Search CVE reports


Toggle filters

81 – 90 of 397 results


CVE-2019-12155

Low priority

Some fixes available 8 of 9

interface_release_resource in hw/display/qxl.c in QEMU 3.1.x through 4.0.0 has a NULL pointer dereference.

2 affected packages

qemu, qemu-kvm

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
qemu — — — Fixed Fixed
qemu-kvm — — — Not in release Not in release
Show less packages

CVE-2019-12247

Medium priority
Ignored

QEMU 3.0.0 has an Integer Overflow because the qga/commands*.c files do not check the length of the argument list or the number of environment variables. NOTE: This has been disputed as not exploitable

2 affected packages

qemu, qemu-kvm

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
qemu — — — — Ignored
qemu-kvm — — — — Not in release
Show less packages

CVE-2019-11091

Medium priority
Fixed

Microarchitectural Data Sampling Uncacheable Memory (MDSUM): Uncacheable memory on some microprocessors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a...

163 affected packages

intel-microcode, libvirt, linux, linux-allwinner, linux-allwinner-5.19...

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
intel-microcode — Not affected Not affected Not affected Fixed
libvirt — Fixed Fixed Fixed Fixed
linux — Not affected Not affected Not affected Fixed
linux-allwinner — Not in release Not in release Not in release Not in release
linux-allwinner-5.19 — Not in release Not affected Not in release Not in release
linux-aws — Not affected Not affected Not affected Fixed
linux-aws-5.0 — Not in release Not in release Not in release Not affected
linux-aws-5.11 — Not in release Not in release Not affected Not in release
linux-aws-5.13 — Not in release Not in release Not affected Not in release
linux-aws-5.15 — Not in release Not in release Not affected Not in release
linux-aws-5.19 — Not in release Not affected Not in release Not in release
linux-aws-5.3 — Not in release Not in release Not in release Not affected
linux-aws-5.4 — Not in release Not in release Not in release Not affected
linux-aws-5.8 — Not in release Not in release Not affected Not in release
linux-aws-6.14 — Not affected Not in release Not in release Not in release
linux-aws-6.2 — Not in release Not affected Not in release Not in release
linux-aws-6.5 — Not in release Not affected Not in release Not in release
linux-aws-6.8 — Not in release Not affected Not in release Not in release
linux-aws-fips — Not in release Not affected Not affected Not affected
linux-aws-hwe — Not in release Not in release Not in release Not in release
linux-azure — Not affected Not affected Not affected Fixed
linux-azure-4.15 — Not in release Not in release Not in release Not affected
linux-azure-5.11 — Not in release Not in release Not affected Not in release
linux-azure-5.13 — Not in release Not in release Not affected Not in release
linux-azure-5.15 — Not in release Not in release Not affected Not in release
linux-azure-5.19 — Not in release Not affected Not in release Not in release
linux-azure-5.3 — Not in release Not in release Not in release Not affected
linux-azure-5.4 — Not in release Not in release Not in release Not affected
linux-azure-5.8 — Not in release Not in release Not affected Not in release
linux-azure-6.11 — Ignored Not in release Not in release Not in release
linux-azure-6.2 — Not in release Not affected Not in release Not in release
linux-azure-6.5 — Not in release Not affected Not in release Not in release
linux-azure-6.8 — Not in release Not affected Not in release Not in release
linux-azure-edge — Not in release Not in release Not in release Fixed
linux-azure-fde — Not affected Not affected Not affected Not in release
linux-azure-fde-5.15 — Not in release Not in release Ignored Not in release
linux-azure-fde-5.19 — Not in release Not affected Not in release Not in release
linux-azure-fde-6.2 — Not in release Not affected Not in release Not in release
linux-azure-fips — Not in release Not affected Not affected Not affected
linux-azure-nvidia — Not affected Not in release Not in release Not in release
linux-bluefield — Not in release Not in release Not affected Not in release
linux-dell300x — Not in release Not in release Not in release Not affected
linux-euclid — Not in release Not in release Not in release Not in release
linux-fips — Not in release Not affected Not affected Not affected
linux-flo — Not in release Not in release Not in release Not in release
linux-gcp — Not affected Not affected Not affected Fixed
linux-gcp-4.15 — Not in release Not in release Not in release Not affected
linux-gcp-5.11 — Not in release Not in release Not affected Not in release
linux-gcp-5.13 — Not in release Not in release Not affected Not in release
linux-gcp-5.15 — Not in release Not in release Not affected Not in release
linux-gcp-5.19 — Not in release Not affected Not in release Not in release
linux-gcp-5.3 — Not in release Not in release Not in release Not affected
linux-gcp-5.4 — Not in release Not in release Not in release Not affected
linux-gcp-5.8 — Not in release Not in release Not affected Not in release
linux-gcp-6.11 — Ignored Not in release Not in release Not in release
linux-gcp-6.14 — Not affected Not in release Not in release Not in release
linux-gcp-6.2 — Not in release Not affected Not in release Not in release
linux-gcp-6.5 — Not in release Not affected Not in release Not in release
linux-gcp-6.8 — Not in release Not affected Not in release Not in release
linux-gcp-edge — Not in release Not in release Not in release Fixed
linux-gcp-fips — Not in release Not affected Not affected Not affected
linux-gke — Not affected Not affected Not affected Not in release
linux-gke-4.15 — Not in release Not in release Not in release Fixed
linux-gke-5.0 — Not in release Not in release Not in release Not affected
linux-gke-5.15 — Not in release Not in release Not affected Not in release
linux-gke-5.3 — Not in release Not in release Not in release Not affected
linux-gke-5.4 — Not in release Not in release Not in release Not affected
linux-gkeop — Not affected Not affected Not affected Not in release
linux-gkeop-5.15 — Not in release Not in release Not affected Not in release
linux-gkeop-5.4 — Not in release Not in release Not in release Not affected
linux-goldfish — Not in release Not in release Not in release Not in release
linux-hwe — Not in release Not in release Not in release Fixed
linux-hwe-5.11 — Not in release Not in release Not affected Not in release
linux-hwe-5.13 — Not in release Not in release Not affected Not in release
linux-hwe-5.15 — Not in release Not in release Not affected Not in release
