{ "document": { "aggregate_severity": { "text": "High" }, "category": "csaf_vex", "csaf_version": "2.0", "distribution": { "text": "TuxCare License Agreement", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Cloud Linux Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://tuxcare.com/contact/", "name": "TuxCare", "namespace": "https://tuxcare.com/" }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://security.tuxcare.com/csaf/v2/els_os/debian10els/vex/2024/cve-2024-27398-els_os-debian10els.json" } ], "tracking": { "current_release_date": "2026-08-25T12:53:46Z", "generator": { "date": "2026-08-25T12:53:46Z", "engine": { "name": "pyCSAF" } }, "id": "CVE-2024-27398-ELS_OS-DEBIAN10ELS", "initial_release_date": "2024-05-13T10:22:26Z", "revision_history": [ { "date": "2024-05-13T10:22:26Z", "number": "1", "summary": "Initial version" }, { "date": "2026-08-25T12:53:46Z", "number": "2", "summary": "Official Publication" } ], "status": "final", "version": "2" }, "title": "Security update on CVE-2024-27398" }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Debian 10", "product": { "name": "Debian 10", "product_id": "Debian-10", "product_identification_helper": { "cpe": "cpe:2.3:o:debian:debian_linux:10:*:*:*:*:*:*:*" } } } ], "category": "product_family", "name": "Debian" }, { "branches": [ { "category": "product_version", "name": "linux-headers-4.19.0-28-all-amd64-0:4.19.325-1.amd64", "product": { "name": "linux-headers-4.19.0-28-all-amd64-0:4.19.325-1.amd64", "product_id": "linux-headers-4.19.0-28-all-amd64-0:4.19.325-1.amd64", "product_identification_helper": { "purl": "pkg:deb/debian/linux-headers-4.19.0-28-all-amd64@4.19.325-1?arch=amd64" } } }, { "category": "product_version", "name": "linux-libc-dev-0:4.19.325-1.amd64", "product": { "name": "linux-libc-dev-0:4.19.325-1.amd64", "product_id": "linux-libc-dev-0:4.19.325-1.amd64", "product_identification_helper": { "purl": "pkg:deb/debian/linux-libc-dev@4.19.325-1?arch=amd64" } } }, { "category": "product_version", "name": "libcpupower1-0:4.19.325-1.amd64", "product": { "name": "libcpupower1-0:4.19.325-1.amd64", "product_id": "libcpupower1-0:4.19.325-1.amd64", "product_identification_helper": { "purl": "pkg:deb/debian/libcpupower1@4.19.325-1?arch=amd64" } } }, { "category": "product_version", "name": "libcpupower-dev-0:4.19.325-1.amd64", "product": { "name": "libcpupower-dev-0:4.19.325-1.amd64", "product_id": "libcpupower-dev-0:4.19.325-1.amd64", "product_identification_helper": { "purl": "pkg:deb/debian/libcpupower-dev@4.19.325-1?arch=amd64" } } }, { "category": "product_version", "name": "libbpf-dev-0:4.19.325-1.amd64", "product": { "name": "libbpf-dev-0:4.19.325-1.amd64", "product_id": "libbpf-dev-0:4.19.325-1.amd64", "product_identification_helper": { "purl": "pkg:deb/debian/libbpf-dev@4.19.325-1?arch=amd64" } } }, { "category": "product_version", "name": "linux-perf-4.19-0:4.19.325-1.amd64", "product": { "name": "linux-perf-4.19-0:4.19.325-1.amd64", "product_id": "linux-perf-4.19-0:4.19.325-1.amd64", "product_identification_helper": { "purl": "pkg:deb/debian/linux-perf-4.19@4.19.325-1?arch=amd64" } } }, { "category": "product_version", "name": "linux-config-4.19-0:4.19.325-1.amd64", "product": { "name": "linux-config-4.19-0:4.19.325-1.amd64", "product_id": "linux-config-4.19-0:4.19.325-1.amd64", "product_identification_helper": { "purl": "pkg:deb/debian/linux-config-4.19@4.19.325-1?arch=amd64" } } }, { "category": "product_version", "name": "linux-kbuild-4.19-0:4.19.325-1.amd64", "product": { "name": "linux-kbuild-4.19-0:4.19.325-1.amd64", "product_id": "linux-kbuild-4.19-0:4.19.325-1.amd64", "product_identification_helper": { "purl": "pkg:deb/debian/linux-kbuild-4.19@4.19.325-1?arch=amd64" } } }, { "category": "product_version", "name": "libbpf4.19-0:4.19.325-1.amd64", "product": { "name": "libbpf4.19-0:4.19.325-1.amd64", "product_id": "libbpf4.19-0:4.19.325-1.amd64", "product_identification_helper": { "purl": "pkg:deb/debian/libbpf4.19@4.19.325-1?arch=amd64" } } }, { "category": "product_version", "name": "linux-compiler-gcc-8-x86-0:4.19.325-1.amd64", "product": { "name": "linux-compiler-gcc-8-x86-0:4.19.325-1.amd64", "product_id": "linux-compiler-gcc-8-x86-0:4.19.325-1.amd64", "product_identification_helper": { "purl": "pkg:deb/debian/linux-compiler-gcc-8-x86@4.19.325-1?arch=amd64" } } }, { "category": "product_version", "name": "linux-headers-4.19.0-28-all-0:4.19.325-1.amd64", "product": { "name": "linux-headers-4.19.0-28-all-0:4.19.325-1.amd64", "product_id": "linux-headers-4.19.0-28-all-0:4.19.325-1.amd64", "product_identification_helper": { "purl": "pkg:deb/debian/linux-headers-4.19.0-28-all@4.19