Security Bulletin
This security bulletin contains information about 7 vulnerabilities.
EUVDB-ID: #VU67866
Risk: Low
CVSSv3.1: 6.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2022-20422
CWE-ID:
CWE-787 - Out-of-bounds write
Exploit availability: No
Description The vulnerability allows a local application to escalate privileges on the system.
The vulnerability exists due to a boundary error within emulation_proc_handler() in armv8 emulation in arch/arm64/kernel/armv8_deprecated.c. A local user can trigger an out-of-bounds write and execute arbitrary code with elevated privileges.
Update the affected package linux to the latest version.
Vulnerable software versionsUbuntu: 16.04 - 18.04
linux-image-4.15.0-1143-aws-hwe (Ubuntu package): before Ubuntu Pro (Infra-only)
linux-image-4.15.0-1108-oracle (Ubuntu package): before Ubuntu Pro (Infra-only)
linux-image-4.15.0-197-lowlatency (Ubuntu package): before Ubuntu Pro (Infra-only)
linux-image-4.15.0-197-generic (Ubuntu package): before Ubuntu Pro (Infra-only)
linux-image-virtual (Ubuntu package): before 4.15.0.197.182
linux-image-snapdragon (Ubuntu package): before 4.15.0.1139.140
linux-image-raspi2 (Ubuntu package): before 4.15.0.1121.118
linux-image-oracle-lts-18.04 (Ubuntu package): before 4.15.0.1108.115
linux-image-lowlatency (Ubuntu package): before 4.15.0.197.182
linux-image-kvm (Ubuntu package): before 4.15.0.1129.122
linux-image-generic-lpae (Ubuntu package): before 4.15.0.197.182
linux-image-generic (Ubuntu package): before 4.15.0.197.182
linux-image-dell300x (Ubuntu package): before 4.15.0.1055.55
linux-image-aws-lts-18.04 (Ubuntu package): before 4.15.0.1143.143
linux-image-4.15.0-197-generic-lpae (Ubuntu package): before 4.15.0-197.208
linux-image-4.15.0-1143-aws (Ubuntu package): before 4.15.0-1143.155
linux-image-4.15.0-1139-snapdragon (Ubuntu package): before 4.15.0-1139.149
linux-image-4.15.0-1129-kvm (Ubuntu package): before 4.15.0-1129.134
linux-image-4.15.0-1121-raspi2 (Ubuntu package): before 4.15.0-1121.129
linux-image-4.15.0-1055-dell300x (Ubuntu package): before 4.15.0-1055.60
linux-image-aws-hwe (Ubuntu package): before Ubuntu Pro (Infra-only)
linux-image-generic-hwe-16.04 (Ubuntu package): before Ubuntu Pro (Infra-only)
linux-image-lowlatency-hwe-16.04 (Ubuntu package): before Ubuntu Pro (Infra-only)
linux-image-oem (Ubuntu package): before Ubuntu Pro (Infra-only)
linux-image-virtual-hwe-16.04 (Ubuntu package): before Ubuntu Pro (Infra-only)
linux-image-oracle (Ubuntu package): before Ubuntu Pro (Infra-only)
External linkshttp://ubuntu.com/security/notices/USN-5727-1
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU64920
Risk: Low
CVSSv3.1: 4.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2022-2153
CWE-ID:
CWE-476 - NULL Pointer Dereference
Exploit availability: No
DescriptionThe vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists due to a NULL pointer dereference error in the Linux kernel’s KVM when attempting to set a SynIC IRQ. A local user on the host can issue specific ioctl calls, causing a denial of service.
MitigationUpdate the affected package linux to the latest version.
Vulnerable software versionsUbuntu: 16.04 - 18.04
linux-image-4.15.0-1143-aws-hwe (Ubuntu package): before Ubuntu Pro (Infra-only)
linux-image-4.15.0-1108-oracle (Ubuntu package): before Ubuntu Pro (Infra-only)
linux-image-4.15.0-197-lowlatency (Ubuntu package): before Ubuntu Pro (Infra-only)
linux-image-4.15.0-197-generic (Ubuntu package): before Ubuntu Pro (Infra-only)
linux-image-virtual (Ubuntu package): before 4.15.0.197.182
linux-image-snapdragon (Ubuntu package): before 4.15.0.1139.140
linux-image-raspi2 (Ubuntu package): before 4.15.0.1121.118
linux-image-oracle-lts-18.04 (Ubuntu package): before 4.15.0.1108.115
linux-image-lowlatency (Ubuntu package): before 4.15.0.197.182
linux-image-kvm (Ubuntu package): before 4.15.0.1129.122
linux-image-generic-lpae (Ubuntu package): before 4.15.0.197.182
linux-image-generic (Ubuntu package): before 4.15.0.197.182
linux-image-dell300x (Ubuntu package): before 4.15.0.1055.55
linux-image-aws-lts-18.04 (Ubuntu package): before 4.15.0.1143.143
linux-image-4.15.0-197-generic-lpae (Ubuntu package): before 4.15.0-197.208
linux-image-4.15.0-1143-aws (Ubuntu package): before 4.15.0-1143.155
linux-image-4.15.0-1139-snapdragon (Ubuntu package): before 4.15.0-1139.149
linux-image-4.15.0-1129-kvm (Ubuntu package): before 4.15.0-1129.134
linux-image-4.15.0-1121-raspi2 (Ubuntu package): before 4.15.0-1121.129
linux-image-4.15.0-1055-dell300x (Ubuntu package): before 4.15.0-1055.60
linux-image-aws-hwe (Ubuntu package): before Ubuntu Pro (Infra-only)
linux-image-generic-hwe-16.04 (Ubuntu package): before Ubuntu Pro (Infra-only)
linux-image-lowlatency-hwe-16.04 (Ubuntu package): before Ubuntu Pro (Infra-only)
linux-image-oem (Ubuntu package): before Ubuntu Pro (Infra-only)
linux-image-virtual-hwe-16.04 (Ubuntu package): before Ubuntu Pro (Infra-only)
linux-image-oracle (Ubuntu package): before Ubuntu Pro (Infra-only)
External linkshttp://ubuntu.com/security/notices/USN-5727-1
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU67812
Risk: Low
CVSSv3.1: 6.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2022-2978
CWE-ID:
CWE-416 - Use After Free
Exploit availability: No
DescriptionThe vulnerability allows a local user to escalate privileges on the system.
