CVE reports
The Common Vulnerabilities and Exposures (CVE) system is used to identify, define, and catalog publicly disclosed cybersecurity vulnerabilities. Canonical keeps track of all CVEs affecting Ubuntu, and releases a security notice when an issue is fixed.
Canonical also produces Open Vulnerability and Assessment Language (OVAL) data, which is machine-readable, to enable auditing for CVEs and to determine whether a particular patch, via an Ubuntu Security Notice (USN), is appropriate for the local system.
Search
Recent CVEs affecting Ubuntu
| ID | Priority | Package |
14.04 ESM
|
16.04 ESM
|
18.04 ESM
|
20.04 LTS
|
22.04 LTS
|
23.04
|
23.10
|
|---|---|---|---|---|---|---|---|---|---|
| CVE-2023-41175 |
medium
|
tiff |
Needs triage
|
Needs triage
|
Needs triage
|
Needs triage
|
Needs triage
|
Needs triage
|
— |
| CVE-2023-40745 |
medium
|
tiff |
Needs triage
|
Needs triage
|
Needs triage
|
Needs triage
|
Needs triage
|
Needs triage
|
— |
| CVE-2023-4569 |
medium
|
linux-hwe |
Does not exist
|
Not vulnerable
|
Ignored
|
Does not exist
|
Does not exist
|
Does not exist
|
— |
| linux-hwe-5.4 |
Does not exist
|
Does not exist
|
Not vulnerable
|
Does not exist
|
Does not exist
|
Does not exist
|
— | ||
| linux-hwe-5.8 |
Does not exist
|
Does not exist
|
Does not exist
|
Ignored
|
Does not exist
|
Does not exist
|
— | ||
| linux-hwe-5.11 |
Does not exist
|
Does not exist
|
Does not exist
|
Ignored
|
Does not exist
|
Does not exist
|
— | ||
| linux-hwe-5.13 |
Does not exist
|
Does not exist
|
Does not exist
|
Ignored
|
Does not exist
|
Does not exist
|
— | ||
| linux-hwe-5.15 |
Does not exist
|
Does not exist
|
Does not exist
|
Needed
|
Does not exist
|
Does not exist
|
— | ||
| linux-hwe-5.19 |
Does not exist
|
Does not exist
|
Does not exist
|
Does not exist
|
Needed
|
Does not exist
|
— | ||
| linux-hwe-6.2 |
Does not exist
|
Does not exist
|
Does not exist
|
Does not exist
|
Needed
|
Does not exist
|
— | ||
| linux-hwe-edge |
Does not exist
|
Ignored
|
Ignored
|
Does not exist
|
Does not exist
|
Does not exist
|
— | ||
| linux-lts-xenial |
Not vulnerable
|
Does not exist
|
Does not exist
|
Does not exist
|
Does not exist
|
Does not exist
|
— | ||
| linux-kvm |
Does not exist
|
Not vulnerable
|
Not vulnerable
|
Not vulnerable
|
Needed
|
Needed
|
— | ||
| linux-allwinner |
Does not exist
|
Does not exist
|
Does not exist
|
Does not exist
|
Does not exist
|
Ignored
|
— | ||
| linux-allwinner-5.19 |
Does not exist
|
Does not exist
|
Does not exist
|
Does not exist
|
Needed
|
Does not exist
|
— | ||
| linux-aws-5.0 |
Does not exist
|
Does not exist
|
Ignored
|
Does not exist
|
Does not exist
|
Does not exist
|
— | ||
| linux-aws-5.3 |
Does not exist
|
Does not exist
|
Ignored
|
Does not exist
|
Does not exist
|
Does not exist
|
— | ||
| linux-aws-5.4 |
Does not exist
|
Does not exist
|
Not vulnerable
|
Does not exist
|
Does not exist
|
Does not exist
|
— | ||
| linux-aws-5.8 |
Does not exist
|
Does not exist
|
Does not exist
|
Ignored
|
Does not exist
|
Does not exist
|
— | ||
| linux-aws-5.11 |
Does not exist
|
Does not exist
|
Does not exist
|
Ignored
|
Does not exist
|
Does not exist
|
— | ||
| linux-aws-5.13 |
