UBUNTU-CVE-2026-72469 (CVE-2026-72469)

Vulnerability from osv_ubuntu – Published: 2026-08-15 06:22 – Updated: 2026-10-17 09:51 – Source website
VLAI
Details

In the Linux kernel, the following vulnerability has been resolved: xprtrdma: Fix ep kref imbalance on ADDR_CHANGE rpcrdma_cm_event_handler() falls through to the disconnected: label on RDMA_CM_EVENT_ADDR_CHANGE and calls rpcrdma_ep_put() with no matching get when the event arrives before RDMA_CM_EVENT_ESTABLISHED. The kref then underflows during connect teardown and rpcrdma_xprt_disconnect() operates on a freed ep. Reference counts across a normal connection lifecycle: rpcrdma_ep_create() kref_init ->1 rpcrdma_xprt_connect() ep_get ->2 (before post_recvs) RDMA_CM_EVENT_ESTABLISHED ep_get ->3 RDMA_CM_EVENT_DISCONNECTED ep_put ->2 rpcrdma_xprt_drain() ep_put ->1 rpcrdma_xprt_disconnect() tail ep_put ->0 (ep_destroy) The connect-time get in rpcrdma_xprt_connect(), taken just before rpcrdma_post_recvs() "while there are outstanding Receives," is balanced by rpcrdma_xprt_drain. ADDR_CHANGE before ESTABLISHED has no get to consume, so its put drops the count to 1 and the drain put then frees the ep while rpcrdma_xprt_disconnect() still holds a pointer to it. Fix by dispatching on the prior re_connect_status via xchg(): for prev == 0 (pre-ESTABLISHED) wake the connect waiter and return with no put; for prev == 1 call rpcrdma_force_disconnect() and return. The case-1 arm relies on the subsequent RDMA_CM_EVENT_DISCONNECTED event -- reliably delivered when rdma_disconnect() is called on a still-connected cm_id -- to balance the ESTABLISHED get; rpcrdma_xprt_drain() continues to balance only that connect-time get. Any other prior value means teardown is already in flight.


