Debian Package Tracker

general

source: linux (main)
version: 5.4.19-1
maintainer: Debian Kernel Team (archive) (DMD)
uploaders: Bastian Blank [DMD] – Ben Hutchings [DMD] – Salvatore Bonaccorso [DMD] – maximilian attems [DMD]
arch: all
std-ver: 4.2.0
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

o-o-stable: 3.16.56-1+deb8u1
o-o-sec: 3.16.81-1
oldstable: 4.9.210-1
old-sec: 4.9.189-3+deb9u2
old-bpo: 4.19.67-2+deb10u2~bpo9+1
stable: 4.19.98-1
stable-sec: 4.19.67-2+deb10u2
stable-bpo: 5.4.13-1~bpo10+1
testing: 5.4.13-1
unstable: 5.4.19-1
exp: 5.5~rc5-1~exp1

versioned links

3.16.51-3: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
3.16.51-3+deb8u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
3.16.56-1+deb8u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
3.16.81-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
4.9.189-3+deb9u2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
4.9.210-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
4.19.67-2+deb10u2~bpo9+1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
4.19.67-2+deb10u2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
4.19.98-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
5.4.2-1~exp1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
5.4.8-1~bpo10+1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
5.4.13-1~bpo10+1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
5.4.13-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
5.4.19-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
5.5~rc5-1~exp1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

