{"schema_version":"1.7.5","id":"USN-3901-1","published":"2019-03-05T20:44:55Z","modified":"2026-04-22T09:55:14.868101Z","related":["UBUNTU-CVE-2018-18397","UBUNTU-CVE-2018-19854","UBUNTU-CVE-2019-6133"],"upstream":["CVE-2018-18397","CVE-2018-19854","CVE-2019-6133","UBUNTU-CVE-2018-18397","UBUNTU-CVE-2018-19854","UBUNTU-CVE-2019-6133"],"summary":"linux, linux-aws, linux-gcp, linux-kvm, linux-oem, linux-oracle, linux-raspi2 vulnerabilities","details":"Jann Horn discovered that the userfaultd implementation in the Linux kernel\ndid not properly restrict access to certain ioctls. A local attacker could\nuse this possibly to modify files. (CVE-2018-18397)\n\nIt was discovered that the crypto subsystem of the Linux kernel leaked\nuninitialized memory to user space in some situations. A local attacker\ncould use this to expose sensitive information (kernel memory).\n(CVE-2018-19854)\n\nJann Horn discovered a race condition in the fork() system call in\nthe Linux kernel. A local attacker could use this to gain access to\nservices that cache authorizations. (CVE-2019-6133)\n","affected":[{"package":{"name":"linux","ecosystem":"Ubuntu:18.04:LTS","purl":"pkg:deb/ubuntu/linux@4.15.0-46.49?arch=source&distro=bionic"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.0-46.49"}]}],"versions":["4.13.0-16.19","4.13.0-17.20","4.13.0-25.29","4.13.0-32.35","4.15.0-10.11","4.15.0-12.13","4.15.0-13.14","4.15.0-15.16","4.15.0-19.20","4.15.0-20.21","4.15.0-22.24","4.15.0-23.25","4.15.0-24.26","4.15.0-29.31","4.15.0-30.32","4.15.0-32.35","4.15.0-33.36","4.15.0-34.37","4.15.0-36.39","4.15.0-38.41","4.15.0-39.42","4.15.0-42.45","4.15.0-43.46","4.15.0-44.47","4.15.0-45.48"],"ecosystem_specific":{"availability":"No subscription required","binaries":[{"binary_name":"block-modules-4.15.0-46-generic-di","binary_version":"4.15.0-46.49"},{"binary_name":"block-modules-4.15.0-46-generic-lpae-di","binary_version":"4.15.0-46.49"},{"binary_name":"block-modules-4.15.0-46-snapdragon-di","binary_version":"4.15.0-46.49"},{"binary_name":"crypto-modules-4.15.0-46-generic-di","binary_version":"4.15.0-46.49"},{"binary_name":"crypto-modules-4.15.0-46-generic-lpae-di","binary_version":"4.15.0-46.49"},{"binary_name":"crypto-modules-4.15.0-46-snapdragon-di","binary_version":"4.15.0-46.49"},{"binary_name":"dasd-extra-modules-4.15.0-46-generic-di","binary_version":"4.15.0-46.49"},{"binary_name":"dasd-modules-4.15.0-46-generic-di","binary_version":"4.15.0-46.49"},{"binary_name":"fat-modules-4.15.0-46-generic-di","binary_version":"4.15.0-46.49"},{"binary_name":"fat-modules-4.15.0-46-generic-lpae-di","binary_version":"4.15.0-46.49"},{"binary_name":"fat-modules-4.15.0-46-snapdragon-di","binary_version":"4.15.0-46.49"},{"binary_name":"fb-modules-4.15.0-46-generic-di","binary_version":"4.15.0-46.49"},{"binary_name":"firewire-core-modules-4.15.0-46-generic-di","binary_version":"4.15.0-46.49"},{"binary_name":"floppy-modules-4.15.0-46-generic-di","binary_version":"4.15.0-46.49"},{"binary_name":"fs-core-modules-4.15.0-46-generic-di","binary_version":"4.15.0-46.49"},{"binary_name":"fs-core-modules-4.15.0-46-generic-lpae-di","binary_version":"4.15.0-46.49"},{"binary_name":"fs-core-modules-4.15.0-46-snapdragon-di","binary_version":