{
  "affected": [
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "block-modules-4.15.0-23-generic-di",
            "binary_version": "4.15.0-23.25~16.04.1"
          },
          {
            "binary_name": "block-modules-4.15.0-23-generic-lpae-di",
            "binary_version": "4.15.0-23.25~16.04.1"
          },
          {
            "binary_name": "crypto-modules-4.15.0-23-generic-di",
            "binary_version": "4.15.0-23.25~16.04.1"
          },
          {
            "binary_name": "crypto-modules-4.15.0-23-generic-lpae-di",
            "binary_version": "4.15.0-23.25~16.04.1"
          },
          {
            "binary_name": "dasd-extra-modules-4.15.0-23-generic-di",
            "binary_version": "4.15.0-23.25~16.04.1"
          },
          {
            "binary_name": "dasd-modules-4.15.0-23-generic-di",
            "binary_version": "4.15.0-23.25~16.04.1"
          },
          {
            "binary_name": "fat-modules-4.15.0-23-generic-di",
            "binary_version": "4.15.0-23.25~16.04.1"
          },
          {
            "binary_name": "fat-modules-4.15.0-23-generic-lpae-di",
            "binary_version": "4.15.0-23.25~16.04.1"
          },
          {
            "binary_name": "fb-modules-4.15.0-23-generic-di",
            "binary_version": "4.15.0-23.25~16.04.1"
          },
          {
            "binary_name": "firewire-core-modules-4.15.0-23-generic-di",
            "binary_version": "4.15.0-23.25~16.04.1"
          },
          {
            "binary_name": "floppy-modules-4.15.0-23-generic-di",
            "binary_version": "4.15.0-23.25~16.04.1"
          },
          {
            "binary_name": "fs-core-modules-4.15.0-23-generic-di",
            "binary_version": "4.15.0-23.25~16.04.1"
          },
          {
            "binary_name": "fs-core-modules-4.15.0-23-generic-lpae-di",
            "binary_version": "4.15.0-23.25~16.04.1"
          },
          {
            "binary_name": "fs-secondary-modules-4.15.0-23-generic-di",
            "binary_version": "4.15.0-23.25~16.04.1"
          },
          {
            "binary_name": "fs-secondary-modules-4.15.0-23-generic-lpae-di",
            "binary_version": "4.15.0-23.25~16.04.1"
          },
          {
            "binary_name": "input-modules-4.15.0-23-generic-di",
            "binary_version": "4.15.0-23.25~16.04.1"
          },
          {
            "binary_name": "input-modules-4.15.0-23-generic-lpae-di",
            "binary_version": "4.15.0-23.25~16.04.1"
          },
          {
            "binary_name": "ipmi-modules-4.15.0-23-generic-di",
            "binary_version": "4.15.0-23.25~16.04.1"
          },
          {
            "binary_name": "ipmi-modules-4.15.0-23-generic-lpae-di",
            "binary_version": "4.15.0-23.25~16.04.1"
          },
          {
            "binary_name": "irda-modules-4.15.0-23-generic-di",
            "binary_version": "4.15.0-23.25~16.04.1"
          },
          {
            "binary_name": "irda-modules-4.15.0-23-generic-lpae-di",
            "binary_version": "4.15.0-23.25~16.04.1"
          },
          {
            "binary_name": "kernel-image-4.15.0-23-generic-di",
            "binary_version": "4.15.0-23.25~16.04.1"
          },
          {
            "binary_name": "kernel-image-4.15.0-23-generic-lpae-di",
            "binary_version": "4.15.0-23.25~16.04.1"
          },
          {
            "binary_name": "linux-cloud-tools-4.15.0-23-generic",
            "binary_version": "4.15.0-23.25~16.04.1"
          },
          {
            "binary_name": "linux-cloud-tools-4.15.0-23-lowlatency",
            "binary_version": "4.15.0-23.25~16.04.1"
          },
          {
            "binary_name": "linux-headers-4.15.0-23",
            "binary_version": "4.15.0-23.25~16.04.1"
          },
          {
            "binary_name": "linux-headers-4.15.0-23-generic",
            "binary_version": "4.15.0-23.25~16.04.1"
          },
          {
            "binary_name": "linux-headers-4.15.0-23-generic-lpae",
            "binary_version": "4.15.0-23.25~16.04.1"
          },
          {
            "binary_name": "linux-headers-4.15.0-23-lowlatency",
            "binary_version": "4.15.0-23.25~16.04.1"
          },
          {
            "binary_name": "linux-hwe-edge-cloud-tools-4.15.0-23",
            "binary_version": "4.15.0-23.25~16.04.1"
          },
          {
            "binary_name": "linux-hwe-edge-tools-4.15.0-23",
            "binary_version": "4.15.0-23.25~16.04.1"
          },
          {
            "binary_name": "linux-hwe-edge-udebs-generic",
            "binary_version": "4.15.0-23.25~16.04.1"
          },
          {
            "binary_name": "linux-hwe-edge-udebs-generic-lpae",
            "binary_version": "4.15.0-23.25~16.04.1"
          },
          {
            "binary_name": "linux-image-4.15.0-23-generic",
            "binary_version": "4.15.0-23.25~16.04.1"
          },
          {
            "binary_name": "linux-image-4.15.0-23-generic-lpae",
            "binary_version": "4.15.0-23.25~16.04.1"
          },
          {
            "binary_name": "linux-image-4.15.0-23-lowlatency",
            "binary_version": "4.15.0-23.25~16.04.1"
          },
          {
            "binary_name": "linux-image-unsigned-4.15.0-23-generic",
            "binary_version": "4.15.0-23.25~16.04.1"
          },
          {
            "binary_name": "linux-image-unsigned-4.15.0-23-lowlatency",
            "binary_version": "4.15.0-23.25~16.04.1"
          },
          {
            "binary_name": "linux-modules-4.15.0-23-generic",
            "binary_version": "4.15.0-23.25~16.04.1"
          },
          {
            "binary_name": "linux-modules-4.15.0-23-generic-lpae",
            "binary_version": "4.15.0-23.25~16.04.1"
          },
          {
            "binary_name": "linux-modules-4.15.0-23-lowlatency",
            "binary_version": "4.15.0-23.25~16.04.1"
          },
          {
            "binary_name": "linux-modules-extra-4.15.0-23-generic",
            "binary_version": "4.15.0-23.25~16.04.1"
          },
          {
            "binary_name": "linux-source-4.15.0",
            "binary_version": "4.15.0-23.25~16.04.1"
          },
          {
            "binary_name": "linux-tools-4.15.0-23-generic",
            "binary_version": "4.15.0-23.25~16.04.1"
          },
          {
            "binary_name": "linux-tools-4.15.0-23-generic-lpae",
            "binary_version": "4.15.0-23.25~16.04.1"
          },
          {
            "binary_name": "linux-tools-4.15.0-23-lowlatency",
            "binary_version": "4.15.0-23.25~16.04.1"
          },
          {
            "binary_name": "md-modules-4.15.0-23-generic-di",
            "binary_version": "4.15.0-23.25~16.04.1"
          },
          {
            "binary_name": "md-modules-4.15.0-23-generic-lpae-di",
            "binary_version": "4.15.0-23.25~16.04.1"
          },
          {
            "binary_name": "message-modules-4.15.0-23-generic-di",
            "binary_version": "4.15.0-23.25~16.04.1"
          },
          {
            "binary_name": "mouse-modules-4.15.0-23-generic-di",
            "binary_version": "4.15.0-23.25~16.04.1"
          },
          {
            "binary_name": "mouse-modules-4.15.0-23-generic-lpae-di",
            "binary_version": "4.15.0-23.25~16.04.1"
          },
          {
            "binary_name": "multipath-modules-4.15.0-23-generic-di",
            "binary_version": "4.15.0-23.25~16.04.1"
          },
          {
            "binary_name": "multipath-modules-4.15.0-23-generic-lpae-di",
            "binary_version": "4.15.0-23.25~16.04.1"
          },
          {
            "binary_name": "nfs-modules-4.15.0-23-generic-di",
            "binary_version": "4.15.0-23.25~16.04.1"
          },
          {
            "binary_name": "nfs-modules-4.15.0-23-generic-lpae-di",
            "binary_version": "4.15.0-23.25~16.04.1"
          },
          {
            "binary_name": "nic-modules-4.15.0-23-generic-di",
            "binary_version": "4.15.0-23.25~16.04.1"
          },
          {
            "binary_name": "nic-modules-4.15.0-23-generic-lpae-di",
            "binary_version": "4.15.0-23.25~16.04.1"
          },
          {
            "binary_name": "nic-pcmcia-modules-4.15.0-23-generic-di",
            "binary_version": "4.15.0-23.25~16.04.1"
          },
          {
            "binary_name": "nic-shared-modules-4.15.0-23-generic-di",
            "binary_version": "4.15.0-23.25~16.04.1"
          },
          {
            "binary_name": "nic-shared-modules-4.15.0-23-generic-lpae-di",
            "binary_version": "4.15.0-23.25~16.04.1"
          },
          {
            "binary_name": "nic-usb-modules-4.15.0-23-generic-di",
            "binary_version": "4.15.0-23.25~16.04.1"
          },
          {
            "binary_name": "nic-usb-modules-4.15.0-23-generic-lpae-di",
            "binary_version": "4.15.0-23.25~16.04.1"
          },
          {
            "binary_name": "parport-modules-4.15.0-23-generic-di",
            "binary_version": "4.15.0-23.25~16.04.1"
          },
          {
            "binary_name": "parport-modules-4.15.0-23-generic-lpae-di",
            "binary_version": "4.15.0-23.25~16.04.1"
          },
          {
            "binary_name": "pata-modules-4.15.0-23-generic-di",
            "binary_version": "4.15.0-23.25~16.04.1"
          },
          {
            "binary_name": "pcmcia-modules-4.15.0-23-generic-di",
            "binary_version": "4.15.0-23.25~16.04.1"
          },
          {
            "binary_name": "pcmcia-storage-modules-4.15.0-23-generic-di",
            "binary_version": "4.15.0-23.25~16.04.1"
          },
          {
            "binary_name": "plip-modules-4.15.0-23-generic-di",
            "binary_version": "4.15.0-23.25~16.04.1"
          },
          {
            "binary_name": "plip-modules-4.15.0-23-generic-lpae-di",
            "binary_version": "4.15.0-23.25~16.04.1"
          },
          {
            "binary_name": "ppp-modules-4.15.0-23-generic-di",
            "binary_version": "4.15.0-23.25~16.04.1"
          },
          {
            "binary_name": "ppp-modules-4.15.0-23-generic-lpae-di",
            "binary_version": "4.15.0-23.25~16.04.1"
          },
          {
            "binary_name": "sata-modules-4.15.0-23-generic-di",
            "binary_version": "4.15.0-23.25~16.04.1"
          },
          {
            "binary_name": "sata-modules-4.15.0-23-generic-lpae-di",
            "binary_version": "4.15.0-23.25~16.04.1"
          },
          {
            "binary_name": "scsi-modules-4.15.0-23-generic-di",
            "binary_version": "4.15.0-23.25~16.04.1"
          },
          {
            "binary_name": "scsi-modules-4.15.0-23-generic-lpae-di",
            "binary_version": "4.15.0-23.25~16.04.1"
          },
          {
            "binary_name": "serial-modules-4.15.0-23-generic-di",
            "binary_version": "4.15.0-23.25~16.04.1"
          },
          {
            "binary_name": "storage-core-modules-4.15.0-23-generic-di",
            "binary_version": "4.15.0-23.25~16.04.1"
          },
          {
            "binary_name": "storage-core-modules-4.15.0-23-generic-lpae-di",
            "binary_version": "4.15.0-23.25~16.04.1"
          },
          {
            "binary_name": "usb-modules-4.15.0-23-generic-di",
            "binary_version": "4.15.0-23.25~16.04.1"
          },
          {
            "binary_name": "usb-modules-4.15.0-23-generic-lpae-di",
            "binary_version": "4.15.0-23.25~16.04.1"
          },
          {
            "binary_name": "virtio-modules-4.15.0-23-generic-di",
            "binary_version": "4.15.0-23.25~16.04.1"
          },
          {
            "binary_name": "vlan-modules-4.15.0-23-generic-di",
            "binary_version": "4.15.0-23.25~16.04.1"
          },
          {
            "binary_name": "vlan-modules-4.15.0-23-generic-lpae-di",
            "binary_version": "4.15.0-23.25~16.04.1"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:16.04:LTS",
        "name": "linux-hwe-edge",
        "purl": "pkg:deb/ubuntu/linux-hwe-edge@4.15.0-23.25~16.04.1?arch=source\u0026distro=xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "4.8.0-28.30~16.04.1",
        "4.8.0-30.32~16.04.1",
        "4.8.0-32.34~16.04.1",
        "4.8.0-34.36~16.04.1",
        "4.10.0-14.16~16.04.1",
        "4.10.0-19.21~16.04.1",
        "4.10.0-20.22~16.04.1",
        "4.10.0-21.23~16.04.1",
        "4.10.0-22.24~16.04.1",
        "4.10.0-24.28~16.04.1",
        "4.10.0-26.30~16.04.1",
        "4.11.0-13.19~16.04.1",
        "4.11.0-14.20~16.04.1",
        "4.13.0-16.19~16.04.3",
        "4.13.0-17.20~16.04.1",
        "4.13.0-19.22~16.04.1",
        "4.13.0-21.24~16.04.1",
        "4.13.0-25.29~16.04.2",
        "4.15.0-13.14~16.04.1",
        "4.15.0-15.16~16.04.1",
        "4.15.0-20.21~16.04.1",
        "4.15.0-22.24~16.04.1",
        "4.15.0-23.25~16.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-aws-5.0-tools-5.0.0-1027",
            "binary_version": "5.0.0-1027.30"
          },
          {
            "binary_name": "linux-aws-headers-5.0.0-1027",
            "binary_version": "5.0.0-1027.30"
          },
          {
            "binary_name": "linux-buildinfo-5.0.0-1027-aws",
            "binary_version": "5.0.0-1027.30"
          },
          {
            "binary_name": "linux-cloud-tools-5.0.0-1027-aws",
            "binary_version": "5.0.0-1027.30"
          },
          {
            "binary_name": "linux-headers-5.0.0-1027-aws",
            "binary_version": "5.0.0-1027.30"
          },
          {
            "binary_name": "linux-image-5.0.0-1027-aws",
            "binary_version": "5.0.0-1027.30"
          },
          {
            "binary_name": "linux-modules-5.0.0-1027-aws",
            "binary_version": "5.0.0-1027.30"
          },
          {
            "binary_name": "linux-modules-extra-5.0.0-1027-aws",
            "binary_version": "5.0.0-1027.30"
          },
          {
            "binary_name": "linux-tools-5.0.0-1027-aws",
            "binary_version": "5.0.0-1027.30"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:18.04:LTS",
        "name": "linux-aws-5.0",
        "purl": "pkg:deb/ubuntu/linux-aws-5.0@5.0.0-1027.30?arch=source\u0026distro=bionic"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "5.0.0-1021.24~18.04.1",
        "5.0.0-1022.25~18.04.1",
        "5.0.0-1023.26~18.04.1",
        "5.0.0-1024.27~18.04.1",
        "5.0.0-1025.28",
        "5.0.0-1027.30"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-aws-5.3-cloud-tools-5.3.0-1035",
            "binary_version": "5.3.0-1035.37"
          },
          {
            "binary_name": "linux-aws-5.3-headers-5.3.0-1035",
            "binary_version": "5.3.0-1035.37"
          },
          {
            "binary_name": "linux-aws-5.3-tools-5.3.0-1035",
            "binary_version": "5.3.0-1035.37"
          },
          {
            "binary_name": "linux-buildinfo-5.3.0-1035-aws",
            "binary_version": "5.3.0-1035.37"
          },
          {
            "binary_name": "linux-cloud-tools-5.3.0-1035-aws",
            "binary_version": "5.3.0-1035.37"
          },
          {
            "binary_name": "linux-headers-5.3.0-1035-aws",
            "binary_version": "5.3.0-1035.37"
          },
          {
            "binary_name": "linux-image-5.3.0-1035-aws",
            "binary_version": "5.3.0-1035.37"
          },
          {
            "binary_name": "linux-modules-5.3.0-1035-aws",
            "binary_version": "5.3.0-1035.37"
          },
          {
            "binary_name": "linux-modules-extra-5.3.0-1035-aws",
            "binary_version": "5.3.0-1035.37"
          },
          {
            "binary_name": "linux-tools-5.3.0-1035-aws",
            "binary_version": "5.3.0-1035.37"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:18.04:LTS",
        "name": "linux-aws-5.3",
        "purl": "pkg:deb/ubuntu/linux-aws-5.3@5.3.0-1035.37?arch=source\u0026distro=bionic"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "5.3.0-1016.17~18.04.1",
        "5.3.0-1017.18~18.04.1",
        "5.3.0-1019.21~18.04.1",
        "5.3.0-1023.25~18.04.1",
        "5.3.0-1028.30~18.04.1",
        "5.3.0-1030.32~18.04.1",
        "5.3.0-1032.34~18.04.2",
        "5.3.0-1033.35",
        "5.3.0-1034.36",
        "5.3.0-1035.37"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-azure-cloud-tools-5.0.0-1036",
            "binary_version": "5.0.0-1036.38"
          },
          {
            "binary_name": "linux-azure-headers-5.0.0-1036",
            "binary_version": "5.0.0-1036.38"
          },
          {
            "binary_name": "linux-azure-tools-5.0.0-1036",
            "binary_version": "5.0.0-1036.38"
          },
          {
            "binary_name": "linux-buildinfo-5.0.0-1036-azure",
            "binary_version": "5.0.0-1036.38"
          },
          {
            "binary_name": "linux-cloud-tools-5.0.0-1036-azure",
            "binary_version": "5.0.0-1036.38"
          },
          {
            "binary_name": "linux-headers-5.0.0-1036-azure",
            "binary_version": "5.0.0-1036.38"
          },
          {
            "binary_name": "linux-image-unsigned-5.0.0-1036-azure",
            "binary_version": "5.0.0-1036.38"
          },
          {
            "binary_name": "linux-modules-5.0.0-1036-azure",
            "binary_version": "5.0.0-1036.38"
          },
          {
            "binary_name": "linux-modules-extra-5.0.0-1036-azure",
            "binary_version": "5.0.0-1036.38"
          },
          {
            "binary_name": "linux-tools-5.0.0-1036-azure",
            "binary_version": "5.0.0-1036.38"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:18.04:LTS",
        "name": "linux-azure",
        "purl": "pkg:deb/ubuntu/linux-azure@5.0.0-1036.38?arch=source\u0026distro=bionic"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "4.15.0-1002.2",
        "4.15.0-1003.3",
        "4.15.0-1004.4",
        "4.15.0-1008.8",
        "4.15.0-1009.9",
        "4.15.0-1012.12",
        "4.15.0-1013.13",
        "4.15.0-1014.14",
        "4.15.0-1018.18",
        "4.15.0-1019.19",
        "4.15.0-1021.21",
        "4.15.0-1022.23",
        "4.15.0-1023.24",
        "4.15.0-1025.26",
        "4.15.0-1028.29",
        "4.15.0-1030.31",
        "4.15.0-1031.32",
        "4.15.0-1032.33",
        "4.15.0-1035.36",
        "4.15.0-1036.38",
        "4.15.0-1037.39",
        "4.18.0-1011.11~18.04.1",
        "4.18.0-1013.13~18.04.1",
        "4.18.0-1014.14~18.04.1",
        "4.18.0-1018.18~18.04.1",
        "4.18.0-1019.19~18.04.1",
        "4.18.0-1020.20~18.04.1",
        "4.18.0-1023.24~18.04.1",
        "4.18.0-1024.25~18.04.1",
        "4.18.0-1025.27~18.04.1",
        "5.0.0-1014.14~18.04.1",
        "5.0.0-1016.17~18.04.1",
        "5.0.0-1018.19~18.04.1",
        "5.0.0-1020.21~18.04.1",
        "5.0.0-1022.23~18.04.1",
        "5.0.0-1023.24~18.04.1",
        "5.0.0-1025.27~18.04.1",
        "5.0.0-1027.29~18.04.1",
        "5.0.0-1028.30~18.04.1",
        "5.0.0-1029.31~18.04.1",
        "5.0.0-1031.33",
        "5.0.0-1032.34",
        "5.0.0-1035.37",
        "5.0.0-1036.38"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-azure-5.3-cloud-tools-5.3.0-1035",
            "binary_version": "5.3.0-1035.36"
          },
          {
            "binary_name": "linux-azure-5.3-headers-5.3.0-1035",
            "binary_version": "5.3.0-1035.36"
          },
          {
            "binary_name": "linux-azure-5.3-tools-5.3.0-1035",
            "binary_version": "5.3.0-1035.36"
          },
          {
            "binary_name": "linux-buildinfo-5.3.0-1035-azure",
            "binary_version": "5.3.0-1035.36"
          },
          {
            "binary_name": "linux-cloud-tools-5.3.0-1035-azure",
            "binary_version": "5.3.0-1035.36"
          },
          {
            "binary_name": "linux-headers-5.3.0-1035-azure",
            "binary_version": "5.3.0-1035.36"
          },
          {
            "binary_name": "linux-image-unsigned-5.3.0-1035-azure",
            "binary_version": "5.3.0-1035.36"
          },
          {
            "binary_name": "linux-modules-5.3.0-1035-azure",
            "binary_version": "5.3.0-1035.36"
          },
          {
            "binary_name": "linux-modules-extra-5.3.0-1035-azure",
            "binary_version": "5.3.0-1035.36"
          },
          {
            "binary_name": "linux-tools-5.3.0-1035-azure",
            "binary_version": "5.3.0-1035.36"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:18.04:LTS",
        "name": "linux-azure-5.3",
        "purl": "pkg:deb/ubuntu/linux-azure-5.3@5.3.0-1035.36?arch=source\u0026distro=bionic"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "5.3.0-1007.8~18.04.1",
        "5.3.0-1008.9~18.04.1",
        "5.3.0-1009.10~18.04.1",
        "5.3.0-1010.11~18.04.1",
        "5.3.0-1012.13~18.04.1",
        "5.3.0-1013.14~18.04.1",
        "5.3.0-1016.17~18.04.1",
        "5.3.0-1018.19~18.04.1",
        "5.3.0-1019.20~18.04.1",
        "5.3.0-1020.21~18.04.1",
        "5.3.0-1022.23~18.04.1",
        "5.3.0-1028.29~18.04.1",
        "5.3.0-1031.32~18.04.1",
        "5.3.0-1032.33~18.04.1",
        "5.3.0-1034.35~18.04.1",
        "5.3.0-1035.36"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-azure-edge-cloud-tools-5.0.0-1012",
            "binary_version": "5.0.0-1012.12~18.04.2"
          },
          {
            "binary_name": "linux-azure-edge-tools-5.0.0-1012",
            "binary_version": "5.0.0-1012.12~18.04.2"
          },
          {
            "binary_name": "linux-azure-headers-5.0.0-1012",
            "binary_version": "5.0.0-1012.12~18.04.2"
          },
          {
            "binary_name": "linux-buildinfo-5.0.0-1012-azure",
            "binary_version": "5.0.0-1012.12~18.04.2"
          },
          {
            "binary_name": "linux-cloud-tools-5.0.0-1012-azure",
            "binary_version": "5.0.0-1012.12~18.04.2"
          },
          {
            "binary_name": "linux-headers-5.0.0-1012-azure",
            "binary_version": "5.0.0-1012.12~18.04.2"
          },
          {
            "binary_name": "linux-image-unsigned-5.0.0-1012-azure",
            "binary_version": "5.0.0-1012.12~18.04.2"
          },
          {
            "binary_name": "linux-modules-5.0.0-1012-azure",
            "binary_version": "5.0.0-1012.12~18.04.2"
          },
          {
            "binary_name": "linux-modules-extra-5.0.0-1012-azure",
            "binary_version": "5.0.0-1012.12~18.04.2"
          },
          {
            "binary_name": "linux-tools-5.0.0-1012-azure",
            "binary_version": "5.0.0-1012.12~18.04.2"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:18.04:LTS",
        "name": "linux-azure-edge",
        "purl": "pkg:deb/ubuntu/linux-azure-edge@5.0.0-1012.12~18.04.2?arch=source\u0026distro=bionic"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "4.18.0-1006.6~18.04.1",
        "4.18.0-1007.7~18.04.1",
        "4.18.0-1008.8~18.04.1",
        "5.0.0-1012.12~18.04.2"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-buildinfo-5.0.0-1034-gcp",
            "binary_version": "5.0.0-1034.35"
          },
          {
            "binary_name": "linux-gcp-headers-5.0.0-1034",
            "binary_version": "5.0.0-1034.35"
          },
          {
            "binary_name": "linux-gcp-tools-5.0.0-1034",
            "binary_version": "5.0.0-1034.35"
          },
          {
            "binary_name": "linux-headers-5.0.0-1034-gcp",
            "binary_version": "5.0.0-1034.35"
          },
          {
            "binary_name": "linux-image-unsigned-5.0.0-1034-gcp",
            "binary_version": "5.0.0-1034.35"
          },
          {
            "binary_name": "linux-modules-5.0.0-1034-gcp",
            "binary_version": "5.0.0-1034.35"
          },
          {
            "binary_name": "linux-modules-extra-5.0.0-1034-gcp",
            "binary_version": "5.0.0-1034.35"
          },
          {
            "binary_name": "linux-tools-5.0.0-1034-gcp",
            "binary_version": "5.0.0-1034.35"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:18.04:LTS",
        "name": "linux-gcp",
        "purl": "pkg:deb/ubuntu/linux-gcp@5.0.0-1034.35?arch=source\u0026distro=bionic"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "4.15.0-1001.1",
        "4.15.0-1003.3",
        "4.15.0-1005.5",
        "4.15.0-1006.6",
        "4.15.0-1008.8",
        "4.15.0-1009.9",
        "4.15.0-1010.10",
        "4.15.0-1014.14",
        "4.15.0-1015.15",
        "4.15.0-1017.18",
        "4.15.0-1018.19",
        "4.15.0-1019.20",
        "4.15.0-1021.22",
        "4.15.0-1023.24",
        "4.15.0-1024.25",
        "4.15.0-1025.26",
        "4.15.0-1026.27",
        "4.15.0-1027.28",
        "4.15.0-1028.29",
        "4.15.0-1029.31",
        "4.15.0-1030.32",
        "4.15.0-1032.34",
        "4.15.0-1033.35",
        "4.15.0-1034.36",
        "4.15.0-1036.38",
        "4.15.0-1037.39",
        "4.15.0-1040.42",
        "4.15.0-1042.45",
        "4.15.0-1044.70",
        "5.0.0-1020.20~18.04.1",
        "5.0.0-1021.21~18.04.1",
        "5.0.0-1025.26~18.04.1",
        "5.0.0-1026.27~18.04.1",
        "5.0.0-1028.29~18.04.1",
        "5.0.0-1029.30~18.04.1",
        "5.0.0-1031.32",
        "5.0.0-1033.34",
        "5.0.0-1034.35"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-buildinfo-5.3.0-1032-gcp",
            "binary_version": "5.3.0-1032.34~18.04.1"
          },
          {
            "binary_name": "linux-gcp-5.3-headers-5.3.0-1032",
            "binary_version": "5.3.0-1032.34~18.04.1"
          },
          {
            "binary_name": "linux-gcp-5.3-tools-5.3.0-1032",
            "binary_version": "5.3.0-1032.34~18.04.1"
          },
          {
            "binary_name": "linux-headers-5.3.0-1032-gcp",
            "binary_version": "5.3.0-1032.34~18.04.1"
          },
          {
            "binary_name": "linux-image-unsigned-5.3.0-1032-gcp",
            "binary_version": "5.3.0-1032.34~18.04.1"
          },
          {
            "binary_name": "linux-modules-5.3.0-1032-gcp",
            "binary_version": "5.3.0-1032.34~18.04.1"
          },
          {
            "binary_name": "linux-modules-extra-5.3.0-1032-gcp",
            "binary_version": "5.3.0-1032.34~18.04.1"
          },
          {
            "binary_name": "linux-tools-5.3.0-1032-gcp",
            "binary_version": "5.3.0-1032.34~18.04.1"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:18.04:LTS",
        "name": "linux-gcp-5.3",
        "purl": "pkg:deb/ubuntu/linux-gcp-5.3@5.3.0-1032.34~18.04.1?arch=source\u0026distro=bionic"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "5.3.0-1008.9~18.04.1",
        "5.3.0-1009.10~18.04.1",
        "5.3.0-1010.11~18.04.1",
        "5.3.0-1012.13~18.04.1",
        "5.3.0-1014.15~18.04.1",
        "5.3.0-1016.17~18.04.1",
        "5.3.0-1017.18~18.04.1",
        "5.3.0-1018.19~18.04.1",
        "5.3.0-1020.22~18.04.1",
        "5.3.0-1026.28~18.04.1",
        "5.3.0-1029.31~18.04.1",
        "5.3.0-1030.32~18.04.1",
        "5.3.0-1032.34~18.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-buildinfo-4.15.0-1079-gke",
            "binary_version": "4.15.0-1079.84"
          },
          {
            "binary_name": "linux-gke-4.15-headers-4.15.0-1079",
            "binary_version": "4.15.0-1079.84"
          },
          {
            "binary_name": "linux-gke-4.15-tools-4.15.0-1079",
            "binary_version": "4.15.0-1079.84"
          },
          {
            "binary_name": "linux-headers-4.15.0-1079-gke",
            "binary_version": "4.15.0-1079.84"
          },
          {
            "binary_name": "linux-image-unsigned-4.15.0-1079-gke",
            "binary_version": "4.15.0-1079.84"
          },
          {
            "binary_name": "linux-modules-4.15.0-1079-gke",
            "binary_version": "4.15.0-1079.84"
          },
          {
            "binary_name": "linux-modules-extra-4.15.0-1079-gke",
            "binary_version": "4.15.0-1079.84"
          },
          {
            "binary_name": "linux-tools-4.15.0-1079-gke",
            "binary_version": "4.15.0-1079.84"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:18.04:LTS",
        "name": "linux-gke-4.15",
        "purl": "pkg:deb/ubuntu/linux-gke-4.15@4.15.0-1079.84?arch=source\u0026distro=bionic"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "4.15.0-1030.32",
        "4.15.0-1032.34",
        "4.15.0-1033.35",
        "4.15.0-1034.36",
        "4.15.0-1036.38",
        "4.15.0-1037.39",
        "4.15.0-1040.42",
        "4.15.0-1041.43",
        "4.15.0-1042.44",
        "4.15.0-1044.46",
        "4.15.0-1045.48",
        "4.15.0-1046.49",
        "4.15.0-1048.51",
        "4.15.0-1049.52",
        "4.15.0-1050.53",
        "4.15.0-1052.55",
        "4.15.0-1055.58",
        "4.15.0-1057.60",
        "4.15.0-1058.61",
        "4.15.0-1059.62",
        "4.15.0-1063.66",
        "4.15.0-1064.67",
        "4.15.0-1066.69",
        "4.15.0-1067.70",
        "4.15.0-1069.72",
        "4.15.0-1070.73",
        "4.15.0-1072.76",
        "4.15.0-1073.78",
        "4.15.0-1074.79",
        "4.15.0-1076.81",
        "4.15.0-1077.82",
        "4.15.0-1078.83",
        "4.15.0-1079.84"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-buildinfo-5.4.0-1080-gke",
            "binary_version": "5.4.0-1080.86~18.04.1"
          },
          {
            "binary_name": "linux-gke-5.4-headers-5.4.0-1080",
            "binary_version": "5.4.0-1080.86~18.04.1"
          },
          {
            "binary_name": "linux-gke-5.4-tools-5.4.0-1080",
            "binary_version": "5.4.0-1080.86~18.04.1"
          },
          {
            "binary_name": "linux-headers-5.4.0-1080-gke",
            "binary_version": "5.4.0-1080.86~18.04.1"
          },
          {
            "binary_name": "linux-image-unsigned-5.4.0-1080-gke",
            "binary_version": "5.4.0-1080.86~18.04.1"
          },
          {
            "binary_name": "linux-modules-5.4.0-1080-gke",
            "binary_version": "5.4.0-1080.86~18.04.1"
          },
          {
            "binary_name": "linux-modules-extra-5.4.0-1080-gke",
            "binary_version": "5.4.0-1080.86~18.04.1"
          },
          {
            "binary_name": "linux-tools-5.4.0-1080-gke",
            "binary_version": "5.4.0-1080.86~18.04.1"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:18.04:LTS",
        "name": "linux-gke-5.4",
        "purl": "pkg:deb/ubuntu/linux-gke-5.4@5.4.0-1080.86~18.04.1?arch=source\u0026distro=bionic"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "5.4.0-1025.25~18.04.1",
        "5.4.0-1027.28~18.04.1",
        "5.4.0-1029.31~18.04.1",
        "5.4.0-1030.32~18.04.1",
        "5.4.0-1032.34~18.04.1",
        "5.4.0-1033.35~18.04.1",
        "5.4.0-1035.37~18.04.1",
        "5.4.0-1036.38~18.04.1",
        "5.4.0-1037.39~18.04.1",
        "5.4.0-1039.41~18.04.1",
        "5.4.0-1040.42~18.04.1",
        "5.4.0-1042.44~18.04.1",
        "5.4.0-1043.45~18.04.1",
        "5.4.0-1044.46~18.04.1",
        "5.4.0-1046.48~18.04.1",
        "5.4.0-1049.52~18.04.1",
        "5.4.0-1051.54~18.04.1",
        "5.4.0-1052.55~18.04.1",
        "5.4.0-1053.56~18.04.1",
        "5.4.0-1054.57~18.04.1",
        "5.4.0-1055.58~18.04.1",
        "5.4.0-1056.59~18.04.1",
        "5.4.0-1057.60~18.04.1",
        "5.4.0-1059.62~18.04.1",
        "5.4.0-1061.64~18.04.1",
        "5.4.0-1062.65~18.04.1",
        "5.4.0-1063.66~18.04.1",
        "5.4.0-1065.68~18.04.1",
        "5.4.0-1066.69~18.04.1",
        "5.4.0-1067.70~18.04.1",
        "5.4.0-1068.71~18.04.1",
        "5.4.0-1071.76~18.04.3",
        "5.4.0-1072.77~18.04.1",
        "5.4.0-1074.79~18.04.1",
        "5.4.0-1076.82~18.04.1",
        "5.4.0-1078.84~18.04.1",
        "5.4.0-1080.86~18.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-buildinfo-5.4.0-1051-gkeop",
            "binary_version": "5.4.0-1051.54~18.04.1"
          },
          {
            "binary_name": "linux-cloud-tools-5.4.0-1051-gkeop",
            "binary_version": "5.4.0-1051.54~18.04.1"
          },
          {
            "binary_name": "linux-gkeop-5.4-cloud-tools-5.4.0-1051",
            "binary_version": "5.4.0-1051.54~18.04.1"
          },
          {
            "binary_name": "linux-gkeop-5.4-headers-5.4.0-1051",
            "binary_version": "5.4.0-1051.54~18.04.1"
          },
          {
            "binary_name": "linux-gkeop-5.4-source-5.4.0",
            "binary_version": "5.4.0-1051.54~18.04.1"
          },
          {
            "binary_name": "linux-gkeop-5.4-tools-5.4.0-1051",
            "binary_version": "5.4.0-1051.54~18.04.1"
          },
          {
            "binary_name": "linux-headers-5.4.0-1051-gkeop",
            "binary_version": "5.4.0-1051.54~18.04.1"
          },
          {
            "binary_name": "linux-image-unsigned-5.4.0-1051-gkeop",
            "binary_version": "5.4.0-1051.54~18.04.1"
          },
          {
            "binary_name": "linux-modules-5.4.0-1051-gkeop",
            "binary_version": "5.4.0-1051.54~18.04.1"
          },
          {
            "binary_name": "linux-modules-extra-5.4.0-1051-gkeop",
            "binary_version": "5.4.0-1051.54~18.04.1"
          },
          {
            "binary_name": "linux-tools-5.4.0-1051-gkeop",
            "binary_version": "5.4.0-1051.54~18.04.1"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:18.04:LTS",
        "name": "linux-gkeop-5.4",
        "purl": "pkg:deb/ubuntu/linux-gkeop-5.4@5.4.0-1051.54~18.04.1?arch=source\u0026distro=bionic"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "5.4.0-1001.1",
        "5.4.0-1003.3",
        "5.4.0-1004.5",
        "5.4.0-1005.6",
        "5.4.0-1007.8~18.04.1",
        "5.4.0-1008.9~18.04.1",
        "5.4.0-1009.10~18.04.1",
        "5.4.0-1010.11~18.04.1",
        "5.4.0-1011.12~18.04.2",
        "5.4.0-1012.13~18.04.1",
        "5.4.0-1013.14~18.04.1",
        "5.4.0-1014.15~18.04.1",
        "5.4.0-1015.16~18.04.1",
        "5.4.0-1016.17~18.04.1",
        "5.4.0-1018.19~18.04.1",
        "5.4.0-1021.22~18.04.1",
        "5.4.0-1022.23~18.04.1",
        "5.4.0-1023.24~18.04.1",
        "5.4.0-1024.25~18.04.1",
        "5.4.0-1025.26~18.04.1",
        "5.4.0-1026.27~18.04.1",
        "5.4.0-1027.28~18.04.1",
        "5.4.0-1029.30~18.04.2",
        "5.4.0-1031.32~18.04.1",
        "5.4.0-1032.33~18.04.1",
        "5.4.0-1033.34~18.04.1",
        "5.4.0-1034.35~18.04.1",
        "5.4.0-1036.37~18.04.1",
        "5.4.0-1037.38~18.04.1",
        "5.4.0-1038.39~18.04.1",
        "5.4.0-1039.40~18.04.1",
        "5.4.0-1040.41~18.04.1",
        "5.4.0-1043.44~18.04.1",
        "5.4.0-1046.48~18.04.1",
        "5.4.0-1048.51~18.04.1",
        "5.4.0-1049.52~18.04.1",
        "5.4.0-1051.54~18.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "block-modules-5.3.0-76-generic-di",
            "binary_version": "5.3.0-76.72"
          },
          {
            "binary_name": "crypto-modules-5.3.0-76-generic-di",
            "binary_version": "5.3.0-76.72"
          },
          {
            "binary_name": "fat-modules-5.3.0-76-generic-di",
            "binary_version": "5.3.0-76.72"
          },
          {
            "binary_name": "fb-modules-5.3.0-76-generic-di",
            "binary_version": "5.3.0-76.72"
          },
          {
            "binary_name": "firewire-core-modules-5.3.0-76-generic-di",
            "binary_version": "5.3.0-76.72"
          },
          {
            "binary_name": "floppy-modules-5.3.0-76-generic-di",
            "binary_version": "5.3.0-76.72"
          },
          {
            "binary_name": "fs-core-modules-5.3.0-76-generic-di",
            "binary_version": "5.3.0-76.72"
          },
          {
            "binary_name": "fs-secondary-modules-5.3.0-76-generic-di",
            "binary_version": "5.3.0-76.72"
          },
          {
            "binary_name": "input-modules-5.3.0-76-generic-di",
            "binary_version": "5.3.0-76.72"
          },
          {
            "binary_name": "ipmi-modules-5.3.0-76-generic-di",
            "binary_version": "5.3.0-76.72"
          },
          {
            "binary_name": "kernel-image-5.3.0-76-generic-di",
            "binary_version": "5.3.0-76.72"
          },
          {
            "binary_name": "linux-buildinfo-5.3.0-76-generic",
            "binary_version": "5.3.0-76.72"
          },
          {
            "binary_name": "linux-buildinfo-5.3.0-76-lowlatency",
            "binary_version": "5.3.0-76.72"
          },
          {
            "binary_name": "linux-cloud-tools-5.3.0-76-generic",
            "binary_version": "5.3.0-76.72"
          },
          {
            "binary_name": "linux-cloud-tools-5.3.0-76-lowlatency",
            "binary_version": "5.3.0-76.72"
          },
          {
            "binary_name": "linux-headers-5.3.0-76-generic",
            "binary_version": "5.3.0-76.72"
          },
          {
            "binary_name": "linux-headers-5.3.0-76-lowlatency",
            "binary_version": "5.3.0-76.72"
          },
          {
            "binary_name": "linux-hwe-cloud-tools-5.3.0-76",
            "binary_version": "5.3.0-76.72"
          },
          {
            "binary_name": "linux-hwe-headers-5.3.0-76",
            "binary_version": "5.3.0-76.72"
          },
          {
            "binary_name": "linux-hwe-tools-5.3.0-76",
            "binary_version": "5.3.0-76.72"
          },
          {
            "binary_name": "linux-hwe-udebs-generic",
            "binary_version": "5.3.0-76.72"
          },
          {
            "binary_name": "linux-image-5.3.0-76-generic",
            "binary_version": "5.3.0-76.72"
          },
          {
            "binary_name": "linux-image-5.3.0-76-lowlatency",
            "binary_version": "5.3.0-76.72"
          },
          {
            "binary_name": "linux-image-unsigned-5.3.0-76-generic",
            "binary_version": "5.3.0-76.72"
          },
          {
            "binary_name": "linux-image-unsigned-5.3.0-76-lowlatency",
            "binary_version": "5.3.0-76.72"
          },
          {
            "binary_name": "linux-modules-5.3.0-76-generic",
            "binary_version": "5.3.0-76.72"
          },
          {
            "binary_name": "linux-modules-5.3.0-76-lowlatency",
            "binary_version": "5.3.0-76.72"
          },
          {
            "binary_name": "linux-modules-extra-5.3.0-76-generic",
            "binary_version": "5.3.0-76.72"
          },
          {
            "binary_name": "linux-source-5.3.0",
            "binary_version": "5.3.0-76.72"
          },
          {
            "binary_name": "linux-tools-5.3.0-76-generic",
            "binary_version": "5.3.0-76.72"
          },
          {
            "binary_name": "linux-tools-5.3.0-76-lowlatency",
            "binary_version": "5.3.0-76.72"
          },
          {
            "binary_name": "md-modules-5.3.0-76-generic-di",
            "binary_version": "5.3.0-76.72"
          },
          {
            "binary_name": "message-modules-5.3.0-76-generic-di",
            "binary_version": "5.3.0-76.72"
          },
          {
            "binary_name": "mouse-modules-5.3.0-76-generic-di",
            "binary_version": "5.3.0-76.72"
          },
          {
            "binary_name": "multipath-modules-5.3.0-76-generic-di",
            "binary_version": "5.3.0-76.72"
          },
          {
            "binary_name": "nfs-modules-5.3.0-76-generic-di",
            "binary_version": "5.3.0-76.72"
          },
          {
            "binary_name": "nic-modules-5.3.0-76-generic-di",
            "binary_version": "5.3.0-76.72"
          },
          {
            "binary_name": "nic-pcmcia-modules-5.3.0-76-generic-di",
            "binary_version": "5.3.0-76.72"
          },
          {
            "binary_name": "nic-shared-modules-5.3.0-76-generic-di",
            "binary_version": "5.3.0-76.72"
          },
          {
            "binary_name": "nic-usb-modules-5.3.0-76-generic-di",
            "binary_version": "5.3.0-76.72"
          },
          {
            "binary_name": "parport-modules-5.3.0-76-generic-di",
            "binary_version": "5.3.0-76.72"
          },
          {
            "binary_name": "pata-modules-5.3.0-76-generic-di",
            "binary_version": "5.3.0-76.72"
          },
          {
            "binary_name": "pcmcia-modules-5.3.0-76-generic-di",
            "binary_version": "5.3.0-76.72"
          },
          {
            "binary_name": "pcmcia-storage-modules-5.3.0-76-generic-di",
            "binary_version": "5.3.0-76.72"
          },
          {
            "binary_name": "plip-modules-5.3.0-76-generic-di",
            "binary_version": "5.3.0-76.72"
          },
          {
            "binary_name": "ppp-modules-5.3.0-76-generic-di",
            "binary_version": "5.3.0-76.72"
          },
          {
            "binary_name": "sata-modules-5.3.0-76-generic-di",
            "binary_version": "5.3.0-76.72"
          },
          {
            "binary_name": "scsi-modules-5.3.0-76-generic-di",
            "binary_version": "5.3.0-76.72"
          },
          {
            "binary_name": "serial-modules-5.3.0-76-generic-di",
            "binary_version": "5.3.0-76.72"
          },
          {
            "binary_name": "storage-core-modules-5.3.0-76-generic-di",
            "binary_version": "5.3.0-76.72"
          },
          {
            "binary_name": "usb-modules-5.3.0-76-generic-di",
            "binary_version": "5.3.0-76.72"
          },
          {
            "binary_name": "virtio-modules-5.3.0-76-generic-di",
            "binary_version": "5.3.0-76.72"
          },
          {
            "binary_name": "vlan-modules-5.3.0-76-generic-di",
            "binary_version": "5.3.0-76.72"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:18.04:LTS",
        "name": "linux-hwe",
        "purl": "pkg:deb/ubuntu/linux-hwe@5.3.0-76.72?arch=source\u0026distro=bionic"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "4.18.0-13.14~18.04.1",
        "4.18.0-14.15~18.04.1",
        "4.18.0-15.16~18.04.1",
        "4.18.0-16.17~18.04.1",
        "4.18.0-17.18~18.04.1",
        "4.18.0-18.19~18.04.1",
        "4.18.0-20.21~18.04.1",
        "4.18.0-21.22~18.04.1",
        "4.18.0-22.23~18.04.1",
        "4.18.0-24.25~18.04.1",
        "4.18.0-25.26~18.04.1",
        "5.0.0-23.24~18.04.1",
        "5.0.0-25.26~18.04.1",
        "5.0.0-27.28~18.04.1",
        "5.0.0-29.31~18.04.1",
        "5.0.0-31.33~18.04.1",
        "5.0.0-32.34~18.04.2",
        "5.0.0-35.38~18.04.1",
        "5.0.0-36.39~18.04.1",
        "5.0.0-37.40~18.04.1",
        "5.3.0-26.28~18.04.1",
        "5.3.0-28.30~18.04.1",
        "5.3.0-40.32~18.04.1",
        "5.3.0-42.34~18.04.1",
        "5.3.0-45.37~18.04.1",
        "5.3.0-46.38~18.04.1",
        "5.3.0-51.44~18.04.2",
        "5.3.0-53.47~18.04.1",
        "5.3.0-59.53~18.04.1",
        "5.3.0-61.55~18.04.1",
        "5.3.0-62.56~18.04.1",
        "5.3.0-64.58~18.04.1",
        "5.3.0-65.59",
        "5.3.0-66.60",
        "5.3.0-67.61",
        "5.3.0-68.63",
        "5.3.0-69.65",
        "5.3.0-70.66",
        "5.3.0-72.68",
        "5.3.0-73.69",
        "5.3.0-74.70",
        "5.3.0-75.71",
        "5.3.0-76.72"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "block-modules-5.3.0-24-generic-di",
            "binary_version": "5.3.0-24.26~18.04.2"
          },
          {
            "binary_name": "block-modules-5.3.0-24-generic-lpae-di",
            "binary_version": "5.3.0-24.26~18.04.2"
          },
          {
            "binary_name": "crypto-modules-5.3.0-24-generic-di",
            "binary_version": "5.3.0-24.26~18.04.2"
          },
          {
            "binary_name": "crypto-modules-5.3.0-24-generic-lpae-di",
            "binary_version": "5.3.0-24.26~18.04.2"
          },
          {
            "binary_name": "dasd-extra-modules-5.3.0-24-generic-di",
            "binary_version": "5.3.0-24.26~18.04.2"
          },
          {
            "binary_name": "dasd-modules-5.3.0-24-generic-di",
            "binary_version": "5.3.0-24.26~18.04.2"
          },
          {
            "binary_name": "fat-modules-5.3.0-24-generic-di",
            "binary_version": "5.3.0-24.26~18.04.2"
          },
          {
            "binary_name": "fat-modules-5.3.0-24-generic-lpae-di",
            "binary_version": "5.3.0-24.26~18.04.2"
          },
          {
            "binary_name": "fb-modules-5.3.0-24-generic-di",
            "binary_version": "5.3.0-24.26~18.04.2"
          },
          {
            "binary_name": "firewire-core-modules-5.3.0-24-generic-di",
            "binary_version": "5.3.0-24.26~18.04.2"
          },
          {
            "binary_name": "floppy-modules-5.3.0-24-generic-di",
            "binary_version": "5.3.0-24.26~18.04.2"
          },
          {
            "binary_name": "fs-core-modules-5.3.0-24-generic-di",
            "binary_version": "5.3.0-24.26~18.04.2"
          },
          {
            "binary_name": "fs-core-modules-5.3.0-24-generic-lpae-di",
            "binary_version": "5.3.0-24.26~18.04.2"
          },
          {
            "binary_name": "fs-secondary-modules-5.3.0-24-generic-di",
            "binary_version": "5.3.0-24.26~18.04.2"
          },
          {
            "binary_name": "fs-secondary-modules-5.3.0-24-generic-lpae-di",
            "binary_version": "5.3.0-24.26~18.04.2"
          },
          {
            "binary_name": "input-modules-5.3.0-24-generic-di",
            "binary_version": "5.3.0-24.26~18.04.2"
          },
          {
            "binary_name": "input-modules-5.3.0-24-generic-lpae-di",
            "binary_version": "5.3.0-24.26~18.04.2"
          },
          {
            "binary_name": "ipmi-modules-5.3.0-24-generic-di",
            "binary_version": "5.3.0-24.26~18.04.2"
          },
          {
            "binary_name": "ipmi-modules-5.3.0-24-generic-lpae-di",
            "binary_version": "5.3.0-24.26~18.04.2"
          },
          {
            "binary_name": "kernel-image-5.3.0-24-generic-di",
            "binary_version": "5.3.0-24.26~18.04.2"
          },
          {
            "binary_name": "kernel-image-5.3.0-24-generic-lpae-di",
            "binary_version": "5.3.0-24.26~18.04.2"
          },
          {
            "binary_name": "linux-buildinfo-5.3.0-24-generic",
            "binary_version": "5.3.0-24.26~18.04.2"
          },
          {
            "binary_name": "linux-buildinfo-5.3.0-24-generic-lpae",
            "binary_version": "5.3.0-24.26~18.04.2"
          },
          {
            "binary_name": "linux-buildinfo-5.3.0-24-lowlatency",
            "binary_version": "5.3.0-24.26~18.04.2"
          },
          {
            "binary_name": "linux-cloud-tools-5.3.0-24-generic",
            "binary_version": "5.3.0-24.26~18.04.2"
          },
          {
            "binary_name": "linux-cloud-tools-5.3.0-24-lowlatency",
            "binary_version": "5.3.0-24.26~18.04.2"
          },
          {
            "binary_name": "linux-headers-5.3.0-24",
            "binary_version": "5.3.0-24.26~18.04.2"
          },
          {
            "binary_name": "linux-headers-5.3.0-24-generic",
            "binary_version": "5.3.0-24.26~18.04.2"
          },
          {
            "binary_name": "linux-headers-5.3.0-24-generic-lpae",
            "binary_version": "5.3.0-24.26~18.04.2"
          },
          {
            "binary_name": "linux-headers-5.3.0-24-lowlatency",
            "binary_version": "5.3.0-24.26~18.04.2"
          },
          {
            "binary_name": "linux-hwe-edge-cloud-tools-5.3.0-24",
            "binary_version": "5.3.0-24.26~18.04.2"
          },
          {
            "binary_name": "linux-hwe-edge-tools-5.3.0-24",
            "binary_version": "5.3.0-24.26~18.04.2"
          },
          {
            "binary_name": "linux-hwe-edge-udebs-generic",
            "binary_version": "5.3.0-24.26~18.04.2"
          },
          {
            "binary_name": "linux-hwe-edge-udebs-generic-lpae",
            "binary_version": "5.3.0-24.26~18.04.2"
          },
          {
            "binary_name": "linux-image-5.3.0-24-generic",
            "binary_version": "5.3.0-24.26~18.04.2"
          },
          {
            "binary_name": "linux-image-5.3.0-24-generic-lpae",
            "binary_version": "5.3.0-24.26~18.04.2"
          },
          {
            "binary_name": "linux-image-5.3.0-24-lowlatency",
            "binary_version": "5.3.0-24.26~18.04.2"
          },
          {
            "binary_name": "linux-image-unsigned-5.3.0-24-generic",
            "binary_version": "5.3.0-24.26~18.04.2"
          },
          {
            "binary_name": "linux-image-unsigned-5.3.0-24-lowlatency",
            "binary_version": "5.3.0-24.26~18.04.2"
          },
          {
            "binary_name": "linux-modules-5.3.0-24-generic",
            "binary_version": "5.3.0-24.26~18.04.2"
          },
          {
            "binary_name": "linux-modules-5.3.0-24-generic-lpae",
            "binary_version": "5.3.0-24.26~18.04.2"
          },
          {
            "binary_name": "linux-modules-5.3.0-24-lowlatency",
            "binary_version": "5.3.0-24.26~18.04.2"
          },
          {
            "binary_name": "linux-modules-extra-5.3.0-24-generic",
            "binary_version": "5.3.0-24.26~18.04.2"
          },
          {
            "binary_name": "linux-source-5.3.0",
            "binary_version": "5.3.0-24.26~18.04.2"
          },
          {
            "binary_name": "linux-tools-5.3.0-24-generic",
            "binary_version": "5.3.0-24.26~18.04.2"
          },
          {
            "binary_name": "linux-tools-5.3.0-24-generic-lpae",
            "binary_version": "5.3.0-24.26~18.04.2"
          },
          {
            "binary_name": "linux-tools-5.3.0-24-lowlatency",
            "binary_version": "5.3.0-24.26~18.04.2"
          },
          {
            "binary_name": "md-modules-5.3.0-24-generic-di",
            "binary_version": "5.3.0-24.26~18.04.2"
          },
          {
            "binary_name": "md-modules-5.3.0-24-generic-lpae-di",
            "binary_version": "5.3.0-24.26~18.04.2"
          },
          {
            "binary_name": "message-modules-5.3.0-24-generic-di",
            "binary_version": "5.3.0-24.26~18.04.2"
          },
          {
            "binary_name": "mouse-modules-5.3.0-24-generic-di",
            "binary_version": "5.3.0-24.26~18.04.2"
          },
          {
            "binary_name": "mouse-modules-5.3.0-24-generic-lpae-di",
            "binary_version": "5.3.0-24.26~18.04.2"
          },
          {
            "binary_name": "multipath-modules-5.3.0-24-generic-di",
            "binary_version": "5.3.0-24.26~18.04.2"
          },
          {
            "binary_name": "multipath-modules-5.3.0-24-generic-lpae-di",
            "binary_version": "5.3.0-24.26~18.04.2"
          },
          {
            "binary_name": "nfs-modules-5.3.0-24-generic-di",
            "binary_version": "5.3.0-24.26~18.04.2"
          },
          {
            "binary_name": "nfs-modules-5.3.0-24-generic-lpae-di",
            "binary_version": "5.3.0-24.26~18.04.2"
          },
          {
            "binary_name": "nic-modules-5.3.0-24-generic-di",
            "binary_version": "5.3.0-24.26~18.04.2"
          },
          {
            "binary_name": "nic-modules-5.3.0-24-generic-lpae-di",
            "binary_version": "5.3.0-24.26~18.04.2"
          },
          {
            "binary_name": "nic-pcmcia-modules-5.3.0-24-generic-di",
            "binary_version": "5.3.0-24.26~18.04.2"
          },
          {
            "binary_name": "nic-shared-modules-5.3.0-24-generic-di",
            "binary_version": "5.3.0-24.26~18.04.2"
          },
          {
            "binary_name": "nic-shared-modules-5.3.0-24-generic-lpae-di",
            "binary_version": "5.3.0-24.26~18.04.2"
          },
          {
            "binary_name": "nic-usb-modules-5.3.0-24-generic-di",
            "binary_version": "5.3.0-24.26~18.04.2"
          },
          {
            "binary_name": "nic-usb-modules-5.3.0-24-generic-lpae-di",
            "binary_version": "5.3.0-24.26~18.04.2"
          },
          {
            "binary_name": "parport-modules-5.3.0-24-generic-di",
            "binary_version": "5.3.0-24.26~18.04.2"
          },
          {
            "binary_name": "parport-modules-5.3.0-24-generic-lpae-di",
            "binary_version": "5.3.0-24.26~18.04.2"
          },
          {
            "binary_name": "pata-modules-5.3.0-24-generic-di",
            "binary_version": "5.3.0-24.26~18.04.2"
          },
          {
            "binary_name": "pcmcia-modules-5.3.0-24-generic-di",
            "binary_version": "5.3.0-24.26~18.04.2"
          },
          {
            "binary_name": "pcmcia-storage-modules-5.3.0-24-generic-di",
            "binary_version": "5.3.0-24.26~18.04.2"
          },
          {
            "binary_name": "plip-modules-5.3.0-24-generic-di",
            "binary_version": "5.3.0-24.26~18.04.2"
          },
          {
            "binary_name": "plip-modules-5.3.0-24-generic-lpae-di",
            "binary_version": "5.3.0-24.26~18.04.2"
          },
          {
            "binary_name": "ppp-modules-5.3.0-24-generic-di",
            "binary_version": "5.3.0-24.26~18.04.2"
          },
          {
            "binary_name": "ppp-modules-5.3.0-24-generic-lpae-di",
            "binary_version": "5.3.0-24.26~18.04.2"
          },
          {
            "binary_name": "sata-modules-5.3.0-24-generic-di",
            "binary_version": "5.3.0-24.26~18.04.2"
          },
          {
            "binary_name": "sata-modules-5.3.0-24-generic-lpae-di",
            "binary_version": "5.3.0-24.26~18.04.2"
          },
          {
            "binary_name": "scsi-modules-5.3.0-24-generic-di",
            "binary_version": "5.3.0-24.26~18.04.2"
          },
          {
            "binary_name": "scsi-modules-5.3.0-24-generic-lpae-di",
            "binary_version": "5.3.0-24.26~18.04.2"
          },
          {
            "binary_name": "serial-modules-5.3.0-24-generic-di",
            "binary_version": "5.3.0-24.26~18.04.2"
          },
          {
            "binary_name": "storage-core-modules-5.3.0-24-generic-di",
            "binary_version": "5.3.0-24.26~18.04.2"
          },
          {
            "binary_name": "storage-core-modules-5.3.0-24-generic-lpae-di",
            "binary_version": "5.3.0-24.26~18.04.2"
          },
          {
            "binary_name": "usb-modules-5.3.0-24-generic-di",
            "binary_version": "5.3.0-24.26~18.04.2"
          },
          {
            "binary_name": "usb-modules-5.3.0-24-generic-lpae-di",
            "binary_version": "5.3.0-24.26~18.04.2"
          },
          {
            "binary_name": "virtio-modules-5.3.0-24-generic-di",
            "binary_version": "5.3.0-24.26~18.04.2"
          },
          {
            "binary_name": "vlan-modules-5.3.0-24-generic-di",
            "binary_version": "5.3.0-24.26~18.04.2"
          },
          {
            "binary_name": "vlan-modules-5.3.0-24-generic-lpae-di",
            "binary_version": "5.3.0-24.26~18.04.2"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:18.04:LTS",
        "name": "linux-hwe-edge",
        "purl": "pkg:deb/ubuntu/linux-hwe-edge@5.3.0-24.26~18.04.2?arch=source\u0026distro=bionic"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "5.0.0-15.16~18.04.1",
        "5.0.0-16.17~18.04.1",
        "5.0.0-17.18~18.04.1",
        "5.0.0-19.20~18.04.1",
        "5.0.0-20.21~18.04.1",
        "5.3.0-19.20~18.04.2",
        "5.3.0-22.24~18.04.1",
        "5.3.0-23.25~18.04.1",
        "5.3.0-23.25~18.04.2",
        "5.3.0-24.26~18.04.2"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "block-modules-4.15.0-1103-oem-di",
            "binary_version": "4.15.0-1103.114"
          },
          {
            "binary_name": "crypto-modules-4.15.0-1103-oem-di",
            "binary_version": "4.15.0-1103.114"
          },
          {
            "binary_name": "fat-modules-4.15.0-1103-oem-di",
            "binary_version": "4.15.0-1103.114"
          },
          {
            "binary_name": "fb-modules-4.15.0-1103-oem-di",
            "binary_version": "4.15.0-1103.114"
          },
          {
            "binary_name": "firewire-core-modules-4.15.0-1103-oem-di",
            "binary_version": "4.15.0-1103.114"
          },
          {
            "binary_name": "floppy-modules-4.15.0-1103-oem-di",
            "binary_version": "4.15.0-1103.114"
          },
          {
            "binary_name": "fs-core-modules-4.15.0-1103-oem-di",
            "binary_version": "4.15.0-1103.114"
          },
          {
            "binary_name": "fs-secondary-modules-4.15.0-1103-oem-di",
            "binary_version": "4.15.0-1103.114"
          },
          {
            "binary_name": "input-modules-4.15.0-1103-oem-di",
            "binary_version": "4.15.0-1103.114"
          },
          {
            "binary_name": "ipmi-modules-4.15.0-1103-oem-di",
            "binary_version": "4.15.0-1103.114"
          },
          {
            "binary_name": "irda-modules-4.15.0-1103-oem-di",
            "binary_version": "4.15.0-1103.114"
          },
          {
            "binary_name": "kernel-image-4.15.0-1103-oem-di",
            "binary_version": "4.15.0-1103.114"
          },
          {
            "binary_name": "linux-buildinfo-4.15.0-1103-oem",
            "binary_version": "4.15.0-1103.114"
          },
          {
            "binary_name": "linux-headers-4.15.0-1103-oem",
            "binary_version": "4.15.0-1103.114"
          },
          {
            "binary_name": "linux-image-unsigned-4.15.0-1103-oem",
            "binary_version": "4.15.0-1103.114"
          },
          {
            "binary_name": "linux-modules-4.15.0-1103-oem",
            "binary_version": "4.15.0-1103.114"
          },
          {
            "binary_name": "linux-oem-headers-4.15.0-1103",
            "binary_version": "4.15.0-1103.114"
          },
          {
            "binary_name": "linux-oem-tools-4.15.0-1103",
            "binary_version": "4.15.0-1103.114"
          },
          {
            "binary_name": "linux-tools-4.15.0-1103-oem",
            "binary_version": "4.15.0-1103.114"
          },
          {
            "binary_name": "linux-udebs-oem",
            "binary_version": "4.15.0-1103.114"
          },
          {
            "binary_name": "md-modules-4.15.0-1103-oem-di",
            "binary_version": "4.15.0-1103.114"
          },
          {
            "binary_name": "message-modules-4.15.0-1103-oem-di",
            "binary_version": "4.15.0-1103.114"
          },
          {
            "binary_name": "mouse-modules-4.15.0-1103-oem-di",
            "binary_version": "4.15.0-1103.114"
          },
          {
            "binary_name": "multipath-modules-4.15.0-1103-oem-di",
            "binary_version": "4.15.0-1103.114"
          },
          {
            "binary_name": "nfs-modules-4.15.0-1103-oem-di",
            "binary_version": "4.15.0-1103.114"
          },
          {
            "binary_name": "nic-modules-4.15.0-1103-oem-di",
            "binary_version": "4.15.0-1103.114"
          },
          {
            "binary_name": "nic-pcmcia-modules-4.15.0-1103-oem-di",
            "binary_version": "4.15.0-1103.114"
          },
          {
            "binary_name": "nic-shared-modules-4.15.0-1103-oem-di",
            "binary_version": "4.15.0-1103.114"
          },
          {
            "binary_name": "nic-usb-modules-4.15.0-1103-oem-di",
            "binary_version": "4.15.0-1103.114"
          },
          {
            "binary_name": "parport-modules-4.15.0-1103-oem-di",
            "binary_version": "4.15.0-1103.114"
          },
          {
            "binary_name": "pata-modules-4.15.0-1103-oem-di",
            "binary_version": "4.15.0-1103.114"
          },
          {
            "binary_name": "pcmcia-modules-4.15.0-1103-oem-di",
            "binary_version": "4.15.0-1103.114"
          },
          {
            "binary_name": "pcmcia-storage-modules-4.15.0-1103-oem-di",
            "binary_version": "4.15.0-1103.114"
          },
          {
            "binary_name": "plip-modules-4.15.0-1103-oem-di",
            "binary_version": "4.15.0-1103.114"
          },
          {
            "binary_name": "ppp-modules-4.15.0-1103-oem-di",
            "binary_version": "4.15.0-1103.114"
          },
          {
            "binary_name": "sata-modules-4.15.0-1103-oem-di",
            "binary_version": "4.15.0-1103.114"
          },
          {
            "binary_name": "scsi-modules-4.15.0-1103-oem-di",
            "binary_version": "4.15.0-1103.114"
          },
          {
            "binary_name": "serial-modules-4.15.0-1103-oem-di",
            "binary_version": "4.15.0-1103.114"
          },
          {
            "binary_name": "storage-core-modules-4.15.0-1103-oem-di",
            "binary_version": "4.15.0-1103.114"
          },
          {
            "binary_name": "usb-modules-4.15.0-1103-oem-di",
            "binary_version": "4.15.0-1103.114"
          },
          {
            "binary_name": "virtio-modules-4.15.0-1103-oem-di",
            "binary_version": "4.15.0-1103.114"
          },
          {
            "binary_name": "vlan-modules-4.15.0-1103-oem-di",
            "binary_version": "4.15.0-1103.114"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:18.04:LTS",
        "name": "linux-oem",
        "purl": "pkg:deb/ubuntu/linux-oem@4.15.0-1103.114?arch=source\u0026distro=bionic"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "4.15.0-1002.3",
        "4.15.0-1004.5",
        "4.15.0-1006.9",
        "4.15.0-1008.11",
        "4.15.0-1009.12",
        "4.15.0-1012.15",
        "4.15.0-1013.16",
        "4.15.0-1015.18",
        "4.15.0-1017.20",
        "4.15.0-1018.21",
        "4.15.0-1021.24",
        "4.15.0-1024.29",
        "4.15.0-1026.31",
        "4.15.0-1028.33",
        "4.15.0-1030.35",
        "4.15.0-1033.38",
        "4.15.0-1034.39",
        "4.15.0-1035.40",
        "4.15.0-1036.41",
        "4.15.0-1038.43",
        "4.15.0-1039.44",
        "4.15.0-1043.48",
        "4.15.0-1045.50",
        "4.15.0-1050.57",
        "4.15.0-1056.65",
        "4.15.0-1057.66",
        "4.15.0-1059.68",
        "4.15.0-1063.72",
        "4.15.0-1064.73",
        "4.15.0-1065.75",
        "4.15.0-1066.76",
        "4.15.0-1067.77",
        "4.15.0-1069.79",
        "4.15.0-1073.83",
        "4.15.0-1076.86",
        "4.15.0-1079.89",
        "4.15.0-1080.90",
        "4.15.0-1081.91",
        "4.15.0-1087.97",
        "4.15.0-1090.100",
        "4.15.0-1091.101",
        "4.15.0-1093.103",
        "4.15.0-1094.104",
        "4.15.0-1096.106",
        "4.15.0-1097.107",
        "4.15.0-1099.109",
        "4.15.0-1100.110",
        "4.15.0-1101.112",
        "4.15.0-1102.113",
        "4.15.0-1103.114"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-buildinfo-5.0.0-1014-oracle",
            "binary_version": "5.0.0-1014.19"
          },
          {
            "binary_name": "linux-headers-5.0.0-1014-oracle",
            "binary_version": "5.0.0-1014.19"
          },
          {
            "binary_name": "linux-image-unsigned-5.0.0-1014-oracle",
            "binary_version": "5.0.0-1014.19"
          },
          {
            "binary_name": "linux-modules-5.0.0-1014-oracle",
            "binary_version": "5.0.0-1014.19"
          },
          {
            "binary_name": "linux-modules-extra-5.0.0-1014-oracle",
            "binary_version": "5.0.0-1014.19"
          },
          {
            "binary_name": "linux-oracle-5.0-headers-5.0.0-1014",
            "binary_version": "5.0.0-1014.19"
          },
          {
            "binary_name": "linux-oracle-5.0-tools-5.0.0-1014",
            "binary_version": "5.0.0-1014.19"
          },
          {
            "binary_name": "linux-tools-5.0.0-1014-oracle",
            "binary_version": "5.0.0-1014.19"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:18.04:LTS",
        "name": "linux-oracle-5.0",
        "purl": "pkg:deb/ubuntu/linux-oracle-5.0@5.0.0-1014.19?arch=source\u0026distro=bionic"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "5.0.0-1007.12~18.04.1",
        "5.0.0-1008.13~18.04.1",
        "5.0.0-1009.14~18.04.1",
        "5.0.0-1010.15~18.04.1",
        "5.0.0-1011.16",
        "5.0.0-1013.18",
        "5.0.0-1014.19"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-buildinfo-5.3.0-1030-oracle",
            "binary_version": "5.3.0-1030.32~18.04.1"
          },
          {
            "binary_name": "linux-headers-5.3.0-1030-oracle",
            "binary_version": "5.3.0-1030.32~18.04.1"
          },
          {
            "binary_name": "linux-image-unsigned-5.3.0-1030-oracle",
            "binary_version": "5.3.0-1030.32~18.04.1"
          },
          {
            "binary_name": "linux-modules-5.3.0-1030-oracle",
            "binary_version": "5.3.0-1030.32~18.04.1"
          },
          {
            "binary_name": "linux-modules-extra-5.3.0-1030-oracle",
            "binary_version": "5.3.0-1030.32~18.04.1"
          },
          {
            "binary_name": "linux-oracle-5.3-headers-5.3.0-1030",
            "binary_version": "5.3.0-1030.32~18.04.1"
          },
          {
            "binary_name": "linux-oracle-5.3-tools-5.3.0-1030",
            "binary_version": "5.3.0-1030.32~18.04.1"
          },
          {
            "binary_name": "linux-tools-5.3.0-1030-oracle",
            "binary_version": "5.3.0-1030.32~18.04.1"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:18.04:LTS",
        "name": "linux-oracle-5.3",
        "purl": "pkg:deb/ubuntu/linux-oracle-5.3@5.3.0-1030.32~18.04.1?arch=source\u0026distro=bionic"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "5.3.0-1011.12~18.04.1",
        "5.3.0-1013.14~18.04.1",
        "5.3.0-1014.15~18.04.1",
        "5.3.0-1016.18~18.04.1",
        "5.3.0-1018.20~18.04.1",
        "5.3.0-1024.26~18.04.1",
        "5.3.0-1027.29~18.04.1",
        "5.3.0-1028.30~18.04.1",
        "5.3.0-1030.32~18.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-aws-5.11-cloud-tools-5.11.0-1028",
            "binary_version": "5.11.0-1028.31~20.04.1"
          },
          {
            "binary_name": "linux-aws-5.11-headers-5.11.0-1028",
            "binary_version": "5.11.0-1028.31~20.04.1"
          },
          {
            "binary_name": "linux-aws-5.11-tools-5.11.0-1028",
            "binary_version": "5.11.0-1028.31~20.04.1"
          },
          {
            "binary_name": "linux-buildinfo-5.11.0-1028-aws",
            "binary_version": "5.11.0-1028.31~20.04.1"
          },
          {
            "binary_name": "linux-cloud-tools-5.11.0-1028-aws",
            "binary_version": "5.11.0-1028.31~20.04.1"
          },
          {
            "binary_name": "linux-headers-5.11.0-1028-aws",
            "binary_version": "5.11.0-1028.31~20.04.1"
          },
          {
            "binary_name": "linux-image-unsigned-5.11.0-1028-aws",
            "binary_version": "5.11.0-1028.31~20.04.1"
          },
          {
            "binary_name": "linux-modules-5.11.0-1028-aws",
            "binary_version": "5.11.0-1028.31~20.04.1"
          },
          {
            "binary_name": "linux-modules-extra-5.11.0-1028-aws",
            "binary_version": "5.11.0-1028.31~20.04.1"
          },
          {
            "binary_name": "linux-tools-5.11.0-1028-aws",
            "binary_version": "5.11.0-1028.31~20.04.1"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:20.04:LTS",
        "name": "linux-aws-5.11",
        "purl": "pkg:deb/ubuntu/linux-aws-5.11@5.11.0-1028.31~20.04.1?arch=source\u0026distro=focal"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "5.11.0-1009.9~20.04.2",
        "5.11.0-1014.15~20.04.1",
        "5.11.0-1016.17~20.04.1",
        "5.11.0-1017.18~20.04.1",
        "5.11.0-1019.20~20.04.1",
        "5.11.0-1020.21~20.04.2",
        "5.11.0-1021.22~20.04.2",
        "5.11.0-1022.23~20.04.1",
        "5.11.0-1023.24~20.04.1",
        "5.11.0-1025.27~20.04.1",
        "5.11.0-1027.30~20.04.1",
        "5.11.0-1028.31~20.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-aws-5.13-cloud-tools-5.13.0-1031",
            "binary_version": "5.13.0-1031.35~20.04.1"
          },
          {
            "binary_name": "linux-aws-5.13-headers-5.13.0-1031",
            "binary_version": "5.13.0-1031.35~20.04.1"
          },
          {
            "binary_name": "linux-aws-5.13-tools-5.13.0-1031",
            "binary_version": "5.13.0-1031.35~20.04.1"
          },
          {
            "binary_name": "linux-buildinfo-5.13.0-1031-aws",
            "binary_version": "5.13.0-1031.35~20.04.1"
          },
          {
            "binary_name": "linux-cloud-tools-5.13.0-1031-aws",
            "binary_version": "5.13.0-1031.35~20.04.1"
          },
          {
            "binary_name": "linux-headers-5.13.0-1031-aws",
            "binary_version": "5.13.0-1031.35~20.04.1"
          },
          {
            "binary_name": "linux-image-unsigned-5.13.0-1031-aws",
            "binary_version": "5.13.0-1031.35~20.04.1"
          },
          {
            "binary_name": "linux-modules-5.13.0-1031-aws",
            "binary_version": "5.13.0-1031.35~20.04.1"
          },
          {
            "binary_name": "linux-modules-extra-5.13.0-1031-aws",
            "binary_version": "5.13.0-1031.35~20.04.1"
          },
          {
            "binary_name": "linux-tools-5.13.0-1031-aws",
            "binary_version": "5.13.0-1031.35~20.04.1"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:20.04:LTS",
        "name": "linux-aws-5.13",
        "purl": "pkg:deb/ubuntu/linux-aws-5.13@5.13.0-1031.35~20.04.1?arch=source\u0026distro=focal"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "5.13.0-1008.9~20.04.2",
        "5.13.0-1011.12~20.04.1",
        "5.13.0-1012.13~20.04.1",
        "5.13.0-1014.15~20.04.1",
        "5.13.0-1017.19~20.04.1",
        "5.13.0-1019.21~20.04.1",
        "5.13.0-1021.23~20.04.2",
        "5.13.0-1022.24~20.04.1",
        "5.13.0-1023.25~20.04.1",
        "5.13.0-1025.27~20.04.1",
        "5.13.0-1028.31~20.04.1",
        "5.13.0-1029.32~20.04.1",
        "5.13.0-1031.35~20.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-aws-5.15-cloud-tools-5.15.0-1117",
            "binary_version": "5.15.0-1117.124~20.04.1"
          },
          {
            "binary_name": "linux-aws-5.15-headers-5.15.0-1117",
            "binary_version": "5.15.0-1117.124~20.04.1"
          },
          {
            "binary_name": "linux-aws-5.15-tools-5.15.0-1117",
            "binary_version": "5.15.0-1117.124~20.04.1"
          },
          {
            "binary_name": "linux-buildinfo-5.15.0-1117-aws",
            "binary_version": "5.15.0-1117.124~20.04.1"
          },
          {
            "binary_name": "linux-cloud-tools-5.15.0-1117-aws",
            "binary_version": "5.15.0-1117.124~20.04.1"
          },
          {
            "binary_name": "linux-headers-5.15.0-1117-aws",
            "binary_version": "5.15.0-1117.124~20.04.1"
          },
          {
            "binary_name": "linux-image-unsigned-5.15.0-1117-aws",
            "binary_version": "5.15.0-1117.124~20.04.1"
          },
          {
            "binary_name": "linux-modules-5.15.0-1117-aws",
            "binary_version": "5.15.0-1117.124~20.04.1"
          },
          {
            "binary_name": "linux-modules-extra-5.15.0-1117-aws",
            "binary_version": "5.15.0-1117.124~20.04.1"
          },
          {
            "binary_name": "linux-tools-5.15.0-1117-aws",
            "binary_version": "5.15.0-1117.124~20.04.1"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:20.04:LTS",
        "name": "linux-aws-5.15",
        "purl": "pkg:deb/ubuntu/linux-aws-5.15@5.15.0-1117.124~20.04.1?arch=source\u0026distro=esm-infra/focal"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "5.15.0-1014.18~20.04.1",
        "5.15.0-1015.19~20.04.1",
        "5.15.0-1017.21~20.04.1",
        "5.15.0-1019.23~20.04.1",
        "5.15.0-1020.24~20.04.1",
        "5.15.0-1021.25~20.04.1",
        "5.15.0-1022.26~20.04.1",
        "5.15.0-1023.27~20.04.1",
        "5.15.0-1026.30~20.04.2",
        "5.15.0-1027.31~20.04.1",
        "5.15.0-1028.32~20.04.1",
        "5.15.0-1030.34~20.04.1",
        "5.15.0-1031.35~20.04.1",
        "5.15.0-1033.37~20.04.1",
        "5.15.0-1034.38~20.04.1",
        "5.15.0-1035.39~20.04.1",
        "5.15.0-1036.40~20.04.1",
        "5.15.0-1037.41~20.04.1",
        "5.15.0-1038.43~20.04.1",
        "5.15.0-1039.44~20.04.1",
        "5.15.0-1040.45~20.04.1",
        "5.15.0-1041.46~20.04.1",
        "5.15.0-1043.48~20.04.1",
        "5.15.0-1044.49~20.04.1",
        "5.15.0-1045.50~20.04.1",
        "5.15.0-1047.52~20.04.1",
        "5.15.0-1048.53~20.04.1",
        "5.15.0-1049.54~20.04.1",
        "5.15.0-1050.55~20.04.1",
        "5.15.0-1051.56~20.04.1",
        "5.15.0-1052.57~20.04.1",
        "5.15.0-1053.58~20.04.1",
        "5.15.0-1055.60~20.04.1",
        "5.15.0-1056.61~20.04.1",
        "5.15.0-1057.63~20.04.1",
        "5.15.0-1058.64~20.04.1",
        "5.15.0-1061.67~20.04.1",
        "5.15.0-1062.68~20.04.1",
        "5.15.0-1063.69~20.04.1",
        "5.15.0-1064.70~20.04.1",
        "5.15.0-1065.71~20.04.1",
        "5.15.0-1066.72~20.04.1",
        "5.15.0-1067.73~20.04.1",
        "5.15.0-1068.74~20.04.1",
        "5.15.0-1069.75~20.04.1",
        "5.15.0-1070.76~20.04.1",
        "5.15.0-1071.77~20.04.1",
        "5.15.0-1072.78~20.04.1",
        "5.15.0-1073.79~20.04.1",
        "5.15.0-1075.82~20.04.1",
        "5.15.0-1077.84~20.04.1",
        "5.15.0-1080.87~20.04.1",
        "5.15.0-1081.88~20.04.1",
        "5.15.0-1082.89~20.04.1",
        "5.15.0-1083.90~20.04.1",
        "5.15.0-1084.91~20.04.1",
        "5.15.0-1086.93~20.04.1",
        "5.15.0-1087.94~20.04.1",
        "5.15.0-1088.95~20.04.1",
        "5.15.0-1089.96~20.04.1",
        "5.15.0-1090.97~20.04.1",
        "5.15.0-1091.98~20.04.1",
        "5.15.0-1092.99~20.04.1",
        "5.15.0-1093.100~20.04.1",
        "5.15.0-1095.102~20.04.1",
        "5.15.0-1096.103~20.04.1",
        "5.15.0-1097.104~20.04.1",
        "5.15.0-1098.105~20.04.1",
        "5.15.0-1099.106~20.04.1",
        "5.15.0-1100.107~20.04.2",
        "5.15.0-1101.108~20.04.1",
        "5.15.0-1103.110~20.04.1",
        "5.15.0-1104.111~20.04.1",
        "5.15.0-1105.112~20.04.1",
        "5.15.0-1106.113~20.04.1",
        "5.15.0-1108.115~20.04.1",
        "5.15.0-1109.116~20.04.1",
        "5.15.0-1111.118~20.04.1",
        "5.15.0-1112.119~20.04.1",
        "5.15.0-1114.121~20.04.1",
        "5.15.0-1115.122~20.04.1",
        "5.15.0-1116.123~20.04.1",
        "5.15.0-1117.124~20.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-aws-5.8-cloud-tools-5.8.0-1042",
            "binary_version": "5.8.0-1042.44~20.04.1"
          },
          {
            "binary_name": "linux-aws-5.8-headers-5.8.0-1042",
            "binary_version": "5.8.0-1042.44~20.04.1"
          },
          {
            "binary_name": "linux-aws-5.8-tools-5.8.0-1042",
            "binary_version": "5.8.0-1042.44~20.04.1"
          },
          {
            "binary_name": "linux-buildinfo-5.8.0-1042-aws",
            "binary_version": "5.8.0-1042.44~20.04.1"
          },
          {
            "binary_name": "linux-cloud-tools-5.8.0-1042-aws",
            "binary_version": "5.8.0-1042.44~20.04.1"
          },
          {
            "binary_name": "linux-headers-5.8.0-1042-aws",
            "binary_version": "5.8.0-1042.44~20.04.1"
          },
          {
            "binary_name": "linux-image-5.8.0-1042-aws",
            "binary_version": "5.8.0-1042.44~20.04.1"
          },
          {
            "binary_name": "linux-modules-5.8.0-1042-aws",
            "binary_version": "5.8.0-1042.44~20.04.1"
          },
          {
            "binary_name": "linux-modules-extra-5.8.0-1042-aws",
            "binary_version": "5.8.0-1042.44~20.04.1"
          },
          {
            "binary_name": "linux-tools-5.8.0-1042-aws",
            "binary_version": "5.8.0-1042.44~20.04.1"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:20.04:LTS",
        "name": "linux-aws-5.8",
        "purl": "pkg:deb/ubuntu/linux-aws-5.8@5.8.0-1042.44~20.04.1?arch=source\u0026distro=focal"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "5.8.0-1035.37~20.04.1",
        "5.8.0-1038.40~20.04.1",
        "5.8.0-1041.43~20.04.1",
        "5.8.0-1042.44~20.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-azure-5.11-cloud-tools-5.11.0-1028",
            "binary_version": "5.11.0-1028.31~20.04.2"
          },
          {
            "binary_name": "linux-azure-5.11-headers-5.11.0-1028",
            "binary_version": "5.11.0-1028.31~20.04.2"
          },
          {
            "binary_name": "linux-azure-5.11-tools-5.11.0-1028",
            "binary_version": "5.11.0-1028.31~20.04.2"
          },
          {
            "binary_name": "linux-buildinfo-5.11.0-1028-azure",
            "binary_version": "5.11.0-1028.31~20.04.2"
          },
          {
            "binary_name": "linux-cloud-tools-5.11.0-1028-azure",
            "binary_version": "5.11.0-1028.31~20.04.2"
          },
          {
            "binary_name": "linux-headers-5.11.0-1028-azure",
            "binary_version": "5.11.0-1028.31~20.04.2"
          },
          {
            "binary_name": "linux-image-unsigned-5.11.0-1028-azure",
            "binary_version": "5.11.0-1028.31~20.04.2"
          },
          {
            "binary_name": "linux-modules-5.11.0-1028-azure",
            "binary_version": "5.11.0-1028.31~20.04.2"
          },
          {
            "binary_name": "linux-modules-extra-5.11.0-1028-azure",
            "binary_version": "5.11.0-1028.31~20.04.2"
          },
          {
            "binary_name": "linux-tools-5.11.0-1028-azure",
            "binary_version": "5.11.0-1028.31~20.04.2"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:20.04:LTS",
        "name": "linux-azure-5.11",
        "purl": "pkg:deb/ubuntu/linux-azure-5.11@5.11.0-1028.31~20.04.2?arch=source\u0026distro=focal"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "5.11.0-1007.7~20.04.2",
        "5.11.0-1012.13~20.04.1",
        "5.11.0-1013.14~20.04.1",
        "5.11.0-1015.16~20.04.1",
        "5.11.0-1017.18~20.04.1",
        "5.11.0-1019.20~20.04.1",
        "5.11.0-1020.21~20.04.1",
        "5.11.0-1021.22~20.04.1",
        "5.11.0-1022.23~20.04.1",
        "5.11.0-1023.24~20.04.1",
        "5.11.0-1025.27~20.04.1",
        "5.11.0-1027.30~20.04.1",
        "5.11.0-1028.31~20.04.2"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-azure-5.13-cloud-tools-5.13.0-1031",
            "binary_version": "5.13.0-1031.37~20.04.1"
          },
          {
            "binary_name": "linux-azure-5.13-headers-5.13.0-1031",
            "binary_version": "5.13.0-1031.37~20.04.1"
          },
          {
            "binary_name": "linux-azure-5.13-tools-5.13.0-1031",
            "binary_version": "5.13.0-1031.37~20.04.1"
          },
          {
            "binary_name": "linux-buildinfo-5.13.0-1031-azure",
            "binary_version": "5.13.0-1031.37~20.04.1"
          },
          {
            "binary_name": "linux-cloud-tools-5.13.0-1031-azure",
            "binary_version": "5.13.0-1031.37~20.04.1"
          },
          {
            "binary_name": "linux-headers-5.13.0-1031-azure",
            "binary_version": "5.13.0-1031.37~20.04.1"
          },
          {
            "binary_name": "linux-image-unsigned-5.13.0-1031-azure",
            "binary_version": "5.13.0-1031.37~20.04.1"
          },
          {
            "binary_name": "linux-modules-5.13.0-1031-azure",
            "binary_version": "5.13.0-1031.37~20.04.1"
          },
          {
            "binary_name": "linux-modules-extra-5.13.0-1031-azure",
            "binary_version": "5.13.0-1031.37~20.04.1"
          },
          {
            "binary_name": "linux-tools-5.13.0-1031-azure",
            "binary_version": "5.13.0-1031.37~20.04.1"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:20.04:LTS",
        "name": "linux-azure-5.13",
        "purl": "pkg:deb/ubuntu/linux-azure-5.13@5.13.0-1031.37~20.04.1?arch=source\u0026distro=focal"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "5.13.0-1009.10~20.04.2",
        "5.13.0-1012.14~20.04.1",
        "5.13.0-1013.15~20.04.1",
        "5.13.0-1014.16~20.04.1",
        "5.13.0-1017.19~20.04.1",
        "5.13.0-1021.24~20.04.1",
        "5.13.0-1022.26~20.04.1",
        "5.13.0-1023.27~20.04.1",
        "5.13.0-1025.29~20.04.1",
        "5.13.0-1028.33~20.04.1",
        "5.13.0-1029.34~20.04.1",
        "5.13.0-1031.37~20.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-azure-5.15-cloud-tools-5.15.0-1123",
            "binary_version": "5.15.0-1123.132~20.04.1"
          },
          {
            "binary_name": "linux-azure-5.15-headers-5.15.0-1123",
            "binary_version": "5.15.0-1123.132~20.04.1"
          },
          {
            "binary_name": "linux-azure-5.15-tools-5.15.0-1123",
            "binary_version": "5.15.0-1123.132~20.04.1"
          },
          {
            "binary_name": "linux-buildinfo-5.15.0-1123-azure",
            "binary_version": "5.15.0-1123.132~20.04.1"
          },
          {
            "binary_name": "linux-cloud-tools-5.15.0-1123-azure",
            "binary_version": "5.15.0-1123.132~20.04.1"
          },
          {
            "binary_name": "linux-headers-5.15.0-1123-azure",
            "binary_version": "5.15.0-1123.132~20.04.1"
          },
          {
            "binary_name": "linux-image-unsigned-5.15.0-1123-azure",
            "binary_version": "5.15.0-1123.132~20.04.1"
          },
          {
            "binary_name": "linux-modules-5.15.0-1123-azure",
            "binary_version": "5.15.0-1123.132~20.04.1"
          },
          {
            "binary_name": "linux-modules-extra-5.15.0-1123-azure",
            "binary_version": "5.15.0-1123.132~20.04.1"
          },
          {
            "binary_name": "linux-modules-involflt-5.15.0-1123-azure",
            "binary_version": "5.15.0-1123.132~20.04.1"
          },
          {
            "binary_name": "linux-tools-5.15.0-1123-azure",
            "binary_version": "5.15.0-1123.132~20.04.1"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:20.04:LTS",
        "name": "linux-azure-5.15",
        "purl": "pkg:deb/ubuntu/linux-azure-5.15@5.15.0-1123.132~20.04.1?arch=source\u0026distro=esm-infra/focal"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "5.15.0-1007.8~20.04.1",
        "5.15.0-1008.9~20.04.1",
        "5.15.0-1013.16~20.04.1",
        "5.15.0-1014.17~20.04.1",
        "5.15.0-1017.20~20.04.1",
        "5.15.0-1019.24~20.04.1",
        "5.15.0-1020.25~20.04.1",
        "5.15.0-1021.26~20.04.1",
        "5.15.0-1022.27~20.04.1",
        "5.15.0-1023.29~20.04.1",
        "5.15.0-1029.36~20.04.1",
        "5.15.0-1030.37~20.04.1",
        "5.15.0-1031.38~20.04.1",
        "5.15.0-1033.40~20.04.1",
        "5.15.0-1034.41~20.04.1",
        "5.15.0-1035.42~20.04.1",
        "5.15.0-1036.43~20.04.1",
        "5.15.0-1037.44~20.04.1",
        "5.15.0-1038.45~20.04.1",
        "5.15.0-1039.46~20.04.1",
        "5.15.0-1040.47~20.04.1",
        "5.15.0-1041.48~20.04.1",
        "5.15.0-1042.49~20.04.1",
        "5.15.0-1043.50~20.04.1",
        "5.15.0-1045.52~20.04.1",
        "5.15.0-1046.53~20.04.1",
        "5.15.0-1047.54~20.04.1",
        "5.15.0-1049.56~20.04.1",
        "5.15.0-1050.57~20.04.1",
        "5.15.0-1051.59~20.04.1",
        "5.15.0-1052.60~20.04.1",
        "5.15.0-1053.61~20.04.1",
        "5.15.0-1054.62~20.04.1",
        "5.15.0-1056.64~20.04.1",
        "5.15.0-1057.65~20.04.1",
        "5.15.0-1058.66~20.04.2",
        "5.15.0-1059.67~20.04.1",
        "5.15.0-1060.69~20.04.1",
        "5.15.0-1061.70~20.04.1",
        "5.15.0-1063.72~20.04.1",
        "5.15.0-1064.73~20.04.1",
        "5.15.0-1065.74~20.04.1",
        "5.15.0-1067.76~20.04.1",
        "5.15.0-1068.77~20.04.1",
        "5.15.0-1070.79~20.04.1",
        "5.15.0-1071.80~20.04.1",
        "5.15.0-1072.81~20.04.1",
        "5.15.0-1073.82~20.04.1",
        "5.15.0-1074.83~20.04.1",
        "5.15.0-1075.84~20.04.1",
        "5.15.0-1078.87~20.04.1",
        "5.15.0-1079.88~20.04.1",
        "5.15.0-1081.90~20.04.1",
        "5.15.0-1082.91~20.04.1",
        "5.15.0-1086.95~20.04.1",
        "5.15.0-1087.96~20.04.1",
        "5.15.0-1088.97~20.04.1",
        "5.15.0-1089.98~20.04.1",
        "5.15.0-1091.100~20.04.1",
        "5.15.0-1094.103~20.04.1",
        "5.15.0-1095.104~20.04.1",
        "5.15.0-1096.105~20.04.1",
        "5.15.0-1097.106~20.04.1",
        "5.15.0-1098.107~20.04.1",
        "5.15.0-1102.111~20.04.1",
        "5.15.0-1103.112~20.04.1",
        "5.15.0-1110.119~20.04.1",
        "5.15.0-1111.120~20.04.1",
        "5.15.0-1114.123~20.04.1",
        "5.15.0-1116.125~20.04.1",
        "5.15.0-1117.126~20.04.1",
        "5.15.0-1119.128~20.04.1",
        "5.15.0-1121.130~20.04.1",
        "5.15.0-1122.131~20.04.1",
        "5.15.0-1123.132~20.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-azure-5.8-cloud-tools-5.8.0-1043",
            "binary_version": "5.8.0-1043.46~20.04.1"
          },
          {
            "binary_name": "linux-azure-5.8-headers-5.8.0-1043",
            "binary_version": "5.8.0-1043.46~20.04.1"
          },
          {
            "binary_name": "linux-azure-5.8-tools-5.8.0-1043",
            "binary_version": "5.8.0-1043.46~20.04.1"
          },
          {
            "binary_name": "linux-buildinfo-5.8.0-1043-azure",
            "binary_version": "5.8.0-1043.46~20.04.1"
          },
          {
            "binary_name": "linux-cloud-tools-5.8.0-1043-azure",
            "binary_version": "5.8.0-1043.46~20.04.1"
          },
          {
            "binary_name": "linux-headers-5.8.0-1043-azure",
            "binary_version": "5.8.0-1043.46~20.04.1"
          },
          {
            "binary_name": "linux-image-unsigned-5.8.0-1043-azure",
            "binary_version": "5.8.0-1043.46~20.04.1"
          },
          {
            "binary_name": "linux-modules-5.8.0-1043-azure",
            "binary_version": "5.8.0-1043.46~20.04.1"
          },
          {
            "binary_name": "linux-modules-extra-5.8.0-1043-azure",
            "binary_version": "5.8.0-1043.46~20.04.1"
          },
          {
            "binary_name": "linux-tools-5.8.0-1043-azure",
            "binary_version": "5.8.0-1043.46~20.04.1"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:20.04:LTS",
        "name": "linux-azure-5.8",
        "purl": "pkg:deb/ubuntu/linux-azure-5.8@5.8.0-1043.46~20.04.1?arch=source\u0026distro=focal"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "5.8.0-1033.35~20.04.1",
        "5.8.0-1036.38~20.04.1",
        "5.8.0-1039.42~20.04.1",
        "5.8.0-1040.43~20.04.1",
        "5.8.0-1041.44~20.04.1",
        "5.8.0-1042.45~20.04.1",
        "5.8.0-1043.46~20.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-image-unsigned-5.4.0-1103-azure-fde",
            "binary_version": "5.4.0-1103.109+cvm1.1"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:20.04:LTS",
        "name": "linux-azure-fde",
        "purl": "pkg:deb/ubuntu/linux-azure-fde@5.4.0-1103.109+cvm1.1?arch=source\u0026distro=focal"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "5.4.0-1063.66+cvm2.2",
        "5.4.0-1063.66+cvm3.2",
        "5.4.0-1064.67+cvm1.1",
        "5.4.0-1065.68+cvm2.1",
        "5.4.0-1067.70+cvm1.1",
        "5.4.0-1068.71+cvm1.1",
        "5.4.0-1069.72+cvm1.1",
        "5.4.0-1070.73+cvm1.1",
        "5.4.0-1072.75+cvm1.1",
        "5.4.0-1073.76+cvm1.1",
        "5.4.0-1074.77+cvm1.1",
        "5.4.0-1076.79+cvm1.1",
        "5.4.0-1078.81+cvm1.1",
        "5.4.0-1080.83+cvm1.1",
        "5.4.0-1083.87+cvm1.1",
        "5.4.0-1085.90+cvm1.1",
        "5.4.0-1085.90+cvm2.1",
        "5.4.0-1086.91+cvm1.1",
        "5.4.0-1089.94+cvm1.2",
        "5.4.0-1090.95+cvm1.1",
        "5.4.0-1091.96+cvm1.1",
        "5.4.0-1092.97+cvm1.1",
        "5.4.0-1095.101+cvm1.1",
        "5.4.0-1098.104+cvm1.1",
        "5.4.0-1100.106+cvm1.1",
        "5.4.0-1103.109+cvm1.1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-azure-fde-5.15-cloud-tools-5.15.0-1122",
            "binary_version": "5.15.0-1122.131~20.04.1"
          },
          {
            "binary_name": "linux-azure-fde-5.15-headers-5.15.0-1122",
            "binary_version": "5.15.0-1122.131~20.04.1"
          },
          {
            "binary_name": "linux-azure-fde-5.15-tools-5.15.0-1122",
            "binary_version": "5.15.0-1122.131~20.04.1"
          },
          {
            "binary_name": "linux-buildinfo-5.15.0-1122-azure-fde",
            "binary_version": "5.15.0-1122.131~20.04.1"
          },
          {
            "binary_name": "linux-cloud-tools-5.15.0-1122-azure-fde",
            "binary_version": "5.15.0-1122.131~20.04.1"
          },
          {
            "binary_name": "linux-headers-5.15.0-1122-azure-fde",
            "binary_version": "5.15.0-1122.131~20.04.1"
          },
          {
            "binary_name": "linux-image-unsigned-5.15.0-1122-azure-fde",
            "binary_version": "5.15.0-1122.131~20.04.1"
          },
          {
            "binary_name": "linux-modules-5.15.0-1122-azure-fde",
            "binary_version": "5.15.0-1122.131~20.04.1"
          },
          {
            "binary_name": "linux-modules-extra-5.15.0-1122-azure-fde",
            "binary_version": "5.15.0-1122.131~20.04.1"
          },
          {
            "binary_name": "linux-modules-involflt-5.15.0-1122-azure-fde",
            "binary_version": "5.15.0-1122.131~20.04.1"
          },
          {
            "binary_name": "linux-tools-5.15.0-1122-azure-fde",
            "binary_version": "5.15.0-1122.131~20.04.1"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:20.04:LTS",
        "name": "linux-azure-fde-5.15",
        "purl": "pkg:deb/ubuntu/linux-azure-fde-5.15@5.15.0-1122.131~20.04.1?arch=source\u0026distro=esm-infra/focal"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "5.15.0-1019.24~20.04.1.1",
        "5.15.0-1020.25~20.04.1.1",
        "5.15.0-1021.26~20.04.1.1",
        "5.15.0-1029.36~20.04.1.1",
        "5.15.0-1030.37~20.04.1.1",
        "5.15.0-1031.38~20.04.1.1",
        "5.15.0-1033.40~20.04.1.1",
        "5.15.0-1034.41~20.04.1.2",
        "5.15.0-1035.42~20.04.1.1",
        "5.15.0-1036.43~20.04.1.1",
        "5.15.0-1037.44~20.04.1.1",
        "5.15.0-1038.45~20.04.1.1",
