UBUNTU-CVE-2023-1637

See a problem?
Please try reporting it to the source first.

Source

https://ubuntu.com/security/CVE-2023-1637

Import Source

https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-1637.json

JSON Data

https://api.osv.dev/v1/vulns/UBUNTU-CVE-2023-1637

Upstream

CVE-2023-1637

Published

2023-03-27T22:15:00Z

Modified

2026-10-22T23:19:55Z

Severity

5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
Ubuntu - low

Summary

[none]

Details

A flaw that boot CPU could be vulnerable for the speculative execution behavior kind of attacks in the Linux kernel X86 CPU Power management options functionality was found in the way user resuming CPU from suspend-to-RAM. A local user could use this flaw to potentially get unauthorized access to some memory of the CPU similar to the speculative execution behavior kind of attacks.

References

Affected packages

Ubuntu:16.04:LTS

linux-hwe-edge

Package

Name: linux-hwe-edge
Purl: pkg:deb/ubuntu/linux-hwe-edge?arch=source&distro=xenial

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

4.*

4.8.0-28.30~16.04.1

4.8.0-30.32~16.04.1

4.8.0-32.34~16.04.1

4.8.0-34.36~16.04.1

4.10.0-14.16~16.04.1

4.10.0-19.21~16.04.1

4.10.0-20.22~16.04.1

4.10.0-21.23~16.04.1

4.10.0-22.24~16.04.1

4.10.0-24.28~16.04.1

4.10.0-26.30~16.04.1

4.11.0-13.19~16.04.1

4.11.0-14.20~16.04.1

4.13.0-16.19~16.04.3

4.13.0-17.20~16.04.1

4.13.0-19.22~16.04.1

4.13.0-21.24~16.04.1

4.13.0-25.29~16.04.2

4.15.0-13.14~16.04.1

4.15.0-15.16~16.04.1

4.15.0-20.21~16.04.1

4.15.0-22.24~16.04.1

4.15.0-23.25~16.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "block-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "block-modules-4.15.0-23-generic-lpae-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "crypto-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "crypto-modules-4.15.0-23-generic-lpae-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "dasd-extra-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "dasd-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "fat-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "fat-modules-4.15.0-23-generic-lpae-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "fb-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "firewire-core-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "floppy-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "fs-core-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "fs-core-modules-4.15.0-23-generic-lpae-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "fs-secondary-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "fs-secondary-modules-4.15.0-23-generic-lpae-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "input-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "input-modules-4.15.0-23-generic-lpae-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "ipmi-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "ipmi-modules-4.15.0-23-generic-lpae-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "irda-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "irda-modules-4.15.0-23-generic-lpae-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "kernel-image-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "kernel-image-4.15.0-23-generic-lpae-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-4.15.0-23-generic",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-4.15.0-23-lowlatency",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "linux-headers-4.15.0-23",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "linux-headers-4.15.0-23-generic",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "linux-headers-4.15.0-23-generic-lpae",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "linux-headers-4.15.0-23-lowlatency",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "linux-hwe-edge-cloud-tools-4.15.0-23",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "linux-hwe-edge-tools-4.15.0-23",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "linux-hwe-edge-udebs-generic",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "linux-hwe-edge-udebs-generic-lpae",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "linux-image-4.15.0-23-generic",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "linux-image-4.15.0-23-generic-lpae",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "linux-image-4.15.0-23-lowlatency",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-4.15.0-23-generic",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-4.15.0-23-lowlatency",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "linux-modules-4.15.0-23-generic",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "linux-modules-4.15.0-23-generic-lpae",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "linux-modules-4.15.0-23-lowlatency",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-4.15.0-23-generic",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "linux-source-4.15.0",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "linux-tools-4.15.0-23-generic",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "linux-tools-4.15.0-23-generic-lpae",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "linux-tools-4.15.0-23-lowlatency",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "md-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "md-modules-4.15.0-23-generic-lpae-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "message-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "mouse-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "mouse-modules-4.15.0-23-generic-lpae-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "multipath-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "multipath-modules-4.15.0-23-generic-lpae-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "nfs-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "nfs-modules-4.15.0-23-generic-lpae-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "nic-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "nic-modules-4.15.0-23-generic-lpae-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "nic-pcmcia-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "nic-shared-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "nic-shared-modules-4.15.0-23-generic-lpae-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "nic-usb-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "nic-usb-modules-4.15.0-23-generic-lpae-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "parport-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "parport-modules-4.15.0-23-generic-lpae-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "pata-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "pcmcia-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "pcmcia-storage-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "plip-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "plip-modules-4.15.0-23-generic-lpae-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "ppp-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "ppp-modules-4.15.0-23-generic-lpae-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "sata-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "sata-modules-4.15.0-23-generic-lpae-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "scsi-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "scsi-modules-4.15.0-23-generic-lpae-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "serial-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "storage-core-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "storage-core-modules-4.15.0-23-generic-lpae-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "usb-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "usb-modules-4.15.0-23-generic-lpae-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "virtio-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "vlan-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "vlan-modules-4.15.0-23-generic-lpae-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        }
    ],
    "priority_reason":  "The vulnerability depends on an S3 suspend/resume cycle occurring, which the attacker can neither invoke (requires root to write /sys/power/state) nor influence, making it not reliably triggerable by an unprivileged attacker."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-1637.json"

Ubuntu:18.04:LTS

linux-aws-5.4

Package

Name: linux-aws-5.4
Purl: pkg:deb/ubuntu/linux-aws-5.4?arch=source&distro=bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

5.4.0-1078.84~18.04.1

Affected versions

5.*

5.4.0-1018.18~18.04.1

5.4.0-1020.20~18.04.2

5.4.0-1022.22~18.04.1

5.4.0-1024.24~18.04.1

5.4.0-1025.25~18.04.1

5.4.0-1028.29~18.04.1

5.4.0-1029.30~18.04.1

5.4.0-1030.31~18.04.1

5.4.0-1032.33~18.04.1

5.4.0-1034.35~18.04.1

5.4.0-1035.37~18.04.1

5.4.0-1037.39~18.04.1

5.4.0-1038.40~18.04.1

5.4.0-1039.41~18.04.1

5.4.0-1041.43~18.04.1

5.4.0-1043.45~18.04.1

5.4.0-1045.47~18.04.1

5.4.0-1047.49~18.04.1

5.4.0-1048.50~18.04.1

5.4.0-1049.51~18.04.1

5.4.0-1051.53~18.04.1

5.4.0-1054.57~18.04.1

5.4.0-1055.58~18.04.1

5.4.0-1056.59~18.04.1

5.4.0-1057.60~18.04.1

5.4.0-1058.61~18.04.3

5.4.0-1059.62~18.04.1

5.4.0-1060.63~18.04.1

5.4.0-1061.64~18.04.1

5.4.0-1063.66~18.04.1

5.4.0-1064.67~18.04.1

5.4.0-1065.68~18.04.1

5.4.0-1066.69~18.04.1

5.4.0-1068.72~18.04.1

5.4.0-1069.73~18.04.1

5.4.0-1071.76~18.04.1

5.4.0-1072.77~18.04.1

5.4.0-1075.80~18.04.1

Ecosystem specific

{
    "availability":  "No subscription required",
    "binaries":  [
        {
            "binary_name":  "linux-aws-5.4-cloud-tools-5.4.0-1078",
            "binary_version":  "5.4.0-1078.84~18.04.1"
        },
        {
            "binary_name":  "linux-aws-5.4-headers-5.4.0-1078",
            "binary_version":  "5.4.0-1078.84~18.04.1"
        },
        {
            "binary_name":  "linux-aws-5.4-tools-5.4.0-1078",
            "binary_version":  "5.4.0-1078.84~18.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-5.4.0-1078-aws",
            "binary_version":  "5.4.0-1078.84~18.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-5.4.0-1078-aws",
            "binary_version":  "5.4.0-1078.84~18.04.1"
        },
        {
            "binary_name":  "linux-headers-5.4.0-1078-aws",
            "binary_version":  "5.4.0-1078.84~18.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.4.0-1078-aws",
            "binary_version":  "5.4.0-1078.84~18.04.1"
        },
        {
            "binary_name":  "linux-modules-5.4.0-1078-aws",
            "binary_version":  "5.4.0-1078.84~18.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-5.4.0-1078-aws",
            "binary_version":  "5.4.0-1078.84~18.04.1"
        },
        {
            "binary_name":  "linux-tools-5.4.0-1078-aws",
            "binary_version":  "5.4.0-1078.84~18.04.1"
        }
    ],
    "priority_reason":  "The vulnerability depends on an S3 suspend/resume cycle occurring, which the attacker can neither invoke (requires root to write /sys/power/state) nor influence, making it not reliably triggerable by an unprivileged attacker."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-1637.json"

linux-azure-5.4

Package

Name: linux-azure-5.4
Purl: pkg:deb/ubuntu/linux-azure-5.4?arch=source&distro=bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

5.4.0-1083.87~18.04.1

Affected versions

5.*

5.4.0-1020.20~18.04.1

5.4.0-1022.22~18.04.1

5.4.0-1023.23~18.04.1

5.4.0-1025.25~18.04.1

5.4.0-1026.26~18.04.1

5.4.0-1031.32~18.04.1

5.4.0-1032.33~18.04.1

5.4.0-1034.35~18.04.1

5.4.0-1035.36~18.04.1

5.4.0-1036.38~18.04.1

5.4.0-1039.41~18.04.1

5.4.0-1040.42~18.04.1

5.4.0-1041.43~18.04.1

5.4.0-1043.45~18.04.1

5.4.0-1044.46~18.04.1

5.4.0-1046.48~18.04.1

5.4.0-1047.49~18.04.1

5.4.0-1048.50~18.04.1

5.4.0-1049.51~18.04.1

5.4.0-1051.53~18.04.1

5.4.0-1055.57~18.04.1

5.4.0-1056.58~18.04.1

5.4.0-1058.60~18.04.1

5.4.0-1059.62~18.04.1

5.4.0-1061.64~18.04.1

5.4.0-1062.65~18.04.1

5.4.0-1063.66~18.04.1

5.4.0-1064.67~18.04.1

5.4.0-1065.68~18.04.1

5.4.0-1067.70~18.04.1

5.4.0-1068.71~18.04.1

5.4.0-1069.72~18.04.1

5.4.0-1070.73~18.04.1

5.4.0-1072.75~18.04.1

5.4.0-1073.76~18.04.1

5.4.0-1074.77~18.04.1

5.4.0-1077.80~18.04.1

5.4.0-1078.81~18.04.1

5.4.0-1080.83~18.04.2

Ecosystem specific

{
    "availability":  "No subscription required",
    "binaries":  [
        {
            "binary_name":  "linux-azure-5.4-cloud-tools-5.4.0-1083",
            "binary_version":  "5.4.0-1083.87~18.04.1"
        },
        {
            "binary_name":  "linux-azure-5.4-headers-5.4.0-1083",
            "binary_version":  "5.4.0-1083.87~18.04.1"
        },
        {
            "binary_name":  "linux-azure-5.4-tools-5.4.0-1083",
            "binary_version":  "5.4.0-1083.87~18.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-5.4.0-1083-azure",
            "binary_version":  "5.4.0-1083.87~18.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-5.4.0-1083-azure",
            "binary_version":  "5.4.0-1083.87~18.04.1"
        },
        {
            "binary_name":  "linux-headers-5.4.0-1083-azure",
            "binary_version":  "5.4.0-1083.87~18.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.4.0-1083-azure",
            "binary_version":  "5.4.0-1083.87~18.04.1"
        },
        {
            "binary_name":  "linux-modules-5.4.0-1083-azure",
            "binary_version":  "5.4.0-1083.87~18.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-5.4.0-1083-azure",
            "binary_version":  "5.4.0-1083.87~18.04.1"
        },
        {
            "binary_name":  "linux-tools-5.4.0-1083-azure",
            "binary_version":  "5.4.0-1083.87~18.04.1"
        }
    ],
    "priority_reason":  "The vulnerability depends on an S3 suspend/resume cycle occurring, which the attacker can neither invoke (requires root to write /sys/power/state) nor influence, making it not reliably triggerable by an unprivileged attacker."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-1637.json"

linux-gcp-5.4

Package

Name: linux-gcp-5.4
Purl: pkg:deb/ubuntu/linux-gcp-5.4?arch=source&distro=bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

5.4.0-1078.84~18.04.1

Affected versions

5.*

5.4.0-1019.19~18.04.2

5.4.0-1021.21~18.04.1

5.4.0-1022.22~18.04.1

5.4.0-1024.24~18.04.1

5.4.0-1025.25~18.04.1

5.4.0-1028.29~18.04.1

5.4.0-1029.31~18.04.1

5.4.0-1030.32~18.04.1

5.4.0-1032.34~18.04.1

5.4.0-1033.35~18.04.1

5.4.0-1034.37~18.04.1

5.4.0-1036.39~18.04.1

5.4.0-1037.40~18.04.1

5.4.0-1038.41~18.04.1

5.4.0-1040.43~18.04.1

5.4.0-1041.44~18.04.1

5.4.0-1042.45~18.04.1

5.4.0-1043.46~18.04.1

5.4.0-1044.47~18.04.2

5.4.0-1046.49~18.04.1

5.4.0-1049.53~18.04.1

5.4.0-1051.55~18.04.1

5.4.0-1052.56~18.04.1

5.4.0-1053.57~18.04.1

5.4.0-1055.59~18.04.1

5.4.0-1056.60~18.04.1

5.4.0-1057.61~18.04.1

5.4.0-1058.62~18.04.1

5.4.0-1059.63~18.04.1

5.4.0-1060.64~18.04.1

5.4.0-1062.66~18.04.1

5.4.0-1063.67~18.04.1

5.4.0-1064.68~18.04.1

5.4.0-1065.69~18.04.1

5.4.0-1067.71~18.04.1

5.4.0-1068.72~18.04.1

5.4.0-1069.73~18.04.1

5.4.0-1072.77~18.04.1

5.4.0-1073.78~18.04.1

5.4.0-1075.80~18.04.1

Ecosystem specific

{
    "availability":  "No subscription required",
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.4.0-1078-gcp",
            "binary_version":  "5.4.0-1078.84~18.04.1"
        },
        {
            "binary_name":  "linux-gcp-5.4-headers-5.4.0-1078",
            "binary_version":  "5.4.0-1078.84~18.04.1"
        },
        {
            "binary_name":  "linux-gcp-5.4-tools-5.4.0-1078",
            "binary_version":  "5.4.0-1078.84~18.04.1"
        },
        {
            "binary_name":  "linux-headers-5.4.0-1078-gcp",
            "binary_version":  "5.4.0-1078.84~18.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.4.0-1078-gcp",
            "binary_version":  "5.4.0-1078.84~18.04.1"
        },
        {
            "binary_name":  "linux-modules-5.4.0-1078-gcp",
            "binary_version":  "5.4.0-1078.84~18.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-5.4.0-1078-gcp",
            "binary_version":  "5.4.0-1078.84~18.04.1"
        },
        {
            "binary_name":  "linux-tools-5.4.0-1078-gcp",
            "binary_version":  "5.4.0-1078.84~18.04.1"
        }
    ],
    "priority_reason":  "The vulnerability depends on an S3 suspend/resume cycle occurring, which the attacker can neither invoke (requires root to write /sys/power/state) nor influence, making it not reliably triggerable by an unprivileged attacker."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-1637.json"

linux-hwe-5.4

Package

Name: linux-hwe-5.4
Purl: pkg:deb/ubuntu/linux-hwe-5.4?arch=source&distro=bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

5.4.0-117.132~18.04.1

Affected versions

5.*

5.4.0-37.41~18.04.1

5.4.0-39.43~18.04.1

5.4.0-40.44~18.04.1

5.4.0-42.46~18.04.1

5.4.0-45.49~18.04.2

5.4.0-47.51~18.04.1

5.4.0-48.52~18.04.1

5.4.0-51.56~18.04.1

5.4.0-52.57~18.04.1

5.4.0-53.59~18.04.1

5.4.0-54.60~18.04.1

5.4.0-56.62~18.04.1

5.4.0-58.64~18.04.1

5.4.0-59.65~18.04.1

5.4.0-60.67~18.04.1

5.4.0-62.70~18.04.1

5.4.0-64.72~18.04.1

5.4.0-65.73~18.04.1

5.4.0-66.74~18.04.2

5.4.0-67.75~18.04.1

5.4.0-70.78~18.04.1

5.4.0-71.79~18.04.1

5.4.0-72.80~18.04.1

5.4.0-73.82~18.04.1

5.4.0-74.83~18.04.1

5.4.0-77.86~18.04.1

5.4.0-80.90~18.04.1

5.4.0-81.91~18.04.1

5.4.0-84.94~18.04.1

5.4.0-86.97~18.04.1

5.4.0-87.98~18.04.1

5.4.0-89.100~18.04.1

5.4.0-90.101~18.04.1

5.4.0-91.102~18.04.1

5.4.0-92.103~18.04.2

5.4.0-94.106~18.04.1

5.4.0-96.109~18.04.1

5.4.0-97.110~18.04.1

5.4.0-99.112~18.04.1

5.4.0-100.113~18.04.1

5.4.0-104.118~18.04.1

5.4.0-105.119~18.04.1

5.4.0-107.121~18.04.1

5.4.0-109.123~18.04.1

5.4.0-110.124~18.04.1

5.4.0-113.127~18.04.1

Ecosystem specific

{
    "availability":  "No subscription required",
    "binaries":  [
        {
            "binary_name":  "block-modules-5.4.0-117-generic-di",
            "binary_version":  "5.4.0-117.132~18.04.1"
        },
        {
            "binary_name":  "block-modules-5.4.0-117-generic-lpae-di",
            "binary_version":  "5.4.0-117.132~18.04.1"
        },
        {
            "binary_name":  "crypto-modules-5.4.0-117-generic-di",
            "binary_version":  "5.4.0-117.132~18.04.1"
        },
        {
            "binary_name":  "crypto-modules-5.4.0-117-generic-lpae-di",
            "binary_version":  "5.4.0-117.132~18.04.1"
        },
        {
            "binary_name":  "dasd-extra-modules-5.4.0-117-generic-di",
            "binary_version":  "5.4.0-117.132~18.04.1"
        },
        {
            "binary_name":  "dasd-modules-5.4.0-117-generic-di",
            "binary_version":  "5.4.0-117.132~18.04.1"
        },
        {
            "binary_name":  "fat-modules-5.4.0-117-generic-di",
            "binary_version":  "5.4.0-117.132~18.04.1"
        },
        {
            "binary_name":  "fat-modules-5.4.0-117-generic-lpae-di",
            "binary_version":  "5.4.0-117.132~18.04.1"
        },
        {
            "binary_name":  "fb-modules-5.4.0-117-generic-di",
            "binary_version":  "5.4.0-117.132~18.04.1"
        },
        {
            "binary_name":  "firewire-core-modules-5.4.0-117-generic-di",
            "binary_version":  "5.4.0-117.132~18.04.1"
        },
        {
            "binary_name":  "floppy-modules-5.4.0-117-generic-di",
            "binary_version":  "5.4.0-117.132~18.04.1"
        },
        {
            "binary_name":  "fs-core-modules-5.4.0-117-generic-di",
            "binary_version":  "5.4.0-117.132~18.04.1"
        },
        {
            "binary_name":  "fs-core-modules-5.4.0-117-generic-lpae-di",
            "binary_version":  "5.4.0-117.132~18.04.1"
        },
        {
            "binary_name":  "fs-secondary-modules-5.4.0-117-generic-di",
            "binary_version":  "5.4.0-117.132~18.04.1"
        },
        {
            "binary_name":  "fs-secondary-modules-5.4.0-117-generic-lpae-di",
            "binary_version":  "5.4.0-117.132~18.04.1"
        },
        {
            "binary_name":  "input-modules-5.4.0-117-generic-di",
            "binary_version":  "5.4.0-117.132~18.04.1"
        },
        {
            "binary_name":  "input-modules-5.4.0-117-generic-lpae-di",
            "binary_version":  "5.4.0-117.132~18.04.1"
        },
        {
            "binary_name":  "ipmi-modules-5.4.0-117-generic-di",
            "binary_version":  "5.4.0-117.132~18.04.1"
        },
        {
            "binary_name":  "ipmi-modules-5.4.0-117-generic-lpae-di",
            "binary_version":  "5.4.0-117.132~18.04.1"
        },
        {
            "binary_name":  "kernel-image-5.4.0-117-generic-di",
            "binary_version":  "5.4.0-117.132~18.04.1"
        },
        {
            "binary_name":  "kernel-image-5.4.0-117-generic-lpae-di",
            "binary_version":  "5.4.0-117.132~18.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-5.4.0-117-generic",
            "binary_version":  "5.4.0-117.132~18.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-5.4.0-117-generic-lpae",
            "binary_version":  "5.4.0-117.132~18.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-5.4.0-117-lowlatency",
            "binary_version":  "5.4.0-117.132~18.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-5.4.0-117-generic",
            "binary_version":  "5.4.0-117.132~18.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-5.4.0-117-lowlatency",
            "binary_version":  "5.4.0-117.132~18.04.1"
        },
        {
            "binary_name":  "linux-headers-5.4.0-117-generic",
            "binary_version":  "5.4.0-117.132~18.04.1"
        },
        {
            "binary_name":  "linux-headers-5.4.0-117-generic-lpae",
            "binary_version":  "5.4.0-117.132~18.04.1"
        },
        {
            "binary_name":  "linux-headers-5.4.0-117-lowlatency",
            "binary_version":  "5.4.0-117.132~18.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.4-cloud-tools-5.4.0-117",
            "binary_version":  "5.4.0-117.132~18.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.4-cloud-tools-common",
            "binary_version":  "5.4.0-117.132~18.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.4-headers-5.4.0-117",
            "binary_version":  "5.4.0-117.132~18.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.4-source-5.4.0",
            "binary_version":  "5.4.0-117.132~18.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.4-tools-5.4.0-117",
            "binary_version":  "5.4.0-117.132~18.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.4-tools-common",
            "binary_version":  "5.4.0-117.132~18.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.4-udebs-generic",
            "binary_version":  "5.4.0-117.132~18.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.4-udebs-generic-lpae",
            "binary_version":  "5.4.0-117.132~18.04.1"
        },
        {
            "binary_name":  "linux-image-5.4.0-117-generic",
            "binary_version":  "5.4.0-117.132~18.04.1"
        },
        {
            "binary_name":  "linux-image-5.4.0-117-generic-lpae",
            "binary_version":  "5.4.0-117.132~18.04.1"
        },
        {
            "binary_name":  "linux-image-5.4.0-117-lowlatency",
            "binary_version":  "5.4.0-117.132~18.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.4.0-117-generic",
            "binary_version":  "5.4.0-117.132~18.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.4.0-117-lowlatency",
            "binary_version":  "5.4.0-117.132~18.04.1"
        },
        {
            "binary_name":  "linux-modules-5.4.0-117-generic",
            "binary_version":  "5.4.0-117.132~18.04.1"
        },
        {
            "binary_name":  "linux-modules-5.4.0-117-generic-lpae",
            "binary_version":  "5.4.0-117.132~18.04.1"
        },
        {
            "binary_name":  "linux-modules-5.4.0-117-lowlatency",
            "binary_version":  "5.4.0-117.132~18.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-5.4.0-117-generic",
            "binary_version":  "5.4.0-117.132~18.04.1"
        },
        {
            "binary_name":  "linux-tools-5.4.0-117-generic",
            "binary_version":  "5.4.0-117.132~18.04.1"
        },
        {
            "binary_name":  "linux-tools-5.4.0-117-generic-lpae",
            "binary_version":  "5.4.0-117.132~18.04.1"
        },
        {
            "binary_name":  "linux-tools-5.4.0-117-lowlatency",
            "binary_version":  "5.4.0-117.132~18.04.1"
        },
        {
            "binary_name":  "md-modules-5.4.0-117-generic-di",
            "binary_version":  "5.4.0-117.132~18.04.1"
        },
        {
            "binary_name":  "md-modules-5.4.0-117-generic-lpae-di",
            "binary_version":  "5.4.0-117.132~18.04.1"
        },
        {
            "binary_name":  "message-modules-5.4.0-117-generic-di",
            "binary_version":  "5.4.0-117.132~18.04.1"
        },
        {
            "binary_name":  "mouse-modules-5.4.0-117-generic-di",
            "binary_version":  "5.4.0-117.132~18.04.1"
        },
        {
            "binary_name":  "mouse-modules-5.4.0-117-generic-lpae-di",
            "binary_version":  "5.4.0-117.132~18.04.1"
        },
        {
            "binary_name":  "multipath-modules-5.4.0-117-generic-di",
            "binary_version":  "5.4.0-117.132~18.04.1"
        },
        {
            "binary_name":  "multipath-modules-5.4.0-117-generic-lpae-di",
            "binary_version":  "5.4.0-117.132~18.04.1"
        },
        {
            "binary_name":  "nfs-modules-5.4.0-117-generic-di",
            "binary_version":  "5.4.0-117.132~18.04.1"
        },
        {
            "binary_name":  "nfs-modules-5.4.0-117-generic-lpae-di",
            "binary_version":  "5.4.0-117.132~18.04.1"
        },
        {
            "binary_name":  "nic-modules-5.4.0-117-generic-di",
            "binary_version":  "5.4.0-117.132~18.04.1"
        },
        {
            "binary_name":  "nic-modules-5.4.0-117-generic-lpae-di",
            "binary_version":  "5.4.0-117.132~18.04.1"
        },
        {
            "binary_name":  "nic-pcmcia-modules-5.4.0-117-generic-di",
            "binary_version":  "5.4.0-117.132~18.04.1"
        },
        {
            "binary_name":  "nic-shared-modules-5.4.0-117-generic-di",
            "binary_version":  "5.4.0-117.132~18.04.1"
        },
        {
            "binary_name":  "nic-shared-modules-5.4.0-117-generic-lpae-di",
            "binary_version":  "5.4.0-117.132~18.04.1"
        },
        {
            "binary_name":  "nic-usb-modules-5.4.0-117-generic-di",
            "binary_version":  "5.4.0-117.132~18.04.1"
        },
        {
            "binary_name":  "nic-usb-modules-5.4.0-117-generic-lpae-di",
            "binary_version":  "5.4.0-117.132~18.04.1"
        },
        {
            "binary_name":  "parport-modules-5.4.0-117-generic-di",
            "binary_version":  "5.4.0-117.132~18.04.1"
        },
        {
            "binary_name":  "parport-modules-5.4.0-117-generic-lpae-di",
            "binary_version":  "5.4.0-117.132~18.04.1"
        },
        {
            "binary_name":  "pata-modules-5.4.0-117-generic-di",
            "binary_version":  "5.4.0-117.132~18.04.1"
        },
        {
            "binary_name":  "pcmcia-modules-5.4.0-117-generic-di",
            "binary_version":  "5.4.0-117.132~18.04.1"
        },
        {
            "binary_name":  "pcmcia-storage-modules-5.4.0-117-generic-di",
            "binary_version":  "5.4.0-117.132~18.04.1"
        },
        {
            "binary_name":  "plip-modules-5.4.0-117-generic-di",
            "binary_version":  "5.4.0-117.132~18.04.1"
        },
        {
            "binary_name":  "plip-modules-5.4.0-117-generic-lpae-di",
            "binary_version":  "5.4.0-117.132~18.04.1"
        },
        {
            "binary_name":  "ppp-modules-5.4.0-117-generic-di",
            "binary_version":  "5.4.0-117.132~18.04.1"
        },
        {
            "binary_name":  "ppp-modules-5.4.0-117-generic-lpae-di",
            "binary_version":  "5.4.0-117.132~18.04.1"
        },
        {
            "binary_name":  "sata-modules-5.4.0-117-generic-di",
            "binary_version":  "5.4.0-117.132~18.04.1"
        },
        {
            "binary_name":  "sata-modules-5.4.0-117-generic-lpae-di",
            "binary_version":  "5.4.0-117.132~18.04.1"
        },
        {
            "binary_name":  "scsi-modules-5.4.0-117-generic-di",
            "binary_version":  "5.4.0-117.132~18.04.1"
        },
        {
            "binary_name":  "scsi-modules-5.4.0-117-generic-lpae-di",
            "binary_version":  "5.4.0-117.132~18.04.1"
        },
        {
            "binary_name":  "serial-modules-5.4.0-117-generic-di",
            "binary_version":  "5.4.0-117.132~18.04.1"
        },
        {
            "binary_name":  "storage-core-modules-5.4.0-117-generic-di",
            "binary_version":  "5.4.0-117.132~18.04.1"
        },
        {
            "binary_name":  "storage-core-modules-5.4.0-117-generic-lpae-di",
            "binary_version":  "5.4.0-117.132~18.04.1"
        },
        {
            "binary_name":  "usb-modules-5.4.0-117-generic-di",
            "binary_version":  "5.4.0-117.132~18.04.1"
        },
        {
            "binary_name":  "usb-modules-5.4.0-117-generic-lpae-di",
            "binary_version":  "5.4.0-117.132~18.04.1"
        },
        {
            "binary_name":  "virtio-modules-5.4.0-117-generic-di",
            "binary_version":  "5.4.0-117.132~18.04.1"
        },
        {
            "binary_name":  "vlan-modules-5.4.0-117-generic-di",
            "binary_version":  "5.4.0-117.132~18.04.1"
        },
        {
            "binary_name":  "vlan-modules-5.4.0-117-generic-lpae-di",
            "binary_version":  "5.4.0-117.132~18.04.1"
        }
    ],
    "priority_reason":  "The vulnerability depends on an S3 suspend/resume cycle occurring, which the attacker can neither invoke (requires root to write /sys/power/state) nor influence, making it not reliably triggerable by an unprivileged attacker."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-1637.json"

linux-ibm-5.4

Package

Name: linux-ibm-5.4
Purl: pkg:deb/ubuntu/linux-ibm-5.4?arch=source&distro=bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