.325-1?arch=amd64" } } }, { "category": "product_version", "name": "linux-image-amd64-signed-template-0:4.19.325-1.amd64", "product": { "name": "linux-image-amd64-signed-template-0:4.19.325-1.amd64", "product_id": "linux-image-amd64-signed-template-0:4.19.325-1.amd64", "product_identification_helper": { "purl": "pkg:deb/debian/linux-image-amd64-signed-template@4.19.325-1?arch=amd64" } } }, { "category": "product_version", "name": "linux-cpupower-0:4.19.325-1.amd64", "product": { "name": "linux-cpupower-0:4.19.325-1.amd64", "product_id": "linux-cpupower-0:4.19.325-1.amd64", "product_identification_helper": { "purl": "pkg:deb/debian/linux-cpupower@4.19.325-1?arch=amd64" } } }, { "category": "product_version", "name": "linux-headers-4.19.0-28-amd64-0:4.19.325-1.amd64", "product": { "name": "linux-headers-4.19.0-28-amd64-0:4.19.325-1.amd64", "product_id": "linux-headers-4.19.0-28-amd64-0:4.19.325-1.amd64", "product_identification_helper": { "purl": "pkg:deb/debian/linux-headers-4.19.0-28-amd64@4.19.325-1?arch=amd64" } } }, { "category": "product_version", "name": "hyperv-daemons-0:4.19.325-1.amd64", "product": { "name": "hyperv-daemons-0:4.19.325-1.amd64", "product_id": "hyperv-daemons-0:4.19.325-1.amd64", "product_identification_helper": { "purl": "pkg:deb/debian/hyperv-daemons@4.19.325-1?arch=amd64" } } }, { "category": "product_version", "name": "linux-image-4.19.0-28-amd64-unsigned-0:4.19.325-1.amd64", "product": { "name": "linux-image-4.19.0-28-amd64-unsigned-0:4.19.325-1.amd64", "product_id": "linux-image-4.19.0-28-amd64-unsigned-0:4.19.325-1.amd64", "product_identification_helper": { "purl": "pkg:deb/debian/linux-image-4.19.0-28-amd64-unsigned@4.19.325-1?arch=amd64" } } } ], "category": "architecture", "name": "amd64" }, { "branches": [ { "category": "product_version", "name": "linux-doc-4.19-0:4.19.325-1.all", "product": { "name": "linux-doc-4.19-0:4.19.325-1.all", "product_id": "linux-doc-4.19-0:4.19.325-1.all", "product_identification_helper": { "purl": "pkg:deb/debian/linux-doc-4.19@4.19.325-1?arch=all" } } }, { "category": "product_version", "name": "linux-support-4.19.0-28-0:4.19.325-1.all", "product": { "name": "linux-support-4.19.0-28-0:4.19.325-1.all", "product_id": "linux-support-4.19.0-28-0:4.19.325-1.all", "product_identification_helper": { "purl": "pkg:deb/debian/linux-support-4.19.0-28@4.19.325-1?arch=all" } } }, { "category": "product_version", "name": "linux-source-4.19-0:4.19.325-1.all", "product": { "name": "linux-source-4.19-0:4.19.325-1.all", "product_id": "linux-source-4.19-0:4.19.325-1.all", "product_identification_helper": { "purl": "pkg:deb/debian/linux-source-4.19@4.19.325-1?arch=all" } } }, { "category": "product_version", "name": "linux-headers-4.19.0-28-common-0:4.19.325-1.all", "product": { "name": "linux-headers-4.19.0-28-common-0:4.19.325-1.all", "product_id": "linux-headers-4.19.0-28-common-0:4.19.325-1.all", "product_identification_helper": { "purl": "pkg:deb/debian/linux-headers-4.19.0-28-common@4.19.325-1?arch=all" } } } ], "category": "architecture", "name": "all" } ], "category": "vendor", "name": "Software in the Public Interest, Inc." }, { "branches": [ { "branches": [ { "category": "product_version", "name": "linux-headers-4.19.0-28-all-amd64-0:4.19.325-1+tuxcare.els1.amd64", "product": { "name": "linux-headers-4.19.0-28-all-amd64-0:4.19.325-1+tuxcare.els1.amd64", "product_id": "linux-headers-4.19.0-28-all-amd64-0:4.19.325-1+tuxcare.els1.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/linux-headers-4.19.0-28-all-amd64@4.19.325-1%2Btuxcare.els1?arch=amd64" } } }, { "category": "product_version", "name": "linux-libc-dev-0:4.19.325-1+tuxcare.els1.amd64", "product": { "name": "linux-libc-dev-0:4.19.325-1+tuxcare.els1.amd64", "product_id": "linux-libc-dev-0:4.19.325-1+tuxcare.els1.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/linux-libc-dev@4.19.325-1%2Btuxcare.els1?arch=amd64" } } }, { "category": "product_version", "name": "libcpupower1-0:4.19.325-1+tuxcare.els1.amd64", "product": { "name": "libcpupower1-0:4.19.325-1+tuxcare.els1.amd64", "product_id": "libcpupower1-0:4.19.325-1+tuxcare.els1.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libcpupower1@4.19.325-1%2Btuxcare.els1?arch=amd64" } } }, { "category": "product_version", "name": "libcpupower-dev-0:4.19.325-1+tuxcare.els1.amd64", "product": { "name": "libcpupower-dev-0:4.19.325-1+tuxcare.els1.amd64", "product_id": "libcpupower-dev-0:4.19.325-1+tuxcare.els1.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libcpupower-dev@4.19.325-1%2Btuxcare.els1?arch=amd64" } } }, { "category": "product_version", "name": "libbpf-dev-0:4.19.325-1+tuxcare.els1.amd64", "product": { "name": "libbpf-dev-0:4.19.325-1+tuxcare.els1.amd64", "product_id": "libbpf-dev-0:4.19.325-1+tuxcare.els1.