{"id":"USN-6001-1","summary":"linux-aws vulnerabilities","details":"\nXuewei Feng, Chuanpu Fu, Qi Li, Kun Sun, and Ke Xu discovered that the TCP\nimplementation in the Linux kernel did not properly handle IPID assignment.\nA remote attacker could use this to cause a denial of service (connection\ntermination) or inject forged data. (CVE-2020-36516)\n\nKe Sun, Alyssa Milburn, Henrique Kawakami, Emma Benoit, Igor Chervatyuk,\nLisa Aichele, and Thais Moreira Hamasaki discovered that the Spectre\nVariant 2 mitigations for AMD processors on Linux were insufficient in some\nsituations. A local attacker could possibly use this to expose sensitive\ninformation. (CVE-2021-26401)\n\nJürgen Groß discovered that the Xen subsystem within the Linux kernel did\nnot adequately limit the number of events driver domains (unprivileged PV\nbackends) could send to other guest VMs. An attacker in a driver domain\ncould use this to cause a denial of service in other guest VMs.\n(CVE-2021-28712, CVE-2021-28713)\n\nWolfgang Frisch discovered that the ext4 file system implementation in the\nLinux kernel contained an integer overflow when handling metadata inode\nextents. An attacker could use this to construct a malicious ext4 file\nsystem image that, when mounted, could cause a denial of service (system\ncrash). (CVE-2021-3428)\n\nIt was discovered that the IEEE 802.15.4 wireless network subsystem in the\nLinux kernel did not properly handle certain error conditions, leading to a\nnull pointer dereference vulnerability. A local attacker could possibly use\nthis to cause a denial of service (system crash). (CVE-2021-3659)\n\nIt was discovered that the System V IPC implementation in the Linux kernel\ndid not properly handle large shared memory counts. A local attacker could\nuse this to cause a denial of service (memory exhaustion). (CVE-2021-3669)\n\nAlois Wohlschlager discovered that the overlay file system in the Linux\nkernel did not restrict private clones in some situations. An attacker\ncould use this to expose sensitive information. (CVE-2021-3732)\n\nIt was discovered that the SCTP protocol implementation in the Linux kernel\ndid not properly verify VTAGs in some situations. A remote attacker could\npossibly use this to cause a denial of service (connection disassociation).\n(CVE-2021-3772)\n\nIt was discovered that the btrfs file system implementation in the Linux\nkernel did not properly handle locking in certain error conditions. A local\nattacker could use this to cause a denial of service (kernel deadlock).\n(CVE-2021-4149)\n\nJann Horn discovered that the socket subsystem in the Linux kernel\ncontained a race condition when handling listen() and connect() operations,\nleading to a read-after-free vulnerability. A local attacker could use this\nto cause a denial of service (system crash) or possibly expose sensitive\ninformation. (CVE-2021-4203)\n\nIt was discovered that the file system quotas implementation in the Linux\nkernel did not properly validate the quota block number. An attacker could\nuse this to construct a malicious file system image that, when mounted and\noperated on, could cause a denial of service (system crash).\n(CVE-2021-45868)\n\nZhihua Yao discovered that the MOXART SD/MMC driver in the Linux kernel did\nnot properly handle device removal, leading to a use-after-free\nvulnerability. A physically proximate attacker could possibly use this to\ncause a denial of service (system crash). (CVE-2022-0487)\n\nIt was discovered that the block layer subsystem in the Linux kernel did\nnot properly initialize memory in some situations. A privileged local\nattacker could use this to expose sensitive information (kernel memory).\n(CVE-2022-0494)\n\nIt was discovered that the UDF file system implementation in the Linux\nkernel could attempt to dereference a null pointer in some situations. An\nattacker could use this to construct a malicious UDF image that, when\nmounted and operated on, could cause a denial of service (system crash).\n(CVE-2022-0617)\n\nDavid Bouman discovered that the netfilter subsystem in the Linux kernel\ndid not initialize memory in some situations. A local attacker could use\nthis to expose sensitive information (kernel memory). (CVE-2022-1016)\n\nIt was discovered that the implementation of the 6pack and mkiss protocols\nin the Linux kernel did not handle detach events properly in some\nsituations, leading to a use-after-free vulnerability. A local attacker\ncould possibly use this to cause a denial of service (system crash).