5.4.0-1028.32~18.04.1

Affected versions

5.*

5.4.0-1010.11~18.04.2

5.4.0-1012.13~18.04.1

5.4.0-1014.15~18.04.1

5.4.0-1015.16~18.04.1

5.4.0-1017.19~18.04.1

5.4.0-1018.20~18.04.1

5.4.0-1019.21~18.04.1

5.4.0-1020.22~18.04.1

5.4.0-1021.23~18.04.1

5.4.0-1023.25~18.04.1

5.4.0-1026.29~18.04.1

Ecosystem specific

{
    "availability":  "No subscription required",
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.4.0-1028-ibm",
            "binary_version":  "5.4.0-1028.32~18.04.1"
        },
        {
            "binary_name":  "linux-headers-5.4.0-1028-ibm",
            "binary_version":  "5.4.0-1028.32~18.04.1"
        },
        {
            "binary_name":  "linux-ibm-5.4-cloud-tools-common",
            "binary_version":  "5.4.0-1028.32~18.04.1"
        },
        {
            "binary_name":  "linux-ibm-5.4-headers-5.4.0-1028",
            "binary_version":  "5.4.0-1028.32~18.04.1"
        },
        {
            "binary_name":  "linux-ibm-5.4-source-5.4.0",
            "binary_version":  "5.4.0-1028.32~18.04.1"
        },
        {
            "binary_name":  "linux-ibm-5.4-tools-5.4.0-1028",
            "binary_version":  "5.4.0-1028.32~18.04.1"
        },
        {
            "binary_name":  "linux-ibm-5.4-tools-common",
            "binary_version":  "5.4.0-1028.32~18.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.4.0-1028-ibm",
            "binary_version":  "5.4.0-1028.32~18.04.1"
        },
        {
            "binary_name":  "linux-modules-5.4.0-1028-ibm",
            "binary_version":  "5.4.0-1028.32~18.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-5.4.0-1028-ibm",
            "binary_version":  "5.4.0-1028.32~18.04.1"
        },
        {
            "binary_name":  "linux-tools-5.4.0-1028-ibm",
            "binary_version":  "5.4.0-1028.32~18.04.1"
        }
    ],
    "priority_reason":  "The vulnerability depends on an S3 suspend/resume cycle occurring, which the attacker can neither invoke (requires root to write /sys/power/state) nor influence, making it not reliably triggerable by an unprivileged attacker."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-1637.json"

linux-oracle-5.4

Package

Name: linux-oracle-5.4
Purl: pkg:deb/ubuntu/linux-oracle-5.4?arch=source&distro=bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

5.4.0-1076.83~18.04.1

Affected versions

5.*

5.4.0-1019.19~18.04.1

5.4.0-1021.21~18.04.1

5.4.0-1022.22~18.04.1

5.4.0-1024.24~18.04.1

5.4.0-1025.25~18.04.1

5.4.0-1028.29~18.04.1

5.4.0-1029.31~18.04.1

5.4.0-1030.32~18.04.1

5.4.0-1033.35

5.4.0-1034.36~18.04.1

5.4.0-1035.38~18.04.1

5.4.0-1037.40~18.04.1

5.4.0-1038.41~18.04.1

5.4.0-1039.42~18.04.1

5.4.0-1041.44~18.04.1

5.4.0-1042.45~18.04.1

5.4.0-1043.46~18.04.1

5.4.0-1044.47~18.04.1

5.4.0-1046.50~18.04.2

5.4.0-1048.52~18.04.1

5.4.0-1049.53~18.04.1

5.4.0-1052.56~18.04.1

5.4.0-1053.57~18.04.1

5.4.0-1054.58~18.04.1

5.4.0-1055.59~18.04.1

5.4.0-1056.60~18.04.1

5.4.0-1057.61~18.04.1

5.4.0-1058.62~18.04.1

5.4.0-1059.63~18.04.1

5.4.0-1061.65~18.04.1

5.4.0-1062.66~18.04.1

5.4.0-1063.67~18.04.1

5.4.0-1064.68~18.04.1

5.4.0-1066.71~18.04.1

5.4.0-1067.72~18.04.1

5.4.0-1069.75~18.04.1

5.4.0-1070.76~18.04.1

5.4.0-1071.77~18.04.1

5.4.0-1073.79~18.04.1

Ecosystem specific

{
    "availability":  "No subscription required",
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.4.0-1076-oracle",
            "binary_version":  "5.4.0-1076.83~18.04.1"
        },
        {
            "binary_name":  "linux-headers-5.4.0-1076-oracle",
            "binary_version":  "5.4.0-1076.83~18.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.4.0-1076-oracle",
            "binary_version":  "5.4.0-1076.83~18.04.1"
        },
        {
            "binary_name":  "linux-modules-5.4.0-1076-oracle",
            "binary_version":  "5.4.0-1076.83~18.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-5.4.0-1076-oracle",
            "binary_version":  "5.4.0-1076.83~18.04.1"
        },
        {
            "binary_name":  "linux-oracle-5.4-headers-5.4.0-1076",
            "binary_version":  "5.4.0-1076.83~18.04.1"
        },
        {
            "binary_name":  "linux-oracle-5.4-tools-5.4.0-1076",
            "binary_version":  "5.4.0-1076.83~18.04.1"
        },
        {
            "binary_name":  "linux-tools-5.4.0-1076-oracle",
            "binary_version":  "5.4.0-1076.83~18.04.1"
        }
    ],
    "priority_reason":  "The vulnerability depends on an S3 suspend/resume cycle occurring, which the attacker can neither invoke (requires root to write /sys/power/state) nor influence, making it not reliably triggerable by an unprivileged attacker."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-1637.json"

linux-raspi-5.4

Package

Name: linux-raspi-5.4
Purl: pkg:deb/ubuntu/linux-raspi-5.4?arch=source&distro=bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

5.4.0-1065.75~18.04.1

Affected versions

5.*

5.4.0-1013.13~18.04.1

5.4.0-1015.15~18.04.1

5.4.0-1016.17~18.04.1

5.4.0-1018.20~18.04.1

5.4.0-1019.21~18.04.1

5.4.0-1021.24~18.04.1

5.4.0-1022.25~18.04.1

5.4.0-1023.26~18.04.1

5.4.0-1025.28~18.04.1

5.4.0-1026.29~18.04.1

5.4.0-1028.31~18.04.1

5.4.0-1029.32~18.04.1

5.4.0-1030.33~18.04.1

5.4.0-1032.35~18.04.1

5.4.0-1033.36~18.04.1

5.4.0-1034.37~18.04.1

5.4.0-1035.38~18.04.1

5.4.0-1036.39~18.04.1

5.4.0-1038.41~18.04.1

5.4.0-1041.45~18.04.1

5.4.0-1042.46~18.04.3

5.4.0-1043.47~18.04.1

5.4.0-1044.48~18.04.1

5.4.0-1045.49~18.04.1

5.4.0-1046.50~18.04.1

5.4.0-1047.52~18.04.1

5.4.0-1048.53~18.04.1

5.4.0-1050.56~18.04.1

5.4.0-1052.58~18.04.1

5.4.0-1053.60~18.04.1

5.4.0-1055.62~18.04.1

5.4.0-1056.63~18.04.1

5.4.0-1058.65~18.04.1

5.4.0-1059.66~18.04.1

5.4.0-1060.68~18.04.1

5.4.0-1062.70~18.04.1

Ecosystem specific

{
    "availability":  "No subscription required",
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.4.0-1065-raspi",
            "binary_version":  "5.4.0-1065.75~18.04.1"
        },
        {
            "binary_name":  "linux-headers-5.4.0-1065-raspi",
            "binary_version":  "5.4.0-1065.75~18.04.1"
        },
        {
            "binary_name":  "linux-image-5.4.0-1065-raspi",
            "binary_version":  "5.4.0-1065.75~18.04.1"
        },
        {
            "binary_name":  "linux-modules-5.4.0-1065-raspi",
            "binary_version":  "5.4.0-1065.75~18.04.1"
        },
        {
            "binary_name":  "linux-raspi-5.4-headers-5.4.0-1065",
            "binary_version":  "5.4.0-1065.75~18.04.1"
        },
        {
            "binary_name":  "linux-raspi-5.4-tools-5.4.0-1065",
            "binary_version":  "5.4.0-1065.75~18.04.1"
        },
        {
            "binary_name":  "linux-tools-5.4.0-1065-raspi",
            "binary_version":  "5.4.0-1065.75~18.04.1"
        }
    ],
    "priority_reason":  "The vulnerability depends on an S3 suspend/resume cycle occurring, which the attacker can neither invoke (requires root to write /sys/power/state) nor influence, making it not reliably triggerable by an unprivileged attacker."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-1637.json"

linux-aws-5.0

Package

Name: linux-aws-5.0
Purl: pkg:deb/ubuntu/linux-aws-5.0?arch=source&distro=bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.0.0-1021.24~18.04.1

5.0.0-1022.25~18.04.1

5.0.0-1023.26~18.04.1

5.0.0-1024.27~18.04.1

5.0.0-1025.28

5.0.0-1027.30

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-aws-5.0-tools-5.0.0-1027",
            "binary_version":  "5.0.0-1027.30"
        },
        {
            "binary_name":  "linux-aws-headers-5.0.0-1027",
            "binary_version":  "5.0.0-1027.30"
        },
        {
            "binary_name":  "linux-buildinfo-5.0.0-1027-aws",
            "binary_version":  "5.0.0-1027.30"
        },
        {
            "binary_name":  "linux-cloud-tools-5.0.0-1027-aws",
            "binary_version":  "5.0.0-1027.30"
        },
        {
            "binary_name":  "linux-headers-5.0.0-1027-aws",
            "binary_version":  "5.0.0-1027.30"
        },
        {
            "binary_name":  "linux-image-5.0.0-1027-aws",
            "binary_version":  "5.0.0-1027.30"
        },
        {
            "binary_name":  "linux-modules-5.0.0-1027-aws",
            "binary_version":  "5.0.0-1027.30"
        },
        {
            "binary_name":  "linux-modules-extra-5.0.0-1027-aws",
            "binary_version":  "5.0.0-1027.30"
        },
        {
            "binary_name":  "linux-tools-5.0.0-1027-aws",
            "binary_version":  "5.0.0-1027.30"
        }
    ],
    "priority_reason":  "The vulnerability depends on an S3 suspend/resume cycle occurring, which the attacker can neither invoke (requires root to write /sys/power/state) nor influence, making it not reliably triggerable by an unprivileged attacker."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-1637.json"

linux-aws-5.3

Package

Name: linux-aws-5.3
Purl: pkg:deb/ubuntu/linux-aws-5.3?arch=source&distro=bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.3.0-1016.17~18.04.1

5.3.0-1017.18~18.04.1

5.3.0-1019.21~18.04.1

5.3.0-1023.25~18.04.1

5.3.0-1028.30~18.04.1

5.3.0-1030.32~18.04.1

5.3.0-1032.34~18.04.2

5.3.0-1033.35

5.3.0-1034.36

5.3.0-1035.37

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-aws-5.3-cloud-tools-5.3.0-1035",
            "binary_version":  "5.3.0-1035.37"
        },
        {
            "binary_name":  "linux-aws-5.3-headers-5.3.0-1035",
            "binary_version":  "5.3.0-1035.37"
        },
        {
            "binary_name":  "linux-aws-5.3-tools-5.3.0-1035",
            "binary_version":  "5.3.0-1035.37"
        },
        {
            "binary_name":  "linux-buildinfo-5.3.0-1035-aws",
            "binary_version":  "5.3.0-1035.37"
        },
        {
            "binary_name":  "linux-cloud-tools-5.3.0-1035-aws",
            "binary_version":  "5.3.0-1035.37"
        },
        {
            "binary_name":  "linux-headers-5.3.0-1035-aws",
            "binary_version":  "5.3.0-1035.37"
        },
        {
            "binary_name":  "linux-image-5.3.0-1035-aws",
            "binary_version":  "5.3.0-1035.37"
        },
        {
            "binary_name":  "linux-modules-5.3.0-1035-aws",
            "binary_version":  "5.3.0-1035.37"
        },
        {
            "binary_name":  "linux-modules-extra-5.3.0-1035-aws",
            "binary_version":  "5.3.0-1035.37"
        },
        {
            "binary_name":  "linux-tools-5.3.0-1035-aws",
            "binary_version":  "5.3.0-1035.37"
        }
    ],
    "priority_reason":  "The vulnerability depends on an S3 suspend/resume cycle occurring, which the attacker can neither invoke (requires root to write /sys/power/state) nor influence, making it not reliably triggerable by an unprivileged attacker."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-1637.json"

linux-azure

Package

Name: linux-azure
Purl: pkg:deb/ubuntu/linux-azure?arch=source&distro=bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

4.*

4.15.0-1002.2

4.15.0-1003.3

4.15.0-1004.4

4.15.0-1008.8

4.15.0-1009.9

4.15.0-1012.12

4.15.0-1013.13

4.15.0-1014.14

4.15.0-1018.18

4.15.0-1019.19

4.15.0-1021.21

4.15.0-1022.23

4.15.0-1023.24

4.15.0-1025.26

4.15.0-1028.29

4.15.0-1030.31

4.15.0-1031.32

4.15.0-1032.33

4.15.0-1035.36

4.15.0-1036.38

4.15.0-1037.39

4.18.0-1011.11~18.04.1

4.18.0-1013.13~18.04.1

4.18.0-1014.14~18.04.1

4.18.0-1018.18~18.04.1

4.18.0-1019.19~18.04.1

4.18.0-1020.20~18.04.1

4.18.0-1023.24~18.04.1

4.18.0-1024.25~18.04.1

4.18.0-1025.27~18.04.1

5.*

5.0.0-1014.14~18.04.1

5.0.0-1016.17~18.04.1

5.0.0-1018.19~18.04.1

5.0.0-1020.21~18.04.1

5.0.0-1022.23~18.04.1

5.0.0-1023.24~18.04.1

5.0.0-1025.27~18.04.1

5.0.0-1027.29~18.04.1

5.0.0-1028.30~18.04.1

5.0.0-1029.31~18.04.1

5.0.0-1031.33

5.0.0-1032.34

5.0.0-1035.37

5.0.0-1036.38

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-azure-cloud-tools-5.0.0-1036",
            "binary_version":  "5.0.0-1036.38"
        },
        {
            "binary_name":  "linux-azure-headers-5.0.0-1036",
            "binary_version":  "5.0.0-1036.38"
        },
        {
            "binary_name":  "linux-azure-tools-5.0.0-1036",
            "binary_version":  "5.0.0-1036.38"
        },
        {
            "binary_name":  "linux-buildinfo-5.0.0-1036-azure",
            "binary_version":  "5.0.0-1036.38"
        },
        {
            "binary_name":  "linux-cloud-tools-5.0.0-1036-azure",
            "binary_version":  "5.0.0-1036.38"
        },
        {
            "binary_name":  "linux-headers-5.0.0-1036-azure",
            "binary_version":  "5.0.0-1036.38"
        },
        {
            "binary_name":  "linux-image-unsigned-5.0.0-1036-azure",
            "binary_version":  "5.0.0-1036.38"
        },
        {
            "binary_name":  "linux-modules-5.0.0-1036-azure",
            "binary_version":  "5.0.0-1036.38"
        },
        {
            "binary_name":  "linux-modules-extra-5.0.0-1036-azure",
            "binary_version":  "5.0.0-1036.38"
        },
        {
            "binary_name":  "linux-tools-5.0.0-1036-azure",
            "binary_version":  "5.0.0-1036.38"
        }
    ],
    "priority_reason":  "The vulnerability depends on an S3 suspend/resume cycle occurring, which the attacker can neither invoke (requires root to write /sys/power/state) nor influence, making it not reliably triggerable by an unprivileged attacker."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-1637.json"

linux-azure-5.3

Package

Name: linux-azure-5.3
Purl: pkg:deb/ubuntu/linux-azure-5.3?arch=source&distro=bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.3.0-1007.8~18.04.1

5.3.0-1008.9~18.04.1

5.3.0-1009.10~18.04.1

5.3.0-1010.11~18.04.1

5.3.0-1012.13~18.04.1

5.3.0-1013.14~18.04.1

5.3.0-1016.17~18.04.1

5.3.0-1018.19~18.04.1

5.3.0-1019.20~18.04.1

5.3.0-1020.21~18.04.1

5.3.0-1022.23~18.04.1

5.3.0-1028.29~18.04.1

5.3.0-1031.32~18.04.1

5.3.0-1032.33~18.04.1

5.3.0-1034.35~18.04.1

5.3.0-1035.36

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-azure-5.3-cloud-tools-5.3.0-1035",
            "binary_version":  "5.3.0-1035.36"
        },
        {
            "binary_name":  "linux-azure-5.3-headers-5.3.0-1035",
            "binary_version":  "5.3.0-1035.36"
        },
        {
            "binary_name":  "linux-azure-5.3-tools-5.3.0-1035",
            "binary_version":  "5.3.0-1035.36"
        },
        {
            "binary_name":  "linux-buildinfo-5.3.0-1035-azure",
            "binary_version":  "5.3.0-1035.36"
        },
        {
            "binary_name":  "linux-cloud-tools-5.3.0-1035-azure",
            "binary_version":  "5.3.0-1035.36"
        },
        {
            "binary_name":  "linux-headers-5.3.0-1035-azure",
            "binary_version":  "5.3.0-1035.36"
        },
        {
            "binary_name":  "linux-image-unsigned-5.3.0-1035-azure",
            "binary_version":  "5.3.0-1035.36"
        },
        {
            "binary_name":  "linux-modules-5.3.0-1035-azure",
            "binary_version":  "5.3.0-1035.36"
        },
        {
            "binary_name":  "linux-modules-extra-5.3.0-1035-azure",
            "binary_version":  "5.3.0-1035.36"
        },
        {
            "binary_name":  "linux-tools-5.3.0-1035-azure",
            "binary_version":  "5.3.0-1035.36"
        }
    ],
    "priority_reason":  "The vulnerability depends on an S3 suspend/resume cycle occurring, which the attacker can neither invoke (requires root to write /sys/power/state) nor influence, making it not reliably triggerable by an unprivileged attacker."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-1637.json"

linux-azure-edge

Package

Name: linux-azure-edge
Purl: pkg:deb/ubuntu/linux-azure-edge?arch=source&distro=bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

4.*

4.18.0-1006.6~18.04.1

4.18.0-1007.7~18.04.1

4.18.0-1008.8~18.04.1

5.*

5.0.0-1012.12~18.04.2

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-azure-edge-cloud-tools-5.0.0-1012",
            "binary_version":  "5.0.0-1012.12~18.04.2"
        },
        {
            "binary_name":  "linux-azure-edge-tools-5.0.0-1012",
            "binary_version":  "5.0.0-1012.12~18.04.2"
        },
        {
            "binary_name":  "linux-azure-headers-5.0.0-1012",
            "binary_version":  "5.0.0-1012.12~18.04.2"
        },
        {
            "binary_name":  "linux-buildinfo-5.0.0-1012-azure",
            "binary_version":  "5.0.0-1012.12~18.04.2"
        },
        {
            "binary_name":  "linux-cloud-tools-5.0.0-1012-azure",
            "binary_version":  "5.0.0-1012.12~18.04.2"
        },
        {
            "binary_name":  "linux-headers-5.0.0-1012-azure",
            "binary_version":  "5.0.0-1012.12~18.04.2"
        },
        {
            "binary_name":  "linux-image-unsigned-5.0.0-1012-azure",
            "binary_version":  "5.0.0-1012.12~18.04.2"
        },
        {
            "binary_name":  "linux-modules-5.0.0-1012-azure",
            "binary_version":  "5.0.0-1012.12~18.04.2"
        },
        {
            "binary_name":  "linux-modules-extra-5.0.0-1012-azure",
            "binary_version":  "5.0.0-1012.12~18.04.2"
        },
        {
            "binary_name":  "linux-tools-5.0.0-1012-azure",
            "binary_version":  "5.0.0-1012.12~18.04.2"
        }
    ],
    "priority_reason":  "The vulnerability depends on an S3 suspend/resume cycle occurring, which the attacker can neither invoke (requires root to write /sys/power/state) nor influence, making it not reliably triggerable by an unprivileged attacker."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-1637.json"

linux-gcp

Package

Name: linux-gcp
Purl: pkg:deb/ubuntu/linux-gcp?arch=source&distro=bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

4.*

4.15.0-1001.1

4.15.0-1003.3

4.15.0-1005.5

4.15.0-1006.6

4.15.0-1008.8

4.15.0-1009.9

4.15.0-1010.10

4.15.0-1014.14

4.15.0-1015.15

4.15.0-1017.18

4.15.0-1018.19

4.15.0-1019.20

4.15.0-1021.22

4.15.0-1023.24

4.15.0-1024.25

4.15.0-1025.26

4.15.0-1026.27

4.15.0-1027.28

4.15.0-1028.29

4.15.0-1029.31

4.15.0-1030.32

4.15.0-1032.34

4.15.0-1033.35

4.15.0-1034.36

4.15.0-1036.38

4.15.0-1037.39

4.15.0-1040.42

4.15.0-1042.45

4.15.0-1044.70

5.*

5.0.0-1020.20~18.04.1

5.0.0-1021.21~18.04.1

5.0.0-1025.26~18.04.1

5.0.0-1026.27~18.04.1

5.0.0-1028.29~18.04.1

5.0.0-1029.30~18.04.1

5.0.0-1031.32

5.0.0-1033.34

5.0.0-1034.35

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.0.0-1034-gcp",
            "binary_version":  "5.0.0-1034.35"
        },
        {
            "binary_name":  "linux-gcp-headers-5.0.0-1034",
            "binary_version":  "5.0.0-1034.35"
        },
        {
            "binary_name":  "linux-gcp-tools-5.0.0-1034",
            "binary_version":  "5.0.0-1034.35"
        },
        {
            "binary_name":  "linux-headers-5.0.0-1034-gcp",
            "binary_version":  "5.0.0-1034.35"
        },
        {
            "binary_name":  "linux-image-unsigned-5.0.0-1034-gcp",
            "binary_version":  "5.0.0-1034.35"
        },
        {
            "binary_name":  "linux-modules-5.0.0-1034-gcp",
            "binary_version":  "5.0.0-1034.35"
        },
        {
            "binary_name":  "linux-modules-extra-5.0.0-1034-gcp",
            "binary_version":  "5.0.0-1034.35"
        },
        {
            "binary_name":  "linux-tools-5.0.0-1034-gcp",
            "binary_version":  "5.0.0-1034.35"
        }
    ],
    "priority_reason":  "The vulnerability depends on an S3 suspend/resume cycle occurring, which the attacker can neither invoke (requires root to write /sys/power/state) nor influence, making it not reliably triggerable by an unprivileged attacker."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-1637.json"

linux-gcp-5.3

Package

Name: linux-gcp-5.3
Purl: pkg:deb/ubuntu/linux-gcp-5.3?arch=source&distro=bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.3.0-1008.9~18.04.1

5.3.0-1009.10~18.04.1

5.3.0-1010.11~18.04.1

5.3.0-1012.13~18.04.1

5.3.0-1014.15~18.04.1

5.3.0-1016.17~18.04.1

5.3.0-1017.18~18.04.1

5.3.0-1018.19~18.04.1

5.3.0-1020.22~18.04.1

5.3.0-1026.28~18.04.1

5.3.0-1029.31~18.04.1

5.3.0-1030.32~18.04.1

5.3.0-1032.34~18.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.3.0-1032-gcp",
            "binary_version":  "5.3.0-1032.34~18.04.1"
        },
        {
            "binary_name":  "linux-gcp-5.3-headers-5.3.0-1032",
            "binary_version":  "5.3.0-1032.34~18.04.1"
        },
        {
            "binary_name":  "linux-gcp-5.3-tools-5.3.0-1032",
            "binary_version":  "5.3.0-1032.34~18.04.1"
        },
        {
            "binary_name":  "linux-headers-5.3.0-1032-gcp",
            "binary_version":  "5.3.0-1032.34~18.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.3.0-1032-gcp",
            "binary_version":  "5.3.0-1032.34~18.04.1"
        },
        {
            "binary_name":  "linux-modules-5.3.0-1032-gcp",
            "binary_version":  "5.3.0-1032.34~18.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-5.3.0-1032-gcp",
            "binary_version":  "5.3.0-1032.34~18.04.1"
        },
        {
            "binary_name":  "linux-tools-5.3.0-1032-gcp",
            "binary_version":  "5.3.0-1032.34~18.04.1"
        }
    ],
    "priority_reason":  "The vulnerability depends on an S3 suspend/resume cycle occurring, which the attacker can neither invoke (requires root to write /sys/power/state) nor influence, making it not reliably triggerable by an unprivileged attacker."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-1637.json"

linux-gke-4.15

Package

Name: linux-gke-4.15
Purl: pkg:deb/ubuntu/linux-gke-4.15?arch=source&distro=bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

4.*

4.15.0-1030.32

4.15.0-1032.34

4.15.0-1033.35

4.15.0-1034.36

4.15.0-1036.38

4.15.0-1037.39

4.15.0-1040.42

4.15.0-1041.43

4.15.0-1042.44

4.15.0-1044.46

4.15.0-1045.48

4.15.0-1046.49

4.15.0-1048.51

4.15.0-1049.52

4.15.0-1050.53

4.15.0-1052.55

4.15.0-1055.58

4.15.0-1057.60

4.15.0-1058.61

4.15.0-1059.62

4.15.0-1063.66

4.15.0-1064.67

4.15.0-1066.69

4.15.0-1067.70

4.15.0-1069.72

4.15.0-1070.73

4.15.0-1072.76

4.15.0-1073.78

4.15.0-1074.79

4.15.0-1076.81

4.15.0-1077.82

4.15.0-1078.83

4.15.0-1079.84

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-4.15.0-1079-gke",
            "binary_version":  "4.15.0-1079.84"
        },
        {
            "binary_name":  "linux-gke-4.15-headers-4.15.0-1079",
            "binary_version":  "4.15.0-1079.84"
        },
        {
            "binary_name":  "linux-gke-4.15-tools-4.15.0-1079",
            "binary_version":  "4.15.0-1079.84"
        },
        {
            "binary_name":  "linux-headers-4.15.0-1079-gke",
            "binary_version":  "4.15.0-1079.84"
        },
        {
            "binary_name":  "linux-image-unsigned-4.15.0-1079-gke",
            "binary_version":  "4.15.0-1079.84"
        },
        {
            "binary_name":  "linux-modules-4.15.0-1079-gke",
            "binary_version":  "4.15.0-1079.84"
        },
        {
            "binary_name":  "linux-modules-extra-4.15.0-1079-gke",
            "binary_version":  "4.15.0-1079.84"
        },
        {
            "binary_name":  "linux-tools-4.15.0-1079-gke",
            "binary_version":  "4.15.0-1079.84"
        }
    ],
    "priority_reason":  "The vulnerability depends on an S3 suspend/resume cycle occurring, which the attacker can neither invoke (requires root to write /sys/power/state) nor influence, making it not reliably triggerable by an unprivileged attacker."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-1637.json"

linux-gke-5.4

Package

Name: linux-gke-5.4
Purl: pkg:deb/ubuntu/linux-gke-5.4?arch=source&distro=bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.4.0-1025.25~18.04.1

5.4.0-1027.28~18.04.1

5.4.0-1029.31~18.04.1

5.4.0-1030.32~18.04.1

5.4.0-1032.34~18.04.1

5.4.0-1033.35~18.04.1

5.4.0-1035.37~18.04.1

5.4.0-1036.38~18.04.1

5.4.0-1037.39~18.04.1

5.4.0-1039.41~18.04.1

5.4.0-1040.42~18.04.1

5.4.0-1042.44~18.04.1

5.4.0-1043.45~18.04.1

5.4.0-1044.46~18.04.1

5.4.0-1046.48~18.04.1

5.4.0-1049.52~18.04.1

5.4.0-1051.54~18.04.1

5.4.0-1052.55~18.04.1

5.4.0-1053.56~18.04.1

5.4.0-1054.57~18.04.1

5.4.0-1055.58~18.04.1

5.4.0-1056.59~18.04.1

5.4.0-1057.60~18.04.1

5.4.0-1059.62~18.04.1

5.4.0-1061.64~18.04.1

5.4.0-1062.65~18.04.1

5.4.0-1063.66~18.04.1

5.4.0-1065.68~18.04.1

5.4.0-1066.69~18.04.1

5.4.0-1067.70~18.04.1

5.4.0-1068.71~18.04.1

5.4.0-1071.76~18.04.3

5.4.0-1072.77~18.04.1

5.4.0-1074.79~18.04.1

5.4.0-1076.82~18.04.1

5.4.0-1078.84~18.04.1

5.4.0-1080.86~18.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.4.0-1080-gke",
            "binary_version":  "5.4.0-1080.86~18.04.1"
        },
        {
            "binary_name":  "linux-gke-5.4-headers-5.4.0-1080",
            "binary_version":  "5.4.0-1080.86~18.04.1"
        },
        {
            "binary_name":  "linux-gke-5.4-tools-5.4.0-1080",
            "binary_version":  "5.4.0-1080.86~18.04.1"
        },
        {
            "binary_name":  "linux-headers-5.4.0-1080-gke",
            "binary_version":  "5.4.0-1080.86~18.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.4.0-1080-gke",
            "binary_version":  "5.4.0-1080.86~18.04.1"
        },
        {
            "binary_name":  "linux-modules-5.4.0-1080-gke",
            "binary_version":  "5.4.0-1080.86~18.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-5.4.0-1080-gke",
            "binary_version":  "5.4.0-1080.86~18.04.1"
        },
        {
            "binary_name":  "linux-tools-5.4.0-1080-gke",
            "binary_version":  "5.4.0-1080.86~18.04.1"
        }
    ],
    "priority_reason":  "The vulnerability depends on an S3 suspend/resume cycle occurring, which the attacker can neither invoke (requires root to write /sys/power/state) nor influence, making it not reliably triggerable by an unprivileged attacker."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-1637.json"

linux-gkeop-5.4

Package

Name: linux-gkeop-5.4
Purl: pkg:deb/ubuntu/linux-gkeop-5.4?arch=source&distro=bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.4.0-1001.1

