[Bug 2040280] Re: CVE-2022-40982 on Ubuntu Mantic Linux Kernel still not fixed

[Tux Freedom]

Hello Cascardo,

thank you and anybody involved  for your work! I can confirm that on my
end, with:

Linux pro 6.5.0-10-generic #10-Ubuntu SMP PREEMPT_DYNAMIC Fri Oct 13
13:49:38 UTC 2023 x86_64 x86_64 x86_64 GNU/Linux, mantic

and ubuntu-advantage-tools (30~23.10), an: pro fix CVE-2022-40982
generates:

CVE-2022-40982: Linux kernel (BlueField) vulnerabilities
 - https://ubuntu.com/security/CVE-2022-40982

1 affected source package is installed: intel-microcode
(1/1) intel-microcode:
A fix is available in Ubuntu standard updates.
The update is already installed.

✔ CVE-2022-40982 is resolved.

Interestingly, t
only the microcode-package is listed, not as before the microcode package and the "linux kernel".
But, the output is pretty satisfying.

Have a great weekend, and thanks for working on on of the best things
this world has to offer: Linux/GNU

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to intel-microcode in Ubuntu.
https://bugs.launchpad.net/bugs/2040280

Title:
  CVE-2022-40982 on Ubuntu Mantic Linux Kernel still not fixed

Status in intel-microcode package in Ubuntu:
  Confirmed
Status in linux package in Ubuntu:
  Fix Released
Status in intel-microcode source package in Mantic:
  New
Status in linux source package in Mantic:
  Fix Released

Bug description:
  An pro fix CVE-2022-40982 gives me an ✘ CVE-2022-40982 is not
  resolved. Strangely without a specific description of the affected
  package:

  "1 package is still affected: linux"

  But, when i look up the CVW here: https://ubuntu.com/security/CVE-2022-40982
  it is mentioned that the fix is contained with the new version of intel-microcode: mantic Released (3.20230808.1) And that's the version i seem to have installed:
  apt show intel-microcode:

  "Package: intel-microcode Version: 3.20230808.1"

  Any Ideas on that?

  ProblemType: Bug
  DistroRelease: Ubuntu 23.10
  Package: intel-microcode 3.20230808.1
  ProcVersionSignature: Ubuntu 6.5.0-9.9-generic 6.5.3
  Uname: Linux 6.5.0-9-generic x86_64
  ApportVersion: 2.27.0-0ubuntu5
  Architecture: amd64
  CasperMD5CheckResult: pass
  CurrentDesktop: Unity:Unity7:ubuntu
  Date: Tue Oct 24 16:05:24 2023
  InstallationDate: Installed on 2022-08-05 (445 days ago)
  InstallationMedia: Ubuntu Unity 22.04
  SourcePackage: intel-microcode
  UpgradeStatus: Upgraded to mantic on 2023-10-12 (12 days ago)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/intel-microcode/+bug/2040280/+subscriptions