Skip to content
OpenAdvisories
Medium USN-5319-1 2 CVEs

linux, linux-aws, linux-aws-hwe, linux-azure, linux-azure-4.15, linux-dell300x, linux-gcp, linux-gcp-4.15, linux-hwe, linux-kvm, ilinux-lts-xenial, linux-oracle, linux-raspi2, linux-snapdragon vulnerabilities

Published Mar 9, 2022 · Updated Jun 29, 2026

Ecosystem: Ubuntu

Summary

Enrico Barberis, Pietro Frigo, Marius Muench, Herbert Bos, and Cristiano
Giuffrida discovered that hardware mitigations added by Intel to their
processors to address Spectre-BTI were insufficient. A local attacker could
potentially use this to expose sensitive information.

Fixed packages 20

ReleasePackageFixed in
Ubuntu · 18.04 LTS 18.04:LTS linux 4.15.0-171.180
Ubuntu · 18.04 LTS 18.04:LTS linux-aws 4.15.0-1123.132
Ubuntu · 18.04 LTS 18.04:LTS linux-azure-4.15 4.15.0-1133.146
Ubuntu · 18.04 LTS 18.04:LTS linux-dell300x 4.15.0-1037.42
Ubuntu · 18.04 LTS 18.04:LTS linux-gcp-4.15 4.15.0-1118.132
Ubuntu · 18.04 LTS 18.04:LTS linux-kvm 4.15.0-1109.112
Ubuntu · 18.04 LTS 18.04:LTS linux-oracle 4.15.0-1089.98
Ubuntu · 18.04 LTS 18.04:LTS linux-raspi2 4.15.0-1105.112
Ubuntu · 18.04 LTS 18.04:LTS linux-snapdragon 4.15.0-1122.131
Ubuntu · Pro 14.04 LTS Pro:14.04:LTS linux-aws 4.4.0-1101.106
Ubuntu · Pro 14.04 LTS Pro:14.04:LTS linux-azure 4.15.0-1133.146~14.04.1
Ubuntu · Pro 14.04 LTS Pro:14.04:LTS linux-lts-xenial 4.4.0-221.254~14.04.1
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS linux 4.4.0-221.254
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS linux-aws 4.4.0-1137.151
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS linux-aws-hwe 4.15.0-1123.132~16.04.1
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS linux-azure 4.15.0-1133.146~16.04.1
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS linux-gcp 4.15.0-1118.132~16.04.1
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS linux-hwe 4.15.0-171.180~16.04.1
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS linux-kvm 4.4.0-1102.111
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS linux-oracle 4.15.0-1089.98~16.04.1

Vulnerabilities 2

References

  • report
    https://ubuntu.com/security/CVE-2022-0001
  • report
    https://ubuntu.com/security/CVE-2022-0002