linux-hwe-5.19 — Not in release Not affected Not in release Not in release
linux-hwe-5.4 — Not in release Not in release Not in release Not affected
linux-hwe-5.8 — Not in release Not in release Not affected Not in release
linux-hwe-6.11 — Ignored Not in release Not in release Not in release
linux-hwe-6.14 — Not affected Not in release Not in release Not in release
linux-hwe-6.2 — Not in release Not affected Not in release Not in release
linux-hwe-6.5 — Not in release Not affected Not in release Not in release
linux-hwe-6.8 — Not in release Not affected Not in release Not in release
linux-hwe-edge — Not in release Not in release Not in release Not affected
linux-ibm — Not affected Not affected Not affected Not in release
linux-ibm-5.15 — Not in release Not in release Not affected Not in release
linux-ibm-5.4 — Not in release Not in release Not in release Not affected
linux-ibm-6.8 — Not in release Not affected Not in release Not in release
linux-intel — Not affected Not in release Not in release Not in release
linux-intel-5.13 — Not in release Not in release Not affected Not in release
linux-intel-iot-realtime — Not in release Not affected Not in release Not in release
linux-intel-iotg — Not in release Not affected Not in release Not in release
linux-intel-iotg-5.15 — Not in release Not in release Not affected Not in release
linux-iot — Not in release Not in release Not affected Not in release
linux-kvm — Not in release Not affected Not affected Fixed
linux-laptop — Not in release Not in release Not in release Not in release
linux-lowlatency — Not affected Not affected Not in release Not in release
linux-lowlatency-hwe-5.15 — Not in release Not in release Not affected Not in release
linux-lowlatency-hwe-5.19 — Not in release Not affected Not in release Not in release
linux-lowlatency-hwe-6.11 — Ignored Not in release Not in release Not in release
linux-lowlatency-hwe-6.2 — Not in release Not affected Not in release Not in release
linux-lowlatency-hwe-6.5 — Not in release Not affected Not in release Not in release
linux-lowlatency-hwe-6.8 — Not in release Not affected Not in release Not in release
linux-lts-trusty — Not in release Not in release Not in release Not in release
linux-lts-xenial — Not in release Not in release Not in release Not in release
linux-mako — Not in release Not in release Not in release Not in release
linux-nvidia — Not affected Not affected Not in release Not in release
linux-nvidia-6.11 — Not affected Not in release Not in release Not in release
linux-nvidia-6.2 — Not in release Not affected Not in release Not in release
linux-nvidia-6.5 — Not in release Not affected Not in release Not in release
linux-nvidia-6.8 — Not in release Not affected Not in release Not in release
linux-nvidia-lowlatency — Not affected Not in release Not in release Not in release
linux-nvidia-tegra — Not affected Not affected Not in release Not in release
linux-nvidia-tegra-5.15 — Not in release Not in release Not affected Not in release
linux-nvidia-tegra-igx — Not in release Not affected Not in release Not in release
linux-oem — Not in release Not in release Not in release Fixed
linux-oem-5.10 — Not in release Not in release Not affected Not in release
linux-oem-5.13 — Not in release Not in release Not affected Not in release
linux-oem-5.14 — Not in release Not in release Not affected Not in release
linux-oem-5.17 — Not in release Not affected Not in release Not in release
linux-oem-5.6 — Not in release Not in release Not affected Not in release
linux-oem-6.0 — Not in release Not affected Not in release Not in release
linux-oem-6.1 — Not in release Not affected Not in release Not in release
linux-oem-6.11 — Not affected Not in release Not in release Not in release
linux-oem-6.14 — Not affected Not in release Not in release Not in release
linux-oem-6.5 — Not in release Not affected Not in release Not in release
linux-oem-6.8 — Not affected Not in release Not in release Not in release
linux-oem-osp1 — Not in release Not in release Not in release Not affected
linux-oracle — Not affected Not affected Not affected Fixed
linux-oracle-5.0 — Not in release Not in release Not in release Not affected
linux-oracle-5.11 — Not in release Not in release Not affected Not in release
linux-oracle-5.13 — Not in release Not in release Not affected Not in release
linux-oracle-5.15 — Not in release Not in release Not affected Not in release
linux-oracle-5.3 — Not in release Not in release Not in release Not affected
linux-oracle-5.4 — Not in release Not in release Not in release Not affected
linux-oracle-5.8 — Not in release Not in release Not affected Not in release
linux-oracle-6.14 — Not affected Not in release Not in release Not in release
linux-oracle-6.5 — Not in release Not affected Not in release Not in release
linux-oracle-6.8 — Not in release Not affected Not in release Not in release
linux-raspi — Not affected Not affected Not affected Not in release
linux-raspi-5.4 — Not in release Not in release Not in release Not affected
linux-raspi-realtime — Not affected Not in release Not in release Not in release
linux-raspi2 — Not in release Not in release Not affected Fixed
linux-raspi2-5.3 — Not in release Not in release Not in release Not affected
linux-realtime — Not affected Not affected Not in release Not in release
linux-realtime-6.14 — Not affected Not in release Not in release Not in release
linux-realtime-6.8 — Not in release Not affected Not in release Not in release
linux-riscv — Not affected Not affected Not affected Not in release
linux-riscv-5.11 — Not in release Not in release Not affected Not in release
linux-riscv-5.15 — Not in release Not in release Not affected Not in release
linux-riscv-5.19 — Not in release Not affected Not in release Not in release
linux-riscv-5.8 — Not in release Not in release Not affected Not in release
linux-riscv-6.14 — Not affected Not in release Not in release Not in release
linux-riscv-6.5 — Not in release Not affected Not in release Not in release
linux-riscv-6.8 — Not in release Not affected Not in release Not in release
linux-snapdragon — Not in release Not in release Not in release Fixed
linux-starfive — Not in release Not in release Not in release Not in release
linux-starfive-5.19 — Not in release Not affected Not in release Not in release
linux-starfive-6.2 — Not in release Not affected Not in release Not in release
linux-starfive-6.5 — Not in release Not affected Not in release Not in release
linux-xilinx-zynqmp — Not in release Not affected Not affected Not in release
qemu — Fixed Fixed Fixed Fixed
qemu-kvm — Not in release Not in release Not in release Not in release
Show all 163 packages Show less packages