        "5.15.0-1039.46~20.04.1.1",
        "5.15.0-1040.47~20.04.1.1",
        "5.15.0-1041.48~20.04.1.1",
        "5.15.0-1042.49~20.04.1.1",
        "5.15.0-1043.50~20.04.1.1",
        "5.15.0-1046.53~20.04.1.1",
        "5.15.0-1047.54~20.04.1.1",
        "5.15.0-1049.56~20.04.1.1",
        "5.15.0-1050.57~20.04.1.1",
        "5.15.0-1051.59~20.04.1.1",
        "5.15.0-1052.60~20.04.1.1",
        "5.15.0-1053.61~20.04.1.1",
        "5.15.0-1054.62~20.04.1.1",
        "5.15.0-1056.64~20.04.1.1",
        "5.15.0-1057.65~20.04.1.1",
        "5.15.0-1058.66~20.04.2.1",
        "5.15.0-1059.67~20.04.1.1",
        "5.15.0-1060.69~20.04.1.1",
        "5.15.0-1061.70~20.04.1.1",
        "5.15.0-1063.72~20.04.1.1",
        "5.15.0-1064.73~20.04.1.1",
        "5.15.0-1065.74~20.04.1.1",
        "5.15.0-1067.76~20.04.1.1",
        "5.15.0-1068.77~20.04.1.1",
        "5.15.0-1070.79~20.04.1.1",
        "5.15.0-1071.80~20.04.1.1",
        "5.15.0-1072.81~20.04.1.1",
        "5.15.0-1073.82~20.04.1.1",
        "5.15.0-1074.83~20.04.1.1",
        "5.15.0-1076.85~20.04.1.1",
        "5.15.0-1078.87~20.04.1.1",
        "5.15.0-1081.90~20.04.1.1",
        "5.15.0-1082.91~20.04.1.1",
        "5.15.0-1086.95~20.04.1.1",
        "5.15.0-1087.96~20.04.1.1",
        "5.15.0-1088.97~20.04.1.1",
        "5.15.0-1089.98~20.04.1.1",
        "5.15.0-1091.100~20.04.1.1",
        "5.15.0-1094.103~20.04.1.1",
        "5.15.0-1096.105~20.04.1.1",
        "5.15.0-1097.106~20.04.1.1",
        "5.15.0-1098.107~20.04.1.1",
        "5.15.0-1102.111~20.04.1.1",
        "5.15.0-1103.112~20.04.1.1",
        "5.15.0-1111.120~20.04.1.1",
        "5.15.0-1114.123~20.04.1",
        "5.15.0-1116.125~20.04.1",
        "5.15.0-1117.126~20.04.2",
        "5.15.0-1118.127~20.04.1",
        "5.15.0-1119.128~20.04.1",
        "5.15.0-1120.129~20.04.1",
        "5.15.0-1121.130~20.04.1",
        "5.15.0-1122.131~20.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-buildinfo-5.11.0-1029-gcp",
            "binary_version": "5.11.0-1029.33~20.04.3"
          },
          {
            "binary_name": "linux-gcp-5.11-headers-5.11.0-1029",
            "binary_version": "5.11.0-1029.33~20.04.3"
          },
          {
            "binary_name": "linux-gcp-5.11-tools-5.11.0-1029",
            "binary_version": "5.11.0-1029.33~20.04.3"
          },
          {
            "binary_name": "linux-headers-5.11.0-1029-gcp",
            "binary_version": "5.11.0-1029.33~20.04.3"
          },
          {
            "binary_name": "linux-image-unsigned-5.11.0-1029-gcp",
            "binary_version": "5.11.0-1029.33~20.04.3"
          },
          {
            "binary_name": "linux-modules-5.11.0-1029-gcp",
            "binary_version": "5.11.0-1029.33~20.04.3"
          },
          {
            "binary_name": "linux-modules-extra-5.11.0-1029-gcp",
            "binary_version": "5.11.0-1029.33~20.04.3"
          },
          {
            "binary_name": "linux-tools-5.11.0-1029-gcp",
            "binary_version": "5.11.0-1029.33~20.04.3"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:20.04:LTS",
        "name": "linux-gcp-5.11",
        "purl": "pkg:deb/ubuntu/linux-gcp-5.11@5.11.0-1029.33~20.04.3?arch=source\u0026distro=focal"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "5.11.0-1009.10~20.04.1",
        "5.11.0-1014.16~20.04.1",
        "5.11.0-1017.19~20.04.1",
        "5.11.0-1018.20~20.04.2",
        "5.11.0-1020.22~20.04.1",
        "5.11.0-1021.23~20.04.1",
        "5.11.0-1022.24~20.04.1",
        "5.11.0-1023.25~20.04.1",
        "5.11.0-1024.26~20.04.1",
        "5.11.0-1026.29~20.04.1",
        "5.11.0-1028.32~20.04.1",
        "5.11.0-1029.33~20.04.3"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-buildinfo-5.13.0-1033-gcp",
            "binary_version": "5.13.0-1033.40~20.04.1"
          },
          {
            "binary_name": "linux-gcp-5.13-headers-5.13.0-1033",
            "binary_version": "5.13.0-1033.40~20.04.1"
          },
          {
            "binary_name": "linux-gcp-5.13-tools-5.13.0-1033",
            "binary_version": "5.13.0-1033.40~20.04.1"
          },
          {
            "binary_name": "linux-headers-5.13.0-1033-gcp",
            "binary_version": "5.13.0-1033.40~20.04.1"
          },
          {
            "binary_name": "linux-image-unsigned-5.13.0-1033-gcp",
            "binary_version": "5.13.0-1033.40~20.04.1"
          },
          {
            "binary_name": "linux-modules-5.13.0-1033-gcp",
            "binary_version": "5.13.0-1033.40~20.04.1"
          },
          {
            "binary_name": "linux-modules-extra-5.13.0-1033-gcp",
            "binary_version": "5.13.0-1033.40~20.04.1"
          },
          {
            "binary_name": "linux-tools-5.13.0-1033-gcp",
            "binary_version": "5.13.0-1033.40~20.04.1"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:20.04:LTS",
        "name": "linux-gcp-5.13",
        "purl": "pkg:deb/ubuntu/linux-gcp-5.13@5.13.0-1033.40~20.04.1?arch=source\u0026distro=focal"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "5.13.0-1008.9~20.04.3",
        "5.13.0-1012.15~20.04.1",
        "5.13.0-1013.16~20.04.1",
        "5.13.0-1015.18~20.04.1",
        "5.13.0-1019.23~20.04.1",
        "5.13.0-1021.25~20.04.1",
        "5.13.0-1023.28~20.04.1",
        "5.13.0-1024.29~20.04.1",
        "5.13.0-1025.30~20.04.1",
        "5.13.0-1027.32~20.04.1",
        "5.13.0-1030.36~20.04.1",
        "5.13.0-1031.37~20.04.1",
        "5.13.0-1033.40~20.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-buildinfo-5.15.0-1118-gcp",
            "binary_version": "5.15.0-1118.128~20.04.1"
          },
          {
            "binary_name": "linux-gcp-5.15-headers-5.15.0-1118",
            "binary_version": "5.15.0-1118.128~20.04.1"
          },
          {
            "binary_name": "linux-gcp-5.15-tools-5.15.0-1118",
            "binary_version": "5.15.0-1118.128~20.04.1"
          },
          {
            "binary_name": "linux-headers-5.15.0-1118-gcp",
            "binary_version": "5.15.0-1118.128~20.04.1"
          },
          {
            "binary_name": "linux-image-unsigned-5.15.0-1118-gcp",
            "binary_version": "5.15.0-1118.128~20.04.1"
          },
          {
            "binary_name": "linux-modules-5.15.0-1118-gcp",
            "binary_version": "5.15.0-1118.128~20.04.1"
          },
          {
            "binary_name": "linux-modules-extra-5.15.0-1118-gcp",
            "binary_version": "5.15.0-1118.128~20.04.1"
          },
          {
            "binary_name": "linux-tools-5.15.0-1118-gcp",
            "binary_version": "5.15.0-1118.128~20.04.1"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:20.04:LTS",
        "name": "linux-gcp-5.15",
        "purl": "pkg:deb/ubuntu/linux-gcp-5.15@5.15.0-1118.128~20.04.1?arch=source\u0026distro=esm-infra/focal"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "5.15.0-1006.9~20.04.1",
        "5.15.0-1012.17~20.04.1",
        "5.15.0-1013.18~20.04.1",
        "5.15.0-1016.21~20.04.1",
        "5.15.0-1017.23~20.04.2",
        "5.15.0-1018.24~20.04.1",
        "5.15.0-1021.28~20.04.1",
        "5.15.0-1022.29~20.04.1",
        "5.15.0-1025.32~20.04.2",
        "5.15.0-1026.33~20.04.1",
        "5.15.0-1027.34~20.04.1",
        "5.15.0-1029.36~20.04.1",
        "5.15.0-1030.37~20.04.1",
        "5.15.0-1031.38~20.04.1",
        "5.15.0-1032.40~20.04.1",
        "5.15.0-1033.41~20.04.1",
        "5.15.0-1034.42~20.04.1",
        "5.15.0-1035.43~20.04.1",
        "5.15.0-1036.44~20.04.1",
        "5.15.0-1037.45~20.04.1",
        "5.15.0-1038.46~20.04.1",
        "5.15.0-1039.47~20.04.1",
        "5.15.0-1040.48~20.04.1",
        "5.15.0-1041.49~20.04.1",
        "5.15.0-1042.50~20.04.1",
        "5.15.0-1044.52~20.04.1",
        "5.15.0-1045.53~20.04.2",
        "5.15.0-1046.54~20.04.1",
        "5.15.0-1047.55~20.04.1",
        "5.15.0-1048.56~20.04.1",
        "5.15.0-1049.57~20.04.1",
        "5.15.0-1051.59~20.04.1",
        "5.15.0-1052.60~20.04.1",
        "5.15.0-1053.61~20.04.1",
        "5.15.0-1054.62~20.04.1",
        "5.15.0-1055.63~20.04.1",
        "5.15.0-1058.66~20.04.1",
        "5.15.0-1059.67~20.04.1",
        "5.15.0-1060.68~20.04.1",
        "5.15.0-1062.70~20.04.1",
        "5.15.0-1065.73~20.04.1",
        "5.15.0-1066.74~20.04.1",
        "5.15.0-1067.75~20.04.1",
        "5.15.0-1068.76~20.04.1",
        "5.15.0-1069.77~20.04.1",
        "5.15.0-1070.78~20.04.1",
        "5.15.0-1071.79~20.04.1",
        "5.15.0-1072.80~20.04.1",
        "5.15.0-1073.81~20.04.1",
        "5.15.0-1074.83~20.04.1",
        "5.15.0-1075.84~20.04.1",
        "5.15.0-1077.86~20.04.1",
        "5.15.0-1078.87~20.04.1",
        "5.15.0-1081.90~20.04.1",
        "5.15.0-1083.92~20.04.1",
        "5.15.0-1085.94~20.04.1",
        "5.15.0-1086.95~20.04.1",
        "5.15.0-1087.96~20.04.2",
        "5.15.0-1088.97~20.04.1",
        "5.15.0-1090.99~20.04.1",
        "5.15.0-1091.100~20.04.1",
        "5.15.0-1092.101~20.04.1",
        "5.15.0-1093.102~20.04.1",
        "5.15.0-1095.104~20.04.1",
        "5.15.0-1096.105~20.04.1",
        "5.15.0-1097.106~20.04.1",
        "5.15.0-1098.107~20.04.1",
        "5.15.0-1099.108~20.04.1",
        "5.15.0-1100.109~20.04.1",
        "5.15.0-1101.110~20.04.1",
        "5.15.0-1103.112~20.04.1",
        "5.15.0-1104.113~20.04.1",
        "5.15.0-1106.115~20.04.1",
        "5.15.0-1108.117~20.04.1",
        "5.15.0-1109.118~20.04.1",
        "5.15.0-1111.121~20.04.1",
        "5.15.0-1112.122~20.04.1",
        "5.15.0-1114.124~20.04.1",
        "5.15.0-1118.128~20.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-buildinfo-5.8.0-1039-gcp",
            "binary_version": "5.8.0-1039.41"
          },
          {
            "binary_name": "linux-gcp-5.8-headers-5.8.0-1039",
            "binary_version": "5.8.0-1039.41"
          },
          {
            "binary_name": "linux-gcp-5.8-tools-5.8.0-1039",
            "binary_version": "5.8.0-1039.41"
          },
          {
            "binary_name": "linux-headers-5.8.0-1039-gcp",
            "binary_version": "5.8.0-1039.41"
          },
          {
            "binary_name": "linux-image-unsigned-5.8.0-1039-gcp",
            "binary_version": "5.8.0-1039.41"
          },
          {
            "binary_name": "linux-modules-5.8.0-1039-gcp",
            "binary_version": "5.8.0-1039.41"
          },
          {
            "binary_name": "linux-modules-extra-5.8.0-1039-gcp",
            "binary_version": "5.8.0-1039.41"
          },
          {
            "binary_name": "linux-tools-5.8.0-1039-gcp",
            "binary_version": "5.8.0-1039.41"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:20.04:LTS",
        "name": "linux-gcp-5.8",
        "purl": "pkg:deb/ubuntu/linux-gcp-5.8@5.8.0-1039.41?arch=source\u0026distro=focal"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "5.8.0-1032.34~20.04.1",
        "5.8.0-1035.37~20.04.1",
        "5.8.0-1038.40~20.04.1",
        "5.8.0-1039.41"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-buildinfo-5.4.0-1105-gke",
            "binary_version": "5.4.0-1105.112"
          },
          {
            "binary_name": "linux-gke-headers-5.4.0-1105",
            "binary_version": "5.4.0-1105.112"
          },
          {
            "binary_name": "linux-gke-tools-5.4.0-1105",
            "binary_version": "5.4.0-1105.112"
          },
          {
            "binary_name": "linux-headers-5.4.0-1105-gke",
            "binary_version": "5.4.0-1105.112"
          },
          {
            "binary_name": "linux-image-unsigned-5.4.0-1105-gke",
            "binary_version": "5.4.0-1105.112"
          },
          {
            "binary_name": "linux-modules-5.4.0-1105-gke",
            "binary_version": "5.4.0-1105.112"
          },
          {
            "binary_name": "linux-modules-extra-5.4.0-1105-gke",
            "binary_version": "5.4.0-1105.112"
          },
          {
            "binary_name": "linux-tools-5.4.0-1105-gke",
            "binary_version": "5.4.0-1105.112"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:20.04:LTS",
        "name": "linux-gke",
        "purl": "pkg:deb/ubuntu/linux-gke@5.4.0-1105.112?arch=source\u0026distro=focal"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "5.4.0-1033.35",
        "5.4.0-1035.37",
        "5.4.0-1036.38",
        "5.4.0-1037.39",
        "5.4.0-1039.41",
        "5.4.0-1041.43",
        "5.4.0-1042.44",
        "5.4.0-1043.45",
        "5.4.0-1044.46",
        "5.4.0-1046.48",
        "5.4.0-1049.52",
        "5.4.0-1051.54",
        "5.4.0-1052.55",
        "5.4.0-1053.56",
        "5.4.0-1054.57",
        "5.4.0-1055.58",
        "5.4.0-1056.59",
        "5.4.0-1057.60",
        "5.4.0-1059.62",
        "5.4.0-1061.64",
        "5.4.0-1062.65",
        "5.4.0-1063.66",
        "5.4.0-1065.68",
        "5.4.0-1066.69",
        "5.4.0-1067.70",
        "5.4.0-1068.71",
        "5.4.0-1071.76",
        "5.4.0-1072.77",
        "5.4.0-1074.79",
        "5.4.0-1076.82",
        "5.4.0-1078.84",
        "5.4.0-1080.86",
        "5.4.0-1081.87",
        "5.4.0-1083.89",
        "5.4.0-1084.90",
        "5.4.0-1086.93",
        "5.4.0-1087.94",
        "5.4.0-1090.97",
        "5.4.0-1091.98",
        "5.4.0-1094.101",
        "5.4.0-1095.102",
        "5.4.0-1096.103",
        "5.4.0-1097.104",
        "5.4.0-1098.105",
        "5.4.0-1099.106",
        "5.4.0-1100.107",
        "5.4.0-1101.108",
        "5.4.0-1102.109",
        "5.4.0-1103.110",
        "5.4.0-1104.111",
        "5.4.0-1105.112"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-buildinfo-5.15.0-1039-gke",
            "binary_version": "5.15.0-1039.44~20.04.1"
          },
          {
            "binary_name": "linux-gke-5.15-headers-5.15.0-1039",
            "binary_version": "5.15.0-1039.44~20.04.1"
          },
          {
            "binary_name": "linux-gke-5.15-tools-5.15.0-1039",
            "binary_version": "5.15.0-1039.44~20.04.1"
          },
          {
            "binary_name": "linux-headers-5.15.0-1039-gke",
            "binary_version": "5.15.0-1039.44~20.04.1"
          },
          {
            "binary_name": "linux-image-unsigned-5.15.0-1039-gke",
            "binary_version": "5.15.0-1039.44~20.04.1"
          },
          {
            "binary_name": "linux-modules-5.15.0-1039-gke",
            "binary_version": "5.15.0-1039.44~20.04.1"
          },
          {
            "binary_name": "linux-modules-extra-5.15.0-1039-gke",
            "binary_version": "5.15.0-1039.44~20.04.1"
          },
          {
            "binary_name": "linux-modules-iwlwifi-5.15.0-1039-gke",
            "binary_version": "5.15.0-1039.44~20.04.1"
          },
          {
            "binary_name": "linux-tools-5.15.0-1039-gke",
            "binary_version": "5.15.0-1039.44~20.04.1"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:20.04:LTS",
        "name": "linux-gke-5.15",
        "purl": "pkg:deb/ubuntu/linux-gke-5.15@5.15.0-1039.44~20.04.1?arch=source\u0026distro=focal"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "5.15.0-1011.14~20.04.1",
        "5.15.0-1014.17~20.04.1",
        "5.15.0-1015.18~20.04.1",
        "5.15.0-1016.19~20.04.1",
        "5.15.0-1019.23~20.04.1",
        "5.15.0-1020.25~20.04.1",
        "5.15.0-1023.28~20.04.2",
        "5.15.0-1027.32~20.04.1",
        "5.15.0-1028.33~20.04.1",
        "5.15.0-1029.34~20.04.1",
        "5.15.0-1031.36~20.04.1",
        "5.15.0-1032.37~20.04.1",
        "5.15.0-1033.38~20.04.1",
        "5.15.0-1034.39~20.04.1",
        "5.15.0-1036.41~20.04.1",
        "5.15.0-1037.42~20.04.1",
        "5.15.0-1038.43~20.04.1",
        "5.15.0-1039.44~20.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-buildinfo-5.4.0-1102-gkeop",
            "binary_version": "5.4.0-1102.106"
          },
          {
            "binary_name": "linux-cloud-tools-5.4.0-1102-gkeop",
            "binary_version": "5.4.0-1102.106"
          },
          {
            "binary_name": "linux-gkeop-cloud-tools-5.4.0-1102",
            "binary_version": "5.4.0-1102.106"
          },
          {
            "binary_name": "linux-gkeop-headers-5.4.0-1102",
            "binary_version": "5.4.0-1102.106"
          },
          {
            "binary_name": "linux-gkeop-source-5.4.0",
            "binary_version": "5.4.0-1102.106"
          },
          {
            "binary_name": "linux-gkeop-tools-5.4.0-1102",
            "binary_version": "5.4.0-1102.106"
          },
          {
            "binary_name": "linux-headers-5.4.0-1102-gkeop",
            "binary_version": "5.4.0-1102.106"
          },
          {
            "binary_name": "linux-image-unsigned-5.4.0-1102-gkeop",
            "binary_version": "5.4.0-1102.106"
          },
          {
            "binary_name": "linux-modules-5.4.0-1102-gkeop",
            "binary_version": "5.4.0-1102.106"
          },
          {
            "binary_name": "linux-modules-extra-5.4.0-1102-gkeop",
            "binary_version": "5.4.0-1102.106"
          },
          {
            "binary_name": "linux-tools-5.4.0-1102-gkeop",
            "binary_version": "5.4.0-1102.106"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:20.04:LTS",
        "name": "linux-gkeop",
        "purl": "pkg:deb/ubuntu/linux-gkeop@5.4.0-1102.106?arch=source\u0026distro=focal"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "5.4.0-1008.9",
        "5.4.0-1009.10",
        "5.4.0-1010.11",
        "5.4.0-1011.12",
        "5.4.0-1012.13",
        "5.4.0-1013.14",
        "5.4.0-1014.15",
        "5.4.0-1015.16",
        "5.4.0-1016.17",
        "5.4.0-1018.19",
        "5.4.0-1021.22",
        "5.4.0-1022.23",
        "5.4.0-1023.24",
        "5.4.0-1024.25",
        "5.4.0-1025.26",
        "5.4.0-1026.27",
        "5.4.0-1027.28",
        "5.4.0-1029.30",
        "5.4.0-1031.32",
        "5.4.0-1032.33",
        "5.4.0-1033.34",
        "5.4.0-1034.35",
        "5.4.0-1036.37",
        "5.4.0-1037.38",
        "5.4.0-1038.39",
        "5.4.0-1039.40",
        "5.4.0-1040.41",
        "5.4.0-1043.44",
        "5.4.0-1046.48",
        "5.4.0-1048.51",
        "5.4.0-1049.52",
        "5.4.0-1051.54",
        "5.4.0-1052.55",
        "5.4.0-1053.56",
        "5.4.0-1054.57",
        "5.4.0-1056.60",
        "5.4.0-1057.61",
        "5.4.0-1060.64",
        "5.4.0-1061.65",
        "5.4.0-1062.66",
        "5.4.0-1064.68",
        "5.4.0-1065.69",
        "5.4.0-1066.70",
        "5.4.0-1067.71",
        "5.4.0-1068.72",
        "5.4.0-1069.73",
        "5.4.0-1070.74",
        "5.4.0-1071.75",
        "5.4.0-1072.76",
        "5.4.0-1073.77",
        "5.4.0-1074.78",
        "5.4.0-1075.79",
        "5.4.0-1076.80",
        "5.4.0-1077.81",
        "5.4.0-1078.82",
        "5.4.0-1079.83",
        "5.4.0-1080.84",
        "5.4.0-1081.85",
        "5.4.0-1083.87",
        "5.4.0-1084.88",
        "5.4.0-1085.89",
        "5.4.0-1086.90",
        "5.4.0-1087.91",
        "5.4.0-1088.92",
        "5.4.0-1089.93",
        "5.4.0-1090.94",
        "5.4.0-1091.95",
        "5.4.0-1092.96",
        "5.4.0-1093.97",
        "5.4.0-1094.98",
        "5.4.0-1095.99",
        "5.4.0-1096.100",
        "5.4.0-1097.101",
        "5.4.0-1098.102",
        "5.4.0-1099.103",
        "5.4.0-1100.104",
        "5.4.0-1101.105",
        "5.4.0-1102.106"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-buildinfo-5.15.0-1055-gkeop",
            "binary_version": "5.15.0-1055.62~20.04.1"
          },
          {
            "binary_name": "linux-cloud-tools-5.15.0-1055-gkeop",
            "binary_version": "5.15.0-1055.62~20.04.1"
          },
          {
            "binary_name": "linux-gkeop-5.15-cloud-tools-5.15.0-1055",
            "binary_version": "5.15.0-1055.62~20.04.1"
          },
          {
            "binary_name": "linux-gkeop-5.15-headers-5.15.0-1055",
            "binary_version": "5.15.0-1055.62~20.04.1"
          },
          {
            "binary_name": "linux-gkeop-5.15-tools-5.15.0-1055",
            "binary_version": "5.15.0-1055.62~20.04.1"
          },
          {
            "binary_name": "linux-headers-5.15.0-1055-gkeop",
            "binary_version": "5.15.0-1055.62~20.04.1"
          },
          {
            "binary_name": "linux-image-unsigned-5.15.0-1055-gkeop",
            "binary_version": "5.15.0-1055.62~20.04.1"
          },
          {
            "binary_name": "linux-modules-5.15.0-1055-gkeop",
            "binary_version": "5.15.0-1055.62~20.04.1"
          },
          {
            "binary_name": "linux-modules-extra-5.15.0-1055-gkeop",
            "binary_version": "5.15.0-1055.62~20.04.1"
          },
          {
            "binary_name": "linux-tools-5.15.0-1055-gkeop",
            "binary_version": "5.15.0-1055.62~20.04.1"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:20.04:LTS",
        "name": "linux-gkeop-5.15",
        "purl": "pkg:deb/ubuntu/linux-gkeop-5.15@5.15.0-1055.62~20.04.1?arch=source\u0026distro=focal"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "5.15.0-1003.5~20.04.2",
        "5.15.0-1005.7~20.04.1",
        "5.15.0-1007.10~20.04.1",
        "5.15.0-1008.12~20.04.1",
        "5.15.0-1011.15~20.04.2",
        "5.15.0-1012.16~20.04.1",
        "5.15.0-1013.17~20.04.1",
        "5.15.0-1015.19~20.04.1",
        "5.15.0-1016.21~20.04.1",
        "5.15.0-1017.22~20.04.1",
        "5.15.0-1018.23~20.04.1",
        "5.15.0-1019.24~20.04.1",
        "5.15.0-1020.25~20.04.1",
        "5.15.0-1021.26~20.04.1",
        "5.15.0-1022.27~20.04.1",
        "5.15.0-1023.28~20.04.1",
        "5.15.0-1024.29~20.04.1",
        "5.15.0-1025.30~20.04.1",
        "5.15.0-1026.31~20.04.1",
        "5.15.0-1027.32~20.04.1",
        "5.15.0-1028.33~20.04.1",
        "5.15.0-1030.35~20.04.1",
        "5.15.0-1031.37~20.04.1",
        "5.15.0-1032.38~20.04.1",
        "5.15.0-1033.39~20.04.1",
        "5.15.0-1034.40~20.04.1",
        "5.15.0-1035.41~20.04.1",
        "5.15.0-1036.42~20.04.1",
        "5.15.0-1037.43~20.04.1",
        "5.15.0-1038.44~20.04.1",
        "5.15.0-1039.45~20.04.1",
        "5.15.0-1040.46~20.04.1",
        "5.15.0-1043.50~20.04.1",
        "5.15.0-1044.51~20.04.1",
        "5.15.0-1045.52~20.04.1",
        "5.15.0-1046.53~20.04.1",
        "5.15.0-1047.54~20.04.1",
        "5.15.0-1048.55~20.04.1",
        "5.15.0-1049.56~20.04.1",
        "5.15.0-1050.57~20.04.1",
        "5.15.0-1051.58~20.04.1",
        "5.15.0-1052.59~20.04.1",
        "5.15.0-1053.60~20.04.1",
        "5.15.0-1054.61~20.04.1",
        "5.15.0-1055.62~20.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "block-modules-5.11.0-46-generic-64k-di",
            "binary_version": "5.11.0-46.51~20.04.1"
          },
          {
            "binary_name": "block-modules-5.11.0-46-generic-di",
            "binary_version": "5.11.0-46.51~20.04.1"
          },
          {
            "binary_name": "block-modules-5.11.0-46-generic-lpae-di",
            "binary_version": "5.11.0-46.51~20.04.1"
          },
          {
            "binary_name": "crypto-modules-5.11.0-46-generic-64k-di",
            "binary_version": "5.11.0-46.51~20.04.1"
          },
          {
            "binary_name": "crypto-modules-5.11.0-46-generic-di",
            "binary_version": "5.11.0-46.51~20.04.1"
          },
          {
            "binary_name": "crypto-modules-5.11.0-46-generic-lpae-di",
            "binary_version": "5.11.0-46.51~20.04.1"
          },
          {
            "binary_name": "dasd-extra-modules-5.11.0-46-generic-di",
            "binary_version": "5.11.0-46.51~20.04.1"
          },
          {
            "binary_name": "dasd-modules-5.11.0-46-generic-di",
            "binary_version": "5.11.0-46.51~20.04.1"
          },
          {
            "binary_name": "fat-modules-5.11.0-46-generic-64k-di",
            "binary_version": "5.11.0-46.51~20.04.1"
          },
          {
            "binary_name": "fat-modules-5.11.0-46-generic-di",
            "binary_version": "5.11.0-46.51~20.04.1"
          },
          {
            "binary_name": "fat-modules-5.11.0-46-generic-lpae-di",
            "binary_version": "5.11.0-46.51~20.04.1"
          },
          {
            "binary_name": "fb-modules-5.11.0-46-generic-di",
            "binary_version": "5.11.0-46.51~20.04.1"
          },
          {
            "binary_name": "firewire-core-modules-5.11.0-46-generic-di",
            "binary_version": "5.11.0-46.51~20.04.1"
          },
          {
            "binary_name": "floppy-modules-5.11.0-46-generic-di",
            "binary_version": "5.11.0-46.51~20.04.1"
          },
          {
            "binary_name": "fs-core-modules-5.11.0-46-generic-64k-di",
            "binary_version": "5.11.0-46.51~20.04.1"
          },
          {
            "binary_name": "fs-core-modules-5.11.0-46-generic-di",
            "binary_version": "5.11.0-46.51~20.04.1"
          },
          {
            "binary_name": "fs-core-modules-5.11.0-46-generic-lpae-di",
            "binary_version": "5.11.0-46.51~20.04.1"
          },
          {
            "binary_name": "fs-secondary-modules-5.11.0-46-generic-64k-di",
            "binary_version": "5.11.0-46.51~20.04.1"
          },
          {
            "binary_name": "fs-secondary-modules-5.11.0-46-generic-di",
            "binary_version": "5.11.0-46.51~20.04.1"
          },
          {
            "binary_name": "fs-secondary-modules-5.11.0-46-generic-lpae-di",
            "binary_version": "5.11.0-46.51~20.04.1"
          },
          {
            "binary_name": "input-modules-5.11.0-46-generic-64k-di",
            "binary_version": "5.11.0-46.51~20.04.1"
          },
          {
            "binary_name": "input-modules-5.11.0-46-generic-di",
            "binary_version": "5.11.0-46.51~20.04.1"
          },
          {
            "binary_name": "input-modules-5.11.0-46-generic-lpae-di",
            "binary_version": "5.11.0-46.51~20.04.1"
          },
          {
            "binary_name": "ipmi-modules-5.11.0-46-generic-64k-di",
            "binary_version": "5.11.0-46.51~20.04.1"
          },
          {
            "binary_name": "ipmi-modules-5.11.0-46-generic-di",
            "binary_version": "5.11.0-46.51~20.04.1"
          },
          {
            "binary_name": "ipmi-modules-5.11.0-46-generic-lpae-di",
            "binary_version": "5.11.0-46.51~20.04.1"
          },
          {
            "binary_name": "kernel-image-5.11.0-46-generic-64k-di",
            "binary_version": "5.11.0-46.51~20.04.1"
          },
          {
            "binary_name": "kernel-image-5.11.0-46-generic-di",
            "binary_version": "5.11.0-46.51~20.04.1"
          },
          {
            "binary_name": "kernel-image-5.11.0-46-generic-lpae-di",
            "binary_version": "5.11.0-46.51~20.04.1"
          },
          {
            "binary_name": "linux-buildinfo-5.11.0-46-generic",
            "binary_version": "5.11.0-46.51~20.04.1"
          },
          {
            "binary_name": "linux-buildinfo-5.11.0-46-generic-64k",
            "binary_version": "5.11.0-46.51~20.04.1"
          },
          {
            "binary_name": "linux-buildinfo-5.11.0-46-generic-lpae",
            "binary_version": "5.11.0-46.51~20.04.1"
          },
          {
            "binary_name": "linux-buildinfo-5.11.0-46-lowlatency",
            "binary_version": "5.11.0-46.51~20.04.1"
          },
          {
            "binary_name": "linux-cloud-tools-5.11.0-46-generic",
            "binary_version": "5.11.0-46.51~20.04.1"
          },
          {
            "binary_name": "linux-cloud-tools-5.11.0-46-lowlatency",
            "binary_version": "5.11.0-46.51~20.04.1"
          },
          {
            "binary_name": "linux-headers-5.11.0-46-generic",
            "binary_version": "5.11.0-46.51~20.04.1"
          },
          {
            "binary_name": "linux-headers-5.11.0-46-generic-64k",
            "binary_version": "5.11.0-46.51~20.04.1"
          },
          {
            "binary_name": "linux-headers-5.11.0-46-generic-lpae",
            "binary_version": "5.11.0-46.51~20.04.1"
          },
          {
            "binary_name": "linux-headers-5.11.0-46-lowlatency",
            "binary_version": "5.11.0-46.51~20.04.1"
          },
          {
            "binary_name": "linux-hwe-5.11-cloud-tools-5.11.0-46",
            "binary_version": "5.11.0-46.51~20.04.1"
          },
          {
            "binary_name": "linux-hwe-5.11-cloud-tools-common",
            "binary_version": "5.11.0-46.51~20.04.1"
          },
          {
            "binary_name": "linux-hwe-5.11-headers-5.11.0-46",
            "binary_version": "5.11.0-46.51~20.04.1"
          },
          {
            "binary_name": "linux-hwe-5.11-source-5.11.0",
            "binary_version": "5.11.0-46.51~20.04.1"
          },
          {
            "binary_name": "linux-hwe-5.11-tools-5.11.0-46",
            "binary_version": "5.11.0-46.51~20.04.1"
          },
          {
            "binary_name": "linux-hwe-5.11-tools-common",
            "binary_version": "5.11.0-46.51~20.04.1"
          },
          {
            "binary_name": "linux-hwe-5.11-tools-host",
            "binary_version": "5.11.0-46.51~20.04.1"
          },
          {
            "binary_name": "linux-hwe-5.11-udebs-generic",
            "binary_version": "5.11.0-46.51~20.04.1"
          },
          {
            "binary_name": "linux-hwe-5.11-udebs-generic-64k",
            "binary_version": "5.11.0-46.51~20.04.1"
          },
          {
            "binary_name": "linux-hwe-5.11-udebs-generic-lpae",
            "binary_version": "5.11.0-46.51~20.04.1"
          },
          {
            "binary_name": "linux-image-5.11.0-46-generic",
            "binary_version": "5.11.0-46.51~20.04.1"
          },
          {
            "binary_name": "linux-image-5.11.0-46-generic-lpae",
            "binary_version": "5.11.0-46.51~20.04.1"
          },
          {
            "binary_name": "linux-image-unsigned-5.11.0-46-generic",
            "binary_version": "5.11.0-46.51~20.04.1"
          },
          {
            "binary_name": "linux-image-unsigned-5.11.0-46-generic-64k",
            "binary_version": "5.11.0-46.51~20.04.1"
          },
          {
            "binary_name": "linux-image-unsigned-5.11.0-46-lowlatency",
            "binary_version": "5.11.0-46.51~20.04.1"
          },
          {
            "binary_name": "linux-modules-5.11.0-46-generic",
            "binary_version": "5.11.0-46.51~20.04.1"
          },
          {
            "binary_name": "linux-modules-5.11.0-46-generic-64k",
            "binary_version": "5.11.0-46.51~20.04.1"
          },
          {
            "binary_name": "linux-modules-5.11.0-46-generic-lpae",
            "binary_version": "5.11.0-46.51~20.04.1"
          },
          {
            "binary_name": "linux-modules-5.11.0-46-lowlatency",
            "binary_version": "5.11.0-46.51~20.04.1"
          },
          {
            "binary_name": "linux-modules-extra-5.11.0-46-generic",
            "binary_version": "5.11.0-46.51~20.04.1"
          },
          {
            "binary_name": "linux-tools-5.11.0-46-generic",
            "binary_version": "5.11.0-46.51~20.04.1"
          },
          {
            "binary_name": "linux-tools-5.11.0-46-generic-64k",
            "binary_version": "5.11.0-46.51~20.04.1"
          },
          {
            "binary_name": "linux-tools-5.11.0-46-generic-lpae",
            "binary_version": "5.11.0-46.51~20.04.1"
          },
          {
            "binary_name": "linux-tools-5.11.0-46-lowlatency",
            "binary_version": "5.11.0-46.51~20.04.1"
          },
          {
            "binary_name": "md-modules-5.11.0-46-generic-64k-di",
            "binary_version": "5.11.0-46.51~20.04.1"
          },
          {
            "binary_name": "md-modules-5.11.0-46-generic-di",
            "binary_version": "5.11.0-46.51~20.04.1"
          },
          {
            "binary_name": "md-modules-5.11.0-46-generic-lpae-di",
            "binary_version": "5.11.0-46.51~20.04.1"
          },
          {
            "binary_name": "message-modules-5.11.0-46-generic-64k-di",
            "binary_version": "5.11.0-46.51~20.04.1"
          },
          {
            "binary_name": "message-modules-5.11.0-46-generic-di",
            "binary_version": "5.11.0-46.51~20.04.1"
          },
          {
            "binary_name": "mouse-modules-5.11.0-46-generic-64k-di",
            "binary_version": "5.11.0-46.51~20.04.1"
          },
          {
            "binary_name": "mouse-modules-5.11.0-46-generic-di",
            "binary_version": "5.11.0-46.51~20.04.1"
          },
          {
            "binary_name": "mouse-modules-5.11.0-46-generic-lpae-di",
            "binary_version": "5.11.0-46.51~20.04.1"
          },
          {
            "binary_name": "multipath-modules-5.11.0-46-generic-64k-di",
            "binary_version": "5.11.0-46.51~20.04.1"
          },
          {
            "binary_name": "multipath-modules-5.11.0-46-generic-di",
            "binary_version": "5.11.0-46.51~20.04.1"
          },
          {
            "binary_name": "multipath-modules-5.11.0-46-generic-lpae-di",
            "binary_version": "5.11.0-46.51~20.04.1"
          },
          {
            "binary_name": "nfs-modules-5.11.0-46-generic-64k-di",
            "binary_version": "5.11.0-46.51~20.04.1"
          },
          {
            "binary_name": "nfs-modules-5.11.0-46-generic-di",
            "binary_version": "5.11.0-46.51~20.04.1"
          },
          {
            "binary_name": "nfs-modules-5.11.0-46-generic-lpae-di",
            "binary_version": "5.11.0-46.51~20.04.1"
          },
          {
            "binary_name": "nic-modules-5.11.0-46-generic-64k-di",
            "binary_version": "5.11.0-46.51~20.04.1"
          },
          {
            "binary_name": "nic-modules-5.11.0-46-generic-di",
            "binary_version": "5.11.0-46.51~20.04.1"
          },
          {
            "binary_name": "nic-modules-5.11.0-46-generic-lpae-di",
            "binary_version": "5.11.0-46.51~20.04.1"
          },
          {
            "binary_name": "nic-pcmcia-modules-5.11.0-46-generic-di",
            "binary_version": "5.11.0-46.51~20.04.1"
          },
          {
            "binary_name": "nic-shared-modules-5.11.0-46-generic-64k-di",
            "binary_version": "5.11.0-46.51~20.04.1"
          },
          {
            "binary_name": "nic-shared-modules-5.11.0-46-generic-di",
            "binary_version": "5.11.0-46.51~20.04.1"
          },
          {
            "binary_name": "nic-shared-modules-5.11.0-46-generic-lpae-di",
            "binary_version": "5.11.0-46.51~20.04.1"
          },
          {
            "binary_name": "nic-usb-modules-5.11.0-46-generic-64k-di",
            "binary_version": "5.11.0-46.51~20.04.1"
          },
          {
            "binary_name": "nic-usb-modules-5.11.0-46-generic-di",
            "binary_version": "5.11.0-46.51~20.04.1"
          },
          {
            "binary_name": "nic-usb-modules-5.11.0-46-generic-lpae-di",
            "binary_version": "5.11.0-46.51~20.04.1"
          },
          {
            "binary_name": "parport-modules-5.11.0-46-generic-64k-di",
            "binary_version": "5.11.0-46.51~20.04.1"
          },
          {
            "binary_name": "parport-modules-5.11.0-46-generic-di",
            "binary_version": "5.11.0-46.51~20.04.1"
          },
          {
            "binary_name": "parport-modules-5.11.0-46-generic-lpae-di",
            "binary_version": "5.11.0-46.51~20.04.1"
          },
          {
            "binary_name": "pata-modules-5.11.0-46-generic-di",
            "binary_version": "5.11.0-46.51~20.04.1"
          },
          {
            "binary_name": "pcmcia-modules-5.11.0-46-generic-di",
            "binary_version": "5.11.0-46.51~20.04.1"
          },
          {
            "binary_name": "pcmcia-storage-modules-5.11.0-46-generic-di",
            "binary_version": "5.11.0-46.51~20.04.1"
          },
          {
            "binary_name": "plip-modules-5.11.0-46-generic-64k-di",
            "binary_version": "5.11.0-46.51~20.04.1"
          },
          {
            "binary_name": "plip-modules-5.11.0-46-generic-di",
            "binary_version": "5.11.0-46.51~20.04.1"
          },
          {
            "binary_name": "plip-modules-5.11.0-46-generic-lpae-di",
            "binary_version": "5.11.0-46.51~20.04.1"
          },
          {
            "binary_name": "ppp-modules-5.11.0-46-generic-64k-di",
            "binary_version": "5.11.0-46.51~20.04.1"
          },
          {
            "binary_name": "ppp-modules-5.11.0-46-generic-di",
            "binary_version": "5.11.0-46.51~20.04.1"
          },
          {
            "binary_name": "ppp-modules-5.11.0-46-generic-lpae-di",
            "binary_version": "5.11.0-46.51~20.04.1"
          },
          {
            "binary_name": "sata-modules-5.11.0-46-generic-64k-di",
            "binary_version": "5.11.0-46.51~20.04.1"
          },
          {
            "binary_name": "sata-modules-5.11.0-46-generic-di",
            "binary_version": "5.11.0-46.51~20.04.1"
          },
          {
            "binary_name": "sata-modules-5.11.0-46-generic-lpae-di",
            "binary_version": "5.11.0-46.51~20.04.1"
          },
          {
            "binary_name": "scsi-modules-5.11.0-46-generic-64k-di",
            "binary_version": "5.11.0-46.51~20.04.1"
          },
          {
            "binary_name": "scsi-modules-5.11.0-46-generic-di",
            "binary_version": "5.11.0-46.51~20.04.1"
          },
          {
            "binary_name": "scsi-modules-5.11.0-46-generic-lpae-di",
            "binary_version": "5.11.0-46.51~20.04.1"
          },
          {
            "binary_name": "serial-modules-5.11.0-46-generic-di",
            "binary_version": "5.11.0-46.51~20.04.1"
          },
          {
            "binary_name": "storage-core-modules-5.11.0-46-generic-64k-di",
            "binary_version": "5.11.0-46.51~20.04.1"
          },
          {
            "binary_name": "storage-core-modules-5.11.0-46-generic-di",
            "binary_version": "5.11.0-46.51~20.04.1"
          },
          {
            "binary_name": "storage-core-modules-5.11.0-46-generic-lpae-di",
            "binary_version": "5.11.0-46.51~20.04.1"
          },
          {
            "binary_name": "usb-modules-5.11.0-46-generic-64k-di",
            "binary_version": "5.11.0-46.51~20.04.1"
          },
          {
            "binary_name": "usb-modules-5.11.0-46-generic-di",
            "binary_version": "5.11.0-46.51~20.04.1"
          },
          {
            "binary_name": "usb-modules-5.11.0-46-generic-lpae-di",
            "binary_version": "5.11.0-46.51~20.04.1"
          },
          {
            "binary_name": "virtio-modules-5.11.0-46-generic-64k-di",
            "binary_version": "5.11.0-46.51~20.04.1"
          },
          {
            "binary_name": "virtio-modules-5.11.0-46-generic-di",
            "binary_version": "5.11.0-46.51~20.04.1"
          },
          {
            "binary_name": "vlan-modules-5.11.0-46-generic-64k-di",
            "binary_version": "5.11.0-46.51~20.04.1"
          },
          {
            "binary_name": "vlan-modules-5.11.0-46-generic-di",
            "binary_version": "5.11.0-46.51~20.04.1"
          },
          {
            "binary_name": "vlan-modules-5.11.0-46-generic-lpae-di",
            "binary_version": "5.11.0-46.51~20.04.1"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:20.04:LTS",
        "name": "linux-hwe-5.11",
        "purl": "pkg:deb/ubuntu/linux-hwe-5.11@5.11.0-46.51~20.04.1?arch=source\u0026distro=focal"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "5.11.0-22.23~20.04.1",
        "5.11.0-25.27~20.04.1",
        "5.11.0-27.29~20.04.1",
        "5.11.0-34.36~20.04.1",
        "5.11.0-36.40~20.04.1",
        "5.11.0-37.41~20.04.2",
        "5.11.0-38.42~20.04.1",
        "5.11.0-40.44~20.04.2",
        "5.11.0-41.45~20.04.1",
        "5.11.0-43.47~20.04.2",
        "5.11.0-44.48~20.04.2",
        "5.11.0-46.51~20.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "block-modules-5.13.0-52-generic-64k-di",
            "binary_version": "5.13.0-52.59~20.04.1"
          },
          {
            "binary_name": "block-modules-5.13.0-52-generic-di",
            "binary_version": "5.13.0-52.59~20.04.1"
          },
          {
            "binary_name": "block-modules-5.13.0-52-generic-lpae-di",
            "binary_version": "5.13.0-52.59~20.04.1"
          },
          {
            "binary_name": "crypto-modules-5.13.0-52-generic-64k-di",
            "binary_version": "5.13.0-52.59~20.04.1"
          },
          {
            "binary_name": "crypto-modules-5.13.0-52-generic-di",
            "binary_version": "5.13.0-52.59~20.04.1"
          },
          {
            "binary_name": "crypto-modules-5.13.0-52-generic-lpae-di",
            "binary_version": "5.13.0-52.59~20.04.1"
          },
          {
            "binary_name": "dasd-extra-modules-5.13.0-52-generic-di",
            "binary_version": "5.13.0-52.59~20.04.1"
          },
          {
            "binary_name": "dasd-modules-5.13.0-52-generic-di",
            "binary_version": "5.13.0-52.59~20.04.1"
          },
          {
            "binary_name": "fat-modules-5.13.0-52-generic-64k-di",
            "binary_version": "5.13.0-52.59~20.04.1"
          },
          {
            "binary_name": "fat-modules-5.13.0-52-generic-di",
            "binary_version": "5.13.0-52.59~20.04.1"
          },
          {
            "binary_name": "fat-modules-5.13.0-52-generic-lpae-di",
            "binary_version": "5.13.0-52.59~20.04.1"
          },
          {
            "binary_name": "fb-modules-5.13.0-52-generic-di",
            "binary_version": "5.13.0-52.59~20.04.1"
          },
          {
            "binary_name": "firewire-core-modules-5.13.0-52-generic-di",
            "binary_version": "5.13.0-52.59~20.04.1"
          },
          {
            "binary_name": "floppy-modules-5.13.0-52-generic-di",
            "binary_version": "5.13.0-52.59~20.04.1"
          },
          {
            "binary_name": "fs-core-modules-5.13.0-52-generic-64k-di",
            "binary_version": "5.13.0-52.59~20.04.1"
          },
          {
            "binary_name": "fs-core-modules-5.13.0-52-generic-di",
            "binary_version": "5.13.0-52.59~20.04.1"
          },
          {
            "binary_name": "fs-core-modules-5.13.0-52-generic-lpae-di",
            "binary_version": "5.13.0-52.59~20.04.1"
          },
          {
            "binary_name": "fs-secondary-modules-5.13.0-52-generic-64k-di",
            "binary_version": "5.13.0-52.59~20.04.1"
          },
          {
            "binary_name": "fs-secondary-modules-5.13.0-52-generic-di",
            "binary_version": "5.13.0-52.59~20.04.1"
          },
          {
            "binary_name": "fs-secondary-modules-5.13.0-52-generic-lpae-di",
            "binary_version": "5.13.0-52.59~20.04.1"
          },
          {
            "binary_name": "input-modules-5.13.0-52-generic-64k-di",
            "binary_version": "5.13.0-52.59~20.04.1"
          },
          {
            "binary_name": "input-modules-5.13.0-52-generic-di",
            "binary_version": "5.13.0-52.59~20.04.1"
          },
          {
            "binary_name": "input-modules-5.13.0-52-generic-lpae-di",
            "binary_version": "5.13.0-52.59~20.04.1"
          },
          {
            "binary_name": "ipmi-modules-5.13.0-52-generic-64k-di",
            "binary_version": "5.13.0-52.59~20.04.1"
          },
          {
            "binary_name": "ipmi-modules-5.13.0-52-generic-di",
            "binary_version": "5.13.0-52.59~20.04.1"
          },
          {
            "binary_name": "ipmi-modules-5.13.0-52-generic-lpae-di",
            "binary_version": "5.13.0-52.59~20.04.1"
          },
          {
            "binary_name": "kernel-image-5.13.0-52-generic-64k-di",
            "binary_version": "5.13.0-52.59~20.04.1"
          },
          {
            "binary_name": "kernel-image-5.13.0-52-generic-di",
            "binary_version": "5.13.0-52.59~20.04.1"
          },
          {
            "binary_name": "kernel-image-5.13.0-52-generic-lpae-di",
            "binary_version": "5.13.0-52.59~20.04.1"
          },
          {
            "binary_name": "linux-buildinfo-5.13.0-52-generic",
            "binary_version": "5.13.0-52.59~20.04.1"
          },
          {
            "binary_name": "linux-buildinfo-5.13.0-52-generic-64k",
            "binary_version": "5.13.0-52.59~20.04.1"
          },
          {
            "binary_name": "linux-buildinfo-5.13.0-52-generic-lpae",
            "binary_version": "5.13.0-52.59~20.04.1"
          },
          {
            "binary_name": "linux-buildinfo-5.13.0-52-lowlatency",
            "binary_version": "5.13.0-52.59~20.04.1"
          },
          {
            "binary_name": "linux-cloud-tools-5.13.0-52-generic",
            "binary_version": "5.13.0-52.59~20.04.1"
          },
          {
            "binary_name": "linux-cloud-tools-5.13.0-52-lowlatency",
            "binary_version": "5.13.0-52.59~20.04.1"
          },
          {
            "binary_name": "linux-headers-5.13.0-52-generic",
            "binary_version": "5.13.0-52.59~20.04.1"
          },
          {
            "binary_name": "linux-headers-5.13.0-52-generic-64k",
            "binary_version": "5.13.0-52.59~20.04.1"
          },
          {
            "binary_name": "linux-headers-5.13.0-52-generic-lpae",
            "binary_version": "5.13.0-52.59~20.04.1"
          },
          {
            "binary_name": "linux-headers-5.13.0-52-lowlatency",
            "binary_version": "5.13.0-52.59~20.04.1"
          },
          {
            "binary_name": "linux-hwe-5.13-cloud-tools-5.13.0-52",
            "binary_version": "5.13.0-52.59~20.04.1"
          },
          {
            "binary_name": "linux-hwe-5.13-cloud-tools-common",
            "binary_version": "5.13.0-52.59~20.04.1"
          },
          {
            "binary_name": "linux-hwe-5.13-headers-5.13.0-52",
            "binary_version": "5.13.0-52.59~20.04.1"
          },
          {
            "binary_name": "linux-hwe-5.13-source-5.13.0",
            "binary_version": "5.13.0-52.59~20.04.1"
          },
          {
            "binary_name": "linux-hwe-5.13-tools-5.13.0-52",
            "binary_version": "5.13.0-52.59~20.04.1"
          },
          {
            "binary_name": "linux-hwe-5.13-tools-common",
            "binary_version": "5.13.0-52.59~20.04.1"
          },
          {
            "binary_name": "linux-hwe-5.13-tools-host",
            "binary_version": "5.13.0-52.59~20.04.1"
          },
          {
            "binary_name": "linux-hwe-5.13-udebs-generic",
            "binary_version": "5.13.0-52.59~20.04.1"
          },
          {
            "binary_name": "linux-hwe-5.13-udebs-generic-64k",
            "binary_version": "5.13.0-52.59~20.04.1"
          },
          {
            "binary_name": "linux-hwe-5.13-udebs-generic-lpae",
            "binary_version": "5.13.0-52.59~20.04.1"
          },
          {
            "binary_name": "linux-image-5.13.0-52-generic",
            "binary_version": "5.13.0-52.59~20.04.1"
          },
          {
            "binary_name": "linux-image-5.13.0-52-generic-lpae",
            "binary_version": "5.13.0-52.59~20.04.1"
          },
          {
            "binary_name": "linux-image-unsigned-5.13.0-52-generic",
            "binary_version": "5.13.0-52.59~20.04.1"
          },
          {
            "binary_name": "linux-image-unsigned-5.13.0-52-generic-64k",
            "binary_version": "5.13.0-52.59~20.04.1"
          },
          {
            "binary_name": "linux-image-unsigned-5.13.0-52-lowlatency",
            "binary_version": "5.13.0-52.59~20.04.1"
          },
          {
            "binary_name": "linux-modules-5.13.0-52-generic",
            "binary_version": "5.13.0-52.59~20.04.1"
          },
          {
            "binary_name": "linux-modules-5.13.0-52-generic-64k",
            "binary_version": "5.13.0-52.59~20.04.1"
          },
          {
            "binary_name": "linux-modules-5.13.0-52-generic-lpae",
            "binary_version": "5.13.0-52.59~20.04.1"
          },
          {
            "binary_name": "linux-modules-5.13.0-52-lowlatency",
            "binary_version": "5.13.0-52.59~20.04.1"
          },
          {
            "binary_name": "linux-modules-extra-5.13.0-52-generic",
            "binary_version": "5.13.0-52.59~20.04.1"
          },
          {
            "binary_name": "linux-tools-5.13.0-52-generic",
            "binary_version": "5.13.0-52.59~20.04.1"
          },
          {
            "binary_name": "linux-tools-5.13.0-52-generic-64k",
            "binary_version": "5.13.0-52.59~20.04.1"
          },
          {
            "binary_name": "linux-tools-5.13.0-52-generic-lpae",
            "binary_version": "5.13.0-52.59~20.04.1"
          },
          {
            "binary_name": "linux-tools-5.13.0-52-lowlatency",
            "binary_version": "5.13.0-52.59~20.04.1"
          },
          {
            "binary_name": "md-modules-5.13.0-52-generic-64k-di",
            "binary_version": "5.13.0-52.59~20.04.1"
          },
          {
            "binary_name": "md-modules-5.13.0-52-generic-di",
            "binary_version": "5.13.0-52.59~20.04.1"
          },
          {
            "binary_name": "md-modules-5.13.0-52-generic-lpae-di",
            "binary_version": "5.13.0-52.59~20.04.1"
          },
          {
            "binary_name": "message-modules-5.13.0-52-generic-64k-di",
            "binary_version": "5.13.0-52.59~20.04.1"
          },
          {
            "binary_name": "message-modules-5.13.0-52-generic-di",
            "binary_version": "5.13.0-52.59~20.04.1"
          },
          {
            "binary_name": "mouse-modules-5.13.0-52-generic-64k-di",
            "binary_version": "5.13.0-52.59~20.04.1"
          },
          {
            "binary_name": "mouse-modules-5.13.0-52-generic-di",
            "binary_version": "5.13.0-52.59~20.04.1"
          },
          {
            "binary_name": "mouse-modules-5.13.0-52-generic-lpae-di",
            "binary_version": "5.13.0-52.59~20.04.1"
          },
          {
            "binary_name": "multipath-modules-5.13.0-52-generic-64k-di",
            "binary_version": "5.13.0-52.59~20.04.1"
          },
          {
            "binary_name": "multipath-modules-5.13.0-52-generic-di",
            "binary_version": "5.13.0-52.59~20.04.1"
          },
          {
            "binary_name": "multipath-modules-5.13.0-52-generic-lpae-di",
            "binary_version": "5.13.0-52.59~20.04.1"
          },
          {
            "binary_name": "nfs-modules-5.13.0-52-generic-64k-di",
            "binary_version": "5.13.0-52.59~20.04.1"
          },
          {
            "binary_name": "nfs-modules-5.13.0-52-generic-di",
            "binary_version": "5.13.0-52.59~20.04.1"
          },
          {
            "binary_name": "nfs-modules-5.13.0-52-generic-lpae-di",
            "binary_version": "5.13.0-52.59~20.04.1"
          },
          {
            "binary_name": "nic-modules-5.13.0-52-generic-64k-di",
            "binary_version": "5.13.0-52.59~20.04.1"
          },
          {
            "binary_name": "nic-modules-5.13.0-52-generic-di",
            "binary_version": "5.13.0-52.59~20.04.1"
          },
          {
            "binary_name": "nic-modules-5.13.0-52-generic-lpae-di",
            "binary_version": "5.13.0-52.59~20.04.1"
          },
          {
            "binary_name": "nic-pcmcia-modules-5.13.0-52-generic-di",
            "binary_version": "5.13.0-52.59~20.04.1"
          },
          {
            "binary_name": "nic-shared-modules-5.13.0-52-generic-64k-di",
            "binary_version": "5.13.0-52.59~20.04.1"
          },
          {
            "binary_name": "nic-shared-modules-5.13.0-52-generic-di",
            "binary_version": "5.13.0-52.59~20.04.1"
          },
          {
            "binary_name": "nic-shared-modules-5.13.0-52-generic-lpae-di",
            "binary_version": "5.13.0-52.59~20.04.1"
          },
          {
            "binary_name": "nic-usb-modules-5.13.0-52-generic-64k-di",
            "binary_version": "5.13.0-52.59~20.04.1"
          },
          {
            "binary_name": "nic-usb-modules-5.13.0-52-generic-di",
            "binary_version": "5.13.0-52.59~20.04.1"
          },
          {
            "binary_name": "nic-usb-modules-5.13.0-52-generic-lpae-di",
            "binary_version": "5.13.0-52.59~20.04.1"
          },
          {
            "binary_name": "parport-modules-5.13.0-52-generic-64k-di",
            "binary_version": "5.13.0-52.59~20.04.1"
          },
          {
            "binary_name": "parport-modules-5.13.0-52-generic-di",
            "binary_version": "5.13.0-52.59~20.04.1"
          },
          {
            "binary_name": "parport-modules-5.13.0-52-generic-lpae-di",
            "binary_version": "5.13.0-52.59~20.04.1"
          },
          {
            "binary_name": "pata-modules-5.13.0-52-generic-di",
            "binary_version": "5.13.0-52.59~20.04.1"
          },
          {
            "binary_name": "pcmcia-modules-5.13.0-52-generic-di",
            "binary_version": "5.13.0-52.59~20.04.1"
          },
          {
            "binary_name": "pcmcia-storage-modules-5.13.0-52-generic-di",
            "binary_version": "5.13.0-52.59~20.04.1"
          },
          {
            "binary_name": "plip-modules-5.13.0-52-generic-64k-di",
            "binary_version": "5.13.0-52.59~20.04.1"
          },
          {
            "binary_name": "plip-modules-5.13.0-52-generic-di",
            "binary_version": "5.13.0-52.59~20.04.1"
          },
          {
            "binary_name": "plip-modules-5.13.0-52-generic-lpae-di",
            "binary_version": "5.13.0-52.59~20.04.1"
          },
          {
            "binary_name": "ppp-modules-5.13.0-52-generic-64k-di",
            "binary_version": "5.13.0-52.59~20.04.1"
          },
          {
            "binary_name": "ppp-modules-5.13.0-52-generic-di",
            "binary_version": "5.13.0-52.59~20.04.1"
          },
          {
            "binary_name": "ppp-modules-5.13.0-52-generic-lpae-di",
            "binary_version": "5.13.0-52.59~20.04.1"
          },
          {
            "binary_name": "sata-modules-5.13.0-52-generic-64k-di",
            "binary_version": "5.13.0-52.59~20.04.1"
          },
          {
            "binary_name": "sata-modules-5.13.0-52-generic-di",
            "binary_version": "5.13.0-52.59~20.04.1"
          },
          {
            "binary_name": "sata-modules-5.13.0-52-generic-lpae-di",
            "binary_version": "5.13.0-52.59~20.04.1"
          },
          {
            "binary_name": "scsi-modules-5.13.0-52-generic-64k-di",
            "binary_version": "5.13.0-52.59~20.04.1"
          },
          {
            "binary_name": "scsi-modules-5.13.0-52-generic-di",
            "binary_version": "5.13.0-52.59~20.04.1"
          },
          {
            "binary_name": "scsi-modules-5.13.0-52-generic-lpae-di",
            "binary_version": "5.13.0-52.59~20.04.1"
          },
          {
            "binary_name": "serial-modules-5.13.0-52-generic-di",
            "binary_version": "5.13.0-52.59~20.04.1"
          },
          {
            "binary_name": "storage-core-modules-5.13.0-52-generic-64k-di",
            "binary_version": "5.13.0-52.59~20.04.1"
          },
          {
            "binary_name": "storage-core-modules-5.13.0-52-generic-di",
            "binary_version": "5.13.0-52.59~20.04.1"
          },
          {
            "binary_name": "storage-core-modules-5.13.0-52-generic-lpae-di",
            "binary_version": "5.13.0-52.59~20.04.1"
          },
          {
            "binary_name": "usb-modules-5.13.0-52-generic-64k-di",
            "binary_version": "5.13.0-52.59~20.04.1"
          },
          {
            "binary_name": "usb-modules-5.13.0-52-generic-di",
            "binary_version": "5.13.0-52.59~20.04.1"
          },
          {
            "binary_name": "usb-modules-5.13.0-52-generic-lpae-di",
            "binary_version": "5.13.0-52.59~20.04.1"
          },
          {
            "binary_name": "virtio-modules-5.13.0-52-generic-64k-di",
            "binary_version": "5.13.0-52.59~20.04.1"
          },
          {
            "binary_name": "virtio-modules-5.13.0-52-generic-di",
            "binary_version": "5.13.0-52.59~20.04.1"
          },
          {
            "binary_name": "vlan-modules-5.13.0-52-generic-64k-di",
            "binary_version": "5.13.0-52.59~20.04.1"
          },
          {
            "binary_name": "vlan-modules-5.13.0-52-generic-di",
            "binary_version": "5.13.0-52.59~20.04.1"
          },
          {
            "binary_name": "vlan-modules-5.13.0-52-generic-lpae-di",
            "binary_version": "5.13.0-52.59~20.04.1"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:20.04:LTS",
        "name": "linux-hwe-5.13",
        "purl": "pkg:deb/ubuntu/linux-hwe-5.13@5.13.0-52.59~20.04.1?arch=source\u0026distro=focal"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "5.13.0-21.21~20.04.1",
        "5.13.0-22.22~20.04.1",
        "5.13.0-23.23~20.04.2",
        "5.13.0-25.26~20.04.1",
        "5.13.0-27.29~20.04.1",
        "5.13.0-28.31~20.04.1",
        "5.13.0-30.33~20.04.1",
        "5.13.0-35.40~20.04.1",
        "5.13.0-37.42~20.04.1",
        "5.13.0-39.44~20.04.1",
        "5.13.0-40.45~20.04.1",
        "5.13.0-41.46~20.04.1",
        "5.13.0-44.49~20.04.1",
        "5.13.0-48.54~20.04.1",
        "5.13.0-51.58~20.04.1",
        "5.13.0-52.59~20.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-buildinfo-5.15.0-198-generic",
            "binary_version": "5.15.0-198.208~20.04.1"
          },
          {
            "binary_name": "linux-buildinfo-5.15.0-198-generic-64k",
            "binary_version": "5.15.0-198.208~20.04.1"
          },
          {
            "binary_name": "linux-buildinfo-5.15.0-198-generic-lpae",
            "binary_version": "5.15.0-198.208~20.04.1"
          },
          {
            "binary_name": "linux-cloud-tools-5.15.0-198-generic",
            "binary_version": "5.15.0-198.208~20.04.1"
          },
          {
            "binary_name": "linux-headers-5.15.0-198-generic",
            "binary_version": "5.15.0-198.208~20.04.1"
          },
          {
            "binary_name": "linux-headers-5.15.0-198-generic-64k",
            "binary_version": "5.15.0-198.208~20.04.1"
          },
          {
            "binary_name": "linux-headers-5.15.0-198-generic-lpae",
            "binary_version": "5.15.0-198.208~20.04.1"
          },
          {
            "binary_name": "linux-hwe-5.15-cloud-tools-5.15.0-198",
            "binary_version": "5.15.0-198.208~20.04.1"
          },
          {
            "binary_name": "linux-hwe-5.15-headers-5.15.0-198",
            "binary_version": "5.15.0-198.208~20.04.1"
          },
          {
            "binary_name": "linux-hwe-5.15-tools-5.15.0-198",
            "binary_version": "5.15.0-198.208~20.04.1"
          },
          {
            "binary_name": "linux-image-5.15.0-198-generic",
            "binary_version": "5.15.0-198.208~20.04.1"
          },
          {
            "binary_name": "linux-image-5.15.0-198-generic-lpae",
            "binary_version": "5.15.0-198.208~20.04.1"
          },
          {
            "binary_name": "linux-image-unsigned-5.15.0-198-generic",
            "binary_version": "5.15.0-198.208~20.04.1"
          },
          {
            "binary_name": "linux-image-unsigned-5.15.0-198-generic-64k",
            "binary_version": "5.15.0-198.208~20.04.1"
          },
          {
            "binary_name": "linux-modules-5.15.0-198-generic",
            "binary_version": "5.15.0-198.208~20.04.1"
          },
          {
            "binary_name": "linux-modules-5.15.0-198-generic-64k",
            "binary_version": "5.15.0-198.208~20.04.1"
          },
          {
            "binary_name": "linux-modules-5.15.0-198-generic-lpae",
            "binary_version": "5.15.0-198.208~20.04.1"
          },
          {
            "binary_name": "linux-modules-extra-5.15.0-198-generic",
            "binary_version": "5.15.0-198.208~20.04.1"
          },
          {
            "binary_name": "linux-modules-iwlwifi-5.15.0-198-generic",
            "binary_version": "5.15.0-198.208~20.04.1"
          },
          {
            "binary_name": "linux-tools-5.15.0-198-generic",
            "binary_version": "5.15.0-198.208~20.04.1"
          },
          {
            "binary_name": "linux-tools-5.15.0-198-generic-64k",
            "binary_version": "5.15.0-198.208~20.04.1"
          },
          {
            "binary_name": "linux-tools-5.15.0-198-generic-lpae",
            "binary_version": "5.15.0-198.208~20.04.1"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:20.04:LTS",
        "name": "linux-hwe-5.15",
        "purl": "pkg:deb/ubuntu/linux-hwe-5.15@5.15.0-198.208~20.04.1?arch=source\u0026distro=esm-infra/focal"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "5.15.0-33.34~20.04.1",
        "5.15.0-41.44~20.04.1",
        "5.15.0-43.46~20.04.1",
        "5.15.0-46.49~20.04.1",
        "5.15.0-48.54~20.04.1",
        "5.15.0-50.56~20.04.1",
        "5.15.0-52.58~20.04.1",
        "5.15.0-53.59~20.04.1",
        "5.15.0-56.62~20.04.1",
        "5.15.0-57.63~20.04.1",
        "5.15.0-58.64~20.04.1",
        "5.15.0-60.66~20.04.1",
        "5.15.0-67.74~20.04.1",
        "5.15.0-69.76~20.04.1",
        "5.15.0-70.77~20.04.1",
        "5.15.0-71.78~20.04.1",
        "5.15.0-72.79~20.04.1",
        "5.15.0-73.80~20.04.1",
        "5.15.0-75.82~20.04.1",
        "5.15.0-76.83~20.04.1",
        "5.15.0-78.85~20.04.1",
        "5.15.0-79.86~20.04.2",
        "5.15.0-82.91~20.04.1",
        "5.15.0-83.92~20.04.1",
        "5.15.0-84.93~20.04.1",
        "5.15.0-86.96~20.04.1",
        "5.15.0-87.97~20.04.1",
        "5.15.0-88.98~20.04.1",
        "5.15.0-89.99~20.04.1",
        "5.15.0-91.101~20.04.1",
        "5.15.0-92.102~20.04.1",
        "5.15.0-94.104~20.04.1",
        "5.15.0-97.107~20.04.1",
        "5.15.0-100.110~20.04.1",
        "5.15.0-101.111~20.04.1",
        "5.15.0-102.112~20.04.1",
        "5.15.0-105.115~20.04.1",
        "5.15.0-106.116~20.04.1",
        "5.15.0-107.117~20.04.1",
        "5.15.0-113.123~20.04.1",
        "5.15.0-116.126~20.04.1",
        "5.15.0-117.127~20.04.1",
        "5.15.0-118.128~20.04.1",
        "5.15.0-119.129~20.04.1",
        "5.15.0-121.131~20.04.1",
        "5.15.0-122.132~20.04.1",
        "5.15.0-124.134~20.04.1",
        "5.15.0-125.135~20.04.1",
        "5.15.0-126.136~20.04.1",
        "5.15.0-127.137~20.04.1",
        "5.15.0-130.140~20.04.1",
        "5.15.0-131.141~20.04.1",
        "5.15.0-134.145~20.04.1",
        "5.15.0-136.147~20.04.1",
        "5.15.0-138.148~20.04.1",
        "5.15.0-139.149~20.04.1",
        "5.15.0-142.152~20.04.1",
        "5.15.0-143.153~20.04.1",
        "5.15.0-144.157~20.04.1",
        "5.15.0-145.158~20.04.1",
        "5.15.0-151.161~20.04.1",
        "5.15.0-152.162~20.04.1",
        "5.15.0-153.163~20.04.1",
        "5.15.0-156.166~20.04.1",
        "5.15.0-157.167~20.04.1",
        "5.15.0-160.170~20.04.1",
        "5.15.0-161.171~20.04.1",
        "5.15.0-163.173~20.04.1",
        "5.15.0-164.174~20.04.1",
        "5.15.0-168.178~20.04.1",
        "5.15.0-170.180~20.04.3",
        "5.15.0-171.181~20.04.1",
        "5.15.0-173.183~20.04.1",
        "5.15.0-176.186~20.04.1",
        "5.15.0-177.187~20.04.1",
        "5.15.0-179.189~20.04.1",
        "5.15.0-181.191~20.04.1",
        "5.15.0-185.195~20.04.1",
        "5.15.0-186.196~20.04.1",
        "5.15.0-190.200~20.04.1",
        "5.15.0-191.201~20.04.1",
        "5.15.0-194.204~20.04.1",
        "5.15.0-198.208~20.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "block-modules-5.8.0-63-generic-64k-di",
            "binary_version": "5.8.0-63.71~20.04.1"
          },
          {
            "binary_name": "block-modules-5.8.0-63-generic-di",
            "binary_version": "5.8.0-63.71~20.04.1"
          },
          {
            "binary_name": "block-modules-5.8.0-63-generic-lpae-di",
            "binary_version": "5.8.0-63.71~20.04.1"
          },
          {
            "binary_name": "crypto-modules-5.8.0-63-generic-64k-di",
            "binary_version": "5.8.0-63.71~20.04.1"
          },
          {
            "binary_name": "crypto-modules-5.8.0-63-generic-di",
            "binary_version": "5.8.0-63.71~20.04.1"
          },
          {
            "binary_name": "crypto-modules-5.8.0-63-generic-lpae-di",
            "binary_version": "5.8.0-63.71~20.04.1"
          },
          {
            "binary_name": "dasd-extra-modules-5.8.0-63-generic-di",
            "binary_version": "5.8.0-63.71~20.04.1"
          },
          {
            "binary_name": "dasd-modules-5.8.0-63-generic-di",
            "binary_version": "5.8.0-63.71~20.04.1"
          },
          {
            "binary_name": "fat-modules-5.8.0-63-generic-64k-di",
            "binary_version": "5.8.0-63.71~20.04.1"
          },
          {
            "binary_name": "fat-modules-5.8.0-63-generic-di",
            "binary_version": "5.8.0-63.71~20.04.1"
          },
          {
            "binary_name": "fat-modules-5.8.0-63-generic-lpae-di",
            "binary_version": "5.8.0-63.71~20.04.1"
          },
          {
            "binary_name": "fb-modules-5.8.0-63-generic-di",
            "binary_version": "5.8.0-63.71~20.04.1"
          },
          {
            "binary_name": "firewire-core-modules-5.8.0-63-generic-di",
            "binary_version": "5.8.0-63.71~20.04.1"
          },
          {
            "binary_name": "floppy-modules-5.8.0-63-generic-di",
            "binary_version": "5.8.0-63.71~20.04.1"
          },
          {
            "binary_name": "fs-core-modules-5.8.0-63-generic-64k-di",
            "binary_version": "5.8.0-63.71~20.04.1"
          },
          {
            "binary_name": "fs-core-modules-5.8.0-63-generic-di",
            "binary_version": "5.8.0-63.71~20.04.1"
          },
          {
            "binary_name": "fs-core-modules-5.8.0-63-generic-lpae-di",
            "binary_version": "5.8.0-63.71~20.04.1"
          },
          {
            "binary_name": "fs-secondary-modules-5.8.0-63-generic-64k-di",
            "binary_version": "5.8.0-63.71~20.04.1"
          },
          {
            "binary_name": "fs-secondary-modules-5.8.0-63-generic-di",
            "binary_version": "5.8.0-63.71~20.04.1"
          },
          {
            "binary_name": "fs-secondary-modules-5.8.0-63-generic-lpae-di",
            "binary_version": "5.8.0-63.71~20.04.1"
          },
          {
            "binary_name": "input-modules-5.8.0-63-generic-64k-di",
            "binary_version": "5.8.0-63.71~20.04.1"
          },
          {
            "binary_name": "input-modules-5.8.0-63-generic-di",
            "binary_version": "5.8.0-63.71~20.04.1"
          },
          {
            "binary_name": "input-modules-5.8.0-63-generic-lpae-di",
            "binary_version": "5.8.0-63.71~20.04.1"
          },
          {
            "binary_name": "ipmi-modules-5.8.0-63-generic-64k-di",
            "binary_version": "5.8.0-63.71~20.04.1"
          },
          {
            "binary_name": "ipmi-modules-5.8.0-63-generic-di",
            "binary_version": "5.8.0-63.71~20.04.1"
          },
          {
            "binary_name": "ipmi-modules-5.8.0-63-generic-lpae-di",
            "binary_version": "5.8.0-63.71~20.04.1"
          },
          {
            "binary_name": "kernel-image-5.8.0-63-generic-64k-di",
            "binary_version": "5.8.0-63.71~20.04.1"
          },
          {
            "binary_name": "kernel-image-5.8.0-63-generic-di",
            "binary_version": "5.8.0-63.71~20.04.1"
          },
          {
            "binary_name": "kernel-image-5.8.0-63-generic-lpae-di",
            "binary_version": "5.8.0-63.71~20.04.1"
          },
          {
            "binary_name": "linux-buildinfo-5.8.0-63-generic",
            "binary_version": "5.8.0-63.71~20.04.1"
          },
          {
            "binary_name": "linux-buildinfo-5.8.0-63-generic-64k",
            "binary_version": "5.8.0-63.71~20.04.1"
          },
          {
            "binary_name": "linux-buildinfo-5.8.0-63-generic-lpae",
            "binary_version": "5.8.0-63.71~20.04.1"
          },
          {
            "binary_name": "linux-buildinfo-5.8.0-63-lowlatency",
            "binary_version": "5.8.0-63.71~20.04.1"
          },
          {
            "binary_name": "linux-cloud-tools-5.8.0-63-generic",
            "binary_version": "5.8.0-63.71~20.04.1"
          },
          {
            "binary_name": "linux-cloud-tools-5.8.0-63-lowlatency",
            "binary_version": "5.8.0-63.71~20.04.1"
          },
          {
            "binary_name": "linux-headers-5.8.0-63-generic",
            "binary_version": "5.8.0-63.71~20.04.1"
          },
          {
            "binary_name": "linux-headers-5.8.0-63-generic-64k",
            "binary_version": "5.8.0-63.71~20.04.1"
          },
          {
            "binary_name": "linux-headers-5.8.0-63-generic-lpae",
            "binary_version": "5.8.0-63.71~20.04.1"
          },
          {
            "binary_name": "linux-headers-5.8.0-63-lowlatency",
            "binary_version": "5.8.0-63.71~20.04.1"
          },
          {
            "binary_name": "linux-hwe-5.8-cloud-tools-5.8.0-63",
            "binary_version": "5.8.0-63.71~20.04.1"
          },
          {
            "binary_name": "linux-hwe-5.8-cloud-tools-common",
            "binary_version": "5.8.0-63.71~20.04.1"
          },
          {
            "binary_name": "linux-hwe-5.8-headers-5.8.0-63",
            "binary_version": "5.8.0-63.71~20.04.1"
          },
          {
            "binary_name": "linux-hwe-5.8-source-5.8.0",
            "binary_version": "5.8.0-63.71~20.04.1"
          },
          {
            "binary_name": "linux-hwe-5.8-tools-5.8.0-63",
            "binary_version": "5.8.0-63.71~20.04.1"
          },
          {
            "binary_name": "linux-hwe-5.8-tools-common",
            "binary_version": "5.8.0-63.71~20.04.1"
          },
          {
            "binary_name": "linux-hwe-5.8-tools-host",
            "binary_version": "5.8.0-63.71~20.04.1"
          },
          {
            "binary_name": "linux-hwe-5.8-udebs-generic",
            "binary_version": "5.8.0-63.71~20.04.1"
          },
          {
            "binary_name": "linux-hwe-5.8-udebs-generic-64k",
            "binary_version": "5.8.0-63.71~20.04.1"
          },
          {
            "binary_name": "linux-hwe-5.8-udebs-generic-lpae",
            "binary_version": "5.8.0-63.71~20.04.1"
          },
          {
            "binary_name": "linux-image-5.8.0-63-generic",
            "binary_version": "5.8.0-63.71~20.04.1"
          },
          {
            "binary_name": "linux-image-5.8.0-63-generic-lpae",
            "binary_version": "5.8.0-63.71~20.04.1"
          },
          {
            "binary_name": "linux-image-unsigned-5.8.0-63-generic",
            "binary_version": "5.8.0-63.71~20.04.1"
          },
          {
            "binary_name": "linux-image-unsigned-5.8.0-63-generic-64k",
            "binary_version": "5.8.0-63.71~20.04.1"
          },
          {
            "binary_name": "linux-image-unsigned-5.8.0-63-lowlatency",
            "binary_version": "5.8.0-63.71~20.04.1"
          },
          {
            "binary_name": "linux-modules-5.8.0-63-generic",
            "binary_version": "5.8.0-63.71~20.04.1"
          },
          {
            "binary_name": "linux-modules-5.8.0-63-generic-64k",
            "binary_version": "5.8.0-63.71~20.04.1"
          },
          {
            "binary_name": "linux-modules-5.8.0-63-generic-lpae",
            "binary_version": "5.8.0-63.71~20.04.1"
          },
          {
            "binary_name": "linux-modules-5.8.0-63-lowlatency",
            "binary_version": "5.8.0-63.71~20.04.1"
          },
          {
            "binary_name": "linux-modules-extra-5.8.0-63-generic",
            "binary_version": "5.8.0-63.71~20.04.1"
          },
          {
            "binary_name": "linux-tools-5.8.0-63-generic",
            "binary_version": "5.8.0-63.71~20.04.1"
          },
          {
            "binary_name": "linux-tools-5.8.0-63-generic-64k",
            "binary_version": "5.8.0-63.71~20.04.1"
          },
          {
            "binary_name": "linux-tools-5.8.0-63-generic-lpae",
            "binary_version": "5.8.0-63.71~20.04.1"
          },
          {
            "binary_name": "linux-tools-5.8.0-63-lowlatency",
            "binary_version": "5.8.0-63.71~20.04.1"
          },
          {
            "binary_name": "md-modules-5.8.0-63-generic-64k-di",
            "binary_version": "5.8.0-63.71~20.04.1"
          },
          {
            "binary_name": "md-modules-5.8.0-63-generic-di",
            "binary_version": "5.8.0-63.71~20.04.1"
          },
          {
            "binary_name": "md-modules-5.8.0-63-generic-lpae-di",
            "binary_version": "5.8.0-63.71~20.04.1"
          },
          {
            "binary_name": "message-modules-5.8.0-63-generic-64k-di",
            "binary_version": "5.8.0-63.71~20.04.1"
          },
          {
            "binary_name": "message-modules-5.8.0-63-generic-di",
            "binary_version": "5.8.0-63.71~20.04.1"
          },
          {
            "binary_name": "mouse-modules-5.8.0-63-generic-64k-di",
            "binary_version": "5.8.0-63.71~20.04.1"
          },
          {
            "binary_name": "mouse-modules-5.8.0-63-generic-di",
            "binary_version": "5.8.0-63.71~20.04.1"
          },
          {
            "binary_name": "mouse-modules-5.8.0-63-generic-lpae-di",
            "binary_version": "5.8.0-63.71~20.04.1"
          },
          {
            "binary_name": "multipath-modules-5.8.0-63-generic-64k-di",
            "binary_version": "5.8.0-63.71~20.04.1"
          },
          {
            "binary_name": "multipath-modules-5.8.0-63-generic-di",
            "binary_version": "5.8.0-63.71~20.04.1"
          },
          {
            "binary_name": "multipath-modules-5.8.0-63-generic-lpae-di",
            "binary_version": "5.8.0-63.71~20.04.1"
          },
          {
            "binary_name": "nfs-modules-5.8.0-63-generic-64k-di",
            "binary_version": "5.8.0-63.71~20.04.1"
          },
          {
            "binary_name": "nfs-modules-5.8.0-63-generic-di",
            "binary_version": "5.8.0-63.71~20.04.1"
          },
          {
            "binary_name": "nfs-modules-5.8.0-63-generic-lpae-di",
            "binary_version": "5.8.0-63.71~20.04.1"
          },
          {
            "binary_name": "nic-modules-5.8.0-63-generic-64k-di",
            "binary_version": "5.8.0-63.71~20.04.1"
          },
          {
            "binary_name": "nic-modules-5.8.0-63-generic-di",
            "binary_version": "5.8.0-63.71~20.04.1"
          },
          {
            "binary_name": "nic-modules-5.8.0-63-generic-lpae-di",
            "binary_version": "5.8.0-63.71~20.04.1"
          },
          {
            "binary_name": "nic-pcmcia-modules-5.8.0-63-generic-di",
            "binary_version": "5.8.0-63.71~20.04.1"
          },
          {
            "binary_name": "nic-shared-modules-5.8.0-63-generic-64k-di",
            "binary_version": "5.8.0-63.71~20.04.1"
          },
          {
            "binary_name": "nic-shared-modules-5.8.0-63-generic-di",
            "binary_version": "5.8.0-63.71~20.04.1"
          },
          {
            "binary_name": "nic-shared-modules-5.8.0-63-generic-lpae-di",
            "binary_version": "5.8.0-63.71~20.04.1"
          },
          {
            "binary_name": "nic-usb-modules-5.8.0-63-generic-64k-di",
            "binary_version": "5.8.0-63.71~20.04.1"
          },
          {
            "binary_name": "nic-usb-modules-5.8.0-63-generic-di",
            "binary_version": "5.8.0-63.71~20.04.1"
          },
          {
            "binary_name": "nic-usb-modules-5.8.0-63-generic-lpae-di",
            "binary_version": "5.8.0-63.71~20.04.1"
          },
          {
            "binary_name": "parport-modules-5.8.0-63-generic-64k-di",
            "binary_version": "5.8.0-63.71~20.04.1"
          },
          {
            "binary_name": "parport-modules-5.8.0-63-generic-di",
            "binary_version": "5.8.0-63.71~20.04.1"
          },
          {
            "binary_name": "parport-modules-5.8.0-63-generic-lpae-di",
            "binary_version": "5.8.0-63.71~20.04.1"
          },
          {
            "binary_name": "pata-modules-5.8.0-63-generic-di",
            "binary_version": "5.8.0-63.71~20.04.1"
          },
          {
            "binary_name": "pcmcia-modules-5.8.0-63-generic-di",
            "binary_version": "5.8.0-63.71~20.04.1"
          },
          {
            "binary_name": "pcmcia-storage-modules-5.8.0-63-generic-di",
            "binary_version": "5.8.0-63.71~20.04.1"
          },
          {
            "binary_name": "plip-modules-5.8.0-63-generic-64k-di",
            "binary_version": "5.8.0-63.71~20.04.1"
          },
          {
            "binary_name": "plip-modules-5.8.0-63-generic-di",
            "binary_version": "5.8.0-63.71~20.04.1"
          },
          {
            "binary_name": "plip-modules-5.8.0-63-generic-lpae-di",
            "binary_version": "5.8.0-63.71~20.04.1"
          },
          {
            "binary_name": "ppp-modules-5.8.0-63-generic-64k-di",
            "binary_version": "5.8.0-63.71~20.04.1"
          },
          {
            "binary_name": "ppp-modules-5.8.0-63-generic-di",
            "binary_version": "5.8.0-63.71~20.04.1"
          },
          {
            "binary_name": "ppp-modules-5.8.0-63-generic-lpae-di",
            "binary_version": "5.8.0-63.71~20.04.1"
          },
          {
            "binary_name": "sata-modules-5.8.0-63-generic-64k-di",
            "binary_version": "5.8.0-63.71~20.04.1"
          },
          {
            "binary_name": "sata-modules-5.8.0-63-generic-di",
            "binary_version": "5.8.0-63.71~20.04.1"
          },
          {
            "binary_name": "sata-modules-5.8.0-63-generic-lpae-di",
            "binary_version": "5.8.0-63.71~20.04.1"
          },
          {
            "binary_name": "scsi-modules-5.8.0-63-generic-64k-di",
            "binary_version": "5.8.0-63.71~20.04.1"
          },
          {
            "binary_name": "scsi-modules-5.8.0-63-generic-di",
            "binary_version": "5.8.0-63.71~20.04.1"
          },
          {
            "binary_name": "scsi-modules-5.8.0-63-generic-lpae-di",
            "binary_version": "5.8.0-63.71~20.04.1"
          },
          {
            "binary_name": "serial-modules-5.8.0-63-generic-di",
            "binary_version": "5.8.0-63.71~20.04.1"
          },
          {
            "binary_name": "storage-core-modules-5.8.0-63-generic-64k-di",
            "binary_version": "5.8.0-63.71~20.04.1"
          },
          {
            "binary_name": "storage-core-modules-5.8.0-63-generic-di",
            "binary_version": "5.8.0-63.71~20.04.1"
          },
          {
            "binary_name": "storage-core-modules-5.8.0-63-generic-lpae-di",
            "binary_version": "5.8.0-63.71~20.04.1"
          },
          {
            "binary_name": "usb-modules-5.8.0-63-generic-64k-di",
            "binary_version": "5.8.0-63.71~20.04.1"
          },
          {
            "binary_name": "usb-modules-5.8.0-63-generic-di",
            "binary_version": "5.8.0-63.71~20.04.1"
          },
          {
            "binary_name": "usb-modules-5.8.0-63-generic-lpae-di",
            "binary_version": "5.8.0-63.71~20.04.1"
          },
          {
            "binary_name": "virtio-modules-5.8.0-63-generic-64k-di",
            "binary_version": "5.8.0-63.71~20.04.1"
          },
          {
            "binary_name": "virtio-modules-5.8.0-63-generic-di",
            "binary_version": "5.8.0-63.71~20.04.1"
          },
          {
            "binary_name": "vlan-modules-5.8.0-63-generic-64k-di",
            "binary_version": "5.8.0-63.71~20.04.1"
          },
          {
            "binary_name": "vlan-modules-5.8.0-63-generic-di",
            "binary_version": "5.8.0-63.71~20.04.1"
          },
          {
            "binary_name": "vlan-modules-5.8.0-63-generic-lpae-di",
            "binary_version": "5.8.0-63.71~20.04.1"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:20.04:LTS",
        "name": "linux-hwe-5.8",
        "purl": "pkg:deb/ubuntu/linux-hwe-5.8@5.8.0-63.71~20.04.1?arch=source\u0026distro=focal"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "5.8.0-23.24~20.04.1",
        "5.8.0-25.26~20.04.1",
        "5.8.0-28.30~20.04.1",
        "5.8.0-29.31~20.04.1",
        "5.8.0-31.33~20.04.1",
        "5.8.0-33.36~20.04.1",
        "5.8.0-34.37~20.04.2",
        "5.8.0-36.40~20.04.1",
        "5.8.0-38.43~20.04.1",
        "5.8.0-40.45~20.04.1",
        "5.8.0-41.46~20.04.1",
        "5.8.0-43.49~20.04.1",
        "5.8.0-44.50~20.04.1",
        "5.8.0-45.51~20.04.1",
        "5.8.0-48.54~20.04.1",
        "5.8.0-49.55~20.04.1",
        "5.8.0-50.56~20.04.1",
        "5.8.0-53.60~20.04.1",
        "5.8.0-55.62~20.04.1",
        "5.8.0-59.66~20.04.1",
        "5.8.0-63.71~20.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-buildinfo-5.15.0-1111-ibm",
            "binary_version": "5.15.0-1111.115~20.04.1"
          },
          {
            "binary_name": "linux-headers-5.15.0-1111-ibm",
            "binary_version": "5.15.0-1111.115~20.04.1"
          },
          {
            "binary_name": "linux-ibm-5.15-headers-5.15.0-1111",
            "binary_version": "5.15.0-1111.115~20.04.1"
          },
          {
            "binary_name": "linux-ibm-5.15-source-5.15.0",
            "binary_version": "5.15.0-1111.115~20.04.1"
          },
          {
            "binary_name": "linux-ibm-5.15-tools-5.15.0-1111",
            "binary_version": "5.15.0-1111.115~20.04.1"
          },
          {
            "binary_name": "linux-image-unsigned-5.15.0-1111-ibm",
            "binary_version": "5.15.0-1111.115~20.04.1"
          },
          {
            "binary_name": "linux-modules-5.15.0-1111-ibm",
            "binary_version": "5.15.0-1111.115~20.04.1"
          },
          {
            "binary_name": "linux-modules-extra-5.15.0-1111-ibm",
            "binary_version": "5.15.0-1111.115~20.04.1"
          },
          {
            "binary_name": "linux-tools-5.15.0-1111-ibm",
            "binary_version": "5.15.0-1111.115~20.04.1"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:20.04:LTS",
        "name": "linux-ibm-5.15",
        "purl": "pkg:deb/ubuntu/linux-ibm-5.15@5.15.0-1111.115~20.04.1?arch=source\u0026distro=esm-infra/focal"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "5.15.0-1033.36~20.04.1",
        "5.15.0-1034.37~20.04.1",
        "5.15.0-1035.38~20.04.1",
        "5.15.0-1036.39~20.04.1",
        "5.15.0-1037.40~20.04.1",
        "5.15.0-1038.41~20.04.1",
        "5.15.0-1040.43~20.04.1",
        "5.15.0-1041.44~20.04.1",
        "5.15.0-1042.45~20.04.1",
        "5.15.0-1043.46~20.04.1",
        "5.15.0-1044.47~20.04.1",
        "5.15.0-1045.48~20.04.1",
        "5.15.0-1046.49~20.04.1",
        "5.15.0-1047.50~20.04.1",
        "5.15.0-1048.51~20.04.1",
        "5.15.0-1049.52~20.04.1",
        "5.15.0-1050.53~20.04.1",
        "5.15.0-1053.56~20.04.1",
        "5.15.0-1054.57~20.04.1",
        "5.15.0-1055.58~20.04.1",
        "5.15.0-1057.60~20.04.1",
        "5.15.0-1058.61~20.04.1",
        "5.15.0-1059.62~20.04.1",
        "5.15.0-1060.63~20.04.1",
        "5.15.0-1061.64~20.04.1",
        "5.15.0-1062.65~20.04.1",
        "5.15.0-1063.66~20.04.1",
        "5.15.0-1064.67~20.04.1",
        "5.15.0-1065.68~20.04.1",
        "5.15.0-1066.69~20.04.1",
        "5.15.0-1067.70~20.04.1",
        "5.15.0-1068.71~20.04.1",
        "5.15.0-1069.72~20.04.1",
        "5.15.0-1074.77~20.04.1",
        "5.15.0-1075.78~20.04.1",
        "5.15.0-1076.79~20.04.1",
        "5.15.0-1078.81~20.04.1",
        "5.15.0-1079.82~20.04.1",
        "5.15.0-1080.83~20.04.1",
        "5.15.0-1081.84~20.04.1",
        "5.15.0-1083.86~20.04.1",
        "5.15.0-1085.88~20.04.1",
        "5.15.0-1086.89~20.04.1",
        "5.15.0-1087.90~20.04.1",
        "5.15.0-1089.92~20.04.1",
        "5.15.0-1090.93~20.04.1",
        "5.15.0-1091.94~20.04.1",
        "5.15.0-1092.95~20.04.1",
        "5.15.0-1093.96~20.04.1",
        "5.15.0-1094.97~20.04.1",
        "5.15.0-1095.98~20.04.1",
        "5.15.0-1097.100~20.04.1",
        "5.15.0-1098.101~20.04.1",
        "5.15.0-1099.102~20.04.1",
        "5.15.0-1100.103~20.04.1",
        "5.15.0-1102.105~20.04.1",
        "5.15.0-1103.106~20.04.1",
        "5.15.0-1105.109~20.04.1",
        "5.15.0-1106.110~20.04.1",
        "5.15.0-1107.111~20.04.1",
        "5.15.0-1108.112~20.04.1",
        "5.15.0-1109.113~20.04.1",
        "5.15.0-1110.114~20.04.1",
        "5.15.0-1111.115~20.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-buildinfo-5.13.0-1017-intel",
            "binary_version": "5.13.0-1017.19"
          },
          {
            "binary_name": "linux-cloud-tools-5.13.0-1017-intel",
            "binary_version": "5.13.0-1017.19"
          },
          {
            "binary_name": "linux-headers-5.13.0-1017-intel",
            "binary_version": "5.13.0-1017.19"
          },
          {
            "binary_name": "linux-image-unsigned-5.13.0-1017-intel",
            "binary_version": "5.13.0-1017.19"
          },
          {
            "binary_name": "linux-intel-5.13-cloud-tools-5.13.0-1017",
            "binary_version": "5.13.0-1017.19"
          },
          {
            "binary_name": "linux-intel-5.13-cloud-tools-common",
            "binary_version": "5.13.0-1017.19"
          },
          {
            "binary_name": "linux-intel-5.13-headers-5.13.0-1017",
            "binary_version": "5.13.0-1017.19"
          },
          {
            "binary_name": "linux-intel-5.13-source-5.13.0",
            "binary_version": "5.13.0-1017.19"
          },
          {
            "binary_name": "linux-intel-5.13-tools-5.13.0-1017",
            "binary_version": "5.13.0-1017.19"
          },
          {
            "binary_name": "linux-intel-5.13-tools-common",
            "binary_version": "5.13.0-1017.19"
          },
          {
            "binary_name": "linux-intel-5.13-tools-host",
            "binary_version": "5.13.0-1017.19"
          },
          {
            "binary_name": "linux-modules-5.13.0-1017-intel",
            "binary_version": "5.13.0-1017.19"
          },
          {
            "binary_name": "linux-modules-extra-5.13.0-1017-intel",
            "binary_version": "5.13.0-1017.19"
          },
          {
            "binary_name": "linux-tools-5.13.0-1017-intel",
            "binary_version": "5.13.0-1017.19"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:20.04:LTS",
        "name": "linux-intel-5.13",
        "purl": "pkg:deb/ubuntu/linux-intel-5.13@5.13.0-1017.19?arch=source\u0026distro=focal"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "5.13.0-1007.7",
        "5.13.0-1008.8",
        "5.13.0-1009.9",
        "5.13.0-1010.10",
        "5.13.0-1011.11",
        "5.13.0-1014.15",
        "5.13.0-1017.19"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-buildinfo-5.15.0-1112-intel-iotg",
            "binary_version": "5.15.0-1112.118~20.04.1"
          },
          {
            "binary_name": "linux-cloud-tools-5.15.0-1112-intel-iotg",
            "binary_version": "5.15.0-1112.118~20.04.1"
          },
          {
            "binary_name": "linux-headers-5.15.0-1112-intel-iotg",
            "binary_version": "5.15.0-1112.118~20.04.1"
          },
          {
            "binary_name": "linux-image-unsigned-5.15.0-1112-intel-iotg",
            "binary_version": "5.15.0-1112.118~20.04.1"
          },
          {
            "binary_name": "linux-intel-iotg-5.15-cloud-tools-5.15.0-1112",
            "binary_version": "5.15.0-1112.118~20.04.1"
          },
          {
            "binary_name": "linux-intel-iotg-5.15-cloud-tools-common",
            "binary_version": "5.15.0-1112.118~20.04.1"
          },
          {
            "binary_name": "linux-intel-iotg-5.15-headers-5.15.0-1112",
            "binary_version": "5.15.0-1112.118~20.04.1"
          },
          {
            "binary_name": "linux-intel-iotg-5.15-tools-5.15.0-1112",
            "binary_version": "5.15.0-1112.118~20.04.1"
          },
          {
            "binary_name": "linux-intel-iotg-5.15-tools-common",
            "binary_version": "5.15.0-1112.118~20.04.1"
          },
          {
            "binary_name": "linux-intel-iotg-5.15-tools-host",
            "binary_version": "5.15.0-1112.118~20.04.1"
          },
          {
            "binary_name": "linux-modules-5.15.0-1112-intel-iotg",
            "binary_version": "5.15.0-1112.118~20.04.1"
          },
          {
            "binary_name": "linux-modules-extra-5.15.0-1112-intel-iotg",
            "binary_version": "5.15.0-1112.118~20.04.1"
          },
          {
            "binary_name": "linux-modules-iwlwifi-5.15.0-1112-intel-iotg",
            "binary_version": "5.15.0-1112.118~20.04.1"
          },
          {
            "binary_name": "linux-tools-5.15.0-1112-intel-iotg",
            "binary_version": "5.15.0-1112.118~20.04.1"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:20.04:LTS",
        "name": "linux-intel-iotg-5.15",
        "purl": "pkg:deb/ubuntu/linux-intel-iotg-5.15@5.15.0-1112.118~20.04.1?arch=source\u0026distro=esm-infra/focal"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "5.15.0-1003.5~20.04.1",
        "5.15.0-1008.11~20.04.1",
        "5.15.0-1010.14~20.04.1",
        "5.15.0-1015.20~20.04.2",
        "5.15.0-1016.21~20.04.1",
        "5.15.0-1017.22~20.04.1",
        "5.15.0-1018.23~20.04.1",
        "5.15.0-1021.26~20.04.1",
        "5.15.0-1023.28~20.04.1",
        "5.15.0-1025.30~20.04.1",
        "5.15.0-1026.31~20.04.1",
        "5.15.0-1027.32~20.04.1",
        "5.15.0-1030.35~20.04.1",
        "5.15.0-1031.36~20.04.1",
        "5.15.0-1033.38~20.04.1",
        "5.15.0-1034.39~20.04.1",
        "5.15.0-1036.41~20.04.1",
        "5.15.0-1037.42~20.04.1",
        "5.15.0-1038.43~20.04.1",
        "5.15.0-1040.46~20.04.1",
        "5.15.0-1043.49~20.04.1",
        "5.15.0-1045.51~20.04.1",
        "5.15.0-1046.52~20.04.1",
        "5.15.0-1048.54~20.04.1",
        "5.15.0-1049.55~20.04.1",
