CVEs related to bugs in cloud-images

Open bugs

Bug	CVE(s)
Bug #1918427: curtin: install flash-kernel in arm64 UEFI unexpected	CVE-2020-27170 CVE-2020-27171
cloud-images	Confirmed (unassigned)
Bug #1946672: Enable multicast in the "kvm" kernels	CVE-2020-26541 CVE-2021-4002
cloud-images	New (unassigned)
Bug #2036604: Synchronous Exception when booting VMs via qemu-efi-aarch64	CVE-2023-40546 CVE-2023-40547 CVE-2023-40548 CVE-2023-40549 CVE-2023-40550 CVE-2023-40551
cloud-images	New (unassigned)
Bug #2051918: Ubuntu CVE-2024-21626 runc vulnerability	CVE-2024-21626
cloud-images	In progress (unassigned)

Resolved bugs

Bug	CVE(s)
Bug #1582380: Ubuntu CVE: CVE-2016-0758 & CVE-2016-3713 - Kernel vulnerabilities	CVE-2016-0758 CVE-2016-3713
cloud-images	Fix released, assigned to Robert C Jennings
Bug #1635223: please include mlx5_core modules in linux-image-generic package	CVE-2016-7425 CVE-2016-8658
cloud-images	Fix released (unassigned)
Bug #1683878: blkfront: add uevent for size change	CVE-2017-6353
cloud-images	Fix released (unassigned)
Bug #1726818: vagrant artful64 box filesystem too small	CVE-2017-0861 CVE-2017-1000407 CVE-2017-15129 CVE-2017-16994 CVE-2017-17448 CVE-2017-17450 CVE-2017-17741 CVE-2017-17805 CVE-2017-17806 CVE-2017-17807 CVE-2018-1000026 CVE-2018-5332 CVE-2018-5333 CVE-2018-5344
cloud-images	Fix released (unassigned)
Bug #1744754: qemu-efi-aarch64 in >= artful can't boot xenial cloud images	CVE-2017-15129 CVE-2017-16995 CVE-2017-17448 CVE-2017-17450 CVE-2017-17741 CVE-2017-17862 CVE-2017-5753 CVE-2018-1000026 CVE-2018-5333 CVE-2018-5344 CVE-2018-8043
cloud-images	Invalid (unassigned)
Bug #1787060: Ubuntu-EKS image not working	CVE-2018-3615 CVE-2018-3620 CVE-2018-3646
cloud-images	Invalid (unassigned)
Bug #1790605: please include the kernel module IPIP	CVE-2017-5715 CVE-2017-5753 CVE-2018-14633 CVE-2018-15572 CVE-2018-15594 CVE-2018-17182 CVE-2018-3620 CVE-2018-3639 CVE-2018-3646 CVE-2018-6554 CVE-2018-6555
cloud-images	Won't fix (unassigned)
Bug #1873506: ubuntu/focal64 fails to mount Vagrant shared folders	CVE-2019-16089 CVE-2019-19642 CVE-2020-11494 CVE-2020-11608 CVE-2020-11935
cloud-images	Fix released, assigned to John Chittum
Bug #1873809: Make linux-kvm bootable in LXD VMs	CVE-2019-16089 CVE-2019-19642 CVE-2020-0543 CVE-2020-11494 CVE-2020-11608 CVE-2020-11884 CVE-2020-11935 CVE-2020-13143
cloud-images	Invalid (unassigned)
Bug #1925008: no memory hot-plugging in cloud-images	CVE-2021-3489 CVE-2021-3490 CVE-2021-3491
cloud-images	Invalid (unassigned)
Bug #1959593: tcm_loop requires '-extras' for EKS optimised AMIs	CVE-2021-26401 CVE-2021-4083 CVE-2021-4155 CVE-2022-0001 CVE-2022-0330 CVE-2022-0435 CVE-2022-0516 CVE-2022-22942 CVE-2022-23960 CVE-2022-25636
cloud-images	Fix released (unassigned)