Your submission was sent successfully! Close

You have successfully unsubscribed! Close

Thank you for signing up for our newsletter!
In these regular emails you will find the latest updates about Ubuntu and upcoming events where you can meet our team.Close

Search CVE reports

Toggle filters

121 – 130 of 595 results

CVE-2018-19406

Medium priority
Ignored

kvm_pv_send_ipi in arch/x86/kvm/lapic.c in the Linux kernel through 4.19.2 allows local users to cause a denial of service (NULL pointer dereference and BUG) via crafted system calls that reach a situation where the apic map is...

24 affected packages

linux, linux-aws, linux-azure, linux-azure-edge, linux-euclid...

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
linux — — — Not affected Not affected
linux-aws — — — Not affected Not affected
linux-azure — — — Not affected Not affected
linux-azure-edge — — — Not affected Not affected
linux-euclid — — — Not in release Ignored
linux-flo — — — Not in release Ignored
linux-gcp — — — Not affected Not affected
linux-gke — — — Not in release Ignored
linux-goldfish — — — Not in release Ignored
linux-grouper — — — Not in release Not in release
linux-hwe — — — Not affected Not affected
linux-hwe-edge — — — Not affected Not affected
linux-kvm — — — Not affected Not affected
linux-lts-trusty — — — Not in release Not in release
linux-lts-utopic — — — Not in release Not in release
linux-lts-vivid — — — Not in release Not in release
linux-lts-wily — — — Not in release Not in release
linux-lts-xenial — — — Not in release Not in release
linux-maguro — — — Not in release Not in release
linux-mako — — — Not in release Ignored
linux-manta — — — Not in release Not in release
linux-oem — — — Not affected Ignored
linux-raspi2 — — — Not affected Not affected
linux-snapdragon — — — Not affected Not affected
Show all 24 packages Show less packages

CVE-2018-19407

Medium priority

Some fixes available 33 of 37

The vcpu_scan_ioapic function in arch/x86/kvm/x86.c in the Linux kernel through 4.19.2 allows local users to cause a denial of service (NULL pointer dereference and BUG) via crafted system calls that reach a situation where ioapic...

27 affected packages

linux, linux-aws, linux-aws-hwe, linux-azure, linux-azure-edge...

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
linux — — — Fixed Fixed
linux-aws — — — Fixed Fixed
linux-aws-hwe — — — Not in release Fixed
linux-azure — — — Fixed Fixed
linux-azure-edge — — — Fixed Fixed
linux-euclid — — — Not in release Ignored
linux-flo — — — Not in release Ignored
linux-gcp — — — Fixed Fixed
linux-gcp-edge — — — Fixed Not in release
linux-gke — — — Not in release Ignored
linux-goldfish — — — Not in release Ignored
linux-grouper — — — Not in release Not in release
linux-hwe — — — Fixed Fixed
linux-hwe-edge — — — Not affected Fixed
linux-kvm — — — Fixed Fixed
linux-lts-trusty — — — Not in release Not in release
linux-lts-utopic — — — Not in release Not in release
linux-lts-vivid — — — Not in release Not in release
linux-lts-wily — — — Not in release Not in release
linux-lts-xenial — — — Not in release Not in release
linux-maguro — — — Not in release Not in release
linux-mako — — — Not in release Ignored
linux-manta — — — Not in release Not in release
linux-oem — — — Fixed Ignored
linux-oracle — — — Fixed Fixed
linux-raspi2 — — — Fixed Fixed
linux-snapdragon — — — Not affected Fixed
Show all 27 packages Show less packages

CVE-2018-18955

Medium priority

Some fixes available 21 of 24

In the Linux kernel 4.15.x through 4.19.x before 4.19.2, map_write() in kernel/user_namespace.c allows privilege escalation because it mishandles nested user namespaces with more than 5 UID or GID ranges. A user who...

27 affected packages

linux, linux-aws, linux-aws-hwe, linux-azure, linux-azure-edge...

