In both current OVAL definition and CVE Tracker, it says for Ubuntu 16.04
While related to the CVE in some way, the 'linux' package in xenial is not affected.
But I have tested many kernel versions in Default 16.04 installation. They are certainly affected by this vulnerability. and after I apply the mitigation, the exploit no longer works.
Is there any reason behind describing them as unaffected?