"4.15.0-46.49"},{"binary_name":"fs-secondary-modules-4.15.0-46-generic-di","binary_version":"4.15.0-46.49"},{"binary_name":"fs-secondary-modules-4.15.0-46-generic-lpae-di","binary_version":"4.15.0-46.49"},{"binary_name":"fs-secondary-modules-4.15.0-46-snapdragon-di","binary_version":"4.15.0-46.49"},{"binary_name":"input-modules-4.15.0-46-generic-di","binary_version":"4.15.0-46.49"},{"binary_name":"input-modules-4.15.0-46-generic-lpae-di","binary_version":"4.15.0-46.49"},{"binary_name":"input-modules-4.15.0-46-snapdragon-di","binary_version":"4.15.0-46.49"},{"binary_name":"ipmi-modules-4.15.0-46-generic-di","binary_version":"4.15.0-46.49"},{"binary_name":"ipmi-modules-4.15.0-46-generic-lpae-di","binary_version":"4.15.0-46.49"},{"binary_name":"ipmi-modules-4.15.0-46-snapdragon-di","binary_version":"4.15.0-46.49"},{"binary_name":"irda-modules-4.15.0-46-generic-di","binary_version":"4.15.0-46.49"},{"binary_name":"irda-modules-4.15.0-46-generic-lpae-di","binary_version":"4.15.0-46.49"},{"binary_name":"irda-modules-4.15.0-46-snapdragon-di","binary_version":"4.15.0-46.49"},{"binary_name":"kernel-image-4.15.0-46-generic-di","binary_version":"4.15.0-46.49"},{"binary_name":"kernel-image-4.15.0-46-generic-lpae-di","binary_version":"4.15.0-46.49"},{"binary_name":"kernel-image-4.15.0-46-snapdragon-di","binary_version":"4.15.0-46.49"},{"binary_name":"linux-buildinfo-4.15.0-46-generic","binary_version":"4.15.0-46.49"},{"binary_name":"linux-buildinfo-4.15.0-46-generic-lpae","binary_version":"4.15.0-46.49"},{"binary_name":"linux-buildinfo-4.15.0-46-lowlatency","binary_version":"4.15.0-46.49"},{"binary_name":"linux-buildinfo-4.15.0-46-snapdragon","binary_version":"4.15.0-46.49"},{"binary_name":"linux-cloud-tools-4.15.0-46","binary_version":"4.15.0-46.49"},{"binary_name":"linux-cloud-tools-4.15.0-46-generic","binary_version":"4.15.0-46.49"},{"binary_name":"linux-cloud-tools-4.15.0-46-lowlatency","binary_version":"4.15.0-46.49"},{"binary_name":"linux-cloud-tools-common","binary_version":"4.15.0-46.49"},{"binary_name":"linux-headers-4.15.0-46","binary_version":"4.15.0-46.49"},{"binary_name":"linux-headers-4.15.0-46-generic","binary_version":"4.15.0-46.49"},{"binary_name":"linux-headers-4.15.0-46-generic-lpae","binary_version":"4.15.0-46.49"},{"binary_name":"linux-headers-4.15.0-46-lowlatency","binary_version":"4.15.0-46.49"},{"binary_name":"linux-headers-4.15.0-46-snapdragon","binary_version":"4.15.0-46.49"},{"binary_name":"linux-image-4.15.0-46-generic","binary_version":"4.15.0-46.49"},{"binary_name":"linux-image-4.15.0-46-generic-lpae","binary_version":"4.15.0-46.49"},{"binary_name":"linux-image-4.15.0-46-lowlatency","binary_version":"4.15.0-46.49"},{"binary_name":"linux-image-4.15.0-46-snapdragon","binary_version":"4.15.0-46.49"},{"binary_name":"linux-image-unsigned-4.15.0-46-generic","binary_version":"4.15.0-46.49"},{"binary_name":"linux-image-unsigned-4.15.0-46-lowlatency","binary_version":"4.15.0-46.49"},{"binary_name":"linux-modules-4.15.0-46-generic","binary_version":"4.15.0-46.49"},{"binary_name":"linux-modules-4.15.0-46-generic-lpae","binary_version":"4.15.0-46.49"},{"binary_name":"linux-modules-4.15.0-46-lowlatency","binary_version":"4.15.0-46.49"},{"binary_name":"linux-modules