        "5.15.0-1050.56~20.04.1",
        "5.15.0-1051.57~20.04.1",
        "5.15.0-1052.58~20.04.1",
        "5.15.0-1055.61~20.04.1",
        "5.15.0-1058.64~20.04.1",
        "5.15.0-1059.65~20.04.1",
        "5.15.0-1060.66~20.04.1",
        "5.15.0-1061.67~20.04.1",
        "5.15.0-1062.68~20.04.1",
        "5.15.0-1063.69~20.04.1",
        "5.15.0-1064.70~20.04.1",
        "5.15.0-1065.71~20.04.1",
        "5.15.0-1066.72~20.04.1",
        "5.15.0-1067.73~20.04.1",
        "5.15.0-1071.77~20.04.1",
        "5.15.0-1072.78~20.04.1",
        "5.15.0-1073.79~20.04.2",
        "5.15.0-1074.80~20.04.1",
        "5.15.0-1077.83~20.04.1",
        "5.15.0-1078.84~20.04.1",
        "5.15.0-1079.85~20.04.1",
        "5.15.0-1083.89~20.04.1",
        "5.15.0-1084.90~20.04.1",
        "5.15.0-1085.91~20.04.1",
        "5.15.0-1086.92~20.04.1",
        "5.15.0-1087.93~20.04.1",
        "5.15.0-1088.94~20.04.1",
        "5.15.0-1090.96~20.04.1",
        "5.15.0-1091.97~20.04.1",
        "5.15.0-1092.98~20.04.1",
        "5.15.0-1093.99~20.04.1",
        "5.15.0-1094.100~20.04.1",
        "5.15.0-1095.101~20.04.1",
        "5.15.0-1096.102~20.04.1",
        "5.15.0-1098.104~20.04.1",
        "5.15.0-1099.105~20.04.1",
        "5.15.0-1100.106~20.04.1",
        "5.15.0-1101.107~20.04.1",
        "5.15.0-1103.109~20.04.1",
        "5.15.0-1104.110~20.04.1",
        "5.15.0-1106.112~20.04.1",
        "5.15.0-1107.113~20.04.1",
        "5.15.0-1108.114~20.04.1",
        "5.15.0-1109.115~20.04.1",
        "5.15.0-1110.116~20.04.1",
        "5.15.0-1111.117~20.04.1",
        "5.15.0-1112.118~20.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-buildinfo-5.15.0-195-lowlatency",
            "binary_version": "5.15.0-195.205~20.04.1"
          },
          {
            "binary_name": "linux-buildinfo-5.15.0-195-lowlatency-64k",
            "binary_version": "5.15.0-195.205~20.04.1"
          },
          {
            "binary_name": "linux-cloud-tools-5.15.0-195-lowlatency",
            "binary_version": "5.15.0-195.205~20.04.1"
          },
          {
            "binary_name": "linux-headers-5.15.0-195-lowlatency",
            "binary_version": "5.15.0-195.205~20.04.1"
          },
          {
            "binary_name": "linux-headers-5.15.0-195-lowlatency-64k",
            "binary_version": "5.15.0-195.205~20.04.1"
          },
          {
            "binary_name": "linux-image-unsigned-5.15.0-195-lowlatency",
            "binary_version": "5.15.0-195.205~20.04.1"
          },
          {
            "binary_name": "linux-image-unsigned-5.15.0-195-lowlatency-64k",
            "binary_version": "5.15.0-195.205~20.04.1"
          },
          {
            "binary_name": "linux-lowlatency-hwe-5.15-cloud-tools-5.15.0-195",
            "binary_version": "5.15.0-195.205~20.04.1"
          },
          {
            "binary_name": "linux-lowlatency-hwe-5.15-headers-5.15.0-195",
            "binary_version": "5.15.0-195.205~20.04.1"
          },
          {
            "binary_name": "linux-lowlatency-hwe-5.15-tools-5.15.0-195",
            "binary_version": "5.15.0-195.205~20.04.1"
          },
          {
            "binary_name": "linux-modules-5.15.0-195-lowlatency",
            "binary_version": "5.15.0-195.205~20.04.1"
          },
          {
            "binary_name": "linux-modules-5.15.0-195-lowlatency-64k",
            "binary_version": "5.15.0-195.205~20.04.1"
          },
          {
            "binary_name": "linux-modules-iwlwifi-5.15.0-195-lowlatency",
            "binary_version": "5.15.0-195.205~20.04.1"
          },
          {
            "binary_name": "linux-tools-5.15.0-195-lowlatency",
            "binary_version": "5.15.0-195.205~20.04.1"
          },
          {
            "binary_name": "linux-tools-5.15.0-195-lowlatency-64k",
            "binary_version": "5.15.0-195.205~20.04.1"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:20.04:LTS",
        "name": "linux-lowlatency-hwe-5.15",
        "purl": "pkg:deb/ubuntu/linux-lowlatency-hwe-5.15@5.15.0-195.205~20.04.1?arch=source\u0026distro=esm-infra/focal"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "5.15.0-33.34~20.04.1",
        "5.15.0-42.45~20.04.1",
        "5.15.0-43.46~20.04.1",
        "5.15.0-46.49~20.04.1",
        "5.15.0-48.54~20.04.1",
        "5.15.0-50.56~20.04.1",
        "5.15.0-52.58~20.04.1",
        "5.15.0-53.59~20.04.1",
        "5.15.0-56.62~20.04.1",
        "5.15.0-58.64~20.04.1",
        "5.15.0-60.66~20.04.1",
        "5.15.0-67.74~20.04.1",
        "5.15.0-69.76~20.04.1",
        "5.15.0-70.77~20.04.1",
        "5.15.0-71.78~20.04.1",
        "5.15.0-72.79~20.04.1",
        "5.15.0-73.80~20.04.1",
        "5.15.0-75.82~20.04.1",
        "5.15.0-76.83~20.04.1",
        "5.15.0-78.85~20.04.1",
        "5.15.0-79.88~20.04.1",
        "5.15.0-82.91~20.04.1",
        "5.15.0-83.92~20.04.1",
        "5.15.0-84.93~20.04.1",
        "5.15.0-86.95~20.04.1",
        "5.15.0-87.96~20.04.1",
        "5.15.0-88.98~20.04.1",
        "5.15.0-89.99~20.04.1",
        "5.15.0-91.101~20.04.1",
        "5.15.0-92.102~20.04.1",
        "5.15.0-94.104~20.04.1",
        "5.15.0-97.107~20.04.1",
        "5.15.0-100.110~20.04.1",
        "5.15.0-101.111~20.04.1",
        "5.15.0-102.112~20.04.1",
        "5.15.0-105.115~20.04.1",
        "5.15.0-106.116~20.04.1",
        "5.15.0-107.117~20.04.1",
        "5.15.0-110.120~20.04.1",
        "5.15.0-113.123~20.04.1",
        "5.15.0-116.126~20.04.1",
        "5.15.0-117.127~20.04.1",
        "5.15.0-118.128~20.04.1",
        "5.15.0-119.129~20.04.1",
        "5.15.0-121.131~20.04.1",
        "5.15.0-122.132~20.04.1",
        "5.15.0-124.134~20.04.1",
        "5.15.0-125.135~20.04.1",
        "5.15.0-126.136~20.04.1",
        "5.15.0-127.137~20.04.1",
        "5.15.0-128.138~20.04.1",
        "5.15.0-129.139~20.04.1",
        "5.15.0-131.141~20.04.1",
        "5.15.0-133.143~20.04.1",
        "5.15.0-134.145~20.04.1",
        "5.15.0-135.146~20.04.1",
        "5.15.0-136.147~20.04.1",
        "5.15.0-138.148~20.04.1",
        "5.15.0-139.149~20.04.1",
        "5.15.0-140.150~20.04.1",
        "5.15.0-142.152~20.04.1",
        "5.15.0-143.153~20.04.1",
        "5.15.0-144.157~20.04.1",
        "5.15.0-145.158~20.04.1",
        "5.15.0-152.162~20.04.1",
        "5.15.0-153.163~20.04.1",
        "5.15.0-156.166~20.04.1",
        "5.15.0-157.167~20.04.1",
        "5.15.0-160.170~20.04.1",
        "5.15.0-161.171~20.04.1",
        "5.15.0-163.173~20.04.1",
        "5.15.0-164.174~20.04.1",
        "5.15.0-168.178~20.04.1",
        "5.15.0-170.180~20.04.1",
        "5.15.0-171.181~20.04.1",
        "5.15.0-173.183~20.04.1",
        "5.15.0-174.184~20.04.1",
        "5.15.0-175.185~20.04.1",
        "5.15.0-177.187~20.04.1",
        "5.15.0-178.188~20.04.1",
        "5.15.0-179.189~20.04.1",
        "5.15.0-181.191~20.04.1",
        "5.15.0-183.193~20.04.1",
        "5.15.0-184.194~20.04.1",
        "5.15.0-190.200~20.04.1",
        "5.15.0-191.201~20.04.1",
        "5.15.0-194.204~20.04.1",
        "5.15.0-195.205~20.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-buildinfo-5.15.0-1068-nvidia-tegra",
            "binary_version": "5.15.0-1068.70~20.04.1"
          },
          {
            "binary_name": "linux-buildinfo-5.15.0-1068-nvidia-tegra-rt",
            "binary_version": "5.15.0-1068.70~20.04.1"
          },
          {
            "binary_name": "linux-headers-5.15.0-1068-nvidia-tegra",
            "binary_version": "5.15.0-1068.70~20.04.1"
          },
          {
            "binary_name": "linux-headers-5.15.0-1068-nvidia-tegra-rt",
            "binary_version": "5.15.0-1068.70~20.04.1"
          },
          {
            "binary_name": "linux-image-unsigned-5.15.0-1068-nvidia-tegra",
            "binary_version": "5.15.0-1068.70~20.04.1"
          },
          {
            "binary_name": "linux-image-unsigned-5.15.0-1068-nvidia-tegra-rt",
            "binary_version": "5.15.0-1068.70~20.04.1"
          },
          {
            "binary_name": "linux-modules-5.15.0-1068-nvidia-tegra",
            "binary_version": "5.15.0-1068.70~20.04.1"
          },
          {
            "binary_name": "linux-modules-5.15.0-1068-nvidia-tegra-rt",
            "binary_version": "5.15.0-1068.70~20.04.1"
          },
          {
            "binary_name": "linux-modules-extra-5.15.0-1068-nvidia-tegra",
            "binary_version": "5.15.0-1068.70~20.04.1"
          },
          {
            "binary_name": "linux-nvidia-tegra-5.15-headers-5.15.0-1068",
            "binary_version": "5.15.0-1068.70~20.04.1"
          },
          {
            "binary_name": "linux-nvidia-tegra-5.15-tools-5.15.0-1068",
            "binary_version": "5.15.0-1068.70~20.04.1"
          },
          {
            "binary_name": "linux-tools-5.15.0-1068-nvidia-tegra",
            "binary_version": "5.15.0-1068.70~20.04.1"
          },
          {
            "binary_name": "linux-tools-5.15.0-1068-nvidia-tegra-rt",
            "binary_version": "5.15.0-1068.70~20.04.1"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:20.04:LTS",
        "name": "linux-nvidia-tegra-5.15",
        "purl": "pkg:deb/ubuntu/linux-nvidia-tegra-5.15@5.15.0-1068.70~20.04.1?arch=source\u0026distro=esm-infra/focal"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "5.15.0-1009.9~20.04.1",
        "5.15.0-1010.10~20.04.1",
        "5.15.0-1012.12~20.04.1",
        "5.15.0-1014.14~20.04.1",
        "5.15.0-1015.15~20.04.1",
        "5.15.0-1016.16~20.04.1",
        "5.15.0-1017.17~20.04.1",
        "5.15.0-1018.18~20.04.1",
        "5.15.0-1019.19~20.04.1",
        "5.15.0-1020.20~20.04.1",
        "5.15.0-1022.22~20.04.1",
        "5.15.0-1025.25~20.04.1",
        "5.15.0-1027.27~20.04.1",
        "5.15.0-1030.30~20.04.1",
        "5.15.0-1032.32~20.04.1",
        "5.15.0-1039.39~20.04.1",
        "5.15.0-1040.40~20.04.1",
        "5.15.0-1041.41~20.04.1",
        "5.15.0-1042.42~20.04.1",
        "5.15.0-1043.43~20.04.1",
        "5.15.0-1044.44~20.04.1",
        "5.15.0-1045.45~20.04.1",
        "5.15.0-1046.46~20.04.1",
        "5.15.0-1047.47~20.04.1",
        "5.15.0-1048.48~20.04.1",
        "5.15.0-1049.49~20.04.1",
        "5.15.0-1050.50~20.04.1",
        "5.15.0-1051.51~20.04.1",
        "5.15.0-1052.52~20.04.2",
        "5.15.0-1053.53~20.04.1",
        "5.15.0-1055.55~20.04.1",
        "5.15.0-1057.57~20.04.1",
        "5.15.0-1058.58~20.04.1",
        "5.15.0-1060.60~20.04.1",
        "5.15.0-1061.61~20.04.1",
        "5.15.0-1063.63~20.04.1",
        "5.15.0-1064.66~20.04.1",
        "5.15.0-1065.67~20.04.1",
        "5.15.0-1066.68~20.04.1",
        "5.15.0-1067.69~20.04.1",
        "5.15.0-1068.70~20.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-buildinfo-5.10.0-1057-oem",
            "binary_version": "5.10.0-1057.61"
          },
          {
            "binary_name": "linux-headers-5.10.0-1057-oem",
            "binary_version": "5.10.0-1057.61"
          },
          {
            "binary_name": "linux-image-unsigned-5.10.0-1057-oem",
            "binary_version": "5.10.0-1057.61"
          },
          {
            "binary_name": "linux-modules-5.10.0-1057-oem",
            "binary_version": "5.10.0-1057.61"
          },
          {
            "binary_name": "linux-oem-5.10-headers-5.10.0-1057",
            "binary_version": "5.10.0-1057.61"
          },
          {
            "binary_name": "linux-oem-5.10-tools-5.10.0-1057",
            "binary_version": "5.10.0-1057.61"
          },
          {
            "binary_name": "linux-oem-5.10-tools-host",
            "binary_version": "5.10.0-1057.61"
          },
          {
            "binary_name": "linux-tools-5.10.0-1057-oem",
            "binary_version": "5.10.0-1057.61"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:20.04:LTS",
        "name": "linux-oem-5.10",
        "purl": "pkg:deb/ubuntu/linux-oem-5.10@5.10.0-1057.61?arch=source\u0026distro=focal"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "5.10.0-1008.9",
        "5.10.0-1011.12",
        "5.10.0-1013.14",
        "5.10.0-1014.15",
        "5.10.0-1016.17",
        "5.10.0-1017.18",
        "5.10.0-1019.20",
        "5.10.0-1021.22",
        "5.10.0-1022.23",
        "5.10.0-1023.24",
        "5.10.0-1025.26",
        "5.10.0-1026.27",
        "5.10.0-1029.30",
        "5.10.0-1032.33",
        "5.10.0-1033.34",
        "5.10.0-1034.35",
        "5.10.0-1038.40",
        "5.10.0-1044.46",
        "5.10.0-1045.47",
        "5.10.0-1049.51",
        "5.10.0-1050.52",
        "5.10.0-1051.53",
        "5.10.0-1052.54",
        "5.10.0-1053.55",
        "5.10.0-1055.58",
        "5.10.0-1057.61"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-buildinfo-5.13.0-1029-oem",
            "binary_version": "5.13.0-1029.36"
          },
          {
            "binary_name": "linux-headers-5.13.0-1029-oem",
            "binary_version": "5.13.0-1029.36"
          },
          {
            "binary_name": "linux-image-unsigned-5.13.0-1029-oem",
            "binary_version": "5.13.0-1029.36"
          },
          {
            "binary_name": "linux-modules-5.13.0-1029-oem",
            "binary_version": "5.13.0-1029.36"
          },
          {
            "binary_name": "linux-oem-5.13-headers-5.13.0-1029",
            "binary_version": "5.13.0-1029.36"
          },
          {
            "binary_name": "linux-oem-5.13-tools-5.13.0-1029",
            "binary_version": "5.13.0-1029.36"
          },
          {
            "binary_name": "linux-oem-5.13-tools-host",
            "binary_version": "5.13.0-1029.36"
          },
          {
            "binary_name": "linux-tools-5.13.0-1029-oem",
            "binary_version": "5.13.0-1029.36"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:20.04:LTS",
        "name": "linux-oem-5.13",
        "purl": "pkg:deb/ubuntu/linux-oem-5.13@5.13.0-1029.36?arch=source\u0026distro=focal"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "5.13.0-1009.10",
        "5.13.0-1010.11",
        "5.13.0-1012.16",
        "5.13.0-1014.18",
        "5.13.0-1017.21",
        "5.13.0-1019.23",
        "5.13.0-1020.24",
        "5.13.0-1021.25",
        "5.13.0-1022.26",
        "5.13.0-1026.32",
        "5.13.0-1028.35",
        "5.13.0-1029.36"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-buildinfo-5.14.0-1059-oem",
            "binary_version": "5.14.0-1059.67"
          },
          {
            "binary_name": "linux-headers-5.14.0-1059-oem",
            "binary_version": "5.14.0-1059.67"
          },
          {
            "binary_name": "linux-image-unsigned-5.14.0-1059-oem",
            "binary_version": "5.14.0-1059.67"
          },
          {
            "binary_name": "linux-modules-5.14.0-1059-oem",
            "binary_version": "5.14.0-1059.67"
          },
          {
            "binary_name": "linux-modules-iwlwifi-5.14.0-1059-oem",
            "binary_version": "5.14.0-1059.67"
          },
          {
            "binary_name": "linux-oem-5.14-headers-5.14.0-1059",
            "binary_version": "5.14.0-1059.67"
          },
          {
            "binary_name": "linux-oem-5.14-tools-5.14.0-1059",
            "binary_version": "5.14.0-1059.67"
          },
          {
            "binary_name": "linux-oem-5.14-tools-host",
            "binary_version": "5.14.0-1059.67"
          },
          {
            "binary_name": "linux-tools-5.14.0-1059-oem",
            "binary_version": "5.14.0-1059.67"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:20.04:LTS",
        "name": "linux-oem-5.14",
        "purl": "pkg:deb/ubuntu/linux-oem-5.14@5.14.0-1059.67?arch=source\u0026distro=focal"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "5.14.0-1004.4",
        "5.14.0-1005.5",
        "5.14.0-1007.7",
        "5.14.0-1008.8",
        "5.14.0-1010.10",
        "5.14.0-1011.11",
        "5.14.0-1013.13",
        "5.14.0-1018.19",
        "5.14.0-1020.22",
        "5.14.0-1022.24",
        "5.14.0-1024.26",
        "5.14.0-1027.30",
        "5.14.0-1029.32",
        "5.14.0-1031.34",
        "5.14.0-1032.35",
        "5.14.0-1033.36",
        "5.14.0-1034.37",
        "5.14.0-1036.40",
        "5.14.0-1038.42",
        "5.14.0-1042.47",
        "5.14.0-1044.49",
        "5.14.0-1045.51",
        "5.14.0-1046.53",
        "5.14.0-1047.54",
        "5.14.0-1048.55",
        "5.14.0-1049.56",
        "5.14.0-1050.57",
        "5.14.0-1051.58",
        "5.14.0-1052.59",
        "5.14.0-1054.61",
        "5.14.0-1055.62",
        "5.14.0-1056.63",
        "5.14.0-1057.64",
        "5.14.0-1058.66",
        "5.14.0-1059.67"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-buildinfo-5.6.0-1056-oem",
            "binary_version": "5.6.0-1056.60"
          },
          {
            "binary_name": "linux-headers-5.6.0-1056-oem",
            "binary_version": "5.6.0-1056.60"
          },
          {
            "binary_name": "linux-image-unsigned-5.6.0-1056-oem",
            "binary_version": "5.6.0-1056.60"
          },
          {
            "binary_name": "linux-modules-5.6.0-1056-oem",
            "binary_version": "5.6.0-1056.60"
          },
          {
            "binary_name": "linux-oem-5.6-headers-5.6.0-1056",
            "binary_version": "5.6.0-1056.60"
          },
          {
            "binary_name": "linux-oem-5.6-tools-5.6.0-1056",
            "binary_version": "5.6.0-1056.60"
          },
          {
            "binary_name": "linux-oem-5.6-tools-host",
            "binary_version": "5.6.0-1056.60"
          },
          {
            "binary_name": "linux-tools-5.6.0-1056-oem",
            "binary_version": "5.6.0-1056.60"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:20.04:LTS",
        "name": "linux-oem-5.6",
        "purl": "pkg:deb/ubuntu/linux-oem-5.6@5.6.0-1056.60?arch=source\u0026distro=focal"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "5.6.0-1007.7",
        "5.6.0-1008.8",
        "5.6.0-1010.10",
        "5.6.0-1011.11",
        "5.6.0-1013.13",
        "5.6.0-1017.17",
        "5.6.0-1018.18",
        "5.6.0-1020.20",
        "5.6.0-1021.21",
        "5.6.0-1023.23",
        "5.6.0-1026.26",
        "5.6.0-1027.27",
        "5.6.0-1028.28",
        "5.6.0-1031.32",
        "5.6.0-1032.33",
        "5.6.0-1033.35",
        "5.6.0-1034.36",
        "5.6.0-1035.37",
        "5.6.0-1036.39",
        "5.6.0-1039.43",
        "5.6.0-1042.46",
        "5.6.0-1047.51",
        "5.6.0-1048.52",
        "5.6.0-1050.54",
        "5.6.0-1052.56",
        "5.6.0-1053.57",
        "5.6.0-1054.58",
        "5.6.0-1055.59",
        "5.6.0-1056.60"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-buildinfo-5.11.0-1028-oracle",
            "binary_version": "5.11.0-1028.31~20.04.1"
          },
          {
            "binary_name": "linux-headers-5.11.0-1028-oracle",
            "binary_version": "5.11.0-1028.31~20.04.1"
          },
          {
            "binary_name": "linux-image-unsigned-5.11.0-1028-oracle",
            "binary_version": "5.11.0-1028.31~20.04.1"
          },
          {
            "binary_name": "linux-modules-5.11.0-1028-oracle",
            "binary_version": "5.11.0-1028.31~20.04.1"
          },
          {
            "binary_name": "linux-modules-extra-5.11.0-1028-oracle",
            "binary_version": "5.11.0-1028.31~20.04.1"
          },
          {
            "binary_name": "linux-oracle-5.11-headers-5.11.0-1028",
            "binary_version": "5.11.0-1028.31~20.04.1"
          },
          {
            "binary_name": "linux-oracle-5.11-tools-5.11.0-1028",
            "binary_version": "5.11.0-1028.31~20.04.1"
          },
          {
            "binary_name": "linux-tools-5.11.0-1028-oracle",
            "binary_version": "5.11.0-1028.31~20.04.1"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:20.04:LTS",
        "name": "linux-oracle-5.11",
        "purl": "pkg:deb/ubuntu/linux-oracle-5.11@5.11.0-1028.31~20.04.1?arch=source\u0026distro=focal"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "5.11.0-1008.8~20.04.1",
        "5.11.0-1013.14~20.04.1",
        "5.11.0-1016.17~20.04.1",
        "5.11.0-1017.18~20.04.1",
        "5.11.0-1019.20~20.04.1",
        "5.11.0-1020.21~20.04.1",
        "5.11.0-1021.22~20.04.1",
        "5.11.0-1022.23~20.04.1",
        "5.11.0-1023.24~20.04.1",
        "5.11.0-1025.27~20.04.1",
        "5.11.0-1027.30~20.04.1",
        "5.11.0-1028.31~20.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-buildinfo-5.13.0-1036-oracle",
            "binary_version": "5.13.0-1036.43~20.04.1"
          },
          {
            "binary_name": "linux-headers-5.13.0-1036-oracle",
            "binary_version": "5.13.0-1036.43~20.04.1"
          },
          {
            "binary_name": "linux-image-unsigned-5.13.0-1036-oracle",
            "binary_version": "5.13.0-1036.43~20.04.1"
          },
          {
            "binary_name": "linux-modules-5.13.0-1036-oracle",
            "binary_version": "5.13.0-1036.43~20.04.1"
          },
          {
            "binary_name": "linux-modules-extra-5.13.0-1036-oracle",
            "binary_version": "5.13.0-1036.43~20.04.1"
          },
          {
            "binary_name": "linux-oracle-5.13-headers-5.13.0-1036",
            "binary_version": "5.13.0-1036.43~20.04.1"
          },
          {
            "binary_name": "linux-oracle-5.13-tools-5.13.0-1036",
            "binary_version": "5.13.0-1036.43~20.04.1"
          },
          {
            "binary_name": "linux-tools-5.13.0-1036-oracle",
            "binary_version": "5.13.0-1036.43~20.04.1"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:20.04:LTS",
        "name": "linux-oracle-5.13",
        "purl": "pkg:deb/ubuntu/linux-oracle-5.13@5.13.0-1036.43~20.04.1?arch=source\u0026distro=focal"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "5.13.0-1011.13~20.04.2",
        "5.13.0-1015.19~20.04.1",
        "5.13.0-1016.20~20.04.1",
        "5.13.0-1018.22~20.04.1",
        "5.13.0-1021.26~20.04.1",
        "5.13.0-1025.30~20.04.1",
        "5.13.0-1027.32~20.04.1",
        "5.13.0-1028.33~20.04.1",
        "5.13.0-1030.35~20.04.1",
        "5.13.0-1033.39~20.04.1",
        "5.13.0-1034.40~20.04.1",
        "5.13.0-1036.43~20.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-buildinfo-5.15.0-1114-oracle",
            "binary_version": "5.15.0-1114.120~20.04.1"
          },
          {
            "binary_name": "linux-headers-5.15.0-1114-oracle",
            "binary_version": "5.15.0-1114.120~20.04.1"
          },
          {
            "binary_name": "linux-image-unsigned-5.15.0-1114-oracle",
            "binary_version": "5.15.0-1114.120~20.04.1"
          },
          {
            "binary_name": "linux-modules-5.15.0-1114-oracle",
            "binary_version": "5.15.0-1114.120~20.04.1"
          },
          {
            "binary_name": "linux-modules-extra-5.15.0-1114-oracle",
            "binary_version": "5.15.0-1114.120~20.04.1"
          },
          {
            "binary_name": "linux-oracle-5.15-headers-5.15.0-1114",
            "binary_version": "5.15.0-1114.120~20.04.1"
          },
          {
            "binary_name": "linux-oracle-5.15-tools-5.15.0-1114",
            "binary_version": "5.15.0-1114.120~20.04.1"
          },
          {
            "binary_name": "linux-tools-5.15.0-1114-oracle",
            "binary_version": "5.15.0-1114.120~20.04.1"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:20.04:LTS",
        "name": "linux-oracle-5.15",
        "purl": "pkg:deb/ubuntu/linux-oracle-5.15@5.15.0-1114.120~20.04.1?arch=source\u0026distro=esm-infra/focal"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "5.15.0-1007.9~20.04.1",
        "5.15.0-1013.17~20.04.1",
        "5.15.0-1016.20~20.04.1",
        "5.15.0-1017.22~20.04.1",
        "5.15.0-1018.23~20.04.1",
        "5.15.0-1019.24~20.04.1",
        "5.15.0-1021.27~20.04.1",
        "5.15.0-1022.28~20.04.1",
        "5.15.0-1025.31~20.04.2",
        "5.15.0-1027.33~20.04.1",
        "5.15.0-1029.35~20.04.1",
        "5.15.0-1030.36~20.04.1",
        "5.15.0-1032.38~20.04.1",
        "5.15.0-1033.39~20.04.1",
        "5.15.0-1034.40~20.04.1",
        "5.15.0-1035.41~20.04.1",
        "5.15.0-1036.42~20.04.1",
        "5.15.0-1037.43~20.04.1",
        "5.15.0-1038.44~20.04.1",
        "5.15.0-1039.45~20.04.1",
        "5.15.0-1040.46~20.04.1",
        "5.15.0-1041.47~20.04.1",
        "5.15.0-1042.48~20.04.1",
        "5.15.0-1044.50~20.04.1",
        "5.15.0-1045.51~20.04.1",
        "5.15.0-1046.52~20.04.1",
        "5.15.0-1047.53~20.04.1",
        "5.15.0-1048.54~20.04.1",
        "5.15.0-1049.55~20.04.1",
        "5.15.0-1050.56~20.04.1",
        "5.15.0-1051.57~20.04.1",
        "5.15.0-1052.58~20.04.1",
        "5.15.0-1053.59~20.04.1",
        "5.15.0-1054.60~20.04.1",
        "5.15.0-1055.61~20.04.1",
        "5.15.0-1058.64~20.04.1",
        "5.15.0-1059.65~20.04.1",
        "5.15.0-1061.67~20.04.1",
        "5.15.0-1062.68~20.04.1",
        "5.15.0-1063.69~20.04.1",
        "5.15.0-1065.71~20.04.1",
        "5.15.0-1066.72~20.04.1",
        "5.15.0-1067.73~20.04.1",
        "5.15.0-1068.74~20.04.1",
        "5.15.0-1069.75~20.04.1",
        "5.15.0-1070.76~20.04.1",
        "5.15.0-1071.77~20.04.1",
        "5.15.0-1072.78~20.04.1",
        "5.15.0-1073.79~20.04.1",
        "5.15.0-1074.80~20.04.1",
        "5.15.0-1075.81~20.04.1",
        "5.15.0-1076.82~20.04.1",
        "5.15.0-1077.83~20.04.1",
        "5.15.0-1078.84~20.04.1",
        "5.15.0-1079.85~20.04.1",
        "5.15.0-1080.86~20.04.1",
        "5.15.0-1081.87~20.04.1",
        "5.15.0-1083.89~20.04.1",
        "5.15.0-1084.90~20.04.1",
        "5.15.0-1085.91~20.04.3",
        "5.15.0-1086.92~20.04.1",
        "5.15.0-1088.94~20.04.1",
        "5.15.0-1090.96~20.04.1",
        "5.15.0-1091.97~20.04.1",
        "5.15.0-1092.98~20.04.1",
        "5.15.0-1093.99~20.04.1",
        "5.15.0-1094.100~20.04.1",
        "5.15.0-1095.101~20.04.1",
        "5.15.0-1096.102~20.04.1",
        "5.15.0-1097.103~20.04.1",
        "5.15.0-1098.104~20.04.1",
        "5.15.0-1100.106~20.04.1",
        "5.15.0-1101.107~20.04.1",
        "5.15.0-1102.108~20.04.1",
        "5.15.0-1104.110~20.04.1",
        "5.15.0-1106.112~20.04.1",
        "5.15.0-1108.114~20.04.1",
        "5.15.0-1109.115~20.04.1",
        "5.15.0-1110.116~20.04.1",
        "5.15.0-1111.117~20.04.1",
        "5.15.0-1114.120~20.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-buildinfo-5.8.0-1038-oracle",
            "binary_version": "5.8.0-1038.39~20.04.1"
          },
          {
            "binary_name": "linux-headers-5.8.0-1038-oracle",
            "binary_version": "5.8.0-1038.39~20.04.1"
          },
          {
            "binary_name": "linux-image-unsigned-5.8.0-1038-oracle",
            "binary_version": "5.8.0-1038.39~20.04.1"
          },
          {
            "binary_name": "linux-modules-5.8.0-1038-oracle",
            "binary_version": "5.8.0-1038.39~20.04.1"
          },
          {
            "binary_name": "linux-modules-extra-5.8.0-1038-oracle",
            "binary_version": "5.8.0-1038.39~20.04.1"
          },
          {
            "binary_name": "linux-oracle-5.8-headers-5.8.0-1038",
            "binary_version": "5.8.0-1038.39~20.04.1"
          },
          {
            "binary_name": "linux-oracle-5.8-tools-5.8.0-1038",
            "binary_version": "5.8.0-1038.39~20.04.1"
          },
          {
            "binary_name": "linux-tools-5.8.0-1038-oracle",
            "binary_version": "5.8.0-1038.39~20.04.1"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:20.04:LTS",
        "name": "linux-oracle-5.8",
        "purl": "pkg:deb/ubuntu/linux-oracle-5.8@5.8.0-1038.39~20.04.1?arch=source\u0026distro=focal"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "5.8.0-1031.32~20.04.2",
        "5.8.0-1033.34~20.04.1",
        "5.8.0-1034.35~20.04.2",
        "5.8.0-1037.38~20.04.1",
        "5.8.0-1038.39~20.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-buildinfo-5.4.0-1006-raspi2",
            "binary_version": "5.4.0-1006.6"
          },
          {
            "binary_name": "linux-headers-5.4.0-1006-raspi2",
            "binary_version": "5.4.0-1006.6"
          },
          {
            "binary_name": "linux-image-5.4.0-1006-raspi2",
            "binary_version": "5.4.0-1006.6"
          },
          {
            "binary_name": "linux-modules-5.4.0-1006-raspi2",
            "binary_version": "5.4.0-1006.6"
          },
          {
            "binary_name": "linux-raspi2-headers-5.4.0-1006",
            "binary_version": "5.4.0-1006.6"
          },
          {
            "binary_name": "linux-raspi2-tools-5.4.0-1006",
            "binary_version": "5.4.0-1006.6"
          },
          {
            "binary_name": "linux-tools-5.4.0-1006-raspi2",
            "binary_version": "5.4.0-1006.6"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:20.04:LTS",
        "name": "linux-raspi2",
        "purl": "pkg:deb/ubuntu/linux-raspi2@5.4.0-1006.6?arch=source\u0026distro=focal"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "5.3.0-1007.8",
        "5.3.0-1014.16",
        "5.3.0-1015.17",
        "5.3.0-1017.19",
        "5.4.0-1004.4",
        "5.4.0-1006.6"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "block-modules-5.4.0-40-generic-di",
            "binary_version": "5.4.0-40.45"
          },
          {
            "binary_name": "crypto-modules-5.4.0-40-generic-di",
            "binary_version": "5.4.0-40.45"
          },
          {
            "binary_name": "fat-modules-5.4.0-40-generic-di",
            "binary_version": "5.4.0-40.45"
          },
          {
            "binary_name": "firewire-core-modules-5.4.0-40-generic-di",
            "binary_version": "5.4.0-40.45"
          },
          {
            "binary_name": "fs-core-modules-5.4.0-40-generic-di",
            "binary_version": "5.4.0-40.45"
          },
          {
            "binary_name": "fs-secondary-modules-5.4.0-40-generic-di",
            "binary_version": "5.4.0-40.45"
          },
          {
            "binary_name": "input-modules-5.4.0-40-generic-di",
            "binary_version": "5.4.0-40.45"
          },
          {
            "binary_name": "ipmi-modules-5.4.0-40-generic-di",
            "binary_version": "5.4.0-40.45"
          },
          {
            "binary_name": "kernel-image-5.4.0-40-generic-di",
            "binary_version": "5.4.0-40.45"
          },
          {
            "binary_name": "linux-buildinfo-5.4.0-40-generic",
            "binary_version": "5.4.0-40.45"
          },
          {
            "binary_name": "linux-headers-5.4.0-40-generic",
            "binary_version": "5.4.0-40.45"
          },
          {
            "binary_name": "linux-image-5.4.0-40-generic",
            "binary_version": "5.4.0-40.45"
          },
          {
            "binary_name": "linux-modules-5.4.0-40-generic",
            "binary_version": "5.4.0-40.45"
          },
          {
            "binary_name": "linux-modules-extra-5.4.0-40-generic",
            "binary_version": "5.4.0-40.45"
          },
          {
            "binary_name": "linux-riscv-headers-5.4.0-40",
            "binary_version": "5.4.0-40.45"
          },
          {
            "binary_name": "linux-riscv-tools-5.4.0-40",
            "binary_version": "5.4.0-40.45"
          },
          {
            "binary_name": "linux-tools-5.4.0-40-generic",
            "binary_version": "5.4.0-40.45"
          },
          {
            "binary_name": "linux-udebs-generic",
            "binary_version": "5.4.0-40.45"
          },
          {
            "binary_name": "md-modules-5.4.0-40-generic-di",
            "binary_version": "5.4.0-40.45"
          },
          {
            "binary_name": "message-modules-5.4.0-40-generic-di",
            "binary_version": "5.4.0-40.45"
          },
          {
            "binary_name": "mouse-modules-5.4.0-40-generic-di",
            "binary_version": "5.4.0-40.45"
          },
          {
            "binary_name": "multipath-modules-5.4.0-40-generic-di",
            "binary_version": "5.4.0-40.45"
          },
          {
            "binary_name": "nfs-modules-5.4.0-40-generic-di",
            "binary_version": "5.4.0-40.45"
          },
          {
            "binary_name": "nic-modules-5.4.0-40-generic-di",
            "binary_version": "5.4.0-40.45"
          },
          {
            "binary_name": "nic-shared-modules-5.4.0-40-generic-di",
            "binary_version": "5.4.0-40.45"
          },
          {
            "binary_name": "nic-usb-modules-5.4.0-40-generic-di",
            "binary_version": "5.4.0-40.45"
          },
          {
            "binary_name": "parport-modules-5.4.0-40-generic-di",
            "binary_version": "5.4.0-40.45"
          },
          {
            "binary_name": "pata-modules-5.4.0-40-generic-di",
            "binary_version": "5.4.0-40.45"
          },
          {
            "binary_name": "plip-modules-5.4.0-40-generic-di",
            "binary_version": "5.4.0-40.45"
          },
          {
            "binary_name": "ppp-modules-5.4.0-40-generic-di",
            "binary_version": "5.4.0-40.45"
          },
          {
            "binary_name": "sata-modules-5.4.0-40-generic-di",
            "binary_version": "5.4.0-40.45"
          },
          {
            "binary_name": "scsi-modules-5.4.0-40-generic-di",
            "binary_version": "5.4.0-40.45"
          },
          {
            "binary_name": "storage-core-modules-5.4.0-40-generic-di",
            "binary_version": "5.4.0-40.45"
          },
          {
            "binary_name": "usb-modules-5.4.0-40-generic-di",
            "binary_version": "5.4.0-40.45"
          },
          {
            "binary_name": "virtio-modules-5.4.0-40-generic-di",
            "binary_version": "5.4.0-40.45"
          },
          {
            "binary_name": "vlan-modules-5.4.0-40-generic-di",
            "binary_version": "5.4.0-40.45"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:20.04:LTS",
        "name": "linux-riscv",
        "purl": "pkg:deb/ubuntu/linux-riscv@5.4.0-40.45?arch=source\u0026distro=focal"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "5.4.0-24.28",
        "5.4.0-26.30",
        "5.4.0-27.31",
        "5.4.0-28.32",
        "5.4.0-30.34",
        "5.4.0-31.35",
        "5.4.0-33.37",
        "5.4.0-34.38",
        "5.4.0-36.41",
        "5.4.0-37.42",
        "5.4.0-39.44",
        "5.4.0-40.45"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-buildinfo-5.11.0-1031-generic",
            "binary_version": "5.11.0-1031.35"
          },
          {
            "binary_name": "linux-headers-5.11.0-1031-generic",
            "binary_version": "5.11.0-1031.35"
          },
          {
            "binary_name": "linux-image-5.11.0-1031-generic",
            "binary_version": "5.11.0-1031.35"
          },
          {
            "binary_name": "linux-modules-5.11.0-1031-generic",
            "binary_version": "5.11.0-1031.35"
          },
          {
            "binary_name": "linux-modules-extra-5.11.0-1031-generic",
            "binary_version": "5.11.0-1031.35"
          },
          {
            "binary_name": "linux-riscv-5.11-headers-5.11.0-1031",
            "binary_version": "5.11.0-1031.35"
          },
          {
            "binary_name": "linux-riscv-5.11-tools-5.11.0-1031",
            "binary_version": "5.11.0-1031.35"
          },
          {
            "binary_name": "linux-tools-5.11.0-1031-generic",
            "binary_version": "5.11.0-1031.35"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:20.04:LTS",
        "name": "linux-riscv-5.11",
        "purl": "pkg:deb/ubuntu/linux-riscv-5.11@5.11.0-1031.35?arch=source\u0026distro=focal"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "5.11.0-1015.16~20.04.1",
        "5.11.0-1017.18~20.04.1",
        "5.11.0-1018.19~20.04.2",
        "5.11.0-1020.21~20.04.1",
        "5.11.0-1021.22~20.04.1",
        "5.11.0-1022.23~20.04.1",
        "5.11.0-1023.24~20.04.1",
        "5.11.0-1024.25~20.04.1",
        "5.11.0-1026.28~20.04.1",
        "5.11.0-1028.31~20.04.1",
        "5.11.0-1029.32~20.04.1",
        "5.11.0-1030.34",
        "5.11.0-1031.35"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-buildinfo-5.15.0-1111-generic",
            "binary_version": "5.15.0-1111.115~20.04.1"
          },
          {
            "binary_name": "linux-headers-5.15.0-1111-generic",
            "binary_version": "5.15.0-1111.115~20.04.1"
          },
          {
            "binary_name": "linux-image-5.15.0-1111-generic",
            "binary_version": "5.15.0-1111.115~20.04.1"
          },
          {
            "binary_name": "linux-modules-5.15.0-1111-generic",
            "binary_version": "5.15.0-1111.115~20.04.1"
          },
          {
            "binary_name": "linux-modules-extra-5.15.0-1111-generic",
            "binary_version": "5.15.0-1111.115~20.04.1"
          },
          {
            "binary_name": "linux-riscv-5.15-headers-5.15.0-1111",
            "binary_version": "5.15.0-1111.115~20.04.1"
          },
          {
            "binary_name": "linux-riscv-5.15-tools-5.15.0-1111",
            "binary_version": "5.15.0-1111.115~20.04.1"
          },
          {
            "binary_name": "linux-tools-5.15.0-1111-generic",
            "binary_version": "5.15.0-1111.115~20.04.1"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:20.04:LTS",
        "name": "linux-riscv-5.15",
        "purl": "pkg:deb/ubuntu/linux-riscv-5.15@5.15.0-1111.115~20.04.1?arch=source\u0026distro=esm-infra/focal"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "5.15.0-1015.17~20.04.1",
        "5.15.0-1017.19~20.04.1",
        "5.15.0-1018.21~20.04.1",
        "5.15.0-1019.22~20.04.1",
        "5.15.0-1022.26~20.04.1",
        "5.15.0-1023.27~20.04.1",
        "5.15.0-1026.30~20.04.2",
        "5.15.0-1027.31~20.04.1",
        "5.15.0-1028.32~20.04.1",
        "5.15.0-1029.33~20.04.1",
        "5.15.0-1030.34~20.04.1",
        "5.15.0-1031.35~20.04.1",
        "5.15.0-1032.36~20.04.1",
        "5.15.0-1033.37~20.04.1",
        "5.15.0-1034.38~20.04.1",
        "5.15.0-1035.39~20.04.1",
        "5.15.0-1036.40~20.04.2",
        "5.15.0-1037.41~20.04.2",
        "5.15.0-1038.42~20.04.2",
        "5.15.0-1039.43~20.04.2",
        "5.15.0-1040.44~20.04.3",
        "5.15.0-1041.45~20.04.1",
        "5.15.0-1043.47~20.04.1",
        "5.15.0-1044.48~20.04.1",
        "5.15.0-1045.49~20.04.1",
        "5.15.0-1046.50~20.04.1",
        "5.15.0-1047.51~20.04.1",
        "5.15.0-1048.52~20.04.1",
        "5.15.0-1049.53~20.04.2",
        "5.15.0-1050.54~20.04.1",
        "5.15.0-1051.55~20.04.1",
        "5.15.0-1052.56~20.04.1",
        "5.15.0-1053.57~20.04.1",
        "5.15.0-1056.60~20.04.1",
        "5.15.0-1057.61~20.04.1",
        "5.15.0-1058.62~20.04.1",
        "5.15.0-1059.63~20.04.1",
        "5.15.0-1060.64~20.04.1",
        "5.15.0-1061.65~20.04.1",
        "5.15.0-1062.66~20.04.1",
        "5.15.0-1063.67~20.04.1",
        "5.15.0-1064.68~20.04.1",
        "5.15.0-1065.69~20.04.1",
        "5.15.0-1066.70~20.04.1",
        "5.15.0-1067.71~20.04.1",
        "5.15.0-1068.72~20.04.1",
        "5.15.0-1069.73~20.04.1",
        "5.15.0-1070.74~20.04.1",
        "5.15.0-1071.75~20.04.1",
        "5.15.0-1072.76~20.04.1",
        "5.15.0-1073.77~20.04.1",
        "5.15.0-1074.78~20.04.1",
        "5.15.0-1075.79~20.04.1",
        "5.15.0-1076.80~20.04.1",
        "5.15.0-1077.81~20.04.1",
        "5.15.0-1078.82~20.04.1",
        "5.15.0-1079.83~20.04.1",
        "5.15.0-1081.85~20.04.1",
        "5.15.0-1082.86~20.04.1",
        "5.15.0-1083.87~20.04.1",
        "5.15.0-1084.88~20.04.1",
        "5.15.0-1085.89~20.04.1",
        "5.15.0-1086.90~20.04.1",
        "5.15.0-1087.91~20.04.1",
        "5.15.0-1088.92~20.04.1",
        "5.15.0-1090.94~20.04.1",
        "5.15.0-1091.95~20.04.1",
        "5.15.0-1092.96~20.04.1",
        "5.15.0-1093.97~20.04.2",
        "5.15.0-1094.98~20.04.1",
        "5.15.0-1095.99~20.04.1",
        "5.15.0-1096.100~20.04.1",
        "5.15.0-1097.101~20.04.1",
        "5.15.0-1098.102~20.04.1",
        "5.15.0-1099.103~20.04.1",
        "5.15.0-1100.104~20.04.1",
        "5.15.0-1102.106~20.04.1",
        "5.15.0-1103.107~20.04.1",
        "5.15.0-1105.109~20.04.1",
        "5.15.0-1106.110~20.04.1",
        "5.15.0-1107.111~20.04.1",
        "5.15.0-1108.112~20.04.1",
        "5.15.0-1109.113~20.04.1",
        "5.15.0-1110.114~20.04.1",
        "5.15.0-1111.115~20.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "block-modules-5.8.0-29-generic-di",
            "binary_version": "5.8.0-29.31~20.04.1"
          },
          {
            "binary_name": "crypto-modules-5.8.0-29-generic-di",
            "binary_version": "5.8.0-29.31~20.04.1"
          },
          {
            "binary_name": "fat-modules-5.8.0-29-generic-di",
            "binary_version": "5.8.0-29.31~20.04.1"
          },
          {
            "binary_name": "firewire-core-modules-5.8.0-29-generic-di",
            "binary_version": "5.8.0-29.31~20.04.1"
          },
          {
            "binary_name": "fs-core-modules-5.8.0-29-generic-di",
            "binary_version": "5.8.0-29.31~20.04.1"
          },
          {
            "binary_name": "fs-secondary-modules-5.8.0-29-generic-di",
            "binary_version": "5.8.0-29.31~20.04.1"
          },
          {
            "binary_name": "input-modules-5.8.0-29-generic-di",
            "binary_version": "5.8.0-29.31~20.04.1"
          },
          {
            "binary_name": "ipmi-modules-5.8.0-29-generic-di",
            "binary_version": "5.8.0-29.31~20.04.1"
          },
          {
            "binary_name": "kernel-image-5.8.0-29-generic-di",
            "binary_version": "5.8.0-29.31~20.04.1"
          },
          {
            "binary_name": "linux-buildinfo-5.8.0-29-generic",
            "binary_version": "5.8.0-29.31~20.04.1"
          },
          {
            "binary_name": "linux-headers-5.8.0-29-generic",
            "binary_version": "5.8.0-29.31~20.04.1"
          },
          {
            "binary_name": "linux-image-5.8.0-29-generic",
            "binary_version": "5.8.0-29.31~20.04.1"
          },
          {
            "binary_name": "linux-modules-5.8.0-29-generic",
            "binary_version": "5.8.0-29.31~20.04.1"
          },
          {
            "binary_name": "linux-modules-extra-5.8.0-29-generic",
            "binary_version": "5.8.0-29.31~20.04.1"
          },
          {
            "binary_name": "linux-riscv-5.8-headers-5.8.0-29",
            "binary_version": "5.8.0-29.31~20.04.1"
          },
          {
            "binary_name": "linux-riscv-5.8-tools-5.8.0-29",
            "binary_version": "5.8.0-29.31~20.04.1"
          },
          {
            "binary_name": "linux-tools-5.8.0-29-generic",
            "binary_version": "5.8.0-29.31~20.04.1"
          },
          {
            "binary_name": "linux-udebs-generic",
            "binary_version": "5.8.0-29.31~20.04.1"
          },
          {
            "binary_name": "md-modules-5.8.0-29-generic-di",
            "binary_version": "5.8.0-29.31~20.04.1"
          },
          {
            "binary_name": "message-modules-5.8.0-29-generic-di",
            "binary_version": "5.8.0-29.31~20.04.1"
          },
          {
            "binary_name": "mouse-modules-5.8.0-29-generic-di",
            "binary_version": "5.8.0-29.31~20.04.1"
          },
          {
            "binary_name": "multipath-modules-5.8.0-29-generic-di",
            "binary_version": "5.8.0-29.31~20.04.1"
          },
          {
            "binary_name": "nfs-modules-5.8.0-29-generic-di",
            "binary_version": "5.8.0-29.31~20.04.1"
          },
          {
            "binary_name": "nic-modules-5.8.0-29-generic-di",
            "binary_version": "5.8.0-29.31~20.04.1"
          },
          {
            "binary_name": "nic-shared-modules-5.8.0-29-generic-di",
            "binary_version": "5.8.0-29.31~20.04.1"
          },
          {
            "binary_name": "nic-usb-modules-5.8.0-29-generic-di",
            "binary_version": "5.8.0-29.31~20.04.1"
          },
          {
            "binary_name": "parport-modules-5.8.0-29-generic-di",
            "binary_version": "5.8.0-29.31~20.04.1"
          },
          {
            "binary_name": "pata-modules-5.8.0-29-generic-di",
            "binary_version": "5.8.0-29.31~20.04.1"
          },
          {
            "binary_name": "plip-modules-5.8.0-29-generic-di",
            "binary_version": "5.8.0-29.31~20.04.1"
          },
          {
            "binary_name": "ppp-modules-5.8.0-29-generic-di",
            "binary_version": "5.8.0-29.31~20.04.1"
          },
          {
            "binary_name": "sata-modules-5.8.0-29-generic-di",
            "binary_version": "5.8.0-29.31~20.04.1"
          },
          {
            "binary_name": "scsi-modules-5.8.0-29-generic-di",
            "binary_version": "5.8.0-29.31~20.04.1"
          },
          {
            "binary_name": "storage-core-modules-5.8.0-29-generic-di",
            "binary_version": "5.8.0-29.31~20.04.1"
          },
          {
            "binary_name": "usb-modules-5.8.0-29-generic-di",
            "binary_version": "5.8.0-29.31~20.04.1"
          },
          {
            "binary_name": "virtio-modules-5.8.0-29-generic-di",
            "binary_version": "5.8.0-29.31~20.04.1"
          },
          {
            "binary_name": "vlan-modules-5.8.0-29-generic-di",
            "binary_version": "5.8.0-29.31~20.04.1"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:20.04:LTS",
        "name": "linux-riscv-5.8",
        "purl": "pkg:deb/ubuntu/linux-riscv-5.8@5.8.0-29.31~20.04.1?arch=source\u0026distro=focal"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "5.8.0-14.16~20.04.1",
        "5.8.0-14.16~20.04.3",
        "5.8.0-16.18~20.04.1",
        "5.8.0-17.19~20.04.1",
        "5.8.0-18.20~20.04.1",
        "5.8.0-20.22~20.04.1",
        "5.8.0-22.24~20.04.1",
        "5.8.0-25.27~20.04.1",
        "5.8.0-26.28~20.04.1",
        "5.8.0-29.31~20.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-buildinfo-5.15.0-198-generic",
            "binary_version": "5.15.0-198.208"
          },
          {
            "binary_name": "linux-buildinfo-5.15.0-198-generic-64k",
            "binary_version": "5.15.0-198.208"
          },
          {
            "binary_name": "linux-buildinfo-5.15.0-198-generic-lpae",
            "binary_version": "5.15.0-198.208"
          },
          {
            "binary_name": "linux-cloud-tools-5.15.0-198",
            "binary_version": "5.15.0-198.208"
          },
          {
            "binary_name": "linux-cloud-tools-5.15.0-198-generic",
            "binary_version": "5.15.0-198.208"
          },
          {
            "binary_name": "linux-cloud-tools-common",
            "binary_version": "5.15.0-198.208"
          },
          {
            "binary_name": "linux-headers-5.15.0-198",
            "binary_version": "5.15.0-198.208"
          },
          {
            "binary_name": "linux-headers-5.15.0-198-generic",
            "binary_version": "5.15.0-198.208"
          },
          {
            "binary_name": "linux-headers-5.15.0-198-generic-64k",
            "binary_version": "5.15.0-198.208"
          },
          {
            "binary_name": "linux-headers-5.15.0-198-generic-lpae",
            "binary_version": "5.15.0-198.208"
          },
          {
            "binary_name": "linux-image-5.15.0-198-generic",
            "binary_version": "5.15.0-198.208"
          },
          {
            "binary_name": "linux-image-5.15.0-198-generic-lpae",
            "binary_version": "5.15.0-198.208"
          },
          {
            "binary_name": "linux-image-unsigned-5.15.0-198-generic",
            "binary_version": "5.15.0-198.208"
          },
          {
            "binary_name": "linux-image-unsigned-5.15.0-198-generic-64k",
            "binary_version": "5.15.0-198.208"
          },
          {
            "binary_name": "linux-modules-5.15.0-198-generic",
            "binary_version": "5.15.0-198.208"
          },
          {
            "binary_name": "linux-modules-5.15.0-198-generic-64k",
            "binary_version": "5.15.0-198.208"
          },
          {
            "binary_name": "linux-modules-5.15.0-198-generic-lpae",
            "binary_version": "5.15.0-198.208"
          },
          {
            "binary_name": "linux-modules-extra-5.15.0-198-generic",
            "binary_version": "5.15.0-198.208"
          },
          {
            "binary_name": "linux-modules-iwlwifi-5.15.0-198-generic",
            "binary_version": "5.15.0-198.208"
          },
          {
            "binary_name": "linux-source-5.15.0",
            "binary_version": "5.15.0-198.208"
          },
          {
            "binary_name": "linux-tools-5.15.0-198",
            "binary_version": "5.15.0-198.208"
          },
          {
            "binary_name": "linux-tools-5.15.0-198-generic",
            "binary_version": "5.15.0-198.208"
          },
          {
            "binary_name": "linux-tools-5.15.0-198-generic-64k",
            "binary_version": "5.15.0-198.208"
          },
          {
            "binary_name": "linux-tools-5.15.0-198-generic-lpae",
            "binary_version": "5.15.0-198.208"
          },
          {
            "binary_name": "linux-tools-common",
            "binary_version": "5.15.0-198.208"
          },
          {
            "binary_name": "linux-tools-host",
            "binary_version": "5.15.0-198.208"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:22.04:LTS",
        "name": "linux",
        "purl": "pkg:deb/ubuntu/linux@5.15.0-198.208?arch=source\u0026distro=jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "5.13.0-19.19",
        "5.15.0-17.17",
        "5.15.0-18.18",
        "5.15.0-22.22",
        "5.15.0-23.23",
        "5.15.0-25.25",
        "5.15.0-27.28",
        "5.15.0-30.31",
        "5.15.0-33.34",
        "5.15.0-35.36",
        "5.15.0-37.39",
        "5.15.0-39.42",
        "5.15.0-40.43",
        "5.15.0-41.44",
        "5.15.0-43.46",
        "5.15.0-46.49",
        "5.15.0-47.51",
        "5.15.0-48.54",
        "5.15.0-50.56",
        "5.15.0-52.58",
        "5.15.0-53.59",
        "5.15.0-56.62",
        "5.15.0-57.63",
        "5.15.0-58.64",
        "5.15.0-60.66",
        "5.15.0-67.74",
        "5.15.0-69.76",
        "5.15.0-70.77",
        "5.15.0-71.78",
        "5.15.0-72.79",
        "5.15.0-73.80",
        "5.15.0-75.82",
        "5.15.0-76.83",
        "5.15.0-78.85",
        "5.15.0-79.86",
        "5.15.0-82.91",
        "5.15.0-83.92",
        "5.15.0-84.93",
        "5.15.0-86.96",
        "5.15.0-87.97",
        "5.15.0-88.98",
        "5.15.0-89.99",
        "5.15.0-91.101",
        "5.15.0-92.102",
        "5.15.0-94.104",
        "5.15.0-97.107",
        "5.15.0-100.110",
        "5.15.0-101.111",
        "5.15.0-102.112",
        "5.15.0-105.115",
        "5.15.0-106.116",
        "5.15.0-107.117",
        "5.15.0-112.122",
        "5.15.0-113.123",
        "5.15.0-116.126",
        "5.15.0-117.127",
        "5.15.0-118.128",
        "5.15.0-119.129",
        "5.15.0-121.131",
        "5.15.0-122.132",
        "5.15.0-124.134",
        "5.15.0-125.135",
        "5.15.0-126.136",
        "5.15.0-127.137",
        "5.15.0-128.138",
        "5.15.0-130.140",
        "5.15.0-131.141",
        "5.15.0-133.144",
        "5.15.0-134.145",
        "5.15.0-135.146",
        "5.15.0-136.147",
        "5.15.0-138.148",
        "5.15.0-139.149",
        "5.15.0-140.150",
        "5.15.0-141.151",
        "5.15.0-142.152",
        "5.15.0-143.153",
        "5.15.0-144.157",
        "5.15.0-151.161",
        "5.15.0-152.162",
        "5.15.0-153.163",
        "5.15.0-156.166",
        "5.15.0-157.167",
        "5.15.0-160.170",
        "5.15.0-161.171",
        "5.15.0-163.173",
        "5.15.0-164.174",
        "5.15.0-168.178",
        "5.15.0-170.180",
        "5.15.0-171.181",
        "5.15.0-173.183",
        "5.15.0-174.184",
        "5.15.0-176.186",
        "5.15.0-177.187",
        "5.15.0-179.189",
        "5.15.0-181.191",
        "5.15.0-185.195",
        "5.15.0-186.196",
        "5.15.0-187.197",
        "5.15.0-190.200",
        "5.15.0-191.201",
        "5.15.0-194.204",
        "5.15.0-198.208"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-allwinner-5.19-headers-5.19.0-1015",
            "binary_version": "5.19.0-1015.15~22.04.1"
          },
          {
            "binary_name": "linux-allwinner-5.19-tools-5.19.0-1015",
            "binary_version": "5.19.0-1015.15~22.04.1"
          },
          {
            "binary_name": "linux-buildinfo-5.19.0-1015-allwinner",
            "binary_version": "5.19.0-1015.15~22.04.1"
          },
          {
            "binary_name": "linux-headers-5.19.0-1015-allwinner",
            "binary_version": "5.19.0-1015.15~22.04.1"
          },
          {
            "binary_name": "linux-image-5.19.0-1015-allwinner",
            "binary_version": "5.19.0-1015.15~22.04.1"
          },
          {
            "binary_name": "linux-modules-5.19.0-1015-allwinner",
            "binary_version": "5.19.0-1015.15~22.04.1"
          },
          {
            "binary_name": "linux-modules-extra-5.19.0-1015-allwinner",
            "binary_version": "5.19.0-1015.15~22.04.1"
          },
          {
            "binary_name": "linux-tools-5.19.0-1015-allwinner",
            "binary_version": "5.19.0-1015.15~22.04.1"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:22.04:LTS",
        "name": "linux-allwinner-5.19",
        "purl": "pkg:deb/ubuntu/linux-allwinner-5.19@5.19.0-1015.15~22.04.1?arch=source\u0026distro=jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "5.19.0-1007.7~22.04.1",
        "5.19.0-1009.9~22.04.1",
        "5.19.0-1010.10~22.04.1",
        "5.19.0-1011.11~22.04.1",
        "5.19.0-1012.12~22.04.1",
        "5.19.0-1013.13~22.04.1",
        "5.19.0-1014.14~22.04.1",
        "5.19.0-1015.15~22.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-aws-cloud-tools-5.15.0-1117",
            "binary_version": "5.15.0-1117.124"
          },
          {
            "binary_name": "linux-aws-headers-5.15.0-1117",
            "binary_version": "5.15.0-1117.124"
          },
          {
            "binary_name": "linux-aws-tools-5.15.0-1117",
            "binary_version": "5.15.0-1117.124"
          },
          {
            "binary_name": "linux-buildinfo-5.15.0-1117-aws",
            "binary_version": "5.15.0-1117.124"
          },
          {
            "binary_name": "linux-buildinfo-5.15.0-1117-aws-64k",
            "binary_version": "5.15.0-1117.124"
          },
          {
            "binary_name": "linux-cloud-tools-5.15.0-1117-aws",
            "binary_version": "5.15.0-1117.124"
          },
          {
            "binary_name": "linux-cloud-tools-5.15.0-1117-aws-64k",
            "binary_version": "5.15.0-1117.124"
          },
          {
            "binary_name": "linux-headers-5.15.0-1117-aws",
            "binary_version": "5.15.0-1117.124"
          },
          {
            "binary_name": "linux-headers-5.15.0-1117-aws-64k",
            "binary_version": "5.15.0-1117.124"
          },
          {
            "binary_name": "linux-image-unsigned-5.15.0-1117-aws",
            "binary_version": "5.15.0-1117.124"
          },
          {
            "binary_name": "linux-image-unsigned-5.15.0-1117-aws-64k",
            "binary_version": "5.15.0-1117.124"
          },
          {
            "binary_name": "linux-modules-5.15.0-1117-aws",
            "binary_version": "5.15.0-1117.124"
          },
          {
            "binary_name": "linux-modules-5.15.0-1117-aws-64k",
            "binary_version": "5.15.0-1117.124"
          },
          {
            "binary_name": "linux-modules-extra-5.15.0-1117-aws",
            "binary_version": "5.15.0-1117.124"
          },
          {
            "binary_name": "linux-modules-extra-5.15.0-1117-aws-64k",
            "binary_version": "5.15.0-1117.124"
          },
          {
            "binary_name": "linux-tools-5.15.0-1117-aws",
            "binary_version": "5.15.0-1117.124"
          },
          {
            "binary_name": "linux-tools-5.15.0-1117-aws-64k",
            "binary_version": "5.15.0-1117.124"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:22.04:LTS",
        "name": "linux-aws",
        "purl": "pkg:deb/ubuntu/linux-aws@5.15.0-1117.124?arch=source\u0026distro=jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "5.13.0-1005.6",
        "5.15.0-1002.4",
        "5.15.0-1003.5",
        "5.15.0-1004.6",
        "5.15.0-1005.7",
        "5.15.0-1008.10",
        "5.15.0-1009.11",
        "5.15.0-1011.14",
        "5.15.0-1013.17",
        "5.15.0-1014.18",
        "5.15.0-1015.19",
        "5.15.0-1017.21",
        "5.15.0-1019.23",
        "5.15.0-1020.24",
        "5.15.0-1021.25",
        "5.15.0-1022.26",
        "5.15.0-1023.27",
        "5.15.0-1026.30",
        "5.15.0-1027.31",
        "5.15.0-1028.32",
        "5.15.0-1030.34",
        "5.15.0-1031.35",
        "5.15.0-1033.37",
        "5.15.0-1034.38",
        "5.15.0-1035.39",
        "5.15.0-1036.40",
        "5.15.0-1037.41",
        "5.15.0-1038.43",
        "5.15.0-1039.44",
        "5.15.0-1040.45",
        "5.15.0-1042.47",
        "5.15.0-1043.48",
        "5.15.0-1044.49",
        "5.15.0-1045.50",
        "5.15.0-1047.52",
        "5.15.0-1048.53",
        "5.15.0-1049.54",
        "5.15.0-1050.55",
        "5.15.0-1051.56",
        "5.15.0-1052.57",
        "5.15.0-1053.58",
        "5.15.0-1055.60",
        "5.15.0-1056.61",
        "5.15.0-1057.63",
        "5.15.0-1060.66",
        "5.15.0-1061.67",
        "5.15.0-1062.68",
        "5.15.0-1063.69",
        "5.15.0-1064.70",
        "5.15.0-1065.71",
        "5.15.0-1066.72",
        "5.15.0-1067.73",
        "5.15.0-1068.74",
        "5.15.0-1069.75",
        "5.15.0-1070.76",
        "5.15.0-1071.77",
        "5.15.0-1072.78",
        "5.15.0-1073.79",
        "5.15.0-1076.83",
        "5.15.0-1078.85",
        "5.15.0-1079.86",
        "5.15.0-1080.87",
        "5.15.0-1081.88",
        "5.15.0-1082.89",
        "5.15.0-1083.90",
        "5.15.0-1084.91",
        "5.15.0-1085.92",
        "5.15.0-1086.93",
        "5.15.0-1087.94",
        "5.15.0-1088.95",
        "5.15.0-1089.96",
        "5.15.0-1090.97",
        "5.15.0-1091.98",
        "5.15.0-1092.99",
        "5.15.0-1093.100",
        "5.15.0-1095.102",
        "5.15.0-1096.103",
        "5.15.0-1097.104",
        "5.15.0-1098.105",
        "5.15.0-1099.106",
        "5.15.0-1100.107",
        "5.15.0-1101.108",
        "5.15.0-1103.110",
        "5.15.0-1104.111",
        "5.15.0-1105.112",
        "5.15.0-1106.113",
        "5.15.0-1108.115",
        "5.15.0-1109.116",
        "5.15.0-1111.118",
        "5.15.0-1112.119",
        "5.15.0-1113.120",
        "5.15.0-1114.121",
        "5.15.0-1115.122",
        "5.15.0-1116.123",
        "5.15.0-1117.124"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-aws-5.19-cloud-tools-5.19.0-1029",
            "binary_version": "5.19.0-1029.30~22.04.1"
          },
          {
            "binary_name": "linux-aws-5.19-headers-5.19.0-1029",
            "binary_version": "5.19.0-1029.30~22.04.1"
          },
          {
            "binary_name": "linux-aws-5.19-tools-5.19.0-1029",
            "binary_version": "5.19.0-1029.30~22.04.1"
          },
          {
            "binary_name": "linux-buildinfo-5.19.0-1029-aws",
            "binary_version": "5.19.0-1029.30~22.04.1"
          },
          {
            "binary_name": "linux-cloud-tools-5.19.0-1029-aws",
            "binary_version": "5.19.0-1029.30~22.04.1"
          },
          {
            "binary_name": "linux-headers-5.19.0-1029-aws",
            "binary_version": "5.19.0-1029.30~22.04.1"
          },
          {
            "binary_name": "linux-image-unsigned-5.19.0-1029-aws",
            "binary_version": "5.19.0-1029.30~22.04.1"
          },
          {
            "binary_name": "linux-modules-5.19.0-1029-aws",
            "binary_version": "5.19.0-1029.30~22.04.1"
          },
          {
            "binary_name": "linux-modules-extra-5.19.0-1029-aws",
            "binary_version": "5.19.0-1029.30~22.04.1"
          },
          {
            "binary_name": "linux-tools-5.19.0-1029-aws",
            "binary_version": "5.19.0-1029.30~22.04.1"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:22.04:LTS",
        "name": "linux-aws-5.19",
        "purl": "pkg:deb/ubuntu/linux-aws-5.19@5.19.0-1029.30~22.04.1?arch=source\u0026distro=jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "5.19.0-1019.20~22.04.1",
        "5.19.0-1020.21~22.04.1",
        "5.19.0-1022.23~22.04.1",
        "5.19.0-1023.24~22.04.1",
        "5.19.0-1024.25~22.04.1",
        "5.19.0-1025.26~22.04.1",
        "5.19.0-1026.27~22.04.1",
        "5.19.0-1027.28~22.04.1",
        "5.19.0-1028.29~22.04.1",
        "5.19.0-1029.30~22.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-aws-6.2-cloud-tools-6.2.0-1018",
            "binary_version": "6.2.0-1018.18~22.04.1"
          },
          {
            "binary_name": "linux-aws-6.2-headers-6.2.0-1018",
            "binary_version": "6.2.0-1018.18~22.04.1"
          },
          {
            "binary_name": "linux-aws-6.2-tools-6.2.0-1018",
            "binary_version": "6.2.0-1018.18~22.04.1"
          },
          {
            "binary_name": "linux-buildinfo-6.2.0-1018-aws",
            "binary_version": "6.2.0-1018.18~22.04.1"
          },
          {
            "binary_name": "linux-cloud-tools-6.2.0-1018-aws",
            "binary_version": "6.2.0-1018.18~22.04.1"
          },
          {
            "binary_name": "linux-headers-6.2.0-1018-aws",
            "binary_version": "6.2.0-1018.18~22.04.1"
          },
          {
            "binary_name": "linux-image-unsigned-6.2.0-1018-aws",
            "binary_version": "6.2.0-1018.18~22.04.1"
          },
          {
            "binary_name": "linux-modules-6.2.0-1018-aws",
            "binary_version": "6.2.0-1018.18~22.04.1"
          },
          {
            "binary_name": "linux-modules-extra-6.2.0-1018-aws",
            "binary_version": "6.2.0-1018.18~22.04.1"
          },
          {
            "binary_name": "linux-tools-6.2.0-1018-aws",
            "binary_version": "6.2.0-1018.18~22.04.1"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:22.04:LTS",
        "name": "linux-aws-6.2",
        "purl": "pkg:deb/ubuntu/linux-aws-6.2@6.2.0-1018.18~22.04.1?arch=source\u0026distro=jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "6.2.0-1005.5~22.04.1",
        "6.2.0-1006.6~22.04.1",
        "6.2.0-1007.7~22.04.1",
        "6.2.0-1008.8~22.04.1",
        "6.2.0-1009.9~22.04.3",
        "6.2.0-1010.10~22.04.1",
        "6.2.0-1011.11~22.04.1",
        "6.2.0-1012.12~22.04.1",
        "6.2.0-1013.13~22.04.1",
        "6.2.0-1014.14~22.04.1",
        "6.2.0-1015.15~22.04.1",
        "6.2.0-1016.16~22.04.1",
        "6.2.0-1017.17~22.04.1",
        "6.2.0-1018.18~22.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-aws-6.5-cloud-tools-6.5.0-1024",
            "binary_version": "6.5.0-1024.24~22.04.1"
          },
          {
            "binary_name": "linux-aws-6.5-headers-6.5.0-1024",
            "binary_version": "6.5.0-1024.24~22.04.1"
          },
          {
            "binary_name": "linux-aws-6.5-tools-6.5.0-1024",
            "binary_version": "6.5.0-1024.24~22.04.1"
          },
          {
            "binary_name": "linux-buildinfo-6.5.0-1024-aws",
            "binary_version": "6.5.0-1024.24~22.04.1"
          },
          {
            "binary_name": "linux-cloud-tools-6.5.0-1024-aws",
            "binary_version": "6.5.0-1024.24~22.04.1"
          },
          {
            "binary_name": "linux-headers-6.5.0-1024-aws",
            "binary_version": "6.5.0-1024.24~22.04.1"
          },
          {
            "binary_name": "linux-image-unsigned-6.5.0-1024-aws",
            "binary_version": "6.5.0-1024.24~22.04.1"
          },
          {
            "binary_name": "linux-modules-6.5.0-1024-aws",
            "binary_version": "6.5.0-1024.24~22.04.1"
          },
          {
            "binary_name": "linux-modules-extra-6.5.0-1024-aws",
            "binary_version": "6.5.0-1024.24~22.04.1"
          },
          {
            "binary_name": "linux-tools-6.5.0-1024-aws",
            "binary_version": "6.5.0-1024.24~22.04.1"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:22.04:LTS",
        "name": "linux-aws-6.5",
        "purl": "pkg:deb/ubuntu/linux-aws-6.5@6.5.0-1024.24~22.04.1?arch=source\u0026distro=jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "6.5.0-1008.8~22.04.1",
        "6.5.0-1010.10~22.04.1",
        "6.5.0-1011.11~22.04.1",
        "6.5.0-1012.12~22.04.1",
        "6.5.0-1014.14~22.04.1",
        "6.5.0-1015.15~22.04.1",
        "6.5.0-1016.16~22.04.1",
        "6.5.0-1017.17~22.04.2",
        "6.5.0-1018.18~22.04.1",
        "6.5.0-1020.20~22.04.1",
        "6.5.0-1021.21~22.04.1",
        "6.5.0-1022.22~22.04.1",
        "6.5.0-1023.23~22.04.1",
        "6.5.0-1024.24~22.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-aws-6.8-cloud-tools-6.8.0-1066",
            "binary_version": "6.8.0-1066.69~22.04.1"
          },
          {
            "binary_name": "linux-aws-6.8-headers-6.8.0-1066",
            "binary_version": "6.8.0-1066.69~22.04.1"
          },
          {
            "binary_name": "linux-aws-6.8-tools-6.8.0-1066",
            "binary_version": "6.8.0-1066.69~22.04.1"
          },
          {
            "binary_name": "linux-buildinfo-6.8.0-1066-aws",
            "binary_version": "6.8.0-1066.69~22.04.1"
          },
          {
            "binary_name": "linux-buildinfo-6.8.0-1066-aws-64k",
            "binary_version": "6.8.0-1066.69~22.04.1"
          },
          {
            "binary_name": "linux-cloud-tools-6.8.0-1066-aws",
            "binary_version": "6.8.0-1066.69~22.04.1"
          },
          {
            "binary_name": "linux-cloud-tools-6.8.0-1066-aws-64k",
            "binary_version": "6.8.0-1066.69~22.04.1"
          },
          {
            "binary_name": "linux-headers-6.8.0-1066-aws",
            "binary_version": "6.8.0-1066.69~22.04.1"
          },
          {
            "binary_name": "linux-headers-6.8.0-1066-aws-64k",
            "binary_version": "6.8.0-1066.69~22.04.1"
          },
          {
            "binary_name": "linux-image-unsigned-6.8.0-1066-aws",
            "binary_version": "6.8.0-1066.69~22.04.1"
          },
          {
            "binary_name": "linux-image-unsigned-6.8.0-1066-aws-64k",
            "binary_version": "6.8.0-1066.69~22.04.1"
          },
          {
            "binary_name": "linux-modules-6.8.0-1066-aws",
            "binary_version": "6.8.0-1066.69~22.04.1"
          },
          {
            "binary_name": "linux-modules-6.8.0-1066-aws-64k",
            "binary_version": "6.8.0-1066.69~22.04.1"
          },
          {
            "binary_name": "linux-modules-extra-6.8.0-1066-aws",
            "binary_version": "6.8.0-1066.69~22.04.1"
          },
          {
            "binary_name": "linux-modules-extra-6.8.0-1066-aws-64k",
            "binary_version": "6.8.0-1066.69~22.04.1"
          },
          {
            "binary_name": "linux-tools-6.8.0-1066-aws",
            "binary_version": "6.8.0-1066.69~22.04.1"
          },
          {
            "binary_name": "linux-tools-6.8.0-1066-aws-64k",
            "binary_version": "6.8.0-1066.69~22.04.1"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:22.04:LTS",
        "name": "linux-aws-6.8",
        "purl": "pkg:deb/ubuntu/linux-aws-6.8@6.8.0-1066.69~22.04.1?arch=source\u0026distro=jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "6.8.0-1009.9~22.04.2",
        "6.8.0-1010.10~22.04.2",
        "6.8.0-1011.12~22.04.1",
        "6.8.0-1013.14~22.04.1",
        "6.8.0-1014.15~22.04.1",
        "6.8.0-1015.16~22.04.1",
        "6.8.0-1016.17~22.04.2",
        "6.8.0-1017.18~22.04.1",
        "6.8.0-1018.19~22.04.1",
        "6.8.0-1019.21~22.04.1",
        "6.8.0-1020.22~22.04.1",
        "6.8.0-1021.23~22.04.1",
        "6.8.0-1023.25~22.04.1",
        "6.8.0-1024.26~22.04.1",
        "6.8.0-1027.29~22.04.1",
        "6.8.0-1028.30~22.04.1",
        "6.8.0-1029.31~22.04.1",
        "6.8.0-1030.32~22.04.1",
        "6.8.0-1031.33~22.04.1",
        "6.8.0-1032.34~22.04.1",
        "6.8.0-1033.35~22.04.1",
        "6.8.0-1035.37~22.04.1",
        "6.8.0-1036.38~22.04.1",
        "6.8.0-1039.41~22.04.1",
        "6.8.0-1040.42~22.04.1",
        "6.8.0-1041.43~22.04.1",
        "6.8.0-1042.44~22.04.1",
        "6.8.0-1043.45~22.04.1",
        "6.8.0-1044.46~22.04.1",
        "6.8.0-1045.47~22.04.1",
        "6.8.0-1046.49~22.04.1",
        "6.8.0-1047.50~22.04.1",
        "6.8.0-1050.53~22.04.1",
        "6.8.0-1051.54~22.04.1",
        "6.8.0-1052.55~22.04.1",
        "6.8.0-1053.56~22.04.1",
        "6.8.0-1055.58~22.04.1",
        "6.8.0-1057.60~22.04.1",
        "6.8.0-1060.63~22.04.1",
        "6.8.0-1061.64~22.04.1",
        "6.8.0-1062.65~22.04.2",
        "6.8.0-1063.66~22.04.1",
        "6.8.0-1064.67~22.04.1",
        "6.8.0-1065.68~22.04.1",
        "6.8.0-1066.69~22.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-azure-cloud-tools-5.15.0-1123",
            "binary_version": "5.15.0-1123.132"
          },
          {
            "binary_name": "linux-azure-headers-5.15.0-1123",
            "binary_version": "5.15.0-1123.132"
          },
          {
            "binary_name": "linux-azure-tools-5.15.0-1123",
            "binary_version": "5.15.0-1123.132"
          },
          {
            "binary_name": "linux-buildinfo-5.15.0-1123-azure",
            "binary_version": "5.15.0-1123.132"
          },
          {
            "binary_name": "linux-cloud-tools-5.15.0-1123-azure",
            "binary_version": "5.15.0-1123.132"
          },
          {
            "binary_name": "linux-headers-5.15.0-1123-azure",
            "binary_version": "5.15.0-1123.132"
          },
          {
            "binary_name": "linux-image-unsigned-5.15.0-1123-azure",
            "binary_version": "5.15.0-1123.132"
          },
          {
            "binary_name": "linux-modules-5.15.0-1123-azure",
            "binary_version": "5.15.0-1123.132"
          },
          {
            "binary_name": "linux-modules-extra-5.15.0-1123-azure",
            "binary_version": "5.15.0-1123.132"
          },
          {
            "binary_name": "linux-modules-involflt-5.15.0-1123-azure",
            "binary_version": "5.15.0-1123.132"
          },
          {
            "binary_name": "linux-tools-5.15.0-1123-azure",
            "binary_version": "5.15.0-1123.132"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:22.04:LTS",
        "name": "linux-azure",
        "purl": "pkg:deb/ubuntu/linux-azure@5.15.0-1123.132?arch=source\u0026distro=jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "5.13.0-1006.7",
        "5.15.0-1001.2",
        "5.15.0-1002.3",
        "5.15.0-1003.4",
        "5.15.0-1005.6",
        "5.15.0-1007.8",
        "5.15.0-1008.9",
        "5.15.0-1010.12",
        "5.15.0-1012.15",
        "5.15.0-1013.16",
        "5.15.0-1014.17",
        "5.15.0-1017.20",
        "5.15.0-1019.24",
        "5.15.0-1020.25",
        "5.15.0-1021.26",
        "5.15.0-1022.27",
        "5.15.0-1023.29",
        "5.15.0-1024.30",
        "5.15.0-1029.36",
        "5.15.0-1030.37",
        "5.15.0-1031.38",
        "5.15.0-1033.40",
        "5.15.0-1034.41",
        "5.15.0-1035.42",
        "5.15.0-1036.43",
        "5.15.0-1037.44",
        "5.15.0-1038.45",
        "5.15.0-1039.46",
        "5.15.0-1040.47",
        "5.15.0-1041.48",
        "5.15.0-1042.49",
        "5.15.0-1044.51",
        "5.15.0-1045.52",
        "5.15.0-1046.53",
        "5.15.0-1047.54",
        "5.15.0-1049.56",
        "5.15.0-1050.57",
        "5.15.0-1051.59",
        "5.15.0-1052.60",
        "5.15.0-1053.61",
        "5.15.0-1054.62",
        "5.15.0-1056.64",
        "5.15.0-1057.65",
        "5.15.0-1058.66",
        "5.15.0-1059.67",
        "5.15.0-1060.69",
        "5.15.0-1061.70",
        "5.15.0-1063.72",
        "5.15.0-1064.73",
        "5.15.0-1066.75",
        "5.15.0-1067.76",
        "5.15.0-1068.77",
        "5.15.0-1070.79",
        "5.15.0-1071.80",
        "5.15.0-1072.81",
        "5.15.0-1073.82",
        "5.15.0-1074.83",
        "5.15.0-1075.84",
        "5.15.0-1078.87",
        "5.15.0-1079.88",
        "5.15.0-1081.90",
        "5.15.0-1082.91",
        "5.15.0-1084.93",
        "5.15.0-1086.95",
        "5.15.0-1087.96",
        "5.15.0-1088.97",
        "5.15.0-1089.98",
        "5.15.0-1090.99",
        "5.15.0-1091.100",
        "5.15.0-1092.101",
        "5.15.0-1094.103",
        "5.15.0-1095.104",
        "5.15.0-1096.105",
        "5.15.0-1097.106",
        "5.15.0-1098.107",
        "5.15.0-1099.108",
        "5.15.0-1101.110",
        "5.15.0-1102.111",
        "5.15.0-1103.112",
        "5.15.0-1109.118",
        "5.15.0-1110.119",
        "5.15.0-1111.120",
        "5.15.0-1114.123",
        "5.15.0-1116.125",
        "5.15.0-1117.126",
        "5.15.0-1118.127",
        "5.15.0-1119.128",
        "5.15.0-1121.130",
        "5.15.0-1122.131",
        "5.15.0-1123.132"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-azure-5.19-cloud-tools-5.19.0-1027",
            "binary_version": "5.19.0-1027.30~22.04.2"
          },
          {
            "binary_name": "linux-azure-5.19-headers-5.19.0-1027",
            "binary_version": "5.19.0-1027.30~22.04.2"
          },
          {
            "binary_name": "linux-azure-5.19-tools-5.19.0-1027",
            "binary_version": "5.19.0-1027.30~22.04.2"
          },
          {
            "binary_name": "linux-buildinfo-5.19.0-1027-azure",
            "binary_version": "5.19.0-1027.30~22.04.2"
          },
          {
            "binary_name": "linux-cloud-tools-5.19.0-1027-azure",
            "binary_version": "5.19.0-1027.30~22.04.2"
          },
          {
            "binary_name": "linux-headers-5.19.0-1027-azure",
            "binary_version": "5.19.0-1027.30~22.04.2"
          },
          {
            "binary_name": "linux-image-unsigned-5.19.0-1027-azure",
            "binary_version": "5.19.0-1027.30~22.04.2"
          },
          {
            "binary_name": "linux-modules-5.19.0-1027-azure",
            "binary_version": "5.19.0-1027.30~22.04.2"
          },
          {
            "binary_name": "linux-modules-extra-5.19.0-1027-azure",
            "binary_version": "5.19.0-1027.30~22.04.2"
          },
          {
            "binary_name": "linux-tools-5.19.0-1027-azure",
            "binary_version": "5.19.0-1027.30~22.04.2"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:22.04:LTS",
        "name": "linux-azure-5.19",
        "purl": "pkg:deb/ubuntu/linux-azure-5.19@5.19.0-1027.30~22.04.2?arch=source\u0026distro=jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "5.19.0-1020.21~22.04.1",
        "5.19.0-1021.22~22.04.1",
        "5.19.0-1022.23~22.04.1",
        "5.19.0-1023.24~22.04.1",
        "5.19.0-1025.28~22.04.1",
        "5.19.0-1026.29~22.04.1",
        "5.19.0-1027.30~22.04.2"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-azure-6.2-cloud-tools-6.2.0-1019",
            "binary_version": "6.2.0-1019.19~22.04.1"
          },
          {
            "binary_name": "linux-azure-6.2-headers-6.2.0-1019",
            "binary_version": "6.2.0-1019.19~22.04.1"
          },
          {
            "binary_name": "linux-azure-6.2-tools-6.2.0-1019",
            "binary_version": "6.2.0-1019.19~22.04.1"
          },
          {
            "binary_name": "linux-buildinfo-6.2.0-1019-azure",
            "binary_version": "6.2.0-1019.19~22.04.1"
          },
          {
            "binary_name": "linux-cloud-tools-6.2.0-1019-azure",
            "binary_version": "6.2.0-1019.19~22.04.1"
          },
          {
            "binary_name": "linux-headers-6.2.0-1019-azure",
            "binary_version": "6.2.0-1019.19~22.04.1"
          },
          {
            "binary_name": "linux-image-unsigned-6.2.0-1019-azure",
            "binary_version": "6.2.0-1019.19~22.04.1"
          },
          {
            "binary_name": "linux-modules-6.2.0-1019-azure",
            "binary_version": "6.2.0-1019.19~22.04.1"
          },
          {
            "binary_name": "linux-modules-extra-6.2.0-1019-azure",
            "binary_version": "6.2.0-1019.19~22.04.1"
          },
          {
            "binary_name": "linux-tools-6.2.0-1019-azure",
            "binary_version": "6.2.0-1019.19~22.04.1"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:22.04:LTS",
        "name": "linux-azure-6.2",
        "purl": "pkg:deb/ubuntu/linux-azure-6.2@6.2.0-1019.19~22.04.1?arch=source\u0026distro=jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "6.2.0-1005.5~22.04.1",
        "6.2.0-1006.6~22.04.1",
        "6.2.0-1007.7~22.04.1",
        "6.2.0-1008.8~22.04.1",
        "6.2.0-1009.9~22.04.3",
        "6.2.0-1011.11~22.04.1",
        "6.2.0-1012.12~22.04.1",
        "6.2.0-1014.14~22.04.1",
        "6.2.0-1015.15~22.04.1",
        "6.2.0-1016.16~22.04.1",
        "6.2.0-1017.17~22.04.1",
        "6.2.0-1018.18~22.04.1",
        "6.2.0-1019.19~22.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-azure-6.5-cloud-tools-6.5.0-1025",
            "binary_version": "6.5.0-1025.26~22.04.1"
          },
          {
            "binary_name": "linux-azure-6.5-headers-6.5.0-1025",
            "binary_version": "6.5.0-1025.26~22.04.1"
          },
          {
            "binary_name": "linux-azure-6.5-tools-6.5.0-1025",
            "binary_version": "6.5.0-1025.26~22.04.1"
          },
          {
            "binary_name": "linux-buildinfo-6.5.0-1025-azure",
            "binary_version": "6.5.0-1025.26~22.04.1"
          },
          {
            "binary_name": "linux-cloud-tools-6.5.0-1025-azure",
            "binary_version": "6.5.0-1025.26~22.04.1"
          },
          {
            "binary_name": "linux-headers-6.5.0-1025-azure",
            "binary_version": "6.5.0-1025.26~22.04.1"
          },
          {
            "binary_name": "linux-image-unsigned-6.5.0-1025-azure",
            "binary_version": "6.5.0-1025.26~22.04.1"
          },
          {
            "binary_name": "linux-modules-6.5.0-1025-azure",
            "binary_version": "6.5.0-1025.26~22.04.1"
          },
          {
            "binary_name": "linux-modules-extra-6.5.0-1025-azure",
            "binary_version": "6.5.0-1025.26~22.04.1"
          },
          {
            "binary_name": "linux-tools-6.5.0-1025-azure",
            "binary_version": "6.5.0-1025.26~22.04.1"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:22.04:LTS",
        "name": "linux-azure-6.5",
        "purl": "pkg:deb/ubuntu/linux-azure-6.5@6.5.0-1025.26~22.04.1?arch=source\u0026distro=jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "6.5.0-1007.7~22.04.1",
        "6.5.0-1009.9~22.04.1",
        "6.5.0-1010.10~22.04.1",
        "6.5.0-1011.11~22.04.1",
        "6.5.0-1015.15~22.04.1",
        "6.5.0-1016.16~22.04.1",
        "6.5.0-1017.17~22.04.1",
        "6.5.0-1018.19~22.04.2",
        "6.5.0-1019.20~22.04.1",
        "6.5.0-1021.22~22.04.1",
        "6.5.0-1022.23~22.04.1",
        "6.5.0-1023.24~22.04.1",
        "6.5.0-1024.25~22.04.1",
        "6.5.0-1025.26~22.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-azure-6.8-cloud-tools-6.8.0-1070",
            "binary_version": "6.8.0-1070.78~22.04.1"
          },
          {
            "binary_name": "linux-azure-6.8-headers-6.8.0-1070",
            "binary_version": "6.8.0-1070.78~22.04.1"
          },
          {
            "binary_name": "linux-azure-6.8-tools-6.8.0-1070",
            "binary_version": "6.8.0-1070.78~22.04.1"
          },
          {
            "binary_name": "linux-buildinfo-6.8.0-1070-azure",
            "binary_version": "6.8.0-1070.78~22.04.1"
          },
          {
            "binary_name": "linux-cloud-tools-6.8.0-1070-azure",
            "binary_version": "6.8.0-1070.78~22.04.1"
          },
          {
            "binary_name": "linux-headers-6.8.0-1070-azure",
            "binary_version": "6.8.0-1070.78~22.04.1"
          },
          {
            "binary_name": "linux-image-unsigned-6.8.0-1070-azure",
            "binary_version": "6.8.0-1070.78~22.04.1"
          },
          {
            "binary_name": "linux-modules-6.8.0-1070-azure",
            "binary_version": "6.8.0-1070.78~22.04.1"
          },
          {
            "binary_name": "linux-modules-extra-6.8.0-1070-azure",
            "binary_version": "6.8.0-1070.78~22.04.1"
          },
          {
            "binary_name": "linux-modules-involflt-6.8.0-1070-azure",
            "binary_version": "6.8.0-1070.78~22.04.1"
          },
          {
            "binary_name": "linux-tools-6.8.0-1070-azure",
            "binary_version": "6.8.0-1070.78~22.04.1"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:22.04:LTS",
        "name": "linux-azure-6.8",
        "purl": "pkg:deb/ubuntu/linux-azure-6.8@6.8.0-1070.78~22.04.1?arch=source\u0026distro=jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "6.8.0-1008.8~22.04.1",
        "6.8.0-1009.9~22.04.1",
        "6.8.0-1010.10~22.04.1",
        "6.8.0-1012.14~22.04.1",
        "6.8.0-1013.15~22.04.1",
        "6.8.0-1014.16~22.04.1",
        "6.8.0-1015.17~22.04.2",
        "6.8.0-1017.20~22.04.1",
        "6.8.0-1018.21~22.04.1",
        "6.8.0-1020.23~22.04.1",
        "6.8.0-1021.25~22.04.1",
        "6.8.0-1025.30~22.04.1",
        "6.8.0-1026.31~22.04.1",
        "6.8.0-1027.32~22.04.1",
        "6.8.0-1028.33~22.04.1",
        "6.8.0-1029.34~22.04.1",
        "6.8.0-1030.35~22.04.1",
        "6.8.0-1031.36~22.04.1",
        "6.8.0-1034.39~22.04.1",
        "6.8.0-1036.42~22.04.1",
        "6.8.0-1040.46~22.04.1",
        "6.8.0-1041.47~22.04.1",
        "6.8.0-1044.50~22.04.1",
        "6.8.0-1051.57~22.04.1",
        "6.8.0-1052.58~22.04.1",
        "6.8.0-1059.65~22.04.1",
        "6.8.0-1062.69~22.04.1",
        "6.8.0-1063.71~22.04.1",
        "6.8.0-1064.72~22.04.1",
        "6.8.0-1065.73~22.04.1",
        "6.8.0-1067.75~22.04.1",
        "6.8.0-1068.76~22.04.1",
        "6.8.0-1070.78~22.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-azure-fde-cloud-tools-5.15.0-1122",
            "binary_version": "5.15.0-1122.131"
          },
          {
            "binary_name": "linux-azure-fde-headers-5.15.0-1122",
            "binary_version": "5.15.0-1122.131"
          },
          {
            "binary_name": "linux-azure-fde-tools-5.15.0-1122",
            "binary_version": "5.15.0-1122.131"
          },
          {
            "binary_name": "linux-buildinfo-5.15.0-1122-azure-fde",
            "binary_version": "5.15.0-1122.131"
          },
          {
            "binary_name": "linux-cloud-tools-5.15.0-1122-azure-fde",
            "binary_version": "5.15.0-1122.131"
          },
          {
            "binary_name": "linux-headers-5.15.0-1122-azure-fde",
            "binary_version": "5.15.0-1122.131"
          },
          {
            "binary_name": "linux-image-unsigned-5.15.0-1122-azure-fde",
            "binary_version": "5.15.0-1122.131"
          },
          {
            "binary_name": "linux-modules-5.15.0-1122-azure-fde",
            "binary_version": "5.15.0-1122.131"
          },
          {
            "binary_name": "linux-modules-extra-5.15.0-1122-azure-fde",
            "binary_version": "5.15.0-1122.131"
          },
          {
            "binary_name": "linux-modules-involflt-5.15.0-1122-azure-fde",
            "binary_version": "5.15.0-1122.131"
          },
          {
            "binary_name": "linux-tools-5.15.0-1122-azure-fde",
            "binary_version": "5.15.0-1122.131"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:22.04:LTS",
        "name": "linux-azure-fde",
        "purl": "pkg:deb/ubuntu/linux-azure-fde@5.15.0-1122.131?arch=source\u0026distro=jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "5.15.0-1019.24.1",
        "5.15.0-1024.30.1",
        "5.15.0-1029.36.1",
        "5.15.0-1030.37.1",
        "5.15.0-1031.38.1",
        "5.15.0-1033.40.1",
        "5.15.0-1034.41.1",
        "5.15.0-1035.42.1",
        "5.15.0-1036.43.1",
        "5.15.0-1037.44.1",
        "5.15.0-1038.45.1",
        "5.15.0-1039.46.1",
        "5.15.0-1041.48.1",
        "5.15.0-1042.49.1",
        "5.15.0-1044.51.1",
        "5.15.0-1045.52.1",
        "5.15.0-1046.53.1",
        "5.15.0-1047.54.1",
        "5.15.0-1049.56.1",
        "5.15.0-1050.57.1",
        "5.15.0-1051.59.1",
        "5.15.0-1052.60.1",
        "5.15.0-1053.61.1",
        "5.15.0-1054.62.1",
        "5.15.0-1056.64.1",
        "5.15.0-1057.65.1",
        "5.15.0-1058.66.1",
        "5.15.0-1059.67.1",
        "5.15.0-1060.69.1",
        "5.15.0-1061.70.1",
        "5.15.0-1063.72.1",
        "5.15.0-1064.73.1",
        "5.15.0-1065.74.1",
        "5.15.0-1067.76.1",
        "5.15.0-1068.77.1",
        "5.15.0-1070.79.1",
        "5.15.0-1071.80.1",
        "5.15.0-1072.81.1",
        "5.15.0-1073.82.1",
        "5.15.0-1076.85.1",
        "5.15.0-1078.87.1",
        "5.15.0-1081.90.1",
        "5.15.0-1082.91.1",
        "5.15.0-1084.93.1",
        "5.15.0-1086.95.1",
        "5.15.0-1087.96.1",
        "5.15.0-1088.97.1",
        "5.15.0-1089.98.1",
        "5.15.0-1090.99.1",
        "5.15.0-1091.100.1",
        "5.15.0-1092.101.1",
        "5.15.0-1094.103.1",
        "5.15.0-1095.104.1",
        "5.15.0-1096.105.1",
        "5.15.0-1097.106.1",
        "5.15.0-1098.107.1",
        "5.15.0-1102.111.1",
        "5.15.0-1109.118.1",
        "5.15.0-1110.119.1",
        "5.15.0-1111.120.1",
        "5.15.0-1114.123",
        "5.15.0-1116.125",
        "5.15.0-1117.126",
        "5.15.0-1118.127",
        "5.15.0-1119.128",
        "5.15.0-1120.129",
        "5.15.0-1121.130",
        "5.15.0-1122.131"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-image-unsigned-5.19.0-1027-azure-fde",
            "binary_version": "5.19.0-1027.30~22.04.2.1"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:22.04:LTS",
        "name": "linux-azure-fde-5.19",
        "purl": "pkg:deb/ubuntu/linux-azure-fde-5.19@5.19.0-1027.30~22.04.2.1?arch=source\u0026distro=jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "5.19.0-1025.28~22.04.1.1",
        "5.19.0-1026.29~22.04.1.1",
        "5.19.0-1027.30~22.04.2.1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-image-unsigned-6.2.0-1019-azure-fde",
            "binary_version": "6.2.0-1019.19~22.04.1.1"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:22.04:LTS",
        "name": "linux-azure-fde-6.2",
        "purl": "pkg:deb/ubuntu/linux-azure-fde-6.2@6.2.0-1019.19~22.04.1.1?arch=source\u0026distro=jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "6.2.0-1008.8~22.04.1.1",
        "6.2.0-1009.9~22.04.3.1",
        "6.2.0-1011.11~22.04.1.1",
        "6.2.0-1012.12~22.04.1.1",
        "6.2.0-1014.14~22.04.1.1",
        "6.2.0-1015.15~22.04.1.1",
        "6.2.0-1016.16~22.04.1.1",
        "6.2.0-1017.17~22.04.1.1",
        "6.2.0-1018.18~22.04.1.1",
        "6.2.0-1019.19~22.04.1.1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-azure-fde-6.8-cloud-tools-6.8.0-1068",
            "binary_version": "6.8.0-1068.75~22.04.1"
          },
          {
            "binary_name": "linux-azure-fde-6.8-headers-6.8.0-1068",
            "binary_version": "6.8.0-1068.75~22.04.1"
          },
          {
            "binary_name": "linux-azure-fde-6.8-tools-6.8.0-1068",
            "binary_version": "6.8.0-1068.75~22.04.1"
          },
          {
            "binary_name": "linux-buildinfo-6.8.0-1068-azure-fde",
            "binary_version": "6.8.0-1068.75~22.04.1"
          },
          {
            "binary_name": "linux-cloud-tools-6.8.0-1068-azure-fde",
            "binary_version": "6.8.0-1068.75~22.04.1"
          },
          {
            "binary_name": "linux-headers-6.8.0-1068-azure-fde",
            "binary_version": "6.8.0-1068.75~22.04.1"
          },
          {
            "binary_name": "linux-image-unsigned-6.8.0-1068-azure-fde",
            "binary_version": "6.8.0-1068.75~22.04.1"
          },
          {
            "binary_name": "linux-modules-6.8.0-1068-azure-fde",
            "binary_version": "6.8.0-1068.75~22.04.1"
          },
          {
            "binary_name": "linux-modules-extra-6.8.0-1068-azure-fde",
            "binary_version": "6.8.0-1068.75~22.04.1"
          },
          {
            "binary_name": "linux-modules-involflt-6.8.0-1068-azure-fde",
            "binary_version": "6.8.0-1068.75~22.04.1"
          },
          {
            "binary_name": "linux-tools-6.8.0-1068-azure-fde",
            "binary_version": "6.8.0-1068.75~22.04.1"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:22.04:LTS",
        "name": "linux-azure-fde-6.8",
        "purl": "pkg:deb/ubuntu/linux-azure-fde-6.8@6.8.0-1068.75~22.04.1?arch=source\u0026distro=jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "6.8.0-1041.48~22.04.1",
        "6.8.0-1042.49~22.04.1",
        "6.8.0-1044.51~22.04.1",
        "6.8.0-1046.53~22.04.1",
        "6.8.0-1053.60~22.04.1",
        "6.8.0-1058.65~22.04.1",
        "6.8.0-1061.68~22.04.1",
        "6.8.0-1062.69~22.04.1",
        "6.8.0-1063.70~22.04.1",
        "6.8.0-1064.71~22.04.1",
        "6.8.0-1065.72~22.04.1",
        "6.8.0-1066.73~22.04.1",
        "6.8.0-1068.75~22.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-buildinfo-5.15.0-1118-gcp",
            "binary_version": "5.15.0-1118.128"
          },
          {
            "binary_name": "linux-gcp-headers-5.15.0-1118",
            "binary_version": "5.15.0-1118.128"
          },
          {
            "binary_name": "linux-gcp-tools-5.15.0-1118",
            "binary_version": "5.15.0-1118.128"
          },
          {
            "binary_name": "linux-headers-5.15.0-1118-gcp",
            "binary_version": "5.15.0-1118.128"
          },
          {
            "binary_name": "linux-image-unsigned-5.15.0-1118-gcp",
            "binary_version": "5.15.0-1118.128"
          },
          {
            "binary_name": "linux-modules-5.15.0-1118-gcp",
            "binary_version": "5.15.0-1118.128"
          },
          {
            "binary_name": "linux-modules-extra-5.15.0-1118-gcp",
            "binary_version": "5.15.0-1118.128"
          },
          {
            "binary_name": "linux-tools-5.15.0-1118-gcp",
            "binary_version": "5.15.0-1118.128"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:22.04:LTS",
        "name": "linux-gcp",
