Debian Package Tracker

general

source: linux (main)
version: 5.6.14-1
maintainer: Debian Kernel Team (archive) (DMD)
uploaders: maximilian attems [DMD] – Salvatore Bonaccorso [DMD] – Ben Hutchings [DMD] – Bastian Blank [DMD]
arch: all
std-ver: 4.2.0
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

o-o-stable: 3.16.56-1+deb8u1
o-o-sec: 3.16.81-1
oldstable: 4.9.210-1
old-sec: 4.9.189-3+deb9u2
old-bpo: 4.19.118-2~bpo9+1
stable: 4.19.118-2
stable-sec: 4.19.98-1+deb10u1
stable-bpo: 5.5.17-1~bpo10+1
testing: 5.6.14-1
unstable: 5.6.14-1
exp: 5.7~rc5-1~exp1

versioned links

3.16.51-3: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
3.16.51-3+deb8u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
3.16.56-1+deb8u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
3.16.81-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
4.9.189-3+deb9u2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
4.9.210-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
4.19.67-2+deb10u2~bpo9+1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
4.19.67-2+deb10u2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
4.19.98-1~bpo9+1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
4.19.98-1+deb10u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
4.19.118-2~bpo9+1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
4.19.118-2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
5.4.8-1~bpo10+1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
5.4.13-1~bpo10+1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
5.4.19-1~bpo10+1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
5.5.17-1~bpo10+1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
5.5.17-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
5.6.7-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
5.6.14-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
5.7~rc5-1~exp1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

