.redhat.com/errata/RHSA-2026:19540 | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://access.redhat.com/errata/RHSA-2026:19521 | external |
| https://access.redhat.com/errata/RHSA-2026:19875 | external |
| https://access.redhat.com/errata/RHSA-2026:19568 | external |
| https://access.redhat.com/errata/RHSA-2026:19569 | external |
| https://access.redhat.com/errata/RHSA-2026:19705 | external |
| https://access.redhat.com/errata/RHSA-2026:19664 | external |
| https://access.redhat.com/errata/RHSA-2026:19711 | external |
| https://access.redhat.com/errata/RHSA-2026:19666 | external |
| https://access.redhat.com/errata/RHSA-2026:20051 | external |
| https://access.redhat.com/errata/RHSA-2026:20299 | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://access.redhat.com/errata/RHSA-2026:20054 | external |
| https://access.redhat.com/errata/RHSA-2026:20129 | external |
| https://access.redhat.com/errata/RHSA-2026:20130 | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://linux.oracle.com/errata/ELSA-2026-19666.html | external |
| https://security-tracker.debian.org/tracker/DSA-6295-1 | external |
| https://errata.build.resf.org/RLSA-2026:19666 | external |
| https://errata.build.resf.org/RLSA-2026:19664 | external |
| https://access.redhat.com/errata/RHSA-2026:20593 | external |
| https://alas.aws.amazon.com/AL2/ALAS2LIVEPATCH-20… | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://linux.oracle.com/errata/ELSA-2026-50287.html | external |
| https://linux.oracle.com/errata/ELSA-2026-50288.html | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| http://linux.oracle.com/errata/ELSA-2026-50288.html | external |
| http://linux.oracle.com/errata/ELSA-2026-50287.html | external |
| http://linux.oracle.com/errata/ELSA-2026-50286.html | external |
| https://linux.oracle.com/errata/ELSA-2026-50286.html | external |
| https://alas.aws.amazon.com/AL2/ALAS2LIVEPATCH-20… | external |
| https://alas.aws.amazon.com/AL2/ALAS2LIVEPATCH-20… | external |
| https://alas.aws.amazon.com/AL2/ALAS2LIVEPATCH-20… | external |
| https://alas.aws.amazon.com/AL2/ALAS2LIVEPATCH-20… | external |
| https://alas.aws.amazon.com/AL2/ALAS2LIVEPATCH-20… | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://download.nutanix.com/alerts/Security_Advi… | external |
| https://lists.debian.org/debian-security-announce… | external |
| https://access.redhat.com/errata/RHSA-2026:20087 | external |
| https://lists.debian.org/debian-lts-announce/2026… | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://lists.debian.org/debian-lts-announce/2026… | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://ubuntu.com/security/notices/USN-8373-1 | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://ubuntu.com/security/notices/USN-8370-1 | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://ubuntu.com/security/notices/USN-8374-1 | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://ubuntu.com/security/notices/USN-8371-1 | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://access.redhat.com/errata/RHSA-2026:21656 | external |
| https://access.redhat.com/errata/RHSA-2026:21702 | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://access.redhat.com/errata/RHSA-2026:23471 | external |
| https://access.redhat.com/errata/RHSA-2026:23468 | external |
| https://access.redhat.com/errata/RHSA-2026:23469 | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://docs.cloud.google.com/container-optimized… | external |
| http://linux.oracle.com/errata/ELSA-2026-50299.html | external |
| https://access.redhat.com/errata/RHSA-2026:23470 | external |
| http://linux.oracle.com/errata/ELSA-2026-50294.html | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://access.redhat.com/errata/RHSA-2026:21695 | external |
| https://access.redhat.com/errata/RHSA-2026:21690 | external |
| http://linux.oracle.com/errata/ELSA-2026-50293.html | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://lists.opensuse.org/archives/list/security… | external |
| https://linux.oracle.com/errata/ELSA-2026-50306.html | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://access.redhat.com/errata/RHSA-2026:24814 | external |
| https://access.redhat.com/errata/RHSA-2026:23245 | external |
| https://access.redhat.com/errata/RHSA-2026:23233 | external |
| https://access.redhat.com/errata/RHSA-2026:23240 | external |
| https://ubuntu.com/security/notices/USN-8426-1 | external |
| https://linux.oracle.com/errata/ELSA-2026-50318.html | external |
| https://www.ibm.com/support/pages/node/7276589 | external |
| https://access.redhat.com/errata/RHSA-2026:25044 | external |
| https://ubuntu.com/security/notices/USN-8388-1 | external |
| http://linux.oracle.com/errata/ELSA-2026-27789.html | external |
| https://linux.oracle.com/errata/ELSA-2026-24381.html | external |
| https://linux.oracle.com/errata/ELSA-2026-25217.html | external |
| https://access.redhat.com/errata/RHSA-2026:33486 | external |
| http://linux.oracle.com/errata/ELSA-2026-50353.html | external |
| https://linux.oracle.com/errata/ELSA-2026-19568.html | external |
| https://linux.oracle.com/errata/ELSA-2026-18587.html | external |
| https://linux.oracle.com/errata/ELSA-2026-21556.html | external |
| https://ubuntu.com/security/notices/USN-8489-1 | external |
| https://access.redhat.com/errata/RHSA-2026:28887 | external |
| https://ubuntu.com/security/notices/USN-8497-1 | external |
| https://ubuntu.com/security/notices/USN-8499-1 | external |
| https://ubuntu.com/security/notices/USN-8501-1 | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| https://lists.suse.com/pipermail/sle-security-upd… | external |
| http://linux.oracle.com/errata/ELSA-2026-50374.html | external |
| https://oss.oracle.com/pipermail/el-errata/2026-J… | external |
| http://linux.oracle.com/errata/ELSA-2026-50372.html | external |
| https://access.redhat.com/errata/RHSA-2026:34098 | external |
| https://ubuntu.com/security/notices/USN-8528-1 | external |
| https://ubuntu.com/security/notices/USN-8529-1 | external |
| https://ubuntu.com/security/notices/USN-8530-1 | external |
| https://linux.oracle.com/errata/ELSA-2026-50387.html | external |
| https://cert-portal.siemens.com/productcert/html/… | external |
| https://ubuntu.com/security/notices/USN-8548-1 | external |
| https://ubuntu.com/security/notices/USN-8569-1 | external |
| https://linux.oracle.com/errata/ELSA-2026-19569.html | external |
| https://ubuntu.com/security/notices/USN-8617-1 | external |
| http://linux.oracle.com/errata/ELSA-2026-500136.html | external |
{
"document": {
"aggregate_severity": {
"text": "hoch"
},
