Your submission was sent successfully! Close

You have successfully unsubscribed! Close

Thank you for signing up for our newsletter!
In these regular emails you will find the latest updates about Ubuntu and upcoming events where you can meet our team.Close

Search CVE reports

Toggle filters

161 – 170 of 595 results

CVE-2018-3620

High priority

Some fixes available 18 of 22

Systems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure of information residing in the L1 data cache to an attacker with local user access via a terminal page fault...

27 affected packages

linux, linux-aws, linux-aws-hwe, linux-azure, linux-azure-edge...

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
linux — — — Fixed Fixed
linux-aws — — — Fixed Fixed
linux-aws-hwe — — — Not in release Not affected
linux-azure — — — Fixed Fixed
linux-azure-edge — — — Fixed Fixed
linux-euclid — — — Not in release Ignored
linux-flo — — — Not in release Ignored
linux-gcp — — — Fixed Fixed
linux-gcp-edge — — — Not affected Not in release
linux-gke — — — Not in release Ignored
linux-goldfish — — — Not in release Ignored
linux-grouper — — — Not in release Not in release
linux-hwe — — — Not affected Fixed
linux-hwe-edge — — — Not affected Fixed
linux-kvm — — — Fixed Fixed
linux-lts-trusty — — — Not in release Not in release
linux-lts-utopic — — — Not in release Not in release
linux-lts-vivid — — — Not in release Not in release
linux-lts-wily — — — Not in release Not in release
linux-lts-xenial — — — Not in release Not in release
linux-maguro — — — Not in release Not in release
linux-mako — — — Not in release Ignored
linux-manta — — — Not in release Not in release
linux-oem — — — Fixed Ignored
linux-oracle — — — Not affected Not affected
linux-raspi2 — — — Not affected Not affected
linux-snapdragon — — — Not affected Not affected
Show all 27 packages Show less packages

CVE-2018-3615

Medium priority
Ignored

Systems with microprocessors utilizing speculative execution and Intel software guard extensions (Intel SGX) may allow unauthorized disclosure of information residing in the L1 data cache from an enclave to an attacker with local...

24 affected packages

linux, linux-aws, linux-azure, linux-azure-edge, linux-euclid...

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
linux — — — Not affected Not affected
linux-aws — — — Not affected Not affected
linux-azure — — — Not affected Not affected
linux-azure-edge — — — Not affected Not affected
linux-euclid — — — Not in release Not affected
linux-flo — — — Not in release Ignored
linux-gcp — — — Not affected Not affected
linux-gke — — — Not in release Ignored
linux-goldfish — — — Not in release Not affected
linux-grouper — — — Not in release Not in release
linux-hwe — — — Not affected Not affected
linux-hwe-edge — — — Not affected Not affected
linux-kvm — — — Not affected Not affected
linux-lts-trusty — — — Not in release Not in release
linux-lts-utopic — — — Not in release Not in release
linux-lts-vivid — — — Not in release Not in release
linux-lts-wily — — — Not in release Not in release
linux-lts-xenial — — — Not in release Not in release
linux-maguro — — — Not in release Not in release
linux-mako — — — Not in release Ignored
linux-manta — — — Not in release Not in release
linux-oem — — — Not affected Not affected
linux-raspi2 — — — Not affected Not affected
linux-snapdragon — — — Not affected Not affected
Show all 24 packages Show less packages

CVE-2018-5391

High priority

Some fixes available 21 of 24

The Linux kernel, versions 3.9+, is vulnerable to a denial of service attack with low rates of specially modified packets targeting IP fragment re-assembly. An attacker may cause a denial of service condition by sending specially...

24 affected packages

linux, linux-aws, linux-azure, linux-azure-edge, linux-euclid...

