{"id":"CLSA-2023-1695046791","summary":"Fix of 7 CVEs","details":"\n   * Bionic update: upstream stable patchset 2022-12-01 (LP: #1998542) //\n     CVE-2022-26373\n     - x86/speculation: Add RSB VM Exit protections\n   * Bionic update: upstream stable patchset 2022-12-01 (LP: #1998542)\n     - Revert \"x86/cpu: Add a steppings field to struct x86_cpu_id\"\n     - x86/cpufeature: Add facility to check for min microcode revisions\n     - x86/cpufeature: Fix various quality problems in the \u003casm/cpu_device_hd.h\u003e\n       header\n     - x86/devicetable: Move x86 specific macro out of generic code\n     - x86/cpu: Add consistent CPU match macros\n     - x86/cpu: Add a steppings field to struct x86_cpu_id\n     - x86/cpufeatures: Move RETPOLINE flags to word 11\n     - x86/bugs: Report AMD retbleed vulnerability\n     - x86/bugs: Keep a per-CPU IA32_SPEC_CTRL value\n     - x86/entry: Add kernel IBRS implementation\n     - x86/speculation: Add spectre_v2=ibrs option to support Kernel IBRS\n     - x86/speculation: Add LFENCE to RSB fill sequence\n     - KVM: VMX: Prevent guest RSB poisoning attacks with eIBRS\n     - x86/speculation: Fill RSB on vmexit for IBRS\n     - x86/cpu/amd: Enumerate BTC_NO\n     - x86/speculation: Disable RRSBA behavior\n     - x86/bugs: Warn when \"ibrs\" mitigation is selected on Enhanced IBRS parts\n   * Bionic update: upstream stable patchset 2022-12-01 (LP: #1998542) //\n     CVE-2022-29901\n     - x86/bugs: Optimize SPEC_CTRL MSR writes\n     - x86/bugs: Split spectre_v2_select_mitigation() and\n       spectre_v2_user_select_mitigation()\n     - x86/bugs: Report Intel retbleed vulnerability\n     - entel_idle: Disable IBRS during long idle\n     - x86/speculation: Change FILL_RETURN_BUFFER to work with objtool\n     - x86/speculation: Fix RSB filling with CONFIG_RETPOLINE=n\n     - x86/speculation: Fix firmware entry SPEC_CTRL handling\n     - x86/speculation: Fix SPEC_CTRL write on SMT state change\n     - x86/speculation: Use cached host SPEC_CTRL value for guest entry/exit\n     - x86/speculation: Remove x86_spec_ctrl_mask\n     - x86/common: Stamp out the stepping madness\n     - x86/bugs: Add Cannon lake to RETBleed affected CPU list\n     - x86/speculation: Use DECLARE_PER_CPU for x86_spec_ctrl_current\n   * Bionic update: upstream stable patchset 2022-12-01 (LP: #1998542) //\n     CVE-2022-29900\n     - x86/bugs: Add AMD retbleed= boot parameter\n   * Bionic update: upstream stable patchset 2022-10-06 (LP: #1992112)\n     - x86/bugs: Add \"unknown\" reporting for MMIO Stale Data\n   * CVE-2021-26401\n     - x86/speculation: Warn about Spectre v2 LFENCE mitigation\n     - x86/speculation: Warn about eIBRS + LFENCE + Unprivileged eBPF + SMT\n   * CVE-2022-0001\n     - x86/speculation: Include unprivileged eBPF status in Spectre v2 mitigation\n       reporting\n   * Bionic update: upstream stable patchset 2019-10-07 (LP: #1847155)\n     - x86/cpu: Add Tiger Lake to Intel family\n   * CVE-url: https://ubuntu.com/security/CVE-2023-4622\n     - af_unix: Fix null-ptr-deref in unix_stream_sendpage().\n   * CVE-url: https://ubuntu.com/security/CVE-2022-45919\n     - media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221\n   * Miscellaneous upstream changes\n     - Revert \"x86/enter: Use IBRS on syscall and interrupts\"","modified":"2026-06-04T10:04:39.608907760Z","published":"2023-09-18T14:19:55Z","upstream":["CVE-2021-26401","CVE-2022-0001","CVE-2022-26373","CVE-2022-29900","CVE-2022-29901","CVE-2022-45919","CVE-2023-4622"],"references":[{"type":"ADVISORY","url":"https://errata.cloudlinux.com/ubuntu16_04-els/CLSA-2023-1695046791"}],"affected":[{"package":{"name":"linux-buildinfo-4.4.0-245-tuxcare.els16-generic","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/linux-buildinfo-4.4.0-245-tuxcare.els16-generic?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-245.279"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1695046791.json"}},{"package":{"name":"linux-buildinfo-4.4.0-245-tuxcare.els16-lowlatency","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/linux-buildinfo-4.4.0-245-tuxcare.els16-lowlatency?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-245.279"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1695046791.json"}},{"package":{"name":"linux-cloud-tools-4.4.0-245-tuxcare.els16","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/linux-cloud-tools-4.4.0-245-tuxcare.els16?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-245.279"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1695046791.json"}},{"package":{"name":"linux-cloud-tools-4.4.0-245-tuxcare.els16-generic","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/linux-cloud-tools-4.4.0-245-tuxcare.els16-generic?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-245.279"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1695046791.json"}},{"package":{"name":"linux-cloud-tools-4.4.0-245-tuxcare.els16-lowlatency","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/linux-cloud-tools-4.4.0-245-tuxcare.els16-lowlatency?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-245.279"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1695046791.json"}},{"package":{"name":"linux-cloud-tools-common","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/linux-cloud-tools-common?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-245.279"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1695046791.json"}},{"package":{"name":"linux-cloud-tools-generic","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/linux-cloud-tools-generic?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0.245.279"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1695046791.json"}},{"package":{"name":"linux-cloud-tools-lowlatency","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/linux-cloud-tools-lowlatency?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0.245.279"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1695046791.json"}},{"package":{"name":"linux-crashdump","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/linux-crashdump?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0.245.279"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1695046791.json"}},{"package":{"name":"linux-doc","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/linux-doc?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-245.279"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1695046791.json"}},{"package":{"name":"linux-generic","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/linux-generic?