Your submission was sent successfully! Close

You have successfully unsubscribed! Close

Thank you for signing up for our newsletter!
In these regular emails you will find the latest updates about Ubuntu and upcoming events where you can meet our team.Close

Search CVE reports

Toggle filters

511 – 520 of 595 results

CVE-2017-6214

Medium priority

Some fixes available 11 of 33

The tcp_splice_read function in net/ipv4/tcp.c in the Linux kernel before 4.9.11 allows remote attackers to cause a denial of service (infinite loop and soft lockup) via vectors involving a TCP packet with the URG flag.

32 affected packages

linux, linux-armadaxp, linux-aws, linux-azure, linux-euclid...

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
linux — — — — Fixed
linux-armadaxp — — — — Not in release
linux-aws — — — — Fixed
linux-azure — — — — Not affected
linux-euclid — — — — Ignored
linux-flo — — — — Ignored
linux-gcp — — — — Not affected
linux-gke — — — — Fixed
linux-goldfish — — — — Ignored
linux-grouper — — — — Not in release
linux-hwe — — — — Fixed
linux-hwe-edge — — — — Fixed
linux-kvm — — — — Not affected
linux-linaro-omap — — — — Not in release
linux-linaro-shared — — — — Not in release
linux-linaro-vexpress — — — — Not in release
linux-lts-quantal — — — — Not in release
linux-lts-raring — — — — Not in release
linux-lts-saucy — — — — Not in release
linux-lts-trusty — — — — Not in release
linux-lts-utopic — — — — Not in release
linux-lts-vivid — — — — Not in release
linux-lts-wily — — — — Not in release
linux-lts-xenial — — — — Not in release
linux-maguro — — — — Not in release
linux-mako — — — — Ignored
linux-manta — — — — Not in release
linux-oem — — — — Not affected
linux-qcm-msm — — — — Not in release
linux-raspi2 — — — — Fixed
linux-snapdragon — — — — Fixed
linux-ti-omap4 — — — — Not in release
Show all 32 packages Show less packages

CVE-2017-6074

High priority

Some fixes available 16 of 30

The dccp_rcv_state_process function in net/dccp/input.c in the Linux kernel through 4.9.11 mishandles DCCP_PKT_REQUEST packet data structures in the LISTEN state, which allows local users to obtain root privileges or cause...

33 affected packages

linux, linux-armadaxp, linux-aws, linux-azure, linux-azure-edge...

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
linux — — — Not affected Fixed
linux-armadaxp — — — Not in release Not in release
linux-aws — — — Not affected Fixed
linux-azure — — — Not affected Not affected
linux-azure-edge — — — Not affected Not affected
linux-euclid — — — Not in release Fixed
linux-flo — — — Not in release Ignored
linux-gcp — — — Not affected Not affected
linux-gke — — — Not in release Not affected
linux-goldfish — — — Not in release Ignored
linux-grouper — — — Not in release Not in release
linux-hwe — — — Not affected Fixed
linux-hwe-edge — — — Not affected Fixed
linux-kvm — — — Not affected Not affected
linux-linaro-omap — — — Not in release Not in release
linux-linaro-shared — — — Not in release Not in release
linux-linaro-vexpress — — — Not in release Not in release
linux-lts-quantal — — — Not in release Not in release
linux-lts-raring — — — Not in release Not in release
linux-lts-saucy — — — Not in release Not in release
linux-lts-trusty — — — Not in release Not in release
linux-lts-utopic — — — Not in release Not in release
linux-lts-vivid — — — Not in release Not in release
linux-lts-wily — — — Not in release Not in release
linux-lts-xenial — — — Not in release Not in release
linux-maguro — — — Not in release Not in release
linux-mako — — — Not in release Ignored
linux-manta — — — Not in release Not in release
linux-oem — — — Not affected Ignored
linux-qcm-msm — — — Not in release Not in release
linux-raspi2 — — — Not affected Fixed
linux-snapdragon — — — Not affected Fixed
linux-ti-omap4 — — — Not in release Not in release
Show all 33 packages Show less packages

CVE-2016-8636

Medium priority

Some fixes available 2 of 24

Integer overflow in the mem_check_range function in drivers/infiniband/sw/rxe/rxe_mr.c in the Linux kernel before 4.9.10 allows local users to cause a denial of service (memory corruption), obtain sensitive information from kernel...

