[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-USN-5418-1":6},{"stargazers_count":4,"fetched_at":5},7,"2026-06-04T14:53:31.930Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":11,"aliases":12,"duplicate_of":9,"upstream":13,"downstream":66,"duplicates":67,"related":68,"reserved_at":9,"published_at":82,"modified_at":83,"state":9,"summary":84,"references_raw":86,"kevs":146,"epss":9,"epss_history":147,"metrics":148,"affected":149},"USN-5418-1","linux, linux-aws, linux-aws-hwe, linux-azure, linux-azure-4.15, linux-dell300x, linux-gcp, linux-gcp-4.15, linux-hwe, linux-kvm, linux-oracle, linux-snapdragon vulnerabilities\n\nKe Sun, Alyssa Milburn, Henrique Kawakami, Emma Benoit, Igor Chervatyuk,\nLisa Aichele, and Thais Moreira Hamasaki discovered that the Spectre\nVariant 2 mitigations for AMD processors on Linux were insufficient in some\nsituations. A local attacker could possibly use this to expose sensitive\ninformation. (CVE-2021-26401)\n\nDemi Marie Obenour and Simon Gaiser discovered that several Xen para-\nvirtualization device frontends did not properly restrict the access rights\nof device backends. An attacker could possibly use a malicious Xen backend\nto gain access to memory pages of a guest VM or cause a denial of service\nin the guest. (CVE-2022-23036, CVE-2022-23037, CVE-2022-23038,\nCVE-2022-23039, CVE-2022-23040, CVE-2022-23042)\n\nIt was discovered that the USB Gadget file system interface in the Linux\nkernel contained a use-after-free vulnerability. A local attacker could use\nthis to cause a denial of service (system crash) or possibly execute\narbitrary code. (CVE-2022-24958)\n\nIt was discovered that the USB gadget subsystem in the Linux kernel did not\nproperly validate interface descriptor requests. An attacker could possibly\nuse this to cause a denial of service (system crash). (CVE-2022-25258)\n\nIt was discovered that the Remote NDIS (RNDIS) USB gadget implementation in\nthe Linux kernel did not properly validate the size of the RNDIS_MSG_SET\ncommand. An attacker could possibly use this to expose sensitive\ninformation (kernel memory). (CVE-2022-25375)\n\nIt was discovered that the ST21NFCA NFC driver in the Linux kernel did not\nproperly validate the size of certain data in EVT_TRANSACTION events. A\nphysically proximate attacker could use this to cause a denial of service\n(system crash) or possibly execute arbitrary code. (CVE-2022-26490)\n\nIt was discovered that the USB SR9700 ethernet device driver for the Linux\nkernel did not properly validate the length of requests from the device. A\nphysically proximate attacker could possibly use this to expose sensitive\ninformation (kernel memory). (CVE-2022-26966)\n\nIt was discovered that the Xilinx USB2 device gadget driver in the Linux\nkernel did not properly validate endpoint indices from the host. A\nphysically proximate attacker could possibly use this to cause a denial of\nservice (system crash). (CVE-2022-27223)\n",null,[],[],[],[14,16,18,20,22,24,26,28,30,32,34,36,38,40,42,44,46,48,50,52,54,56,58,60,62,64],{"_key":15},"CVE-2021-26401",{"_key":17},"CVE-2022-23036",{"_key":19},"CVE-2022-23037",{"_key":21},"CVE-2022-23038",{"_key":23},"CVE-2022-23039",{"_key":25},"CVE-2022-23040",{"_key":27},"CVE-2022-23042",{"_key":29},"CVE-2022-24958",{"_key":31},"CVE-2022-25258",{"_key":33},"CVE-2022-25375",{"_key":35},"CVE-2022-26490",{"_key":37},"CVE-2022-26966",{"_key":39},"CVE-2022-27223",{"_key":41},"UBUNTU-CVE-2021-26401",{"_key":43},"UBUNTU-CVE-2022-23