"category": "csaf_base",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "de-DE",
"notes": [
{
"category": "legal_disclaimer",
"text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
},
{
"category": "description",
"text": "Der Kernel stellt den Kern des Linux Betriebssystems dar.",
"title": "Produktbeschreibung"
},
{
"category": "summary",
"text": "Ein lokaler Angreifer kann eine Schwachstelle in Linux Kernel ausnutzen, um Administratorrechte zu erlangen.",
"title": "Angriff"
},
{
"category": "general",
"text": "- Linux",
"title": "Betroffene Betriebssysteme"
}
],
"publisher": {
"category": "other",
"contact_details": "csaf-provider@cert-bund.de",
"name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
"namespace": "https://www.bsi.bund.de"
},
"references": [
{
"category": "self",
"summary": "WID-SEC-W-2026-1530 - CSAF Version",
"url": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-1530.json"
},
{
"category": "self",
"summary": "WID-SEC-2026-1530 - Portal Version",
"url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1530"
},
{
"category": "external",
"summary": "Red Hat Bugzilla Bug 2477015 vom 2026-05-13",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477015"
},
{
"category": "external",
"summary": "PoC CVE-2026-46300 vom 2026-05-13",
"url": "https://github.com/v12-security/pocs/blob/main/fragnesia%2FREADME.md"
},
{
"category": "external",
"summary": "Red Hat Security Advisory vom 2026-05-13",
"url": "https://access.redhat.com/security/cve/cve-2026-46300"
},
{
"category": "external",
"summary": "Fedora Security Advisory FEDORA-2026-CCCB681166 vom 2026-05-13",
"url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-cccb681166"
},
{
"category": "external",
"summary": "Fedora Security Advisory FEDORA-2026-EC1C523FDB vom 2026-05-14",
"url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-ec1c523fdb"
},
{
"category": "external",
"summary": "Fedora Security Advisory FEDORA-2026-4462EFC052 vom 2026-05-13",
"url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4462efc052"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:1909-1 vom 2026-05-18",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-May/026084.html"
},
{
"category": "external",
"summary": "Amazon Linux Security Advisory ALAS2-2026-3307 vom 2026-05-15",
"url": "https://alas.aws.amazon.com/AL2/ALAS2-2026-3307.html"
},
{
"category": "external",
"summary": "Amazon Linux Security Advisory ALAS2KERNEL-5.10-2026-119 vom 2026-05-15",
"url": "https://alas.aws.amazon.com/AL2/ALAS2KERNEL-5.10-2026-119.html"
},
{
"category": "external",
"summary": "Amazon Linux Security Advisory ALAS2KERNEL-5.15-2026-103 vom 2026-05-15",
"url": "https://alas.aws.amazon.com/AL2/ALAS2KERNEL-5.15-2026-103.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:1904-1 vom 2026-05-18",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-May/026087.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:1907-1 vom 2026-05-18",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-May/026086.html"
},
{
"category": "external",
"summary": "Amazon Linux Security Advisory ALAS2KERNEL-5.4-2026-122 vom 2026-05-15",
"url": "https://alas.aws.amazon.com/AL2/ALAS2KERNEL-5.4-2026-122.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:1899-1 vom 2026-05-18",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-May/026090.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:1900-1 vom 2026-05-18",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-May/026089.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:1908-1 vom 2026-05-18",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-May/026085.html"
},
{
"category": "external",
"summary": "Fedora Security Advisory FEDORA-2026-2AEB7D033A vom 2026-05-15",
"url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-2aeb7d033a"
},
{
"category": "external",
"summary": "Fedora Security Advisory FEDORA-2026-03BE3DC34B vom 2026-05-15",
"url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-03be3dc34b"
},
{
"category": "external",
"summary": "Fedora Security Advisory FEDORA-2026-8B4A8D18D2 vom 2026-05-15",
"url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-8b4a8d18d2"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:1959-1 vom 2026-05-18",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-May/026125.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:1978-1 vom 2026-05-18",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-May/026140.html"
},
{
"category": "external",
"summary": "Fedora Security Advisory FEDORA-2026-DB3618772B vom 2026-05-19",
"url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-db3618772b"
},
{
"category": "external",
"summary": "Fedora Security Advisory FEDORA-2026-88A1FB9418 vom 2026-05-19",
"url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-88a1fb9418"
},
{
"category": "external",
"summary": "Fedora Security Advisory FEDORA-2026-346FBEC5D5 vom 2026-05-19",
"url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-346fbec5d5"
},
{
"category": "external",
"summary": "openSUSE Security Update OPENSUSE-SU-2026:20758-1 vom 2026-05-19",
"url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/45QOQVK3DW34MAWEZNOXGCLMB4HJZVDJ/"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:21673-1 vom 2026-05-19",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-May/026162.html"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:19540 vom 2026-05-20",
"url": "https://access.redhat.com/errata/RHSA-2026:19540"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:21645-1 vom 2026-05-19",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-May/026190.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:21646-1 vom 2026-05-19",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-May/026189.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:21684-1 vom 2026-05-19",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-May/026154.html"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:19521 vom 2026-05-20",
"url": "https://access.redhat.com/errata/RHSA-2026:19521"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:19875 vom 2026-05-21",
"url": "https://access.redhat.com/errata/RHSA-2026:19875"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:19568 vom 2026-05-21",
"url": "https://access.redhat.com/errata/RHSA-2026:19568"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:19569 vom 2026-05-20",
"url": "https://access.redhat.com/errata/RHSA-2026:19569"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:19705 vom 2026-05-20",
"url": "https://access.redhat.com/errata/RHSA-2026:19705"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:19664 vom 2026-05-20",