31 affected packages

linux, linux-armadaxp, linux-aws, linux-azure, linux-euclid...

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
linux — — — — Not affected
linux-armadaxp — — — — Not in release
linux-aws — — — — Not affected
linux-azure — — — — Not affected
linux-euclid — — — — Not affected
linux-flo — — — — Ignored
linux-gcp — — — — Not affected
linux-gke — — — — Not affected
linux-goldfish — — — — Ignored
linux-grouper — — — — Not in release
linux-hwe — — — — Fixed
linux-hwe-edge — — — — Fixed
linux-kvm — — — — Not affected
linux-linaro-omap — — — — Not in release
linux-linaro-shared — — — — Not in release
linux-linaro-vexpress — — — — Not in release
linux-lts-quantal — — — — Not in release
linux-lts-raring — — — — Not in release
linux-lts-saucy — — — — Not in release
linux-lts-trusty — — — — Not in release
linux-lts-utopic — — — — Not in release
linux-lts-vivid — — — — Not in release
linux-lts-wily — — — — Not in release
linux-lts-xenial — — — — Not in release
linux-maguro — — — — Not in release
linux-mako — — — — Ignored
linux-manta — — — — Not in release
linux-qcm-msm — — — — Not in release
linux-raspi2 — — — — Not affected
linux-snapdragon — — — — Not affected
linux-ti-omap4 — — — — Not in release
Show all 31 packages Show less packages

CVE-2017-6001

Medium priority

Some fixes available 10 of 32

Race condition in kernel/events/core.c in the Linux kernel before 4.9.7 allows local users to gain privileges via a crafted application that makes concurrent perf_event_open system calls for moving a software group into a hardware...

32 affected packages

linux, linux-armadaxp, linux-aws, linux-azure, linux-euclid...

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
linux — — — — Fixed
linux-armadaxp — — — — Not in release
linux-aws — — — — Fixed
linux-azure — — — — Not affected
linux-euclid — — — — Ignored
linux-flo — — — — Ignored
linux-gcp — — — — Not affected
linux-gke — — — — Fixed
linux-goldfish — — — — Ignored
linux-grouper — — — — Not in release
linux-hwe — — — — Fixed
linux-hwe-edge — — — — Fixed
linux-kvm — — — — Not affected
linux-linaro-omap — — — — Not in release
linux-linaro-shared — — — — Not in release
linux-linaro-vexpress — — — — Not in release
linux-lts-quantal — — — — Not in release
linux-lts-raring — — — — Not in release
linux-lts-saucy — — — — Not in release
linux-lts-trusty — — — — Not in release
linux-lts-utopic — — — — Not in release
linux-lts-vivid — — — — Not in release
linux-lts-wily — — — — Not in release
linux-lts-xenial — — — — Not in release
linux-maguro — — — — Not in release
linux-mako — — — — Ignored
linux-manta — — — — Not in release
linux-oem — — — — Not affected
linux-qcm-msm — — — — Not in release
linux-raspi2 — — — — Fixed
linux-snapdragon — — — — Fixed
linux-ti-omap4 — — — — Not in release
Show all 32 packages Show less packages

CVE-2017-5986

Medium priority

Some fixes available 14 of 33

Race condition in the sctp_wait_for_sndbuf function in net/sctp/socket.c in the Linux kernel before 4.9.11 allows local users to cause a denial of service (assertion failure and panic) via a multithreaded application that peels...

32 affected packages

linux, linux-armadaxp, linux-aws, linux-azure, linux-euclid...

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
linux — — — — Fixed
linux-armadaxp — — — — Not in release
linux-aws — — — — Fixed
linux-azure — — — — Not affected
linux-euclid — — — — Ignored
linux-flo — — — — Ignored
linux-gcp — — — — Not affected
linux-gke — — — — Fixed
linux-goldfish — — — — Ignored
linux-grouper — — — — Not in release
linux-hwe — — — — Fixed
linux-hwe-edge — — — — Fixed
linux-kvm — — — — Not affected
linux-linaro-omap — — — — Not in release
linux-linaro-shared — — — — Not in release
linux-linaro-vexpress — — — — Not in release
linux-lts-quantal — — — — Not in release
linux-lts-raring — — — — Not in release
linux-lts-saucy — — — — Not in release
linux-lts-trusty — — — — Not in release
linux-lts-utopic — — — — Not in release
linux-lts-vivid — — — — Not in release
linux-lts-wily — — — — Not in release
linux-lts-xenial — — — — Not in release
linux-maguro — — — — Not in release
linux-mako — — — — Ignored
linux-manta — — — — Not in release
linux-oem — — — — Not affected
linux-qcm-msm — — — — Not in release
linux-raspi2 — — — — Fixed
linux-snapdragon — — — — Fixed
linux-ti-omap4 — — — — Not in release
Show all 32 packages Show less packages