036",{"_key":45},"UBUNTU-CVE-2022-23037",{"_key":47},"UBUNTU-CVE-2022-23038",{"_key":49},"UBUNTU-CVE-2022-23039",{"_key":51},"UBUNTU-CVE-2022-23040",{"_key":53},"UBUNTU-CVE-2022-23042",{"_key":55},"UBUNTU-CVE-2022-24958",{"_key":57},"UBUNTU-CVE-2022-25258",{"_key":59},"UBUNTU-CVE-2022-25375",{"_key":61},"UBUNTU-CVE-2022-26490",{"_key":63},"UBUNTU-CVE-2022-26966",{"_key":65},"UBUNTU-CVE-2022-27223",[],[],[69,70,71,72,73,74,75,76,77,78,79,80,81],{"_key":41},{"_key":43},{"_key":45},{"_key":47},{"_key":49},{"_key":51},{"_key":53},{"_key":55},{"_key":57},{"_key":59},{"_key":61},{"_key":63},{"_key":65},"2022-05-12T01:48:59Z","2026-06-03T13:34:15.874021130Z",{"cisa_kev":85,"cisa_ransomware":85,"cisa_vendor":9,"epss_severity":9,"epss_score":9,"severity":9,"severity_score":9,"severity_version":9,"severity_source":9,"severity_vector":9,"severity_status":9},false,[87,93,98,102,106,110,114,118,122,126,130,134,138,142],{"url":88,"sources":89,"tags":91},"https://ubuntu.com/security/notices/USN-5418-1",[90],"osv_ubuntu",[92],"Advisory",{"url":94,"sources":95,"tags":96},"https://ubuntu.com/security/CVE-2021-26401",[90],[97],"REPORT",{"url":99,"sources":100,"tags":101},"https://ubuntu.com/security/CVE-2022-23036",[90],[97],{"url":103,"sources":104,"tags":105},"https://ubuntu.com/security/CVE-2022-23037",[90],[97],{"url":107,"sources":108,"tags":109},"https://ubuntu.com/security/CVE-2022-23038",[90],[97],{"url":111,"sources":112,"tags":113},"https://ubuntu.com/security/CVE-2022-23039",[90],[97],{"url":115,"sources":116,"tags":117},"https://ubuntu.com/security/CVE-2022-23040",[90],[97],{"url":119,"sources":120,"tags":121},"https://ubuntu.com/security/CVE-2022-23042",[90],[97],{"url":123,"sources":124,"tags":125},"https://ubuntu.com/security/CVE-2022-24958",[90],[97],{"url":127,"sources":128,"tags":129},"https://ubuntu.com/security/CVE-2022-25258",[90],[97],{"url":131,"sources":132,"tags":133},"https://ubuntu.com/security/CVE-2022-25375",[90],[97],{"url":135,"sources":136,"tags":137},"https://ubuntu.com/security/CVE-2022-26490",[90],[97],{"url":139,"sources":140,"tags":141},"https://ubuntu.com/security/CVE-2022-26966",[90],[97],{"url":143,"sources":144,"tags":145},"https://ubuntu.com/security/CVE-2022-27223",[90],[97],[],[],[],[150,162,168,174,183,189,195,201,207,213,219,228],{"ecosystem":151,"name":152,"vendor":153,"product":152,"cpe_part":9,"purl_type":154,"purl_namespace":153,"purl_name":152,"source":9,"versions":155},"Ubuntu","linux","ubuntu","deb",[156],{"version":157,"is_range":158,"range_type":159,"version_start":9,"version_start_type":9,"version_end":160,"version_end_type":161,"fixed_in":9},"lt4_15_0_177_186",true,"ecosystem","4.15.0-177.186","excluding",{"ecosystem":151,"name":163,"vendor":153,"product":163,"cpe_part":9,"purl_type":154,"purl_namespace":153,"purl_name":163,"source":9,"versions":164},"linux-aws",[165],{"version":166,"is_range":158,"range_type":159,"version_start":9,"version_start_type":9,"version_end":167,"version_end_type":161,"fixed_in":9},"lt4_15_0_1128_137","4.15.0-1128.137",{"ecosystem":151,"name":169,"vendor":153,"product":169,"cpe_part":9,"purl_type":154,"purl_namespace":153,"purl_name":169,"source":9,"versions":170},"linux-aws-hwe",[171],{"version":172,"is_range":158,"range_type":159,"version_start":9,"version_start_type":9,"version_end":173,"version_end_type":161,"fixed_in":9},"lt4_15_0_1128_137~16_04_1","4.15.0-1128.137~16.04.1",{"ecosystem":151,"name":175,"vendor":153,"product":175,"cpe_part":9,"purl_type":154,"purl_namespace