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
linux — — — Fixed Not affected
linux-aws — — — Fixed Not affected
linux-aws-hwe — — — Not in release Not affected
linux-azure — — — Fixed Fixed
linux-azure-edge — — — Fixed Fixed
linux-euclid — — — Not in release Not affected
linux-flo — — — Not in release Ignored
linux-gcp — — — Fixed Fixed
linux-gcp-edge — — — Not affected Not in release
linux-gke — — — Not in release Ignored
linux-goldfish — — — Not in release Ignored
linux-grouper — — — Not in release Not in release
linux-hwe — — — Not affected Fixed
linux-hwe-edge — — — Not affected Fixed
linux-kvm — — — Fixed Not affected
linux-lts-trusty — — — Not in release Not in release
linux-lts-utopic — — — Not in release Not in release
linux-lts-vivid — — — Not in release Not in release
linux-lts-wily — — — Not in release Not in release
linux-lts-xenial — — — Not in release Not in release
linux-maguro — — — Not in release Not in release
linux-mako — — — Not in release Ignored
linux-manta — — — Not in release Not in release
linux-oem — — — Fixed Ignored
linux-oracle — — — Not affected Not affected
linux-raspi2 — — — Fixed Not affected
linux-snapdragon — — — Not affected Not affected
Show all 27 packages Show less packages

CVE-2018-9465

Low priority

Some fixes available 5 of 9

In task_get_unused_fd_flags of binder.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not...

27 affected packages

linux, linux-aws, linux-aws-hwe, linux-azure, linux-azure-edge...

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
linux — — — Not affected Not affected
linux-aws — — — Not affected Not affected
linux-aws-hwe — — — Not in release Not affected
linux-azure — — — Not affected Fixed
linux-azure-edge — — — Not affected Fixed
linux-euclid — — — Not in release Ignored
linux-flo — — — Not in release Ignored
linux-gcp — — — Not affected Fixed
linux-gcp-edge — — — Not affected Not in release
linux-gke — — — Not affected Ignored
linux-goldfish — — — Not in release Ignored
linux-grouper — — — Not in release Not in release
linux-hwe — — — Not affected Fixed
linux-hwe-edge — — — Not affected Fixed
linux-kvm — — — Not affected Not affected
linux-lts-trusty — — — Not in release Not in release
linux-lts-utopic — — — Not in release Not in release
linux-lts-vivid — — — Not in release Not in release
linux-lts-wily — — — Not in release Not in release
linux-lts-xenial — — — Not in release Not in release
linux-maguro — — — Not in release Not in release
linux-mako — — — Not in release Ignored
linux-manta — — — Not in release Not in release
linux-oem — — — Not affected Ignored
linux-oracle — — — Not affected Not affected
linux-raspi2 — — — Not affected Not affected
linux-snapdragon — — — Not affected Not affected
Show all 27 packages Show less packages

CVE-2018-9422

Medium priority

Some fixes available 9 of 17

In get_futex_key of futex.c, there is a use-after-free due to improper locking. This could lead to local escalation of privilege with no additional privileges needed. User interaction is not needed for exploitation. Product:...

27 affected packages

linux, linux-aws, linux-aws-hwe, linux-azure, linux-azure-edge...

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
linux — — — Not affected Fixed
linux-aws — — — Not affected Fixed
linux-aws-hwe — — — Not in release Not affected
linux-azure — — — Not affected Not affected
linux-azure-edge — — — Not affected Not affected
linux-euclid — — — Not in release Ignored
linux-flo — — — Not in release Ignored
linux-gcp — — — Not affected Not affected
linux-gcp-edge — — — Not affected Not in release
linux-gke — — — Not affected Ignored
linux-goldfish — — — Not in release Ignored
linux-grouper — — — Not in release Not in release
linux-hwe — — — Not affected Not affected
linux-hwe-edge — — — Not affected Not affected
linux-kvm — — — Not affected Fixed
linux-lts-trusty — — — Not in release Not in release
linux-lts-utopic — — — Not in release Not in release
linux-lts-vivid — — — Not in release Not in release
linux-lts-wily — — — Not in release Not in release
linux-lts-xenial — — — Not in release Not in release
linux-maguro — — — Not in release Not in release
linux-mako — — — Not in release Ignored
linux-manta — — — Not in release Not in release
linux-oem — — — Not affected Not affected
linux-oracle — — — Not affected Not affected
linux-raspi2 — — — Not affected Fixed
linux-snapdragon — — — Fixed Fixed
Show all 27 packages Show less packages

CVE-2018-9385

Low priority

Some fixes available 19 of 23

In driver_override_store of bus.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed...

24 affected packages

linux, linux-aws, linux-azure, linux-azure-edge, linux-euclid...