CVE-2017-5972

Low priority
Ignored

The TCP stack in the Linux kernel 3.x does not properly implement a SYN cookie protection mechanism for the case of a fast network connection, which allows remote attackers to cause a denial of service (CPU consumption) by sending...

36 affected packages

linux, linux-armadaxp, linux-aws, linux-aws-hwe, linux-azure...

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
linux — — — Not affected Not affected
linux-armadaxp — — — Not in release Not in release
linux-aws — — — Not affected Not affected
linux-aws-hwe — — — Not in release Not affected
linux-azure — — — Not affected Not affected
linux-azure-edge — — — Not affected Not affected
linux-euclid — — — Not in release Not affected
linux-flo — — — Not in release Ignored
linux-gcp — — — Not affected Not affected
linux-gcp-edge — — — Not affected Not in release
linux-gke — — — Not affected Not affected
linux-goldfish — — — Not in release Ignored
linux-grouper — — — Not in release Not in release
linux-hwe — — — Not affected Not affected
linux-hwe-edge — — — Not affected Not affected
linux-kvm — — — Not affected Not affected
linux-linaro-omap — — — Not in release Not in release
linux-linaro-shared — — — Not in release Not in release
linux-linaro-vexpress — — — Not in release Not in release
linux-lts-quantal — — — Not in release Not in release
linux-lts-raring — — — Not in release Not in release
linux-lts-saucy — — — Not in release Not in release
linux-lts-trusty — — — Not in release Not in release
linux-lts-utopic — — — Not in release Not in release
linux-lts-vivid — — — Not in release Not in release
linux-lts-wily — — — Not in release Not in release
linux-lts-xenial — — — Not in release Not in release
linux-maguro — — — Not in release Not in release
linux-mako — — — Not in release Ignored
linux-manta — — — Not in release Not in release
linux-oem — — — Not affected Not affected
linux-oracle — — — Not affected Not affected
linux-qcm-msm — — — Not in release Not in release
linux-raspi2 — — — Not affected Not affected
linux-snapdragon — — — Not affected Not affected
linux-ti-omap4 — — — Not in release Not in release
Show all 36 packages Show less packages

CVE-2017-5967

Low priority

Some fixes available 11 of 41

The time subsystem in the Linux kernel through 4.9.9, when CONFIG_TIMER_STATS is enabled, allows local users to discover real PID values (as distinguished from PID values inside a PID namespace) by reading the /proc/timer_list...

64 affected packages

linux, linux-armadaxp, linux-aws, linux-aws-5.0, linux-aws-5.3...