-4.15.0-46-snapdragon","binary_version":"4.15.0-46.49"},{"binary_name":"linux-modules-extra-4.15.0-46-generic","binary_version":"4.15.0-46.49"},{"binary_name":"linux-source-4.15.0","binary_version":"4.15.0-46.49"},{"binary_name":"linux-tools-4.15.0-46","binary_version":"4.15.0-46.49"},{"binary_name":"linux-tools-4.15.0-46-generic","binary_version":"4.15.0-46.49"},{"binary_name":"linux-tools-4.15.0-46-generic-lpae","binary_version":"4.15.0-46.49"},{"binary_name":"linux-tools-4.15.0-46-lowlatency","binary_version":"4.15.0-46.49"},{"binary_name":"linux-tools-4.15.0-46-snapdragon","binary_version":"4.15.0-46.49"},{"binary_name":"linux-tools-common","binary_version":"4.15.0-46.49"},{"binary_name":"linux-tools-host","binary_version":"4.15.0-46.49"},{"binary_name":"linux-udebs-generic","binary_version":"4.15.0-46.49"},{"binary_name":"linux-udebs-generic-lpae","binary_version":"4.15.0-46.49"},{"binary_name":"linux-udebs-snapdragon","binary_version":"4.15.0-46.49"},{"binary_name":"md-modules-4.15.0-46-generic-di","binary_version":"4.15.0-46.49"},{"binary_name":"md-modules-4.15.0-46-generic-lpae-di","binary_version":"4.15.0-46.49"},{"binary_name":"md-modules-4.15.0-46-snapdragon-di","binary_version":"4.15.0-46.49"},{"binary_name":"message-modules-4.15.0-46-generic-di","binary_version":"4.15.0-46.49"},{"binary_name":"message-modules-4.15.0-46-snapdragon-di","binary_version":"4.15.0-46.49"},{"binary_name":"mouse-modules-4.15.0-46-generic-di","binary_version":"4.15.0-46.49"},{"binary_name":"mouse-modules-4.15.0-46-generic-lpae-di","binary_version":"4.15.0-46.49"},{"binary_name":"mouse-modules-4.15.0-46-snapdragon-di","binary_version":"4.15.0-46.49"},{"binary_name":"multipath-modules-4.15.0-46-generic-di","binary_version":"4.15.0-46.49"},{"binary_name":"multipath-modules-4.15.0-46-generic-lpae-di","binary_version":"4.15.0-46.49"},{"binary_name":"multipath-modules-4.15.0-46-snapdragon-di","binary_version":"4.15.0-46.49"},{"binary_name":"nfs-modules-4.15.0-46-generic-di","binary_version":"4.15.0-46.49"},{"binary_name":"nfs-modules-4.15.0-46-generic-lpae-di","binary_version":"4.15.0-46.49"},{"binary_name":"nfs-modules-4.15.0-46-snapdragon-di","binary_version":"4.15.0-46.49"},{"binary_name":"nic-modules-4.15.0-46-generic-di","binary_version":"4.15.0-46.49"},{"binary_name":"nic-modules-4.15.0-46-generic-lpae-di","binary_version":"4.15.0-46.49"},{"binary_name":"nic-modules-4.15.0-46-snapdragon-di","binary_version":"4.15.0-46.49"},{"binary_name":"nic-pcmcia-modules-4.15.0-46-generic-di","binary_version":"4.15.0-46.49"},{"binary_name":"nic-shared-modules-4.15.0-46-generic-di","binary_version":"4.15.0-46.49"},{"binary_name":"nic-shared-modules-4.15.0-46-generic-lpae-di","binary_version":"4.15.0-46.49"},{"binary_name":"nic-shared-modules-4.15.0-46-snapdragon-di","binary_version":"4.15.0-46.49"},{"binary_name":"nic-usb-modules-4.15.0-46-generic-di","binary_version":"4.15.0-46.49"},{"binary_name":"nic-usb-modules-4.15.0-46-generic-lpae-di","binary_version":"4.15.0-46.49"},{"binary_name":"nic-usb-modules-4.15.0-46-snapdragon-di","binary_version":"4.15.0-46.49"},{"binary_name":"parport-modules-4.15.0-46-generic-di","binary_version":"4.15.0-46.49"},{"binary_name":"parport-modules-4.15.0-46-generic-lpae-di","binary_version":"4.15.0-46.49"},{"binary_name":"parport-modules-4.15.0-46-snapdragon-di","binary_version":"4.15.0-46.49"},{"binary_name":"pata-modules-4.15.0-46-generic-di","binary_version":"4.15.0-46.49"},{"binary_name":"pcmcia-modules-4.15.0-46-generic-di","binary_version":"4.15.0-46.49"},{"binary_name":"pcmcia-storage-modules-4.15.0-46-generic-di","binary_version":"4.15.0-46.49"},{"binary_name":"plip-modules-4.15.0-46-generic-di","binary_version":"4.15.0-46.49"},{"binary_name":"plip-modules-4.15.0-46-generic-lpae-di","binary_version":"4.15.0-46.49"},{"binary_name":"plip-modules-4.15.0-46-snapdragon-di","binary_version":"4.15.0-46.49"},{"binary_name":"ppp-modules-4.15.0-46-generic-di","binary_version":"4.15.0-46.49"},{"binary_name":"ppp-modules-4.15.0-46-generic-lpae-di","binary_version":"4.15.0-46.49"},{"binary_name":"ppp-modules-4.15.0-46-snapdragon-di","binary_version":"4.15.0-46.49"},{"binary_name":"sata-modules-4.15.0-46-generic-di","binary_version":"4.15.0-46.49"},{"binary_name":"sata-modules-4.15.0-46-generic-lpae-di","binary_version":"4.15.0-46.49"},{"binary_name":"sata-modules-4.15.0-46-snapdragon-di","binary_version":"4.15.0-46.49"},{"binary_name":"scsi-modules-4.15.0-46-generic-di","binary_version":"4.15.0-46.49"},{"binary_name":"scsi-modules-4.15.0-46-generic-lpae-di","binary_version":"4.15.0-46.49"},{"binary_name":"scsi-modules-4.15.0-46-snapdragon-di","binary_version":"4.15.0-46.49"},{"binary_name":"serial-modules-4.15.0-46-generic-di","binary_version":"4.15.0-46.49"},{"binary_name":"storage-core-modules-4.15.0-46-generic-di","binary_version":"4.15.0-46.49"},{"binary_name":"storage-core-modules-4.15.0-46-generic-lpae-di","binary_version":"4.15.0-46.49"},{"binary_name":"storage-core-modules-4.15.0-46-snapdragon-di","binary_version":"4.15.0-46.49"},{"binary_name":"usb-modules-4.15.0-46-generic-di","binary_version":"4.15.0-46.49"},{"binary_name":"usb-modules-4.15.0-46-generic-lpae-di","binary_version":"4.15.0-46.49"},{"binary_name":"usb-modules-4.15.0-46-snapdragon-di","binary_version":"4.15.0-46.49"},{"binary_name":"virtio-modules-4.15.0-46-generic-di","binary_version":"4.15.0-46.49"},{"binary_name":"virtio-modules-4.15.0-46-snapdragon-di","binary_version":"4.15.0-46.49"},{"binary_name":"vlan-modules-4.15.0-46-generic-di","binary_version":"4.15.0-46.49"},{"binary_name":"vlan-modules-4.15.0-46-generic-lpae-di","binary_version":"4.15.0-46.49"},{"binary_name":"vlan-modules-4.15.0-46-snapdragon-di","binary_version":"4.15.0-46.49"}]},"database_specific":{"cves_map":{"cves":[{"id":"CVE-2018-18397","severity":[{"score":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}]},{"id":"CVE-2018-19854","severity":[{"score":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}]},{"id":"CVE-2019-6133","severity":[{"score":"CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}]}],"ecosystem":"Ubuntu:18.04:LTS"},"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-3901-1.json"}},{"package":{"name":"linux-aws","ecosystem":"Ubuntu:18.04:LTS","purl":"pkg:deb/ubuntu/linux-aws@4.15.0-1033.35?arch=source&distro=bionic"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.0-1033.35"}]}],"versions":["4.15.0-1001.1","4.15.0-1003.3","4.15.0-1005.5","4.15.0-1006.6","4.15.0-1007.7","4.15.0-1009.9","4.15.0-1010.10","4.15.0-1011.11","4.15.0-1016.16","4.15.0-1017.17","4.15.0-1019.19","4.15.0-1020.20","4.15.0-1021.21","4.15.0-1023.23","4.15.0-1025.25","4.15.0-1027.27","4.15.0-1029.30","4.15.0-1031.33","4.15.0-1032.34"],"ecosystem_specific":{"availability":"No