\n(CVE-2022-1195)\n\nDuoming Zhou discovered race conditions in the AX.25 amateur radio protocol\nimplementation in the Linux kernel, leading to use-after-free\nvulnerabilities. A local attacker could possibly use this to cause a denial\nof service (system crash). (CVE-2022-1205)\n\nIt was discovered that the tty subsystem in the Linux kernel contained a\nrace condition in certain situations, leading to an out-of-bounds read\nvulnerability. A local attacker could possibly use this to cause a denial\nof service (system crash) or expose sensitive information. (CVE-2022-1462)\n\nIt was discovered that the implementation of X.25 network protocols in the\nLinux kernel did not terminate link layer sessions properly. A local\nattacker could possibly use this to cause a denial of service (system\ncrash). (CVE-2022-1516)\n\nDuoming Zhou discovered a race condition in the NFC subsystem in the Linux\nkernel, leading to a use-after-free vulnerability. A privileged local\nattacker could use this to cause a denial of service (system crash) or\npossibly execute arbitrary code. (CVE-2022-1974)\n\nDuoming Zhou discovered that the NFC subsystem in the Linux kernel did not\nproperly prevent context switches from occurring during certain atomic\ncontext operations. A privileged local attacker could use this to cause a\ndenial of service (system crash). (CVE-2022-1975)\n\nIt was discovered that the HID subsystem in the Linux kernel did not\nproperly validate inputs in certain conditions. A local attacker with\nphysical access could plug in a specially crafted USB device to expose\nsensitive information. (CVE-2022-20132)\n\nIt was discovered that the device-mapper verity (dm-verity) driver in the\nLinux kernel did not properly verify targets being loaded into the device-\nmapper table. A privileged attacker could use this to cause a denial of\nservice (system crash) or possibly execute arbitrary code. (CVE-2022-20572,\nCVE-2022-2503)\n\nDuoming Zhou discovered that race conditions existed in the timer handling\nimplementation of the Linux kernel's Rose X.25 protocol layer, resulting in\nuse-after-free vulnerabilities. A local attacker could use this to cause a\ndenial of service (system crash). (CVE-2022-2318)\n\nZheyu Ma discovered that the Silicon Motion SM712 framebuffer driver in the\nLinux kernel did not properly handle very small reads. A local attacker\ncould use this to cause a denial of service (system crash). (CVE-2022-2380)\n\nDavid Leadbeater discovered that the netfilter IRC protocol tracking\nimplementation in the Linux Kernel incorrectly handled certain message\npayloads in some situations. A remote attacker could possibly use this to\ncause a denial of service or bypass firewall filtering. (CVE-2022-2663)\n\nLucas Leong discovered that the LightNVM subsystem in the Linux kernel did\nnot properly handle data lengths in certain situations. A privileged\nattacker could use this to cause a denial of service (system crash) or\npossibly execute arbitrary code. (CVE-2022-2991)\n\nIt was discovered that the Intel 740 frame buffer driver in the Linux\nkernel contained a divide by zero vulnerability. A local attacker could use\nthis to cause a denial of service (system crash). (CVE-2022-3061)\n\nJiasheng Jiang discovered that the wm8350 charger driver in the Linux\nkernel did not properly deallocate memory, leading to a null pointer\ndereference vulnerability. A local attacker could use this to cause a\ndenial of service (system crash). (CVE-2022-3111)\n\nIt was discovered that the sound subsystem in the Linux kernel contained a\nrace condition in some situations. A local attacker could use this to cause\na denial of service (system crash). (CVE-2022-3303)\n\nIt was discovered that the Broadcom FullMAC USB WiFi driver in the Linux\nkernel did not properly perform bounds checking in some situations. A\nphysically proximate attacker could use this to craft a malicious USB\ndevice that when inserted, could cause a denial of service (system crash)\nor possibly execute arbitrary code. (CVE-2022-3628)\n\nZiming Zhang discovered that the VMware Virtual GPU DRM driver in the Linux\nkernel contained an out-of-bounds write vulnerability. A local attacker\ncould use this to cause a denial of service (system crash).