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
linux — — — Fixed Fixed
linux-aws — — — Fixed Fixed
linux-azure — — — Fixed Fixed
linux-azure-edge — — — Not affected Fixed
linux-euclid — — — Not in release Fixed
linux-flo — — — Not in release Ignored
linux-gcp — — — Fixed Fixed
linux-gke — — — Not in release Ignored
linux-goldfish — — — Not in release Ignored
linux-grouper — — — Not in release Not in release
linux-hwe — — — Not affected Fixed
linux-hwe-edge — — — Not affected Fixed
linux-kvm — — — Fixed Fixed
linux-lts-trusty — — — Not in release Not in release
linux-lts-utopic — — — Not in release Not in release
linux-lts-vivid — — — Not in release Not in release
linux-lts-wily — — — Not in release Not in release
linux-lts-xenial — — — Not in release Not in release
linux-maguro — — — Not in release Not in release
linux-mako — — — Not in release Ignored
linux-manta — — — Not in release Not in release
linux-oem — — — Fixed Ignored
linux-raspi2 — — — Fixed Fixed
linux-snapdragon — — — Not affected Fixed
Show all 24 packages Show less packages

CVE-2018-7754

Negligible priority

Some fixes available 5 of 26

The aoedisk_debugfs_show function in drivers/block/aoe/aoeblk.c in the Linux kernel through 4.16.4rc4 allows local users to obtain sensitive address information by reading "ffree: " lines in a debugfs file.

55 affected packages

linux, linux-aws, linux-aws-5.0, linux-aws-5.3, linux-aws-5.4...

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
linux — — Not affected Not affected Ignored
linux-aws — — Not affected Not affected Ignored
linux-aws-5.0 — — Not in release Not affected Not in release
linux-aws-5.3 — — Not in release Not affected Not in release
linux-aws-5.4 — — Not in release Not affected Not in release
linux-aws-hwe — — Not in release Not in release Not affected
linux-azure — — Not affected Not affected Fixed
linux-azure-4.15 — — Not in release Not affected Not in release
linux-azure-5.3 — — Not in release Not affected Not in release
linux-azure-5.4 — — Not in release Not affected Not in release
linux-azure-edge — — Not in release Not affected Not in release
linux-dell300x — — Not in release Not affected Not in release
linux-euclid — — Not in release Not in release Ignored
linux-flo — — Not in release Not in release Ignored
linux-gcp — — Not affected Not affected Fixed
linux-gcp-4.15 — — Not in release Not affected Not in release
linux-gcp-5.3 — — Not in release Not affected Not in release
linux-gcp-5.4 — — Not in release Not affected Not in release
linux-gcp-edge — — Not in release Not affected Not in release
linux-gke — — Not affected Not in release Ignored
linux-gke-4.15 — — Not in release Not affected Not in release
linux-gke-5.0 — — Not in release Not affected Not in release
linux-gke-5.3 — — Not in release Not affected Not in release
linux-gke-5.4 — — Not in release Not affected Not in release
linux-gkeop — — Not affected Not in release Not in release
linux-gkeop-5.4 — — Not in release Not affected Not in release
linux-goldfish — — Not in release Not in release Ignored
linux-grouper — — Not in release Not in release Not in release
linux-hwe — — Not in release Not affected Fixed
linux-hwe-5.4 — — Not in release Not affected Not in release
linux-hwe-5.8 — — Not affected Not in release Not in release
linux-hwe-edge — — Not in release Not affected Fixed
linux-kvm — — Not affected Not affected Ignored
linux-lts-trusty — — Not in release Not in release Not in release
linux-lts-utopic — — Not in release Not in release Not in release
linux-lts-vivid — — Not in release Not in release Not in release
linux-lts-wily — — Not in release Not in release Not in release
linux-lts-xenial — — Not in release Not in release Not in release
linux-maguro — — Not in release Not in release Not in release
linux-mako — — Not in release Not in release Ignored
linux-manta — — Not in release Not in release Not in release
linux-oem — — Not in release Not affected Ignored
linux-oem-5.10 — — Not affected Not in release Not in release
linux-oem-5.6 — — Not affected Not in release Not in release
linux-oem-osp1 — — Not in release Not affected Not in release
linux-oracle — — Not affected Not affected Not affected
linux-oracle-5.0 — — Not in release Not affected Not in release
linux-oracle-5.3 — — Not in release Not affected Not in release
linux-oracle-5.4 — — Not in release Not affected Not in release
linux-raspi — — Not affected Not in release Not in release
linux-raspi-5.4 — — Not in release Not affected Not in release
linux-raspi2 — — Not affected Not affected Ignored
linux-raspi2-5.3 — — Not in release Not affected Not in release
linux-riscv — — Not affected Not in release Not in release
linux-snapdragon — — Not in release Fixed Ignored
Show all 55 packages Show less packages