5.4.0-1003.3

5.4.0-1004.5

5.4.0-1005.6

5.4.0-1007.8~18.04.1

5.4.0-1008.9~18.04.1

5.4.0-1009.10~18.04.1

5.4.0-1010.11~18.04.1

5.4.0-1011.12~18.04.2

5.4.0-1012.13~18.04.1

5.4.0-1013.14~18.04.1

5.4.0-1014.15~18.04.1

5.4.0-1015.16~18.04.1

5.4.0-1016.17~18.04.1

5.4.0-1018.19~18.04.1

5.4.0-1021.22~18.04.1

5.4.0-1022.23~18.04.1

5.4.0-1023.24~18.04.1

5.4.0-1024.25~18.04.1

5.4.0-1025.26~18.04.1

5.4.0-1026.27~18.04.1

5.4.0-1027.28~18.04.1

5.4.0-1029.30~18.04.2

5.4.0-1031.32~18.04.1

5.4.0-1032.33~18.04.1

5.4.0-1033.34~18.04.1

5.4.0-1034.35~18.04.1

5.4.0-1036.37~18.04.1

5.4.0-1037.38~18.04.1

5.4.0-1038.39~18.04.1

5.4.0-1039.40~18.04.1

5.4.0-1040.41~18.04.1

5.4.0-1043.44~18.04.1

5.4.0-1046.48~18.04.1

5.4.0-1048.51~18.04.1

5.4.0-1049.52~18.04.1

5.4.0-1051.54~18.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.4.0-1051-gkeop",
            "binary_version":  "5.4.0-1051.54~18.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-5.4.0-1051-gkeop",
            "binary_version":  "5.4.0-1051.54~18.04.1"
        },
        {
            "binary_name":  "linux-gkeop-5.4-cloud-tools-5.4.0-1051",
            "binary_version":  "5.4.0-1051.54~18.04.1"
        },
        {
            "binary_name":  "linux-gkeop-5.4-headers-5.4.0-1051",
            "binary_version":  "5.4.0-1051.54~18.04.1"
        },
        {
            "binary_name":  "linux-gkeop-5.4-source-5.4.0",
            "binary_version":  "5.4.0-1051.54~18.04.1"
        },
        {
            "binary_name":  "linux-gkeop-5.4-tools-5.4.0-1051",
            "binary_version":  "5.4.0-1051.54~18.04.1"
        },
        {
            "binary_name":  "linux-headers-5.4.0-1051-gkeop",
            "binary_version":  "5.4.0-1051.54~18.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.4.0-1051-gkeop",
            "binary_version":  "5.4.0-1051.54~18.04.1"
        },
        {
            "binary_name":  "linux-modules-5.4.0-1051-gkeop",
            "binary_version":  "5.4.0-1051.54~18.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-5.4.0-1051-gkeop",
            "binary_version":  "5.4.0-1051.54~18.04.1"
        },
        {
            "binary_name":  "linux-tools-5.4.0-1051-gkeop",
            "binary_version":  "5.4.0-1051.54~18.04.1"
        }
    ],
    "priority_reason":  "The vulnerability depends on an S3 suspend/resume cycle occurring, which the attacker can neither invoke (requires root to write /sys/power/state) nor influence, making it not reliably triggerable by an unprivileged attacker."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-1637.json"

linux-hwe

Package

Name: linux-hwe
Purl: pkg:deb/ubuntu/linux-hwe?arch=source&distro=bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

4.*

4.18.0-13.14~18.04.1

4.18.0-14.15~18.04.1

4.18.0-15.16~18.04.1

4.18.0-16.17~18.04.1

4.18.0-17.18~18.04.1

4.18.0-18.19~18.04.1

4.18.0-20.21~18.04.1

4.18.0-21.22~18.04.1

4.18.0-22.23~18.04.1

4.18.0-24.25~18.04.1

4.18.0-25.26~18.04.1

5.*

5.0.0-23.24~18.04.1

5.0.0-25.26~18.04.1

5.0.0-27.28~18.04.1

5.0.0-29.31~18.04.1

5.0.0-31.33~18.04.1

5.0.0-32.34~18.04.2

5.0.0-35.38~18.04.1

5.0.0-36.39~18.04.1

5.0.0-37.40~18.04.1

5.3.0-26.28~18.04.1

5.3.0-28.30~18.04.1

5.3.0-40.32~18.04.1

5.3.0-42.34~18.04.1

5.3.0-45.37~18.04.1

5.3.0-46.38~18.04.1

5.3.0-51.44~18.04.2

5.3.0-53.47~18.04.1

5.3.0-59.53~18.04.1

5.3.0-61.55~18.04.1

5.3.0-62.56~18.04.1

5.3.0-64.58~18.04.1

5.3.0-65.59

5.3.0-66.60

5.3.0-67.61

5.3.0-68.63

5.3.0-69.65

5.3.0-70.66

5.3.0-72.68

5.3.0-73.69

5.3.0-74.70

5.3.0-75.71

5.3.0-76.72

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "block-modules-5.3.0-76-generic-di",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "crypto-modules-5.3.0-76-generic-di",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "fat-modules-5.3.0-76-generic-di",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "fb-modules-5.3.0-76-generic-di",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "firewire-core-modules-5.3.0-76-generic-di",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "floppy-modules-5.3.0-76-generic-di",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "fs-core-modules-5.3.0-76-generic-di",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "fs-secondary-modules-5.3.0-76-generic-di",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "input-modules-5.3.0-76-generic-di",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "ipmi-modules-5.3.0-76-generic-di",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "kernel-image-5.3.0-76-generic-di",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "linux-buildinfo-5.3.0-76-generic",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "linux-buildinfo-5.3.0-76-lowlatency",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "linux-cloud-tools-5.3.0-76-generic",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "linux-cloud-tools-5.3.0-76-lowlatency",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "linux-headers-5.3.0-76-generic",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "linux-headers-5.3.0-76-lowlatency",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "linux-hwe-cloud-tools-5.3.0-76",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "linux-hwe-headers-5.3.0-76",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "linux-hwe-tools-5.3.0-76",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "linux-hwe-udebs-generic",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "linux-image-5.3.0-76-generic",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "linux-image-5.3.0-76-lowlatency",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "linux-image-unsigned-5.3.0-76-generic",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "linux-image-unsigned-5.3.0-76-lowlatency",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "linux-modules-5.3.0-76-generic",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "linux-modules-5.3.0-76-lowlatency",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "linux-modules-extra-5.3.0-76-generic",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "linux-source-5.3.0",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "linux-tools-5.3.0-76-generic",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "linux-tools-5.3.0-76-lowlatency",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "md-modules-5.3.0-76-generic-di",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "message-modules-5.3.0-76-generic-di",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "mouse-modules-5.3.0-76-generic-di",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "multipath-modules-5.3.0-76-generic-di",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "nfs-modules-5.3.0-76-generic-di",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "nic-modules-5.3.0-76-generic-di",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "nic-pcmcia-modules-5.3.0-76-generic-di",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "nic-shared-modules-5.3.0-76-generic-di",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "nic-usb-modules-5.3.0-76-generic-di",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "parport-modules-5.3.0-76-generic-di",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "pata-modules-5.3.0-76-generic-di",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "pcmcia-modules-5.3.0-76-generic-di",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "pcmcia-storage-modules-5.3.0-76-generic-di",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "plip-modules-5.3.0-76-generic-di",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "ppp-modules-5.3.0-76-generic-di",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "sata-modules-5.3.0-76-generic-di",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "scsi-modules-5.3.0-76-generic-di",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "serial-modules-5.3.0-76-generic-di",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "storage-core-modules-5.3.0-76-generic-di",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "usb-modules-5.3.0-76-generic-di",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "virtio-modules-5.3.0-76-generic-di",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "vlan-modules-5.3.0-76-generic-di",
            "binary_version":  "5.3.0-76.72"
        }
    ],
    "priority_reason":  "The vulnerability depends on an S3 suspend/resume cycle occurring, which the attacker can neither invoke (requires root to write /sys/power/state) nor influence, making it not reliably triggerable by an unprivileged attacker."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-1637.json"

linux-hwe-edge

Package

Name: linux-hwe-edge
Purl: pkg:deb/ubuntu/linux-hwe-edge?arch=source&distro=bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.0.0-15.16~18.04.1

5.0.0-16.17~18.04.1

5.0.0-17.18~18.04.1

5.0.0-19.20~18.04.1

5.0.0-20.21~18.04.1

5.3.0-19.20~18.04.2

5.3.0-22.24~18.04.1

5.3.0-23.25~18.04.1

5.3.0-23.25~18.04.2

5.3.0-24.26~18.04.2

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "block-modules-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "block-modules-5.3.0-24-generic-lpae-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "crypto-modules-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "crypto-modules-5.3.0-24-generic-lpae-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "dasd-extra-modules-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "dasd-modules-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "fat-modules-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "fat-modules-5.3.0-24-generic-lpae-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "fb-modules-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "firewire-core-modules-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "floppy-modules-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "fs-core-modules-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "fs-core-modules-5.3.0-24-generic-lpae-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "fs-secondary-modules-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "fs-secondary-modules-5.3.0-24-generic-lpae-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "input-modules-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "input-modules-5.3.0-24-generic-lpae-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "ipmi-modules-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "ipmi-modules-5.3.0-24-generic-lpae-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "kernel-image-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "kernel-image-5.3.0-24-generic-lpae-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "linux-buildinfo-5.3.0-24-generic",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "linux-buildinfo-5.3.0-24-generic-lpae",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "linux-buildinfo-5.3.0-24-lowlatency",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "linux-cloud-tools-5.3.0-24-generic",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "linux-cloud-tools-5.3.0-24-lowlatency",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "linux-headers-5.3.0-24",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "linux-headers-5.3.0-24-generic",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "linux-headers-5.3.0-24-generic-lpae",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "linux-headers-5.3.0-24-lowlatency",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "linux-hwe-edge-cloud-tools-5.3.0-24",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "linux-hwe-edge-tools-5.3.0-24",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "linux-hwe-edge-udebs-generic",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "linux-hwe-edge-udebs-generic-lpae",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "linux-image-5.3.0-24-generic",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "linux-image-5.3.0-24-generic-lpae",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "linux-image-5.3.0-24-lowlatency",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "linux-image-unsigned-5.3.0-24-generic",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "linux-image-unsigned-5.3.0-24-lowlatency",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "linux-modules-5.3.0-24-generic",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "linux-modules-5.3.0-24-generic-lpae",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "linux-modules-5.3.0-24-lowlatency",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "linux-modules-extra-5.3.0-24-generic",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "linux-source-5.3.0",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "linux-tools-5.3.0-24-generic",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "linux-tools-5.3.0-24-generic-lpae",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "linux-tools-5.3.0-24-lowlatency",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "md-modules-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "md-modules-5.3.0-24-generic-lpae-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "message-modules-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "mouse-modules-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "mouse-modules-5.3.0-24-generic-lpae-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "multipath-modules-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "multipath-modules-5.3.0-24-generic-lpae-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "nfs-modules-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "nfs-modules-5.3.0-24-generic-lpae-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "nic-modules-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "nic-modules-5.3.0-24-generic-lpae-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "nic-pcmcia-modules-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "nic-shared-modules-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "nic-shared-modules-5.3.0-24-generic-lpae-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "nic-usb-modules-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "nic-usb-modules-5.3.0-24-generic-lpae-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "parport-modules-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "parport-modules-5.3.0-24-generic-lpae-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "pata-modules-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "pcmcia-modules-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "pcmcia-storage-modules-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "plip-modules-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "plip-modules-5.3.0-24-generic-lpae-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "ppp-modules-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "ppp-modules-5.3.0-24-generic-lpae-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "sata-modules-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "sata-modules-5.3.0-24-generic-lpae-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "scsi-modules-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "scsi-modules-5.3.0-24-generic-lpae-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "serial-modules-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "storage-core-modules-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "storage-core-modules-5.3.0-24-generic-lpae-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "usb-modules-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "usb-modules-5.3.0-24-generic-lpae-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "virtio-modules-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "vlan-modules-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "vlan-modules-5.3.0-24-generic-lpae-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        }
    ],
    "priority_reason":  "The vulnerability depends on an S3 suspend/resume cycle occurring, which the attacker can neither invoke (requires root to write /sys/power/state) nor influence, making it not reliably triggerable by an unprivileged attacker."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-1637.json"

linux-oem

Package

Name: linux-oem
Purl: pkg:deb/ubuntu/linux-oem?arch=source&distro=bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

4.*

4.15.0-1002.3

4.15.0-1004.5

4.15.0-1006.9

4.15.0-1008.11

4.15.0-1009.12

4.15.0-1012.15

4.15.0-1013.16

4.15.0-1015.18

4.15.0-1017.20

4.15.0-1018.21

4.15.0-1021.24

4.15.0-1024.29

4.15.0-1026.31

4.15.0-1028.33

4.15.0-1030.35

4.15.0-1033.38

4.15.0-1034.39

4.15.0-1035.40

4.15.0-1036.41

4.15.0-1038.43

4.15.0-1039.44

4.15.0-1043.48

4.15.0-1045.50

4.15.0-1050.57

4.15.0-1056.65

4.15.0-1057.66

4.15.0-1059.68

4.15.0-1063.72

4.15.0-1064.73

4.15.0-1065.75

4.15.0-1066.76

4.15.0-1067.77

4.15.0-1069.79

4.15.0-1073.83

4.15.0-1076.86

4.15.0-1079.89

4.15.0-1080.90

4.15.0-1081.91

4.15.0-1087.97

4.15.0-1090.100

4.15.0-1091.101

4.15.0-1093.103

4.15.0-1094.104

4.15.0-1096.106

4.15.0-1097.107

4.15.0-1099.109

4.15.0-1100.110

4.15.0-1101.112

4.15.0-1102.113

4.15.0-1103.114

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "block-modules-4.15.0-1103-oem-di",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "crypto-modules-4.15.0-1103-oem-di",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "fat-modules-4.15.0-1103-oem-di",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "fb-modules-4.15.0-1103-oem-di",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "firewire-core-modules-4.15.0-1103-oem-di",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "floppy-modules-4.15.0-1103-oem-di",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "fs-core-modules-4.15.0-1103-oem-di",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "fs-secondary-modules-4.15.0-1103-oem-di",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "input-modules-4.15.0-1103-oem-di",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "ipmi-modules-4.15.0-1103-oem-di",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "irda-modules-4.15.0-1103-oem-di",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "kernel-image-4.15.0-1103-oem-di",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "linux-buildinfo-4.15.0-1103-oem",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "linux-headers-4.15.0-1103-oem",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "linux-image-unsigned-4.15.0-1103-oem",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "linux-modules-4.15.0-1103-oem",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "linux-oem-headers-4.15.0-1103",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "linux-oem-tools-4.15.0-1103",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "linux-tools-4.15.0-1103-oem",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "linux-udebs-oem",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "md-modules-4.15.0-1103-oem-di",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "message-modules-4.15.0-1103-oem-di",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "mouse-modules-4.15.0-1103-oem-di",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "multipath-modules-4.15.0-1103-oem-di",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "nfs-modules-4.15.0-1103-oem-di",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "nic-modules-4.15.0-1103-oem-di",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "nic-pcmcia-modules-4.15.0-1103-oem-di",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "nic-shared-modules-4.15.0-1103-oem-di",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "nic-usb-modules-4.15.0-1103-oem-di",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "parport-modules-4.15.0-1103-oem-di",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "pata-modules-4.15.0-1103-oem-di",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "pcmcia-modules-4.15.0-1103-oem-di",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "pcmcia-storage-modules-4.15.0-1103-oem-di",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "plip-modules-4.15.0-1103-oem-di",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "ppp-modules-4.15.0-1103-oem-di",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "sata-modules-4.15.0-1103-oem-di",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "scsi-modules-4.15.0-1103-oem-di",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "serial-modules-4.15.0-1103-oem-di",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "storage-core-modules-4.15.0-1103-oem-di",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "usb-modules-4.15.0-1103-oem-di",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "virtio-modules-4.15.0-1103-oem-di",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "vlan-modules-4.15.0-1103-oem-di",
            "binary_version":  "4.15.0-1103.114"
        }
    ],
    "priority_reason":  "The vulnerability depends on an S3 suspend/resume cycle occurring, which the attacker can neither invoke (requires root to write /sys/power/state) nor influence, making it not reliably triggerable by an unprivileged attacker."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-1637.json"

linux-oracle-5.0

Package

Name: linux-oracle-5.0
Purl: pkg:deb/ubuntu/linux-oracle-5.0?arch=source&distro=bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.0.0-1007.12~18.04.1

5.0.0-1008.13~18.04.1

5.0.0-1009.14~18.04.1

5.0.0-1010.15~18.04.1

5.0.0-1011.16

5.0.0-1013.18

5.0.0-1014.19

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.0.0-1014-oracle",
            "binary_version":  "5.0.0-1014.19"
        },
        {
            "binary_name":  "linux-headers-5.0.0-1014-oracle",
            "binary_version":  "5.0.0-1014.19"
        },
        {
            "binary_name":  "linux-image-unsigned-5.0.0-1014-oracle",
            "binary_version":  "5.0.0-1014.19"
        },
        {
            "binary_name":  "linux-modules-5.0.0-1014-oracle",
            "binary_version":  "5.0.0-1014.19"
        },
        {
            "binary_name":  "linux-modules-extra-5.0.0-1014-oracle",
            "binary_version":  "5.0.0-1014.19"
        },
        {
            "binary_name":  "linux-oracle-5.0-headers-5.0.0-1014",
            "binary_version":  "5.0.0-1014.19"
        },
        {
            "binary_name":  "linux-oracle-5.0-tools-5.0.0-1014",
            "binary_version":  "5.0.0-1014.19"
        },
        {
            "binary_name":  "linux-tools-5.0.0-1014-oracle",
            "binary_version":  "5.0.0-1014.19"
        }
    ],
    "priority_reason":  "The vulnerability depends on an S3 suspend/resume cycle occurring, which the attacker can neither invoke (requires root to write /sys/power/state) nor influence, making it not reliably triggerable by an unprivileged attacker."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-1637.json"

linux-oracle-5.3

Package

Name: linux-oracle-5.3
Purl: pkg:deb/ubuntu/linux-oracle-5.3?arch=source&distro=bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.3.0-1011.12~18.04.1

5.3.0-1013.14~18.04.1

5.3.0-1014.15~18.04.1

5.3.0-1016.18~18.04.1

5.3.0-1018.20~18.04.1

5.3.0-1024.26~18.04.1

5.3.0-1027.29~18.04.1

5.3.0-1028.30~18.04.1

5.3.0-1030.32~18.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.3.0-1030-oracle",
            "binary_version":  "5.3.0-1030.32~18.04.1"
        },
        {
            "binary_name":  "linux-headers-5.3.0-1030-oracle",
            "binary_version":  "5.3.0-1030.32~18.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.3.0-1030-oracle",
            "binary_version":  "5.3.0-1030.32~18.04.1"
        },
        {
            "binary_name":  "linux-modules-5.3.0-1030-oracle",
            "binary_version":  "5.3.0-1030.32~18.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-5.3.0-1030-oracle",
            "binary_version":  "5.3.0-1030.32~18.04.1"
        },
        {
            "binary_name":  "linux-oracle-5.3-headers-5.3.0-1030",
            "binary_version":  "5.3.0-1030.32~18.04.1"
        },
        {
            "binary_name":  "linux-oracle-5.3-tools-5.3.0-1030",
            "binary_version":  "5.3.0-1030.32~18.04.1"
        },
        {
            "binary_name":  "linux-tools-5.3.0-1030-oracle",
            "binary_version":  "5.3.0-1030.32~18.04.1"
        }
    ],
    "priority_reason":  "The vulnerability depends on an S3 suspend/resume cycle occurring, which the attacker can neither invoke (requires root to write /sys/power/state) nor influence, making it not reliably triggerable by an unprivileged attacker."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-1637.json"

Ubuntu:20.04:LTS

linux

Package

Name: linux
Purl: pkg:deb/ubuntu/linux?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

5.4.0-117.132

Affected versions

5.*

5.3.0-18.19

5.3.0-24.26

5.4.0-9.12

5.4.0-18.22

5.4.0-21.25

5.4.0-24.28

5.4.0-25.29

5.4.0-26.30

5.4.0-28.32

5.4.0-29.33

5.4.0-31.35

5.4.0-33.37

5.4.0-37.41

5.4.0-39.43

5.4.0-40.44

5.4.0-42.46

5.4.0-45.49

5.4.0-47.51

5.4.0-48.52

5.4.0-51.56

5.4.0-52.57

5.4.0-53.59

5.4.0-54.60

5.4.0-56.62

5.4.0-58.64

5.4.0-59.65

5.4.0-60.67

5.4.0-62.70

5.4.0-64.72

5.4.0-65.73

5.4.0-66.74

5.4.0-67.75

5.4.0-70.78

5.4.0-71.79

5.4.0-72.80

5.4.0-73.82

5.4.0-74.83

5.4.0-77.86

5.4.0-80.90

5.4.0-81.91

5.4.0-84.94

5.4.0-86.97

5.4.0-88.99

5.4.0-89.100

5.4.0-90.101

5.4.0-91.102

5.4.0-92.103

5.4.0-94.106

5.4.0-96.109

5.4.0-97.110

5.4.0-99.112

5.4.0-100.113

5.4.0-104.118

5.4.0-105.119

5.4.0-107.121

5.4.0-109.123

5.4.0-110.124

5.4.0-113.127

Ecosystem specific

{
    "availability":  "No subscription required",
    "binaries":  [
        {
            "binary_name":  "block-modules-5.4.0-117-generic-di",
            "binary_version":  "5.4.0-117.132"
        },
        {
            "binary_name":  "block-modules-5.4.0-117-generic-lpae-di",
            "binary_version":  "5.4.0-117.132"
        },
        {
            "binary_name":  "crypto-modules-5.4.0-117-generic-di",
            "binary_version":  "5.4.0-117.132"
        },
        {
            "binary_name":  "crypto-modules-5.4.0-117-generic-lpae-di",
            "binary_version":  "5.4.0-117.132"
        },
        {
            "binary_name":  "dasd-extra-modules-5.4.0-117-generic-di",
            "binary_version":  "5.4.0-117.132"
        },
        {
            "binary_name":  "dasd-modules-5.4.0-117-generic-di",
            "binary_version":  "5.4.0-117.132"
        },
        {
            "binary_name":  "fat-modules-5.4.0-117-generic-di",
            "binary_version":  "5.4.0-117.132"
        },
        {
            "binary_name":  "fat-modules-5.4.0-117-generic-lpae-di",
            "binary_version":  "5.4.0-117.132"
        },
        {
            "binary_name":  "fb-modules-5.4.0-117-generic-di",
            "binary_version":  "5.4.0-117.132"
        },
        {
            "binary_name":  "firewire-core-modules-5.4.0-117-generic-di",
            "binary_version":  "5.4.0-117.132"
        },
        {
            "binary_name":  "floppy-modules-5.4.0-117-generic-di",
            "binary_version":  "5.4.0-117.132"
        },
        {
            "binary_name":  "fs-core-modules-5.4.0-117-generic-di",
            "binary_version":  "5.4.0-117.132"
        },
        {
            "binary_name":  "fs-core-modules-5.4.0-117-generic-lpae-di",
            "binary_version":  "5.4.0-117.132"
        },
        {
            "binary_name":  "fs-secondary-modules-5.4.0-117-generic-di",
            "binary_version":  "5.4.0-117.132"
        },
        {
            "binary_name":  "fs-secondary-modules-5.4.0-117-generic-lpae-di",
            "binary_version":  "5.4.0-117.132"
        },
        {
            "binary_name":  "input-modules-5.4.0-117-generic-di",
            "binary_version":  "5.4.0-117.132"
        },
        {
            "binary_name":  "input-modules-5.4.0-117-generic-lpae-di",
            "binary_version":  "5.4.0-117.132"
        },
        {
            "binary_name":  "ipmi-modules-5.4.0-117-generic-di",
            "binary_version":  "5.4.0-117.132"
        },
        {
            "binary_name":  "ipmi-modules-5.4.0-117-generic-lpae-di",
            "binary_version":  "5.4.0-117.132"
        },
        {
            "binary_name":  "kernel-image-5.4.0-117-generic-di",
            "binary_version":  "5.4.0-117.132"
        },
        {
            "binary_name":  "kernel-image-5.4.0-117-generic-lpae-di",
            "binary_version":  "5.4.0-117.132"
        },
        {
            "binary_name":  "linux-buildinfo-5.4.0-117-generic",
            "binary_version":  "5.4.0-117.132"
        },
        {
            "binary_name":  "linux-buildinfo-5.4.0-117-generic-lpae",
            "binary_version":  "5.4.0-117.132"
        },
        {
            "binary_name":  "linux-buildinfo-5.4.0-117-lowlatency",
            "binary_version":  "5.4.0-117.132"
        },
        {
            "binary_name":  "linux-cloud-tools-5.4.0-117",
            "binary_version":  "5.4.0-117.132"
        },
        {
            "binary_name":  "linux-cloud-tools-5.4.0-117-generic",
            "binary_version":  "5.4.0-117.132"
        },
        {
            "binary_name":  "linux-cloud-tools-5.4.0-117-lowlatency",
            "binary_version":  "5.4.0-117.132"
        },
        {
            "binary_name":  "linux-cloud-tools-common",
            "binary_version":  "5.4.0-117.132"
        },
        {
            "binary_name":  "linux-headers-5.4.0-117",
            "binary_version":  "5.4.0-117.132"
        },
        {
            "binary_name":  "linux-headers-5.4.0-117-generic",
            "binary_version":  "5.4.0-117.132"
        },
        {
            "binary_name":  "linux-headers-5.4.0-117-generic-lpae",
            "binary_version":  "5.4.0-117.132"
        },
        {
            "binary_name":  "linux-headers-5.4.0-117-lowlatency",
            "binary_version":  "5.4.0-117.132"
        },
        {
            "binary_name":  "linux-image-5.4.0-117-generic",
            "binary_version":  "5.4.0-117.132"
        },
        {
            "binary_name":  "linux-image-5.4.0-117-generic-lpae",
            "binary_version":  "5.4.0-117.132"
        },
        {
            "binary_name":  "linux-image-unsigned-5.4.0-117-generic",
            "binary_version":  "5.4.0-117.132"
        },
        {
            "binary_name":  "linux-image-unsigned-5.4.0-117-lowlatency",
            "binary_version":  "5.4.0-117.132"
        },
        {
            "binary_name":  "linux-modules-5.4.0-117-generic",
            "binary_version":  "5.4.0-117.132"
        },
        {
            "binary_name":  "linux-modules-5.4.0-117-generic-lpae",
            "binary_version":  "5.4.0-117.132"
        },
        {
            "binary_name":  "linux-modules-5.4.0-117-lowlatency",
            "binary_version":  "5.4.0-117.132"
        },
        {
            "binary_name":  "linux-modules-extra-5.4.0-117-generic",
            "binary_version":  "5.4.0-117.132"
        },
        {
            "binary_name":  "linux-source-5.4.0",
            "binary_version":  "5.4.0-117.132"
        },
        {
            "binary_name":  "linux-tools-5.4.0-117",
            "binary_version":  "5.4.0-117.132"
        },
        {
            "binary_name":  "linux-tools-5.4.0-117-generic",
            "binary_version":  "5.4.0-117.132"
        },
        {
            "binary_name":  "linux-tools-5.4.0-117-generic-lpae",
            "binary_version":  "5.4.0-117.132"
        },
        {
            "binary_name":  "linux-tools-5.4.0-117-lowlatency",
            "binary_version":  "5.4.0-117.132"
        },
        {
            "binary_name":  "linux-tools-common",
            "binary_version":  "5.4.0-117.132"
        },
        {
            "binary_name":  "linux-tools-host",
            "binary_version":  "5.4.0-117.132"
        },
        {
            "binary_name":  "linux-udebs-generic",
            "binary_version":  "5.4.0-117.132"
        },
        {
            "binary_name":  "linux-udebs-generic-lpae",
            "binary_version":  "5.4.0-117.132"
        },
        {
            "binary_name":  "md-modules-5.4.0-117-generic-di",
            "binary_version":  "5.4.0-117.132"
        },
        {
            "binary_name":  "md-modules-5.4.0-117-generic-lpae-di",
            "binary_version":  "5.4.0-117.132"
        },
        {
            "binary_name":  "message-modules-5.4.0-117-generic-di",
            "binary_version":  "5.4.0-117.132"
        },
        {
            "binary_name":  "mouse-modules-5.4.0-117-generic-di",
            "binary_version":  "5.4.0-117.132"
        },
        {
            "binary_name":  "mouse-modules-5.4.0-117-generic-lpae-di",
            "binary_version":  "5.4.0-117.132"
        },
        {
            "binary_name":  "multipath-modules-5.4.0-117-generic-di",
            "binary_version":  "5.4.0-117.132"
        },
        {
            "binary_name":  "multipath-modules-5.4.0-117-generic-lpae-di",
            "binary_version":  "5.4.0-117.132"
        },
        {
            "binary_name":  "nfs-modules-5.4.0-117-generic-di",
            "binary_version":  "5.4.0-117.132"
        },
        {
            "binary_name":  "nfs-modules-5.4.0-117-generic-lpae-di",
            "binary_version":  "5.4.0-117.132"
        },
        {
            "binary_name":  "nic-modules-5.4.0-117-generic-di",
            "binary_version":  "5.4.0-117.132"
        },
        {
            "binary_name":  "nic-modules-5.4.0-117-generic-lpae-di",
            "binary_version":  "5.4.0-117.132"
        },
        {
            "binary_name":  "nic-pcmcia-modules-5.4.0-117-generic-di",
            "binary_version":  "5.4.0-117.132"
        },
        {
            "binary_name":  "nic-shared-modules-5.4.0-117-generic-di",
            "binary_version":  "5.4.0-117.132"
        },
        {
            "binary_name":  "nic-shared-modules-5.4.0-117-generic-lpae-di",
            "binary_version":  "5.4.0-117.132"
        },
        {
            "binary_name":  "nic-usb-modules-5.4.0-117-generic-di",
            "binary_version":  "5.4.0-117.132"
        },
        {
            "binary_name":  "nic-usb-modules-5.4.0-117-generic-lpae-di",
            "binary_version":  "5.4.0-117.132"
        },
        {
            "binary_name":  "parport-modules-5.4.0-117-generic-di",
            "binary_version":  "5.4.0-117.132"
        },
        {
            "binary_name":  "parport-modules-5.4.0-117-generic-lpae-di",
            "binary_version":  "5.4.0-117.132"
        },
        {
            "binary_name":  "pata-modules-5.4.0-117-generic-di",
            "binary_version":  "5.4.0-117.132"
        },
        {
            "binary_name":  "pcmcia-modules-5.4.0-117-generic-di",
            "binary_version":  "5.4.0-117.132"
        },
        {
            "binary_name":  "pcmcia-storage-modules-5.4.0-117-generic-di",
            "binary_version":  "5.4.0-117.132"
        },
        {
            "binary_name":  "plip-modules-5.4.0-117-generic-di",
            "binary_version":  "5.4.0-117.132"
        },
        {
            "binary_name":  "plip-modules-5.4.0-117-generic-lpae-di",
            "binary_version":  "5.4.0-117.132"
        },
        {
            "binary_name":  "ppp-modules-5.4.0-117-generic-di",
            "binary_version":  "5.4.0-117.132"
        },
        {
            "binary_name":  "ppp-modules-5.4.0-117-generic-lpae-di",
            "binary_version":  "5.4.0-117.132"
        },
        {
            "binary_name":  "sata-modules-5.4.0-117-generic-di",
            "binary_version":  "5.4.0-117.132"
        },
        {
            "binary_name":  "sata-modules-5.4.0-117-generic-lpae-di",
            "binary_version":  "5.4.0-117.132"
        },
        {
            "binary_name":  "scsi-modules-5.4.0-117-generic-di",
            "binary_version":  "5.4.0-117.132"
        },
        {
            "binary_name":  "scsi-modules-5.4.0-117-generic-lpae-di",
            "binary_version":  "5.4.0-117.132"
        },
        {
            "binary_name":  "serial-modules-5.4.0-117-generic-di",
            "binary_version":  "5.4.0-117.132"
        },
        {
            "binary_name":  "storage-core-modules-5.4.0-117-generic-di",
            "binary_version":  "5.4.0-117.132"
        },
        {
            "binary_name":  "storage-core-modules-5.4.0-117-generic-lpae-di",
            "binary_version":  "5.4.0-117.132"
        },
        {
            "binary_name":  "usb-modules-5.4.0-117-generic-di",
            "binary_version":  "5.4.0-117.132"
        },
        {
            "binary_name":  "usb-modules-5.4.0-117-generic-lpae-di",
            "binary_version":  "5.4.0-117.132"
        },
        {
            "binary_name":  "virtio-modules-5.4.0-117-generic-di",
            "binary_version":  "5.4.0-117.132"
        },
        {
            "binary_name":  "vlan-modules-5.4.0-117-generic-di",
            "binary_version":  "5.4.0-117.132"
        },
        {
            "binary_name":  "vlan-modules-5.4.0-117-generic-lpae-di",
            "binary_version":  "5.4.0-117.132"
        }
    ],
    "priority_reason":  "The vulnerability depends on an S3 suspend/resume cycle occurring, which the attacker can neither invoke (requires root to write /sys/power/state) nor influence, making it not reliably triggerable by an unprivileged attacker."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-1637.json"

linux-aws

Package

Name: linux-aws
Purl: pkg:deb/ubuntu/linux-aws?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