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libbpf-dev@4.19.325-1%2Btuxcare.els1?arch=amd64" } } }, { "category": "product_version", "name": "linux-perf-4.19-0:4.19.325-1+tuxcare.els1.amd64", "product": { "name": "linux-perf-4.19-0:4.19.325-1+tuxcare.els1.amd64", "product_id": "linux-perf-4.19-0:4.19.325-1+tuxcare.els1.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/linux-perf-4.19@4.19.325-1%2Btuxcare.els1?arch=amd64" } } }, { "category": "product_version", "name": "linux-config-4.19-0:4.19.325-1+tuxcare.els1.amd64", "product": { "name": "linux-config-4.19-0:4.19.325-1+tuxcare.els1.amd64", "product_id": "linux-config-4.19-0:4.19.325-1+tuxcare.els1.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/linux-config-4.19@4.19.325-1%2Btuxcare.els1?arch=amd64" } } }, { "category": "product_version", "name": "linux-kbuild-4.19-0:4.19.325-1+tuxcare.els1.amd64", "product": { "name": "linux-kbuild-4.19-0:4.19.325-1+tuxcare.els1.amd64", "product_id": "linux-kbuild-4.19-0:4.19.325-1+tuxcare.els1.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/linux-kbuild-4.19@4.19.325-1%2Btuxcare.els1?arch=amd64" } } }, { "category": "product_version", "name": "libbpf4.19-0:4.19.325-1+tuxcare.els1.amd64", "product": { "name": "libbpf4.19-0:4.19.325-1+tuxcare.els1.amd64", "product_id": "libbpf4.19-0:4.19.325-1+tuxcare.els1.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libbpf4.19@4.19.325-1%2Btuxcare.els1?arch=amd64" } } }, { "category": "product_version", "name": "linux-compiler-gcc-8-x86-0:4.19.325-1+tuxcare.els1.amd64", "product": { "name": "linux-compiler-gcc-8-x86-0:4.19.325-1+tuxcare.els1.amd64", "product_id": "linux-compiler-gcc-8-x86-0:4.19.325-1+tuxcare.els1.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/linux-compiler-gcc-8-x86@4.19.325-1%2Btuxcare.els1?arch=amd64" } } }, { "category": "product_version", "name": "linux-headers-4.19.0-28-all-0:4.19.325-1+tuxcare.els1.amd64", "product": { "name": "linux-headers-4.19.0-28-all-0:4.19.325-1+tuxcare.els1.amd64", "product_id": "linux-headers-4.19.0-28-all-0:4.19.325-1+tuxcare.els1.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/linux-headers-4.19.0-28-all@4.19.325-1%2Btuxcare.els1?arch=amd64" } } }, { "category": "product_version", "name": "linux-image-amd64-signed-template-0:4.19.325-1+tuxcare.els1.amd64", "product": { "name": "linux-image-amd64-signed-template-0:4.19.325-1+tuxcare.els1.amd64", "product_id": "linux-image-amd64-signed-template-0:4.19.325-1+tuxcare.els1.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/linux-image-amd64-signed-template@4.19.325-1%2Btuxcare.els1?arch=amd64" } } }, { "category": "product_version", "name": "linux-cpupower-0:4.19.325-1+tuxcare.els1.amd64", "product": { "name": "linux-cpupower-0:4.19.325-1+tuxcare.els1.amd64", "product_id": "linux-cpupower-0:4.19.325-1+tuxcare.els1.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/linux-cpupower@4.19.325-1%2Btuxcare.els1?arch=amd64" } } }, { "category": "product_version", "name": "linux-headers-4.19.0-28-amd64-0:4.19.325-1+tuxcare.els1.amd64", "product": { "name": "linux-headers-4.19.0-28-amd64-0:4.19.325-1+tuxcare.els1.amd64", "product_id": "linux-headers-4.19.0-28-amd64-0:4.19.325-1+tuxcare.els1.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/linux-headers-4.19.0-28-amd64@4.19.325-1%2Btuxcare.els1?arch=amd64" } } }, { "category": "product_version", "name": "hyperv-daemons-0:4.19.325-1+tuxcare.els1.amd64", "product": { "name": "hyperv-daemons-0:4.19.325-1+tuxcare.els1.amd64", "product_id": "hyperv-daemons-0:4.19.325-1+tuxcare.els1.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/hyperv-daemons@4.19.325-1%2Btuxcare.els1?arch=amd64" } } }, { "category": "product_version", "name": "linux-image-4.19.0-28-amd64-unsigned-0:4.19.325-1+tuxcare.els1.amd64", "product": { "name": "linux-image-4.19.0-28-amd64-unsigned-0:4.19.325-1+tuxcare.els1.amd64", "product_id": "linux-image-4.19.0-28-amd64-unsigned-0:4.19.325-1+tuxcare.els1.