        "purl": "pkg:deb/ubuntu/linux-gcp@5.15.0-1118.128?arch=source\u0026distro=jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "5.13.0-1005.6",
        "5.15.0-1001.3",
        "5.15.0-1002.5",
        "5.15.0-1003.6",
        "5.15.0-1004.7",
        "5.15.0-1005.8",
        "5.15.0-1006.9",
        "5.15.0-1008.12",
        "5.15.0-1010.15",
        "5.15.0-1013.18",
        "5.15.0-1016.21",
        "5.15.0-1017.23",
        "5.15.0-1018.24",
        "5.15.0-1019.25",
        "5.15.0-1021.28",
        "5.15.0-1022.29",
        "5.15.0-1025.32",
        "5.15.0-1026.33",
        "5.15.0-1027.34",
        "5.15.0-1029.36",
        "5.15.0-1030.37",
        "5.15.0-1031.38",
        "5.15.0-1032.40",
        "5.15.0-1034.42",
        "5.15.0-1035.43",
        "5.15.0-1036.44",
        "5.15.0-1037.45",
        "5.15.0-1038.46",
        "5.15.0-1039.47",
        "5.15.0-1040.48",
        "5.15.0-1041.49",
        "5.15.0-1042.50",
        "5.15.0-1044.52",
        "5.15.0-1045.53",
        "5.15.0-1046.54",
        "5.15.0-1047.55",
        "5.15.0-1048.56",
        "5.15.0-1049.57",
        "5.15.0-1051.59",
        "5.15.0-1052.60",
        "5.15.0-1053.61",
        "5.15.0-1054.62",
        "5.15.0-1055.63",
        "5.15.0-1058.66",
        "5.15.0-1059.67",
        "5.15.0-1060.68",
        "5.15.0-1062.70",
        "5.15.0-1063.71",
        "5.15.0-1064.72",
        "5.15.0-1065.73",
        "5.15.0-1066.74",
        "5.15.0-1067.75",
        "5.15.0-1068.76",
        "5.15.0-1069.77",
        "5.15.0-1070.78",
        "5.15.0-1071.79",
        "5.15.0-1072.80",
        "5.15.0-1073.81",
        "5.15.0-1074.83",
        "5.15.0-1075.84",
        "5.15.0-1077.86",
        "5.15.0-1078.87",
        "5.15.0-1079.88",
        "5.15.0-1080.89",
        "5.15.0-1081.90",
        "5.15.0-1082.91",
        "5.15.0-1083.92",
        "5.15.0-1084.93",
        "5.15.0-1085.94",
        "5.15.0-1086.95",
        "5.15.0-1087.96",
        "5.15.0-1088.97",
        "5.15.0-1090.99",
        "5.15.0-1091.100",
        "5.15.0-1092.101",
        "5.15.0-1093.102",
        "5.15.0-1095.104",
        "5.15.0-1096.105",
        "5.15.0-1097.106",
        "5.15.0-1098.107",
        "5.15.0-1099.108",
        "5.15.0-1100.109",
        "5.15.0-1101.110",
        "5.15.0-1103.112",
        "5.15.0-1104.113",
        "5.15.0-1105.114",
        "5.15.0-1106.115",
        "5.15.0-1108.117",
        "5.15.0-1109.118",
        "5.15.0-1111.121",
        "5.15.0-1112.122",
        "5.15.0-1114.124",
        "5.15.0-1115.125",
        "5.15.0-1117.127",
        "5.15.0-1118.128"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-buildinfo-5.19.0-1030-gcp",
            "binary_version": "5.19.0-1030.32~22.04.1"
          },
          {
            "binary_name": "linux-gcp-5.19-headers-5.19.0-1030",
            "binary_version": "5.19.0-1030.32~22.04.1"
          },
          {
            "binary_name": "linux-gcp-5.19-tools-5.19.0-1030",
            "binary_version": "5.19.0-1030.32~22.04.1"
          },
          {
            "binary_name": "linux-headers-5.19.0-1030-gcp",
            "binary_version": "5.19.0-1030.32~22.04.1"
          },
          {
            "binary_name": "linux-image-unsigned-5.19.0-1030-gcp",
            "binary_version": "5.19.0-1030.32~22.04.1"
          },
          {
            "binary_name": "linux-modules-5.19.0-1030-gcp",
            "binary_version": "5.19.0-1030.32~22.04.1"
          },
          {
            "binary_name": "linux-modules-extra-5.19.0-1030-gcp",
            "binary_version": "5.19.0-1030.32~22.04.1"
          },
          {
            "binary_name": "linux-tools-5.19.0-1030-gcp",
            "binary_version": "5.19.0-1030.32~22.04.1"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:22.04:LTS",
        "name": "linux-gcp-5.19",
        "purl": "pkg:deb/ubuntu/linux-gcp-5.19@5.19.0-1030.32~22.04.1?arch=source\u0026distro=jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "5.19.0-1020.22~22.04.2",
        "5.19.0-1021.23~22.04.1",
        "5.19.0-1022.24~22.04.1",
        "5.19.0-1024.26~22.04.1",
        "5.19.0-1025.27~22.04.1",
        "5.19.0-1026.28~22.04.1",
        "5.19.0-1027.29~22.04.1",
        "5.19.0-1030.32~22.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-buildinfo-6.2.0-1021-gcp",
            "binary_version": "6.2.0-1021.23~22.04.1"
          },
          {
            "binary_name": "linux-gcp-6.2-headers-6.2.0-1021",
            "binary_version": "6.2.0-1021.23~22.04.1"
          },
          {
            "binary_name": "linux-gcp-6.2-tools-6.2.0-1021",
            "binary_version": "6.2.0-1021.23~22.04.1"
          },
          {
            "binary_name": "linux-headers-6.2.0-1021-gcp",
            "binary_version": "6.2.0-1021.23~22.04.1"
          },
          {
            "binary_name": "linux-image-unsigned-6.2.0-1021-gcp",
            "binary_version": "6.2.0-1021.23~22.04.1"
          },
          {
            "binary_name": "linux-modules-6.2.0-1021-gcp",
            "binary_version": "6.2.0-1021.23~22.04.1"
          },
          {
            "binary_name": "linux-modules-extra-6.2.0-1021-gcp",
            "binary_version": "6.2.0-1021.23~22.04.1"
          },
          {
            "binary_name": "linux-tools-6.2.0-1021-gcp",
            "binary_version": "6.2.0-1021.23~22.04.1"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:22.04:LTS",
        "name": "linux-gcp-6.2",
        "purl": "pkg:deb/ubuntu/linux-gcp-6.2@6.2.0-1021.23~22.04.1?arch=source\u0026distro=jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "6.2.0-1009.9~22.04.3",
        "6.2.0-1010.10~22.04.1",
        "6.2.0-1011.11~22.04.1",
        "6.2.0-1011.11~22.04.3",
        "6.2.0-1012.12~22.04.1",
        "6.2.0-1013.13~22.04.1",
        "6.2.0-1014.14~22.04.1",
        "6.2.0-1016.18~22.04.1",
        "6.2.0-1017.19~22.04.1",
        "6.2.0-1018.20~22.04.1",
        "6.2.0-1019.21~22.04.1",
        "6.2.0-1021.23~22.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-buildinfo-6.5.0-1025-gcp",
            "binary_version": "6.5.0-1025.27~22.04.1"
          },
          {
            "binary_name": "linux-gcp-6.5-headers-6.5.0-1025",
            "binary_version": "6.5.0-1025.27~22.04.1"
          },
          {
            "binary_name": "linux-gcp-6.5-tools-6.5.0-1025",
            "binary_version": "6.5.0-1025.27~22.04.1"
          },
          {
            "binary_name": "linux-headers-6.5.0-1025-gcp",
            "binary_version": "6.5.0-1025.27~22.04.1"
          },
          {
            "binary_name": "linux-image-unsigned-6.5.0-1025-gcp",
            "binary_version": "6.5.0-1025.27~22.04.1"
          },
          {
            "binary_name": "linux-modules-6.5.0-1025-gcp",
            "binary_version": "6.5.0-1025.27~22.04.1"
          },
          {
            "binary_name": "linux-modules-extra-6.5.0-1025-gcp",
            "binary_version": "6.5.0-1025.27~22.04.1"
          },
          {
            "binary_name": "linux-modules-iwlwifi-6.5.0-1025-gcp",
            "binary_version": "6.5.0-1025.27~22.04.1"
          },
          {
            "binary_name": "linux-tools-6.5.0-1025-gcp",
            "binary_version": "6.5.0-1025.27~22.04.1"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:22.04:LTS",
        "name": "linux-gcp-6.5",
        "purl": "pkg:deb/ubuntu/linux-gcp-6.5@6.5.0-1025.27~22.04.1?arch=source\u0026distro=jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "6.5.0-1010.10~22.04.3",
        "6.5.0-1011.11~22.04.1",
        "6.5.0-1013.13~22.04.1",
        "6.5.0-1014.14~22.04.1",
        "6.5.0-1015.15~22.04.1",
        "6.5.0-1016.16~22.04.1",
        "6.5.0-1017.17~22.04.1",
        "6.5.0-1018.18~22.04.1",
        "6.5.0-1020.20~22.04.1",
        "6.5.0-1022.24~22.04.1",
        "6.5.0-1023.25~22.04.1",
        "6.5.0-1024.26~22.04.1",
        "6.5.0-1025.27~22.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-buildinfo-6.8.0-1070-gcp",
            "binary_version": "6.8.0-1070.78~22.04.1"
          },
          {
            "binary_name": "linux-buildinfo-6.8.0-1070-gcp-64k",
            "binary_version": "6.8.0-1070.78~22.04.1"
          },
          {
            "binary_name": "linux-gcp-6.8-headers-6.8.0-1070",
            "binary_version": "6.8.0-1070.78~22.04.1"
          },
          {
            "binary_name": "linux-gcp-6.8-tools-6.8.0-1070",
            "binary_version": "6.8.0-1070.78~22.04.1"
          },
          {
            "binary_name": "linux-headers-6.8.0-1070-gcp",
            "binary_version": "6.8.0-1070.78~22.04.1"
          },
          {
            "binary_name": "linux-headers-6.8.0-1070-gcp-64k",
            "binary_version": "6.8.0-1070.78~22.04.1"
          },
          {
            "binary_name": "linux-image-unsigned-6.8.0-1070-gcp",
            "binary_version": "6.8.0-1070.78~22.04.1"
          },
          {
            "binary_name": "linux-image-unsigned-6.8.0-1070-gcp-64k",
            "binary_version": "6.8.0-1070.78~22.04.1"
          },
          {
            "binary_name": "linux-modules-6.8.0-1070-gcp",
            "binary_version": "6.8.0-1070.78~22.04.1"
          },
          {
            "binary_name": "linux-modules-6.8.0-1070-gcp-64k",
            "binary_version": "6.8.0-1070.78~22.04.1"
          },
          {
            "binary_name": "linux-modules-extra-6.8.0-1070-gcp",
            "binary_version": "6.8.0-1070.78~22.04.1"
          },
          {
            "binary_name": "linux-modules-extra-6.8.0-1070-gcp-64k",
            "binary_version": "6.8.0-1070.78~22.04.1"
          },
          {
            "binary_name": "linux-tools-6.8.0-1070-gcp",
            "binary_version": "6.8.0-1070.78~22.04.1"
          },
          {
            "binary_name": "linux-tools-6.8.0-1070-gcp-64k",
            "binary_version": "6.8.0-1070.78~22.04.1"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:22.04:LTS",
        "name": "linux-gcp-6.8",
        "purl": "pkg:deb/ubuntu/linux-gcp-6.8@6.8.0-1070.78~22.04.1?arch=source\u0026distro=jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "6.8.0-1010.11~22.04.1",
        "6.8.0-1011.12~22.04.1",
        "6.8.0-1012.13~22.04.1",
        "6.8.0-1013.14~22.04.1",
        "6.8.0-1014.16~22.04.1",
        "6.8.0-1015.17~22.04.1",
        "6.8.0-1016.18~22.04.1",
        "6.8.0-1017.19~22.04.1",
        "6.8.0-1018.20~22.04.1",
        "6.8.0-1019.21~22.04.1",
        "6.8.0-1020.22~22.04.1",
        "6.8.0-1021.23~22.04.1",
        "6.8.0-1024.26~22.04.1",
        "6.8.0-1025.27~22.04.1",
        "6.8.0-1026.28~22.04.1",
        "6.8.0-1027.29~22.04.1",
        "6.8.0-1028.30~22.04.1",
        "6.8.0-1029.31~22.04.1",
        "6.8.0-1030.32~22.04.1",
        "6.8.0-1031.33~22.04.1",
        "6.8.0-1032.34~22.04.1",
        "6.8.0-1033.35~22.04.1",
        "6.8.0-1034.36~22.04.2",
        "6.8.0-1036.38~22.04.1",
        "6.8.0-1037.39~22.04.1",
        "6.8.0-1040.42~22.04.1",
        "6.8.0-1041.43~22.04.1",
        "6.8.0-1042.45~22.04.1",
        "6.8.0-1043.46~22.04.1",
        "6.8.0-1044.47~22.04.1",
        "6.8.0-1045.48~22.04.1",
        "6.8.0-1046.49~22.04.1",
        "6.8.0-1047.50~22.04.2",
        "6.8.0-1048.51~22.04.1",
        "6.8.0-1052.55~22.04.1",
        "6.8.0-1053.56~22.04.1",
        "6.8.0-1054.57~22.04.1",
        "6.8.0-1058.61~22.04.1",
        "6.8.0-1060.63~22.04.1",
        "6.8.0-1063.69~22.04.1",
        "6.8.0-1064.72~22.04.1",
        "6.8.0-1065.73~22.04.1",
        "6.8.0-1066.74~22.04.1",
        "6.8.0-1067.75~22.04.1",
        "6.8.0-1069.77~22.04.1",
        "6.8.0-1070.78~22.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-buildinfo-5.15.0-1113-gke",
            "binary_version": "5.15.0-1113.119"
          },
          {
            "binary_name": "linux-gke-headers-5.15.0-1113",
            "binary_version": "5.15.0-1113.119"
          },
          {
            "binary_name": "linux-gke-tools-5.15.0-1113",
            "binary_version": "5.15.0-1113.119"
          },
          {
            "binary_name": "linux-headers-5.15.0-1113-gke",
            "binary_version": "5.15.0-1113.119"
          },
          {
            "binary_name": "linux-image-unsigned-5.15.0-1113-gke",
            "binary_version": "5.15.0-1113.119"
          },
          {
            "binary_name": "linux-modules-5.15.0-1113-gke",
            "binary_version": "5.15.0-1113.119"
          },
          {
            "binary_name": "linux-modules-extra-5.15.0-1113-gke",
            "binary_version": "5.15.0-1113.119"
          },
          {
            "binary_name": "linux-tools-5.15.0-1113-gke",
            "binary_version": "5.15.0-1113.119"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:22.04:LTS",
        "name": "linux-gke",
        "purl": "pkg:deb/ubuntu/linux-gke@5.15.0-1113.119?arch=source\u0026distro=jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "5.15.0-1002.2",
        "5.15.0-1003.3",
        "5.15.0-1004.5",
        "5.15.0-1005.6",
        "5.15.0-1006.7",
        "5.15.0-1008.10",
        "5.15.0-1010.13",
        "5.15.0-1011.14",
        "5.15.0-1014.17",
        "5.15.0-1015.18",
        "5.15.0-1016.19",
        "5.15.0-1017.20",
        "5.15.0-1019.23",
        "5.15.0-1020.25",
        "5.15.0-1023.28",
        "5.15.0-1024.29",
        "5.15.0-1027.32",
        "5.15.0-1028.33",
        "5.15.0-1030.35",
        "5.15.0-1031.36",
        "5.15.0-1032.37",
        "5.15.0-1033.38",
        "5.15.0-1034.39",
        "5.15.0-1035.40",
        "5.15.0-1036.41",
        "5.15.0-1037.42",
        "5.15.0-1038.43",
        "5.15.0-1039.44",
        "5.15.0-1040.45",
        "5.15.0-1041.46",
        "5.15.0-1042.47",
        "5.15.0-1044.49",
        "5.15.0-1045.50",
        "5.15.0-1046.51",
        "5.15.0-1047.52",
        "5.15.0-1048.53",
        "5.15.0-1049.54",
        "5.15.0-1050.55",
        "5.15.0-1051.56",
        "5.15.0-1052.57",
        "5.15.0-1053.58",
        "5.15.0-1054.59",
        "5.15.0-1057.62",
        "5.15.0-1058.63",
        "5.15.0-1059.64",
        "5.15.0-1060.66",
        "5.15.0-1061.67",
        "5.15.0-1062.68",
        "5.15.0-1063.69",
        "5.15.0-1064.70",
        "5.15.0-1065.71",
        "5.15.0-1066.72",
        "5.15.0-1067.73",
        "5.15.0-1068.74",
        "5.15.0-1069.75",
        "5.15.0-1070.76",
        "5.15.0-1071.77",
        "5.15.0-1072.78",
        "5.15.0-1073.79",
        "5.15.0-1075.81",
        "5.15.0-1076.82",
        "5.15.0-1077.83",
        "5.15.0-1078.84",
        "5.15.0-1079.85",
        "5.15.0-1080.86",
        "5.15.0-1081.87",
        "5.15.0-1082.88",
        "5.15.0-1083.89",
        "5.15.0-1084.90",
        "5.15.0-1085.91",
        "5.15.0-1086.92",
        "5.15.0-1087.93",
        "5.15.0-1088.94",
        "5.15.0-1089.95",
        "5.15.0-1090.96",
        "5.15.0-1091.97",
        "5.15.0-1092.98",
        "5.15.0-1093.99",
        "5.15.0-1094.100",
        "5.15.0-1095.101",
        "5.15.0-1096.102",
        "5.15.0-1097.103",
        "5.15.0-1099.105",
        "5.15.0-1100.106",
        "5.15.0-1101.107",
        "5.15.0-1102.108",
        "5.15.0-1104.110",
        "5.15.0-1105.111",
        "5.15.0-1107.113",
        "5.15.0-1108.114",
        "5.15.0-1110.116",
        "5.15.0-1111.117",
        "5.15.0-1112.118",
        "5.15.0-1113.119"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-buildinfo-5.15.0-1100-gkeop",
            "binary_version": "5.15.0-1100.108"
          },
          {
            "binary_name": "linux-cloud-tools-5.15.0-1100-gkeop",
            "binary_version": "5.15.0-1100.108"
          },
          {
            "binary_name": "linux-gkeop-cloud-tools-5.15.0-1100",
            "binary_version": "5.15.0-1100.108"
          },
          {
            "binary_name": "linux-gkeop-headers-5.15.0-1100",
            "binary_version": "5.15.0-1100.108"
          },
          {
            "binary_name": "linux-gkeop-tools-5.15.0-1100",
            "binary_version": "5.15.0-1100.108"
          },
          {
            "binary_name": "linux-headers-5.15.0-1100-gkeop",
            "binary_version": "5.15.0-1100.108"
          },
          {
            "binary_name": "linux-image-unsigned-5.15.0-1100-gkeop",
            "binary_version": "5.15.0-1100.108"
          },
          {
            "binary_name": "linux-modules-5.15.0-1100-gkeop",
            "binary_version": "5.15.0-1100.108"
          },
          {
            "binary_name": "linux-modules-extra-5.15.0-1100-gkeop",
            "binary_version": "5.15.0-1100.108"
          },
          {
            "binary_name": "linux-tools-5.15.0-1100-gkeop",
            "binary_version": "5.15.0-1100.108"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:22.04:LTS",
        "name": "linux-gkeop",
        "purl": "pkg:deb/ubuntu/linux-gkeop@5.15.0-1100.108?arch=source\u0026distro=jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "5.15.0-1001.2",
        "5.15.0-1002.4",
        "5.15.0-1003.5",
        "5.15.0-1004.6",
        "5.15.0-1005.7",
        "5.15.0-1007.10",
        "5.15.0-1008.12",
        "5.15.0-1011.15",
        "5.15.0-1012.16",
        "5.15.0-1013.17",
        "5.15.0-1015.19",
        "5.15.0-1016.21",
        "5.15.0-1017.22",
        "5.15.0-1018.23",
        "5.15.0-1019.24",
        "5.15.0-1020.25",
        "5.15.0-1021.26",
        "5.15.0-1022.27",
        "5.15.0-1023.28",
        "5.15.0-1024.29",
        "5.15.0-1025.30",
        "5.15.0-1026.31",
        "5.15.0-1027.32",
        "5.15.0-1028.33",
        "5.15.0-1030.35",
        "5.15.0-1031.37",
        "5.15.0-1032.38",
        "5.15.0-1033.39",
        "5.15.0-1034.40",
        "5.15.0-1035.41",
        "5.15.0-1036.42",
        "5.15.0-1037.43",
        "5.15.0-1038.44",
        "5.15.0-1039.45",
        "5.15.0-1040.46",
        "5.15.0-1043.50",
        "5.15.0-1044.51",
        "5.15.0-1045.52",
        "5.15.0-1046.53",
        "5.15.0-1047.54",
        "5.15.0-1048.55",
        "5.15.0-1049.56",
        "5.15.0-1050.57",
        "5.15.0-1051.58",
        "5.15.0-1052.59",
        "5.15.0-1053.60",
        "5.15.0-1054.61",
        "5.15.0-1055.62",
        "5.15.0-1056.63",
        "5.15.0-1057.64",
        "5.15.0-1058.66",
        "5.15.0-1059.67",
        "5.15.0-1060.68",
        "5.15.0-1061.69",
        "5.15.0-1062.70",
        "5.15.0-1063.71",
        "5.15.0-1064.72",
        "5.15.0-1065.73",
        "5.15.0-1066.74",
        "5.15.0-1067.75",
        "5.15.0-1068.76",
        "5.15.0-1069.77",
        "5.15.0-1070.78",
        "5.15.0-1071.79",
        "5.15.0-1073.81",
        "5.15.0-1074.82",
        "5.15.0-1075.83",
        "5.15.0-1076.84",
        "5.15.0-1078.86",
        "5.15.0-1079.87",
        "5.15.0-1080.88",
        "5.15.0-1081.89",
        "5.15.0-1082.90",
        "5.15.0-1083.91",
        "5.15.0-1084.92",
        "5.15.0-1086.94",
        "5.15.0-1087.95",
        "5.15.0-1088.96",
        "5.15.0-1089.97",
        "5.15.0-1091.99",
        "5.15.0-1092.100",
        "5.15.0-1094.102",
        "5.15.0-1095.103",
        "5.15.0-1096.104",
        "5.15.0-1097.105",
        "5.15.0-1098.106",
        "5.15.0-1099.107",
        "5.15.0-1100.108"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-buildinfo-5.19.0-50-generic",
            "binary_version": "5.19.0-50.50"
          },
          {
            "binary_name": "linux-buildinfo-5.19.0-50-generic-64k",
            "binary_version": "5.19.0-50.50"
          },
          {
            "binary_name": "linux-buildinfo-5.19.0-50-generic-lpae",
            "binary_version": "5.19.0-50.50"
          },
          {
            "binary_name": "linux-cloud-tools-5.19.0-50-generic",
            "binary_version": "5.19.0-50.50"
          },
          {
            "binary_name": "linux-headers-5.19.0-50-generic",
            "binary_version": "5.19.0-50.50"
          },
          {
            "binary_name": "linux-headers-5.19.0-50-generic-64k",
            "binary_version": "5.19.0-50.50"
          },
          {
            "binary_name": "linux-headers-5.19.0-50-generic-lpae",
            "binary_version": "5.19.0-50.50"
          },
          {
            "binary_name": "linux-hwe-5.19-cloud-tools-5.19.0-50",
            "binary_version": "5.19.0-50.50"
          },
          {
            "binary_name": "linux-hwe-5.19-cloud-tools-common",
            "binary_version": "5.19.0-50.50"
          },
          {
            "binary_name": "linux-hwe-5.19-headers-5.19.0-50",
            "binary_version": "5.19.0-50.50"
          },
          {
            "binary_name": "linux-hwe-5.19-tools-5.19.0-50",
            "binary_version": "5.19.0-50.50"
          },
          {
            "binary_name": "linux-hwe-5.19-tools-common",
            "binary_version": "5.19.0-50.50"
          },
          {
            "binary_name": "linux-hwe-5.19-tools-host",
            "binary_version": "5.19.0-50.50"
          },
          {
            "binary_name": "linux-image-5.19.0-50-generic",
            "binary_version": "5.19.0-50.50"
          },
          {
            "binary_name": "linux-image-5.19.0-50-generic-lpae",
            "binary_version": "5.19.0-50.50"
          },
          {
            "binary_name": "linux-image-unsigned-5.19.0-50-generic",
            "binary_version": "5.19.0-50.50"
          },
          {
            "binary_name": "linux-image-unsigned-5.19.0-50-generic-64k",
            "binary_version": "5.19.0-50.50"
          },
          {
            "binary_name": "linux-modules-5.19.0-50-generic",
            "binary_version": "5.19.0-50.50"
          },
          {
            "binary_name": "linux-modules-5.19.0-50-generic-64k",
            "binary_version": "5.19.0-50.50"
          },
          {
            "binary_name": "linux-modules-5.19.0-50-generic-lpae",
            "binary_version": "5.19.0-50.50"
          },
          {
            "binary_name": "linux-modules-extra-5.19.0-50-generic",
            "binary_version": "5.19.0-50.50"
          },
          {
            "binary_name": "linux-modules-ipu6-5.19.0-50-generic",
            "binary_version": "5.19.0-50.50"
          },
          {
            "binary_name": "linux-modules-ivsc-5.19.0-50-generic",
            "binary_version": "5.19.0-50.50"
          },
          {
            "binary_name": "linux-modules-iwlwifi-5.19.0-50-generic",
            "binary_version": "5.19.0-50.50"
          },
          {
            "binary_name": "linux-source-5.19.0",
            "binary_version": "5.19.0-50.50"
          },
          {
            "binary_name": "linux-tools-5.19.0-50-generic",
            "binary_version": "5.19.0-50.50"
          },
          {
            "binary_name": "linux-tools-5.19.0-50-generic-64k",
            "binary_version": "5.19.0-50.50"
          },
          {
            "binary_name": "linux-tools-5.19.0-50-generic-lpae",
            "binary_version": "5.19.0-50.50"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:22.04:LTS",
        "name": "linux-hwe-5.19",
        "purl": "pkg:deb/ubuntu/linux-hwe-5.19@5.19.0-50.50?arch=source\u0026distro=jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "5.19.0-28.29~22.04.1",
        "5.19.0-32.33~22.04.1",
        "5.19.0-35.36~22.04.1",
        "5.19.0-38.39~22.04.1",
        "5.19.0-40.41~22.04.1",
        "5.19.0-41.42~22.04.1",
        "5.19.0-42.43~22.04.1",
        "5.19.0-43.44~22.04.1",
        "5.19.0-45.46~22.04.1",
        "5.19.0-46.47~22.04.1",
        "5.19.0-50.50"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-buildinfo-6.2.0-39-generic",
            "binary_version": "6.2.0-39.40~22.04.1"
          },
          {
            "binary_name": "linux-buildinfo-6.2.0-39-generic-64k",
            "binary_version": "6.2.0-39.40~22.04.1"
          },
          {
            "binary_name": "linux-buildinfo-6.2.0-39-generic-lpae",
            "binary_version": "6.2.0-39.40~22.04.1"
          },
          {
            "binary_name": "linux-cloud-tools-6.2.0-39-generic",
            "binary_version": "6.2.0-39.40~22.04.1"
          },
          {
            "binary_name": "linux-headers-6.2.0-39-generic",
            "binary_version": "6.2.0-39.40~22.04.1"
          },
          {
            "binary_name": "linux-headers-6.2.0-39-generic-64k",
            "binary_version": "6.2.0-39.40~22.04.1"
          },
          {
            "binary_name": "linux-headers-6.2.0-39-generic-lpae",
            "binary_version": "6.2.0-39.40~22.04.1"
          },
          {
            "binary_name": "linux-hwe-6.2-cloud-tools-6.2.0-39",
            "binary_version": "6.2.0-39.40~22.04.1"
          },
          {
            "binary_name": "linux-hwe-6.2-cloud-tools-common",
            "binary_version": "6.2.0-39.40~22.04.1"
          },
          {
            "binary_name": "linux-hwe-6.2-headers-6.2.0-39",
            "binary_version": "6.2.0-39.40~22.04.1"
          },
          {
            "binary_name": "linux-hwe-6.2-tools-6.2.0-39",
            "binary_version": "6.2.0-39.40~22.04.1"
          },
          {
            "binary_name": "linux-hwe-6.2-tools-common",
            "binary_version": "6.2.0-39.40~22.04.1"
          },
          {
            "binary_name": "linux-hwe-6.2-tools-host",
            "binary_version": "6.2.0-39.40~22.04.1"
          },
          {
            "binary_name": "linux-image-6.2.0-39-generic",
            "binary_version": "6.2.0-39.40~22.04.1"
          },
          {
            "binary_name": "linux-image-6.2.0-39-generic-lpae",
            "binary_version": "6.2.0-39.40~22.04.1"
          },
          {
            "binary_name": "linux-image-unsigned-6.2.0-39-generic",
            "binary_version": "6.2.0-39.40~22.04.1"
          },
          {
            "binary_name": "linux-image-unsigned-6.2.0-39-generic-64k",
            "binary_version": "6.2.0-39.40~22.04.1"
          },
          {
            "binary_name": "linux-modules-6.2.0-39-generic",
            "binary_version": "6.2.0-39.40~22.04.1"
          },
          {
            "binary_name": "linux-modules-6.2.0-39-generic-64k",
            "binary_version": "6.2.0-39.40~22.04.1"
          },
          {
            "binary_name": "linux-modules-6.2.0-39-generic-lpae",
            "binary_version": "6.2.0-39.40~22.04.1"
          },
          {
            "binary_name": "linux-modules-extra-6.2.0-39-generic",
            "binary_version": "6.2.0-39.40~22.04.1"
          },
          {
            "binary_name": "linux-modules-ipu6-6.2.0-39-generic",
            "binary_version": "6.2.0-39.40~22.04.1"
          },
          {
            "binary_name": "linux-modules-ivsc-6.2.0-39-generic",
            "binary_version": "6.2.0-39.40~22.04.1"
          },
          {
            "binary_name": "linux-modules-iwlwifi-6.2.0-39-generic",
            "binary_version": "6.2.0-39.40~22.04.1"
          },
          {
            "binary_name": "linux-source-6.2.0",
            "binary_version": "6.2.0-39.40~22.04.1"
          },
          {
            "binary_name": "linux-tools-6.2.0-39-generic",
            "binary_version": "6.2.0-39.40~22.04.1"
          },
          {
            "binary_name": "linux-tools-6.2.0-39-generic-64k",
            "binary_version": "6.2.0-39.40~22.04.1"
          },
          {
            "binary_name": "linux-tools-6.2.0-39-generic-lpae",
            "binary_version": "6.2.0-39.40~22.04.1"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:22.04:LTS",
        "name": "linux-hwe-6.2",
        "purl": "pkg:deb/ubuntu/linux-hwe-6.2@6.2.0-39.40~22.04.1?arch=source\u0026distro=jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "6.2.0-25.25~22.04.2",
        "6.2.0-26.26~22.04.1",
        "6.2.0-31.31~22.04.1",
        "6.2.0-32.32~22.04.1",
        "6.2.0-33.33~22.04.1",
        "6.2.0-34.34~22.04.1",
        "6.2.0-35.35~22.04.1",
        "6.2.0-36.37~22.04.1",
        "6.2.0-37.38~22.04.1",
        "6.2.0-39.40~22.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-buildinfo-6.5.0-45-generic",
            "binary_version": "6.5.0-45.45~22.04.1"
          },
          {
            "binary_name": "linux-buildinfo-6.5.0-45-generic-64k",
            "binary_version": "6.5.0-45.45~22.04.1"
          },
          {
            "binary_name": "linux-cloud-tools-6.5.0-45-generic",
            "binary_version": "6.5.0-45.45~22.04.1"
          },
          {
            "binary_name": "linux-headers-6.5.0-45-generic",
            "binary_version": "6.5.0-45.45~22.04.1"
          },
          {
            "binary_name": "linux-headers-6.5.0-45-generic-64k",
            "binary_version": "6.5.0-45.45~22.04.1"
          },
          {
            "binary_name": "linux-hwe-6.5-cloud-tools-6.5.0-45",
            "binary_version": "6.5.0-45.45~22.04.1"
          },
          {
            "binary_name": "linux-hwe-6.5-cloud-tools-common",
            "binary_version": "6.5.0-45.45~22.04.1"
          },
          {
            "binary_name": "linux-hwe-6.5-headers-6.5.0-45",
            "binary_version": "6.5.0-45.45~22.04.1"
          },
          {
            "binary_name": "linux-hwe-6.5-tools-6.5.0-45",
            "binary_version": "6.5.0-45.45~22.04.1"
          },
          {
            "binary_name": "linux-hwe-6.5-tools-common",
            "binary_version": "6.5.0-45.45~22.04.1"
          },
          {
            "binary_name": "linux-hwe-6.5-tools-host",
            "binary_version": "6.5.0-45.45~22.04.1"
          },
          {
            "binary_name": "linux-image-6.5.0-45-generic",
            "binary_version": "6.5.0-45.45~22.04.1"
          },
          {
            "binary_name": "linux-image-unsigned-6.5.0-45-generic",
            "binary_version": "6.5.0-45.45~22.04.1"
          },
          {
            "binary_name": "linux-image-unsigned-6.5.0-45-generic-64k",
            "binary_version": "6.5.0-45.45~22.04.1"
          },
          {
            "binary_name": "linux-modules-6.5.0-45-generic",
            "binary_version": "6.5.0-45.45~22.04.1"
          },
          {
            "binary_name": "linux-modules-6.5.0-45-generic-64k",
            "binary_version": "6.5.0-45.45~22.04.1"
          },
          {
            "binary_name": "linux-modules-extra-6.5.0-45-generic",
            "binary_version": "6.5.0-45.45~22.04.1"
          },
          {
            "binary_name": "linux-modules-ipu6-6.5.0-45-generic",
            "binary_version": "6.5.0-45.45~22.04.1"
          },
          {
            "binary_name": "linux-modules-ivsc-6.5.0-45-generic",
            "binary_version": "6.5.0-45.45~22.04.1"
          },
          {
            "binary_name": "linux-modules-iwlwifi-6.5.0-45-generic",
            "binary_version": "6.5.0-45.45~22.04.1"
          },
          {
            "binary_name": "linux-source-6.5.0",
            "binary_version": "6.5.0-45.45~22.04.1"
          },
          {
            "binary_name": "linux-tools-6.5.0-45-generic",
            "binary_version": "6.5.0-45.45~22.04.1"
          },
          {
            "binary_name": "linux-tools-6.5.0-45-generic-64k",
            "binary_version": "6.5.0-45.45~22.04.1"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:22.04:LTS",
        "name": "linux-hwe-6.5",
        "purl": "pkg:deb/ubuntu/linux-hwe-6.5@6.5.0-45.45~22.04.1?arch=source\u0026distro=jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "6.5.0-14.14~22.04.1",
        "6.5.0-15.15~22.04.1",
        "6.5.0-17.17~22.04.1",
        "6.5.0-18.18~22.04.1",
        "6.5.0-21.21~22.04.1",
        "6.5.0-25.25~22.04.1",
        "6.5.0-26.26~22.04.1",
        "6.5.0-27.28~22.04.1",
        "6.5.0-28.29~22.04.1",
        "6.5.0-35.35~22.04.1",
        "6.5.0-41.41~22.04.2",
        "6.5.0-44.44~22.04.1",
        "6.5.0-45.45~22.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-buildinfo-6.8.0-138-generic",
            "binary_version": "6.8.0-138.138~22.04.1"
          },
          {
            "binary_name": "linux-buildinfo-6.8.0-138-generic-64k",
            "binary_version": "6.8.0-138.138~22.04.1"
          },
          {
            "binary_name": "linux-cloud-tools-6.8.0-138-generic",
            "binary_version": "6.8.0-138.138~22.04.1"
          },
          {
            "binary_name": "linux-headers-6.8.0-138-generic",
            "binary_version": "6.8.0-138.138~22.04.1"
          },
          {
            "binary_name": "linux-headers-6.8.0-138-generic-64k",
            "binary_version": "6.8.0-138.138~22.04.1"
          },
          {
            "binary_name": "linux-hwe-6.8-cloud-tools-6.8.0-138",
            "binary_version": "6.8.0-138.138~22.04.1"
          },
          {
            "binary_name": "linux-hwe-6.8-headers-6.8.0-138",
            "binary_version": "6.8.0-138.138~22.04.1"
          },
          {
            "binary_name": "linux-hwe-6.8-tools-6.8.0-138",
            "binary_version": "6.8.0-138.138~22.04.1"
          },
          {
            "binary_name": "linux-image-6.8.0-138-generic",
            "binary_version": "6.8.0-138.138~22.04.1"
          },
          {
            "binary_name": "linux-image-unsigned-6.8.0-138-generic",
            "binary_version": "6.8.0-138.138~22.04.1"
          },
          {
            "binary_name": "linux-image-unsigned-6.8.0-138-generic-64k",
            "binary_version": "6.8.0-138.138~22.04.1"
          },
          {
            "binary_name": "linux-modules-6.8.0-138-generic",
            "binary_version": "6.8.0-138.138~22.04.1"
          },
          {
            "binary_name": "linux-modules-6.8.0-138-generic-64k",
            "binary_version": "6.8.0-138.138~22.04.1"
          },
          {
            "binary_name": "linux-modules-extra-6.8.0-138-generic",
            "binary_version": "6.8.0-138.138~22.04.1"
          },
          {
            "binary_name": "linux-modules-ipu6-6.8.0-138-generic",
            "binary_version": "6.8.0-138.138~22.04.1"
          },
          {
            "binary_name": "linux-modules-iwlwifi-6.8.0-138-generic",
            "binary_version": "6.8.0-138.138~22.04.1"
          },
          {
            "binary_name": "linux-modules-usbio-6.8.0-138-generic",
            "binary_version": "6.8.0-138.138~22.04.1"
          },
          {
            "binary_name": "linux-tools-6.8.0-138-generic",
            "binary_version": "6.8.0-138.138~22.04.1"
          },
          {
            "binary_name": "linux-tools-6.8.0-138-generic-64k",
            "binary_version": "6.8.0-138.138~22.04.1"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:22.04:LTS",
        "name": "linux-hwe-6.8",
        "purl": "pkg:deb/ubuntu/linux-hwe-6.8@6.8.0-138.138~22.04.1?arch=source\u0026distro=jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "6.8.0-38.38~22.04.1",
        "6.8.0-39.39~22.04.1",
        "6.8.0-40.40~22.04.3",
        "6.8.0-45.45~22.04.1",
        "6.8.0-47.47~22.04.1",
        "6.8.0-48.48~22.04.1",
        "6.8.0-49.49~22.04.1",
        "6.8.0-50.51~22.04.1",
        "6.8.0-51.52~22.04.1",
        "6.8.0-52.53~22.04.1",
        "6.8.0-57.59~22.04.1",
        "6.8.0-58.60~22.04.1",
        "6.8.0-59.61~22.04.1",
        "6.8.0-60.63~22.04.1",
        "6.8.0-64.67~22.04.1",
        "6.8.0-65.68~22.04.1",
        "6.8.0-78.78~22.04.1",
        "6.8.0-79.79~22.04.1",
        "6.8.0-83.83~22.04.1",
        "6.8.0-84.84~22.04.1",
        "6.8.0-85.85~22.04.1",
        "6.8.0-86.87~22.04.1",
        "6.8.0-87.88~22.04.1",
        "6.8.0-88.89~22.04.2",
        "6.8.0-90.91~22.04.1",
        "6.8.0-94.96~22.04.1",
        "6.8.0-100.100~22.04.1",
        "6.8.0-101.101~22.04.1",
        "6.8.0-106.106~22.04.1",
        "6.8.0-107.107~22.04.1",
        "6.8.0-110.110~22.04.1",
        "6.8.0-111.111~22.04.1",
        "6.8.0-117.117~22.04.1",
        "6.8.0-124.124~22.04.1",
        "6.8.0-134.134~22.04.1",
        "6.8.0-136.136~22.04.1",
        "6.8.0-138.138~22.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-buildinfo-5.15.0-1111-ibm",
            "binary_version": "5.15.0-1111.115"
          },
          {
            "binary_name": "linux-headers-5.15.0-1111-ibm",
            "binary_version": "5.15.0-1111.115"
          },
          {
            "binary_name": "linux-ibm-cloud-tools-common",
            "binary_version": "5.15.0-1111.115"
          },
          {
            "binary_name": "linux-ibm-headers-5.15.0-1111",
            "binary_version": "5.15.0-1111.115"
          },
          {
            "binary_name": "linux-ibm-source-5.15.0",
            "binary_version": "5.15.0-1111.115"
          },
          {
            "binary_name": "linux-ibm-tools-5.15.0-1111",
            "binary_version": "5.15.0-1111.115"
          },
          {
            "binary_name": "linux-ibm-tools-common",
            "binary_version": "5.15.0-1111.115"
          },
          {
            "binary_name": "linux-image-unsigned-5.15.0-1111-ibm",
            "binary_version": "5.15.0-1111.115"
          },
          {
            "binary_name": "linux-modules-5.15.0-1111-ibm",
            "binary_version": "5.15.0-1111.115"
          },
          {
            "binary_name": "linux-modules-extra-5.15.0-1111-ibm",
            "binary_version": "5.15.0-1111.115"
          },
          {
            "binary_name": "linux-tools-5.15.0-1111-ibm",
            "binary_version": "5.15.0-1111.115"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:22.04:LTS",
        "name": "linux-ibm",
        "purl": "pkg:deb/ubuntu/linux-ibm@5.15.0-1111.115?arch=source\u0026distro=jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "5.15.0-1002.2",
        "5.15.0-1003.3",
        "5.15.0-1004.4",
        "5.15.0-1005.5",
        "5.15.0-1007.8",
        "5.15.0-1009.11",
        "5.15.0-1010.12",
        "5.15.0-1012.14",
        "5.15.0-1013.15",
        "5.15.0-1015.17",
        "5.15.0-1017.20",
        "5.15.0-1018.21",
        "5.15.0-1021.24",
        "5.15.0-1022.25",
        "5.15.0-1023.26",
        "5.15.0-1025.28",
        "5.15.0-1026.29",
        "5.15.0-1027.30",
        "5.15.0-1028.31",
        "5.15.0-1029.32",
        "5.15.0-1030.33",
        "5.15.0-1031.34",
        "5.15.0-1032.35",
        "5.15.0-1033.36",
        "5.15.0-1034.37",
        "5.15.0-1035.38",
        "5.15.0-1036.39",
        "5.15.0-1037.40",
        "5.15.0-1038.41",
        "5.15.0-1040.43",
        "5.15.0-1041.44",
        "5.15.0-1042.45",
        "5.15.0-1043.46",
        "5.15.0-1044.47",
        "5.15.0-1045.48",
        "5.15.0-1046.49",
        "5.15.0-1047.50",
        "5.15.0-1048.51",
        "5.15.0-1049.52",
        "5.15.0-1050.53",
        "5.15.0-1053.56",
        "5.15.0-1054.57",
        "5.15.0-1055.58",
        "5.15.0-1056.59",
        "5.15.0-1057.60",
        "5.15.0-1058.61",
        "5.15.0-1059.62",
        "5.15.0-1060.63",
        "5.15.0-1061.64",
        "5.15.0-1062.65",
        "5.15.0-1063.66",
        "5.15.0-1064.67",
        "5.15.0-1065.68",
        "5.15.0-1066.69",
        "5.15.0-1067.70",
        "5.15.0-1068.71",
        "5.15.0-1069.72",
        "5.15.0-1070.73",
        "5.15.0-1071.74",
        "5.15.0-1072.75",
        "5.15.0-1073.76",
        "5.15.0-1074.77",
        "5.15.0-1075.78",
        "5.15.0-1076.79",
        "5.15.0-1077.80",
        "5.15.0-1078.81",
        "5.15.0-1079.82",
        "5.15.0-1080.83",
        "5.15.0-1081.84",
        "5.15.0-1084.87",
        "5.15.0-1085.88",
        "5.15.0-1086.89",
        "5.15.0-1087.90",
        "5.15.0-1089.92",
        "5.15.0-1090.93",
        "5.15.0-1091.94",
        "5.15.0-1092.95",
        "5.15.0-1093.96",
        "5.15.0-1094.97",
        "5.15.0-1095.98",
        "5.15.0-1097.100",
        "5.15.0-1098.101",
        "5.15.0-1099.102",
        "5.15.0-1100.103",
        "5.15.0-1102.105",
        "5.15.0-1103.106",
        "5.15.0-1105.109",
        "5.15.0-1106.110",
        "5.15.0-1107.111",
        "5.15.0-1108.112",
        "5.15.0-1109.113",
        "5.15.0-1110.114",
        "5.15.0-1111.115"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-buildinfo-6.8.0-1066-ibm",
            "binary_version": "6.8.0-1066.67~22.04.1"
          },
          {
            "binary_name": "linux-headers-6.8.0-1066-ibm",
            "binary_version": "6.8.0-1066.67~22.04.1"
          },
          {
            "binary_name": "linux-ibm-6.8-headers-6.8.0-1066",
            "binary_version": "6.8.0-1066.67~22.04.1"
          },
          {
            "binary_name": "linux-ibm-6.8-tools-6.8.0-1066",
            "binary_version": "6.8.0-1066.67~22.04.1"
          },
          {
            "binary_name": "linux-image-unsigned-6.8.0-1066-ibm",
            "binary_version": "6.8.0-1066.67~22.04.1"
          },
          {
            "binary_name": "linux-modules-6.8.0-1066-ibm",
            "binary_version": "6.8.0-1066.67~22.04.1"
          },
          {
            "binary_name": "linux-modules-extra-6.8.0-1066-ibm",
            "binary_version": "6.8.0-1066.67~22.04.1"
          },
          {
            "binary_name": "linux-modules-iwlwifi-6.8.0-1066-ibm",
            "binary_version": "6.8.0-1066.67~22.04.1"
          },
          {
            "binary_name": "linux-tools-6.8.0-1066-ibm",
            "binary_version": "6.8.0-1066.67~22.04.1"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:22.04:LTS",
        "name": "linux-ibm-6.8",
        "purl": "pkg:deb/ubuntu/linux-ibm-6.8@6.8.0-1066.67~22.04.1?arch=source\u0026distro=jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "6.8.0-1008.8~22.04.1",
        "6.8.0-1010.10~22.04.1",
        "6.8.0-1011.11~22.04.1",
        "6.8.0-1012.12~22.04.1",
        "6.8.0-1013.13~22.04.1",
        "6.8.0-1014.14~22.04.1",
        "6.8.0-1015.15~22.04.1",
        "6.8.0-1016.16~22.04.1",
        "6.8.0-1017.17~22.04.1",
        "6.8.0-1018.18~22.04.1",
        "6.8.0-1019.19~22.04.1",
        "6.8.0-1023.23~22.04.1",
        "6.8.0-1024.24~22.04.1",
        "6.8.0-1025.25~22.04.1",
        "6.8.0-1026.26~22.04.1",
        "6.8.0-1027.27~22.04.1",
        "6.8.0-1028.28~22.04.1",
        "6.8.0-1029.29~22.04.1",
        "6.8.0-1030.30~22.04.1",
        "6.8.0-1033.33~22.04.1",
        "6.8.0-1036.36~22.04.1",
        "6.8.0-1037.37~22.04.1",
        "6.8.0-1038.38~22.04.1",
        "6.8.0-1039.39~22.04.1",
        "6.8.0-1040.40~22.04.1",
        "6.8.0-1041.41~22.04.1",
        "6.8.0-1042.42~22.04.1",
        "6.8.0-1043.43~22.04.1",
        "6.8.0-1044.44~22.04.1",
        "6.8.0-1045.45~22.04.1",
        "6.8.0-1049.49~22.04.1",
        "6.8.0-1050.50~22.04.1",
        "6.8.0-1051.51~22.04.1",
        "6.8.0-1052.52~22.04.1",
        "6.8.0-1055.56~22.04.1",
        "6.8.0-1057.58~22.04.1",
        "6.8.0-1060.61~22.04.1",
        "6.8.0-1061.62~22.04.1",
        "6.8.0-1062.63~22.04.1",
        "6.8.0-1063.64~22.04.1",
        "6.8.0-1066.67~22.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-buildinfo-5.15.0-1073-intel-iot-realtime",
            "binary_version": "5.15.0-1073.75"
          },
          {
            "binary_name": "linux-cloud-tools-5.15.0-1073-intel-iot-realtime",
            "binary_version": "5.15.0-1073.75"
          },
          {
            "binary_name": "linux-headers-5.15.0-1073-intel-iot-realtime",
            "binary_version": "5.15.0-1073.75"
          },
          {
            "binary_name": "linux-image-unsigned-5.15.0-1073-intel-iot-realtime",
            "binary_version": "5.15.0-1073.75"
          },
          {
            "binary_name": "linux-intel-iot-realtime-cloud-tools-5.15.0-1073",
            "binary_version": "5.15.0-1073.75"
          },
          {
            "binary_name": "linux-intel-iot-realtime-cloud-tools-common",
            "binary_version": "5.15.0-1073.75"
          },
          {
            "binary_name": "linux-intel-iot-realtime-headers-5.15.0-1073",
            "binary_version": "5.15.0-1073.75"
          },
          {
            "binary_name": "linux-intel-iot-realtime-tools-5.15.0-1073",
            "binary_version": "5.15.0-1073.75"
          },
          {
            "binary_name": "linux-intel-iot-realtime-tools-common",
            "binary_version": "5.15.0-1073.75"
          },
          {
            "binary_name": "linux-intel-iot-realtime-tools-host",
            "binary_version": "5.15.0-1073.75"
          },
          {
            "binary_name": "linux-modules-5.15.0-1073-intel-iot-realtime",
            "binary_version": "5.15.0-1073.75"
          },
          {
            "binary_name": "linux-modules-extra-5.15.0-1073-intel-iot-realtime",
            "binary_version": "5.15.0-1073.75"
          },
          {
            "binary_name": "linux-tools-5.15.0-1073-intel-iot-realtime",
            "binary_version": "5.15.0-1073.75"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:22.04:LTS",
        "name": "linux-intel-iot-realtime",
        "purl": "pkg:deb/ubuntu/linux-intel-iot-realtime@5.15.0-1073.75?arch=source\u0026distro=jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "5.15.0-1073.75"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-buildinfo-5.15.0-1112-intel-iotg",
            "binary_version": "5.15.0-1112.118"
          },
          {
            "binary_name": "linux-cloud-tools-5.15.0-1112-intel-iotg",
            "binary_version": "5.15.0-1112.118"
          },
          {
            "binary_name": "linux-headers-5.15.0-1112-intel-iotg",
            "binary_version": "5.15.0-1112.118"
          },
          {
            "binary_name": "linux-image-unsigned-5.15.0-1112-intel-iotg",
            "binary_version": "5.15.0-1112.118"
          },
          {
            "binary_name": "linux-intel-iotg-cloud-tools-5.15.0-1112",
            "binary_version": "5.15.0-1112.118"
          },
          {
            "binary_name": "linux-intel-iotg-cloud-tools-common",
            "binary_version": "5.15.0-1112.118"
          },
          {
            "binary_name": "linux-intel-iotg-headers-5.15.0-1112",
            "binary_version": "5.15.0-1112.118"
          },
          {
            "binary_name": "linux-intel-iotg-tools-5.15.0-1112",
            "binary_version": "5.15.0-1112.118"
          },
          {
            "binary_name": "linux-intel-iotg-tools-common",
            "binary_version": "5.15.0-1112.118"
          },
          {
            "binary_name": "linux-intel-iotg-tools-host",
            "binary_version": "5.15.0-1112.118"
          },
          {
            "binary_name": "linux-modules-5.15.0-1112-intel-iotg",
            "binary_version": "5.15.0-1112.118"
          },
          {
            "binary_name": "linux-modules-extra-5.15.0-1112-intel-iotg",
            "binary_version": "5.15.0-1112.118"
          },
          {
            "binary_name": "linux-modules-iwlwifi-5.15.0-1112-intel-iotg",
            "binary_version": "5.15.0-1112.118"
          },
          {
            "binary_name": "linux-tools-5.15.0-1112-intel-iotg",
            "binary_version": "5.15.0-1112.118"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:22.04:LTS",
        "name": "linux-intel-iotg",
        "purl": "pkg:deb/ubuntu/linux-intel-iotg@5.15.0-1112.118?arch=source\u0026distro=jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "5.15.0-1004.6",
        "5.15.0-1008.11",
        "5.15.0-1010.14",
        "5.15.0-1013.17",
        "5.15.0-1015.20",
        "5.15.0-1016.21",
        "5.15.0-1017.22",
        "5.15.0-1018.23",
        "5.15.0-1021.26",
        "5.15.0-1023.28",
        "5.15.0-1025.30",
        "5.15.0-1026.31",
        "5.15.0-1027.32",
        "5.15.0-1028.33",
        "5.15.0-1030.35",
        "5.15.0-1031.36",
        "5.15.0-1033.38",
        "5.15.0-1034.39",
        "5.15.0-1035.40",
        "5.15.0-1036.41",
        "5.15.0-1037.42",
        "5.15.0-1038.43",
        "5.15.0-1039.45",
        "5.15.0-1040.46",
        "5.15.0-1043.49",
        "5.15.0-1045.51",
        "5.15.0-1046.52",
        "5.15.0-1047.53",
        "5.15.0-1048.54",
        "5.15.0-1049.55",
        "5.15.0-1050.56",
        "5.15.0-1051.57",
        "5.15.0-1052.58",
        "5.15.0-1055.61",
        "5.15.0-1057.63",
        "5.15.0-1058.64",
        "5.15.0-1059.65",
        "5.15.0-1060.66",
        "5.15.0-1061.67",
        "5.15.0-1062.68",
        "5.15.0-1063.69",
        "5.15.0-1064.70",
        "5.15.0-1065.71",
        "5.15.0-1066.72",
        "5.15.0-1067.73",
        "5.15.0-1071.77",
        "5.15.0-1072.78",
        "5.15.0-1073.79",
        "5.15.0-1074.80",
        "5.15.0-1075.81",
        "5.15.0-1076.82",
        "5.15.0-1077.83",
        "5.15.0-1078.84",
        "5.15.0-1079.85",
        "5.15.0-1080.86",
        "5.15.0-1081.87",
        "5.15.0-1082.88",
        "5.15.0-1083.89",
        "5.15.0-1084.90",
        "5.15.0-1085.91",
        "5.15.0-1086.92",
        "5.15.0-1087.93",
        "5.15.0-1088.94",
        "5.15.0-1090.96",
        "5.15.0-1091.97",
        "5.15.0-1092.98",
        "5.15.0-1093.99",
        "5.15.0-1094.100",
        "5.15.0-1095.101",
        "5.15.0-1096.102",
        "5.15.0-1098.104",
        "5.15.0-1099.105",
        "5.15.0-1100.106",
        "5.15.0-1101.107",
        "5.15.0-1103.109",
        "5.15.0-1104.110",
        "5.15.0-1106.112",
        "5.15.0-1107.113",
        "5.15.0-1108.114",
        "5.15.0-1109.115",
        "5.15.0-1110.116",
        "5.15.0-1111.117",
        "5.15.0-1112.118"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-buildinfo-5.15.0-1109-kvm",
            "binary_version": "5.15.0-1109.114"
          },
          {
            "binary_name": "linux-headers-5.15.0-1109-kvm",
            "binary_version": "5.15.0-1109.114"
          },
          {
            "binary_name": "linux-image-unsigned-5.15.0-1109-kvm",
            "binary_version": "5.15.0-1109.114"
          },
          {
            "binary_name": "linux-kvm-headers-5.15.0-1109",
            "binary_version": "5.15.0-1109.114"
          },
          {
            "binary_name": "linux-kvm-tools-5.15.0-1109",
            "binary_version": "5.15.0-1109.114"
          },
          {
            "binary_name": "linux-modules-5.15.0-1109-kvm",
            "binary_version": "5.15.0-1109.114"
          },
          {
            "binary_name": "linux-tools-5.15.0-1109-kvm",
            "binary_version": "5.15.0-1109.114"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:22.04:LTS",
        "name": "linux-kvm",
        "purl": "pkg:deb/ubuntu/linux-kvm@5.15.0-1109.114?arch=source\u0026distro=jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "5.13.0-1004.4",
        "5.13.0-1006.6+22.04.1",
        "5.13.0-1007.7+22.04.1",
        "5.13.0-1010.11+22.04.1",
        "5.15.0-1002.2",
        "5.15.0-1004.4",
        "5.15.0-1005.5",
        "5.15.0-1007.7",
        "5.15.0-1008.8",
        "5.15.0-1010.11",
        "5.15.0-1012.14",
        "5.15.0-1013.16",
        "5.15.0-1016.19",
        "5.15.0-1017.21",
        "5.15.0-1018.22",
        "5.15.0-1019.23",
        "5.15.0-1020.24",
        "5.15.0-1021.26",
        "5.15.0-1024.29",
        "5.15.0-1025.30",
        "5.15.0-1026.31",
        "5.15.0-1028.33",
        "5.15.0-1029.34",
        "5.15.0-1030.35",
        "5.15.0-1031.36",
        "5.15.0-1032.37",
        "5.15.0-1033.38",
        "5.15.0-1034.39",
        "5.15.0-1035.40",
        "5.15.0-1037.42",
        "5.15.0-1038.43",
        "5.15.0-1039.44",
        "5.15.0-1040.45",
        "5.15.0-1041.46",
        "5.15.0-1042.47",
        "5.15.0-1044.49",
        "5.15.0-1045.50",
        "5.15.0-1046.51",
        "5.15.0-1047.52",
        "5.15.0-1048.53",
        "5.15.0-1049.54",
        "5.15.0-1050.55",
        "5.15.0-1051.56",
        "5.15.0-1052.57",
        "5.15.0-1053.58",
        "5.15.0-1054.59",
        "5.15.0-1057.62",
        "5.15.0-1058.63",
        "5.15.0-1059.64",
        "5.15.0-1060.65",
        "5.15.0-1061.66",
        "5.15.0-1062.67",
        "5.15.0-1063.68",
        "5.15.0-1064.69",
        "5.15.0-1065.70",
        "5.15.0-1066.71",
        "5.15.0-1067.72",
        "5.15.0-1068.73",
        "5.15.0-1069.74",
        "5.15.0-1070.75",
        "5.15.0-1071.76",
        "5.15.0-1072.77",
        "5.15.0-1073.78",
        "5.15.0-1076.81",
        "5.15.0-1077.82",
        "5.15.0-1078.83",
        "5.15.0-1079.84",
        "5.15.0-1080.85",
        "5.15.0-1081.86",
        "5.15.0-1082.87",
        "5.15.0-1083.88",
        "5.15.0-1084.89",
        "5.15.0-1085.90",
        "5.15.0-1086.91",
        "5.15.0-1087.92",
        "5.15.0-1088.93",
        "5.15.0-1089.94",
        "5.15.0-1090.95",
        "5.15.0-1091.96",
        "5.15.0-1092.97",
        "5.15.0-1093.98",
        "5.15.0-1095.100",
        "5.15.0-1096.101",
        "5.15.0-1097.102",
        "5.15.0-1098.103",
        "5.15.0-1100.105",
        "5.15.0-1101.106",
        "5.15.0-1103.108",
        "5.15.0-1104.109",
        "5.15.0-1105.110",
        "5.15.0-1106.111",
        "5.15.0-1107.112",
        "5.15.0-1108.113",
        "5.15.0-1109.114"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-buildinfo-5.15.0-195-lowlatency",
            "binary_version": "5.15.0-195.205"
          },
          {
            "binary_name": "linux-buildinfo-5.15.0-195-lowlatency-64k",
            "binary_version": "5.15.0-195.205"
          },
          {
            "binary_name": "linux-cloud-tools-5.15.0-195-lowlatency",
            "binary_version": "5.15.0-195.205"
          },
          {
            "binary_name": "linux-headers-5.15.0-195-lowlatency",
            "binary_version": "5.15.0-195.205"
          },
          {
            "binary_name": "linux-headers-5.15.0-195-lowlatency-64k",
            "binary_version": "5.15.0-195.205"
          },
          {
            "binary_name": "linux-image-unsigned-5.15.0-195-lowlatency",
            "binary_version": "5.15.0-195.205"
          },
          {
            "binary_name": "linux-image-unsigned-5.15.0-195-lowlatency-64k",
            "binary_version": "5.15.0-195.205"
          },
          {
            "binary_name": "linux-lowlatency-cloud-tools-5.15.0-195",
            "binary_version": "5.15.0-195.205"
          },
          {
            "binary_name": "linux-lowlatency-headers-5.15.0-195",
            "binary_version": "5.15.0-195.205"
          },
          {
            "binary_name": "linux-lowlatency-tools-5.15.0-195",
            "binary_version": "5.15.0-195.205"
          },
          {
            "binary_name": "linux-modules-5.15.0-195-lowlatency",
            "binary_version": "5.15.0-195.205"
          },
          {
            "binary_name": "linux-modules-5.15.0-195-lowlatency-64k",
            "binary_version": "5.15.0-195.205"
          },
          {
            "binary_name": "linux-modules-iwlwifi-5.15.0-195-lowlatency",
            "binary_version": "5.15.0-195.205"
          },
          {
            "binary_name": "linux-tools-5.15.0-195-lowlatency",
            "binary_version": "5.15.0-195.205"
          },
          {
            "binary_name": "linux-tools-5.15.0-195-lowlatency-64k",
            "binary_version": "5.15.0-195.205"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:22.04:LTS",
        "name": "linux-lowlatency",
        "purl": "pkg:deb/ubuntu/linux-lowlatency@5.15.0-195.205?arch=source\u0026distro=jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "5.15.0-22.22",
        "5.15.0-23.23",
        "5.15.0-24.24",
        "5.15.0-27.28",
        "5.15.0-30.31",
        "5.15.0-33.34",
        "5.15.0-35.36",
        "5.15.0-37.39",
        "5.15.0-39.42",
        "5.15.0-40.43",
        "5.15.0-41.44",
        "5.15.0-43.46",
        "5.15.0-46.49",
        "5.15.0-47.53",
        "5.15.0-48.54",
        "5.15.0-50.56",
        "5.15.0-52.58",
        "5.15.0-53.59",
        "5.15.0-56.62",
        "5.15.0-57.63",
        "5.15.0-58.64",
        "5.15.0-60.66",
        "5.15.0-67.74",
        "5.15.0-69.76",
        "5.15.0-70.77",
        "5.15.0-71.78",
        "5.15.0-72.79",
        "5.15.0-73.80",
        "5.15.0-75.82",
        "5.15.0-76.83",
        "5.15.0-78.85",
        "5.15.0-79.88",
        "5.15.0-82.91",
        "5.15.0-83.92",
        "5.15.0-84.93",
        "5.15.0-86.95",
        "5.15.0-87.96",
        "5.15.0-88.98",
        "5.15.0-89.99",
        "5.15.0-91.101",
        "5.15.0-92.102",
        "5.15.0-94.104",
        "5.15.0-97.107",
        "5.15.0-100.110",
        "5.15.0-101.111",
        "5.15.0-102.112",
        "5.15.0-105.115",
        "5.15.0-106.116",
        "5.15.0-107.117",
        "5.15.0-110.120",
        "5.15.0-113.123",
        "5.15.0-116.126",
        "5.15.0-117.127",
        "5.15.0-118.128",
        "5.15.0-119.129",
        "5.15.0-121.131",
        "5.15.0-122.132",
        "5.15.0-124.134",
        "5.15.0-125.135",
        "5.15.0-126.136",
        "5.15.0-127.137",
        "5.15.0-128.138",
        "5.15.0-129.139",
        "5.15.0-131.141",
        "5.15.0-133.143",
        "5.15.0-134.145",
        "5.15.0-135.146",
        "5.15.0-136.147",
        "5.15.0-138.148",
        "5.15.0-139.149",
        "5.15.0-140.150",
        "5.15.0-141.151",
        "5.15.0-142.152",
        "5.15.0-143.153",
        "5.15.0-144.157",
        "5.15.0-145.158",
        "5.15.0-152.162",
        "5.15.0-153.163",
        "5.15.0-156.166",
        "5.15.0-157.167",
        "5.15.0-160.170",
        "5.15.0-161.171",
        "5.15.0-163.173",
        "5.15.0-164.174",
        "5.15.0-168.178",
        "5.15.0-170.180",
        "5.15.0-171.181",
        "5.15.0-173.183",
        "5.15.0-174.184",
        "5.15.0-175.185",
        "5.15.0-177.187",
        "5.15.0-178.188",
        "5.15.0-179.189",
        "5.15.0-181.191",
        "5.15.0-183.193",
        "5.15.0-184.194",
        "5.15.0-190.200",
        "5.15.0-191.201",
        "5.15.0-194.204",
        "5.15.0-195.205"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-buildinfo-5.19.0-1030-lowlatency",
            "binary_version": "5.19.0-1030.30"
          },
          {
            "binary_name": "linux-buildinfo-5.19.0-1030-lowlatency-64k",
            "binary_version": "5.19.0-1030.30"
          },
          {
            "binary_name": "linux-cloud-tools-5.19.0-1030-lowlatency",
            "binary_version": "5.19.0-1030.30"
          },
          {
            "binary_name": "linux-headers-5.19.0-1030-lowlatency",
            "binary_version": "5.19.0-1030.30"
          },
          {
            "binary_name": "linux-headers-5.19.0-1030-lowlatency-64k",
            "binary_version": "5.19.0-1030.30"
          },
          {
            "binary_name": "linux-image-unsigned-5.19.0-1030-lowlatency",
            "binary_version": "5.19.0-1030.30"
          },
          {
            "binary_name": "linux-image-unsigned-5.19.0-1030-lowlatency-64k",
            "binary_version": "5.19.0-1030.30"
          },
          {
            "binary_name": "linux-lowlatency-hwe-5.19-cloud-tools-5.19.0-1030",
            "binary_version": "5.19.0-1030.30"
          },
          {
            "binary_name": "linux-lowlatency-hwe-5.19-cloud-tools-common",
            "binary_version": "5.19.0-1030.30"
          },
          {
            "binary_name": "linux-lowlatency-hwe-5.19-headers-5.19.0-1030",
            "binary_version": "5.19.0-1030.30"
          },
          {
            "binary_name": "linux-lowlatency-hwe-5.19-tools-5.19.0-1030",
            "binary_version": "5.19.0-1030.30"
          },
          {
            "binary_name": "linux-lowlatency-hwe-5.19-tools-common",
            "binary_version": "5.19.0-1030.30"
          },
          {
            "binary_name": "linux-lowlatency-hwe-5.19-tools-host",
            "binary_version": "5.19.0-1030.30"
          },
          {
            "binary_name": "linux-modules-5.19.0-1030-lowlatency",
            "binary_version": "5.19.0-1030.30"
          },
          {
            "binary_name": "linux-modules-5.19.0-1030-lowlatency-64k",
            "binary_version": "5.19.0-1030.30"
          },
          {
            "binary_name": "linux-modules-ipu6-5.19.0-1030-lowlatency",
            "binary_version": "5.19.0-1030.30"
          },
          {
            "binary_name": "linux-modules-ivsc-5.19.0-1030-lowlatency",
            "binary_version": "5.19.0-1030.30"
          },
          {
            "binary_name": "linux-modules-iwlwifi-5.19.0-1030-lowlatency",
            "binary_version": "5.19.0-1030.30"
          },
          {
            "binary_name": "linux-tools-5.19.0-1030-lowlatency",
            "binary_version": "5.19.0-1030.30"
          },
          {
            "binary_name": "linux-tools-5.19.0-1030-lowlatency-64k",
            "binary_version": "5.19.0-1030.30"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:22.04:LTS",
        "name": "linux-lowlatency-hwe-5.19",
        "purl": "pkg:deb/ubuntu/linux-lowlatency-hwe-5.19@5.19.0-1030.30?arch=source\u0026distro=jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "5.19.0-1017.18~22.04.1",
        "5.19.0-1018.19~22.04.1",
        "5.19.0-1021.22~22.04.1",
        "5.19.0-1022.23~22.04.1",
        "5.19.0-1023.24~22.04.1",
        "5.19.0-1024.25~22.04.1",
        "5.19.0-1025.26~22.04.1",
        "5.19.0-1027.28~22.04.1",
        "5.19.0-1028.29~22.04.1",
        "5.19.0-1030.30"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-buildinfo-6.2.0-1018-lowlatency",
            "binary_version": "6.2.0-1018.18~22.04.1"
          },
          {
            "binary_name": "linux-buildinfo-6.2.0-1018-lowlatency-64k",
            "binary_version": "6.2.0-1018.18~22.04.1"
          },
          {
            "binary_name": "linux-cloud-tools-6.2.0-1018-lowlatency",
            "binary_version": "6.2.0-1018.18~22.04.1"
          },
          {
            "binary_name": "linux-headers-6.2.0-1018-lowlatency",
            "binary_version": "6.2.0-1018.18~22.04.1"
          },
          {
            "binary_name": "linux-headers-6.2.0-1018-lowlatency-64k",
            "binary_version": "6.2.0-1018.18~22.04.1"
          },
          {
            "binary_name": "linux-image-unsigned-6.2.0-1018-lowlatency",
            "binary_version": "6.2.0-1018.18~22.04.1"
          },
          {
            "binary_name": "linux-image-unsigned-6.2.0-1018-lowlatency-64k",
            "binary_version": "6.2.0-1018.18~22.04.1"
          },
          {
            "binary_name": "linux-lowlatency-hwe-6.2-cloud-tools-6.2.0-1018",
            "binary_version": "6.2.0-1018.18~22.04.1"
          },
          {
            "binary_name": "linux-lowlatency-hwe-6.2-cloud-tools-common",
            "binary_version": "6.2.0-1018.18~22.04.1"
          },
          {
            "binary_name": "linux-lowlatency-hwe-6.2-headers-6.2.0-1018",
            "binary_version": "6.2.0-1018.18~22.04.1"
          },
          {
            "binary_name": "linux-lowlatency-hwe-6.2-tools-6.2.0-1018",
            "binary_version": "6.2.0-1018.18~22.04.1"
          },
          {
            "binary_name": "linux-lowlatency-hwe-6.2-tools-common",
            "binary_version": "6.2.0-1018.18~22.04.1"
          },
          {
            "binary_name": "linux-lowlatency-hwe-6.2-tools-host",
            "binary_version": "6.2.0-1018.18~22.04.1"
          },
          {
            "binary_name": "linux-modules-6.2.0-1018-lowlatency",
            "binary_version": "6.2.0-1018.18~22.04.1"
          },
          {
            "binary_name": "linux-modules-6.2.0-1018-lowlatency-64k",
            "binary_version": "6.2.0-1018.18~22.04.1"
          },
          {
            "binary_name": "linux-modules-ipu6-6.2.0-1018-lowlatency",
            "binary_version": "6.2.0-1018.18~22.04.1"
          },
          {
            "binary_name": "linux-modules-ivsc-6.2.0-1018-lowlatency",
            "binary_version": "6.2.0-1018.18~22.04.1"
          },
          {
            "binary_name": "linux-modules-iwlwifi-6.2.0-1018-lowlatency",
            "binary_version": "6.2.0-1018.18~22.04.1"
          },
          {
            "binary_name": "linux-tools-6.2.0-1018-lowlatency",
            "binary_version": "6.2.0-1018.18~22.04.1"
          },
          {
            "binary_name": "linux-tools-6.2.0-1018-lowlatency-64k",
            "binary_version": "6.2.0-1018.18~22.04.1"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:22.04:LTS",
        "name": "linux-lowlatency-hwe-6.2",
        "purl": "pkg:deb/ubuntu/linux-lowlatency-hwe-6.2@6.2.0-1018.18~22.04.1?arch=source\u0026distro=jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "6.2.0-1008.8~22.04.1",
        "6.2.0-1009.9~22.04.1",
        "6.2.0-1011.11~22.04.1",
        "6.2.0-1012.12~22.04.1",
        "6.2.0-1013.13~22.04.1",
        "6.2.0-1014.14~22.04.1",
        "6.2.0-1015.15~22.04.1",
        "6.2.0-1016.16~22.04.1",
        "6.2.0-1017.17~22.04.1",
        "6.2.0-1018.18~22.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-buildinfo-6.5.0-45-lowlatency",
            "binary_version": "6.5.0-45.45.1~22.04.1"
          },
          {
            "binary_name": "linux-buildinfo-6.5.0-45-lowlatency-64k",
            "binary_version": "6.5.0-45.45.1~22.04.1"
          },
          {
            "binary_name": "linux-cloud-tools-6.5.0-45-lowlatency",
            "binary_version": "6.5.0-45.45.1~22.04.1"
          },
          {
            "binary_name": "linux-headers-6.5.0-45-lowlatency",
            "binary_version": "6.5.0-45.45.1~22.04.1"
          },
          {
            "binary_name": "linux-headers-6.5.0-45-lowlatency-64k",
            "binary_version": "6.5.0-45.45.1~22.04.1"
          },
          {
            "binary_name": "linux-image-unsigned-6.5.0-45-lowlatency",
            "binary_version": "6.5.0-45.45.1~22.04.1"
          },
          {
            "binary_name": "linux-image-unsigned-6.5.0-45-lowlatency-64k",
            "binary_version": "6.5.0-45.45.1~22.04.1"
          },
          {
            "binary_name": "linux-lowlatency-hwe-6.5-cloud-tools-6.5.0-45",
            "binary_version": "6.5.0-45.45.1~22.04.1"
          },
          {
            "binary_name": "linux-lowlatency-hwe-6.5-cloud-tools-common",
            "binary_version": "6.5.0-45.45.1~22.04.1"
          },
          {
            "binary_name": "linux-lowlatency-hwe-6.5-headers-6.5.0-45",
            "binary_version": "6.5.0-45.45.1~22.04.1"
          },
          {
            "binary_name": "linux-lowlatency-hwe-6.5-lib-rust-6.5.0-45-lowlatency",
            "binary_version": "6.5.0-45.45.1~22.04.1"
          },
          {
            "binary_name": "linux-lowlatency-hwe-6.5-tools-6.5.0-45",
            "binary_version": "6.5.0-45.45.1~22.04.1"
          },
          {
            "binary_name": "linux-lowlatency-hwe-6.5-tools-common",
            "binary_version": "6.5.0-45.45.1~22.04.1"
          },
          {
            "binary_name": "linux-lowlatency-hwe-6.5-tools-host",
            "binary_version": "6.5.0-45.45.1~22.04.1"
          },
          {
            "binary_name": "linux-modules-6.5.0-45-lowlatency",
            "binary_version": "6.5.0-45.45.1~22.04.1"
          },
          {
            "binary_name": "linux-modules-6.5.0-45-lowlatency-64k",
            "binary_version": "6.5.0-45.45.1~22.04.1"
          },
          {
            "binary_name": "linux-modules-iwlwifi-6.5.0-45-lowlatency",
            "binary_version": "6.5.0-45.45.1~22.04.1"
          },
          {
            "binary_name": "linux-tools-6.5.0-45-lowlatency",
            "binary_version": "6.5.0-45.45.1~22.04.1"
          },
          {
            "binary_name": "linux-tools-6.5.0-45-lowlatency-64k",
            "binary_version": "6.5.0-45.45.1~22.04.1"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:22.04:LTS",
        "name": "linux-lowlatency-hwe-6.5",
        "purl": "pkg:deb/ubuntu/linux-lowlatency-hwe-6.5@6.5.0-45.45.1~22.04.1?arch=source\u0026distro=jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "6.5.0-14.14.1~22.04.1",
        "6.5.0-15.15.1.1~22.04.1",
        "6.5.0-17.17.1.1.1~22.04.1",
        "6.5.0-21.21.1~22.04.1",
        "6.5.0-25.25.1~22.04.1",
        "6.5.0-26.26.1~22.04.1",
        "6.5.0-27.28.1~22.04.1",
        "6.5.0-28.29.1~22.04.1",
        "6.5.0-35.35.1~22.04.1",
        "6.5.0-41.41.1~22.04.1",
        "6.5.0-42.42.1~22.04.1",
        "6.5.0-44.44.1~22.04.1",
        "6.5.0-45.45.1~22.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-buildinfo-6.8.0-146-lowlatency",
            "binary_version": "6.8.0-146.146.1~22.04.1"
          },
          {
            "binary_name": "linux-buildinfo-6.8.0-146-lowlatency-64k",
            "binary_version": "6.8.0-146.146.1~22.04.1"
          },
          {
            "binary_name": "linux-cloud-tools-6.8.0-146-lowlatency",
            "binary_version": "6.8.0-146.146.1~22.04.1"
          },
          {
            "binary_name": "linux-headers-6.8.0-146-lowlatency",
            "binary_version": "6.8.0-146.146.1~22.04.1"
          },
          {
            "binary_name": "linux-headers-6.8.0-146-lowlatency-64k",
            "binary_version": "6.8.0-146.146.1~22.04.1"
          },
          {
            "binary_name": "linux-image-unsigned-6.8.0-146-lowlatency",
            "binary_version": "6.8.0-146.146.1~22.04.1"
          },
          {
            "binary_name": "linux-image-unsigned-6.8.0-146-lowlatency-64k",
            "binary_version": "6.8.0-146.146.1~22.04.1"
          },
          {
            "binary_name": "linux-lowlatency-hwe-6.8-cloud-tools-6.8.0-146",
            "binary_version": "6.8.0-146.146.1~22.04.1"
          },
          {
            "binary_name": "linux-lowlatency-hwe-6.8-headers-6.8.0-146",
            "binary_version": "6.8.0-146.146.1~22.04.1"
          },
          {
            "binary_name": "linux-lowlatency-hwe-6.8-lib-rust-6.8.0-146-lowlatency",
            "binary_version": "6.8.0-146.146.1~22.04.1"
          },
          {
            "binary_name": "linux-lowlatency-hwe-6.8-tools-6.8.0-146",
            "binary_version": "6.8.0-146.146.1~22.04.1"
          },
          {
            "binary_name": "linux-modules-6.8.0-146-lowlatency",
            "binary_version": "6.8.0-146.146.1~22.04.1"
          },
          {
            "binary_name": "linux-modules-6.8.0-146-lowlatency-64k",
            "binary_version": "6.8.0-146.146.1~22.04.1"
          },
          {
            "binary_name": "linux-modules-iwlwifi-6.8.0-146-lowlatency",
            "binary_version": "6.8.0-146.146.1~22.04.1"
          },
          {
            "binary_name": "linux-tools-6.8.0-146-lowlatency",
            "binary_version": "6.8.0-146.146.1~22.04.1"
          },
          {
            "binary_name": "linux-tools-6.8.0-146-lowlatency-64k",
            "binary_version": "6.8.0-146.146.1~22.04.1"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:22.04:LTS",
        "name": "linux-lowlatency-hwe-6.8",
        "purl": "pkg:deb/ubuntu/linux-lowlatency-hwe-6.8@6.8.0-146.146.1~22.04.1?arch=source\u0026distro=jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "6.8.0-38.38.1~22.04.2",
        "6.8.0-40.40.1~22.04.1",
        "6.8.0-44.44.1~22.04.1",
        "6.8.0-45.45.1~22.04.1",
        "6.8.0-47.47.1~22.04.1",
        "6.8.0-48.48.3~22.04.1",
        "6.8.0-49.49.1~22.04.1",
        "6.8.0-50.51.1~22.04.1",
        "6.8.0-51.52.1~22.04.1",
        "6.8.0-52.53.1~22.04.1",
        "6.8.0-54.56.1~22.04.1",
        "6.8.0-55.57.1~22.04.1",
        "6.8.0-56.58.1~22.04.1",
        "6.8.0-57.59.1~22.04.1",
        "6.8.0-58.60.1~22.04.1",
        "6.8.0-59.61.1~22.04.1",
        "6.8.0-60.63.1~22.04.1",
        "6.8.0-62.65.1~22.04.1",
        "6.8.0-63.66.1~22.04.1",
        "6.8.0-64.67.1~22.04.1",
        "6.8.0-65.68.1~22.04.1",
        "6.8.0-78.78.1~22.04.1",
        "6.8.0-79.79.1~22.04.1",
        "6.8.0-83.83.1~22.04.1",
        "6.8.0-84.84.1~22.04.1",
        "6.8.0-85.85.1~22.04.1",
        "6.8.0-86.87.1~22.04.1",
        "6.8.0-87.88.1~22.04.1",
        "6.8.0-88.89.1~22.04.1",
        "6.8.0-90.91.1~22.04.1",
        "6.8.0-94.96.1~22.04.1",
        "6.8.0-100.100.1~22.04.1",
        "6.8.0-101.101.1~22.04.1",
        "6.8.0-106.106.1~22.04.1",
        "6.8.0-107.107.1~22.04.1",
        "6.8.0-110.110.1~22.04.1",
        "6.8.0-111.111.1~22.04.1",
        "6.8.0-117.117.1~22.04.1",
        "6.8.0-134.134.1~22.04.1",
        "6.8.0-136.136.2~22.04.1",
        "6.8.0-137.137.1~22.04.1",
        "6.8.0-138.138.1~22.04.1",
        "6.8.0-139.139.1~22.04.1",
        "6.8.0-142.142.1~22.04.1",
        "6.8.0-146.146.1~22.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-buildinfo-5.15.0-1112-nvidia",
            "binary_version": "5.15.0-1112.113"
          },
          {
            "binary_name": "linux-buildinfo-5.15.0-1112-nvidia-lowlatency",
            "binary_version": "5.15.0-1112.113"
          },
          {
            "binary_name": "linux-cloud-tools-5.15.0-1112-nvidia",
            "binary_version": "5.15.0-1112.113"
          },
          {
            "binary_name": "linux-cloud-tools-5.15.0-1112-nvidia-lowlatency",
            "binary_version": "5.15.0-1112.113"
          },
          {
            "binary_name": "linux-headers-5.15.0-1112-nvidia",
            "binary_version": "5.15.0-1112.113"
          },
          {
            "binary_name": "linux-headers-5.15.0-1112-nvidia-lowlatency",
            "binary_version": "5.15.0-1112.113"
          },
          {
            "binary_name": "linux-image-unsigned-5.15.0-1112-nvidia",
            "binary_version": "5.15.0-1112.113"
          },
          {
            "binary_name": "linux-image-unsigned-5.15.0-1112-nvidia-lowlatency",
            "binary_version": "5.15.0-1112.113"
          },
          {
            "binary_name": "linux-modules-5.15.0-1112-nvidia",
            "binary_version": "5.15.0-1112.113"
          },
          {
            "binary_name": "linux-modules-5.15.0-1112-nvidia-lowlatency",
            "binary_version": "5.15.0-1112.113"
          },
          {
            "binary_name": "linux-modules-extra-5.15.0-1112-nvidia",
            "binary_version": "5.15.0-1112.113"
          },
          {
            "binary_name": "linux-modules-nvidia-fs-5.15.0-1112-nvidia",
            "binary_version": "5.15.0-1112.113"
          },
          {
            "binary_name": "linux-modules-nvidia-fs-5.15.0-1112-nvidia-lowlatency",
            "binary_version": "5.15.0-1112.113"
          },
          {
            "binary_name": "linux-nvidia-cloud-tools-5.15.0-1112",
            "binary_version": "5.15.0-1112.113"
          },
          {
            "binary_name": "linux-nvidia-cloud-tools-common",
            "binary_version": "5.15.0-1112.113"
          },
          {
            "binary_name": "linux-nvidia-headers-5.15.0-1112",
            "binary_version": "5.15.0-1112.113"
          },
          {
            "binary_name": "linux-nvidia-tools-5.15.0-1112",
            "binary_version": "5.15.0-1112.113"
          },
          {
            "binary_name": "linux-nvidia-tools-common",
            "binary_version": "5.15.0-1112.113"
          },
          {
            "binary_name": "linux-nvidia-tools-host",
            "binary_version": "5.15.0-1112.113"
          },
          {
            "binary_name": "linux-tools-5.15.0-1112-nvidia",
            "binary_version": "5.15.0-1112.113"
          },
          {
            "binary_name": "linux-tools-5.15.0-1112-nvidia-lowlatency",
            "binary_version": "5.15.0-1112.113"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:22.04:LTS",
        "name": "linux-nvidia",
        "purl": "pkg:deb/ubuntu/linux-nvidia@5.15.0-1112.113?arch=source\u0026distro=jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "5.15.0-1005.5",
        "5.15.0-1007.7",
        "5.15.0-1010.10",
        "5.15.0-1015.15",
        "5.15.0-1017.17",
        "5.15.0-1018.18",
        "5.15.0-1023.23",
        "5.15.0-1025.25",
        "5.15.0-1026.26",
        "5.15.0-1027.27",
        "5.15.0-1028.28",
        "5.15.0-1029.29",
        "5.15.0-1030.30",
        "5.15.0-1031.31",
        "5.15.0-1032.32",
        "5.15.0-1033.33",
        "5.15.0-1037.37",
        "5.15.0-1039.39",
        "5.15.0-1040.40",
        "5.15.0-1041.41",
        "5.15.0-1042.42",
        "5.15.0-1043.43",
        "5.15.0-1044.44",
        "5.15.0-1045.45",
        "5.15.0-1046.46",
        "5.15.0-1047.47",
        "5.15.0-1048.48",
        "5.15.0-1053.54",
        "5.15.0-1054.55",
        "5.15.0-1055.56",
        "5.15.0-1058.59",
        "5.15.0-1059.60",
        "5.15.0-1060.61",
        "5.15.0-1061.62",
        "5.15.0-1062.63",
        "5.15.0-1063.64",
        "5.15.0-1064.65",
        "5.15.0-1065.66",
        "5.15.0-1066.67",
        "5.15.0-1067.68",
        "5.15.0-1068.69",
        "5.15.0-1069.70",
        "5.15.0-1070.71",
        "5.15.0-1071.72",
        "5.15.0-1072.73",
        "5.15.0-1073.74",
        "5.15.0-1074.75",
        "5.15.0-1075.76",
        "5.15.0-1076.77",
        "5.15.0-1077.78",
        "5.15.0-1078.79",
        "5.15.0-1079.80",
        "5.15.0-1080.81",
        "5.15.0-1081.82",
        "5.15.0-1082.83",
        "5.15.0-1083.84",
        "5.15.0-1085.86",
        "5.15.0-1086.87",
        "5.15.0-1087.88",
        "5.15.0-1088.89",
        "5.15.0-1090.91",
        "5.15.0-1091.92",
        "5.15.0-1092.93",
        "5.15.0-1093.94",
        "5.15.0-1094.95",
        "5.15.0-1095.96",
        "5.15.0-1096.97",
        "5.15.0-1098.99",
        "5.15.0-1099.100",
        "5.15.0-1100.101",
        "5.15.0-1101.102",
        "5.15.0-1103.104",
        "5.15.0-1104.105",
        "5.15.0-1106.107",
        "5.15.0-1107.108",
        "5.15.0-1108.109",
        "5.15.0-1109.110",
        "5.15.0-1110.111",
        "5.15.0-1111.112",
        "5.15.0-1112.113"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-buildinfo-6.2.0-1015-nvidia",
            "binary_version": "6.2.0-1015.15"
          },
          {
            "binary_name": "linux-buildinfo-6.2.0-1015-nvidia-64k",
            "binary_version": "6.2.0-1015.15"
          },
          {
            "binary_name": "linux-headers-6.2.0-1015-nvidia",
            "binary_version": "6.2.0-1015.15"
          },
          {
            "binary_name": "linux-headers-6.2.0-1015-nvidia-64k",
            "binary_version": "6.2.0-1015.15"
          },
          {
            "binary_name": "linux-image-unsigned-6.2.0-1015-nvidia",
            "binary_version": "6.2.0-1015.15"
          },
          {
            "binary_name": "linux-image-unsigned-6.2.0-1015-nvidia-64k",
            "binary_version": "6.2.0-1015.15"
          },
          {
            "binary_name": "linux-modules-6.2.0-1015-nvidia",
            "binary_version": "6.2.0-1015.15"
          },
          {
            "binary_name": "linux-modules-6.2.0-1015-nvidia-64k",
            "binary_version": "6.2.0-1015.15"
          },
          {
            "binary_name": "linux-modules-extra-6.2.0-1015-nvidia",
            "binary_version": "6.2.0-1015.15"
          },
          {
            "binary_name": "linux-modules-nvidia-fs-6.2.0-1015-nvidia",
            "binary_version": "6.2.0-1015.15"
          },
          {
            "binary_name": "linux-modules-nvidia-fs-6.2.0-1015-nvidia-64k",
            "binary_version": "6.2.0-1015.15"
          },
          {
            "binary_name": "linux-nvidia-6.2-headers-6.2.0-1015",
            "binary_version": "6.2.0-1015.15"
          },
          {
            "binary_name": "linux-nvidia-6.2-tools-6.2.0-1015",
            "binary_version": "6.2.0-1015.15"
          },
          {
            "binary_name": "linux-nvidia-6.2-tools-host",
            "binary_version": "6.2.0-1015.15"
          },
          {
            "binary_name": "linux-tools-6.2.0-1015-nvidia",
            "binary_version": "6.2.0-1015.15"
          },
          {
            "binary_name": "linux-tools-6.2.0-1015-nvidia-64k",
            "binary_version": "6.2.0-1015.15"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:22.04:LTS",
        "name": "linux-nvidia-6.2",
        "purl": "pkg:deb/ubuntu/linux-nvidia-6.2@6.2.0-1015.15?arch=source\u0026distro=jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "6.2.0-1003.3~22.04.1",
        "6.2.0-1009.9",
        "6.2.0-1010.10",
        "6.2.0-1011.11",
        "6.2.0-1012.12",
        "6.2.0-1013.13",
        "6.2.0-1015.15"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-buildinfo-6.5.0-1024-nvidia",
            "binary_version": "6.5.0-1024.25"
          },
          {
            "binary_name": "linux-buildinfo-6.5.0-1024-nvidia-64k",
            "binary_version": "6.5.0-1024.25"
          },
          {
            "binary_name": "linux-headers-6.5.0-1024-nvidia",
            "binary_version": "6.5.0-1024.25"
          },
          {
            "binary_name": "linux-headers-6.5.0-1024-nvidia-64k",
            "binary_version": "6.5.0-1024.25"
          },
          {
            "binary_name": "linux-image-unsigned-6.5.0-1024-nvidia",
            "binary_version": "6.5.0-1024.25"
          },
          {
            "binary_name": "linux-image-unsigned-6.5.0-1024-nvidia-64k",
            "binary_version": "6.5.0-1024.25"
          },
          {
            "binary_name": "linux-modules-6.5.0-1024-nvidia",
            "binary_version": "6.5.0-1024.25"
          },
          {
            "binary_name": "linux-modules-6.5.0-1024-nvidia-64k",
            "binary_version": "6.5.0-1024.25"
          },
          {
            "binary_name": "linux-modules-extra-6.5.0-1024-nvidia",
            "binary_version": "6.5.0-1024.25"
          },
          {
            "binary_name": "linux-modules-nvidia-fs-6.5.0-1024-nvidia",
            "binary_version": "6.5.0-1024.25"
          },
          {
            "binary_name": "linux-modules-nvidia-fs-6.5.0-1024-nvidia-64k",
            "binary_version": "6.5.0-1024.25"
          },
          {
            "binary_name": "linux-nvidia-6.5-headers-6.5.0-1024",
            "binary_version": "6.5.0-1024.25"
          },
          {
            "binary_name": "linux-nvidia-6.5-tools-6.5.0-1024",
            "binary_version": "6.5.0-1024.25"
          },
          {
            "binary_name": "linux-nvidia-6.5-tools-host",
            "binary_version": "6.5.0-1024.25"
          },
          {
            "binary_name": "linux-tools-6.5.0-1024-nvidia",
            "binary_version": "6.5.0-1024.25"
          },
          {
            "binary_name": "linux-tools-6.5.0-1024-nvidia-64k",
            "binary_version": "6.5.0-1024.25"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:22.04:LTS",
        "name": "linux-nvidia-6.5",
        "purl": "pkg:deb/ubuntu/linux-nvidia-6.5@6.5.0-1024.25?arch=source\u0026distro=jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "6.5.0-1004.4",
        "6.5.0-1007.7",
        "6.5.0-1013.13",
        "6.5.0-1014.14",
        "6.5.0-1015.15",
        "6.5.0-1018.18",
        "6.5.0-1019.19",
        "6.5.0-1021.22",
        "6.5.0-1022.23",
        "6.5.0-1023.24",
        "6.5.0-1024.25"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-buildinfo-6.8.0-1064-nvidia",
            "binary_version": "6.8.0-1064.67~22.04.1"
          },
          {
            "binary_name": "linux-buildinfo-6.8.0-1064-nvidia-64k",
            "binary_version": "6.8.0-1064.67~22.04.1"
          },
          {
            "binary_name": "linux-headers-6.8.0-1064-nvidia",
            "binary_version": "6.8.0-1064.67~22.04.1"
          },
          {
            "binary_name": "linux-headers-6.8.0-1064-nvidia-64k",
            "binary_version": "6.8.0-1064.67~22.04.1"
          },
          {
            "binary_name": "linux-image-unsigned-6.8.0-1064-nvidia",
            "binary_version": "6.8.0-1064.67~22.04.1"
          },
          {
            "binary_name": "linux-image-unsigned-6.8.0-1064-nvidia-64k",
            "binary_version": "6.8.0-1064.67~22.04.1"
          },
          {
            "binary_name": "linux-modules-6.8.0-1064-nvidia",
            "binary_version": "6.8.0-1064.67~22.04.1"
          },
          {
            "binary_name": "linux-modules-6.8.0-1064-nvidia-64k",
            "binary_version": "6.8.0-1064.67~22.04.1"
          },
          {
            "binary_name": "linux-modules-extra-6.8.0-1064-nvidia",
            "binary_version": "6.8.0-1064.67~22.04.1"
          },
          {
            "binary_name": "linux-modules-nvidia-fs-6.8.0-1064-nvidia",
            "binary_version": "6.8.0-1064.67~22.04.1"
          },
          {
            "binary_name": "linux-modules-nvidia-fs-6.8.0-1064-nvidia-64k",
            "binary_version": "6.8.0-1064.67~22.04.1"
          },
          {
            "binary_name": "linux-nvidia-6.8-headers-6.8.0-1064",
            "binary_version": "6.8.0-1064.67~22.04.1"
          },
          {
            "binary_name": "linux-nvidia-6.8-tools-6.8.0-1064",
            "binary_version": "6.8.0-1064.67~22.04.1"
          },
          {
            "binary_name": "linux-tools-6.8.0-1064-nvidia",
            "binary_version": "6.8.0-1064.67~22.04.1"
          },
          {
            "binary_name": "linux-tools-6.8.0-1064-nvidia-64k",
            "binary_version": "6.8.0-1064.67~22.04.1"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:22.04:LTS",
        "name": "linux-nvidia-6.8",
        "purl": "pkg:deb/ubuntu/linux-nvidia-6.8@6.8.0-1064.67~22.04.1?arch=source\u0026distro=jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "6.8.0-1008.8~22.04.1",
        "6.8.0-1009.9~22.04.1",
        "6.8.0-1010.10~22.04.1",
        "6.8.0-1011.11~22.04.1",
        "6.8.0-1012.12~22.04.1",
        "6.8.0-1013.14~22.04.1",
        "6.8.0-1014.15~22.04.1",
        "6.8.0-1015.16~22.04.1",
        "6.8.0-1017.19~22.04.1",
        "6.8.0-1018.20~22.04.1",
        "6.8.0-1019.21~22.04.1",
        "6.8.0-1020.22~22.04.1",
        "6.8.0-1021.23~22.04.1",
        "6.8.0-1022.25~22.04.2",
        "6.8.0-1023.26~22.04.1",
        "6.8.0-1024.27~22.04.1",
        "6.8.0-1025.28~22.04.1",
        "6.8.0-1026.29~22.04.1",
        "6.8.0-1027.30~22.04.1",
        "6.8.0-1028.31~22.04.1",
        "6.8.0-1029.32~22.04.1",
        "6.8.0-1030.33~22.04.1",
        "6.8.0-1031.34~22.04.1",
        "6.8.0-1032.35~22.04.1",
        "6.8.0-1035.38~22.04.1",
        "6.8.0-1036.39~22.04.1",
        "6.8.0-1038.41~22.04.1",
        "6.8.0-1039.42~22.04.1",
        "6.8.0-1040.43~22.04.1",
        "6.8.0-1041.44~22.04.2",
        "6.8.0-1042.45~22.04.1",
        "6.8.0-1043.46~22.04.1",
        "6.8.0-1044.47~22.04.1",
        "6.8.0-1045.48~22.04.1",
        "6.8.0-1046.49~22.04.1",
        "6.8.0-1047.50~22.04.1",
        "6.8.0-1049.52~22.04.1",
        "6.8.0-1050.53~22.04.1",
        "6.8.0-1051.54~22.04.1",
        "6.8.0-1052.55~22.04.1",
        "6.8.0-1054.57~22.04.1",
        "6.8.0-1055.58~22.04.1",
        "6.8.0-1058.61~22.04.1",
        "6.8.0-1059.62~22.04.1",
        "6.8.0-1060.63~22.04.1",
        "6.8.0-1061.64~22.04.1",
        "6.8.0-1062.65~22.04.1",
        "6.8.0-1063.66~22.04.1",
        "6.8.0-1064.67~22.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-buildinfo-5.15.0-1068-nvidia-tegra",
            "binary_version": "5.15.0-1068.70"
          },
          {
            "binary_name": "linux-buildinfo-5.15.0-1068-nvidia-tegra-rt",
            "binary_version": "5.15.0-1068.70"
          },
          {
            "binary_name": "linux-headers-5.15.0-1068-nvidia-tegra",
            "binary_version": "5.15.0-1068.70"
          },
          {
            "binary_name": "linux-headers-5.15.0-1068-nvidia-tegra-rt",
            "binary_version": "5.15.0-1068.70"
          },
          {
            "binary_name": "linux-image-unsigned-5.15.0-1068-nvidia-tegra",
            "binary_version": "5.15.0-1068.70"
          },
          {
            "binary_name": "linux-image-unsigned-5.15.0-1068-nvidia-tegra-rt",
            "binary_version": "5.15.0-1068.70"
          },
          {
            "binary_name": "linux-modules-5.15.0-1068-nvidia-tegra",
            "binary_version": "5.15.0-1068.70"
          },
          {
            "binary_name": "linux-modules-5.15.0-1068-nvidia-tegra-rt",
            "binary_version": "5.15.0-1068.70"
          },
          {
            "binary_name": "linux-modules-extra-5.15.0-1068-nvidia-tegra",
            "binary_version": "5.15.0-1068.70"
          },
          {
            "binary_name": "linux-nvidia-tegra-headers-5.15.0-1068",
            "binary_version": "5.15.0-1068.70"
          },
          {
            "binary_name": "linux-nvidia-tegra-tools-5.15.0-1068",
            "binary_version": "5.15.0-1068.70"
          },
          {
            "binary_name": "linux-tools-5.15.0-1068-nvidia-tegra",
            "binary_version": "5.15.0-1068.70"
          },
          {
            "binary_name": "linux-tools-5.15.0-1068-nvidia-tegra-rt",
            "binary_version": "5.15.0-1068.70"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:22.04:LTS",
        "name": "linux-nvidia-tegra",
        "purl": "pkg:deb/ubuntu/linux-nvidia-tegra@5.15.0-1068.70?arch=source\u0026distro=jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "5.15.0-1009.9",
        "5.15.0-1010.10",
        "5.15.0-1012.12",
        "5.15.0-1013.13",
        "5.15.0-1014.14",
        "5.15.0-1015.15",
        "5.15.0-1016.16",
        "5.15.0-1017.17",
        "5.15.0-1018.18",
        "5.15.0-1019.19",
        "5.15.0-1020.20",
        "5.15.0-1021.21",
        "5.15.0-1022.22",
        "5.15.0-1025.25",
        "5.15.0-1026.26",
        "5.15.0-1027.27",
        "5.15.0-1028.28",
        "5.15.0-1030.30",
        "5.15.0-1032.32",
        "5.15.0-1033.33",
        "5.15.0-1034.34",
        "5.15.0-1035.35",
        "5.15.0-1036.36",
        "5.15.0-1037.37",
        "5.15.0-1038.38",
        "5.15.0-1039.39",
        "5.15.0-1040.40",
        "5.15.0-1041.41",
        "5.15.0-1042.42",
        "5.15.0-1043.43",
        "5.15.0-1044.44",
        "5.15.0-1045.45",
        "5.15.0-1046.46",
        "5.15.0-1047.47",
        "5.15.0-1048.48",
        "5.15.0-1049.49",
        "5.15.0-1050.50",
        "5.15.0-1051.51",
        "5.15.0-1052.52",
        "5.15.0-1053.53",
        "5.15.0-1055.55",
        "5.15.0-1056.56",
        "5.15.0-1057.57",
        "5.15.0-1058.58",
        "5.15.0-1060.60",
        "5.15.0-1061.61",
        "5.15.0-1063.63",
        "5.15.0-1064.66",
        "5.15.0-1065.67",
        "5.15.0-1066.68",
        "5.15.0-1067.69",
        "5.15.0-1068.70"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-buildinfo-5.15.0-1057-nvidia-tegra-igx",
            "binary_version": "5.15.0-1057.57"
          },
          {
            "binary_name": "linux-buildinfo-5.15.0-1057-nvidia-tegra-igx-rt",
            "binary_version": "5.15.0-1057.57"
          },