subscription required","binaries":[{"binary_name":"linux-aws-cloud-tools-4.15.0-1033","binary_version":"4.15.0-1033.35"},{"binary_name":"linux-aws-headers-4.15.0-1033","binary_version":"4.15.0-1033.35"},{"binary_name":"linux-aws-tools-4.15.0-1033","binary_version":"4.15.0-1033.35"},{"binary_name":"linux-buildinfo-4.15.0-1033-aws","binary_version":"4.15.0-1033.35"},{"binary_name":"linux-cloud-tools-4.15.0-1033-aws","binary_version":"4.15.0-1033.35"},{"binary_name":"linux-headers-4.15.0-1033-aws","binary_version":"4.15.0-1033.35"},{"binary_name":"linux-image-4.15.0-1033-aws","binary_version":"4.15.0-1033.35"},{"binary_name":"linux-modules-4.15.0-1033-aws","binary_version":"4.15.0-1033.35"},{"binary_name":"linux-tools-4.15.0-1033-aws","binary_version":"4.15.0-1033.35"}]},"database_specific":{"cves_map":{"cves":[{"id":"CVE-2018-18397","severity":[{"score":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}]},{"id":"CVE-2018-19854","severity":[{"score":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}]},{"id":"CVE-2019-6133","severity":[{"score":"CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}]}],"ecosystem":"Ubuntu:18.04:LTS"},"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-3901-1.json"}},{"package":{"name":"linux-gcp","ecosystem":"Ubuntu:18.04:LTS","purl":"pkg:deb/ubuntu/linux-gcp@4.15.0-1028.29?arch=source&distro=bionic"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.0-1028.29"}]}],"versions":["4.15.0-1001.1","4.15.0-1003.3","4.15.0-1005.5","4.15.0-1006.6","4.15.0-1008.8","4.15.0-1009.9","4.15.0-1010.10","4.15.0-1014.14","4.15.0-1015.15","4.15.0-1017.18","4.15.0-1018.19","4.15.0-1019.20","4.15.0-1021.22","4.15.0-1023.24","4.15.0-1024.25","4.15.0-1025.26","4.15.0-1026.27","4.15.0-1027.28"],"ecosystem_specific":{"availability":"No subscription required","binaries":[{"binary_name":"linux-buildinfo-4.15.0-1028-gcp","binary_version":"4.15.0-1028.29"},{"binary_name":"linux-gcp-headers-4.15.0-1028","binary_version":"4.15.0-1028.29"},{"binary_name":"linux-gcp-tools-4.15.0-1028","binary_version":"4.15.0-1028.29"},{"binary_name":"linux-headers-4.15.0-1028-gcp","binary_version":"4.15.0-1028.29"},{"binary_name":"linux-image-unsigned-4.15.0-1028-gcp","binary_version":"4.15.0-1028.29"},{"binary_name":"linux-modules-4.15.0-1028-gcp","binary_version":"4.15.0-1028.29"},{"binary_name":"linux-modules-extra-4.15.0-1028-gcp","binary_version":"4.15.0-1028.29"},{"binary_name":"linux-tools-4.15.0-1028-gcp","binary_version":"4.15.0-1028.29"}]},"database_specific":{"cves_map":{"cves":[{"id":"CVE-2018-18397","severity":[{"score":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}]},{"id":"CVE-2018-19854","severity":[{"score":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}]},{"id":"CVE-2019-6133","severity":[{"score":"CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}]}],"ecosystem":"Ubuntu:18.04:LTS"},"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-3901