acpi-modules-5.6.0-2-686-di
acpi-modules-5.6.0-2-686-pae-di
acpi-modules-5.6.0-2-amd64-di
affs-modules-5.6.0-2-4kc-malta-di
affs-modules-5.6.0-2-5kc-malta-di
affs-modules-5.6.0-2-loongson-3-di
affs-modules-5.6.0-2-m68k-di
affs-modules-5.6.0-2-octeon-di
affs-modules-5.6.0-2-powerpc-di
affs-modules-5.6.0-2-powerpc64-di
ata-modules-5.6.0-2-4kc-malta-di
ata-modules-5.6.0-2-5kc-malta-di
ata-modules-5.6.0-2-686-di
ata-modules-5.6.0-2-686-pae-di
ata-modules-5.6.0-2-alpha-generic-di
ata-modules-5.6.0-2-amd64-di
ata-modules-5.6.0-2-arm64-di
ata-modules-5.6.0-2-armmp-di
ata-modules-5.6.0-2-itanium-di
ata-modules-5.6.0-2-loongson-3-di
ata-modules-5.6.0-2-m68k-di
ata-modules-5.6.0-2-parisc-di
ata-modules-5.6.0-2-parisc64-di
ata-modules-5.6.0-2-powerpc-di
ata-modules-5.6.0-2-powerpc64-di
ata-modules-5.6.0-2-powerpc64le-di
ata-modules-5.6.0-2-riscv64-di
ata-modules-5.6.0-2-sparc64-di
btrfs-modules-5.6.0-2-4kc-malta-di
btrfs-modules-5.6.0-2-5kc-malta-di
btrfs-modules-5.6.0-2-686-di
btrfs-modules-5.6.0-2-686-pae-di
btrfs-modules-5.6.0-2-alpha-generic-di
btrfs-modules-5.6.0-2-amd64-di
btrfs-modules-5.6.0-2-arm64-di
btrfs-modules-5.6.0-2-armmp-di
btrfs-modules-5.6.0-2-itanium-di
btrfs-modules-5.6.0-2-loongson-3-di
btrfs-modules-5.6.0-2-m68k-di
btrfs-modules-5.6.0-2-marvell-di
btrfs-modules-5.6.0-2-mips32r6-di
btrfs-modules-5.6.0-2-mips32r6el-di
btrfs-modules-5.6.0-2-mips64r6-di
btrfs-modules-5.6.0-2-mips64r6el-di
btrfs-modules-5.6.0-2-octeon-di
btrfs-modules-5.6.0-2-parisc-di
btrfs-modules-5.6.0-2-parisc64-di
btrfs-modules-5.6.0-2-powerpc-di
btrfs-modules-5.6.0-2-powerpc64-di
btrfs-modules-5.6.0-2-powerpc64le-di
btrfs-modules-5.6.0-2-riscv64-di
btrfs-modules-5.6.0-2-s390x-di
btrfs-modules-5.6.0-2-sh7751r-di
btrfs-modules-5.6.0-2-sh7785lcr-di
btrfs-modules-5.6.0-2-sparc64-di
cdrom-core-modules-5.6.0-2-4kc-malta-di
cdrom-core-modules-5.6.0-2-5kc-malta-di
cdrom-core-modules-5.6.0-2-686-di
cdrom-core-modules-5.6.0-2-686-pae-di
cdrom-core-modules-5.6.0-2-alpha-generic-di
cdrom-core-modules-5.6.0-2-amd64-di
cdrom-core-modules-5.6.0-2-arm64-di
cdrom-core-modules-5.6.0-2-armmp-di
cdrom-core-modules-5.6.0-2-itanium-di
cdrom-core-modules-5.6.0-2-loongson-3-di
cdrom-core-modules-5.6.0-2-m68k-di
cdrom-core-modules-5.6.0-2-marvell-di
cdrom-core-modules-5.6.0-2-octeon-di
cdrom-core-modules-5.6.0-2-parisc-di
cdrom-core-modules-5.6.0-2-parisc64-di
cdrom-core-modules-5.6.0-2-powerpc-di
cdrom-core-modules-5.6.0-2-powerpc64-di
cdrom-core-modules-5.6.0-2-powerpc64le-di
cdrom-core-modules-5.6.0-2-riscv64-di
cdrom-core-modules-5.6.0-2-s390x-di
cdrom-core-modules-5.6.0-2-sh7751r-di
cdrom-core-modules-5.6.0-2-sh7785lcr-di
cdrom-core-modules-5.6.0-2-sparc64-di
compress-modules-5.6.0-2-4kc-malta-di
compress-modules-5.6.0-2-5kc-malta-di
compress-modules-5.6.0-2-686-di
compress-modules-5.6.0-2-686-pae-di
compress-modules-5.6.0-2-alpha-generic-di
compress-modules-5.6.0-2-amd64-di
compress-modules-5.6.0-2-arm64-di
compress-modules-5.6.0-2-armmp-di
compress-modules-5.6.0-2-itanium-di
compress-modules-5.6.0-2-loongson-3-di
compress-modules-5.6.0-2-m68k-di
compress-modules-5.6.0-2-marvell-di
compress-modules-5.6.0-2-mips32r6-di
compress-modules-5.6.0-2-mips32r6el-di
compress-modules-5.6.0-2-mips64r6-di
compress-modules-5.6.0-2-mips64r6el-di
compress-modules-5.6.0-2-octeon-di
compress-modules-5.6.0-2-parisc-di
compress-modules-5.6.0-2-parisc64-di
compress-modules-5.6.0-2-powerpc-di
compress-modules-5.6.0-2-powerpc64-di
compress-modules-5.6.0-2-powerpc64le-di
compress-modules-5.6.0-2-riscv64-di
compress-modules-5.6.0-2-s390x-di
compress-modules-5.6.0-2-sh7751r-di
compress-modules-5.6.0-2-sh7785lcr-di
compress-modules-5.6.0-2-sparc64-di
crc-modules-5.6.0-2-4kc-malta-di
crc-modules-5.6.0-2-5kc-malta-di
crc-modules-5.6.0-2-686-di
crc-modules-5.6.0-2-686-pae-di
crc-modules-5.6.0-2-alpha-generic-di
crc-modules-5.6.0-2-amd64-di
crc-modules-5.6.0-2-arm64-di
crc-modules-5.6.0-2-armmp-di
crc-modules-5.6.0-2-itanium-di
crc-modules-5.6.0-2-loongson-3-di
crc-modules-5.6.0-2-m68k-di
crc-modules-5.6.0-2-marvell-di
crc-modules-5.6.0-2-mips32r6-di
crc-modules-5.6.0-2-mips32r6el-di
crc-modules-5.6.0-2-mips64r6-di
crc-modules-5.6.0-2-mips64r6el-di
crc-modules-5.6.0-2-octeon-di
crc-modules-5.6.0-2-parisc-di
crc-modules-5.6.0-2-parisc64-di
crc-modules-5.6.0-2-powerpc-di
crc-modules-5.6.0-2-powerpc64-di
crc-modules-5.6.0-2-powerpc64le-di
crc-modules-5.6.0-2-riscv64-di
crc-modules-5.6.0-2-s390x-di
crc-modules-5.6.0-2-sh7751r-di
crc-modules-5.6.0-2-sh7785lcr-di
crc-modules-5.6.0-2-sparc64-di
crypto-dm-modules-5.6.0-2-4kc-malta-di
crypto-dm-modules-5.6.0-2-5kc-malta-di
crypto-dm-modules-5.6.0-2-686-di
crypto-dm-modules-5.6.0-2-686-pae-di
crypto-dm-modules-5.6.0-2-alpha-generic-di
crypto-dm-modules-5.6.0-2-amd64-di
crypto-dm-modules-5.6.0-2-arm64-di
crypto-dm-modules-5.6.0-2-armmp-di
crypto-dm-modules-5.6.0-2-itanium-di
crypto-dm-modules-5.6.0-2-loongson-3-di
crypto-dm-modules-5.6.0-2-marvell-di
crypto-dm-modules-5.6.0-2-mips32r6-di
crypto-dm-modules-5.6.0-2-mips32r6el-di
crypto-dm-modules-5.6.0-2-mips64r6-di
crypto-dm-modules-5.6.0-2-mips64r6el-di
crypto-dm-modules-5.6.0-2-octeon-di
crypto-dm-modules-5.6.0-2-parisc-di
crypto-dm-modules-5.6.0-2-parisc64-di
crypto-dm-modules-5.6.0-2-powerpc-di
crypto-dm-modules-5.6.0-2-powerpc64-di
crypto-dm-modules-5.6.0-2-powerpc64le-di
crypto-dm-modules-5.6.0-2-riscv64-di
crypto-dm-modules-5.6.0-2-s390x-di
crypto-dm-modules-5.6.0-2-sh7751r-di
crypto-dm-modules-5.6.0-2-sh7785lcr-di
crypto-dm-modules-5.6.0-2-sparc64-di
crypto-modules-5.6.0-2-4kc-malta-di
crypto-modules-5.6.0-2-5kc-malta-di
crypto-modules-5.6.0-2-686-di
crypto-modules-5.6.0-2-686-pae-di
crypto-modules-5.6.0-2-alpha-generic-di
crypto-modules-5.6.0-2-amd64-di
crypto-modules-5.6.0-2-arm64-di
crypto-modules-5.6.0-2-armmp-di
crypto-modules-5.6.0-2-itanium-di
crypto-modules-5.6.0-2-loongson-3-di
crypto-modules-5.6.0-2-m68k-di
crypto-modules-5.6.0-2-marvell-di
crypto-modules-5.6.0-2-mips32r6-di
crypto-modules-5.6.0-2-mips32r6el-di
crypto-modules-5.6.0-2-mips64r6-di
crypto-modules-5.6.0-2-mips64r6el-di
crypto-modules-5.6.0-2-octeon-di
crypto-modules-5.6.0-2-parisc-di
crypto-modules-5.6.0-2-parisc64-di
crypto-modules-5.6.0-2-powerpc-di
crypto-modules-5.6.0-2-powerpc64-di
crypto-modules-5.6.0-2-powerpc64le-di
crypto-modules-5.6.0-2-riscv64-di
crypto-modules-5.6.0-2-s390x-di
crypto-modules-5.6.0-2-sh7751r-di
crypto-modules-5.6.0-2-sh7785lcr-di
crypto-modules-5.6.0-2-sparc64-di
dasd-extra-modules-5.6.0-2-s390x-di
dasd-modules-5.6.0-2-s390x-di
efi-modules-5.6.0-2-686-di
efi-modules-5.6.0-2-686-pae-di
efi-modules-5.6.0-2-amd64-di
efi-modules-5.6.0-2-arm64-di
efi-modules-5.6.0-2-armmp-di
event-modules-5.6.0-2-4kc-malta-di
event-modules-5.6.0-2-5kc-malta-di
event-modules-5.6.0-2-686-di
event-modules-5.6.0-2-686-pae-di
event-modules-5.6.0-2-alpha-generic-di
event-modules-5.6.0-2-amd64-di
event-modules-5.6.0-2-arm64-di
event-modules-5.6.0-2-armmp-di
event-modules-5.6.0-2-itanium-di
event-modules-5.6.0-2-loongson-3-di
event-modules-5.6.0-2-marvell-di
event-modules-5.6.0-2-octeon-di
event-modules-5.6.0-2-parisc-di
event-modules-5.6.0-2-parisc64-di
event-modules-5.6.0-2-powerpc-di
event-modules-5.6.0-2-powerpc64-di
event-modules-5.6.0-2-powerpc64le-di
event-modules-5.6.0-2-riscv64-di
ext4-modules-5.6.0-2-4kc-malta-di
ext4-modules-5.6.0-2-5kc-malta-di
ext4-modules-5.6.0-2-686-di
ext4-modules-5.6.0-2-686-pae-di
ext4-modules-5.6.0-2-alpha-generic-di
ext4-modules-5.6.0-2-amd64-di
ext4-modules-5.6.0-2-arm64-di
ext4-modules-5.6.0-2-armmp-di
ext4-modules-5.6.0-2-itanium-di
ext4-modules-5.6.0-2-loongson-3-di
ext4-modules-5.6.0-2-m68k-di
ext4-modules-5.6.0-2-marvell-di
ext4-modules-5.6.0-2-mips32r6-di
ext4-modules-5.6.0-2-mips32r6el-di
ext4-modules-5.6.0-2-mips64r6-di
ext4-modules-5.6.0-2-mips64r6el-di
ext4-modules-5.6.0-2-octeon-di
ext4-modules-5.6.0-2-parisc-di
ext4-modules-5.6.0-2-parisc64-di
ext4-modules-5.6.0-2-powerpc-di
ext4-modules-5.6.0-2-powerpc64-di
ext4-modules-5.6.0-2-powerpc64le-di
ext4-modules-5.6.0-2-riscv64-di
ext4-modules-5.6.0-2-s390x-di
ext4-modules-5.6.0-2-sh7751r-di
ext4-modules-5.6.0-2-sh7785lcr-di
ext4-modules-5.6.0-2-sparc64-di
f2fs-modules-5.6.0-2-4kc-malta-di
f2fs-modules-5.6.0-2-5kc-malta-di
f2fs-modules-5.6.0-2-686-di
f2fs-modules-5.6.0-2-686-pae-di
f2fs-modules-5.6.0-2-alpha-generic-di
f2fs-modules-5.6.0-2-amd64-di
f2fs-modules-5.6.0-2-arm64-di
f2fs-modules-5.6.0-2-armmp-di
f2fs-modules-5.6.0-2-itanium-di
f2fs-modules-5.6.0-2-loongson-3-di
f2fs-modules-5.6.0-2-marvell-di
f2fs-modules-5.6.0-2-mips32r6-di
f2fs-modules-5.6.0-2-mips32r6el-di
f2fs-modules-5.6.0-2-mips64r6-di
f2fs-modules-5.6.0-2-mips64r6el-di
f2fs-modules-5.6.0-2-octeon-di
f2fs-modules-5.6.0-2-parisc-di
f2fs-modules-5.6.0-2-parisc64-di
f2fs-modules-5.6.0-2-powerpc-di
f2fs-modules-5.6.0-2-powerpc64-di
f2fs-modules-5.6.0-2-powerpc64le-di
f2fs-modules-5.6.0-2-riscv64-di
f2fs-modules-5.6.0-2-s390x-di
f2fs-modules-5.6.0-2-sh7751r-di
f2fs-modules-5.6.0-2-sh7785lcr-di
f2fs-modules-5.6.0-2-sparc64-di
fancontrol-modules-5.6.0-2-powerpc64-di
fancontrol-modules-5.6.0-2-powerpc64le-di
fat-modules-5.6.0-2-4kc-malta-di
fat-modules-5.6.0-2-5kc-malta-di
fat-modules-5.6.0-2-686-di
fat-modules-5.6.0-2-686-pae-di
fat-modules-5.6.0-2-alpha-generic-di
fat-modules-5.6.0-2-amd64-di
fat-modules-5.6.0-2-arm64-di
fat-modules-5.6.0-2-armmp-di
fat-modules-5.6.0-2-itanium-di
fat-modules-5.6.0-2-loongson-3-di
fat-modules-5.6.0-2-m68k-di
fat-modules-5.6.0-2-marvell-di
fat-modules-5.6.0-2-octeon-di
fat-modules-5.6.0-2-parisc-di
fat-modules-5.6.0-2-parisc64-di
fat-modules-5.6.0-2-powerpc-di
fat-modules-5.6.0-2-powerpc64-di
fat-modules-5.6.0-2-powerpc64le-di
fat-modules-5.6.0-2-riscv64-di
fat-modules-5.6.0-2-s390x-di
fat-modules-5.6.0-2-sh7751r-di
fat-modules-5.6.0-2-sh7785lcr-di
fat-modules-5.6.0-2-sparc64-di
fb-modules-5.6.0-2-4kc-malta-di
fb-modules-5.6.0-2-5kc-malta-di
fb-modules-5.6.0-2-686-di
fb-modules-5.6.0-2-686-pae-di
fb-modules-5.6.0-2-alpha-generic-di
fb-modules-5.6.0-2-amd64-di
fb-modules-5.6.0-2-arm64-di
fb-modules-5.6.0-2-armmp-di
fb-modules-5.6.0-2-itanium-di
fb-modules-5.6.0-2-loongson-3-di
fb-modules-5.6.0-2-marvell-di
fb-modules-5.6.0-2-parisc64-di
fb-modules-5.6.0-2-powerpc-di
fb-modules-5.6.0-2-powerpc64-di
fb-modules-5.6.0-2-powerpc64le-di
fb-modules-5.6.0-2-riscv64-di
fb-modules-5.6.0-2-sparc64-di
firewire-core-modules-5.6.0-2-686-di
firewire-core-modules-5.6.0-2-686-pae-di
firewire-core-modules-5.6.0-2-amd64-di
firewire-core-modules-5.6.0-2-itanium-di
firewire-core-modules-5.6.0-2-loongson-3-di
firewire-core-modules-5.6.0-2-powerpc-di
firewire-core-modules-5.6.0-2-powerpc64-di
firewire-core-modules-5.6.0-2-powerpc64le-di
firewire-core-modules-5.6.0-2-sh7751r-di
firewire-core-modules-5.6.0-2-sh7785lcr-di
fuse-modules-5.6.0-2-4kc-malta-di
fuse-modules-5.6.0-2-5kc-malta-di
fuse-modules-5.6.0-2-686-di
fuse-modules-5.6.0-2-686-pae-di
fuse-modules-5.6.0-2-alpha-generic-di
fuse-modules-5.6.0-2-amd64-di
fuse-modules-5.6.0-2-arm64-di
fuse-modules-5.6.0-2-armmp-di
fuse-modules-5.6.0-2-itanium-di
fuse-modules-5.6.0-2-loongson-3-di
fuse-modules-5.6.0-2-m68k-di
fuse-modules-5.6.0-2-marvell-di
fuse-modules-5.6.0-2-mips32r6-di
fuse-modules-5.6.0-2-mips32r6el-di
fuse-modules-5.6.0-2-mips64r6-di
fuse-modules-5.6.0-2-mips64r6el-di
fuse-modules-5.6.0-2-octeon-di
fuse-modules-5.6.0-2-parisc-di
fuse-modules-5.6.0-2-parisc64-di
fuse-modules-5.6.0-2-powerpc-di
fuse-modules-5.6.0-2-powerpc64-di
fuse-modules-5.6.0-2-powerpc64le-di
fuse-modules-5.6.0-2-riscv64-di
fuse-modules-5.6.0-2-s390x-di
fuse-modules-5.6.0-2-sh7751r-di
fuse-modules-5.6.0-2-sh7785lcr-di
fuse-modules-5.6.0-2-sparc64-di
hfs-modules-5.6.0-2-4kc-malta-di
hfs-modules-5.6.0-2-5kc-malta-di
hfs-modules-5.6.0-2-loongson-3-di
hfs-modules-5.6.0-2-m68k-di
hfs-modules-5.6.0-2-octeon-di
hfs-modules-5.6.0-2-powerpc-di
hfs-modules-5.6.0-2-powerpc64-di
hyperv-daemons (3 bugs: 0, 2, 1, 0)
hypervisor-modules-5.6.0-2-powerpc64-di
hypervisor-modules-5.6.0-2-powerpc64le-di
i2c-modules-5.6.0-2-4kc-malta-di
i2c-modules-5.6.0-2-5kc-malta-di
i2c-modules-5.6.0-2-686-di
i2c-modules-5.6.0-2-686-pae-di
i2c-modules-5.6.0-2-alpha-generic-di
i2c-modules-5.6.0-2-amd64-di
i2c-modules-5.6.0-2-arm64-di
i2c-modules-5.6.0-2-armmp-di
i2c-modules-5.6.0-2-itanium-di
i2c-modules-5.6.0-2-powerpc64-di
i2c-modules-5.6.0-2-powerpc64le-di
i2c-modules-5.6.0-2-riscv64-di
i2c-modules-5.6.0-2-sh7751r-di
i2c-modules-5.6.0-2-sparc64-di
ide-core-modules-5.6.0-2-itanium-di
ide-core-modules-5.6.0-2-m68k-di
ide-modules-5.6.0-2-itanium-di
ide-modules-5.6.0-2-m68k-di
input-modules-5.6.0-2-4kc-malta-di
input-modules-5.6.0-2-5kc-malta-di
input-modules-5.6.0-2-686-di
input-modules-5.6.0-2-686-pae-di
input-modules-5.6.0-2-alpha-generic-di
input-modules-5.6.0-2-amd64-di
input-modules-5.6.0-2-arm64-di
input-modules-5.6.0-2-armmp-di
input-modules-5.6.0-2-itanium-di
input-modules-5.6.0-2-loongson-3-di
input-modules-5.6.0-2-marvell-di
input-modules-5.6.0-2-octeon-di
input-modules-5.6.0-2-parisc-di
input-modules-5.6.0-2-parisc64-di
input-modules-5.6.0-2-powerpc-di
input-modules-5.6.0-2-powerpc64-di
input-modules-5.6.0-2-powerpc64le-di
input-modules-5.6.0-2-riscv64-di
input-modules-5.6.0-2-sparc64-di
ipv6-modules-5.6.0-2-marvell-di
isofs-modules-5.6.0-2-4kc-malta-di
isofs-modules-5.6.0-2-5kc-malta-di
isofs-modules-5.6.0-2-686-di
isofs-modules-5.6.0-2-686-pae-di
isofs-modules-5.6.0-2-alpha-generic-di
isofs-modules-5.6.0-2-amd64-di
isofs-modules-5.6.0-2-arm64-di
isofs-modules-5.6.0-2-armmp-di
isofs-modules-5.6.0-2-itanium-di
isofs-modules-5.6.0-2-loongson-3-di
isofs-modules-5.6.0-2-m68k-di
isofs-modules-5.6.0-2-marvell-di
isofs-modules-5.6.0-2-mips32r6-di
isofs-modules-5.6.0-2-mips32r6el-di
isofs-modules-5.6.0-2-mips64r6-di
isofs-modules-5.6.0-2-mips64r6el-di
isofs-modules-5.6.0-2-octeon-di
isofs-modules-5.6.0-2-parisc-di
isofs-modules-5.6.0-2-parisc64-di
isofs-modules-5.6.0-2-powerpc-di
isofs-modules-5.6.0-2-powerpc64-di
isofs-modules-5.6.0-2-powerpc64le-di
isofs-modules-5.6.0-2-riscv64-di
isofs-modules-5.6.0-2-s390x-di
isofs-modules-5.6.0-2-sh7751r-di
isofs-modules-5.6.0-2-sh7785lcr-di
isofs-modules-5.6.0-2-sparc64-di
jffs2-modules-5.6.0-2-marvell-di
jfs-modules-5.6.0-2-4kc-malta-di
jfs-modules-5.6.0-2-5kc-malta-di
jfs-modules-5.6.0-2-686-di
jfs-modules-5.6.0-2-686-pae-di
jfs-modules-5.6.0-2-alpha-generic-di
jfs-modules-5.6.0-2-amd64-di
jfs-modules-5.6.0-2-arm64-di
jfs-modules-5.6.0-2-armmp-di
jfs-modules-5.6.0-2-itanium-di
jfs-modules-5.6.0-2-loongson-3-di
jfs-modules-5.6.0-2-marvell-di
jfs-modules-5.6.0-2-mips32r6-di
jfs-modules-5.6.0-2-mips32r6el-di
jfs-modules-5.6.0-2-mips64r6-di
jfs-modules-5.6.0-2-mips64r6el-di
jfs-modules-5.6.0-2-octeon-di
jfs-modules-5.6.0-2-parisc-di
jfs-modules-5.6.0-2-parisc64-di
jfs-modules-5.6.0-2-powerpc-di
jfs-modules-5.6.0-2-powerpc64-di
jfs-modules-5.6.0-2-powerpc64le-di
jfs-modules-5.6.0-2-riscv64-di
jfs-modules-5.6.0-2-sh7751r-di
jfs-modules-5.6.0-2-sh7785lcr-di
jfs-modules-5.6.0-2-sparc64-di
kernel-image-5.6.0-2-4kc-malta-di
kernel-image-5.6.0-2-5kc-malta-di
kernel-image-5.6.0-2-686-di
kernel-image-5.6.0-2-686-pae-di
kernel-image-5.6.0-2-alpha-generic-di
kernel-image-5.6.0-2-amd64-di
kernel-image-5.6.0-2-arm64-di
kernel-image-5.6.0-2-armmp-di
kernel-image-5.6.0-2-itanium-di
kernel-image-5.6.0-2-loongson-3-di
kernel-image-5.6.0-2-m68k-di
kernel-image-5.6.0-2-marvell-di
kernel-image-5.6.0-2-mips32r6-di
kernel-image-5.6.0-2-mips32r6el-di
kernel-image-5.6.0-2-mips64r6-di
kernel-image-5.6.0-2-mips64r6el-di
kernel-image-5.6.0-2-octeon-di
kernel-image-5.6.0-2-parisc-di
kernel-image-5.6.0-2-parisc64-di
kernel-image-5.6.0-2-powerpc-di
kernel-image-5.6.0-2-powerpc64-di
kernel-image-5.6.0-2-powerpc64le-di
kernel-image-5.6.0-2-riscv64-di
kernel-image-5.6.0-2-s390x-di
kernel-image-5.6.0-2-sh7751r-di
kernel-image-5.6.0-2-sh7785lcr-di
kernel-image-5.6.0-2-sparc64-di
leds-modules-5.6.0-2-arm64-di
leds-modules-5.6.0-2-armmp-di
leds-modules-5.6.0-2-marvell-di
libcpupower-dev
libcpupower1
libtraceevent-dev
libtraceevent1
libtraceevent1-plugin
linux-bootwrapper-5.6.0-2
linux-compiler-gcc-9-arm
linux-compiler-gcc-9-s390
linux-compiler-gcc-9-x86
linux-config-5.6
linux-cpupower (2 bugs: 0, 1, 1, 0)
linux-doc
linux-doc-5.6
linux-headers-4kc-malta
linux-headers-5.6.0-2-4kc-malta
linux-headers-5.6.0-2-5kc-malta
linux-headers-5.6.0-2-686
linux-headers-5.6.0-2-686-pae
linux-headers-5.6.0-2-alpha-generic
linux-headers-5.6.0-2-alpha-smp
linux-headers-5.6.0-2-amd64
linux-headers-5.6.0-2-arm64
linux-headers-5.6.0-2-armmp
linux-headers-5.6.0-2-armmp-lpae
linux-headers-5.6.0-2-cloud-amd64
linux-headers-5.6.0-2-cloud-arm64
linux-headers-5.6.0-2-common
linux-headers-5.6.0-2-common-rt
linux-headers-5.6.0-2-itanium
linux-headers-5.6.0-2-loongson-3
linux-headers-5.6.0-2-m68k
linux-headers-5.6.0-2-marvell
linux-headers-5.6.0-2-mckinley
linux-headers-5.6.0-2-mips32r6
linux-headers-5.6.0-2-mips32r6el
linux-headers-5.6.0-2-mips64r6
linux-headers-5.6.0-2-mips64r6el
linux-headers-5.6.0-2-octeon
linux-headers-5.6.0-2-parisc
linux-headers-5.6.0-2-parisc64
linux-headers-5.6.0-2-powerpc
linux-headers-5.6.0-2-powerpc-smp
linux-headers-5.6.0-2-powerpc64
linux-headers-5.6.0-2-powerpc64le
linux-headers-5.6.0-2-riscv64
linux-headers-5.6.0-2-rpi
linux-headers-5.6.0-2-rt-686-pae
linux-headers-5.6.0-2-rt-amd64
linux-headers-5.6.0-2-rt-arm64
linux-headers-5.6.0-2-rt-armmp
linux-headers-5.6.0-2-s390x
linux-headers-5.6.0-2-sh7751r
linux-headers-5.6.0-2-sh7785lcr
linux-headers-5.6.0-2-sparc64
linux-headers-5.6.0-2-sparc64-smp
linux-headers-5kc-malta
linux-headers-alpha-generic
linux-headers-alpha-smp
linux-headers-armmp
linux-headers-armmp-lpae
linux-headers-itanium
linux-headers-loongson-3
linux-headers-m68k
linux-headers-marvell
linux-headers-mckinley
linux-headers-mips32r6
linux-headers-mips32r6el
linux-headers-mips64r6
linux-headers-mips64r6el
linux-headers-octeon
linux-headers-parisc
linux-headers-parisc64
linux-headers-powerpc
linux-headers-powerpc-smp
linux-headers-powerpc64
linux-headers-powerpc64le
linux-headers-riscv64
linux-headers-rpi
linux-headers-rt-armmp
linux-headers-s390x
linux-headers-sh7751r
linux-headers-sh7785lcr
linux-headers-sparc64
linux-headers-sparc64-smp
linux-image-4kc-malta
linux-image-4kc-malta-dbg
linux-image-5.6.0-2-4kc-malta
linux-image-5.6.0-2-4kc-malta-dbg
linux-image-5.6.0-2-5kc-malta
linux-image-5.6.0-2-5kc-malta-dbg
linux-image-5.6.0-2-686-dbg
linux-image-5.6.0-2-686-pae-dbg
linux-image-5.6.0-2-686-pae-unsigned
linux-image-5.6.0-2-686-unsigned
linux-image-5.6.0-2-alpha-generic
linux-image-5.6.0-2-alpha-generic-dbg
linux-image-5.6.0-2-alpha-smp
linux-image-5.6.0-2-alpha-smp-dbg
linux-image-5.6.0-2-amd64-dbg
linux-image-5.6.0-2-amd64-unsigned
linux-image-5.6.0-2-arm64-dbg
linux-image-5.6.0-2-arm64-unsigned
linux-image-5.6.0-2-armmp
linux-image-5.6.0-2-armmp-dbg
linux-image-5.6.0-2-armmp-lpae
linux-image-5.6.0-2-armmp-lpae-dbg
linux-image-5.6.0-2-cloud-amd64-dbg
linux-image-5.6.0-2-cloud-amd64-unsigned
linux-image-5.6.0-2-cloud-arm64-dbg
linux-image-5.6.0-2-cloud-arm64-unsigned
linux-image-5.6.0-2-itanium
linux-image-5.6.0-2-itanium-dbg
linux-image-5.6.0-2-loongson-3
linux-image-5.6.0-2-loongson-3-dbg
linux-image-5.6.0-2-m68k
linux-image-5.6.0-2-m68k-dbg
linux-image-5.6.0-2-marvell
linux-image-5.6.0-2-marvell-dbg
linux-image-5.6.0-2-mckinley
linux-image-5.6.0-2-mckinley-dbg
linux-image-5.6.0-2-mips32r6
linux-image-5.6.0-2-mips32r6-dbg
linux-image-5.6.0-2-mips32r6el
linux-image-5.6.0-2-mips32r6el-dbg
linux-image-5.6.0-2-mips64r6
linux-image-5.6.0-2-mips64r6-dbg
linux-image-5.6.0-2-mips64r6el
linux-image-5.6.0-2-mips64r6el-dbg
linux-image-5.6.0-2-octeon
linux-image-5.6.0-2-octeon-dbg
linux-image-5.6.0-2-parisc
linux-image-5.6.0-2-parisc64
linux-image-5.6.0-2-powerpc
linux-image-5.6.0-2-powerpc-dbg
linux-image-5.6.0-2-powerpc-smp
linux-image-5.6.0-2-powerpc-smp-dbg
linux-image-5.6.0-2-powerpc64
linux-image-5.6.0-2-powerpc64-dbg
linux-image-5.6.0-2-powerpc64le
linux-image-5.6.0-2-powerpc64le-dbg
linux-image-5.6.0-2-riscv64
linux-image-5.6.0-2-riscv64-dbg
linux-image-5.6.0-2-rpi
linux-image-5.6.0-2-rpi-dbg
linux-image-5.6.0-2-rt-686-pae-dbg
linux-image-5.6.0-2-rt-686-pae-unsigned
linux-image-5.6.0-2-rt-amd64-dbg
linux-image-5.6.0-2-rt-amd64-unsigned
linux-image-5.6.0-2-rt-arm64-dbg
linux-image-5.6.0-2-rt-arm64-unsigned
linux-image-5.6.0-2-rt-armmp
linux-image-5.6.0-2-rt-armmp-dbg
linux-image-5.6.0-2-s390x
linux-image-5.6.0-2-s390x-dbg
linux-image-5.6.0-2-sh7751r
linux-image-5.6.0-2-sh7751r-dbg
linux-image-5.6.0-2-sh7785lcr
linux-image-5.6.0-2-sh7785lcr-dbg
linux-image-5.6.0-2-sparc64
linux-image-5.6.0-2-sparc64-dbg
linux-image-5.6.0-2-sparc64-smp
linux-image-5.6.0-2-sparc64-smp-dbg
linux-image-5kc-malta
linux-image-5kc-malta-dbg
linux-image-686-dbg
linux-image-686-pae-dbg
linux-image-alpha-generic
linux-image-alpha-generic-dbg