          {
            "binary_name": "linux-headers-5.15.0-1057-nvidia-tegra-igx",
            "binary_version": "5.15.0-1057.57"
          },
          {
            "binary_name": "linux-headers-5.15.0-1057-nvidia-tegra-igx-rt",
            "binary_version": "5.15.0-1057.57"
          },
          {
            "binary_name": "linux-image-unsigned-5.15.0-1057-nvidia-tegra-igx",
            "binary_version": "5.15.0-1057.57"
          },
          {
            "binary_name": "linux-image-unsigned-5.15.0-1057-nvidia-tegra-igx-rt",
            "binary_version": "5.15.0-1057.57"
          },
          {
            "binary_name": "linux-modules-5.15.0-1057-nvidia-tegra-igx",
            "binary_version": "5.15.0-1057.57"
          },
          {
            "binary_name": "linux-modules-5.15.0-1057-nvidia-tegra-igx-rt",
            "binary_version": "5.15.0-1057.57"
          },
          {
            "binary_name": "linux-modules-extra-5.15.0-1057-nvidia-tegra-igx",
            "binary_version": "5.15.0-1057.57"
          },
          {
            "binary_name": "linux-nvidia-tegra-igx-headers-5.15.0-1057",
            "binary_version": "5.15.0-1057.57"
          },
          {
            "binary_name": "linux-nvidia-tegra-igx-tools-5.15.0-1057",
            "binary_version": "5.15.0-1057.57"
          },
          {
            "binary_name": "linux-tools-5.15.0-1057-nvidia-tegra-igx",
            "binary_version": "5.15.0-1057.57"
          },
          {
            "binary_name": "linux-tools-5.15.0-1057-nvidia-tegra-igx-rt",
            "binary_version": "5.15.0-1057.57"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:22.04:LTS",
        "name": "linux-nvidia-tegra-igx",
        "purl": "pkg:deb/ubuntu/linux-nvidia-tegra-igx@5.15.0-1057.57?arch=source\u0026distro=jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "5.15.0-1001.1",
        "5.15.0-1002.2",
        "5.15.0-1004.4",
        "5.15.0-1005.5",
        "5.15.0-1006.6",
        "5.15.0-1007.7",
        "5.15.0-1008.8",
        "5.15.0-1009.9",
        "5.15.0-1012.12",
        "5.15.0-1013.13",
        "5.15.0-1015.15",
        "5.15.0-1016.16",
        "5.15.0-1018.18",
        "5.15.0-1019.19",
        "5.15.0-1020.20",
        "5.15.0-1021.21",
        "5.15.0-1022.22",
        "5.15.0-1023.23",
        "5.15.0-1024.24",
        "5.15.0-1026.26",
        "5.15.0-1027.27",
        "5.15.0-1028.28",
        "5.15.0-1029.29",
        "5.15.0-1030.30",
        "5.15.0-1031.31",
        "5.15.0-1032.32",
        "5.15.0-1033.33",
        "5.15.0-1034.34",
        "5.15.0-1035.35",
        "5.15.0-1036.36",
        "5.15.0-1037.37",
        "5.15.0-1038.38",
        "5.15.0-1039.39",
        "5.15.0-1040.40",
        "5.15.0-1041.41",
        "5.15.0-1042.42",
        "5.15.0-1044.44",
        "5.15.0-1045.45",
        "5.15.0-1046.46",
        "5.15.0-1047.47",
        "5.15.0-1049.49",
        "5.15.0-1050.50",
        "5.15.0-1052.52",
        "5.15.0-1053.53",
        "5.15.0-1054.54",
        "5.15.0-1055.55",
        "5.15.0-1056.56",
        "5.15.0-1057.57"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-buildinfo-5.17.0-1035-oem",
            "binary_version": "5.17.0-1035.36"
          },
          {
            "binary_name": "linux-headers-5.17.0-1035-oem",
            "binary_version": "5.17.0-1035.36"
          },
          {
            "binary_name": "linux-image-unsigned-5.17.0-1035-oem",
            "binary_version": "5.17.0-1035.36"
          },
          {
            "binary_name": "linux-modules-5.17.0-1035-oem",
            "binary_version": "5.17.0-1035.36"
          },
          {
            "binary_name": "linux-modules-ipu6-5.17.0-1035-oem",
            "binary_version": "5.17.0-1035.36"
          },
          {
            "binary_name": "linux-modules-ivsc-5.17.0-1035-oem",
            "binary_version": "5.17.0-1035.36"
          },
          {
            "binary_name": "linux-modules-iwlwifi-5.17.0-1035-oem",
            "binary_version": "5.17.0-1035.36"
          },
          {
            "binary_name": "linux-oem-5.17-headers-5.17.0-1035",
            "binary_version": "5.17.0-1035.36"
          },
          {
            "binary_name": "linux-oem-5.17-tools-5.17.0-1035",
            "binary_version": "5.17.0-1035.36"
          },
          {
            "binary_name": "linux-oem-5.17-tools-host",
            "binary_version": "5.17.0-1035.36"
          },
          {
            "binary_name": "linux-tools-5.17.0-1035-oem",
            "binary_version": "5.17.0-1035.36"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:22.04:LTS",
        "name": "linux-oem-5.17",
        "purl": "pkg:deb/ubuntu/linux-oem-5.17@5.17.0-1035.36?arch=source\u0026distro=jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "5.17.0-1003.3",
        "5.17.0-1004.4",
        "5.17.0-1006.6",
        "5.17.0-1011.12",
        "5.17.0-1012.13",
        "5.17.0-1013.14",
        "5.17.0-1014.15",
        "5.17.0-1015.16",
        "5.17.0-1016.17",
        "5.17.0-1017.18",
        "5.17.0-1018.19",
        "5.17.0-1019.20",
        "5.17.0-1020.21",
        "5.17.0-1021.22",
        "5.17.0-1024.25",
        "5.17.0-1025.26",
        "5.17.0-1026.27",
        "5.17.0-1027.28",
        "5.17.0-1028.29",
        "5.17.0-1029.30",
        "5.17.0-1030.31",
        "5.17.0-1031.32",
        "5.17.0-1032.33",
        "5.17.0-1033.34",
        "5.17.0-1034.35",
        "5.17.0-1035.36"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-buildinfo-6.0.0-1021-oem",
            "binary_version": "6.0.0-1021.21"
          },
          {
            "binary_name": "linux-headers-6.0.0-1021-oem",
            "binary_version": "6.0.0-1021.21"
          },
          {
            "binary_name": "linux-image-unsigned-6.0.0-1021-oem",
            "binary_version": "6.0.0-1021.21"
          },
          {
            "binary_name": "linux-modules-6.0.0-1021-oem",
            "binary_version": "6.0.0-1021.21"
          },
          {
            "binary_name": "linux-modules-ipu6-6.0.0-1021-oem",
            "binary_version": "6.0.0-1021.21"
          },
          {
            "binary_name": "linux-modules-ivsc-6.0.0-1021-oem",
            "binary_version": "6.0.0-1021.21"
          },
          {
            "binary_name": "linux-modules-iwlwifi-6.0.0-1021-oem",
            "binary_version": "6.0.0-1021.21"
          },
          {
            "binary_name": "linux-oem-6.0-headers-6.0.0-1021",
            "binary_version": "6.0.0-1021.21"
          },
          {
            "binary_name": "linux-oem-6.0-tools-6.0.0-1021",
            "binary_version": "6.0.0-1021.21"
          },
          {
            "binary_name": "linux-oem-6.0-tools-host",
            "binary_version": "6.0.0-1021.21"
          },
          {
            "binary_name": "linux-tools-6.0.0-1021-oem",
            "binary_version": "6.0.0-1021.21"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:22.04:LTS",
        "name": "linux-oem-6.0",
        "purl": "pkg:deb/ubuntu/linux-oem-6.0@6.0.0-1021.21?arch=source\u0026distro=jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "6.0.0-1006.6",
        "6.0.0-1007.7",
        "6.0.0-1008.8",
        "6.0.0-1009.9",
        "6.0.0-1010.10",
        "6.0.0-1011.11",
        "6.0.0-1012.12",
        "6.0.0-1013.13",
        "6.0.0-1014.14",
        "6.0.0-1015.15",
        "6.0.0-1016.16",
        "6.0.0-1017.17",
        "6.0.0-1018.18",
        "6.0.0-1019.19",
        "6.0.0-1020.20",
        "6.0.0-1021.21"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-buildinfo-6.1.0-1036-oem",
            "binary_version": "6.1.0-1036.36"
          },
          {
            "binary_name": "linux-headers-6.1.0-1036-oem",
            "binary_version": "6.1.0-1036.36"
          },
          {
            "binary_name": "linux-image-unsigned-6.1.0-1036-oem",
            "binary_version": "6.1.0-1036.36"
          },
          {
            "binary_name": "linux-modules-6.1.0-1036-oem",
            "binary_version": "6.1.0-1036.36"
          },
          {
            "binary_name": "linux-modules-ipu6-6.1.0-1036-oem",
            "binary_version": "6.1.0-1036.36"
          },
          {
            "binary_name": "linux-modules-ivsc-6.1.0-1036-oem",
            "binary_version": "6.1.0-1036.36"
          },
          {
            "binary_name": "linux-modules-iwlwifi-6.1.0-1036-oem",
            "binary_version": "6.1.0-1036.36"
          },
          {
            "binary_name": "linux-oem-6.1-headers-6.1.0-1036",
            "binary_version": "6.1.0-1036.36"
          },
          {
            "binary_name": "linux-oem-6.1-tools-6.1.0-1036",
            "binary_version": "6.1.0-1036.36"
          },
          {
            "binary_name": "linux-oem-6.1-tools-host",
            "binary_version": "6.1.0-1036.36"
          },
          {
            "binary_name": "linux-tools-6.1.0-1036-oem",
            "binary_version": "6.1.0-1036.36"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:22.04:LTS",
        "name": "linux-oem-6.1",
        "purl": "pkg:deb/ubuntu/linux-oem-6.1@6.1.0-1036.36?arch=source\u0026distro=jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "6.1.0-1004.4",
        "6.1.0-1006.6",
        "6.1.0-1007.7",
        "6.1.0-1008.8",
        "6.1.0-1009.9",
        "6.1.0-1010.10",
        "6.1.0-1012.12",
        "6.1.0-1013.13",
        "6.1.0-1014.14",
        "6.1.0-1015.15",
        "6.1.0-1016.16",
        "6.1.0-1017.17",
        "6.1.0-1019.19",
        "6.1.0-1020.20",
        "6.1.0-1021.21",
        "6.1.0-1022.22",
        "6.1.0-1023.23",
        "6.1.0-1024.24",
        "6.1.0-1025.25",
        "6.1.0-1026.26",
        "6.1.0-1027.27",
        "6.1.0-1028.28",
        "6.1.0-1029.29",
        "6.1.0-1033.33",
        "6.1.0-1034.34",
        "6.1.0-1035.35",
        "6.1.0-1036.36"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-buildinfo-6.5.0-1027-oem",
            "binary_version": "6.5.0-1027.28"
          },
          {
            "binary_name": "linux-headers-6.5.0-1027-oem",
            "binary_version": "6.5.0-1027.28"
          },
          {
            "binary_name": "linux-image-unsigned-6.5.0-1027-oem",
            "binary_version": "6.5.0-1027.28"
          },
          {
            "binary_name": "linux-modules-6.5.0-1027-oem",
            "binary_version": "6.5.0-1027.28"
          },
          {
            "binary_name": "linux-modules-ipu6-6.5.0-1027-oem",
            "binary_version": "6.5.0-1027.28"
          },
          {
            "binary_name": "linux-modules-ivsc-6.5.0-1027-oem",
            "binary_version": "6.5.0-1027.28"
          },
          {
            "binary_name": "linux-modules-iwlwifi-6.5.0-1027-oem",
            "binary_version": "6.5.0-1027.28"
          },
          {
            "binary_name": "linux-modules-usbio-6.5.0-1027-oem",
            "binary_version": "6.5.0-1027.28"
          },
          {
            "binary_name": "linux-oem-6.5-headers-6.5.0-1027",
            "binary_version": "6.5.0-1027.28"
          },
          {
            "binary_name": "linux-oem-6.5-lib-rust-6.5.0-1027-oem",
            "binary_version": "6.5.0-1027.28"
          },
          {
            "binary_name": "linux-oem-6.5-tools-6.5.0-1027",
            "binary_version": "6.5.0-1027.28"
          },
          {
            "binary_name": "linux-oem-6.5-tools-host",
            "binary_version": "6.5.0-1027.28"
          },
          {
            "binary_name": "linux-tools-6.5.0-1027-oem",
            "binary_version": "6.5.0-1027.28"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:22.04:LTS",
        "name": "linux-oem-6.5",
        "purl": "pkg:deb/ubuntu/linux-oem-6.5@6.5.0-1027.28?arch=source\u0026distro=jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "6.5.0-1003.3",
        "6.5.0-1004.4",
        "6.5.0-1006.6",
        "6.5.0-1007.7",
        "6.5.0-1008.8",
        "6.5.0-1009.10",
        "6.5.0-1011.12",
        "6.5.0-1013.14",
        "6.5.0-1014.15",
        "6.5.0-1015.16",
        "6.5.0-1016.17",
        "6.5.0-1018.19",
        "6.5.0-1019.20",
        "6.5.0-1020.21",
        "6.5.0-1022.23",
        "6.5.0-1023.24",
        "6.5.0-1024.25",
        "6.5.0-1025.26",
        "6.5.0-1027.28"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-buildinfo-5.15.0-1114-oracle",
            "binary_version": "5.15.0-1114.120"
          },
          {
            "binary_name": "linux-headers-5.15.0-1114-oracle",
            "binary_version": "5.15.0-1114.120"
          },
          {
            "binary_name": "linux-image-unsigned-5.15.0-1114-oracle",
            "binary_version": "5.15.0-1114.120"
          },
          {
            "binary_name": "linux-modules-5.15.0-1114-oracle",
            "binary_version": "5.15.0-1114.120"
          },
          {
            "binary_name": "linux-modules-extra-5.15.0-1114-oracle",
            "binary_version": "5.15.0-1114.120"
          },
          {
            "binary_name": "linux-oracle-headers-5.15.0-1114",
            "binary_version": "5.15.0-1114.120"
          },
          {
            "binary_name": "linux-oracle-tools-5.15.0-1114",
            "binary_version": "5.15.0-1114.120"
          },
          {
            "binary_name": "linux-tools-5.15.0-1114-oracle",
            "binary_version": "5.15.0-1114.120"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:22.04:LTS",
        "name": "linux-oracle",
        "purl": "pkg:deb/ubuntu/linux-oracle@5.15.0-1114.120?arch=source\u0026distro=jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "5.13.0-1008.10",
        "5.15.0-1001.3",
        "5.15.0-1002.4",
        "5.15.0-1003.5",
        "5.15.0-1006.8",
        "5.15.0-1007.9",
        "5.15.0-1009.12",
        "5.15.0-1011.15",
        "5.15.0-1013.17",
        "5.15.0-1016.20",
        "5.15.0-1017.22",
        "5.15.0-1018.23",
        "5.15.0-1019.24",
        "5.15.0-1021.27",
        "5.15.0-1022.28",
        "5.15.0-1025.31",
        "5.15.0-1026.32",
        "5.15.0-1027.33",
        "5.15.0-1029.35",
        "5.15.0-1030.36",
        "5.15.0-1032.38",
        "5.15.0-1033.39",
        "5.15.0-1034.40",
        "5.15.0-1035.41",
        "5.15.0-1036.42",
        "5.15.0-1037.43",
        "5.15.0-1038.44",
        "5.15.0-1039.45",
        "5.15.0-1040.46",
        "5.15.0-1041.47",
        "5.15.0-1042.48",
        "5.15.0-1044.50",
        "5.15.0-1045.51",
        "5.15.0-1046.52",
        "5.15.0-1047.53",
        "5.15.0-1048.54",
        "5.15.0-1049.55",
        "5.15.0-1050.56",
        "5.15.0-1051.57",
        "5.15.0-1052.58",
        "5.15.0-1053.59",
        "5.15.0-1054.60",
        "5.15.0-1055.61",
        "5.15.0-1058.64",
        "5.15.0-1059.65",
        "5.15.0-1060.66",
        "5.15.0-1061.67",
        "5.15.0-1062.68",
        "5.15.0-1063.69",
        "5.15.0-1064.70",
        "5.15.0-1065.71",
        "5.15.0-1066.72",
        "5.15.0-1067.73",
        "5.15.0-1068.74",
        "5.15.0-1069.75",
        "5.15.0-1070.76",
        "5.15.0-1071.77",
        "5.15.0-1072.78",
        "5.15.0-1073.79",
        "5.15.0-1074.80",
        "5.15.0-1075.81",
        "5.15.0-1076.82",
        "5.15.0-1077.83",
        "5.15.0-1078.84",
        "5.15.0-1079.85",
        "5.15.0-1080.86",
        "5.15.0-1081.87",
        "5.15.0-1082.88",
        "5.15.0-1083.89",
        "5.15.0-1084.90",
        "5.15.0-1085.91",
        "5.15.0-1086.92",
        "5.15.0-1088.94",
        "5.15.0-1089.95",
        "5.15.0-1090.96",
        "5.15.0-1091.97",
        "5.15.0-1092.98",
        "5.15.0-1093.99",
        "5.15.0-1094.100",
        "5.15.0-1095.101",
        "5.15.0-1096.102",
        "5.15.0-1097.103",
        "5.15.0-1098.104",
        "5.15.0-1100.106",
        "5.15.0-1101.107",
        "5.15.0-1102.108",
        "5.15.0-1103.109",
        "5.15.0-1105.111",
        "5.15.0-1106.112",
        "5.15.0-1108.114",
        "5.15.0-1109.115",
        "5.15.0-1110.116",
        "5.15.0-1111.117",
        "5.15.0-1112.118",
        "5.15.0-1113.119",
        "5.15.0-1114.120"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-buildinfo-6.5.0-1027-oracle",
            "binary_version": "6.5.0-1027.27~22.04.1"
          },
          {
            "binary_name": "linux-buildinfo-6.5.0-1027-oracle-64k",
            "binary_version": "6.5.0-1027.27~22.04.1"
          },
          {
            "binary_name": "linux-headers-6.5.0-1027-oracle",
            "binary_version": "6.5.0-1027.27~22.04.1"
          },
          {
            "binary_name": "linux-headers-6.5.0-1027-oracle-64k",
            "binary_version": "6.5.0-1027.27~22.04.1"
          },
          {
            "binary_name": "linux-image-unsigned-6.5.0-1027-oracle",
            "binary_version": "6.5.0-1027.27~22.04.1"
          },
          {
            "binary_name": "linux-image-unsigned-6.5.0-1027-oracle-64k",
            "binary_version": "6.5.0-1027.27~22.04.1"
          },
          {
            "binary_name": "linux-modules-6.5.0-1027-oracle",
            "binary_version": "6.5.0-1027.27~22.04.1"
          },
          {
            "binary_name": "linux-modules-6.5.0-1027-oracle-64k",
            "binary_version": "6.5.0-1027.27~22.04.1"
          },
          {
            "binary_name": "linux-modules-extra-6.5.0-1027-oracle",
            "binary_version": "6.5.0-1027.27~22.04.1"
          },
          {
            "binary_name": "linux-modules-extra-6.5.0-1027-oracle-64k",
            "binary_version": "6.5.0-1027.27~22.04.1"
          },
          {
            "binary_name": "linux-oracle-6.5-headers-6.5.0-1027",
            "binary_version": "6.5.0-1027.27~22.04.1"
          },
          {
            "binary_name": "linux-oracle-6.5-tools-6.5.0-1027",
            "binary_version": "6.5.0-1027.27~22.04.1"
          },
          {
            "binary_name": "linux-tools-6.5.0-1027-oracle",
            "binary_version": "6.5.0-1027.27~22.04.1"
          },
          {
            "binary_name": "linux-tools-6.5.0-1027-oracle-64k",
            "binary_version": "6.5.0-1027.27~22.04.1"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:22.04:LTS",
        "name": "linux-oracle-6.5",
        "purl": "pkg:deb/ubuntu/linux-oracle-6.5@6.5.0-1027.27~22.04.1?arch=source\u0026distro=jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "6.5.0-1013.13~22.04.4",
        "6.5.0-1014.14~22.04.1",
        "6.5.0-1015.15~22.04.1",
        "6.5.0-1016.16~22.04.1",
        "6.5.0-1018.18~22.04.1",
        "6.5.0-1019.19~22.04.1",
        "6.5.0-1020.20~22.04.1",
        "6.5.0-1021.21~22.04.1",
        "6.5.0-1023.23~22.04.1",
        "6.5.0-1024.24~22.04.1",
        "6.5.0-1025.25~22.04.1",
        "6.5.0-1026.26~22.04.1",
        "6.5.0-1027.27~22.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-buildinfo-6.8.0-1062-oracle",
            "binary_version": "6.8.0-1062.65~22.04.1"
          },
          {
            "binary_name": "linux-buildinfo-6.8.0-1062-oracle-64k",
            "binary_version": "6.8.0-1062.65~22.04.1"
          },
          {
            "binary_name": "linux-headers-6.8.0-1062-oracle",
            "binary_version": "6.8.0-1062.65~22.04.1"
          },
          {
            "binary_name": "linux-headers-6.8.0-1062-oracle-64k",
            "binary_version": "6.8.0-1062.65~22.04.1"
          },
          {
            "binary_name": "linux-image-unsigned-6.8.0-1062-oracle",
            "binary_version": "6.8.0-1062.65~22.04.1"
          },
          {
            "binary_name": "linux-image-unsigned-6.8.0-1062-oracle-64k",
            "binary_version": "6.8.0-1062.65~22.04.1"
          },
          {
            "binary_name": "linux-modules-6.8.0-1062-oracle",
            "binary_version": "6.8.0-1062.65~22.04.1"
          },
          {
            "binary_name": "linux-modules-6.8.0-1062-oracle-64k",
            "binary_version": "6.8.0-1062.65~22.04.1"
          },
          {
            "binary_name": "linux-modules-extra-6.8.0-1062-oracle",
            "binary_version": "6.8.0-1062.65~22.04.1"
          },
          {
            "binary_name": "linux-modules-extra-6.8.0-1062-oracle-64k",
            "binary_version": "6.8.0-1062.65~22.04.1"
          },
          {
            "binary_name": "linux-oracle-6.8-headers-6.8.0-1062",
            "binary_version": "6.8.0-1062.65~22.04.1"
          },
          {
            "binary_name": "linux-oracle-6.8-tools-6.8.0-1062",
            "binary_version": "6.8.0-1062.65~22.04.1"
          },
          {
            "binary_name": "linux-tools-6.8.0-1062-oracle",
            "binary_version": "6.8.0-1062.65~22.04.1"
          },
          {
            "binary_name": "linux-tools-6.8.0-1062-oracle-64k",
            "binary_version": "6.8.0-1062.65~22.04.1"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:22.04:LTS",
        "name": "linux-oracle-6.8",
        "purl": "pkg:deb/ubuntu/linux-oracle-6.8@6.8.0-1062.65~22.04.1?arch=source\u0026distro=jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "6.8.0-1006.6~22.04.3",
        "6.8.0-1008.8~22.04.1",
        "6.8.0-1010.10~22.04.1",
        "6.8.0-1011.11~22.04.1",
        "6.8.0-1012.12~22.04.1",
        "6.8.0-1013.13~22.04.1",
        "6.8.0-1014.14~22.04.1",
        "6.8.0-1015.15~22.04.1",
        "6.8.0-1016.17~22.04.1",
        "6.8.0-1017.18~22.04.1",
        "6.8.0-1018.19~22.04.1",
        "6.8.0-1019.20~22.04.1",
        "6.8.0-1020.21~22.04.1",
        "6.8.0-1021.22~22.04.1",
        "6.8.0-1022.23~22.04.1",
        "6.8.0-1023.24~22.04.1",
        "6.8.0-1024.25~22.04.1",
        "6.8.0-1025.26~22.04.1",
        "6.8.0-1026.27~22.04.1",
        "6.8.0-1027.28~22.04.1",
        "6.8.0-1028.29~22.04.1",
        "6.8.0-1029.30~22.04.1",
        "6.8.0-1030.31~22.04.1",
        "6.8.0-1032.33~22.04.1",
        "6.8.0-1033.34~22.04.1",
        "6.8.0-1035.36~22.04.1",
        "6.8.0-1037.38~22.04.1",
        "6.8.0-1038.39~22.04.1",
        "6.8.0-1039.40~22.04.1",
        "6.8.0-1040.41~22.04.1",
        "6.8.0-1041.42~22.04.1",
        "6.8.0-1042.43~22.04.1",
        "6.8.0-1043.44~22.04.1",
        "6.8.0-1044.45~22.04.1",
        "6.8.0-1047.48~22.04.1",
        "6.8.0-1049.50~22.04.1",
        "6.8.0-1050.51~22.04.1",
        "6.8.0-1052.53~22.04.1",
        "6.8.0-1054.55~22.04.1",
        "6.8.0-1057.58~22.04.1",
        "6.8.0-1058.61~22.04.1",
        "6.8.0-1059.62~22.04.1",
        "6.8.0-1060.63~22.04.1",
        "6.8.0-1061.64~22.04.1",
        "6.8.0-1062.65~22.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-buildinfo-5.15.0-1110-raspi",
            "binary_version": "5.15.0-1110.113"
          },
          {
            "binary_name": "linux-headers-5.15.0-1110-raspi",
            "binary_version": "5.15.0-1110.113"
          },
          {
            "binary_name": "linux-image-5.15.0-1110-raspi",
            "binary_version": "5.15.0-1110.113"
          },
          {
            "binary_name": "linux-modules-5.15.0-1110-raspi",
            "binary_version": "5.15.0-1110.113"
          },
          {
            "binary_name": "linux-modules-extra-5.15.0-1110-raspi",
            "binary_version": "5.15.0-1110.113"
          },
          {
            "binary_name": "linux-raspi-headers-5.15.0-1110",
            "binary_version": "5.15.0-1110.113"
          },
          {
            "binary_name": "linux-raspi-tools-5.15.0-1110",
            "binary_version": "5.15.0-1110.113"
          },
          {
            "binary_name": "linux-tools-5.15.0-1110-raspi",
            "binary_version": "5.15.0-1110.113"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:22.04:LTS",
        "name": "linux-raspi",
        "purl": "pkg:deb/ubuntu/linux-raspi@5.15.0-1110.113?arch=source\u0026distro=jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "5.13.0-1008.9",
        "5.15.0-1002.2",
        "5.15.0-1003.3",
        "5.15.0-1004.4",
        "5.15.0-1005.5",
        "5.15.0-1006.6",
        "5.15.0-1008.8",
        "5.15.0-1011.13",
        "5.15.0-1012.14",
        "5.15.0-1013.15",
        "5.15.0-1014.16",
        "5.15.0-1015.17",
        "5.15.0-1016.18",
        "5.15.0-1017.19",
        "5.15.0-1018.20",
        "5.15.0-1021.23",
        "5.15.0-1022.24",
        "5.15.0-1023.25",
        "5.15.0-1024.26",
        "5.15.0-1025.27",
        "5.15.0-1026.28",
        "5.15.0-1027.29",
        "5.15.0-1028.30",
        "5.15.0-1029.31",
        "5.15.0-1030.32",
        "5.15.0-1032.35",
        "5.15.0-1033.36",
        "5.15.0-1034.37",
        "5.15.0-1035.38",
        "5.15.0-1036.39",
        "5.15.0-1037.40",
        "5.15.0-1038.41",
        "5.15.0-1040.43",
        "5.15.0-1041.44",
        "5.15.0-1042.45",
        "5.15.0-1043.46",
        "5.15.0-1044.47",
        "5.15.0-1045.48",
        "5.15.0-1046.49",
        "5.15.0-1047.50",
        "5.15.0-1048.51",
        "5.15.0-1049.52",
        "5.15.0-1050.53",
        "5.15.0-1053.56",
        "5.15.0-1054.57",
        "5.15.0-1055.58",
        "5.15.0-1058.61",
        "5.15.0-1059.62",
        "5.15.0-1060.63",
        "5.15.0-1061.64",
        "5.15.0-1062.65",
        "5.15.0-1063.66",
        "5.15.0-1064.67",
        "5.15.0-1065.68",
        "5.15.0-1066.69",
        "5.15.0-1067.70",
        "5.15.0-1070.73",
        "5.15.0-1071.74",
        "5.15.0-1072.75",
        "5.15.0-1073.76",
        "5.15.0-1074.77",
        "5.15.0-1075.78",
        "5.15.0-1076.79",
        "5.15.0-1077.80",
        "5.15.0-1078.81",
        "5.15.0-1079.82",
        "5.15.0-1080.83",
        "5.15.0-1083.86",
        "5.15.0-1084.87",
        "5.15.0-1085.88",
        "5.15.0-1086.89",
        "5.15.0-1087.90",
        "5.15.0-1089.92",
        "5.15.0-1090.93",
        "5.15.0-1091.94",
        "5.15.0-1092.95",
        "5.15.0-1093.96",
        "5.15.0-1097.100",
        "5.15.0-1098.101",
        "5.15.0-1099.102",
        "5.15.0-1100.103",
        "5.15.0-1102.105",
        "5.15.0-1103.106",
        "5.15.0-1105.108",
        "5.15.0-1106.109",
        "5.15.0-1108.111",
        "5.15.0-1110.113"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-buildinfo-5.15.0-1032-realtime",
            "binary_version": "5.15.0-1032.35"
          },
          {
            "binary_name": "linux-cloud-tools-5.15.0-1032-realtime",
            "binary_version": "5.15.0-1032.35"
          },
          {
            "binary_name": "linux-headers-5.15.0-1032-realtime",
            "binary_version": "5.15.0-1032.35"
          },
          {
            "binary_name": "linux-image-unsigned-5.15.0-1032-realtime",
            "binary_version": "5.15.0-1032.35"
          },
          {
            "binary_name": "linux-modules-5.15.0-1032-realtime",
            "binary_version": "5.15.0-1032.35"
          },
          {
            "binary_name": "linux-modules-extra-5.15.0-1032-realtime",
            "binary_version": "5.15.0-1032.35"
          },
          {
            "binary_name": "linux-realtime-cloud-tools-5.15.0-1032",
            "binary_version": "5.15.0-1032.35"
          },
          {
            "binary_name": "linux-realtime-cloud-tools-common",
            "binary_version": "5.15.0-1032.35"
          },
          {
            "binary_name": "linux-realtime-headers-5.15.0-1032",
            "binary_version": "5.15.0-1032.35"
          },
          {
            "binary_name": "linux-realtime-tools-5.15.0-1032",
            "binary_version": "5.15.0-1032.35"
          },
          {
            "binary_name": "linux-realtime-tools-common",
            "binary_version": "5.15.0-1032.35"
          },
          {
            "binary_name": "linux-realtime-tools-host",
            "binary_version": "5.15.0-1032.35"
          },
          {
            "binary_name": "linux-tools-5.15.0-1032-realtime",
            "binary_version": "5.15.0-1032.35"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:22.04:LTS",
        "name": "linux-realtime",
        "purl": "pkg:deb/ubuntu/linux-realtime@5.15.0-1032.35?arch=source\u0026distro=jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "5.15.0-1032.35"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-buildinfo-5.15.0-1028-generic",
            "binary_version": "5.15.0-1028.32"
          },
          {
            "binary_name": "linux-headers-5.15.0-1028-generic",
            "binary_version": "5.15.0-1028.32"
          },
          {
            "binary_name": "linux-image-5.15.0-1028-generic",
            "binary_version": "5.15.0-1028.32"
          },
          {
            "binary_name": "linux-modules-5.15.0-1028-generic",
            "binary_version": "5.15.0-1028.32"
          },
          {
            "binary_name": "linux-modules-extra-5.15.0-1028-generic",
            "binary_version": "5.15.0-1028.32"
          },
          {
            "binary_name": "linux-riscv-headers-5.15.0-1028",
            "binary_version": "5.15.0-1028.32"
          },
          {
            "binary_name": "linux-riscv-tools-5.15.0-1028",
            "binary_version": "5.15.0-1028.32"
          },
          {
            "binary_name": "linux-tools-5.15.0-1028-generic",
            "binary_version": "5.15.0-1028.32"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:22.04:LTS",
        "name": "linux-riscv",
        "purl": "pkg:deb/ubuntu/linux-riscv@5.15.0-1028.32?arch=source\u0026distro=jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "5.13.0-1004.4",
        "5.13.0-1006.6+22.04.1",
        "5.13.0-1007.7+22.04.1",
        "5.13.0-1010.11+22.04.1",
        "5.15.0-1004.4",
        "5.15.0-1005.5",
        "5.15.0-1006.6",
        "5.15.0-1007.7",
        "5.15.0-1008.8",
        "5.15.0-1011.12",
        "5.15.0-1012.13",
        "5.15.0-1014.16",
        "5.15.0-1015.17",
        "5.15.0-1016.18",
        "5.15.0-1017.19",
        "5.15.0-1018.21",
        "5.15.0-1019.22",
        "5.15.0-1020.23",
        "5.15.0-1022.26",
        "5.15.0-1023.27",
        "5.15.0-1026.30",
        "5.15.0-1027.31",
        "5.15.0-1028.32"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-buildinfo-5.19.0-1021-generic",
            "binary_version": "5.19.0-1021.23~22.04.1"
          },
          {
            "binary_name": "linux-headers-5.19.0-1021-generic",
            "binary_version": "5.19.0-1021.23~22.04.1"
          },
          {
            "binary_name": "linux-image-5.19.0-1021-generic",
            "binary_version": "5.19.0-1021.23~22.04.1"
          },
          {
            "binary_name": "linux-modules-5.19.0-1021-generic",
            "binary_version": "5.19.0-1021.23~22.04.1"
          },
          {
            "binary_name": "linux-modules-extra-5.19.0-1021-generic",
            "binary_version": "5.19.0-1021.23~22.04.1"
          },
          {
            "binary_name": "linux-riscv-5.19-headers-5.19.0-1021",
            "binary_version": "5.19.0-1021.23~22.04.1"
          },
          {
            "binary_name": "linux-riscv-5.19-tools-5.19.0-1021",
            "binary_version": "5.19.0-1021.23~22.04.1"
          },
          {
            "binary_name": "linux-tools-5.19.0-1021-generic",
            "binary_version": "5.19.0-1021.23~22.04.1"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:22.04:LTS",
        "name": "linux-riscv-5.19",
        "purl": "pkg:deb/ubuntu/linux-riscv-5.19@5.19.0-1021.23~22.04.1?arch=source\u0026distro=jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "5.19.0-1012.13~22.04.1",
        "5.19.0-1015.16~22.04.1",
        "5.19.0-1016.17~22.04.1",
        "5.19.0-1017.18~22.04.1",
        "5.19.0-1018.19~22.04.1",
        "5.19.0-1019.21~22.04.1",
        "5.19.0-1020.22~22.04.1",
        "5.19.0-1021.23~22.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-buildinfo-6.5.0-45-generic",
            "binary_version": "6.5.0-45.45.1~22.04.1"
          },
          {
            "binary_name": "linux-headers-6.5.0-45-generic",
            "binary_version": "6.5.0-45.45.1~22.04.1"
          },
          {
            "binary_name": "linux-image-6.5.0-45-generic",
            "binary_version": "6.5.0-45.45.1~22.04.1"
          },
          {
            "binary_name": "linux-modules-6.5.0-45-generic",
            "binary_version": "6.5.0-45.45.1~22.04.1"
          },
          {
            "binary_name": "linux-modules-extra-6.5.0-45-generic",
            "binary_version": "6.5.0-45.45.1~22.04.1"
          },
          {
            "binary_name": "linux-riscv-6.5-headers-6.5.0-45",
            "binary_version": "6.5.0-45.45.1~22.04.1"
          },
          {
            "binary_name": "linux-riscv-6.5-tools-6.5.0-45",
            "binary_version": "6.5.0-45.45.1~22.04.1"
          },
          {
            "binary_name": "linux-tools-6.5.0-45-generic",
            "binary_version": "6.5.0-45.45.1~22.04.1"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:22.04:LTS",
        "name": "linux-riscv-6.5",
        "purl": "pkg:deb/ubuntu/linux-riscv-6.5@6.5.0-45.45.1~22.04.1?arch=source\u0026distro=jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "6.5.0-17.17.1.1~22.04.1",
        "6.5.0-21.21.1~22.04.1",
        "6.5.0-25.25.1~22.04.1",
        "6.5.0-26.26.1~22.04.1",
        "6.5.0-27.28.1~22.04.1",
        "6.5.0-28.29.1~22.04.1",
        "6.5.0-35.35.1~22.04.1",
        "6.5.0-40.40.1~22.04.1",
        "6.5.0-42.42.1~22.04.1",
        "6.5.0-45.45.1~22.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-buildinfo-6.8.0-146-generic",
            "binary_version": "6.8.0-146.146~22.04.1"
          },
          {
            "binary_name": "linux-headers-6.8.0-146-generic",
            "binary_version": "6.8.0-146.146~22.04.1"
          },
          {
            "binary_name": "linux-image-6.8.0-146-generic",
            "binary_version": "6.8.0-146.146~22.04.1"
          },
          {
            "binary_name": "linux-modules-6.8.0-146-generic",
            "binary_version": "6.8.0-146.146~22.04.1"
          },
          {
            "binary_name": "linux-riscv-6.8-headers-6.8.0-146",
            "binary_version": "6.8.0-146.146~22.04.1"
          },
          {
            "binary_name": "linux-riscv-6.8-tools-6.8.0-146",
            "binary_version": "6.8.0-146.146~22.04.1"
          },
          {
            "binary_name": "linux-tools-6.8.0-146-generic",
            "binary_version": "6.8.0-146.146~22.04.1"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:22.04:LTS",
        "name": "linux-riscv-6.8",
        "purl": "pkg:deb/ubuntu/linux-riscv-6.8@6.8.0-146.146~22.04.1?arch=source\u0026distro=jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "6.8.0-38.38.1~22.04.1",
        "6.8.0-39.39.1~22.04.1",
        "6.8.0-40.40.1~22.04.1",
        "6.8.0-41.41.1~22.04.1",
        "6.8.0-44.44.1~22.04.1",
        "6.8.0-47.47.1~22.04.1",
        "6.8.0-48.48.1~22.04.2",
        "6.8.0-49.49.1~22.04.1",
        "6.8.0-50.51.1~22.04.1",
        "6.8.0-51.52.1~22.04.1",
        "6.8.0-52.53.1~22.04.1",
        "6.8.0-53.55.1~22.04.1",
        "6.8.0-55.57.1~22.04.1",
        "6.8.0-56.58.1~22.04.1",
        "6.8.0-57.59.1~22.04.1",
        "6.8.0-58.60.1~22.04.1",
        "6.8.0-59.61.1~22.04.1",
        "6.8.0-62.65~22.04.1",
        "6.8.0-63.66~22.04.1",
        "6.8.0-64.67~22.04.1",
        "6.8.0-71.71~22.04.1",
        "6.8.0-78.78~22.04.1",
        "6.8.0-79.79~22.04.1",
        "6.8.0-83.83~22.04.1",
        "6.8.0-84.84~22.04.1",
        "6.8.0-86.87~22.04.1",
        "6.8.0-87.88~22.04.1",
        "6.8.0-88.89~22.04.1",
        "6.8.0-90.91~22.04.1",
        "6.8.0-94.96~22.04.1",
        "6.8.0-100.100~22.04.1",
        "6.8.0-101.101~22.04.1",
        "6.8.0-106.106~22.04.1",
        "6.8.0-107.107~22.04.1",
        "6.8.0-110.110~22.04.1",
        "6.8.0-111.111~22.04.1",
        "6.8.0-117.117~22.04.1",
        "6.8.0-124.124~22.04.1",
        "6.8.0-134.134~22.04.1",
        "6.8.0-136.136~22.04.3",
        "6.8.0-137.137~22.04.1",
        "6.8.0-138.138~22.04.1",
        "6.8.0-139.139~22.04.1",
        "6.8.0-142.142~22.04.1",
        "6.8.0-146.146~22.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-buildinfo-5.19.0-1020-starfive",
            "binary_version": "5.19.0-1020.22~22.04.1"
          },
          {
            "binary_name": "linux-headers-5.19.0-1020-starfive",
            "binary_version": "5.19.0-1020.22~22.04.1"
          },
          {
            "binary_name": "linux-image-5.19.0-1020-starfive",
            "binary_version": "5.19.0-1020.22~22.04.1"
          },
          {
            "binary_name": "linux-modules-5.19.0-1020-starfive",
            "binary_version": "5.19.0-1020.22~22.04.1"
          },
          {
            "binary_name": "linux-modules-extra-5.19.0-1020-starfive",
            "binary_version": "5.19.0-1020.22~22.04.1"
          },
          {
            "binary_name": "linux-starfive-5.19-headers-5.19.0-1020",
            "binary_version": "5.19.0-1020.22~22.04.1"
          },
          {
            "binary_name": "linux-starfive-5.19-tools-5.19.0-1020",
            "binary_version": "5.19.0-1020.22~22.04.1"
          },
          {
            "binary_name": "linux-tools-5.19.0-1020-starfive",
            "binary_version": "5.19.0-1020.22~22.04.1"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:22.04:LTS",
        "name": "linux-starfive-5.19",
        "purl": "pkg:deb/ubuntu/linux-starfive-5.19@5.19.0-1020.22~22.04.1?arch=source\u0026distro=jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "5.19.0-1014.16~22.04.1",
        "5.19.0-1015.17~22.04.1",
        "5.19.0-1016.18~22.04.1",
        "5.19.0-1017.19~22.04.1",
        "5.19.0-1018.20~22.04.1",
        "5.19.0-1019.21~22.04.1",
        "5.19.0-1020.22~22.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-buildinfo-6.2.0-1009-starfive",
            "binary_version": "6.2.0-1009.10~22.04.1"
          },
          {
            "binary_name": "linux-headers-6.2.0-1009-starfive",
            "binary_version": "6.2.0-1009.10~22.04.1"
          },
          {
            "binary_name": "linux-image-6.2.0-1009-starfive",
            "binary_version": "6.2.0-1009.10~22.04.1"
          },
          {
            "binary_name": "linux-modules-6.2.0-1009-starfive",
            "binary_version": "6.2.0-1009.10~22.04.1"
          },
          {
            "binary_name": "linux-modules-extra-6.2.0-1009-starfive",
            "binary_version": "6.2.0-1009.10~22.04.1"
          },
          {
            "binary_name": "linux-starfive-6.2-headers-6.2.0-1009",
            "binary_version": "6.2.0-1009.10~22.04.1"
          },
          {
            "binary_name": "linux-starfive-6.2-tools-6.2.0-1009",
            "binary_version": "6.2.0-1009.10~22.04.1"
          },
          {
            "binary_name": "linux-tools-6.2.0-1009-starfive",
            "binary_version": "6.2.0-1009.10~22.04.1"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:22.04:LTS",
        "name": "linux-starfive-6.2",
        "purl": "pkg:deb/ubuntu/linux-starfive-6.2@6.2.0-1009.10~22.04.1?arch=source\u0026distro=jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "6.2.0-1006.7~22.04.1",
        "6.2.0-1007.8~22.04.1",
        "6.2.0-1009.10~22.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-buildinfo-6.5.0-1018-starfive",
            "binary_version": "6.5.0-1018.19~22.04.1"
          },
          {
            "binary_name": "linux-headers-6.5.0-1018-starfive",
            "binary_version": "6.5.0-1018.19~22.04.1"
          },
          {
            "binary_name": "linux-image-6.5.0-1018-starfive",
            "binary_version": "6.5.0-1018.19~22.04.1"
          },
          {
            "binary_name": "linux-modules-6.5.0-1018-starfive",
            "binary_version": "6.5.0-1018.19~22.04.1"
          },
          {
            "binary_name": "linux-modules-extra-6.5.0-1018-starfive",
            "binary_version": "6.5.0-1018.19~22.04.1"
          },
          {
            "binary_name": "linux-starfive-6.5-headers-6.5.0-1018",
            "binary_version": "6.5.0-1018.19~22.04.1"
          },
          {
            "binary_name": "linux-starfive-6.5-tools-6.5.0-1018",
            "binary_version": "6.5.0-1018.19~22.04.1"
          },
          {
            "binary_name": "linux-tools-6.5.0-1018-starfive",
            "binary_version": "6.5.0-1018.19~22.04.1"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:22.04:LTS",
        "name": "linux-starfive-6.5",
        "purl": "pkg:deb/ubuntu/linux-starfive-6.5@6.5.0-1018.19~22.04.1?arch=source\u0026distro=jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "6.5.0-1007.8~22.04.1",
        "6.5.0-1008.9~22.04.1",
        "6.5.0-1009.10~22.04.1",
        "6.5.0-1010.11~22.04.1",
        "6.5.0-1011.12~22.04.1",
        "6.5.0-1012.13~22.04.1",
        "6.5.0-1014.15~22.04.1",
        "6.5.0-1015.16~22.04.1",
        "6.5.0-1016.17~22.04.1",
        "6.5.0-1017.18~22.04.1",
        "6.5.0-1018.19~22.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-buildinfo-5.15.0-1080-xilinx-zynqmp",
            "binary_version": "5.15.0-1080.84"
          },
          {
            "binary_name": "linux-headers-5.15.0-1080-xilinx-zynqmp",
            "binary_version": "5.15.0-1080.84"
          },
          {
            "binary_name": "linux-image-5.15.0-1080-xilinx-zynqmp",
            "binary_version": "5.15.0-1080.84"
          },
          {
            "binary_name": "linux-modules-5.15.0-1080-xilinx-zynqmp",
            "binary_version": "5.15.0-1080.84"
          },
          {
            "binary_name": "linux-tools-5.15.0-1080-xilinx-zynqmp",
            "binary_version": "5.15.0-1080.84"
          },
          {
            "binary_name": "linux-xilinx-zynqmp-headers-5.15.0-1080",
            "binary_version": "5.15.0-1080.84"
          },
          {
            "binary_name": "linux-xilinx-zynqmp-tools-5.15.0-1080",
            "binary_version": "5.15.0-1080.84"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:22.04:LTS",
        "name": "linux-xilinx-zynqmp",
        "purl": "pkg:deb/ubuntu/linux-xilinx-zynqmp@5.15.0-1080.84?arch=source\u0026distro=jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "5.15.0-1022.26",
        "5.15.0-1023.27",
        "5.15.0-1025.29",
        "5.15.0-1027.31",
        "5.15.0-1030.34",
        "5.15.0-1031.35",
        "5.15.0-1035.39",
        "5.15.0-1036.40",
        "5.15.0-1037.41",
        "5.15.0-1038.42",
        "5.15.0-1039.43",
        "5.15.0-1041.45",
        "5.15.0-1044.48",
        "5.15.0-1046.50",
        "5.15.0-1050.54",
        "5.15.0-1051.55",
        "5.15.0-1052.56",
        "5.15.0-1053.57",
        "5.15.0-1054.58",
        "5.15.0-1055.59",
        "5.15.0-1056.60",
        "5.15.0-1057.61",
        "5.15.0-1059.63",
        "5.15.0-1060.64",
        "5.15.0-1061.65",
        "5.15.0-1062.66",
        "5.15.0-1063.67",
        "5.15.0-1064.68",
        "5.15.0-1065.69",
        "5.15.0-1067.71",
        "5.15.0-1068.72",
        "5.15.0-1069.73",
        "5.15.0-1070.74",
        "5.15.0-1074.78",
        "5.15.0-1075.79",
        "5.15.0-1076.80",
        "5.15.0-1077.81",
        "5.15.0-1078.82",
        "5.15.0-1079.83",
        "5.15.0-1080.84"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-bluefield-cloud-tools-common",
            "binary_version": "5.15.0-1101.103"
          },
          {
            "binary_name": "linux-bluefield-headers-5.15.0-1101",
            "binary_version": "5.15.0-1101.103"
          },
          {
            "binary_name": "linux-bluefield-tools-5.15.0-1101",
            "binary_version": "5.15.0-1101.103"
          },
          {
            "binary_name": "linux-bluefield-tools-host",
            "binary_version": "5.15.0-1101.103"
          },
          {
            "binary_name": "linux-buildinfo-5.15.0-1101-bluefield",
            "binary_version": "5.15.0-1101.103"
          },
          {
            "binary_name": "linux-headers-5.15.0-1101-bluefield",
            "binary_version": "5.15.0-1101.103"
          },
          {
            "binary_name": "linux-image-unsigned-5.15.0-1101-bluefield",
            "binary_version": "5.15.0-1101.103"
          },
          {
            "binary_name": "linux-modules-5.15.0-1101-bluefield",
            "binary_version": "5.15.0-1101.103"
          },
          {
            "binary_name": "linux-modules-extra-5.15.0-1101-bluefield",
            "binary_version": "5.15.0-1101.103"
          },
          {
            "binary_name": "linux-tools-5.15.0-1101-bluefield",
            "binary_version": "5.15.0-1101.103"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:Nvidia-BlueField:22.04:LTS",
        "name": "linux-bluefield",
        "purl": "pkg:deb/ubuntu/linux-bluefield@5.15.0-1101.103?arch=source\u0026distro=bluefield/jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "5.15.0-1011.13",
        "5.15.0-1014.16",
        "5.15.0-1015.17",
        "5.15.0-1017.19",
        "5.15.0-1019.21",
        "5.15.0-1021.23",
        "5.15.0-1022.24",
        "5.15.0-1023.25",
        "5.15.0-1024.26",
        "5.15.0-1027.29",
        "5.15.0-1028.30",
        "5.15.0-1031.33",
        "5.15.0-1032.34",
        "5.15.0-1033.35",
        "5.15.0-1035.37",
        "5.15.0-1036.38",
        "5.15.0-1037.39",
        "5.15.0-1038.40",
        "5.15.0-1040.42",
        "5.15.0-1042.44",
        "5.15.0-1043.45",
        "5.15.0-1044.46",
        "5.15.0-1045.47",
        "5.15.0-1047.49",
        "5.15.0-1048.50",
        "5.15.0-1050.52",
        "5.15.0-1051.53",
        "5.15.0-1052.54",
        "5.15.0-1053.55",
        "5.15.0-1054.56",
        "5.15.0-1056.58",
        "5.15.0-1057.59",
        "5.15.0-1058.60",
        "5.15.0-1059.61",
        "5.15.0-1060.62",
        "5.15.0-1061.63",
        "5.15.0-1062.64",
        "5.15.0-1063.65",
        "5.15.0-1064.66",
        "5.15.0-1065.67",
        "5.15.0-1066.68",
        "5.15.0-1067.69",
        "5.15.0-1069.71",
        "5.15.0-1070.72",
        "5.15.0-1072.74",
        "5.15.0-1074.76",
        "5.15.0-1075.77",
        "5.15.0-1076.78",
        "5.15.0-1077.79",
        "5.15.0-1079.81",
        "5.15.0-1080.82",
        "5.15.0-1081.83",
        "5.15.0-1082.84",
        "5.15.0-1083.85",
        "5.15.0-1084.86",
        "5.15.0-1085.87",
        "5.15.0-1086.88",
        "5.15.0-1087.89",
        "5.15.0-1089.91",
        "5.15.0-1090.92",
        "5.15.0-1092.94",
        "5.15.0-1093.95",
        "5.15.0-1095.97",
        "5.15.0-1096.98",
        "5.15.0-1097.99",
        "5.15.0-1098.100",
        "5.15.0-1099.101",
        "5.15.0-1100.102",
        "5.15.0-1101.103"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-buildinfo-5.15.0-1109-intel-iot-realtime",
            "binary_version": "5.15.0-1109.111"
          },
          {
            "binary_name": "linux-cloud-tools-5.15.0-1109-intel-iot-realtime",
            "binary_version": "5.15.0-1109.111"
          },
          {
            "binary_name": "linux-headers-5.15.0-1109-intel-iot-realtime",
            "binary_version": "5.15.0-1109.111"
          },
          {
            "binary_name": "linux-image-unsigned-5.15.0-1109-intel-iot-realtime",
            "binary_version": "5.15.0-1109.111"
          },
          {
            "binary_name": "linux-intel-iot-realtime-cloud-tools-5.15.0-1109",
            "binary_version": "5.15.0-1109.111"
          },
          {
            "binary_name": "linux-intel-iot-realtime-cloud-tools-common",
            "binary_version": "5.15.0-1109.111"
          },
          {
            "binary_name": "linux-intel-iot-realtime-headers-5.15.0-1109",
            "binary_version": "5.15.0-1109.111"
          },
          {
            "binary_name": "linux-intel-iot-realtime-tools-5.15.0-1109",
            "binary_version": "5.15.0-1109.111"
          },
          {
            "binary_name": "linux-intel-iot-realtime-tools-common",
            "binary_version": "5.15.0-1109.111"
          },
          {
            "binary_name": "linux-intel-iot-realtime-tools-host",
            "binary_version": "5.15.0-1109.111"
          },
          {
            "binary_name": "linux-modules-5.15.0-1109-intel-iot-realtime",
            "binary_version": "5.15.0-1109.111"
          },
          {
            "binary_name": "linux-modules-extra-5.15.0-1109-intel-iot-realtime",
            "binary_version": "5.15.0-1109.111"
          },
          {
            "binary_name": "linux-tools-5.15.0-1109-intel-iot-realtime",
            "binary_version": "5.15.0-1109.111"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:Realtime:22.04:LTS",
        "name": "linux-intel-iot-realtime",
        "purl": "pkg:deb/ubuntu/linux-intel-iot-realtime@5.15.0-1109.111?arch=source\u0026distro=realtime/jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "5.15.0-1021.26",
        "5.15.0-1022.27",
        "5.15.0-1023.28",
        "5.15.0-1024.29",
        "5.15.0-1028.33",
        "5.15.0-1033.35",
        "5.15.0-1034.36",
        "5.15.0-1035.37",
        "5.15.0-1036.38",
        "5.15.0-1037.39",
        "5.15.0-1038.40",
        "5.15.0-1039.41",
        "5.15.0-1040.42",
        "5.15.0-1041.43",
        "5.15.0-1042.44",
        "5.15.0-1043.45",
        "5.15.0-1044.46",
        "5.15.0-1046.48",
        "5.15.0-1047.49",
        "5.15.0-1048.50",
        "5.15.0-1049.51",
        "5.15.0-1050.52",
        "5.15.0-1053.55",
        "5.15.0-1054.56",
        "5.15.0-1055.57",
        "5.15.0-1056.58",
        "5.15.0-1057.59",
        "5.15.0-1058.60",
        "5.15.0-1059.61",
        "5.15.0-1060.62",
        "5.15.0-1061.63",
        "5.15.0-1063.65",
        "5.15.0-1064.66",
        "5.15.0-1066.68",
        "5.15.0-1071.73",
        "5.15.0-1072.74",
        "5.15.0-1073.75",
        "5.15.0-1074.76",
        "5.15.0-1075.77",
        "5.15.0-1076.78",
        "5.15.0-1077.79",
        "5.15.0-1078.80",
        "5.15.0-1079.81",
        "5.15.0-1080.82",
        "5.15.0-1081.83",
        "5.15.0-1082.84",
        "5.15.0-1083.85",
        "5.15.0-1084.86",
        "5.15.0-1085.87",
        "5.15.0-1086.88",
        "5.15.0-1087.89",
        "5.15.0-1088.90",
        "5.15.0-1089.91",
        "5.15.0-1090.92",
        "5.15.0-1091.93",
        "5.15.0-1092.94",
        "5.15.0-1093.95",
        "5.15.0-1094.96",
        "5.15.0-1096.98",
        "5.15.0-1097.99",
        "5.15.0-1098.100",
        "5.15.0-1099.101",
        "5.15.0-1100.102",
        "5.15.0-1101.103",
        "5.15.0-1103.105",
        "5.15.0-1104.106",
        "5.15.0-1105.107",
        "5.15.0-1106.108",
        "5.15.0-1107.109",
        "5.15.0-1108.110",
        "5.15.0-1109.111"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-buildinfo-5.15.0-1116-realtime",
            "binary_version": "5.15.0-1116.125"
          },
          {
            "binary_name": "linux-cloud-tools-5.15.0-1116-realtime",
            "binary_version": "5.15.0-1116.125"
          },
          {
            "binary_name": "linux-headers-5.15.0-1116-realtime",
            "binary_version": "5.15.0-1116.125"
          },
          {
            "binary_name": "linux-image-unsigned-5.15.0-1116-realtime",
            "binary_version": "5.15.0-1116.125"
          },
          {
            "binary_name": "linux-modules-5.15.0-1116-realtime",
            "binary_version": "5.15.0-1116.125"
          },
          {
            "binary_name": "linux-modules-extra-5.15.0-1116-realtime",
            "binary_version": "5.15.0-1116.125"
          },
          {
            "binary_name": "linux-modules-iwlwifi-5.15.0-1116-realtime",
            "binary_version": "5.15.0-1116.125"
          },
          {
            "binary_name": "linux-realtime-cloud-tools-5.15.0-1116",
            "binary_version": "5.15.0-1116.125"
          },
          {
            "binary_name": "linux-realtime-cloud-tools-common",
            "binary_version": "5.15.0-1116.125"
          },
          {
            "binary_name": "linux-realtime-headers-5.15.0-1116",
            "binary_version": "5.15.0-1116.125"
          },
          {
            "binary_name": "linux-realtime-tools-5.15.0-1116",
            "binary_version": "5.15.0-1116.125"
          },
          {
            "binary_name": "linux-realtime-tools-common",
            "binary_version": "5.15.0-1116.125"
          },
          {
            "binary_name": "linux-realtime-tools-host",
            "binary_version": "5.15.0-1116.125"
          },
          {
            "binary_name": "linux-tools-5.15.0-1116-realtime",
            "binary_version": "5.15.0-1116.125"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:Realtime:22.04:LTS",
        "name": "linux-realtime",
        "purl": "pkg:deb/ubuntu/linux-realtime@5.15.0-1116.125?arch=source\u0026distro=realtime/jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "5.15.0-1006.6",
        "5.15.0-1007.7",
        "5.15.0-1009.9",
        "5.15.0-1011.11",
        "5.15.0-1014.14",
        "5.15.0-1015.15",
        "5.15.0-1016.16",
        "5.15.0-1019.19",
        "5.15.0-1020.20",
        "5.15.0-1021.21",
        "5.15.0-1022.22",
        "5.15.0-1024.25",
        "5.15.0-1025.28",
        "5.15.0-1028.31",
        "5.15.0-1029.32",
        "5.15.0-1030.33",
        "5.15.0-1032.35",
        "5.15.0-1033.36",
        "5.15.0-1034.37",
        "5.15.0-1036.39",
        "5.15.0-1037.40",
        "5.15.0-1038.41",
        "5.15.0-1039.42",
        "5.15.0-1040.45",
        "5.15.0-1041.46",
        "5.15.0-1042.47",
        "5.15.0-1043.48",
        "5.15.0-1044.49",
        "5.15.0-1045.50",
        "5.15.0-1046.52",
        "5.15.0-1048.54",
        "5.15.0-1049.55",
        "5.15.0-1050.56",
        "5.15.0-1051.57",
        "5.15.0-1052.58",
        "5.15.0-1053.59",
        "5.15.0-1054.60",
        "5.15.0-1055.62",
        "5.15.0-1056.63",
        "5.15.0-1057.64",
        "5.15.0-1058.66",
        "5.15.0-1061.69",
        "5.15.0-1062.70",
        "5.15.0-1063.71",
        "5.15.0-1064.72",
        "5.15.0-1065.73",
        "5.15.0-1066.74",
        "5.15.0-1067.75",
        "5.15.0-1068.76",
        "5.15.0-1069.77",
        "5.15.0-1070.78",
        "5.15.0-1071.79",
        "5.15.0-1072.80",
        "5.15.0-1073.81",
        "5.15.0-1074.82",
        "5.15.0-1075.83",
        "5.15.0-1076.84",
        "5.15.0-1077.85",
        "5.15.0-1078.86",
        "5.15.0-1079.87",
        "5.15.0-1080.88",
        "5.15.0-1081.89",
        "5.15.0-1082.91",
        "5.15.0-1083.92",
        "5.15.0-1084.93",
        "5.15.0-1085.94",
        "5.15.0-1086.95",
        "5.15.0-1087.96",
        "5.15.0-1088.97",
        "5.15.0-1089.98",
        "5.15.0-1090.99",
        "5.15.0-1091.100",
        "5.15.0-1092.101",
        "5.15.0-1093.102",
        "5.15.0-1094.103",
        "5.15.0-1095.104",
        "5.15.0-1096.105",
        "5.15.0-1097.106",
        "5.15.0-1098.107",
        "5.15.0-1099.108",
        "5.15.0-1100.109",
        "5.15.0-1102.111",
        "5.15.0-1103.112",
        "5.15.0-1104.113",
        "5.15.0-1105.114",
        "5.15.0-1107.116",
        "5.15.0-1108.117",
        "5.15.0-1110.119",
        "5.15.0-1111.120",
        "5.15.0-1112.121",
        "5.15.0-1113.122",
        "5.15.0-1114.123",
        "5.15.0-1115.124",
        "5.15.0-1116.125"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-buildinfo-6.8.1-1061-realtime",
            "binary_version": "6.8.1-1061.62~22.04.1"
          },
          {
            "binary_name": "linux-cloud-tools-6.8.1-1061-realtime",
            "binary_version": "6.8.1-1061.62~22.04.1"
          },
          {
            "binary_name": "linux-headers-6.8.1-1061-realtime",
            "binary_version": "6.8.1-1061.62~22.04.1"
          },
          {
            "binary_name": "linux-image-unsigned-6.8.1-1061-realtime",
            "binary_version": "6.8.1-1061.62~22.04.1"
          },
          {
            "binary_name": "linux-modules-6.8.1-1061-realtime",
            "binary_version": "6.8.1-1061.62~22.04.1"
          },
          {
            "binary_name": "linux-modules-extra-6.8.1-1061-realtime",
            "binary_version": "6.8.1-1061.62~22.04.1"
          },
          {
            "binary_name": "linux-modules-iwlwifi-6.8.1-1061-realtime",
            "binary_version": "6.8.1-1061.62~22.04.1"
          },
          {
            "binary_name": "linux-realtime-6.8-cloud-tools-6.8.1-1061",
            "binary_version": "6.8.1-1061.62~22.04.1"
          },
          {
            "binary_name": "linux-realtime-6.8-headers-6.8.1-1061",
            "binary_version": "6.8.1-1061.62~22.04.1"
          },
          {
            "binary_name": "linux-realtime-6.8-tools-6.8.1-1061",
            "binary_version": "6.8.1-1061.62~22.04.1"
          },
          {
            "binary_name": "linux-tools-6.8.1-1061-realtime",
            "binary_version": "6.8.1-1061.62~22.04.1"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:Realtime:22.04:LTS",
        "name": "linux-realtime-6.8",
        "purl": "pkg:deb/ubuntu/linux-realtime-6.8@6.8.1-1061.62~22.04.1?arch=source\u0026distro=realtime/jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "6.8.1-1004.4~22.04.1",
        "6.8.1-1005.5~22.04.2",
        "6.8.1-1006.6~22.04.1",
        "6.8.1-1007.7~22.04.1",
        "6.8.1-1008.8~22.04.1",
        "6.8.1-1009.9~22.04.1",
        "6.8.1-1010.10~22.04.1",
        "6.8.1-1011.11~22.04.1",
        "6.8.1-1012.12~22.04.1",
        "6.8.1-1013.14~22.04.1",
        "6.8.1-1014.15~22.04.1",
        "6.8.1-1015.16~22.04.1",
        "6.8.1-1016.17~22.04.1",
        "6.8.1-1017.18~22.04.1",
        "6.8.1-1018.19~22.04.1",
        "6.8.1-1019.20~22.04.1",
        "6.8.1-1020.21~22.04.1",
        "6.8.1-1021.22~22.04.1",
        "6.8.1-1022.23~22.04.1",
        "6.8.1-1023.24~22.04.1",
        "6.8.1-1024.25~22.04.1",
        "6.8.1-1025.26~22.04.1",
        "6.8.1-1026.27~22.04.1",
        "6.8.1-1030.31~22.04.1",
        "6.8.1-1031.32~22.04.1",
        "6.8.1-1034.35~22.04.1",
        "6.8.1-1035.36~22.04.1",
        "6.8.1-1036.37~22.04.1",
        "6.8.1-1037.38~22.04.1",
        "6.8.1-1038.39~22.04.1",
        "6.8.1-1039.40~22.04.1",
        "6.8.1-1040.41~22.04.1",
        "6.8.1-1041.42~22.04.1",
        "6.8.1-1042.43~22.04.1",
        "6.8.1-1045.46~22.04.1",
        "6.8.1-1046.47~22.04.2",
        "6.8.1-1047.48~22.04.1",
        "6.8.1-1048.49~22.04.1",
        "6.8.1-1051.52~22.04.1",
        "6.8.1-1052.53~22.04.1",
        "6.8.1-1055.56~22.04.1",
        "6.8.1-1056.57~22.04.2",
        "6.8.1-1057.58~22.04.1",
        "6.8.1-1058.59~22.04.1",
        "6.8.1-1059.60~22.04.1",
        "6.8.1-1060.61~22.04.1",
        "6.8.1-1061.62~22.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-aws-fips-cloud-tools-5.15.0-1051",
            "binary_version": "5.15.0-1051.56+fips1"
          },
          {
            "binary_name": "linux-aws-fips-headers-5.15.0-1051",
            "binary_version": "5.15.0-1051.56+fips1"
          },
          {
            "binary_name": "linux-aws-fips-tools-5.15.0-1051",
            "binary_version": "5.15.0-1051.56+fips1"
          },
          {
            "binary_name": "linux-buildinfo-5.15.0-1051-aws-fips",
            "binary_version": "5.15.0-1051.56+fips1"
          },
          {
            "binary_name": "linux-cloud-tools-5.15.0-1051-aws-fips",
            "binary_version": "5.15.0-1051.56+fips1"
          },
          {
            "binary_name": "linux-headers-5.15.0-1051-aws-fips",
            "binary_version": "5.15.0-1051.56+fips1"
          },
          {
            "binary_name": "linux-image-unsigned-5.15.0-1051-aws-fips",
            "binary_version": "5.15.0-1051.56+fips1"
          },
          {
            "binary_name": "linux-image-unsigned-hmac-5.15.0-1051-aws-fips",
            "binary_version": "5.15.0-1051.56+fips1"
          },
          {
            "binary_name": "linux-modules-5.15.0-1051-aws-fips",
            "binary_version": "5.15.0-1051.56+fips1"
          },
          {
            "binary_name": "linux-modules-extra-5.15.0-1051-aws-fips",
            "binary_version": "5.15.0-1051.56+fips1"
          },
          {
            "binary_name": "linux-tools-5.15.0-1051-aws-fips",
            "binary_version": "5.15.0-1051.56+fips1"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:FIPS-preview:22.04:LTS",
        "name": "linux-aws-fips",
        "purl": "pkg:deb/ubuntu/linux-aws-fips@5.15.0-1051.56+fips1?arch=source\u0026distro=fips-preview/jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "5.15.0-1042.47+fips1",
        "5.15.0-1051.56+fips1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-azure-fips-cloud-tools-5.15.0-1053",
            "binary_version": "5.15.0-1053.61+fips1"
          },
          {
            "binary_name": "linux-azure-fips-headers-5.15.0-1053",
            "binary_version": "5.15.0-1053.61+fips1"
          },
          {
            "binary_name": "linux-azure-fips-tools-5.15.0-1053",
            "binary_version": "5.15.0-1053.61+fips1"
          },
          {
            "binary_name": "linux-buildinfo-5.15.0-1053-azure-fips",
            "binary_version": "5.15.0-1053.61+fips1"
          },
          {
            "binary_name": "linux-cloud-tools-5.15.0-1053-azure-fips",
            "binary_version": "5.15.0-1053.61+fips1"
          },
          {
            "binary_name": "linux-headers-5.15.0-1053-azure-fips",
            "binary_version": "5.15.0-1053.61+fips1"
          },
          {
            "binary_name": "linux-image-unsigned-5.15.0-1053-azure-fips",
            "binary_version": "5.15.0-1053.61+fips1"
          },
          {
            "binary_name": "linux-image-unsigned-hmac-5.15.0-1053-azure-fips",
            "binary_version": "5.15.0-1053.61+fips1"
          },
          {
            "binary_name": "linux-modules-5.15.0-1053-azure-fips",
            "binary_version": "5.15.0-1053.61+fips1"
          },
          {
            "binary_name": "linux-modules-extra-5.15.0-1053-azure-fips",
            "binary_version": "5.15.0-1053.61+fips1"
          },
          {
            "binary_name": "linux-tools-5.15.0-1053-azure-fips",
            "binary_version": "5.15.0-1053.61+fips1"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:FIPS-preview:22.04:LTS",
        "name": "linux-azure-fips",
        "purl": "pkg:deb/ubuntu/linux-azure-fips@5.15.0-1053.61+fips1?arch=source\u0026distro=fips-preview/jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "5.15.0-1053.61+fips1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-buildinfo-5.15.0-73-fips",
            "binary_version": "5.15.0-73.80+fips1"
          },
          {
            "binary_name": "linux-fips-headers-5.15.0-73",
            "binary_version": "5.15.0-73.80+fips1"
          },
          {
            "binary_name": "linux-fips-tools-5.15.0-73",
            "binary_version": "5.15.0-73.80+fips1"
          },
          {
            "binary_name": "linux-fips-tools-host",
            "binary_version": "5.15.0-73.80+fips1"
          },
          {
            "binary_name": "linux-headers-5.15.0-73-fips",
            "binary_version": "5.15.0-73.80+fips1"
          },
          {
            "binary_name": "linux-image-unsigned-5.15.0-73-fips",
            "binary_version": "5.15.0-73.80+fips1"
          },
          {
            "binary_name": "linux-image-unsigned-hmac-5.15.0-73-fips",
            "binary_version": "5.15.0-73.80+fips1"
          },
          {
            "binary_name": "linux-modules-5.15.0-73-fips",
            "binary_version": "5.15.0-73.80+fips1"
          },
          {
            "binary_name": "linux-modules-extra-5.15.0-73-fips",
            "binary_version": "5.15.0-73.80+fips1"
          },
          {
            "binary_name": "linux-modules-iwlwifi-5.15.0-73-fips",
            "binary_version": "5.15.0-73.80+fips1"
          },
          {
            "binary_name": "linux-tools-5.15.0-73-fips",
            "binary_version": "5.15.0-73.80+fips1"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:FIPS-preview:22.04:LTS",
        "name": "linux-fips",
        "purl": "pkg:deb/ubuntu/linux-fips@5.15.0-73.80+fips1?arch=source\u0026distro=fips-preview/jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "5.15.0-73.80+fips1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-buildinfo-5.15.0-1048-gcp-fips",
            "binary_version": "5.15.0-1048.56+fips1"
          },
          {
            "binary_name": "linux-gcp-fips-headers-5.15.0-1048",
            "binary_version": "5.15.0-1048.56+fips1"
          },
          {
            "binary_name": "linux-gcp-fips-tools-5.15.0-1048",
            "binary_version": "5.15.0-1048.56+fips1"
          },
          {
            "binary_name": "linux-headers-5.15.0-1048-gcp-fips",
            "binary_version": "5.15.0-1048.56+fips1"
          },
          {
            "binary_name": "linux-image-unsigned-5.15.0-1048-gcp-fips",
            "binary_version": "5.15.0-1048.56+fips1"
          },
          {
            "binary_name": "linux-image-unsigned-hmac-5.15.0-1048-gcp-fips",
            "binary_version": "5.15.0-1048.56+fips1"
          },
          {
            "binary_name": "linux-modules-5.15.0-1048-gcp-fips",
            "binary_version": "5.15.0-1048.56+fips1"
          },
          {
            "binary_name": "linux-modules-extra-5.15.0-1048-gcp-fips",
            "binary_version": "5.15.0-1048.56+fips1"
          },
          {
            "binary_name": "linux-tools-5.15.0-1048-gcp-fips",
            "binary_version": "5.15.0-1048.56+fips1"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:FIPS-preview:22.04:LTS",
        "name": "linux-gcp-fips",
        "purl": "pkg:deb/ubuntu/linux-gcp-fips@5.15.0-1048.56+fips1?arch=source\u0026distro=fips-preview/jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "5.15.0-1048.56+fips1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-aws-fips-cloud-tools-5.15.0-1117",
            "binary_version": "5.15.0-1117.124+fips1"
          },
          {
            "binary_name": "linux-aws-fips-headers-5.15.0-1117",
            "binary_version": "5.15.0-1117.124+fips1"
          },
          {
            "binary_name": "linux-aws-fips-tools-5.15.0-1117",
            "binary_version": "5.15.0-1117.124+fips1"
          },
          {
            "binary_name": "linux-buildinfo-5.15.0-1117-aws-fips",
            "binary_version": "5.15.0-1117.124+fips1"
          },
          {
            "binary_name": "linux-cloud-tools-5.15.0-1117-aws-fips",
            "binary_version": "5.15.0-1117.124+fips1"
          },
          {
            "binary_name": "linux-headers-5.15.0-1117-aws-fips",
            "binary_version": "5.15.0-1117.124+fips1"
          },
          {
            "binary_name": "linux-image-unsigned-5.15.0-1117-aws-fips",
            "binary_version": "5.15.0-1117.124+fips1"
          },
          {
            "binary_name": "linux-image-unsigned-hmac-5.15.0-1117-aws-fips",
            "binary_version": "5.15.0-1117.124+fips1"
          },
          {
            "binary_name": "linux-modules-5.15.0-1117-aws-fips",
            "binary_version": "5.15.0-1117.124+fips1"
          },
          {
            "binary_name": "linux-modules-extra-5.15.0-1117-aws-fips",
            "binary_version": "5.15.0-1117.124+fips1"
          },
          {
            "binary_name": "linux-tools-5.15.0-1117-aws-fips",
            "binary_version": "5.15.0-1117.124+fips1"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:FIPS-updates:22.04:LTS",
        "name": "linux-aws-fips",
        "purl": "pkg:deb/ubuntu/linux-aws-fips@5.15.0-1117.124+fips1?arch=source\u0026distro=fips-updates/jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "5.15.0-1051.56+fips1",
        "5.15.0-1052.57+fips1",
        "5.15.0-1053.58+fips1",
        "5.15.0-1055.60+fips1",
        "5.15.0-1056.61+fips1",
        "5.15.0-1057.63+fips1",
        "5.15.0-1060.66+fips1",
        "5.15.0-1061.67+fips1",
        "5.15.0-1062.68+fips1",
        "5.15.0-1063.69+fips1",
        "5.15.0-1064.70+fips1",
        "5.15.0-1065.71+fips1",
        "5.15.0-1066.72+fips1",
        "5.15.0-1067.73+fips1",
        "5.15.0-1068.74+fips1",
        "5.15.0-1069.75+fips1",
        "5.15.0-1070.76+fips1",
        "5.15.0-1071.77+fips1",
        "5.15.0-1072.78+fips1",
        "5.15.0-1073.79+fips1",
        "5.15.0-1076.83+fips1",
        "5.15.0-1077.84+fips1",
        "5.15.0-1078.85+fips1",
        "5.15.0-1079.86+fips1",
        "5.15.0-1080.87+fips1",
        "5.15.0-1081.88+fips1",
        "5.15.0-1082.89+fips1",
        "5.15.0-1083.90+fips1",
        "5.15.0-1084.91+fips1",
        "5.15.0-1085.92+fips1",
        "5.15.0-1086.93+fips1",
        "5.15.0-1087.94+fips1",
        "5.15.0-1088.95+fips1",
        "5.15.0-1089.96+fips1",
        "5.15.0-1090.97+fips1",
        "5.15.0-1091.98+fips1",
        "5.15.0-1092.99+fips1",
        "5.15.0-1093.100+fips1",
        "5.15.0-1095.102+fips1",
        "5.15.0-1096.103+fips1",
        "5.15.0-1097.104+fips1",
        "5.15.0-1098.105+fips1",
        "5.15.0-1099.106+fips1",
        "5.15.0-1100.107+fips1",
        "5.15.0-1101.108+fips1",
        "5.15.0-1103.110+fips1",
        "5.15.0-1104.111+fips1",
        "5.15.0-1105.112+fips1",
        "5.15.0-1106.113+fips1",
        "5.15.0-1108.115+fips1",
        "5.15.0-1109.116+fips1",
        "5.15.0-1111.118+fips1",
        "5.15.0-1112.119+fips1",
        "5.15.0-1113.120+fips1",
        "5.15.0-1114.121+fips1",
        "5.15.0-1115.122+fips1",
        "5.15.0-1116.123+fips1",
        "5.15.0-1117.124+fips1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-azure-fips-cloud-tools-5.15.0-1123",
            "binary_version": "5.15.0-1123.132+fips1"
          },
          {
            "binary_name": "linux-azure-fips-headers-5.15.0-1123",
            "binary_version": "5.15.0-1123.132+fips1"
          },
          {
            "binary_name": "linux-azure-fips-tools-5.15.0-1123",
            "binary_version": "5.15.0-1123.132+fips1"
          },
          {
            "binary_name": "linux-buildinfo-5.15.0-1123-azure-fips",
            "binary_version": "5.15.0-1123.132+fips1"
          },
          {
            "binary_name": "linux-cloud-tools-5.15.0-1123-azure-fips",
            "binary_version": "5.15.0-1123.132+fips1"
          },
          {
            "binary_name": "linux-headers-5.15.0-1123-azure-fips",
            "binary_version": "5.15.0-1123.132+fips1"
          },
          {
            "binary_name": "linux-image-unsigned-5.15.0-1123-azure-fips",
            "binary_version": "5.15.0-1123.132+fips1"
          },
          {
            "binary_name": "linux-image-unsigned-hmac-5.15.0-1123-azure-fips",
            "binary_version": "5.15.0-1123.132+fips1"
          },
          {
            "binary_name": "linux-modules-5.15.0-1123-azure-fips",
            "binary_version": "5.15.0-1123.132+fips1"
          },
          {
            "binary_name": "linux-modules-extra-5.15.0-1123-azure-fips",
            "binary_version": "5.15.0-1123.132+fips1"
          },
          {
            "binary_name": "linux-modules-involflt-5.15.0-1123-azure-fips",
            "binary_version": "5.15.0-1123.132+fips1"
          },
          {
            "binary_name": "linux-tools-5.15.0-1123-azure-fips",
            "binary_version": "5.15.0-1123.132+fips1"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:FIPS-updates:22.04:LTS",
        "name": "linux-azure-fips",
        "purl": "pkg:deb/ubuntu/linux-azure-fips@5.15.0-1123.132+fips1?arch=source\u0026distro=fips-updates/jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "5.15.0-1053.61+fips1",
        "5.15.0-1058.66+fips1",
        "5.15.0-1059.67+fips1",
        "5.15.0-1060.69+fips1",
        "5.15.0-1061.70+fips1",
        "5.15.0-1063.72+fips1",
        "5.15.0-1064.73+fips1",
        "5.15.0-1065.74+fips1",
        "5.15.0-1067.76+fips1",
        "5.15.0-1068.77+fips1",
        "5.15.0-1070.79+fips1",
        "5.15.0-1071.80+fips1",
        "5.15.0-1072.81+fips1",
        "5.15.0-1073.82+fips1",
        "5.15.0-1074.83+fips1",
        "5.15.0-1075.84+fips1",
        "5.15.0-1078.87+fips1",
        "5.15.0-1079.88+fips1",
        "5.15.0-1080.89+fips1",
        "5.15.0-1082.91+fips1",
        "5.15.0-1083.92+fips1",
        "5.15.0-1085.94+fips1",
        "5.15.0-1087.96+fips1",
        "5.15.0-1088.97+fips1",
        "5.15.0-1089.98+fips1",
        "5.15.0-1090.99+fips1",
        "5.15.0-1091.100+fips1",
        "5.15.0-1094.103+fips1",
        "5.15.0-1095.104+fips1",
        "5.15.0-1096.105+fips1",
        "5.15.0-1097.106+fips1",
        "5.15.0-1098.107+fips1",
        "5.15.0-1101.110+fips1",
        "5.15.0-1102.111+fips1",
        "5.15.0-1103.112+fips1",
        "5.15.0-1109.118+fips1",
        "5.15.0-1110.119+fips1",
        "5.15.0-1111.120+fips1",
        "5.15.0-1114.123+fips1",
        "5.15.0-1116.125+fips1",
        "5.15.0-1117.126+fips1",
        "5.15.0-1118.127+fips1",
        "5.15.0-1119.128+fips1",
        "5.15.0-1121.130+fips1",
        "5.15.0-1122.131+fips1",
        "5.15.0-1123.132+fips1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-buildinfo-5.15.0-198-fips",
            "binary_version": "5.15.0-198.208+fips1"
          },
          {
            "binary_name": "linux-cloud-tools-5.15.0-198-fips",
            "binary_version": "5.15.0-198.208+fips1"
          },
          {
            "binary_name": "linux-fips-cloud-tools-5.15.0-198",
            "binary_version": "5.15.0-198.208+fips1"
          },
          {
            "binary_name": "linux-fips-headers-5.15.0-198",
            "binary_version": "5.15.0-198.208+fips1"
          },
          {
            "binary_name": "linux-fips-tools-5.15.0-198",
            "binary_version": "5.15.0-198.208+fips1"
          },
          {
            "binary_name": "linux-headers-5.15.0-198-fips",
            "binary_version": "5.15.0-198.208+fips1"
          },
          {
            "binary_name": "linux-image-unsigned-5.15.0-198-fips",
            "binary_version": "5.15.0-198.208+fips1"
          },
          {
            "binary_name": "linux-image-unsigned-hmac-5.15.0-198-fips",
            "binary_version": "5.15.0-198.208+fips1"
          },
          {
            "binary_name": "linux-modules-5.15.0-198-fips",
            "binary_version": "5.15.0-198.208+fips1"
          },
          {
            "binary_name": "linux-modules-extra-5.15.0-198-fips",
            "binary_version": "5.15.0-198.208+fips1"
          },
          {
            "binary_name": "linux-modules-iwlwifi-5.15.0-198-fips",
            "binary_version": "5.15.0-198.208+fips1"
          },
          {
            "binary_name": "linux-tools-5.15.0-198-fips",
            "binary_version": "5.15.0-198.208+fips1"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:FIPS-updates:22.04:LTS",
        "name": "linux-fips",
        "purl": "pkg:deb/ubuntu/linux-fips@5.15.0-198.208+fips1?arch=source\u0026distro=fips-updates/jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "5.15.0-73.80+fips1",
        "5.15.0-92.102+fips1",
        "5.15.0-94.104+fips1",
        "5.15.0-97.107+fips1",
        "5.15.0-100.110+fips1",
        "5.15.0-101.111+fips1",
        "5.15.0-102.112+fips1",
        "5.15.0-105.115+fips1",
        "5.15.0-106.116+fips1",
        "5.15.0-107.117+fips1",
        "5.15.0-111.121+fips1",
        "5.15.0-113.123+fips1",
        "5.15.0-115.125+fips1",
        "5.15.0-117.127+fips1",
        "5.15.0-118.128+fips1",
        "5.15.0-119.129+fips1",
        "5.15.0-121.131+fips1",
        "5.15.0-122.132+fips1",
        "5.15.0-124.134+fips1",
        "5.15.0-125.135+fips1",
        "5.15.0-127.137+fips1",
        "5.15.0-128.138+fips1",
        "5.15.0-130.140+fips1",
        "5.15.0-131.141+fips1",
        "5.15.0-133.144+fips1",
        "5.15.0-134.145+fips1",
        "5.15.0-135.146+fips1",
        "5.15.0-136.147+fips1",
        "5.15.0-138.148+fips1",
        "5.15.0-139.149+fips1",
        "5.15.0-140.150+fips1",
        "5.15.0-141.151+fips1",
        "5.15.0-142.152+fips1",
        "5.15.0-143.153+fips1",
        "5.15.0-144.157+fips1",
        "5.15.0-145.158+fips1",
        "5.15.0-152.162+fips1",
        "5.15.0-153.163+fips1",
        "5.15.0-156.166+fips1",
        "5.15.0-157.167+fips1",
        "5.15.0-160.170+fips1",
        "5.15.0-161.171+fips1",
        "5.15.0-163.173+fips1",
        "5.15.0-164.174+fips1",
        "5.15.0-168.178+fips1",
        "5.15.0-170.180+fips1",
        "5.15.0-171.181+fips1",
        "5.15.0-173.183+fips1",
        "5.15.0-174.184+fips1",
        "5.15.0-176.186+fips1",
        "5.15.0-177.187+fips1",
        "5.15.0-179.189+fips1",
        "5.15.0-181.191+fips1",
        "5.15.0-185.195+fips1",
        "5.15.0-186.196+fips1",
        "5.15.0-190.200+fips1",
        "5.15.0-191.201+fips1",
        "5.15.0-194.204+fips1",
        "5.15.0-198.208+fips1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-buildinfo-5.15.0-1118-gcp-fips",
            "binary_version": "5.15.0-1118.128+fips1"
          },
          {
            "binary_name": "linux-gcp-fips-headers-5.15.0-1118",
            "binary_version": "5.15.0-1118.128+fips1"
          },
          {
            "binary_name": "linux-gcp-fips-tools-5.15.0-1118",
            "binary_version": "5.15.0-1118.128+fips1"
          },
          {
            "binary_name": "linux-headers-5.15.0-1118-gcp-fips",
            "binary_version": "5.15.0-1118.128+fips1"
          },
          {
            "binary_name": "linux-image-unsigned-5.15.0-1118-gcp-fips",
            "binary_version": "5.15.0-1118.128+fips1"
          },
          {
            "binary_name": "linux-image-unsigned-hmac-5.15.0-1118-gcp-fips",
            "binary_version": "5.15.0-1118.128+fips1"
          },
          {
            "binary_name": "linux-modules-5.15.0-1118-gcp-fips",
            "binary_version": "5.15.0-1118.128+fips1"
          },
          {
            "binary_name": "linux-modules-extra-5.15.0-1118-gcp-fips",
            "binary_version": "5.15.0-1118.128+fips1"
          },
          {
            "binary_name": "linux-tools-5.15.0-1118-gcp-fips",
            "binary_version": "5.15.0-1118.128+fips1"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:FIPS-updates:22.04:LTS",
        "name": "linux-gcp-fips",
        "purl": "pkg:deb/ubuntu/linux-gcp-fips@5.15.0-1118.128+fips1?arch=source\u0026distro=fips-updates/jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "5.15.0-1048.56+fips1",
        "5.15.0-1055.63+fips2",
        "5.15.0-1058.66+fips1",
        "5.15.0-1059.67+fips1",
        "5.15.0-1060.68+fips1",
        "5.15.0-1062.70+fips1",
        "5.15.0-1063.71+fips1",
        "5.15.0-1064.72+fips1",
        "5.15.0-1065.73+fips1",
        "5.15.0-1066.74+fips1",
        "5.15.0-1067.75+fips1",
        "5.15.0-1068.76+fips1",
        "5.15.0-1069.77+fips1",
        "5.15.0-1070.78+fips1",
        "5.15.0-1071.79+fips1",
        "5.15.0-1072.80+fips1",
        "5.15.0-1073.81+fips1",
        "5.15.0-1074.83+fips1",
        "5.15.0-1075.84+fips1",
        "5.15.0-1077.86+fips1",
        "5.15.0-1078.87+fips1",
        "5.15.0-1079.88+fips1",
        "5.15.0-1080.89+fips1",
        "5.15.0-1081.90+fips1",
        "5.15.0-1082.91+fips1",
        "5.15.0-1083.92+fips1",
        "5.15.0-1084.93+fips1",
        "5.15.0-1085.94+fips1",
        "5.15.0-1086.95+fips1",
        "5.15.0-1087.96+fips1",
        "5.15.0-1088.97+fips1",
        "5.15.0-1090.99+fips1",
        "5.15.0-1091.100+fips1",
        "5.15.0-1092.101+fips1",
        "5.15.0-1093.102+fips1",
        "5.15.0-1095.104+fips1",
        "5.15.0-1096.105+fips1",
        "5.15.0-1097.106+fips1",
        "5.15.0-1098.107+fips1",
        "5.15.0-1099.108+fips1",
        "5.15.0-1100.109+fips1",
        "5.15.0-1101.110+fips1",
        "5.15.0-1103.112+fips1",
        "5.15.0-1104.113+fips1",
        "5.15.0-1105.114+fips1",
        "5.15.0-1106.115+fips1",
        "5.15.0-1108.117+fips1",
        "5.15.0-1109.118+fips1",
        "5.15.0-1111.121+fips1",
        "5.15.0-1112.122+fips1",
        "5.15.0-1114.124+fips1",
        "5.15.0-1115.125+fips1",
        "5.15.0-1116.126+fips1",
        "5.15.0-1118.128+fips1"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "linux-buildinfo-6.8.0-147-generic",
            "binary_version": "6.8.0-147.147"
          },
          {
            "binary_name": "linux-buildinfo-6.8.0-147-generic-64k",
            "binary_version": "6.8.0-147.147"
          },
          {
            "binary_name": "linux-cloud-tools-6.8.0-147",
            "binary_version": "6.8.0-147.147"
          },
          {
            "binary_name": "linux-cloud-tools-6.8.0-147-generic",
            "binary_version": "6.8.0-147.147"
          },
          {
            "binary_name": "linux-cloud-tools-common",
            "binary_version": "6.8.0-147.147"
          },
          {
            "binary_name": "linux-headers-6.8.0-147",
            "binary_version": "6.8.0-147.147"
          },
          {
            "binary_name": "linux-headers-6.8.0-147-generic",
            "binary_version": "6.8.0-147.147"
          },
          {
            "binary_name": "linux-headers-6.8.0-147-generic-64k",
            "binary_version": "6.8.0-147.147"
          },
          {
            "binary_name": "linux-image-6.8.0-147-generic",
            "binary_version": "6.8.0-147.147"
          },
          {
            "binary_name": "linux-image-unsigned-6.8.0-147-generic",
            "binary_version": "6.8.0-147.147"
          },
          {
            "binary_name": "linux-image-unsigned-6.8.0-147-generic-64k",
            "binary_version": "6.8.0-147.147"
          },
          {
            "binary_name": "linux-lib-rust-6.8.0-147-generic",
            "binary_version": "6.8.0-147.147"
          },
          {
            "binary_name": "linux-modules-6.8.0-147-generic",
            "binary_version": "6.8.0-147.147"
          },
          {
            "binary_name": "linux-modules-6.8.0-147-generic-64k",
            "binary_version": "6.8.0-147.147"
          },
          {
            "binary_name": "linux-modules-extra-6.8.0-147-generic",
            "binary_version": "6.8.0-147.147"
          },
          {
            "binary_name": "linux-modules-ipu6-6.8.0-147-generic",
            "binary_version": "6.8.0-147.147"
          },
          {
            "binary_name": "linux-modules-iwlwifi-6.8.0-147-generic",
            "binary_version": "6.8.0-147.147"
          },
          {
            "binary_name": "linux-modules-usbio-6.8.0-147-generic",
            "binary_version": "6.8.0-147.147"
          },
          {
            "binary_name": "linux-source-6.8.0",
            "binary_version": "6.8.0-147.147"
          },
          {
            "binary_name": "linux-tools-6.8.0-147",
            "binary_version": "6.8.0-147.147"
          },
          {
            "binary_name": "linux-tools-6.8.0-147-generic",
            "binary_version": "6.8.0-147.147"
          },
          {
            "binary_name": "linux-tools-6.8.0-147-generic-64k",
            "binary_version": "6.8.0-147.147"
          },
          {
            "binary_name": "linux-tools-common",
            "binary_version": "6.8.0-147.147"
          },
          {
            "binary_name": "linux-tools-host",
            "binary_version": "6.8.0-147.147"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:24.04:LTS",
        "name": "linux",
        "purl": "pkg:deb/ubuntu/linux@6.8.0-147.147?arch=source\u0026distro=noble"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "6.8.0-147.147"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "6.5.0-9.9",
        "6.6.0-14.14",
        "6.8.0-11.11",
        "6.8.0-20.20",
        "6.8.0-22.22",
        "6.8.0-28.28",
        "6.8.0-31.31",
        "6.8.0-35.35",
        "6.8.0-36.36",
        "6.8.0-38.38",
        "6.8.0-39.39",
        "6.8.0-40.40",
        "6.8.0-41.41",
        "6.8.0-44.44",
        "6.8.0-45.45",
        "6.8.0-47.47",
        "6.8.0-48.48",
        "6.8.0-49.49",
        "6.8.0-50.51",
        "6.8.0-51.52",
        "6.8.0-52.53",
        "6.8.0-53.55",
        "6.8.0-54.56",
        "6.8.0-55.57",
        "6.8.0-56.58",
        "6.8.0-57.59",
        "6.8.0-58.60",
        "6.8.0-59.61",
        "6.8.0-60.63",
        "6.8.0-62.65",
        "6.8.0-63.66",
        "6.8.0-64.67",
        "6.8.0-71.71",
        "6.8.0-78.78",
        "6.8.0-79.79",
        "6.8.0-83.83",
        "6.8.0-84.84",
        "6.8.0-85.85",
        "6.8.0-86.87",
        "6.8.0-87.88",
        "6.8.0-88.89",
        "6.8.0-90.91",
        "6.8.0-94.96",
        "6.8.0-100.100",
        "6.8.0-101.101",
        "6.8.0-106.106",
        "6.8.0-107.107",
        "6.8.0-110.110",
        "6.8.0-111.111",
        "6.8.0-117.117",
        "6.8.0-124.124",
        "6.8.0-134.134",
        "6.8.0-136.136",
        "6.8.0-137.137",
        "6.8.0-138.138",
        "6.8.0-139.139",
        "6.8.0-142.142",
        "6.8.0-146.146"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "linux-aws-cloud-tools-6.8.0-1067",
            "binary_version": "6.8.0-1067.70"
          },
          {
            "binary_name": "linux-aws-headers-6.8.0-1067",
            "binary_version": "6.8.0-1067.70"
          },
          {
            "binary_name": "linux-aws-tools-6.8.0-1067",
            "binary_version": "6.8.0-1067.70"
          },
          {
            "binary_name": "linux-buildinfo-6.8.0-1067-aws",
            "binary_version": "6.8.0-1067.70"
          },
          {
            "binary_name": "linux-buildinfo-6.8.0-1067-aws-64k",
            "binary_version": "6.8.0-1067.70"
          },
          {
            "binary_name": "linux-cloud-tools-6.8.0-1067-aws",
            "binary_version": "6.8.0-1067.70"
          },
          {
            "binary_name": "linux-cloud-tools-6.8.0-1067-aws-64k",
            "binary_version": "6.8.0-1067.70"
          },
          {
            "binary_name": "linux-headers-6.8.0-1067-aws",
            "binary_version": "6.8.0-1067.70"
          },
          {
            "binary_name": "linux-headers-6.8.0-1067-aws-64k",
            "binary_version": "6.8.0-1067.70"
          },
          {
            "binary_name": "linux-image-unsigned-6.8.0-1067-aws",
            "binary_version": "6.8.0-1067.70"
          },
          {
            "binary_name": "linux-image-unsigned-6.8.0-1067-aws-64k",
            "binary_version": "6.8.0-1067.70"
          },
          {
            "binary_name": "linux-modules-6.8.0-1067-aws",
            "binary_version": "6.8.0-1067.70"
          },
          {
            "binary_name": "linux-modules-6.8.0-1067-aws-64k",
            "binary_version": "6.8.0-1067.70"
          },
          {
            "binary_name": "linux-modules-extra-6.8.0-1067-aws",
            "binary_version": "6.8.0-1067.70"
          },
          {
            "binary_name": "linux-modules-extra-6.8.0-1067-aws-64k",
            "binary_version": "6.8.0-1067.70"
          },
          {
            "binary_name": "linux-tools-6.8.0-1067-aws",
            "binary_version": "6.8.0-1067.70"
          },
          {
            "binary_name": "linux-tools-6.8.0-1067-aws-64k",
            "binary_version": "6.8.0-1067.70"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:24.04:LTS",
        "name": "linux-aws",
        "purl": "pkg:deb/ubuntu/linux-aws@6.8.0-1067.70?arch=source\u0026distro=noble"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "6.8.0-1067.70"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "6.5.0-1008.8",
        "6.6.0-1001.1",
        "6.8.0-1001.1",
        "6.8.0-1006.6",
        "6.8.0-1008.8",
        "6.8.0-1009.9",
        "6.8.0-1010.10",
        "6.8.0-1011.12",
        "6.8.0-1012.13",
        "6.8.0-1013.14",
        "6.8.0-1014.15",
        "6.8.0-1015.16",
        "6.8.0-1016.17",
        "6.8.0-1017.18",
        "6.8.0-1018.20",
        "6.8.0-1019.21",
        "6.8.0-1020.22",
        "6.8.0-1021.23",
        "6.8.0-1023.25",
        "6.8.0-1024.26",
        "6.8.0-1025.27",
        "6.8.0-1026.28",
        "6.8.0-1027.29",
        "6.8.0-1028.30",
        "6.8.0-1029.31",
        "6.8.0-1030.32",
        "6.8.0-1031.33",
        "6.8.0-1032.34",
        "6.8.0-1033.35",
        "6.8.0-1035.37",
        "6.8.0-1036.38",
        "6.8.0-1038.40",
        "6.8.0-1039.41",
        "6.8.0-1040.42",
        "6.8.0-1041.43",
        "6.8.0-1042.44",
        "6.8.0-1043.45",
        "6.8.0-1044.46",
        "6.8.0-1045.47",
        "6.8.0-1046.49",
        "6.8.0-1047.50",
        "6.8.0-1050.53",
        "6.8.0-1051.54",
        "6.8.0-1052.55",
        "6.8.0-1053.56",
        "6.8.0-1055.58",
        "6.8.0-1057.60",
        "6.8.0-1060.63",
        "6.8.0-1061.64",
        "6.8.0-1062.65",
        "6.8.0-1063.66",
        "6.8.0-1064.67",
        "6.8.0-1065.68",
        "6.8.0-1066.69"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-aws-6.14-cloud-tools-6.14.0-1018",
            "binary_version": "6.14.0-1018.18~24.04.1"
          },
          {
            "binary_name": "linux-aws-6.14-headers-6.14.0-1018",
            "binary_version": "6.14.0-1018.18~24.04.1"
          },
          {
            "binary_name": "linux-aws-6.14-tools-6.14.0-1018",
            "binary_version": "6.14.0-1018.18~24.04.1"
          },
          {
            "binary_name": "linux-buildinfo-6.14.0-1018-aws",
            "binary_version": "6.14.0-1018.18~24.04.1"
          },
          {
            "binary_name": "linux-buildinfo-6.14.0-1018-aws-64k",
            "binary_version": "6.14.0-1018.18~24.04.1"
          },
          {
            "binary_name": "linux-cloud-tools-6.14.0-1018-aws",
            "binary_version": "6.14.0-1018.18~24.04.1"
          },
          {
            "binary_name": "linux-cloud-tools-6.14.0-1018-aws-64k",
            "binary_version": "6.14.0-1018.18~24.04.1"
          },
          {
            "binary_name": "linux-headers-6.14.0-1018-aws",
            "binary_version": "6.14.0-1018.18~24.04.1"
          },
          {
            "binary_name": "linux-headers-6.14.0-1018-aws-64k",
            "binary_version": "6.14.0-1018.18~24.04.1"
          },
          {
            "binary_name": "linux-image-unsigned-6.14.0-1018-aws",
            "binary_version": "6.14.0-1018.18~24.04.1"
          },
          {
            "binary_name": "linux-image-unsigned-6.14.0-1018-aws-64k",
            "binary_version": "6.14.0-1018.18~24.04.1"
          },
          {
            "binary_name": "linux-modules-6.14.0-1018-aws",
            "binary_version": "6.14.0-1018.18~24.04.1"
          },
          {
            "binary_name": "linux-modules-6.14.0-1018-aws-64k",
            "binary_version": "6.14.0-1018.18~24.04.1"