\n(CVE-2022-36280)\n\nIt was discovered that the NILFS2 file system implementation in the Linux\nkernel did not properly deallocate memory in certain error conditions. An\nattacker could use this to cause a denial of service (memory exhaustion).\n(CVE-2022-3646)\n\nIt was discovered that the Netlink Transformation (XFRM) subsystem in the\nLinux kernel contained a reference counting error. A local attacker could\nuse this to cause a denial of service (system crash). (CVE-2022-36879)\n\nIt was discovered that the infrared transceiver USB driver did not properly\nhandle USB control messages. A local attacker with physical access could\nplug in a specially crafted USB device to cause a denial of service (memory\nexhaustion). (CVE-2022-3903)\n\nJann Horn discovered a race condition existed in the Linux kernel when\nunmapping VMAs in certain situations, resulting in possible use-after-free\nvulnerabilities. A local attacker could possibly use this to cause a denial\nof service (system crash) or execute arbitrary code. (CVE-2022-39188)\n\nHyunwoo Kim discovered that the DVB Core driver in the Linux kernel did not\nproperly perform reference counting in some situations, leading to a use-\nafter-free vulnerability. A local attacker could use this to cause a denial\nof service (system crash) or possibly execute arbitrary code.\n(CVE-2022-41218)\n\nIt was discovered that a race condition existed in the SMSC UFX USB driver\nimplementation in the Linux kernel, leading to a use-after-free\nvulnerability. A physically proximate attacker could use this to cause a\ndenial of service (system crash) or possibly execute arbitrary code.\n(CVE-2022-41849)\n\nIt was discovered that a race condition existed in the Roccat HID driver in\nthe Linux kernel, leading to a use-after-free vulnerability. A local\nattacker could use this to cause a denial of service (system crash) or\npossibly execute arbitrary code. (CVE-2022-41850)\n\nIt was discovered that the USB core subsystem in the Linux kernel did not\nproperly handle nested reset events. A local attacker with physical access\ncould plug in a specially crafted USB device to cause a denial of service\n(kernel deadlock). (CVE-2022-4662)\n\nIt was discovered that the network queuing discipline implementation in the\nLinux kernel contained a null pointer dereference in some situations. A\nlocal attacker could use this to cause a denial of service (system crash).\n(CVE-2022-47929)\n\nKyle Zeng discovered that the IPv6 implementation in the Linux kernel\ncontained a NULL pointer dereference vulnerability in certain situations. A\nlocal attacker could use this to cause a denial of service (system crash).\n(CVE-2023-0394)\n\nIt was discovered that a memory leak existed in the SCTP protocol\nimplementation in the Linux kernel. A local attacker could use this to\ncause a denial of service (memory exhaustion). (CVE-2023-1074)\n\nMingi Cho discovered that the netfilter subsystem in the Linux kernel did\nnot properly initialize a data structure, leading to a null pointer\ndereference vulnerability. An attacker could use this to cause a denial of\nservice (system crash). (CVE-2023-1095)\n\nKyle Zeng discovered that the ATM VC queuing discipline implementation in\nthe Linux kernel contained a type confusion vulnerability in some\nsituations. An attacker could use this to cause a denial of service (system\ncrash). (CVE-2023-23455)\n\nLianhui Tang discovered that the MPLS implementation in the Linux kernel\ndid not properly handle certain sysctl allocation failure conditions,\nleading to a double-free vulnerability. An attacker could use this to cause\na denial of service or possibly execute arbitrary code. (CVE-2023-26545)\n\nIt was discovered that the NTFS file system implementation in the Linux\nkernel did not properly validate attributes in certain situations, leading\nto an out-of-bounds read vulnerability. A local attacker could possibly use\nthis to expose sensitive information (kernel memory). (CVE-2023-26607)\n\nDuoming Zhou discovered that a race condition existed in the infrared\nreceiver/transceiver driver in the Linux kernel, leading to a use-after-\nfree vulnerability. A privileged attacker could use this to cause a denial\nof service (system crash) or possibly execute arbitrary code.