5.4.0-1078.84

Affected versions

5.*

5.3.0-1003.3

5.3.0-1008.9

5.3.0-1009.10

5.3.0-1010.11

5.4.0-1005.5

5.4.0-1007.7

5.4.0-1008.8

5.4.0-1009.9

5.4.0-1011.11

5.4.0-1015.15

5.4.0-1017.17

5.4.0-1018.18

5.4.0-1020.20

5.4.0-1021.21

5.4.0-1022.22

5.4.0-1024.24

5.4.0-1025.25

5.4.0-1028.29

5.4.0-1029.30

5.4.0-1030.31

5.4.0-1032.33

5.4.0-1034.35

5.4.0-1035.37

5.4.0-1037.39

5.4.0-1038.40

5.4.0-1039.41

5.4.0-1041.43

5.4.0-1043.45

5.4.0-1045.47

5.4.0-1047.49

5.4.0-1048.50

5.4.0-1049.51

5.4.0-1051.53

5.4.0-1054.57

5.4.0-1055.58

5.4.0-1056.59

5.4.0-1057.60

5.4.0-1058.61

5.4.0-1059.62

5.4.0-1060.63

5.4.0-1061.64

5.4.0-1063.66

5.4.0-1064.67

5.4.0-1065.68

5.4.0-1066.69

5.4.0-1068.72

5.4.0-1069.73

5.4.0-1071.76

5.4.0-1072.77

5.4.0-1073.78

5.4.0-1075.80

Ecosystem specific

{
    "availability":  "No subscription required",
    "binaries":  [
        {
            "binary_name":  "linux-aws-cloud-tools-5.4.0-1078",
            "binary_version":  "5.4.0-1078.84"
        },
        {
            "binary_name":  "linux-aws-headers-5.4.0-1078",
            "binary_version":  "5.4.0-1078.84"
        },
        {
            "binary_name":  "linux-aws-tools-5.4.0-1078",
            "binary_version":  "5.4.0-1078.84"
        },
        {
            "binary_name":  "linux-buildinfo-5.4.0-1078-aws",
            "binary_version":  "5.4.0-1078.84"
        },
        {
            "binary_name":  "linux-cloud-tools-5.4.0-1078-aws",
            "binary_version":  "5.4.0-1078.84"
        },
        {
            "binary_name":  "linux-headers-5.4.0-1078-aws",
            "binary_version":  "5.4.0-1078.84"
        },
        {
            "binary_name":  "linux-image-unsigned-5.4.0-1078-aws",
            "binary_version":  "5.4.0-1078.84"
        },
        {
            "binary_name":  "linux-modules-5.4.0-1078-aws",
            "binary_version":  "5.4.0-1078.84"
        },
        {
            "binary_name":  "linux-modules-extra-5.4.0-1078-aws",
            "binary_version":  "5.4.0-1078.84"
        },
        {
            "binary_name":  "linux-tools-5.4.0-1078-aws",
            "binary_version":  "5.4.0-1078.84"
        }
    ],
    "priority_reason":  "The vulnerability depends on an S3 suspend/resume cycle occurring, which the attacker can neither invoke (requires root to write /sys/power/state) nor influence, making it not reliably triggerable by an unprivileged attacker."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-1637.json"

linux-azure

Package

Name: linux-azure
Purl: pkg:deb/ubuntu/linux-azure?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

5.4.0-1083.87

Affected versions

5.*

5.3.0-1003.3

5.3.0-1008.9

5.3.0-1009.10

5.4.0-1006.6

5.4.0-1008.8

5.4.0-1009.9

5.4.0-1010.10

5.4.0-1012.12

5.4.0-1016.16

5.4.0-1019.19

5.4.0-1020.20

5.4.0-1022.22

5.4.0-1023.23

5.4.0-1025.25

5.4.0-1026.26

5.4.0-1031.32

5.4.0-1032.33

5.4.0-1034.35

5.4.0-1035.36

5.4.0-1036.38

5.4.0-1039.41

5.4.0-1040.42

5.4.0-1041.43

5.4.0-1043.45

5.4.0-1044.46

5.4.0-1046.48

5.4.0-1047.49

5.4.0-1048.50

5.4.0-1049.51

5.4.0-1051.53

5.4.0-1055.57

5.4.0-1056.58

5.4.0-1058.60

5.4.0-1059.62

5.4.0-1061.64

5.4.0-1062.65

5.4.0-1063.66

5.4.0-1064.67

5.4.0-1065.68

5.4.0-1067.70

5.4.0-1068.71

5.4.0-1069.72

5.4.0-1070.73

5.4.0-1072.75

5.4.0-1073.76

5.4.0-1074.77

5.4.0-1077.80

5.4.0-1078.81

5.4.0-1080.83

Ecosystem specific

{
    "availability":  "No subscription required",
    "binaries":  [
        {
            "binary_name":  "linux-azure-cloud-tools-5.4.0-1083",
            "binary_version":  "5.4.0-1083.87"
        },
        {
            "binary_name":  "linux-azure-headers-5.4.0-1083",
            "binary_version":  "5.4.0-1083.87"
        },
        {
            "binary_name":  "linux-azure-tools-5.4.0-1083",
            "binary_version":  "5.4.0-1083.87"
        },
        {
            "binary_name":  "linux-buildinfo-5.4.0-1083-azure",
            "binary_version":  "5.4.0-1083.87"
        },
        {
            "binary_name":  "linux-cloud-tools-5.4.0-1083-azure",
            "binary_version":  "5.4.0-1083.87"
        },
        {
            "binary_name":  "linux-headers-5.4.0-1083-azure",
            "binary_version":  "5.4.0-1083.87"
        },
        {
            "binary_name":  "linux-image-unsigned-5.4.0-1083-azure",
            "binary_version":  "5.4.0-1083.87"
        },
        {
            "binary_name":  "linux-modules-5.4.0-1083-azure",
            "binary_version":  "5.4.0-1083.87"
        },
        {
            "binary_name":  "linux-modules-extra-5.4.0-1083-azure",
            "binary_version":  "5.4.0-1083.87"
        },
        {
            "binary_name":  "linux-tools-5.4.0-1083-azure",
            "binary_version":  "5.4.0-1083.87"
        }
    ],
    "priority_reason":  "The vulnerability depends on an S3 suspend/resume cycle occurring, which the attacker can neither invoke (requires root to write /sys/power/state) nor influence, making it not reliably triggerable by an unprivileged attacker."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-1637.json"

linux-azure-5.15

Package

Name: linux-azure-5.15
Purl: pkg:deb/ubuntu/linux-azure-5.15?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

5.15.0-1008.9~20.04.1

Affected versions

5.*

5.15.0-1007.8~20.04.1

Ecosystem specific

{
    "availability":  "No subscription required",
    "binaries":  [
        {
            "binary_name":  "linux-azure-5.15-cloud-tools-5.15.0-1008",
            "binary_version":  "5.15.0-1008.9~20.04.1"
        },
        {
            "binary_name":  "linux-azure-5.15-headers-5.15.0-1008",
            "binary_version":  "5.15.0-1008.9~20.04.1"
        },
        {
            "binary_name":  "linux-azure-5.15-tools-5.15.0-1008",
            "binary_version":  "5.15.0-1008.9~20.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-5.15.0-1008-azure",
            "binary_version":  "5.15.0-1008.9~20.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-5.15.0-1008-azure",
            "binary_version":  "5.15.0-1008.9~20.04.1"
        },
        {
            "binary_name":  "linux-headers-5.15.0-1008-azure",
            "binary_version":  "5.15.0-1008.9~20.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.15.0-1008-azure",
            "binary_version":  "5.15.0-1008.9~20.04.1"
        },
        {
            "binary_name":  "linux-modules-5.15.0-1008-azure",
            "binary_version":  "5.15.0-1008.9~20.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-5.15.0-1008-azure",
            "binary_version":  "5.15.0-1008.9~20.04.1"
        },
        {
            "binary_name":  "linux-tools-5.15.0-1008-azure",
            "binary_version":  "5.15.0-1008.9~20.04.1"
        }
    ],
    "priority_reason":  "The vulnerability depends on an S3 suspend/resume cycle occurring, which the attacker can neither invoke (requires root to write /sys/power/state) nor influence, making it not reliably triggerable by an unprivileged attacker."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-1637.json"

linux-bluefield

Package

Name: linux-bluefield
Purl: pkg:deb/ubuntu/linux-bluefield?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

5.4.0-1040.44

Affected versions

5.*

5.4.0-1007.10

5.4.0-1011.14

5.4.0-1012.15

5.4.0-1013.16

5.4.0-1016.19

5.4.0-1019.22

5.4.0-1020.23

5.4.0-1021.24

5.4.0-1022.25

5.4.0-1023.26

5.4.0-1025.28

5.4.0-1026.29

5.4.0-1028.31

5.4.0-1030.33

5.4.0-1032.35

5.4.0-1035.38

5.4.0-1036.39

Ecosystem specific

{
    "availability":  "No subscription required",
    "binaries":  [
        {
            "binary_name":  "linux-bluefield-headers-5.4.0-1040",
            "binary_version":  "5.4.0-1040.44"
        },
        {
            "binary_name":  "linux-bluefield-tools-5.4.0-1040",
            "binary_version":  "5.4.0-1040.44"
        },
        {
            "binary_name":  "linux-buildinfo-5.4.0-1040-bluefield",
            "binary_version":  "5.4.0-1040.44"
        },
        {
            "binary_name":  "linux-headers-5.4.0-1040-bluefield",
            "binary_version":  "5.4.0-1040.44"
        },
        {
            "binary_name":  "linux-image-unsigned-5.4.0-1040-bluefield",
            "binary_version":  "5.4.0-1040.44"
        },
        {
            "binary_name":  "linux-modules-5.4.0-1040-bluefield",
            "binary_version":  "5.4.0-1040.44"
        },
        {
            "binary_name":  "linux-tools-5.4.0-1040-bluefield",
            "binary_version":  "5.4.0-1040.44"
        }
    ],
    "priority_reason":  "The vulnerability depends on an S3 suspend/resume cycle occurring, which the attacker can neither invoke (requires root to write /sys/power/state) nor influence, making it not reliably triggerable by an unprivileged attacker."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-1637.json"

linux-gcp

Package

Name: linux-gcp
Purl: pkg:deb/ubuntu/linux-gcp?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

5.4.0-1078.84

Affected versions

5.*

5.3.0-1004.4

5.3.0-1009.10

5.3.0-1011.12

5.4.0-1005.5

5.4.0-1007.7

5.4.0-1008.8

5.4.0-1009.9

5.4.0-1011.11

5.4.0-1015.15

5.4.0-1018.18

5.4.0-1019.19

5.4.0-1021.21

5.4.0-1022.22

5.4.0-1024.24

5.4.0-1025.25

5.4.0-1028.29

5.4.0-1029.31

5.4.0-1030.32

5.4.0-1032.34

5.4.0-1033.35

5.4.0-1034.37

5.4.0-1036.39

5.4.0-1037.40

5.4.0-1038.41

5.4.0-1040.43

5.4.0-1041.44

5.4.0-1042.45

5.4.0-1043.46

5.4.0-1044.47

5.4.0-1046.49

5.4.0-1049.53

5.4.0-1051.55

5.4.0-1052.56

5.4.0-1053.57

5.4.0-1055.59

5.4.0-1056.60

5.4.0-1057.61

5.4.0-1058.62

5.4.0-1059.63

5.4.0-1060.64

5.4.0-1062.66

5.4.0-1063.67

5.4.0-1064.68

5.4.0-1065.69

5.4.0-1067.71

5.4.0-1068.72

5.4.0-1069.73

5.4.0-1072.77

5.4.0-1073.78

5.4.0-1075.80

Ecosystem specific

{
    "availability":  "No subscription required",
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.4.0-1078-gcp",
            "binary_version":  "5.4.0-1078.84"
        },
        {
            "binary_name":  "linux-gcp-headers-5.4.0-1078",
            "binary_version":  "5.4.0-1078.84"
        },
        {
            "binary_name":  "linux-gcp-tools-5.4.0-1078",
            "binary_version":  "5.4.0-1078.84"
        },
        {
            "binary_name":  "linux-headers-5.4.0-1078-gcp",
            "binary_version":  "5.4.0-1078.84"
        },
        {
            "binary_name":  "linux-image-unsigned-5.4.0-1078-gcp",
            "binary_version":  "5.4.0-1078.84"
        },
        {
            "binary_name":  "linux-modules-5.4.0-1078-gcp",
            "binary_version":  "5.4.0-1078.84"
        },
        {
            "binary_name":  "linux-modules-extra-5.4.0-1078-gcp",
            "binary_version":  "5.4.0-1078.84"
        },
        {
            "binary_name":  "linux-tools-5.4.0-1078-gcp",
            "binary_version":  "5.4.0-1078.84"
        }
    ],
    "priority_reason":  "The vulnerability depends on an S3 suspend/resume cycle occurring, which the attacker can neither invoke (requires root to write /sys/power/state) nor influence, making it not reliably triggerable by an unprivileged attacker."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-1637.json"

linux-gke

Package

Name: linux-gke
Purl: pkg:deb/ubuntu/linux-gke?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

5.4.0-1074.79

Affected versions

5.*

5.4.0-1033.35

5.4.0-1035.37

5.4.0-1036.38

5.4.0-1037.39

5.4.0-1039.41

5.4.0-1041.43

5.4.0-1042.44

5.4.0-1043.45

5.4.0-1044.46

5.4.0-1046.48

5.4.0-1049.52

5.4.0-1051.54

5.4.0-1052.55

5.4.0-1053.56

5.4.0-1054.57

5.4.0-1055.58

5.4.0-1056.59

5.4.0-1057.60

5.4.0-1059.62

5.4.0-1061.64

5.4.0-1062.65

5.4.0-1063.66

5.4.0-1065.68

5.4.0-1066.69

5.4.0-1067.70

5.4.0-1068.71

5.4.0-1071.76

5.4.0-1072.77

Ecosystem specific

{
    "availability":  "No subscription required",
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.4.0-1074-gke",
            "binary_version":  "5.4.0-1074.79"
        },
        {
            "binary_name":  "linux-gke-headers-5.4.0-1074",
            "binary_version":  "5.4.0-1074.79"
        },
        {
            "binary_name":  "linux-gke-tools-5.4.0-1074",
            "binary_version":  "5.4.0-1074.79"
        },
        {
            "binary_name":  "linux-headers-5.4.0-1074-gke",
            "binary_version":  "5.4.0-1074.79"
        },
        {
            "binary_name":  "linux-image-unsigned-5.4.0-1074-gke",
            "binary_version":  "5.4.0-1074.79"
        },
        {
            "binary_name":  "linux-modules-5.4.0-1074-gke",
            "binary_version":  "5.4.0-1074.79"
        },
        {
            "binary_name":  "linux-modules-extra-5.4.0-1074-gke",
            "binary_version":  "5.4.0-1074.79"
        },
        {
            "binary_name":  "linux-tools-5.4.0-1074-gke",
            "binary_version":  "5.4.0-1074.79"
        }
    ],
    "priority_reason":  "The vulnerability depends on an S3 suspend/resume cycle occurring, which the attacker can neither invoke (requires root to write /sys/power/state) nor influence, making it not reliably triggerable by an unprivileged attacker."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-1637.json"

linux-gkeop

Package

Name: linux-gkeop
Purl: pkg:deb/ubuntu/linux-gkeop?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

5.4.0-1046.48

Affected versions

5.*

5.4.0-1008.9

5.4.0-1009.10

5.4.0-1010.11

5.4.0-1011.12

5.4.0-1012.13

5.4.0-1013.14

5.4.0-1014.15

5.4.0-1015.16

5.4.0-1016.17

5.4.0-1018.19

5.4.0-1021.22

5.4.0-1022.23

5.4.0-1023.24

5.4.0-1024.25

5.4.0-1025.26

5.4.0-1026.27

5.4.0-1027.28

5.4.0-1029.30

5.4.0-1031.32

5.4.0-1032.33

5.4.0-1033.34

5.4.0-1034.35

5.4.0-1036.37

5.4.0-1037.38

5.4.0-1038.39

5.4.0-1039.40

5.4.0-1040.41

5.4.0-1043.44

Ecosystem specific

{
    "availability":  "No subscription required",
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.4.0-1046-gkeop",
            "binary_version":  "5.4.0-1046.48"
        },
        {
            "binary_name":  "linux-cloud-tools-5.4.0-1046-gkeop",
            "binary_version":  "5.4.0-1046.48"
        },
        {
            "binary_name":  "linux-gkeop-cloud-tools-5.4.0-1046",
            "binary_version":  "5.4.0-1046.48"
        },
        {
            "binary_name":  "linux-gkeop-headers-5.4.0-1046",
            "binary_version":  "5.4.0-1046.48"
        },
        {
            "binary_name":  "linux-gkeop-source-5.4.0",
            "binary_version":  "5.4.0-1046.48"
        },
        {
            "binary_name":  "linux-gkeop-tools-5.4.0-1046",
            "binary_version":  "5.4.0-1046.48"
        },
        {
            "binary_name":  "linux-headers-5.4.0-1046-gkeop",
            "binary_version":  "5.4.0-1046.48"
        },
        {
            "binary_name":  "linux-image-unsigned-5.4.0-1046-gkeop",
            "binary_version":  "5.4.0-1046.48"
        },
        {
            "binary_name":  "linux-modules-5.4.0-1046-gkeop",
            "binary_version":  "5.4.0-1046.48"
        },
        {
            "binary_name":  "linux-modules-extra-5.4.0-1046-gkeop",
            "binary_version":  "5.4.0-1046.48"
        },
        {
            "binary_name":  "linux-tools-5.4.0-1046-gkeop",
            "binary_version":  "5.4.0-1046.48"
        }
    ],
    "priority_reason":  "The vulnerability depends on an S3 suspend/resume cycle occurring, which the attacker can neither invoke (requires root to write /sys/power/state) nor influence, making it not reliably triggerable by an unprivileged attacker."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-1637.json"

linux-hwe-5.15

Package

Name: linux-hwe-5.15
Purl: pkg:deb/ubuntu/linux-hwe-5.15?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

5.15.0-41.44~20.04.1

Affected versions

5.*

5.15.0-33.34~20.04.1

Ecosystem specific

{
    "availability":  "No subscription required",
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.15.0-41-generic",
            "binary_version":  "5.15.0-41.44~20.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-5.15.0-41-generic-64k",
            "binary_version":  "5.15.0-41.44~20.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-5.15.0-41-generic-lpae",
            "binary_version":  "5.15.0-41.44~20.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-5.15.0-41-generic",
            "binary_version":  "5.15.0-41.44~20.04.1"
        },
        {
            "binary_name":  "linux-headers-5.15.0-41-generic",
            "binary_version":  "5.15.0-41.44~20.04.1"
        },
        {
            "binary_name":  "linux-headers-5.15.0-41-generic-64k",
            "binary_version":  "5.15.0-41.44~20.04.1"
        },
        {
            "binary_name":  "linux-headers-5.15.0-41-generic-lpae",
            "binary_version":  "5.15.0-41.44~20.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.15-cloud-tools-5.15.0-41",
            "binary_version":  "5.15.0-41.44~20.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.15-cloud-tools-common",
            "binary_version":  "5.15.0-41.44~20.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.15-headers-5.15.0-41",
            "binary_version":  "5.15.0-41.44~20.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.15-source-5.15.0",
            "binary_version":  "5.15.0-41.44~20.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.15-tools-5.15.0-41",
            "binary_version":  "5.15.0-41.44~20.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.15-tools-common",
            "binary_version":  "5.15.0-41.44~20.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.15-tools-host",
            "binary_version":  "5.15.0-41.44~20.04.1"
        },
        {
            "binary_name":  "linux-image-5.15.0-41-generic",
            "binary_version":  "5.15.0-41.44~20.04.1"
        },
        {
            "binary_name":  "linux-image-5.15.0-41-generic-lpae",
            "binary_version":  "5.15.0-41.44~20.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.15.0-41-generic",
            "binary_version":  "5.15.0-41.44~20.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.15.0-41-generic-64k",
            "binary_version":  "5.15.0-41.44~20.04.1"
        },
        {
            "binary_name":  "linux-modules-5.15.0-41-generic",
            "binary_version":  "5.15.0-41.44~20.04.1"
        },
        {
            "binary_name":  "linux-modules-5.15.0-41-generic-64k",
            "binary_version":  "5.15.0-41.44~20.04.1"
        },
        {
            "binary_name":  "linux-modules-5.15.0-41-generic-lpae",
            "binary_version":  "5.15.0-41.44~20.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-5.15.0-41-generic",
            "binary_version":  "5.15.0-41.44~20.04.1"
        },
        {
            "binary_name":  "linux-modules-iwlwifi-5.15.0-41-generic",
            "binary_version":  "5.15.0-41.44~20.04.1"
        },
        {
            "binary_name":  "linux-tools-5.15.0-41-generic",
            "binary_version":  "5.15.0-41.44~20.04.1"
        },
        {
            "binary_name":  "linux-tools-5.15.0-41-generic-64k",
            "binary_version":  "5.15.0-41.44~20.04.1"
        },
        {
            "binary_name":  "linux-tools-5.15.0-41-generic-lpae",
            "binary_version":  "5.15.0-41.44~20.04.1"
        }
    ],
    "priority_reason":  "The vulnerability depends on an S3 suspend/resume cycle occurring, which the attacker can neither invoke (requires root to write /sys/power/state) nor influence, making it not reliably triggerable by an unprivileged attacker."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-1637.json"

linux-ibm

Package

Name: linux-ibm
Purl: pkg:deb/ubuntu/linux-ibm?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

5.4.0-1026.29

Affected versions

5.*

5.4.0-1003.4

5.4.0-1004.5

5.4.0-1005.6

5.4.0-1006.7

5.4.0-1007.8

5.4.0-1008.9

5.4.0-1010.11

5.4.0-1012.13

5.4.0-1013.14

5.4.0-1014.15

5.4.0-1015.16

5.4.0-1017.19

5.4.0-1018.20

5.4.0-1019.21

5.4.0-1020.22

5.4.0-1021.23

5.4.0-1023.25

Ecosystem specific

{
    "availability":  "No subscription required",
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.4.0-1026-ibm",
            "binary_version":  "5.4.0-1026.29"
        },
        {
            "binary_name":  "linux-headers-5.4.0-1026-ibm",
            "binary_version":  "5.4.0-1026.29"
        },
        {
            "binary_name":  "linux-ibm-cloud-tools-common",
            "binary_version":  "5.4.0-1026.29"
        },
        {
            "binary_name":  "linux-ibm-headers-5.4.0-1026",
            "binary_version":  "5.4.0-1026.29"
        },
        {
            "binary_name":  "linux-ibm-source-5.4.0",
            "binary_version":  "5.4.0-1026.29"
        },
        {
            "binary_name":  "linux-ibm-tools-5.4.0-1026",
            "binary_version":  "5.4.0-1026.29"
        },
        {
            "binary_name":  "linux-ibm-tools-common",
            "binary_version":  "5.4.0-1026.29"
        },
        {
            "binary_name":  "linux-image-unsigned-5.4.0-1026-ibm",
            "binary_version":  "5.4.0-1026.29"
        },
        {
            "binary_name":  "linux-modules-5.4.0-1026-ibm",
            "binary_version":  "5.4.0-1026.29"
        },
        {
            "binary_name":  "linux-modules-extra-5.4.0-1026-ibm",
            "binary_version":  "5.4.0-1026.29"
        },
        {
            "binary_name":  "linux-tools-5.4.0-1026-ibm",
            "binary_version":  "5.4.0-1026.29"
        }
    ],
    "priority_reason":  "The vulnerability depends on an S3 suspend/resume cycle occurring, which the attacker can neither invoke (requires root to write /sys/power/state) nor influence, making it not reliably triggerable by an unprivileged attacker."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-1637.json"

linux-intel-iotg-5.15

Package

Name: linux-intel-iotg-5.15
Purl: pkg:deb/ubuntu/linux-intel-iotg-5.15?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

5.15.0-1008.11~20.04.1

Affected versions

5.*

5.15.0-1003.5~20.04.1

Ecosystem specific

{
    "availability":  "No subscription required",
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.15.0-1008-intel-iotg",
            "binary_version":  "5.15.0-1008.11~20.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-5.15.0-1008-intel-iotg",
            "binary_version":  "5.15.0-1008.11~20.04.1"
        },
        {
            "binary_name":  "linux-headers-5.15.0-1008-intel-iotg",
            "binary_version":  "5.15.0-1008.11~20.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.15.0-1008-intel-iotg",
            "binary_version":  "5.15.0-1008.11~20.04.1"
        },
        {
            "binary_name":  "linux-intel-iotg-5.15-cloud-tools-5.15.0-1008",
            "binary_version":  "5.15.0-1008.11~20.04.1"
        },
        {
            "binary_name":  "linux-intel-iotg-5.15-cloud-tools-common",
            "binary_version":  "5.15.0-1008.11~20.04.1"
        },
        {
            "binary_name":  "linux-intel-iotg-5.15-headers-5.15.0-1008",
            "binary_version":  "5.15.0-1008.11~20.04.1"
        },
        {
            "binary_name":  "linux-intel-iotg-5.15-tools-5.15.0-1008",
            "binary_version":  "5.15.0-1008.11~20.04.1"
        },
        {
            "binary_name":  "linux-intel-iotg-5.15-tools-common",
            "binary_version":  "5.15.0-1008.11~20.04.1"
        },
        {
            "binary_name":  "linux-intel-iotg-5.15-tools-host",
            "binary_version":  "5.15.0-1008.11~20.04.1"
        },
        {
            "binary_name":  "linux-modules-5.15.0-1008-intel-iotg",
            "binary_version":  "5.15.0-1008.11~20.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-5.15.0-1008-intel-iotg",
            "binary_version":  "5.15.0-1008.11~20.04.1"
        },
        {
            "binary_name":  "linux-tools-5.15.0-1008-intel-iotg",
            "binary_version":  "5.15.0-1008.11~20.04.1"
        }
    ],
    "priority_reason":  "The vulnerability depends on an S3 suspend/resume cycle occurring, which the attacker can neither invoke (requires root to write /sys/power/state) nor influence, making it not reliably triggerable by an unprivileged attacker."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-1637.json"

linux-iot

Package

Name: linux-iot
Purl: pkg:deb/ubuntu/linux-iot?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

5.4.0-1004.6

Affected versions

5.*

5.4.0-1001.3

Ecosystem specific

{
    "availability":  "No subscription required",
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.4.0-1004-iot",
            "binary_version":  "5.4.0-1004.6"
        },
        {
            "binary_name":  "linux-headers-5.4.0-1004-iot",
            "binary_version":  "5.4.0-1004.6"
        },
        {
            "binary_name":  "linux-image-unsigned-5.4.0-1004-iot",
            "binary_version":  "5.4.0-1004.6"
        },
        {
            "binary_name":  "linux-iot-headers-5.4.0-1004",
            "binary_version":  "5.4.0-1004.6"
        },
        {
            "binary_name":  "linux-iot-tools-5.4.0-1004",
            "binary_version":  "5.4.0-1004.6"
        },
        {
            "binary_name":  "linux-iot-tools-common",
            "binary_version":  "5.4.0-1004.6"
        },
        {
            "binary_name":  "linux-modules-5.4.0-1004-iot",
            "binary_version":  "5.4.0-1004.6"
        },
        {
            "binary_name":  "linux-tools-5.4.0-1004-iot",
            "binary_version":  "5.4.0-1004.6"
        }
    ],
    "priority_reason":  "The vulnerability depends on an S3 suspend/resume cycle occurring, which the attacker can neither invoke (requires root to write /sys/power/state) nor influence, making it not reliably triggerable by an unprivileged attacker."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-1637.json"

linux-kvm

Package

Name: linux-kvm
Purl: pkg:deb/ubuntu/linux-kvm?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

5.4.0-1068.72

Affected versions

5.*

5.3.0-1003.3

5.3.0-1008.9

5.3.0-1009.10

5.4.0-1004.4

5.4.0-1006.6

5.4.0-1007.7

5.4.0-1008.8

5.4.0-1009.9

5.4.0-1011.11

5.4.0-1015.15

5.4.0-1018.18

5.4.0-1020.20

5.4.0-1021.21

5.4.0-1023.23

5.4.0-1024.24

5.4.0-1026.27

5.4.0-1028.29

5.4.0-1030.31

5.4.0-1031.32

5.4.0-1032.33

5.4.0-1033.34

5.4.0-1034.35

5.4.0-1036.37

5.4.0-1037.38

5.4.0-1038.39

5.4.0-1039.40

5.4.0-1040.41

5.4.0-1041.42

5.4.0-1044.46

5.4.0-1045.47

5.4.0-1046.48

5.4.0-1047.49

5.4.0-1048.50

5.4.0-1049.51

5.4.0-1050.52

5.4.0-1051.53

5.4.0-1053.55

5.4.0-1054.56

5.4.0-1055.57

5.4.0-1056.58

5.4.0-1058.61

5.4.0-1059.62

5.4.0-1061.64

5.4.0-1062.65

5.4.0-1063.66

5.4.0-1065.68

Ecosystem specific

{
    "availability":  "No subscription required",
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.4.0-1068-kvm",
            "binary_version":  "5.4.0-1068.72"
        },
        {
            "binary_name":  "linux-headers-5.4.0-1068-kvm",
            "binary_version":  "5.4.0-1068.72"
        },
        {
            "binary_name":  "linux-image-unsigned-5.4.0-1068-kvm",
            "binary_version":  "5.4.0-1068.72"
        },
        {
            "binary_name":  "linux-kvm-headers-5.4.0-1068",
            "binary_version":  "5.4.0-1068.72"
        },
        {
            "binary_name":  "linux-kvm-tools-5.4.0-1068",
            "binary_version":  "5.4.0-1068.72"
        },
        {
            "binary_name":  "linux-modules-5.4.0-1068-kvm",
            "binary_version":  "5.4.0-1068.72"
        },
        {
            "binary_name":  "linux-tools-5.4.0-1068-kvm",
            "binary_version":  "5.4.0-1068.72"
        }
    ],
    "priority_reason":  "The vulnerability depends on an S3 suspend/resume cycle occurring, which the attacker can neither invoke (requires root to write /sys/power/state) nor influence, making it not reliably triggerable by an unprivileged attacker."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-1637.json"

linux-lowlatency-hwe-5.15

Package

Name: linux-lowlatency-hwe-5.15
Purl: pkg:deb/ubuntu/linux-lowlatency-hwe-5.15?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