acpi-modules-5.4.0-4-686-di
acpi-modules-5.4.0-4-686-pae-di
acpi-modules-5.4.0-4-amd64-di
affs-modules-5.4.0-4-4kc-malta-di
affs-modules-5.4.0-4-5kc-malta-di
affs-modules-5.4.0-4-loongson-3-di
affs-modules-5.4.0-4-m68k-di
affs-modules-5.4.0-4-octeon-di
affs-modules-5.4.0-4-powerpc-di
affs-modules-5.4.0-4-powerpc64-di
ata-modules-5.4.0-4-4kc-malta-di
ata-modules-5.4.0-4-5kc-malta-di
ata-modules-5.4.0-4-686-di
ata-modules-5.4.0-4-686-pae-di
ata-modules-5.4.0-4-alpha-generic-di
ata-modules-5.4.0-4-amd64-di
ata-modules-5.4.0-4-arm64-di
ata-modules-5.4.0-4-armmp-di
ata-modules-5.4.0-4-itanium-di
ata-modules-5.4.0-4-loongson-3-di
ata-modules-5.4.0-4-m68k-di
ata-modules-5.4.0-4-parisc-di
ata-modules-5.4.0-4-parisc64-di
ata-modules-5.4.0-4-powerpc-di
ata-modules-5.4.0-4-powerpc64-di
ata-modules-5.4.0-4-powerpc64le-di
ata-modules-5.4.0-4-riscv64-di
ata-modules-5.4.0-4-sparc64-di
btrfs-modules-5.4.0-4-4kc-malta-di
btrfs-modules-5.4.0-4-5kc-malta-di
btrfs-modules-5.4.0-4-686-di
btrfs-modules-5.4.0-4-686-pae-di
btrfs-modules-5.4.0-4-alpha-generic-di
btrfs-modules-5.4.0-4-amd64-di
btrfs-modules-5.4.0-4-arm64-di
btrfs-modules-5.4.0-4-armmp-di
btrfs-modules-5.4.0-4-itanium-di
btrfs-modules-5.4.0-4-loongson-3-di
btrfs-modules-5.4.0-4-m68k-di
btrfs-modules-5.4.0-4-marvell-di
btrfs-modules-5.4.0-4-mips32r6-di
btrfs-modules-5.4.0-4-mips32r6el-di
btrfs-modules-5.4.0-4-mips64r6-di
btrfs-modules-5.4.0-4-mips64r6el-di
btrfs-modules-5.4.0-4-octeon-di
btrfs-modules-5.4.0-4-parisc-di
btrfs-modules-5.4.0-4-parisc64-di
btrfs-modules-5.4.0-4-powerpc-di
btrfs-modules-5.4.0-4-powerpc64-di
btrfs-modules-5.4.0-4-powerpc64le-di
btrfs-modules-5.4.0-4-riscv64-di
btrfs-modules-5.4.0-4-s390x-di
btrfs-modules-5.4.0-4-sh7751r-di
btrfs-modules-5.4.0-4-sh7785lcr-di
btrfs-modules-5.4.0-4-sparc64-di
cdrom-core-modules-5.4.0-4-4kc-malta-di
cdrom-core-modules-5.4.0-4-5kc-malta-di
cdrom-core-modules-5.4.0-4-686-di
cdrom-core-modules-5.4.0-4-686-pae-di
cdrom-core-modules-5.4.0-4-alpha-generic-di
cdrom-core-modules-5.4.0-4-amd64-di
cdrom-core-modules-5.4.0-4-arm64-di
cdrom-core-modules-5.4.0-4-armmp-di
cdrom-core-modules-5.4.0-4-itanium-di
cdrom-core-modules-5.4.0-4-loongson-3-di
cdrom-core-modules-5.4.0-4-m68k-di
cdrom-core-modules-5.4.0-4-marvell-di
cdrom-core-modules-5.4.0-4-octeon-di
cdrom-core-modules-5.4.0-4-parisc-di
cdrom-core-modules-5.4.0-4-parisc64-di
cdrom-core-modules-5.4.0-4-powerpc-di
cdrom-core-modules-5.4.0-4-powerpc64-di
cdrom-core-modules-5.4.0-4-powerpc64le-di
cdrom-core-modules-5.4.0-4-riscv64-di
cdrom-core-modules-5.4.0-4-s390x-di
cdrom-core-modules-5.4.0-4-sh7751r-di
cdrom-core-modules-5.4.0-4-sh7785lcr-di
cdrom-core-modules-5.4.0-4-sparc64-di
compress-modules-5.4.0-4-4kc-malta-di
compress-modules-5.4.0-4-5kc-malta-di
compress-modules-5.4.0-4-686-di
compress-modules-5.4.0-4-686-pae-di
compress-modules-5.4.0-4-alpha-generic-di
compress-modules-5.4.0-4-amd64-di
compress-modules-5.4.0-4-arm64-di
compress-modules-5.4.0-4-armmp-di
compress-modules-5.4.0-4-itanium-di
compress-modules-5.4.0-4-loongson-3-di
compress-modules-5.4.0-4-m68k-di
compress-modules-5.4.0-4-marvell-di
compress-modules-5.4.0-4-mips32r6-di
compress-modules-5.4.0-4-mips32r6el-di
compress-modules-5.4.0-4-mips64r6-di
compress-modules-5.4.0-4-mips64r6el-di
compress-modules-5.4.0-4-octeon-di
compress-modules-5.4.0-4-parisc-di
compress-modules-5.4.0-4-parisc64-di
compress-modules-5.4.0-4-powerpc-di
compress-modules-5.4.0-4-powerpc64-di
compress-modules-5.4.0-4-powerpc64le-di
compress-modules-5.4.0-4-riscv64-di
compress-modules-5.4.0-4-s390x-di
compress-modules-5.4.0-4-sh7751r-di
compress-modules-5.4.0-4-sh7785lcr-di
compress-modules-5.4.0-4-sparc64-di
crc-modules-5.4.0-4-4kc-malta-di
crc-modules-5.4.0-4-5kc-malta-di
crc-modules-5.4.0-4-686-di
crc-modules-5.4.0-4-686-pae-di
crc-modules-5.4.0-4-alpha-generic-di
crc-modules-5.4.0-4-amd64-di
crc-modules-5.4.0-4-arm64-di
crc-modules-5.4.0-4-armmp-di
crc-modules-5.4.0-4-itanium-di
crc-modules-5.4.0-4-loongson-3-di
crc-modules-5.4.0-4-m68k-di
crc-modules-5.4.0-4-marvell-di
crc-modules-5.4.0-4-mips32r6-di
crc-modules-5.4.0-4-mips32r6el-di
crc-modules-5.4.0-4-mips64r6-di
crc-modules-5.4.0-4-mips64r6el-di
crc-modules-5.4.0-4-octeon-di
crc-modules-5.4.0-4-parisc-di
crc-modules-5.4.0-4-parisc64-di
crc-modules-5.4.0-4-powerpc-di
crc-modules-5.4.0-4-powerpc64-di
crc-modules-5.4.0-4-powerpc64le-di
crc-modules-5.4.0-4-riscv64-di
crc-modules-5.4.0-4-s390x-di
crc-modules-5.4.0-4-sh7751r-di
crc-modules-5.4.0-4-sh7785lcr-di
crc-modules-5.4.0-4-sparc64-di
crypto-dm-modules-5.4.0-4-4kc-malta-di
crypto-dm-modules-5.4.0-4-5kc-malta-di
crypto-dm-modules-5.4.0-4-686-di
crypto-dm-modules-5.4.0-4-686-pae-di
crypto-dm-modules-5.4.0-4-alpha-generic-di
crypto-dm-modules-5.4.0-4-amd64-di
crypto-dm-modules-5.4.0-4-arm64-di
crypto-dm-modules-5.4.0-4-armmp-di
crypto-dm-modules-5.4.0-4-itanium-di
crypto-dm-modules-5.4.0-4-loongson-3-di
crypto-dm-modules-5.4.0-4-marvell-di
crypto-dm-modules-5.4.0-4-mips32r6-di
crypto-dm-modules-5.4.0-4-mips32r6el-di
crypto-dm-modules-5.4.0-4-mips64r6-di
crypto-dm-modules-5.4.0-4-mips64r6el-di
crypto-dm-modules-5.4.0-4-octeon-di
crypto-dm-modules-5.4.0-4-parisc-di
crypto-dm-modules-5.4.0-4-parisc64-di
crypto-dm-modules-5.4.0-4-powerpc-di
crypto-dm-modules-5.4.0-4-powerpc64-di
crypto-dm-modules-5.4.0-4-powerpc64le-di
crypto-dm-modules-5.4.0-4-riscv64-di
crypto-dm-modules-5.4.0-4-s390x-di
crypto-dm-modules-5.4.0-4-sh7751r-di
crypto-dm-modules-5.4.0-4-sh7785lcr-di
crypto-dm-modules-5.4.0-4-sparc64-di
crypto-modules-5.4.0-4-4kc-malta-di
crypto-modules-5.4.0-4-5kc-malta-di
crypto-modules-5.4.0-4-686-di
crypto-modules-5.4.0-4-686-pae-di
crypto-modules-5.4.0-4-alpha-generic-di
crypto-modules-5.4.0-4-amd64-di
crypto-modules-5.4.0-4-arm64-di
crypto-modules-5.4.0-4-armmp-di
crypto-modules-5.4.0-4-itanium-di
crypto-modules-5.4.0-4-loongson-3-di
crypto-modules-5.4.0-4-m68k-di
crypto-modules-5.4.0-4-marvell-di
crypto-modules-5.4.0-4-mips32r6-di
crypto-modules-5.4.0-4-mips32r6el-di
crypto-modules-5.4.0-4-mips64r6-di
crypto-modules-5.4.0-4-mips64r6el-di
crypto-modules-5.4.0-4-octeon-di
crypto-modules-5.4.0-4-parisc-di
crypto-modules-5.4.0-4-parisc64-di
crypto-modules-5.4.0-4-powerpc-di
crypto-modules-5.4.0-4-powerpc64-di
crypto-modules-5.4.0-4-powerpc64le-di
crypto-modules-5.4.0-4-riscv64-di
crypto-modules-5.4.0-4-s390x-di
crypto-modules-5.4.0-4-sh7751r-di
crypto-modules-5.4.0-4-sh7785lcr-di
crypto-modules-5.4.0-4-sparc64-di
dasd-extra-modules-5.4.0-4-s390x-di
dasd-modules-5.4.0-4-s390x-di
efi-modules-5.4.0-4-686-di
efi-modules-5.4.0-4-686-pae-di
efi-modules-5.4.0-4-amd64-di
efi-modules-5.4.0-4-arm64-di
efi-modules-5.4.0-4-armmp-di
event-modules-5.4.0-4-4kc-malta-di
event-modules-5.4.0-4-5kc-malta-di
event-modules-5.4.0-4-686-di
event-modules-5.4.0-4-686-pae-di
event-modules-5.4.0-4-alpha-generic-di
event-modules-5.4.0-4-amd64-di
event-modules-5.4.0-4-arm64-di
event-modules-5.4.0-4-armmp-di
event-modules-5.4.0-4-itanium-di
event-modules-5.4.0-4-loongson-3-di
event-modules-5.4.0-4-marvell-di
event-modules-5.4.0-4-octeon-di
event-modules-5.4.0-4-parisc-di
event-modules-5.4.0-4-parisc64-di
event-modules-5.4.0-4-powerpc-di
event-modules-5.4.0-4-powerpc64-di
event-modules-5.4.0-4-powerpc64le-di
event-modules-5.4.0-4-riscv64-di
ext4-modules-5.4.0-4-4kc-malta-di
ext4-modules-5.4.0-4-5kc-malta-di
ext4-modules-5.4.0-4-686-di
ext4-modules-5.4.0-4-686-pae-di
ext4-modules-5.4.0-4-alpha-generic-di
ext4-modules-5.4.0-4-amd64-di
ext4-modules-5.4.0-4-arm64-di
ext4-modules-5.4.0-4-armmp-di
ext4-modules-5.4.0-4-itanium-di
ext4-modules-5.4.0-4-loongson-3-di
ext4-modules-5.4.0-4-m68k-di
ext4-modules-5.4.0-4-marvell-di
ext4-modules-5.4.0-4-mips32r6-di
ext4-modules-5.4.0-4-mips32r6el-di
ext4-modules-5.4.0-4-mips64r6-di
ext4-modules-5.4.0-4-mips64r6el-di
ext4-modules-5.4.0-4-octeon-di
ext4-modules-5.4.0-4-parisc-di
ext4-modules-5.4.0-4-parisc64-di
ext4-modules-5.4.0-4-powerpc-di
ext4-modules-5.4.0-4-powerpc64-di
ext4-modules-5.4.0-4-powerpc64le-di
ext4-modules-5.4.0-4-riscv64-di
ext4-modules-5.4.0-4-s390x-di
ext4-modules-5.4.0-4-sh7751r-di
ext4-modules-5.4.0-4-sh7785lcr-di
ext4-modules-5.4.0-4-sparc64-di
fancontrol-modules-5.4.0-4-powerpc64-di
fancontrol-modules-5.4.0-4-powerpc64le-di
fat-modules-5.4.0-4-4kc-malta-di
fat-modules-5.4.0-4-5kc-malta-di
fat-modules-5.4.0-4-686-di
fat-modules-5.4.0-4-686-pae-di
fat-modules-5.4.0-4-alpha-generic-di
fat-modules-5.4.0-4-amd64-di
fat-modules-5.4.0-4-arm64-di
fat-modules-5.4.0-4-armmp-di
fat-modules-5.4.0-4-itanium-di
fat-modules-5.4.0-4-loongson-3-di
fat-modules-5.4.0-4-m68k-di
fat-modules-5.4.0-4-marvell-di
fat-modules-5.4.0-4-octeon-di
fat-modules-5.4.0-4-parisc-di
fat-modules-5.4.0-4-parisc64-di
fat-modules-5.4.0-4-powerpc-di
fat-modules-5.4.0-4-powerpc64-di
fat-modules-5.4.0-4-powerpc64le-di
fat-modules-5.4.0-4-riscv64-di
fat-modules-5.4.0-4-s390x-di
fat-modules-5.4.0-4-sh7751r-di
fat-modules-5.4.0-4-sh7785lcr-di
fat-modules-5.4.0-4-sparc64-di
fb-modules-5.4.0-4-4kc-malta-di
fb-modules-5.4.0-4-5kc-malta-di
fb-modules-5.4.0-4-686-di
fb-modules-5.4.0-4-686-pae-di
fb-modules-5.4.0-4-alpha-generic-di
fb-modules-5.4.0-4-amd64-di
fb-modules-5.4.0-4-arm64-di
fb-modules-5.4.0-4-armmp-di
fb-modules-5.4.0-4-itanium-di
fb-modules-5.4.0-4-loongson-3-di
fb-modules-5.4.0-4-marvell-di
fb-modules-5.4.0-4-parisc64-di
fb-modules-5.4.0-4-powerpc-di
fb-modules-5.4.0-4-powerpc64-di
fb-modules-5.4.0-4-powerpc64le-di
fb-modules-5.4.0-4-riscv64-di
fb-modules-5.4.0-4-sparc64-di
firewire-core-modules-5.4.0-4-686-di
firewire-core-modules-5.4.0-4-686-pae-di
firewire-core-modules-5.4.0-4-amd64-di
firewire-core-modules-5.4.0-4-itanium-di
firewire-core-modules-5.4.0-4-loongson-3-di
firewire-core-modules-5.4.0-4-powerpc-di
firewire-core-modules-5.4.0-4-powerpc64-di
firewire-core-modules-5.4.0-4-powerpc64le-di
firewire-core-modules-5.4.0-4-sh7751r-di
firewire-core-modules-5.4.0-4-sh7785lcr-di
fuse-modules-5.4.0-4-4kc-malta-di
fuse-modules-5.4.0-4-5kc-malta-di
fuse-modules-5.4.0-4-686-di
fuse-modules-5.4.0-4-686-pae-di
fuse-modules-5.4.0-4-alpha-generic-di
fuse-modules-5.4.0-4-amd64-di
fuse-modules-5.4.0-4-arm64-di
fuse-modules-5.4.0-4-armmp-di
fuse-modules-5.4.0-4-itanium-di
fuse-modules-5.4.0-4-loongson-3-di
fuse-modules-5.4.0-4-m68k-di
fuse-modules-5.4.0-4-marvell-di
fuse-modules-5.4.0-4-mips32r6-di
fuse-modules-5.4.0-4-mips32r6el-di
fuse-modules-5.4.0-4-mips64r6-di
fuse-modules-5.4.0-4-mips64r6el-di
fuse-modules-5.4.0-4-octeon-di
fuse-modules-5.4.0-4-parisc-di
fuse-modules-5.4.0-4-parisc64-di
fuse-modules-5.4.0-4-powerpc-di
fuse-modules-5.4.0-4-powerpc64-di
fuse-modules-5.4.0-4-powerpc64le-di
fuse-modules-5.4.0-4-riscv64-di
fuse-modules-5.4.0-4-s390x-di
fuse-modules-5.4.0-4-sh7751r-di
fuse-modules-5.4.0-4-sh7785lcr-di
fuse-modules-5.4.0-4-sparc64-di
hfs-modules-5.4.0-4-4kc-malta-di
hfs-modules-5.4.0-4-5kc-malta-di
hfs-modules-5.4.0-4-loongson-3-di
hfs-modules-5.4.0-4-m68k-di
hfs-modules-5.4.0-4-octeon-di
hfs-modules-5.4.0-4-powerpc-di
hfs-modules-5.4.0-4-powerpc64-di
hyperv-daemons (3 bugs: 0, 2, 1, 0)
hypervisor-modules-5.4.0-4-powerpc64-di
hypervisor-modules-5.4.0-4-powerpc64le-di
i2c-modules-5.4.0-4-4kc-malta-di
i2c-modules-5.4.0-4-5kc-malta-di
i2c-modules-5.4.0-4-686-di
i2c-modules-5.4.0-4-686-pae-di
i2c-modules-5.4.0-4-alpha-generic-di
i2c-modules-5.4.0-4-amd64-di
i2c-modules-5.4.0-4-arm64-di
i2c-modules-5.4.0-4-armmp-di
i2c-modules-5.4.0-4-itanium-di
i2c-modules-5.4.0-4-powerpc64-di
i2c-modules-5.4.0-4-powerpc64le-di
i2c-modules-5.4.0-4-riscv64-di
i2c-modules-5.4.0-4-sh7751r-di
i2c-modules-5.4.0-4-sparc64-di
ide-core-modules-5.4.0-4-itanium-di
ide-core-modules-5.4.0-4-m68k-di
ide-modules-5.4.0-4-itanium-di
ide-modules-5.4.0-4-m68k-di
input-modules-5.4.0-4-4kc-malta-di
input-modules-5.4.0-4-5kc-malta-di
input-modules-5.4.0-4-686-di
input-modules-5.4.0-4-686-pae-di
input-modules-5.4.0-4-alpha-generic-di
input-modules-5.4.0-4-amd64-di
input-modules-5.4.0-4-arm64-di
input-modules-5.4.0-4-armmp-di
input-modules-5.4.0-4-itanium-di
input-modules-5.4.0-4-loongson-3-di
input-modules-5.4.0-4-marvell-di
input-modules-5.4.0-4-octeon-di
input-modules-5.4.0-4-parisc-di
input-modules-5.4.0-4-parisc64-di
input-modules-5.4.0-4-powerpc-di
input-modules-5.4.0-4-powerpc64-di
input-modules-5.4.0-4-powerpc64le-di
input-modules-5.4.0-4-riscv64-di
input-modules-5.4.0-4-sparc64-di
ipv6-modules-5.4.0-4-marvell-di
isofs-modules-5.4.0-4-4kc-malta-di
isofs-modules-5.4.0-4-5kc-malta-di
isofs-modules-5.4.0-4-686-di
isofs-modules-5.4.0-4-686-pae-di
isofs-modules-5.4.0-4-alpha-generic-di
isofs-modules-5.4.0-4-amd64-di
isofs-modules-5.4.0-4-arm64-di
isofs-modules-5.4.0-4-armmp-di
isofs-modules-5.4.0-4-itanium-di
isofs-modules-5.4.0-4-loongson-3-di
isofs-modules-5.4.0-4-m68k-di
isofs-modules-5.4.0-4-marvell-di
isofs-modules-5.4.0-4-mips32r6-di
isofs-modules-5.4.0-4-mips32r6el-di
isofs-modules-5.4.0-4-mips64r6-di
isofs-modules-5.4.0-4-mips64r6el-di
isofs-modules-5.4.0-4-octeon-di
isofs-modules-5.4.0-4-parisc-di
isofs-modules-5.4.0-4-parisc64-di
isofs-modules-5.4.0-4-powerpc-di
isofs-modules-5.4.0-4-powerpc64-di
isofs-modules-5.4.0-4-powerpc64le-di
isofs-modules-5.4.0-4-riscv64-di
isofs-modules-5.4.0-4-s390x-di
isofs-modules-5.4.0-4-sh7751r-di
isofs-modules-5.4.0-4-sh7785lcr-di
isofs-modules-5.4.0-4-sparc64-di
jffs2-modules-5.4.0-4-marvell-di
jfs-modules-5.4.0-4-4kc-malta-di
jfs-modules-5.4.0-4-5kc-malta-di
jfs-modules-5.4.0-4-686-di
jfs-modules-5.4.0-4-686-pae-di
jfs-modules-5.4.0-4-alpha-generic-di
jfs-modules-5.4.0-4-amd64-di
jfs-modules-5.4.0-4-arm64-di
jfs-modules-5.4.0-4-armmp-di
jfs-modules-5.4.0-4-itanium-di
jfs-modules-5.4.0-4-loongson-3-di
jfs-modules-5.4.0-4-marvell-di
jfs-modules-5.4.0-4-mips32r6-di
jfs-modules-5.4.0-4-mips32r6el-di
jfs-modules-5.4.0-4-mips64r6-di
jfs-modules-5.4.0-4-mips64r6el-di
jfs-modules-5.4.0-4-octeon-di
jfs-modules-5.4.0-4-parisc-di
jfs-modules-5.4.0-4-parisc64-di
jfs-modules-5.4.0-4-powerpc-di
jfs-modules-5.4.0-4-powerpc64-di
jfs-modules-5.4.0-4-powerpc64le-di
jfs-modules-5.4.0-4-riscv64-di
jfs-modules-5.4.0-4-sh7751r-di
jfs-modules-5.4.0-4-sh7785lcr-di
jfs-modules-5.4.0-4-sparc64-di