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/linux-image-4.19.0-28-amd64-unsigned@4.19.325-1%2Btuxcare.els1?arch=amd64" } } } ], "category": "architecture", "name": "amd64" }, { "branches": [ { "category": "product_version", "name": "linux-doc-4.19-0:4.19.325-1+tuxcare.els1.all", "product": { "name": "linux-doc-4.19-0:4.19.325-1+tuxcare.els1.all", "product_id": "linux-doc-4.19-0:4.19.325-1+tuxcare.els1.all", "product_identification_helper": { "purl": "pkg:deb/tuxcare/linux-doc-4.19@4.19.325-1%2Btuxcare.els1?arch=all" } } }, { "category": "product_version", "name": "linux-support-4.19.0-28-0:4.19.325-1+tuxcare.els1.all", "product": { "name": "linux-support-4.19.0-28-0:4.19.325-1+tuxcare.els1.all", "product_id": "linux-support-4.19.0-28-0:4.19.325-1+tuxcare.els1.all", "product_identification_helper": { "purl": "pkg:deb/tuxcare/linux-support-4.19.0-28@4.19.325-1%2Btuxcare.els1?arch=all" } } }, { "category": "product_version", "name": "linux-source-4.19-0:4.19.325-1+tuxcare.els1.all", "product": { "name": "linux-source-4.19-0:4.19.325-1+tuxcare.els1.all", "product_id": "linux-source-4.19-0:4.19.325-1+tuxcare.els1.all", "product_identification_helper": { "purl": "pkg:deb/tuxcare/linux-source-4.19@4.19.325-1%2Btuxcare.els1?arch=all" } } }, { "category": "product_version", "name": "linux-headers-4.19.0-28-common-0:4.19.325-1+tuxcare.els1.all", "product": { "name": "linux-headers-4.19.0-28-common-0:4.19.325-1+tuxcare.els1.all", "product_id": "linux-headers-4.19.0-28-common-0:4.19.325-1+tuxcare.els1.all", "product_identification_helper": { "purl": "pkg:deb/tuxcare/linux-headers-4.19.0-28-common@4.19.325-1%2Btuxcare.els1?arch=all" } } } ], "category": "architecture", "name": "all" } ], "category": "vendor", "name": "TuxCare" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "linux-headers-4.19.0-28-all-amd64-0:4.19.325-1+tuxcare.els1.amd64 as a component of Debian 10", "product_id": "Debian-10:linux-headers-4.19.0-28-all-amd64-0:4.19.325-1+tuxcare.els1.amd64" }, "product_reference": "linux-headers-4.19.0-28-all-amd64-0:4.19.325-1+tuxcare.els1.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "linux-libc-dev-0:4.19.325-1+tuxcare.els1.amd64 as a component of Debian 10", "product_id": "Debian-10:linux-libc-dev-0:4.19.325-1+tuxcare.els1.amd64" }, "product_reference": "linux-libc-dev-0:4.19.325-1+tuxcare.els1.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "libcpupower1-0:4.19.325-1+tuxcare.els1.amd64 as a component of Debian 10", "product_id": "Debian-10:libcpupower1-0:4.19.325-1+tuxcare.els1.amd64" }, "product_reference": "libcpupower1-0:4.19.325-1+tuxcare.els1.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "linux-doc-4.19-0:4.19.325-1+tuxcare.els1.all as a component of Debian 10", "product_id": "Debian-10:linux-doc-4.19-0:4.19.325-1+tuxcare.els1.all" }, "product_reference": "linux-doc-4.19-0:4.19.325-1+tuxcare.els1.all", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "libcpupower-dev-0:4.19.325-1+tuxcare.els1.amd64 as a component of Debian 10", "product_id": "Debian-10:libcpupower-dev-0:4.19.325-1+tuxcare.els1.amd64" }, "product_reference": "libcpupower-dev-0:4.19.325-1+tuxcare.els1.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "libbpf-dev-0:4.19.325-1+tuxcare.els1.amd64 as a component of Debian 10", "product_id": "Debian-10:libbpf-dev-0:4.19.325-1+tuxcare.els1.amd64" }, "product_reference": "libbpf-dev-0:4.19.325-1+tuxcare.els1.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "linux-perf-4.19-0:4.19.325-1+tuxcare.els1.amd64 as a component of Debian 10", "product_id": "Debian-10:linux-perf-4.19-0:4.19.325-1+tuxcare.els1.amd64" }, "product_reference": "linux-perf-4.19-0:4.19.325-1+tuxcare.els1.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "linux-config-4.19-0:4.19.325-1+tuxcare.els1.amd64 as a component of Debian 10", "product_id": "Debian-10:linux-config-4.19-0:4.19.325-1+tuxcare.els1.amd64" }, "product_reference": "linux-config-4.19-0:4.19.325-1+tuxcare.els1.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "linux-kbuild-4.19-0:4.19.325-1+tuxcare.els1.amd64 as a component of Debian 10", "product_id": "Debian-10:linux-kbuild-4.19-0:4.19.325-1+tuxcare.els1.amd64" }, "product_reference": "linux-kbuild-4.19-0:4.19.325-1+tuxcare.els1.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "libbpf4.19-0:4.19.325-1+tuxcare.els1.amd64 as a component of Debian 10", "product_id": "Debian-10:libbpf4.19-0:4.19.325-1+tuxcare.els1.amd64" }, "product_reference": "libbpf4.19-0:4.19.325-1+tuxcare.els1.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "linux-support-4.19.0-28-0:4.19.325-1+tuxcare.els1.all as a component of Debian 10", "product_id": "Debian-10:linux-support-4.19.0-28-0:4.19.325-1+tuxcare.els1.all" }, "product_reference": "linux-support-4.19.0-28-0:4.19.325-1+tuxcare.els1.all", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "linux-source-4.19-0:4.19.325-1+tuxcare.els1.all as a component of Debian 10", "product_id": "Debian-10:linux-source-4.19-0:4.19.325-1+tuxcare.els1.all" }, "product_reference": "linux-source-4.19-0:4.19.325-1+tuxcare.els1.all", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "linux-compiler-gcc-8-x86-0:4.19.325-1+tuxcare.els1.amd64 as a component of Debian 10", "product_id": "Debian-10:linux-compiler-gcc-8-x86-0:4.19.325-1+tuxcare.els1.amd64" }, "product_reference": "linux-compiler-gcc-8-x86-0:4.19.325-1+tuxcare.els1.