CVE-2018-12130

High priority
Fixed

Microarchitectural Fill Buffer Data Sampling (MFBDS): Fill buffers on some microprocessors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local...

145 affected packages

intel-microcode, libvirt, linux, linux-allwinner, linux-allwinner-5.19...

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
intel-microcode — Not affected Not affected Not affected Fixed
libvirt — Fixed Fixed Fixed Fixed
linux — Not affected Not affected Not affected Fixed
linux-allwinner — Not in release Not in release Not in release Not in release
linux-allwinner-5.19 — Not in release Not affected Not in release Not in release
linux-aws — Not affected Not affected Not affected Fixed
linux-aws-5.0 — Not in release Not in release Not in release Not affected
linux-aws-5.11 — Not in release Not in release Not affected Not in release
linux-aws-5.13 — Not in release Not in release Not affected Not in release
linux-aws-5.15 — Not in release Not in release Not affected Not in release
linux-aws-5.19 — Not in release Not affected Not in release Not in release
linux-aws-5.3 — Not in release Not in release Not in release Not affected
linux-aws-5.4 — Not in release Not in release Not in release Not affected
linux-aws-5.8 — Not in release Not in release Not affected Not in release
linux-aws-6.2 — Not in release Not affected Not in release Not in release
linux-aws-6.5 — Not in release Not affected Not in release Not in release
linux-aws-6.8 — Not in release Not affected Not in release Not in release
linux-aws-fips — Not in release Not affected Not affected Not affected
linux-aws-hwe — Not in release Not in release Not in release Not in release
linux-azure — Not affected Not affected Not affected Fixed
linux-azure-4.15 — Not in release Not in release Not in release Not affected
linux-azure-5.11 — Not in release Not in release Not affected Not in release
linux-azure-5.13 — Not in release Not in release Not affected Not in release
linux-azure-5.15 — Not in release Not in release Not affected Not in release
linux-azure-5.19 — Not in release Not affected Not in release Not in release
linux-azure-5.3 — Not in release Not in release Not in release Not affected
linux-azure-5.4 — Not in release Not in release Not in release Not affected
linux-azure-5.8 — Not in release Not in release Not affected Not in release
linux-azure-6.2 — Not in release Not affected Not in release Not in release
linux-azure-6.5 — Not in release Not affected Not in release Not in release
linux-azure-6.8 — Not in release Not affected Not in release Not in release
linux-azure-edge — Not in release Not in release Not in release Fixed
linux-azure-fde — Not affected Not affected Not affected Not in release
linux-azure-fde-5.15 — Not in release Not in release Not affected Not in release
linux-azure-fde-5.19 — Not in release Not affected Not in release Not in release
linux-azure-fde-6.2 — Not in release Not affected Not in release Not in release
linux-azure-fips — Not in release Not affected Not affected Not affected
linux-bluefield — Not in release Not in release Not affected Not in release
linux-dell300x — Not in release Not in release Not in release Not affected
linux-euclid — Not in release Not in release Not in release Not in release
linux-fips — Not in release Not affected Not affected Not affected
linux-flo — Not in release Not in release Not in release Not in release
linux-gcp — Not affected Not affected Not affected Fixed
linux-gcp-4.15 — Not in release Not in release Not in release Not affected
linux-gcp-5.11 — Not in release Not in release Not affected Not in release
linux-gcp-5.13 — Not in release Not in release Not affected Not in release
linux-gcp-5.15 — Not in release Not in release Not affected Not in release
linux-gcp-5.19 — Not in release Not affected Not in release Not in release
linux-gcp-5.3 — Not in release Not in release Not in release Not affected
linux-gcp-5.4 — Not in release Not in release Not in release Not affected
linux-gcp-5.8 — Not in release Not in release Not affected Not in release
linux-gcp-6.2 — Not in release Not affected Not in release Not in release
linux-gcp-6.5 — Not in release Not affected Not in release Not in release
linux-gcp-6.8 — Not in release Not affected Not in release Not in release
linux-gcp-edge — Not in release Not in release Not in release Fixed
linux-gcp-fips — Not in release Not affected Not affected Not affected
linux-gke — Not affected Not affected Not affected Not in release
linux-gke-4.15 — Not in release Not in release Not in release Fixed
linux-gke-5.0 — Not in release Not in release Not in release Not affected
linux-gke-5.15 — Not in release Not in release Not affected Not in release
linux-gke-5.3 — Not in release Not in release Not in release Not affected
linux-gke-5.4 — Not in release Not in release Not in release Not affected
linux-gkeop — Not affected Not affected Not affected Not in release
linux-gkeop-5.15 — Not in release Not in release Not affected Not in release
linux-gkeop-5.4 — Not in release Not in release Not in release Not affected
linux-goldfish — Not in release Not in release Not in release Not in release
linux-hwe — Not in release Not in release Not in release Fixed
linux-hwe-5.11 — Not in release Not in release Not affected Not in release
linux-hwe-5.13 — Not in release Not in release Not affected Not in release
linux-hwe-5.15 — Not in release Not in release Not affected Not in release
linux-hwe-5.19 — Not in release Not affected Not in release Not in release
linux-hwe-5.4 — Not in release Not in release Not in release Not affected
linux-hwe-5.8 — Not in release Not in release Not affected Not in release