CVE-2018-5995

Negligible priority

Some fixes available 10 of 18

The pcpu_embed_first_chunk function in mm/percpu.c in the Linux kernel through 4.14.14 allows local users to obtain sensitive address information by reading dmesg data from a "pages/cpu" printk call.

55 affected packages

linux, linux-aws, linux-aws-5.0, linux-aws-5.3, linux-aws-5.4...

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
linux — — Not affected Not affected Fixed
linux-aws — — Not affected Not affected Fixed
linux-aws-5.0 — — Not in release Not affected Not in release
linux-aws-5.3 — — Not in release Not affected Not in release
linux-aws-5.4 — — Not in release Not affected Not in release
linux-aws-hwe — — Not in release Not in release Not affected
linux-azure — — Not affected Not affected Fixed
linux-azure-4.15 — — Not in release Not affected Not in release
linux-azure-5.3 — — Not in release Not affected Not in release
linux-azure-5.4 — — Not in release Not affected Not in release
linux-azure-edge — — Not in release Not affected Not in release
linux-dell300x — — Not in release Not affected Not in release
linux-euclid — — Not in release Not in release Ignored
linux-flo — — Not in release Not in release Ignored
linux-gcp — — Not affected Not affected Fixed
linux-gcp-4.15 — — Not in release Not affected Not in release
linux-gcp-5.3 — — Not in release Not affected Not in release
linux-gcp-5.4 — — Not in release Not affected Not in release
linux-gcp-edge — — Not in release Not affected Not in release
linux-gke — — Not affected Not in release Ignored
linux-gke-4.15 — — Not in release Not affected Not in release
linux-gke-5.0 — — Not in release Not affected Not in release
linux-gke-5.3 — — Not in release Not affected Not in release
linux-gke-5.4 — — Not in release Not affected Not in release
linux-gkeop — — Not affected Not in release Not in release
linux-gkeop-5.4 — — Not in release Not affected Not in release
linux-goldfish — — Not in release Not in release Ignored
linux-grouper — — Not in release Not in release Not in release
linux-hwe — — Not in release Not affected Fixed
linux-hwe-5.4 — — Not in release Not affected Not in release
linux-hwe-5.8 — — Not affected Not in release Not in release
linux-hwe-edge — — Not in release Not affected Fixed
linux-kvm — — Not affected Not affected Fixed
linux-lts-trusty — — Not in release Not in release Not in release
linux-lts-utopic — — Not in release Not in release Not in release
linux-lts-vivid — — Not in release Not in release Not in release
linux-lts-wily — — Not in release Not in release Not in release
linux-lts-xenial — — Not in release Not in release Not in release
linux-maguro — — Not in release Not in release Not in release
linux-mako — — Not in release Not in release Ignored
linux-manta — — Not in release Not in release Not in release
linux-oem — — Not in release Not affected Ignored
linux-oem-5.10 — — Not affected Not in release Not in release
linux-oem-5.6 — — Not affected Not in release Not in release
linux-oem-osp1 — — Not in release Not affected Not in release
linux-oracle — — Not affected Not affected Not affected
linux-oracle-5.0 — — Not in release Not affected Not in release
linux-oracle-5.3 — — Not in release Not affected Not in release
linux-oracle-5.4 — — Not in release Not affected Not in release
linux-raspi — — Not affected Not in release Not in release
linux-raspi-5.4 — — Not in release Not affected Not in release
linux-raspi2 — — Not affected Not affected Ignored
linux-raspi2-5.3 — — Not in release Not affected Not in release
linux-riscv — — Not affected Not in release Not in release
linux-snapdragon — — Not in release Fixed Ignored
Show all 55 packages Show less packages

CVE-2018-5953

Negligible priority

Some fixes available 5 of 18

The swiotlb_print_info function in lib/swiotlb.c in the Linux kernel through 4.14.14 allows local users to obtain sensitive address information by reading dmesg data from a "software IO TLB" printk call.