linux-image-alpha-smp
linux-image-alpha-smp-dbg
linux-image-amd64-dbg
linux-image-amd64-signed-template
linux-image-arm64-dbg
linux-image-arm64-signed-template
linux-image-armmp
linux-image-armmp-dbg
linux-image-armmp-lpae
linux-image-armmp-lpae-dbg
linux-image-cloud-amd64-dbg
linux-image-cloud-arm64-dbg
linux-image-i386-signed-template
linux-image-itanium
linux-image-itanium-dbg
linux-image-loongson-3
linux-image-loongson-3-dbg
linux-image-m68k
linux-image-m68k-dbg
linux-image-marvell
linux-image-marvell-dbg
linux-image-mckinley
linux-image-mckinley-dbg
linux-image-mips32r6
linux-image-mips32r6-dbg
linux-image-mips32r6el
linux-image-mips32r6el-dbg
linux-image-mips64r6
linux-image-mips64r6-dbg
linux-image-mips64r6el
linux-image-mips64r6el-dbg
linux-image-octeon
linux-image-octeon-dbg
linux-image-parisc
linux-image-parisc64
linux-image-powerpc
linux-image-powerpc-dbg
linux-image-powerpc-smp
linux-image-powerpc-smp-dbg
linux-image-powerpc64
linux-image-powerpc64-dbg
linux-image-powerpc64le
linux-image-powerpc64le-dbg
linux-image-riscv64
linux-image-riscv64-dbg
linux-image-rpi
linux-image-rpi-dbg
linux-image-rt-686-pae-dbg
linux-image-rt-amd64-dbg
linux-image-rt-arm64-dbg
linux-image-rt-armmp
linux-image-rt-armmp-dbg
linux-image-s390x
linux-image-s390x-dbg
linux-image-sh7751r
linux-image-sh7751r-dbg
linux-image-sh7785lcr
linux-image-sh7785lcr-dbg
linux-image-sparc64
linux-image-sparc64-dbg
linux-image-sparc64-smp
linux-image-sparc64-smp-dbg
linux-kbuild-5.6
linux-libc-dev (12 bugs: 0, 9, 3, 0)
linux-perf
linux-perf-5.6
linux-source (1 bugs: 0, 0, 1, 0)
linux-source-5.6
linux-support-5.6.0-2
loop-modules-5.6.0-2-4kc-malta-di
loop-modules-5.6.0-2-5kc-malta-di
loop-modules-5.6.0-2-686-di
loop-modules-5.6.0-2-686-pae-di
loop-modules-5.6.0-2-alpha-generic-di
loop-modules-5.6.0-2-amd64-di
loop-modules-5.6.0-2-arm64-di
loop-modules-5.6.0-2-armmp-di
loop-modules-5.6.0-2-itanium-di
loop-modules-5.6.0-2-loongson-3-di
loop-modules-5.6.0-2-m68k-di
loop-modules-5.6.0-2-marvell-di
loop-modules-5.6.0-2-mips32r6-di
loop-modules-5.6.0-2-mips32r6el-di
loop-modules-5.6.0-2-mips64r6-di
loop-modules-5.6.0-2-mips64r6el-di
loop-modules-5.6.0-2-octeon-di
loop-modules-5.6.0-2-parisc-di
loop-modules-5.6.0-2-parisc64-di
loop-modules-5.6.0-2-powerpc-di
loop-modules-5.6.0-2-powerpc64-di
loop-modules-5.6.0-2-powerpc64le-di
loop-modules-5.6.0-2-riscv64-di
loop-modules-5.6.0-2-s390x-di
loop-modules-5.6.0-2-sh7751r-di
loop-modules-5.6.0-2-sh7785lcr-di
md-modules-5.6.0-2-4kc-malta-di
md-modules-5.6.0-2-5kc-malta-di
md-modules-5.6.0-2-686-di
md-modules-5.6.0-2-686-pae-di
md-modules-5.6.0-2-alpha-generic-di
md-modules-5.6.0-2-amd64-di
md-modules-5.6.0-2-arm64-di
md-modules-5.6.0-2-armmp-di
md-modules-5.6.0-2-itanium-di
md-modules-5.6.0-2-loongson-3-di
md-modules-5.6.0-2-m68k-di
md-modules-5.6.0-2-marvell-di
md-modules-5.6.0-2-mips32r6-di
md-modules-5.6.0-2-mips32r6el-di
md-modules-5.6.0-2-mips64r6-di
md-modules-5.6.0-2-mips64r6el-di
md-modules-5.6.0-2-octeon-di
md-modules-5.6.0-2-parisc-di
md-modules-5.6.0-2-parisc64-di
md-modules-5.6.0-2-powerpc-di
md-modules-5.6.0-2-powerpc64-di
md-modules-5.6.0-2-powerpc64le-di
md-modules-5.6.0-2-riscv64-di
md-modules-5.6.0-2-s390x-di
md-modules-5.6.0-2-sh7751r-di
md-modules-5.6.0-2-sh7785lcr-di
md-modules-5.6.0-2-sparc64-di
minix-modules-5.6.0-2-4kc-malta-di
minix-modules-5.6.0-2-5kc-malta-di
minix-modules-5.6.0-2-loongson-3-di
minix-modules-5.6.0-2-marvell-di
minix-modules-5.6.0-2-octeon-di
minix-modules-5.6.0-2-sh7751r-di
minix-modules-5.6.0-2-sh7785lcr-di
mmc-core-modules-5.6.0-2-4kc-malta-di
mmc-core-modules-5.6.0-2-5kc-malta-di
mmc-core-modules-5.6.0-2-686-di
mmc-core-modules-5.6.0-2-686-pae-di
mmc-core-modules-5.6.0-2-amd64-di
mmc-core-modules-5.6.0-2-marvell-di
mmc-core-modules-5.6.0-2-powerpc-di
mmc-core-modules-5.6.0-2-powerpc64-di
mmc-core-modules-5.6.0-2-riscv64-di
mmc-modules-5.6.0-2-4kc-malta-di
mmc-modules-5.6.0-2-5kc-malta-di
mmc-modules-5.6.0-2-686-di
mmc-modules-5.6.0-2-686-pae-di
mmc-modules-5.6.0-2-amd64-di
mmc-modules-5.6.0-2-arm64-di
mmc-modules-5.6.0-2-armmp-di
mmc-modules-5.6.0-2-marvell-di
mmc-modules-5.6.0-2-riscv64-di
mouse-modules-5.6.0-2-4kc-malta-di
mouse-modules-5.6.0-2-5kc-malta-di
mouse-modules-5.6.0-2-686-di
mouse-modules-5.6.0-2-686-pae-di
mouse-modules-5.6.0-2-alpha-generic-di
mouse-modules-5.6.0-2-amd64-di
mouse-modules-5.6.0-2-itanium-di
mouse-modules-5.6.0-2-marvell-di
mouse-modules-5.6.0-2-parisc-di
mouse-modules-5.6.0-2-parisc64-di
mouse-modules-5.6.0-2-powerpc-di
mouse-modules-5.6.0-2-powerpc64-di
mouse-modules-5.6.0-2-powerpc64le-di
mtd-core-modules-5.6.0-2-4kc-malta-di
mtd-core-modules-5.6.0-2-5kc-malta-di
mtd-core-modules-5.6.0-2-686-di
mtd-core-modules-5.6.0-2-686-pae-di
mtd-core-modules-5.6.0-2-amd64-di
mtd-core-modules-5.6.0-2-arm64-di
mtd-core-modules-5.6.0-2-itanium-di
mtd-core-modules-5.6.0-2-loongson-3-di
mtd-core-modules-5.6.0-2-marvell-di
mtd-core-modules-5.6.0-2-powerpc64-di
mtd-core-modules-5.6.0-2-powerpc64le-di
mtd-core-modules-5.6.0-2-riscv64-di
mtd-core-modules-5.6.0-2-s390x-di
mtd-modules-5.6.0-2-armmp-di
mtd-modules-5.6.0-2-marvell-di
mtd-modules-5.6.0-2-riscv64-di
multipath-modules-5.6.0-2-4kc-malta-di
multipath-modules-5.6.0-2-5kc-malta-di
multipath-modules-5.6.0-2-686-di
multipath-modules-5.6.0-2-686-pae-di
multipath-modules-5.6.0-2-alpha-generic-di
multipath-modules-5.6.0-2-amd64-di
multipath-modules-5.6.0-2-arm64-di
multipath-modules-5.6.0-2-armmp-di
multipath-modules-5.6.0-2-itanium-di
multipath-modules-5.6.0-2-loongson-3-di
multipath-modules-5.6.0-2-marvell-di
multipath-modules-5.6.0-2-mips32r6-di
multipath-modules-5.6.0-2-mips32r6el-di
multipath-modules-5.6.0-2-mips64r6-di
multipath-modules-5.6.0-2-mips64r6el-di
multipath-modules-5.6.0-2-octeon-di
multipath-modules-5.6.0-2-parisc-di
multipath-modules-5.6.0-2-parisc64-di
multipath-modules-5.6.0-2-powerpc-di
multipath-modules-5.6.0-2-powerpc64-di
multipath-modules-5.6.0-2-powerpc64le-di
multipath-modules-5.6.0-2-riscv64-di
multipath-modules-5.6.0-2-s390x-di
multipath-modules-5.6.0-2-sh7751r-di
multipath-modules-5.6.0-2-sh7785lcr-di
multipath-modules-5.6.0-2-sparc64-di
nbd-modules-5.6.0-2-4kc-malta-di
nbd-modules-5.6.0-2-5kc-malta-di
nbd-modules-5.6.0-2-686-di
nbd-modules-5.6.0-2-686-pae-di
nbd-modules-5.6.0-2-alpha-generic-di
nbd-modules-5.6.0-2-amd64-di
nbd-modules-5.6.0-2-arm64-di
nbd-modules-5.6.0-2-armmp-di
nbd-modules-5.6.0-2-itanium-di
nbd-modules-5.6.0-2-loongson-3-di
nbd-modules-5.6.0-2-m68k-di
nbd-modules-5.6.0-2-marvell-di
nbd-modules-5.6.0-2-mips32r6-di
nbd-modules-5.6.0-2-mips32r6el-di
nbd-modules-5.6.0-2-mips64r6-di
nbd-modules-5.6.0-2-mips64r6el-di
nbd-modules-5.6.0-2-octeon-di
nbd-modules-5.6.0-2-parisc-di
nbd-modules-5.6.0-2-parisc64-di
nbd-modules-5.6.0-2-powerpc-di
nbd-modules-5.6.0-2-powerpc64-di
nbd-modules-5.6.0-2-powerpc64le-di
nbd-modules-5.6.0-2-riscv64-di
nbd-modules-5.6.0-2-s390x-di
nbd-modules-5.6.0-2-sh7751r-di
nbd-modules-5.6.0-2-sh7785lcr-di
nbd-modules-5.6.0-2-sparc64-di
nfs-modules-5.6.0-2-loongson-3-di
nic-modules-5.6.0-2-4kc-malta-di
nic-modules-5.6.0-2-5kc-malta-di
nic-modules-5.6.0-2-686-di
nic-modules-5.6.0-2-686-pae-di
nic-modules-5.6.0-2-alpha-generic-di
nic-modules-5.6.0-2-amd64-di
nic-modules-5.6.0-2-arm64-di
nic-modules-5.6.0-2-armmp-di
nic-modules-5.6.0-2-itanium-di
nic-modules-5.6.0-2-loongson-3-di
nic-modules-5.6.0-2-m68k-di
nic-modules-5.6.0-2-marvell-di
nic-modules-5.6.0-2-octeon-di
nic-modules-5.6.0-2-parisc-di
nic-modules-5.6.0-2-parisc64-di
nic-modules-5.6.0-2-powerpc-di
nic-modules-5.6.0-2-powerpc64-di
nic-modules-5.6.0-2-powerpc64le-di
nic-modules-5.6.0-2-riscv64-di
nic-modules-5.6.0-2-s390x-di
nic-modules-5.6.0-2-sh7751r-di
nic-modules-5.6.0-2-sh7785lcr-di
nic-modules-5.6.0-2-sparc64-di
nic-pcmcia-modules-5.6.0-2-686-di
nic-pcmcia-modules-5.6.0-2-686-pae-di
nic-pcmcia-modules-5.6.0-2-alpha-generic-di
nic-pcmcia-modules-5.6.0-2-amd64-di
nic-pcmcia-modules-5.6.0-2-powerpc-di
nic-pcmcia-modules-5.6.0-2-powerpc64-di
nic-shared-modules-5.6.0-2-4kc-malta-di
nic-shared-modules-5.6.0-2-5kc-malta-di
nic-shared-modules-5.6.0-2-686-di
nic-shared-modules-5.6.0-2-686-pae-di
nic-shared-modules-5.6.0-2-alpha-generic-di
nic-shared-modules-5.6.0-2-amd64-di
nic-shared-modules-5.6.0-2-arm64-di
nic-shared-modules-5.6.0-2-armmp-di
nic-shared-modules-5.6.0-2-itanium-di
nic-shared-modules-5.6.0-2-loongson-3-di
nic-shared-modules-5.6.0-2-m68k-di
nic-shared-modules-5.6.0-2-marvell-di
nic-shared-modules-5.6.0-2-mips32r6-di
nic-shared-modules-5.6.0-2-mips32r6el-di
nic-shared-modules-5.6.0-2-mips64r6-di
nic-shared-modules-5.6.0-2-mips64r6el-di
nic-shared-modules-5.6.0-2-octeon-di
nic-shared-modules-5.6.0-2-parisc-di
nic-shared-modules-5.6.0-2-parisc64-di
nic-shared-modules-5.6.0-2-powerpc-di
nic-shared-modules-5.6.0-2-powerpc64-di
nic-shared-modules-5.6.0-2-powerpc64le-di
nic-shared-modules-5.6.0-2-riscv64-di
nic-shared-modules-5.6.0-2-sh7751r-di
nic-shared-modules-5.6.0-2-sh7785lcr-di
nic-shared-modules-5.6.0-2-sparc64-di
nic-usb-modules-5.6.0-2-4kc-malta-di
nic-usb-modules-5.6.0-2-5kc-malta-di
nic-usb-modules-5.6.0-2-686-di
nic-usb-modules-5.6.0-2-686-pae-di
nic-usb-modules-5.6.0-2-alpha-generic-di
nic-usb-modules-5.6.0-2-amd64-di
nic-usb-modules-5.6.0-2-arm64-di
nic-usb-modules-5.6.0-2-armmp-di
nic-usb-modules-5.6.0-2-itanium-di
nic-usb-modules-5.6.0-2-loongson-3-di
nic-usb-modules-5.6.0-2-marvell-di
nic-usb-modules-5.6.0-2-octeon-di
nic-usb-modules-5.6.0-2-parisc-di
nic-usb-modules-5.6.0-2-parisc64-di
nic-usb-modules-5.6.0-2-powerpc-di
nic-usb-modules-5.6.0-2-powerpc64-di
nic-usb-modules-5.6.0-2-powerpc64le-di
nic-usb-modules-5.6.0-2-riscv64-di
nic-usb-modules-5.6.0-2-sh7751r-di
nic-usb-modules-5.6.0-2-sh7785lcr-di
nic-usb-modules-5.6.0-2-sparc64-di
nic-wireless-modules-5.6.0-2-4kc-malta-di
nic-wireless-modules-5.6.0-2-5kc-malta-di
nic-wireless-modules-5.6.0-2-686-di
nic-wireless-modules-5.6.0-2-686-pae-di
nic-wireless-modules-5.6.0-2-alpha-generic-di
nic-wireless-modules-5.6.0-2-amd64-di
nic-wireless-modules-5.6.0-2-arm64-di
nic-wireless-modules-5.6.0-2-armmp-di
nic-wireless-modules-5.6.0-2-loongson-3-di
nic-wireless-modules-5.6.0-2-octeon-di
nic-wireless-modules-5.6.0-2-powerpc-di
nic-wireless-modules-5.6.0-2-powerpc64-di
nic-wireless-modules-5.6.0-2-powerpc64le-di
nic-wireless-modules-5.6.0-2-riscv64-di
pata-modules-5.6.0-2-4kc-malta-di
pata-modules-5.6.0-2-5kc-malta-di
pata-modules-5.6.0-2-686-di
pata-modules-5.6.0-2-686-pae-di
pata-modules-5.6.0-2-alpha-generic-di
pata-modules-5.6.0-2-amd64-di
pata-modules-5.6.0-2-armmp-di
pata-modules-5.6.0-2-itanium-di
pata-modules-5.6.0-2-loongson-3-di
pata-modules-5.6.0-2-m68k-di
pata-modules-5.6.0-2-octeon-di
pata-modules-5.6.0-2-parisc-di
pata-modules-5.6.0-2-parisc64-di
pata-modules-5.6.0-2-powerpc-di
pata-modules-5.6.0-2-powerpc64-di
pata-modules-5.6.0-2-riscv64-di
pata-modules-5.6.0-2-sh7751r-di
pata-modules-5.6.0-2-sh7785lcr-di
pata-modules-5.6.0-2-sparc64-di
pcmcia-modules-5.6.0-2-686-di
pcmcia-modules-5.6.0-2-686-pae-di
pcmcia-modules-5.6.0-2-alpha-generic-di
pcmcia-modules-5.6.0-2-amd64-di
pcmcia-modules-5.6.0-2-itanium-di
pcmcia-modules-5.6.0-2-powerpc-di
pcmcia-modules-5.6.0-2-powerpc64-di
pcmcia-storage-modules-5.6.0-2-686-di
pcmcia-storage-modules-5.6.0-2-686-pae-di
pcmcia-storage-modules-5.6.0-2-amd64-di
pcmcia-storage-modules-5.6.0-2-powerpc-di
pcmcia-storage-modules-5.6.0-2-powerpc64-di
ppp-modules-5.6.0-2-4kc-malta-di
ppp-modules-5.6.0-2-5kc-malta-di
ppp-modules-5.6.0-2-686-di
ppp-modules-5.6.0-2-686-pae-di
ppp-modules-5.6.0-2-alpha-generic-di
ppp-modules-5.6.0-2-amd64-di
ppp-modules-5.6.0-2-arm64-di
ppp-modules-5.6.0-2-armmp-di
ppp-modules-5.6.0-2-itanium-di
ppp-modules-5.6.0-2-loongson-3-di
ppp-modules-5.6.0-2-m68k-di
ppp-modules-5.6.0-2-marvell-di
ppp-modules-5.6.0-2-octeon-di
ppp-modules-5.6.0-2-parisc-di
ppp-modules-5.6.0-2-parisc64-di
ppp-modules-5.6.0-2-powerpc-di
ppp-modules-5.6.0-2-powerpc64-di
ppp-modules-5.6.0-2-powerpc64le-di
ppp-modules-5.6.0-2-riscv64-di
ppp-modules-5.6.0-2-sh7751r-di
ppp-modules-5.6.0-2-sh7785lcr-di
ppp-modules-5.6.0-2-sparc64-di
rfkill-modules-5.6.0-2-686-di
rfkill-modules-5.6.0-2-686-pae-di
rfkill-modules-5.6.0-2-amd64-di
rtc-modules-5.6.0-2-octeon-di
sata-modules-5.6.0-2-4kc-malta-di
sata-modules-5.6.0-2-5kc-malta-di
sata-modules-5.6.0-2-686-di
sata-modules-5.6.0-2-686-pae-di
sata-modules-5.6.0-2-alpha-generic-di
sata-modules-5.6.0-2-amd64-di
sata-modules-5.6.0-2-arm64-di
sata-modules-5.6.0-2-armmp-di
sata-modules-5.6.0-2-itanium-di
sata-modules-5.6.0-2-loongson-3-di
sata-modules-5.6.0-2-marvell-di
sata-modules-5.6.0-2-octeon-di
sata-modules-5.6.0-2-parisc-di
sata-modules-5.6.0-2-parisc64-di
sata-modules-5.6.0-2-powerpc-di
sata-modules-5.6.0-2-powerpc64-di
sata-modules-5.6.0-2-powerpc64le-di
sata-modules-5.6.0-2-riscv64-di
sata-modules-5.6.0-2-sh7751r-di
sata-modules-5.6.0-2-sh7785lcr-di
sata-modules-5.6.0-2-sparc64-di
scsi-core-modules-5.6.0-2-4kc-malta-di
scsi-core-modules-5.6.0-2-5kc-malta-di
scsi-core-modules-5.6.0-2-686-di
scsi-core-modules-5.6.0-2-686-pae-di
scsi-core-modules-5.6.0-2-alpha-generic-di
scsi-core-modules-5.6.0-2-amd64-di
scsi-core-modules-5.6.0-2-arm64-di
scsi-core-modules-5.6.0-2-armmp-di
scsi-core-modules-5.6.0-2-itanium-di
scsi-core-modules-5.6.0-2-loongson-3-di
scsi-core-modules-5.6.0-2-m68k-di
scsi-core-modules-5.6.0-2-marvell-di
scsi-core-modules-5.6.0-2-octeon-di
scsi-core-modules-5.6.0-2-parisc-di
scsi-core-modules-5.6.0-2-parisc64-di
scsi-core-modules-5.6.0-2-powerpc-di
scsi-core-modules-5.6.0-2-powerpc64-di
scsi-core-modules-5.6.0-2-powerpc64le-di
scsi-core-modules-5.6.0-2-riscv64-di
scsi-core-modules-5.6.0-2-s390x-di
scsi-core-modules-5.6.0-2-sparc64-di
scsi-modules-5.6.0-2-4kc-malta-di
scsi-modules-5.6.0-2-5kc-malta-di
scsi-modules-5.6.0-2-686-di
scsi-modules-5.6.0-2-686-pae-di
scsi-modules-5.6.0-2-alpha-generic-di
scsi-modules-5.6.0-2-amd64-di
scsi-modules-5.6.0-2-arm64-di
scsi-modules-5.6.0-2-armmp-di
scsi-modules-5.6.0-2-itanium-di
scsi-modules-5.6.0-2-loongson-3-di
scsi-modules-5.6.0-2-m68k-di
scsi-modules-5.6.0-2-octeon-di
scsi-modules-5.6.0-2-parisc-di
scsi-modules-5.6.0-2-parisc64-di
scsi-modules-5.6.0-2-powerpc-di
scsi-modules-5.6.0-2-powerpc64-di
scsi-modules-5.6.0-2-powerpc64le-di
scsi-modules-5.6.0-2-riscv64-di
scsi-modules-5.6.0-2-s390x-di
scsi-modules-5.6.0-2-sparc64-di
scsi-nic-modules-5.6.0-2-4kc-malta-di
scsi-nic-modules-5.6.0-2-5kc-malta-di
scsi-nic-modules-5.6.0-2-686-di
scsi-nic-modules-5.6.0-2-686-pae-di
scsi-nic-modules-5.6.0-2-alpha-generic-di
scsi-nic-modules-5.6.0-2-amd64-di
scsi-nic-modules-5.6.0-2-arm64-di
scsi-nic-modules-5.6.0-2-armmp-di
scsi-nic-modules-5.6.0-2-itanium-di
scsi-nic-modules-5.6.0-2-loongson-3-di
scsi-nic-modules-5.6.0-2-octeon-di
scsi-nic-modules-5.6.0-2-powerpc-di
scsi-nic-modules-5.6.0-2-powerpc64-di
scsi-nic-modules-5.6.0-2-powerpc64le-di
scsi-nic-modules-5.6.0-2-riscv64-di
serial-modules-5.6.0-2-686-di
serial-modules-5.6.0-2-686-pae-di
serial-modules-5.6.0-2-alpha-generic-di
serial-modules-5.6.0-2-amd64-di
serial-modules-5.6.0-2-itanium-di
serial-modules-5.6.0-2-parisc-di
serial-modules-5.6.0-2-parisc64-di
serial-modules-5.6.0-2-powerpc-di
serial-modules-5.6.0-2-powerpc64-di
serial-modules-5.6.0-2-powerpc64le-di
sound-modules-5.6.0-2-4kc-malta-di
sound-modules-5.6.0-2-5kc-malta-di
sound-modules-5.6.0-2-686-di
sound-modules-5.6.0-2-686-pae-di
sound-modules-5.6.0-2-amd64-di
sound-modules-5.6.0-2-loongson-3-di
sound-modules-5.6.0-2-octeon-di
sound-modules-5.6.0-2-sh7751r-di
sound-modules-5.6.0-2-sh7785lcr-di
speakup-modules-5.6.0-2-686-di
speakup-modules-5.6.0-2-686-pae-di
speakup-modules-5.6.0-2-amd64-di
speakup-modules-5.6.0-2-loongson-3-di
speakup-modules-5.6.0-2-sh7751r-di
speakup-modules-5.6.0-2-sh7785lcr-di
squashfs-modules-5.6.0-2-4kc-malta-di
squashfs-modules-5.6.0-2-5kc-malta-di
squashfs-modules-5.6.0-2-686-di
squashfs-modules-5.6.0-2-686-pae-di
squashfs-modules-5.6.0-2-alpha-generic-di
squashfs-modules-5.6.0-2-amd64-di
squashfs-modules-5.6.0-2-arm64-di
squashfs-modules-5.6.0-2-armmp-di
squashfs-modules-5.6.0-2-itanium-di
squashfs-modules-5.6.0-2-loongson-3-di
squashfs-modules-5.6.0-2-m68k-di
squashfs-modules-5.6.0-2-marvell-di
squashfs-modules-5.6.0-2-mips32r6-di
squashfs-modules-5.6.0-2-mips32r6el-di
squashfs-modules-5.6.0-2-mips64r6-di
squashfs-modules-5.6.0-2-mips64r6el-di
squashfs-modules-5.6.0-2-octeon-di
squashfs-modules-5.6.0-2-parisc-di
squashfs-modules-5.6.0-2-parisc64-di
squashfs-modules-5.6.0-2-powerpc-di
squashfs-modules-5.6.0-2-powerpc64-di
squashfs-modules-5.6.0-2-powerpc64le-di
squashfs-modules-5.6.0-2-riscv64-di
squashfs-modules-5.6.0-2-sh7751r-di
squashfs-modules-5.6.0-2-sh7785lcr-di
squashfs-modules-5.6.0-2-sparc64-di
srm-modules-5.6.0-2-alpha-generic-di
udf-modules-5.6.0-2-4kc-malta-di
udf-modules-5.6.0-2-5kc-malta-di
udf-modules-5.6.0-2-686-di
udf-modules-5.6.0-2-686-pae-di
udf-modules-5.6.0-2-amd64-di
udf-modules-5.6.0-2-arm64-di
udf-modules-5.6.0-2-armmp-di
udf-modules-5.6.0-2-itanium-di
udf-modules-5.6.0-2-loongson-3-di
udf-modules-5.6.0-2-m68k-di
udf-modules-5.6.0-2-marvell-di
udf-modules-5.6.0-2-mips32r6-di
udf-modules-5.6.0-2-mips32r6el-di
udf-modules-5.6.0-2-mips64r6-di
udf-modules-5.6.0-2-mips64r6el-di
udf-modules-5.6.0-2-octeon-di
udf-modules-5.6.0-2-powerpc-di
udf-modules-5.6.0-2-powerpc64-di
udf-modules-5.6.0-2-powerpc64le-di
udf-modules-5.6.0-2-riscv64-di
udf-modules-5.6.0-2-s390x-di
udf-modules-5.6.0-2-sh7751r-di
udf-modules-5.6.0-2-sh7785lcr-di
udf-modules-5.6.0-2-sparc64-di
ufs-modules-5.6.0-2-sparc64-di
uinput-modules-5.6.0-2-686-di
uinput-modules-5.6.0-2-686-pae-di
uinput-modules-5.6.0-2-amd64-di
uinput-modules-5.6.0-2-arm64-di
uinput-modules-5.6.0-2-armmp-di
uinput-modules-5.6.0-2-itanium-di
uinput-modules-5.6.0-2-marvell-di
uinput-modules-5.6.0-2-powerpc-di
uinput-modules-5.6.0-2-powerpc64-di
uinput-modules-5.6.0-2-powerpc64le-di
usb-modules-5.6.0-2-4kc-malta-di
usb-modules-5.6.0-2-5kc-malta-di
usb-modules-5.6.0-2-686-di
usb-modules-5.6.0-2-686-pae-di
usb-modules-5.6.0-2-alpha-generic-di
usb-modules-5.6.0-2-amd64-di
usb-modules-5.6.0-2-arm64-di
usb-modules-5.6.0-2-armmp-di
usb-modules-5.6.0-2-itanium-di
usb-modules-5.6.0-2-loongson-3-di
usb-modules-5.6.0-2-marvell-di
usb-modules-5.6.0-2-octeon-di
usb-modules-5.6.0-2-parisc-di
usb-modules-5.6.0-2-parisc64-di
usb-modules-5.6.0-2-powerpc-di
usb-modules-5.6.0-2-powerpc64-di
usb-modules-5.6.0-2-powerpc64le-di
usb-modules-5.6.0-2-riscv64-di
usb-modules-5.6.0-2-sparc64-di
usb-serial-modules-5.6.0-2-4kc-malta-di
usb-serial-modules-5.6.0-2-5kc-malta-di
usb-serial-modules-5.6.0-2-686-di
usb-serial-modules-5.6.0-2-686-pae-di
usb-serial-modules-5.6.0-2-alpha-generic-di
usb-serial-modules-5.6.0-2-amd64-di
usb-serial-modules-5.6.0-2-arm64-di
usb-serial-modules-5.6.0-2-armmp-di
usb-serial-modules-5.6.0-2-itanium-di
usb-serial-modules-5.6.0-2-loongson-3-di
usb-serial-modules-5.6.0-2-marvell-di
usb-serial-modules-5.6.0-2-octeon-di
usb-serial-modules-5.6.0-2-parisc-di
usb-serial-modules-5.6.0-2-parisc64-di
usb-serial-modules-5.6.0-2-powerpc-di
usb-serial-modules-5.6.0-2-powerpc64-di
usb-serial-modules-5.6.0-2-powerpc64le-di
usb-serial-modules-5.6.0-2-riscv64-di
usb-serial-modules-5.6.0-2-sh7751r-di
usb-serial-modules-5.6.0-2-sh7785lcr-di
usb-serial-modules-5.6.0-2-sparc64-di
usb-storage-modules-5.6.0-2-4kc-malta-di
usb-storage-modules-5.6.0-2-5kc-malta-di
usb-storage-modules-5.6.0-2-686-di
usb-storage-modules-5.6.0-2-686-pae-di
usb-storage-modules-5.6.0-2-alpha-generic-di
usb-storage-modules-5.6.0-2-amd64-di
usb-storage-modules-5.6.0-2-arm64-di
usb-storage-modules-5.6.0-2-armmp-di
usb-storage-modules-5.6.0-2-itanium-di
usb-storage-modules-5.6.0-2-loongson-3-di
usb-storage-modules-5.6.0-2-marvell-di
usb-storage-modules-5.6.0-2-octeon-di
usb-storage-modules-5.6.0-2-parisc-di
usb-storage-modules-5.6.0-2-parisc64-di
usb-storage-modules-5.6.0-2-powerpc-di
usb-storage-modules-5.6.0-2-powerpc64-di
usb-storage-modules-5.6.0-2-powerpc64le-di
usb-storage-modules-5.6.0-2-riscv64-di
usb-storage-modules-5.6.0-2-sh7751r-di
usb-storage-modules-5.6.0-2-sparc64-di
usbip (4 bugs: 0, 4, 0, 0)
xfs-modules-5.6.0-2-4kc-malta-di
xfs-modules-5.6.0-2-5kc-malta-di
xfs-modules-5.6.0-2-686-di
xfs-modules-5.6.0-2-686-pae-di
xfs-modules-5.6.0-2-alpha-generic-di
xfs-modules-5.6.0-2-amd64-di
xfs-modules-5.6.0-2-arm64-di
xfs-modules-5.6.0-2-itanium-di
xfs-modules-5.6.0-2-loongson-3-di
xfs-modules-5.6.0-2-mips32r6-di
xfs-modules-5.6.0-2-mips32r6el-di
xfs-modules-5.6.0-2-mips64r6-di
xfs-modules-5.6.0-2-mips64r6el-di
xfs-modules-5.6.0-2-octeon-di
xfs-modules-5.6.0-2-parisc-di
xfs-modules-5.6.0-2-parisc64-di
xfs-modules-5.6.0-2-powerpc-di
xfs-modules-5.6.0-2-powerpc64-di
xfs-modules-5.6.0-2-powerpc64le-di
xfs-modules-5.6.0-2-s390x-di
xfs-modules-5.6.0-2-sh7751r-di
xfs-modules-5.6.0-2-sh7785lcr-di
xfs-modules-5.6.0-2-sparc64-di