5.15.0-42.45~20.04.1

Affected versions

5.*

5.15.0-33.34~20.04.1

Ecosystem specific

{
    "availability":  "No subscription required",
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.15.0-42-lowlatency",
            "binary_version":  "5.15.0-42.45~20.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-5.15.0-42-lowlatency-64k",
            "binary_version":  "5.15.0-42.45~20.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-5.15.0-42-lowlatency",
            "binary_version":  "5.15.0-42.45~20.04.1"
        },
        {
            "binary_name":  "linux-headers-5.15.0-42-lowlatency",
            "binary_version":  "5.15.0-42.45~20.04.1"
        },
        {
            "binary_name":  "linux-headers-5.15.0-42-lowlatency-64k",
            "binary_version":  "5.15.0-42.45~20.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.15.0-42-lowlatency",
            "binary_version":  "5.15.0-42.45~20.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.15.0-42-lowlatency-64k",
            "binary_version":  "5.15.0-42.45~20.04.1"
        },
        {
            "binary_name":  "linux-lowlatency-hwe-5.15-cloud-tools-5.15.0-42",
            "binary_version":  "5.15.0-42.45~20.04.1"
        },
        {
            "binary_name":  "linux-lowlatency-hwe-5.15-cloud-tools-common",
            "binary_version":  "5.15.0-42.45~20.04.1"
        },
        {
            "binary_name":  "linux-lowlatency-hwe-5.15-headers-5.15.0-42",
            "binary_version":  "5.15.0-42.45~20.04.1"
        },
        {
            "binary_name":  "linux-lowlatency-hwe-5.15-tools-5.15.0-42",
            "binary_version":  "5.15.0-42.45~20.04.1"
        },
        {
            "binary_name":  "linux-lowlatency-hwe-5.15-tools-common",
            "binary_version":  "5.15.0-42.45~20.04.1"
        },
        {
            "binary_name":  "linux-lowlatency-hwe-5.15-tools-host",
            "binary_version":  "5.15.0-42.45~20.04.1"
        },
        {
            "binary_name":  "linux-modules-5.15.0-42-lowlatency",
            "binary_version":  "5.15.0-42.45~20.04.1"
        },
        {
            "binary_name":  "linux-modules-5.15.0-42-lowlatency-64k",
            "binary_version":  "5.15.0-42.45~20.04.1"
        },
        {
            "binary_name":  "linux-modules-iwlwifi-5.15.0-42-lowlatency",
            "binary_version":  "5.15.0-42.45~20.04.1"
        },
        {
            "binary_name":  "linux-tools-5.15.0-42-lowlatency",
            "binary_version":  "5.15.0-42.45~20.04.1"
        },
        {
            "binary_name":  "linux-tools-5.15.0-42-lowlatency-64k",
            "binary_version":  "5.15.0-42.45~20.04.1"
        }
    ],
    "priority_reason":  "The vulnerability depends on an S3 suspend/resume cycle occurring, which the attacker can neither invoke (requires root to write /sys/power/state) nor influence, making it not reliably triggerable by an unprivileged attacker."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-1637.json"

linux-oem-5.14

Package

Name: linux-oem-5.14
Purl: pkg:deb/ubuntu/linux-oem-5.14?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

5.14.0-1036.40

Affected versions

5.*

5.14.0-1004.4

5.14.0-1005.5

5.14.0-1007.7

5.14.0-1008.8

5.14.0-1010.10

5.14.0-1011.11

5.14.0-1013.13

5.14.0-1018.19

5.14.0-1020.22

5.14.0-1022.24

5.14.0-1024.26

5.14.0-1027.30

5.14.0-1029.32

5.14.0-1031.34

5.14.0-1032.35

5.14.0-1033.36

5.14.0-1034.37

Ecosystem specific

{
    "availability":  "No subscription required",
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.14.0-1036-oem",
            "binary_version":  "5.14.0-1036.40"
        },
        {
            "binary_name":  "linux-headers-5.14.0-1036-oem",
            "binary_version":  "5.14.0-1036.40"
        },
        {
            "binary_name":  "linux-image-unsigned-5.14.0-1036-oem",
            "binary_version":  "5.14.0-1036.40"
        },
        {
            "binary_name":  "linux-modules-5.14.0-1036-oem",
            "binary_version":  "5.14.0-1036.40"
        },
        {
            "binary_name":  "linux-oem-5.14-headers-5.14.0-1036",
            "binary_version":  "5.14.0-1036.40"
        },
        {
            "binary_name":  "linux-oem-5.14-tools-5.14.0-1036",
            "binary_version":  "5.14.0-1036.40"
        },
        {
            "binary_name":  "linux-oem-5.14-tools-host",
            "binary_version":  "5.14.0-1036.40"
        },
        {
            "binary_name":  "linux-tools-5.14.0-1036-oem",
            "binary_version":  "5.14.0-1036.40"
        }
    ],
    "priority_reason":  "The vulnerability depends on an S3 suspend/resume cycle occurring, which the attacker can neither invoke (requires root to write /sys/power/state) nor influence, making it not reliably triggerable by an unprivileged attacker."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-1637.json"

linux-oracle

Package

Name: linux-oracle
Purl: pkg:deb/ubuntu/linux-oracle?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

5.4.0-1076.83

Affected versions

5.*

5.3.0-1002.2

5.3.0-1007.8

5.3.0-1008.9

5.4.0-1005.5

5.4.0-1007.7

5.4.0-1008.8

5.4.0-1009.9

5.4.0-1011.11

5.4.0-1015.15

5.4.0-1018.18

5.4.0-1019.19

5.4.0-1021.21

5.4.0-1022.22

5.4.0-1024.24

5.4.0-1025.25

5.4.0-1028.29

5.4.0-1029.31

5.4.0-1030.32

5.4.0-1032.34

5.4.0-1034.36

5.4.0-1035.38

5.4.0-1037.40

5.4.0-1038.41

5.4.0-1039.42

5.4.0-1041.44

5.4.0-1042.45

5.4.0-1043.46

5.4.0-1045.49

5.4.0-1046.50

5.4.0-1048.52

5.4.0-1049.53

5.4.0-1052.56

5.4.0-1053.57

5.4.0-1054.58

5.4.0-1055.59

5.4.0-1056.60

5.4.0-1057.61

5.4.0-1058.62

5.4.0-1059.63

5.4.0-1061.65

5.4.0-1062.66

5.4.0-1063.67

5.4.0-1064.68

5.4.0-1066.71

5.4.0-1067.72

5.4.0-1069.75

5.4.0-1070.76

5.4.0-1071.77

5.4.0-1073.79

Ecosystem specific

{
    "availability":  "No subscription required",
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.4.0-1076-oracle",
            "binary_version":  "5.4.0-1076.83"
        },
        {
            "binary_name":  "linux-headers-5.4.0-1076-oracle",
            "binary_version":  "5.4.0-1076.83"
        },
        {
            "binary_name":  "linux-image-unsigned-5.4.0-1076-oracle",
            "binary_version":  "5.4.0-1076.83"
        },
        {
            "binary_name":  "linux-modules-5.4.0-1076-oracle",
            "binary_version":  "5.4.0-1076.83"
        },
        {
            "binary_name":  "linux-modules-extra-5.4.0-1076-oracle",
            "binary_version":  "5.4.0-1076.83"
        },
        {
            "binary_name":  "linux-oracle-headers-5.4.0-1076",
            "binary_version":  "5.4.0-1076.83"
        },
        {
            "binary_name":  "linux-oracle-tools-5.4.0-1076",
            "binary_version":  "5.4.0-1076.83"
        },
        {
            "binary_name":  "linux-tools-5.4.0-1076-oracle",
            "binary_version":  "5.4.0-1076.83"
        }
    ],
    "priority_reason":  "The vulnerability depends on an S3 suspend/resume cycle occurring, which the attacker can neither invoke (requires root to write /sys/power/state) nor influence, making it not reliably triggerable by an unprivileged attacker."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-1637.json"

linux-raspi

Package

Name: linux-raspi
Purl: pkg:deb/ubuntu/linux-raspi?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

5.4.0-1065.75

Affected versions

5.*

5.4.0-1007.7

5.4.0-1008.8

5.4.0-1011.11

5.4.0-1012.12

5.4.0-1013.13

5.4.0-1015.15

5.4.0-1016.17

5.4.0-1018.20

5.4.0-1019.21

5.4.0-1021.24

5.4.0-1022.25

5.4.0-1023.26

5.4.0-1025.28

5.4.0-1026.29

5.4.0-1028.31

5.4.0-1029.32

5.4.0-1030.33

5.4.0-1032.35

5.4.0-1033.36

5.4.0-1034.37

5.4.0-1035.38

5.4.0-1036.39

5.4.0-1038.41

5.4.0-1041.45

5.4.0-1042.46

5.4.0-1043.47

5.4.0-1044.48

5.4.0-1045.49

5.4.0-1046.50

5.4.0-1047.52

5.4.0-1048.53

5.4.0-1050.56

5.4.0-1052.58

5.4.0-1053.60

5.4.0-1055.62

5.4.0-1056.63

5.4.0-1058.65

5.4.0-1059.67

5.4.0-1060.68

5.4.0-1062.70

Ecosystem specific

{
    "availability":  "No subscription required",
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.4.0-1065-raspi",
            "binary_version":  "5.4.0-1065.75"
        },
        {
            "binary_name":  "linux-headers-5.4.0-1065-raspi",
            "binary_version":  "5.4.0-1065.75"
        },
        {
            "binary_name":  "linux-image-5.4.0-1065-raspi",
            "binary_version":  "5.4.0-1065.75"
        },
        {
            "binary_name":  "linux-modules-5.4.0-1065-raspi",
            "binary_version":  "5.4.0-1065.75"
        },
        {
            "binary_name":  "linux-raspi-headers-5.4.0-1065",
            "binary_version":  "5.4.0-1065.75"
        },
        {
            "binary_name":  "linux-raspi-tools-5.4.0-1065",
            "binary_version":  "5.4.0-1065.75"
        },
        {
            "binary_name":  "linux-tools-5.4.0-1065-raspi",
            "binary_version":  "5.4.0-1065.75"
        }
    ],
    "priority_reason":  "The vulnerability depends on an S3 suspend/resume cycle occurring, which the attacker can neither invoke (requires root to write /sys/power/state) nor influence, making it not reliably triggerable by an unprivileged attacker."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-1637.json"

linux-aws-5.11

Package

Name: linux-aws-5.11
Purl: pkg:deb/ubuntu/linux-aws-5.11?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.11.0-1009.9~20.04.2

5.11.0-1014.15~20.04.1

5.11.0-1016.17~20.04.1

5.11.0-1017.18~20.04.1

5.11.0-1019.20~20.04.1

5.11.0-1020.21~20.04.2

5.11.0-1021.22~20.04.2

5.11.0-1022.23~20.04.1

5.11.0-1023.24~20.04.1

5.11.0-1025.27~20.04.1

5.11.0-1027.30~20.04.1

5.11.0-1028.31~20.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-aws-5.11-cloud-tools-5.11.0-1028",
            "binary_version":  "5.11.0-1028.31~20.04.1"
        },
        {
            "binary_name":  "linux-aws-5.11-headers-5.11.0-1028",
            "binary_version":  "5.11.0-1028.31~20.04.1"
        },
        {
            "binary_name":  "linux-aws-5.11-tools-5.11.0-1028",
            "binary_version":  "5.11.0-1028.31~20.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-5.11.0-1028-aws",
            "binary_version":  "5.11.0-1028.31~20.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-5.11.0-1028-aws",
            "binary_version":  "5.11.0-1028.31~20.04.1"
        },
        {
            "binary_name":  "linux-headers-5.11.0-1028-aws",
            "binary_version":  "5.11.0-1028.31~20.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.11.0-1028-aws",
            "binary_version":  "5.11.0-1028.31~20.04.1"
        },
        {
            "binary_name":  "linux-modules-5.11.0-1028-aws",
            "binary_version":  "5.11.0-1028.31~20.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-5.11.0-1028-aws",
            "binary_version":  "5.11.0-1028.31~20.04.1"
        },
        {
            "binary_name":  "linux-tools-5.11.0-1028-aws",
            "binary_version":  "5.11.0-1028.31~20.04.1"
        }
    ],
    "priority_reason":  "The vulnerability depends on an S3 suspend/resume cycle occurring, which the attacker can neither invoke (requires root to write /sys/power/state) nor influence, making it not reliably triggerable by an unprivileged attacker."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-1637.json"

linux-aws-5.13

Package

Name: linux-aws-5.13
Purl: pkg:deb/ubuntu/linux-aws-5.13?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.13.0-1008.9~20.04.2

5.13.0-1011.12~20.04.1

5.13.0-1012.13~20.04.1

5.13.0-1014.15~20.04.1

5.13.0-1017.19~20.04.1

5.13.0-1019.21~20.04.1

5.13.0-1021.23~20.04.2

5.13.0-1022.24~20.04.1

5.13.0-1023.25~20.04.1

5.13.0-1025.27~20.04.1

5.13.0-1028.31~20.04.1

5.13.0-1029.32~20.04.1

5.13.0-1031.35~20.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-aws-5.13-cloud-tools-5.13.0-1031",
            "binary_version":  "5.13.0-1031.35~20.04.1"
        },
        {
            "binary_name":  "linux-aws-5.13-headers-5.13.0-1031",
            "binary_version":  "5.13.0-1031.35~20.04.1"
        },
        {
            "binary_name":  "linux-aws-5.13-tools-5.13.0-1031",
            "binary_version":  "5.13.0-1031.35~20.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-5.13.0-1031-aws",
            "binary_version":  "5.13.0-1031.35~20.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-5.13.0-1031-aws",
            "binary_version":  "5.13.0-1031.35~20.04.1"
        },
        {
            "binary_name":  "linux-headers-5.13.0-1031-aws",
            "binary_version":  "5.13.0-1031.35~20.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.13.0-1031-aws",
            "binary_version":  "5.13.0-1031.35~20.04.1"
        },
        {
            "binary_name":  "linux-modules-5.13.0-1031-aws",
            "binary_version":  "5.13.0-1031.35~20.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-5.13.0-1031-aws",
            "binary_version":  "5.13.0-1031.35~20.04.1"
        },
        {
            "binary_name":  "linux-tools-5.13.0-1031-aws",
            "binary_version":  "5.13.0-1031.35~20.04.1"
        }
    ],
    "priority_reason":  "The vulnerability depends on an S3 suspend/resume cycle occurring, which the attacker can neither invoke (requires root to write /sys/power/state) nor influence, making it not reliably triggerable by an unprivileged attacker."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-1637.json"

linux-aws-5.8

Package

Name: linux-aws-5.8
Purl: pkg:deb/ubuntu/linux-aws-5.8?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.8.0-1035.37~20.04.1

5.8.0-1038.40~20.04.1

5.8.0-1041.43~20.04.1

5.8.0-1042.44~20.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-aws-5.8-cloud-tools-5.8.0-1042",
            "binary_version":  "5.8.0-1042.44~20.04.1"
        },
        {
            "binary_name":  "linux-aws-5.8-headers-5.8.0-1042",
            "binary_version":  "5.8.0-1042.44~20.04.1"
        },
        {
            "binary_name":  "linux-aws-5.8-tools-5.8.0-1042",
            "binary_version":  "5.8.0-1042.44~20.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-5.8.0-1042-aws",
            "binary_version":  "5.8.0-1042.44~20.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-5.8.0-1042-aws",
            "binary_version":  "5.8.0-1042.44~20.04.1"
        },
        {
            "binary_name":  "linux-headers-5.8.0-1042-aws",
            "binary_version":  "5.8.0-1042.44~20.04.1"
        },
        {
            "binary_name":  "linux-image-5.8.0-1042-aws",
            "binary_version":  "5.8.0-1042.44~20.04.1"
        },
        {
            "binary_name":  "linux-modules-5.8.0-1042-aws",
            "binary_version":  "5.8.0-1042.44~20.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-5.8.0-1042-aws",
            "binary_version":  "5.8.0-1042.44~20.04.1"
        },
        {
            "binary_name":  "linux-tools-5.8.0-1042-aws",
            "binary_version":  "5.8.0-1042.44~20.04.1"
        }
    ],
    "priority_reason":  "The vulnerability depends on an S3 suspend/resume cycle occurring, which the attacker can neither invoke (requires root to write /sys/power/state) nor influence, making it not reliably triggerable by an unprivileged attacker."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-1637.json"

linux-azure-5.11

Package

Name: linux-azure-5.11
Purl: pkg:deb/ubuntu/linux-azure-5.11?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.11.0-1007.7~20.04.2

5.11.0-1012.13~20.04.1

5.11.0-1013.14~20.04.1

5.11.0-1015.16~20.04.1

5.11.0-1017.18~20.04.1

5.11.0-1019.20~20.04.1

5.11.0-1020.21~20.04.1

5.11.0-1021.22~20.04.1

5.11.0-1022.23~20.04.1

5.11.0-1023.24~20.04.1

5.11.0-1025.27~20.04.1

5.11.0-1027.30~20.04.1

5.11.0-1028.31~20.04.2

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-azure-5.11-cloud-tools-5.11.0-1028",
            "binary_version":  "5.11.0-1028.31~20.04.2"
        },
        {
            "binary_name":  "linux-azure-5.11-headers-5.11.0-1028",
            "binary_version":  "5.11.0-1028.31~20.04.2"
        },
        {
            "binary_name":  "linux-azure-5.11-tools-5.11.0-1028",
            "binary_version":  "5.11.0-1028.31~20.04.2"
        },
        {
            "binary_name":  "linux-buildinfo-5.11.0-1028-azure",
            "binary_version":  "5.11.0-1028.31~20.04.2"
        },
        {
            "binary_name":  "linux-cloud-tools-5.11.0-1028-azure",
            "binary_version":  "5.11.0-1028.31~20.04.2"
        },
        {
            "binary_name":  "linux-headers-5.11.0-1028-azure",
            "binary_version":  "5.11.0-1028.31~20.04.2"
        },
        {
            "binary_name":  "linux-image-unsigned-5.11.0-1028-azure",
            "binary_version":  "5.11.0-1028.31~20.04.2"
        },
        {
            "binary_name":  "linux-modules-5.11.0-1028-azure",
            "binary_version":  "5.11.0-1028.31~20.04.2"
        },
        {
            "binary_name":  "linux-modules-extra-5.11.0-1028-azure",
            "binary_version":  "5.11.0-1028.31~20.04.2"
        },
        {
            "binary_name":  "linux-tools-5.11.0-1028-azure",
            "binary_version":  "5.11.0-1028.31~20.04.2"
        }
    ],
    "priority_reason":  "The vulnerability depends on an S3 suspend/resume cycle occurring, which the attacker can neither invoke (requires root to write /sys/power/state) nor influence, making it not reliably triggerable by an unprivileged attacker."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-1637.json"

linux-azure-5.13

Package

Name: linux-azure-5.13
Purl: pkg:deb/ubuntu/linux-azure-5.13?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.13.0-1009.10~20.04.2

5.13.0-1012.14~20.04.1

5.13.0-1013.15~20.04.1

5.13.0-1014.16~20.04.1

5.13.0-1017.19~20.04.1

5.13.0-1021.24~20.04.1

5.13.0-1022.26~20.04.1

5.13.0-1023.27~20.04.1

5.13.0-1025.29~20.04.1

5.13.0-1028.33~20.04.1

5.13.0-1029.34~20.04.1

5.13.0-1031.37~20.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-azure-5.13-cloud-tools-5.13.0-1031",
            "binary_version":  "5.13.0-1031.37~20.04.1"
        },
        {
            "binary_name":  "linux-azure-5.13-headers-5.13.0-1031",
            "binary_version":  "5.13.0-1031.37~20.04.1"
        },
        {
            "binary_name":  "linux-azure-5.13-tools-5.13.0-1031",
            "binary_version":  "5.13.0-1031.37~20.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-5.13.0-1031-azure",
            "binary_version":  "5.13.0-1031.37~20.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-5.13.0-1031-azure",
            "binary_version":  "5.13.0-1031.37~20.04.1"
        },
        {
            "binary_name":  "linux-headers-5.13.0-1031-azure",
            "binary_version":  "5.13.0-1031.37~20.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.13.0-1031-azure",
            "binary_version":  "5.13.0-1031.37~20.04.1"
        },
        {
            "binary_name":  "linux-modules-5.13.0-1031-azure",
            "binary_version":  "5.13.0-1031.37~20.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-5.13.0-1031-azure",
            "binary_version":  "5.13.0-1031.37~20.04.1"
        },
        {
            "binary_name":  "linux-tools-5.13.0-1031-azure",
            "binary_version":  "5.13.0-1031.37~20.04.1"
        }
    ],
    "priority_reason":  "The vulnerability depends on an S3 suspend/resume cycle occurring, which the attacker can neither invoke (requires root to write /sys/power/state) nor influence, making it not reliably triggerable by an unprivileged attacker."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-1637.json"

linux-azure-5.8

Package

Name: linux-azure-5.8
Purl: pkg:deb/ubuntu/linux-azure-5.8?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.8.0-1033.35~20.04.1

5.8.0-1036.38~20.04.1

5.8.0-1039.42~20.04.1

5.8.0-1040.43~20.04.1

5.8.0-1041.44~20.04.1

5.8.0-1042.45~20.04.1

5.8.0-1043.46~20.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-azure-5.8-cloud-tools-5.8.0-1043",
            "binary_version":  "5.8.0-1043.46~20.04.1"
        },
        {
            "binary_name":  "linux-azure-5.8-headers-5.8.0-1043",
            "binary_version":  "5.8.0-1043.46~20.04.1"
        },
        {
            "binary_name":  "linux-azure-5.8-tools-5.8.0-1043",
            "binary_version":  "5.8.0-1043.46~20.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-5.8.0-1043-azure",
            "binary_version":  "5.8.0-1043.46~20.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-5.8.0-1043-azure",
            "binary_version":  "5.8.0-1043.46~20.04.1"
        },
        {
            "binary_name":  "linux-headers-5.8.0-1043-azure",
            "binary_version":  "5.8.0-1043.46~20.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.8.0-1043-azure",
            "binary_version":  "5.8.0-1043.46~20.04.1"
        },
        {
            "binary_name":  "linux-modules-5.8.0-1043-azure",
            "binary_version":  "5.8.0-1043.46~20.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-5.8.0-1043-azure",
            "binary_version":  "5.8.0-1043.46~20.04.1"
        },
        {
            "binary_name":  "linux-tools-5.8.0-1043-azure",
            "binary_version":  "5.8.0-1043.46~20.04.1"
        }
    ],
    "priority_reason":  "The vulnerability depends on an S3 suspend/resume cycle occurring, which the attacker can neither invoke (requires root to write /sys/power/state) nor influence, making it not reliably triggerable by an unprivileged attacker."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-1637.json"

linux-gcp-5.11

Package

Name: linux-gcp-5.11
Purl: pkg:deb/ubuntu/linux-gcp-5.11?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.11.0-1009.10~20.04.1

5.11.0-1014.16~20.04.1

5.11.0-1017.19~20.04.1

5.11.0-1018.20~20.04.2

5.11.0-1020.22~20.04.1

5.11.0-1021.23~20.04.1

5.11.0-1022.24~20.04.1

5.11.0-1023.25~20.04.1

5.11.0-1024.26~20.04.1

5.11.0-1026.29~20.04.1

5.11.0-1028.32~20.04.1

5.11.0-1029.33~20.04.3

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.11.0-1029-gcp",
            "binary_version":  "5.11.0-1029.33~20.04.3"
        },
        {
            "binary_name":  "linux-gcp-5.11-headers-5.11.0-1029",
            "binary_version":  "5.11.0-1029.33~20.04.3"
        },
        {
            "binary_name":  "linux-gcp-5.11-tools-5.11.0-1029",
            "binary_version":  "5.11.0-1029.33~20.04.3"
        },
        {
            "binary_name":  "linux-headers-5.11.0-1029-gcp",
            "binary_version":  "5.11.0-1029.33~20.04.3"
        },
        {
            "binary_name":  "linux-image-unsigned-5.11.0-1029-gcp",
            "binary_version":  "5.11.0-1029.33~20.04.3"
        },
        {
            "binary_name":  "linux-modules-5.11.0-1029-gcp",
            "binary_version":  "5.11.0-1029.33~20.04.3"
        },
        {
            "binary_name":  "linux-modules-extra-5.11.0-1029-gcp",
            "binary_version":  "5.11.0-1029.33~20.04.3"
        },
        {
            "binary_name":  "linux-tools-5.11.0-1029-gcp",
            "binary_version":  "5.11.0-1029.33~20.04.3"
        }
    ],
    "priority_reason":  "The vulnerability depends on an S3 suspend/resume cycle occurring, which the attacker can neither invoke (requires root to write /sys/power/state) nor influence, making it not reliably triggerable by an unprivileged attacker."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-1637.json"

linux-gcp-5.13

Package

Name: linux-gcp-5.13
Purl: pkg:deb/ubuntu/linux-gcp-5.13?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.13.0-1008.9~20.04.3

5.13.0-1012.15~20.04.1

5.13.0-1013.16~20.04.1

5.13.0-1015.18~20.04.1

5.13.0-1019.23~20.04.1

5.13.0-1021.25~20.04.1

5.13.0-1023.28~20.04.1

5.13.0-1024.29~20.04.1

5.13.0-1025.30~20.04.1

5.13.0-1027.32~20.04.1

5.13.0-1030.36~20.04.1

5.13.0-1031.37~20.04.1

5.13.0-1033.40~20.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.13.0-1033-gcp",
            "binary_version":  "5.13.0-1033.40~20.04.1"
        },
        {
            "binary_name":  "linux-gcp-5.13-headers-5.13.0-1033",
            "binary_version":  "5.13.0-1033.40~20.04.1"
        },
        {
            "binary_name":  "linux-gcp-5.13-tools-5.13.0-1033",
            "binary_version":  "5.13.0-1033.40~20.04.1"
        },
        {
            "binary_name":  "linux-headers-5.13.0-1033-gcp",
            "binary_version":  "5.13.0-1033.40~20.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.13.0-1033-gcp",
            "binary_version":  "5.13.0-1033.40~20.04.1"
        },
        {
            "binary_name":  "linux-modules-5.13.0-1033-gcp",
            "binary_version":  "5.13.0-1033.40~20.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-5.13.0-1033-gcp",
            "binary_version":  "5.13.0-1033.40~20.04.1"
        },
        {
            "binary_name":  "linux-tools-5.13.0-1033-gcp",
            "binary_version":  "5.13.0-1033.40~20.04.1"
        }
    ],
    "priority_reason":  "The vulnerability depends on an S3 suspend/resume cycle occurring, which the attacker can neither invoke (requires root to write /sys/power/state) nor influence, making it not reliably triggerable by an unprivileged attacker."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-1637.json"

linux-gcp-5.8

Package

Name: linux-gcp-5.8
Purl: pkg:deb/ubuntu/linux-gcp-5.8?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.8.0-1032.34~20.04.1

5.8.0-1035.37~20.04.1

5.8.0-1038.40~20.04.1

5.8.0-1039.41

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.8.0-1039-gcp",
            "binary_version":  "5.8.0-1039.41"
        },
        {
            "binary_name":  "linux-gcp-5.8-headers-5.8.0-1039",
            "binary_version":  "5.8.0-1039.41"
        },
        {
            "binary_name":  "linux-gcp-5.8-tools-5.8.0-1039",
            "binary_version":  "5.8.0-1039.41"
        },
        {
            "binary_name":  "linux-headers-5.8.0-1039-gcp",
            "binary_version":  "5.8.0-1039.41"
        },
        {
            "binary_name":  "linux-image-unsigned-5.8.0-1039-gcp",
            "binary_version":  "5.8.0-1039.41"
        },
        {
            "binary_name":  "linux-modules-5.8.0-1039-gcp",
            "binary_version":  "5.8.0-1039.41"
        },
        {
            "binary_name":  "linux-modules-extra-5.8.0-1039-gcp",
            "binary_version":  "5.8.0-1039.41"
        },
        {
            "binary_name":  "linux-tools-5.8.0-1039-gcp",
            "binary_version":  "5.8.0-1039.41"
        }
    ],
    "priority_reason":  "The vulnerability depends on an S3 suspend/resume cycle occurring, which the attacker can neither invoke (requires root to write /sys/power/state) nor influence, making it not reliably triggerable by an unprivileged attacker."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-1637.json"

linux-hwe-5.11

Package

Name: linux-hwe-5.11
Purl: pkg:deb/ubuntu/linux-hwe-5.11?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.11.0-22.23~20.04.1

