[Bug 2040280] Re: CVE-2022-40982 on Ubuntu Mantic Linux Kernel still not fixed

[Launchpad Bug Tracker]

Status changed to 'Confirmed' because the bug affects multiple users.

** Changed in: intel-microcode (Ubuntu)
       Status: New => Confirmed

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to intel-microcode in Ubuntu.
https://bugs.launchpad.net/bugs/2040280

Title:
  CVE-2022-40982 on Ubuntu Mantic Linux Kernel still not fixed

Status in intel-microcode package in Ubuntu:
  Confirmed

Bug description:
  An pro fix CVE-2022-40982 gives me an ✘ CVE-2022-40982 is not
  resolved. Strangely without a specific description of the affected
  package:

  "1 package is still affected: linux"

  But, when i look up the CVW here: https://ubuntu.com/security/CVE-2022-40982
  it is mentioned that the fix is contained with the new version of intel-microcode: mantic Released (3.20230808.1) And that's the version i seem to have installed:
  apt show intel-microcode:

  "Package: intel-microcode Version: 3.20230808.1"

  Any Ideas on that?

  ProblemType: Bug
  DistroRelease: Ubuntu 23.10
  Package: intel-microcode 3.20230808.1
  ProcVersionSignature: Ubuntu 6.5.0-9.9-generic 6.5.3
  Uname: Linux 6.5.0-9-generic x86_64
  ApportVersion: 2.27.0-0ubuntu5
  Architecture: amd64
  CasperMD5CheckResult: pass
  CurrentDesktop: Unity:Unity7:ubuntu
  Date: Tue Oct 24 16:05:24 2023
  InstallationDate: Installed on 2022-08-05 (445 days ago)
  InstallationMedia: Ubuntu Unity 22.04
  SourcePackage: intel-microcode
  UpgradeStatus: Upgraded to mantic on 2023-10-12 (12 days ago)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/intel-microcode/+bug/2040280/+subscriptions