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "linux-headers-4.19.0-28-all-0:4.19.325-1+tuxcare.els1.amd64 as a component of Debian 10", "product_id": "Debian-10:linux-headers-4.19.0-28-all-0:4.19.325-1+tuxcare.els1.amd64" }, "product_reference": "linux-headers-4.19.0-28-all-0:4.19.325-1+tuxcare.els1.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "linux-image-amd64-signed-template-0:4.19.325-1+tuxcare.els1.amd64 as a component of Debian 10", "product_id": "Debian-10:linux-image-amd64-signed-template-0:4.19.325-1+tuxcare.els1.amd64" }, "product_reference": "linux-image-amd64-signed-template-0:4.19.325-1+tuxcare.els1.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "linux-headers-4.19.0-28-common-0:4.19.325-1+tuxcare.els1.all as a component of Debian 10", "product_id": "Debian-10:linux-headers-4.19.0-28-common-0:4.19.325-1+tuxcare.els1.all" }, "product_reference": "linux-headers-4.19.0-28-common-0:4.19.325-1+tuxcare.els1.all", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "linux-cpupower-0:4.19.325-1+tuxcare.els1.amd64 as a component of Debian 10", "product_id": "Debian-10:linux-cpupower-0:4.19.325-1+tuxcare.els1.amd64" }, "product_reference": "linux-cpupower-0:4.19.325-1+tuxcare.els1.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "linux-headers-4.19.0-28-amd64-0:4.19.325-1+tuxcare.els1.amd64 as a component of Debian 10", "product_id": "Debian-10:linux-headers-4.19.0-28-amd64-0:4.19.325-1+tuxcare.els1.amd64" }, "product_reference": "linux-headers-4.19.0-28-amd64-0:4.19.325-1+tuxcare.els1.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "hyperv-daemons-0:4.19.325-1+tuxcare.els1.amd64 as a component of Debian 10", "product_id": "Debian-10:hyperv-daemons-0:4.19.325-1+tuxcare.els1.amd64" }, "product_reference": "hyperv-daemons-0:4.19.325-1+tuxcare.els1.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "linux-image-4.19.0-28-amd64-unsigned-0:4.19.325-1+tuxcare.els1.amd64 as a component of Debian 10", "product_id": "Debian-10:linux-image-4.19.0-28-amd64-unsigned-0:4.19.325-1+tuxcare.els1.amd64" }, "product_reference": "linux-image-4.19.0-28-amd64-unsigned-0:4.19.325-1+tuxcare.els1.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "linux-headers-4.19.0-28-all-amd64-0:4.19.325-1.amd64 as a component of Debian 10", "product_id": "Debian-10:linux-headers-4.19.0-28-all-amd64-0:4.19.325-1.amd64" }, "product_reference": "linux-headers-4.19.0-28-all-amd64-0:4.19.325-1.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "linux-libc-dev-0:4.19.325-1.amd64 as a component of Debian 10", "product_id": "Debian-10:linux-libc-dev-0:4.19.325-1.amd64" }, "product_reference": "linux-libc-dev-0:4.19.325-1.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "libcpupower1-0:4.19.325-1.amd64 as a component of Debian 10", "product_id": "Debian-10:libcpupower1-0:4.19.325-1.amd64" }, "product_reference": "libcpupower1-0:4.19.325-1.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "linux-doc-4.19-0:4.19.325-1.all as a component of Debian 10", "product_id": "Debian-10:linux-doc-4.19-0:4.19.325-1.all" }, "product_reference": "linux-doc-4.19-0:4.19.325-1.all", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "libcpupower-dev-0:4.19.325-1.amd64 as a component of Debian 10", "product_id": "Debian-10:libcpupower-dev-0:4.19.325-1.amd64" }, "product_reference": "libcpupower-dev-0:4.19.325-1.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "libbpf-dev-0:4.19.325-1.amd64 as a component of Debian 10", "product_id": "Debian-10:libbpf-dev-0:4.19.325-1.amd64" }, "product_reference": "libbpf-dev-0:4.19.325-1.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "linux-perf-4.19-0:4.19.325-1.amd64 as a component of Debian 10", "product_id": "Debian-10:linux-perf-4.19-0:4.19.325-1.amd64" }, "product_reference": "linux-perf-4.19-0:4.19.325-1.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "linux-config-4.19-0:4.19.325-1.amd64 as a component of Debian 10", "product_id": "Debian-10:linux-config-4.19-0:4.19.325-1.amd64" }, "product_reference": "linux-config-4.19-0:4.19.325-1.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "linux-kbuild-4.19-0:4.19.325-1.amd64 as a component of Debian 10", "product_id": "Debian-10:linux-kbuild-4.19-0:4.19.325-1.amd64" }, "product_reference": "linux-kbuild-4.19-0:4.19.325-1.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "libbpf4.19-0:4.19.325-1.amd64 as a component of Debian 10", "product_id": "Debian-10:libbpf4.19-0:4.19.325-1.amd64" }, "product_reference": "libbpf4.19-0:4.19.325-1.