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
linux — — Not affected Not affected Fixed
linux-armadaxp — — Not in release Not in release Not in release
linux-aws — — Not affected Not affected Fixed
linux-aws-5.0 — — Not in release Not affected Not in release
linux-aws-5.3 — — Not in release Not affected Not in release
linux-aws-5.4 — — Not in release Not affected Not in release
linux-aws-hwe — — Not in release Not in release Not affected
linux-azure — — Not affected Not affected Not affected
linux-azure-4.15 — — Not in release Not affected Not in release
linux-azure-5.3 — — Not in release Not affected Not in release
linux-azure-5.4 — — Not in release Not affected Not in release
linux-azure-edge — — Not in release Not affected Not in release
linux-dell300x — — Not in release Not affected Not in release
linux-euclid — — Not in release Not in release Ignored
linux-flo — — Not in release Not in release Ignored
linux-gcp — — Not affected Not affected Fixed
linux-gcp-4.15 — — Not in release Not affected Not in release
linux-gcp-5.3 — — Not in release Not affected Not in release
linux-gcp-5.4 — — Not in release Not affected Not in release
linux-gcp-edge — — Not in release Not affected Not in release
linux-gke — — Not affected Not in release Ignored
linux-gke-4.15 — — Not in release Not affected Not in release
linux-gke-5.0 — — Not in release Not affected Not in release
linux-gke-5.3 — — Not in release Not affected Not in release
linux-gke-5.4 — — Not in release Not affected Not in release
linux-gkeop — — Not affected Not in release Not in release
linux-gkeop-5.4 — — Not in release Not affected Not in release
linux-goldfish — — Not in release Not in release Ignored
linux-grouper — — Not in release Not in release Not in release
linux-hwe — — Not in release Not affected Fixed
linux-hwe-5.4 — — Not in release Not affected Not in release
linux-hwe-5.8 — — Not affected Not in release Not in release
linux-hwe-edge — — Not in release Not affected Fixed
linux-kvm — — Not affected Not affected Fixed
linux-linaro-omap — — Not in release Not in release Not in release
linux-linaro-shared — — Not in release Not in release Not in release
linux-linaro-vexpress — — Not in release Not in release Not in release
linux-lts-quantal — — Not in release Not in release Not in release
linux-lts-raring — — Not in release Not in release Not in release
linux-lts-saucy — — Not in release Not in release Not in release
linux-lts-trusty — — Not in release Not in release Not in release
linux-lts-utopic — — Not in release Not in release Not in release
linux-lts-vivid — — Not in release Not in release Not in release
linux-lts-wily — — Not in release Not in release Not in release
linux-lts-xenial — — Not in release Not in release Not in release
linux-maguro — — Not in release Not in release Not in release
linux-mako — — Not in release Not in release Ignored
linux-manta — — Not in release Not in release Not in release
linux-oem — — Not in release Not affected Not affected
linux-oem-5.10 — — Not affected Not in release Not in release
linux-oem-5.6 — — Not affected Not in release Not in release
linux-oem-osp1 — — Not in release Not affected Not in release
linux-oracle — — Not affected Not affected Not affected
linux-oracle-5.0 — — Not in release Not affected Not in release
linux-oracle-5.3 — — Not in release Not affected Not in release
linux-oracle-5.4 — — Not in release Not affected Not in release
linux-qcm-msm — — Not in release Not in release Not in release
linux-raspi — — Not affected Not in release Not in release
linux-raspi-5.4 — — Not in release Not affected Not in release
linux-raspi2 — — Not affected Not affected Fixed
linux-raspi2-5.3 — — Not in release Not affected Not in release
linux-riscv — — Not affected Not in release Not in release
linux-snapdragon — — Not in release Fixed Fixed
linux-ti-omap4 — — Not in release Not in release Not in release
Show all 64 packages Show less packages

CVE-2017-5970

Medium priority

Some fixes available 12 of 34

The ipv4_pktinfo_prepare function in net/ipv4/ip_sockglue.c in the Linux kernel through 4.9.9 allows attackers to cause a denial of service (system crash) via (1) an application that makes crafted system calls or possibly (2) IPv4...

32 affected packages

linux, linux-armadaxp, linux-aws, linux-azure, linux-euclid...

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
linux — — — Not affected Fixed
linux-armadaxp — — — Not in release Not in release
linux-aws — — — Not affected Fixed
linux-azure — — — Not affected Not affected
linux-euclid — — — Not in release Ignored
linux-flo — — — Not in release Ignored
linux-gcp — — — Not affected Not affected
linux-gke — — — Not in release Fixed
linux-goldfish — — — Not in release Ignored
linux-grouper — — — Not in release Not in release
linux-hwe — — — Not affected Fixed
linux-hwe-edge — — — Fixed Fixed
linux-kvm — — — Not affected Not affected
linux-linaro-omap — — — Not in release Not in release
linux-linaro-shared — — — Not in release Not in release
linux-linaro-vexpress — — — Not in release Not in release
linux-lts-quantal — — — Not in release Not in release
linux-lts-raring — — — Not in release Not in release
linux-lts-saucy — — — Not in release Not in release
linux-lts-trusty — — — Not in release Not in release
linux-lts-utopic — — — Not in release Not in release
linux-lts-vivid — — — Not in release Not in release
linux-lts-wily — — — Not in release Not in release
linux-lts-xenial — — — Not in release Not in release
linux-maguro — — — Not in release Not in release
linux-mako — — — Not in release Ignored
linux-manta — — — Not in release Not in release
linux-oem — — — Not affected Not affected
linux-qcm-msm — — — Not in release Not in release
linux-raspi2 — — — Not affected Fixed
linux-snapdragon — — — Not affected Fixed
linux-ti-omap4 — — — Not in release Not in release
Show all 32 packages Show less packages