5.11.0-25.27~20.04.1

5.11.0-27.29~20.04.1

5.11.0-34.36~20.04.1

5.11.0-36.40~20.04.1

5.11.0-37.41~20.04.2

5.11.0-38.42~20.04.1

5.11.0-40.44~20.04.2

5.11.0-41.45~20.04.1

5.11.0-43.47~20.04.2

5.11.0-44.48~20.04.2

5.11.0-46.51~20.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "block-modules-5.11.0-46-generic-64k-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "block-modules-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "block-modules-5.11.0-46-generic-lpae-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "crypto-modules-5.11.0-46-generic-64k-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "crypto-modules-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "crypto-modules-5.11.0-46-generic-lpae-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "dasd-extra-modules-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "dasd-modules-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "fat-modules-5.11.0-46-generic-64k-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "fat-modules-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "fat-modules-5.11.0-46-generic-lpae-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "fb-modules-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "firewire-core-modules-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "floppy-modules-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "fs-core-modules-5.11.0-46-generic-64k-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "fs-core-modules-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "fs-core-modules-5.11.0-46-generic-lpae-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "fs-secondary-modules-5.11.0-46-generic-64k-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "fs-secondary-modules-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "fs-secondary-modules-5.11.0-46-generic-lpae-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "input-modules-5.11.0-46-generic-64k-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "input-modules-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "input-modules-5.11.0-46-generic-lpae-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "ipmi-modules-5.11.0-46-generic-64k-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "ipmi-modules-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "ipmi-modules-5.11.0-46-generic-lpae-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "kernel-image-5.11.0-46-generic-64k-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "kernel-image-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "kernel-image-5.11.0-46-generic-lpae-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-5.11.0-46-generic",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-5.11.0-46-generic-64k",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-5.11.0-46-generic-lpae",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-5.11.0-46-lowlatency",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-5.11.0-46-generic",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-5.11.0-46-lowlatency",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "linux-headers-5.11.0-46-generic",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "linux-headers-5.11.0-46-generic-64k",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "linux-headers-5.11.0-46-generic-lpae",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "linux-headers-5.11.0-46-lowlatency",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.11-cloud-tools-5.11.0-46",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.11-cloud-tools-common",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.11-headers-5.11.0-46",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.11-source-5.11.0",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.11-tools-5.11.0-46",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.11-tools-common",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.11-tools-host",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.11-udebs-generic",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.11-udebs-generic-64k",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.11-udebs-generic-lpae",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "linux-image-5.11.0-46-generic",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "linux-image-5.11.0-46-generic-lpae",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.11.0-46-generic",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.11.0-46-generic-64k",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.11.0-46-lowlatency",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "linux-modules-5.11.0-46-generic",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "linux-modules-5.11.0-46-generic-64k",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "linux-modules-5.11.0-46-generic-lpae",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "linux-modules-5.11.0-46-lowlatency",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-5.11.0-46-generic",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "linux-tools-5.11.0-46-generic",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "linux-tools-5.11.0-46-generic-64k",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "linux-tools-5.11.0-46-generic-lpae",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "linux-tools-5.11.0-46-lowlatency",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "md-modules-5.11.0-46-generic-64k-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "md-modules-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "md-modules-5.11.0-46-generic-lpae-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "message-modules-5.11.0-46-generic-64k-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "message-modules-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "mouse-modules-5.11.0-46-generic-64k-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "mouse-modules-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "mouse-modules-5.11.0-46-generic-lpae-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "multipath-modules-5.11.0-46-generic-64k-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "multipath-modules-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "multipath-modules-5.11.0-46-generic-lpae-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "nfs-modules-5.11.0-46-generic-64k-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "nfs-modules-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "nfs-modules-5.11.0-46-generic-lpae-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "nic-modules-5.11.0-46-generic-64k-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "nic-modules-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "nic-modules-5.11.0-46-generic-lpae-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "nic-pcmcia-modules-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "nic-shared-modules-5.11.0-46-generic-64k-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "nic-shared-modules-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "nic-shared-modules-5.11.0-46-generic-lpae-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "nic-usb-modules-5.11.0-46-generic-64k-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "nic-usb-modules-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "nic-usb-modules-5.11.0-46-generic-lpae-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "parport-modules-5.11.0-46-generic-64k-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "parport-modules-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "parport-modules-5.11.0-46-generic-lpae-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "pata-modules-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "pcmcia-modules-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "pcmcia-storage-modules-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "plip-modules-5.11.0-46-generic-64k-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "plip-modules-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "plip-modules-5.11.0-46-generic-lpae-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "ppp-modules-5.11.0-46-generic-64k-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "ppp-modules-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "ppp-modules-5.11.0-46-generic-lpae-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "sata-modules-5.11.0-46-generic-64k-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "sata-modules-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "sata-modules-5.11.0-46-generic-lpae-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "scsi-modules-5.11.0-46-generic-64k-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "scsi-modules-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "scsi-modules-5.11.0-46-generic-lpae-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "serial-modules-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "storage-core-modules-5.11.0-46-generic-64k-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "storage-core-modules-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "storage-core-modules-5.11.0-46-generic-lpae-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "usb-modules-5.11.0-46-generic-64k-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "usb-modules-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "usb-modules-5.11.0-46-generic-lpae-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "virtio-modules-5.11.0-46-generic-64k-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "virtio-modules-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "vlan-modules-5.11.0-46-generic-64k-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "vlan-modules-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "vlan-modules-5.11.0-46-generic-lpae-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        }
    ],
    "priority_reason":  "The vulnerability depends on an S3 suspend/resume cycle occurring, which the attacker can neither invoke (requires root to write /sys/power/state) nor influence, making it not reliably triggerable by an unprivileged attacker."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-1637.json"

linux-hwe-5.13

Package

Name: linux-hwe-5.13
Purl: pkg:deb/ubuntu/linux-hwe-5.13?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.13.0-21.21~20.04.1

5.13.0-22.22~20.04.1

5.13.0-23.23~20.04.2

5.13.0-25.26~20.04.1

5.13.0-27.29~20.04.1

5.13.0-28.31~20.04.1

5.13.0-30.33~20.04.1

5.13.0-35.40~20.04.1

5.13.0-37.42~20.04.1

5.13.0-39.44~20.04.1

5.13.0-40.45~20.04.1

5.13.0-41.46~20.04.1

5.13.0-44.49~20.04.1

5.13.0-48.54~20.04.1

5.13.0-51.58~20.04.1

5.13.0-52.59~20.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "block-modules-5.13.0-52-generic-64k-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "block-modules-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "block-modules-5.13.0-52-generic-lpae-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "crypto-modules-5.13.0-52-generic-64k-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "crypto-modules-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "crypto-modules-5.13.0-52-generic-lpae-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "dasd-extra-modules-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "dasd-modules-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "fat-modules-5.13.0-52-generic-64k-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "fat-modules-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "fat-modules-5.13.0-52-generic-lpae-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "fb-modules-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "firewire-core-modules-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "floppy-modules-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "fs-core-modules-5.13.0-52-generic-64k-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "fs-core-modules-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "fs-core-modules-5.13.0-52-generic-lpae-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "fs-secondary-modules-5.13.0-52-generic-64k-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "fs-secondary-modules-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "fs-secondary-modules-5.13.0-52-generic-lpae-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "input-modules-5.13.0-52-generic-64k-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "input-modules-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "input-modules-5.13.0-52-generic-lpae-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "ipmi-modules-5.13.0-52-generic-64k-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "ipmi-modules-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "ipmi-modules-5.13.0-52-generic-lpae-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "kernel-image-5.13.0-52-generic-64k-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "kernel-image-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "kernel-image-5.13.0-52-generic-lpae-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-5.13.0-52-generic",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-5.13.0-52-generic-64k",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-5.13.0-52-generic-lpae",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-5.13.0-52-lowlatency",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-5.13.0-52-generic",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-5.13.0-52-lowlatency",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "linux-headers-5.13.0-52-generic",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "linux-headers-5.13.0-52-generic-64k",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "linux-headers-5.13.0-52-generic-lpae",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "linux-headers-5.13.0-52-lowlatency",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.13-cloud-tools-5.13.0-52",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.13-cloud-tools-common",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.13-headers-5.13.0-52",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.13-source-5.13.0",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.13-tools-5.13.0-52",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.13-tools-common",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.13-tools-host",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.13-udebs-generic",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.13-udebs-generic-64k",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.13-udebs-generic-lpae",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "linux-image-5.13.0-52-generic",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "linux-image-5.13.0-52-generic-lpae",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.13.0-52-generic",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.13.0-52-generic-64k",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.13.0-52-lowlatency",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "linux-modules-5.13.0-52-generic",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "linux-modules-5.13.0-52-generic-64k",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "linux-modules-5.13.0-52-generic-lpae",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "linux-modules-5.13.0-52-lowlatency",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-5.13.0-52-generic",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "linux-tools-5.13.0-52-generic",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "linux-tools-5.13.0-52-generic-64k",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "linux-tools-5.13.0-52-generic-lpae",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "linux-tools-5.13.0-52-lowlatency",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "md-modules-5.13.0-52-generic-64k-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "md-modules-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "md-modules-5.13.0-52-generic-lpae-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "message-modules-5.13.0-52-generic-64k-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "message-modules-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "mouse-modules-5.13.0-52-generic-64k-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "mouse-modules-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "mouse-modules-5.13.0-52-generic-lpae-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "multipath-modules-5.13.0-52-generic-64k-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "multipath-modules-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "multipath-modules-5.13.0-52-generic-lpae-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "nfs-modules-5.13.0-52-generic-64k-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "nfs-modules-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "nfs-modules-5.13.0-52-generic-lpae-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "nic-modules-5.13.0-52-generic-64k-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "nic-modules-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "nic-modules-5.13.0-52-generic-lpae-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "nic-pcmcia-modules-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "nic-shared-modules-5.13.0-52-generic-64k-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "nic-shared-modules-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "nic-shared-modules-5.13.0-52-generic-lpae-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "nic-usb-modules-5.13.0-52-generic-64k-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "nic-usb-modules-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "nic-usb-modules-5.13.0-52-generic-lpae-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "parport-modules-5.13.0-52-generic-64k-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "parport-modules-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "parport-modules-5.13.0-52-generic-lpae-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "pata-modules-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "pcmcia-modules-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "pcmcia-storage-modules-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "plip-modules-5.13.0-52-generic-64k-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "plip-modules-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "plip-modules-5.13.0-52-generic-lpae-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "ppp-modules-5.13.0-52-generic-64k-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "ppp-modules-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "ppp-modules-5.13.0-52-generic-lpae-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "sata-modules-5.13.0-52-generic-64k-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "sata-modules-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "sata-modules-5.13.0-52-generic-lpae-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "scsi-modules-5.13.0-52-generic-64k-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "scsi-modules-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "scsi-modules-5.13.0-52-generic-lpae-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "serial-modules-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "storage-core-modules-5.13.0-52-generic-64k-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "storage-core-modules-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "storage-core-modules-5.13.0-52-generic-lpae-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "usb-modules-5.13.0-52-generic-64k-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "usb-modules-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "usb-modules-5.13.0-52-generic-lpae-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "virtio-modules-5.13.0-52-generic-64k-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "virtio-modules-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "vlan-modules-5.13.0-52-generic-64k-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "vlan-modules-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "vlan-modules-5.13.0-52-generic-lpae-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        }
    ],
    "priority_reason":  "The vulnerability depends on an S3 suspend/resume cycle occurring, which the attacker can neither invoke (requires root to write /sys/power/state) nor influence, making it not reliably triggerable by an unprivileged attacker."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-1637.json"

linux-hwe-5.8

Package

Name: linux-hwe-5.8
Purl: pkg:deb/ubuntu/linux-hwe-5.8?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.8.0-23.24~20.04.1

5.8.0-25.26~20.04.1

5.8.0-28.30~20.04.1

5.8.0-29.31~20.04.1

5.8.0-31.33~20.04.1

5.8.0-33.36~20.04.1

5.8.0-34.37~20.04.2

5.8.0-36.40~20.04.1

5.8.0-38.43~20.04.1

5.8.0-40.45~20.04.1

5.8.0-41.46~20.04.1

5.8.0-43.49~20.04.1

5.8.0-44.50~20.04.1

5.8.0-45.51~20.04.1

5.8.0-48.54~20.04.1

5.8.0-49.55~20.04.1

5.8.0-50.56~20.04.1

5.8.0-53.60~20.04.1

5.8.0-55.62~20.04.1

5.8.0-59.66~20.04.1

5.8.0-63.71~20.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "block-modules-5.8.0-63-generic-64k-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "block-modules-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "block-modules-5.8.0-63-generic-lpae-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "crypto-modules-5.8.0-63-generic-64k-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "crypto-modules-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "crypto-modules-5.8.0-63-generic-lpae-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "dasd-extra-modules-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "dasd-modules-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "fat-modules-5.8.0-63-generic-64k-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "fat-modules-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "fat-modules-5.8.0-63-generic-lpae-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "fb-modules-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "firewire-core-modules-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "floppy-modules-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "fs-core-modules-5.8.0-63-generic-64k-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "fs-core-modules-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "fs-core-modules-5.8.0-63-generic-lpae-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "fs-secondary-modules-5.8.0-63-generic-64k-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "fs-secondary-modules-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "fs-secondary-modules-5.8.0-63-generic-lpae-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "input-modules-5.8.0-63-generic-64k-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "input-modules-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "input-modules-5.8.0-63-generic-lpae-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "ipmi-modules-5.8.0-63-generic-64k-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "ipmi-modules-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "ipmi-modules-5.8.0-63-generic-lpae-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "kernel-image-5.8.0-63-generic-64k-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "kernel-image-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "kernel-image-5.8.0-63-generic-lpae-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-5.8.0-63-generic",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-5.8.0-63-generic-64k",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-5.8.0-63-generic-lpae",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-5.8.0-63-lowlatency",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-5.8.0-63-generic",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-5.8.0-63-lowlatency",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "linux-headers-5.8.0-63-generic",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "linux-headers-5.8.0-63-generic-64k",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "linux-headers-5.8.0-63-generic-lpae",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "linux-headers-5.8.0-63-lowlatency",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.8-cloud-tools-5.8.0-63",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.8-cloud-tools-common",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.8-headers-5.8.0-63",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.8-source-5.8.0",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.8-tools-5.8.0-63",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.8-tools-common",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.8-tools-host",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.8-udebs-generic",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.8-udebs-generic-64k",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.8-udebs-generic-lpae",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "linux-image-5.8.0-63-generic",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "linux-image-5.8.0-63-generic-lpae",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.8.0-63-generic",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.8.0-63-generic-64k",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.8.0-63-lowlatency",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "linux-modules-5.8.0-63-generic",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "linux-modules-5.8.0-63-generic-64k",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "linux-modules-5.8.0-63-generic-lpae",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "linux-modules-5.8.0-63-lowlatency",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-5.8.0-63-generic",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "linux-tools-5.8.0-63-generic",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "linux-tools-5.8.0-63-generic-64k",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "linux-tools-5.8.0-63-generic-lpae",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "linux-tools-5.8.0-63-lowlatency",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "md-modules-5.8.0-63-generic-64k-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "md-modules-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "md-modules-5.8.0-63-generic-lpae-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "message-modules-5.8.0-63-generic-64k-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "message-modules-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "mouse-modules-5.8.0-63-generic-64k-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "mouse-modules-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "mouse-modules-5.8.0-63-generic-lpae-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "multipath-modules-5.8.0-63-generic-64k-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "multipath-modules-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "multipath-modules-5.8.0-63-generic-lpae-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "nfs-modules-5.8.0-63-generic-64k-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "nfs-modules-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "nfs-modules-5.8.0-63-generic-lpae-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "nic-modules-5.8.0-63-generic-64k-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "nic-modules-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "nic-modules-5.8.0-63-generic-lpae-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "nic-pcmcia-modules-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "nic-shared-modules-5.8.0-63-generic-64k-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "nic-shared-modules-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "nic-shared-modules-5.8.0-63-generic-lpae-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "nic-usb-modules-5.8.0-63-generic-64k-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "nic-usb-modules-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "nic-usb-modules-5.8.0-63-generic-lpae-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "parport-modules-5.8.0-63-generic-64k-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "parport-modules-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "parport-modules-5.8.0-63-generic-lpae-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "pata-modules-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "pcmcia-modules-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "pcmcia-storage-modules-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "plip-modules-5.8.0-63-generic-64k-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "plip-modules-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "plip-modules-5.8.0-63-generic-lpae-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "ppp-modules-5.8.0-63-generic-64k-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "ppp-modules-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "ppp-modules-5.8.0-63-generic-lpae-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "sata-modules-5.8.0-63-generic-64k-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "sata-modules-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "sata-modules-5.8.0-63-generic-lpae-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "scsi-modules-5.8.0-63-generic-64k-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "scsi-modules-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "scsi-modules-5.8.0-63-generic-lpae-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "serial-modules-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "storage-core-modules-5.8.0-63-generic-64k-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "storage-core-modules-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "storage-core-modules-5.8.0-63-generic-lpae-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "usb-modules-5.8.0-63-generic-64k-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "usb-modules-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "usb-modules-5.8.0-63-generic-lpae-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "virtio-modules-5.8.0-63-generic-64k-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "virtio-modules-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "vlan-modules-5.8.0-63-generic-64k-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "vlan-modules-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "vlan-modules-5.8.0-63-generic-lpae-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        }
    ],
    "priority_reason":  "The vulnerability depends on an S3 suspend/resume cycle occurring, which the attacker can neither invoke (requires root to write /sys/power/state) nor influence, making it not reliably triggerable by an unprivileged attacker."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-1637.json"

linux-intel-5.13

Package

Name: linux-intel-5.13
Purl: pkg:deb/ubuntu/linux-intel-5.13?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.13.0-1007.7

5.13.0-1008.8

5.13.0-1009.9

5.13.0-1010.10

5.13.0-1011.11

5.13.0-1014.15

5.13.0-1017.19

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.13.0-1017-intel",
            "binary_version":  "5.13.0-1017.19"
        },
        {
            "binary_name":  "linux-cloud-tools-5.13.0-1017-intel",
            "binary_version":  "5.13.0-1017.19"
        },
        {
            "binary_name":  "linux-headers-5.13.0-1017-intel",
            "binary_version":  "5.13.0-1017.19"
        },
        {
            "binary_name":  "linux-image-unsigned-5.13.0-1017-intel",
            "binary_version":  "5.13.0-1017.19"
        },
        {
            "binary_name":  "linux-intel-5.13-cloud-tools-5.13.0-1017",
            "binary_version":  "5.13.0-1017.19"
        },
        {
            "binary_name":  "linux-intel-5.13-cloud-tools-common",
            "binary_version":  "5.13.0-1017.19"
        },
        {
            "binary_name":  "linux-intel-5.13-headers-5.13.0-1017",
            "binary_version":  "5.13.0-1017.19"
        },
        {
            "binary_name":  "linux-intel-5.13-source-5.13.0",
            "binary_version":  "5.13.0-1017.19"
        },
        {
            "binary_name":  "linux-intel-5.13-tools-5.13.0-1017",
            "binary_version":  "5.13.0-1017.19"
        },
        {
            "binary_name":  "linux-intel-5.13-tools-common",
            "binary_version":  "5.13.0-1017.19"
        },
        {
            "binary_name":  "linux-intel-5.13-tools-host",
            "binary_version":  "5.13.0-1017.19"
        },
        {
            "binary_name":  "linux-modules-5.13.0-1017-intel",
            "binary_version":  "5.13.0-1017.19"
        },
        {
            "binary_name":  "linux-modules-extra-5.13.0-1017-intel",
            "binary_version":  "5.13.0-1017.19"
        },
        {
            "binary_name":  "linux-tools-5.13.0-1017-intel",
            "binary_version":  "5.13.0-1017.19"
        }
    ],
    "priority_reason":  "The vulnerability depends on an S3 suspend/resume cycle occurring, which the attacker can neither invoke (requires root to write /sys/power/state) nor influence, making it not reliably triggerable by an unprivileged attacker."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-1637.json"

linux-oem-5.10

Package

Name: linux-oem-5.10
Purl: pkg:deb/ubuntu/linux-oem-5.10?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.10.0-1008.9

5.10.0-1011.12

5.10.0-1013.14

5.10.0-1014.15

5.10.0-1016.17

5.10.0-1017.18

5.10.0-1019.20

5.10.0-1021.22

5.10.0-1022.23

5.10.0-1023.24

5.10.0-1025.26

5.10.0-1026.27

5.10.0-1029.30

5.10.0-1032.33

5.10.0-1033.34

5.10.0-1034.35

5.10.0-1038.40

5.10.0-1044.46

5.10.0-1045.47

5.10.0-1049.51

5.10.0-1050.52

5.10.0-1051.53

5.10.0-1052.54

5.10.0-1053.55

5.10.0-1055.58

5.10.0-1057.61

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.10.0-1057-oem",
            "binary_version":  "5.10.0-1057.61"
        },
        {
            "binary_name":  "linux-headers-5.10.0-1057-oem",
            "binary_version":  "5.10.0-1057.61"
        },
        {
            "binary_name":  "linux-image-unsigned-5.10.0-1057-oem",
            "binary_version":  "5.10.0-1057.61"
        },
        {
            "binary_name":  "linux-modules-5.10.0-1057-oem",
            "binary_version":  "5.10.0-1057.61"
        },
        {
            "binary_name":  "linux-oem-5.10-headers-5.10.0-1057",
            "binary_version":  "5.10.0-1057.61"
        },
        {
            "binary_name":  "linux-oem-5.10-tools-5.10.0-1057",
            "binary_version":  "5.10.0-1057.61"
        },
        {
            "binary_name":  "linux-oem-5.10-tools-host",
            "binary_version":  "5.10.0-1057.61"
        },
        {
            "binary_name":  "linux-tools-5.10.0-1057-oem",
            "binary_version":  "5.10.0-1057.61"
        }
    ],
    "priority_reason":  "The vulnerability depends on an S3 suspend/resume cycle occurring, which the attacker can neither invoke (requires root to write /sys/power/state) nor influence, making it not reliably triggerable by an unprivileged attacker."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-1637.json"

linux-oem-5.13

Package

Name: linux-oem-5.13
Purl: pkg:deb/ubuntu/linux-oem-5.13?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.13.0-1009.10

5.13.0-1010.11

5.13.0-1012.16

5.13.0-1014.18

5.13.0-1017.21

5.13.0-1019.23

5.13.0-1020.24

5.13.0-1021.25

5.13.0-1022.26

5.13.0-1026.32

5.13.0-1028.35

5.13.0-1029.36

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.13.0-1029-oem",
            "binary_version":  "5.13.0-1029.36"
        },
        {
            "binary_name":  "linux-headers-5.13.0-1029-oem",
            "binary_version":  "5.13.0-1029.36"
        },
        {
            "binary_name":  "linux-image-unsigned-5.13.0-1029-oem",
            "binary_version":  "5.13.0-1029.36"
        },
        {
            "binary_name":  "linux-modules-5.13.0-1029-oem",
            "binary_version":  "5.13.0-1029.36"
        },
        {
            "binary_name":  "linux-oem-5.13-headers-5.13.0-1029",
            "binary_version":  "5.13.0-1029.36"
        },
        {
            "binary_name":  "linux-oem-5.13-tools-5.13.0-1029",
            "binary_version":  "5.13.0-1029.36"
        },
        {
            "binary_name":  "linux-oem-5.13-tools-host",
            "binary_version":  "5.13.0-1029.36"
        },
        {
            "binary_name":  "linux-tools-5.13.0-1029-oem",
            "binary_version":  "5.13.0-1029.36"
        }
    ],
    "priority_reason":  "The vulnerability depends on an S3 suspend/resume cycle occurring, which the attacker can neither invoke (requires root to write /sys/power/state) nor influence, making it not reliably triggerable by an unprivileged attacker."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-1637.json"

linux-oem-5.6

Package

Name: linux-oem-5.6
Purl: pkg:deb/ubuntu/linux-oem-5.6?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.6.0-1007.7

5.6.0-1008.8

5.6.0-1010.10

5.6.0-1011.11

5.6.0-1013.13

5.6.0-1017.17

5.6.0-1018.18

5.6.0-1020.20

5.6.0-1021.21

5.6.0-1023.23

5.6.0-1026.26

5.6.0-1027.27

5.6.0-1028.28

5.6.0-1031.32

5.6.0-1032.33

5.6.0-1033.35

5.6.0-1034.36

5.6.0-1035.37

5.6.0-1036.39

5.6.0-1039.43

5.6.0-1042.46

5.6.0-1047.51

5.6.0-1048.52

5.6.0-1050.54

5.6.0-1052.56

5.6.0-1053.57

5.6.0-1054.58

5.6.0-1055.59

5.6.0-1056.60

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.6.0-1056-oem",
            "binary_version":  "5.6.0-1056.60"
        },
        {
            "binary_name":  "linux-headers-5.6.0-1056-oem",
            "binary_version":  "5.6.0-1056.60"
        },
        {
            "binary_name":  "linux-image-unsigned-5.6.0-1056-oem",
            "binary_version":  "5.6.0-1056.60"
        },
        {
            "binary_name":  "linux-modules-5.6.0-1056-oem",
            "binary_version":  "5.6.0-1056.60"
        },
        {
            "binary_name":  "linux-oem-5.6-headers-5.6.0-1056",
            "binary_version":  "5.6.0-1056.60"
        },
        {
            "binary_name":  "linux-oem-5.6-tools-5.6.0-1056",
            "binary_version":  "5.6.0-1056.60"
        },
        {
            "binary_name":  "linux-oem-5.6-tools-host",
            "binary_version":  "5.6.0-1056.60"
        },
        {
            "binary_name":  "linux-tools-5.6.0-1056-oem",
            "binary_version":  "5.6.0-1056.60"
        }
    ],
    "priority_reason":  "The vulnerability depends on an S3 suspend/resume cycle occurring, which the attacker can neither invoke (requires root to write /sys/power/state) nor influence, making it not reliably triggerable by an unprivileged attacker."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-1637.json"

linux-oracle-5.11

Package

Name: linux-oracle-5.11
Purl: pkg:deb/ubuntu/linux-oracle-5.11?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.11.0-1008.8~20.04.1

5.11.0-1013.14~20.04.1

5.11.0-1016.17~20.04.1

5.11.0-1017.18~20.04.1

5.11.0-1019.20~20.04.1

5.11.0-1020.21~20.04.1

5.11.0-1021.22~20.04.1

5.11.0-1022.23~20.04.1

5.11.0-1023.24~20.04.1

5.11.0-1025.27~20.04.1

5.11.0-1027.30~20.04.1

5.11.0-1028.31~20.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.11.0-1028-oracle",
            "binary_version":  "5.11.0-1028.31~20.04.1"
        },
        {
            "binary_name":  "linux-headers-5.11.0-1028-oracle",
            "binary_version":  "5.11.0-1028.31~20.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.11.0-1028-oracle",
            "binary_version":  "5.11.0-1028.31~20.04.1"
        },
        {
            "binary_name":  "linux-modules-5.11.0-1028-oracle",
            "binary_version":  "5.11.0-1028.31~20.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-5.11.0-1028-oracle",
            "binary_version":  "5.11.0-1028.31~20.04.1"
        },
        {
            "binary_name":  "linux-oracle-5.11-headers-5.11.0-1028",
            "binary_version":  "5.11.0-1028.31~20.04.1"
        },
        {
            "binary_name":  "linux-oracle-5.11-tools-5.11.0-1028",
            "binary_version":  "5.11.0-1028.31~20.04.1"
        },
        {
            "binary_name":  "linux-tools-5.11.0-1028-oracle",
            "binary_version":  "5.11.0-1028.31~20.04.1"
        }
    ],
    "priority_reason":  "The vulnerability depends on an S3 suspend/resume cycle occurring, which the attacker can neither invoke (requires root to write /sys/power/state) nor influence, making it not reliably triggerable by an unprivileged attacker."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-1637.json"

linux-oracle-5.13

Package

Name: linux-oracle-5.13
Purl: pkg:deb/ubuntu/linux-oracle-5.13?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.13.0-1011.13~20.04.2

5.13.0-1015.19~20.04.1

5.13.0-1016.20~20.04.1

5.13.0-1018.22~20.04.1

5.13.0-1021.26~20.04.1

5.13.0-1025.30~20.04.1

5.13.0-1027.32~20.04.1

5.13.0-1028.33~20.04.1

5.13.0-1030.35~20.04.1

5.13.0-1033.39~20.04.1

5.13.0-1034.40~20.04.1

5.13.0-1036.43~20.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.13.0-1036-oracle",
            "binary_version":  "5.13.0-1036.43~20.04.1"
        },
        {
            "binary_name":  "linux-headers-5.13.0-1036-oracle",
            "binary_version":  "5.13.0-1036.43~20.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.13.0-1036-oracle",
            "binary_version":  "5.13.0-1036.43~20.04.1"
        },
        {
            "binary_name":  "linux-modules-5.13.0-1036-oracle",
            "binary_version":  "5.13.0-1036.43~20.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-5.13.0-1036-oracle",
            "binary_version":  "5.13.0-1036.43~20.04.1"
        },
        {
            "binary_name":  "linux-oracle-5.13-headers-5.13.0-1036",
            "binary_version":  "5.13.0-1036.43~20.04.1"
        },
        {
            "binary_name":  "linux-oracle-5.13-tools-5.13.0-1036",
            "binary_version":  "5.13.0-1036.43~20.04.1"
        },
        {
            "binary_name":  "linux-tools-5.13.0-1036-oracle",
            "binary_version":  "5.13.0-1036.43~20.04.1"
        }
    ],
    "priority_reason":  "The vulnerability depends on an S3 suspend/resume cycle occurring, which the attacker can neither invoke (requires root to write /sys/power/state) nor influence, making it not reliably triggerable by an unprivileged attacker."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-1637.json"

linux-oracle-5.8

Package

Name: linux-oracle-5.8
Purl: pkg:deb/ubuntu/linux-oracle-5.8?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.8.0-1031.32~20.04.2

5.8.0-1033.34~20.04.1

5.8.0-1034.35~20.04.2

5.8.0-1037.38~20.04.1

5.8.0-1038.39~20.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.8.0-1038-oracle",
            "binary_version":  "5.8.0-1038.39~20.04.1"
        },
        {
            "binary_name":  "linux-headers-5.8.0-1038-oracle",
            "binary_version":  "5.8.0-1038.39~20.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.8.0-1038-oracle",
            "binary_version":  "5.8.0-1038.39~20.04.1"
        },
        {
            "binary_name":  "linux-modules-5.8.0-1038-oracle",
            "binary_version":  "5.8.0-1038.39~20.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-5.8.0-1038-oracle",
            "binary_version":  "5.8.0-1038.39~20.04.1"
        },
        {
            "binary_name":  "linux-oracle-5.8-headers-5.8.0-1038",
            "binary_version":  "5.8.0-1038.39~20.04.1"
        },
        {
            "binary_name":  "linux-oracle-5.8-tools-5.8.0-1038",
            "binary_version":  "5.8.0-1038.39~20.04.1"
        },
        {
            "binary_name":  "linux-tools-5.8.0-1038-oracle",
            "binary_version":  "5.8.0-1038.39~20.04.1"
        }
    ],
    "priority_reason":  "The vulnerability depends on an S3 suspend/resume cycle occurring, which the attacker can neither invoke (requires root to write /sys/power/state) nor influence, making it not reliably triggerable by an unprivileged attacker."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-1637.json"

linux-raspi2

Package

Name: linux-raspi2
Purl: pkg:deb/ubuntu/linux-raspi2?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.3.0-1007.8