kernel-image-5.4.0-4-4kc-malta-di
kernel-image-5.4.0-4-5kc-malta-di
kernel-image-5.4.0-4-686-di
kernel-image-5.4.0-4-686-pae-di
kernel-image-5.4.0-4-alpha-generic-di
kernel-image-5.4.0-4-amd64-di
kernel-image-5.4.0-4-arm64-di
kernel-image-5.4.0-4-armmp-di
kernel-image-5.4.0-4-itanium-di
kernel-image-5.4.0-4-loongson-3-di
kernel-image-5.4.0-4-m68k-di
kernel-image-5.4.0-4-marvell-di
kernel-image-5.4.0-4-mips32r6-di
kernel-image-5.4.0-4-mips32r6el-di
kernel-image-5.4.0-4-mips64r6-di
kernel-image-5.4.0-4-mips64r6el-di
kernel-image-5.4.0-4-octeon-di
kernel-image-5.4.0-4-parisc-di
kernel-image-5.4.0-4-parisc64-di
kernel-image-5.4.0-4-powerpc-di
kernel-image-5.4.0-4-powerpc64-di
kernel-image-5.4.0-4-powerpc64le-di
kernel-image-5.4.0-4-riscv64-di
kernel-image-5.4.0-4-s390x-di
kernel-image-5.4.0-4-sh7751r-di
kernel-image-5.4.0-4-sh7785lcr-di
kernel-image-5.4.0-4-sparc64-di
leds-modules-5.4.0-4-arm64-di
leds-modules-5.4.0-4-armmp-di
leds-modules-5.4.0-4-marvell-di
libbpf-dev (2 bugs: 0, 0, 2, 0)
libbpf0
libcpupower-dev
libcpupower2
libtraceevent-dev
libtraceevent1
libtraceevent1-plugin
linux-bootwrapper-5.4.0-4
linux-compiler-gcc-9-arm
linux-compiler-gcc-9-s390
linux-compiler-gcc-9-x86
linux-config-5.4
linux-cpupower (2 bugs: 0, 1, 1, 0)
linux-doc
linux-doc-5.4
linux-headers-4kc-malta
linux-headers-5.4.0-4-4kc-malta
linux-headers-5.4.0-4-5kc-malta
linux-headers-5.4.0-4-686
linux-headers-5.4.0-4-686-pae
linux-headers-5.4.0-4-all
linux-headers-5.4.0-4-all-alpha
linux-headers-5.4.0-4-all-amd64
linux-headers-5.4.0-4-all-arm64
linux-headers-5.4.0-4-all-armel
linux-headers-5.4.0-4-all-armhf
linux-headers-5.4.0-4-all-hppa
linux-headers-5.4.0-4-all-i386
linux-headers-5.4.0-4-all-ia64
linux-headers-5.4.0-4-all-m68k
linux-headers-5.4.0-4-all-mips
linux-headers-5.4.0-4-all-mips64
linux-headers-5.4.0-4-all-mips64el
linux-headers-5.4.0-4-all-mips64r6
linux-headers-5.4.0-4-all-mips64r6el
linux-headers-5.4.0-4-all-mipsel
linux-headers-5.4.0-4-all-mipsr6
linux-headers-5.4.0-4-all-mipsr6el
linux-headers-5.4.0-4-all-powerpc
linux-headers-5.4.0-4-all-ppc64
linux-headers-5.4.0-4-all-ppc64el
linux-headers-5.4.0-4-all-riscv64
linux-headers-5.4.0-4-all-s390x
linux-headers-5.4.0-4-all-sh4
linux-headers-5.4.0-4-all-sparc64
linux-headers-5.4.0-4-alpha-generic
linux-headers-5.4.0-4-alpha-smp
linux-headers-5.4.0-4-amd64
linux-headers-5.4.0-4-arm64
linux-headers-5.4.0-4-armmp
linux-headers-5.4.0-4-armmp-lpae
linux-headers-5.4.0-4-cloud-amd64
linux-headers-5.4.0-4-common
linux-headers-5.4.0-4-common-rt
linux-headers-5.4.0-4-itanium
linux-headers-5.4.0-4-loongson-3
linux-headers-5.4.0-4-m68k
linux-headers-5.4.0-4-marvell
linux-headers-5.4.0-4-mckinley
linux-headers-5.4.0-4-mips32r6
linux-headers-5.4.0-4-mips32r6el
linux-headers-5.4.0-4-mips64r6
linux-headers-5.4.0-4-mips64r6el
linux-headers-5.4.0-4-octeon
linux-headers-5.4.0-4-parisc
linux-headers-5.4.0-4-parisc64
linux-headers-5.4.0-4-powerpc
linux-headers-5.4.0-4-powerpc-smp
linux-headers-5.4.0-4-powerpc64
linux-headers-5.4.0-4-powerpc64le
linux-headers-5.4.0-4-riscv64
linux-headers-5.4.0-4-rpi
linux-headers-5.4.0-4-rt-686-pae
linux-headers-5.4.0-4-rt-amd64
linux-headers-5.4.0-4-rt-arm64
linux-headers-5.4.0-4-rt-armmp
linux-headers-5.4.0-4-s390x
linux-headers-5.4.0-4-sh7751r
linux-headers-5.4.0-4-sh7785lcr
linux-headers-5.4.0-4-sparc64
linux-headers-5.4.0-4-sparc64-smp
linux-headers-5kc-malta
linux-headers-686
linux-headers-686-pae
linux-headers-alpha-generic
linux-headers-alpha-smp
linux-headers-amd64
linux-headers-arm64
linux-headers-armmp
linux-headers-armmp-lpae
linux-headers-cloud-amd64
linux-headers-itanium
linux-headers-loongson-3
linux-headers-m68k
linux-headers-marvell
linux-headers-mckinley
linux-headers-mips32r6
linux-headers-mips32r6el
linux-headers-mips64r6
linux-headers-mips64r6el
linux-headers-octeon
linux-headers-parisc
linux-headers-parisc64
linux-headers-powerpc
linux-headers-powerpc-smp
linux-headers-powerpc64
linux-headers-powerpc64le
linux-headers-riscv64
linux-headers-rpi
linux-headers-rt-686-pae
linux-headers-rt-amd64
linux-headers-rt-arm64
linux-headers-rt-armmp
linux-headers-s390x
linux-headers-sh7751r
linux-headers-sh7785lcr
linux-headers-sparc64
linux-headers-sparc64-smp
linux-image-4kc-malta
linux-image-4kc-malta-dbg
linux-image-5.4.0-4-4kc-malta
linux-image-5.4.0-4-4kc-malta-dbg
linux-image-5.4.0-4-5kc-malta
linux-image-5.4.0-4-5kc-malta-dbg
linux-image-5.4.0-4-686-dbg
linux-image-5.4.0-4-686-pae-dbg
linux-image-5.4.0-4-686-pae-unsigned
linux-image-5.4.0-4-686-unsigned
linux-image-5.4.0-4-alpha-generic
linux-image-5.4.0-4-alpha-generic-dbg
linux-image-5.4.0-4-alpha-smp
linux-image-5.4.0-4-alpha-smp-dbg
linux-image-5.4.0-4-amd64-dbg
linux-image-5.4.0-4-amd64-unsigned
linux-image-5.4.0-4-arm64-dbg
linux-image-5.4.0-4-arm64-unsigned
linux-image-5.4.0-4-armmp
linux-image-5.4.0-4-armmp-dbg
linux-image-5.4.0-4-armmp-lpae
linux-image-5.4.0-4-armmp-lpae-dbg
linux-image-5.4.0-4-cloud-amd64-dbg
linux-image-5.4.0-4-cloud-amd64-unsigned
linux-image-5.4.0-4-itanium
linux-image-5.4.0-4-itanium-dbg
linux-image-5.4.0-4-loongson-3
linux-image-5.4.0-4-loongson-3-dbg
linux-image-5.4.0-4-m68k
linux-image-5.4.0-4-m68k-dbg
linux-image-5.4.0-4-marvell
linux-image-5.4.0-4-marvell-dbg
linux-image-5.4.0-4-mckinley
linux-image-5.4.0-4-mckinley-dbg
linux-image-5.4.0-4-mips32r6
linux-image-5.4.0-4-mips32r6-dbg
linux-image-5.4.0-4-mips32r6el
linux-image-5.4.0-4-mips32r6el-dbg
linux-image-5.4.0-4-mips64r6
linux-image-5.4.0-4-mips64r6-dbg
linux-image-5.4.0-4-mips64r6el
linux-image-5.4.0-4-mips64r6el-dbg
linux-image-5.4.0-4-octeon
linux-image-5.4.0-4-octeon-dbg
linux-image-5.4.0-4-parisc
linux-image-5.4.0-4-parisc64
linux-image-5.4.0-4-powerpc
linux-image-5.4.0-4-powerpc-dbg
linux-image-5.4.0-4-powerpc-smp
linux-image-5.4.0-4-powerpc-smp-dbg
linux-image-5.4.0-4-powerpc64
linux-image-5.4.0-4-powerpc64-dbg
linux-image-5.4.0-4-powerpc64le
linux-image-5.4.0-4-powerpc64le-dbg
linux-image-5.4.0-4-riscv64
linux-image-5.4.0-4-riscv64-dbg
linux-image-5.4.0-4-rpi
linux-image-5.4.0-4-rpi-dbg
linux-image-5.4.0-4-rt-686-pae-dbg
linux-image-5.4.0-4-rt-686-pae-unsigned
linux-image-5.4.0-4-rt-amd64-dbg
linux-image-5.4.0-4-rt-amd64-unsigned
linux-image-5.4.0-4-rt-arm64-dbg
linux-image-5.4.0-4-rt-arm64-unsigned
linux-image-5.4.0-4-rt-armmp
linux-image-5.4.0-4-rt-armmp-dbg
linux-image-5.4.0-4-s390x
linux-image-5.4.0-4-s390x-dbg
linux-image-5.4.0-4-sh7751r
linux-image-5.4.0-4-sh7751r-dbg
linux-image-5.4.0-4-sh7785lcr
linux-image-5.4.0-4-sh7785lcr-dbg
linux-image-5.4.0-4-sparc64
linux-image-5.4.0-4-sparc64-dbg
linux-image-5.4.0-4-sparc64-smp
linux-image-5.4.0-4-sparc64-smp-dbg
linux-image-5kc-malta
linux-image-5kc-malta-dbg
linux-image-686-dbg
linux-image-686-pae-dbg
linux-image-alpha-generic
linux-image-alpha-generic-dbg
linux-image-alpha-smp
linux-image-alpha-smp-dbg
linux-image-amd64-dbg
linux-image-amd64-signed-template
linux-image-arm64-dbg
linux-image-arm64-signed-template
linux-image-armmp
linux-image-armmp-dbg
linux-image-armmp-lpae
linux-image-armmp-lpae-dbg
linux-image-cloud-amd64-dbg
linux-image-i386-signed-template
linux-image-itanium
linux-image-itanium-dbg
linux-image-loongson-3
linux-image-loongson-3-dbg
linux-image-m68k
linux-image-m68k-dbg
linux-image-marvell
linux-image-marvell-dbg
linux-image-mckinley
linux-image-mckinley-dbg
linux-image-mips32r6
linux-image-mips32r6-dbg
linux-image-mips32r6el
linux-image-mips32r6el-dbg
linux-image-mips64r6
linux-image-mips64r6-dbg
linux-image-mips64r6el
linux-image-mips64r6el-dbg
linux-image-octeon
linux-image-octeon-dbg
linux-image-parisc
linux-image-parisc64
linux-image-powerpc
linux-image-powerpc-dbg
linux-image-powerpc-smp
linux-image-powerpc-smp-dbg
linux-image-powerpc64
linux-image-powerpc64-dbg
linux-image-powerpc64le
linux-image-powerpc64le-dbg
linux-image-riscv64
linux-image-riscv64-dbg
linux-image-rpi
linux-image-rpi-dbg
linux-image-rt-686-pae-dbg
linux-image-rt-amd64-dbg
linux-image-rt-arm64-dbg
linux-image-rt-armmp
linux-image-rt-armmp-dbg
linux-image-s390x
linux-image-s390x-dbg
linux-image-sh7751r
linux-image-sh7751r-dbg
linux-image-sh7785lcr
linux-image-sh7785lcr-dbg
linux-image-sparc64
linux-image-sparc64-dbg
linux-image-sparc64-smp
linux-image-sparc64-smp-dbg
linux-kbuild-5.4
linux-libc-dev (10 bugs: 0, 7, 3, 0)
linux-perf
linux-perf-5.4
linux-source (1 bugs: 0, 0, 1, 0)
linux-source-5.4 (1 bugs: 0, 1, 0, 0)
linux-support-5.4.0-4
loop-modules-5.4.0-4-4kc-malta-di
loop-modules-5.4.0-4-5kc-malta-di
loop-modules-5.4.0-4-686-di
loop-modules-5.4.0-4-686-pae-di
loop-modules-5.4.0-4-alpha-generic-di
loop-modules-5.4.0-4-amd64-di
loop-modules-5.4.0-4-arm64-di
loop-modules-5.4.0-4-armmp-di
loop-modules-5.4.0-4-itanium-di
loop-modules-5.4.0-4-loongson-3-di
loop-modules-5.4.0-4-m68k-di
loop-modules-5.4.0-4-marvell-di
loop-modules-5.4.0-4-mips32r6-di
loop-modules-5.4.0-4-mips32r6el-di
loop-modules-5.4.0-4-mips64r6-di
loop-modules-5.4.0-4-mips64r6el-di
loop-modules-5.4.0-4-octeon-di
loop-modules-5.4.0-4-parisc-di
loop-modules-5.4.0-4-parisc64-di
loop-modules-5.4.0-4-powerpc-di
loop-modules-5.4.0-4-powerpc64-di
loop-modules-5.4.0-4-powerpc64le-di
loop-modules-5.4.0-4-riscv64-di
loop-modules-5.4.0-4-s390x-di
loop-modules-5.4.0-4-sh7751r-di
loop-modules-5.4.0-4-sh7785lcr-di
md-modules-5.4.0-4-4kc-malta-di
md-modules-5.4.0-4-5kc-malta-di
md-modules-5.4.0-4-686-di
md-modules-5.4.0-4-686-pae-di
md-modules-5.4.0-4-alpha-generic-di
md-modules-5.4.0-4-amd64-di
md-modules-5.4.0-4-arm64-di
md-modules-5.4.0-4-armmp-di
md-modules-5.4.0-4-itanium-di
md-modules-5.4.0-4-loongson-3-di
md-modules-5.4.0-4-m68k-di
md-modules-5.4.0-4-marvell-di
md-modules-5.4.0-4-mips32r6-di
md-modules-5.4.0-4-mips32r6el-di
md-modules-5.4.0-4-mips64r6-di
md-modules-5.4.0-4-mips64r6el-di
md-modules-5.4.0-4-octeon-di
md-modules-5.4.0-4-parisc-di
md-modules-5.4.0-4-parisc64-di
md-modules-5.4.0-4-powerpc-di
md-modules-5.4.0-4-powerpc64-di
md-modules-5.4.0-4-powerpc64le-di
md-modules-5.4.0-4-riscv64-di
md-modules-5.4.0-4-s390x-di
md-modules-5.4.0-4-sh7751r-di
md-modules-5.4.0-4-sh7785lcr-di
md-modules-5.4.0-4-sparc64-di
minix-modules-5.4.0-4-4kc-malta-di
minix-modules-5.4.0-4-5kc-malta-di
minix-modules-5.4.0-4-loongson-3-di
minix-modules-5.4.0-4-marvell-di
minix-modules-5.4.0-4-octeon-di
minix-modules-5.4.0-4-sh7751r-di
minix-modules-5.4.0-4-sh7785lcr-di
mmc-core-modules-5.4.0-4-4kc-malta-di
mmc-core-modules-5.4.0-4-5kc-malta-di
mmc-core-modules-5.4.0-4-686-di
mmc-core-modules-5.4.0-4-686-pae-di
mmc-core-modules-5.4.0-4-amd64-di
mmc-core-modules-5.4.0-4-marvell-di
mmc-core-modules-5.4.0-4-powerpc-di
mmc-core-modules-5.4.0-4-powerpc64-di
mmc-core-modules-5.4.0-4-riscv64-di
mmc-modules-5.4.0-4-4kc-malta-di
mmc-modules-5.4.0-4-5kc-malta-di
mmc-modules-5.4.0-4-686-di
mmc-modules-5.4.0-4-686-pae-di
mmc-modules-5.4.0-4-amd64-di
mmc-modules-5.4.0-4-arm64-di
mmc-modules-5.4.0-4-armmp-di
mmc-modules-5.4.0-4-marvell-di
mmc-modules-5.4.0-4-riscv64-di
mouse-modules-5.4.0-4-4kc-malta-di
mouse-modules-5.4.0-4-5kc-malta-di
mouse-modules-5.4.0-4-686-di
mouse-modules-5.4.0-4-686-pae-di
mouse-modules-5.4.0-4-alpha-generic-di
mouse-modules-5.4.0-4-amd64-di
mouse-modules-5.4.0-4-itanium-di
mouse-modules-5.4.0-4-marvell-di
mouse-modules-5.4.0-4-parisc-di
mouse-modules-5.4.0-4-parisc64-di
mouse-modules-5.4.0-4-powerpc-di
mouse-modules-5.4.0-4-powerpc64-di
mouse-modules-5.4.0-4-powerpc64le-di
mtd-core-modules-5.4.0-4-4kc-malta-di
mtd-core-modules-5.4.0-4-5kc-malta-di
mtd-core-modules-5.4.0-4-686-di
mtd-core-modules-5.4.0-4-686-pae-di
mtd-core-modules-5.4.0-4-amd64-di
mtd-core-modules-5.4.0-4-arm64-di
mtd-core-modules-5.4.0-4-itanium-di
mtd-core-modules-5.4.0-4-loongson-3-di
mtd-core-modules-5.4.0-4-marvell-di
mtd-core-modules-5.4.0-4-powerpc64-di
mtd-core-modules-5.4.0-4-powerpc64le-di
mtd-core-modules-5.4.0-4-riscv64-di
mtd-core-modules-5.4.0-4-s390x-di
mtd-modules-5.4.0-4-armmp-di
mtd-modules-5.4.0-4-marvell-di
mtd-modules-5.4.0-4-riscv64-di
multipath-modules-5.4.0-4-4kc-malta-di
multipath-modules-5.4.0-4-5kc-malta-di
multipath-modules-5.4.0-4-686-di
multipath-modules-5.4.0-4-686-pae-di
multipath-modules-5.4.0-4-alpha-generic-di
multipath-modules-5.4.0-4-amd64-di
multipath-modules-5.4.0-4-arm64-di
multipath-modules-5.4.0-4-armmp-di
multipath-modules-5.4.0-4-itanium-di
multipath-modules-5.4.0-4-loongson-3-di
multipath-modules-5.4.0-4-marvell-di
multipath-modules-5.4.0-4-mips32r6-di
multipath-modules-5.4.0-4-mips32r6el-di
multipath-modules-5.4.0-4-mips64r6-di
multipath-modules-5.4.0-4-mips64r6el-di
multipath-modules-5.4.0-4-octeon-di
multipath-modules-5.4.0-4-parisc-di
multipath-modules-5.4.0-4-parisc64-di
multipath-modules-5.4.0-4-powerpc-di
multipath-modules-5.4.0-4-powerpc64-di
multipath-modules-5.4.0-4-powerpc64le-di
multipath-modules-5.4.0-4-riscv64-di
multipath-modules-5.4.0-4-s390x-di
multipath-modules-5.4.0-4-sh7751r-di
multipath-modules-5.4.0-4-sh7785lcr-di
multipath-modules-5.4.0-4-sparc64-di
nbd-modules-5.4.0-4-4kc-malta-di
nbd-modules-5.4.0-4-5kc-malta-di
nbd-modules-5.4.0-4-686-di
nbd-modules-5.4.0-4-686-pae-di
nbd-modules-5.4.0-4-alpha-generic-di
nbd-modules-5.4.0-4-amd64-di
nbd-modules-5.4.0-4-arm64-di
nbd-modules-5.4.0-4-armmp-di
nbd-modules-5.4.0-4-itanium-di
nbd-modules-5.4.0-4-loongson-3-di
nbd-modules-5.4.0-4-m68k-di
nbd-modules-5.4.0-4-marvell-di
nbd-modules-5.4.0-4-mips32r6-di
nbd-modules-5.4.0-4-mips32r6el-di
nbd-modules-5.4.0-4-mips64r6-di
nbd-modules-5.4.0-4-mips64r6el-di
nbd-modules-5.4.0-4-octeon-di
nbd-modules-5.4.0-4-parisc-di
nbd-modules-5.4.0-4-parisc64-di
nbd-modules-5.4.0-4-powerpc-di
nbd-modules-5.4.0-4-powerpc64-di
nbd-modules-5.4.0-4-powerpc64le-di
nbd-modules-5.4.0-4-riscv64-di
nbd-modules-5.4.0-4-s390x-di
nbd-modules-5.4.0-4-sh7751r-di
nbd-modules-5.4.0-4-sh7785lcr-di
nbd-modules-5.4.0-4-sparc64-di
nfs-modules-5.4.0-4-loongson-3-di
nic-modules-5.4.0-4-4kc-malta-di
nic-modules-5.4.0-4-5kc-malta-di
nic-modules-5.4.0-4-686-di
nic-modules-5.4.0-4-686-pae-di
nic-modules-5.4.0-4-alpha-generic-di
nic-modules-5.4.0-4-amd64-di
nic-modules-5.4.0-4-arm64-di
nic-modules-5.4.0-4-armmp-di
nic-modules-5.4.0-4-itanium-di
nic-modules-5.4.0-4-loongson-3-di
nic-modules-5.4.0-4-m68k-di