"url": "https://access.redhat.com/errata/RHSA-2026:19664"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:19711 vom 2026-05-20",
"url": "https://access.redhat.com/errata/RHSA-2026:19711"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:19666 vom 2026-05-20",
"url": "https://access.redhat.com/errata/RHSA-2026:19666"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:20051 vom 2026-05-21",
"url": "https://access.redhat.com/errata/RHSA-2026:20051"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:20299 vom 2026-05-21",
"url": "https://access.redhat.com/errata/RHSA-2026:20299"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:21718-1 vom 2026-05-21",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-May/026207.html"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:20054 vom 2026-05-21",
"url": "https://access.redhat.com/errata/RHSA-2026:20054"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:20129 vom 2026-05-21",
"url": "https://access.redhat.com/errata/RHSA-2026:20129"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:20130 vom 2026-05-21",
"url": "https://access.redhat.com/errata/RHSA-2026:20130"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:21689-1 vom 2026-05-21",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-May/026236.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:21690-1 vom 2026-05-21",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-May/026235.html"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2026-19666 vom 2026-05-25",
"url": "https://linux.oracle.com/errata/ELSA-2026-19666.html"
},
{
"category": "external",
"summary": "Debian Security Advisory DSA-6295 vom 2026-05-24",
"url": "https://security-tracker.debian.org/tracker/DSA-6295-1"
},
{
"category": "external",
"summary": "Rocky Linux Security Advisory RLSA-2026:19666 vom 2026-05-23",
"url": "https://errata.build.resf.org/RLSA-2026:19666"
},
{
"category": "external",
"summary": "Rocky Linux Security Advisory RLSA-2026:19664 vom 2026-05-23",
"url": "https://errata.build.resf.org/RLSA-2026:19664"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:20593 vom 2026-05-26",
"url": "https://access.redhat.com/errata/RHSA-2026:20593"
},
{
"category": "external",
"summary": "Amazon Linux Security Advisory ALAS2LIVEPATCH-2026-299 vom 2026-05-26",
"url": "https://alas.aws.amazon.com/AL2/ALAS2LIVEPATCH-2026-299.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:21749-1 vom 2026-05-26",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-May/026308.html"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2026-50287 vom 2026-05-26",
"url": "https://linux.oracle.com/errata/ELSA-2026-50287.html"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2026-50288 vom 2026-05-26",
"url": "https://linux.oracle.com/errata/ELSA-2026-50288.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:21779-1 vom 2026-05-26",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-May/026284.html"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2026-50288 vom 2026-05-26",
"url": "http://linux.oracle.com/errata/ELSA-2026-50288.html"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2026-50287 vom 2026-05-26",
"url": "http://linux.oracle.com/errata/ELSA-2026-50287.html"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2026-50286 vom 2026-05-26",
"url": "http://linux.oracle.com/errata/ELSA-2026-50286.html"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2026-50286 vom 2026-05-26",
"url": "https://linux.oracle.com/errata/ELSA-2026-50286.html"
},
{
"category": "external",
"summary": "Amazon Linux Security Advisory ALAS2LIVEPATCH-2026-295 vom 2026-05-26",
"url": "https://alas.aws.amazon.com/AL2/ALAS2LIVEPATCH-2026-295.html"
},
{
"category": "external",
"summary": "Amazon Linux Security Advisory ALAS2LIVEPATCH-2026-296 vom 2026-05-26",
"url": "https://alas.aws.amazon.com/AL2/ALAS2LIVEPATCH-2026-296.html"
},
{
"category": "external",
"summary": "Amazon Linux Security Advisory ALAS2LIVEPATCH-2026-297 vom 2026-05-26",
"url": "https://alas.aws.amazon.com/AL2/ALAS2LIVEPATCH-2026-297.html"
},
{
"category": "external",
"summary": "Amazon Linux Security Advisory ALAS2LIVEPATCH-2026-298 vom 2026-05-26",
"url": "https://alas.aws.amazon.com/AL2/ALAS2LIVEPATCH-2026-298.html"
},
{
"category": "external",
"summary": "Amazon Linux Security Advisory ALAS2LIVEPATCH-2026-300 vom 2026-05-26",
"url": "https://alas.aws.amazon.com/AL2/ALAS2LIVEPATCH-2026-300.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:21782-1 vom 2026-05-27",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-May/026357.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:21800-1 vom 2026-05-27",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-May/026344.html"
},
{
"category": "external",
"summary": "Nutanix Security Advisory SA-48 vom 2026-05-27",
"url": "https://download.nutanix.com/alerts/Security_Advisory_0048.pdf"
},
{
"category": "external",
"summary": "Debian Security Advisory DSA-6306 vom 2026-05-28",
"url": "https://lists.debian.org/debian-security-announce/2026/msg00217.html"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:20087 vom 2026-05-29",
"url": "https://access.redhat.com/errata/RHSA-2026:20087"
},
{
"category": "external",
"summary": "Debian Security Advisory DLA-4606 vom 2026-05-29",
"url": "https://lists.debian.org/debian-lts-announce/2026/05/msg00051.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:2111-1 vom 2026-05-30",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-May/026397.html"
},
{
"category": "external",
"summary": "Debian Security Advisory DLA-4607 vom 2026-05-29",