action needed

A new upstream version is available: 5.6.15 high

A new upstream version 5.6.15 is available, you should consider packaging it.

Created: 2020-05-31 Last update: 2020-06-03 04:35

46 security issues in buster high

There are 46 open security issues in buster.

44 important issues:

CVE-2020-12464: usb_sg_cancel in drivers/usb/core/message.c in the Linux kernel before 5.6.8 has a use-after-free because a transfer occurs without a reference, aka CID-056ad39ee925.
CVE-2019-19770: ** DISPUTED ** In the Linux kernel 4.19.83, there is a use-after-free (read) in the debugfs_remove function in fs/debugfs/inode.c (which is used to remove a file or directory in debugfs that was previously created with a call to another debugfs function such as debugfs_create_file). NOTE: Linux kernel developers dispute this issue as not being an issue with debugfs, instead this is an issue with misuse of debugfs within blktrace.
CVE-2019-19082: Memory leaks in *create_resource_pool() functions under drivers/gpu/drm/amd/display/dc in the Linux kernel through 5.3.11 allow attackers to cause a denial of service (memory consumption). This affects the dce120_create_resource_pool() function in drivers/gpu/drm/amd/display/dc/dce120/dce120_resource.c, the dce110_create_resource_pool() function in drivers/gpu/drm/amd/display/dc/dce110/dce110_resource.c, the dce100_create_resource_pool() function in drivers/gpu/drm/amd/display/dc/dce100/dce100_resource.c, the dcn10_create_resource_pool() function in drivers/gpu/drm/amd/display/dc/dcn10/dcn10_resource.c, and the dce112_create_resource_pool() function in drivers/gpu/drm/amd/display/dc/dce112/dce112_resource.c, aka CID-104c307147ad.
CVE-2019-15794: Overlayfs in the Linux kernel and shiftfs, a non-upstream patch to the Linux kernel included in the Ubuntu 5.0 and 5.3 kernel series, both replace vma->vm_file in their mmap handlers. On error the original value is not restored, and the reference is put for the file to which vm_file points. On upstream kernels this is not an issue, as no callers dereference vm_file following after call_mmap() returns an error. However, the aufs patchs change mmap_region() to replace the fput() using a local variable with vma_fput(), which will fput() vm_file, leading to a refcount underflow.
CVE-2019-19318: In the Linux kernel 5.3.11, mounting a crafted btrfs image twice can cause an rwsem_down_write_slowpath use-after-free because (in rwsem_can_spin_on_owner in kernel/locking/rwsem.c) rwsem_owner_flags returns an already freed pointer,
CVE-2018-3693: Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a speculative buffer overflow and side-channel analysis.
CVE-2020-11725: ** DISPUTED ** snd_ctl_elem_add in sound/core/control.c in the Linux kernel through 5.6.3 has a count=info->owner line, which later affects a private_size*count multiplication for unspecified "interesting side effects." NOTE: kernel engineers dispute this finding, because it could be relevant only if new callers were added that were unfamiliar with the misuse of the info->owner field to represent data unrelated to the "owner" concept. The existing callers, SNDRV_CTL_IOCTL_ELEM_ADD and SNDRV_CTL_IOCTL_ELEM_REPLACE, have been designed to misuse the info->owner field in a safe way.
CVE-2019-19448: In the Linux kernel 5.0.21 and 5.3.11, mounting a crafted btrfs filesystem image, performing some operations, and then making a syncfs system call can lead to a use-after-free in try_merge_free_space in fs/btrfs/free-space-cache.c because the pointer to a left data structure can be the same as the pointer to a right data structure.
CVE-2019-19449: In the Linux kernel 5.0.21, mounting a crafted f2fs filesystem image can lead to slab-out-of-bounds read access in f2fs_build_segment_manager in fs/f2fs/segment.c, related to init_min_max_mtime in fs/f2fs/segment.c (because the second argument to get_seg_entry is not validated).
CVE-2020-12114: A pivot_root race condition in fs/namespace.c in the Linux kernel 4.4.x before 4.4.221, 4.9.x before 4.9.221, 4.14.x before 4.14.178, 4.19.x before 4.19.119, and 5.x before 5.3 allows local users to cause a denial of service (panic) by corrupting a mountpoint reference counter.
CVE-2020-10711: A NULL pointer dereference flaw was found in the Linux kernel's SELinux subsystem in versions before 5.7. This flaw occurs while importing the Commercial IP Security Option (CIPSO) protocol's category bitmap into the SELinux extensible bitmap via the' ebitmap_netlbl_import' routine. While processing the CIPSO restricted bitmap tag in the 'cipso_v4_parsetag_rbm' routine, it sets the security attribute to indicate that the category bitmap is present, even if it has not been allocated. This issue leads to a NULL pointer dereference issue while importing the same category bitmap into SELinux. This flaw allows a remote network user to crash the system kernel, resulting in a denial of service.
CVE-2019-19462: relay_open in kernel/relay.c in the Linux kernel through 5.4.1 allows local users to cause a denial of service (such as relay blockage) by triggering a NULL alloc_percpu result.
CVE-2019-18885: fs/btrfs/volumes.c in the Linux kernel before 5.1 allows a btrfs_verify_dev_extents NULL pointer dereference via a crafted btrfs image because fs_devices->devices is mishandled within find_device, aka CID-09ba3bc9dd15.
CVE-2019-3016: In a Linux KVM guest that has PV TLB enabled, a process in the guest kernel may be able to read memory locations from another process in the same guest. This problem is limit to the host running linux kernel 4.10 with a guest running linux kernel 4.16 or later. The problem mainly affects AMD processors but Intel CPUs cannot be ruled out.
CVE-2019-20794: An issue was discovered in the Linux kernel 4.18 through 5.6.11 when unprivileged user namespaces are allowed. A user can create their own PID namespace, and mount a FUSE filesystem. Upon interaction with this FUSE filesystem, if the userspace component is terminated via a kill of the PID namespace's pid 1, it will result in a hung task, and resources being permanently locked up until system reboot. This can result in resource exhaustion.
CVE-2020-10732:
CVE-2018-17977: The Linux kernel 4.14.67 mishandles certain interaction among XFRM Netlink messages, IPPROTO_AH packets, and IPPROTO_IP packets, which allows local users to cause a denial of service (memory consumption and system hang) by leveraging root access to execute crafted applications, as demonstrated on CentOS 7.
CVE-2017-0630: An information disclosure vulnerability in the kernel trace subsystem could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-34277115.
CVE-2020-12655: An issue was discovered in xfs_agf_verify in fs/xfs/libxfs/xfs_alloc.c in the Linux kernel through 5.6.10. Attackers may trigger a sync of excessive duration via an XFS v5 image with crafted metadata, aka CID-d0c7feaf8767.
CVE-2019-19813: In the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image, performing some operations, and then making a syncfs system call can lead to a use-after-free in __mutex_lock in kernel/locking/mutex.c. This is related to mutex_can_spin_on_owner in kernel/locking/mutex.c, __btrfs_qgroup_free_meta in fs/btrfs/qgroup.c, and btrfs_insert_delayed_items in fs/btrfs/delayed-inode.c.
CVE-2019-19816: In the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image and performing some operations can cause slab-out-of-bounds write access in __btrfs_map_block in fs/btrfs/volumes.c, because a value of 1 for the number of data stripes is mishandled.
CVE-2019-3874: The SCTP socket buffer used by a userspace application is not accounted by the cgroups subsystem. An attacker can use this flaw to cause a denial of service attack. Kernel 3.10.x and 4.18.x branches are believed to be vulnerable.
CVE-2020-12888: The VFIO PCI driver in the Linux kernel through 5.6.13 mishandles attempts to access disabled memory space.
CVE-2018-18653: The Linux kernel, as used in Ubuntu 18.10 and when booted with UEFI Secure Boot enabled, allows privileged local users to bypass intended Secure Boot restrictions and execute untrusted code by loading arbitrary kernel modules. This occurs because a modified kernel/module.c, in conjunction with certain configuration options, leads to mishandling of the result of signature verification.
CVE-2019-19074: A memory leak in the ath9k_wmi_cmd() function in drivers/net/wireless/ath/ath9k/wmi.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption), aka CID-728c1e2a05e4.
CVE-2019-19073: Memory leaks in drivers/net/wireless/ath/ath9k/htc_hst.c in the Linux kernel through 5.3.11 allow attackers to cause a denial of service (memory consumption) by triggering wait_for_completion_timeout() failures. This affects the htc_config_pipe_credits() function, the htc_setup_complete() function, and the htc_connect_service() function, aka CID-853acf7caf10.
CVE-2019-19072: A memory leak in the predicate_parse() function in kernel/trace/trace_events_filter.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption), aka CID-96c5c6e6a5b6.
CVE-2020-10751: A flaw was found in the Linux kernels SELinux LSM hook implementation before version 5.7, where it incorrectly assumed that an skb would only contain a single netlink message. The hook would incorrectly only validate the first netlink message in the skb and allow or deny the rest of the messages within the skb with the granted permission without further processing.
CVE-2020-7053: In the Linux kernel 4.14 longterm through 4.14.165 and 4.19 longterm through 4.19.96 (and 5.x before 5.2), there is a use-after-free (write) in the i915_ppgtt_close function in drivers/gpu/drm/i915/i915_gem_gtt.c, aka CID-7dc40713618c. This is related to i915_gem_context_destroy_ioctl in drivers/gpu/drm/i915/i915_gem_context.c.
CVE-2016-10723: ** DISPUTED ** An issue was discovered in the Linux kernel through 4.17.2. Since the page allocator does not yield CPU resources to the owner of the oom_lock mutex, a local unprivileged user can trivially lock up the system forever by wasting CPU resources from the page allocator (e.g., via concurrent page fault events) when the global OOM killer is invoked. NOTE: the software maintainer has not accepted certain proposed patches, in part because of a viewpoint that "the underlying problem is non-trivial to handle."
CVE-2019-19815: In the Linux kernel 5.0.21, mounting a crafted f2fs filesystem image can cause a NULL pointer dereference in f2fs_recover_fsync_data in fs/f2fs/recovery.c. This is related to F2FS_P_SB in fs/f2fs/f2fs.h.
CVE-2019-19814: In the Linux kernel 5.0.21, mounting a crafted f2fs filesystem image can cause __remove_dirty_segment slab-out-of-bounds write access because an array is bounded by the number of dirty types (8) but the array index can exceed this.
CVE-2020-12771: An issue was discovered in the Linux kernel through 5.6.11. btree_gc_coalesce in drivers/md/bcache/btree.c has a deadlock if a coalescing operation fails.
CVE-2016-8660: The XFS subsystem in the Linux kernel through 4.8.2 allows local users to cause a denial of service (fdatasync failure and system hang) by using the vfs syscall group in the trinity program, related to a "page lock order bug in the XFS seek hole/data implementation."
CVE-2019-15213: An issue was discovered in the Linux kernel before 5.2.3. There is a use-after-free caused by a malicious USB device in the drivers/media/usb/dvb-usb/dvb-usb-init.c driver.
CVE-2019-19039: ** DISPUTED ** __btrfs_free_extent in fs/btrfs/extent-tree.c in the Linux kernel through 5.3.12 calls btrfs_print_leaf in a certain ENOENT case, which allows local users to obtain potentially sensitive information about register values via the dmesg program. NOTE: The BTRFS development team disputes this issues as not being a vulnerability because “1) The kernel provide facilities to restrict access to dmesg - dmesg_restrict=1 sysctl option. So it's really up to the system administrator to judge whether dmesg access shall be disallowed or not. 2) WARN/WARN_ON are widely used macros in the linux kernel. If this CVE is considered valid this would mean there are literally thousands CVE lurking in the kernel - something which clearly is not the case.”
CVE-2019-16089: An issue was discovered in the Linux kernel through 5.2.13. nbd_genl_status in drivers/block/nbd.c does not check the nla_nest_start_noflag return value.
CVE-2019-18814: An issue was discovered in the Linux kernel through 5.3.9. There is a use-after-free when aa_label_parse() fails in aa_audit_rule_init() in security/apparmor/audit.c.
CVE-2019-19036: btrfs_root_node in fs/btrfs/ctree.c in the Linux kernel through 5.3.12 allows a NULL pointer dereference because rcu_dereference(root->node) can be zero.
CVE-2019-12881: i915_gem_userptr_get_pages in drivers/gpu/drm/i915/i915_gem_userptr.c in the Linux kernel 4.15.0 on Ubuntu 18.04.2 allows local users to cause a denial of service (NULL pointer dereference and BUG) or possibly have unspecified other impact via crafted ioctl calls to /dev/dri/card0.
CVE-2020-13143: gadget_dev_desc_UDC_store in drivers/usb/gadget/configfs.c in the Linux kernel through 5.6.13 relies on kstrdup without considering the possibility of an internal '\0' value, which allows attackers to trigger an out-of-bounds read, aka CID-15753588bcd4.
CVE-2020-12770: An issue was discovered in the Linux kernel through 5.6.11. sg_write lacks an sg_remove_request call in a certain failure case, aka CID-83c6f2390040.
CVE-2019-19378: In the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image can lead to slab-out-of-bounds write access in index_rbio_pages in fs/btrfs/raid56.c.
CVE-2019-19377: In the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image, performing some operations, and unmounting can lead to a use-after-free in btrfs_queue_work in fs/btrfs/async-thread.c.