nic-modules-5.4.0-4-marvell-di
nic-modules-5.4.0-4-octeon-di
nic-modules-5.4.0-4-parisc-di
nic-modules-5.4.0-4-parisc64-di
nic-modules-5.4.0-4-powerpc-di
nic-modules-5.4.0-4-powerpc64-di
nic-modules-5.4.0-4-powerpc64le-di
nic-modules-5.4.0-4-riscv64-di
nic-modules-5.4.0-4-s390x-di
nic-modules-5.4.0-4-sh7751r-di
nic-modules-5.4.0-4-sh7785lcr-di
nic-modules-5.4.0-4-sparc64-di
nic-pcmcia-modules-5.4.0-4-686-di
nic-pcmcia-modules-5.4.0-4-686-pae-di
nic-pcmcia-modules-5.4.0-4-alpha-generic-di
nic-pcmcia-modules-5.4.0-4-amd64-di
nic-pcmcia-modules-5.4.0-4-powerpc-di
nic-pcmcia-modules-5.4.0-4-powerpc64-di
nic-shared-modules-5.4.0-4-4kc-malta-di
nic-shared-modules-5.4.0-4-5kc-malta-di
nic-shared-modules-5.4.0-4-686-di
nic-shared-modules-5.4.0-4-686-pae-di
nic-shared-modules-5.4.0-4-alpha-generic-di
nic-shared-modules-5.4.0-4-amd64-di
nic-shared-modules-5.4.0-4-arm64-di
nic-shared-modules-5.4.0-4-armmp-di
nic-shared-modules-5.4.0-4-itanium-di
nic-shared-modules-5.4.0-4-loongson-3-di
nic-shared-modules-5.4.0-4-m68k-di
nic-shared-modules-5.4.0-4-marvell-di
nic-shared-modules-5.4.0-4-mips32r6-di
nic-shared-modules-5.4.0-4-mips32r6el-di
nic-shared-modules-5.4.0-4-mips64r6-di
nic-shared-modules-5.4.0-4-mips64r6el-di
nic-shared-modules-5.4.0-4-octeon-di
nic-shared-modules-5.4.0-4-parisc-di
nic-shared-modules-5.4.0-4-parisc64-di
nic-shared-modules-5.4.0-4-powerpc-di
nic-shared-modules-5.4.0-4-powerpc64-di
nic-shared-modules-5.4.0-4-powerpc64le-di
nic-shared-modules-5.4.0-4-riscv64-di
nic-shared-modules-5.4.0-4-sh7751r-di
nic-shared-modules-5.4.0-4-sh7785lcr-di
nic-shared-modules-5.4.0-4-sparc64-di
nic-usb-modules-5.4.0-4-4kc-malta-di
nic-usb-modules-5.4.0-4-5kc-malta-di
nic-usb-modules-5.4.0-4-686-di
nic-usb-modules-5.4.0-4-686-pae-di
nic-usb-modules-5.4.0-4-alpha-generic-di
nic-usb-modules-5.4.0-4-amd64-di
nic-usb-modules-5.4.0-4-arm64-di
nic-usb-modules-5.4.0-4-armmp-di
nic-usb-modules-5.4.0-4-itanium-di
nic-usb-modules-5.4.0-4-loongson-3-di
nic-usb-modules-5.4.0-4-marvell-di
nic-usb-modules-5.4.0-4-octeon-di
nic-usb-modules-5.4.0-4-parisc-di
nic-usb-modules-5.4.0-4-parisc64-di
nic-usb-modules-5.4.0-4-powerpc-di
nic-usb-modules-5.4.0-4-powerpc64-di
nic-usb-modules-5.4.0-4-powerpc64le-di
nic-usb-modules-5.4.0-4-riscv64-di
nic-usb-modules-5.4.0-4-sh7751r-di
nic-usb-modules-5.4.0-4-sh7785lcr-di
nic-usb-modules-5.4.0-4-sparc64-di
nic-wireless-modules-5.4.0-4-4kc-malta-di
nic-wireless-modules-5.4.0-4-5kc-malta-di
nic-wireless-modules-5.4.0-4-686-di
nic-wireless-modules-5.4.0-4-686-pae-di
nic-wireless-modules-5.4.0-4-alpha-generic-di
nic-wireless-modules-5.4.0-4-amd64-di
nic-wireless-modules-5.4.0-4-arm64-di
nic-wireless-modules-5.4.0-4-armmp-di
nic-wireless-modules-5.4.0-4-loongson-3-di
nic-wireless-modules-5.4.0-4-octeon-di
nic-wireless-modules-5.4.0-4-powerpc-di
nic-wireless-modules-5.4.0-4-powerpc64-di
nic-wireless-modules-5.4.0-4-powerpc64le-di
nic-wireless-modules-5.4.0-4-riscv64-di
pata-modules-5.4.0-4-4kc-malta-di
pata-modules-5.4.0-4-5kc-malta-di
pata-modules-5.4.0-4-686-di
pata-modules-5.4.0-4-686-pae-di
pata-modules-5.4.0-4-alpha-generic-di
pata-modules-5.4.0-4-amd64-di
pata-modules-5.4.0-4-armmp-di
pata-modules-5.4.0-4-itanium-di
pata-modules-5.4.0-4-loongson-3-di
pata-modules-5.4.0-4-m68k-di
pata-modules-5.4.0-4-octeon-di
pata-modules-5.4.0-4-parisc-di
pata-modules-5.4.0-4-parisc64-di
pata-modules-5.4.0-4-powerpc-di
pata-modules-5.4.0-4-powerpc64-di
pata-modules-5.4.0-4-riscv64-di
pata-modules-5.4.0-4-sh7751r-di
pata-modules-5.4.0-4-sh7785lcr-di
pata-modules-5.4.0-4-sparc64-di
pcmcia-modules-5.4.0-4-686-di
pcmcia-modules-5.4.0-4-686-pae-di
pcmcia-modules-5.4.0-4-alpha-generic-di
pcmcia-modules-5.4.0-4-amd64-di
pcmcia-modules-5.4.0-4-itanium-di
pcmcia-modules-5.4.0-4-powerpc-di
pcmcia-modules-5.4.0-4-powerpc64-di
pcmcia-storage-modules-5.4.0-4-686-di
pcmcia-storage-modules-5.4.0-4-686-pae-di
pcmcia-storage-modules-5.4.0-4-amd64-di
pcmcia-storage-modules-5.4.0-4-powerpc-di
pcmcia-storage-modules-5.4.0-4-powerpc64-di
ppp-modules-5.4.0-4-4kc-malta-di
ppp-modules-5.4.0-4-5kc-malta-di
ppp-modules-5.4.0-4-686-di
ppp-modules-5.4.0-4-686-pae-di
ppp-modules-5.4.0-4-alpha-generic-di
ppp-modules-5.4.0-4-amd64-di
ppp-modules-5.4.0-4-arm64-di
ppp-modules-5.4.0-4-armmp-di
ppp-modules-5.4.0-4-itanium-di
ppp-modules-5.4.0-4-loongson-3-di
ppp-modules-5.4.0-4-m68k-di
ppp-modules-5.4.0-4-marvell-di
ppp-modules-5.4.0-4-octeon-di
ppp-modules-5.4.0-4-parisc-di
ppp-modules-5.4.0-4-parisc64-di
ppp-modules-5.4.0-4-powerpc-di
ppp-modules-5.4.0-4-powerpc64-di
ppp-modules-5.4.0-4-powerpc64le-di
ppp-modules-5.4.0-4-riscv64-di
ppp-modules-5.4.0-4-sh7751r-di
ppp-modules-5.4.0-4-sh7785lcr-di
ppp-modules-5.4.0-4-sparc64-di
rfkill-modules-5.4.0-4-686-di
rfkill-modules-5.4.0-4-686-pae-di
rfkill-modules-5.4.0-4-amd64-di
rtc-modules-5.4.0-4-octeon-di
sata-modules-5.4.0-4-4kc-malta-di
sata-modules-5.4.0-4-5kc-malta-di
sata-modules-5.4.0-4-686-di
sata-modules-5.4.0-4-686-pae-di
sata-modules-5.4.0-4-alpha-generic-di
sata-modules-5.4.0-4-amd64-di
sata-modules-5.4.0-4-arm64-di
sata-modules-5.4.0-4-armmp-di
sata-modules-5.4.0-4-itanium-di
sata-modules-5.4.0-4-loongson-3-di
sata-modules-5.4.0-4-marvell-di
sata-modules-5.4.0-4-octeon-di
sata-modules-5.4.0-4-parisc-di
sata-modules-5.4.0-4-parisc64-di
sata-modules-5.4.0-4-powerpc-di
sata-modules-5.4.0-4-powerpc64-di
sata-modules-5.4.0-4-powerpc64le-di
sata-modules-5.4.0-4-riscv64-di
sata-modules-5.4.0-4-sh7751r-di
sata-modules-5.4.0-4-sh7785lcr-di
sata-modules-5.4.0-4-sparc64-di
scsi-core-modules-5.4.0-4-4kc-malta-di
scsi-core-modules-5.4.0-4-5kc-malta-di
scsi-core-modules-5.4.0-4-686-di
scsi-core-modules-5.4.0-4-686-pae-di
scsi-core-modules-5.4.0-4-alpha-generic-di
scsi-core-modules-5.4.0-4-amd64-di
scsi-core-modules-5.4.0-4-arm64-di
scsi-core-modules-5.4.0-4-armmp-di
scsi-core-modules-5.4.0-4-itanium-di
scsi-core-modules-5.4.0-4-loongson-3-di
scsi-core-modules-5.4.0-4-m68k-di
scsi-core-modules-5.4.0-4-marvell-di
scsi-core-modules-5.4.0-4-octeon-di
scsi-core-modules-5.4.0-4-parisc-di
scsi-core-modules-5.4.0-4-parisc64-di
scsi-core-modules-5.4.0-4-powerpc-di
scsi-core-modules-5.4.0-4-powerpc64-di
scsi-core-modules-5.4.0-4-powerpc64le-di
scsi-core-modules-5.4.0-4-riscv64-di
scsi-core-modules-5.4.0-4-s390x-di
scsi-core-modules-5.4.0-4-sparc64-di
scsi-modules-5.4.0-4-4kc-malta-di
scsi-modules-5.4.0-4-5kc-malta-di
scsi-modules-5.4.0-4-686-di
scsi-modules-5.4.0-4-686-pae-di
scsi-modules-5.4.0-4-alpha-generic-di
scsi-modules-5.4.0-4-amd64-di
scsi-modules-5.4.0-4-arm64-di
scsi-modules-5.4.0-4-armmp-di
scsi-modules-5.4.0-4-itanium-di
scsi-modules-5.4.0-4-loongson-3-di
scsi-modules-5.4.0-4-m68k-di
scsi-modules-5.4.0-4-octeon-di
scsi-modules-5.4.0-4-parisc-di
scsi-modules-5.4.0-4-parisc64-di
scsi-modules-5.4.0-4-powerpc-di
scsi-modules-5.4.0-4-powerpc64-di
scsi-modules-5.4.0-4-powerpc64le-di
scsi-modules-5.4.0-4-riscv64-di
scsi-modules-5.4.0-4-s390x-di
scsi-modules-5.4.0-4-sparc64-di
scsi-nic-modules-5.4.0-4-4kc-malta-di
scsi-nic-modules-5.4.0-4-5kc-malta-di
scsi-nic-modules-5.4.0-4-686-di
scsi-nic-modules-5.4.0-4-686-pae-di
scsi-nic-modules-5.4.0-4-alpha-generic-di
scsi-nic-modules-5.4.0-4-amd64-di
scsi-nic-modules-5.4.0-4-arm64-di
scsi-nic-modules-5.4.0-4-armmp-di
scsi-nic-modules-5.4.0-4-itanium-di
scsi-nic-modules-5.4.0-4-loongson-3-di
scsi-nic-modules-5.4.0-4-octeon-di
scsi-nic-modules-5.4.0-4-powerpc-di
scsi-nic-modules-5.4.0-4-powerpc64-di
scsi-nic-modules-5.4.0-4-powerpc64le-di
scsi-nic-modules-5.4.0-4-riscv64-di
serial-modules-5.4.0-4-686-di
serial-modules-5.4.0-4-686-pae-di
serial-modules-5.4.0-4-alpha-generic-di
serial-modules-5.4.0-4-amd64-di
serial-modules-5.4.0-4-itanium-di
serial-modules-5.4.0-4-parisc-di
serial-modules-5.4.0-4-parisc64-di
serial-modules-5.4.0-4-powerpc-di
serial-modules-5.4.0-4-powerpc64-di
serial-modules-5.4.0-4-powerpc64le-di
sound-modules-5.4.0-4-4kc-malta-di
sound-modules-5.4.0-4-5kc-malta-di
sound-modules-5.4.0-4-686-di
sound-modules-5.4.0-4-686-pae-di
sound-modules-5.4.0-4-amd64-di
sound-modules-5.4.0-4-loongson-3-di
sound-modules-5.4.0-4-octeon-di
sound-modules-5.4.0-4-sh7751r-di
sound-modules-5.4.0-4-sh7785lcr-di
speakup-modules-5.4.0-4-686-di
speakup-modules-5.4.0-4-686-pae-di
speakup-modules-5.4.0-4-amd64-di
speakup-modules-5.4.0-4-loongson-3-di
speakup-modules-5.4.0-4-sh7751r-di
speakup-modules-5.4.0-4-sh7785lcr-di
squashfs-modules-5.4.0-4-4kc-malta-di
squashfs-modules-5.4.0-4-5kc-malta-di
squashfs-modules-5.4.0-4-686-di
squashfs-modules-5.4.0-4-686-pae-di
squashfs-modules-5.4.0-4-alpha-generic-di
squashfs-modules-5.4.0-4-amd64-di
squashfs-modules-5.4.0-4-arm64-di
squashfs-modules-5.4.0-4-armmp-di
squashfs-modules-5.4.0-4-itanium-di
squashfs-modules-5.4.0-4-loongson-3-di
squashfs-modules-5.4.0-4-m68k-di
squashfs-modules-5.4.0-4-marvell-di
squashfs-modules-5.4.0-4-mips32r6-di
squashfs-modules-5.4.0-4-mips32r6el-di
squashfs-modules-5.4.0-4-mips64r6-di
squashfs-modules-5.4.0-4-mips64r6el-di
squashfs-modules-5.4.0-4-octeon-di
squashfs-modules-5.4.0-4-parisc-di
squashfs-modules-5.4.0-4-parisc64-di
squashfs-modules-5.4.0-4-powerpc-di
squashfs-modules-5.4.0-4-powerpc64-di
squashfs-modules-5.4.0-4-powerpc64le-di
squashfs-modules-5.4.0-4-riscv64-di
squashfs-modules-5.4.0-4-sh7751r-di
squashfs-modules-5.4.0-4-sh7785lcr-di
squashfs-modules-5.4.0-4-sparc64-di
srm-modules-5.4.0-4-alpha-generic-di
udf-modules-5.4.0-4-4kc-malta-di
udf-modules-5.4.0-4-5kc-malta-di
udf-modules-5.4.0-4-686-di
udf-modules-5.4.0-4-686-pae-di
udf-modules-5.4.0-4-amd64-di
udf-modules-5.4.0-4-arm64-di
udf-modules-5.4.0-4-armmp-di
udf-modules-5.4.0-4-itanium-di
udf-modules-5.4.0-4-loongson-3-di
udf-modules-5.4.0-4-m68k-di
udf-modules-5.4.0-4-marvell-di
udf-modules-5.4.0-4-mips32r6-di
udf-modules-5.4.0-4-mips32r6el-di
udf-modules-5.4.0-4-mips64r6-di
udf-modules-5.4.0-4-mips64r6el-di
udf-modules-5.4.0-4-octeon-di
udf-modules-5.4.0-4-powerpc-di
udf-modules-5.4.0-4-powerpc64-di
udf-modules-5.4.0-4-powerpc64le-di
udf-modules-5.4.0-4-riscv64-di
udf-modules-5.4.0-4-s390x-di
udf-modules-5.4.0-4-sh7751r-di
udf-modules-5.4.0-4-sh7785lcr-di
udf-modules-5.4.0-4-sparc64-di
ufs-modules-5.4.0-4-sparc64-di
uinput-modules-5.4.0-4-686-di
uinput-modules-5.4.0-4-686-pae-di
uinput-modules-5.4.0-4-amd64-di
uinput-modules-5.4.0-4-arm64-di
uinput-modules-5.4.0-4-armmp-di
uinput-modules-5.4.0-4-itanium-di
uinput-modules-5.4.0-4-marvell-di
uinput-modules-5.4.0-4-powerpc-di
uinput-modules-5.4.0-4-powerpc64-di
uinput-modules-5.4.0-4-powerpc64le-di
usb-modules-5.4.0-4-4kc-malta-di
usb-modules-5.4.0-4-5kc-malta-di
usb-modules-5.4.0-4-686-di
usb-modules-5.4.0-4-686-pae-di
usb-modules-5.4.0-4-alpha-generic-di
usb-modules-5.4.0-4-amd64-di
usb-modules-5.4.0-4-arm64-di
usb-modules-5.4.0-4-armmp-di
usb-modules-5.4.0-4-itanium-di
usb-modules-5.4.0-4-loongson-3-di
usb-modules-5.4.0-4-marvell-di
usb-modules-5.4.0-4-octeon-di
usb-modules-5.4.0-4-parisc-di
usb-modules-5.4.0-4-parisc64-di
usb-modules-5.4.0-4-powerpc-di
usb-modules-5.4.0-4-powerpc64-di
usb-modules-5.4.0-4-powerpc64le-di
usb-modules-5.4.0-4-riscv64-di
usb-modules-5.4.0-4-sparc64-di
usb-serial-modules-5.4.0-4-4kc-malta-di
usb-serial-modules-5.4.0-4-5kc-malta-di
usb-serial-modules-5.4.0-4-686-di
usb-serial-modules-5.4.0-4-686-pae-di
usb-serial-modules-5.4.0-4-alpha-generic-di
usb-serial-modules-5.4.0-4-amd64-di
usb-serial-modules-5.4.0-4-arm64-di
usb-serial-modules-5.4.0-4-armmp-di
usb-serial-modules-5.4.0-4-itanium-di
usb-serial-modules-5.4.0-4-loongson-3-di
usb-serial-modules-5.4.0-4-marvell-di
usb-serial-modules-5.4.0-4-octeon-di
usb-serial-modules-5.4.0-4-parisc-di
usb-serial-modules-5.4.0-4-parisc64-di
usb-serial-modules-5.4.0-4-powerpc-di
usb-serial-modules-5.4.0-4-powerpc64-di
usb-serial-modules-5.4.0-4-powerpc64le-di
usb-serial-modules-5.4.0-4-riscv64-di
usb-serial-modules-5.4.0-4-sh7751r-di
usb-serial-modules-5.4.0-4-sh7785lcr-di
usb-serial-modules-5.4.0-4-sparc64-di
usb-storage-modules-5.4.0-4-4kc-malta-di
usb-storage-modules-5.4.0-4-5kc-malta-di
usb-storage-modules-5.4.0-4-686-di
usb-storage-modules-5.4.0-4-686-pae-di
usb-storage-modules-5.4.0-4-alpha-generic-di
usb-storage-modules-5.4.0-4-amd64-di
usb-storage-modules-5.4.0-4-arm64-di
usb-storage-modules-5.4.0-4-armmp-di
usb-storage-modules-5.4.0-4-itanium-di
usb-storage-modules-5.4.0-4-loongson-3-di
usb-storage-modules-5.4.0-4-marvell-di
usb-storage-modules-5.4.0-4-octeon-di
usb-storage-modules-5.4.0-4-parisc-di
usb-storage-modules-5.4.0-4-parisc64-di
usb-storage-modules-5.4.0-4-powerpc-di
usb-storage-modules-5.4.0-4-powerpc64-di
usb-storage-modules-5.4.0-4-powerpc64le-di
usb-storage-modules-5.4.0-4-riscv64-di
usb-storage-modules-5.4.0-4-sh7751r-di
usb-storage-modules-5.4.0-4-sparc64-di
usbip (4 bugs: 0, 4, 0, 0)
xfs-modules-5.4.0-4-4kc-malta-di
xfs-modules-5.4.0-4-5kc-malta-di
xfs-modules-5.4.0-4-686-di
xfs-modules-5.4.0-4-686-pae-di
xfs-modules-5.4.0-4-alpha-generic-di
xfs-modules-5.4.0-4-amd64-di
xfs-modules-5.4.0-4-arm64-di
xfs-modules-5.4.0-4-itanium-di
xfs-modules-5.4.0-4-loongson-3-di
xfs-modules-5.4.0-4-mips32r6-di
xfs-modules-5.4.0-4-mips32r6el-di
xfs-modules-5.4.0-4-mips64r6-di
xfs-modules-5.4.0-4-mips64r6el-di
xfs-modules-5.4.0-4-octeon-di
xfs-modules-5.4.0-4-parisc-di
xfs-modules-5.4.0-4-parisc64-di
xfs-modules-5.4.0-4-powerpc-di
xfs-modules-5.4.0-4-powerpc64-di
xfs-modules-5.4.0-4-powerpc64le-di
xfs-modules-5.4.0-4-s390x-di
xfs-modules-5.4.0-4-sh7751r-di
xfs-modules-5.4.0-4-sh7785lcr-di
xfs-modules-5.4.0-4-sparc64-di
zlib-modules-5.4.0-4-4kc-malta-di
zlib-modules-5.4.0-4-5kc-malta-di
zlib-modules-5.4.0-4-alpha-generic-di
zlib-modules-5.4.0-4-armmp-di
zlib-modules-5.4.0-4-loongson-3-di
zlib-modules-5.4.0-4-m68k-di
zlib-modules-5.4.0-4-marvell-di
zlib-modules-5.4.0-4-mips32r6-di
zlib-modules-5.4.0-4-mips32r6el-di
zlib-modules-5.4.0-4-mips64r6-di
zlib-modules-5.4.0-4-mips64r6el-di
zlib-modules-5.4.0-4-octeon-di
zlib-modules-5.4.0-4-parisc-di
zlib-modules-5.4.0-4-parisc64-di
zlib-modules-5.4.0-4-powerpc-di
zlib-modules-5.4.0-4-riscv64-di
zlib-modules-5.4.0-4-s390x-di
zlib-modules-5.4.0-4-sh7751r-di
zlib-modules-5.4.0-4-sh7785lcr-di
zlib-modules-5.4.0-4-sparc64-di