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "linux-support-4.19.0-28-0:4.19.325-1.all as a component of Debian 10", "product_id": "Debian-10:linux-support-4.19.0-28-0:4.19.325-1.all" }, "product_reference": "linux-support-4.19.0-28-0:4.19.325-1.all", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "linux-source-4.19-0:4.19.325-1.all as a component of Debian 10", "product_id": "Debian-10:linux-source-4.19-0:4.19.325-1.all" }, "product_reference": "linux-source-4.19-0:4.19.325-1.all", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "linux-compiler-gcc-8-x86-0:4.19.325-1.amd64 as a component of Debian 10", "product_id": "Debian-10:linux-compiler-gcc-8-x86-0:4.19.325-1.amd64" }, "product_reference": "linux-compiler-gcc-8-x86-0:4.19.325-1.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "linux-headers-4.19.0-28-all-0:4.19.325-1.amd64 as a component of Debian 10", "product_id": "Debian-10:linux-headers-4.19.0-28-all-0:4.19.325-1.amd64" }, "product_reference": "linux-headers-4.19.0-28-all-0:4.19.325-1.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "linux-image-amd64-signed-template-0:4.19.325-1.amd64 as a component of Debian 10", "product_id": "Debian-10:linux-image-amd64-signed-template-0:4.19.325-1.amd64" }, "product_reference": "linux-image-amd64-signed-template-0:4.19.325-1.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "linux-headers-4.19.0-28-common-0:4.19.325-1.all as a component of Debian 10", "product_id": "Debian-10:linux-headers-4.19.0-28-common-0:4.19.325-1.all" }, "product_reference": "linux-headers-4.19.0-28-common-0:4.19.325-1.all", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "linux-cpupower-0:4.19.325-1.amd64 as a component of Debian 10", "product_id": "Debian-10:linux-cpupower-0:4.19.325-1.amd64" }, "product_reference": "linux-cpupower-0:4.19.325-1.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "linux-headers-4.19.0-28-amd64-0:4.19.325-1.amd64 as a component of Debian 10", "product_id": "Debian-10:linux-headers-4.19.0-28-amd64-0:4.19.325-1.amd64" }, "product_reference": "linux-headers-4.19.0-28-amd64-0:4.19.325-1.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "hyperv-daemons-0:4.19.325-1.amd64 as a component of Debian 10", "product_id": "Debian-10:hyperv-daemons-0:4.19.325-1.amd64" }, "product_reference": "hyperv-daemons-0:4.19.325-1.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "linux-image-4.19.0-28-amd64-unsigned-0:4.19.325-1.amd64 as a component of Debian 10", "product_id": "Debian-10:linux-image-4.19.0-28-amd64-unsigned-0:4.19.325-1.amd64" }, "product_reference": "linux-image-4.19.0-28-amd64-unsigned-0:4.19.325-1.amd64", "relates_to_product_reference": "Debian-10" } ] }, "vulnerabilities": [ { "cve": "CVE-2024-27398", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: Fix use-after-free bugs caused by sco_sock_timeout\n\nWhen the sco connection is established and then, the sco socket\nis releasing, timeout_work will be scheduled to judge whether\nthe sco disconnection is timeout. The sock will be deallocated\nlater, but it is dereferenced again in sco_sock_timeout. As a\nresult, the use-after-free bugs will happen. The root cause is\nshown below:\n\n Cleanup Thread | Worker Thread\nsco_sock_release |\n sco_sock_close |\n __sco_sock_close |\n sco_sock_set_timer |\n schedule_delayed_work |\n sco_sock_kill | (wait a time)\n sock_put(sk) //FREE | sco_sock_timeout\n | sock_hold(sk) //USE\n\nThe KASAN report triggered by POC is shown below:\n\n[ 95.890016] ==================================================================\n[ 95.890496] BUG: KASAN: slab-use-after-free in sco_sock_timeout+0x5e/0x1c0\n[ 95.890755] Write of size 4 at addr ffff88800c388080 by task kworker/0:0/7\n...\n[ 95.890755] Workqueue: events sco_sock_timeout\n[ 95.890755] Call Trace:\n[ 95.890755] \n[ 95.890755] dump_stack_lvl+0x45/0x110\n[ 95.890755] print_address_description+0x78/0x390\n[ 95.890755] print_report+0x11b/0x250\n[ 95.890755] ? __virt_addr_valid+0xbe/0xf0\n[ 95.890755] ? sco_sock_timeout+0x5e/0x1c0\n[ 95.890755] kasan_report+0x139/0x170\n[ 95.890755] ? update_load_avg+0xe5/0x9f0\n[ 95.890755] ? sco_sock_timeout+0x5e/0x1c0\n[ 95.890755] kasan_check_range+0x2c3/0x2e0\n[ 95.890755] sco_sock_timeout+0x5e/0x1c0\n[ 95.890755] process_one_work+0x561/0xc50\n[ 95.890755] worker_thread+0xab2/0x13c0\n[ 95.890755] ? pr_cont_work+0x490/0x490\n[ 95.890755] kthread+0x279/0x300\n[ 95.890755] ? pr_cont_work+0x490/0x490\n[ 95.890755] ? kthread_blkcg+0xa0/0xa0\n[ 95.890755] ret_from_fork+0x34/0x60\n[ 95.890755] ? kthread_blkcg+0xa0/0xa0\n[ 95.890755] ret_from_fork_asm+0x11/0x20\n[ 95.890755] \n[ 95.890755]\n[ 95.890755] Allocated