55 affected packages

linux, linux-aws, linux-aws-5.0, linux-aws-5.3, linux-aws-5.4...

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
linux — — Not affected Not affected Ignored
linux-aws — — Not affected Not affected Ignored
linux-aws-5.0 — — Not in release Not affected Not in release
linux-aws-5.3 — — Not in release Not affected Not in release
linux-aws-5.4 — — Not in release Not affected Not in release
linux-aws-hwe — — Not in release Not in release Not affected
linux-azure — — Not affected Not affected Fixed
linux-azure-4.15 — — Not in release Not affected Not in release
linux-azure-5.3 — — Not in release Not affected Not in release
linux-azure-5.4 — — Not in release Not affected Not in release
linux-azure-edge — — Not in release Not affected Not in release
linux-dell300x — — Not in release Not affected Not in release
linux-euclid — — Not in release Not in release Ignored
linux-flo — — Not in release Not in release Ignored
linux-gcp — — Not affected Not affected Fixed
linux-gcp-4.15 — — Not in release Not affected Not in release
linux-gcp-5.3 — — Not in release Not affected Not in release
linux-gcp-5.4 — — Not in release Not affected Not in release
linux-gcp-edge — — Not in release Not affected Not in release
linux-gke — — Not affected Not in release Ignored
linux-gke-4.15 — — Not in release Not affected Not in release
linux-gke-5.0 — — Not in release Not affected Not in release
linux-gke-5.3 — — Not in release Not affected Not in release
linux-gke-5.4 — — Not in release Not affected Not in release
linux-gkeop — — Not affected Not in release Not in release
linux-gkeop-5.4 — — Not in release Not affected Not in release
linux-goldfish — — Not in release Not in release Ignored
linux-grouper — — Not in release Not in release Not in release
linux-hwe — — Not in release Not affected Fixed
linux-hwe-5.4 — — Not in release Not affected Not in release
linux-hwe-5.8 — — Not affected Not in release Not in release
linux-hwe-edge — — Not in release Not affected Fixed
linux-kvm — — Not affected Not affected Ignored
linux-lts-trusty — — Not in release Not in release Not in release
linux-lts-utopic — — Not in release Not in release Not in release
linux-lts-vivid — — Not in release Not in release Not in release
linux-lts-wily — — Not in release Not in release Not in release
linux-lts-xenial — — Not in release Not in release Not in release
linux-maguro — — Not in release Not in release Not in release
linux-mako — — Not in release Not in release Ignored
linux-manta — — Not in release Not in release Not in release
linux-oem — — Not in release Not affected Ignored
linux-oem-5.10 — — Not affected Not in release Not in release
linux-oem-5.6 — — Not affected Not in release Not in release
linux-oem-osp1 — — Not in release Not affected Not in release
linux-oracle — — Not affected Not affected Not affected
linux-oracle-5.0 — — Not in release Not affected Not in release
linux-oracle-5.3 — — Not in release Not affected Not in release
linux-oracle-5.4 — — Not in release Not affected Not in release
linux-raspi — — Not affected Not in release Not in release
linux-raspi-5.4 — — Not in release Not affected Not in release
linux-raspi2 — — Not affected Not affected Ignored
linux-raspi2-5.3 — — Not in release Not affected Not in release
linux-riscv — — Not affected Not in release Not in release
linux-snapdragon — — Not in release Fixed Ignored
Show all 55 packages Show less packages

CVE-2018-5383

Medium priority

Some fixes available 31 of 49

Bluetooth firmware or operating system software drivers in macOS versions before 10.13, High Sierra and iOS versions before 11.4, and Android versions before the 2018-06-05 patch may not sufficiently validate elliptic curve...