action needed

A new upstream version is available: 5.5.3 high

A new upstream version 5.5.3 is available, you should consider packaging it.

Created: 2020-01-27 Last update: 2020-02-16 16:53

44 security issues in buster high

There are 44 open security issues in buster.

42 important issues:

CVE-2019-5108: An exploitable denial-of-service vulnerability exists in the Linux kernel prior to mainline 5.3. An attacker could exploit this vulnerability by triggering AP to send IAPP location updates for stations before the required authentication process has completed. This could lead to different denial-of-service scenarios, either by causing CAM table attacks, or by leading to traffic flapping if faking already existing clients in other nearby APs of the same wireless infrastructure. An attacker can forge Authentication and Association Request packets to trigger this vulnerability.
CVE-2019-19770: In the Linux kernel 4.19.83, there is a use-after-free (read) in the debugfs_remove function in fs/debugfs/inode.c (which is used to remove a file or directory in debugfs that was previously created with a call to another debugfs function such as debugfs_create_file).
CVE-2019-19082: Memory leaks in *create_resource_pool() functions under drivers/gpu/drm/amd/display/dc in the Linux kernel through 5.3.11 allow attackers to cause a denial of service (memory consumption). This affects the dce120_create_resource_pool() function in drivers/gpu/drm/amd/display/dc/dce120/dce120_resource.c, the dce110_create_resource_pool() function in drivers/gpu/drm/amd/display/dc/dce110/dce110_resource.c, the dce100_create_resource_pool() function in drivers/gpu/drm/amd/display/dc/dce100/dce100_resource.c, the dcn10_create_resource_pool() function in drivers/gpu/drm/amd/display/dc/dcn10/dcn10_resource.c, and the dce112_create_resource_pool() function in drivers/gpu/drm/amd/display/dc/dce112/dce112_resource.c, aka CID-104c307147ad.
CVE-2020-8428: fs/namei.c in the Linux kernel before 5.5 has a may_create_in_sticky use-after-free, which allows local users to cause a denial of service (OOPS) or possibly obtain sensitive information from kernel memory, aka CID-d0cb50185ae9. One attack vector may be an open system call for a UNIX domain socket, if the socket is being moved to a new parent directory and its old parent directory is being removed.
CVE-2020-8649: There is a use-after-free vulnerability in the Linux kernel through 5.5.2 in the vgacon_invert_region function in drivers/video/console/vgacon.c.
CVE-2020-8648: There is a use-after-free vulnerability in the Linux kernel through 5.5.2 in the n_tty_receive_buf_common function in drivers/tty/n_tty.c.
CVE-2020-8647: There is a use-after-free vulnerability in the Linux kernel through 5.5.2 in the vc_do_resize function in drivers/tty/vt/vt.c.
CVE-2019-19318: In the Linux kernel 5.3.11, mounting a crafted btrfs image twice can cause an rwsem_down_write_slowpath use-after-free because (in rwsem_can_spin_on_owner in kernel/locking/rwsem.c) rwsem_owner_flags returns an already freed pointer,
CVE-2019-19319: In the Linux kernel 5.0.21, a setxattr operation, after a mount of a crafted ext4 image, can cause a slab-out-of-bounds write access because of an ext4_xattr_set_entry use-after-free in fs/ext4/xattr.c when a large old_size value is used in a memset call.
CVE-2019-19769: In the Linux kernel 5.3.10, there is a use-after-free (read) in the perf_trace_lock_acquire function (related to include/trace/events/lock.h).
CVE-2019-19768: In the Linux kernel 5.4.0-rc2, there is a use-after-free (read) in the __blk_add_trace function in kernel/trace/blktrace.c (which is used to fill out a blk_io_trace structure and place it in a per-cpu sub-buffer).
CVE-2018-3693: Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a speculative buffer overflow and side-channel analysis.
CVE-2019-19448: In the Linux kernel 5.0.21 and 5.3.11, mounting a crafted btrfs filesystem image, performing some operations, and then making a syncfs system call can lead to a use-after-free in try_merge_free_space in fs/btrfs/free-space-cache.c because the pointer to a left data structure can be the same as the pointer to a right data structure.
CVE-2019-19449: In the Linux kernel 5.0.21, mounting a crafted f2fs filesystem image can lead to slab-out-of-bounds read access in f2fs_build_segment_manager in fs/f2fs/segment.c, related to init_min_max_mtime in fs/f2fs/segment.c (because the second argument to get_seg_entry is not validated).
CVE-2019-19462: relay_open in kernel/relay.c in the Linux kernel through 5.4.1 allows local users to cause a denial of service (such as relay blockage) by triggering a NULL alloc_percpu result.
CVE-2019-18885: fs/btrfs/volumes.c in the Linux kernel before 5.1 allows a btrfs_verify_dev_extents NULL pointer dereference via a crafted btrfs image because fs_devices->devices is mishandled within find_device, aka CID-09ba3bc9dd15.
CVE-2019-3016: In a Linux KVM guest that has PV TLB enabled, a process in the guest kernel may be able to read memory locations from another process in the same guest. This problem is limit to the host running linux kernel 4.10 with a guest running linux kernel 4.16 or later. The problem mainly affects AMD processors but Intel CPUs cannot be ruled out.
CVE-2019-19050: A memory leak in the crypto_reportstat() function in crypto/crypto_user_stat.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering crypto_reportstat_alg() failures, aka CID-c03b04dcdba1.
CVE-2018-17977: The Linux kernel 4.14.67 mishandles certain interaction among XFRM Netlink messages, IPPROTO_AH packets, and IPPROTO_IP packets, which allows local users to cause a denial of service (memory consumption and system hang) by leveraging root access to execute crafted applications, as demonstrated on CentOS 7.
CVE-2017-0630: An information disclosure vulnerability in the kernel trace subsystem could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-34277115.
CVE-2019-19813: In the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image, performing some operations, and then making a syncfs system call can lead to a use-after-free in __mutex_lock in kernel/locking/mutex.c. This is related to mutex_can_spin_on_owner in kernel/locking/mutex.c, __btrfs_qgroup_free_meta in fs/btrfs/qgroup.c, and btrfs_insert_delayed_items in fs/btrfs/delayed-inode.c.
CVE-2019-19816: In the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image and performing some operations can cause slab-out-of-bounds write access in __btrfs_map_block in fs/btrfs/volumes.c, because a value of 1 for the number of data stripes is mishandled.
CVE-2019-3874: The SCTP socket buffer used by a userspace application is not accounted by the cgroups subsystem. An attacker can use this flaw to cause a denial of service attack. Kernel 3.10.x and 4.18.x branches are believed to be vulnerable.
CVE-2018-18653: The Linux kernel, as used in Ubuntu 18.10 and when booted with UEFI Secure Boot enabled, allows privileged local users to bypass intended Secure Boot restrictions and execute untrusted code by loading arbitrary kernel modules. This occurs because a modified kernel/module.c, in conjunction with certain configuration options, leads to mishandling of the result of signature verification.
CVE-2019-19074: A memory leak in the ath9k_wmi_cmd() function in drivers/net/wireless/ath/ath9k/wmi.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption), aka CID-728c1e2a05e4.
CVE-2019-19073: Memory leaks in drivers/net/wireless/ath/ath9k/htc_hst.c in the Linux kernel through 5.3.11 allow attackers to cause a denial of service (memory consumption) by triggering wait_for_completion_timeout() failures. This affects the htc_config_pipe_credits() function, the htc_setup_complete() function, and the htc_connect_service() function, aka CID-853acf7caf10.
CVE-2019-19072: A memory leak in the predicate_parse() function in kernel/trace/trace_events_filter.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption), aka CID-96c5c6e6a5b6.
CVE-2020-0009: In calc_vm_may_flags of ashmem.c, there is a possible arbitrary write to shared memory due to a permissions bypass. This could lead to local escalation of privilege by corrupting memory shared between processes, with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-142938932
CVE-2020-7053: In the Linux kernel 4.14 longterm through 4.14.165 and 4.19 longterm through 4.19.96 (and 5.x before 5.2), there is a use-after-free (write) in the i915_ppgtt_close function in drivers/gpu/drm/i915/i915_gem_gtt.c, aka CID-7dc40713618c. This is related to i915_gem_context_destroy_ioctl in drivers/gpu/drm/i915/i915_gem_context.c.
CVE-2016-10723: ** DISPUTED ** An issue was discovered in the Linux kernel through 4.17.2. Since the page allocator does not yield CPU resources to the owner of the oom_lock mutex, a local unprivileged user can trivially lock up the system forever by wasting CPU resources from the page allocator (e.g., via concurrent page fault events) when the global OOM killer is invoked. NOTE: the software maintainer has not accepted certain proposed patches, in part because of a viewpoint that "the underlying problem is non-trivial to handle."
CVE-2019-19815: In the Linux kernel 5.0.21, mounting a crafted f2fs filesystem image can cause a NULL pointer dereference in f2fs_recover_fsync_data in fs/f2fs/recovery.c. This is related to F2FS_P_SB in fs/f2fs/f2fs.h.
CVE-2019-19814: In the Linux kernel 5.0.21, mounting a crafted f2fs filesystem image can cause __remove_dirty_segment slab-out-of-bounds write access because an array is bounded by the number of dirty types (8) but the array index can exceed this.
CVE-2016-8660: The XFS subsystem in the Linux kernel through 4.8.2 allows local users to cause a denial of service (fdatasync failure and system hang) by using the vfs syscall group in the trinity program, related to a "page lock order bug in the XFS seek hole/data implementation."
CVE-2019-15213: An issue was discovered in the Linux kernel before 5.2.3. There is a use-after-free caused by a malicious USB device in the drivers/media/usb/dvb-usb/dvb-usb-init.c driver.
CVE-2019-19039: ** DISPUTED ** __btrfs_free_extent in fs/btrfs/extent-tree.c in the Linux kernel through 5.3.12 calls btrfs_print_leaf in a certain ENOENT case, which allows local users to obtain potentially sensitive information about register values via the dmesg program. NOTE: The BTRFS development team disputes this issues as not being a vulnerability because “1) The kernel provide facilities to restrict access to dmesg - dmesg_restrict=1 sysctl option. So it's really up to the system administrator to judge whether dmesg access shall be disallowed or not. 2) WARN/WARN_ON are widely used macros in the linux kernel. If this CVE is considered valid this would mean there are literally thousands CVE lurking in the kernel - something which clearly is not the case.”
CVE-2019-16089: An issue was discovered in the Linux kernel through 5.2.13. nbd_genl_status in drivers/block/nbd.c does not check the nla_nest_start_noflag return value.
CVE-2019-18814: An issue was discovered in the Linux kernel through 5.3.9. There is a use-after-free when aa_label_parse() fails in aa_audit_rule_init() in security/apparmor/audit.c.
CVE-2019-19036: btrfs_root_node in fs/btrfs/ctree.c in the Linux kernel through 5.3.12 allows a NULL pointer dereference because rcu_dereference(root->node) can be zero.
CVE-2019-12881: i915_gem_userptr_get_pages in drivers/gpu/drm/i915/i915_gem_userptr.c in the Linux kernel 4.15.0 on Ubuntu 18.04.2 allows local users to cause a denial of service (NULL pointer dereference and BUG) or possibly have unspecified other impact via crafted ioctl calls to /dev/dri/card0.
CVE-2020-8992: ext4_protect_reserved_inode in fs/ext4/block_validity.c in the Linux kernel through 5.5.3 allows attackers to cause a denial of service (soft lockup) via a crafted journal size.
CVE-2019-19378: In the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image can lead to slab-out-of-bounds write access in index_rbio_pages in fs/btrfs/raid56.c.
CVE-2019-19377: In the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image, performing some operations, and unmounting can lead to a use-after-free in btrfs_queue_work in fs/btrfs/async-thread.c.

2 issues skipped by the security teams:

CVE-2018-12928: In the Linux kernel 4.15.0, a NULL pointer dereference was discovered in hfs_ext_read_extent in hfs.ko. This can occur during a mount of a crafted hfs filesystem.
CVE-2013-7445: The Direct Rendering Manager (DRM) subsystem in the Linux kernel through 4.x mishandles requests for Graphics Execution Manager (GEM) objects, which allows context-dependent attackers to cause a denial of service (memory consumption) via an application that processes graphics data, as demonstrated by JavaScript code that creates many CANVAS elements for rendering by Chrome or Firefox.

Please fix them.

Created: 2017-06-18 Last update: 2020-02-15 04:49

37 security issues in bullseye high

There are 37 open security issues in bullseye.

37 important issues:

CVE-2019-19770: In the Linux kernel 4.19.83, there is a use-after-free (read) in the debugfs_remove function in fs/debugfs/inode.c (which is used to remove a file or directory in debugfs that was previously created with a call to another debugfs function such as debugfs_create_file).
CVE-2020-8428: fs/namei.c in the Linux kernel before 5.5 has a may_create_in_sticky use-after-free, which allows local users to cause a denial of service (OOPS) or possibly obtain sensitive information from kernel memory, aka CID-d0cb50185ae9. One attack vector may be an open system call for a UNIX domain socket, if the socket is being moved to a new parent directory and its old parent directory is being removed.
CVE-2020-8649: There is a use-after-free vulnerability in the Linux kernel through 5.5.2 in the vgacon_invert_region function in drivers/video/console/vgacon.c.
CVE-2020-8648: There is a use-after-free vulnerability in the Linux kernel through 5.5.2 in the n_tty_receive_buf_common function in drivers/tty/n_tty.c.
CVE-2019-19252: vcs_write in drivers/tty/vt/vc_screen.c in the Linux kernel through 5.3.13 does not prevent write access to vcsu devices, aka CID-0c9acb1af77a.
CVE-2020-8647: There is a use-after-free vulnerability in the Linux kernel through 5.5.2 in the vc_do_resize function in drivers/tty/vt/vt.c.
CVE-2019-19769: In the Linux kernel 5.3.10, there is a use-after-free (read) in the perf_trace_lock_acquire function (related to include/trace/events/lock.h).
CVE-2019-19768: In the Linux kernel 5.4.0-rc2, there is a use-after-free (read) in the __blk_add_trace function in kernel/trace/blktrace.c (which is used to fill out a blk_io_trace structure and place it in a per-cpu sub-buffer).
CVE-2018-3693: Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a speculative buffer overflow and side-channel analysis.
CVE-2019-14896: A heap-based buffer overflow vulnerability was found in the Linux kernel, version kernel-2.6.32, in Marvell WiFi chip driver. A remote attacker could cause a denial of service (system crash) or, possibly execute arbitrary code, when the lbs_ibss_join_existing function is called after a STA connects to an AP.
CVE-2019-14897: A stack-based buffer overflow was found in the Linux kernel, version kernel-2.6.32, in Marvell WiFi chip driver. An attacker is able to cause a denial of service (system crash) or, possibly execute arbitrary code, when a STA works in IBSS mode (allows connecting stations together without the use of an AP) and connects to another STA.
CVE-2018-12928: In the Linux kernel 4.15.0, a NULL pointer dereference was discovered in hfs_ext_read_extent in hfs.ko. This can occur during a mount of a crafted hfs filesystem.
CVE-2019-19448: In the Linux kernel 5.0.21 and 5.3.11, mounting a crafted btrfs filesystem image, performing some operations, and then making a syncfs system call can lead to a use-after-free in try_merge_free_space in fs/btrfs/free-space-cache.c because the pointer to a left data structure can be the same as the pointer to a right data structure.
CVE-2019-19449: In the Linux kernel 5.0.21, mounting a crafted f2fs filesystem image can lead to slab-out-of-bounds read access in f2fs_build_segment_manager in fs/f2fs/segment.c, related to init_min_max_mtime in fs/f2fs/segment.c (because the second argument to get_seg_entry is not validated).
CVE-2019-19043: A memory leak in the i40e_setup_macvlans() function in drivers/net/ethernet/intel/i40e/i40e_main.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering i40e_setup_channel() failures, aka CID-27d461333459.
CVE-2019-19462: relay_open in kernel/relay.c in the Linux kernel through 5.4.1 allows local users to cause a denial of service (such as relay blockage) by triggering a NULL alloc_percpu result.
CVE-2019-3016: In a Linux KVM guest that has PV TLB enabled, a process in the guest kernel may be able to read memory locations from another process in the same guest. This problem is limit to the host running linux kernel 4.10 with a guest running linux kernel 4.16 or later. The problem mainly affects AMD processors but Intel CPUs cannot be ruled out.
CVE-2019-19050: A memory leak in the crypto_reportstat() function in crypto/crypto_user_stat.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering crypto_reportstat_alg() failures, aka CID-c03b04dcdba1.
CVE-2018-17977: The Linux kernel 4.14.67 mishandles certain interaction among XFRM Netlink messages, IPPROTO_AH packets, and IPPROTO_IP packets, which allows local users to cause a denial of service (memory consumption and system hang) by leveraging root access to execute crafted applications, as demonstrated on CentOS 7.
CVE-2017-0630: An information disclosure vulnerability in the kernel trace subsystem could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-34277115.
CVE-2019-19813: In the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image, performing some operations, and then making a syncfs system call can lead to a use-after-free in __mutex_lock in kernel/locking/mutex.c. This is related to mutex_can_spin_on_owner in kernel/locking/mutex.c, __btrfs_qgroup_free_meta in fs/btrfs/qgroup.c, and btrfs_insert_delayed_items in fs/btrfs/delayed-inode.c.
CVE-2019-19816: In the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image and performing some operations can cause slab-out-of-bounds write access in __btrfs_map_block in fs/btrfs/volumes.c, because a value of 1 for the number of data stripes is mishandled.
CVE-2018-18653: The Linux kernel, as used in Ubuntu 18.10 and when booted with UEFI Secure Boot enabled, allows privileged local users to bypass intended Secure Boot restrictions and execute untrusted code by loading arbitrary kernel modules. This occurs because a modified kernel/module.c, in conjunction with certain configuration options, leads to mishandling of the result of signature verification.
CVE-2020-0009: In calc_vm_may_flags of ashmem.c, there is a possible arbitrary write to shared memory due to a permissions bypass. This could lead to local escalation of privilege by corrupting memory shared between processes, with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-142938932
CVE-2016-10723: ** DISPUTED ** An issue was discovered in the Linux kernel through 4.17.2. Since the page allocator does not yield CPU resources to the owner of the oom_lock mutex, a local unprivileged user can trivially lock up the system forever by wasting CPU resources from the page allocator (e.g., via concurrent page fault events) when the global OOM killer is invoked. NOTE: the software maintainer has not accepted certain proposed patches, in part because of a viewpoint that "the underlying problem is non-trivial to handle."
CVE-2019-19814: In the Linux kernel 5.0.21, mounting a crafted f2fs filesystem image can cause __remove_dirty_segment slab-out-of-bounds write access because an array is bounded by the number of dirty types (8) but the array index can exceed this.
CVE-2013-7445: The Direct Rendering Manager (DRM) subsystem in the Linux kernel through 4.x mishandles requests for Graphics Execution Manager (GEM) objects, which allows context-dependent attackers to cause a denial of service (memory consumption) via an application that processes graphics data, as demonstrated by JavaScript code that creates many CANVAS elements for rendering by Chrome or Firefox.
CVE-2016-8660: The XFS subsystem in the Linux kernel through 4.8.2 allows local users to cause a denial of service (fdatasync failure and system hang) by using the vfs syscall group in the trinity program, related to a "page lock order bug in the XFS seek hole/data implementation."
CVE-2019-15213: An issue was discovered in the Linux kernel before 5.2.3. There is a use-after-free caused by a malicious USB device in the drivers/media/usb/dvb-usb/dvb-usb-init.c driver.
CVE-2019-19039: ** DISPUTED ** __btrfs_free_extent in fs/btrfs/extent-tree.c in the Linux kernel through 5.3.12 calls btrfs_print_leaf in a certain ENOENT case, which allows local users to obtain potentially sensitive information about register values via the dmesg program. NOTE: The BTRFS development team disputes this issues as not being a vulnerability because “1) The kernel provide facilities to restrict access to dmesg - dmesg_restrict=1 sysctl option. So it's really up to the system administrator to judge whether dmesg access shall be disallowed or not. 2) WARN/WARN_ON are widely used macros in the linux kernel. If this CVE is considered valid this would mean there are literally thousands CVE lurking in the kernel - something which clearly is not the case.”
CVE-2019-16089: An issue was discovered in the Linux kernel through 5.2.13. nbd_genl_status in drivers/block/nbd.c does not check the nla_nest_start_noflag return value.
CVE-2019-18814: An issue was discovered in the Linux kernel through 5.3.9. There is a use-after-free when aa_label_parse() fails in aa_audit_rule_init() in security/apparmor/audit.c.
CVE-2019-19036: btrfs_root_node in fs/btrfs/ctree.c in the Linux kernel through 5.3.12 allows a NULL pointer dereference because rcu_dereference(root->node) can be zero.
CVE-2019-12881: i915_gem_userptr_get_pages in drivers/gpu/drm/i915/i915_gem_userptr.c in the Linux kernel 4.15.0 on Ubuntu 18.04.2 allows local users to cause a denial of service (NULL pointer dereference and BUG) or possibly have unspecified other impact via crafted ioctl calls to /dev/dri/card0.
CVE-2020-8992: ext4_protect_reserved_inode in fs/ext4/block_validity.c in the Linux kernel through 5.5.3 allows attackers to cause a denial of service (soft lockup) via a crafted journal size.
CVE-2019-19378: In the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image can lead to slab-out-of-bounds write access in index_rbio_pages in fs/btrfs/raid56.c.
CVE-2019-19377: In the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image, performing some operations, and unmounting can lead to a use-after-free in btrfs_queue_work in fs/btrfs/async-thread.c.

Please fix them.

Created: 2019-07-07 Last update: 2020-02-15 04:49

32 security issues in sid high

There are 32 open security issues in sid.