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
linux — — — Fixed Fixed
linux-aws — — — Fixed Fixed
linux-azure — — — Fixed Fixed
linux-azure-edge — — — Not affected Fixed
linux-euclid — — — Not in release Ignored
linux-flo — — — Not in release Ignored
linux-gcp — — — Fixed Fixed
linux-gke — — — Not in release Ignored
linux-goldfish — — — Not in release Ignored
linux-grouper — — — Not in release Not in release
linux-hwe — — — Not affected Fixed
linux-hwe-edge — — — Not affected Fixed
linux-kvm — — — Fixed Fixed
linux-lts-trusty — — — Not in release Not in release
linux-lts-utopic — — — Not in release Not in release
linux-lts-vivid — — — Not in release Not in release
linux-lts-wily — — — Not in release Not in release
linux-lts-xenial — — — Not in release Not in release
linux-maguro — — — Not in release Not in release
linux-mako — — — Not in release Ignored
linux-manta — — — Not in release Not in release
linux-oem — — — Fixed Ignored
linux-raspi2 — — — Fixed Fixed
linux-snapdragon — — — Not affected Fixed
Show all 24 packages Show less packages

CVE-2018-9516

Negligible priority

Some fixes available 27 of 35

In hid_debug_events_read of drivers/hid/hid-debug.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction...

27 affected packages

linux, linux-aws, linux-aws-hwe, linux-azure, linux-azure-edge...

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
linux — — — Fixed Fixed
linux-aws — — — Fixed Fixed
linux-aws-hwe — — — Not in release Fixed
linux-azure — — — Fixed Fixed
linux-azure-edge — — — Fixed Fixed
linux-euclid — — — Not in release Ignored
linux-flo — — — Not in release Ignored
linux-gcp — — — Fixed Fixed
linux-gcp-edge — — — Not affected Not in release
linux-gke — — — Not affected Ignored
linux-goldfish — — — Not in release Ignored
linux-grouper — — — Not in release Not in release
linux-hwe — — — Not affected Fixed
linux-hwe-edge — — — Not affected Fixed
linux-kvm — — — Fixed Fixed
linux-lts-trusty — — — Not in release Not in release
linux-lts-utopic — — — Not in release Not in release
linux-lts-vivid — — — Not in release Not in release
linux-lts-wily — — — Not in release Not in release
linux-lts-xenial — — — Not in release Not in release
linux-maguro — — — Not in release Not in release
linux-mako — — — Not in release Ignored
linux-manta — — — Not in release Not in release
linux-oem — — — Fixed Ignored
linux-oracle — — — Fixed Fixed
linux-raspi2 — — — Fixed Fixed
linux-snapdragon — — — Fixed Fixed
Show all 27 packages Show less packages

CVE-2018-18281

Medium priority

Some fixes available 32 of 41

Since Linux kernel version 3.2, the mremap() syscall performs TLB flushes after dropping pagetable locks. If a syscall such as ftruncate() removes entries from the pagetables of a task that is in the middle of mremap(), a stale...

46 affected packages

linux, linux-aws, linux-aws-5.0, linux-aws-5.3, linux-aws-hwe...

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
linux — — Not affected Fixed Fixed
linux-aws — — Not affected Fixed Fixed
linux-aws-5.0 — — Not in release Not affected Not in release
linux-aws-5.3 — — Not in release Not affected Not in release
linux-aws-hwe — — Not in release Not in release Fixed
linux-azure — — Not affected Fixed Fixed
linux-azure-4.15 — — Not in release Not affected Not in release
linux-azure-5.3 — — Not in release Not affected Not in release
linux-azure-5.4 — — Not in release Not affected Not in release
linux-azure-edge — — Not in release Fixed Not in release
linux-euclid — — Not in release Not in release Ignored
linux-flo — — Not in release Not in release Ignored
linux-gcp — — Not affected Fixed Fixed
linux-gcp-4.15 — — Not in release Not affected Not in release
linux-gcp-5.3 — — Not in release Not affected Not in release
linux-gcp-edge — — Not in release Fixed Not in release
linux-gke — — Not affected Not in release Ignored
linux-gke-4.15 — — Not in release Not affected Not in release
linux-gke-5.0 — — Not in release Not affected Not in release
linux-gke-5.3 — — Not in release Not affected Not in release
linux-goldfish — — Not in release Not in release Ignored
linux-grouper — — Not in release Not in release Not in release
linux-hwe — — Not in release Not affected Fixed
linux-hwe-5.4 — — Not in release Not affected Not in release
linux-hwe-edge — — Not in release Not affected Fixed
linux-kvm — — Not affected Fixed Fixed
linux-lts-trusty — — Not in release Not in release Not in release
linux-lts-utopic — — Not in release Not in release Not in release
linux-lts-vivid — — Not in release Not in release Not in release
linux-lts-wily — — Not in release Not in release Not in release
linux-lts-xenial — — Not in release Not in release Not in release
linux-maguro — — Not in release Not in release Not in release
linux-mako — — Not in release Not in release Ignored
linux-manta — — Not in release Not in release Not in release
linux-oem — — Not in release Fixed Ignored
linux-oem-5.6 — — Not affected Not in release Not in release
linux-oem-osp1 — — Not in release Not affected Not in release
linux-oracle — — Not affected Fixed Fixed
linux-oracle-5.0 — — Not in release Not affected Not in release
linux-oracle-5.3 — — Not in release Not affected Not in release
linux-raspi — — Not affected Not in release Not in release
linux-raspi-5.4 — — Not in release Not affected Not in release
linux-raspi2 — — Not affected Fixed Fixed
linux-raspi2-5.3 — — Not in release Not affected Not in release
linux-riscv — — Not affected Not in release Not in release
linux-snapdragon — — Not in release Fixed Fixed
Show all 46 packages Show less packages