Does not exist
|
Does not exist
|
Does not exist
|
Ignored
|
Does not exist
|
Does not exist
|
— | ||
| linux-aws-5.15 |
Does not exist
|
Does not exist
|
Does not exist
|
Needed
|
Does not exist
|
Does not exist
|
— | ||
| linux-aws-5.19 |
Does not exist
|
Does not exist
|
Does not exist
|
Does not exist
|
Ignored
|
Does not exist
|
— | ||
| linux-aws-6.2 |
Does not exist
|
Does not exist
|
Does not exist
|
Does not exist
|
Needed
|
Does not exist
|
— | ||
| linux-aws-hwe |
Does not exist
|
Not vulnerable
|
Does not exist
|
Does not exist
|
Does not exist
|
Does not exist
|
— | ||
| linux-azure |
Not vulnerable
|
Not vulnerable
|
Ignored
|
Not vulnerable
|
Needed
|
Needed
|
— | ||
| linux-azure-4.15 |
Does not exist
|
Does not exist
|
Not vulnerable
|
Does not exist
|
Does not exist
|
Does not exist
|
— | ||
| linux-azure-5.3 |
Does not exist
|
Does not exist
|
Ignored
|
Does not exist
|
Does not exist
|
Does not exist
|
— | ||
| linux-azure-5.4 |
Does not exist
|
Does not exist
|
Not vulnerable
|
Does not exist
|
Does not exist
|
Does not exist
|
— | ||
| linux-azure-5.8 |
Does not exist
|
Does not exist
|
Does not exist
|
Ignored
|
Does not exist
|
Does not exist
|
— | ||
| linux-azure-5.11 |
Does not exist
|
Does not exist
|
Does not exist
|
Ignored
|
Does not exist
|
Does not exist
|
— | ||
| linux-azure-5.13 |
Does not exist
|
Does not exist
|
Does not exist
|
Ignored
|
Does not exist
|
Does not exist
|
— | ||
| linux-azure-5.15 |
Does not exist
|
Does not exist
|
Does not exist
|
Needed
|
Does not exist
|
Does not exist
|
— | ||
| linux-azure-5.19 |
Does not exist
|
Does not exist
|
Does not exist
|
Does not exist
|
Ignored
|
Does not exist
|
— | ||
| linux-azure-fde |
Does not exist
|
Does not exist
|
Does not exist
|
Ignored
|
Needed
|
Does not exist
|
— | ||
| linux-azure-fde-5.15 |
Does not exist
|
Does not exist
|
Does not exist
|
Needed
|
Does not exist
|
Does not exist
|
— | ||
| linux-azure-fde-5.19 |
Does not exist
|
Does not exist
|
Does not exist
|
Does not exist
|
Needs triage
|
Does not exist
|
— | ||
| linux-bluefield |
Does not exist
|
Does not exist
|
Does not exist
|
Not vulnerable
|
Needed
|
Does not exist
|
— | ||
| linux-dell300x |
Does not exist
|
Does not exist
|
Ignored
|
Does not exist
|
Does not exist
|
Does not exist
|
— | ||
| linux-azure-edge |
Does not exist
|
Does not exist
|
Ignored
|
Does not exist
|
Does not exist
|
Does not exist
|
— | ||
| linux-fips |
Ignored
|
Ignored
|
Does not exist
|
Does not exist
|
Does not exist
|
Does not exist
|
— | ||
| linux-gcp |
Does not exist
|
Not vulnerable
|
Ignored
|
Not vulnerable
|
Needed
|
Needed
|
— | ||
| linux-gcp-4.15 |
Does not exist
|
Does not exist
|
Not vulnerable
|
Does not exist
|
Does not exist
|
Does not exist
|
— | ||
| linux-gcp-5.3 |
Does not exist
|
Does not exist
|
Ignored
|
Does not exist
|
Does not exist
|
Does not exist
|
— | ||
| linux-gcp-5.4 |
Does not exist
|
Does not exist
|
Not vulnerable
|
Does not exist
|
Does not exist
|
Does not exist
|
— | ||
| linux-gcp-5.8 |
Does not exist
|
Does not exist
|
Does not exist
|
Ignored
|
Does not exist
|
Does not exist
|
— | ||
| linux-gcp-5.11 |
Does not exist
|
Does not exist
|
Does not exist
|
Ignored
|
Does not exist
|
Does not exist
|
— | ||
| linux-gcp-5.13 |
Does not exist
|
Does not exist
|
Does not exist
|
Ignored
|
Does not exist
|
Does not exist
|
— | ||
| linux-gcp-5.15 |
Does not exist
|
Does not exist
|
Does not exist
|
Needed
|
Does not exist
|
Does not exist
|
— | ||
| linux-gcp-5.19 |
Does not exist
|
Does not exist
|
Does not exist
|
Does not exist
|
Ignored
|
Does not exist
|
— | ||
| linux-gke |
Does not exist
|
Ignored
|
Does not exist
|
Ignored
|
Needed
|
Does not exist
|
— | ||
| linux-gke-4.15 |
Does not exist
|
Does not exist
|
Ignored
|
Does not exist
|
Does not exist
|
Does not exist
|
— | ||
| linux-gke-5.0 |
Does not exist
|
Does not exist
|
Ignored
|
Does not exist
|
Does not exist
|
Does not exist
|
— | ||
| linux-gke-5.3 |
Does not exist
|
Does not exist
|
Ignored
|
Does not exist
|
Does not exist
|
Does not exist
|
— | ||
| linux-gke-5.4 |
Does not exist
|
Does not exist
|
Ignored
|
Does not exist
|
Does not exist
|
Does not exist
|
— | ||
| linux-gke-5.15 |
Does not exist
|
Does not exist
|
Does not exist
|
Ignored
|
Does not exist
|
Does not exist
|
— | ||
| linux-gkeop |
Does not exist
|
Does not exist
|
Does not exist
|
Not vulnerable
|
Needed
|
Does not exist
|
— | ||
| linux-gkeop-5.4 |
Does not exist
|
Does not exist
|
Ignored
|
Does not exist
|
Does not exist
|
Does not exist
|
— | ||
| linux-gkeop-5.15 |
Does not exist
|
Does not exist
|
Does not exist
|
Needed
|
Does not exist
|
Does not exist
|
— | ||
| linux-ibm |
Does not exist
|
Does not exist
|
Does not exist
|
Not vulnerable
|
Needed
|
Needed
|
— | ||
| linux-ibm-5.4 |
Does not exist
|
Does not exist
|
Not vulnerable
|
Does not exist
|
Does not exist
|
Does not exist
|
— | ||
| linux-intel-5.13 |
Does not exist
|
Does not exist
|
Does not exist
|
Ignored
|
Does not exist
|
Does not exist
|
— | ||
| linux-intel-iotg |
Does not exist
|
Does not exist
|
Does not exist
|
Does not exist
|
Needed
|
Does not exist
|
— | ||
| linux-intel-iotg-5.15 |
Does not exist
|
Does not exist
|
Does not exist
|
Needed
|
Does not exist
|
Does not exist
|
— | ||
| linux-iot |
Does not exist
|
Does not exist
|
Does not exist
|
Not vulnerable
|
Does not exist
|
Does not exist
|
— | ||
| linux-lowlatency |
Does not exist
|
Does not exist
|
Does not exist
|
Does not exist
|
Needed
|
Needed
|
— | ||
| linux-lowlatency-hwe-5.15 |
Does not exist
|
Does not exist
|
Does not exist
|
Needed
|
Does not exist
|
Does not exist
|
— | ||
| linux-lowlatency-hwe-5.19 |
Does not exist
|
Does not exist
|
Does not exist
|
Does not exist
|
Needed
|
Does not exist
|
— | ||
| linux-lowlatency-hwe-6.2 |
Does not exist
|
Does not exist
|
Does not exist
|
Does not exist
|
Needed
|
Does not exist
|
— | ||
| linux-nvidia |
Does not exist
|
Does not exist
|
Does not exist
|
Does not exist
|
Needed
|
Does not exist
|
— | ||
| linux-oracle |
Does not exist
|
Not vulnerable
|
Not vulnerable
|
Not vulnerable
|
Needed
|
Needed
|
— | ||
| linux-oracle-5.0 |
Does not exist
|
Does not exist
|
Ignored
|
Does not exist
|
Does not exist
|
Does not exist
|
— | ||
| linux-oracle-5.3 |
Does not exist
|
Does not exist
|
Ignored
|
Does not exist