2 issues skipped by the security teams:

CVE-2018-12928: In the Linux kernel 4.15.0, a NULL pointer dereference was discovered in hfs_ext_read_extent in hfs.ko. This can occur during a mount of a crafted hfs filesystem.
CVE-2013-7445: The Direct Rendering Manager (DRM) subsystem in the Linux kernel through 4.x mishandles requests for Graphics Execution Manager (GEM) objects, which allows context-dependent attackers to cause a denial of service (memory consumption) via an application that processes graphics data, as demonstrated by JavaScript code that creates many CANVAS elements for rendering by Chrome or Firefox.

Please fix them.

Created: 2017-06-18 Last update: 2020-06-02 00:05

28 security issues in bullseye high

There are 28 open security issues in bullseye.

28 important issues:

CVE-2019-19770: ** DISPUTED ** In the Linux kernel 4.19.83, there is a use-after-free (read) in the debugfs_remove function in fs/debugfs/inode.c (which is used to remove a file or directory in debugfs that was previously created with a call to another debugfs function such as debugfs_create_file). NOTE: Linux kernel developers dispute this issue as not being an issue with debugfs, instead this is an issue with misuse of debugfs within blktrace.
CVE-2019-15794: Overlayfs in the Linux kernel and shiftfs, a non-upstream patch to the Linux kernel included in the Ubuntu 5.0 and 5.3 kernel series, both replace vma->vm_file in their mmap handlers. On error the original value is not restored, and the reference is put for the file to which vm_file points. On upstream kernels this is not an issue, as no callers dereference vm_file following after call_mmap() returns an error. However, the aufs patchs change mmap_region() to replace the fput() using a local variable with vma_fput(), which will fput() vm_file, leading to a refcount underflow.
CVE-2018-3693: Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a speculative buffer overflow and side-channel analysis.
CVE-2020-11725: ** DISPUTED ** snd_ctl_elem_add in sound/core/control.c in the Linux kernel through 5.6.3 has a count=info->owner line, which later affects a private_size*count multiplication for unspecified "interesting side effects." NOTE: kernel engineers dispute this finding, because it could be relevant only if new callers were added that were unfamiliar with the misuse of the info->owner field to represent data unrelated to the "owner" concept. The existing callers, SNDRV_CTL_IOCTL_ELEM_ADD and SNDRV_CTL_IOCTL_ELEM_REPLACE, have been designed to misuse the info->owner field in a safe way.
CVE-2018-12928: In the Linux kernel 4.15.0, a NULL pointer dereference was discovered in hfs_ext_read_extent in hfs.ko. This can occur during a mount of a crafted hfs filesystem.
CVE-2019-19448: In the Linux kernel 5.0.21 and 5.3.11, mounting a crafted btrfs filesystem image, performing some operations, and then making a syncfs system call can lead to a use-after-free in try_merge_free_space in fs/btrfs/free-space-cache.c because the pointer to a left data structure can be the same as the pointer to a right data structure.
CVE-2019-19449: In the Linux kernel 5.0.21, mounting a crafted f2fs filesystem image can lead to slab-out-of-bounds read access in f2fs_build_segment_manager in fs/f2fs/segment.c, related to init_min_max_mtime in fs/f2fs/segment.c (because the second argument to get_seg_entry is not validated).
CVE-2019-19462: relay_open in kernel/relay.c in the Linux kernel through 5.4.1 allows local users to cause a denial of service (such as relay blockage) by triggering a NULL alloc_percpu result.
CVE-2019-20794: An issue was discovered in the Linux kernel 4.18 through 5.6.11 when unprivileged user namespaces are allowed. A user can create their own PID namespace, and mount a FUSE filesystem. Upon interaction with this FUSE filesystem, if the userspace component is terminated via a kill of the PID namespace's pid 1, it will result in a hung task, and resources being permanently locked up until system reboot. This can result in resource exhaustion.
CVE-2020-10732:
CVE-2018-17977: The Linux kernel 4.14.67 mishandles certain interaction among XFRM Netlink messages, IPPROTO_AH packets, and IPPROTO_IP packets, which allows local users to cause a denial of service (memory consumption and system hang) by leveraging root access to execute crafted applications, as demonstrated on CentOS 7.
CVE-2017-0630: An information disclosure vulnerability in the kernel trace subsystem could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-34277115.
CVE-2019-19813: In the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image, performing some operations, and then making a syncfs system call can lead to a use-after-free in __mutex_lock in kernel/locking/mutex.c. This is related to mutex_can_spin_on_owner in kernel/locking/mutex.c, __btrfs_qgroup_free_meta in fs/btrfs/qgroup.c, and btrfs_insert_delayed_items in fs/btrfs/delayed-inode.c.
CVE-2019-19816: In the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image and performing some operations can cause slab-out-of-bounds write access in __btrfs_map_block in fs/btrfs/volumes.c, because a value of 1 for the number of data stripes is mishandled.
CVE-2020-12888: The VFIO PCI driver in the Linux kernel through 5.6.13 mishandles attempts to access disabled memory space.
CVE-2018-18653: The Linux kernel, as used in Ubuntu 18.10 and when booted with UEFI Secure Boot enabled, allows privileged local users to bypass intended Secure Boot restrictions and execute untrusted code by loading arbitrary kernel modules. This occurs because a modified kernel/module.c, in conjunction with certain configuration options, leads to mishandling of the result of signature verification.
CVE-2016-10723: ** DISPUTED ** An issue was discovered in the Linux kernel through 4.17.2. Since the page allocator does not yield CPU resources to the owner of the oom_lock mutex, a local unprivileged user can trivially lock up the system forever by wasting CPU resources from the page allocator (e.g., via concurrent page fault events) when the global OOM killer is invoked. NOTE: the software maintainer has not accepted certain proposed patches, in part because of a viewpoint that "the underlying problem is non-trivial to handle."
CVE-2019-19814: In the Linux kernel 5.0.21, mounting a crafted f2fs filesystem image can cause __remove_dirty_segment slab-out-of-bounds write access because an array is bounded by the number of dirty types (8) but the array index can exceed this.
CVE-2013-7445: The Direct Rendering Manager (DRM) subsystem in the Linux kernel through 4.x mishandles requests for Graphics Execution Manager (GEM) objects, which allows context-dependent attackers to cause a denial of service (memory consumption) via an application that processes graphics data, as demonstrated by JavaScript code that creates many CANVAS elements for rendering by Chrome or Firefox.
CVE-2020-12771: An issue was discovered in the Linux kernel through 5.6.11. btree_gc_coalesce in drivers/md/bcache/btree.c has a deadlock if a coalescing operation fails.
CVE-2016-8660: The XFS subsystem in the Linux kernel through 4.8.2 allows local users to cause a denial of service (fdatasync failure and system hang) by using the vfs syscall group in the trinity program, related to a "page lock order bug in the XFS seek hole/data implementation."
CVE-2019-15213: An issue was discovered in the Linux kernel before 5.2.3. There is a use-after-free caused by a malicious USB device in the drivers/media/usb/dvb-usb/dvb-usb-init.c driver.
CVE-2019-19039: ** DISPUTED ** __btrfs_free_extent in fs/btrfs/extent-tree.c in the Linux kernel through 5.3.12 calls btrfs_print_leaf in a certain ENOENT case, which allows local users to obtain potentially sensitive information about register values via the dmesg program. NOTE: The BTRFS development team disputes this issues as not being a vulnerability because “1) The kernel provide facilities to restrict access to dmesg - dmesg_restrict=1 sysctl option. So it's really up to the system administrator to judge whether dmesg access shall be disallowed or not. 2) WARN/WARN_ON are widely used macros in the linux kernel. If this CVE is considered valid this would mean there are literally thousands CVE lurking in the kernel - something which clearly is not the case.”
CVE-2019-16089: An issue was discovered in the Linux kernel through 5.2.13. nbd_genl_status in drivers/block/nbd.c does not check the nla_nest_start_noflag return value.
CVE-2019-18814: An issue was discovered in the Linux kernel through 5.3.9. There is a use-after-free when aa_label_parse() fails in aa_audit_rule_init() in security/apparmor/audit.c.
CVE-2019-19036: btrfs_root_node in fs/btrfs/ctree.c in the Linux kernel through 5.3.12 allows a NULL pointer dereference because rcu_dereference(root->node) can be zero.
CVE-2019-12881: i915_gem_userptr_get_pages in drivers/gpu/drm/i915/i915_gem_userptr.c in the Linux kernel 4.15.0 on Ubuntu 18.04.2 allows local users to cause a denial of service (NULL pointer dereference and BUG) or possibly have unspecified other impact via crafted ioctl calls to /dev/dri/card0.
CVE-2019-19378: In the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image can lead to slab-out-of-bounds write access in index_rbio_pages in fs/btrfs/raid56.c.

Please fix them.

Created: 2019-07-07 Last update: 2020-06-02 00:05

28 security issues in sid high

There are 28 open security issues in sid.

28 important issues:

CVE-2019-19770: ** DISPUTED ** In the Linux kernel 4.19.83, there is a use-after-free (read) in the debugfs_remove function in fs/debugfs/inode.c (which is used to remove a file or directory in debugfs that was previously created with a call to another debugfs function such as debugfs_create_file). NOTE: Linux kernel developers dispute this issue as not being an issue with debugfs, instead this is an issue with misuse of debugfs within blktrace.
CVE-2019-15794: Overlayfs in the Linux kernel and shiftfs, a non-upstream patch to the Linux kernel included in the Ubuntu 5.0 and 5.3 kernel series, both replace vma->vm_file in their mmap handlers. On error the original value is not restored, and the reference is put for the file to which vm_file points. On upstream kernels this is not an issue, as no callers dereference vm_file following after call_mmap() returns an error. However, the aufs patchs change mmap_region() to replace the fput() using a local variable with vma_fput(), which will fput() vm_file, leading to a refcount underflow.
CVE-2018-3693: Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a speculative buffer overflow and side-channel analysis.
CVE-2020-11725: ** DISPUTED ** snd_ctl_elem_add in sound/core/control.c in the Linux kernel through 5.6.3 has a count=info->owner line, which later affects a private_size*count multiplication for unspecified "interesting side effects." NOTE: kernel engineers dispute this finding, because it could be relevant only if new callers were added that were unfamiliar with the misuse of the info->owner field to represent data unrelated to the "owner" concept. The existing callers, SNDRV_CTL_IOCTL_ELEM_ADD and SNDRV_CTL_IOCTL_ELEM_REPLACE, have been designed to misuse the info->owner field in a safe way.
CVE-2018-12928: In the Linux kernel 4.15.0, a NULL pointer dereference was discovered in hfs_ext_read_extent in hfs.ko. This can occur during a mount of a crafted hfs filesystem.
CVE-2019-19448: In the Linux kernel 5.0.21 and 5.3.11, mounting a crafted btrfs filesystem image, performing some operations, and then making a syncfs system call can lead to a use-after-free in try_merge_free_space in fs/btrfs/free-space-cache.c because the pointer to a left data structure can be the same as the pointer to a right data structure.
CVE-2019-19449: In the Linux kernel 5.0.21, mounting a crafted f2fs filesystem image can lead to slab-out-of-bounds read access in f2fs_build_segment_manager in fs/f2fs/segment.c, related to init_min_max_mtime in fs/f2fs/segment.c (because the second argument to get_seg_entry is not validated).
CVE-2019-19462: relay_open in kernel/relay.c in the Linux kernel through 5.4.1 allows local users to cause a denial of service (such as relay blockage) by triggering a NULL alloc_percpu result.
CVE-2019-20794: An issue was discovered in the Linux kernel 4.18 through 5.6.11 when unprivileged user namespaces are allowed. A user can create their own PID namespace, and mount a FUSE filesystem. Upon interaction with this FUSE filesystem, if the userspace component is terminated via a kill of the PID namespace's pid 1, it will result in a hung task, and resources being permanently locked up until system reboot. This can result in resource exhaustion.
CVE-2020-10732:
CVE-2018-17977: The Linux kernel 4.14.67 mishandles certain interaction among XFRM Netlink messages, IPPROTO_AH packets, and IPPROTO_IP packets, which allows local users to cause a denial of service (memory consumption and system hang) by leveraging root access to execute crafted applications, as demonstrated on CentOS 7.
CVE-2017-0630: An information disclosure vulnerability in the kernel trace subsystem could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-34277115.
CVE-2019-19813: In the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image, performing some operations, and then making a syncfs system call can lead to a use-after-free in __mutex_lock in kernel/locking/mutex.c. This is related to mutex_can_spin_on_owner in kernel/locking/mutex.c, __btrfs_qgroup_free_meta in fs/btrfs/qgroup.c, and btrfs_insert_delayed_items in fs/btrfs/delayed-inode.c.
CVE-2019-19816: In the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image and performing some operations can cause slab-out-of-bounds write access in __btrfs_map_block in fs/btrfs/volumes.c, because a value of 1 for the number of data stripes is mishandled.
CVE-2020-12888: The VFIO PCI driver in the Linux kernel through 5.6.13 mishandles attempts to access disabled memory space.
CVE-2018-18653: The Linux kernel, as used in Ubuntu 18.10 and when booted with UEFI Secure Boot enabled, allows privileged local users to bypass intended Secure Boot restrictions and execute untrusted code by loading arbitrary kernel modules. This occurs because a modified kernel/module.c, in conjunction with certain configuration options, leads to mishandling of the result of signature verification.
CVE-2016-10723: ** DISPUTED ** An issue was discovered in the Linux kernel through 4.17.2. Since the page allocator does not yield CPU resources to the owner of the oom_lock mutex, a local unprivileged user can trivially lock up the system forever by wasting CPU resources from the page allocator (e.g., via concurrent page fault events) when the global OOM killer is invoked. NOTE: the software maintainer has not accepted certain proposed patches, in part because of a viewpoint that "the underlying problem is non-trivial to handle."
CVE-2019-19814: In the Linux kernel 5.0.21, mounting a crafted f2fs filesystem image can cause __remove_dirty_segment slab-out-of-bounds write access because an array is bounded by the number of dirty types (8) but the array index can exceed this.
CVE-2013-7445: The Direct Rendering Manager (DRM) subsystem in the Linux kernel through 4.x mishandles requests for Graphics Execution Manager (GEM) objects, which allows context-dependent attackers to cause a denial of service (memory consumption) via an application that processes graphics data, as demonstrated by JavaScript code that creates many CANVAS elements for rendering by Chrome or Firefox.
CVE-2020-12771: An issue was discovered in the Linux kernel through 5.6.11. btree_gc_coalesce in drivers/md/bcache/btree.c has a deadlock if a coalescing operation fails.
CVE-2016-8660: The XFS subsystem in the Linux kernel through 4.8.2 allows local users to cause a denial of service (fdatasync failure and system hang) by using the vfs syscall group in the trinity program, related to a "page lock order bug in the XFS seek hole/data implementation."
CVE-2019-15213: An issue was discovered in the Linux kernel before 5.2.3. There is a use-after-free caused by a malicious USB device in the drivers/media/usb/dvb-usb/dvb-usb-init.c driver.
CVE-2019-19039: ** DISPUTED ** __btrfs_free_extent in fs/btrfs/extent-tree.c in the Linux kernel through 5.3.12 calls btrfs_print_leaf in a certain ENOENT case, which allows local users to obtain potentially sensitive information about register values via the dmesg program. NOTE: The BTRFS development team disputes this issues as not being a vulnerability because “1) The kernel provide facilities to restrict access to dmesg - dmesg_restrict=1 sysctl option. So it's really up to the system administrator to judge whether dmesg access shall be disallowed or not. 2) WARN/WARN_ON are widely used macros in the linux kernel. If this CVE is considered valid this would mean there are literally thousands CVE lurking in the kernel - something which clearly is not the case.”
CVE-2019-16089: An issue was discovered in the Linux kernel through 5.2.13. nbd_genl_status in drivers/block/nbd.c does not check the nla_nest_start_noflag return value.
CVE-2019-18814: An issue was discovered in the Linux kernel through 5.3.9. There is a use-after-free when aa_label_parse() fails in aa_audit_rule_init() in security/apparmor/audit.c.
CVE-2019-19036: btrfs_root_node in fs/btrfs/ctree.c in the Linux kernel through 5.3.12 allows a NULL pointer dereference because rcu_dereference(root->node) can be zero.
CVE-2019-12881: i915_gem_userptr_get_pages in drivers/gpu/drm/i915/i915_gem_userptr.c in the Linux kernel 4.15.0 on Ubuntu 18.04.2 allows local users to cause a denial of service (NULL pointer dereference and BUG) or possibly have unspecified other impact via crafted ioctl calls to /dev/dri/card0.
CVE-2019-19378: In the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image can lead to slab-out-of-bounds write access in index_rbio_pages in fs/btrfs/raid56.c.

Please fix them.

Created: 2015-07-12 Last update: 2020-06-02 00:05

114 security issues in jessie high

There are 114 open security issues in jessie.