5.3.0-1014.16

5.3.0-1015.17

5.3.0-1017.19

5.4.0-1004.4

5.4.0-1006.6

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.4.0-1006-raspi2",
            "binary_version":  "5.4.0-1006.6"
        },
        {
            "binary_name":  "linux-headers-5.4.0-1006-raspi2",
            "binary_version":  "5.4.0-1006.6"
        },
        {
            "binary_name":  "linux-image-5.4.0-1006-raspi2",
            "binary_version":  "5.4.0-1006.6"
        },
        {
            "binary_name":  "linux-modules-5.4.0-1006-raspi2",
            "binary_version":  "5.4.0-1006.6"
        },
        {
            "binary_name":  "linux-raspi2-headers-5.4.0-1006",
            "binary_version":  "5.4.0-1006.6"
        },
        {
            "binary_name":  "linux-raspi2-tools-5.4.0-1006",
            "binary_version":  "5.4.0-1006.6"
        },
        {
            "binary_name":  "linux-tools-5.4.0-1006-raspi2",
            "binary_version":  "5.4.0-1006.6"
        }
    ],
    "priority_reason":  "The vulnerability depends on an S3 suspend/resume cycle occurring, which the attacker can neither invoke (requires root to write /sys/power/state) nor influence, making it not reliably triggerable by an unprivileged attacker."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-1637.json"

linux-riscv

Package

Name: linux-riscv
Purl: pkg:deb/ubuntu/linux-riscv?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.4.0-24.28

5.4.0-26.30

5.4.0-27.31

5.4.0-28.32

5.4.0-30.34

5.4.0-31.35

5.4.0-33.37

5.4.0-34.38

5.4.0-36.41

5.4.0-37.42

5.4.0-39.44

5.4.0-40.45

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "block-modules-5.4.0-40-generic-di",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "crypto-modules-5.4.0-40-generic-di",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "fat-modules-5.4.0-40-generic-di",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "firewire-core-modules-5.4.0-40-generic-di",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "fs-core-modules-5.4.0-40-generic-di",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "fs-secondary-modules-5.4.0-40-generic-di",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "input-modules-5.4.0-40-generic-di",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "ipmi-modules-5.4.0-40-generic-di",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "kernel-image-5.4.0-40-generic-di",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "linux-buildinfo-5.4.0-40-generic",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "linux-headers-5.4.0-40-generic",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "linux-image-5.4.0-40-generic",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "linux-modules-5.4.0-40-generic",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "linux-modules-extra-5.4.0-40-generic",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "linux-riscv-headers-5.4.0-40",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "linux-riscv-tools-5.4.0-40",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "linux-tools-5.4.0-40-generic",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "linux-udebs-generic",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "md-modules-5.4.0-40-generic-di",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "message-modules-5.4.0-40-generic-di",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "mouse-modules-5.4.0-40-generic-di",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "multipath-modules-5.4.0-40-generic-di",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "nfs-modules-5.4.0-40-generic-di",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "nic-modules-5.4.0-40-generic-di",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "nic-shared-modules-5.4.0-40-generic-di",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "nic-usb-modules-5.4.0-40-generic-di",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "parport-modules-5.4.0-40-generic-di",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "pata-modules-5.4.0-40-generic-di",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "plip-modules-5.4.0-40-generic-di",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "ppp-modules-5.4.0-40-generic-di",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "sata-modules-5.4.0-40-generic-di",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "scsi-modules-5.4.0-40-generic-di",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "storage-core-modules-5.4.0-40-generic-di",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "usb-modules-5.4.0-40-generic-di",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "virtio-modules-5.4.0-40-generic-di",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "vlan-modules-5.4.0-40-generic-di",
            "binary_version":  "5.4.0-40.45"
        }
    ],
    "priority_reason":  "The vulnerability depends on an S3 suspend/resume cycle occurring, which the attacker can neither invoke (requires root to write /sys/power/state) nor influence, making it not reliably triggerable by an unprivileged attacker."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-1637.json"

linux-riscv-5.11

Package

Name: linux-riscv-5.11
Purl: pkg:deb/ubuntu/linux-riscv-5.11?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.11.0-1015.16~20.04.1

5.11.0-1017.18~20.04.1

5.11.0-1018.19~20.04.2

5.11.0-1020.21~20.04.1

5.11.0-1021.22~20.04.1

5.11.0-1022.23~20.04.1

5.11.0-1023.24~20.04.1

5.11.0-1024.25~20.04.1

5.11.0-1026.28~20.04.1

5.11.0-1028.31~20.04.1

5.11.0-1029.32~20.04.1

5.11.0-1030.34

5.11.0-1031.35

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.11.0-1031-generic",
            "binary_version":  "5.11.0-1031.35"
        },
        {
            "binary_name":  "linux-headers-5.11.0-1031-generic",
            "binary_version":  "5.11.0-1031.35"
        },
        {
            "binary_name":  "linux-image-5.11.0-1031-generic",
            "binary_version":  "5.11.0-1031.35"
        },
        {
            "binary_name":  "linux-modules-5.11.0-1031-generic",
            "binary_version":  "5.11.0-1031.35"
        },
        {
            "binary_name":  "linux-modules-extra-5.11.0-1031-generic",
            "binary_version":  "5.11.0-1031.35"
        },
        {
            "binary_name":  "linux-riscv-5.11-headers-5.11.0-1031",
            "binary_version":  "5.11.0-1031.35"
        },
        {
            "binary_name":  "linux-riscv-5.11-tools-5.11.0-1031",
            "binary_version":  "5.11.0-1031.35"
        },
        {
            "binary_name":  "linux-tools-5.11.0-1031-generic",
            "binary_version":  "5.11.0-1031.35"
        }
    ],
    "priority_reason":  "The vulnerability depends on an S3 suspend/resume cycle occurring, which the attacker can neither invoke (requires root to write /sys/power/state) nor influence, making it not reliably triggerable by an unprivileged attacker."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-1637.json"

linux-riscv-5.8

Package

Name: linux-riscv-5.8
Purl: pkg:deb/ubuntu/linux-riscv-5.8?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.8.0-14.16~20.04.1

5.8.0-14.16~20.04.3

5.8.0-16.18~20.04.1

5.8.0-17.19~20.04.1

5.8.0-18.20~20.04.1

5.8.0-20.22~20.04.1

5.8.0-22.24~20.04.1

5.8.0-25.27~20.04.1

5.8.0-26.28~20.04.1

5.8.0-29.31~20.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "block-modules-5.8.0-29-generic-di",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "crypto-modules-5.8.0-29-generic-di",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "fat-modules-5.8.0-29-generic-di",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "firewire-core-modules-5.8.0-29-generic-di",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "fs-core-modules-5.8.0-29-generic-di",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "fs-secondary-modules-5.8.0-29-generic-di",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "input-modules-5.8.0-29-generic-di",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "ipmi-modules-5.8.0-29-generic-di",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "kernel-image-5.8.0-29-generic-di",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-5.8.0-29-generic",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "linux-headers-5.8.0-29-generic",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "linux-image-5.8.0-29-generic",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "linux-modules-5.8.0-29-generic",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-5.8.0-29-generic",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "linux-riscv-5.8-headers-5.8.0-29",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "linux-riscv-5.8-tools-5.8.0-29",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "linux-tools-5.8.0-29-generic",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "linux-udebs-generic",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "md-modules-5.8.0-29-generic-di",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "message-modules-5.8.0-29-generic-di",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "mouse-modules-5.8.0-29-generic-di",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "multipath-modules-5.8.0-29-generic-di",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "nfs-modules-5.8.0-29-generic-di",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "nic-modules-5.8.0-29-generic-di",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "nic-shared-modules-5.8.0-29-generic-di",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "nic-usb-modules-5.8.0-29-generic-di",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "parport-modules-5.8.0-29-generic-di",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "pata-modules-5.8.0-29-generic-di",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "plip-modules-5.8.0-29-generic-di",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "ppp-modules-5.8.0-29-generic-di",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "sata-modules-5.8.0-29-generic-di",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "scsi-modules-5.8.0-29-generic-di",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "storage-core-modules-5.8.0-29-generic-di",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "usb-modules-5.8.0-29-generic-di",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "virtio-modules-5.8.0-29-generic-di",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "vlan-modules-5.8.0-29-generic-di",
            "binary_version":  "5.8.0-29.31~20.04.1"
        }
    ],
    "priority_reason":  "The vulnerability depends on an S3 suspend/resume cycle occurring, which the attacker can neither invoke (requires root to write /sys/power/state) nor influence, making it not reliably triggerable by an unprivileged attacker."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-1637.json"

Ubuntu:22.04:LTS

linux

Package

Name: linux
Purl: pkg:deb/ubuntu/linux?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

5.15.0-37.39

Affected versions

5.*

5.13.0-19.19

5.15.0-17.17

5.15.0-18.18

5.15.0-22.22

5.15.0-23.23

5.15.0-25.25

5.15.0-27.28

5.15.0-30.31

5.15.0-33.34

5.15.0-35.36

Ecosystem specific

{
    "availability":  "No subscription required",
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.15.0-37-generic",
            "binary_version":  "5.15.0-37.39"
        },
        {
            "binary_name":  "linux-buildinfo-5.15.0-37-generic-64k",
            "binary_version":  "5.15.0-37.39"
        },
        {
            "binary_name":  "linux-buildinfo-5.15.0-37-generic-lpae",
            "binary_version":  "5.15.0-37.39"
        },
        {
            "binary_name":  "linux-cloud-tools-5.15.0-37",
            "binary_version":  "5.15.0-37.39"
        },
        {
            "binary_name":  "linux-cloud-tools-5.15.0-37-generic",
            "binary_version":  "5.15.0-37.39"
        },
        {
            "binary_name":  "linux-cloud-tools-common",
            "binary_version":  "5.15.0-37.39"
        },
        {
            "binary_name":  "linux-headers-5.15.0-37",
            "binary_version":  "5.15.0-37.39"
        },
        {
            "binary_name":  "linux-headers-5.15.0-37-generic",
            "binary_version":  "5.15.0-37.39"
        },
        {
            "binary_name":  "linux-headers-5.15.0-37-generic-64k",
            "binary_version":  "5.15.0-37.39"
        },
        {
            "binary_name":  "linux-headers-5.15.0-37-generic-lpae",
            "binary_version":  "5.15.0-37.39"
        },
        {
            "binary_name":  "linux-image-5.15.0-37-generic",
            "binary_version":  "5.15.0-37.39"
        },
        {
            "binary_name":  "linux-image-5.15.0-37-generic-lpae",
            "binary_version":  "5.15.0-37.39"
        },
        {
            "binary_name":  "linux-image-unsigned-5.15.0-37-generic",
            "binary_version":  "5.15.0-37.39"
        },
        {
            "binary_name":  "linux-image-unsigned-5.15.0-37-generic-64k",
            "binary_version":  "5.15.0-37.39"
        },
        {
            "binary_name":  "linux-modules-5.15.0-37-generic",
            "binary_version":  "5.15.0-37.39"
        },
        {
            "binary_name":  "linux-modules-5.15.0-37-generic-64k",
            "binary_version":  "5.15.0-37.39"
        },
        {
            "binary_name":  "linux-modules-5.15.0-37-generic-lpae",
            "binary_version":  "5.15.0-37.39"
        },
        {
            "binary_name":  "linux-modules-extra-5.15.0-37-generic",
            "binary_version":  "5.15.0-37.39"
        },
        {
            "binary_name":  "linux-source-5.15.0",
            "binary_version":  "5.15.0-37.39"
        },
        {
            "binary_name":  "linux-tools-5.15.0-37",
            "binary_version":  "5.15.0-37.39"
        },
        {
            "binary_name":  "linux-tools-5.15.0-37-generic",
            "binary_version":  "5.15.0-37.39"
        },
        {
            "binary_name":  "linux-tools-5.15.0-37-generic-64k",
            "binary_version":  "5.15.0-37.39"
        },
        {
            "binary_name":  "linux-tools-5.15.0-37-generic-lpae",
            "binary_version":  "5.15.0-37.39"
        },
        {
            "binary_name":  "linux-tools-common",
            "binary_version":  "5.15.0-37.39"
        },
        {
            "binary_name":  "linux-tools-host",
            "binary_version":  "5.15.0-37.39"
        }
    ],
    "priority_reason":  "The vulnerability depends on an S3 suspend/resume cycle occurring, which the attacker can neither invoke (requires root to write /sys/power/state) nor influence, making it not reliably triggerable by an unprivileged attacker."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-1637.json"

linux-aws

Package

Name: linux-aws
Purl: pkg:deb/ubuntu/linux-aws?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

5.15.0-1011.14

Affected versions

5.*

5.13.0-1005.6

5.15.0-1002.4

5.15.0-1003.5

5.15.0-1004.6

5.15.0-1005.7

5.15.0-1008.10

5.15.0-1009.11

Ecosystem specific

{
    "availability":  "No subscription required",
    "binaries":  [
        {
            "binary_name":  "linux-aws-cloud-tools-5.15.0-1011",
            "binary_version":  "5.15.0-1011.14"
        },
        {
            "binary_name":  "linux-aws-headers-5.15.0-1011",
            "binary_version":  "5.15.0-1011.14"
        },
        {
            "binary_name":  "linux-aws-tools-5.15.0-1011",
            "binary_version":  "5.15.0-1011.14"
        },
        {
            "binary_name":  "linux-buildinfo-5.15.0-1011-aws",
            "binary_version":  "5.15.0-1011.14"
        },
        {
            "binary_name":  "linux-cloud-tools-5.15.0-1011-aws",
            "binary_version":  "5.15.0-1011.14"
        },
        {
            "binary_name":  "linux-headers-5.15.0-1011-aws",
            "binary_version":  "5.15.0-1011.14"
        },
        {
            "binary_name":  "linux-image-unsigned-5.15.0-1011-aws",
            "binary_version":  "5.15.0-1011.14"
        },
        {
            "binary_name":  "linux-modules-5.15.0-1011-aws",
            "binary_version":  "5.15.0-1011.14"
        },
        {
            "binary_name":  "linux-modules-extra-5.15.0-1011-aws",
            "binary_version":  "5.15.0-1011.14"
        },
        {
            "binary_name":  "linux-tools-5.15.0-1011-aws",
            "binary_version":  "5.15.0-1011.14"
        }
    ],
    "priority_reason":  "The vulnerability depends on an S3 suspend/resume cycle occurring, which the attacker can neither invoke (requires root to write /sys/power/state) nor influence, making it not reliably triggerable by an unprivileged attacker."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-1637.json"

linux-azure

Package

Name: linux-azure
Purl: pkg:deb/ubuntu/linux-azure?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

5.15.0-1010.12

Affected versions

5.*

5.13.0-1006.7

5.15.0-1001.2

5.15.0-1002.3

5.15.0-1003.4

5.15.0-1005.6

5.15.0-1007.8

5.15.0-1008.9

Ecosystem specific

{
    "availability":  "No subscription required",
    "binaries":  [
        {
            "binary_name":  "linux-azure-cloud-tools-5.15.0-1010",
            "binary_version":  "5.15.0-1010.12"
        },
        {
            "binary_name":  "linux-azure-headers-5.15.0-1010",
            "binary_version":  "5.15.0-1010.12"
        },
        {
            "binary_name":  "linux-azure-tools-5.15.0-1010",
            "binary_version":  "5.15.0-1010.12"
        },
        {
            "binary_name":  "linux-buildinfo-5.15.0-1010-azure",
            "binary_version":  "5.15.0-1010.12"
        },
        {
            "binary_name":  "linux-cloud-tools-5.15.0-1010-azure",
            "binary_version":  "5.15.0-1010.12"
        },
        {
            "binary_name":  "linux-headers-5.15.0-1010-azure",
            "binary_version":  "5.15.0-1010.12"
        },
        {
            "binary_name":  "linux-image-unsigned-5.15.0-1010-azure",
            "binary_version":  "5.15.0-1010.12"
        },
        {
            "binary_name":  "linux-modules-5.15.0-1010-azure",
            "binary_version":  "5.15.0-1010.12"
        },
        {
            "binary_name":  "linux-modules-extra-5.15.0-1010-azure",
            "binary_version":  "5.15.0-1010.12"
        },
        {
            "binary_name":  "linux-tools-5.15.0-1010-azure",
            "binary_version":  "5.15.0-1010.12"
        }
    ],
    "priority_reason":  "The vulnerability depends on an S3 suspend/resume cycle occurring, which the attacker can neither invoke (requires root to write /sys/power/state) nor influence, making it not reliably triggerable by an unprivileged attacker."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-1637.json"

linux-gcp

Package

Name: linux-gcp
Purl: pkg:deb/ubuntu/linux-gcp?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

5.15.0-1008.12

Affected versions

5.*

5.13.0-1005.6

5.15.0-1001.3

5.15.0-1002.5

5.15.0-1003.6

5.15.0-1004.7

5.15.0-1005.8

5.15.0-1006.9

Ecosystem specific

{
    "availability":  "No subscription required",
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.15.0-1008-gcp",
            "binary_version":  "5.15.0-1008.12"
        },
        {
            "binary_name":  "linux-gcp-headers-5.15.0-1008",
            "binary_version":  "5.15.0-1008.12"
        },
        {
            "binary_name":  "linux-gcp-tools-5.15.0-1008",
            "binary_version":  "5.15.0-1008.12"
        },
        {
            "binary_name":  "linux-headers-5.15.0-1008-gcp",
            "binary_version":  "5.15.0-1008.12"
        },
        {
            "binary_name":  "linux-image-unsigned-5.15.0-1008-gcp",
            "binary_version":  "5.15.0-1008.12"
        },
        {
            "binary_name":  "linux-modules-5.15.0-1008-gcp",
            "binary_version":  "5.15.0-1008.12"
        },
        {
            "binary_name":  "linux-modules-extra-5.15.0-1008-gcp",
            "binary_version":  "5.15.0-1008.12"
        },
        {
            "binary_name":  "linux-tools-5.15.0-1008-gcp",
            "binary_version":  "5.15.0-1008.12"
        }
    ],
    "priority_reason":  "The vulnerability depends on an S3 suspend/resume cycle occurring, which the attacker can neither invoke (requires root to write /sys/power/state) nor influence, making it not reliably triggerable by an unprivileged attacker."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-1637.json"

linux-gke

Package

Name: linux-gke
Purl: pkg:deb/ubuntu/linux-gke?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

5.15.0-1008.10

Affected versions

5.*

5.15.0-1002.2

5.15.0-1003.3

5.15.0-1004.5

5.15.0-1005.6

5.15.0-1006.7

Ecosystem specific

{
    "availability":  "No subscription required",
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.15.0-1008-gke",
            "binary_version":  "5.15.0-1008.10"
        },
        {
            "binary_name":  "linux-gke-headers-5.15.0-1008",
            "binary_version":  "5.15.0-1008.10"
        },
        {
            "binary_name":  "linux-gke-tools-5.15.0-1008",
            "binary_version":  "5.15.0-1008.10"
        },
        {
            "binary_name":  "linux-headers-5.15.0-1008-gke",
            "binary_version":  "5.15.0-1008.10"
        },
        {
            "binary_name":  "linux-image-unsigned-5.15.0-1008-gke",
            "binary_version":  "5.15.0-1008.10"
        },
        {
            "binary_name":  "linux-modules-5.15.0-1008-gke",
            "binary_version":  "5.15.0-1008.10"
        },
        {
            "binary_name":  "linux-modules-extra-5.15.0-1008-gke",
            "binary_version":  "5.15.0-1008.10"
        },
        {
            "binary_name":  "linux-tools-5.15.0-1008-gke",
            "binary_version":  "5.15.0-1008.10"
        }
    ],
    "priority_reason":  "The vulnerability depends on an S3 suspend/resume cycle occurring, which the attacker can neither invoke (requires root to write /sys/power/state) nor influence, making it not reliably triggerable by an unprivileged attacker."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-1637.json"

linux-ibm

Package

Name: linux-ibm
Purl: pkg:deb/ubuntu/linux-ibm?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

5.15.0-1007.8

Affected versions

5.*

5.15.0-1002.2

5.15.0-1003.3

5.15.0-1004.4

5.15.0-1005.5

Ecosystem specific

{
    "availability":  "No subscription required",
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.15.0-1007-ibm",
            "binary_version":  "5.15.0-1007.8"
        },
        {
            "binary_name":  "linux-headers-5.15.0-1007-ibm",
            "binary_version":  "5.15.0-1007.8"
        },
        {
            "binary_name":  "linux-ibm-cloud-tools-common",
            "binary_version":  "5.15.0-1007.8"
        },
        {
            "binary_name":  "linux-ibm-headers-5.15.0-1007",
            "binary_version":  "5.15.0-1007.8"
        },
        {
            "binary_name":  "linux-ibm-source-5.15.0",
            "binary_version":  "5.15.0-1007.8"
        },
        {
            "binary_name":  "linux-ibm-tools-5.15.0-1007",
            "binary_version":  "5.15.0-1007.8"
        },
        {
            "binary_name":  "linux-ibm-tools-common",
            "binary_version":  "5.15.0-1007.8"
        },
        {
            "binary_name":  "linux-image-unsigned-5.15.0-1007-ibm",
            "binary_version":  "5.15.0-1007.8"
        },
        {
            "binary_name":  "linux-modules-5.15.0-1007-ibm",
            "binary_version":  "5.15.0-1007.8"
        },
        {
            "binary_name":  "linux-modules-extra-5.15.0-1007-ibm",
            "binary_version":  "5.15.0-1007.8"
        },
        {
            "binary_name":  "linux-tools-5.15.0-1007-ibm",
            "binary_version":  "5.15.0-1007.8"
        }
    ],
    "priority_reason":  "The vulnerability depends on an S3 suspend/resume cycle occurring, which the attacker can neither invoke (requires root to write /sys/power/state) nor influence, making it not reliably triggerable by an unprivileged attacker."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-1637.json"

linux-intel-iot-realtime

Package

Name: linux-intel-iot-realtime
Purl: pkg:deb/ubuntu/linux-intel-iot-realtime?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.15.0-1073.75

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.15.0-1073-intel-iot-realtime",
            "binary_version":  "5.15.0-1073.75"
        },
        {
            "binary_name":  "linux-cloud-tools-5.15.0-1073-intel-iot-realtime",
            "binary_version":  "5.15.0-1073.75"
        },
        {
            "binary_name":  "linux-headers-5.15.0-1073-intel-iot-realtime",
            "binary_version":  "5.15.0-1073.75"
        },
        {
            "binary_name":  "linux-image-unsigned-5.15.0-1073-intel-iot-realtime",
            "binary_version":  "5.15.0-1073.75"
        },
        {
            "binary_name":  "linux-intel-iot-realtime-cloud-tools-5.15.0-1073",
            "binary_version":  "5.15.0-1073.75"
        },
        {
            "binary_name":  "linux-intel-iot-realtime-cloud-tools-common",
            "binary_version":  "5.15.0-1073.75"
        },
        {
            "binary_name":  "linux-intel-iot-realtime-headers-5.15.0-1073",
            "binary_version":  "5.15.0-1073.75"
        },
        {
            "binary_name":  "linux-intel-iot-realtime-tools-5.15.0-1073",
            "binary_version":  "5.15.0-1073.75"
        },
        {
            "binary_name":  "linux-intel-iot-realtime-tools-common",
            "binary_version":  "5.15.0-1073.75"
        },
        {
            "binary_name":  "linux-intel-iot-realtime-tools-host",
            "binary_version":  "5.15.0-1073.75"
        },
        {
            "binary_name":  "linux-modules-5.15.0-1073-intel-iot-realtime",
            "binary_version":  "5.15.0-1073.75"
        },
        {
            "binary_name":  "linux-modules-extra-5.15.0-1073-intel-iot-realtime",
            "binary_version":  "5.15.0-1073.75"
        },
        {
            "binary_name":  "linux-tools-5.15.0-1073-intel-iot-realtime",
            "binary_version":  "5.15.0-1073.75"
        }
    ],
    "priority_reason":  "The vulnerability depends on an S3 suspend/resume cycle occurring, which the attacker can neither invoke (requires root to write /sys/power/state) nor influence, making it not reliably triggerable by an unprivileged attacker."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-1637.json"

linux-intel-iotg

Package

Name: linux-intel-iotg
Purl: pkg:deb/ubuntu/linux-intel-iotg?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

5.15.0-1008.11

Affected versions

5.*

5.15.0-1004.6

Ecosystem specific

{
    "availability":  "No subscription required",
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.15.0-1008-intel-iotg",
            "binary_version":  "5.15.0-1008.11"
        },
        {
            "binary_name":  "linux-cloud-tools-5.15.0-1008-intel-iotg",
            "binary_version":  "5.15.0-1008.11"
        },
        {
            "binary_name":  "linux-headers-5.15.0-1008-intel-iotg",
            "binary_version":  "5.15.0-1008.11"
        },
        {
            "binary_name":  "linux-image-unsigned-5.15.0-1008-intel-iotg",
            "binary_version":  "5.15.0-1008.11"
        },
        {
            "binary_name":  "linux-intel-iotg-cloud-tools-5.15.0-1008",
            "binary_version":  "5.15.0-1008.11"
        },
        {
            "binary_name":  "linux-intel-iotg-cloud-tools-common",
            "binary_version":  "5.15.0-1008.11"
        },
        {
            "binary_name":  "linux-intel-iotg-headers-5.15.0-1008",
            "binary_version":  "5.15.0-1008.11"
        },
        {
            "binary_name":  "linux-intel-iotg-tools-5.15.0-1008",
            "binary_version":  "5.15.0-1008.11"
        },
        {
            "binary_name":  "linux-intel-iotg-tools-common",
            "binary_version":  "5.15.0-1008.11"
        },
        {
            "binary_name":  "linux-intel-iotg-tools-host",
            "binary_version":  "5.15.0-1008.11"
        },
        {
            "binary_name":  "linux-modules-5.15.0-1008-intel-iotg",
            "binary_version":  "5.15.0-1008.11"
        },
        {
            "binary_name":  "linux-modules-extra-5.15.0-1008-intel-iotg",
            "binary_version":  "5.15.0-1008.11"
        },
        {
            "binary_name":  "linux-tools-5.15.0-1008-intel-iotg",
            "binary_version":  "5.15.0-1008.11"
        }
    ],
    "priority_reason":  "The vulnerability depends on an S3 suspend/resume cycle occurring, which the attacker can neither invoke (requires root to write /sys/power/state) nor influence, making it not reliably triggerable by an unprivileged attacker."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-1637.json"

linux-kvm

Package

Name: linux-kvm
Purl: pkg:deb/ubuntu/linux-kvm?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

5.15.0-1010.11

Affected versions

5.*

5.13.0-1004.4

5.13.0-1006.6+22.04.1

5.13.0-1007.7+22.04.1

5.13.0-1010.11+22.04.1

5.15.0-1002.2

5.15.0-1004.4

5.15.0-1005.5

5.15.0-1007.7

5.15.0-1008.8

Ecosystem specific

{
    "availability":  "No subscription required",
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.15.0-1010-kvm",
            "binary_version":  "5.15.0-1010.11"
        },
        {
            "binary_name":  "linux-headers-5.15.0-1010-kvm",
            "binary_version":  "5.15.0-1010.11"
        },
        {
            "binary_name":  "linux-image-unsigned-5.15.0-1010-kvm",
            "binary_version":  "5.15.0-1010.11"
        },
        {
            "binary_name":  "linux-kvm-headers-5.15.0-1010",
            "binary_version":  "5.15.0-1010.11"
        },
        {
            "binary_name":  "linux-kvm-tools-5.15.0-1010",
            "binary_version":  "5.15.0-1010.11"
        },
        {
            "binary_name":  "linux-modules-5.15.0-1010-kvm",
            "binary_version":  "5.15.0-1010.11"
        },
        {
            "binary_name":  "linux-tools-5.15.0-1010-kvm",
            "binary_version":  "5.15.0-1010.11"
        }
    ],
    "priority_reason":  "The vulnerability depends on an S3 suspend/resume cycle occurring, which the attacker can neither invoke (requires root to write /sys/power/state) nor influence, making it not reliably triggerable by an unprivileged attacker."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-1637.json"

linux-lowlatency

Package

Name: linux-lowlatency
Purl: pkg:deb/ubuntu/linux-lowlatency?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

5.15.0-37.39

Affected versions

5.*

5.15.0-22.22

5.15.0-23.23

5.15.0-24.24

5.15.0-27.28

5.15.0-30.31

5.15.0-33.34

5.15.0-35.36

Ecosystem specific

{
    "availability":  "No subscription required",
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.15.0-37-lowlatency",
            "binary_version":  "5.15.0-37.39"
        },
        {
            "binary_name":  "linux-buildinfo-5.15.0-37-lowlatency-64k",
            "binary_version":  "5.15.0-37.39"
        },
        {
            "binary_name":  "linux-cloud-tools-5.15.0-37-lowlatency",
            "binary_version":  "5.15.0-37.39"
        },
        {
            "binary_name":  "linux-headers-5.15.0-37-lowlatency",
            "binary_version":  "5.15.0-37.39"
        },
        {
            "binary_name":  "linux-headers-5.15.0-37-lowlatency-64k",
            "binary_version":  "5.15.0-37.39"
        },
        {
            "binary_name":  "linux-image-unsigned-5.15.0-37-lowlatency",
            "binary_version":  "5.15.0-37.39"
        },
        {
            "binary_name":  "linux-image-unsigned-5.15.0-37-lowlatency-64k",
            "binary_version":  "5.15.0-37.39"
        },
        {
            "binary_name":  "linux-lowlatency-cloud-tools-5.15.0-37",
            "binary_version":  "5.15.0-37.39"
        },
        {
            "binary_name":  "linux-lowlatency-cloud-tools-common",
            "binary_version":  "5.15.0-37.39"
        },
        {
            "binary_name":  "linux-lowlatency-headers-5.15.0-37",
            "binary_version":  "5.15.0-37.39"
        },
        {
            "binary_name":  "linux-lowlatency-tools-5.15.0-37",
            "binary_version":  "5.15.0-37.39"
        },
        {
            "binary_name":  "linux-lowlatency-tools-common",
            "binary_version":  "5.15.0-37.39"
        },
        {
            "binary_name":  "linux-lowlatency-tools-host",
            "binary_version":  "5.15.0-37.39"
        },
        {
            "binary_name":  "linux-modules-5.15.0-37-lowlatency",
            "binary_version":  "5.15.0-37.39"
        },
        {
            "binary_name":  "linux-modules-5.15.0-37-lowlatency-64k",
            "binary_version":  "5.15.0-37.39"
        },
        {
            "binary_name":  "linux-tools-5.15.0-37-lowlatency",
            "binary_version":  "5.15.0-37.39"
        },
        {
            "binary_name":  "linux-tools-5.15.0-37-lowlatency-64k",
            "binary_version":  "5.15.0-37.39"
        }
    ],
    "priority_reason":  "The vulnerability depends on an S3 suspend/resume cycle occurring, which the attacker can neither invoke (requires root to write /sys/power/state) nor influence, making it not reliably triggerable by an unprivileged attacker."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-1637.json"

linux-oem-5.17

Package

Name: linux-oem-5.17
Purl: pkg:deb/ubuntu/linux-oem-5.17?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