by task 506:\n[ 95.890755] kasan_save_track+0x3f/0x70\n[ 95.890755] __kasan_kmalloc+0x86/0x90\n[ 95.890755] __kmalloc+0x17f/0x360\n[ 95.890755] sk_prot_alloc+0xe1/0x1a0\n[ 95.890755] sk_alloc+0x31/0x4e0\n[ 95.890755] bt_sock_alloc+0x2b/0x2a0\n[ 95.890755] sco_sock_create+0xad/0x320\n[ 95.890755] bt_sock_create+0x145/0x320\n[ 95.890755] __sock_create+0x2e1/0x650\n[ 95.890755] __sys_socket+0xd0/0x280\n[ 95.890755] __x64_sys_socket+0x75/0x80\n[ 95.890755] do_syscall_64+0xc4/0x1b0\n[ 95.890755] entry_SYSCALL_64_after_hwframe+0x67/0x6f\n[ 95.890755]\n[ 95.890755] Freed by task 506:\n[ 95.890755] kasan_save_track+0x3f/0x70\n[ 95.890755] kasan_save_free_info+0x40/0x50\n[ 95.890755] poison_slab_object+0x118/0x180\n[ 95.890755] __kasan_slab_free+0x12/0x30\n[ 95.890755] kfree+0xb2/0x240\n[ 95.890755] __sk_destruct+0x317/0x410\n[ 95.890755] sco_sock_release+0x232/0x280\n[ 95.890755] sock_close+0xb2/0x210\n[ 95.890755] __fput+0x37f/0x770\n[ 95.890755] task_work_run+0x1ae/0x210\n[ 95.890755] get_signal+0xe17/0xf70\n[ 95.890755] arch_do_signal_or_restart+0x3f/0x520\n[ 95.890755] syscall_exit_to_user_mode+0x55/0x120\n[ 95.890755] do_syscall_64+0xd1/0x1b0\n[ 95.890755] entry_SYSCALL_64_after_hwframe+0x67/0x6f\n[ 95.890755]\n[ 95.890755] The buggy address belongs to the object at ffff88800c388000\n[ 95.890755] which belongs to the cache kmalloc-1k of size 1024\n[ 95.890755] The buggy address is located 128 bytes inside of\n[ 95.890755] freed 1024-byte region [ffff88800c388000, ffff88800c388400)\n[ 95.890755]\n[ 95.890755] The buggy address belongs to the physical page:\n[ 95.890755] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88800c38a800 pfn:0xc388\n[ 95.890755] head: order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0\n[ 95.890755] ano\n---truncated---", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Debian-10:hyperv-daemons-0:4.19.325-1+tuxcare.els1.amd64", "Debian-10:libbpf-dev-0:4.19.325-1+tuxcare.els1.amd64", "Debian-10:libbpf4.19-0:4.19.325-1+tuxcare.els1.amd64", "Debian-10:libcpupower-dev-0:4.19.325-1+tuxcare.els1.amd64", "Debian-10:libcpupower1-0:4.19.325-1+tuxcare.els1.amd64", "Debian-10:linux-compiler-gcc-8-x86-0:4.19.325-1+tuxcare.els1.amd64", "Debian-10:linux-config-4.19-0:4.19.325-1+tuxcare.els1.amd64", "Debian-10:linux-cpupower-0:4.19.325-1+tuxcare.els1.amd64", "Debian-10:linux-doc-4.19-0:4.19.325-1+tuxcare.els1.all", "Debian-10:linux-headers-4.19.0-28-all-0:4.19.325-1+tuxcare.els1.amd64", "Debian-10:linux-headers-4.19.0-28-all-amd64-0:4.19.325-1+tuxcare.els1.amd64", "Debian-10:linux-headers-4.19.0-28-amd64-0:4.19.325-1+tuxcare.els1.amd64", "Debian-10:linux-headers-4.19.0-28-common-0:4.19.325-1+tuxcare.els1.all", "Debian-10:linux-image-4.19.0-28-amd64-unsigned-0:4.19.325-1+tuxcare.els1.amd64", "Debian-10:linux-image-amd64-signed-template-0:4.19.325-1+tuxcare.els1.amd64", "Debian-10:linux-kbuild-4.19-0:4.19.325-1+tuxcare.els1.amd64", "Debian-10:linux-libc-dev-0:4.19.325-1+tuxcare.els1.amd64", "Debian-10:linux-perf-4.19-0:4.19.325-1+tuxcare.els1.amd64", "Debian-10:linux-source-4.19-0:4.19.325-1+tuxcare.els1.all", "Debian-10:linux-support-4.19.0-28-0:4.19.325-1+tuxcare.els1.all" ], "known_affected": [ "Debian-10:hyperv-daemons-0:4.19.325-1.amd64", "Debian-10:libbpf-dev-0:4.19.325-1.amd64", "Debian-10:libbpf4.19-0:4.19.325-1.amd64", "Debian-10:libcpupower-dev-0:4.19.325-1.amd64", "Debian-10:libcpupower1-0:4.19.325-1.amd64", "Debian-10:linux-compiler-gcc-8-x86-0:4.19.325-1.amd64", "Debian-10:linux-config-4.19-0:4.19.325-1.amd64", "Debian-10:linux-cpupower-0:4.19.325-1.amd64", "Debian-10:linux-doc-4.19-0:4.19.325-1.all", "Debian-10:linux-headers-4.19.0-28-all-0:4.19.325-1.amd64", "Debian-10:linux-headers-4.19.0-28-all-amd64-0:4.19.325-1.amd64", "Debian-10:linux-headers-4.19.0-28-amd64-0:4.19.325-1.amd64", "Debian-10:linux-headers-4.19.0-28-common-0:4.19.325-1.all", "Debian-10:linux-image-4.19.0-28-amd64-unsigned-0:4.19.325-1.amd64", "Debian-10:linux-image-amd64-signed-template-0:4.19.325-1.amd64", "Debian-10:linux-kbuild-4.19-0:4.19.325-1.amd64", "Debian-10:linux-libc-dev-0:4.19.325-1.amd64", "Debian-10:linux-perf-4.19-0:4.19.325-1.amd64", "Debian-10:linux-source-4.19-0:4.19.325-1.all", "Debian-10:linux-support-4.19.0-28-0:4.19.325-1.all" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2024-27398" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/012363cb1bec5f33a7b94629ab2c1086f30280f2", "url": "https://git.kernel.org/stable/c/012363cb1bec5f33a7b94629ab2c1086f30280f2" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/1b33d55fb7355e27f8c82cd4ecd560f162469249", "url": "https://git.kernel.org/stable/c/1b33d55fb7355e27f8c82cd4ecd560f162