69 important issues:

CVE-2019-5108: An exploitable denial-of-service vulnerability exists in the Linux kernel prior to mainline 5.3. An attacker could exploit this vulnerability by triggering AP to send IAPP location updates for stations before the required authentication process has completed. This could lead to different denial-of-service scenarios, either by causing CAM table attacks, or by leading to traffic flapping if faking already existing clients in other nearby APs of the same wireless infrastructure. An attacker can forge Authentication and Association Request packets to trigger this vulnerability.
CVE-2020-12464: usb_sg_cancel in drivers/usb/core/message.c in the Linux kernel before 5.6.8 has a use-after-free because a transfer occurs without a reference, aka CID-056ad39ee925.
CVE-2016-10906: An issue was discovered in drivers/net/ethernet/arc/emac_main.c in the Linux kernel before 4.5. A use-after-free is caused by a race condition between the functions arc_emac_tx and arc_emac_tx_clean.
CVE-2019-19770: ** DISPUTED ** In the Linux kernel 4.19.83, there is a use-after-free (read) in the debugfs_remove function in fs/debugfs/inode.c (which is used to remove a file or directory in debugfs that was previously created with a call to another debugfs function such as debugfs_create_file). NOTE: Linux kernel developers dispute this issue as not being an issue with debugfs, instead this is an issue with misuse of debugfs within blktrace.
CVE-2020-8649: There is a use-after-free vulnerability in the Linux kernel through 5.5.2 in the vgacon_invert_region function in drivers/video/console/vgacon.c.
CVE-2020-8648: There is a use-after-free vulnerability in the Linux kernel through 5.5.2 in the n_tty_receive_buf_common function in drivers/tty/n_tty.c.
CVE-2020-8647: There is a use-after-free vulnerability in the Linux kernel through 5.5.2 in the vc_do_resize function in drivers/tty/vt/vt.c.
CVE-2020-11494: An issue was discovered in slc_bump in drivers/net/can/slcan.c in the Linux kernel through 5.6.2. It allows attackers to read uninitialized can_frame data, potentially containing sensitive information from kernel stack memory, if the configuration lacks CONFIG_INIT_STACK_ALL, aka CID-b9258a2cece4.
CVE-2019-19318: In the Linux kernel 5.3.11, mounting a crafted btrfs image twice can cause an rwsem_down_write_slowpath use-after-free because (in rwsem_can_spin_on_owner in kernel/locking/rwsem.c) rwsem_owner_flags returns an already freed pointer,
CVE-2019-19319: In the Linux kernel 5.0.21, a setxattr operation, after a mount of a crafted ext4 image, can cause a slab-out-of-bounds write access because of an ext4_xattr_set_entry use-after-free in fs/ext4/xattr.c when a large old_size value is used in a memset call.
CVE-2019-19768: In the Linux kernel 5.4.0-rc2, there is a use-after-free (read) in the __blk_add_trace function in kernel/trace/blktrace.c (which is used to fill out a blk_io_trace structure and place it in a per-cpu sub-buffer).
CVE-2017-13168: An elevation of privilege vulnerability in the kernel scsi driver. Product: Android. Versions: Android kernel. Android ID A-65023233.
CVE-2018-3693: Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a speculative buffer overflow and side-channel analysis.
CVE-2020-11725: ** DISPUTED ** snd_ctl_elem_add in sound/core/control.c in the Linux kernel through 5.6.3 has a count=info->owner line, which later affects a private_size*count multiplication for unspecified "interesting side effects." NOTE: kernel engineers dispute this finding, because it could be relevant only if new callers were added that were unfamiliar with the misuse of the info->owner field to represent data unrelated to the "owner" concept. The existing callers, SNDRV_CTL_IOCTL_ELEM_ADD and SNDRV_CTL_IOCTL_ELEM_REPLACE, have been designed to misuse the info->owner field in a safe way.
CVE-2017-5967: The time subsystem in the Linux kernel through 4.9.9, when CONFIG_TIMER_STATS is enabled, allows local users to discover real PID values (as distinguished from PID values inside a PID namespace) by reading the /proc/timer_list file, related to the print_timer function in kernel/time/timer_list.c and the __timer_stats_timer_set_start_info function in kernel/time/timer.c.
CVE-2018-12928: In the Linux kernel 4.15.0, a NULL pointer dereference was discovered in hfs_ext_read_extent in hfs.ko. This can occur during a mount of a crafted hfs filesystem.
CVE-2019-19447: In the Linux kernel 5.0.21, mounting a crafted ext4 filesystem image, performing some operations, and unmounting can lead to a use-after-free in ext4_put_super in fs/ext4/super.c, related to dump_orphan_list in fs/ext4/super.c.
CVE-2019-19448: In the Linux kernel 5.0.21 and 5.3.11, mounting a crafted btrfs filesystem image, performing some operations, and then making a syncfs system call can lead to a use-after-free in try_merge_free_space in fs/btrfs/free-space-cache.c because the pointer to a left data structure can be the same as the pointer to a right data structure.
CVE-2019-19449: In the Linux kernel 5.0.21, mounting a crafted f2fs filesystem image can lead to slab-out-of-bounds read access in f2fs_build_segment_manager in fs/f2fs/segment.c, related to init_min_max_mtime in fs/f2fs/segment.c (because the second argument to get_seg_entry is not validated).
CVE-2020-12114: A pivot_root race condition in fs/namespace.c in the Linux kernel 4.4.x before 4.4.221, 4.9.x before 4.9.221, 4.14.x before 4.14.178, 4.19.x before 4.19.119, and 5.x before 5.3 allows local users to cause a denial of service (panic) by corrupting a mountpoint reference counter.
CVE-2020-2732: A flaw was discovered in the way that the KVM hypervisor handled instruction emulation for an L2 guest when nested virtualisation is enabled. Under some circumstances, an L2 guest may trick the L0 guest into accessing sensitive L1 resources that should be inaccessible to the L2 guest.
CVE-2020-9383: An issue was discovered in the Linux kernel through 5.5.6. set_fdc in drivers/block/floppy.c leads to a wait_til_ready out-of-bounds read because the FDC index is not checked for errors before assigning it, aka CID-2e90ca68b0d2.
CVE-2019-13648: In the Linux kernel through 5.2.1 on the powerpc platform, when hardware transactional memory is disabled, a local user can cause a denial of service (TM Bad Thing exception and system crash) via a sigreturn() system call that sends a crafted signal frame. This affects arch/powerpc/kernel/signal_32.c and arch/powerpc/kernel/signal_64.c.
CVE-2015-9289: In the Linux kernel before 4.1.4, a buffer overflow occurs when checking userspace params in drivers/media/dvb-frontends/cx24116.c. The maximum size for a DiSEqC command is 6, according to the userspace API. However, the code allows larger values such as 23.
CVE-2019-20794: An issue was discovered in the Linux kernel 4.18 through 5.6.11 when unprivileged user namespaces are allowed. A user can create their own PID namespace, and mount a FUSE filesystem. Upon interaction with this FUSE filesystem, if the userspace component is terminated via a kill of the PID namespace's pid 1, it will result in a hung task, and resources being permanently locked up until system reboot. This can result in resource exhaustion.
CVE-2016-10764: In the Linux kernel before 4.9.6, there is an off by one in the drivers/mtd/spi-nor/cadence-quadspi.c cqspi_setup_flash() function. There are CQSPI_MAX_CHIPSELECT elements in the ->f_pdata array so the ">" should be ">=" instead.
CVE-2020-11608: An issue was discovered in the Linux kernel before 5.6.1. drivers/media/usb/gspca/ov519.c allows NULL pointer dereferences in ov511_mode_init_regs and ov518_mode_init_regs when there are zero endpoints, aka CID-998912346c0d.
CVE-2018-17977: The Linux kernel 4.14.67 mishandles certain interaction among XFRM Netlink messages, IPPROTO_AH packets, and IPPROTO_IP packets, which allows local users to cause a denial of service (memory consumption and system hang) by leveraging root access to execute crafted applications, as demonstrated on CentOS 7.
CVE-2017-0630: An information disclosure vulnerability in the kernel trace subsystem could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-34277115.
CVE-2020-12652: The __mptctl_ioctl function in drivers/message/fusion/mptctl.c in the Linux kernel before 5.4.14 allows local users to hold an incorrect lock during the ioctl operation and trigger a race condition, i.e., a "double fetch" vulnerability, aka CID-28d76df18f0a. NOTE: the vendor states "The security impact of this bug is not as bad as it could have been because these operations are all privileged and root already has enormous destructive power."
CVE-2020-12653: An issue was found in Linux kernel before 5.5.4. The mwifiex_cmd_append_vsie_tlv() function in drivers/net/wireless/marvell/mwifiex/scan.c allows local users to gain privileges or cause a denial of service because of an incorrect memcpy and buffer overflow, aka CID-b70261a288ea.
CVE-2020-12654: An issue was found in Linux kernel before 5.5.4. mwifiex_ret_wmm_get_status() in drivers/net/wireless/marvell/mwifiex/wmm.c allows a remote AP to trigger a heap-based buffer overflow because of an incorrect memcpy, aka CID-3a9b153c5591.
CVE-2020-12655: An issue was discovered in xfs_agf_verify in fs/xfs/libxfs/xfs_alloc.c in the Linux kernel through 5.6.10. Attackers may trigger a sync of excessive duration via an XFS v5 image with crafted metadata, aka CID-d0c7feaf8767.
CVE-2019-19813: In the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image, performing some operations, and then making a syncfs system call can lead to a use-after-free in __mutex_lock in kernel/locking/mutex.c. This is related to mutex_can_spin_on_owner in kernel/locking/mutex.c, __btrfs_qgroup_free_meta in fs/btrfs/qgroup.c, and btrfs_insert_delayed_items in fs/btrfs/delayed-inode.c.
CVE-2020-11609: An issue was discovered in the stv06xx subsystem in the Linux kernel before 5.6.1. drivers/media/usb/gspca/stv06xx/stv06xx.c and drivers/media/usb/gspca/stv06xx/stv06xx_pb0100.c mishandle invalid descriptors, as demonstrated by a NULL pointer dereference, aka CID-485b06aadb93.
CVE-2019-19816: In the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image and performing some operations can cause slab-out-of-bounds write access in __btrfs_map_block in fs/btrfs/volumes.c, because a value of 1 for the number of data stripes is mishandled.
CVE-2017-9725: In all Qualcomm products with Android releases from CAF using the Linux kernel, during DMA allocation, due to wrong data type of size, allocation size gets truncated which makes allocation succeed when it should fail.
CVE-2020-10690: There is a use-after-free in kernel versions before 5.5 due to a race condition between the release of ptp_clock and cdev while resource deallocation. When a (high privileged) process allocates a ptp device file (like /dev/ptpX) and voluntarily goes to sleep. During this time if the underlying device is removed, it can cause an exploitable condition as the process wakes up to terminate and clean all attached files. The system crashes due to the cdev structure being invalid (as already freed) which is pointed to by the inode.
CVE-2020-12888: The VFIO PCI driver in the Linux kernel through 5.6.13 mishandles attempts to access disabled memory space.
CVE-2020-0030: In binder_thread_release of binder.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-145286050References: Upstream kernel
CVE-2018-18653: The Linux kernel, as used in Ubuntu 18.10 and when booted with UEFI Secure Boot enabled, allows privileged local users to bypass intended Secure Boot restrictions and execute untrusted code by loading arbitrary kernel modules. This occurs because a modified kernel/module.c, in conjunction with certain configuration options, leads to mishandling of the result of signature verification.
CVE-2018-14611: An issue was discovered in the Linux kernel through 4.17.10. There is a use-after-free in try_merge_free_space() when mounting a crafted btrfs image, because of a lack of chunk type flag checks in btrfs_check_chunk_valid in fs/btrfs/volumes.c.
CVE-2018-14610: An issue was discovered in the Linux kernel through 4.17.10. There is out-of-bounds access in write_extent_buffer() when mounting and operating a crafted btrfs image, because of a lack of verification that each block group has a corresponding chunk at mount time, within btrfs_read_block_groups in fs/btrfs/extent-tree.c.
CVE-2018-14613: An issue was discovered in the Linux kernel through 4.17.10. There is an invalid pointer dereference in io_ctl_map_page() when mounting and operating a crafted btrfs image, because of a lack of block group item validation in check_leaf_item in fs/btrfs/tree-checker.c.
CVE-2018-14612: An issue was discovered in the Linux kernel through 4.17.10. There is an invalid pointer dereference in btrfs_root_node() when mounting a crafted btrfs image, because of a lack of chunk block group mapping validation in btrfs_read_block_groups in fs/btrfs/extent-tree.c, and a lack of empty-tree checks in check_leaf in fs/btrfs/tree-checker.c.
CVE-2019-19074: A memory leak in the ath9k_wmi_cmd() function in drivers/net/wireless/ath/ath9k/wmi.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption), aka CID-728c1e2a05e4.
CVE-2019-19073: Memory leaks in drivers/net/wireless/ath/ath9k/htc_hst.c in the Linux kernel through 5.3.11 allow attackers to cause a denial of service (memory consumption) by triggering wait_for_completion_timeout() failures. This affects the htc_config_pipe_credits() function, the htc_setup_complete() function, and the htc_connect_service() function, aka CID-853acf7caf10.
CVE-2020-10751: A flaw was found in the Linux kernels SELinux LSM hook implementation before version 5.7, where it incorrectly assumed that an skb would only contain a single netlink message. The hook would incorrectly only validate the first netlink message in the skb and allow or deny the rest of the messages within the skb with the granted permission without further processing.
CVE-2016-10723: ** DISPUTED ** An issue was discovered in the Linux kernel through 4.17.2. Since the page allocator does not yield CPU resources to the owner of the oom_lock mutex, a local unprivileged user can trivially lock up the system forever by wasting CPU resources from the page allocator (e.g., via concurrent page fault events) when the global OOM killer is invoked. NOTE: the software maintainer has not accepted certain proposed patches, in part because of a viewpoint that "the underlying problem is non-trivial to handle."
CVE-2019-19815: In the Linux kernel 5.0.21, mounting a crafted f2fs filesystem image can cause a NULL pointer dereference in f2fs_recover_fsync_data in fs/f2fs/recovery.c. This is related to F2FS_P_SB in fs/f2fs/f2fs.h.
CVE-2019-19814: In the Linux kernel 5.0.21, mounting a crafted f2fs filesystem image can cause __remove_dirty_segment slab-out-of-bounds write access because an array is bounded by the number of dirty types (8) but the array index can exceed this.
CVE-2020-12771: An issue was discovered in the Linux kernel through 5.6.11. btree_gc_coalesce in drivers/md/bcache/btree.c has a deadlock if a coalescing operation fails.
CVE-2020-10942: In the Linux kernel before 5.5.8, get_raw_socket in drivers/vhost/net.c lacks validation of an sk_family field, which might allow attackers to trigger kernel stack corruption via crafted system calls.
CVE-2015-8839: Multiple race conditions in the ext4 filesystem implementation in the Linux kernel before 4.5 allow local users to cause a denial of service (disk corruption) by writing to a page that is associated with a different user's file after unsynchronized hole punching and page-fault handling.
CVE-2019-19039: ** DISPUTED ** __btrfs_free_extent in fs/btrfs/extent-tree.c in the Linux kernel through 5.3.12 calls btrfs_print_leaf in a certain ENOENT case, which allows local users to obtain potentially sensitive information about register values via the dmesg program. NOTE: The BTRFS development team disputes this issues as not being a vulnerability because “1) The kernel provide facilities to restrict access to dmesg - dmesg_restrict=1 sysctl option. So it's really up to the system administrator to judge whether dmesg access shall be disallowed or not. 2) WARN/WARN_ON are widely used macros in the linux kernel. If this CVE is considered valid this would mean there are literally thousands CVE lurking in the kernel - something which clearly is not the case.”
CVE-2019-20636: In the Linux kernel before 5.4.12, drivers/input/input.c has out-of-bounds writes via a crafted keycode table, as demonstrated by input_set_keycode, aka CID-cb222aed03d7.
CVE-2020-11565: ** DISPUTED ** An issue was discovered in the Linux kernel through 5.6.2. mpol_parse_str in mm/mempolicy.c has a stack-based out-of-bounds write because an empty nodelist is mishandled during mount option parsing, aka CID-aa9f7d5172fa. NOTE: Someone in the security community disagrees that this is a vulnerability because the issue “is a bug in parsing mount options which can only be specified by a privileged user, so triggering the bug does not grant any powers not already held.”.
CVE-2020-12826: A signal access-control issue was discovered in the Linux kernel before 5.6.5, aka CID-7395ea4e65c2. Because exec_id in include/linux/sched.h is only 32 bits, an integer overflow can interfere with a do_notify_parent protection mechanism. A child process can send an arbitrary signal to a parent process in a different security domain. Exploitation limitations include the amount of elapsed time before an integer overflow occurs, and the lack of scenarios where signals to a parent process present a substantial operational threat.
CVE-2019-19036: btrfs_root_node in fs/btrfs/ctree.c in the Linux kernel through 5.3.12 allows a NULL pointer dereference because rcu_dereference(root->node) can be zero.
CVE-2019-12881: i915_gem_userptr_get_pages in drivers/gpu/drm/i915/i915_gem_userptr.c in the Linux kernel 4.15.0 on Ubuntu 18.04.2 allows local users to cause a denial of service (NULL pointer dereference and BUG) or possibly have unspecified other impact via crafted ioctl calls to /dev/dri/card0.
CVE-2020-12769: An issue was discovered in the Linux kernel before 5.4.17. drivers/spi/spi-dw.c allows attackers to cause a panic via concurrent calls to dw_spi_irq and dw_spi_transfer_one, aka CID-19b61392c5a8.
CVE-2020-13143: gadget_dev_desc_UDC_store in drivers/usb/gadget/configfs.c in the Linux kernel through 5.6.13 relies on kstrdup without considering the possibility of an internal '\0' value, which allows attackers to trigger an out-of-bounds read, aka CID-15753588bcd4.
CVE-2019-17351: An issue was discovered in drivers/xen/balloon.c in the Linux kernel before 5.2.3, as used in Xen through 4.12.x, allowing guest OS users to cause a denial of service because of unrestricted resource consumption during the mapping of guest memory, aka CID-6ef36ab967c7.
CVE-2020-1749:
CVE-2019-12984: A NULL pointer dereference vulnerability in the function nfc_genl_deactivate_target() in net/nfc/netlink.c in the Linux kernel before 5.1.13 can be triggered by a malicious user-mode program that omits certain NFC attributes, leading to denial of service.
CVE-2020-12770: An issue was discovered in the Linux kernel through 5.6.11. sg_write lacks an sg_remove_request call in a certain failure case, aka CID-83c6f2390040.
CVE-2019-19378: In the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image can lead to slab-out-of-bounds write access in index_rbio_pages in fs/btrfs/raid56.c.
CVE-2019-19377: In the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image, performing some operations, and unmounting can lead to a use-after-free in btrfs_queue_work in fs/btrfs/async-thread.c.
CVE-2020-11668: In the Linux kernel before 5.6.1, drivers/media/usb/gspca/xirlink_cit.c (aka the Xirlink camera USB driver) mishandles invalid descriptors, aka CID-a246b4d54770.