linux-hwe-6.2 — Not in release Not affected Not in release Not in release
linux-hwe-6.5 — Not in release Not affected Not in release Not in release
linux-hwe-6.8 — Not in release Not affected Not in release Not in release
linux-hwe-edge — Not in release Not in release Not in release Not affected
linux-ibm — Not affected Not affected Not affected Not in release
linux-ibm-5.15 — Not in release Not in release Not affected Not in release
linux-ibm-5.4 — Not in release Not in release Not in release Not affected
linux-intel — Not affected Not in release Not in release Not in release
linux-intel-5.13 — Not in release Not in release Not affected Not in release
linux-intel-iot-realtime — Not in release Not affected Not in release Not in release
linux-intel-iotg — Not in release Not affected Not in release Not in release
linux-intel-iotg-5.15 — Not in release Not in release Not affected Not in release
linux-iot — Not in release Not in release Not affected Not in release
linux-kvm — Not in release Not affected Not affected Fixed
linux-laptop — Not in release Not in release Not in release Not in release
linux-lowlatency — Not affected Not affected Not in release Not in release
linux-lowlatency-hwe-5.15 — Not in release Not in release Not affected Not in release
linux-lowlatency-hwe-5.19 — Not in release Not affected Not in release Not in release
linux-lowlatency-hwe-6.2 — Not in release Not affected Not in release Not in release
linux-lowlatency-hwe-6.5 — Not in release Not affected Not in release Not in release
linux-lowlatency-hwe-6.8 — Not in release Not affected Not in release Not in release
linux-lts-trusty — Not in release Not in release Not in release Not in release
linux-lts-xenial — Not in release Not in release Not in release Not in release
linux-mako — Not in release Not in release Not in release Not in release
linux-nvidia — Not affected Not affected Not in release Not in release
linux-nvidia-6.2 — Not in release Not affected Not in release Not in release
linux-nvidia-6.5 — Not in release Not affected Not in release Not in release
linux-nvidia-6.8 — Not in release Not affected Not in release Not in release
linux-nvidia-lowlatency — Not affected Not in release Not in release Not in release
linux-oem — Not in release Not in release Not in release Fixed
linux-oem-5.10 — Not in release Not in release Not affected Not in release
linux-oem-5.13 — Not in release Not in release Not affected Not in release
linux-oem-5.14 — Not in release Not in release Not affected Not in release
linux-oem-5.17 — Not in release Not affected Not in release Not in release
linux-oem-5.6 — Not in release Not in release Not affected Not in release
linux-oem-6.0 — Not in release Not affected Not in release Not in release
linux-oem-6.1 — Not in release Not affected Not in release Not in release
linux-oem-6.11 — Not affected Not in release Not in release Not in release
linux-oem-6.5 — Not in release Not affected Not in release Not in release
linux-oem-6.8 — Not affected Not in release Not in release Not in release
linux-oem-osp1 — Not in release Not in release Not in release Not affected
linux-oracle — Not affected Not affected Not affected Fixed
linux-oracle-5.0 — Not in release Not in release Not in release Not affected
linux-oracle-5.11 — Not in release Not in release Not affected Not in release
linux-oracle-5.13 — Not in release Not in release Not affected Not in release
linux-oracle-5.15 — Not in release Not in release Not affected Not in release
linux-oracle-5.3 — Not in release Not in release Not in release Not affected
linux-oracle-5.4 — Not in release Not in release Not in release Not affected
linux-oracle-5.8 — Not in release Not in release Not affected Not in release
linux-oracle-6.5 — Not in release Not affected Not in release Not in release
linux-oracle-6.8 — Not in release Not affected Not in release Not in release
linux-raspi — Not affected Not affected Not affected Not in release
linux-raspi-5.4 — Not in release Not in release Not in release Not affected
linux-raspi-realtime — Not affected Not in release Not in release Not in release
linux-raspi2 — Not in release Not in release Not affected Fixed
linux-raspi2-5.3 — Not in release Not in release Not in release Not affected
linux-realtime — Not affected Not affected Not in release Not in release
linux-riscv — Not affected Not affected Not affected Not in release
linux-riscv-5.11 — Not in release Not in release Not affected Not in release
linux-riscv-5.15 — Not in release Not in release Not affected Not in release
linux-riscv-5.19 — Not in release Not affected Not in release Not in release
linux-riscv-5.8 — Not in release Not in release Not affected Not in release
linux-riscv-6.5 — Not in release Not affected Not in release Not in release
linux-riscv-6.8 — Not in release Not affected Not in release Not in release
linux-snapdragon — Not in release Not in release Not in release Fixed
linux-starfive — Not in release Not in release Not in release Not in release
linux-starfive-5.19 — Not in release Not affected Not in release Not in release
linux-starfive-6.2 — Not in release Not affected Not in release Not in release
linux-starfive-6.5 — Not in release Not affected Not in release Not in release
linux-xilinx-zynqmp — Not in release Not affected Not affected Not in release
qemu — Fixed Fixed Fixed Fixed
qemu-kvm — Not in release Not in release Not in release Not in release
Show all 145 packages Show less packages

CVE-2018-12127

High priority
Fixed

Microarchitectural Load Port Data Sampling (MLPDS): Load ports on some microprocessors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local...