"url": "https://lists.debian.org/debian-lts-announce/2026/05/msg00052.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:2158-1 vom 2026-06-01",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/026403.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:2133-1 vom 2026-06-01",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/026409.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:2153-1 vom 2026-06-01",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/026404.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:2148-1 vom 2026-06-01",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/026407.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:2176-1 vom 2026-06-01",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/026398.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:2134-1 vom 2026-06-01",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/026411.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:2178-1 vom 2026-06-01",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/026399.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:2168-1 vom 2026-06-01",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/026400.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:2131-1 vom 2026-06-01",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/026410.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:2172-1 vom 2026-06-01",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/026401.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:2159-1 vom 2026-06-01",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/026402.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:2137-1 vom 2026-06-01",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/026408.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:2149-1 vom 2026-06-01",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/026405.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:2141-1 vom 2026-06-01",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/026406.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:2207-1 vom 2026-06-01",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/026438.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:2191-1 vom 2026-06-01",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/026412.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:2189-1 vom 2026-06-01",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/026413.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:2181-1 vom 2026-06-01",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/026414.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:2200-1 vom 2026-06-01",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/026421.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:2199-1 vom 2026-06-01",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/026420.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:2214-1 vom 2026-06-02",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/026440.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:21939-1 vom 2026-06-02",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/026455.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:21924-1 vom 2026-06-02",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/026470.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:21891-1 vom 2026-06-02",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/026501.html"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-8373-1 vom 2026-06-02",
"url": "https://ubuntu.com/security/notices/USN-8373-1"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:21894-1 vom 2026-06-02",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/026498.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:21923-1 vom 2026-06-02",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/026471.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:21889-1 vom 2026-06-02",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/026503.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:21940-1 vom 2026-06-02",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/026454.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:21922-1 vom 2026-06-02",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/026472.html"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-8370-1 vom 2026-06-02",
"url": "https://ubuntu.com/security/notices/USN-8370-1"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:21942-1 vom 2026-06-02",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/026452.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:21921-1 vom 2026-06-02",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/026473.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:21886-1 vom 2026-06-02",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/026506.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:21910-1 vom 2026-06-02",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/026483.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:21893-1 vom 2026-06-02",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/026499.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:21926-1 vom 2026-06-02",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/026468.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:21938-1 vom 2026-06-02",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/026456.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:21925-1 vom 2026-06-02",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/026469.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:21890-1 vom 2026-06-02",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/026502.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:21929-1 vom 2026-06-02",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/026465.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:21934-1 vom 2026-06-02",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/026460.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:21935-1 vom 2026-06-02",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/026459.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:21928-1 vom 2026-06-02",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/026466.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:21896-1 vom 2026-06-02",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/026496.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:21936-1 vom 2026-06-02",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/026458.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:21927-1 vom 2026-06-02",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/026467.html"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-8374-1 vom 2026-06-02",
"url": "https://ubuntu.com/security/notices/USN-8374-1"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:21937-1 vom 2026-06-02",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/026457.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:21908-1 vom 2026-06-02",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/026485.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:21941-1 vom 2026-06-02",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/026453.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:21907-1 vom 2026-06-02",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/026486.html"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-8371-1 vom 2026-06-02",