45 issues skipped by the security teams:

CVE-2018-10124: The kill_something_info function in kernel/signal.c in the Linux kernel before 4.13, when an unspecified architecture and compiler is used, might allow local users to cause a denial of service via an INT_MIN argument.
CVE-2016-2854: The aufs module for the Linux kernel 3.x and 4.x does not properly maintain POSIX ACL xattr data, which allows local users to gain privileges by leveraging a group-writable setgid directory.
CVE-2016-2853: The aufs module for the Linux kernel 3.x and 4.x does not properly restrict the mount namespace, which allows local users to gain privileges by mounting an aufs filesystem on top of a FUSE filesystem, and then executing a crafted setuid program.
CVE-2018-13096: An issue was discovered in fs/f2fs/super.c in the Linux kernel through 4.17.3. A denial of service (out-of-bounds memory access and BUG) can occur upon encountering an abnormal bitmap size when mounting a crafted f2fs image.
CVE-2018-13097: An issue was discovered in fs/f2fs/super.c in the Linux kernel through 4.17.3. There is an out-of-bounds read or a divide-by-zero error for an incorrect user_block_count in a corrupted f2fs image, leading to a denial of service (BUG).
CVE-2018-13095: An issue was discovered in fs/xfs/libxfs/xfs_inode_buf.c in the Linux kernel through 4.17.3. A denial of service (memory corruption and BUG) can occur for a corrupted xfs image upon encountering an inode that is in extent format, but has more extents than fit in the inode fork.
CVE-2018-13099: An issue was discovered in fs/f2fs/inline.c in the Linux kernel through 4.17.3. A denial of service (out-of-bounds memory access and BUG) can occur for a modified f2fs filesystem image in which an inline inode contains an invalid reserved blkaddr.
CVE-2018-12930: ntfs_end_buffer_async_read in the ntfs.ko filesystem driver in the Linux kernel 4.15.0 allows attackers to trigger a stack-based out-of-bounds write and cause a denial of service (kernel oops or panic) or possibly have unspecified other impact via a crafted ntfs filesystem.
CVE-2018-12931: ntfs_attr_find in the ntfs.ko filesystem driver in the Linux kernel 4.15.0 allows attackers to trigger a stack-based out-of-bounds write and cause a denial of service (kernel oops or panic) or possibly have unspecified other impact via a crafted ntfs filesystem.
CVE-2018-12207: Improper invalidation for page table updates by a virtual guest operating system for multiple Intel(R) Processors may allow an authenticated user to potentially enable denial of service of the host system via local access.
CVE-2019-17075: An issue was discovered in write_tpt_entry in drivers/infiniband/hw/cxgb4/mem.c in the Linux kernel through 5.3.2. The cxgb4 driver is directly calling dma_map_single (a DMA function) from a stack variable. This could allow an attacker to trigger a Denial of Service, exploitable if this driver is used on an architecture for which this stack/DMA interaction has security relevance.
CVE-2019-2054: In the seccomp implementation prior to kernel version 4.8, there is a possible seccomp bypass due to seccomp policies that allow the use of ptrace. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-119769499
CVE-2018-12929: ntfs_read_locked_inode in the ntfs.ko filesystem driver in the Linux kernel 4.15.0 allows attackers to trigger a use-after-free read and possibly cause a denial of service (kernel oops or panic) via a crafted ntfs filesystem.
CVE-2019-9444: In the Android kernel in sync debug fs driver there is a kernel pointer leak due to the usage of printf with %p. This could lead to local information disclosure with system execution privileges needed. User interaction is not needed for exploitation.
CVE-2019-9445: In the Android kernel in F2FS driver there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with system execution privileges needed. User interaction is not needed for exploitation.
CVE-2018-20509: The print_binder_ref_olocked function in drivers/android/binder.c in the Linux kernel 4.14.90 allows local users to obtain sensitive address information by reading " ref *desc *node" lines in a debugfs file.
CVE-2017-5972: The TCP stack in the Linux kernel 3.x does not properly implement a SYN cookie protection mechanism for the case of a fast network connection, which allows remote attackers to cause a denial of service (CPU consumption) by sending many TCP SYN packets, as demonstrated by an attack against the kernel-3.10.0 package in CentOS Linux 7. NOTE: third parties have been unable to discern any relationship between the GitHub Engineering finding and the Trigemini.c attack code.
CVE-2015-8553: Xen allows guest OS users to obtain sensitive information from uninitialized locations in host OS kernel memory by not enabling memory and I/O decoding control bits. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-0777.
CVE-2015-8952: The mbcache feature in the ext2 and ext4 filesystem implementations in the Linux kernel before 4.6 mishandles xattr block caching, which allows local users to cause a denial of service (soft lockup) via filesystem operations in environments that use many attributes, as demonstrated by Ceph and Samba.
CVE-2018-7273: In the Linux kernel through 4.15.4, the floppy driver reveals the addresses of kernel functions and global variables using printk calls within the function show_floppy in drivers/block/floppy.c. An attacker can read this information from dmesg and use the addresses to find the locations of kernel code and data and bypass kernel security protections such as KASLR.
CVE-2020-10732:
CVE-2019-11487: The Linux kernel before 5.1-rc5 allows page->_refcount reference count overflow, with resultant use-after-free issues, if about 140 GiB of RAM exists. This is related to fs/fuse/dev.c, fs/pipe.c, fs/splice.c, include/linux/mm.h, include/linux/pipe_fs_i.h, kernel/trace/trace.c, mm/gup.c, and mm/hugetlb.c. It can occur with FUSE requests.
CVE-2019-3874: The SCTP socket buffer used by a userspace application is not accounted by the cgroups subsystem. An attacker can use this flaw to cause a denial of service attack. Kernel 3.10.x and 4.18.x branches are believed to be vulnerable.
CVE-2018-1000026: Linux Linux kernel version at least v4.8 onwards, probably well before contains a Insufficient input validation vulnerability in bnx2x network card driver that can result in DoS: Network card firmware assertion takes card off-line. This attack appear to be exploitable via An attacker on a must pass a very large, specially crafted packet to the bnx2x card. This can be done from an untrusted guest VM..
CVE-2018-10087: The kernel_wait4 function in kernel/exit.c in the Linux kernel before 4.13, when an unspecified architecture and compiler is used, might allow local users to cause a denial of service by triggering an attempted use of the -INT_MIN value.
CVE-2018-14614: An issue was discovered in the Linux kernel through 4.17.10. There is an out-of-bounds access in __remove_dirty_segment() in fs/f2fs/segment.c when mounting an f2fs image.
CVE-2014-9717: fs/namespace.c in the Linux kernel before 4.0.2 processes MNT_DETACH umount2 system calls without verifying that the MNT_LOCKED flag is unset, which allows local users to bypass intended access restrictions and navigate to filesystem locations beneath a mount by calling umount2 within a user namespace.
CVE-2020-0009: In calc_vm_may_flags of ashmem.c, there is a possible arbitrary write to shared memory due to a permissions bypass. This could lead to local escalation of privilege by corrupting memory shared between processes, with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-142938932
CVE-2016-3139: The wacom_probe function in drivers/input/tablet/wacom_sys.c in the Linux kernel before 3.17 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash) via a crafted endpoints value in a USB device descriptor.
CVE-2018-7754: The aoedisk_debugfs_show function in drivers/block/aoe/aoeblk.c in the Linux kernel through 4.16.4rc4 allows local users to obtain sensitive address information by reading "ffree: " lines in a debugfs file.
CVE-2013-7445: The Direct Rendering Manager (DRM) subsystem in the Linux kernel through 4.x mishandles requests for Graphics Execution Manager (GEM) objects, which allows context-dependent attackers to cause a denial of service (memory consumption) via an application that processes graphics data, as demonstrated by JavaScript code that creates many CANVAS elements for rendering by Chrome or Firefox.
CVE-2019-18660: The Linux kernel before 5.4.1 on powerpc allows Information Exposure because the Spectre-RSB mitigation is not in place for all applicable CPUs, aka CID-39e72bf96f58. This is related to arch/powerpc/kernel/entry_64.S and arch/powerpc/kernel/security.c.
CVE-2017-18249: The add_free_nid function in fs/f2fs/node.c in the Linux kernel before 4.12 does not properly track an allocated nid, which allows local users to cause a denial of service (race condition) or possibly have unspecified other impact via concurrent threads.
CVE-2018-13100: An issue was discovered in fs/f2fs/super.c in the Linux kernel through 4.17.3, which does not properly validate secs_per_zone in a corrupted f2fs image, as demonstrated by a divide-by-zero error.
CVE-2018-3646: Systems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure of information residing in the L1 data cache to an attacker with local user access with guest OS privilege via a terminal page fault and a side-channel analysis.
CVE-2020-0067: In f2fs_xattr_generic_list of xattr.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not required for exploitation.Product: Android. Versions: Android kernel. Android ID: A-120551147.
CVE-2018-1128: It was found that cephx authentication protocol did not verify ceph clients correctly and was vulnerable to replay attack. Any attacker having access to ceph cluster network who is able to sniff packets on network can use this vulnerability to authenticate with ceph service and perform actions allowed by ceph service. Ceph branches master, mimic, luminous and jewel are believed to be vulnerable.
CVE-2018-1120: A flaw was found affecting the Linux kernel before version 4.17. By mmap()ing a FUSE-backed file onto a process's memory containing command line arguments (or environment strings), an attacker can cause utilities from psutils or procps (such as ps, w) or any other program which makes a read() call to the /proc/<pid>/cmdline (or /proc/<pid>/environ) files to block indefinitely (denial of service) or for some controlled time (as a synchronization primitive for other attacks).
CVE-2019-9453: In the Android kernel in F2FS touch driver there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with system execution privileges needed. User interaction is not needed for exploitation.
CVE-2018-10322: The xfs_dinode_verify function in fs/xfs/libxfs/xfs_inode_buf.c in the Linux kernel through 4.16.3 allows local users to cause a denial of service (xfs_ilock_attr_map_shared invalid pointer dereference) via a crafted xfs image.
CVE-2019-2213: In binder_free_transaction of binder.c, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-133758011References: Upstream kernel
CVE-2017-10663: The sanity_check_ckpt function in fs/f2fs/super.c in the Linux kernel before 4.12.4 does not validate the blkoff and segno arrays, which allows local users to gain privileges via unspecified vectors.
CVE-2017-10662: The sanity_check_raw_super function in fs/f2fs/super.c in the Linux kernel before 4.11.1 does not validate the segment count, which allows local users to gain privileges via unspecified vectors.
CVE-2019-9245: In the Android kernel in the f2fs driver there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.
CVE-2018-18021: arch/arm64/kvm/guest.c in KVM in the Linux kernel before 4.18.12 on the arm64 platform mishandles the KVM_SET_ON_REG ioctl. This is exploitable by attackers who can create virtual machines. An attacker can arbitrarily redirect the hypervisor flow of control (with full register control). An attacker can also cause a denial of service (hypervisor panic) via an illegal exception return. This occurs because of insufficient restrictions on userspace access to the core register file, and because PSTATE.M validation does not prevent unintended execution modes.

Please fix them.

Created: 2015-07-12 Last update: 2020-06-02 00:05

82 security issues in stretch high

There are 82 open security issues in stretch.

73 important issues:

CVE-2019-5108: An exploitable denial-of-service vulnerability exists in the Linux kernel prior to mainline 5.3. An attacker could exploit this vulnerability by triggering AP to send IAPP location updates for stations before the required authentication process has completed. This could lead to different denial-of-service scenarios, either by causing CAM table attacks, or by leading to traffic flapping if faking already existing clients in other nearby APs of the same wireless infrastructure. An attacker can forge Authentication and Association Request packets to trigger this vulnerability.
CVE-2020-12464: usb_sg_cancel in drivers/usb/core/message.c in the Linux kernel before 5.6.8 has a use-after-free because a transfer occurs without a reference, aka CID-056ad39ee925.
CVE-2018-13095: An issue was discovered in fs/xfs/libxfs/xfs_inode_buf.c in the Linux kernel through 4.17.3. A denial of service (memory corruption and BUG) can occur for a corrupted xfs image upon encountering an inode that is in extent format, but has more extents than fit in the inode fork.
CVE-2019-19770: ** DISPUTED ** In the Linux kernel 4.19.83, there is a use-after-free (read) in the debugfs_remove function in fs/debugfs/inode.c (which is used to remove a file or directory in debugfs that was previously created with a call to another debugfs function such as debugfs_create_file). NOTE: Linux kernel developers dispute this issue as not being an issue with debugfs, instead this is an issue with misuse of debugfs within blktrace.
CVE-2020-8428: fs/namei.c in the Linux kernel before 5.5 has a may_create_in_sticky use-after-free, which allows local users to cause a denial of service (OOPS) or possibly obtain sensitive information from kernel memory, aka CID-d0cb50185ae9. One attack vector may be an open system call for a UNIX domain socket, if the socket is being moved to a new parent directory and its old parent directory is being removed.
CVE-2020-8649: There is a use-after-free vulnerability in the Linux kernel through 5.5.2 in the vgacon_invert_region function in drivers/video/console/vgacon.c.
CVE-2020-8648: There is a use-after-free vulnerability in the Linux kernel through 5.5.2 in the n_tty_receive_buf_common function in drivers/tty/n_tty.c.
CVE-2020-8647: There is a use-after-free vulnerability in the Linux kernel through 5.5.2 in the vc_do_resize function in drivers/tty/vt/vt.c.
CVE-2020-11494: An issue was discovered in slc_bump in drivers/net/can/slcan.c in the Linux kernel through 5.6.2. It allows attackers to read uninitialized can_frame data, potentially containing sensitive information from kernel stack memory, if the configuration lacks CONFIG_INIT_STACK_ALL, aka CID-b9258a2cece4.
CVE-2018-9517: In pppol2tp_connect, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android kernel. Android ID: A-38159931.
CVE-2019-19318: In the Linux kernel 5.3.11, mounting a crafted btrfs image twice can cause an rwsem_down_write_slowpath use-after-free because (in rwsem_can_spin_on_owner in kernel/locking/rwsem.c) rwsem_owner_flags returns an already freed pointer,
CVE-2019-19319: In the Linux kernel 5.0.21, a setxattr operation, after a mount of a crafted ext4 image, can cause a slab-out-of-bounds write access because of an ext4_xattr_set_entry use-after-free in fs/ext4/xattr.c when a large old_size value is used in a memset call.
CVE-2019-19768: In the Linux kernel 5.4.0-rc2, there is a use-after-free (read) in the __blk_add_trace function in kernel/trace/blktrace.c (which is used to fill out a blk_io_trace structure and place it in a per-cpu sub-buffer).
CVE-2018-12930: ntfs_end_buffer_async_read in the ntfs.ko filesystem driver in the Linux kernel 4.15.0 allows attackers to trigger a stack-based out-of-bounds write and cause a denial of service (kernel oops or panic) or possibly have unspecified other impact via a crafted ntfs filesystem.
CVE-2018-12931: ntfs_attr_find in the ntfs.ko filesystem driver in the Linux kernel 4.15.0 allows attackers to trigger a stack-based out-of-bounds write and cause a denial of service (kernel oops or panic) or possibly have unspecified other impact via a crafted ntfs filesystem.
CVE-2018-3693: Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a speculative buffer overflow and side-channel analysis.
CVE-2020-11725: ** DISPUTED ** snd_ctl_elem_add in sound/core/control.c in the Linux kernel through 5.6.3 has a count=info->owner line, which later affects a private_size*count multiplication for unspecified "interesting side effects." NOTE: kernel engineers dispute this finding, because it could be relevant only if new callers were added that were unfamiliar with the misuse of the info->owner field to represent data unrelated to the "owner" concept. The existing callers, SNDRV_CTL_IOCTL_ELEM_ADD and SNDRV_CTL_IOCTL_ELEM_REPLACE, have been designed to misuse the info->owner field in a safe way.
CVE-2018-12929: ntfs_read_locked_inode in the ntfs.ko filesystem driver in the Linux kernel 4.15.0 allows attackers to trigger a use-after-free read and possibly cause a denial of service (kernel oops or panic) via a crafted ntfs filesystem.
CVE-2019-19448: In the Linux kernel 5.0.21 and 5.3.11, mounting a crafted btrfs filesystem image, performing some operations, and then making a syncfs system call can lead to a use-after-free in try_merge_free_space in fs/btrfs/free-space-cache.c because the pointer to a left data structure can be the same as the pointer to a right data structure.
CVE-2019-19449: In the Linux kernel 5.0.21, mounting a crafted f2fs filesystem image can lead to slab-out-of-bounds read access in f2fs_build_segment_manager in fs/f2fs/segment.c, related to init_min_max_mtime in fs/f2fs/segment.c (because the second argument to get_seg_entry is not validated).
CVE-2019-9445: In the Android kernel in F2FS driver there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with system execution privileges needed. User interaction is not needed for exploitation.
CVE-2020-12114: A pivot_root race condition in fs/namespace.c in the Linux kernel 4.4.x before 4.4.221, 4.9.x before 4.9.221, 4.14.x before 4.14.178, 4.19.x before 4.19.119, and 5.x before 5.3 allows local users to cause a denial of service (panic) by corrupting a mountpoint reference counter.
CVE-2020-2732: A flaw was discovered in the way that the KVM hypervisor handled instruction emulation for an L2 guest when nested virtualisation is enabled. Under some circumstances, an L2 guest may trick the L0 guest into accessing sensitive L1 resources that should be inaccessible to the L2 guest.
CVE-2020-9383: An issue was discovered in the Linux kernel through 5.5.6. set_fdc in drivers/block/floppy.c leads to a wait_til_ready out-of-bounds read because the FDC index is not checked for errors before assigning it, aka CID-2e90ca68b0d2.
CVE-2020-10711: A NULL pointer dereference flaw was found in the Linux kernel's SELinux subsystem in versions before 5.7. This flaw occurs while importing the Commercial IP Security Option (CIPSO) protocol's category bitmap into the SELinux extensible bitmap via the' ebitmap_netlbl_import' routine. While processing the CIPSO restricted bitmap tag in the 'cipso_v4_parsetag_rbm' routine, it sets the security attribute to indicate that the category bitmap is present, even if it has not been allocated. This issue leads to a NULL pointer dereference issue while importing the same category bitmap into SELinux. This flaw allows a remote network user to crash the system kernel, resulting in a denial of service.
CVE-2019-19462: relay_open in kernel/relay.c in the Linux kernel through 5.4.1 allows local users to cause a denial of service (such as relay blockage) by triggering a NULL alloc_percpu result.
CVE-2019-20794: An issue was discovered in the Linux kernel 4.18 through 5.6.11 when unprivileged user namespaces are allowed. A user can create their own PID namespace, and mount a FUSE filesystem. Upon interaction with this FUSE filesystem, if the userspace component is terminated via a kill of the PID namespace's pid 1, it will result in a hung task, and resources being permanently locked up until system reboot. This can result in resource exhaustion.
CVE-2020-11608: An issue was discovered in the Linux kernel before 5.6.1. drivers/media/usb/gspca/ov519.c allows NULL pointer dereferences in ov511_mode_init_regs and ov518_mode_init_regs when there are zero endpoints, aka CID-998912346c0d.
CVE-2020-10732:
CVE-2018-17977: The Linux kernel 4.14.67 mishandles certain interaction among XFRM Netlink messages, IPPROTO_AH packets, and IPPROTO_IP packets, which allows local users to cause a denial of service (memory consumption and system hang) by leveraging root access to execute crafted applications, as demonstrated on CentOS 7.
CVE-2017-0630: An information disclosure vulnerability in the kernel trace subsystem could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-34277115.
CVE-2020-12652: The __mptctl_ioctl function in drivers/message/fusion/mptctl.c in the Linux kernel before 5.4.14 allows local users to hold an incorrect lock during the ioctl operation and trigger a race condition, i.e., a "double fetch" vulnerability, aka CID-28d76df18f0a. NOTE: the vendor states "The security impact of this bug is not as bad as it could have been because these operations are all privileged and root already has enormous destructive power."
CVE-2020-12653: An issue was found in Linux kernel before 5.5.4. The mwifiex_cmd_append_vsie_tlv() function in drivers/net/wireless/marvell/mwifiex/scan.c allows local users to gain privileges or cause a denial of service because of an incorrect memcpy and buffer overflow, aka CID-b70261a288ea.
CVE-2020-12654: An issue was found in Linux kernel before 5.5.4. mwifiex_ret_wmm_get_status() in drivers/net/wireless/marvell/mwifiex/wmm.c allows a remote AP to trigger a heap-based buffer overflow because of an incorrect memcpy, aka CID-3a9b153c5591.
CVE-2020-12655: An issue was discovered in xfs_agf_verify in fs/xfs/libxfs/xfs_alloc.c in the Linux kernel through 5.6.10. Attackers may trigger a sync of excessive duration via an XFS v5 image with crafted metadata, aka CID-d0c7feaf8767.
CVE-2019-19813: In the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image, performing some operations, and then making a syncfs system call can lead to a use-after-free in __mutex_lock in kernel/locking/mutex.c. This is related to mutex_can_spin_on_owner in kernel/locking/mutex.c, __btrfs_qgroup_free_meta in fs/btrfs/qgroup.c, and btrfs_insert_delayed_items in fs/btrfs/delayed-inode.c.
CVE-2020-11609: An issue was discovered in the stv06xx subsystem in the Linux kernel before 5.6.1. drivers/media/usb/gspca/stv06xx/stv06xx.c and drivers/media/usb/gspca/stv06xx/stv06xx_pb0100.c mishandle invalid descriptors, as demonstrated by a NULL pointer dereference, aka CID-485b06aadb93.
CVE-2019-19816: In the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image and performing some operations can cause slab-out-of-bounds write access in __btrfs_map_block in fs/btrfs/volumes.c, because a value of 1 for the number of data stripes is mishandled.
CVE-2020-10690: There is a use-after-free in kernel versions before 5.5 due to a race condition between the release of ptp_clock and cdev while resource deallocation. When a (high privileged) process allocates a ptp device file (like /dev/ptpX) and voluntarily goes to sleep. During this time if the underlying device is removed, it can cause an exploitable condition as the process wakes up to terminate and clean all attached files. The system crashes due to the cdev structure being invalid (as already freed) which is pointed to by the inode.
CVE-2020-12888: The VFIO PCI driver in the Linux kernel through 5.6.13 mishandles attempts to access disabled memory space.
CVE-2020-0030: In binder_thread_release of binder.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-145286050References: Upstream kernel
CVE-2018-18653: The Linux kernel, as used in Ubuntu 18.10 and when booted with UEFI Secure Boot enabled, allows privileged local users to bypass intended Secure Boot restrictions and execute untrusted code by loading arbitrary kernel modules. This occurs because a modified kernel/module.c, in conjunction with certain configuration options, leads to mishandling of the result of signature verification.
CVE-2019-19074: A memory leak in the ath9k_wmi_cmd() function in drivers/net/wireless/ath/ath9k/wmi.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption), aka CID-728c1e2a05e4.
CVE-2019-19073: Memory leaks in drivers/net/wireless/ath/ath9k/htc_hst.c in the Linux kernel through 5.3.11 allow attackers to cause a denial of service (memory consumption) by triggering wait_for_completion_timeout() failures. This affects the htc_config_pipe_credits() function, the htc_setup_complete() function, and the htc_connect_service() function, aka CID-853acf7caf10.
CVE-2019-20806: An issue was discovered in the Linux kernel before 5.2. There is a NULL pointer dereference in tw5864_handle_frame() in drivers/media/pci/tw5864/tw5864-video.c, which may cause denial of service, aka CID-2e7682ebfc75.
CVE-2020-10751: A flaw was found in the Linux kernels SELinux LSM hook implementation before version 5.7, where it incorrectly assumed that an skb would only contain a single netlink message. The hook would incorrectly only validate the first netlink message in the skb and allow or deny the rest of the messages within the skb with the granted permission without further processing.
CVE-2020-0009: In calc_vm_may_flags of ashmem.c, there is a possible arbitrary write to shared memory due to a permissions bypass. This could lead to local escalation of privilege by corrupting memory shared between processes, with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-142938932
CVE-2016-10723: ** DISPUTED ** An issue was discovered in the Linux kernel through 4.17.2. Since the page allocator does not yield CPU resources to the owner of the oom_lock mutex, a local unprivileged user can trivially lock up the system forever by wasting CPU resources from the page allocator (e.g., via concurrent page fault events) when the global OOM killer is invoked. NOTE: the software maintainer has not accepted certain proposed patches, in part because of a viewpoint that "the underlying problem is non-trivial to handle."
CVE-2020-8832: The fix for the Linux kernel in Ubuntu 18.04 LTS for CVE-2019-14615 ("The Linux kernel did not properly clear data structures on context switches for certain Intel graphics processors.") was discovered to be incomplete, meaning that in versions of the kernel before 4.15.0-91.92, an attacker could use this vulnerability to expose sensitive information.
CVE-2019-19815: In the Linux kernel 5.0.21, mounting a crafted f2fs filesystem image can cause a NULL pointer dereference in f2fs_recover_fsync_data in fs/f2fs/recovery.c. This is related to F2FS_P_SB in fs/f2fs/f2fs.h.
CVE-2019-19814: In the Linux kernel 5.0.21, mounting a crafted f2fs filesystem image can cause __remove_dirty_segment slab-out-of-bounds write access because an array is bounded by the number of dirty types (8) but the array index can exceed this.
CVE-2020-12771: An issue was discovered in the Linux kernel through 5.6.11. btree_gc_coalesce in drivers/md/bcache/btree.c has a deadlock if a coalescing operation fails.
CVE-2020-10942: In the Linux kernel before 5.5.8, get_raw_socket in drivers/vhost/net.c lacks validation of an sk_family field, which might allow attackers to trigger kernel stack corruption via crafted system calls.
CVE-2016-8660: The XFS subsystem in the Linux kernel through 4.8.2 allows local users to cause a denial of service (fdatasync failure and system hang) by using the vfs syscall group in the trinity program, related to a "page lock order bug in the XFS seek hole/data implementation."
CVE-2019-19039: ** DISPUTED ** __btrfs_free_extent in fs/btrfs/extent-tree.c in the Linux kernel through 5.3.12 calls btrfs_print_leaf in a certain ENOENT case, which allows local users to obtain potentially sensitive information about register values via the dmesg program. NOTE: The BTRFS development team disputes this issues as not being a vulnerability because “1) The kernel provide facilities to restrict access to dmesg - dmesg_restrict=1 sysctl option. So it's really up to the system administrator to judge whether dmesg access shall be disallowed or not. 2) WARN/WARN_ON are widely used macros in the linux kernel. If this CVE is considered valid this would mean there are literally thousands CVE lurking in the kernel - something which clearly is not the case.”
CVE-2020-11565: ** DISPUTED ** An issue was discovered in the Linux kernel through 5.6.2. mpol_parse_str in mm/mempolicy.c has a stack-based out-of-bounds write because an empty nodelist is mishandled during mount option parsing, aka CID-aa9f7d5172fa. NOTE: Someone in the security community disagrees that this is a vulnerability because the issue “is a bug in parsing mount options which can only be specified by a privileged user, so triggering the bug does not grant any powers not already held.”.
CVE-2020-12826: A signal access-control issue was discovered in the Linux kernel before 5.6.5, aka CID-7395ea4e65c2. Because exec_id in include/linux/sched.h is only 32 bits, an integer overflow can interfere with a do_notify_parent protection mechanism. A child process can send an arbitrary signal to a parent process in a different security domain. Exploitation limitations include the amount of elapsed time before an integer overflow occurs, and the lack of scenarios where signals to a parent process present a substantial operational threat.
CVE-2020-0067: In f2fs_xattr_generic_list of xattr.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not required for exploitation.Product: Android. Versions: Android kernel. Android ID: A-120551147.
CVE-2019-9453: In the Android kernel in F2FS touch driver there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with system execution privileges needed. User interaction is not needed for exploitation.
CVE-2019-19036: btrfs_root_node in fs/btrfs/ctree.c in the Linux kernel through 5.3.12 allows a NULL pointer dereference because rcu_dereference(root->node) can be zero.
CVE-2019-12881: i915_gem_userptr_get_pages in drivers/gpu/drm/i915/i915_gem_userptr.c in the Linux kernel 4.15.0 on Ubuntu 18.04.2 allows local users to cause a denial of service (NULL pointer dereference and BUG) or possibly have unspecified other impact via crafted ioctl calls to /dev/dri/card0.
CVE-2020-12769: An issue was discovered in the Linux kernel before 5.4.17. drivers/spi/spi-dw.c allows attackers to cause a panic via concurrent calls to dw_spi_irq and dw_spi_transfer_one, aka CID-19b61392c5a8.
CVE-2020-13143: gadget_dev_desc_UDC_store in drivers/usb/gadget/configfs.c in the Linux kernel through 5.6.13 relies on kstrdup without considering the possibility of an internal '\0' value, which allows attackers to trigger an out-of-bounds read, aka CID-15753588bcd4.
CVE-2018-10322: The xfs_dinode_verify function in fs/xfs/libxfs/xfs_inode_buf.c in the Linux kernel through 4.16.3 allows local users to cause a denial of service (xfs_ilock_attr_map_shared invalid pointer dereference) via a crafted xfs image.
CVE-2019-2213: In binder_free_transaction of binder.c, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-133758011References: Upstream kernel
CVE-2019-2182: In the Android kernel in the kernel MMU code there is a possible execution path leaving some kernel text and rodata pages writable. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2020-1749:
CVE-2019-9245: In the Android kernel in the f2fs driver there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.
CVE-2019-12984: A NULL pointer dereference vulnerability in the function nfc_genl_deactivate_target() in net/nfc/netlink.c in the Linux kernel before 5.1.13 can be triggered by a malicious user-mode program that omits certain NFC attributes, leading to denial of service.
CVE-2020-12770: An issue was discovered in the Linux kernel through 5.6.11. sg_write lacks an sg_remove_request call in a certain failure case, aka CID-83c6f2390040.
CVE-2019-19378: In the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image can lead to slab-out-of-bounds write access in index_rbio_pages in fs/btrfs/raid56.c.
CVE-2019-19377: In the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image, performing some operations, and unmounting can lead to a use-after-free in btrfs_queue_work in fs/btrfs/async-thread.c.
CVE-2020-11668: In the Linux kernel before 5.6.1, drivers/media/usb/gspca/xirlink_cit.c (aka the Xirlink camera USB driver) mishandles invalid descriptors, aka CID-a246b4d54770.