145 affected packages

intel-microcode, libvirt, linux, linux-allwinner, linux-allwinner-5.19...

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
intel-microcode — Not affected Not affected Not affected Fixed
libvirt — Fixed Fixed Fixed Fixed
linux — Not affected Not affected Not affected Fixed
linux-allwinner — Not in release Not in release Not in release Not in release
linux-allwinner-5.19 — Not in release Not affected Not in release Not in release
linux-aws — Not affected Not affected Not affected Fixed
linux-aws-5.0 — Not in release Not in release Not in release Not affected
linux-aws-5.11 — Not in release Not in release Not affected Not in release
linux-aws-5.13 — Not in release Not in release Not affected Not in release
linux-aws-5.15 — Not in release Not in release Not affected Not in release
linux-aws-5.19 — Not in release Not affected Not in release Not in release
linux-aws-5.3 — Not in release Not in release Not in release Not affected
linux-aws-5.4 — Not in release Not in release Not in release Not affected
linux-aws-5.8 — Not in release Not in release Not affected Not in release
linux-aws-6.2 — Not in release Not affected Not in release Not in release
linux-aws-6.5 — Not in release Not affected Not in release Not in release
linux-aws-6.8 — Not in release Not affected Not in release Not in release
linux-aws-fips — Not in release Not affected Not affected Not affected
linux-aws-hwe — Not in release Not in release Not in release Not in release
linux-azure — Not affected Not affected Not affected Fixed
linux-azure-4.15 — Not in release Not in release Not in release Not affected
linux-azure-5.11 — Not in release Not in release Not affected Not in release
linux-azure-5.13 — Not in release Not in release Not affected Not in release
linux-azure-5.15 — Not in release Not in release Not affected Not in release
linux-azure-5.19 — Not in release Not affected Not in release Not in release
linux-azure-5.3 — Not in release Not in release Not in release Not affected
linux-azure-5.4 — Not in release Not in release Not in release Not affected
linux-azure-5.8 — Not in release Not in release Not affected Not in release
linux-azure-6.2 — Not in release Not affected Not in release Not in release
linux-azure-6.5 — Not in release Not affected Not in release Not in release
linux-azure-6.8 — Not in release Not affected Not in release Not in release
linux-azure-edge — Not in release Not in release Not in release Fixed
linux-azure-fde — Not affected Not affected Not affected Not in release
linux-azure-fde-5.15 — Not in release Not in release Not affected Not in release
linux-azure-fde-5.19 — Not in release Not affected Not in release Not in release
linux-azure-fde-6.2 — Not in release Not affected Not in release Not in release
linux-azure-fips — Not in release Not affected Not affected Not affected
linux-bluefield — Not in release Not in release Not affected Not in release
linux-dell300x — Not in release Not in release Not in release Not affected
linux-euclid — Not in release Not in release Not in release Not in release
linux-fips — Not in release Not affected Not affected Not affected
linux-flo — Not in release Not in release Not in release Not in release
linux-gcp — Not affected Not affected Not affected Fixed
linux-gcp-4.15 — Not in release Not in release Not in release Not affected
linux-gcp-5.11 — Not in release Not in release Not affected Not in release
linux-gcp-5.13 — Not in release Not in release Not affected Not in release
linux-gcp-5.15 — Not in release Not in release Not affected Not in release
linux-gcp-5.19 — Not in release Not affected Not in release Not in release
linux-gcp-5.3 — Not in release Not in release Not in release Not affected
linux-gcp-5.4 — Not in release Not in release Not in release Not affected
linux-gcp-5.8 — Not in release Not in release Not affected Not in release
linux-gcp-6.2 — Not in release Not affected Not in release Not in release
linux-gcp-6.5 — Not in release Not affected Not in release Not in release
linux-gcp-6.8 — Not in release Not affected Not in release Not in release
linux-gcp-edge — Not in release Not in release Not in release Fixed
linux-gcp-fips — Not in release Not affected Not affected Not affected
linux-gke — Not affected Not affected Not affected Not in release
linux-gke-4.15 — Not in release Not in release Not in release Fixed
linux-gke-5.0 — Not in release Not in release Not in release Not affected
linux-gke-5.15 — Not in release Not in release Not affected Not in release
linux-gke-5.3 — Not in release Not in release Not in release Not affected
linux-gke-5.4 — Not in release Not in release Not in release Not affected
linux-gkeop — Not affected Not affected Not affected Not in release
linux-gkeop-5.15 — Not in release Not in release Not affected Not in release
linux-gkeop-5.4 — Not in release Not in release Not in release Not affected
linux-goldfish — Not in release Not in release Not in release Not in release
linux-hwe — Not in release Not in release Not in release Fixed
linux-hwe-5.11 — Not in release Not in release Not affected Not in release
linux-hwe-5.13 — Not in release Not in release Not affected Not in release
linux-hwe-5.15 — Not in release Not in release Not affected Not in release
linux-hwe-5.19 — Not in release Not affected Not in release Not in release
linux-hwe-5.4 — Not in release Not in release Not in release Not affected
linux-hwe-5.8 — Not in release Not in release Not affected Not in release
linux-hwe-6.2 — Not in release Not affected Not in release Not in release
linux-hwe-6.5 — Not in release Not affected Not in release Not in release