56 affected packages

linux, linux-aws, linux-aws-5.0, linux-aws-5.3, linux-aws-5.4...

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
linux — — Not affected Fixed Fixed
linux-aws — — Not affected Fixed Fixed
linux-aws-5.0 — — Not in release Not affected Not in release
linux-aws-5.3 — — Not in release Not affected Not in release
linux-aws-5.4 — — Not in release Not affected Not in release
linux-aws-hwe — — Not in release Not in release Fixed
linux-azure — — Not affected Fixed Fixed
linux-azure-4.15 — — Not in release Not affected Not in release
linux-azure-5.3 — — Not in release Not affected Not in release
linux-azure-5.4 — — Not in release Not affected Not in release
linux-azure-edge — — Not in release Fixed Not in release
linux-dell300x — — Not in release Not affected Not in release
linux-euclid — — Not in release Not in release Ignored
linux-firmware — — Not affected Fixed Fixed
linux-flo — — Not in release Not in release Ignored
linux-gcp — — Not affected Fixed Fixed
linux-gcp-4.15 — — Not in release Not affected Not in release
linux-gcp-5.3 — — Not in release Not affected Not in release
linux-gcp-5.4 — — Not in release Not affected Not in release
linux-gcp-edge — — Not in release Fixed Not in release
linux-gke — — Not affected Not in release Ignored
linux-gke-4.15 — — Not in release Fixed Not in release
linux-gke-5.0 — — Not in release Not affected Not in release
linux-gke-5.3 — — Not in release Not affected Not in release
linux-gke-5.4 — — Not in release Not affected Not in release
linux-gkeop — — Not affected Not in release Not in release
linux-gkeop-5.4 — — Not in release Not affected Not in release
linux-goldfish — — Not in release Not in release Ignored
linux-grouper — — Not in release Not in release Not in release
linux-hwe — — Not in release Fixed Fixed
linux-hwe-5.4 — — Not in release Not affected Not in release
linux-hwe-5.8 — — Not affected Not in release Not in release
linux-hwe-edge — — Not in release Not affected Fixed
linux-kvm — — Not affected Fixed Fixed
linux-lts-trusty — — Not in release Not in release Not in release
linux-lts-utopic — — Not in release Not in release Not in release
linux-lts-vivid — — Not in release Not in release Not in release
linux-lts-wily — — Not in release Not in release Not in release
linux-lts-xenial — — Not in release Not in release Not in release
linux-maguro — — Not in release Not in release Not in release
linux-mako — — Not in release Not in release Ignored
linux-manta — — Not in release Not in release Not in release
linux-oem — — Not in release Fixed Ignored
linux-oem-5.10 — — Not affected Not in release Not in release
linux-oem-5.6 — — Not affected Not in release Not in release
linux-oem-osp1 — — Not in release Not affected Not in release
linux-oracle — — Not affected Fixed Fixed
linux-oracle-5.0 — — Not in release Not affected Not in release
linux-oracle-5.3 — — Not in release Not affected Not in release
linux-oracle-5.4 — — Not in release Not affected Not in release
linux-raspi — — Not affected Not in release Not in release
linux-raspi-5.4 — — Not in release Not affected Not in release
linux-raspi2 — — Not affected Fixed Fixed
linux-raspi2-5.3 — — Not in release Not affected Not in release
linux-riscv — — Not affected Not in release Not in release
linux-snapdragon — — Not in release Fixed Fixed
Show all 56 packages Show less packages

CVE-2018-5390

High priority

Some fixes available 21 of 24

Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can lead to a denial of service.

24 affected packages

linux, linux-aws, linux-azure, linux-azure-edge, linux-euclid...