|
Does not exist
|
Does not exist
|
— | ||
| linux-oracle-5.4 |
Does not exist
|
Does not exist
|
Not vulnerable
|
Does not exist
|
Does not exist
|
Does not exist
|
— | ||
| linux-oracle-5.8 |
Does not exist
|
Does not exist
|
Does not exist
|
Ignored
|
Does not exist
|
Does not exist
|
— | ||
| linux-oracle-5.11 |
Does not exist
|
Does not exist
|
Does not exist
|
Ignored
|
Does not exist
|
Does not exist
|
— | ||
| linux-oracle-5.13 |
Does not exist
|
Does not exist
|
Does not exist
|
Ignored
|
Does not exist
|
Does not exist
|
— | ||
| linux-oracle-5.15 |
Does not exist
|
Does not exist
|
Does not exist
|
Needed
|
Does not exist
|
Does not exist
|
— | ||
| linux-oem |
Does not exist
|
Ignored
|
Ignored
|
Does not exist
|
Does not exist
|
Does not exist
|
— | ||
| linux-oem-5.6 |
Does not exist
|
Does not exist
|
Does not exist
|
Ignored
|
Does not exist
|
Does not exist
|
— | ||
| linux-oem-5.10 |
Does not exist
|
Does not exist
|
Does not exist
|
Ignored
|
Does not exist
|
Does not exist
|
— | ||
| linux-oem-5.13 |
Does not exist
|
Does not exist
|
Does not exist
|
Ignored
|
Does not exist
|
Does not exist
|
— | ||
| linux-oem-5.14 |
Does not exist
|
Does not exist
|
Does not exist
|
Ignored
|
Does not exist
|
Does not exist
|
— | ||
| linux-oem-5.17 |
Does not exist
|
Does not exist
|
Does not exist
|
Does not exist
|
Needed
|
Does not exist
|
— | ||
| linux-oem-6.0 |
Does not exist
|
Does not exist
|
Does not exist
|
Does not exist
|
Needed
|
Does not exist
|
— | ||
| linux-oem-6.1 |
Does not exist
|
Does not exist
|
Does not exist
|
Does not exist
|
Needed
|
Does not exist
|
— | ||
| linux-oem-osp1 |
Does not exist
|
Does not exist
|
Ignored
|
Does not exist
|
Does not exist
|
Does not exist
|
— | ||
| linux-raspi |
Does not exist
|
Does not exist
|
Does not exist
|
Not vulnerable
|
Needed
|
Needed
|
— | ||
| linux-raspi2 |
Does not exist
|
Ignored
|
Ignored
|
Ignored
|
Does not exist
|
Does not exist
|
— | ||
| linux-raspi2-5.3 |
Does not exist
|
Does not exist
|
Ignored
|
Does not exist
|
Does not exist
|
Does not exist
|
— | ||
| linux-raspi-5.4 |
Does not exist
|
Does not exist
|
Not vulnerable
|
Does not exist
|
Does not exist
|
Does not exist
|
— | ||
| linux-riscv |
Does not exist
|
Does not exist
|
Does not exist
|
Ignored
|
Ignored
|
Needed
|
— | ||
| linux-riscv-5.8 |
Does not exist
|
Does not exist
|
Does not exist
|
Ignored
|
Does not exist
|
Does not exist
|
— | ||
| linux-riscv-5.11 |
Does not exist
|
Does not exist
|
Does not exist
|
Ignored
|
Does not exist
|
Does not exist
|
— | ||
| linux-riscv-5.15 |
Does not exist
|
Does not exist
|
Does not exist
|
Needed
|
Does not exist
|
Does not exist
|
— | ||
| linux-riscv-5.19 |
Does not exist
|
Does not exist
|
Does not exist
|
Does not exist
|
Ignored
|
Does not exist
|
— | ||
| linux-snapdragon |
Does not exist
|
Ignored
|
Ignored
|
Does not exist
|
Does not exist
|
Does not exist
|
— | ||
| linux-starfive |
Does not exist
|
Does not exist
|
Does not exist
|
Does not exist
|
Does not exist
|
Needed
|
— | ||
| linux-starfive-5.19 |
Does not exist
|
Does not exist
|
Does not exist
|
Does not exist
|
Ignored
|
Does not exist
|
— | ||