linux-hwe-6.8 — Not in release Not affected Not in release Not in release
linux-hwe-edge — Not in release Not in release Not in release Not affected
linux-ibm — Not affected Not affected Not affected Not in release
linux-ibm-5.15 — Not in release Not in release Not affected Not in release
linux-ibm-5.4 — Not in release Not in release Not in release Not affected
linux-intel — Not affected Not in release Not in release Not in release
linux-intel-5.13 — Not in release Not in release Not affected Not in release
linux-intel-iot-realtime — Not in release Not affected Not in release Not in release
linux-intel-iotg — Not in release Not affected Not in release Not in release
linux-intel-iotg-5.15 — Not in release Not in release Not affected Not in release
linux-iot — Not in release Not in release Not affected Not in release
linux-kvm — Not in release Not affected Not affected Fixed
linux-laptop — Not in release Not in release Not in release Not in release
linux-lowlatency — Not affected Not affected Not in release Not in release
linux-lowlatency-hwe-5.15 — Not in release Not in release Not affected Not in release
linux-lowlatency-hwe-5.19 — Not in release Not affected Not in release Not in release
linux-lowlatency-hwe-6.2 — Not in release Not affected Not in release Not in release
linux-lowlatency-hwe-6.5 — Not in release Not affected Not in release Not in release
linux-lowlatency-hwe-6.8 — Not in release Not affected Not in release Not in release
linux-lts-trusty — Not in release Not in release Not in release Not in release
linux-lts-xenial — Not in release Not in release Not in release Not in release
linux-mako — Not in release Not in release Not in release Not in release
linux-nvidia — Not affected Not affected Not in release Not in release
linux-nvidia-6.2 — Not in release Not affected Not in release Not in release
linux-nvidia-6.5 — Not in release Not affected Not in release Not in release
linux-nvidia-6.8 — Not in release Not affected Not in release Not in release
linux-nvidia-lowlatency — Not affected Not in release Not in release Not in release
linux-oem — Not in release Not in release Not in release Fixed
linux-oem-5.10 — Not in release Not in release Not affected Not in release
linux-oem-5.13 — Not in release Not in release Not affected Not in release
linux-oem-5.14 — Not in release Not in release Not affected Not in release
linux-oem-5.17 — Not in release Not affected Not in release Not in release
linux-oem-5.6 — Not in release Not in release Not affected Not in release
linux-oem-6.0 — Not in release Not affected Not in release Not in release
linux-oem-6.1 — Not in release Not affected Not in release Not in release
linux-oem-6.11 — Not affected Not in release Not in release Not in release
linux-oem-6.5 — Not in release Not affected Not in release Not in release
linux-oem-6.8 — Not affected Not in release Not in release Not in release
linux-oem-osp1 — Not in release Not in release Not in release Not affected
linux-oracle — Not affected Not affected Not affected Fixed
linux-oracle-5.0 — Not in release Not in release Not in release Not affected
linux-oracle-5.11 — Not in release Not in release Not affected Not in release
linux-oracle-5.13 — Not in release Not in release Not affected Not in release
linux-oracle-5.15 — Not in release Not in release Not affected Not in release
linux-oracle-5.3 — Not in release Not in release Not in release Not affected
linux-oracle-5.4 — Not in release Not in release Not in release Not affected
linux-oracle-5.8 — Not in release Not in release Not affected Not in release
linux-oracle-6.5 — Not in release Not affected Not in release Not in release
linux-oracle-6.8 — Not in release Not affected Not in release Not in release
linux-raspi — Not affected Not affected Not affected Not in release
linux-raspi-5.4 — Not in release Not in release Not in release Not affected
linux-raspi-realtime — Not affected Not in release Not in release Not in release
linux-raspi2 — Not in release Not in release Not affected Fixed
linux-raspi2-5.3 — Not in release Not in release Not in release Not affected
linux-realtime — Not affected Not affected Not in release Not in release
linux-riscv — Not affected Not affected Not affected Not in release
linux-riscv-5.11 — Not in release Not in release Not affected Not in release
linux-riscv-5.15 — Not in release Not in release Not affected Not in release
linux-riscv-5.19 — Not in release Not affected Not in release Not in release
linux-riscv-5.8 — Not in release Not in release Not affected Not in release
linux-riscv-6.5 — Not in release Not affected Not in release Not in release
linux-riscv-6.8 — Not in release Not affected Not in release Not in release
linux-snapdragon — Not in release Not in release Not in release Fixed
linux-starfive — Not in release Not in release Not in release Not in release
linux-starfive-5.19 — Not in release Not affected Not in release Not in release
linux-starfive-6.2 — Not in release Not affected Not in release Not in release
linux-starfive-6.5 — Not in release Not affected Not in release Not in release
linux-xilinx-zynqmp — Not in release Not affected Not affected Not in release
qemu — Fixed Fixed Fixed Fixed
qemu-kvm — Not in release Not in release Not in release Not in release
Show all 145 packages Show less packages

CVE-2018-12126

High priority
Fixed

Microarchitectural Store Buffer Data Sampling (MSBDS): Store buffers on some microprocessors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with...

145 affected packages

intel-microcode, libvirt, linux, linux-allwinner, linux-allwinner-5.19...