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
linux — — — Fixed Fixed
linux-aws — — — Fixed Fixed
linux-azure — — — Fixed Fixed
linux-azure-edge — — — Not affected Fixed
linux-euclid — — — Not in release Fixed
linux-flo — — — Not in release Ignored
linux-gcp — — — Fixed Fixed
linux-gke — — — Not in release Ignored
linux-goldfish — — — Not in release Ignored
linux-grouper — — — Not in release Not in release
linux-hwe — — — Not affected Fixed
linux-hwe-edge — — — Not affected Fixed
linux-kvm — — — Fixed Fixed
linux-lts-trusty — — — Not in release Not in release
linux-lts-utopic — — — Not in release Not in release
linux-lts-vivid — — — Not in release Not in release
linux-lts-wily — — — Not in release Not in release
linux-lts-xenial — — — Not in release Not in release
linux-maguro — — — Not in release Not in release
linux-mako — — — Not in release Ignored
linux-manta — — — Not in release Not in release
linux-oem — — — Fixed Ignored
linux-raspi2 — — — Fixed Fixed
linux-snapdragon — — — Not affected Fixed
Show all 24 packages Show less packages

CVE-2018-9363

Medium priority

Some fixes available 22 of 26

In the hidp_process_report in bluetooth, there is an integer overflow. This could lead to an out of bounds write with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android...

24 affected packages

linux, linux-aws, linux-azure, linux-azure-edge, linux-euclid...

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
linux — — — Fixed Fixed
linux-aws — — — Fixed Fixed
linux-azure — — — Fixed Fixed
linux-azure-edge — — — Not affected Fixed
linux-euclid — — — Not in release Ignored
linux-flo — — — Not in release Ignored
linux-gcp — — — Fixed Fixed
linux-gke — — — Not in release Ignored
linux-goldfish — — — Not in release Ignored
linux-grouper — — — Not in release Not in release
linux-hwe — — — Not affected Fixed
linux-hwe-edge — — — Not affected Fixed
linux-kvm — — — Fixed Fixed
linux-lts-trusty — — — Not in release Not in release
linux-lts-utopic — — — Not in release Not in release
linux-lts-vivid — — — Not in release Not in release
linux-lts-wily — — — Not in release Not in release
linux-lts-xenial — — — Not in release Not in release
linux-maguro — — — Not in release Not in release
linux-mako — — — Not in release Ignored
linux-manta — — — Not in release Not in release
linux-oem — — — Fixed Ignored
linux-raspi2 — — — Fixed Fixed
linux-snapdragon — — — Not affected Fixed
Show all 24 packages Show less packages

CVE-2018-10883

Low priority

Some fixes available 27 of 38

A flaw was found in the Linux kernel's ext4 filesystem. A local user can cause an out-of-bounds write in jbd2_journal_dirty_metadata(), a denial of service, and a system crash by mounting and operating on a crafted ext4 filesystem image.

27 affected packages

linux, linux-aws, linux-aws-hwe, linux-azure, linux-azure-edge...

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
linux — — — Fixed Fixed
linux-aws — — — Fixed Fixed
linux-aws-hwe — — — Not in release Fixed
linux-azure — — — Fixed Fixed
linux-azure-edge — — — Fixed Fixed
linux-euclid — — — Not in release Ignored
linux-flo — — — Not in release Ignored
linux-gcp — — — Fixed Fixed
linux-gcp-edge — — — Not affected Not in release
linux-gke — — — Not affected Ignored
linux-goldfish — — — Not in release Ignored
linux-grouper — — — Not in release Not in release
linux-hwe — — — Not affected Fixed
linux-hwe-edge — — — Not affected Fixed
linux-kvm — — — Fixed Fixed
linux-lts-trusty — — — Not in release Not in release
linux-lts-utopic — — — Not in release Not in release
linux-lts-vivid — — — Not in release Not in release
linux-lts-wily — — — Not in release Not in release
linux-lts-xenial — — — Not in release Not in release
linux-maguro — — — Not in release Not in release
linux-mako — — — Not in release Ignored
linux-manta — — — Not in release Not in release
linux-oem — — — Fixed Ignored
linux-oracle — — — Fixed Fixed
linux-raspi2 — — — Fixed Fixed
linux-snapdragon — — — Fixed Fixed
Show all 27 packages Show less packages
  1. Previous page
  2. 15
  3. 16
  4. 17
  5. 18
  6. 19
  7. Next page
Export to JSON