-1.json"}},{"package":{"name":"linux-kvm","ecosystem":"Ubuntu:18.04:LTS","purl":"pkg:deb/ubuntu/linux-kvm@4.15.0-1030.30?arch=source&distro=bionic"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.0-1030.30"}]}],"versions":["4.15.0-1002.2","4.15.0-1003.3","4.15.0-1004.4","4.15.0-1006.6","4.15.0-1008.8","4.15.0-1010.10","4.15.0-1011.11","4.15.0-1012.12","4.15.0-1016.16","4.15.0-1017.17","4.15.0-1019.19","4.15.0-1020.20","4.15.0-1021.21","4.15.0-1023.23","4.15.0-1025.25","4.15.0-1026.26","4.15.0-1027.27","4.15.0-1028.28","4.15.0-1029.29"],"ecosystem_specific":{"availability":"No subscription required","binaries":[{"binary_name":"linux-buildinfo-4.15.0-1030-kvm","binary_version":"4.15.0-1030.30"},{"binary_name":"linux-headers-4.15.0-1030-kvm","binary_version":"4.15.0-1030.30"},{"binary_name":"linux-image-4.15.0-1030-kvm","binary_version":"4.15.0-1030.30"},{"binary_name":"linux-kvm-headers-4.15.0-1030","binary_version":"4.15.0-1030.30"},{"binary_name":"linux-kvm-tools-4.15.0-1030","binary_version":"4.15.0-1030.30"},{"binary_name":"linux-modules-4.15.0-1030-kvm","binary_version":"4.15.0-1030.30"},{"binary_name":"linux-tools-4.15.0-1030-kvm","binary_version":"4.15.0-1030.30"}]},"database_specific":{"cves_map":{"cves":[{"id":"CVE-2018-18397","severity":[{"score":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}]},{"id":"CVE-2018-19854","severity":[{"score":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}]},{"id":"CVE-2019-6133","severity":[{"score":"CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}]}],"ecosystem":"Ubuntu:18.04:LTS"},"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-3901-1.json"}},{"package":{"name":"linux-oem","ecosystem":"Ubuntu:18.04:LTS","purl":"pkg:deb/ubuntu/linux-oem@4.15.0-1034.39?arch=source&distro=bionic"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.0-1034.39"}]}],"versions":["4.15.0-1002.3","4.15.0-1004.5","4.15.0-1006.9","4.15.0-1008.11","4.15.0-1009.12","4.15.0-1012.15","4.15.0-1013.16","4.15.0-1015.18","4.15.0-1017.20","4.15.0-1018.21","4.15.0-1021.24","4.15.0-1024.29","4.15.0-1026.31","4.15.0-1028.33","4.15.0-1030.35","4.15.0-1033.38"],"ecosystem_specific":{"availability":"No subscription required","binaries":[{"binary_name":"block-modules-4.15.0-1034-oem-di","binary_version":"4.15.0-1034.39"},{"binary_name":"crypto-modules-4.15.0-1034-oem-di","binary_version":"4.15.0-1034.39"},{"binary_name":"fat-modules-4.15.0-1034-oem-di","binary_version":"4.15.0-1034.39"},{"binary_name":"fb-modules-4.15.0-1034-oem-di","binary_version":"4.15.0-1034.39"},{"binary_name":"firewire-core-modules-4.15.0-1034-oem-di","binary_version":"4.15.0-1034.39"},{"binary_name":"floppy-modules-4.15.0-1034-oem-di","binary_version":"4.15.0-1034.39"},{"binary_name":"fs-core-modules-4.15.0-1034-oem-di","binary_version":"4.15.0-1034.39"},{"binary_name":"fs-secondary-modules-4.15.0-1034-oem-di","binary_version":"4.15.0-1034.39"},{"binary_name":"input-modules-4.15.0-1034-oem-di","binary_version":"4.15.0-1034.39"},{"binary_name":"ipmi-modules-4.15.0-1034-oem-di","binary_version":"4.15.0-1034.39"},{"binary_name":"irda-modules-4.15.0-1034-oem-di","binary_version":"4.15.0-1034.39"},{"binary_name":"kernel-image-4.15.0-1034-oem-di","binary_version":"4.15.