\n(CVE-2023-1118)\n\n","modified":"2026-02-04T03:31:42.133007Z","published":"2023-04-06T00:13:53Z","related":["UBUNTU-CVE-2020-36516","UBUNTU-CVE-2021-26401","UBUNTU-CVE-2021-28712","UBUNTU-CVE-2021-28713","UBUNTU-CVE-2021-3428","UBUNTU-CVE-2021-3659","UBUNTU-CVE-2021-3669","UBUNTU-CVE-2021-3732","UBUNTU-CVE-2021-3772","UBUNTU-CVE-2021-4149","UBUNTU-CVE-2021-4203","UBUNTU-CVE-2021-45868","UBUNTU-CVE-2022-0487","UBUNTU-CVE-2022-0494","UBUNTU-CVE-2022-0617","UBUNTU-CVE-2022-1016","UBUNTU-CVE-2022-1195","UBUNTU-CVE-2022-1205","UBUNTU-CVE-2022-1462","UBUNTU-CVE-2022-1516","UBUNTU-CVE-2022-1974","UBUNTU-CVE-2022-1975","UBUNTU-CVE-2022-20132","UBUNTU-CVE-2022-20572","UBUNTU-CVE-2022-2318","UBUNTU-CVE-2022-2380","UBUNTU-CVE-2022-2503","UBUNTU-CVE-2022-2663","UBUNTU-CVE-2022-2991","UBUNTU-CVE-2022-3061","UBUNTU-CVE-2022-3111","UBUNTU-CVE-2022-3303","UBUNTU-CVE-2022-3628","UBUNTU-CVE-2022-36280","UBUNTU-CVE-2022-3646","UBUNTU-CVE-2022-36879","UBUNTU-CVE-2022-3903","UBUNTU-CVE-2022-39188","UBUNTU-CVE-2022-41218","UBUNTU-CVE-2022-41849","UBUNTU-CVE-2022-41850","UBUNTU-CVE-2022-4662","UBUNTU-CVE-2022-47929","UBUNTU-CVE-2023-0394","UBUNTU-CVE-2023-1074","UBUNTU-CVE-2023-1095","UBUNTU-CVE-2023-1118","UBUNTU-CVE-2023-23455","UBUNTU-CVE-2023-26545","UBUNTU-CVE-2023-26607"],"upstream":["CVE-2020-36516","CVE-2021-26401","CVE-2021-28712","CVE-2021-28713","CVE-2021-3428","CVE-2021-3659","CVE-2021-3669","CVE-2021-3732","CVE-2021-3772","CVE-2021-4149","CVE-2021-4203","CVE-2021-45868","CVE-2022-0487","CVE-2022-0494","CVE-2022-0617","CVE-2022-1016","CVE-2022-1195","CVE-2022-1205","CVE-2022-1462","CVE-2022-1516","CVE-2022-1974","CVE-2022-1975","CVE-2022-20132","CVE-2022-20572","CVE-2022-2318","CVE-2022-2380","CVE-2022-2503","CVE-2022-2663","CVE-2022-2991","CVE-2022-3061","CVE-2022-3111","CVE-2022-3303","CVE-2022-3628","CVE-2022-36280","CVE-2022-3646","CVE-2022-36879","CVE-2022-3903","CVE-2022-39188","CVE-2022-41218","CVE-2022-41849","CVE-2022-41850","CVE-2022-4662","CVE-2022-47929","CVE-2023-0394","CVE-2023-1074","CVE-2023-1095","CVE-2023-1118","CVE-2023-23455","CVE-2023-26545","CVE-2023-26607","UBUNTU-CVE-2020-36516","UBUNTU-CVE-2021-26401","UBUNTU-CVE-2021-28712","UBUNTU-CVE-2021-28713","UBUNTU-CVE-2021-3428","UBUNTU-CVE-2021-3659","UBUNTU-CVE-2021-3669","UBUNTU-CVE-2021-3732","UBUNTU-CVE-2021-3772","UBUNTU-CVE-2021-4149","UBUNTU-CVE-2021-4203","UBUNTU-CVE-2021-45868","UBUNTU-CVE-2022-0487","UBUNTU-CVE-2022-0494","UBUNTU-CVE-2022-0617","UBUNTU-CVE-2022-1016","UBUNTU-CVE-2022-1195","UBUNTU-CVE-2022-1205","UBUNTU-CVE-2022-1462","UBUNTU-CVE-2022-1516","UBUNTU-CVE-2022-1974","UBUNTU-CVE-2022-1975","UBUNTU-CVE-2022-20132","UBUNTU-CVE-2022-20572","UBUNTU-CVE-2022-2318","UBUNTU-CVE-2022-2380","UBUNTU-CVE-2022-2503","UBUNTU-CVE-2022-2663","UBUNTU-CVE-2022-2991","UBUNTU-CVE-2022-3061","UBUNTU-CVE-2022-3111","UBUNTU-CVE-2022-3303","UBUNTU-CVE-2022-3628","UBUNTU-CVE-2022-36280","UBUNTU-CVE-2022-3646","UBUNTU-CVE-2022-36879","UBUNTU-CVE-2022-3903","UBUNTU-CVE-2022-39188","UBUNTU-CVE-2022-41218","UBUNTU-CVE-2022-41849","UBUNTU-CVE-2022-41850","UBUNTU-CVE-2022-4662","UBUNTU-CVE-2022-47929","UBUNTU-CVE-2023-0394","UBUNTU-CVE-2023-1074","UBUNTU-CVE-2023-1095","UBUNTU-CVE-2023-1118","UBUNTU-CVE-2023-23455","UBUNTU-CVE-2023-26545","UBUNTU-CVE-2023-26607"],"references":[{"type":"ADVISORY","url":"https://ubuntu.com/security/notices/USN-6001-1"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2020-36516"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2021-3428"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2021-3659"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2021-3669"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2021-3732"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2021-3772"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2021-4149"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2021-4203"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2021-26401"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2021-28712"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2021-28713"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2021-45868"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