32 important issues:

CVE-2019-19770: In the Linux kernel 4.19.83, there is a use-after-free (read) in the debugfs_remove function in fs/debugfs/inode.c (which is used to remove a file or directory in debugfs that was previously created with a call to another debugfs function such as debugfs_create_file).
CVE-2020-8649: There is a use-after-free vulnerability in the Linux kernel through 5.5.2 in the vgacon_invert_region function in drivers/video/console/vgacon.c.
CVE-2020-8648: There is a use-after-free vulnerability in the Linux kernel through 5.5.2 in the n_tty_receive_buf_common function in drivers/tty/n_tty.c.
CVE-2019-19252: vcs_write in drivers/tty/vt/vc_screen.c in the Linux kernel through 5.3.13 does not prevent write access to vcsu devices, aka CID-0c9acb1af77a.
CVE-2020-8647: There is a use-after-free vulnerability in the Linux kernel through 5.5.2 in the vc_do_resize function in drivers/tty/vt/vt.c.
CVE-2019-19769: In the Linux kernel 5.3.10, there is a use-after-free (read) in the perf_trace_lock_acquire function (related to include/trace/events/lock.h).
CVE-2019-19768: In the Linux kernel 5.4.0-rc2, there is a use-after-free (read) in the __blk_add_trace function in kernel/trace/blktrace.c (which is used to fill out a blk_io_trace structure and place it in a per-cpu sub-buffer).
CVE-2018-3693: Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a speculative buffer overflow and side-channel analysis.
CVE-2018-12928: In the Linux kernel 4.15.0, a NULL pointer dereference was discovered in hfs_ext_read_extent in hfs.ko. This can occur during a mount of a crafted hfs filesystem.
CVE-2019-19448: In the Linux kernel 5.0.21 and 5.3.11, mounting a crafted btrfs filesystem image, performing some operations, and then making a syncfs system call can lead to a use-after-free in try_merge_free_space in fs/btrfs/free-space-cache.c because the pointer to a left data structure can be the same as the pointer to a right data structure.
CVE-2019-19449: In the Linux kernel 5.0.21, mounting a crafted f2fs filesystem image can lead to slab-out-of-bounds read access in f2fs_build_segment_manager in fs/f2fs/segment.c, related to init_min_max_mtime in fs/f2fs/segment.c (because the second argument to get_seg_entry is not validated).
CVE-2019-19462: relay_open in kernel/relay.c in the Linux kernel through 5.4.1 allows local users to cause a denial of service (such as relay blockage) by triggering a NULL alloc_percpu result.
CVE-2019-19050: A memory leak in the crypto_reportstat() function in crypto/crypto_user_stat.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering crypto_reportstat_alg() failures, aka CID-c03b04dcdba1.
CVE-2018-17977: The Linux kernel 4.14.67 mishandles certain interaction among XFRM Netlink messages, IPPROTO_AH packets, and IPPROTO_IP packets, which allows local users to cause a denial of service (memory consumption and system hang) by leveraging root access to execute crafted applications, as demonstrated on CentOS 7.
CVE-2017-0630: An information disclosure vulnerability in the kernel trace subsystem could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-34277115.
CVE-2019-19813: In the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image, performing some operations, and then making a syncfs system call can lead to a use-after-free in __mutex_lock in kernel/locking/mutex.c. This is related to mutex_can_spin_on_owner in kernel/locking/mutex.c, __btrfs_qgroup_free_meta in fs/btrfs/qgroup.c, and btrfs_insert_delayed_items in fs/btrfs/delayed-inode.c.
CVE-2019-19816: In the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image and performing some operations can cause slab-out-of-bounds write access in __btrfs_map_block in fs/btrfs/volumes.c, because a value of 1 for the number of data stripes is mishandled.
CVE-2018-18653: The Linux kernel, as used in Ubuntu 18.10 and when booted with UEFI Secure Boot enabled, allows privileged local users to bypass intended Secure Boot restrictions and execute untrusted code by loading arbitrary kernel modules. This occurs because a modified kernel/module.c, in conjunction with certain configuration options, leads to mishandling of the result of signature verification.
CVE-2020-0009: In calc_vm_may_flags of ashmem.c, there is a possible arbitrary write to shared memory due to a permissions bypass. This could lead to local escalation of privilege by corrupting memory shared between processes, with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-142938932
CVE-2016-10723: ** DISPUTED ** An issue was discovered in the Linux kernel through 4.17.2. Since the page allocator does not yield CPU resources to the owner of the oom_lock mutex, a local unprivileged user can trivially lock up the system forever by wasting CPU resources from the page allocator (e.g., via concurrent page fault events) when the global OOM killer is invoked. NOTE: the software maintainer has not accepted certain proposed patches, in part because of a viewpoint that "the underlying problem is non-trivial to handle."
CVE-2019-19814: In the Linux kernel 5.0.21, mounting a crafted f2fs filesystem image can cause __remove_dirty_segment slab-out-of-bounds write access because an array is bounded by the number of dirty types (8) but the array index can exceed this.
CVE-2013-7445: The Direct Rendering Manager (DRM) subsystem in the Linux kernel through 4.x mishandles requests for Graphics Execution Manager (GEM) objects, which allows context-dependent attackers to cause a denial of service (memory consumption) via an application that processes graphics data, as demonstrated by JavaScript code that creates many CANVAS elements for rendering by Chrome or Firefox.
CVE-2016-8660: The XFS subsystem in the Linux kernel through 4.8.2 allows local users to cause a denial of service (fdatasync failure and system hang) by using the vfs syscall group in the trinity program, related to a "page lock order bug in the XFS seek hole/data implementation."
CVE-2019-15213: An issue was discovered in the Linux kernel before 5.2.3. There is a use-after-free caused by a malicious USB device in the drivers/media/usb/dvb-usb/dvb-usb-init.c driver.
CVE-2019-19039: ** DISPUTED ** __btrfs_free_extent in fs/btrfs/extent-tree.c in the Linux kernel through 5.3.12 calls btrfs_print_leaf in a certain ENOENT case, which allows local users to obtain potentially sensitive information about register values via the dmesg program. NOTE: The BTRFS development team disputes this issues as not being a vulnerability because “1) The kernel provide facilities to restrict access to dmesg - dmesg_restrict=1 sysctl option. So it's really up to the system administrator to judge whether dmesg access shall be disallowed or not. 2) WARN/WARN_ON are widely used macros in the linux kernel. If this CVE is considered valid this would mean there are literally thousands CVE lurking in the kernel - something which clearly is not the case.”
CVE-2019-16089: An issue was discovered in the Linux kernel through 5.2.13. nbd_genl_status in drivers/block/nbd.c does not check the nla_nest_start_noflag return value.
CVE-2019-18814: An issue was discovered in the Linux kernel through 5.3.9. There is a use-after-free when aa_label_parse() fails in aa_audit_rule_init() in security/apparmor/audit.c.
CVE-2019-19036: btrfs_root_node in fs/btrfs/ctree.c in the Linux kernel through 5.3.12 allows a NULL pointer dereference because rcu_dereference(root->node) can be zero.
CVE-2019-12881: i915_gem_userptr_get_pages in drivers/gpu/drm/i915/i915_gem_userptr.c in the Linux kernel 4.15.0 on Ubuntu 18.04.2 allows local users to cause a denial of service (NULL pointer dereference and BUG) or possibly have unspecified other impact via crafted ioctl calls to /dev/dri/card0.
CVE-2020-8992: ext4_protect_reserved_inode in fs/ext4/block_validity.c in the Linux kernel through 5.5.3 allows attackers to cause a denial of service (soft lockup) via a crafted journal size.
CVE-2019-19378: In the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image can lead to slab-out-of-bounds write access in index_rbio_pages in fs/btrfs/raid56.c.
CVE-2019-19377: In the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image, performing some operations, and unmounting can lead to a use-after-free in btrfs_queue_work in fs/btrfs/async-thread.c.

Please fix them.

Created: 2015-07-12 Last update: 2020-02-15 04:49

91 security issues in jessie high

There are 91 open security issues in jessie.

56 important issues:

CVE-2019-5108: An exploitable denial-of-service vulnerability exists in the Linux kernel prior to mainline 5.3. An attacker could exploit this vulnerability by triggering AP to send IAPP location updates for stations before the required authentication process has completed. This could lead to different denial-of-service scenarios, either by causing CAM table attacks, or by leading to traffic flapping if faking already existing clients in other nearby APs of the same wireless infrastructure. An attacker can forge Authentication and Association Request packets to trigger this vulnerability.
CVE-2016-10906: An issue was discovered in drivers/net/ethernet/arc/emac_main.c in the Linux kernel before 4.5. A use-after-free is caused by a race condition between the functions arc_emac_tx and arc_emac_tx_clean.
CVE-2019-19770: In the Linux kernel 4.19.83, there is a use-after-free (read) in the debugfs_remove function in fs/debugfs/inode.c (which is used to remove a file or directory in debugfs that was previously created with a call to another debugfs function such as debugfs_create_file).
CVE-2020-8649: There is a use-after-free vulnerability in the Linux kernel through 5.5.2 in the vgacon_invert_region function in drivers/video/console/vgacon.c.
CVE-2020-8648: There is a use-after-free vulnerability in the Linux kernel through 5.5.2 in the n_tty_receive_buf_common function in drivers/tty/n_tty.c.
CVE-2020-8647: There is a use-after-free vulnerability in the Linux kernel through 5.5.2 in the vc_do_resize function in drivers/tty/vt/vt.c.
CVE-2019-19318: In the Linux kernel 5.3.11, mounting a crafted btrfs image twice can cause an rwsem_down_write_slowpath use-after-free because (in rwsem_can_spin_on_owner in kernel/locking/rwsem.c) rwsem_owner_flags returns an already freed pointer,
CVE-2019-19319: In the Linux kernel 5.0.21, a setxattr operation, after a mount of a crafted ext4 image, can cause a slab-out-of-bounds write access because of an ext4_xattr_set_entry use-after-free in fs/ext4/xattr.c when a large old_size value is used in a memset call.
CVE-2019-19769: In the Linux kernel 5.3.10, there is a use-after-free (read) in the perf_trace_lock_acquire function (related to include/trace/events/lock.h).
CVE-2019-19768: In the Linux kernel 5.4.0-rc2, there is a use-after-free (read) in the __blk_add_trace function in kernel/trace/blktrace.c (which is used to fill out a blk_io_trace structure and place it in a per-cpu sub-buffer).
CVE-2018-12930: ntfs_end_buffer_async_read in the ntfs.ko filesystem driver in the Linux kernel 4.15.0 allows attackers to trigger a stack-based out-of-bounds write and cause a denial of service (kernel oops or panic) or possibly have unspecified other impact via a crafted ntfs filesystem.
CVE-2018-12931: ntfs_attr_find in the ntfs.ko filesystem driver in the Linux kernel 4.15.0 allows attackers to trigger a stack-based out-of-bounds write and cause a denial of service (kernel oops or panic) or possibly have unspecified other impact via a crafted ntfs filesystem.
CVE-2017-13168: An elevation of privilege vulnerability in the kernel scsi driver. Product: Android. Versions: Android kernel. Android ID A-65023233.
CVE-2018-3693: Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a speculative buffer overflow and side-channel analysis.
CVE-2017-5967: The time subsystem in the Linux kernel through 4.9.9, when CONFIG_TIMER_STATS is enabled, allows local users to discover real PID values (as distinguished from PID values inside a PID namespace) by reading the /proc/timer_list file, related to the print_timer function in kernel/time/timer_list.c and the __timer_stats_timer_set_start_info function in kernel/time/timer.c.
CVE-2018-12929: ntfs_read_locked_inode in the ntfs.ko filesystem driver in the Linux kernel 4.15.0 allows attackers to trigger a use-after-free read and possibly cause a denial of service (kernel oops or panic) via a crafted ntfs filesystem.
CVE-2018-12928: In the Linux kernel 4.15.0, a NULL pointer dereference was discovered in hfs_ext_read_extent in hfs.ko. This can occur during a mount of a crafted hfs filesystem.
CVE-2019-19447: In the Linux kernel 5.0.21, mounting a crafted ext4 filesystem image, performing some operations, and unmounting can lead to a use-after-free in ext4_put_super in fs/ext4/super.c, related to dump_orphan_list in fs/ext4/super.c.
CVE-2019-19448: In the Linux kernel 5.0.21 and 5.3.11, mounting a crafted btrfs filesystem image, performing some operations, and then making a syncfs system call can lead to a use-after-free in try_merge_free_space in fs/btrfs/free-space-cache.c because the pointer to a left data structure can be the same as the pointer to a right data structure.
CVE-2019-19449: In the Linux kernel 5.0.21, mounting a crafted f2fs filesystem image can lead to slab-out-of-bounds read access in f2fs_build_segment_manager in fs/f2fs/segment.c, related to init_min_max_mtime in fs/f2fs/segment.c (because the second argument to get_seg_entry is not validated).
CVE-2019-9445: In the Android kernel in F2FS driver there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with system execution privileges needed. User interaction is not needed for exploitation.
CVE-2019-19927: In the Linux kernel 5.0.0-rc7 (as distributed in ubuntu/linux.git on kernel.ubuntu.com), mounting a crafted f2fs filesystem image and performing some operations can lead to slab-out-of-bounds read access in ttm_put_pages in drivers/gpu/drm/ttm/ttm_page_alloc.c. This is related to the vmwgfx or ttm module.
CVE-2019-13648: In the Linux kernel through 5.2.1 on the powerpc platform, when hardware transactional memory is disabled, a local user can cause a denial of service (TM Bad Thing exception and system crash) via a sigreturn() system call that sends a crafted signal frame. This affects arch/powerpc/kernel/signal_32.c and arch/powerpc/kernel/signal_64.c.
CVE-2019-18885: fs/btrfs/volumes.c in the Linux kernel before 5.1 allows a btrfs_verify_dev_extents NULL pointer dereference via a crafted btrfs image because fs_devices->devices is mishandled within find_device, aka CID-09ba3bc9dd15.
CVE-2019-3016: In a Linux KVM guest that has PV TLB enabled, a process in the guest kernel may be able to read memory locations from another process in the same guest. This problem is limit to the host running linux kernel 4.10 with a guest running linux kernel 4.16 or later. The problem mainly affects AMD processors but Intel CPUs cannot be ruled out.
CVE-2015-9289: In the Linux kernel before 4.1.4, a buffer overflow occurs when checking userspace params in drivers/media/dvb-frontends/cx24116.c. The maximum size for a DiSEqC command is 6, according to the userspace API. However, the code allows larger values such as 23.
CVE-2016-10764: In the Linux kernel before 4.9.6, there is an off by one in the drivers/mtd/spi-nor/cadence-quadspi.c cqspi_setup_flash() function. There are CQSPI_MAX_CHIPSELECT elements in the ->f_pdata array so the ">" should be ">=" instead.
CVE-2018-17977: The Linux kernel 4.14.67 mishandles certain interaction among XFRM Netlink messages, IPPROTO_AH packets, and IPPROTO_IP packets, which allows local users to cause a denial of service (memory consumption and system hang) by leveraging root access to execute crafted applications, as demonstrated on CentOS 7.
CVE-2017-0630: An information disclosure vulnerability in the kernel trace subsystem could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-34277115.
CVE-2019-19813: In the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image, performing some operations, and then making a syncfs system call can lead to a use-after-free in __mutex_lock in kernel/locking/mutex.c. This is related to mutex_can_spin_on_owner in kernel/locking/mutex.c, __btrfs_qgroup_free_meta in fs/btrfs/qgroup.c, and btrfs_insert_delayed_items in fs/btrfs/delayed-inode.c.
CVE-2019-19816: In the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image and performing some operations can cause slab-out-of-bounds write access in __btrfs_map_block in fs/btrfs/volumes.c, because a value of 1 for the number of data stripes is mishandled.
CVE-2017-9725: In all Qualcomm products with Android releases from CAF using the Linux kernel, during DMA allocation, due to wrong data type of size, allocation size gets truncated which makes allocation succeed when it should fail.
CVE-2020-0030: In binder_thread_release of binder.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-145286050References: Upstream kernel
CVE-2018-18653: The Linux kernel, as used in Ubuntu 18.10 and when booted with UEFI Secure Boot enabled, allows privileged local users to bypass intended Secure Boot restrictions and execute untrusted code by loading arbitrary kernel modules. This occurs because a modified kernel/module.c, in conjunction with certain configuration options, leads to mishandling of the result of signature verification.
CVE-2018-14611: An issue was discovered in the Linux kernel through 4.17.10. There is a use-after-free in try_merge_free_space() when mounting a crafted btrfs image, because of a lack of chunk type flag checks in btrfs_check_chunk_valid in fs/btrfs/volumes.c.
CVE-2018-14610: An issue was discovered in the Linux kernel through 4.17.10. There is out-of-bounds access in write_extent_buffer() when mounting and operating a crafted btrfs image, because of a lack of verification that each block group has a corresponding chunk at mount time, within btrfs_read_block_groups in fs/btrfs/extent-tree.c.
CVE-2018-14613: An issue was discovered in the Linux kernel through 4.17.10. There is an invalid pointer dereference in io_ctl_map_page() when mounting and operating a crafted btrfs image, because of a lack of block group item validation in check_leaf_item in fs/btrfs/tree-checker.c.
CVE-2018-14612: An issue was discovered in the Linux kernel through 4.17.10. There is an invalid pointer dereference in btrfs_root_node() when mounting a crafted btrfs image, because of a lack of chunk block group mapping validation in btrfs_read_block_groups in fs/btrfs/extent-tree.c, and a lack of empty-tree checks in check_leaf in fs/btrfs/tree-checker.c.
CVE-2019-19074: A memory leak in the ath9k_wmi_cmd() function in drivers/net/wireless/ath/ath9k/wmi.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption), aka CID-728c1e2a05e4.
CVE-2019-19073: Memory leaks in drivers/net/wireless/ath/ath9k/htc_hst.c in the Linux kernel through 5.3.11 allow attackers to cause a denial of service (memory consumption) by triggering wait_for_completion_timeout() failures. This affects the htc_config_pipe_credits() function, the htc_setup_complete() function, and the htc_connect_service() function, aka CID-853acf7caf10.
CVE-2020-0009: In calc_vm_may_flags of ashmem.c, there is a possible arbitrary write to shared memory due to a permissions bypass. This could lead to local escalation of privilege by corrupting memory shared between processes, with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-142938932
CVE-2016-10723: ** DISPUTED ** An issue was discovered in the Linux kernel through 4.17.2. Since the page allocator does not yield CPU resources to the owner of the oom_lock mutex, a local unprivileged user can trivially lock up the system forever by wasting CPU resources from the page allocator (e.g., via concurrent page fault events) when the global OOM killer is invoked. NOTE: the software maintainer has not accepted certain proposed patches, in part because of a viewpoint that "the underlying problem is non-trivial to handle."
CVE-2019-19815: In the Linux kernel 5.0.21, mounting a crafted f2fs filesystem image can cause a NULL pointer dereference in f2fs_recover_fsync_data in fs/f2fs/recovery.c. This is related to F2FS_P_SB in fs/f2fs/f2fs.h.
CVE-2019-19814: In the Linux kernel 5.0.21, mounting a crafted f2fs filesystem image can cause __remove_dirty_segment slab-out-of-bounds write access because an array is bounded by the number of dirty types (8) but the array index can exceed this.
CVE-2015-8839: Multiple race conditions in the ext4 filesystem implementation in the Linux kernel before 4.5 allow local users to cause a denial of service (disk corruption) by writing to a page that is associated with a different user's file after unsynchronized hole punching and page-fault handling.
CVE-2019-19039: ** DISPUTED ** __btrfs_free_extent in fs/btrfs/extent-tree.c in the Linux kernel through 5.3.12 calls btrfs_print_leaf in a certain ENOENT case, which allows local users to obtain potentially sensitive information about register values via the dmesg program. NOTE: The BTRFS development team disputes this issues as not being a vulnerability because “1) The kernel provide facilities to restrict access to dmesg - dmesg_restrict=1 sysctl option. So it's really up to the system administrator to judge whether dmesg access shall be disallowed or not. 2) WARN/WARN_ON are widely used macros in the linux kernel. If this CVE is considered valid this would mean there are literally thousands CVE lurking in the kernel - something which clearly is not the case.”
CVE-2019-9453: In the Android kernel in F2FS touch driver there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with system execution privileges needed. User interaction is not needed for exploitation.
CVE-2019-19036: btrfs_root_node in fs/btrfs/ctree.c in the Linux kernel through 5.3.12 allows a NULL pointer dereference because rcu_dereference(root->node) can be zero.
CVE-2019-12881: i915_gem_userptr_get_pages in drivers/gpu/drm/i915/i915_gem_userptr.c in the Linux kernel 4.15.0 on Ubuntu 18.04.2 allows local users to cause a denial of service (NULL pointer dereference and BUG) or possibly have unspecified other impact via crafted ioctl calls to /dev/dri/card0.
CVE-2019-2213: In binder_free_transaction of binder.c, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-133758011References: Upstream kernel
CVE-2019-17351: An issue was discovered in drivers/xen/balloon.c in the Linux kernel before 5.2.3, as used in Xen through 4.12.x, allowing guest OS users to cause a denial of service because of unrestricted resource consumption during the mapping of guest memory, aka CID-6ef36ab967c7.
CVE-2019-9245: In the Android kernel in the f2fs driver there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.
CVE-2020-8992: ext4_protect_reserved_inode in fs/ext4/block_validity.c in the Linux kernel through 5.5.3 allows attackers to cause a denial of service (soft lockup) via a crafted journal size.
CVE-2019-12984: A NULL pointer dereference vulnerability in the function nfc_genl_deactivate_target() in net/nfc/netlink.c in the Linux kernel before 5.1.13 can be triggered by a malicious user-mode program that omits certain NFC attributes, leading to denial of service.
CVE-2019-19378: In the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image can lead to slab-out-of-bounds write access in index_rbio_pages in fs/btrfs/raid56.c.
CVE-2019-19377: In the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image, performing some operations, and unmounting can lead to a use-after-free in btrfs_queue_work in fs/btrfs/async-thread.c.