CVE-2018-18710

Medium priority

Some fixes available 31 of 35

An issue was discovered in the Linux kernel through 4.19. An information leak in cdrom_ioctl_select_disc in drivers/cdrom/cdrom.c could be used by local attackers to read kernel memory because a cast from unsigned long to int...

27 affected packages

linux, linux-aws, linux-aws-hwe, linux-azure, linux-azure-edge...

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
linux — — — Fixed Fixed
linux-aws — — — Fixed Fixed
linux-aws-hwe — — — Not in release Fixed
linux-azure — — — Fixed Fixed
linux-azure-edge — — — Fixed Fixed
linux-euclid — — — Not in release Ignored
linux-flo — — — Not in release Ignored
linux-gcp — — — Fixed Fixed
linux-gcp-edge — — — Fixed Not in release
linux-gke — — — Not in release Ignored
linux-goldfish — — — Not in release Ignored
linux-grouper — — — Not in release Not in release
linux-hwe — — — Not affected Fixed
linux-hwe-edge — — — Not affected Fixed
linux-kvm — — — Fixed Fixed
linux-lts-trusty — — — Not in release Not in release
linux-lts-utopic — — — Not in release Not in release
linux-lts-vivid — — — Not in release Not in release
linux-lts-wily — — — Not in release Not in release
linux-lts-xenial — — — Not in release Not in release
linux-maguro — — — Not in release Not in release
linux-mako — — — Not in release Ignored
linux-manta — — — Not in release Not in release
linux-oem — — — Fixed Ignored
linux-oracle — — — Not affected Not affected
linux-raspi2 — — — Fixed Fixed
linux-snapdragon — — — Not affected Fixed
Show all 27 packages Show less packages

CVE-2018-18690

Medium priority

Some fixes available 24 of 28

In the Linux kernel before 4.17, a local attacker able to set attributes on an xfs filesystem could make this filesystem non-operational until the next mount by triggering an unchecked error condition during an xfs...

27 affected packages

linux, linux-aws, linux-aws-hwe, linux-azure, linux-azure-edge...

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
linux — — — Fixed Fixed
linux-aws — — — Fixed Fixed
linux-aws-hwe — — — Not in release Fixed
linux-azure — — — Fixed Fixed
linux-azure-edge — — — Fixed Fixed
linux-euclid — — — Not in release Ignored
linux-flo — — — Not in release Ignored
linux-gcp — — — Fixed Fixed
linux-gcp-edge — — — Not affected Not in release
linux-gke — — — Not in release Ignored
linux-goldfish — — — Not in release Ignored
linux-grouper — — — Not in release Not in release
linux-hwe — — — Not affected Fixed
linux-hwe-edge — — — Not affected Fixed
linux-kvm — — — Fixed Fixed
linux-lts-trusty — — — Not in release Not in release
linux-lts-utopic — — — Not in release Not in release
linux-lts-vivid — — — Not in release Not in release
linux-lts-wily — — — Not in release Not in release
linux-lts-xenial — — — Not in release Not in release
linux-maguro — — — Not in release Not in release
linux-mako — — — Not in release Ignored
linux-manta — — — Not in release Not in release
linux-oem — — — Fixed Ignored
linux-oracle — — — Not affected Not affected
linux-raspi2 — — — Fixed Fixed
linux-snapdragon — — — Not affected Fixed
Show all 27 packages Show less packages
  1. Previous page
  2. 11
  3. 12
  4. 13
  5. 14
  6. 15
  7. Next page
Export to JSON