2022-0487"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2022-0494"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2022-0617"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2022-1016"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2022-1195"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2022-1205"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2022-1462"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2022-1516"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2022-1974"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2022-1975"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2022-2318"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2022-2380"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2022-2503"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2022-2663"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2022-2991"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2022-3061"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2022-3111"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2022-3303"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2022-3628"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2022-3646"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2022-3903"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2022-4662"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2022-20132"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2022-20572"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2022-36280"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2022-36879"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2022-39188"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2022-41218"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2022-41849"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2022-41850"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2022-47929"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2023-0394"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2023-1074"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2023-1095"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2023-1118"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2023-23455"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2023-26545"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2023-26607"}],"affected":[{"package":{"name":"linux-aws","ecosystem":"Ubuntu:Pro:16.04:LTS","purl":"pkg:deb/ubuntu/linux-aws@4.4.0-1155.170?arch=source&distro=esm-infra/xenial"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-1155.170"}]}],"versions":["4.4.0-1001.10","4.4.0-1003.12","4.4.0-1004.13","4.4.0-1007.16","4.4.0-1009.18","4.4.0-1011.20","4.4.0-1012.21","4.4.0-1013.22","4.4.0-1016.25","4.4.0-1017.26","4.4.0-1018.27","4.4.0-1020.29","4.4.0-1022.31","4.4.0-1026.35","4.4.0-1028.37","4.4.0-1030.39","4.4.0-1031.40","4.4.0-1032.41","4.4.0-1035.44","4.4.0-1037.46","4.4.0-1038.47","4.4.0-1039.48","4.4.0-1041.50","4.4.0-1043.52","4.4.0-1044.53","4.4.0-1047.56","4.4.0-1048.57","4.4.0-1049.58","4.4.0-1050.59","4.4.0-1052.61","4.4.0-1054.63","4.4.0-1055.64","4.4.0-1057.66","4.4.0-1060.69","4.4.0-1061.70","4.4.0-1062.71","4.4.0-1063.72","4.4.0-1065.75","4.4.0-1066.76","4.4.0-1067.77","4.4.0-1069.79","4.4.0-1070.80","4.4.0-1072.82","4.4.0-1073.83","4.4.0-1074.84","4.4.0-1075.85","4.4.0-1077.87","4.4.0-1079.89","4.4.0-1081.91","4.4.0-1083.93","4.4.0-1084.94","4.4.0-1085.96","4.4.0-1087.98","4.4.0-1088.99","4.4.0-1090.101","4.4.0-1092.103","4.4.0-1094.105","4.4.0-1095.106","4.4.0-1096.107","4.4.0-1098.109","4.4.0-1099.110","4.4.0-1100.111","4.4.0-1101.112","4.4.0-1102.113","4.4.0-1104.115","4.4.0-1105.116","4.4.0-1106.117","4.4.0-1107.118","4.4.0-1109.120","4.4.0-1110.121","4.4.0-1111.123","4.4.0-1112.124","4.4.0-1113.126","4.4.0-1114.127","4.4.0-1117.131","4.4.0-1118.132","4.4.0-1119.133","4.4.0-1121.135","4.4.0-1122.136","4.4.0-1123.137","4.4.0-1124.138","4.4.0-1126.140","4.4.0-1127.141","4.4.0-1128.142","4.4.0-1129.143","4.4.0-1130.144","4.4.0-1131.145","4.4.0-1132.146","4.4.0-1133.147","4.4.0-1134.148","4.4.0-1135.149","4.4.0-1137.151","4.4.0-1138.152","4.4.0-1139.153","4.4.0-1140.154","4.4.0-1143.158","4.4.0-1145.160","4.4.0-1146.161","4.4.0-1147.162","4.4.0-1148.163","4.4.0-1150.165","4.4.0-1151.166","4.4.0-1152