35 issues skipped by the security teams:

CVE-2018-10124: The kill_something_info function in kernel/signal.c in the Linux kernel before 4.13, when an unspecified architecture and compiler is used, might allow local users to cause a denial of service via an INT_MIN argument.
CVE-2016-2854: The aufs module for the Linux kernel 3.x and 4.x does not properly maintain POSIX ACL xattr data, which allows local users to gain privileges by leveraging a group-writable setgid directory.
CVE-2016-2853: The aufs module for the Linux kernel 3.x and 4.x does not properly restrict the mount namespace, which allows local users to gain privileges by mounting an aufs filesystem on top of a FUSE filesystem, and then executing a crafted setuid program.
CVE-2018-13096: An issue was discovered in fs/f2fs/super.c in the Linux kernel through 4.17.3. A denial of service (out-of-bounds memory access and BUG) can occur upon encountering an abnormal bitmap size when mounting a crafted f2fs image.
CVE-2018-13097: An issue was discovered in fs/f2fs/super.c in the Linux kernel through 4.17.3. There is an out-of-bounds read or a divide-by-zero error for an incorrect user_block_count in a corrupted f2fs image, leading to a denial of service (BUG).
CVE-2018-13095: An issue was discovered in fs/xfs/libxfs/xfs_inode_buf.c in the Linux kernel through 4.17.3. A denial of service (memory corruption and BUG) can occur for a corrupted xfs image upon encountering an inode that is in extent format, but has more extents than fit in the inode fork.
CVE-2018-13099: An issue was discovered in fs/f2fs/inline.c in the Linux kernel through 4.17.3. A denial of service (out-of-bounds memory access and BUG) can occur for a modified f2fs filesystem image in which an inline inode contains an invalid reserved blkaddr.
CVE-2018-12207: Improper invalidation for page table updates by a virtual guest operating system for multiple Intel(R) Processors may allow an authenticated user to potentially enable denial of service of the host system via local access.
CVE-2019-17075: An issue was discovered in write_tpt_entry in drivers/infiniband/hw/cxgb4/mem.c in the Linux kernel through 5.3.2. The cxgb4 driver is directly calling dma_map_single (a DMA function) from a stack variable. This could allow an attacker to trigger a Denial of Service, exploitable if this driver is used on an architecture for which this stack/DMA interaction has security relevance.
CVE-2019-2054: In the seccomp implementation prior to kernel version 4.8, there is a possible seccomp bypass due to seccomp policies that allow the use of ptrace. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-119769499
CVE-2019-9444: In the Android kernel in sync debug fs driver there is a kernel pointer leak due to the usage of printf with %p. This could lead to local information disclosure with system execution privileges needed. User interaction is not needed for exploitation.
CVE-2018-20509: The print_binder_ref_olocked function in drivers/android/binder.c in the Linux kernel 4.14.90 allows local users to obtain sensitive address information by reading " ref *desc *node" lines in a debugfs file.
CVE-2017-5972: The TCP stack in the Linux kernel 3.x does not properly implement a SYN cookie protection mechanism for the case of a fast network connection, which allows remote attackers to cause a denial of service (CPU consumption) by sending many TCP SYN packets, as demonstrated by an attack against the kernel-3.10.0 package in CentOS Linux 7. NOTE: third parties have been unable to discern any relationship between the GitHub Engineering finding and the Trigemini.c attack code.
CVE-2015-8553: Xen allows guest OS users to obtain sensitive information from uninitialized locations in host OS kernel memory by not enabling memory and I/O decoding control bits. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-0777.
CVE-2015-8952: The mbcache feature in the ext2 and ext4 filesystem implementations in the Linux kernel before 4.6 mishandles xattr block caching, which allows local users to cause a denial of service (soft lockup) via filesystem operations in environments that use many attributes, as demonstrated by Ceph and Samba.
CVE-2018-7273: In the Linux kernel through 4.15.4, the floppy driver reveals the addresses of kernel functions and global variables using printk calls within the function show_floppy in drivers/block/floppy.c. An attacker can read this information from dmesg and use the addresses to find the locations of kernel code and data and bypass kernel security protections such as KASLR.
CVE-2019-11487: The Linux kernel before 5.1-rc5 allows page->_refcount reference count overflow, with resultant use-after-free issues, if about 140 GiB of RAM exists. This is related to fs/fuse/dev.c, fs/pipe.c, fs/splice.c, include/linux/mm.h, include/linux/pipe_fs_i.h, kernel/trace/trace.c, mm/gup.c, and mm/hugetlb.c. It can occur with FUSE requests.
CVE-2019-3874: The SCTP socket buffer used by a userspace application is not accounted by the cgroups subsystem. An attacker can use this flaw to cause a denial of service attack. Kernel 3.10.x and 4.18.x branches are believed to be vulnerable.
CVE-2018-1000026: Linux Linux kernel version at least v4.8 onwards, probably well before contains a Insufficient input validation vulnerability in bnx2x network card driver that can result in DoS: Network card firmware assertion takes card off-line. This attack appear to be exploitable via An attacker on a must pass a very large, specially crafted packet to the bnx2x card. This can be done from an untrusted guest VM..
CVE-2018-10087: The kernel_wait4 function in kernel/exit.c in the Linux kernel before 4.13, when an unspecified architecture and compiler is used, might allow local users to cause a denial of service by triggering an attempted use of the -INT_MIN value.
CVE-2018-14614: An issue was discovered in the Linux kernel through 4.17.10. There is an out-of-bounds access in __remove_dirty_segment() in fs/f2fs/segment.c when mounting an f2fs image.
CVE-2014-9717: fs/namespace.c in the Linux kernel before 4.0.2 processes MNT_DETACH umount2 system calls without verifying that the MNT_LOCKED flag is unset, which allows local users to bypass intended access restrictions and navigate to filesystem locations beneath a mount by calling umount2 within a user namespace.
CVE-2016-3139: The wacom_probe function in drivers/input/tablet/wacom_sys.c in the Linux kernel before 3.17 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash) via a crafted endpoints value in a USB device descriptor.
CVE-2018-7754: The aoedisk_debugfs_show function in drivers/block/aoe/aoeblk.c in the Linux kernel through 4.16.4rc4 allows local users to obtain sensitive address information by reading "ffree: " lines in a debugfs file.
CVE-2013-7445: The Direct Rendering Manager (DRM) subsystem in the Linux kernel through 4.x mishandles requests for Graphics Execution Manager (GEM) objects, which allows context-dependent attackers to cause a denial of service (memory consumption) via an application that processes graphics data, as demonstrated by JavaScript code that creates many CANVAS elements for rendering by Chrome or Firefox.
CVE-2019-18660: The Linux kernel before 5.4.1 on powerpc allows Information Exposure because the Spectre-RSB mitigation is not in place for all applicable CPUs, aka CID-39e72bf96f58. This is related to arch/powerpc/kernel/entry_64.S and arch/powerpc/kernel/security.c.
CVE-2017-18249: The add_free_nid function in fs/f2fs/node.c in the Linux kernel before 4.12 does not properly track an allocated nid, which allows local users to cause a denial of service (race condition) or possibly have unspecified other impact via concurrent threads.
CVE-2018-13100: An issue was discovered in fs/f2fs/super.c in the Linux kernel through 4.17.3, which does not properly validate secs_per_zone in a corrupted f2fs image, as demonstrated by a divide-by-zero error.
CVE-2018-3646: Systems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure of information residing in the L1 data cache to an attacker with local user access with guest OS privilege via a terminal page fault and a side-channel analysis.
CVE-2018-1128: It was found that cephx authentication protocol did not verify ceph clients correctly and was vulnerable to replay attack. Any attacker having access to ceph cluster network who is able to sniff packets on network can use this vulnerability to authenticate with ceph service and perform actions allowed by ceph service. Ceph branches master, mimic, luminous and jewel are believed to be vulnerable.
CVE-2018-1120: A flaw was found affecting the Linux kernel before version 4.17. By mmap()ing a FUSE-backed file onto a process's memory containing command line arguments (or environment strings), an attacker can cause utilities from psutils or procps (such as ps, w) or any other program which makes a read() call to the /proc/<pid>/cmdline (or /proc/<pid>/environ) files to block indefinitely (denial of service) or for some controlled time (as a synchronization primitive for other attacks).
CVE-2018-10322: The xfs_dinode_verify function in fs/xfs/libxfs/xfs_inode_buf.c in the Linux kernel through 4.16.3 allows local users to cause a denial of service (xfs_ilock_attr_map_shared invalid pointer dereference) via a crafted xfs image.
CVE-2017-10663: The sanity_check_ckpt function in fs/f2fs/super.c in the Linux kernel before 4.12.4 does not validate the blkoff and segno arrays, which allows local users to gain privileges via unspecified vectors.
CVE-2017-10662: The sanity_check_raw_super function in fs/f2fs/super.c in the Linux kernel before 4.11.1 does not validate the segment count, which allows local users to gain privileges via unspecified vectors.
CVE-2018-18021: arch/arm64/kvm/guest.c in KVM in the Linux kernel before 4.18.12 on the arm64 platform mishandles the KVM_SET_ON_REG ioctl. This is exploitable by attackers who can create virtual machines. An attacker can arbitrarily redirect the hypervisor flow of control (with full register control). An attacker can also cause a denial of service (hypervisor panic) via an illegal exception return. This occurs because of insufficient restrictions on userspace access to the core register file, and because PSTATE.M validation does not prevent unintended execution modes.

Please fix them.

Created: 2015-07-12 Last update: 2020-02-15 04:49

56 security issues in stretch high

There are 56 open security issues in stretch.

47 important issues:

CVE-2019-5108: An exploitable denial-of-service vulnerability exists in the Linux kernel prior to mainline 5.3. An attacker could exploit this vulnerability by triggering AP to send IAPP location updates for stations before the required authentication process has completed. This could lead to different denial-of-service scenarios, either by causing CAM table attacks, or by leading to traffic flapping if faking already existing clients in other nearby APs of the same wireless infrastructure. An attacker can forge Authentication and Association Request packets to trigger this vulnerability.
CVE-2018-13095: An issue was discovered in fs/xfs/libxfs/xfs_inode_buf.c in the Linux kernel through 4.17.3. A denial of service (memory corruption and BUG) can occur for a corrupted xfs image upon encountering an inode that is in extent format, but has more extents than fit in the inode fork.
CVE-2019-19770: In the Linux kernel 4.19.83, there is a use-after-free (read) in the debugfs_remove function in fs/debugfs/inode.c (which is used to remove a file or directory in debugfs that was previously created with a call to another debugfs function such as debugfs_create_file).
CVE-2020-8428: fs/namei.c in the Linux kernel before 5.5 has a may_create_in_sticky use-after-free, which allows local users to cause a denial of service (OOPS) or possibly obtain sensitive information from kernel memory, aka CID-d0cb50185ae9. One attack vector may be an open system call for a UNIX domain socket, if the socket is being moved to a new parent directory and its old parent directory is being removed.
CVE-2020-8649: There is a use-after-free vulnerability in the Linux kernel through 5.5.2 in the vgacon_invert_region function in drivers/video/console/vgacon.c.
CVE-2020-8648: There is a use-after-free vulnerability in the Linux kernel through 5.5.2 in the n_tty_receive_buf_common function in drivers/tty/n_tty.c.
CVE-2020-8647: There is a use-after-free vulnerability in the Linux kernel through 5.5.2 in the vc_do_resize function in drivers/tty/vt/vt.c.
CVE-2018-9517: In pppol2tp_connect, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android kernel. Android ID: A-38159931.
CVE-2019-19318: In the Linux kernel 5.3.11, mounting a crafted btrfs image twice can cause an rwsem_down_write_slowpath use-after-free because (in rwsem_can_spin_on_owner in kernel/locking/rwsem.c) rwsem_owner_flags returns an already freed pointer,
CVE-2019-19319: In the Linux kernel 5.0.21, a setxattr operation, after a mount of a crafted ext4 image, can cause a slab-out-of-bounds write access because of an ext4_xattr_set_entry use-after-free in fs/ext4/xattr.c when a large old_size value is used in a memset call.
CVE-2019-19769: In the Linux kernel 5.3.10, there is a use-after-free (read) in the perf_trace_lock_acquire function (related to include/trace/events/lock.h).
CVE-2019-19768: In the Linux kernel 5.4.0-rc2, there is a use-after-free (read) in the __blk_add_trace function in kernel/trace/blktrace.c (which is used to fill out a blk_io_trace structure and place it in a per-cpu sub-buffer).
CVE-2018-12930: ntfs_end_buffer_async_read in the ntfs.ko filesystem driver in the Linux kernel 4.15.0 allows attackers to trigger a stack-based out-of-bounds write and cause a denial of service (kernel oops or panic) or possibly have unspecified other impact via a crafted ntfs filesystem.
CVE-2018-12931: ntfs_attr_find in the ntfs.ko filesystem driver in the Linux kernel 4.15.0 allows attackers to trigger a stack-based out-of-bounds write and cause a denial of service (kernel oops or panic) or possibly have unspecified other impact via a crafted ntfs filesystem.
CVE-2018-3693: Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a speculative buffer overflow and side-channel analysis.
CVE-2018-12929: ntfs_read_locked_inode in the ntfs.ko filesystem driver in the Linux kernel 4.15.0 allows attackers to trigger a use-after-free read and possibly cause a denial of service (kernel oops or panic) via a crafted ntfs filesystem.
CVE-2019-19448: In the Linux kernel 5.0.21 and 5.3.11, mounting a crafted btrfs filesystem image, performing some operations, and then making a syncfs system call can lead to a use-after-free in try_merge_free_space in fs/btrfs/free-space-cache.c because the pointer to a left data structure can be the same as the pointer to a right data structure.
CVE-2019-19449: In the Linux kernel 5.0.21, mounting a crafted f2fs filesystem image can lead to slab-out-of-bounds read access in f2fs_build_segment_manager in fs/f2fs/segment.c, related to init_min_max_mtime in fs/f2fs/segment.c (because the second argument to get_seg_entry is not validated).
CVE-2019-9445: In the Android kernel in F2FS driver there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with system execution privileges needed. User interaction is not needed for exploitation.
CVE-2019-19927: In the Linux kernel 5.0.0-rc7 (as distributed in ubuntu/linux.git on kernel.ubuntu.com), mounting a crafted f2fs filesystem image and performing some operations can lead to slab-out-of-bounds read access in ttm_put_pages in drivers/gpu/drm/ttm/ttm_page_alloc.c. This is related to the vmwgfx or ttm module.
CVE-2019-19462: relay_open in kernel/relay.c in the Linux kernel through 5.4.1 allows local users to cause a denial of service (such as relay blockage) by triggering a NULL alloc_percpu result.
CVE-2019-18885: fs/btrfs/volumes.c in the Linux kernel before 5.1 allows a btrfs_verify_dev_extents NULL pointer dereference via a crafted btrfs image because fs_devices->devices is mishandled within find_device, aka CID-09ba3bc9dd15.
CVE-2019-3016: In a Linux KVM guest that has PV TLB enabled, a process in the guest kernel may be able to read memory locations from another process in the same guest. This problem is limit to the host running linux kernel 4.10 with a guest running linux kernel 4.16 or later. The problem mainly affects AMD processors but Intel CPUs cannot be ruled out.
CVE-2018-17977: The Linux kernel 4.14.67 mishandles certain interaction among XFRM Netlink messages, IPPROTO_AH packets, and IPPROTO_IP packets, which allows local users to cause a denial of service (memory consumption and system hang) by leveraging root access to execute crafted applications, as demonstrated on CentOS 7.
CVE-2017-0630: An information disclosure vulnerability in the kernel trace subsystem could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-34277115.
CVE-2019-19813: In the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image, performing some operations, and then making a syncfs system call can lead to a use-after-free in __mutex_lock in kernel/locking/mutex.c. This is related to mutex_can_spin_on_owner in kernel/locking/mutex.c, __btrfs_qgroup_free_meta in fs/btrfs/qgroup.c, and btrfs_insert_delayed_items in fs/btrfs/delayed-inode.c.
CVE-2019-19816: In the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image and performing some operations can cause slab-out-of-bounds write access in __btrfs_map_block in fs/btrfs/volumes.c, because a value of 1 for the number of data stripes is mishandled.
CVE-2018-18653: The Linux kernel, as used in Ubuntu 18.10 and when booted with UEFI Secure Boot enabled, allows privileged local users to bypass intended Secure Boot restrictions and execute untrusted code by loading arbitrary kernel modules. This occurs because a modified kernel/module.c, in conjunction with certain configuration options, leads to mishandling of the result of signature verification.
CVE-2019-19074: A memory leak in the ath9k_wmi_cmd() function in drivers/net/wireless/ath/ath9k/wmi.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption), aka CID-728c1e2a05e4.
CVE-2019-19073: Memory leaks in drivers/net/wireless/ath/ath9k/htc_hst.c in the Linux kernel through 5.3.11 allow attackers to cause a denial of service (memory consumption) by triggering wait_for_completion_timeout() failures. This affects the htc_config_pipe_credits() function, the htc_setup_complete() function, and the htc_connect_service() function, aka CID-853acf7caf10.
CVE-2020-0009: In calc_vm_may_flags of ashmem.c, there is a possible arbitrary write to shared memory due to a permissions bypass. This could lead to local escalation of privilege by corrupting memory shared between processes, with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-142938932
CVE-2016-10723: ** DISPUTED ** An issue was discovered in the Linux kernel through 4.17.2. Since the page allocator does not yield CPU resources to the owner of the oom_lock mutex, a local unprivileged user can trivially lock up the system forever by wasting CPU resources from the page allocator (e.g., via concurrent page fault events) when the global OOM killer is invoked. NOTE: the software maintainer has not accepted certain proposed patches, in part because of a viewpoint that "the underlying problem is non-trivial to handle."
CVE-2019-19815: In the Linux kernel 5.0.21, mounting a crafted f2fs filesystem image can cause a NULL pointer dereference in f2fs_recover_fsync_data in fs/f2fs/recovery.c. This is related to F2FS_P_SB in fs/f2fs/f2fs.h.
CVE-2019-19814: In the Linux kernel 5.0.21, mounting a crafted f2fs filesystem image can cause __remove_dirty_segment slab-out-of-bounds write access because an array is bounded by the number of dirty types (8) but the array index can exceed this.
CVE-2016-8660: The XFS subsystem in the Linux kernel through 4.8.2 allows local users to cause a denial of service (fdatasync failure and system hang) by using the vfs syscall group in the trinity program, related to a "page lock order bug in the XFS seek hole/data implementation."
CVE-2019-19039: ** DISPUTED ** __btrfs_free_extent in fs/btrfs/extent-tree.c in the Linux kernel through 5.3.12 calls btrfs_print_leaf in a certain ENOENT case, which allows local users to obtain potentially sensitive information about register values via the dmesg program. NOTE: The BTRFS development team disputes this issues as not being a vulnerability because “1) The kernel provide facilities to restrict access to dmesg - dmesg_restrict=1 sysctl option. So it's really up to the system administrator to judge whether dmesg access shall be disallowed or not. 2) WARN/WARN_ON are widely used macros in the linux kernel. If this CVE is considered valid this would mean there are literally thousands CVE lurking in the kernel - something which clearly is not the case.”
CVE-2019-9453: In the Android kernel in F2FS touch driver there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with system execution privileges needed. User interaction is not needed for exploitation.
CVE-2019-19036: btrfs_root_node in fs/btrfs/ctree.c in the Linux kernel through 5.3.12 allows a NULL pointer dereference because rcu_dereference(root->node) can be zero.
CVE-2019-12881: i915_gem_userptr_get_pages in drivers/gpu/drm/i915/i915_gem_userptr.c in the Linux kernel 4.15.0 on Ubuntu 18.04.2 allows local users to cause a denial of service (NULL pointer dereference and BUG) or possibly have unspecified other impact via crafted ioctl calls to /dev/dri/card0.
CVE-2018-10322: The xfs_dinode_verify function in fs/xfs/libxfs/xfs_inode_buf.c in the Linux kernel through 4.16.3 allows local users to cause a denial of service (xfs_ilock_attr_map_shared invalid pointer dereference) via a crafted xfs image.
CVE-2019-2213: In binder_free_transaction of binder.c, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-133758011References: Upstream kernel
CVE-2019-2182: In the Android kernel in the kernel MMU code there is a possible execution path leaving some kernel text and rodata pages writable. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2019-9245: In the Android kernel in the f2fs driver there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.
CVE-2020-8992: ext4_protect_reserved_inode in fs/ext4/block_validity.c in the Linux kernel through 5.5.3 allows attackers to cause a denial of service (soft lockup) via a crafted journal size.
CVE-2019-12984: A NULL pointer dereference vulnerability in the function nfc_genl_deactivate_target() in net/nfc/netlink.c in the Linux kernel before 5.1.13 can be triggered by a malicious user-mode program that omits certain NFC attributes, leading to denial of service.
CVE-2019-19378: In the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image can lead to slab-out-of-bounds write access in index_rbio_pages in fs/btrfs/raid56.c.
CVE-2019-19377: In the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image, performing some operations, and unmounting can lead to a use-after-free in btrfs_queue_work in fs/btrfs/async-thread.c.

9 issues skipped by the security teams:

CVE-2018-1108: kernel drivers before version 4.17-rc1 are vulnerable to a weakness in the Linux kernel's implementation of random seed data. Programs, early in the boot sequence, could use the data allocated for the seed before it was sufficiently generated.
CVE-2017-18232: The Serial Attached SCSI (SAS) implementation in the Linux kernel through 4.15.9 mishandles a mutex within libsas, which allows local users to cause a denial of service (deadlock) by triggering certain error-handling code.
CVE-2018-12928: In the Linux kernel 4.15.0, a NULL pointer dereference was discovered in hfs_ext_read_extent in hfs.ko. This can occur during a mount of a crafted hfs filesystem.
CVE-2019-9444: In the Android kernel in sync debug fs driver there is a kernel pointer leak due to the usage of printf with %p. This could lead to local information disclosure with system execution privileges needed. User interaction is not needed for exploitation.
CVE-2018-7273: In the Linux kernel through 4.15.4, the floppy driver reveals the addresses of kernel functions and global variables using printk calls within the function show_floppy in drivers/block/floppy.c. An attacker can read this information from dmesg and use the addresses to find the locations of kernel code and data and bypass kernel security protections such as KASLR.
CVE-2019-3874: The SCTP socket buffer used by a userspace application is not accounted by the cgroups subsystem. An attacker can use this flaw to cause a denial of service attack. Kernel 3.10.x and 4.18.x branches are believed to be vulnerable.
CVE-2018-7754: The aoedisk_debugfs_show function in drivers/block/aoe/aoeblk.c in the Linux kernel through 4.16.4rc4 allows local users to obtain sensitive address information by reading "ffree: " lines in a debugfs file.
CVE-2013-7445: The Direct Rendering Manager (DRM) subsystem in the Linux kernel through 4.x mishandles requests for Graphics Execution Manager (GEM) objects, which allows context-dependent attackers to cause a denial of service (memory consumption) via an application that processes graphics data, as demonstrated by JavaScript code that creates many CANVAS elements for rendering by Chrome or Firefox.
CVE-2018-20449: The hidma_chan_stats function in drivers/dma/qcom/hidma_dbg.c in the Linux kernel 4.14.90 allows local users to obtain sensitive address information by reading "callback=" lines in a debugfs file.

Please fix them.

Created: 2015-07-12 Last update: 2020-02-15 04:49

88 bugs tagged patch in the BTS normal

The BTS contains patches fixing 88 bugs (90 if counting merged bugs), consider including or untagging them.

Created: 2019-04-01 Last update: 2020-02-16 21:33

Depends on packages which need a new maintainer normal

The packages that linux depends on which need a new maintainer are:

dh-exec (#851746)
- Build-Depends: dh-exec

Created: 2019-11-22 Last update: 2020-02-16 20:34

version in VCS is newer than in repository, is it time to upload? normal

vcswatch reports that this package seems to have a new changelog entry (version 5.5.2-1~exp1, distribution UNRELEASED) and new commits in its VCS. You should consider whether it's time to make an upload.

Here are the relevant commit messages:

commit f3d6cc47e5712d4ac0b5deeff8806c757586093d
Author: Romain Perier <romain.perier@gmail.com>
Date:   Tue Feb 11 18:54:43 2020 +0100

    Update to 5.5.2

commit 0ec23b31b121b3f4ba15569acc27f1d8b200a711
Author: Romain Perier <romain.perier@gmail.com>
Date:   Wed Feb 5 19:12:19 2020 +0100

    [arm64] Fix CONFIG_INFINIBAND_HNS_HIP06/HIP08 from tristate to boolean
    
    The types of the kconfig symbols have been changed from tristate to
    boolean, resulting in the following warnings during config generation or
    menuconfig:
    
    .config:5106:warning: symbol value 'm' invalid for INFINIBAND_HNS_HIP06
    .config:5107:warning: symbol value 'm' invalid for INFINIBAND_HNS_HIP08

commit bc8cd7ed96add7b9de4314d88e1f7f967e36d433
Author: Romain Perier <romain.perier@gmail.com>
Date:   Wed Feb 5 18:58:06 2020 +0100

    [arm64] Enable BCMGENET
    
    This enables Broadcom GENET internal MAC support that is present in the
    Broadcom BCM2711, found on the Raspberry PI 4.

commit 047f6480489cfa644cc73ac42afb2a8801cb0d95
Author: Aurelien Jarno <aurelien@aurel32.net>
Date:   Sun Feb 2 22:19:04 2020 +0100

    [riscv64] Enable SECCOMP.

commit e2b1644127b6b6b8a07809eeb805831843921c14
Author: Romain Perier <romain.perier@gmail.com>
Date:   Sun Feb 2 09:02:31 2020 +0100

    Update to 5.5.1

commit 3a090fbcd410d55c826aefc3a607a6b259aa7186
Author: Ben Hutchings <ben@decadent.org.uk>
Date:   Wed Jan 29 23:13:29 2020 +0000

    wireless: Enable regulatory.db direct loading
    
    I finally got round to making wireless-regdb support this, so:
    
    - Drop "wireless: Disable regulatory.db direct loading"
    - linux-image: Add Breaks: relation with old wireless-regdb versions
    - Regenerate my wireless-regdb certificate with expected attributes

commit d0741029880339a6ac518a3024754b0ededd7547
Author: Ben Hutchings <ben@decadent.org.uk>
Date:   Thu Jan 30 15:22:05 2020 +0100

    [armhf] net/ethernet/ti: Enable TI_CPSW_SWITCHDEV as module; enable TI_CPTS

commit d1929b0ecad1e3f46d96738821fccf019cb331cd
Author: Ben Hutchings <ben@decadent.org.uk>
Date:   Thu Jan 30 15:20:05 2020 +0100

    net: Enable NET_SWITCHDEV; disable on armel/marvell (Closes: #949863)
    
    Also explicitly set some dependent symbols to their defaults.

commit d76fcd54daee04f86b26f554816b78c5510212d2
Author: Ben Hutchings <ben@decadent.org.uk>
Date:   Wed Jan 29 23:07:03 2020 +0000

    Update to 5.5
    
    - Set ABI to trunk

commit d186fa263a98a0aa93e0a878987e6fee0553585b
Author: Ben Hutchings <ben@decadent.org.uk>
Date:   Mon Jan 20 02:49:19 2020 +0000

    aufs: Update support patchset to aufs5.x-rcN 20200120; no functional change

commit 7efa2695bbda9bdc31c0ba4d1c9198a742958dec
Author: Ben Hutchings <ben@decadent.org.uk>
Date:   Mon Jan 20 02:47:09 2020 +0000

    Update to 5.5-rc7

Created: 2020-01-20 Last update: 2020-02-16 18:34

Multiarch hinter reports 3 issue(s) normal

There are issues with the multiarch metadata for this package.

libcpupower-dev could be marked Multi-Arch: same
libcpupower2 could be marked Multi-Arch: same
linux-headers-5.4.0-4-all could be marked Multi-Arch: same

Created: 2019-11-21 Last update: 2020-02-16 16:56

Does not build reproducibly during testing normal

A package building reproducibly enables third parties to verify that the source matches the distributed binaries. It has been identified that this source package produced different results, failed to build or had other issues in a test environment. Please read about how to improve the situation!

Created: 2019-12-14 Last update: 2020-02-16 16:55

Build log checks report 2 warnings low

Build log checks report 2 warnings

Created: 2019-08-22 Last update: 2019-08-22 01:01

Standards version of the package is outdated. wishlist

The package should be updated to follow the last version of Debian Policy (Standards-Version 4.5.0 instead of 4.2.0).

Created: 2017-12-02 Last update: 2020-02-13 17:10

testing migrations

excuses:
- Migration status for linux (5.4.13-1 to 5.4.19-1): Waiting for test results, another package or too young (no action required now - check later)
- Issues preventing migration:
- Too young, only 4 of 5 days old
- Additional info:
- Piuparts tested OK - https://piuparts.debian.org/sid/source/l/linux.html
- Not considered

news

[rss feed]

[2020-02-13] Accepted linux 5.4.19-1 (source) into unstable, unstable (Debian FTP Masters) (signed by: Salvatore Bonaccorso)
[2020-02-11] Accepted linux 5.4.13-1~bpo10+1 (source) into buster-backports, buster-backports (Debian FTP Masters) (signed by: Ben Hutchings)
[2020-01-28] Accepted linux 4.19.98-1 (all source) into proposed-updates->stable-new, proposed-updates (Salvatore Bonaccorso)
[2020-01-25] Accepted linux 4.9.210-1 (all source) into oldstable-proposed-updates->oldstable-new, oldstable-proposed-updates (Ben Hutchings)
[2020-01-24] linux 5.4.13-1 MIGRATED to testing (Debian testing watch)
[2020-01-19] Accepted linux 5.4.13-1 (source) into unstable, unstable (Salvatore Bonaccorso)
[2020-01-17] Accepted linux 3.16.81-1 (all source) into oldoldstable (Ben Hutchings)
[2020-01-11] linux 5.4.8-1 MIGRATED to testing (Debian testing watch)
[2020-01-09] Accepted linux 5.4.8-1~bpo10+1 (source) into buster-backports, buster-backports (Ben Hutchings)
[2020-01-06] Accepted linux 5.5~rc5-1~exp1 (source) into experimental, experimental (Ben Hutchings)
[2020-01-05] Accepted linux 5.4.8-1 (source) into unstable, unstable (Salvatore Bonaccorso)
[2019-12-28] Accepted linux 5.4.6-1 (source) into unstable, unstable (Ben Hutchings)
[2019-12-14] linux 5.3.15-1 MIGRATED to testing (Debian testing watch)
[2019-12-07] Accepted linux 4.19.87-1 (all source) into proposed-updates->stable-new, proposed-updates (Salvatore Bonaccorso)
[2019-12-07] Accepted linux 5.3.15-1 (source) into unstable, unstable (Salvatore Bonaccorso)
[2019-12-05] Accepted linux 5.4.2-1~exp1 (source) into experimental (Salvatore Bonaccorso)
[2019-11-27] Accepted linux 5.4-1~exp1 (source) into experimental, experimental (Ben Hutchings)
[2019-11-26] linux 5.3.9-3 MIGRATED to testing (Debian testing watch)
[2019-11-24] Accepted linux 4.9.189-3+deb9u2 (all source) into oldstable-proposed-updates->oldstable-new, oldstable-proposed-updates (Ben Hutchings)
[2019-11-19] Accepted linux 4.19.67-2+deb10u2 (source) into proposed-updates->stable-new, proposed-updates (Ben Hutchings)
[2019-11-19] Accepted linux 5.3.9-3 (source) into unstable (Ben Hutchings)
[2019-11-18] Accepted linux 4.19.67-2+deb10u2~bpo9+1 (source) into stretch-backports->backports-policy, stretch-backports (Ben Hutchings)
[2019-11-18] Accepted linux 5.3.9-2~bpo10+1 (source) into buster-backports, buster-backports (Ben Hutchings)
[2019-11-12] Accepted linux 5.3.9-2 (source) into unstable (Ben Hutchings)
[2019-11-12] Accepted linux 3.16.76-1 (all source) into oldoldstable (Ben Hutchings)
[2019-11-12] Accepted linux 4.19.67-2+deb10u2 (source) into stable->embargoed, stable (Ben Hutchings)
[2019-11-12] Accepted linux 4.9.189-3+deb9u2 (all source) into oldstable->embargoed, oldstable (Ben Hutchings)
[2019-11-09] Accepted linux 5.3.9-1 (source) into unstable, unstable (Ben Hutchings)
[2019-10-20] Accepted linux 5.3.7-1 (all source) into unstable, unstable (Salvatore Bonaccorso)
[2019-10-08] Accepted linux 5.2.17-1~bpo10+1 (all source) into buster-backports, buster-backports (Ben Hutchings)

bugs [bug history graph]

all: 2547 2637
RC: 12
I&N: 2349 2429
M&W: 180 190
F&P: 6
patch: 88 90

links

homepage
buildd: logs, exp, checks, clang, reproducibility
popcon
browse source code
edit tags
security tracker
debci

ubuntu

[Information about Ubuntu for Debian Developers]

version: 5.4.0-9.12
6525 bugs (266 patches)