0-1034.39"},{"binary_name":"linux-buildinfo-4.15.0-1034-oem","binary_version":"4.15.0-1034.39"},{"binary_name":"linux-headers-4.15.0-1034-oem","binary_version":"4.15.0-1034.39"},{"binary_name":"linux-image-unsigned-4.15.0-1034-oem","binary_version":"4.15.0-1034.39"},{"binary_name":"linux-modules-4.15.0-1034-oem","binary_version":"4.15.0-1034.39"},{"binary_name":"linux-oem-headers-4.15.0-1034","binary_version":"4.15.0-1034.39"},{"binary_name":"linux-oem-tools-4.15.0-1034","binary_version":"4.15.0-1034.39"},{"binary_name":"linux-tools-4.15.0-1034-oem","binary_version":"4.15.0-1034.39"},{"binary_name":"linux-udebs-oem","binary_version":"4.15.0-1034.39"},{"binary_name":"md-modules-4.15.0-1034-oem-di","binary_version":"4.15.0-1034.39"},{"binary_name":"message-modules-4.15.0-1034-oem-di","binary_version":"4.15.0-1034.39"},{"binary_name":"mouse-modules-4.15.0-1034-oem-di","binary_version":"4.15.0-1034.39"},{"binary_name":"multipath-modules-4.15.0-1034-oem-di","binary_version":"4.15.0-1034.39"},{"binary_name":"nfs-modules-4.15.0-1034-oem-di","binary_version":"4.15.0-1034.39"},{"binary_name":"nic-modules-4.15.0-1034-oem-di","binary_version":"4.15.0-1034.39"},{"binary_name":"nic-pcmcia-modules-4.15.0-1034-oem-di","binary_version":"4.15.0-1034.39"},{"binary_name":"nic-shared-modules-4.15.0-1034-oem-di","binary_version":"4.15.0-1034.39"},{"binary_name":"nic-usb-modules-4.15.0-1034-oem-di","binary_version":"4.15.0-1034.39"},{"binary_name":"parport-modules-4.15.0-1034-oem-di","binary_version":"4.15.0-1034.39"},{"binary_name":"pata-modules-4.15.0-1034-oem-di","binary_version":"4.15.0-1034.39"},{"binary_name":"pcmcia-modules-4.15.0-1034-oem-di","binary_version":"4.15.0-1034.39"},{"binary_name":"pcmcia-storage-modules-4.15.0-1034-oem-di","binary_version":"4.15.0-1034.39"},{"binary_name":"plip-modules-4.15.0-1034-oem-di","binary_version":"4.15.0-1034.39"},{"binary_name":"ppp-modules-4.15.0-1034-oem-di","binary_version":"4.15.0-1034.39"},{"binary_name":"sata-modules-4.15.0-1034-oem-di","binary_version":"4.15.0-1034.39"},{"binary_name":"scsi-modules-4.15.0-1034-oem-di","binary_version":"4.15.0-1034.39"},{"binary_name":"serial-modules-4.15.0-1034-oem-di","binary_version":"4.15.0-1034.39"},{"binary_name":"storage-core-modules-4.15.0-1034-oem-di","binary_version":"4.15.0-1034.39"},{"binary_name":"usb-modules-4.15.0-1034-oem-di","binary_version":"4.15.0-1034.39"},{"binary_name":"virtio-modules-4.15.0-1034-oem-di","binary_version":"4.15.0-1034.39"},{"binary_name":"vlan-modules-4.15.0-1034-oem-di","binary_version":"4.15.0-1034.39"}]},"database_specific":{"cves_map":{"cves":[{"id":"CVE-2018-18397","severity":[{"score":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}]},{"id":"CVE-2018-19854","severity":[{"score":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}]},{"id":"CVE-2019-6133","severity":[{"score":"CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}]}],"ecosystem":"Ubuntu:18.04:LTS"},"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-3901-1.json"}},{"package":{"name":"linux-oracle","ecosystem":"Ubuntu:18.04:LTS","purl":"pkg:deb/ubuntu/linux-oracle@4.15.0-1009.11?arch=source&distro=bionic"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.0-1009.11"}]}],"versions":["4.15.0-1007.9","4.15.0-1008.10"],"ecosystem_specific":{"availability":"No