":153,"purl_name":175,"source":9,"versions":176},"linux-azure",[177,180],{"version":178,"is_range":158,"range_type":159,"version_start":9,"version_start_type":9,"version_end":179,"version_end_type":161,"fixed_in":9},"lt4_15_0_1138_151~14_04_1","4.15.0-1138.151~14.04.1",{"version":181,"is_range":158,"range_type":159,"version_start":9,"version_start_type":9,"version_end":182,"version_end_type":161,"fixed_in":9},"lt4_15_0_1138_151~16_04_1","4.15.0-1138.151~16.04.1",{"ecosystem":151,"name":184,"vendor":153,"product":184,"cpe_part":9,"purl_type":154,"purl_namespace":153,"purl_name":184,"source":9,"versions":185},"linux-azure-4.15",[186],{"version":187,"is_range":158,"range_type":159,"version_start":9,"version_start_type":9,"version_end":188,"version_end_type":161,"fixed_in":9},"lt4_15_0_1138_151","4.15.0-1138.151",{"ecosystem":151,"name":190,"vendor":153,"product":190,"cpe_part":9,"purl_type":154,"purl_namespace":153,"purl_name":190,"source":9,"versions":191},"linux-dell300x",[192],{"version":193,"is_range":158,"range_type":159,"version_start":9,"version_start_type":9,"version_end":194,"version_end_type":161,"fixed_in":9},"lt4_15_0_1042_47","4.15.0-1042.47",{"ecosystem":151,"name":196,"vendor":153,"product":196,"cpe_part":9,"purl_type":154,"purl_namespace":153,"purl_name":196,"source":9,"versions":197},"linux-gcp",[198],{"version":199,"is_range":158,"range_type":159,"version_start":9,"version_start_type":9,"version_end":200,"version_end_type":161,"fixed_in":9},"lt4_15_0_1122_136~16_04_1","4.15.0-1122.136~16.04.1",{"ecosystem":151,"name":202,"vendor":153,"product":202,"cpe_part":9,"purl_type":154,"purl_namespace":153,"purl_name":202,"source":9,"versions":203},"linux-gcp-4.15",[204],{"version":205,"is_range":158,"range_type":159,"version_start":9,"version_start_type":9,"version_end":206,"version_end_type":161,"fixed_in":9},"lt4_15_0_1122_136","4.15.0-1122.136",{"ecosystem":151,"name":208,"vendor":153,"product":208,"cpe_part":9,"purl_type":154,"purl_namespace":153,"purl_name":208,"source":9,"versions":209},"linux-hwe",[210],{"version":211,"is_range":158,"range_type":159,"version_start":9,"version_start_type":9,"version_end":212,"version_end_type":161,"fixed_in":9},"lt4_15_0_177_186~16_04_1","4.15.0-177.186~16.04.1",{"ecosystem":151,"name":214,"vendor":153,"product":214,"cpe_part":9,"purl_type":154,"purl_namespace":153,"purl_name":214,"source":9,"versions":215},"linux-kvm",[216],{"version":217,"is_range":158,"range_type":159,"version_start":9,"version_start_type":9,"version_end":218,"version_end_type":161,"fixed_in":9},"lt4_15_0_1114_117","4.15.0-1114.117",{"ecosystem":151,"name":220,"vendor":153,"product":220,"cpe_part":9,"purl_type":154,"purl_namespace":153,"purl_name":220,"source":9,"versions":221},"linux-oracle",[222,225],{"version":223,"is_range":158,"range_type":159,"version_start":9,"version_start_type":9,"version_end":224,"version_end_type":161,"fixed_in":9},"lt4_15_0_1093_102~16_04_1","4.15.0-1093.102~16.04.1",{"version":226,"is_range":158,"range_type":159,"version_start":9,"version_start_type":9,"version_end":227,"version_end_type":161,"fixed_in":9},"lt4_15_0_1093_102","4.15.0-1093.102",{"ecosystem":151,"name":229,"vendor":153,"product":229,"cpe_part":9,"purl_type":154,"purl_namespace":153,"purl_name":229,"source":9,"versions":230},"linux-snapdragon",[231],{"version":232,"is_range":158,"range_type":159,"version_start":9,"version_start_type":9,"version_end":233,"version_end_type":161,"fixed_in":9},"lt4_15_0_1127_136","4.15.0-1127.136"]