          },
          {
            "binary_name": "linux-modules-extra-6.14.0-1018-aws",
            "binary_version": "6.14.0-1018.18~24.04.1"
          },
          {
            "binary_name": "linux-modules-extra-6.14.0-1018-aws-64k",
            "binary_version": "6.14.0-1018.18~24.04.1"
          },
          {
            "binary_name": "linux-tools-6.14.0-1018-aws",
            "binary_version": "6.14.0-1018.18~24.04.1"
          },
          {
            "binary_name": "linux-tools-6.14.0-1018-aws-64k",
            "binary_version": "6.14.0-1018.18~24.04.1"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:24.04:LTS",
        "name": "linux-aws-6.14",
        "purl": "pkg:deb/ubuntu/linux-aws-6.14@6.14.0-1018.18~24.04.1?arch=source\u0026distro=noble"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "6.14.0-1007.7~24.04.1",
        "6.14.0-1009.9~24.04.1",
        "6.14.0-1010.10~24.04.1",
        "6.14.0-1011.11~24.04.1",
        "6.14.0-1012.12~24.04.1",
        "6.14.0-1013.13~24.04.1",
        "6.14.0-1014.14~24.04.1",
        "6.14.0-1015.15~24.04.1",
        "6.14.0-1016.16~24.04.1",
        "6.14.0-1017.17~24.04.1",
        "6.14.0-1018.18~24.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-aws-6.17-cloud-tools-6.17.0-1020",
            "binary_version": "6.17.0-1020.20~24.04.1"
          },
          {
            "binary_name": "linux-aws-6.17-headers-6.17.0-1020",
            "binary_version": "6.17.0-1020.20~24.04.1"
          },
          {
            "binary_name": "linux-aws-6.17-tools-6.17.0-1020",
            "binary_version": "6.17.0-1020.20~24.04.1"
          },
          {
            "binary_name": "linux-buildinfo-6.17.0-1020-aws",
            "binary_version": "6.17.0-1020.20~24.04.1"
          },
          {
            "binary_name": "linux-buildinfo-6.17.0-1020-aws-64k",
            "binary_version": "6.17.0-1020.20~24.04.1"
          },
          {
            "binary_name": "linux-cloud-tools-6.17.0-1020-aws",
            "binary_version": "6.17.0-1020.20~24.04.1"
          },
          {
            "binary_name": "linux-cloud-tools-6.17.0-1020-aws-64k",
            "binary_version": "6.17.0-1020.20~24.04.1"
          },
          {
            "binary_name": "linux-headers-6.17.0-1020-aws",
            "binary_version": "6.17.0-1020.20~24.04.1"
          },
          {
            "binary_name": "linux-headers-6.17.0-1020-aws-64k",
            "binary_version": "6.17.0-1020.20~24.04.1"
          },
          {
            "binary_name": "linux-image-unsigned-6.17.0-1020-aws",
            "binary_version": "6.17.0-1020.20~24.04.1"
          },
          {
            "binary_name": "linux-image-unsigned-6.17.0-1020-aws-64k",
            "binary_version": "6.17.0-1020.20~24.04.1"
          },
          {
            "binary_name": "linux-modules-6.17.0-1020-aws",
            "binary_version": "6.17.0-1020.20~24.04.1"
          },
          {
            "binary_name": "linux-modules-6.17.0-1020-aws-64k",
            "binary_version": "6.17.0-1020.20~24.04.1"
          },
          {
            "binary_name": "linux-modules-extra-6.17.0-1020-aws",
            "binary_version": "6.17.0-1020.20~24.04.1"
          },
          {
            "binary_name": "linux-modules-extra-6.17.0-1020-aws-64k",
            "binary_version": "6.17.0-1020.20~24.04.1"
          },
          {
            "binary_name": "linux-tools-6.17.0-1020-aws",
            "binary_version": "6.17.0-1020.20~24.04.1"
          },
          {
            "binary_name": "linux-tools-6.17.0-1020-aws-64k",
            "binary_version": "6.17.0-1020.20~24.04.1"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:24.04:LTS",
        "name": "linux-aws-6.17",
        "purl": "pkg:deb/ubuntu/linux-aws-6.17@6.17.0-1020.20~24.04.1?arch=source\u0026distro=noble"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "6.17.0-1005.5~24.04.2",
        "6.17.0-1007.7~24.04.1",
        "6.17.0-1009.9~24.04.2",
        "6.17.0-1010.10~24.04.1",
        "6.17.0-1012.12~24.04.1",
        "6.17.0-1013.13~24.04.1",
        "6.17.0-1015.15~24.04.1",
        "6.17.0-1017.17~24.04.1",
        "6.17.0-1019.19~24.04.1",
        "6.17.0-1020.20~24.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "linux-aws-7.0-cloud-tools-7.0.0-1014",
            "binary_version": "7.0.0-1014.14~24.04.1"
          },
          {
            "binary_name": "linux-aws-7.0-headers-7.0.0-1014",
            "binary_version": "7.0.0-1014.14~24.04.1"
          },
          {
            "binary_name": "linux-aws-7.0-tools-7.0.0-1014",
            "binary_version": "7.0.0-1014.14~24.04.1"
          },
          {
            "binary_name": "linux-buildinfo-7.0.0-1014-aws",
            "binary_version": "7.0.0-1014.14~24.04.1"
          },
          {
            "binary_name": "linux-buildinfo-7.0.0-1014-aws-64k",
            "binary_version": "7.0.0-1014.14~24.04.1"
          },
          {
            "binary_name": "linux-cloud-tools-7.0.0-1014-aws",
            "binary_version": "7.0.0-1014.14~24.04.1"
          },
          {
            "binary_name": "linux-cloud-tools-7.0.0-1014-aws-64k",
            "binary_version": "7.0.0-1014.14~24.04.1"
          },
          {
            "binary_name": "linux-headers-7.0.0-1014-aws",
            "binary_version": "7.0.0-1014.14~24.04.1"
          },
          {
            "binary_name": "linux-headers-7.0.0-1014-aws-64k",
            "binary_version": "7.0.0-1014.14~24.04.1"
          },
          {
            "binary_name": "linux-image-unsigned-7.0.0-1014-aws",
            "binary_version": "7.0.0-1014.14~24.04.1"
          },
          {
            "binary_name": "linux-image-unsigned-7.0.0-1014-aws-64k",
            "binary_version": "7.0.0-1014.14~24.04.1"
          },
          {
            "binary_name": "linux-modules-7.0.0-1014-aws",
            "binary_version": "7.0.0-1014.14~24.04.1"
          },
          {
            "binary_name": "linux-modules-7.0.0-1014-aws-64k",
            "binary_version": "7.0.0-1014.14~24.04.1"
          },
          {
            "binary_name": "linux-tools-7.0.0-1014-aws",
            "binary_version": "7.0.0-1014.14~24.04.1"
          },
          {
            "binary_name": "linux-tools-7.0.0-1014-aws-64k",
            "binary_version": "7.0.0-1014.14~24.04.1"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:24.04:LTS",
        "name": "linux-aws-7.0",
        "purl": "pkg:deb/ubuntu/linux-aws-7.0@7.0.0-1014.14~24.04.1?arch=source\u0026distro=noble"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "7.0.0-1014.14~24.04.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "7.0.0-1007.7~24.04.2",
        "7.0.0-1009.9~24.04.1",
        "7.0.0-1010.10~24.04.1",
        "7.0.0-1011.11~24.04.1",
        "7.0.0-1012.12~24.04.1",
        "7.0.0-1013.13~24.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "linux-azure-cloud-tools-6.8.0-1071",
            "binary_version": "6.8.0-1071.79"
          },
          {
            "binary_name": "linux-azure-headers-6.8.0-1071",
            "binary_version": "6.8.0-1071.79"
          },
          {
            "binary_name": "linux-azure-tools-6.8.0-1071",
            "binary_version": "6.8.0-1071.79"
          },
          {
            "binary_name": "linux-buildinfo-6.8.0-1071-azure",
            "binary_version": "6.8.0-1071.79"
          },
          {
            "binary_name": "linux-cloud-tools-6.8.0-1071-azure",
            "binary_version": "6.8.0-1071.79"
          },
          {
            "binary_name": "linux-headers-6.8.0-1071-azure",
            "binary_version": "6.8.0-1071.79"
          },
          {
            "binary_name": "linux-image-unsigned-6.8.0-1071-azure",
            "binary_version": "6.8.0-1071.79"
          },
          {
            "binary_name": "linux-modules-6.8.0-1071-azure",
            "binary_version": "6.8.0-1071.79"
          },
          {
            "binary_name": "linux-modules-extra-6.8.0-1071-azure",
            "binary_version": "6.8.0-1071.79"
          },
          {
            "binary_name": "linux-modules-involflt-6.8.0-1071-azure",
            "binary_version": "6.8.0-1071.79"
          },
          {
            "binary_name": "linux-tools-6.8.0-1071-azure",
            "binary_version": "6.8.0-1071.79"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:24.04:LTS",
        "name": "linux-azure",
        "purl": "pkg:deb/ubuntu/linux-azure@6.8.0-1071.79?arch=source\u0026distro=noble"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "6.8.0-1071.79"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "6.5.0-1007.7",
        "6.6.0-1001.1",
        "6.8.0-1001.1",
        "6.8.0-1005.5",
        "6.8.0-1006.6",
        "6.8.0-1007.7",
        "6.8.0-1008.8",
        "6.8.0-1009.9",
        "6.8.0-1010.10",
        "6.8.0-1012.14",
        "6.8.0-1013.15",
        "6.8.0-1014.16",
        "6.8.0-1015.17",
        "6.8.0-1016.18",
        "6.8.0-1017.20",
        "6.8.0-1018.21",
        "6.8.0-1020.23",
        "6.8.0-1021.25",
        "6.8.0-1025.30",
        "6.8.0-1026.31",
        "6.8.0-1027.32",
        "6.8.0-1028.33",
        "6.8.0-1029.34",
        "6.8.0-1030.35",
        "6.8.0-1031.36",
        "6.8.0-1034.39",
        "6.8.0-1038.44",
        "6.8.0-1040.46",
        "6.8.0-1041.47",
        "6.8.0-1042.48",
        "6.8.0-1044.50",
        "6.8.0-1046.52",
        "6.8.0-1051.57",
        "6.8.0-1052.58",
        "6.8.0-1054.60",
        "6.8.0-1056.62",
        "6.8.0-1058.64",
        "6.8.0-1059.65",
        "6.8.0-1062.69",
        "6.8.0-1063.71",
        "6.8.0-1064.72",
        "6.8.0-1065.73",
        "6.8.0-1067.75",
        "6.8.0-1068.76",
        "6.8.0-1070.78"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-azure-6.11-cloud-tools-6.11.0-1018",
            "binary_version": "6.11.0-1018.18~24.04.1"
          },
          {
            "binary_name": "linux-azure-6.11-headers-6.11.0-1018",
            "binary_version": "6.11.0-1018.18~24.04.1"
          },
          {
            "binary_name": "linux-azure-6.11-tools-6.11.0-1018",
            "binary_version": "6.11.0-1018.18~24.04.1"
          },
          {
            "binary_name": "linux-buildinfo-6.11.0-1018-azure",
            "binary_version": "6.11.0-1018.18~24.04.1"
          },
          {
            "binary_name": "linux-cloud-tools-6.11.0-1018-azure",
            "binary_version": "6.11.0-1018.18~24.04.1"
          },
          {
            "binary_name": "linux-headers-6.11.0-1018-azure",
            "binary_version": "6.11.0-1018.18~24.04.1"
          },
          {
            "binary_name": "linux-image-unsigned-6.11.0-1018-azure",
            "binary_version": "6.11.0-1018.18~24.04.1"
          },
          {
            "binary_name": "linux-modules-6.11.0-1018-azure",
            "binary_version": "6.11.0-1018.18~24.04.1"
          },
          {
            "binary_name": "linux-modules-extra-6.11.0-1018-azure",
            "binary_version": "6.11.0-1018.18~24.04.1"
          },
          {
            "binary_name": "linux-modules-iwlwifi-6.11.0-1018-azure",
            "binary_version": "6.11.0-1018.18~24.04.1"
          },
          {
            "binary_name": "linux-tools-6.11.0-1018-azure",
            "binary_version": "6.11.0-1018.18~24.04.1"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:24.04:LTS",
        "name": "linux-azure-6.11",
        "purl": "pkg:deb/ubuntu/linux-azure-6.11@6.11.0-1018.18~24.04.1?arch=source\u0026distro=noble"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "6.11.0-1008.8~24.04.1",
        "6.11.0-1012.12~24.04.1",
        "6.11.0-1013.13~24.04.1",
        "6.11.0-1014.14~24.04.1",
        "6.11.0-1015.15~24.04.1",
        "6.11.0-1017.17~24.04.1",
        "6.11.0-1018.18~24.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-azure-6.14-cloud-tools-6.14.0-1017",
            "binary_version": "6.14.0-1017.17~24.04.1"
          },
          {
            "binary_name": "linux-azure-6.14-headers-6.14.0-1017",
            "binary_version": "6.14.0-1017.17~24.04.1"
          },
          {
            "binary_name": "linux-azure-6.14-tools-6.14.0-1017",
            "binary_version": "6.14.0-1017.17~24.04.1"
          },
          {
            "binary_name": "linux-buildinfo-6.14.0-1017-azure",
            "binary_version": "6.14.0-1017.17~24.04.1"
          },
          {
            "binary_name": "linux-cloud-tools-6.14.0-1017-azure",
            "binary_version": "6.14.0-1017.17~24.04.1"
          },
          {
            "binary_name": "linux-headers-6.14.0-1017-azure",
            "binary_version": "6.14.0-1017.17~24.04.1"
          },
          {
            "binary_name": "linux-image-unsigned-6.14.0-1017-azure",
            "binary_version": "6.14.0-1017.17~24.04.1"
          },
          {
            "binary_name": "linux-modules-6.14.0-1017-azure",
            "binary_version": "6.14.0-1017.17~24.04.1"
          },
          {
            "binary_name": "linux-modules-extra-6.14.0-1017-azure",
            "binary_version": "6.14.0-1017.17~24.04.1"
          },
          {
            "binary_name": "linux-tools-6.14.0-1017-azure",
            "binary_version": "6.14.0-1017.17~24.04.1"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:24.04:LTS",
        "name": "linux-azure-6.14",
        "purl": "pkg:deb/ubuntu/linux-azure-6.14@6.14.0-1017.17~24.04.1?arch=source\u0026distro=noble"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "6.14.0-1010.10~24.04.1",
        "6.14.0-1012.12~24.04.1",
        "6.14.0-1013.13~24.04.1",
        "6.14.0-1014.14~24.04.1",
        "6.14.0-1017.17~24.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-azure-6.17-cloud-tools-6.17.0-1022",
            "binary_version": "6.17.0-1022.22"
          },
          {
            "binary_name": "linux-azure-6.17-headers-6.17.0-1022",
            "binary_version": "6.17.0-1022.22"
          },
          {
            "binary_name": "linux-azure-6.17-tools-6.17.0-1022",
            "binary_version": "6.17.0-1022.22"
          },
          {
            "binary_name": "linux-buildinfo-6.17.0-1022-azure",
            "binary_version": "6.17.0-1022.22"
          },
          {
            "binary_name": "linux-cloud-tools-6.17.0-1022-azure",
            "binary_version": "6.17.0-1022.22"
          },
          {
            "binary_name": "linux-headers-6.17.0-1022-azure",
            "binary_version": "6.17.0-1022.22"
          },
          {
            "binary_name": "linux-image-unsigned-6.17.0-1022-azure",
            "binary_version": "6.17.0-1022.22"
          },
          {
            "binary_name": "linux-modules-6.17.0-1022-azure",
            "binary_version": "6.17.0-1022.22"
          },
          {
            "binary_name": "linux-modules-extra-6.17.0-1022-azure",
            "binary_version": "6.17.0-1022.22"
          },
          {
            "binary_name": "linux-tools-6.17.0-1022-azure",
            "binary_version": "6.17.0-1022.22"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:24.04:LTS",
        "name": "linux-azure-6.17",
        "purl": "pkg:deb/ubuntu/linux-azure-6.17@6.17.0-1022.22?arch=source\u0026distro=noble"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "6.17.0-1008.8~24.04.1",
        "6.17.0-1010.10~24.04.1",
        "6.17.0-1011.11~24.04.2",
        "6.17.0-1013.13~24.04.1",
        "6.17.0-1015.15~24.04.1",
        "6.17.0-1017.17~24.04.1",
        "6.17.0-1018.18~24.04.1",
        "6.17.0-1020.20~24.04.1",
        "6.17.0-1021.21~24.04.1",
        "6.17.0-1022.22"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "linux-azure-7.0-cloud-tools-7.0.0-1017",
            "binary_version": "7.0.0-1017.17~24.04.1"
          },
          {
            "binary_name": "linux-azure-7.0-headers-7.0.0-1017",
            "binary_version": "7.0.0-1017.17~24.04.1"
          },
          {
            "binary_name": "linux-azure-7.0-tools-7.0.0-1017",
            "binary_version": "7.0.0-1017.17~24.04.1"
          },
          {
            "binary_name": "linux-buildinfo-7.0.0-1017-azure",
            "binary_version": "7.0.0-1017.17~24.04.1"
          },
          {
            "binary_name": "linux-cloud-tools-7.0.0-1017-azure",
            "binary_version": "7.0.0-1017.17~24.04.1"
          },
          {
            "binary_name": "linux-headers-7.0.0-1017-azure",
            "binary_version": "7.0.0-1017.17~24.04.1"
          },
          {
            "binary_name": "linux-image-unsigned-7.0.0-1017-azure",
            "binary_version": "7.0.0-1017.17~24.04.1"
          },
          {
            "binary_name": "linux-modules-7.0.0-1017-azure",
            "binary_version": "7.0.0-1017.17~24.04.1"
          },
          {
            "binary_name": "linux-modules-iwlwifi-7.0.0-1017-azure",
            "binary_version": "7.0.0-1017.17~24.04.1"
          },
          {
            "binary_name": "linux-tools-7.0.0-1017-azure",
            "binary_version": "7.0.0-1017.17~24.04.1"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:24.04:LTS",
        "name": "linux-azure-7.0",
        "purl": "pkg:deb/ubuntu/linux-azure-7.0@7.0.0-1017.17~24.04.1?arch=source\u0026distro=noble"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "7.0.0-1017.17~24.04.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "7.0.0-1008.8~24.04.2",
        "7.0.0-1014.14~24.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "linux-azure-fde-cloud-tools-6.8.0-1069",
            "binary_version": "6.8.0-1069.76"
          },
          {
            "binary_name": "linux-azure-fde-headers-6.8.0-1069",
            "binary_version": "6.8.0-1069.76"
          },
          {
            "binary_name": "linux-azure-fde-tools-6.8.0-1069",
            "binary_version": "6.8.0-1069.76"
          },
          {
            "binary_name": "linux-buildinfo-6.8.0-1069-azure-fde",
            "binary_version": "6.8.0-1069.76"
          },
          {
            "binary_name": "linux-cloud-tools-6.8.0-1069-azure-fde",
            "binary_version": "6.8.0-1069.76"
          },
          {
            "binary_name": "linux-headers-6.8.0-1069-azure-fde",
            "binary_version": "6.8.0-1069.76"
          },
          {
            "binary_name": "linux-image-unsigned-6.8.0-1069-azure-fde",
            "binary_version": "6.8.0-1069.76"
          },
          {
            "binary_name": "linux-modules-6.8.0-1069-azure-fde",
            "binary_version": "6.8.0-1069.76"
          },
          {
            "binary_name": "linux-modules-extra-6.8.0-1069-azure-fde",
            "binary_version": "6.8.0-1069.76"
          },
          {
            "binary_name": "linux-modules-involflt-6.8.0-1069-azure-fde",
            "binary_version": "6.8.0-1069.76"
          },
          {
            "binary_name": "linux-tools-6.8.0-1069-azure-fde",
            "binary_version": "6.8.0-1069.76"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:24.04:LTS",
        "name": "linux-azure-fde",
        "purl": "pkg:deb/ubuntu/linux-azure-fde@6.8.0-1069.76?arch=source\u0026distro=noble"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "6.8.0-1069.76"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "6.8.0-1041.48",
        "6.8.0-1044.51",
        "6.8.0-1046.53",
        "6.8.0-1053.60",
        "6.8.0-1058.65",
        "6.8.0-1061.68",
        "6.8.0-1062.69",
        "6.8.0-1063.70",
        "6.8.0-1064.71",
        "6.8.0-1065.72",
        "6.8.0-1066.73",
        "6.8.0-1068.75"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-azure-fde-6.14-cloud-tools-6.14.0-1017",
            "binary_version": "6.14.0-1017.17~24.04.1"
          },
          {
            "binary_name": "linux-azure-fde-6.14-headers-6.14.0-1017",
            "binary_version": "6.14.0-1017.17~24.04.1"
          },
          {
            "binary_name": "linux-azure-fde-6.14-tools-6.14.0-1017",
            "binary_version": "6.14.0-1017.17~24.04.1"
          },
          {
            "binary_name": "linux-buildinfo-6.14.0-1017-azure-fde",
            "binary_version": "6.14.0-1017.17~24.04.1"
          },
          {
            "binary_name": "linux-cloud-tools-6.14.0-1017-azure-fde",
            "binary_version": "6.14.0-1017.17~24.04.1"
          },
          {
            "binary_name": "linux-headers-6.14.0-1017-azure-fde",
            "binary_version": "6.14.0-1017.17~24.04.1"
          },
          {
            "binary_name": "linux-image-unsigned-6.14.0-1017-azure-fde",
            "binary_version": "6.14.0-1017.17~24.04.1"
          },
          {
            "binary_name": "linux-modules-6.14.0-1017-azure-fde",
            "binary_version": "6.14.0-1017.17~24.04.1"
          },
          {
            "binary_name": "linux-modules-extra-6.14.0-1017-azure-fde",
            "binary_version": "6.14.0-1017.17~24.04.1"
          },
          {
            "binary_name": "linux-tools-6.14.0-1017-azure-fde",
            "binary_version": "6.14.0-1017.17~24.04.1"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:24.04:LTS",
        "name": "linux-azure-fde-6.14",
        "purl": "pkg:deb/ubuntu/linux-azure-fde-6.14@6.14.0-1017.17~24.04.1?arch=source\u0026distro=noble"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "6.14.0-1012.12~24.04.1",
        "6.14.0-1013.13~24.04.1",
        "6.14.0-1014.14~24.04.1",
        "6.14.0-1015.15~24.04.1",
        "6.14.0-1017.17~24.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-azure-fde-6.17-cloud-tools-6.17.0-1018",
            "binary_version": "6.17.0-1018.18~24.04.1"
          },
          {
            "binary_name": "linux-azure-fde-6.17-headers-6.17.0-1018",
            "binary_version": "6.17.0-1018.18~24.04.1"
          },
          {
            "binary_name": "linux-azure-fde-6.17-tools-6.17.0-1018",
            "binary_version": "6.17.0-1018.18~24.04.1"
          },
          {
            "binary_name": "linux-buildinfo-6.17.0-1018-azure-fde",
            "binary_version": "6.17.0-1018.18~24.04.1"
          },
          {
            "binary_name": "linux-cloud-tools-6.17.0-1018-azure-fde",
            "binary_version": "6.17.0-1018.18~24.04.1"
          },
          {
            "binary_name": "linux-headers-6.17.0-1018-azure-fde",
            "binary_version": "6.17.0-1018.18~24.04.1"
          },
          {
            "binary_name": "linux-image-unsigned-6.17.0-1018-azure-fde",
            "binary_version": "6.17.0-1018.18~24.04.1"
          },
          {
            "binary_name": "linux-modules-6.17.0-1018-azure-fde",
            "binary_version": "6.17.0-1018.18~24.04.1"
          },
          {
            "binary_name": "linux-modules-extra-6.17.0-1018-azure-fde",
            "binary_version": "6.17.0-1018.18~24.04.1"
          },
          {
            "binary_name": "linux-tools-6.17.0-1018-azure-fde",
            "binary_version": "6.17.0-1018.18~24.04.1"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:24.04:LTS",
        "name": "linux-azure-fde-6.17",
        "purl": "pkg:deb/ubuntu/linux-azure-fde-6.17@6.17.0-1018.18~24.04.1?arch=source\u0026distro=noble"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "6.17.0-1005.5~24.04.1",
        "6.17.0-1010.10~24.04.1",
        "6.17.0-1015.15~24.04.1",
        "6.17.0-1017.17~24.04.1",
        "6.17.0-1018.18~24.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "linux-azure-fde-7.0-cloud-tools-7.0.0-1016",
            "binary_version": "7.0.0-1016.16~24.04.1"
          },
          {
            "binary_name": "linux-azure-fde-7.0-headers-7.0.0-1016",
            "binary_version": "7.0.0-1016.16~24.04.1"
          },
          {
            "binary_name": "linux-azure-fde-7.0-tools-7.0.0-1016",
            "binary_version": "7.0.0-1016.16~24.04.1"
          },
          {
            "binary_name": "linux-buildinfo-7.0.0-1016-azure-fde",
            "binary_version": "7.0.0-1016.16~24.04.1"
          },
          {
            "binary_name": "linux-cloud-tools-7.0.0-1016-azure-fde",
            "binary_version": "7.0.0-1016.16~24.04.1"
          },
          {
            "binary_name": "linux-headers-7.0.0-1016-azure-fde",
            "binary_version": "7.0.0-1016.16~24.04.1"
          },
          {
            "binary_name": "linux-image-unsigned-7.0.0-1016-azure-fde",
            "binary_version": "7.0.0-1016.16~24.04.1"
          },
          {
            "binary_name": "linux-modules-7.0.0-1016-azure-fde",
            "binary_version": "7.0.0-1016.16~24.04.1"
          },
          {
            "binary_name": "linux-modules-iwlwifi-7.0.0-1016-azure-fde",
            "binary_version": "7.0.0-1016.16~24.04.1"
          },
          {
            "binary_name": "linux-tools-7.0.0-1016-azure-fde",
            "binary_version": "7.0.0-1016.16~24.04.1"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:24.04:LTS",
        "name": "linux-azure-fde-7.0",
        "purl": "pkg:deb/ubuntu/linux-azure-fde-7.0@7.0.0-1016.16~24.04.1?arch=source\u0026distro=noble"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "7.0.0-1016.16~24.04.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "7.0.0-1007.7~24.04.3",
        "7.0.0-1013.13~24.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-azure-nvidia-cloud-tools-6.8.0-1039",
            "binary_version": "6.8.0-1039.42"
          },
          {
            "binary_name": "linux-azure-nvidia-headers-6.8.0-1039",
            "binary_version": "6.8.0-1039.42"
          },
          {
            "binary_name": "linux-azure-nvidia-tools-6.8.0-1039",
            "binary_version": "6.8.0-1039.42"
          },
          {
            "binary_name": "linux-buildinfo-6.8.0-1039-azure-nvidia",
            "binary_version": "6.8.0-1039.42"
          },
          {
            "binary_name": "linux-cloud-tools-6.8.0-1039-azure-nvidia",
            "binary_version": "6.8.0-1039.42"
          },
          {
            "binary_name": "linux-headers-6.8.0-1039-azure-nvidia",
            "binary_version": "6.8.0-1039.42"
          },
          {
            "binary_name": "linux-image-unsigned-6.8.0-1039-azure-nvidia",
            "binary_version": "6.8.0-1039.42"
          },
          {
            "binary_name": "linux-modules-6.8.0-1039-azure-nvidia",
            "binary_version": "6.8.0-1039.42"
          },
          {
            "binary_name": "linux-modules-extra-6.8.0-1039-azure-nvidia",
            "binary_version": "6.8.0-1039.42"
          },
          {
            "binary_name": "linux-tools-6.8.0-1039-azure-nvidia",
            "binary_version": "6.8.0-1039.42"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:24.04:LTS",
        "name": "linux-azure-nvidia",
        "purl": "pkg:deb/ubuntu/linux-azure-nvidia@6.8.0-1039.42?arch=source\u0026distro=noble"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "6.8.0-1013.14",
        "6.8.0-1014.15",
        "6.8.0-1016.17",
        "6.8.0-1018.19",
        "6.8.0-1019.20",
        "6.8.0-1022.23",
        "6.8.0-1025.27",
        "6.8.0-1027.30",
        "6.8.0-1029.32",
        "6.8.0-1039.42"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-azure-nvidia-6.14-cloud-tools-6.14.0-1007",
            "binary_version": "6.14.0-1007.7"
          },
          {
            "binary_name": "linux-azure-nvidia-6.14-headers-6.14.0-1007",
            "binary_version": "6.14.0-1007.7"
          },
          {
            "binary_name": "linux-azure-nvidia-6.14-tools-6.14.0-1007",
            "binary_version": "6.14.0-1007.7"
          },
          {
            "binary_name": "linux-buildinfo-6.14.0-1007-azure-nvidia",
            "binary_version": "6.14.0-1007.7"
          },
          {
            "binary_name": "linux-cloud-tools-6.14.0-1007-azure-nvidia",
            "binary_version": "6.14.0-1007.7"
          },
          {
            "binary_name": "linux-headers-6.14.0-1007-azure-nvidia",
            "binary_version": "6.14.0-1007.7"
          },
          {
            "binary_name": "linux-image-unsigned-6.14.0-1007-azure-nvidia",
            "binary_version": "6.14.0-1007.7"
          },
          {
            "binary_name": "linux-modules-6.14.0-1007-azure-nvidia",
            "binary_version": "6.14.0-1007.7"
          },
          {
            "binary_name": "linux-modules-extra-6.14.0-1007-azure-nvidia",
            "binary_version": "6.14.0-1007.7"
          },
          {
            "binary_name": "linux-tools-6.14.0-1007-azure-nvidia",
            "binary_version": "6.14.0-1007.7"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:24.04:LTS",
        "name": "linux-azure-nvidia-6.14",
        "purl": "pkg:deb/ubuntu/linux-azure-nvidia-6.14@6.14.0-1007.7?arch=source\u0026distro=noble"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "6.14.0-1003.3",
        "6.14.0-1006.6",
        "6.14.0-1007.7"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "linux-buildinfo-6.8.0-1071-gcp",
            "binary_version": "6.8.0-1071.79"
          },
          {
            "binary_name": "linux-buildinfo-6.8.0-1071-gcp-64k",
            "binary_version": "6.8.0-1071.79"
          },
          {
            "binary_name": "linux-gcp-headers-6.8.0-1071",
            "binary_version": "6.8.0-1071.79"
          },
          {
            "binary_name": "linux-gcp-tools-6.8.0-1071",
            "binary_version": "6.8.0-1071.79"
          },
          {
            "binary_name": "linux-headers-6.8.0-1071-gcp",
            "binary_version": "6.8.0-1071.79"
          },
          {
            "binary_name": "linux-headers-6.8.0-1071-gcp-64k",
            "binary_version": "6.8.0-1071.79"
          },
          {
            "binary_name": "linux-image-unsigned-6.8.0-1071-gcp",
            "binary_version": "6.8.0-1071.79"
          },
          {
            "binary_name": "linux-image-unsigned-6.8.0-1071-gcp-64k",
            "binary_version": "6.8.0-1071.79"
          },
          {
            "binary_name": "linux-modules-6.8.0-1071-gcp",
            "binary_version": "6.8.0-1071.79"
          },
          {
            "binary_name": "linux-modules-6.8.0-1071-gcp-64k",
            "binary_version": "6.8.0-1071.79"
          },
          {
            "binary_name": "linux-modules-extra-6.8.0-1071-gcp",
            "binary_version": "6.8.0-1071.79"
          },
          {
            "binary_name": "linux-modules-extra-6.8.0-1071-gcp-64k",
            "binary_version": "6.8.0-1071.79"
          },
          {
            "binary_name": "linux-tools-6.8.0-1071-gcp",
            "binary_version": "6.8.0-1071.79"
          },
          {
            "binary_name": "linux-tools-6.8.0-1071-gcp-64k",
            "binary_version": "6.8.0-1071.79"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:24.04:LTS",
        "name": "linux-gcp",
        "purl": "pkg:deb/ubuntu/linux-gcp@6.8.0-1071.79?arch=source\u0026distro=noble"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "6.8.0-1071.79"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "6.5.0-1007.7",
        "6.6.0-1001.1",
        "6.8.0-1002.2",
        "6.8.0-1005.5",
        "6.8.0-1006.6",
        "6.8.0-1007.7",
        "6.8.0-1008.9",
        "6.8.0-1009.10",
        "6.8.0-1010.11",
        "6.8.0-1011.12",
        "6.8.0-1012.13",
        "6.8.0-1013.14",
        "6.8.0-1014.16",
        "6.8.0-1015.17",
        "6.8.0-1016.18",
        "6.8.0-1017.19",
        "6.8.0-1018.20",
        "6.8.0-1019.21",
        "6.8.0-1020.22",
        "6.8.0-1021.23",
        "6.8.0-1024.26",
        "6.8.0-1025.27",
        "6.8.0-1026.28",
        "6.8.0-1027.29",
        "6.8.0-1028.30",
        "6.8.0-1029.31",
        "6.8.0-1030.32",
        "6.8.0-1031.33",
        "6.8.0-1032.34",
        "6.8.0-1033.35",
        "6.8.0-1034.36",
        "6.8.0-1036.38",
        "6.8.0-1037.39",
        "6.8.0-1039.41",
        "6.8.0-1040.42",
        "6.8.0-1041.43",
        "6.8.0-1042.45",
        "6.8.0-1043.46",
        "6.8.0-1044.47",
        "6.8.0-1045.48",
        "6.8.0-1046.49",
        "6.8.0-1047.50",
        "6.8.0-1048.51",
        "6.8.0-1052.55",
        "6.8.0-1053.56",
        "6.8.0-1054.57",
        "6.8.0-1055.58",
        "6.8.0-1058.61",
        "6.8.0-1060.63",
        "6.8.0-1063.69",
        "6.8.0-1064.72",
        "6.8.0-1065.73",
        "6.8.0-1066.74",
        "6.8.0-1067.75",
        "6.8.0-1069.77",
        "6.8.0-1070.78"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-buildinfo-6.11.0-1017-gcp",
            "binary_version": "6.11.0-1017.17~24.04.1"
          },
          {
            "binary_name": "linux-buildinfo-6.11.0-1017-gcp-64k",
            "binary_version": "6.11.0-1017.17~24.04.1"
          },
          {
            "binary_name": "linux-gcp-6.11-headers-6.11.0-1017",
            "binary_version": "6.11.0-1017.17~24.04.1"
          },
          {
            "binary_name": "linux-gcp-6.11-lib-rust-6.11.0-1017-gcp",
            "binary_version": "6.11.0-1017.17~24.04.1"
          },
          {
            "binary_name": "linux-gcp-6.11-tools-6.11.0-1017",
            "binary_version": "6.11.0-1017.17~24.04.1"
          },
          {
            "binary_name": "linux-headers-6.11.0-1017-gcp",
            "binary_version": "6.11.0-1017.17~24.04.1"
          },
          {
            "binary_name": "linux-headers-6.11.0-1017-gcp-64k",
            "binary_version": "6.11.0-1017.17~24.04.1"
          },
          {
            "binary_name": "linux-image-unsigned-6.11.0-1017-gcp",
            "binary_version": "6.11.0-1017.17~24.04.1"
          },
          {
            "binary_name": "linux-image-unsigned-6.11.0-1017-gcp-64k",
            "binary_version": "6.11.0-1017.17~24.04.1"
          },
          {
            "binary_name": "linux-modules-6.11.0-1017-gcp",
            "binary_version": "6.11.0-1017.17~24.04.1"
          },
          {
            "binary_name": "linux-modules-6.11.0-1017-gcp-64k",
            "binary_version": "6.11.0-1017.17~24.04.1"
          },
          {
            "binary_name": "linux-modules-extra-6.11.0-1017-gcp",
            "binary_version": "6.11.0-1017.17~24.04.1"
          },
          {
            "binary_name": "linux-modules-extra-6.11.0-1017-gcp-64k",
            "binary_version": "6.11.0-1017.17~24.04.1"
          },
          {
            "binary_name": "linux-tools-6.11.0-1017-gcp",
            "binary_version": "6.11.0-1017.17~24.04.1"
          },
          {
            "binary_name": "linux-tools-6.11.0-1017-gcp-64k",
            "binary_version": "6.11.0-1017.17~24.04.1"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:24.04:LTS",
        "name": "linux-gcp-6.11",
        "purl": "pkg:deb/ubuntu/linux-gcp-6.11@6.11.0-1017.17~24.04.1?arch=source\u0026distro=noble"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "6.11.0-1006.6~24.04.2",
        "6.11.0-1011.11~24.04.1",
        "6.11.0-1013.13~24.04.1",
        "6.11.0-1014.14~24.04.1",
        "6.11.0-1015.15~24.04.1",
        "6.11.0-1016.16~24.04.1",
        "6.11.0-1017.17~24.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-buildinfo-6.14.0-1021-gcp",
            "binary_version": "6.14.0-1021.22~24.04.1"
          },
          {
            "binary_name": "linux-buildinfo-6.14.0-1021-gcp-64k",
            "binary_version": "6.14.0-1021.22~24.04.1"
          },
          {
            "binary_name": "linux-gcp-6.14-headers-6.14.0-1021",
            "binary_version": "6.14.0-1021.22~24.04.1"
          },
          {
            "binary_name": "linux-gcp-6.14-tools-6.14.0-1021",
            "binary_version": "6.14.0-1021.22~24.04.1"
          },
          {
            "binary_name": "linux-headers-6.14.0-1021-gcp",
            "binary_version": "6.14.0-1021.22~24.04.1"
          },
          {
            "binary_name": "linux-headers-6.14.0-1021-gcp-64k",
            "binary_version": "6.14.0-1021.22~24.04.1"
          },
          {
            "binary_name": "linux-image-unsigned-6.14.0-1021-gcp",
            "binary_version": "6.14.0-1021.22~24.04.1"
          },
          {
            "binary_name": "linux-image-unsigned-6.14.0-1021-gcp-64k",
            "binary_version": "6.14.0-1021.22~24.04.1"
          },
          {
            "binary_name": "linux-lib-rust-6.14.0-1021-gcp",
            "binary_version": "6.14.0-1021.22~24.04.1"
          },
          {
            "binary_name": "linux-modules-6.14.0-1021-gcp",
            "binary_version": "6.14.0-1021.22~24.04.1"
          },
          {
            "binary_name": "linux-modules-6.14.0-1021-gcp-64k",
            "binary_version": "6.14.0-1021.22~24.04.1"
          },
          {
            "binary_name": "linux-modules-extra-6.14.0-1021-gcp",
            "binary_version": "6.14.0-1021.22~24.04.1"
          },
          {
            "binary_name": "linux-modules-extra-6.14.0-1021-gcp-64k",
            "binary_version": "6.14.0-1021.22~24.04.1"
          },
          {
            "binary_name": "linux-tools-6.14.0-1021-gcp",
            "binary_version": "6.14.0-1021.22~24.04.1"
          },
          {
            "binary_name": "linux-tools-6.14.0-1021-gcp-64k",
            "binary_version": "6.14.0-1021.22~24.04.1"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:24.04:LTS",
        "name": "linux-gcp-6.14",
        "purl": "pkg:deb/ubuntu/linux-gcp-6.14@6.14.0-1021.22~24.04.1?arch=source\u0026distro=noble"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "6.14.0-1007.7~24.04.1",
        "6.14.0-1011.11~24.04.1",
        "6.14.0-1012.12~24.04.1",
        "6.14.0-1014.15~24.04.1",
        "6.14.0-1015.16~24.04.1",
        "6.14.0-1016.17~24.04.1",
        "6.14.0-1017.18~24.04.1",
        "6.14.0-1018.19~24.04.1",
        "6.14.0-1019.20~24.04.1",
        "6.14.0-1020.21~24.04.1",
        "6.14.0-1021.22~24.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-buildinfo-6.17.0-1022-gcp",
            "binary_version": "6.17.0-1022.25"
          },
          {
            "binary_name": "linux-buildinfo-6.17.0-1022-gcp-64k",
            "binary_version": "6.17.0-1022.25"
          },
          {
            "binary_name": "linux-gcp-6.17-headers-6.17.0-1022",
            "binary_version": "6.17.0-1022.25"
          },
          {
            "binary_name": "linux-gcp-6.17-tools-6.17.0-1022",
            "binary_version": "6.17.0-1022.25"
          },
          {
            "binary_name": "linux-headers-6.17.0-1022-gcp",
            "binary_version": "6.17.0-1022.25"
          },
          {
            "binary_name": "linux-headers-6.17.0-1022-gcp-64k",
            "binary_version": "6.17.0-1022.25"
          },
          {
            "binary_name": "linux-image-unsigned-6.17.0-1022-gcp",
            "binary_version": "6.17.0-1022.25"
          },
          {
            "binary_name": "linux-image-unsigned-6.17.0-1022-gcp-64k",
            "binary_version": "6.17.0-1022.25"
          },
          {
            "binary_name": "linux-lib-rust-6.17.0-1022-gcp",
            "binary_version": "6.17.0-1022.25"
          },
          {
            "binary_name": "linux-modules-6.17.0-1022-gcp",
            "binary_version": "6.17.0-1022.25"
          },
          {
            "binary_name": "linux-modules-6.17.0-1022-gcp-64k",
            "binary_version": "6.17.0-1022.25"
          },
          {
            "binary_name": "linux-modules-extra-6.17.0-1022-gcp",
            "binary_version": "6.17.0-1022.25"
          },
          {
            "binary_name": "linux-modules-extra-6.17.0-1022-gcp-64k",
            "binary_version": "6.17.0-1022.25"
          },
          {
            "binary_name": "linux-tools-6.17.0-1022-gcp",
            "binary_version": "6.17.0-1022.25"
          },
          {
            "binary_name": "linux-tools-6.17.0-1022-gcp-64k",
            "binary_version": "6.17.0-1022.25"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:24.04:LTS",
        "name": "linux-gcp-6.17",
        "purl": "pkg:deb/ubuntu/linux-gcp-6.17@6.17.0-1022.25?arch=source\u0026distro=noble"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "6.17.0-1004.4~24.04.3",
        "6.17.0-1008.8~24.04.1",
        "6.17.0-1009.9~24.04.3",
        "6.17.0-1010.10~24.04.1",
        "6.17.0-1012.12~24.04.1",
        "6.17.0-1013.13~24.04.1",
        "6.17.0-1016.17~24.04.1",
        "6.17.0-1018.19~24.04.1",
        "6.17.0-1020.22~24.04.1",
        "6.17.0-1021.24~24.04.1",
        "6.17.0-1022.25"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "linux-buildinfo-7.0.0-1014-gcp",
            "binary_version": "7.0.0-1014.14~24.04.1"
          },
          {
            "binary_name": "linux-buildinfo-7.0.0-1014-gcp-64k",
            "binary_version": "7.0.0-1014.14~24.04.1"
          },
          {
            "binary_name": "linux-gcp-7.0-headers-7.0.0-1014",
            "binary_version": "7.0.0-1014.14~24.04.1"
          },
          {
            "binary_name": "linux-gcp-7.0-tools-7.0.0-1014",
            "binary_version": "7.0.0-1014.14~24.04.1"
          },
          {
            "binary_name": "linux-headers-7.0.0-1014-gcp",
            "binary_version": "7.0.0-1014.14~24.04.1"
          },
          {
            "binary_name": "linux-headers-7.0.0-1014-gcp-64k",
            "binary_version": "7.0.0-1014.14~24.04.1"
          },
          {
            "binary_name": "linux-image-unsigned-7.0.0-1014-gcp",
            "binary_version": "7.0.0-1014.14~24.04.1"
          },
          {
            "binary_name": "linux-image-unsigned-7.0.0-1014-gcp-64k",
            "binary_version": "7.0.0-1014.14~24.04.1"
          },
          {
            "binary_name": "linux-modules-7.0.0-1014-gcp",
            "binary_version": "7.0.0-1014.14~24.04.1"
          },
          {
            "binary_name": "linux-modules-7.0.0-1014-gcp-64k",
            "binary_version": "7.0.0-1014.14~24.04.1"
          },
          {
            "binary_name": "linux-tools-7.0.0-1014-gcp",
            "binary_version": "7.0.0-1014.14~24.04.1"
          },
          {
            "binary_name": "linux-tools-7.0.0-1014-gcp-64k",
            "binary_version": "7.0.0-1014.14~24.04.1"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:24.04:LTS",
        "name": "linux-gcp-7.0",
        "purl": "pkg:deb/ubuntu/linux-gcp-7.0@7.0.0-1014.14~24.04.1?arch=source\u0026distro=noble"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "7.0.0-1014.14~24.04.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "7.0.0-1006.6~24.04.2",
        "7.0.0-1011.11~24.04.1",
        "7.0.0-1013.13~24.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "linux-buildinfo-6.8.0-1066-gke",
            "binary_version": "6.8.0-1066.74"
          },
          {
            "binary_name": "linux-buildinfo-6.8.0-1066-gke-64k",
            "binary_version": "6.8.0-1066.74"
          },
          {
            "binary_name": "linux-gke-headers-6.8.0-1066",
            "binary_version": "6.8.0-1066.74"
          },
          {
            "binary_name": "linux-gke-tools-6.8.0-1066",
            "binary_version": "6.8.0-1066.74"
          },
          {
            "binary_name": "linux-headers-6.8.0-1066-gke",
            "binary_version": "6.8.0-1066.74"
          },
          {
            "binary_name": "linux-headers-6.8.0-1066-gke-64k",
            "binary_version": "6.8.0-1066.74"
          },
          {
            "binary_name": "linux-image-unsigned-6.8.0-1066-gke",
            "binary_version": "6.8.0-1066.74"
          },
          {
            "binary_name": "linux-image-unsigned-6.8.0-1066-gke-64k",
            "binary_version": "6.8.0-1066.74"
          },
          {
            "binary_name": "linux-modules-6.8.0-1066-gke",
            "binary_version": "6.8.0-1066.74"
          },
          {
            "binary_name": "linux-modules-6.8.0-1066-gke-64k",
            "binary_version": "6.8.0-1066.74"
          },
          {
            "binary_name": "linux-modules-extra-6.8.0-1066-gke",
            "binary_version": "6.8.0-1066.74"
          },
          {
            "binary_name": "linux-modules-extra-6.8.0-1066-gke-64k",
            "binary_version": "6.8.0-1066.74"
          },
          {
            "binary_name": "linux-modules-iwlwifi-6.8.0-1066-gke",
            "binary_version": "6.8.0-1066.74"
          },
          {
            "binary_name": "linux-tools-6.8.0-1066-gke",
            "binary_version": "6.8.0-1066.74"
          },
          {
            "binary_name": "linux-tools-6.8.0-1066-gke-64k",
            "binary_version": "6.8.0-1066.74"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:24.04:LTS",
        "name": "linux-gke",
        "purl": "pkg:deb/ubuntu/linux-gke@6.8.0-1066.74?arch=source\u0026distro=noble"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "6.8.0-1066.74"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "6.8.0-1003.5",
        "6.8.0-1004.7",
        "6.8.0-1005.8",
        "6.8.0-1006.9",
        "6.8.0-1007.10",
        "6.8.0-1008.11",
        "6.8.0-1009.12",
        "6.8.0-1010.13",
        "6.8.0-1011.14",
        "6.8.0-1012.15",
        "6.8.0-1013.17",
        "6.8.0-1014.18",
        "6.8.0-1015.19",
        "6.8.0-1016.20",
        "6.8.0-1017.21",
        "6.8.0-1019.23",
        "6.8.0-1020.24",
        "6.8.0-1021.25",
        "6.8.0-1022.26",
        "6.8.0-1023.27",
        "6.8.0-1024.28",
        "6.8.0-1025.29",
        "6.8.0-1026.30",
        "6.8.0-1027.31",
        "6.8.0-1028.32",
        "6.8.0-1029.33",
        "6.8.0-1032.36",
        "6.8.0-1033.37",
        "6.8.0-1035.39",
        "6.8.0-1036.40",
        "6.8.0-1037.41",
        "6.8.0-1038.43",
        "6.8.0-1039.44",
        "6.8.0-1040.45",
        "6.8.0-1041.46",
        "6.8.0-1042.47",
        "6.8.0-1043.48",
        "6.8.0-1044.49",
        "6.8.0-1048.53",
        "6.8.0-1049.54",
        "6.8.0-1050.56",
        "6.8.0-1051.57",
        "6.8.0-1054.60",
        "6.8.0-1055.61",
        "6.8.0-1058.64",
        "6.8.0-1059.67",
        "6.8.0-1060.68",
        "6.8.0-1061.69",
        "6.8.0-1062.70",
        "6.8.0-1064.72",
        "6.8.0-1065.73"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "linux-buildinfo-6.8.0-1052-gkeop",
            "binary_version": "6.8.0-1052.56"
          },
          {
            "binary_name": "linux-cloud-tools-6.8.0-1052-gkeop",
            "binary_version": "6.8.0-1052.56"
          },
          {
            "binary_name": "linux-gkeop-cloud-tools-6.8.0-1052",
            "binary_version": "6.8.0-1052.56"
          },
          {
            "binary_name": "linux-gkeop-headers-6.8.0-1052",
            "binary_version": "6.8.0-1052.56"
          },
          {
            "binary_name": "linux-gkeop-tools-6.8.0-1052",
            "binary_version": "6.8.0-1052.56"
          },
          {
            "binary_name": "linux-headers-6.8.0-1052-gkeop",
            "binary_version": "6.8.0-1052.56"
          },
          {
            "binary_name": "linux-image-unsigned-6.8.0-1052-gkeop",
            "binary_version": "6.8.0-1052.56"
          },
          {
            "binary_name": "linux-modules-6.8.0-1052-gkeop",
            "binary_version": "6.8.0-1052.56"
          },
          {
            "binary_name": "linux-modules-extra-6.8.0-1052-gkeop",
            "binary_version": "6.8.0-1052.56"
          },
          {
            "binary_name": "linux-tools-6.8.0-1052-gkeop",
            "binary_version": "6.8.0-1052.56"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:24.04:LTS",
        "name": "linux-gkeop",
        "purl": "pkg:deb/ubuntu/linux-gkeop@6.8.0-1052.56?arch=source\u0026distro=noble"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "6.8.0-1052.56"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "6.8.0-1001.3",
        "6.8.0-1002.4",
        "6.8.0-1003.5",
        "6.8.0-1004.6",
        "6.8.0-1006.8",
        "6.8.0-1007.9",
        "6.8.0-1008.10",
        "6.8.0-1009.11",
        "6.8.0-1010.12",
        "6.8.0-1011.13",
        "6.8.0-1012.14",
        "6.8.0-1013.15",
        "6.8.0-1014.16",
        "6.8.0-1015.17",
        "6.8.0-1016.18",
        "6.8.0-1019.21",
        "6.8.0-1020.22",
        "6.8.0-1022.24",
        "6.8.0-1023.25",
        "6.8.0-1024.26",
        "6.8.0-1025.28",
        "6.8.0-1026.29",
        "6.8.0-1027.30",
        "6.8.0-1028.31",
        "6.8.0-1029.32",
        "6.8.0-1030.33",
        "6.8.0-1031.34",
        "6.8.0-1035.38",
        "6.8.0-1036.39",
        "6.8.0-1037.40",
        "6.8.0-1038.41",
        "6.8.0-1041.44",
        "6.8.0-1042.45",
        "6.8.0-1045.48",
        "6.8.0-1046.50",
        "6.8.0-1047.51",
        "6.8.0-1048.52",
        "6.8.0-1049.53",
        "6.8.0-1050.54",
        "6.8.0-1051.55"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-buildinfo-6.11.0-29-generic",
            "binary_version": "6.11.0-29.29~24.04.1"
          },
          {
            "binary_name": "linux-buildinfo-6.11.0-29-generic-64k",
            "binary_version": "6.11.0-29.29~24.04.1"
          },
          {
            "binary_name": "linux-cloud-tools-6.11.0-29-generic",
            "binary_version": "6.11.0-29.29~24.04.1"
          },
          {
            "binary_name": "linux-headers-6.11.0-29-generic",
            "binary_version": "6.11.0-29.29~24.04.1"
          },
          {
            "binary_name": "linux-headers-6.11.0-29-generic-64k",
            "binary_version": "6.11.0-29.29~24.04.1"
          },
          {
            "binary_name": "linux-hwe-6.11-cloud-tools-6.11.0-29",
            "binary_version": "6.11.0-29.29~24.04.1"
          },
          {
            "binary_name": "linux-hwe-6.11-headers-6.11.0-29",
            "binary_version": "6.11.0-29.29~24.04.1"
          },
          {
            "binary_name": "linux-hwe-6.11-lib-rust-6.11.0-29-generic",
            "binary_version": "6.11.0-29.29~24.04.1"
          },
          {
            "binary_name": "linux-hwe-6.11-tools-6.11.0-29",
            "binary_version": "6.11.0-29.29~24.04.1"
          },
          {
            "binary_name": "linux-image-6.11.0-29-generic",
            "binary_version": "6.11.0-29.29~24.04.1"
          },
          {
            "binary_name": "linux-image-unsigned-6.11.0-29-generic",
            "binary_version": "6.11.0-29.29~24.04.1"
          },
          {
            "binary_name": "linux-image-unsigned-6.11.0-29-generic-64k",
            "binary_version": "6.11.0-29.29~24.04.1"
          },
          {
            "binary_name": "linux-modules-6.11.0-29-generic",
            "binary_version": "6.11.0-29.29~24.04.1"
          },
          {
            "binary_name": "linux-modules-6.11.0-29-generic-64k",
            "binary_version": "6.11.0-29.29~24.04.1"
          },
          {
            "binary_name": "linux-modules-extra-6.11.0-29-generic",
            "binary_version": "6.11.0-29.29~24.04.1"
          },
          {
            "binary_name": "linux-modules-ipu6-6.11.0-29-generic",
            "binary_version": "6.11.0-29.29~24.04.1"
          },
          {
            "binary_name": "linux-modules-ipu7-6.11.0-29-generic",
            "binary_version": "6.11.0-29.29~24.04.1"
          },
          {
            "binary_name": "linux-modules-iwlwifi-6.11.0-29-generic",
            "binary_version": "6.11.0-29.29~24.04.1"
          },
          {
            "binary_name": "linux-modules-usbio-6.11.0-29-generic",
            "binary_version": "6.11.0-29.29~24.04.1"
          },
          {
            "binary_name": "linux-modules-vision-6.11.0-29-generic",
            "binary_version": "6.11.0-29.29~24.04.1"
          },
          {
            "binary_name": "linux-tools-6.11.0-29-generic",
            "binary_version": "6.11.0-29.29~24.04.1"
          },
          {
            "binary_name": "linux-tools-6.11.0-29-generic-64k",
            "binary_version": "6.11.0-29.29~24.04.1"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:24.04:LTS",
        "name": "linux-hwe-6.11",
        "purl": "pkg:deb/ubuntu/linux-hwe-6.11@6.11.0-29.29~24.04.1?arch=source\u0026distro=noble"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "6.11.0-17.17~24.04.2",
        "6.11.0-19.19~24.04.1",
        "6.11.0-21.21~24.04.1",
        "6.11.0-24.24~24.04.1",
        "6.11.0-25.25~24.04.1",
        "6.11.0-26.26~24.04.1",
        "6.11.0-28.28~24.04.1",
        "6.11.0-29.29~24.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-buildinfo-6.14.0-37-generic",
            "binary_version": "6.14.0-37.37~24.04.1"
          },
          {
            "binary_name": "linux-buildinfo-6.14.0-37-generic-64k",
            "binary_version": "6.14.0-37.37~24.04.1"
          },
          {
            "binary_name": "linux-cloud-tools-6.14.0-37-generic",
            "binary_version": "6.14.0-37.37~24.04.1"
          },
          {
            "binary_name": "linux-headers-6.14.0-37-generic",
            "binary_version": "6.14.0-37.37~24.04.1"
          },
          {
            "binary_name": "linux-headers-6.14.0-37-generic-64k",
            "binary_version": "6.14.0-37.37~24.04.1"
          },
          {
            "binary_name": "linux-hwe-6.14-cloud-tools-6.14.0-37",
            "binary_version": "6.14.0-37.37~24.04.1"
          },
          {
            "binary_name": "linux-hwe-6.14-headers-6.14.0-37",
            "binary_version": "6.14.0-37.37~24.04.1"
          },
          {
            "binary_name": "linux-hwe-6.14-tools-6.14.0-37",
            "binary_version": "6.14.0-37.37~24.04.1"
          },
          {
            "binary_name": "linux-image-6.14.0-37-generic",
            "binary_version": "6.14.0-37.37~24.04.1"
          },
          {
            "binary_name": "linux-image-unsigned-6.14.0-37-generic",
            "binary_version": "6.14.0-37.37~24.04.1"
          },
          {
            "binary_name": "linux-image-unsigned-6.14.0-37-generic-64k",
            "binary_version": "6.14.0-37.37~24.04.1"
          },
          {
            "binary_name": "linux-lib-rust-6.14.0-37-generic",
            "binary_version": "6.14.0-37.37~24.04.1"
          },
          {
            "binary_name": "linux-modules-6.14.0-37-generic",
            "binary_version": "6.14.0-37.37~24.04.1"
          },
          {
            "binary_name": "linux-modules-6.14.0-37-generic-64k",
            "binary_version": "6.14.0-37.37~24.04.1"
          },
          {
            "binary_name": "linux-modules-extra-6.14.0-37-generic",
            "binary_version": "6.14.0-37.37~24.04.1"
          },
          {
            "binary_name": "linux-modules-ipu6-6.14.0-37-generic",
            "binary_version": "6.14.0-37.37~24.04.1"
          },
          {
            "binary_name": "linux-modules-ipu7-6.14.0-37-generic",
            "binary_version": "6.14.0-37.37~24.04.1"
          },
          {
            "binary_name": "linux-modules-iwlwifi-6.14.0-37-generic",
            "binary_version": "6.14.0-37.37~24.04.1"
          },
          {
            "binary_name": "linux-modules-usbio-6.14.0-37-generic",
            "binary_version": "6.14.0-37.37~24.04.1"
          },
          {
            "binary_name": "linux-modules-vision-6.14.0-37-generic",
            "binary_version": "6.14.0-37.37~24.04.1"
          },
          {
            "binary_name": "linux-tools-6.14.0-37-generic",
            "binary_version": "6.14.0-37.37~24.04.1"
          },
          {
            "binary_name": "linux-tools-6.14.0-37-generic-64k",
            "binary_version": "6.14.0-37.37~24.04.1"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:24.04:LTS",
        "name": "linux-hwe-6.14",
        "purl": "pkg:deb/ubuntu/linux-hwe-6.14@6.14.0-37.37~24.04.1?arch=source\u0026distro=noble"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "6.14.0-24.24~24.04.3",
        "6.14.0-27.27~24.04.1",
        "6.14.0-28.28~24.04.1",
        "6.14.0-29.29~24.04.1",
        "6.14.0-32.32~24.04.1",
        "6.14.0-33.33~24.04.1",
        "6.14.0-34.34~24.04.1",
        "6.14.0-35.35~24.04.1",
        "6.14.0-36.36~24.04.1",
        "6.14.0-37.37~24.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-buildinfo-6.17.0-42-generic",
            "binary_version": "6.17.0-42.42"
          },
          {
            "binary_name": "linux-buildinfo-6.17.0-42-generic-64k",
            "binary_version": "6.17.0-42.42"
          },
          {
            "binary_name": "linux-cloud-tools-6.17.0-42-generic",
            "binary_version": "6.17.0-42.42"
          },
          {
            "binary_name": "linux-headers-6.17.0-42-generic",
            "binary_version": "6.17.0-42.42"
          },
          {
            "binary_name": "linux-headers-6.17.0-42-generic-64k",
            "binary_version": "6.17.0-42.42"
          },
          {
            "binary_name": "linux-hwe-6.17-cloud-tools-6.17.0-42",
            "binary_version": "6.17.0-42.42"
          },
          {
            "binary_name": "linux-hwe-6.17-headers-6.17.0-42",
            "binary_version": "6.17.0-42.42"
          },
          {
            "binary_name": "linux-hwe-6.17-tools-6.17.0-42",
            "binary_version": "6.17.0-42.42"
          },
          {
            "binary_name": "linux-image-6.17.0-42-generic",
            "binary_version": "6.17.0-42.42"
          },
          {
            "binary_name": "linux-image-unsigned-6.17.0-42-generic",
            "binary_version": "6.17.0-42.42"
          },
          {
            "binary_name": "linux-image-unsigned-6.17.0-42-generic-64k",
            "binary_version": "6.17.0-42.42"
          },
          {
            "binary_name": "linux-lib-rust-6.17.0-42-generic",
            "binary_version": "6.17.0-42.42"
          },
          {
            "binary_name": "linux-modules-6.17.0-42-generic",
            "binary_version": "6.17.0-42.42"
          },
          {
            "binary_name": "linux-modules-6.17.0-42-generic-64k",
            "binary_version": "6.17.0-42.42"
          },
          {
            "binary_name": "linux-modules-extra-6.17.0-42-generic",
            "binary_version": "6.17.0-42.42"
          },
          {
            "binary_name": "linux-modules-ipu6-6.17.0-42-generic",
            "binary_version": "6.17.0-42.42"
          },
          {
            "binary_name": "linux-modules-ipu7-6.17.0-42-generic",
            "binary_version": "6.17.0-42.42"
          },
          {
            "binary_name": "linux-modules-iwlwifi-6.17.0-42-generic",
            "binary_version": "6.17.0-42.42"
          },
          {
            "binary_name": "linux-modules-usbio-6.17.0-42-generic",
            "binary_version": "6.17.0-42.42"
          },
          {
            "binary_name": "linux-modules-vision-6.17.0-42-generic",
            "binary_version": "6.17.0-42.42"
          },
          {
            "binary_name": "linux-tools-6.17.0-42-generic",
            "binary_version": "6.17.0-42.42"
          },
          {
            "binary_name": "linux-tools-6.17.0-42-generic-64k",
            "binary_version": "6.17.0-42.42"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:24.04:LTS",
        "name": "linux-hwe-6.17",
        "purl": "pkg:deb/ubuntu/linux-hwe-6.17@6.17.0-42.42?arch=source\u0026distro=noble"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "6.17.0-14.14~24.04.1",
        "6.17.0-19.19~24.04.2",
        "6.17.0-20.20~24.04.1",
        "6.17.0-22.22~24.04.1",
        "6.17.0-23.23~24.04.1",
        "6.17.0-29.29~24.04.1",
        "6.17.0-35.35~24.04.1",
        "6.17.0-40.40~24.04.1",
        "6.17.0-41.41~24.04.1",
        "6.17.0-42.42"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "linux-buildinfo-7.0.0-38-generic",
            "binary_version": "7.0.0-38.38~24.04.4"
          },
          {
            "binary_name": "linux-buildinfo-7.0.0-38-generic-64k",
            "binary_version": "7.0.0-38.38~24.04.4"
          },
          {
            "binary_name": "linux-cloud-tools-7.0.0-38-generic",
            "binary_version": "7.0.0-38.38~24.04.4"
          },
          {
            "binary_name": "linux-headers-7.0.0-38-generic",
            "binary_version": "7.0.0-38.38~24.04.4"
          },
          {
            "binary_name": "linux-headers-7.0.0-38-generic-64k",
            "binary_version": "7.0.0-38.38~24.04.4"
          },
          {
            "binary_name": "linux-hwe-7.0-cloud-tools-7.0.0-38",
            "binary_version": "7.0.0-38.38~24.04.4"
          },
          {
            "binary_name": "linux-hwe-7.0-headers-7.0.0-38",
            "binary_version": "7.0.0-38.38~24.04.4"
          },
          {
            "binary_name": "linux-hwe-7.0-tools-7.0.0-38",
            "binary_version": "7.0.0-38.38~24.04.4"
          },
          {
            "binary_name": "linux-image-7.0.0-38-generic",
            "binary_version": "7.0.0-38.38~24.04.4"
          },
          {
            "binary_name": "linux-image-unsigned-7.0.0-38-generic",
            "binary_version": "7.0.0-38.38~24.04.4"
          },
          {
            "binary_name": "linux-image-unsigned-7.0.0-38-generic-64k",
            "binary_version": "7.0.0-38.38~24.04.4"
          },
          {
            "binary_name": "linux-lib-rust-7.0.0-38-generic",
            "binary_version": "7.0.0-38.38~24.04.4"
          },
          {
            "binary_name": "linux-modules-7.0.0-38-generic",
            "binary_version": "7.0.0-38.38~24.04.4"
          },
          {
            "binary_name": "linux-modules-7.0.0-38-generic-64k",
            "binary_version": "7.0.0-38.38~24.04.4"
          },
          {
            "binary_name": "linux-tools-7.0.0-38-generic",
            "binary_version": "7.0.0-38.38~24.04.4"
          },
          {
            "binary_name": "linux-tools-7.0.0-38-generic-64k",
            "binary_version": "7.0.0-38.38~24.04.4"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:24.04:LTS",
        "name": "linux-hwe-7.0",
        "purl": "pkg:deb/ubuntu/linux-hwe-7.0@7.0.0-38.38~24.04.4?arch=source\u0026distro=noble"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "7.0.0-38.38~24.04.4"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "7.0.0-14.14~24.04.3",
        "7.0.0-28.28~24.04.1",
        "7.0.0-29.29~24.04.2",
        "7.0.0-30.30~24.04.1",
        "7.0.0-31.31~24.04.1",
        "7.0.0-34.34~24.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "linux-buildinfo-6.8.0-1067-ibm",
            "binary_version": "6.8.0-1067.68"
          },
          {
            "binary_name": "linux-headers-6.8.0-1067-ibm",
            "binary_version": "6.8.0-1067.68"
          },
          {
            "binary_name": "linux-ibm-headers-6.8.0-1067",
            "binary_version": "6.8.0-1067.68"
          },
          {
            "binary_name": "linux-ibm-tools-6.8.0-1067",
            "binary_version": "6.8.0-1067.68"
          },
          {
            "binary_name": "linux-image-unsigned-6.8.0-1067-ibm",
            "binary_version": "6.8.0-1067.68"
          },
          {
            "binary_name": "linux-modules-6.8.0-1067-ibm",
            "binary_version": "6.8.0-1067.68"
          },
          {
            "binary_name": "linux-modules-extra-6.8.0-1067-ibm",
            "binary_version": "6.8.0-1067.68"
          },
          {
            "binary_name": "linux-modules-iwlwifi-6.8.0-1067-ibm",
            "binary_version": "6.8.0-1067.68"
          },
          {
            "binary_name": "linux-tools-6.8.0-1067-ibm",
            "binary_version": "6.8.0-1067.68"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:24.04:LTS",
        "name": "linux-ibm",
        "purl": "pkg:deb/ubuntu/linux-ibm@6.8.0-1067.68?arch=source\u0026distro=noble"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "6.8.0-1067.68"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "6.5.0-1009.9",
        "6.8.0-1001.1",
        "6.8.0-1003.3",
        "6.8.0-1004.4",
        "6.8.0-1005.5",
        "6.8.0-1006.6",
        "6.8.0-1007.7",
        "6.8.0-1008.8",
        "6.8.0-1009.9",
        "6.8.0-1010.10",
        "6.8.0-1011.11",
        "6.8.0-1012.12",
        "6.8.0-1013.13",
        "6.8.0-1014.14",
        "6.8.0-1015.15",
        "6.8.0-1016.16",
        "6.8.0-1017.17",
        "6.8.0-1018.18",
        "6.8.0-1019.19",
        "6.8.0-1022.22",
        "6.8.0-1023.23",
        "6.8.0-1024.24",
        "6.8.0-1025.25",
        "6.8.0-1026.26",
        "6.8.0-1027.27",
        "6.8.0-1028.28",
        "6.8.0-1029.29",
        "6.8.0-1030.30",
        "6.8.0-1033.33",
        "6.8.0-1036.36",
        "6.8.0-1037.37",
        "6.8.0-1038.38",
        "6.8.0-1039.39",
        "6.8.0-1040.40",
        "6.8.0-1041.41",
        "6.8.0-1042.42",
        "6.8.0-1043.43",
        "6.8.0-1044.44",
        "6.8.0-1045.45",
        "6.8.0-1049.49",
        "6.8.0-1050.50",
        "6.8.0-1051.51",
        "6.8.0-1052.52",
        "6.8.0-1055.56",
        "6.8.0-1057.58",
        "6.8.0-1060.61",
        "6.8.0-1061.62",
        "6.8.0-1062.63",
        "6.8.0-1063.64",
        "6.8.0-1064.65",
        "6.8.0-1065.66",
        "6.8.0-1066.67"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "linux-buildinfo-6.8.0-147-lowlatency",
            "binary_version": "6.8.0-147.147.1"
          },
          {
            "binary_name": "linux-buildinfo-6.8.0-147-lowlatency-64k",
            "binary_version": "6.8.0-147.147.1"
          },
          {
            "binary_name": "linux-cloud-tools-6.8.0-147-lowlatency",
            "binary_version": "6.8.0-147.147.1"
          },
          {
            "binary_name": "linux-headers-6.8.0-147-lowlatency",
            "binary_version": "6.8.0-147.147.1"
          },
          {
            "binary_name": "linux-headers-6.8.0-147-lowlatency-64k",
            "binary_version": "6.8.0-147.147.1"
          },
          {
            "binary_name": "linux-image-unsigned-6.8.0-147-lowlatency",
            "binary_version": "6.8.0-147.147.1"
          },
          {
            "binary_name": "linux-image-unsigned-6.8.0-147-lowlatency-64k",
            "binary_version": "6.8.0-147.147.1"
          },
          {
            "binary_name": "linux-lowlatency-cloud-tools-6.8.0-147",
            "binary_version": "6.8.0-147.147.1"
          },
          {
            "binary_name": "linux-lowlatency-headers-6.8.0-147",
            "binary_version": "6.8.0-147.147.1"
          },
          {
            "binary_name": "linux-lowlatency-lib-rust-6.8.0-147-lowlatency",
            "binary_version": "6.8.0-147.147.1"
          },
          {
            "binary_name": "linux-lowlatency-tools-6.8.0-147",
            "binary_version": "6.8.0-147.147.1"
          },
          {
            "binary_name": "linux-modules-6.8.0-147-lowlatency",
            "binary_version": "6.8.0-147.147.1"
          },
          {
            "binary_name": "linux-modules-6.8.0-147-lowlatency-64k",
            "binary_version": "6.8.0-147.147.1"
          },
          {
            "binary_name": "linux-modules-iwlwifi-6.8.0-147-lowlatency",
            "binary_version": "6.8.0-147.147.1"
          },
          {
            "binary_name": "linux-tools-6.8.0-147-lowlatency",
            "binary_version": "6.8.0-147.147.1"
          },
          {
            "binary_name": "linux-tools-6.8.0-147-lowlatency-64k",
            "binary_version": "6.8.0-147.147.1"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:24.04:LTS",
        "name": "linux-lowlatency",
        "purl": "pkg:deb/ubuntu/linux-lowlatency@6.8.0-147.147.1?arch=source\u0026distro=noble"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "6.8.0-147.147.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "6.5.0-9.9.1",
        "6.6.0-14.14.1",
        "6.8.0-7.7.1",
        "6.8.0-25.25.3",
        "6.8.0-28.28.1",
        "6.8.0-31.31.1",
        "6.8.0-35.35.1",
        "6.8.0-36.36.1",
        "6.8.0-38.38.1",
        "6.8.0-39.39.1",
        "6.8.0-40.40.1",
        "6.8.0-41.41.1",
        "6.8.0-44.44.1",
        "6.8.0-45.45.1",
        "6.8.0-47.47.1",
        "6.8.0-48.48.3",
        "6.8.0-49.49.1",
        "6.8.0-50.51.1",
        "6.8.0-51.52.1",
        "6.8.0-52.53.1",
        "6.8.0-53.55.2",
        "6.8.0-54.56.1",
        "6.8.0-55.57.1",
        "6.8.0-56.58.1",
        "6.8.0-57.59.1",
        "6.8.0-58.60.1",
        "6.8.0-59.61.1",
        "6.8.0-60.63.1",
        "6.8.0-62.65.1",
        "6.8.0-63.66.1",
        "6.8.0-64.67.1",
        "6.8.0-65.68.1",
        "6.8.0-78.78.1",
        "6.8.0-79.79.1",
        "6.8.0-83.83.1",
        "6.8.0-84.84.1",
        "6.8.0-85.85.1",
        "6.8.0-86.87.1",
        "6.8.0-87.88.1",
        "6.8.0-88.89.1",
        "6.8.0-90.91.1",
        "6.8.0-94.96.1",
        "6.8.0-100.100.1",
        "6.8.0-101.101.1",
        "6.8.0-106.106.1",
        "6.8.0-107.107.1",
        "6.8.0-110.110.1",
        "6.8.0-111.111.1",
        "6.8.0-117.117.1",
        "6.8.0-134.134.1",
        "6.8.0-136.136.2",
        "6.8.0-137.137.1",
        "6.8.0-138.138.1",
        "6.8.0-139.139.1",
        "6.8.0-142.142.1",
        "6.8.0-146.146.1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-buildinfo-6.11.0-1016-lowlatency",
            "binary_version": "6.11.0-1016.17~24.04.1"
          },
          {
            "binary_name": "linux-buildinfo-6.11.0-1016-lowlatency-64k",
            "binary_version": "6.11.0-1016.17~24.04.1"
          },
          {
            "binary_name": "linux-cloud-tools-6.11.0-1016-lowlatency",
            "binary_version": "6.11.0-1016.17~24.04.1"
          },
          {
            "binary_name": "linux-headers-6.11.0-1016-lowlatency",
            "binary_version": "6.11.0-1016.17~24.04.1"
          },
          {
            "binary_name": "linux-headers-6.11.0-1016-lowlatency-64k",
            "binary_version": "6.11.0-1016.17~24.04.1"
          },
          {
            "binary_name": "linux-image-unsigned-6.11.0-1016-lowlatency",
            "binary_version": "6.11.0-1016.17~24.04.1"
          },
          {
            "binary_name": "linux-image-unsigned-6.11.0-1016-lowlatency-64k",
            "binary_version": "6.11.0-1016.17~24.04.1"
          },
          {
            "binary_name": "linux-lowlatency-hwe-6.11-cloud-tools-6.11.0-1016",
            "binary_version": "6.11.0-1016.17~24.04.1"
          },
          {
            "binary_name": "linux-lowlatency-hwe-6.11-headers-6.11.0-1016",
            "binary_version": "6.11.0-1016.17~24.04.1"
          },
          {
            "binary_name": "linux-lowlatency-hwe-6.11-lib-rust-6.11.0-1016-lowlatency",
            "binary_version": "6.11.0-1016.17~24.04.1"
          },
          {
            "binary_name": "linux-lowlatency-hwe-6.11-tools-6.11.0-1016",
            "binary_version": "6.11.0-1016.17~24.04.1"
          },
          {
            "binary_name": "linux-modules-6.11.0-1016-lowlatency",
            "binary_version": "6.11.0-1016.17~24.04.1"
          },
          {
            "binary_name": "linux-modules-6.11.0-1016-lowlatency-64k",
            "binary_version": "6.11.0-1016.17~24.04.1"
          },
          {
            "binary_name": "linux-modules-iwlwifi-6.11.0-1016-lowlatency",
            "binary_version": "6.11.0-1016.17~24.04.1"
          },
          {
            "binary_name": "linux-tools-6.11.0-1016-lowlatency",
            "binary_version": "6.11.0-1016.17~24.04.1"
          },
          {
            "binary_name": "linux-tools-6.11.0-1016-lowlatency-64k",
            "binary_version": "6.11.0-1016.17~24.04.1"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:24.04:LTS",
        "name": "linux-lowlatency-hwe-6.11",
        "purl": "pkg:deb/ubuntu/linux-lowlatency-hwe-6.11@6.11.0-1016.17~24.04.1?arch=source\u0026distro=noble"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "6.11.0-1009.10~24.04.1",
        "6.11.0-1011.12~24.04.1",
        "6.11.0-1012.13~24.04.1",
        "6.11.0-1013.14~24.04.1",
        "6.11.0-1014.15~24.04.1",
        "6.11.0-1015.16~24.04.2",
        "6.11.0-1016.17~24.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-buildinfo-6.8.0-1064-nvidia",
            "binary_version": "6.8.0-1064.67"
          },
          {
            "binary_name": "linux-buildinfo-6.8.0-1064-nvidia-64k",
            "binary_version": "6.8.0-1064.67"
          },
          {
            "binary_name": "linux-headers-6.8.0-1064-nvidia",
            "binary_version": "6.8.0-1064.67"
          },
          {
            "binary_name": "linux-headers-6.8.0-1064-nvidia-64k",
            "binary_version": "6.8.0-1064.67"
          },
          {
            "binary_name": "linux-image-unsigned-6.8.0-1064-nvidia",
            "binary_version": "6.8.0-1064.67"
          },
          {
            "binary_name": "linux-image-unsigned-6.8.0-1064-nvidia-64k",
            "binary_version": "6.8.0-1064.67"
          },
          {
            "binary_name": "linux-modules-6.8.0-1064-nvidia",
            "binary_version": "6.8.0-1064.67"
          },
          {
            "binary_name": "linux-modules-6.8.0-1064-nvidia-64k",
            "binary_version": "6.8.0-1064.67"
          },
          {
            "binary_name": "linux-modules-nvidia-fs-6.8.0-1064-nvidia",
            "binary_version": "6.8.0-1064.67"
          },
          {
            "binary_name": "linux-modules-nvidia-fs-6.8.0-1064-nvidia-64k",
            "binary_version": "6.8.0-1064.67"
          },
          {
            "binary_name": "linux-nvidia-headers-6.8.0-1064",
            "binary_version": "6.8.0-1064.67"
          },
          {
            "binary_name": "linux-nvidia-tools-6.8.0-1064",
            "binary_version": "6.8.0-1064.67"
          },
          {
            "binary_name": "linux-tools-6.8.0-1064-nvidia",
            "binary_version": "6.8.0-1064.67"
          },
          {
            "binary_name": "linux-tools-6.8.0-1064-nvidia-64k",
            "binary_version": "6.8.0-1064.67"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:24.04:LTS",
        "name": "linux-nvidia",
        "purl": "pkg:deb/ubuntu/linux-nvidia@6.8.0-1064.67?arch=source\u0026distro=noble"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "6.8.0-1007.7",
        "6.8.0-1008.8",
        "6.8.0-1009.9",
        "6.8.0-1010.10",
        "6.8.0-1011.11",
        "6.8.0-1012.12",
        "6.8.0-1013.14",
        "6.8.0-1014.15",
        "6.8.0-1015.16",
        "6.8.0-1017.19",
        "6.8.0-1018.20",
        "6.8.0-1019.21",
        "6.8.0-1020.22",
        "6.8.0-1021.23",
        "6.8.0-1022.25",
        "6.8.0-1023.26",
        "6.8.0-1024.27",
        "6.8.0-1025.28",
        "6.8.0-1026.29",
        "6.8.0-1027.30",
        "6.8.0-1028.31",
        "6.8.0-1029.32",
        "6.8.0-1030.33",
        "6.8.0-1031.34",
        "6.8.0-1032.35",
        "6.8.0-1035.38",
        "6.8.0-1036.39",
        "6.8.0-1038.41",
        "6.8.0-1039.42",
        "6.8.0-1040.43",
        "6.8.0-1041.44",
        "6.8.0-1042.45",
        "6.8.0-1043.46",
        "6.8.0-1044.47",
        "6.8.0-1045.48",
        "6.8.0-1046.49",
        "6.8.0-1047.50",
        "6.8.0-1049.52",
        "6.8.0-1050.53",
        "6.8.0-1051.54",
        "6.8.0-1052.55",
        "6.8.0-1054.57",
        "6.8.0-1055.58",
        "6.8.0-1058.61",
        "6.8.0-1059.62",
        "6.8.0-1060.63",
        "6.8.0-1061.64",
        "6.8.0-1062.65",
        "6.8.0-1063.66",
        "6.8.0-1064.67"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-buildinfo-6.11.0-1016-nvidia",
            "binary_version": "6.11.0-1016.16"
          },
          {
            "binary_name": "linux-buildinfo-6.11.0-1016-nvidia-64k",
            "binary_version": "6.11.0-1016.16"
          },
          {
            "binary_name": "linux-headers-6.11.0-1016-nvidia",
            "binary_version": "6.11.0-1016.16"
          },
          {
            "binary_name": "linux-headers-6.11.0-1016-nvidia-64k",
            "binary_version": "6.11.0-1016.16"
          },
          {
            "binary_name": "linux-image-unsigned-6.11.0-1016-nvidia",
            "binary_version": "6.11.0-1016.16"
          },
          {
            "binary_name": "linux-image-unsigned-6.11.0-1016-nvidia-64k",
            "binary_version": "6.11.0-1016.16"
          },
          {
            "binary_name": "linux-modules-6.11.0-1016-nvidia",
            "binary_version": "6.11.0-1016.16"
          },
          {
            "binary_name": "linux-modules-6.11.0-1016-nvidia-64k",
            "binary_version": "6.11.0-1016.16"
          },
          {
            "binary_name": "linux-modules-extra-6.11.0-1016-nvidia",
            "binary_version": "6.11.0-1016.16"
          },
          {
            "binary_name": "linux-modules-extra-6.11.0-1016-nvidia-64k",
            "binary_version": "6.11.0-1016.16"
          },
          {
            "binary_name": "linux-modules-nvidia-fs-6.11.0-1016-nvidia",
            "binary_version": "6.11.0-1016.16"
          },
          {
            "binary_name": "linux-modules-nvidia-fs-6.11.0-1016-nvidia-64k",
            "binary_version": "6.11.0-1016.16"
          },
          {
            "binary_name": "linux-nvidia-6.11-headers-6.11.0-1016",
            "binary_version": "6.11.0-1016.16"
          },
          {
            "binary_name": "linux-nvidia-6.11-lib-rust-6.11.0-1016-nvidia",
            "binary_version": "6.11.0-1016.16"
          },
          {
            "binary_name": "linux-nvidia-6.11-tools-6.11.0-1016",
            "binary_version": "6.11.0-1016.16"
          },
          {
            "binary_name": "linux-tools-6.11.0-1016-nvidia",
            "binary_version": "6.11.0-1016.16"
          },
          {
            "binary_name": "linux-tools-6.11.0-1016-nvidia-64k",
            "binary_version": "6.11.0-1016.16"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:24.04:LTS",
        "name": "linux-nvidia-6.11",
        "purl": "pkg:deb/ubuntu/linux-nvidia-6.11@6.11.0-1016.16?arch=source\u0026distro=noble"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "6.11.0-1002.2",
        "6.11.0-1003.3",
        "6.11.0-1007.7",
        "6.11.0-1010.10",
        "6.11.0-1011.11",
        "6.11.0-1012.12",
        "6.11.0-1013.13",
        "6.11.0-1016.16"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-buildinfo-6.17.0-1032-nvidia",
            "binary_version": "6.17.0-1032.32"
          },
          {
            "binary_name": "linux-buildinfo-6.17.0-1032-nvidia-64k",
            "binary_version": "6.17.0-1032.32"
          },
          {
            "binary_name": "linux-headers-6.17.0-1032-nvidia",
            "binary_version": "6.17.0-1032.32"
          },
          {
            "binary_name": "linux-headers-6.17.0-1032-nvidia-64k",
            "binary_version": "6.17.0-1032.32"
          },
          {
            "binary_name": "linux-image-unsigned-6.17.0-1032-nvidia",
            "binary_version": "6.17.0-1032.32"
          },
          {
            "binary_name": "linux-image-unsigned-6.17.0-1032-nvidia-64k",
            "binary_version": "6.17.0-1032.32"
          },
          {
            "binary_name": "linux-modules-6.17.0-1032-nvidia",
            "binary_version": "6.17.0-1032.32"
          },
          {
            "binary_name": "linux-modules-6.17.0-1032-nvidia-64k",
            "binary_version": "6.17.0-1032.32"
          },
          {
            "binary_name": "linux-modules-nvidia-fs-6.17.0-1032-nvidia",
            "binary_version": "6.17.0-1032.32"
          },
          {
            "binary_name": "linux-modules-nvidia-fs-6.17.0-1032-nvidia-64k",
            "binary_version": "6.17.0-1032.32"
          },
          {
            "binary_name": "linux-nvidia-6.17-headers-6.17.0-1032",
            "binary_version": "6.17.0-1032.32"
          },
          {
            "binary_name": "linux-nvidia-6.17-tools-6.17.0-1032",
            "binary_version": "6.17.0-1032.32"
          },
          {
            "binary_name": "linux-tools-6.17.0-1032-nvidia",
            "binary_version": "6.17.0-1032.32"
          },
          {
            "binary_name": "linux-tools-6.17.0-1032-nvidia-64k",
            "binary_version": "6.17.0-1032.32"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:24.04:LTS",
        "name": "linux-nvidia-6.17",
        "purl": "pkg:deb/ubuntu/linux-nvidia-6.17@6.17.0-1032.32?arch=source\u0026distro=noble"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "6.17.0-1004.4",
        "6.17.0-1008.8",
        "6.17.0-1014.14",
        "6.17.0-1018.18",
        "6.17.0-1021.21",
        "6.17.0-1026.26",
        "6.17.0-1029.29",
        "6.17.0-1031.31",
        "6.17.0-1032.32"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-buildinfo-7.0.0-1019-nvidia",
            "binary_version": "7.0.0-1019.19~24.04.2"
          },
          {
            "binary_name": "linux-buildinfo-7.0.0-1019-nvidia-64k",
            "binary_version": "7.0.0-1019.19~24.04.2"
          },
          {
            "binary_name": "linux-headers-7.0.0-1019-nvidia",
            "binary_version": "7.0.0-1019.19~24.04.2"
          },
          {
            "binary_name": "linux-headers-7.0.0-1019-nvidia-64k",
            "binary_version": "7.0.0-1019.19~24.04.2"
          },
          {
            "binary_name": "linux-image-unsigned-7.0.0-1019-nvidia",
            "binary_version": "7.0.0-1019.19~24.04.2"
          },
          {
            "binary_name": "linux-image-unsigned-7.0.0-1019-nvidia-64k",
            "binary_version": "7.0.0-1019.19~24.04.2"
          },
          {
            "binary_name": "linux-modules-7.0.0-1019-nvidia",
            "binary_version": "7.0.0-1019.19~24.04.2"
          },
          {
            "binary_name": "linux-modules-7.0.0-1019-nvidia-64k",
            "binary_version": "7.0.0-1019.19~24.04.2"
          },
          {
            "binary_name": "linux-modules-nvidia-fs-7.0.0-1019-nvidia",
            "binary_version": "7.0.0-1019.19~24.04.2"
          },
          {
            "binary_name": "linux-modules-nvidia-fs-7.0.0-1019-nvidia-64k",
            "binary_version": "7.0.0-1019.19~24.04.2"
          },
          {
            "binary_name": "linux-nvidia-7.0-headers-7.0.0-1019",
            "binary_version": "7.0.0-1019.19~24.04.2"
          },
          {
            "binary_name": "linux-nvidia-7.0-tools-7.0.0-1019",
            "binary_version": "7.0.0-1019.19~24.04.2"
          },
          {
            "binary_name": "linux-tools-7.0.0-1019-nvidia",
            "binary_version": "7.0.0-1019.19~24.04.2"
          },
          {
            "binary_name": "linux-tools-7.0.0-1019-nvidia-64k",
            "binary_version": "7.0.0-1019.19~24.04.2"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:24.04:LTS",
        "name": "linux-nvidia-7.0",
        "purl": "pkg:deb/ubuntu/linux-nvidia-7.0@7.0.0-1019.19~24.04.2?arch=source\u0026distro=noble"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "7.0.0-1013.13~24.04.1",
        "7.0.0-1015.15~24.04.1",
        "7.0.0-1016.16~24.04.1",
        "7.0.0-1018.18~24.04.1",
        "7.0.0-1019.19~24.04.2"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-buildinfo-6.8.0-1064-nvidia-lowlatency",
            "binary_version": "6.8.0-1064.67.1"
          },
          {
            "binary_name": "linux-buildinfo-6.8.0-1064-nvidia-lowlatency-64k",
            "binary_version": "6.8.0-1064.67.1"
          },
          {
            "binary_name": "linux-headers-6.8.0-1064-nvidia-lowlatency",
            "binary_version": "6.8.0-1064.67.1"
          },
          {
            "binary_name": "linux-headers-6.8.0-1064-nvidia-lowlatency-64k",
            "binary_version": "6.8.0-1064.67.1"
          },
          {
            "binary_name": "linux-image-unsigned-6.8.0-1064-nvidia-lowlatency",
            "binary_version": "6.8.0-1064.67.1"
          },
          {
            "binary_name": "linux-image-unsigned-6.8.0-1064-nvidia-lowlatency-64k",
            "binary_version": "6.8.0-1064.67.1"
          },
          {
            "binary_name": "linux-modules-6.8.0-1064-nvidia-lowlatency",
            "binary_version": "6.8.0-1064.67.1"
          },
          {
            "binary_name": "linux-modules-6.8.0-1064-nvidia-lowlatency-64k",
            "binary_version": "6.8.0-1064.67.1"
          },
          {
            "binary_name": "linux-modules-extra-6.8.0-1064-nvidia-lowlatency",
            "binary_version": "6.8.0-1064.67.1"
          },
          {
            "binary_name": "linux-modules-nvidia-fs-6.8.0-1064-nvidia-lowlatency",
            "binary_version": "6.8.0-1064.67.1"
          },
          {
            "binary_name": "linux-modules-nvidia-fs-6.8.0-1064-nvidia-lowlatency-64k",
            "binary_version": "6.8.0-1064.67.1"
          },
          {
            "binary_name": "linux-nvidia-lowlatency-headers-6.8.0-1064",
            "binary_version": "6.8.0-1064.67.1"
          },
          {
            "binary_name": "linux-nvidia-lowlatency-tools-6.8.0-1064",
            "binary_version": "6.8.0-1064.67.1"
          },
          {
            "binary_name": "linux-tools-6.8.0-1064-nvidia-lowlatency",
            "binary_version": "6.8.0-1064.67.1"
          },
          {
            "binary_name": "linux-tools-6.8.0-1064-nvidia-lowlatency-64k",
            "binary_version": "6.8.0-1064.67.1"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:24.04:LTS",
        "name": "linux-nvidia-lowlatency",
        "purl": "pkg:deb/ubuntu/linux-nvidia-lowlatency@6.8.0-1064.67.1?arch=source\u0026distro=noble"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "6.8.0-1009.9.1",
        "6.8.0-1011.11.1",
        "6.8.0-1012.12.1",
        "6.8.0-1013.14.1",
        "6.8.0-1014.15.1",
        "6.8.0-1015.16.1",
        "6.8.0-1017.19.1",
        "6.8.0-1018.20.1",
        "6.8.0-1019.21.1",
        "6.8.0-1020.22.1",
        "6.8.0-1021.23.1",
        "6.8.0-1022.25.2",
        "6.8.0-1023.26.1",
        "6.8.0-1024.27.1",
        "6.8.0-1025.28.1",
        "6.8.0-1026.29.1",
        "6.8.0-1027.30.1",
        "6.8.0-1028.31.1",
        "6.8.0-1029.32.1",
        "6.8.0-1030.33.1",
        "6.8.0-1031.34.1",
        "6.8.0-1032.35.1",
        "6.8.0-1035.38.1",
        "6.8.0-1036.39.1",
        "6.8.0-1038.41.1",
        "6.8.0-1039.42.1",
        "6.8.0-1040.43.1",
        "6.8.0-1041.44.1",
        "6.8.0-1042.45.1",
        "6.8.0-1043.46.1",
        "6.8.0-1044.47.1",
        "6.8.0-1045.48.1",
        "6.8.0-1046.49.1",
        "6.8.0-1047.50.1",
        "6.8.0-1049.52.1",
        "6.8.0-1050.53.1",
        "6.8.0-1051.54.1",
        "6.8.0-1052.55.1",
        "6.8.0-1054.57.1",
        "6.8.0-1055.58.1",
        "6.8.0-1058.61.1",
        "6.8.0-1059.62.1",
        "6.8.0-1060.63.1",
        "6.8.0-1061.64.1",
        "6.8.0-1062.65.1",
        "6.8.0-1063.66.1",
        "6.8.0-1064.67.1"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "linux-buildinfo-6.8.0-1036-nvidia-tegra",
            "binary_version": "6.8.0-1036.39"
          },
          {
            "binary_name": "linux-buildinfo-6.8.0-1036-nvidia-tegra-rt",
            "binary_version": "6.8.0-1036.39"
          },
          {
            "binary_name": "linux-headers-6.8.0-1036-nvidia-tegra",
            "binary_version": "6.8.0-1036.39"
          },
          {
            "binary_name": "linux-headers-6.8.0-1036-nvidia-tegra-rt",
            "binary_version": "6.8.0-1036.39"
          },
          {
            "binary_name": "linux-image-unsigned-6.8.0-1036-nvidia-tegra",
            "binary_version": "6.8.0-1036.39"
          },
          {
            "binary_name": "linux-image-unsigned-6.8.0-1036-nvidia-tegra-rt",
            "binary_version": "6.8.0-1036.39"
          },
          {
            "binary_name": "linux-modules-6.8.0-1036-nvidia-tegra",
            "binary_version": "6.8.0-1036.39"
          },
          {
            "binary_name": "linux-modules-6.8.0-1036-nvidia-tegra-rt",
            "binary_version": "6.8.0-1036.39"
          },
          {
            "binary_name": "linux-modules-extra-6.8.0-1036-nvidia-tegra",
            "binary_version": "6.8.0-1036.39"
          },
          {
            "binary_name": "linux-modules-extra-6.8.0-1036-nvidia-tegra-rt",
            "binary_version": "6.8.0-1036.39"
          },
          {
            "binary_name": "linux-nvidia-tegra-headers-6.8.0-1036",
            "binary_version": "6.8.0-1036.39"
          },
          {
            "binary_name": "linux-nvidia-tegra-tools-6.8.0-1036",
            "binary_version": "6.8.0-1036.39"
          },
          {
            "binary_name": "linux-tools-6.8.0-1036-nvidia-tegra",
            "binary_version": "6.8.0-1036.39"
          },
          {
            "binary_name": "linux-tools-6.8.0-1036-nvidia-tegra-rt",
            "binary_version": "6.8.0-1036.39"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:24.04:LTS",
        "name": "linux-nvidia-tegra",
        "purl": "pkg:deb/ubuntu/linux-nvidia-tegra@6.8.0-1036.39?arch=source\u0026distro=noble"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "6.8.0-1036.39"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "6.8.0-1003.3",
        "6.8.0-1004.4",
        "6.8.0-1008.8",
        "6.8.0-1009.9",
        "6.8.0-1010.10",
        "6.8.0-1012.12",
        "6.8.0-1013.13",
        "6.8.0-1016.16",
        "6.8.0-1019.19",
        "6.8.0-1020.20",
        "6.8.0-1021.21",
        "6.8.0-1022.22",
        "6.8.0-1023.23",
        "6.8.0-1024.24",
        "6.8.0-1025.25",
        "6.8.0-1026.26",
        "6.8.0-1029.30",
        "6.8.0-1030.31",
        "6.8.0-1031.32",
        "6.8.0-1032.34",
        "6.8.0-1035.38"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-buildinfo-6.11.0-1027-oem",
            "binary_version": "6.11.0-1027.27"
          },
          {
            "binary_name": "linux-headers-6.11.0-1027-oem",
            "binary_version": "6.11.0-1027.27"
          },
          {
            "binary_name": "linux-image-unsigned-6.11.0-1027-oem",
            "binary_version": "6.11.0-1027.27"
          },
          {
            "binary_name": "linux-modules-6.11.0-1027-oem",
            "binary_version": "6.11.0-1027.27"
          },
          {
            "binary_name": "linux-modules-ipu6-6.11.0-1027-oem",
            "binary_version": "6.11.0-1027.27"
          },
          {
            "binary_name": "linux-modules-ipu7-6.11.0-1027-oem",
            "binary_version": "6.11.0-1027.27"
          },
          {
            "binary_name": "linux-modules-iwlwifi-6.11.0-1027-oem",
            "binary_version": "6.11.0-1027.27"
          },
          {
            "binary_name": "linux-modules-usbio-6.11.0-1027-oem",
            "binary_version": "6.11.0-1027.27"
          },
          {
            "binary_name": "linux-modules-vision-6.11.0-1027-oem",
            "binary_version": "6.11.0-1027.27"
          },
          {
            "binary_name": "linux-oem-6.11-headers-6.11.0-1027",