.167","4.4.0-1153.168","4.4.0-1154.169"],"ecosystem_specific":{"binaries":[{"binary_name":"linux-aws-cloud-tools-4.4.0-1155","binary_version":"4.4.0-1155.170"},{"binary_name":"linux-aws-headers-4.4.0-1155","binary_version":"4.4.0-1155.170"},{"binary_name":"linux-aws-tools-4.4.0-1155","binary_version":"4.4.0-1155.170"},{"binary_name":"linux-buildinfo-4.4.0-1155-aws","binary_version":"4.4.0-1155.170"},{"binary_name":"linux-cloud-tools-4.4.0-1155-aws","binary_version":"4.4.0-1155.170"},{"binary_name":"linux-headers-4.4.0-1155-aws","binary_version":"4.4.0-1155.170"},{"binary_name":"linux-image-4.4.0-1155-aws","binary_version":"4.4.0-1155.170"},{"binary_name":"linux-modules-4.4.0-1155-aws","binary_version":"4.4.0-1155.170"},{"binary_name":"linux-modules-extra-4.4.0-1155-aws","binary_version":"4.4.0-1155.170"},{"binary_name":"linux-tools-4.4.0-1155-aws","binary_version":"4.4.0-1155.170"}],"availability":"Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro"},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-6001-1.json","cves_map":{"cves":[{"severity":[{"score":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:L","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}],"id":"CVE-2020-36516"},{"severity":[{"score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","type":"CVSS_V3"},{"score":"low","type":"Ubuntu"}],"id":"CVE-2021-3428"},{"severity":[{"score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}],"id":"CVE-2021-3659"},{"severity":[{"score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","type":"CVSS_V3"},{"score":"low","type":"Ubuntu"}],"id":"CVE-2021-3669"},{"severity":[{"score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}],"id":"CVE-2021-3732"},{"severity":[{"score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","type":"CVSS_V3"},{"score":"low","type":"Ubuntu"}],"id":"CVE-2021-3772"},{"severity":[{"score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}],"id":"CVE-2021-4149"},{"severity":[{"score":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}],"id":"CVE-2021-4203"},{"severity":[{"score":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}],"id":"CVE-2021-26401"},{"severity":[{"score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","type":"CVSS_V3"},{"score":"low","type":"Ubuntu"}],"id":"CVE-2021-28712"},{"severity":[{"score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","type":"CVSS_V3"},{"score":"low","type":"Ubuntu"}],"id":"CVE-2021-28713"},{"severity":[{"score":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}],"id":"CVE-2021-45868"},{"severity":[{"score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}],"id":"CVE-2022-0487"},{"severity":[{"score":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","type":"CVSS_V3"},{"score":"low","type":"Ubuntu"}],"id":"CVE-2022-0494"},{"severity":[{"score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","type":"CVSS_V3"},{"score":"low","type":"Ubuntu"}],"id":"CVE-2022-0617"},{"severity":[{"score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}],"id":"CVE-2022-1016"},{"severity":[{"score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","type":"CVSS_V3"},{"score":"low","type":"Ubuntu"}],"id":"CVE-2022-1195"},{"severity":[{"score":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}],"id":"CVE-2022-1205"},{"severity":[{"score":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}],"id":"CVE-2022-1462"},{"severity":[{"score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}],"id":"CVE-2022-1516"},{"severity":[{"score":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N","type":"CVSS_V3"},{"score":"low","type":"Ubuntu"}],"id":"CVE-2022-1974"},{"severity":[{"score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","type":"CVSS_V3"},{"score":"low","type":"Ubuntu"}],"id":"CVE-2022-1975"},{"severity":[{"score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}],"id":"CVE-2022-2318"},{"severity":[{"score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","type":"CVSS_V3"},{"score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","type":"CVSS_V3"},{"score":"low","type":"Ubuntu"}],"id":"CVE-2022-2380"},{"severity":[{"score":"CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:N","type":"CVSS_V3"},{"score":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}],"id":"CVE-2022-2503"},{"severity":[{"score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}],"id":"CVE-2022-2663"},{"severity":[{"score":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}],"id":"CVE-2022-2991"},{"severity":[{"score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}],"id":"CVE-2022-3061"},{"severity":[{"score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","type":"CVSS_V3"},{"score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}],"id":"CVE-2022-3111"},{"severity":[{"score":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","type":"CVSS_V3"},{"score":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}],"id":"CVE-2022-3303"},{"severity":[{"score":"CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","type":"CVSS_V3"},{"score":"CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}],"id":"CVE-2022-3628"},{"severity":[{"score":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L","type":"CVSS_V3"},{"score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}],"id":"CVE-2022-3646"},{"severity":[{"score":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","type":"CVSS_V3"},{"score":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","type":"CVSS_V3"},{"score":"low","type":"Ubuntu"}],"id":"CVE-2022-3903"},{"severity":[{"score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","type":"CVSS_V3"},{"score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","type":"CVSS_V3"},{"score":"low","type":"Ubuntu"}],"id":"CVE-2022-4662"},{"severity":[{"score":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","type":"CVSS_V3"},{"score":"low","type":"Ubuntu"}],"id":"CVE-2022-20132"},{"severity":[{"score":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","type":"CVSS_V3"},{"score":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}],"id":"CVE-2022-20572"},{"severity":[{"score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:H","type":"CVSS_V3"},{"score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}],"id":"CVE-2022-36280"},{"severity":[{"score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","type":"CVSS_V3"},{"score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}],"id":"CVE-2022-36879"},{"severity":[{"score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","type":"CVSS_V3"},{"score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","type":"CVSS_V3"},{"score":"low","type":"Ubuntu"}],"id":"CVE-2022-41218"},{"severity":[{"score":"CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","type":"CVSS_V3"},{"score":"low","type":"Ubuntu"}],"id":"CVE-2022-41849"},{"severity":[{"score":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","type":"CVSS_V3"},{"score":"low","type":"Ubuntu"}],"id":"CVE-2022-41850"},{"severity":[{"score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","type":"CVSS_V3"},{"score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}],"id":"CVE-2022-47929"},{"severity":[{"score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","type":"CVSS_V3"},{"score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}],"id":"CVE-2023-0394"},{"severity":[{"score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","type":"CVSS_V3"},{"score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}],"id":"CVE-2023-1074"},{"severity":[{"score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","type":"CVSS_V3"},{"score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}],"id":"CVE-2023-1095"},{"severity":[{"score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","type":"CVSS_V3"},{"score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","type":"CVSS_V3"},{"score":"negligible","type":"Ubuntu"}],"id":"CVE-2023-1118"},{"severity":[{"score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","type":"CVSS_V3"},{"score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}],"id":"CVE-2023-23455"},{"severity":[{"score":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","type":"CVSS_V3"},{"score":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}],"id":"CVE-2023-26545"},{"severity":[{"score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","type":"CVSS_V3"},{"score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","type":"CVSS_V3"},{"score":"low","type":"Ubuntu"}],"id":"CVE-2023-26607"}],"ecosystem":"Ubuntu:Pro:16.04:LTS"}}}],"schema_version":"1.7.3"}