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
intel-microcode — Not affected Not affected Not affected Fixed
libvirt — Fixed Fixed Fixed Fixed
linux — Not affected Not affected Not affected Fixed
linux-allwinner — Not in release Not in release Not in release Not in release
linux-allwinner-5.19 — Not in release Not affected Not in release Not in release
linux-aws — Not affected Not affected Not affected Fixed
linux-aws-5.0 — Not in release Not in release Not in release Not affected
linux-aws-5.11 — Not in release Not in release Not affected Not in release
linux-aws-5.13 — Not in release Not in release Not affected Not in release
linux-aws-5.15 — Not in release Not in release Not affected Not in release
linux-aws-5.19 — Not in release Not affected Not in release Not in release
linux-aws-5.3 — Not in release Not in release Not in release Not affected
linux-aws-5.4 — Not in release Not in release Not in release Not affected
linux-aws-5.8 — Not in release Not in release Not affected Not in release
linux-aws-6.2 — Not in release Not affected Not in release Not in release
linux-aws-6.5 — Not in release Not affected Not in release Not in release
linux-aws-6.8 — Not in release Not affected Not in release Not in release
linux-aws-fips — Not in release Not affected Not affected Not affected
linux-aws-hwe — Not in release Not in release Not in release Not in release
linux-azure — Not affected Not affected Not affected Fixed
linux-azure-4.15 — Not in release Not in release Not in release Not affected
linux-azure-5.11 — Not in release Not in release Not affected Not in release
linux-azure-5.13 — Not in release Not in release Not affected Not in release
linux-azure-5.15 — Not in release Not in release Not affected Not in release
linux-azure-5.19 — Not in release Not affected Not in release Not in release
linux-azure-5.3 — Not in release Not in release Not in release Not affected
linux-azure-5.4 — Not in release Not in release Not in release Not affected
linux-azure-5.8 — Not in release Not in release Not affected Not in release
linux-azure-6.2 — Not in release Not affected Not in release Not in release
linux-azure-6.5 — Not in release Not affected Not in release Not in release
linux-azure-6.8 — Not in release Not affected Not in release Not in release
linux-azure-edge — Not in release Not in release Not in release Fixed
linux-azure-fde — Not affected Not affected Not affected Not in release
linux-azure-fde-5.15 — Not in release Not in release Not affected Not in release
linux-azure-fde-5.19 — Not in release Not affected Not in release Not in release
linux-azure-fde-6.2 — Not in release Not affected Not in release Not in release
linux-azure-fips — Not in release Not affected Not affected Not affected
linux-bluefield — Not in release Not in release Not affected Not in release
linux-dell300x — Not in release Not in release Not in release Not affected
linux-euclid — Not in release Not in release Not in release Not in release
linux-fips — Not in release Not affected Not affected Not affected
linux-flo — Not in release Not in release Not in release Not in release
linux-gcp — Not affected Not affected Not affected Fixed
linux-gcp-4.15 — Not in release Not in release Not in release Not affected
linux-gcp-5.11 — Not in release Not in release Not affected Not in release
linux-gcp-5.13 — Not in release Not in release Not affected Not in release
linux-gcp-5.15 — Not in release Not in release Not affected Not in release
linux-gcp-5.19 — Not in release Not affected Not in release Not in release
linux-gcp-5.3 — Not in release Not in release Not in release Not affected
linux-gcp-5.4 — Not in release Not in release Not in release Not affected
linux-gcp-5.8 — Not in release Not in release Not affected Not in release
linux-gcp-6.2 — Not in release Not affected Not in release Not in release
linux-gcp-6.5 — Not in release Not affected Not in release Not in release
linux-gcp-6.8 — Not in release Not affected Not in release Not in release
linux-gcp-edge — Not in release Not in release Not in release Fixed
linux-gcp-fips — Not in release Not affected Not affected Not affected
linux-gke — Not affected Not affected Not affected Not in release
linux-gke-4.15 — Not in release Not in release Not in release Fixed
linux-gke-5.0 — Not in release Not in release Not in release Not affected
linux-gke-5.15 — Not in release Not in release Not affected Not in release
linux-gke-5.3 — Not in release Not in release Not in release Not affected
linux-gke-5.4 — Not in release Not in release Not in release Not affected
linux-gkeop — Not affected Not affected Not affected Not in release
linux-gkeop-5.15 — Not in release Not in release Not affected Not in release
linux-gkeop-5.4 — Not in release Not in release Not in release Not affected
linux-goldfish — Not in release Not in release Not in release Not in release
linux-hwe — Not in release Not in release Not in release Fixed
linux-hwe-5.11 — Not in release Not in release Not affected Not in release
linux-hwe-5.13 — Not in release Not in release Not affected Not in release
linux-hwe-5.15 — Not in release Not in release Not affected Not in release
linux-hwe-5.19 — Not in release Not affected Not in release Not in release
linux-hwe-5.4 — Not in release Not in release Not in release Not affected
linux-hwe-5.8 — Not in release Not in release Not affected Not in release
linux-hwe-6.2 — Not in release Not affected Not in release Not in release
linux-hwe-6.5 — Not in release Not affected Not in release Not in release
linux-hwe-6.8 — Not in release Not affected Not in release Not in release
linux-hwe-edge — Not in release Not in release Not in release Not affected
linux-ibm — Not affected Not affected Not affected Not in release
linux-ibm-5.15 — Not in release Not in release Not affected Not in release
linux-ibm-5.4 — Not in release Not in release Not in release Not affected
linux-intel — Not affected Not in release Not in release Not in release
linux-intel-5.13 — Not in release Not in release Not affected Not in release
linux-intel-iot-realtime — Not in release Not affected Not in release Not in release
linux-intel-iotg — Not in release Not affected Not in release Not in release
linux-intel-iotg-5.15 — Not in release Not in release Not affected Not in release
linux-iot — Not in release Not in release Not affected Not in release
linux-kvm — Not in release Not affected Not affected Fixed
linux-laptop — Not in release Not in release Not in release Not in release
linux-lowlatency — Not affected Not affected Not in release Not in release
linux-lowlatency-hwe-5.15 — Not in release Not in release Not affected Not in release
linux-lowlatency-hwe-5.19 — Not in release Not affected Not in release Not in release
linux-lowlatency-hwe-6.2 — Not in release Not affected Not in release Not in release
linux-lowlatency-hwe-6.5 — Not in release Not affected Not in release Not in release
linux-lowlatency-hwe-6.8 — Not in release Not affected Not in release Not in release
linux-lts-trusty — Not in release Not in release Not in release Not in release
linux-lts-xenial — Not in release Not in release Not in release Not in release
linux-mako — Not in release Not in release Not in release Not in release
linux-nvidia — Not affected Not affected Not in release Not in release
linux-nvidia-6.2 — Not in release Not affected Not in release Not in release
linux-nvidia-6.5 — Not in release Not affected Not in release Not in release
linux-nvidia-6.8 — Not in release Not affected Not in release Not in release
linux-nvidia-lowlatency — Not affected Not in release Not in release Not in release
linux-oem — Not in release Not in release Not in release Fixed
linux-oem-5.10 — Not in release Not in release Not affected Not in release
linux-oem-5.13 — Not in release Not in release Not affected Not in release
linux-oem-5.14 — Not in release Not in release Not affected Not in release
linux-oem-5.17 — Not in release Not affected Not in release Not in release
linux-oem-5.6 — Not in release Not in release Not affected Not in release
linux-oem-6.0 — Not in release Not affected Not in release Not in release
linux-oem-6.1 — Not in release Not affected Not in release Not in release
linux-oem-6.11 — Not affected Not in release Not in release Not in release
linux-oem-6.5 — Not in release Not affected Not in release Not in release
linux-oem-6.8 — Not affected Not in release Not in release Not in release
linux-oem-osp1 — Not in release Not in release Not in release Not affected
linux-oracle — Not affected Not affected Not affected Fixed
linux-oracle-5.0 — Not in release Not in release Not in release Not affected
linux-oracle-5.11 — Not in release Not in release Not affected Not in release
linux-oracle-5.13 — Not in release Not in release Not affected Not in release
linux-oracle-5.15 — Not in release Not in release Not affected Not in release
linux-oracle-5.3 — Not in release Not in release Not in release Not affected
linux-oracle-5.4 — Not in release Not in release Not in release Not affected
linux-oracle-5.8 — Not in release Not in release Not affected Not in release
linux-oracle-6.5 — Not in release Not affected Not in release Not in release
linux-oracle-6.8 — Not in release Not affected Not in release Not in release
linux-raspi — Not affected Not affected Not affected Not in release
linux-raspi-5.4 — Not in release Not in release Not in release Not affected
linux-raspi-realtime — Not affected Not in release Not in release Not in release
linux-raspi2 — Not in release Not in release Not affected Fixed
linux-raspi2-5.3 — Not in release Not in release Not in release Not affected
linux-realtime — Not affected Not affected Not in release Not in release
linux-riscv — Not affected Not affected Not affected Not in release
linux-riscv-5.11 — Not in release Not in release Not affected Not in release
linux-riscv-5.15 — Not in release Not in release Not affected Not in release
linux-riscv-5.19 — Not in release Not affected Not in release Not in release
linux-riscv-5.8 — Not in release Not in release Not affected Not in release
linux-riscv-6.5 — Not in release Not affected Not in release Not in release
linux-riscv-6.8 — Not in release Not affected Not in release Not in release
linux-snapdragon — Not in release Not in release Not in release Fixed
linux-starfive — Not in release Not in release Not in release Not in release
linux-starfive-5.19 — Not in release Not affected Not in release Not in release
linux-starfive-6.2 — Not in release Not affected Not in release Not in release
linux-starfive-6.5 — Not in release Not affected Not in release Not in release
linux-xilinx-zynqmp — Not in release Not affected Not affected Not in release
qemu — Fixed Fixed Fixed Fixed
qemu-kvm — Not in release Not in release Not in release Not in release
Show all 145 packages Show less packages