            "binary_version": "6.11.0-1027.27"
          },
          {
            "binary_name": "linux-oem-6.11-tools-6.11.0-1027",
            "binary_version": "6.11.0-1027.27"
          },
          {
            "binary_name": "linux-tools-6.11.0-1027-oem",
            "binary_version": "6.11.0-1027.27"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:24.04:LTS",
        "name": "linux-oem-6.11",
        "purl": "pkg:deb/ubuntu/linux-oem-6.11@6.11.0-1027.27?arch=source\u0026distro=noble"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "6.11.0-1007.7",
        "6.11.0-1008.8",
        "6.11.0-1009.9",
        "6.11.0-1010.10",
        "6.11.0-1011.11",
        "6.11.0-1012.12",
        "6.11.0-1013.13",
        "6.11.0-1015.15",
        "6.11.0-1016.16",
        "6.11.0-1017.17",
        "6.11.0-1018.18",
        "6.11.0-1020.20",
        "6.11.0-1021.21",
        "6.11.0-1022.22",
        "6.11.0-1023.23",
        "6.11.0-1024.24",
        "6.11.0-1025.25",
        "6.11.0-1027.27"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-buildinfo-6.14.0-1020-oem",
            "binary_version": "6.14.0-1020.20"
          },
          {
            "binary_name": "linux-headers-6.14.0-1020-oem",
            "binary_version": "6.14.0-1020.20"
          },
          {
            "binary_name": "linux-image-unsigned-6.14.0-1020-oem",
            "binary_version": "6.14.0-1020.20"
          },
          {
            "binary_name": "linux-modules-6.14.0-1020-oem",
            "binary_version": "6.14.0-1020.20"
          },
          {
            "binary_name": "linux-modules-ipu6-6.14.0-1020-oem",
            "binary_version": "6.14.0-1020.20"
          },
          {
            "binary_name": "linux-modules-ipu7-6.14.0-1020-oem",
            "binary_version": "6.14.0-1020.20"
          },
          {
            "binary_name": "linux-modules-iwlwifi-6.14.0-1020-oem",
            "binary_version": "6.14.0-1020.20"
          },
          {
            "binary_name": "linux-modules-usbio-6.14.0-1020-oem",
            "binary_version": "6.14.0-1020.20"
          },
          {
            "binary_name": "linux-modules-vision-6.14.0-1020-oem",
            "binary_version": "6.14.0-1020.20"
          },
          {
            "binary_name": "linux-oem-6.14-headers-6.14.0-1020",
            "binary_version": "6.14.0-1020.20"
          },
          {
            "binary_name": "linux-oem-6.14-tools-6.14.0-1020",
            "binary_version": "6.14.0-1020.20"
          },
          {
            "binary_name": "linux-tools-6.14.0-1020-oem",
            "binary_version": "6.14.0-1020.20"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:24.04:LTS",
        "name": "linux-oem-6.14",
        "purl": "pkg:deb/ubuntu/linux-oem-6.14@6.14.0-1020.20?arch=source\u0026distro=noble"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "6.14.0-1004.4",
        "6.14.0-1005.5",
        "6.14.0-1006.6",
        "6.14.0-1007.7",
        "6.14.0-1008.8",
        "6.14.0-1010.10",
        "6.14.0-1011.11",
        "6.14.0-1012.12",
        "6.14.0-1013.13",
        "6.14.0-1014.14",
        "6.14.0-1015.15",
        "6.14.0-1016.16",
        "6.14.0-1017.17",
        "6.14.0-1018.18",
        "6.14.0-1019.19",
        "6.14.0-1020.20"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-buildinfo-6.17.0-1033-oem",
            "binary_version": "6.17.0-1033.33"
          },
          {
            "binary_name": "linux-headers-6.17.0-1033-oem",
            "binary_version": "6.17.0-1033.33"
          },
          {
            "binary_name": "linux-image-unsigned-6.17.0-1033-oem",
            "binary_version": "6.17.0-1033.33"
          },
          {
            "binary_name": "linux-modules-6.17.0-1033-oem",
            "binary_version": "6.17.0-1033.33"
          },
          {
            "binary_name": "linux-modules-evdi-6.17.0-1033-oem",
            "binary_version": "6.17.0-1033.33"
          },
          {
            "binary_name": "linux-modules-ipu6-6.17.0-1033-oem",
            "binary_version": "6.17.0-1033.33"
          },
          {
            "binary_name": "linux-modules-ipu7-6.17.0-1033-oem",
            "binary_version": "6.17.0-1033.33"
          },
          {
            "binary_name": "linux-modules-iwlwifi-6.17.0-1033-oem",
            "binary_version": "6.17.0-1033.33"
          },
          {
            "binary_name": "linux-modules-usbio-6.17.0-1033-oem",
            "binary_version": "6.17.0-1033.33"
          },
          {
            "binary_name": "linux-modules-vision-6.17.0-1033-oem",
            "binary_version": "6.17.0-1033.33"
          },
          {
            "binary_name": "linux-oem-6.17-headers-6.17.0-1033",
            "binary_version": "6.17.0-1033.33"
          },
          {
            "binary_name": "linux-oem-6.17-tools-6.17.0-1033",
            "binary_version": "6.17.0-1033.33"
          },
          {
            "binary_name": "linux-tools-6.17.0-1033-oem",
            "binary_version": "6.17.0-1033.33"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:24.04:LTS",
        "name": "linux-oem-6.17",
        "purl": "pkg:deb/ubuntu/linux-oem-6.17@6.17.0-1033.33?arch=source\u0026distro=noble"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "6.17.0-1005.5",
        "6.17.0-1006.6",
        "6.17.0-1007.7",
        "6.17.0-1008.8",
        "6.17.0-1009.9",
        "6.17.0-1010.10",
        "6.17.0-1011.11",
        "6.17.0-1012.12",
        "6.17.0-1017.17",
        "6.17.0-1020.20",
        "6.17.0-1023.23",
        "6.17.0-1024.24",
        "6.17.0-1025.25",
        "6.17.0-1028.28",
        "6.17.0-1030.30",
        "6.17.0-1032.32",
        "6.17.0-1033.33"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-buildinfo-6.8.0-1032-oem",
            "binary_version": "6.8.0-1032.32"
          },
          {
            "binary_name": "linux-headers-6.8.0-1032-oem",
            "binary_version": "6.8.0-1032.32"
          },
          {
            "binary_name": "linux-image-unsigned-6.8.0-1032-oem",
            "binary_version": "6.8.0-1032.32"
          },
          {
            "binary_name": "linux-modules-6.8.0-1032-oem",
            "binary_version": "6.8.0-1032.32"
          },
          {
            "binary_name": "linux-modules-ipu6-6.8.0-1032-oem",
            "binary_version": "6.8.0-1032.32"
          },
          {
            "binary_name": "linux-modules-iwlwifi-6.8.0-1032-oem",
            "binary_version": "6.8.0-1032.32"
          },
          {
            "binary_name": "linux-modules-usbio-6.8.0-1032-oem",
            "binary_version": "6.8.0-1032.32"
          },
          {
            "binary_name": "linux-oem-6.8-headers-6.8.0-1032",
            "binary_version": "6.8.0-1032.32"
          },
          {
            "binary_name": "linux-oem-6.8-tools-6.8.0-1032",
            "binary_version": "6.8.0-1032.32"
          },
          {
            "binary_name": "linux-tools-6.8.0-1032-oem",
            "binary_version": "6.8.0-1032.32"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:24.04:LTS",
        "name": "linux-oem-6.8",
        "purl": "pkg:deb/ubuntu/linux-oem-6.8@6.8.0-1032.32?arch=source\u0026distro=noble"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "6.8.0-1003.3",
        "6.8.0-1004.4",
        "6.8.0-1005.5",
        "6.8.0-1006.6",
        "6.8.0-1007.7",
        "6.8.0-1008.8",
        "6.8.0-1009.9",
        "6.8.0-1010.10",
        "6.8.0-1011.11",
        "6.8.0-1012.12",
        "6.8.0-1013.13",
        "6.8.0-1014.14",
        "6.8.0-1016.16",
        "6.8.0-1017.17",
        "6.8.0-1018.18",
        "6.8.0-1019.19",
        "6.8.0-1020.20",
        "6.8.0-1024.24",
        "6.8.0-1025.25",
        "6.8.0-1026.26",
        "6.8.0-1027.27",
        "6.8.0-1028.28",
        "6.8.0-1029.29",
        "6.8.0-1030.30",
        "6.8.0-1031.31",
        "6.8.0-1032.32"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "linux-buildinfo-6.8.0-1064-oracle",
            "binary_version": "6.8.0-1064.67"
          },
          {
            "binary_name": "linux-buildinfo-6.8.0-1064-oracle-64k",
            "binary_version": "6.8.0-1064.67"
          },
          {
            "binary_name": "linux-headers-6.8.0-1064-oracle",
            "binary_version": "6.8.0-1064.67"
          },
          {
            "binary_name": "linux-headers-6.8.0-1064-oracle-64k",
            "binary_version": "6.8.0-1064.67"
          },
          {
            "binary_name": "linux-image-unsigned-6.8.0-1064-oracle",
            "binary_version": "6.8.0-1064.67"
          },
          {
            "binary_name": "linux-image-unsigned-6.8.0-1064-oracle-64k",
            "binary_version": "6.8.0-1064.67"
          },
          {
            "binary_name": "linux-modules-6.8.0-1064-oracle",
            "binary_version": "6.8.0-1064.67"
          },
          {
            "binary_name": "linux-modules-6.8.0-1064-oracle-64k",
            "binary_version": "6.8.0-1064.67"
          },
          {
            "binary_name": "linux-modules-extra-6.8.0-1064-oracle",
            "binary_version": "6.8.0-1064.67"
          },
          {
            "binary_name": "linux-modules-extra-6.8.0-1064-oracle-64k",
            "binary_version": "6.8.0-1064.67"
          },
          {
            "binary_name": "linux-oracle-headers-6.8.0-1064",
            "binary_version": "6.8.0-1064.67"
          },
          {
            "binary_name": "linux-oracle-tools-6.8.0-1064",
            "binary_version": "6.8.0-1064.67"
          },
          {
            "binary_name": "linux-tools-6.8.0-1064-oracle",
            "binary_version": "6.8.0-1064.67"
          },
          {
            "binary_name": "linux-tools-6.8.0-1064-oracle-64k",
            "binary_version": "6.8.0-1064.67"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:24.04:LTS",
        "name": "linux-oracle",
        "purl": "pkg:deb/ubuntu/linux-oracle@6.8.0-1064.67?arch=source\u0026distro=noble"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "6.8.0-1064.67"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "6.5.0-1010.10",
        "6.6.0-1001.1",
        "6.8.0-1001.1",
        "6.8.0-1004.4",
        "6.8.0-1005.5",
        "6.8.0-1006.6",
        "6.8.0-1008.8",
        "6.8.0-1010.10",
        "6.8.0-1011.11",
        "6.8.0-1012.12",
        "6.8.0-1013.13",
        "6.8.0-1014.14",
        "6.8.0-1015.16",
        "6.8.0-1016.17",
        "6.8.0-1017.18",
        "6.8.0-1018.19",
        "6.8.0-1019.20",
        "6.8.0-1020.21",
        "6.8.0-1021.22",
        "6.8.0-1022.23",
        "6.8.0-1023.24",
        "6.8.0-1024.25",
        "6.8.0-1025.26",
        "6.8.0-1026.27",
        "6.8.0-1027.28",
        "6.8.0-1028.29",
        "6.8.0-1029.30",
        "6.8.0-1030.31",
        "6.8.0-1032.33",
        "6.8.0-1033.34",
        "6.8.0-1035.36",
        "6.8.0-1037.38",
        "6.8.0-1038.39",
        "6.8.0-1039.40",
        "6.8.0-1040.41",
        "6.8.0-1041.42",
        "6.8.0-1042.43",
        "6.8.0-1043.44",
        "6.8.0-1044.45",
        "6.8.0-1047.48",
        "6.8.0-1049.50",
        "6.8.0-1050.51",
        "6.8.0-1052.53",
        "6.8.0-1054.55",
        "6.8.0-1057.58",
        "6.8.0-1058.61",
        "6.8.0-1059.62",
        "6.8.0-1060.63",
        "6.8.0-1061.64",
        "6.8.0-1062.65",
        "6.8.0-1063.66"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-buildinfo-6.14.0-1018-oracle",
            "binary_version": "6.14.0-1018.18~24.04.1"
          },
          {
            "binary_name": "linux-buildinfo-6.14.0-1018-oracle-64k",
            "binary_version": "6.14.0-1018.18~24.04.1"
          },
          {
            "binary_name": "linux-headers-6.14.0-1018-oracle",
            "binary_version": "6.14.0-1018.18~24.04.1"
          },
          {
            "binary_name": "linux-headers-6.14.0-1018-oracle-64k",
            "binary_version": "6.14.0-1018.18~24.04.1"
          },
          {
            "binary_name": "linux-image-unsigned-6.14.0-1018-oracle",
            "binary_version": "6.14.0-1018.18~24.04.1"
          },
          {
            "binary_name": "linux-image-unsigned-6.14.0-1018-oracle-64k",
            "binary_version": "6.14.0-1018.18~24.04.1"
          },
          {
            "binary_name": "linux-modules-6.14.0-1018-oracle",
            "binary_version": "6.14.0-1018.18~24.04.1"
          },
          {
            "binary_name": "linux-modules-6.14.0-1018-oracle-64k",
            "binary_version": "6.14.0-1018.18~24.04.1"
          },
          {
            "binary_name": "linux-modules-extra-6.14.0-1018-oracle",
            "binary_version": "6.14.0-1018.18~24.04.1"
          },
          {
            "binary_name": "linux-modules-extra-6.14.0-1018-oracle-64k",
            "binary_version": "6.14.0-1018.18~24.04.1"
          },
          {
            "binary_name": "linux-oracle-6.14-headers-6.14.0-1018",
            "binary_version": "6.14.0-1018.18~24.04.1"
          },
          {
            "binary_name": "linux-oracle-6.14-tools-6.14.0-1018",
            "binary_version": "6.14.0-1018.18~24.04.1"
          },
          {
            "binary_name": "linux-tools-6.14.0-1018-oracle",
            "binary_version": "6.14.0-1018.18~24.04.1"
          },
          {
            "binary_name": "linux-tools-6.14.0-1018-oracle-64k",
            "binary_version": "6.14.0-1018.18~24.04.1"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:24.04:LTS",
        "name": "linux-oracle-6.14",
        "purl": "pkg:deb/ubuntu/linux-oracle-6.14@6.14.0-1018.18~24.04.1?arch=source\u0026distro=noble"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "6.14.0-1007.7~24.04.1",
        "6.14.0-1009.9~24.04.1",
        "6.14.0-1010.10~24.04.1",
        "6.14.0-1011.11~24.04.1",
        "6.14.0-1012.12~24.04.1",
        "6.14.0-1013.13~24.04.1",
        "6.14.0-1014.14~24.04.1",
        "6.14.0-1015.15~24.04.1",
        "6.14.0-1016.16~24.04.1",
        "6.14.0-1017.17~24.04.1",
        "6.14.0-1018.18~24.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-buildinfo-6.17.0-1020-oracle",
            "binary_version": "6.17.0-1020.20"
          },
          {
            "binary_name": "linux-buildinfo-6.17.0-1020-oracle-64k",
            "binary_version": "6.17.0-1020.20"
          },
          {
            "binary_name": "linux-headers-6.17.0-1020-oracle",
            "binary_version": "6.17.0-1020.20"
          },
          {
            "binary_name": "linux-headers-6.17.0-1020-oracle-64k",
            "binary_version": "6.17.0-1020.20"
          },
          {
            "binary_name": "linux-image-unsigned-6.17.0-1020-oracle",
            "binary_version": "6.17.0-1020.20"
          },
          {
            "binary_name": "linux-image-unsigned-6.17.0-1020-oracle-64k",
            "binary_version": "6.17.0-1020.20"
          },
          {
            "binary_name": "linux-modules-6.17.0-1020-oracle",
            "binary_version": "6.17.0-1020.20"
          },
          {
            "binary_name": "linux-modules-6.17.0-1020-oracle-64k",
            "binary_version": "6.17.0-1020.20"
          },
          {
            "binary_name": "linux-modules-extra-6.17.0-1020-oracle",
            "binary_version": "6.17.0-1020.20"
          },
          {
            "binary_name": "linux-modules-extra-6.17.0-1020-oracle-64k",
            "binary_version": "6.17.0-1020.20"
          },
          {
            "binary_name": "linux-oracle-6.17-headers-6.17.0-1020",
            "binary_version": "6.17.0-1020.20"
          },
          {
            "binary_name": "linux-oracle-6.17-tools-6.17.0-1020",
            "binary_version": "6.17.0-1020.20"
          },
          {
            "binary_name": "linux-tools-6.17.0-1020-oracle",
            "binary_version": "6.17.0-1020.20"
          },
          {
            "binary_name": "linux-tools-6.17.0-1020-oracle-64k",
            "binary_version": "6.17.0-1020.20"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:24.04:LTS",
        "name": "linux-oracle-6.17",
        "purl": "pkg:deb/ubuntu/linux-oracle-6.17@6.17.0-1020.20?arch=source\u0026distro=noble"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "6.17.0-1004.4~24.04.2",
        "6.17.0-1007.7~24.04.1",
        "6.17.0-1009.9~24.04.1",
        "6.17.0-1010.10~24.04.1",
        "6.17.0-1011.11~24.04.1",
        "6.17.0-1014.14~24.04.1",
        "6.17.0-1016.16~24.04.1",
        "6.17.0-1018.18~24.04.1",
        "6.17.0-1019.19~24.04.3",
        "6.17.0-1020.20"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "linux-buildinfo-7.0.0-1013-oracle",
            "binary_version": "7.0.0-1013.13~24.04.1"
          },
          {
            "binary_name": "linux-buildinfo-7.0.0-1013-oracle-64k",
            "binary_version": "7.0.0-1013.13~24.04.1"
          },
          {
            "binary_name": "linux-headers-7.0.0-1013-oracle",
            "binary_version": "7.0.0-1013.13~24.04.1"
          },
          {
            "binary_name": "linux-headers-7.0.0-1013-oracle-64k",
            "binary_version": "7.0.0-1013.13~24.04.1"
          },
          {
            "binary_name": "linux-image-unsigned-7.0.0-1013-oracle",
            "binary_version": "7.0.0-1013.13~24.04.1"
          },
          {
            "binary_name": "linux-image-unsigned-7.0.0-1013-oracle-64k",
            "binary_version": "7.0.0-1013.13~24.04.1"
          },
          {
            "binary_name": "linux-modules-7.0.0-1013-oracle",
            "binary_version": "7.0.0-1013.13~24.04.1"
          },
          {
            "binary_name": "linux-modules-7.0.0-1013-oracle-64k",
            "binary_version": "7.0.0-1013.13~24.04.1"
          },
          {
            "binary_name": "linux-oracle-7.0-headers-7.0.0-1013",
            "binary_version": "7.0.0-1013.13~24.04.1"
          },
          {
            "binary_name": "linux-oracle-7.0-tools-7.0.0-1013",
            "binary_version": "7.0.0-1013.13~24.04.1"
          },
          {
            "binary_name": "linux-tools-7.0.0-1013-oracle",
            "binary_version": "7.0.0-1013.13~24.04.1"
          },
          {
            "binary_name": "linux-tools-7.0.0-1013-oracle-64k",
            "binary_version": "7.0.0-1013.13~24.04.1"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:24.04:LTS",
        "name": "linux-oracle-7.0",
        "purl": "pkg:deb/ubuntu/linux-oracle-7.0@7.0.0-1013.13~24.04.1?arch=source\u0026distro=noble"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "7.0.0-1013.13~24.04.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "7.0.0-1006.6~24.04.3",
        "7.0.0-1011.11~24.04.1",
        "7.0.0-1012.12~24.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-buildinfo-6.8.0-1065-raspi",
            "binary_version": "6.8.0-1065.69"
          },
          {
            "binary_name": "linux-headers-6.8.0-1065-raspi",
            "binary_version": "6.8.0-1065.69"
          },
          {
            "binary_name": "linux-image-6.8.0-1065-raspi",
            "binary_version": "6.8.0-1065.69"
          },
          {
            "binary_name": "linux-modules-6.8.0-1065-raspi",
            "binary_version": "6.8.0-1065.69"
          },
          {
            "binary_name": "linux-raspi-headers-6.8.0-1065",
            "binary_version": "6.8.0-1065.69"
          },
          {
            "binary_name": "linux-raspi-tools-6.8.0-1065",
            "binary_version": "6.8.0-1065.69"
          },
          {
            "binary_name": "linux-tools-6.8.0-1065-raspi",
            "binary_version": "6.8.0-1065.69"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:24.04:LTS",
        "name": "linux-raspi",
        "purl": "pkg:deb/ubuntu/linux-raspi@6.8.0-1065.69?arch=source\u0026distro=noble"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "6.5.0-1005.7",
        "6.7.0-1001.1",
        "6.8.0-1001.1",
        "6.8.0-1002.2",
        "6.8.0-1003.3",
        "6.8.0-1004.4",
        "6.8.0-1005.5",
        "6.8.0-1006.6",
        "6.8.0-1007.7",
        "6.8.0-1008.8",
        "6.8.0-1009.10",
        "6.8.0-1010.11",
        "6.8.0-1011.12",
        "6.8.0-1012.13",
        "6.8.0-1013.14",
        "6.8.0-1014.16",
        "6.8.0-1015.17",
        "6.8.0-1016.18",
        "6.8.0-1017.19",
        "6.8.0-1018.20",
        "6.8.0-1019.23",
        "6.8.0-1020.24",
        "6.8.0-1024.28",
        "6.8.0-1028.32",
        "6.8.0-1029.33",
        "6.8.0-1030.34",
        "6.8.0-1031.35",
        "6.8.0-1032.36",
        "6.8.0-1035.39",
        "6.8.0-1036.40",
        "6.8.0-1038.42",
        "6.8.0-1039.43",
        "6.8.0-1040.44",
        "6.8.0-1041.45",
        "6.8.0-1042.46",
        "6.8.0-1043.47",
        "6.8.0-1044.48",
        "6.8.0-1045.49",
        "6.8.0-1047.51",
        "6.8.0-1048.52",
        "6.8.0-1050.54",
        "6.8.0-1051.55",
        "6.8.0-1052.56",
        "6.8.0-1053.57",
        "6.8.0-1056.60",
        "6.8.0-1057.61",
        "6.8.0-1060.64",
        "6.8.0-1061.65",
        "6.8.0-1062.66",
        "6.8.0-1063.67",
        "6.8.0-1064.68",
        "6.8.0-1065.69"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-buildinfo-6.8.0-2019-raspi-realtime",
            "binary_version": "6.8.0-2019.20"
          },
          {
            "binary_name": "linux-headers-6.8.0-2019-raspi-realtime",
            "binary_version": "6.8.0-2019.20"
          },
          {
            "binary_name": "linux-image-6.8.0-2019-raspi-realtime",
            "binary_version": "6.8.0-2019.20"
          },
          {
            "binary_name": "linux-modules-6.8.0-2019-raspi-realtime",
            "binary_version": "6.8.0-2019.20"
          },
          {
            "binary_name": "linux-raspi-realtime-headers-6.8.0-2019",
            "binary_version": "6.8.0-2019.20"
          },
          {
            "binary_name": "linux-raspi-realtime-tools-6.8.0-2019",
            "binary_version": "6.8.0-2019.20"
          },
          {
            "binary_name": "linux-tools-6.8.0-2019-raspi-realtime",
            "binary_version": "6.8.0-2019.20"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:24.04:LTS",
        "name": "linux-raspi-realtime",
        "purl": "pkg:deb/ubuntu/linux-raspi-realtime@6.8.0-2019.20?arch=source\u0026distro=noble"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "6.8.0-2019.20"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-buildinfo-6.8.1-1015-realtime",
            "binary_version": "6.8.1-1015.16"
          },
          {
            "binary_name": "linux-cloud-tools-6.8.1-1015-realtime",
            "binary_version": "6.8.1-1015.16"
          },
          {
            "binary_name": "linux-headers-6.8.1-1015-realtime",
            "binary_version": "6.8.1-1015.16"
          },
          {
            "binary_name": "linux-image-unsigned-6.8.1-1015-realtime",
            "binary_version": "6.8.1-1015.16"
          },
          {
            "binary_name": "linux-modules-6.8.1-1015-realtime",
            "binary_version": "6.8.1-1015.16"
          },
          {
            "binary_name": "linux-modules-extra-6.8.1-1015-realtime",
            "binary_version": "6.8.1-1015.16"
          },
          {
            "binary_name": "linux-modules-iwlwifi-6.8.1-1015-realtime",
            "binary_version": "6.8.1-1015.16"
          },
          {
            "binary_name": "linux-realtime-cloud-tools-6.8.1-1015",
            "binary_version": "6.8.1-1015.16"
          },
          {
            "binary_name": "linux-realtime-headers-6.8.1-1015",
            "binary_version": "6.8.1-1015.16"
          },
          {
            "binary_name": "linux-realtime-tools-6.8.1-1015",
            "binary_version": "6.8.1-1015.16"
          },
          {
            "binary_name": "linux-tools-6.8.1-1015-realtime",
            "binary_version": "6.8.1-1015.16"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:24.04:LTS",
        "name": "linux-realtime",
        "purl": "pkg:deb/ubuntu/linux-realtime@6.8.1-1015.16?arch=source\u0026distro=noble"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "6.8.1-1015.16"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-buildinfo-6.8.0-60-generic",
            "binary_version": "6.8.0-60.63.1"
          },
          {
            "binary_name": "linux-headers-6.8.0-60-generic",
            "binary_version": "6.8.0-60.63.1"
          },
          {
            "binary_name": "linux-image-6.8.0-60-generic",
            "binary_version": "6.8.0-60.63.1"
          },
          {
            "binary_name": "linux-modules-6.8.0-60-generic",
            "binary_version": "6.8.0-60.63.1"
          },
          {
            "binary_name": "linux-riscv-headers-6.8.0-60",
            "binary_version": "6.8.0-60.63.1"
          },
          {
            "binary_name": "linux-riscv-tools-6.8.0-60",
            "binary_version": "6.8.0-60.63.1"
          },
          {
            "binary_name": "linux-tools-6.8.0-60-generic",
            "binary_version": "6.8.0-60.63.1"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:24.04:LTS",
        "name": "linux-riscv",
        "purl": "pkg:deb/ubuntu/linux-riscv@6.8.0-60.63.1?arch=source\u0026distro=noble"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "6.5.0-9.9.1",
        "6.8.0-20.20.1",
        "6.8.0-28.28.1",
        "6.8.0-31.31.1",
        "6.8.0-35.35.1",
        "6.8.0-36.36.1",
        "6.8.0-38.38.1",
        "6.8.0-39.39.1",
        "6.8.0-40.40.1",
        "6.8.0-41.41.1",
        "6.8.0-44.44.1",
        "6.8.0-47.47.1",
        "6.8.0-48.48.1",
        "6.8.0-49.49.1",
        "6.8.0-50.51.1",
        "6.8.0-51.52.1",
        "6.8.0-52.53.1",
        "6.8.0-53.55.1",
        "6.8.0-55.57.1",
        "6.8.0-56.58.1",
        "6.8.0-57.59.1",
        "6.8.0-58.60.1",
        "6.8.0-59.61.1",
        "6.8.0-60.63.1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-buildinfo-6.14.0-37-generic",
            "binary_version": "6.14.0-37.37.1~24.04.1"
          },
          {
            "binary_name": "linux-headers-6.14.0-37-generic",
            "binary_version": "6.14.0-37.37.1~24.04.1"
          },
          {
            "binary_name": "linux-image-6.14.0-37-generic",
            "binary_version": "6.14.0-37.37.1~24.04.1"
          },
          {
            "binary_name": "linux-modules-6.14.0-37-generic",
            "binary_version": "6.14.0-37.37.1~24.04.1"
          },
          {
            "binary_name": "linux-riscv-6.14-headers-6.14.0-37",
            "binary_version": "6.14.0-37.37.1~24.04.1"
          },
          {
            "binary_name": "linux-riscv-6.14-tools-6.14.0-37",
            "binary_version": "6.14.0-37.37.1~24.04.1"
          },
          {
            "binary_name": "linux-tools-6.14.0-37-generic",
            "binary_version": "6.14.0-37.37.1~24.04.1"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:24.04:LTS",
        "name": "linux-riscv-6.14",
        "purl": "pkg:deb/ubuntu/linux-riscv-6.14@6.14.0-37.37.1~24.04.1?arch=source\u0026distro=noble"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "6.14.0-22.22.1~24.04.1",
        "6.14.0-23.23.1~24.04.1",
        "6.14.0-24.24.1~24.04.1",
        "6.14.0-27.27.1~24.04.1",
        "6.14.0-28.28.1~24.04.1",
        "6.14.0-29.29.1~24.04.1",
        "6.14.0-32.32.1~24.04.1",
        "6.14.0-33.33.1~24.04.1",
        "6.14.0-34.34.1~24.04.1",
        "6.14.0-35.35.1~24.04.1",
        "6.14.0-36.36.1~24.04.1",
        "6.14.0-37.37.1~24.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-buildinfo-6.17.0-38-generic",
            "binary_version": "6.17.0-38.38.1~24.04.1"
          },
          {
            "binary_name": "linux-headers-6.17.0-38-generic",
            "binary_version": "6.17.0-38.38.1~24.04.1"
          },
          {
            "binary_name": "linux-image-6.17.0-38-generic",
            "binary_version": "6.17.0-38.38.1~24.04.1"
          },
          {
            "binary_name": "linux-modules-6.17.0-38-generic",
            "binary_version": "6.17.0-38.38.1~24.04.1"
          },
          {
            "binary_name": "linux-riscv-6.17-headers-6.17.0-38",
            "binary_version": "6.17.0-38.38.1~24.04.1"
          },
          {
            "binary_name": "linux-riscv-6.17-tools-6.17.0-38",
            "binary_version": "6.17.0-38.38.1~24.04.1"
          },
          {
            "binary_name": "linux-tools-6.17.0-38-generic",
            "binary_version": "6.17.0-38.38.1~24.04.1"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:24.04:LTS",
        "name": "linux-riscv-6.17",
        "purl": "pkg:deb/ubuntu/linux-riscv-6.17@6.17.0-38.38.1~24.04.1?arch=source\u0026distro=noble"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "6.17.0-14.14.1~24.04.1",
        "6.17.0-19.19.1~24.04.1",
        "6.17.0-20.20.1~24.04.1",
        "6.17.0-22.22.1~24.04.1",
        "6.17.0-23.23.1~24.04.1",
        "6.17.0-29.29.1~24.04.1",
        "6.17.0-35.35.1~24.04.1",
        "6.17.0-38.38.1~24.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "linux-buildinfo-7.0.0-38-generic",
            "binary_version": "7.0.0-38.38.1~24.04.1"
          },
          {
            "binary_name": "linux-headers-7.0.0-38-generic",
            "binary_version": "7.0.0-38.38.1~24.04.1"
          },
          {
            "binary_name": "linux-image-7.0.0-38-generic",
            "binary_version": "7.0.0-38.38.1~24.04.1"
          },
          {
            "binary_name": "linux-modules-7.0.0-38-generic",
            "binary_version": "7.0.0-38.38.1~24.04.1"
          },
          {
            "binary_name": "linux-riscv-7.0-headers-7.0.0-38",
            "binary_version": "7.0.0-38.38.1~24.04.1"
          },
          {
            "binary_name": "linux-riscv-7.0-tools-7.0.0-38",
            "binary_version": "7.0.0-38.38.1~24.04.1"
          },
          {
            "binary_name": "linux-tools-7.0.0-38-generic",
            "binary_version": "7.0.0-38.38.1~24.04.1"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:24.04:LTS",
        "name": "linux-riscv-7.0",
        "purl": "pkg:deb/ubuntu/linux-riscv-7.0@7.0.0-38.38.1~24.04.1?arch=source\u0026distro=noble"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "7.0.0-38.38.1~24.04.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "7.0.0-27.27.1~24.04.2",
        "7.0.0-28.28.1~24.04.3",
        "7.0.0-30.30.1~24.04.1",
        "7.0.0-31.31.1~24.04.1",
        "7.0.0-34.34.1~24.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-buildinfo-6.8.0-1036-xilinx",
            "binary_version": "6.8.0-1036.37"
          },
          {
            "binary_name": "linux-headers-6.8.0-1036-xilinx",
            "binary_version": "6.8.0-1036.37"
          },
          {
            "binary_name": "linux-image-6.8.0-1036-xilinx",
            "binary_version": "6.8.0-1036.37"
          },
          {
            "binary_name": "linux-modules-6.8.0-1036-xilinx",
            "binary_version": "6.8.0-1036.37"
          },
          {
            "binary_name": "linux-tools-6.8.0-1036-xilinx",
            "binary_version": "6.8.0-1036.37"
          },
          {
            "binary_name": "linux-xilinx-headers-6.8.0-1036",
            "binary_version": "6.8.0-1036.37"
          },
          {
            "binary_name": "linux-xilinx-tools-6.8.0-1036",
            "binary_version": "6.8.0-1036.37"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:24.04:LTS",
        "name": "linux-xilinx",
        "purl": "pkg:deb/ubuntu/linux-xilinx@6.8.0-1036.37?arch=source\u0026distro=noble"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "6.8.0-1008.9",
        "6.8.0-1009.10",
        "6.8.0-1011.12",
        "6.8.0-1012.13",
        "6.8.0-1013.14",
        "6.8.0-1014.15",
        "6.8.0-1015.16",
        "6.8.0-1017.18",
        "6.8.0-1018.19",
        "6.8.0-1019.20",
        "6.8.0-1020.21",
        "6.8.0-1021.22",
        "6.8.0-1022.23",
        "6.8.0-1023.24",
        "6.8.0-1024.25",
        "6.8.0-1028.29",
        "6.8.0-1029.30",
        "6.8.0-1032.33",
        "6.8.0-1033.34",
        "6.8.0-1034.35",
        "6.8.0-1035.36",
        "6.8.0-1036.37"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "Available for NVIDIA BlueField platforms",
        "binaries": [
          {
            "binary_name": "linux-bluefield-headers-6.8.0-1033",
            "binary_version": "6.8.0-1033.38"
          },
          {
            "binary_name": "linux-bluefield-tools-6.8.0-1033",
            "binary_version": "6.8.0-1033.38"
          },
          {
            "binary_name": "linux-buildinfo-6.8.0-1033-bluefield",
            "binary_version": "6.8.0-1033.38"
          },
          {
            "binary_name": "linux-buildinfo-6.8.0-1033-bluefield-64k",
            "binary_version": "6.8.0-1033.38"
          },
          {
            "binary_name": "linux-headers-6.8.0-1033-bluefield",
            "binary_version": "6.8.0-1033.38"
          },
          {
            "binary_name": "linux-headers-6.8.0-1033-bluefield-64k",
            "binary_version": "6.8.0-1033.38"
          },
          {
            "binary_name": "linux-image-unsigned-6.8.0-1033-bluefield",
            "binary_version": "6.8.0-1033.38"
          },
          {
            "binary_name": "linux-image-unsigned-6.8.0-1033-bluefield-64k",
            "binary_version": "6.8.0-1033.38"
          },
          {
            "binary_name": "linux-modules-6.8.0-1033-bluefield",
            "binary_version": "6.8.0-1033.38"
          },
          {
            "binary_name": "linux-modules-6.8.0-1033-bluefield-64k",
            "binary_version": "6.8.0-1033.38"
          },
          {
            "binary_name": "linux-modules-extra-6.8.0-1033-bluefield",
            "binary_version": "6.8.0-1033.38"
          },
          {
            "binary_name": "linux-modules-extra-6.8.0-1033-bluefield-64k",
            "binary_version": "6.8.0-1033.38"
          },
          {
            "binary_name": "linux-tools-6.8.0-1033-bluefield",
            "binary_version": "6.8.0-1033.38"
          },
          {
            "binary_name": "linux-tools-6.8.0-1033-bluefield-64k",
            "binary_version": "6.8.0-1033.38"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:Nvidia-BlueField:24.04:LTS",
        "name": "linux-bluefield",
        "purl": "pkg:deb/ubuntu/linux-bluefield@6.8.0-1033.38?arch=source\u0026distro=bluefield/noble"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "6.8.0-1033.38"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "6.8.0-1011.15",
        "6.8.0-1012.16",
        "6.8.0-1013.17",
        "6.8.0-1014.18",
        "6.8.0-1016.20",
        "6.8.0-1017.21",
        "6.8.0-1022.26",
        "6.8.0-1023.27",
        "6.8.0-1026.30",
        "6.8.0-1028.33",
        "6.8.0-1029.34",
        "6.8.0-1030.35",
        "6.8.0-1031.36",
        "6.8.0-1032.37"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-buildinfo-6.8.0-2054-raspi-realtime",
            "binary_version": "6.8.0-2054.56"
          },
          {
            "binary_name": "linux-headers-6.8.0-2054-raspi-realtime",
            "binary_version": "6.8.0-2054.56"
          },
          {
            "binary_name": "linux-image-6.8.0-2054-raspi-realtime",
            "binary_version": "6.8.0-2054.56"
          },
          {
            "binary_name": "linux-modules-6.8.0-2054-raspi-realtime",
            "binary_version": "6.8.0-2054.56"
          },
          {
            "binary_name": "linux-raspi-realtime-headers-6.8.0-2054",
            "binary_version": "6.8.0-2054.56"
          },
          {
            "binary_name": "linux-raspi-realtime-tools-6.8.0-2054",
            "binary_version": "6.8.0-2054.56"
          },
          {
            "binary_name": "linux-tools-6.8.0-2054-raspi-realtime",
            "binary_version": "6.8.0-2054.56"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:Realtime:24.04:LTS",
        "name": "linux-raspi-realtime",
        "purl": "pkg:deb/ubuntu/linux-raspi-realtime@6.8.0-2054.56?arch=source\u0026distro=realtime/noble"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "6.7.0-2001.1",
        "6.8.0-2001.1",
        "6.8.0-2002.2",
        "6.8.0-2004.4",
        "6.8.0-2005.5",
        "6.8.0-2006.6",
        "6.8.0-2007.7",
        "6.8.0-2008.8",
        "6.8.0-2009.9",
        "6.8.0-2010.10",
        "6.8.0-2011.11",
        "6.8.0-2012.12",
        "6.8.0-2013.14",
        "6.8.0-2014.15",
        "6.8.0-2015.16",
        "6.8.0-2016.17",
        "6.8.0-2017.18",
        "6.8.0-2018.19",
        "6.8.0-2019.20",
        "6.8.0-2022.23",
        "6.8.0-2023.24",
        "6.8.0-2024.25",
        "6.8.0-2025.26",
        "6.8.0-2026.27",
        "6.8.0-2028.29",
        "6.8.0-2029.30",
        "6.8.0-2030.31",
        "6.8.0-2031.32",
        "6.8.0-2032.33",
        "6.8.0-2033.34",
        "6.8.0-2034.35",
        "6.8.0-2035.36",
        "6.8.0-2036.37",
        "6.8.0-2037.38",
        "6.8.0-2038.39",
        "6.8.0-2040.41",
        "6.8.0-2041.42",
        "6.8.0-2042.43",
        "6.8.0-2043.44",
        "6.8.0-2045.46",
        "6.8.0-2046.47",
        "6.8.0-2049.50",
        "6.8.0-2050.52",
        "6.8.0-2051.53",
        "6.8.0-2052.54",
        "6.8.0-2053.55",
        "6.8.0-2054.56"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro",
        "binaries": [
          {
            "binary_name": "linux-buildinfo-6.8.1-1062-realtime",
            "binary_version": "6.8.1-1062.63"
          },
          {
            "binary_name": "linux-cloud-tools-6.8.1-1062-realtime",
            "binary_version": "6.8.1-1062.63"
          },
          {
            "binary_name": "linux-headers-6.8.1-1062-realtime",
            "binary_version": "6.8.1-1062.63"
          },
          {
            "binary_name": "linux-image-unsigned-6.8.1-1062-realtime",
            "binary_version": "6.8.1-1062.63"
          },
          {
            "binary_name": "linux-modules-6.8.1-1062-realtime",
            "binary_version": "6.8.1-1062.63"
          },
          {
            "binary_name": "linux-modules-extra-6.8.1-1062-realtime",
            "binary_version": "6.8.1-1062.63"
          },
          {
            "binary_name": "linux-modules-iwlwifi-6.8.1-1062-realtime",
            "binary_version": "6.8.1-1062.63"
          },
          {
            "binary_name": "linux-realtime-cloud-tools-6.8.1-1062",
            "binary_version": "6.8.1-1062.63"
          },
          {
            "binary_name": "linux-realtime-headers-6.8.1-1062",
            "binary_version": "6.8.1-1062.63"
          },
          {
            "binary_name": "linux-realtime-tools-6.8.1-1062",
            "binary_version": "6.8.1-1062.63"
          },
          {
            "binary_name": "linux-tools-6.8.1-1062-realtime",
            "binary_version": "6.8.1-1062.63"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:Realtime:24.04:LTS",
        "name": "linux-realtime",
        "purl": "pkg:deb/ubuntu/linux-realtime@6.8.1-1062.63?arch=source\u0026distro=realtime/noble"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "6.8.1-1062.63"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "6.8.0-1008.19",
        "6.8.1-1001.1",
        "6.8.1-1002.2",
        "6.8.1-1003.3",
        "6.8.1-1004.4",
        "6.8.1-1005.5",
        "6.8.1-1006.6",
        "6.8.1-1007.7",
        "6.8.1-1008.8",
        "6.8.1-1009.9",
        "6.8.1-1010.10",
        "6.8.1-1011.11",
        "6.8.1-1012.12",
        "6.8.1-1013.14",
        "6.8.1-1014.15",
        "6.8.1-1015.16",
        "6.8.1-1016.17",
        "6.8.1-1017.18",
        "6.8.1-1018.19",
        "6.8.1-1019.20",
        "6.8.1-1020.21",
        "6.8.1-1021.22",
        "6.8.1-1022.23",
        "6.8.1-1023.24",
        "6.8.1-1024.25",
        "6.8.1-1025.26",
        "6.8.1-1026.27",
        "6.8.1-1030.31",
        "6.8.1-1031.32",
        "6.8.1-1033.34",
        "6.8.1-1034.35",
        "6.8.1-1035.36",
        "6.8.1-1036.37",
        "6.8.1-1037.38",
        "6.8.1-1038.39",
        "6.8.1-1039.40",
        "6.8.1-1040.41",
        "6.8.1-1041.42",
        "6.8.1-1042.43",
        "6.8.1-1045.46",
        "6.8.1-1046.47",
        "6.8.1-1047.48",
        "6.8.1-1048.49",
        "6.8.1-1051.52",
        "6.8.1-1052.53",
        "6.8.1-1055.56",
        "6.8.1-1056.57",
        "6.8.1-1057.58",
        "6.8.1-1058.59",
        "6.8.1-1059.60",
        "6.8.1-1060.61",
        "6.8.1-1061.62"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-buildinfo-6.14.0-1017-realtime",
            "binary_version": "6.14.0-1017.17~24.04.1"
          },
          {
            "binary_name": "linux-cloud-tools-6.14.0-1017-realtime",
            "binary_version": "6.14.0-1017.17~24.04.1"
          },
          {
            "binary_name": "linux-headers-6.14.0-1017-realtime",
            "binary_version": "6.14.0-1017.17~24.04.1"
          },
          {
            "binary_name": "linux-image-unsigned-6.14.0-1017-realtime",
            "binary_version": "6.14.0-1017.17~24.04.1"
          },
          {
            "binary_name": "linux-modules-6.14.0-1017-realtime",
            "binary_version": "6.14.0-1017.17~24.04.1"
          },
          {
            "binary_name": "linux-modules-extra-6.14.0-1017-realtime",
            "binary_version": "6.14.0-1017.17~24.04.1"
          },
          {
            "binary_name": "linux-modules-iwlwifi-6.14.0-1017-realtime",
            "binary_version": "6.14.0-1017.17~24.04.1"
          },
          {
            "binary_name": "linux-realtime-6.14-cloud-tools-6.14.0-1017",
            "binary_version": "6.14.0-1017.17~24.04.1"
          },
          {
            "binary_name": "linux-realtime-6.14-headers-6.14.0-1017",
            "binary_version": "6.14.0-1017.17~24.04.1"
          },
          {
            "binary_name": "linux-realtime-6.14-tools-6.14.0-1017",
            "binary_version": "6.14.0-1017.17~24.04.1"
          },
          {
            "binary_name": "linux-tools-6.14.0-1017-realtime",
            "binary_version": "6.14.0-1017.17~24.04.1"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:Realtime:24.04:LTS",
        "name": "linux-realtime-6.14",
        "purl": "pkg:deb/ubuntu/linux-realtime-6.14@6.14.0-1017.17~24.04.1?arch=source\u0026distro=realtime/noble"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "6.14.0-1003.3~24.04.3",
        "6.14.0-1010.10~24.04.1",
        "6.14.0-1011.11~24.04.1",
        "6.14.0-1012.12~24.04.1",
        "6.14.0-1013.13~24.04.1",
        "6.14.0-1014.14~24.04.1",
        "6.14.0-1015.15~24.04.1",
        "6.14.0-1016.16~24.04.1",
        "6.14.0-1017.17~24.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-buildinfo-6.17.0-1019-realtime",
            "binary_version": "6.17.0-1019.22"
          },
          {
            "binary_name": "linux-cloud-tools-6.17.0-1019-realtime",
            "binary_version": "6.17.0-1019.22"
          },
          {
            "binary_name": "linux-headers-6.17.0-1019-realtime",
            "binary_version": "6.17.0-1019.22"
          },
          {
            "binary_name": "linux-image-unsigned-6.17.0-1019-realtime",
            "binary_version": "6.17.0-1019.22"
          },
          {
            "binary_name": "linux-modules-6.17.0-1019-realtime",
            "binary_version": "6.17.0-1019.22"
          },
          {
            "binary_name": "linux-modules-extra-6.17.0-1019-realtime",
            "binary_version": "6.17.0-1019.22"
          },
          {
            "binary_name": "linux-modules-iwlwifi-6.17.0-1019-realtime",
            "binary_version": "6.17.0-1019.22"
          },
          {
            "binary_name": "linux-realtime-6.17-cloud-tools-6.17.0-1019",
            "binary_version": "6.17.0-1019.22"
          },
          {
            "binary_name": "linux-realtime-6.17-headers-6.17.0-1019",
            "binary_version": "6.17.0-1019.22"
          },
          {
            "binary_name": "linux-realtime-6.17-tools-6.17.0-1019",
            "binary_version": "6.17.0-1019.22"
          },
          {
            "binary_name": "linux-tools-6.17.0-1019-realtime",
            "binary_version": "6.17.0-1019.22"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:Realtime:24.04:LTS",
        "name": "linux-realtime-6.17",
        "purl": "pkg:deb/ubuntu/linux-realtime-6.17@6.17.0-1019.22?arch=source\u0026distro=realtime/noble"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "6.17.0-1004.5~24.04.2",
        "6.17.0-1006.7~24.04.1",
        "6.17.0-1008.9~24.04.1",
        "6.17.0-1009.10~24.04.1",
        "6.17.0-1010.11~24.04.1",
        "6.17.0-1011.12~24.04.1",
        "6.17.0-1013.15~24.04.1",
        "6.17.0-1014.16~24.04.1",
        "6.17.0-1017.19~24.04.1",
        "6.17.0-1018.20~24.04.1",
        "6.17.0-1019.22"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro",
        "binaries": [
          {
            "binary_name": "linux-aws-fips-cloud-tools-6.8.0-1067",
            "binary_version": "6.8.0-1067.70+fips1"
          },
          {
            "binary_name": "linux-aws-fips-headers-6.8.0-1067",
            "binary_version": "6.8.0-1067.70+fips1"
          },
          {
            "binary_name": "linux-aws-fips-tools-6.8.0-1067",
            "binary_version": "6.8.0-1067.70+fips1"
          },
          {
            "binary_name": "linux-buildinfo-6.8.0-1067-aws-fips",
            "binary_version": "6.8.0-1067.70+fips1"
          },
          {
            "binary_name": "linux-cloud-tools-6.8.0-1067-aws-fips",
            "binary_version": "6.8.0-1067.70+fips1"
          },
          {
            "binary_name": "linux-headers-6.8.0-1067-aws-fips",
            "binary_version": "6.8.0-1067.70+fips1"
          },
          {
            "binary_name": "linux-image-unsigned-6.8.0-1067-aws-fips",
            "binary_version": "6.8.0-1067.70+fips1"
          },
          {
            "binary_name": "linux-image-unsigned-hmac-6.8.0-1067-aws-fips",
            "binary_version": "6.8.0-1067.70+fips1"
          },
          {
            "binary_name": "linux-modules-6.8.0-1067-aws-fips",
            "binary_version": "6.8.0-1067.70+fips1"
          },
          {
            "binary_name": "linux-modules-extra-6.8.0-1067-aws-fips",
            "binary_version": "6.8.0-1067.70+fips1"
          },
          {
            "binary_name": "linux-tools-6.8.0-1067-aws-fips",
            "binary_version": "6.8.0-1067.70+fips1"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:FIPS-updates:24.04:LTS",
        "name": "linux-aws-fips",
        "purl": "pkg:deb/ubuntu/linux-aws-fips@6.8.0-1067.70+fips1?arch=source\u0026distro=fips-updates/noble"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "6.8.0-1067.70+fips1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "6.8.0-1035.37+fips1",
        "6.8.0-1036.38+fips1",
        "6.8.0-1038.40+fips1",
        "6.8.0-1039.41+fips1",
        "6.8.0-1040.42+fips1",
        "6.8.0-1041.43+fips1",
        "6.8.0-1042.44+fips1",
        "6.8.0-1043.45+fips1",
        "6.8.0-1044.46+fips1",
        "6.8.0-1045.47+fips1",
        "6.8.0-1046.49+fips1",
        "6.8.0-1047.50+fips1",
        "6.8.0-1050.53+fips1",
        "6.8.0-1051.54+fips1",
        "6.8.0-1052.55+fips1",
        "6.8.0-1053.56+fips1",
        "6.8.0-1055.58+fips1",
        "6.8.0-1057.60+fips1",
        "6.8.0-1060.63+fips1",
        "6.8.0-1061.64+fips1",
        "6.8.0-1062.65+fips1",
        "6.8.0-1063.66+fips1",
        "6.8.0-1064.67+fips1",
        "6.8.0-1065.68+fips1",
        "6.8.0-1066.69+fips1"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro",
        "binaries": [
          {
            "binary_name": "linux-azure-fips-cloud-tools-6.8.0-1071",
            "binary_version": "6.8.0-1071.79+fips1"
          },
          {
            "binary_name": "linux-azure-fips-headers-6.8.0-1071",
            "binary_version": "6.8.0-1071.79+fips1"
          },
          {
            "binary_name": "linux-azure-fips-tools-6.8.0-1071",
            "binary_version": "6.8.0-1071.79+fips1"
          },
          {
            "binary_name": "linux-buildinfo-6.8.0-1071-azure-fips",
            "binary_version": "6.8.0-1071.79+fips1"
          },
          {
            "binary_name": "linux-cloud-tools-6.8.0-1071-azure-fips",
            "binary_version": "6.8.0-1071.79+fips1"
          },
          {
            "binary_name": "linux-headers-6.8.0-1071-azure-fips",
            "binary_version": "6.8.0-1071.79+fips1"
          },
          {
            "binary_name": "linux-image-unsigned-6.8.0-1071-azure-fips",
            "binary_version": "6.8.0-1071.79+fips1"
          },
          {
            "binary_name": "linux-image-unsigned-hmac-6.8.0-1071-azure-fips",
            "binary_version": "6.8.0-1071.79+fips1"
          },
          {
            "binary_name": "linux-modules-6.8.0-1071-azure-fips",
            "binary_version": "6.8.0-1071.79+fips1"
          },
          {
            "binary_name": "linux-modules-extra-6.8.0-1071-azure-fips",
            "binary_version": "6.8.0-1071.79+fips1"
          },
          {
            "binary_name": "linux-modules-involflt-6.8.0-1071-azure-fips",
            "binary_version": "6.8.0-1071.79+fips1"
          },
          {
            "binary_name": "linux-tools-6.8.0-1071-azure-fips",
            "binary_version": "6.8.0-1071.79+fips1"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:FIPS-updates:24.04:LTS",
        "name": "linux-azure-fips",
        "purl": "pkg:deb/ubuntu/linux-azure-fips@6.8.0-1071.79+fips1?arch=source\u0026distro=fips-updates/noble"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "6.8.0-1071.79+fips1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "6.8.0-1034.39+fips1",
        "6.8.0-1040.46+fips1",
        "6.8.0-1044.50+fips1",
        "6.8.0-1046.52+fips1",
        "6.8.0-1047.53+fips1",
        "6.8.0-1052.58+fips1",
        "6.8.0-1053.59+fips1",
        "6.8.0-1054.60+fips1",
        "6.8.0-1059.65+fips1",
        "6.8.0-1062.69+fips1",
        "6.8.0-1063.71+fips2",
        "6.8.0-1064.72+fips1",
        "6.8.0-1065.73+fips1",
        "6.8.0-1067.75+fips1",
        "6.8.0-1068.76+fips1",
        "6.8.0-1069.77+fips1"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro",
        "binaries": [
          {
            "binary_name": "linux-buildinfo-6.8.0-147-fips",
            "binary_version": "6.8.0-147.147+fips1"
          },
          {
            "binary_name": "linux-cloud-tools-6.8.0-147-fips",
            "binary_version": "6.8.0-147.147+fips1"
          },
          {
            "binary_name": "linux-fips-cloud-tools-6.8.0-147",
            "binary_version": "6.8.0-147.147+fips1"
          },
          {
            "binary_name": "linux-fips-headers-6.8.0-147",
            "binary_version": "6.8.0-147.147+fips1"
          },
          {
            "binary_name": "linux-fips-lib-rust-6.8.0-147-fips",
            "binary_version": "6.8.0-147.147+fips1"
          },
          {
            "binary_name": "linux-fips-tools-6.8.0-147",
            "binary_version": "6.8.0-147.147+fips1"
          },
          {
            "binary_name": "linux-headers-6.8.0-147-fips",
            "binary_version": "6.8.0-147.147+fips1"
          },
          {
            "binary_name": "linux-image-6.8.0-147-fips",
            "binary_version": "6.8.0-147.147+fips1"
          },
          {
            "binary_name": "linux-image-hmac-6.8.0-147-fips",
            "binary_version": "6.8.0-147.147+fips1"
          },
          {
            "binary_name": "linux-image-unsigned-6.8.0-147-fips",
            "binary_version": "6.8.0-147.147+fips1"
          },
          {
            "binary_name": "linux-image-unsigned-hmac-6.8.0-147-fips",
            "binary_version": "6.8.0-147.147+fips1"
          },
          {
            "binary_name": "linux-modules-6.8.0-147-fips",
            "binary_version": "6.8.0-147.147+fips1"
          },
          {
            "binary_name": "linux-modules-extra-6.8.0-147-fips",
            "binary_version": "6.8.0-147.147+fips1"
          },
          {
            "binary_name": "linux-modules-ipu6-6.8.0-147-fips",
            "binary_version": "6.8.0-147.147+fips1"
          },
          {
            "binary_name": "linux-modules-iwlwifi-6.8.0-147-fips",
            "binary_version": "6.8.0-147.147+fips1"
          },
          {
            "binary_name": "linux-modules-usbio-6.8.0-147-fips",
            "binary_version": "6.8.0-147.147+fips1"
          },
          {
            "binary_name": "linux-tools-6.8.0-147-fips",
            "binary_version": "6.8.0-147.147+fips1"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:FIPS-updates:24.04:LTS",
        "name": "linux-fips",
        "purl": "pkg:deb/ubuntu/linux-fips@6.8.0-147.147+fips1?arch=source\u0026distro=fips-updates/noble"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "6.8.0-147.147+fips1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "6.8.0-38.38+fips4",
        "6.8.0-78.78+fips1",
        "6.8.0-79.79+fips1",
        "6.8.0-83.83+fips1",
        "6.8.0-84.84+fips1",
        "6.8.0-85.85+fips1",
        "6.8.0-86.87+fips1",
        "6.8.0-87.88+fips1",
        "6.8.0-88.89+fips1",
        "6.8.0-90.91+fips1",
        "6.8.0-94.96+fips1",
        "6.8.0-100.100+fips1",
        "6.8.0-101.101+fips1",
        "6.8.0-106.106+fips1",
        "6.8.0-107.107+fips1",
        "6.8.0-110.110+fips2",
        "6.8.0-111.111+fips1",
        "6.8.0-116.116+fips1",
        "6.8.0-124.124+fips1",
        "6.8.0-134.134+fips1",
        "6.8.0-136.136+fips2",
        "6.8.0-137.137+fips1",
        "6.8.0-138.138+fips1",
        "6.8.0-139.139+fips1",
        "6.8.0-142.142+fips1",
        "6.8.0-146.146+fips1"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro",
        "binaries": [
          {
            "binary_name": "linux-buildinfo-6.8.0-1071-gcp-fips",
            "binary_version": "6.8.0-1071.79+fips1"
          },
          {
            "binary_name": "linux-gcp-fips-headers-6.8.0-1071",
            "binary_version": "6.8.0-1071.79+fips1"
          },
          {
            "binary_name": "linux-gcp-fips-tools-6.8.0-1071",
            "binary_version": "6.8.0-1071.79+fips1"
          },
          {
            "binary_name": "linux-headers-6.8.0-1071-gcp-fips",
            "binary_version": "6.8.0-1071.79+fips1"
          },
          {
            "binary_name": "linux-image-unsigned-6.8.0-1071-gcp-fips",
            "binary_version": "6.8.0-1071.79+fips1"
          },
          {
            "binary_name": "linux-image-unsigned-hmac-6.8.0-1071-gcp-fips",
            "binary_version": "6.8.0-1071.79+fips1"
          },
          {
            "binary_name": "linux-modules-6.8.0-1071-gcp-fips",
            "binary_version": "6.8.0-1071.79+fips1"
          },
          {
            "binary_name": "linux-modules-extra-6.8.0-1071-gcp-fips",
            "binary_version": "6.8.0-1071.79+fips1"
          },
          {
            "binary_name": "linux-tools-6.8.0-1071-gcp-fips",
            "binary_version": "6.8.0-1071.79+fips1"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:FIPS-updates:24.04:LTS",
        "name": "linux-gcp-fips",
        "purl": "pkg:deb/ubuntu/linux-gcp-fips@6.8.0-1071.79+fips1?arch=source\u0026distro=fips-updates/noble"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "6.8.0-1071.79+fips1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "6.8.0-1036.38+fips1",
        "6.8.0-1037.39+fips1",
        "6.8.0-1039.41+fips1",
        "6.8.0-1040.42+fips1",
        "6.8.0-1041.43+fips1",
        "6.8.0-1042.45+fips1",
        "6.8.0-1043.46+fips1",
        "6.8.0-1044.47+fips1",
        "6.8.0-1045.48+fips1",
        "6.8.0-1046.49+fips1",
        "6.8.0-1047.50+fips1",
        "6.8.0-1048.51+fips1",
        "6.8.0-1052.55+fips1",
        "6.8.0-1053.56+fips1",
        "6.8.0-1054.57+fips1",
        "6.8.0-1055.58+fips1",
        "6.8.0-1058.61+fips1",
        "6.8.0-1060.63+fips1",
        "6.8.0-1063.69+fips1",
        "6.8.0-1064.72+fips1",
        "6.8.0-1065.73+fips1",
        "6.8.0-1066.74+fips1",
        "6.8.0-1067.75+fips1",
        "6.8.0-1068.76+fips1",
        "6.8.0-1070.78+fips1"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "bpftool",
            "binary_version": "7.7.0+7.0.0-38.38"
          },
          {
            "binary_name": "linux-buildinfo-7.0.0-38-generic",
            "binary_version": "7.0.0-38.38"
          },
          {
            "binary_name": "linux-buildinfo-7.0.0-38-generic-64k",
            "binary_version": "7.0.0-38.38"
          },
          {
            "binary_name": "linux-cloud-tools-7.0.0-38",
            "binary_version": "7.0.0-38.38"
          },
          {
            "binary_name": "linux-cloud-tools-7.0.0-38-generic",
            "binary_version": "7.0.0-38.38"
          },
          {
            "binary_name": "linux-cloud-tools-common",
            "binary_version": "7.0.0-38.38"
          },
          {
            "binary_name": "linux-headers-7.0.0-38",
            "binary_version": "7.0.0-38.38"
          },
          {
            "binary_name": "linux-headers-7.0.0-38-generic",
            "binary_version": "7.0.0-38.38"
          },
          {
            "binary_name": "linux-headers-7.0.0-38-generic-64k",
            "binary_version": "7.0.0-38.38"
          },
          {
            "binary_name": "linux-image-7.0.0-38-generic",
            "binary_version": "7.0.0-38.38"
          },
          {
            "binary_name": "linux-image-unsigned-7.0.0-38-generic",
            "binary_version": "7.0.0-38.38"
          },
          {
            "binary_name": "linux-image-unsigned-7.0.0-38-generic-64k",
            "binary_version": "7.0.0-38.38"
          },
          {
            "binary_name": "linux-lib-rust-7.0.0-38-generic",
            "binary_version": "7.0.0-38.38"
          },
          {
            "binary_name": "linux-modules-7.0.0-38-generic",
            "binary_version": "7.0.0-38.38"
          },
          {
            "binary_name": "linux-modules-7.0.0-38-generic-64k",
            "binary_version": "7.0.0-38.38"
          },
          {
            "binary_name": "linux-perf",
            "binary_version": "7.0.0-38.38"
          },
          {
            "binary_name": "linux-source-7.0.0",
            "binary_version": "7.0.0-38.38"
          },
          {
            "binary_name": "linux-tools-7.0.0-38",
            "binary_version": "7.0.0-38.38"
          },
          {
            "binary_name": "linux-tools-7.0.0-38-generic",
            "binary_version": "7.0.0-38.38"
          },
          {
            "binary_name": "linux-tools-7.0.0-38-generic-64k",
            "binary_version": "7.0.0-38.38"
          },
          {
            "binary_name": "linux-tools-common",
            "binary_version": "7.0.0-38.38"
          },
          {
            "binary_name": "linux-tools-host",
            "binary_version": "7.0.0-38.38"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:26.04:LTS",
        "name": "linux",
        "purl": "pkg:deb/ubuntu/linux@7.0.0-38.38?arch=source\u0026distro=resolute"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "7.0.0-38.38"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "6.17.0-5.5",
        "6.17.0-6.6",
        "6.17.0-8.8",
        "6.18.0-8.8",
        "6.18.0-9.9",
        "6.19.0-3.3",
        "6.19.0-5.5",
        "6.19.0-6.6",
        "6.19.0-9.9",
        "7.0.0-7.7",
        "7.0.0-10.10",
        "7.0.0-12.12",
        "7.0.0-13.13",
        "7.0.0-14.14",
        "7.0.0-15.15",
        "7.0.0-22.22",
        "7.0.0-27.27",
        "7.0.0-28.28",
        "7.0.0-29.29",
        "7.0.0-30.30",
        "7.0.0-31.31",
        "7.0.0-34.34"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "linux-aws-cloud-tools-7.0.0-1014",
            "binary_version": "7.0.0-1014.14"
          },
          {
            "binary_name": "linux-aws-headers-7.0.0-1014",
            "binary_version": "7.0.0-1014.14"
          },
          {
            "binary_name": "linux-aws-tools-7.0.0-1014",
            "binary_version": "7.0.0-1014.14"
          },
          {
            "binary_name": "linux-buildinfo-7.0.0-1014-aws",
            "binary_version": "7.0.0-1014.14"
          },
          {
            "binary_name": "linux-buildinfo-7.0.0-1014-aws-64k",
            "binary_version": "7.0.0-1014.14"
          },
          {
            "binary_name": "linux-cloud-tools-7.0.0-1014-aws",
            "binary_version": "7.0.0-1014.14"
          },
          {
            "binary_name": "linux-cloud-tools-7.0.0-1014-aws-64k",
            "binary_version": "7.0.0-1014.14"
          },
          {
            "binary_name": "linux-headers-7.0.0-1014-aws",
            "binary_version": "7.0.0-1014.14"
          },
          {
            "binary_name": "linux-headers-7.0.0-1014-aws-64k",
            "binary_version": "7.0.0-1014.14"
          },
          {
            "binary_name": "linux-image-unsigned-7.0.0-1014-aws",
            "binary_version": "7.0.0-1014.14"
          },
          {
            "binary_name": "linux-image-unsigned-7.0.0-1014-aws-64k",
            "binary_version": "7.0.0-1014.14"
          },
          {
            "binary_name": "linux-modules-7.0.0-1014-aws",
            "binary_version": "7.0.0-1014.14"
          },
          {
            "binary_name": "linux-modules-7.0.0-1014-aws-64k",
            "binary_version": "7.0.0-1014.14"
          },
          {
            "binary_name": "linux-tools-7.0.0-1014-aws",
            "binary_version": "7.0.0-1014.14"
          },
          {
            "binary_name": "linux-tools-7.0.0-1014-aws-64k",
            "binary_version": "7.0.0-1014.14"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:26.04:LTS",
        "name": "linux-aws",
        "purl": "pkg:deb/ubuntu/linux-aws@7.0.0-1014.14?arch=source\u0026distro=resolute"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "7.0.0-1014.14"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "6.17.0-1002.2",
        "6.17.0-1003.3",
        "6.19.0-1002.2",
        "6.19.0-1003.3",
        "7.0.0-1001.1",
        "7.0.0-1003.3",
        "7.0.0-1004.4",
        "7.0.0-1006.6",
        "7.0.0-1008.8",
        "7.0.0-1009.9",
        "7.0.0-1010.10",
        "7.0.0-1011.11",
        "7.0.0-1012.12",
        "7.0.0-1013.13"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "linux-azure-cloud-tools-7.0.0-1017",
            "binary_version": "7.0.0-1017.17"
          },
          {
            "binary_name": "linux-azure-headers-7.0.0-1017",
            "binary_version": "7.0.0-1017.17"
          },
          {
            "binary_name": "linux-azure-tools-7.0.0-1017",
            "binary_version": "7.0.0-1017.17"
          },
          {
            "binary_name": "linux-buildinfo-7.0.0-1017-azure",
            "binary_version": "7.0.0-1017.17"
          },
          {
            "binary_name": "linux-cloud-tools-7.0.0-1017-azure",
            "binary_version": "7.0.0-1017.17"
          },
          {
            "binary_name": "linux-headers-7.0.0-1017-azure",
            "binary_version": "7.0.0-1017.17"
          },
          {
            "binary_name": "linux-image-unsigned-7.0.0-1017-azure",
            "binary_version": "7.0.0-1017.17"
          },
          {
            "binary_name": "linux-modules-7.0.0-1017-azure",
            "binary_version": "7.0.0-1017.17"
          },
          {
            "binary_name": "linux-tools-7.0.0-1017-azure",
            "binary_version": "7.0.0-1017.17"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:26.04:LTS",
        "name": "linux-azure",
        "purl": "pkg:deb/ubuntu/linux-azure@7.0.0-1017.17?arch=source\u0026distro=resolute"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "7.0.0-1017.17"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "6.17.0-1003.3",
        "6.17.0-1004.4",
        "6.19.0-1001.1",
        "6.19.0-1002.2",
        "7.0.0-1001.1",
        "7.0.0-1002.2",
        "7.0.0-1003.3",
        "7.0.0-1004.4",
        "7.0.0-1007.7",
        "7.0.0-1009.9",
        "7.0.0-1010.10",
        "7.0.0-1011.11",
        "7.0.0-1012.12",
        "7.0.0-1014.14"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "linux-azure-fde-cloud-tools-7.0.0-1016",
            "binary_version": "7.0.0-1016.16"
          },
          {
            "binary_name": "linux-azure-fde-headers-7.0.0-1016",
            "binary_version": "7.0.0-1016.16"
          },
          {
            "binary_name": "linux-azure-fde-tools-7.0.0-1016",
            "binary_version": "7.0.0-1016.16"
          },
          {
            "binary_name": "linux-buildinfo-7.0.0-1016-azure-fde",
            "binary_version": "7.0.0-1016.16"
          },
          {
            "binary_name": "linux-cloud-tools-7.0.0-1016-azure-fde",
            "binary_version": "7.0.0-1016.16"
          },
          {
            "binary_name": "linux-headers-7.0.0-1016-azure-fde",
            "binary_version": "7.0.0-1016.16"
          },
          {
            "binary_name": "linux-image-unsigned-7.0.0-1016-azure-fde",
            "binary_version": "7.0.0-1016.16"
          },
          {
            "binary_name": "linux-modules-7.0.0-1016-azure-fde",
            "binary_version": "7.0.0-1016.16"
          },
          {
            "binary_name": "linux-tools-7.0.0-1016-azure-fde",
            "binary_version": "7.0.0-1016.16"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:26.04:LTS",
        "name": "linux-azure-fde",
        "purl": "pkg:deb/ubuntu/linux-azure-fde@7.0.0-1016.16?arch=source\u0026distro=resolute"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "7.0.0-1016.16"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "7.0.0-1003.3",
        "7.0.0-1004.4",
        "7.0.0-1006.6",
        "7.0.0-1008.8",
        "7.0.0-1009.9",
        "7.0.0-1010.10",
        "7.0.0-1011.11",
        "7.0.0-1013.13"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "linux-buildinfo-7.0.0-1014-gcp",
            "binary_version": "7.0.0-1014.14"
          },
          {
            "binary_name": "linux-buildinfo-7.0.0-1014-gcp-64k",
            "binary_version": "7.0.0-1014.14"
          },
          {
            "binary_name": "linux-gcp-headers-7.0.0-1014",
            "binary_version": "7.0.0-1014.14"
          },
          {
            "binary_name": "linux-gcp-tools-7.0.0-1014",
            "binary_version": "7.0.0-1014.14"
          },
          {
            "binary_name": "linux-headers-7.0.0-1014-gcp",
            "binary_version": "7.0.0-1014.14"
          },
          {
            "binary_name": "linux-headers-7.0.0-1014-gcp-64k",
            "binary_version": "7.0.0-1014.14"
          },
          {
            "binary_name": "linux-image-unsigned-7.0.0-1014-gcp",
            "binary_version": "7.0.0-1014.14"
          },
          {
            "binary_name": "linux-image-unsigned-7.0.0-1014-gcp-64k",
            "binary_version": "7.0.0-1014.14"
          },
          {
            "binary_name": "linux-modules-7.0.0-1014-gcp",
            "binary_version": "7.0.0-1014.14"
          },
          {
            "binary_name": "linux-modules-7.0.0-1014-gcp-64k",
            "binary_version": "7.0.0-1014.14"
          },
          {
            "binary_name": "linux-tools-7.0.0-1014-gcp",
            "binary_version": "7.0.0-1014.14"
          },
          {
            "binary_name": "linux-tools-7.0.0-1014-gcp-64k",
            "binary_version": "7.0.0-1014.14"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:26.04:LTS",
        "name": "linux-gcp",
        "purl": "pkg:deb/ubuntu/linux-gcp@7.0.0-1014.14?arch=source\u0026distro=resolute"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "7.0.0-1014.14"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "6.17.0-1002.2",
        "6.17.0-1003.3",
        "6.19.0-1001.1",
        "7.0.0-1001.1",
        "7.0.0-1002.2",
        "7.0.0-1003.3",
        "7.0.0-1005.5",
        "7.0.0-1007.7",
        "7.0.0-1008.8",
        "7.0.0-1010.10",
        "7.0.0-1011.11",
        "7.0.0-1013.13"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "linux-buildinfo-7.0.0-1008-gke",
            "binary_version": "7.0.0-1008.9"
          },
          {
            "binary_name": "linux-buildinfo-7.0.0-1008-gke-64k",
            "binary_version": "7.0.0-1008.9"
          },
          {
            "binary_name": "linux-gke-headers-7.0.0-1008",
            "binary_version": "7.0.0-1008.9"
          },
          {
            "binary_name": "linux-gke-tools-7.0.0-1008",
            "binary_version": "7.0.0-1008.9"
          },
          {
            "binary_name": "linux-headers-7.0.0-1008-gke",
            "binary_version": "7.0.0-1008.9"
          },
          {
            "binary_name": "linux-headers-7.0.0-1008-gke-64k",
            "binary_version": "7.0.0-1008.9"
          },
          {
            "binary_name": "linux-image-unsigned-7.0.0-1008-gke",
            "binary_version": "7.0.0-1008.9"
          },
          {
            "binary_name": "linux-image-unsigned-7.0.0-1008-gke-64k",
            "binary_version": "7.0.0-1008.9"
          },
          {
            "binary_name": "linux-modules-7.0.0-1008-gke",
            "binary_version": "7.0.0-1008.9"
          },
          {
            "binary_name": "linux-modules-7.0.0-1008-gke-64k",
            "binary_version": "7.0.0-1008.9"
          },
          {
            "binary_name": "linux-tools-7.0.0-1008-gke",
            "binary_version": "7.0.0-1008.9"
          },
          {
            "binary_name": "linux-tools-7.0.0-1008-gke-64k",
            "binary_version": "7.0.0-1008.9"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:26.04:LTS",
        "name": "linux-gke",
        "purl": "pkg:deb/ubuntu/linux-gke@7.0.0-1008.9?arch=source\u0026distro=resolute"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "7.0.0-1008.9"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "7.0.0-1002.3",
        "7.0.0-1003.4",
        "7.0.0-1005.6",
        "7.0.0-1006.7",
        "7.0.0-1007.8"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "linux-buildinfo-7.0.0-1015-ibm",
            "binary_version": "7.0.0-1015.15"
          },
          {
            "binary_name": "linux-headers-7.0.0-1015-ibm",
            "binary_version": "7.0.0-1015.15"
          },
          {
            "binary_name": "linux-ibm-headers-7.0.0-1015",
            "binary_version": "7.0.0-1015.15"
          },
          {
            "binary_name": "linux-ibm-tools-7.0.0-1015",
            "binary_version": "7.0.0-1015.15"
          },
          {
            "binary_name": "linux-image-unsigned-7.0.0-1015-ibm",
            "binary_version": "7.0.0-1015.15"
          },
          {
            "binary_name": "linux-modules-7.0.0-1015-ibm",
            "binary_version": "7.0.0-1015.15"
          },
          {
            "binary_name": "linux-tools-7.0.0-1015-ibm",
            "binary_version": "7.0.0-1015.15"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:26.04:LTS",
        "name": "linux-ibm",
        "purl": "pkg:deb/ubuntu/linux-ibm@7.0.0-1015.15?arch=source\u0026distro=resolute"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "7.0.0-1015.15"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "6.19.0-1002.2",
        "6.19.0-1003.3",
        "7.0.0-1002.2",
        "7.0.0-1004.4",
        "7.0.0-1005.5",
        "7.0.0-1007.7",
        "7.0.0-1009.9",
        "7.0.0-1010.10",
        "7.0.0-1011.11",
        "7.0.0-1012.12",
        "7.0.0-1013.13",
        "7.0.0-1014.14"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-buildinfo-7.0.0-1018-nvidia",
            "binary_version": "7.0.0-1018.18"
          },
          {
            "binary_name": "linux-buildinfo-7.0.0-1018-nvidia-64k",
            "binary_version": "7.0.0-1018.18"
          },
          {
            "binary_name": "linux-headers-7.0.0-1018-nvidia",
            "binary_version": "7.0.0-1018.18"
          },
          {
            "binary_name": "linux-headers-7.0.0-1018-nvidia-64k",
            "binary_version": "7.0.0-1018.18"
          },
          {
            "binary_name": "linux-image-unsigned-7.0.0-1018-nvidia",
            "binary_version": "7.0.0-1018.18"
          },
          {
            "binary_name": "linux-image-unsigned-7.0.0-1018-nvidia-64k",
            "binary_version": "7.0.0-1018.18"
          },
          {
            "binary_name": "linux-modules-7.0.0-1018-nvidia",
            "binary_version": "7.0.0-1018.18"
          },
          {
            "binary_name": "linux-modules-7.0.0-1018-nvidia-64k",
            "binary_version": "7.0.0-1018.18"
          },
          {
            "binary_name": "linux-modules-nvidia-fs-7.0.0-1018-nvidia",
            "binary_version": "7.0.0-1018.18"
          },
          {
            "binary_name": "linux-modules-nvidia-fs-7.0.0-1018-nvidia-64k",
            "binary_version": "7.0.0-1018.18"
          },
          {
            "binary_name": "linux-nvidia-headers-7.0.0-1018",
            "binary_version": "7.0.0-1018.18"
          },
          {
            "binary_name": "linux-nvidia-tools-7.0.0-1018",
            "binary_version": "7.0.0-1018.18"
          },
          {
            "binary_name": "linux-tools-7.0.0-1018-nvidia",
            "binary_version": "7.0.0-1018.18"
          },
          {
            "binary_name": "linux-tools-7.0.0-1018-nvidia-64k",
            "binary_version": "7.0.0-1018.18"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:26.04:LTS",
        "name": "linux-nvidia",
        "purl": "pkg:deb/ubuntu/linux-nvidia@7.0.0-1018.18?arch=source\u0026distro=resolute"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "7.0.0-1005.5",
        "7.0.0-1006.6",
        "7.0.0-1009.9",
        "7.0.0-1013.13",
        "7.0.0-1015.15",
        "7.0.0-1016.16",
        "7.0.0-1018.18"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-buildinfo-7.0.0-2018-nvidia-bos",
            "binary_version": "7.0.0-2018.18"
          },
          {
            "binary_name": "linux-buildinfo-7.0.0-2018-nvidia-bos-64k",
            "binary_version": "7.0.0-2018.18"
          },
          {
            "binary_name": "linux-headers-7.0.0-2018-nvidia-bos",
            "binary_version": "7.0.0-2018.18"
          },
          {
            "binary_name": "linux-headers-7.0.0-2018-nvidia-bos-64k",
            "binary_version": "7.0.0-2018.18"
          },
          {
            "binary_name": "linux-image-unsigned-7.0.0-2018-nvidia-bos",
            "binary_version": "7.0.0-2018.18"
          },
          {
            "binary_name": "linux-image-unsigned-7.0.0-2018-nvidia-bos-64k",
            "binary_version": "7.0.0-2018.18"
          },
          {
            "binary_name": "linux-modules-7.0.0-2018-nvidia-bos",
            "binary_version": "7.0.0-2018.18"
          },
          {
            "binary_name": "linux-modules-7.0.0-2018-nvidia-bos-64k",
            "binary_version": "7.0.0-2018.18"
          },
          {
            "binary_name": "linux-modules-nvidia-fs-7.0.0-2018-nvidia-bos",
            "binary_version": "7.0.0-2018.18"
          },
          {
            "binary_name": "linux-modules-nvidia-fs-7.0.0-2018-nvidia-bos-64k",
            "binary_version": "7.0.0-2018.18"
          },
          {
            "binary_name": "linux-nvidia-bos-headers-7.0.0-2018",
            "binary_version": "7.0.0-2018.18"
          },
          {
            "binary_name": "linux-nvidia-bos-tools-7.0.0-2018",
            "binary_version": "7.0.0-2018.18"
          },
          {
            "binary_name": "linux-tools-7.0.0-2018-nvidia-bos",
            "binary_version": "7.0.0-2018.18"
          },
          {
            "binary_name": "linux-tools-7.0.0-2018-nvidia-bos-64k",
            "binary_version": "7.0.0-2018.18"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:26.04:LTS",
        "name": "linux-nvidia-bos",
        "purl": "pkg:deb/ubuntu/linux-nvidia-bos@7.0.0-2018.18?arch=source\u0026distro=resolute"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "7.0.0-2012.12",
        "7.0.0-2015.15",
        "7.0.0-2016.16",
        "7.0.0-2018.18"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "linux-buildinfo-7.0.0-1015-oem",
            "binary_version": "7.0.0-1015.15"
          },
          {
            "binary_name": "linux-headers-7.0.0-1015-oem",
            "binary_version": "7.0.0-1015.15"
          },
          {
            "binary_name": "linux-image-unsigned-7.0.0-1015-oem",
            "binary_version": "7.0.0-1015.15"
          },
          {
            "binary_name": "linux-modules-7.0.0-1015-oem",
            "binary_version": "7.0.0-1015.15"
          },
          {
            "binary_name": "linux-oem-7.0-headers-7.0.0-1015",
            "binary_version": "7.0.0-1015.15"
          },
          {
            "binary_name": "linux-oem-7.0-tools-7.0.0-1015",
            "binary_version": "7.0.0-1015.15"
          },
          {
            "binary_name": "linux-tools-7.0.0-1015-oem",
            "binary_version": "7.0.0-1015.15"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:26.04:LTS",
        "name": "linux-oem-7.0",
        "purl": "pkg:deb/ubuntu/linux-oem-7.0@7.0.0-1015.15?arch=source\u0026distro=resolute"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "7.0.0-1015.15"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "7.0.0-1005.5",
        "7.0.0-1008.8",
        "7.0.0-1009.9",
        "7.0.0-1010.10",
        "7.0.0-1011.11",
        "7.0.0-1013.13",
        "7.0.0-1014.14"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "linux-buildinfo-7.0.0-1013-oracle",
            "binary_version": "7.0.0-1013.13"
          },
          {
            "binary_name": "linux-buildinfo-7.0.0-1013-oracle-64k",
            "binary_version": "7.0.0-1013.13"
          },
          {
            "binary_name": "linux-headers-7.0.0-1013-oracle",
            "binary_version": "7.0.0-1013.13"
          },
          {
            "binary_name": "linux-headers-7.0.0-1013-oracle-64k",
            "binary_version": "7.0.0-1013.13"
          },
          {
            "binary_name": "linux-image-unsigned-7.0.0-1013-oracle",
            "binary_version": "7.0.0-1013.13"
          },
          {
            "binary_name": "linux-image-unsigned-7.0.0-1013-oracle-64k",
            "binary_version": "7.0.0-1013.13"
          },
          {
            "binary_name": "linux-modules-7.0.0-1013-oracle",
            "binary_version": "7.0.0-1013.13"
          },
          {
            "binary_name": "linux-modules-7.0.0-1013-oracle-64k",
            "binary_version": "7.0.0-1013.13"
          },
          {
            "binary_name": "linux-oracle-headers-7.0.0-1013",
            "binary_version": "7.0.0-1013.13"
          },
          {
            "binary_name": "linux-oracle-tools-7.0.0-1013",
            "binary_version": "7.0.0-1013.13"
          },
          {
            "binary_name": "linux-tools-7.0.0-1013-oracle",
            "binary_version": "7.0.0-1013.13"
          },
          {
            "binary_name": "linux-tools-7.0.0-1013-oracle-64k",
            "binary_version": "7.0.0-1013.13"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:26.04:LTS",
        "name": "linux-oracle",
        "purl": "pkg:deb/ubuntu/linux-oracle@7.0.0-1013.13?arch=source\u0026distro=resolute"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "7.0.0-1013.13"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "6.17.0-1002.2",
        "6.17.0-1003.3",
        "6.19.0-1001.1",
        "6.19.0-1002.2",
        "7.0.0-1001.1",
        "7.0.0-1002.2",
        "7.0.0-1003.3",
        "7.0.0-1005.5",
        "7.0.0-1007.7",
        "7.0.0-1008.8",
        "7.0.0-1009.9",
        "7.0.0-1010.10",
        "7.0.0-1011.11",
        "7.0.0-1012.12"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-buildinfo-7.0.0-1020-raspi",
            "binary_version": "7.0.0-1020.20"
          },
          {
            "binary_name": "linux-buildinfo-7.0.0-1020-raspi-realtime",
            "binary_version": "7.0.0-1020.20"
          },
          {
            "binary_name": "linux-headers-7.0.0-1020-raspi",
            "binary_version": "7.0.0-1020.20"
          },
          {
            "binary_name": "linux-headers-7.0.0-1020-raspi-realtime",
            "binary_version": "7.0.0-1020.20"
          },
          {
            "binary_name": "linux-image-7.0.0-1020-raspi",
            "binary_version": "7.0.0-1020.20"
          },
          {
            "binary_name": "linux-image-7.0.0-1020-raspi-realtime",
            "binary_version": "7.0.0-1020.20"
          },
          {
            "binary_name": "linux-modules-7.0.0-1020-raspi",
            "binary_version": "7.0.0-1020.20"
          },
          {
            "binary_name": "linux-modules-7.0.0-1020-raspi-realtime",
            "binary_version": "7.0.0-1020.20"
          },
          {
            "binary_name": "linux-raspi-headers-7.0.0-1020",
            "binary_version": "7.0.0-1020.20"
          },
          {
            "binary_name": "linux-raspi-tools-7.0.0-1020",
            "binary_version": "7.0.0-1020.20"
          },
          {
            "binary_name": "linux-tools-7.0.0-1020-raspi",
            "binary_version": "7.0.0-1020.20"
          },
          {
            "binary_name": "linux-tools-7.0.0-1020-raspi-realtime",
            "binary_version": "7.0.0-1020.20"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:26.04:LTS",
        "name": "linux-raspi",
        "purl": "pkg:deb/ubuntu/linux-raspi@7.0.0-1020.20?arch=source\u0026distro=resolute"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "6.17.0-1003.3",
        "7.0.0-1004.4",
        "7.0.0-1008.8",
        "7.0.0-1009.9",
        "7.0.0-1010.10",
        "7.0.0-1011.11",
        "7.0.0-1014.14",
        "7.0.0-1015.15",
        "7.0.0-1016.16",
        "7.0.0-1017.17",
        "7.0.0-1019.19",
        "7.0.0-1020.20"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "linux-buildinfo-7.0.0-38-realtime",
            "binary_version": "7.0.0-38.38.1"
          },
          {
            "binary_name": "linux-buildinfo-7.0.0-38-realtime-64k",
            "binary_version": "7.0.0-38.38.1"
          },
          {
            "binary_name": "linux-cloud-tools-7.0.0-38-realtime",
            "binary_version": "7.0.0-38.38.1"
          },
          {
            "binary_name": "linux-headers-7.0.0-38-realtime",
            "binary_version": "7.0.0-38.38.1"
          },
          {
            "binary_name": "linux-headers-7.0.0-38-realtime-64k",
            "binary_version": "7.0.0-38.38.1"
          },
          {
            "binary_name": "linux-image-unsigned-7.0.0-38-realtime",
            "binary_version": "7.0.0-38.38.1"
          },
          {
            "binary_name": "linux-image-unsigned-7.0.0-38-realtime-64k",
            "binary_version": "7.0.0-38.38.1"
          },
          {
            "binary_name": "linux-modules-7.0.0-38-realtime",
            "binary_version": "7.0.0-38.38.1"
          },
          {
            "binary_name": "linux-modules-7.0.0-38-realtime-64k",
            "binary_version": "7.0.0-38.38.1"
          },
          {
            "binary_name": "linux-realtime-cloud-tools-7.0.0-38",
            "binary_version": "7.0.0-38.38.1"
          },
          {
            "binary_name": "linux-realtime-headers-7.0.0-38",
            "binary_version": "7.0.0-38.38.1"
          },
          {
            "binary_name": "linux-realtime-tools-7.0.0-38",
            "binary_version": "7.0.0-38.38.1"
          },
          {
            "binary_name": "linux-tools-7.0.0-38-realtime",
            "binary_version": "7.0.0-38.38.1"
          },
          {
            "binary_name": "linux-tools-7.0.0-38-realtime-64k",
            "binary_version": "7.0.0-38.38.1"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:26.04:LTS",
        "name": "linux-realtime",
        "purl": "pkg:deb/ubuntu/linux-realtime@7.0.0-38.38.1?arch=source\u0026distro=resolute"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "7.0.0-38.38.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "6.17.0-1001.2",
        "7.0.0-10.10.3",
        "7.0.0-12.12.1",
        "7.0.0-14.14.1",
        "7.0.0-22.22.1",
        "7.0.0-27.27.1",
        "7.0.0-28.28.1",
        "7.0.0-29.29.1",
        "7.0.0-30.30.1",
        "7.0.0-31.31.1",
        "7.0.0-34.34.1"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "linux-buildinfo-7.0.0-38-generic",
            "binary_version": "7.0.0-38.38.1"
          },
          {
            "binary_name": "linux-headers-7.0.0-38-generic",
            "binary_version": "7.0.0-38.38.1"
          },
          {
            "binary_name": "linux-image-7.0.0-38-generic",
            "binary_version": "7.0.0-38.38.1"
          },
          {
            "binary_name": "linux-modules-7.0.0-38-generic",
            "binary_version": "7.0.0-38.38.1"
          },
          {
            "binary_name": "linux-riscv-headers-7.0.0-38",
            "binary_version": "7.0.0-38.38.1"
          },
          {
            "binary_name": "linux-riscv-tools-7.0.0-38",
            "binary_version": "7.0.0-38.38.1"
          },
          {
            "binary_name": "linux-tools-7.0.0-38-generic",
            "binary_version": "7.0.0-38.38.1"
          }
        ],
        "priority_reason": "Exploitation requires root-equivalent privileges in the initial namespaces: the NFS-over-RDMA transport can only be established by a mount needing CAP_SYS_ADMIN in the initial user namespace (fs/nfs has no FS_USERNS_MOUNT), and the ADDR_CHANGE event can only be induced by reconfiguring the host bond master, which requires CAP_NET_ADMIN in the initial network namespace. For any unprivileged attacker the bonding-failover notifier is a kernel/hardware-driven event they can neither invoke nor influence."
      },
      "package": {
        "ecosystem": "Ubuntu:26.04:LTS",
        "name": "linux-riscv",
        "purl": "pkg:deb/ubuntu/linux-riscv@7.0.0-38.38.1?arch=source\u0026distro=resolute"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "7.0.0-38.38.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "6.17.0-5.5.1",
        "7.0.0-7.7.1",
        "7.0.0-12.12.1",
        "7.0.0-14.14.2",
        "7.0.0-22.22.1",
        "7.0.0-27.27.1",
        "7.0.0-28.28.1",
        "7.0.0-29.29.1",
        "7.0.0-30.30.1",
        "7.0.0-31.31.1",
        "7.0.0-34.34.1"
      ]
    }
  ],
  "aliases": [],
  "details": "In the Linux kernel, the following vulnerability has been resolved: xprtrdma: Fix ep kref imbalance on ADDR_CHANGE rpcrdma_cm_event_handler() falls through to the disconnected: label on RDMA_CM_EVENT_ADDR_CHANGE and calls rpcrdma_ep_put() with no matching get when the event arrives before RDMA_CM_EVENT_ESTABLISHED. The kref then underflows during connect teardown and rpcrdma_xprt_disconnect() operates on a freed ep. Reference counts across a normal connection lifecycle:     rpcrdma_ep_create()             kref_init     -\u003e1     rpcrdma_xprt_connect()          ep_get        -\u003e2  (before post_recvs)     RDMA_CM_EVENT_ESTABLISHED       ep_get        -\u003e3     RDMA_CM_EVENT_DISCONNECTED      ep_put        -\u003e2     rpcrdma_xprt_drain()            ep_put        -\u003e1     rpcrdma_xprt_disconnect() tail  ep_put        -\u003e0  (ep_destroy) The connect-time get in rpcrdma_xprt_connect(), taken just before rpcrdma_post_recvs() \"while there are outstanding Receives,\" is balanced by rpcrdma_xprt_drain. ADDR_CHANGE before ESTABLISHED has no get to consume, so its put drops the count to 1 and the drain put then frees the ep while rpcrdma_xprt_disconnect() still holds a pointer to it. Fix by dispatching on the prior re_connect_status via xchg(): for prev == 0 (pre-ESTABLISHED) wake the connect waiter and return with no put; for prev == 1 call rpcrdma_force_disconnect() and return. The case-1 arm relies on the subsequent RDMA_CM_EVENT_DISCONNECTED event -- reliably delivered when rdma_disconnect() is called on a still-connected cm_id -- to balance the ESTABLISHED get; rpcrdma_xprt_drain() continues to balance only that connect-time get. Any other prior value means teardown is already in flight.",
  "id": "UBUNTU-CVE-2026-72469",
  "modified": "2026-10-17T09:51:06Z",
  "published": "2026-08-15T06:22:00Z",
  "references": [
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2026-72469"
    },
    {
      "type": "REPORT",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-72469"
    },
    {
      "type": "REPORT",
      "url": "https://git.kernel.org/linus/af9b65b29af341932625c4283dc7a23cdb62688a"
    },
    {
      "type": "REPORT",
      "url": "https://git.kernel.org/stable/c/af9b65b29af341932625c4283dc7a23cdb62688a"
    },
    {
      "type": "REPORT",
      "url": "https://git.kernel.org/stable/c/cfd1bab66b042da7a778786685125656c695931b"
    },
    {
      "type": "REPORT",
      "url": "https://git.kernel.org/stable/c/d0479c2b12974aa188b10d221a5770126b118b6d"
    },
    {
      "type": "REPORT",
      "url": "https://git.kernel.org/stable/c/ffc07790539736a5d029f6a3c966b46c529f93a8"
    },
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-8888-1"
    },
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-8889-1"
    },
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-8887-1"
    },
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-8886-1"
    },
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-8888-2"
    },
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-8887-2"
    },
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-8887-3"
    },
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-8917-1"
    },
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-8918-1"
    }
  ],
  "related": [
    "USN-8888-1",
    "USN-8889-1",
    "USN-8887-1",
    "USN-8886-1",
    "USN-8888-2",
    "USN-8887-2",
    "USN-8887-3",
    "USN-8917-1",
    "USN-8918-1"
  ],
  "schema_version": "1.7.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    },
    {
      "score": "low",
      "type": "Ubuntu"
    }
  ],
  "upstream": [
    "CVE-2026-72469"
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.


Loading…

Loading…

Loading…

Drag nodes to arrange them. Double-click a related vulnerability to open it, or a source to visit its link. The Physics button on the left tunes the layout and the simulation; the legend at the bottom left hides or shows nodes by kind and by sighting type.

Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

JSON
Events included in the timeline

Loading timeline…


    Loading…

    Loading…

    Loading…

    Related by attack behaviour

    Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.