469249" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/3212afd00e3cda790fd0583cb3eaef8f9575a014", "url": "https://git.kernel.org/stable/c/3212afd00e3cda790fd0583cb3eaef8f9575a014" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/33a6e92161a78c1073d90e27abe28d746feb0a53", "url": "https://git.kernel.org/stable/c/33a6e92161a78c1073d90e27abe28d746feb0a53" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/483bc08181827fc475643272ffb69c533007e546", "url": "https://git.kernel.org/stable/c/483bc08181827fc475643272ffb69c533007e546" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/50c2037fc28df870ef29d9728c770c8955d32178", "url": "https://git.kernel.org/stable/c/50c2037fc28df870ef29d9728c770c8955d32178" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/6a18eeb1b3bbc67c20d9609c31dca6a69b4bcde5", "url": "https://git.kernel.org/stable/c/6a18eeb1b3bbc67c20d9609c31dca6a69b4bcde5" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/bfab2c1f7940a232cd519e82fff137e308abfd93", "url": "https://git.kernel.org/stable/c/bfab2c1f7940a232cd519e82fff137e308abfd93" }, { "category": "external", "summary": "http://www.openwall.com/lists/oss-security/2024/11/29/1", "url": "http://www.openwall.com/lists/oss-security/2024/11/29/1" }, { "category": "external", "summary": "http://www.openwall.com/lists/oss-security/2024/11/30/1", "url": "http://www.openwall.com/lists/oss-security/2024/11/30/1" }, { "category": "external", "summary": "http://www.openwall.com/lists/oss-security/2024/11/30/2", "url": "http://www.openwall.com/lists/oss-security/2024/11/30/2" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2024/06/msg00019.html", "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00019.html" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html", "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DW2MIOIMOFUSNLHLRYX23AFR36BMKD65/", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DW2MIOIMOFUSNLHLRYX23AFR36BMKD65/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OTB4HWU2PTVW5NEYHHLOCXDKG3PYA534/", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OTB4HWU2PTVW5NEYHHLOCXDKG3PYA534/" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20240912-0012/", "url": "https://security.netapp.com/advisory/ntap-20240912-0012/" } ], "release_date": "2024-05-13T10:22:26Z", "remediations": [ { "category": "none_available", "date": "2026-08-06T12:28:17.875748Z", "details": "Affected", "product_ids": [ "Debian-10:hyperv-daemons-0:4.19.325-1.amd64", "Debian-10:libbpf-dev-0:4.19.325-1.amd64", "Debian-10:libbpf4.19-0:4.19.325-1.amd64", "Debian-10:libcpupower-dev-0:4.19.325-1.amd64", "Debian-10:libcpupower1-0:4.19.325-1.amd64", "Debian-10:linux-compiler-gcc-8-x86-0:4.19.325-1.amd64", "Debian-10:linux-config-4.19-0:4.19.325-1.amd64", "Debian-10:linux-cpupower-0:4.19.325-1.amd64", "Debian-10:linux-doc-4.19-0:4.19.325-1.all", "Debian-10:linux-headers-4.19.0-28-all-0:4.19.325-1.amd64", "Debian-10:linux-headers-4.19.0-28-all-amd64-0:4.19.325-1.amd64", "Debian-10:linux-headers-4.19.0-28-amd64-0:4.19.325-1.amd64", "Debian-10:linux-headers-4.19.0-28-common-0:4.19.325-1.all", "Debian-10:linux-image-4.19.0-28-amd64-unsigned-0:4.19.325-1.amd64", "Debian-10:linux-image-amd64-signed-template-0:4.19.325-1.amd64", "Debian-10:linux-kbuild-4.19-0:4.19.325-1.amd64", "Debian-10:linux-libc-dev-0:4.19.325-1.amd64", "Debian-10:linux-perf-4.19-0:4.19.325-1.amd64", "Debian-10:linux-source-4.19-0:4.19.325-1.all", "Debian-10:linux-support-4.19.0-28-0:4.19.325-1.all" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "Debian-10:hyperv-daemons-0:4.19.325-1.amd64", "Debian-10:libbpf-dev-0:4.19.325-1.amd64", "Debian-10:libbpf4.19-0:4.19.325-1.amd64", "Debian-10:libcpupower-dev-0:4.19.325-1.amd64", "Debian-10:libcpupower1-0:4.19.325-1.amd64", "Debian-10:linux-compiler-gcc-8-x86-0:4.19.325-1.amd64", "Debian-10:linux-config-4.19-0:4.19.325-1.amd64", "Debian-10:linux-cpupower-0:4.19.325-1.amd64", "Debian-10:linux-doc-4.19-0:4.19.325-1.all", "Debian-10:linux-headers-4.19.0-28-all-0:4.19.325-1.amd64", "Debian-10:linux-headers-4.19.0-28-all-amd64-0:4.19.325-1.amd64", "Debian-10:linux-headers-4.19.0-28-amd64-0:4.19.325-1.amd64", "Debian-10:linux-headers-4.19.0-28-common-0:4.19.325-1.all", "Debian-10:linux-image-4.19.0-28-amd64-unsigned-0:4.19.325-1.amd64", "Debian-10:linux-image-amd64-signed-template-0:4.19.325-1.amd64", "Debian-10:linux-kbuild-4.19-0:4.19.325-1.amd64", "Debian-10:linux-libc-dev-0:4.19.325-1.amd64", "Debian-10:linux-perf-4.19-0:4.19.325-1.amd64", "Debian-10:linux-source-4.19-0:4.19.325-1.all", "Debian-10:linux-support-4.19.0-28-0:4.19.325-1.all" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] } ] }