CVE-2019-5008

Low priority
Fixed

hw/sparc64/sun4u.c in QEMU 3.1.50 is vulnerable to a NULL pointer dereference, which allows the attacker to cause a denial of service via a device driver.

2 affected packages

qemu, qemu-kvm

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
qemu — — — — Not affected
qemu-kvm — — — — Not in release
Show less packages

CVE-2019-8934

Low priority
Ignored

hw/ppc/spapr.c in QEMU through 3.1.0 allows Information Exposure because the hypervisor shares the /proc/device-tree/system-id and /proc/device-tree/model system attributes with a guest.

2 affected packages

qemu, qemu-kvm

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
qemu — — — Not affected Ignored
qemu-kvm — — — Not in release Not in release
Show less packages

CVE-2019-6501

Medium priority
Not affected

In QEMU 3.1, scsi_handle_inquiry_reply in hw/scsi/scsi-generic.c allows out-of-bounds write and read operations.

2 affected packages

qemu, qemu-kvm

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
qemu — — — — Not affected
qemu-kvm — — — — Not in release
Show less packages

CVE-2019-9824

Low priority
Fixed

tcp_emu in slirp/tcp_subr.c (aka slirp/src/tcp_subr.c) in QEMU 3.0.0 uses uninitialized data in an snprintf call, leading to Information disclosure.

2 affected packages

qemu, qemu-kvm

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
qemu — — — Fixed Fixed
qemu-kvm — — — Not in release Not in release
Show less packages