"url": "https://ubuntu.com/security/notices/USN-8371-1"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:21906-1 vom 2026-06-02",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/026487.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:21887-1 vom 2026-06-02",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/026505.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:21931-1 vom 2026-06-02",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/026463.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:21905-1 vom 2026-06-02",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/026488.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:21904-1 vom 2026-06-02",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/026489.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:21892-1 vom 2026-06-02",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/026500.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:21903-1 vom 2026-06-02",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/026490.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:21895-1 vom 2026-06-02",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/026497.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:21902-1 vom 2026-06-02",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/026491.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:21909-1 vom 2026-06-02",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/026484.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:21901-1 vom 2026-06-02",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/026492.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:21888-1 vom 2026-06-02",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/026504.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:21900-1 vom 2026-06-02",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/026493.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:21932-1 vom 2026-06-02",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/026462.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:21930-1 vom 2026-06-02",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/026464.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:21933-1 vom 2026-06-02",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/026461.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:21973-1 vom 2026-06-03",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/026539.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:2238-1 vom 2026-06-03",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/026559.html"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:21656 vom 2026-06-03",
"url": "https://access.redhat.com/errata/RHSA-2026:21656"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:21702 vom 2026-06-03",
"url": "https://access.redhat.com/errata/RHSA-2026:21702"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:21974-1 vom 2026-06-03",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/026538.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:21970-1 vom 2026-06-03",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/026542.html"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:23471 vom 2026-06-04",
"url": "https://access.redhat.com/errata/RHSA-2026:23471"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:23468 vom 2026-06-04",
"url": "https://access.redhat.com/errata/RHSA-2026:23468"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:23469 vom 2026-06-04",
"url": "https://access.redhat.com/errata/RHSA-2026:23469"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:21961-1 vom 2026-06-03",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/026548.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:21979-1 vom 2026-06-03",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/026535.html"
},
{
"category": "external",
"summary": "Container-Optimized OS release notes vom 2026-06-05",
"url": "https://docs.cloud.google.com/container-optimized-os/docs/release-notes#June_04_2026"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2026-50299 vom 2026-06-04",
"url": "http://linux.oracle.com/errata/ELSA-2026-50299.html"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:23470 vom 2026-06-04",
"url": "https://access.redhat.com/errata/RHSA-2026:23470"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2026-50294 vom 2026-06-04",
"url": "http://linux.oracle.com/errata/ELSA-2026-50294.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:21953-1 vom 2026-06-03",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/026556.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:21963-1 vom 2026-06-03",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/026546.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:21960-1 vom 2026-06-03",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/026549.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:21972-1 vom 2026-06-03",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/026540.html"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:21695 vom 2026-06-04",
"url": "https://access.redhat.com/errata/RHSA-2026:21695"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:21690 vom 2026-06-04",
"url": "https://access.redhat.com/errata/RHSA-2026:21690"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2026-50293 vom 2026-06-04",
"url": "http://linux.oracle.com/errata/ELSA-2026-50293.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:21969-1 vom 2026-06-03",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/026543.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:21959-1 vom 2026-06-03",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/026550.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:21957-1 vom 2026-06-03",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/026552.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:21956-1 vom 2026-06-03",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/026553.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:21962-1 vom 2026-06-03",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/026547.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:21968-1 vom 2026-06-03",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/026544.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:21982-1 vom 2026-06-03",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/026532.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:21983-1 vom 2026-06-03",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/026531.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:21971-1 vom 2026-06-03",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/026541.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:21958-1 vom 2026-06-03",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/026551.