5.17.0-1004.4

Affected versions

5.*

5.17.0-1003.3

Ecosystem specific

{
    "availability":  "No subscription required",
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.17.0-1004-oem",
            "binary_version":  "5.17.0-1004.4"
        },
        {
            "binary_name":  "linux-headers-5.17.0-1004-oem",
            "binary_version":  "5.17.0-1004.4"
        },
        {
            "binary_name":  "linux-image-unsigned-5.17.0-1004-oem",
            "binary_version":  "5.17.0-1004.4"
        },
        {
            "binary_name":  "linux-modules-5.17.0-1004-oem",
            "binary_version":  "5.17.0-1004.4"
        },
        {
            "binary_name":  "linux-oem-5.17-headers-5.17.0-1004",
            "binary_version":  "5.17.0-1004.4"
        },
        {
            "binary_name":  "linux-oem-5.17-tools-5.17.0-1004",
            "binary_version":  "5.17.0-1004.4"
        },
        {
            "binary_name":  "linux-oem-5.17-tools-host",
            "binary_version":  "5.17.0-1004.4"
        },
        {
            "binary_name":  "linux-tools-5.17.0-1004-oem",
            "binary_version":  "5.17.0-1004.4"
        }
    ],
    "priority_reason":  "The vulnerability depends on an S3 suspend/resume cycle occurring, which the attacker can neither invoke (requires root to write /sys/power/state) nor influence, making it not reliably triggerable by an unprivileged attacker."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-1637.json"

linux-oracle

Package

Name: linux-oracle
Purl: pkg:deb/ubuntu/linux-oracle?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

5.15.0-1009.12

Affected versions

5.*

5.13.0-1008.10

5.15.0-1001.3

5.15.0-1002.4

5.15.0-1003.5

5.15.0-1006.8

5.15.0-1007.9

Ecosystem specific

{
    "availability":  "No subscription required",
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.15.0-1009-oracle",
            "binary_version":  "5.15.0-1009.12"
        },
        {
            "binary_name":  "linux-headers-5.15.0-1009-oracle",
            "binary_version":  "5.15.0-1009.12"
        },
        {
            "binary_name":  "linux-image-unsigned-5.15.0-1009-oracle",
            "binary_version":  "5.15.0-1009.12"
        },
        {
            "binary_name":  "linux-modules-5.15.0-1009-oracle",
            "binary_version":  "5.15.0-1009.12"
        },
        {
            "binary_name":  "linux-modules-extra-5.15.0-1009-oracle",
            "binary_version":  "5.15.0-1009.12"
        },
        {
            "binary_name":  "linux-oracle-headers-5.15.0-1009",
            "binary_version":  "5.15.0-1009.12"
        },
        {
            "binary_name":  "linux-oracle-tools-5.15.0-1009",
            "binary_version":  "5.15.0-1009.12"
        },
        {
            "binary_name":  "linux-tools-5.15.0-1009-oracle",
            "binary_version":  "5.15.0-1009.12"
        }
    ],
    "priority_reason":  "The vulnerability depends on an S3 suspend/resume cycle occurring, which the attacker can neither invoke (requires root to write /sys/power/state) nor influence, making it not reliably triggerable by an unprivileged attacker."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-1637.json"

linux-raspi

Package

Name: linux-raspi
Purl: pkg:deb/ubuntu/linux-raspi?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

5.15.0-1011.13

Affected versions

5.*

5.13.0-1008.9

5.15.0-1002.2

5.15.0-1003.3

5.15.0-1004.4

5.15.0-1005.5

5.15.0-1006.6

5.15.0-1008.8

Ecosystem specific

{
    "availability":  "No subscription required",
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.15.0-1011-raspi",
            "binary_version":  "5.15.0-1011.13"
        },
        {
            "binary_name":  "linux-buildinfo-5.15.0-1011-raspi-nolpae",
            "binary_version":  "5.15.0-1011.13"
        },
        {
            "binary_name":  "linux-headers-5.15.0-1011-raspi",
            "binary_version":  "5.15.0-1011.13"
        },
        {
            "binary_name":  "linux-headers-5.15.0-1011-raspi-nolpae",
            "binary_version":  "5.15.0-1011.13"
        },
        {
            "binary_name":  "linux-image-5.15.0-1011-raspi",
            "binary_version":  "5.15.0-1011.13"
        },
        {
            "binary_name":  "linux-image-5.15.0-1011-raspi-nolpae",
            "binary_version":  "5.15.0-1011.13"
        },
        {
            "binary_name":  "linux-modules-5.15.0-1011-raspi",
            "binary_version":  "5.15.0-1011.13"
        },
        {
            "binary_name":  "linux-modules-5.15.0-1011-raspi-nolpae",
            "binary_version":  "5.15.0-1011.13"
        },
        {
            "binary_name":  "linux-modules-extra-5.15.0-1011-raspi",
            "binary_version":  "5.15.0-1011.13"
        },
        {
            "binary_name":  "linux-modules-extra-5.15.0-1011-raspi-nolpae",
            "binary_version":  "5.15.0-1011.13"
        },
        {
            "binary_name":  "linux-raspi-headers-5.15.0-1011",
            "binary_version":  "5.15.0-1011.13"
        },
        {
            "binary_name":  "linux-raspi-tools-5.15.0-1011",
            "binary_version":  "5.15.0-1011.13"
        },
        {
            "binary_name":  "linux-tools-5.15.0-1011-raspi",
            "binary_version":  "5.15.0-1011.13"
        },
        {
            "binary_name":  "linux-tools-5.15.0-1011-raspi-nolpae",
            "binary_version":  "5.15.0-1011.13"
        }
    ],
    "priority_reason":  "The vulnerability depends on an S3 suspend/resume cycle occurring, which the attacker can neither invoke (requires root to write /sys/power/state) nor influence, making it not reliably triggerable by an unprivileged attacker."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-1637.json"

linux-realtime

Package

Name: linux-realtime
Purl: pkg:deb/ubuntu/linux-realtime?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.15.0-1032.35

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.15.0-1032-realtime",
            "binary_version":  "5.15.0-1032.35"
        },
        {
            "binary_name":  "linux-cloud-tools-5.15.0-1032-realtime",
            "binary_version":  "5.15.0-1032.35"
        },
        {
            "binary_name":  "linux-headers-5.15.0-1032-realtime",
            "binary_version":  "5.15.0-1032.35"
        },
        {
            "binary_name":  "linux-image-unsigned-5.15.0-1032-realtime",
            "binary_version":  "5.15.0-1032.35"
        },
        {
            "binary_name":  "linux-modules-5.15.0-1032-realtime",
            "binary_version":  "5.15.0-1032.35"
        },
        {
            "binary_name":  "linux-modules-extra-5.15.0-1032-realtime",
            "binary_version":  "5.15.0-1032.35"
        },
        {
            "binary_name":  "linux-realtime-cloud-tools-5.15.0-1032",
            "binary_version":  "5.15.0-1032.35"
        },
        {
            "binary_name":  "linux-realtime-cloud-tools-common",
            "binary_version":  "5.15.0-1032.35"
        },
        {
            "binary_name":  "linux-realtime-headers-5.15.0-1032",
            "binary_version":  "5.15.0-1032.35"
        },
        {
            "binary_name":  "linux-realtime-tools-5.15.0-1032",
            "binary_version":  "5.15.0-1032.35"
        },
        {
            "binary_name":  "linux-realtime-tools-common",
            "binary_version":  "5.15.0-1032.35"
        },
        {
            "binary_name":  "linux-realtime-tools-host",
            "binary_version":  "5.15.0-1032.35"
        },
        {
            "binary_name":  "linux-tools-5.15.0-1032-realtime",
            "binary_version":  "5.15.0-1032.35"
        }
    ],
    "priority_reason":  "The vulnerability depends on an S3 suspend/resume cycle occurring, which the attacker can neither invoke (requires root to write /sys/power/state) nor influence, making it not reliably triggerable by an unprivileged attacker."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-1637.json"

linux-riscv

Package

Name: linux-riscv
Purl: pkg:deb/ubuntu/linux-riscv?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.13.0-1004.4

5.13.0-1006.6+22.04.1

5.13.0-1007.7+22.04.1

5.13.0-1010.11+22.04.1

5.15.0-1004.4

5.15.0-1005.5

5.15.0-1006.6

5.15.0-1007.7

5.15.0-1008.8

5.15.0-1011.12

5.15.0-1012.13

5.15.0-1014.16

5.15.0-1015.17

5.15.0-1016.18

5.15.0-1017.19

5.15.0-1018.21

5.15.0-1019.22

5.15.0-1020.23

5.15.0-1022.26

5.15.0-1023.27

5.15.0-1026.30

5.15.0-1027.31

5.15.0-1028.32

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.15.0-1028-generic",
            "binary_version":  "5.15.0-1028.32"
        },
        {
            "binary_name":  "linux-headers-5.15.0-1028-generic",
            "binary_version":  "5.15.0-1028.32"
        },
        {
            "binary_name":  "linux-image-5.15.0-1028-generic",
            "binary_version":  "5.15.0-1028.32"
        },
        {
            "binary_name":  "linux-modules-5.15.0-1028-generic",
            "binary_version":  "5.15.0-1028.32"
        },
        {
            "binary_name":  "linux-modules-extra-5.15.0-1028-generic",
            "binary_version":  "5.15.0-1028.32"
        },
        {
            "binary_name":  "linux-riscv-headers-5.15.0-1028",
            "binary_version":  "5.15.0-1028.32"
        },
        {
            "binary_name":  "linux-riscv-tools-5.15.0-1028",
            "binary_version":  "5.15.0-1028.32"
        },
        {
            "binary_name":  "linux-tools-5.15.0-1028-generic",
            "binary_version":  "5.15.0-1028.32"
        }
    ],
    "priority_reason":  "The vulnerability depends on an S3 suspend/resume cycle occurring, which the attacker can neither invoke (requires root to write /sys/power/state) nor influence, making it not reliably triggerable by an unprivileged attacker."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-1637.json"

Ubuntu:24.04:LTS

linux-raspi-realtime

Package

Name: linux-raspi-realtime
Purl: pkg:deb/ubuntu/linux-raspi-realtime?arch=source&distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

6.*

6.8.0-2019.20

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.8.0-2019-raspi-realtime",
            "binary_version":  "6.8.0-2019.20"
        },
        {
            "binary_name":  "linux-headers-6.8.0-2019-raspi-realtime",
            "binary_version":  "6.8.0-2019.20"
        },
        {
            "binary_name":  "linux-image-6.8.0-2019-raspi-realtime",
            "binary_version":  "6.8.0-2019.20"
        },
        {
            "binary_name":  "linux-modules-6.8.0-2019-raspi-realtime",
            "binary_version":  "6.8.0-2019.20"
        },
        {
            "binary_name":  "linux-raspi-realtime-headers-6.8.0-2019",
            "binary_version":  "6.8.0-2019.20"
        },
        {
            "binary_name":  "linux-raspi-realtime-tools-6.8.0-2019",
            "binary_version":  "6.8.0-2019.20"
        },
        {
            "binary_name":  "linux-tools-6.8.0-2019-raspi-realtime",
            "binary_version":  "6.8.0-2019.20"
        }
    ],
    "priority_reason":  "The vulnerability depends on an S3 suspend/resume cycle occurring, which the attacker can neither invoke (requires root to write /sys/power/state) nor influence, making it not reliably triggerable by an unprivileged attacker."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-1637.json"

Ubuntu:Pro:FIPS-updates:20.04:LTS

linux-aws-fips

Package

Name: linux-aws-fips
Purl: pkg:deb/ubuntu/linux-aws-fips?arch=source&distro=fips-updates%2Ffocal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

5.4.0-1078.84+fips1

Affected versions

5.*

5.4.0-1021.21+fips2

5.4.0-1069.73+fips2

5.4.0-1071.76+fips1

5.4.0-1072.77+fips1

5.4.0-1073.78+fips1

Ecosystem specific

{
    "availability":  "Available with Ubuntu Pro: https://ubuntu.com/pro",
    "binaries":  [
        {
            "binary_name":  "linux-aws-fips-headers-5.4.0-1078",
            "binary_version":  "5.4.0-1078.84+fips1"
        },
        {
            "binary_name":  "linux-aws-fips-tools-5.4.0-1078",
            "binary_version":  "5.4.0-1078.84+fips1"
        },
        {
            "binary_name":  "linux-buildinfo-5.4.0-1078-aws-fips",
            "binary_version":  "5.4.0-1078.84+fips1"
        },
        {
            "binary_name":  "linux-headers-5.4.0-1078-aws-fips",
            "binary_version":  "5.4.0-1078.84+fips1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.4.0-1078-aws-fips",
            "binary_version":  "5.4.0-1078.84+fips1"
        },
        {
            "binary_name":  "linux-image-unsigned-hmac-5.4.0-1078-aws-fips",
            "binary_version":  "5.4.0-1078.84+fips1"
        },
        {
            "binary_name":  "linux-modules-5.4.0-1078-aws-fips",
            "binary_version":  "5.4.0-1078.84+fips1"
        },
        {
            "binary_name":  "linux-modules-extra-5.4.0-1078-aws-fips",
            "binary_version":  "5.4.0-1078.84+fips1"
        },
        {
            "binary_name":  "linux-tools-5.4.0-1078-aws-fips",
            "binary_version":  "5.4.0-1078.84+fips1"
        }
    ],
    "priority_reason":  "The vulnerability depends on an S3 suspend/resume cycle occurring, which the attacker can neither invoke (requires root to write /sys/power/state) nor influence, making it not reliably triggerable by an unprivileged attacker."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-1637.json"

linux-azure-fips

Package

Name: linux-azure-fips
Purl: pkg:deb/ubuntu/linux-azure-fips?arch=source&distro=fips-updates%2Ffocal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

5.4.0-1083.87+fips1

Affected versions

5.*

5.4.0-1022.22+fips1

5.4.0-1073.76+fips1

5.4.0-1074.77+fips1

5.4.0-1076.79+fips1

5.4.0-1078.81+fips1

5.4.0-1080.83+fips1

Ecosystem specific

{
    "availability":  "Available with Ubuntu Pro: https://ubuntu.com/pro",
    "binaries":  [
        {
            "binary_name":  "linux-azure-fips-cloud-tools-5.4.0-1083",
            "binary_version":  "5.4.0-1083.87+fips1"
        },
        {
            "binary_name":  "linux-azure-fips-headers-5.4.0-1083",
            "binary_version":  "5.4.0-1083.87+fips1"
        },
        {
            "binary_name":  "linux-azure-fips-tools-5.4.0-1083",
            "binary_version":  "5.4.0-1083.87+fips1"
        },
        {
            "binary_name":  "linux-buildinfo-5.4.0-1083-azure-fips",
            "binary_version":  "5.4.0-1083.87+fips1"
        },
        {
            "binary_name":  "linux-cloud-tools-5.4.0-1083-azure-fips",
            "binary_version":  "5.4.0-1083.87+fips1"
        },
        {
            "binary_name":  "linux-headers-5.4.0-1083-azure-fips",
            "binary_version":  "5.4.0-1083.87+fips1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.4.0-1083-azure-fips",
            "binary_version":  "5.4.0-1083.87+fips1"
        },
        {
            "binary_name":  "linux-image-unsigned-hmac-5.4.0-1083-azure-fips",
            "binary_version":  "5.4.0-1083.87+fips1"
        },
        {
            "binary_name":  "linux-modules-5.4.0-1083-azure-fips",
            "binary_version":  "5.4.0-1083.87+fips1"
        },
        {
            "binary_name":  "linux-modules-extra-5.4.0-1083-azure-fips",
            "binary_version":  "5.4.0-1083.87+fips1"
        },
        {
            "binary_name":  "linux-tools-5.4.0-1083-azure-fips",
            "binary_version":  "5.4.0-1083.87+fips1"
        }
    ],
    "priority_reason":  "The vulnerability depends on an S3 suspend/resume cycle occurring, which the attacker can neither invoke (requires root to write /sys/power/state) nor influence, making it not reliably triggerable by an unprivileged attacker."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-1637.json"

linux-fips

Package

Name: linux-fips
Purl: pkg:deb/ubuntu/linux-fips?arch=source&distro=fips-updates%2Ffocal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

5.4.0-1054.61

Affected versions

5.*

5.4.0-1026.30

5.4.0-1028.32

5.4.0-1031.36

5.4.0-1032.37

5.4.0-1033.38

5.4.0-1034.40

5.4.0-1035.41

5.4.0-1036.42

5.4.0-1037.43

5.4.0-1038.44

5.4.0-1040.46

5.4.0-1041.47

5.4.0-1042.48

5.4.0-1043.49

5.4.0-1045.51

5.4.0-1046.52

5.4.0-1047.53

5.4.0-1048.54

5.4.0-1049.55

5.4.0-1051.57

Ecosystem specific

{
    "availability":  "Available with Ubuntu Pro: https://ubuntu.com/pro",
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.4.0-1054-fips",
            "binary_version":  "5.4.0-1054.61"
        },
        {
            "binary_name":  "linux-fips-headers-5.4.0-1054",
            "binary_version":  "5.4.0-1054.61"
        },
        {
            "binary_name":  "linux-fips-tools-5.4.0-1054",
            "binary_version":  "5.4.0-1054.61"
        },
        {
            "binary_name":  "linux-fips-tools-host",
            "binary_version":  "5.4.0-1054.61"
        },
        {
            "binary_name":  "linux-headers-5.4.0-1054-fips",
            "binary_version":  "5.4.0-1054.61"
        },
        {
            "binary_name":  "linux-image-unsigned-5.4.0-1054-fips",
            "binary_version":  "5.4.0-1054.61"
        },
        {
            "binary_name":  "linux-image-unsigned-hmac-5.4.0-1054-fips",
            "binary_version":  "5.4.0-1054.61"
        },
        {
            "binary_name":  "linux-modules-5.4.0-1054-fips",
            "binary_version":  "5.4.0-1054.61"
        },
        {
            "binary_name":  "linux-modules-extra-5.4.0-1054-fips",
            "binary_version":  "5.4.0-1054.61"
        },
        {
            "binary_name":  "linux-tools-5.4.0-1054-fips",
            "binary_version":  "5.4.0-1054.61"
        }
    ],
    "priority_reason":  "The vulnerability depends on an S3 suspend/resume cycle occurring, which the attacker can neither invoke (requires root to write /sys/power/state) nor influence, making it not reliably triggerable by an unprivileged attacker."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-1637.json"

linux-gcp-fips

Package

Name: linux-gcp-fips
Purl: pkg:deb/ubuntu/linux-gcp-fips?arch=source&distro=fips-updates%2Ffocal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

5.4.0-1078.84+fips1

Affected versions

5.*

5.4.0-1021.21+fips1

5.4.0-1067.71~20.04.1

5.4.0-1069.73+fips2

5.4.0-1071.75+fips1

5.4.0-1073.78+fips1

5.4.0-1075.80+fips1

Ecosystem specific

{
    "availability":  "Available with Ubuntu Pro: https://ubuntu.com/pro",
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.4.0-1078-gcp-fips",
            "binary_version":  "5.4.0-1078.84+fips1"
        },
        {
            "binary_name":  "linux-gcp-fips-headers-5.4.0-1078",
            "binary_version":  "5.4.0-1078.84+fips1"
        },
        {
            "binary_name":  "linux-gcp-fips-tools-5.4.0-1078",
            "binary_version":  "5.4.0-1078.84+fips1"
        },
        {
            "binary_name":  "linux-headers-5.4.0-1078-gcp-fips",
            "binary_version":  "5.4.0-1078.84+fips1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.4.0-1078-gcp-fips",
            "binary_version":  "5.4.0-1078.84+fips1"
        },
        {
            "binary_name":  "linux-image-unsigned-hmac-5.4.0-1078-gcp-fips",
            "binary_version":  "5.4.0-1078.84+fips1"
        },
        {
            "binary_name":  "linux-modules-5.4.0-1078-gcp-fips",
            "binary_version":  "5.4.0-1078.84+fips1"
        },
        {
            "binary_name":  "linux-modules-extra-5.4.0-1078-gcp-fips",
            "binary_version":  "5.4.0-1078.84+fips1"
        },
        {
            "binary_name":  "linux-tools-5.4.0-1078-gcp-fips",
            "binary_version":  "5.4.0-1078.84+fips1"
        }
    ],
    "priority_reason":  "The vulnerability depends on an S3 suspend/resume cycle occurring, which the attacker can neither invoke (requires root to write /sys/power/state) nor influence, making it not reliably triggerable by an unprivileged attacker."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-1637.json"

Ubuntu:Pro:FIPS:20.04:LTS

linux-aws-fips

Package

Name: linux-aws-fips
Purl: pkg:deb/ubuntu/linux-aws-fips?arch=source&distro=fips%2Ffocal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.4.0-1021.21+fips2

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-aws-fips-headers-5.4.0-1021",
            "binary_version":  "5.4.0-1021.21+fips2"
        },
        {
            "binary_name":  "linux-aws-fips-tools-5.4.0-1021",
            "binary_version":  "5.4.0-1021.21+fips2"
        },
        {
            "binary_name":  "linux-buildinfo-5.4.0-1021-aws-fips",
            "binary_version":  "5.4.0-1021.21+fips2"
        },
        {
            "binary_name":  "linux-headers-5.4.0-1021-aws-fips",
            "binary_version":  "5.4.0-1021.21+fips2"
        },
        {
            "binary_name":  "linux-image-unsigned-5.4.0-1021-aws-fips",
            "binary_version":  "5.4.0-1021.21+fips2"
        },
        {
            "binary_name":  "linux-image-unsigned-hmac-5.4.0-1021-aws-fips",
            "binary_version":  "5.4.0-1021.21+fips2"
        },
        {
            "binary_name":  "linux-modules-5.4.0-1021-aws-fips",
            "binary_version":  "5.4.0-1021.21+fips2"
        },
        {
            "binary_name":  "linux-modules-extra-5.4.0-1021-aws-fips",
            "binary_version":  "5.4.0-1021.21+fips2"
        },
        {
            "binary_name":  "linux-tools-5.4.0-1021-aws-fips",
            "binary_version":  "5.4.0-1021.21+fips2"
        }
    ],
    "priority_reason":  "The vulnerability depends on an S3 suspend/resume cycle occurring, which the attacker can neither invoke (requires root to write /sys/power/state) nor influence, making it not reliably triggerable by an unprivileged attacker."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-1637.json"

linux-azure-fips

Package

Name: linux-azure-fips
Purl: pkg:deb/ubuntu/linux-azure-fips?arch=source&distro=fips%2Ffocal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.4.0-1022.22+fips1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-azure-fips-cloud-tools-5.4.0-1022",
            "binary_version":  "5.4.0-1022.22+fips1"
        },
        {
            "binary_name":  "linux-azure-fips-headers-5.4.0-1022",
            "binary_version":  "5.4.0-1022.22+fips1"
        },
        {
            "binary_name":  "linux-azure-fips-tools-5.4.0-1022",
            "binary_version":  "5.4.0-1022.22+fips1"
        },
        {
            "binary_name":  "linux-buildinfo-5.4.0-1022-azure-fips",
            "binary_version":  "5.4.0-1022.22+fips1"
        },
        {
            "binary_name":  "linux-cloud-tools-5.4.0-1022-azure-fips",
            "binary_version":  "5.4.0-1022.22+fips1"
        },
        {
            "binary_name":  "linux-headers-5.4.0-1022-azure-fips",
            "binary_version":  "5.4.0-1022.22+fips1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.4.0-1022-azure-fips",
            "binary_version":  "5.4.0-1022.22+fips1"
        },
        {
            "binary_name":  "linux-image-unsigned-hmac-5.4.0-1022-azure-fips",
            "binary_version":  "5.4.0-1022.22+fips1"
        },
        {
            "binary_name":  "linux-modules-5.4.0-1022-azure-fips",
            "binary_version":  "5.4.0-1022.22+fips1"
        },
        {
            "binary_name":  "linux-modules-extra-5.4.0-1022-azure-fips",
            "binary_version":  "5.4.0-1022.22+fips1"
        },
        {
            "binary_name":  "linux-tools-5.4.0-1022-azure-fips",
            "binary_version":  "5.4.0-1022.22+fips1"
        }
    ],
    "priority_reason":  "The vulnerability depends on an S3 suspend/resume cycle occurring, which the attacker can neither invoke (requires root to write /sys/power/state) nor influence, making it not reliably triggerable by an unprivileged attacker."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-1637.json"

linux-fips

Package

Name: linux-fips
Purl: pkg:deb/ubuntu/linux-fips?arch=source&distro=fips%2Ffocal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.4.0-1007.8

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.4.0-1007-fips",
            "binary_version":  "5.4.0-1007.8"
        },
        {
            "binary_name":  "linux-fips-headers-5.4.0-1007",
            "binary_version":  "5.4.0-1007.8"
        },
        {
            "binary_name":  "linux-fips-tools-5.4.0-1007",
            "binary_version":  "5.4.0-1007.8"
        },
        {
            "binary_name":  "linux-fips-tools-host",
            "binary_version":  "5.4.0-1007.8"
        },
        {
            "binary_name":  "linux-headers-5.4.0-1007-fips",
            "binary_version":  "5.4.0-1007.8"
        },
        {
            "binary_name":  "linux-image-unsigned-5.4.0-1007-fips",
            "binary_version":  "5.4.0-1007.8"
        },
        {
            "binary_name":  "linux-image-unsigned-hmac-5.4.0-1007-fips",
            "binary_version":  "5.4.0-1007.8"
        },
        {
            "binary_name":  "linux-modules-5.4.0-1007-fips",
            "binary_version":  "5.4.0-1007.8"
        },
        {
            "binary_name":  "linux-modules-extra-5.4.0-1007-fips",
            "binary_version":  "5.4.0-1007.8"
        },
        {
            "binary_name":  "linux-tools-5.4.0-1007-fips",
            "binary_version":  "5.4.0-1007.8"
        }
    ],
    "priority_reason":  "The vulnerability depends on an S3 suspend/resume cycle occurring, which the attacker can neither invoke (requires root to write /sys/power/state) nor influence, making it not reliably triggerable by an unprivileged attacker."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-1637.json"

linux-gcp-fips

Package

Name: linux-gcp-fips
Purl: pkg:deb/ubuntu/linux-gcp-fips?arch=source&distro=fips%2Ffocal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.4.0-1021.21+fips1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.4.0-1021-gcp-fips",
            "binary_version":  "5.4.0-1021.21+fips1"
        },
        {
            "binary_name":  "linux-gcp-fips-headers-5.4.0-1021",
            "binary_version":  "5.4.0-1021.21+fips1"
        },
        {
            "binary_name":  "linux-gcp-fips-tools-5.4.0-1021",
            "binary_version":  "5.4.0-1021.21+fips1"
        },
        {
            "binary_name":  "linux-headers-5.4.0-1021-gcp-fips",
            "binary_version":  "5.4.0-1021.21+fips1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.4.0-1021-gcp-fips",
            "binary_version":  "5.4.0-1021.21+fips1"
        },
        {
            "binary_name":  "linux-image-unsigned-hmac-5.4.0-1021-gcp-fips",
            "binary_version":  "5.4.0-1021.21+fips1"
        },
        {
            "binary_name":  "linux-modules-5.4.0-1021-gcp-fips",
            "binary_version":  "5.4.0-1021.21+fips1"
        },
        {
            "binary_name":  "linux-modules-extra-5.4.0-1021-gcp-fips",
            "binary_version":  "5.4.0-1021.21+fips1"
        },
        {
            "binary_name":  "linux-tools-5.4.0-1021-gcp-fips",
            "binary_version":  "5.4.0-1021.21+fips1"
        }
    ],
    "priority_reason":  "The vulnerability depends on an S3 suspend/resume cycle occurring, which the attacker can neither invoke (requires root to write /sys/power/state) nor influence, making it not reliably triggerable by an unprivileged attacker."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-1637.json"

Ubuntu:Pro:Realtime:22.04:LTS

linux-realtime

Package

Name: linux-realtime
Purl: pkg:deb/ubuntu/linux-realtime?arch=source&distro=realtime%2Fjammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

5.15.0-1014.14

Affected versions

5.*

5.15.0-1006.6

5.15.0-1007.7

5.15.0-1009.9

5.15.0-1011.11

Ecosystem specific

{
    "availability":  "Available with Ubuntu Pro: https://ubuntu.com/pro",
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.15.0-1014-realtime",
            "binary_version":  "5.15.0-1014.14"
        },
        {
            "binary_name":  "linux-cloud-tools-5.15.0-1014-realtime",
            "binary_version":  "5.15.0-1014.14"
        },
        {
            "binary_name":  "linux-headers-5.15.0-1014-realtime",
            "binary_version":  "5.15.0-1014.14"
        },
        {
            "binary_name":  "linux-image-unsigned-5.15.0-1014-realtime",
            "binary_version":  "5.15.0-1014.14"
        },
        {
            "binary_name":  "linux-modules-5.15.0-1014-realtime",
            "binary_version":  "5.15.0-1014.14"
        },
        {
            "binary_name":  "linux-modules-extra-5.15.0-1014-realtime",
            "binary_version":  "5.15.0-1014.14"
        },
        {
            "binary_name":  "linux-realtime-cloud-tools-5.15.0-1014",
            "binary_version":  "5.15.0-1014.14"
        },
        {
            "binary_name":  "linux-realtime-cloud-tools-common",
            "binary_version":  "5.15.0-1014.14"
        },
        {
            "binary_name":  "linux-realtime-headers-5.15.0-1014",
            "binary_version":  "5.15.0-1014.14"
        },
        {
            "binary_name":  "linux-realtime-tools-5.15.0-1014",
            "binary_version":  "5.15.0-1014.14"
        },
        {
            "binary_name":  "linux-realtime-tools-common",
            "binary_version":  "5.15.0-1014.14"
        },
        {
            "binary_name":  "linux-realtime-tools-host",
            "binary_version":  "5.15.0-1014.14"
        },
        {
            "binary_name":  "linux-tools-5.15.0-1014-realtime",
            "binary_version":  "5.15.0-1014.14"
        }
    ],
    "priority_reason":  "The vulnerability depends on an S3 suspend/resume cycle occurring, which the attacker can neither invoke (requires root to write /sys/power/state) nor influence, making it not reliably triggerable by an unprivileged attacker."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-1637.json"