CVE-2017-2618

Low priority

Some fixes available 11 of 28

A flaw was found in the Linux kernel's handling of clearing SELinux attributes on /proc/pid/attr files before 4.9.10. An empty (null) write to this file can crash the system by causing the system to attempt to access unmapped...

32 affected packages

linux, linux-armadaxp, linux-aws, linux-azure, linux-euclid...

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
linux — — — Not affected Fixed
linux-armadaxp — — — Not in release Not in release
linux-aws — — — Not affected Fixed
linux-azure — — — Not affected Not affected
linux-euclid — — — Not in release Ignored
linux-flo — — — Not in release Ignored
linux-gcp — — — Not affected Not affected
linux-gke — — — Not in release Not affected
linux-goldfish — — — Not in release Ignored
linux-grouper — — — Not in release Not in release
linux-hwe — — — Not affected Fixed
linux-hwe-edge — — — Fixed Fixed
linux-kvm — — — Not affected Not affected
linux-linaro-omap — — — Not in release Not in release
linux-linaro-shared — — — Not in release Not in release
linux-linaro-vexpress — — — Not in release Not in release
linux-lts-quantal — — — Not in release Not in release
linux-lts-raring — — — Not in release Not in release
linux-lts-saucy — — — Not in release Not in release
linux-lts-trusty — — — Not in release Not in release
linux-lts-utopic — — — Not in release Not in release
linux-lts-vivid — — — Not in release Not in release
linux-lts-wily — — — Not in release Not in release
linux-lts-xenial — — — Not in release Not in release
linux-maguro — — — Not in release Not in release
linux-mako — — — Not in release Ignored
linux-manta — — — Not in release Not in release
linux-oem — — — Not affected Not affected
linux-qcm-msm — — — Not in release Not in release
linux-raspi2 — — — Not affected Fixed
linux-snapdragon — — — Not affected Fixed
linux-ti-omap4 — — — Not in release Not in release
Show all 32 packages Show less packages

CVE-2016-10044

Medium priority

Some fixes available 6 of 25

The aio_mount function in fs/aio.c in the Linux kernel before 4.7.7 does not properly restrict execute access, which makes it easier for local users to bypass intended SELinux W^X policy restrictions, and consequently...

32 affected packages

linux, linux-armadaxp, linux-aws, linux-azure, linux-euclid...

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
linux — — — — Fixed
linux-armadaxp — — — — Not in release
linux-aws — — — — Not affected
linux-azure — — — — Not affected
linux-euclid — — — — Not affected
linux-flo — — — — Ignored
linux-gcp — — — — Not affected
linux-gke — — — — Not affected
linux-goldfish — — — — Ignored
linux-grouper — — — — Not in release
linux-hwe — — — — Not affected
linux-hwe-edge — — — — Not affected
linux-kvm — — — — Not affected
linux-linaro-omap — — — — Not in release
linux-linaro-shared — — — — Not in release
linux-linaro-vexpress — — — — Not in release
linux-lts-quantal — — — — Not in release
linux-lts-raring — — — — Not in release
linux-lts-saucy — — — — Not in release
linux-lts-trusty — — — — Not in release
linux-lts-utopic — — — — Not in release
linux-lts-vivid — — — — Not in release
linux-lts-wily — — — — Not in release
linux-lts-xenial — — — — Not in release
linux-maguro — — — — Not in release
linux-mako — — — — Ignored
linux-manta — — — — Not in release
linux-oem — — — — Not affected
linux-qcm-msm — — — — Not in release
linux-raspi2 — — — — Fixed
linux-snapdragon — — — — Fixed
linux-ti-omap4 — — — — Not in release
Show all 32 packages Show less packages
  1. Previous page
  2. 50
  3. 51
  4. 52
  5. 53
  6. 54
  7. Next page
Export to JSON