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:22030-1 vom 2026-06-08",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/026622.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:22033-1 vom 2026-06-08",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/026619.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:22038-1 vom 2026-06-08",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/026614.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:22031-1 vom 2026-06-08",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/026621.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:22039-1 vom 2026-06-08",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/026613.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:22032-1 vom 2026-06-08",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/026620.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:22029-1 vom 2026-06-08",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/026623.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:22035-1 vom 2026-06-08",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/026617.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:22040-1 vom 2026-06-08",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/026612.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:22034-1 vom 2026-06-08",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/026618.html"
},
{
"category": "external",
"summary": "openSUSE Security Update OPENSUSE-SU-2026:10954-1 vom 2026-06-08",
"url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/SCML3YIY7XP4A5LIAG3VJHEVKSFGU6XF/"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2026-50306 vom 2026-06-09",
"url": "https://linux.oracle.com/errata/ELSA-2026-50306.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:22042-1 vom 2026-06-09",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/026664.html"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:24814 vom 2026-06-09",
"url": "https://access.redhat.com/errata/RHSA-2026:24814"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:23245 vom 2026-06-10",
"url": "https://access.redhat.com/errata/RHSA-2026:23245"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:23233 vom 2026-06-11",
"url": "https://access.redhat.com/errata/RHSA-2026:23233"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:23240 vom 2026-06-11",
"url": "https://access.redhat.com/errata/RHSA-2026:23240"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-8426-1 vom 2026-06-12",
"url": "https://ubuntu.com/security/notices/USN-8426-1"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2026-50318 vom 2026-06-16",
"url": "https://linux.oracle.com/errata/ELSA-2026-50318.html"
},
{
"category": "external",
"summary": "IBM Security Bulletin 7276589 vom 2026-06-16",
"url": "https://www.ibm.com/support/pages/node/7276589"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:25044 vom 2026-06-18",
"url": "https://access.redhat.com/errata/RHSA-2026:25044"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-8388-1 vom 2026-06-23",
"url": "https://ubuntu.com/security/notices/USN-8388-1"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2026-27789 vom 2026-06-27",
"url": "http://linux.oracle.com/errata/ELSA-2026-27789.html"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2026-24381 vom 2026-06-30",
"url": "https://linux.oracle.com/errata/ELSA-2026-24381.html"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2026-25217 vom 2026-06-30",
"url": "https://linux.oracle.com/errata/ELSA-2026-25217.html"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:33486 vom 2026-06-30",
"url": "https://access.redhat.com/errata/RHSA-2026:33486"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2026-50353 vom 2026-07-01",
"url": "http://linux.oracle.com/errata/ELSA-2026-50353.html"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2026-19568 vom 2026-07-01",
"url": "https://linux.oracle.com/errata/ELSA-2026-19568.html"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2026-18587 vom 2026-07-01",
"url": "https://linux.oracle.com/errata/ELSA-2026-18587.html"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2026-21556 vom 2026-07-01",
"url": "https://linux.oracle.com/errata/ELSA-2026-21556.html"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-8489-1 vom 2026-07-01",
"url": "https://ubuntu.com/security/notices/USN-8489-1"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:28887 vom 2026-07-01",
"url": "https://access.redhat.com/errata/RHSA-2026:28887"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-8497-1 vom 2026-07-02",
"url": "https://ubuntu.com/security/notices/USN-8497-1"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-8499-1 vom 2026-07-02",
"url": "https://ubuntu.com/security/notices/USN-8499-1"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-8501-1 vom 2026-07-02",
"url": "https://ubuntu.com/security/notices/USN-8501-1"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:22425-1 vom 2026-07-03",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-July/027180.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:22411-1 vom 2026-07-03",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-July/027193.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:22402-1 vom 2026-07-03",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-July/027202.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:22412-1 vom 2026-07-03",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-July/027192.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:22462-1 vom 2026-07-03",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-July/027247.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:22489-1 vom 2026-07-03",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-July/027221.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:22474-1 vom 2026-07-03",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-July/027235.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:22488-1 vom 2026-07-03",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-July/027222.html"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2026-50374 vom 2026-07-07",
"url": "http://linux.oracle.com/errata/ELSA-2026-50374.html"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2026-50373 vom 2026-07-07",
"url": "https://oss.oracle.com/pipermail/el-errata/2026-July/020886.html"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2026-50372 vom 2026-07-07",
"url": "http://linux.oracle.com/errata/ELSA-2026-50372.html"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:34098 vom 2026-07-09",