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0.245.279"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1695046791.json"}},{"package":{"name":"linux-headers-4.4.0-245-tuxcare.els16","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/linux-headers-4.4.0-245-tuxcare.els16?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-245.279"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1695046791.json"}},{"package":{"name":"linux-headers-4.4.0-245-tuxcare.els16-generic","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/linux-headers-4.4.0-245-tuxcare.els16-generic?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-245.279"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1695046791.json"}},{"package":{"name":"linux-headers-4.4.0-245-tuxcare.els16-lowlatency","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/linux-headers-4.4.0-245-tuxcare.els16-lowlatency?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-245.279"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1695046791.json"}},{"package":{"name":"linux-headers-generic","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/linux-headers-generic?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0.245.279"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1695046791.json"}},{"package":{"name":"linux-headers-lowlatency","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/linux-headers-lowlatency?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0.245.279"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1695046791.json"}},{"package":{"name":"linux-image-generic","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/linux-image-generic?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0.245.279"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1695046791.json"}},{"package":{"name":"linux-image-lowlatency","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/linux-image-lowlatency?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0.245.279"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1695046791.json"}},{"package":{"name":"linux-image-unsigned-4.4.0-245-tuxcare.els16-generic","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/linux-image-unsigned-4.4.0-245-tuxcare.els16-generic?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-245.279"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1695046791.json"}},{"package":{"name":"linux-image-unsigned-4.4.0-245-tuxcare.els16-lowlatency","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/linux-image-unsigned-4.4.0-245-tuxcare.els16-lowlatency?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-245.279"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1695046791.json"}},{"package":{"name":"linux-libc-dev","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/linux-libc-dev?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-245.279"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1695046791.json"}},{"package":{"name":"linux-lowlatency","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/linux-lowlatency?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0.245.279"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1695046791.json"}},{"package":{"name":"linux-modules-4.4.0-245-tuxcare.els16-generic","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/linux-modules-4.4.0-245-tuxcare.els16-generic?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-245.279"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1695046791.json"}},{"package":{"name":"linux-modules-4.4.0-245-tuxcare.els16-lowlatency","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/linux-modules-4.4.0-245-tuxcare.els16-lowlatency?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-245.279"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1695046791.json"}},{"package":{"name":"linux-modules-extra-4.4.0-245-tuxcare.els16-generic","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/linux-modules-extra-4.4.0-245-tuxcare.els16-generic?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-245.279"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1695046791.json"}},{"package":{"name":"linux-source","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/linux-source?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0.245.279"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1695046791.json"}},{"package":{"name":"linux-source-4.4.0","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/linux-source-4.4.0?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-245.279"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1695046791.json"}},{"package":{"name":"linux-tools-4.4.0-245-tuxcare.els16","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/linux-tools-4.4.0-245-tuxcare.els16?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-245.279"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1695046791.json"}},{"package":{"name":"linux-tools-4.4.0-245-tuxcare.els16-generic","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/linux-tools-4.4.0-245-tuxcare.els16-generic?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-245.279"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1695046791.json"}},{"package":{"name":"linux-tools-4.4.0-245-tuxcare.els16-lowlatency","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/linux-tools-4.4.0-245-tuxcare.els16-lowlatency?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-245.279"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1695046791.json"}},{"package":{"name":"linux-tools-common","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/linux-tools-common?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-245.279"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1695046791.json"}},{"package":{"name":"linux-tools-generic","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/linux-tools-generic?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0.245.279"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1695046791.json"}},{"package":{"name":"linux-tools-host","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/linux-tools-host?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-245.279"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1695046791.json"}},{"package":{"name":"linux-tools-lowlatency","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/linux-tools-lowlatency?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0.245.279"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1695046791.json"}}],"schema_version":"1.7.5"}