9 issues skipped by the security teams:

CVE-2018-1108: kernel drivers before version 4.17-rc1 are vulnerable to a weakness in the Linux kernel's implementation of random seed data. Programs, early in the boot sequence, could use the data allocated for the seed before it was sufficiently generated.
CVE-2017-18232: The Serial Attached SCSI (SAS) implementation in the Linux kernel through 4.15.9 mishandles a mutex within libsas, which allows local users to cause a denial of service (deadlock) by triggering certain error-handling code.
CVE-2018-12928: In the Linux kernel 4.15.0, a NULL pointer dereference was discovered in hfs_ext_read_extent in hfs.ko. This can occur during a mount of a crafted hfs filesystem.
CVE-2019-9444: In the Android kernel in sync debug fs driver there is a kernel pointer leak due to the usage of printf with %p. This could lead to local information disclosure with system execution privileges needed. User interaction is not needed for exploitation.
CVE-2018-7273: In the Linux kernel through 4.15.4, the floppy driver reveals the addresses of kernel functions and global variables using printk calls within the function show_floppy in drivers/block/floppy.c. An attacker can read this information from dmesg and use the addresses to find the locations of kernel code and data and bypass kernel security protections such as KASLR.
CVE-2019-3874: The SCTP socket buffer used by a userspace application is not accounted by the cgroups subsystem. An attacker can use this flaw to cause a denial of service attack. Kernel 3.10.x and 4.18.x branches are believed to be vulnerable.
CVE-2018-7754: The aoedisk_debugfs_show function in drivers/block/aoe/aoeblk.c in the Linux kernel through 4.16.4rc4 allows local users to obtain sensitive address information by reading "ffree: " lines in a debugfs file.
CVE-2013-7445: The Direct Rendering Manager (DRM) subsystem in the Linux kernel through 4.x mishandles requests for Graphics Execution Manager (GEM) objects, which allows context-dependent attackers to cause a denial of service (memory consumption) via an application that processes graphics data, as demonstrated by JavaScript code that creates many CANVAS elements for rendering by Chrome or Firefox.
CVE-2018-20449: The hidma_chan_stats function in drivers/dma/qcom/hidma_dbg.c in the Linux kernel 4.14.90 allows local users to obtain sensitive address information by reading "callback=" lines in a debugfs file.

Please fix them.

Created: 2015-07-12 Last update: 2020-06-02 00:05

87 bugs tagged patch in the BTS normal

The BTS contains patches fixing 87 bugs (90 if counting merged bugs), consider including or untagging them.

Created: 2020-02-26 Last update: 2020-06-03 06:01

Depends on packages which need a new maintainer normal

The packages that linux depends on which need a new maintainer are:

dh-exec (#851746)
- Build-Depends: dh-exec

Created: 2019-11-22 Last update: 2020-06-03 05:32

Fails to build during reproducibility testing normal

A package building reproducibly enables third parties to verify that the source matches the distributed binaries. It has been identified that this source package produced different results, failed to build or had other issues in a test environment. Please read about how to improve the situation!

Created: 2019-12-14 Last update: 2020-06-03 04:37

Multiarch hinter reports 2 issue(s) normal

There are issues with the multiarch metadata for this package.

libcpupower-dev could be marked Multi-Arch: same
libcpupower1 could be marked Multi-Arch: same

Created: 2020-05-25 Last update: 2020-06-03 00:05

version in VCS is newer than in repository, is it time to upload? normal

vcswatch reports that this package seems to have a new changelog entry (version 5.7-1~exp1, distribution UNRELEASED) and new commits in its VCS. You should consider whether it's time to make an upload.

Here are the relevant commit messages:

commit 69e626d9f2d61373d42c7b79ac306f729f7d0b4f
Author: Ben Hutchings <benh@debian.org>
Date:   Mon Jun 1 18:50:25 2020 +0100

    Update to 5.7

commit 48574b4dfa16c4b80d630c8735680f5c4193cbc5
Author: Aurelien Jarno <aurelien@aurel32.net>
Date:   Fri May 29 22:37:00 2020 +0200

    Enable CONFIG_NVME_HWMON (Closes: #961823)

commit 43f8a023e922eeb909fcd0771531d30f9d41cb2f
Merge: e30336ff651 8a788b0708b
Author: Aurelien Jarno <aurel32@debian.org>
Date:   Thu May 28 20:20:27 2020 +0000

    Merge branch 'loongson3-of' into 'master'
    
    Enable CONFIG_OF and CONFIG_SERIAL_OF_PLATFORM for Loongson-3
    
    See merge request kernel-team/linux!242

commit 8a788b0708ba1593f1fd4f3c585b7d5466a29f16
Author: YunQiang Su <syq@debian.org>
Date:   Sat May 23 23:17:42 2020 +0800

    Enable CONFIG_OF and CONFIG_SERIAL_OF_PLATFORM for Loongson-3
    
    Loongson64, aka loongson-3 switch to devicetree, and the console
    cannot accept input anymore due to SERIAL_OF_PLATFORM is
    not enabled.
    
    While SERIAL_OF_PLATFORM depends on OF, we need to enable it
    at the same time.
    
    These options can only work with 5.7+.

commit e30336ff6519e31077b27210f595ea7fbd23a2c9
Author: Helge Deller <deller@gmx.de>
Date:   Tue May 26 15:04:19 2020 +0200

    Don't run dh_strip on vmlinuz
    
    The debian kernel build switched to use debhelper
    compatibility level 12 with this commit:
    
    commit 59a5af36cbf1cc01ef48b91719f999a699d99fab
    Author: Ben Hutchings <ben@decadent.org.uk>
        debhelper started complaining about level 9, so it's time to upgrade
        again.
    
    This change broke the kernel build on the hppa architecture.
    Since compat level 12, dh_strip runs the "strip" command on any vmlinuz*
    files, which wasn't the case before.
    On hppa the 64-bit build needs to run "hppa64-linux-strip" instead of
    "strip".
    
    Fix it by adding "vmlinuz" to the exclude list of dh_strip, and thus
    behave as compat level 9 did before.
    
    Tested on hppa and x86-64.

commit 9cebd67f992d7fac42d75571a1ffe3eea1efac26
Author: Romain Perier <romain.perier@gmail.com>
Date:   Sun May 24 17:04:02 2020 +0200

    Update to 5.7-rc7

commit e6e296b335a7081a1a88c41dae4539f3115da44e
Author: Vagrant Cascadian <vagrant@debian.org>
Date:   Sun May 24 12:32:30 2020 -0700

    [arm64] Add analogix-anx6345, pwm-sun4i, sun4i-drm and sun8i-mixer to
    fb-modules udeb.

commit 0ad3a02d2ab28887e3ae61c9c63241eaafea6a0a
Author: Vagrant Cascadian <vagrant@debian.org>
Date:   Mon May 4 13:53:24 2020 -0700

    [arm64] Enable DRM_ANALOGIX_ANX6345 as a module.

commit 0bf43ae19f1ccabcb181fdcb72974ace08a51a2d
Author: Ben Hutchings <benh@debian.org>
Date:   Sat May 16 00:09:46 2020 +0100

    fs: Enable EXFAT_FS as module (Closes: #959781)

Created: 2020-05-16 Last update: 2020-06-02 21:05

Build log checks report 2 warnings low

Build log checks report 2 warnings

Created: 2019-08-22 Last update: 2019-08-22 01:01

Standards version of the package is outdated. wishlist

The package should be updated to follow the last version of Debian Policy (Standards-Version 4.5.0 instead of 4.2.0).

Created: 2017-12-02 Last update: 2020-05-24 00:16

news

[rss feed]

[2020-05-30] linux 5.6.14-1 MIGRATED to testing (Debian testing watch)
[2020-05-30] linux 5.6.14-1 MIGRATED to testing (Debian testing watch)
[2020-05-27] Accepted linux 4.19.118-2~bpo9+1 (source) into stretch-backports->backports-policy, stretch-backports (Debian FTP Masters) (signed by: Ben Hutchings)
[2020-05-23] Accepted linux 5.6.14-1 (source) into unstable, unstable (Debian FTP Masters) (signed by: Salvatore Bonaccorso)
[2020-05-12] Accepted linux 5.7~rc5-1~exp1 (source) into experimental, experimental (Debian FTP Masters) (signed by: Ben Hutchings)
[2020-05-05] linux 5.6.7-1 MIGRATED to testing (Debian testing watch)
[2020-04-29] Accepted linux 4.19.118-2 (source) into proposed-updates->stable-new, proposed-updates (Debian FTP Masters) (signed by: Salvatore Bonaccorso)
[2020-04-29] Accepted linux 5.6.7-1 (source) into unstable, unstable (Debian FTP Masters) (signed by: Ben Hutchings)
[2020-04-28] Accepted linux 4.19.98-1+deb10u1 (source) into stable->embargoed, stable (Debian FTP Masters) (signed by: Salvatore Bonaccorso)
[2020-04-27] Accepted linux 5.5.17-1~bpo10+1 (source) into buster-backports, buster-backports (Debian FTP Masters) (signed by: Ben Hutchings)
[2020-04-27] Accepted linux 4.19.118-1 (source) into proposed-updates->stable-new, proposed-updates (Debian FTP Masters) (signed by: Ben Hutchings)
[2020-04-23] linux 5.5.17-1 MIGRATED to testing (Debian testing watch)
[2020-04-17] Accepted linux 5.6.4-1~exp1 (source) into experimental, experimental (Debian FTP Masters) (signed by: Ben Hutchings)
[2020-04-17] Accepted linux 5.5.17-1 (source) into unstable, unstable (Debian FTP Masters) (signed by: Ben Hutchings)
[2020-04-15] linux 5.5.13-2 MIGRATED to testing (Debian testing watch)
[2020-03-30] Accepted linux 5.5.13-2 (source) into unstable (Salvatore Bonaccorso)
[2020-03-30] Accepted linux 5.5.13-1 (source) into unstable, unstable (Debian FTP Masters) (signed by: Ben Hutchings)
[2020-03-16] Accepted linux 5.4.19-1~bpo10+1 (source) into buster-backports, buster-backports (Debian FTP Masters) (signed by: Ben Hutchings)
[2020-03-16] Accepted linux 4.19.98-1~bpo9+1 (source) into stretch-backports->backports-policy, stretch-backports (Debian FTP Masters) (signed by: Ben Hutchings)
[2020-02-18] linux 5.4.19-1 MIGRATED to testing (Debian testing watch)
[2020-02-13] Accepted linux 5.4.19-1 (source) into unstable, unstable (Salvatore Bonaccorso)
[2020-02-11] Accepted linux 5.4.13-1~bpo10+1 (source) into buster-backports, buster-backports (Ben Hutchings)
[2020-01-28] Accepted linux 4.19.98-1 (all source) into proposed-updates->stable-new, proposed-updates (Salvatore Bonaccorso)
[2020-01-25] Accepted linux 4.9.210-1 (all source) into oldstable-proposed-updates->oldstable-new, oldstable-proposed-updates (Ben Hutchings)
[2020-01-24] linux 5.4.13-1 MIGRATED to testing (Debian testing watch)
[2020-01-19] Accepted linux 5.4.13-1 (source) into unstable, unstable (Salvatore Bonaccorso)
[2020-01-17] Accepted linux 3.16.81-1 (all source) into oldoldstable (Ben Hutchings)
[2020-01-11] linux 5.4.8-1 MIGRATED to testing (Debian testing watch)
[2020-01-09] Accepted linux 5.4.8-1~bpo10+1 (source) into buster-backports, buster-backports (Ben Hutchings)
[2020-01-06] Accepted linux 5.5~rc5-1~exp1 (source) into experimental, experimental (Ben Hutchings)

bugs [bug history graph]

all: 2623 2715
RC: 11 12
I&N: 2415 2495
M&W: 191 202
F&P: 6
patch: 87 90

links

homepage
buildd: logs, exp, checks, clang, reproducibility
popcon
browse source code
edit tags
security tracker
l10n (-, 41)
debci

ubuntu

[Information about Ubuntu for Debian Developers]

version: 5.4.0-26.30
6967 bugs (273 patches)