"url": "https://access.redhat.com/errata/RHSA-2026:34098"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-8528-1 vom 2026-07-10",
"url": "https://ubuntu.com/security/notices/USN-8528-1"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-8529-1 vom 2026-07-10",
"url": "https://ubuntu.com/security/notices/USN-8529-1"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-8530-1 vom 2026-07-10",
"url": "https://ubuntu.com/security/notices/USN-8530-1"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2026-50387 vom 2026-07-10",
"url": "https://linux.oracle.com/errata/ELSA-2026-50387.html"
},
{
"category": "external",
"summary": "Siemens Security Advisory SSA-019113 vom 2026-07-14",
"url": "https://cert-portal.siemens.com/productcert/html/ssa-019113.html"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-8548-1 vom 2026-07-15",
"url": "https://ubuntu.com/security/notices/USN-8548-1"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-8569-1 vom 2026-07-20",
"url": "https://ubuntu.com/security/notices/USN-8569-1"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2026-19569 vom 2026-07-23",
"url": "https://linux.oracle.com/errata/ELSA-2026-19569.html"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-8617-1 vom 2026-07-28",
"url": "https://ubuntu.com/security/notices/USN-8617-1"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2026-500136 vom 2026-08-07",
"url": "http://linux.oracle.com/errata/ELSA-2026-500136.html"
}
],
"source_lang": "en-US",
"title": "Linux Kernel (Fragnesia): Schwachstelle erm\u00f6glicht Erlangen von Administratorrechten",
"tracking": {
"current_release_date": "2026-08-06T22:00:00.000+00:00",
"generator": {
"date": "2026-08-07T08:57:12.927+00:00",
"engine": {
"name": "BSI-WID",
"version": "1.6.0"
}
},
"id": "WID-SEC-W-2026-1530",
"initial_release_date": "2026-05-14T22:00:00.000+00:00",
"revision_history": [
{
"date": "2026-05-14T22:00:00.000+00:00",
"number": "1",
"summary": "Initiale Fassung"
},
{
"date": "2026-05-17T22:00:00.000+00:00",
"number": "2",
"summary": "Neue Updates von SUSE und Amazon aufgenommen"
},
{
"date": "2026-05-18T22:00:00.000+00:00",
"number": "3",
"summary": "Neue Updates von SUSE und Fedora aufgenommen"
},
{
"date": "2026-05-19T22:00:00.000+00:00",
"number": "4",
"summary": "Neue Updates von SUSE und Red Hat aufgenommen"
},
{
"date": "2026-05-20T22:00:00.000+00:00",
"number": "5",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2026-05-21T22:00:00.000+00:00",
"number": "6",
"summary": "Neue Updates von Red Hat und SUSE aufgenommen"
},
{
"date": "2026-05-25T22:00:00.000+00:00",
"number": "7",
"summary": "Neue Updates von Oracle Linux, Debian, European Union Vulnerability Database, Rocky Enterprise Software Foundation und Red Hat aufgenommen"
},
{
"date": "2026-05-26T22:00:00.000+00:00",
"number": "8",
"summary": "Neue Updates von Amazon, SUSE und Oracle Linux aufgenommen"
},
{
"date": "2026-05-27T22:00:00.000+00:00",
"number": "9",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2026-05-28T22:00:00.000+00:00",
"number": "10",
"summary": "Neue Updates von Debian aufgenommen"
},
{
"date": "2026-05-31T22:00:00.000+00:00",
"number": "11",
"summary": "Neue Updates von Red Hat, Debian und SUSE aufgenommen"
},
{
"date": "2026-06-01T22:00:00.000+00:00",
"number": "12",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2026-06-02T22:00:00.000+00:00",
"number": "13",
"summary": "Neue Updates von SUSE und Ubuntu aufgenommen"
},
{
"date": "2026-06-04T22:00:00.000+00:00",
"number": "14",
"summary": "Neue Updates von SUSE, Red Hat und Oracle Linux aufgenommen"
},
{
"date": "2026-06-08T22:00:00.000+00:00",
"number": "15",
"summary": "Neue Updates von SUSE und openSUSE aufgenommen"
},
{
"date": "2026-06-09T22:00:00.000+00:00",
"number": "16",
"summary": "Neue Updates von Oracle Linux, SUSE und Red Hat aufgenommen"
},
{
"date": "2026-06-10T22:00:00.000+00:00",
"number": "17",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2026-06-11T22:00:00.000+00:00",
"number": "18",
"summary": "Neue Updates von Ubuntu aufgenommen"
},
{
"date": "2026-06-15T22:00:00.000+00:00",
"number": "19",
"summary": "Neue Updates von Oracle Linux aufgenommen"
},
{
"date": "2026-06-16T22:00:00.000+00:00",
"number": "20",
"summary": "Neue Updates von IBM aufgenommen"
},
{
"date": "2026-06-18T22:00:00.000+00:00",
"number": "21",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2026-06-22T22:00:00.000+00:00",
"number": "22",
"summary": "Neue Updates von Ubuntu aufgenommen"
},
{
"date": "2026-06-28T22:00:00.000+00:00",
"number": "23",
"summary": "Neue Updates von Oracle Linux aufgenommen"
},
{
"date": "2026-06-29T22:00:00.000+00:00",
"number": "24",
"summary": "Neue Updates von Oracle Linux aufgenommen"
},
{
"date": "2026-06-30T22:00:00.000+00:00",
"number": "25",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2026-07-01T22:00:00.000+00:00",
"number": "26",
"summary": "Neue Updates von Ubuntu und Red Hat aufgenommen"
},
{
"date": "2026-07-02T22:00:00.000+00:00",
"number": "27",
"summary": "Neue Updates von Ubuntu aufgenommen"
},
{
"date": "2026-07-05T22:00:00.000+00:00",
"number": "28",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2026-07-06T22:00:00.000+00:00",
"number": "29",
"summary": "Neue Updates von Oracle Linux aufgenommen"
},
{
"date": "2026-07-08T22:00:00.000+00:00",
"number": "30",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2026-07-09T22:00:00.000+00:00",
"number": "31",
"summary": "Neue Updates von Ubuntu aufgenommen"
},
{
"date": "2026-07-12T22:00:00.000+00:00",
"number": "32",
"summary": "Neue Updates von European Union Vulnerability Database und Oracle Linux aufgenommen"
},
{
"date": "2026-07-13T22:00:00.000+00:00",
"number": "33",
"summary": "Neue Updates von Siemens aufgenommen"
},
{
"date": "2026-07-15T22:00:00.000+00:00",
"number": "34",
"summary": "Neue Updates von Ubuntu aufgenommen"
},
{
"date": "2026-07-20T22:00:00.000+00:00",
"number": "35",
"summary": "Neue Updates von Ubuntu aufgenommen"
},
{
"date": "2026-07-23T22:00:00.000+00:00",
"number": "36",
"summary": "Neue Updates von Oracle Linux aufgenommen"
},
{
"date": "2026-07-27T22:00:00.000+00:00",
"number": "37",
"summary": "Neue Updates von Ubuntu aufgenommen"
},
{
"date": "2026-08-06T22:00:00.000+00:00",
"number": "38",
"summary": "Neue Updates von Oracle Linux aufgenommen"
}
],
"status": "final",
"version": "38"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Amazon Linux 2",
"product": {
"name": "Amazon Linux 2",
"product_id": "398363",
"product_identification_helper": {
"cpe": "cpe:/o:amazon:linux_2:-"
}
}
}
],
"category": "vendor",
"name": "Amazon"
},
{
"branches": [
{
