[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-USN-5417-1":6},{"stargazers_count":4,"fetched_at":5},7,"2026-06-04T08:53:30.047Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":11,"aliases":12,"duplicate_of":9,"upstream":13,"downstream":46,"duplicates":47,"related":48,"reserved_at":9,"published_at":57,"modified_at":58,"state":9,"summary":59,"references_raw":61,"kevs":101,"epss":9,"epss_history":102,"metrics":103,"affected":104},"USN-5417-1","linux, linux-aws, linux-aws-5.13, linux-azure, linux-azure-5.13, linux-gcp, linux-gcp-5.13, linux-hwe-5.13, linux-kvm, linux-oracle, linux-raspi vulnerabilities\n\nKe Sun, Alyssa Milburn, Henrique Kawakami, Emma Benoit, Igor Chervatyuk,\nLisa Aichele, and Thais Moreira Hamasaki discovered that the Spectre\nVariant 2 mitigations for AMD processors on Linux were insufficient in some\nsituations. A local attacker could possibly use this to expose sensitive\ninformation. (CVE-2021-26401)\n\nIt was discovered that the MMC/SD subsystem in the Linux kernel did not\nproperly handle read errors from SD cards in certain situations. An\nattacker could possibly use this to expose sensitive information (kernel\nmemory). (CVE-2022-20008)\n\nIt was discovered that the USB gadget subsystem in the Linux kernel did not\nproperly validate interface descriptor requests. An attacker could possibly\nuse this to cause a denial of service (system crash). (CVE-2022-25258)\n\nIt was discovered that the Remote NDIS (RNDIS) USB gadget implementation in\nthe Linux kernel did not properly validate the size of the RNDIS_MSG_SET\ncommand. An attacker could possibly use this to expose sensitive\ninformation (kernel memory). (CVE-2022-25375)\n\nIt was discovered that the ST21NFCA NFC driver in the Linux kernel did not\nproperly validate the size of certain data in EVT_TRANSACTION events. A\nphysically proximate attacker could use this to cause a denial of service\n(system crash) or possibly execute arbitrary code. (CVE-2022-26490)\n\nIt was discovered that the USB SR9700 ethernet device driver for the Linux\nkernel did not properly validate the length of requests from the device. A\nphysically proximate attacker could possibly use this to expose sensitive\ninformation (kernel memory). (CVE-2022-26966)\n\nIt was discovered that the Xilinx USB2 device gadget driver in the Linux\nkernel did not properly validate endpoint indices from the host. A\nphysically proximate attacker could possibly use this to cause a denial of\nservice (system crash). (CVE-2022-27223)\n\nMiaoqian Lin discovered that the RDMA Transport (RTRS) client\nimplementation in the Linux kernel contained a double-free when handling\ncertain error conditions. An attacker could use this to cause a denial of\nservice (system crash). (CVE-2022-29156)\n",null,[],[],[],[14,16,18,20,22,24,26,28,30,32,34,36,38,40,42,44],{"_key":15},"CVE-2021-26401",{"_key":17},"CVE-2022-20008",{"_key":19},"CVE-2022-25258",{"_key":21},"CVE-2022-25375",{"_key":23},"CVE-2022-26490",{"_key":25},"CVE-2022-26966",{"_key":27},"CVE-2022-27223",{"_key":29},"CVE-2022-29156",{"_key":31},"UBUNTU-CVE-2021-26401",{"_key":33},"UBUNTU-CVE-2022-20008",{"_key":35},"UBUNTU-CVE-2022-25258",{"_key":37},"UBUNTU-CVE-2022-25375",{"_key":39},"UBUNTU-CVE-2022-26490",{"_key":41},"UBUNTU-CVE-2022-26966",{"_key":43},"UBUNTU-CVE-2022-27223",{"_key":45},"UBUNTU-CVE-2022-29156",[],[],[49,50,51,52,53,54,55,56],{"_key":31},{"_key":33},{"_key":35},{"_key":37},{"_key":39},{"_key":41},{"_key":43},{"_key":45},"2022-05-12T01:17:41Z","2026-06-03T14:03:40.995026517Z",{"cisa_kev":60,"cisa_ransomware":60,"cisa_vendor":9,"epss_severity":9,"epss_score":9,"severity":9,"severity_score":9,"severity_version":9,"severity_source":9,"severity_vector":9,"severity_status":9},false,[62,68,73,77,81,85,89,93,97],{"url":63,"sources":64,"tags":66},"https://ubuntu.com/security/notices/USN-5417-1",[65],"osv_ubuntu",[67],"Advisory",{"url":69,"sources":70,"tags":71},"https://ubuntu.com/security/CVE-2021-26401",[65],[72],"REPORT",{"url":74,"sources":75,"tags":76},"https://ubuntu.com/security/CVE-2022-20008",[65],[72],{"url":78,"sources":79,"tags":80},"https://ubuntu.com/security/CVE-2022-25258",[65],[72],{"url":82,"sources":83,"tags":84},"https://ubuntu.com/security/CVE-2022-25375",[65],[72],{"url":86,"sources":87,"tags":88},"https://ubuntu.com/security/CVE-2022-26490",[65],[72],{"url":90,"sources":91,"tags":92},"https://ubuntu.com/security/CVE-2022-26966",[65],[72],{"url":94,"sources":95,"tags":96},"https://ubuntu.com/security/CVE-2022-27223",[65],[72],{"url":98,"sources":99,"tags":100},"https://ubuntu.com/security/CVE-2022-29156",[65],[72],[],[],[],[105,117,123,129],{"ecosystem":106,"name":107,"vendor":108,"product":107,"cpe_part":9,"purl_type":109,"purl_namespace":108,"purl_name":107,"source":9,"versions":110},"Ubuntu","linux-aws-5.13","ubuntu","deb",[111],{"version":112,"is_range":113,"range_type":114,"version_start":9,"version_start_type":9,"version_end":115,"version_end_type":116,"fixed_in":9},"lt5_13_0_1023_25~20_04_1",true,"ecosystem","5.13.0-1023.25~20.04.1","excluding",{"ecosystem":106,"name":118,"vendor":108,"product":118,"cpe_part":9,"purl_type":109,"purl_namespace":108,"purl_name":118,"source":9,"versions":119},"linux-azure-5.13",[120],{"version":121,"is_range":113,"range_type":114,"version_start":9,"version_start_type":9,"version_end":122,"version_end_type":116,"fixed_in":9},"lt5_13_0_1023_27~20_04_1","5.13.0-1023.27~20.04.1",{"ecosystem":106,"name":124,"vendor":108,"product":124,"cpe_part":9,"purl_type":109,"purl_namespace":108,"purl_name":124,"source":9,"versions":125},"linux-gcp-5.13",[126],{"version":127,"is_range":113,"range_type":114,"version_start":9,"version_start_type":9,"version_end":128,"version_end_type":116,"fixed_in":9},"lt5_13_0_1025_30~20_04_1","5.13.0-1025.30~20.04.1",{"ecosystem":106,"name":130,"vendor":108,"product":130,"cpe_part":9,"purl_type":109,"purl_namespace":108,"purl_name":130,"source":9,"versions":131},"linux-hwe-5.13",[132],{"version":133,"is_range":113,"range_type":114,"version_start":9,"version_start_type":9,"version_end":134,"version_end_type":116,"fixed_in":9},"lt5_13_0_41_46~20_04_1","5.13.0-41.46~20.04.1"]