subscription required","binaries":[{"binary_name":"linux-buildinfo-4.15.0-1009-oracle","binary_version":"4.15.0-1009.11"},{"binary_name":"linux-headers-4.15.0-1009-oracle","binary_version":"4.15.0-1009.11"},{"binary_name":"linux-image-unsigned-4.15.0-1009-oracle","binary_version":"4.15.0-1009.11"},{"binary_name":"linux-modules-4.15.0-1009-oracle","binary_version":"4.15.0-1009.11"},{"binary_name":"linux-modules-extra-4.15.0-1009-oracle","binary_version":"4.15.0-1009.11"},{"binary_name":"linux-oracle-headers-4.15.0-1009","binary_version":"4.15.0-1009.11"},{"binary_name":"linux-oracle-tools-4.15.0-1009","binary_version":"4.15.0-1009.11"},{"binary_name":"linux-tools-4.15.0-1009-oracle","binary_version":"4.15.0-1009.11"}]},"database_specific":{"cves_map":{"cves":[{"id":"CVE-2018-18397","severity":[{"score":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}]},{"id":"CVE-2018-19854","severity":[{"score":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}]},{"id":"CVE-2019-6133","severity":[{"score":"CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}]}],"ecosystem":"Ubuntu:18.04:LTS"},"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-3901-1.json"}},{"package":{"name":"linux-raspi2","ecosystem":"Ubuntu:18.04:LTS","purl":"pkg:deb/ubuntu/linux-raspi2@4.15.0-1032.34?arch=source&distro=bionic"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.0-1032.34"}]}],"versions":["4.13.0-1005.5","4.13.0-1006.6","4.13.0-1008.8","4.15.0-1006.7","4.15.0-1009.10","4.15.0-1010.11","4.15.0-1011.12","4.15.0-1012.13","4.15.0-1013.14","4.15.0-1017.18","4.15.0-1018.19","4.15.0-1020.22","4.15.0-1021.23","4.15.0-1022.24","4.15.0-1024.26","4.15.0-1026.28","4.15.0-1027.29","4.15.0-1028.30","4.15.0-1029.31","4.15.0-1030.32","4.15.0-1031.33"],"ecosystem_specific":{"availability":"No subscription required","binaries":[{"binary_name":"linux-buildinfo-4.15.0-1032-raspi2","binary_version":"4.15.0-1032.34"},{"binary_name":"linux-headers-4.15.0-1032-raspi2","binary_version":"4.15.0-1032.34"},{"binary_name":"linux-image-4.15.0-1032-raspi2","binary_version":"4.15.0-1032.34"},{"binary_name":"linux-modules-4.15.0-1032-raspi2","binary_version":"4.15.0-1032.34"},{"binary_name":"linux-raspi2-headers-4.15.0-1032","binary_version":"4.15.0-1032.34"},{"binary_name":"linux-raspi2-tools-4.15.0-1032","binary_version":"4.15.0-1032.34"},{"binary_name":"linux-tools-4.15.0-1032-raspi2","binary_version":"4.15.0-1032.34"}]},"database_specific":{"cves_map":{"cves":[{"id":"CVE-2018-18397","severity":[{"score":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}]},{"id":"CVE-2018-19854","severity":[{"score":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}]},{"id":"CVE-2019-6133","severity":[{"score":"CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}]}],"ecosystem":"Ubuntu:18.04:LTS"},"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-3901-1.json"}}],"references":[{"type":"ADVISORY","url":"https://ubuntu.com/security/notices/USN-3901-1"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2018-18397"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2018-19854"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2019-6133"}]}