"category": "product_name",
"name": "Debian Linux",
"product": {
"name": "Debian Linux",
"product_id": "T054615",
"product_identification_helper": {
"cpe": "cpe:/o:debian:debian_linux:-"
}
}
}
],
"category": "vendor",
"name": "Debian"
},
{
"branches": [
{
"category": "product_name",
"name": "Fedora Linux",
"product": {
"name": "Fedora Linux",
"product_id": "74185",
"product_identification_helper": {
"cpe": "cpe:/o:fedoraproject:fedora:-"
}
}
}
],
"category": "vendor",
"name": "Fedora"
},
{
"branches": [
{
"category": "product_name",
"name": "Google Container-Optimized OS",
"product": {
"name": "Google Container-Optimized OS",
"product_id": "1607324",
"product_identification_helper": {
"cpe": "cpe:/o:google:container-optimized_os:-"
}
}
}
],
"category": "vendor",
"name": "Google"
},
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c7.5.0 UP15 IF04",
"product": {
"name": "IBM QRadar SIEM \u003c7.5.0 UP15 IF04",
"product_id": "T055485"
}
},
{
"category": "product_version",
"name": "7.5.0 UP15 IF04",
"product": {
"name": "IBM QRadar SIEM 7.5.0 UP15 IF04",
"product_id": "T055485-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:qradar_siem:7.5.0_up15_if04"
}
}
}
],
"category": "product_name",
"name": "QRadar SIEM"
}
],
"category": "vendor",
"name": "IBM"
},
{
"branches": [
{
"category": "product_name",
"name": "Nutanix Files",
"product": {
"name": "Nutanix Files",
"product_id": "T054405",
"product_identification_helper": {
"cpe": "cpe:/a:nutanix:files:-"
}
}
},
{
"category": "product_name",
"name": "Nutanix Kubernetes Engine",
"product": {
"name": "Nutanix Kubernetes Engine",
"product_id": "T054763",
"product_identification_helper": {
"cpe": "cpe:/a:nutanix:kubernetes_engine:-"
}
}
}
],
"category": "vendor",
"name": "Nutanix"
},
{
"branches": [
{
"category": "product_name",
"name": "Open Source Linux Kernel",
"product": {
"name": "Open Source Linux Kernel",
"product_id": "T054119",
"product_identification_helper": {
"cpe": "cpe:/o:linux:linux_kernel:-"
}
}
}
],
"category": "vendor",
"name": "Open Source"
},
{
"branches": [
{
"category": "product_name",
"name": "Oracle Linux",
"product": {
"name": "Oracle Linux",
"product_id": "T054637",
"product_identification_helper": {
"cpe": "cpe:/o:oracle:linux:-"
}
}
}
],
"category": "vendor",
"name": "Oracle"
},
{
"branches": [
{
"category": "product_name",
"name": "RESF Rocky Linux",
"product": {
"name": "RESF Rocky Linux",
"product_id": "T054555",
"product_identification_helper": {
"cpe": "cpe:/o:resf:rocky_linux:-"
}
}
}
],
"category": "vendor",
"name": "RESF"
},
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux",
"product": {
"name": "Red Hat Enterprise Linux",
"product_id": "67646",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:-"
}
}
},
{
"category": "product_version",
"name": "9.2",
"product": {
"name": "Red Hat Enterprise Linux 9.2",
"product_id": "T054697",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:9.2"
}
}
}
],
"category": "product_name",
"name": "Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "Container Platform",
"product": {
"name": "Red Hat OpenShift Container Platform",
"product_id": "T025202",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openshift:container_platform"
}
}
},
{
"category": "product_version_range",
"name": "Container Platform \u003c4.18.43",
"product": {
"name": "Red Hat OpenShift Container Platform \u003c4.18.43",
"product_id": "T054988"
}
},
{
"category": "product_version",
"name": "Container Platform 4.18.43",
"product": {
"name": "Red Hat OpenShift Container Platform 4.18.43",
"product_id": "T054988-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openshift:container_platform__4.18.43"
}
}
},
{
"category": "product_version_range",
"name": "Container Platform \u003c4.13.67",
"product": {
"name": "Red Hat OpenShift Container Platform \u003c4.13.67",
"product_id": "T054989"
}
},
{
"category": "product_version",
"name": "Container Platform 4.13.67",
"product": {
"name": "Red Hat OpenShift Container Platform 4.13.67",
"product_id": "T054989-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openshift:container_platform__4.13.67"
}
}
},
{
"category": "product_version_range",
"name": "Container Platform \u003c4.12.91",
"product": {
"name": "Red Hat OpenShift Container Platform \u003c4.12.91",
"product_id": "T054990"
}
},
{
"category": "product_version",
"name": "Container Platform 4.12.91",
"product": {
"name": "Red Hat OpenShift Container Platform 4.12.91",
"product_id": "T054990-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openshift:container_platform__4.12.91"
}
}
},
{
"category": "product_version_range",
"name": "\u003c4.21.19",
"product": {
"name": "Red Hat OpenShift \u003c4.21.19",
"product_id": "T055270"
}
},
{
"category": "product_version",
"name": "4.21.19",
"product": {
"name": "Red Hat OpenShift 4.21.19",
"product_id": "T055270-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openshift:4.21.19"
}
}
}
],
"category": "product_name",
"name": "OpenShift"
}
],
"category": "vendor",
"name": "Red Hat"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux",
"product": {
"name": "SUSE Linux",
"product_id": "T002207",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse_linux:-"
}
}
},
{
"category": "product_name",
"name": "SUSE openSUSE",
"product": {
"name": "SUSE openSUSE",
"product_id": "T027843",
"product_identification_helper": {
"cpe": "cpe:/o:suse:opensuse:-"
}
}
}
],
"category": "vendor",
"name": "SUSE"
},
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "1500 CPU",
"product": {
"name": "Siemens SIMATIC S7 1500 CPU",
"product_id": "T053842",
"product_identification_helper": {
"cpe": "cpe:/h:siemens:simatic_s7:1500_cpu"
}
}
}
],
"category": "product_name",
"name": "SIMATIC S7"
}
],
"category": "vendor",
"name": "Siemens"
},
{
"branches": [
{
"category": "product_name",
"name": "Ubuntu Linux",
"product": {
"name": "Ubuntu Linux",
"product_id": "T000126",
"product_identification_helper": {
"cpe": "cpe:/o:canonical:ubuntu_linux:-"
}
}
}
],
"category": "vendor",
"name": "Ubuntu"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-46300",
"product_status": {
"known_affected": [
"T054990",
"T055485",
"67646",
"T054615",
"T054637",
"T054989",
"T054119",
"T054405",
"T054988",
"T053842",
"T054555",
"74185",
"T054697",
"T054763",
"T002207",
"T000126",
"T025202",
"T027843",
"T055270",
"398363",
"1607324"
]
},
"release_date": "2026-05-14T22:00:00.000+00:00",
"title": "CVE-2026-46300"
}
]
}
Loading…
Trend slope:
-
(linear fit over daily sighting counts)
Show additional events:
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Loading…
Loading…