| linux-xilinx-zynqmp |
Does not exist
|
Does not exist
|
Does not exist
|
Not vulnerable
|
Ignored
|
Does not exist
|
— | ||
| linux |
Not vulnerable
|
Not vulnerable
|
Not vulnerable
|
Not vulnerable
|
Needed
|
Needed
|
— | ||
| linux-aws |
Not vulnerable
|
Not vulnerable
|
Not vulnerable
|
Not vulnerable
|
Needed
|
Needed
|
— | ||
| linux-ibm-5.15 |
Does not exist
|
Does not exist
|
Does not exist
|
Needed
|
Does not exist
|
Does not exist
|
— | ||
| linux-gcp-6.2 |
Does not exist
|
Does not exist
|
Does not exist
|
Does not exist
|
Needed
|
Does not exist
|
— | ||
| CVE-2023-40857 |
medium
|
yara |
Ignored
|
Needs triage
|
Needs triage
|
Needs triage
|
Needs triage
|
Needs triage
|
— |
| CVE-2023-40828 |
medium
|
libpf4j-java |
Ignored
|
Ignored
|
Ignored
|
Does not exist
|
Needs triage
|
Needs triage
|
— |
| CVE-2023-40827 |
medium
|
libpf4j-java |
Ignored
|
Ignored
|
Ignored
|
Does not exist
|
Needs triage
|
Needs triage
|
— |
| CVE-2023-40826 |
medium
|
libpf4j-java |
Ignored
|
Ignored
|
Ignored
|
Does not exist
|
Needs triage
|
Needs triage
|
— |
| CVE-2023-40781 |
medium
|
ming |
Ignored
|
Needs triage
|
Ignored
|
Does not exist
|
Does not exist
|
Does not exist
|
— |
| CVE-2023-40170 |
medium
|
jupyter-server |
Ignored
|
Ignored
|
Ignored
|
Does not exist
|
Needs triage
|
Needs triage
|
— |
| CVE-2023-39968 |
medium
|
jupyter-server |
Ignored
|
Ignored
|
Ignored
|
Does not exist
|
Needs triage
|
Needs triage
|
— |
| CVE-2020-24165 |
medium
|
qemu |
Not vulnerable
|
Not vulnerable
|
Needed
|
Needed
|
Not vulnerable
|
Not vulnerable
|
— |
| CVE-2023-39810 |
medium
|
busybox |
Needs triage
|
Needs triage
|
Needs triage
|
Needs triage
|
Needs triage
|
Needs triage
|
— |
| CVE-2023-39562 |
medium
|
gpac |
Needs triage
|
Needs triage
|
Needs triage
|
Needs triage
|
Needs triage
|
Needs triage
|
— |
| CVE-2023-40590 |
negligible
|
python-git |
Ignored
|
Ignored
|
Ignored
|
Ignored
|
Ignored
|
Ignored
|
— |
| CVE-2023-38802 |
medium
|
frr |
Does not exist
|
Does not exist
|
Does not exist
|
Needs triage
|
Needs triage
|
Needs triage
|
— |
| quagga |
Ignored
|
Not vulnerable
|
Not vulnerable
|
Not vulnerable
|
Does not exist
|
Does not exist
|
— | ||
| CVE-2023-41080 |
medium
|
tomcat6 |
Needs triage
|
Needs triage
|
Does not exist
|
Does not exist
|
Does not exist
|
Does not exist
|
— |
| tomcat7 |
Needs triage
|
Needs triage
|
Needs triage
|
Does not exist
|
Does not exist
|
Does not exist
|
— | ||
| tomcat8 |
Does not exist
|
Needs triage
|
Needs triage
|
Does not exist
|
Does not exist
|
Does not exist
|
— | ||
| tomcat9 |
Does not exist
|
Does not exist
|
Needs triage
|
Needs triage
|
Needs triage
|
Needs triage
|
— | ||
| CVE-2023-40587 |
low
|
python-pyramid |
Ignored
|
Needs triage
|
Needs triage
|
Needs triage
|
Needs triage
|
Needs triage
|
— |
| CVE-2023-38712 |
medium
|
libreswan |
Ignored
|
Ignored
|
Needs triage
|
Needs triage
|
Needs triage
|
Needs triage
|
— |
| CVE-2023-38711 |
medium
|
libreswan |
Ignored
|
Ignored
|
Needs triage
|
Needs triage
|
Needs triage
|
Needs triage
|
— |
| CVE-2023-38710 |
medium
|
libreswan |
Ignored
|
Ignored
|
Needs triage
|
Needs triage
|
Needs triage
|
Needs triage
|
— |