The vulnerability exists due to a use-after-free error within the Linux kernel NILFS file system. A local user can trigger a use-after-free error and execute arbitrary code with elevated privileges.
Update the affected package linux to the latest version.
Vulnerable software versionsUbuntu: 16.04 - 18.04
linux-image-4.15.0-1143-aws-hwe (Ubuntu package): before Ubuntu Pro (Infra-only)
linux-image-4.15.0-1108-oracle (Ubuntu package): before Ubuntu Pro (Infra-only)
linux-image-4.15.0-197-lowlatency (Ubuntu package): before Ubuntu Pro (Infra-only)
linux-image-4.15.0-197-generic (Ubuntu package): before Ubuntu Pro (Infra-only)
linux-image-virtual (Ubuntu package): before 4.15.0.197.182
linux-image-snapdragon (Ubuntu package): before 4.15.0.1139.140
linux-image-raspi2 (Ubuntu package): before 4.15.0.1121.118
linux-image-oracle-lts-18.04 (Ubuntu package): before 4.15.0.1108.115
linux-image-lowlatency (Ubuntu package): before 4.15.0.197.182
linux-image-kvm (Ubuntu package): before 4.15.0.1129.122
linux-image-generic-lpae (Ubuntu package): before 4.15.0.197.182
linux-image-generic (Ubuntu package): before 4.15.0.197.182
linux-image-dell300x (Ubuntu package): before 4.15.0.1055.55
linux-image-aws-lts-18.04 (Ubuntu package): before 4.15.0.1143.143
linux-image-4.15.0-197-generic-lpae (Ubuntu package): before 4.15.0-197.208
linux-image-4.15.0-1143-aws (Ubuntu package): before 4.15.0-1143.155
linux-image-4.15.0-1139-snapdragon (Ubuntu package): before 4.15.0-1139.149
linux-image-4.15.0-1129-kvm (Ubuntu package): before 4.15.0-1129.134
linux-image-4.15.0-1121-raspi2 (Ubuntu package): before 4.15.0-1121.129
linux-image-4.15.0-1055-dell300x (Ubuntu package): before 4.15.0-1055.60
linux-image-aws-hwe (Ubuntu package): before Ubuntu Pro (Infra-only)
linux-image-generic-hwe-16.04 (Ubuntu package): before Ubuntu Pro (Infra-only)
linux-image-lowlatency-hwe-16.04 (Ubuntu package): before Ubuntu Pro (Infra-only)
linux-image-oem (Ubuntu package): before Ubuntu Pro (Infra-only)
linux-image-virtual-hwe-16.04 (Ubuntu package): before Ubuntu Pro (Infra-only)
linux-image-oracle (Ubuntu package): before Ubuntu Pro (Infra-only)
External linkshttp://ubuntu.com/security/notices/USN-5727-1
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU67477
Risk: Low
CVSSv3.1: 6.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2022-3028
Exploit availability: No
DescriptionThe vulnerability allows a local user to escalate privileges on the system.
The vulnerability exists due to a race condition in the Linux kernel's IP framework for transforming packets (XFRM subsystem) when multiple calls to xfrm_probe_algs occurred simultaneously. A local user can exploit the race and escalate privileges on the system.
MitigationUpdate the affected package linux to the latest version.
Vulnerable software versionsUbuntu: 16.04 - 18.04
linux-image-4.15.0-1143-aws-hwe (Ubuntu package): before Ubuntu Pro (Infra-only)
linux-image-4.15.0-1108-oracle (Ubuntu package): before Ubuntu Pro (Infra-only)
linux-image-4.15.0-197-lowlatency (Ubuntu package): before Ubuntu Pro (Infra-only)
linux-image-4.15.0-197-generic (Ubuntu package): before Ubuntu Pro (Infra-only)
linux-image-virtual (Ubuntu package): before 4.15.0.197.182
linux-image-snapdragon (Ubuntu package): before 4.15.0.1139.140
linux-image-raspi2 (Ubuntu package): before 4.15.0.1121.118
linux-image-oracle-lts-18.04 (Ubuntu package): before 4.15.0.1108.115
linux-image-lowlatency (Ubuntu package): before 4.15.0.197.182
linux-image-kvm (Ubuntu package): before 4.15.0.1129.122
linux-image-generic-lpae (Ubuntu package): before 4.15.0.197.182
linux-image-generic (Ubuntu package): before 4.15.0.197.182
linux-image-dell300x (Ubuntu package): before 4.15.0.1055.55
linux-image-aws-lts-18.04 (Ubuntu package): before 4.15.0.1143.143
linux-image-4.15.0-197-generic-lpae (Ubuntu package): before 4.15.0-197.208
linux-image-4.15.0-1143-aws (Ubuntu package): before 4.15.0-1143.155
linux-image-4.15.0-1139-snapdragon (Ubuntu package): before 4.15.0-1139.149
linux-image-4.15.0-1129-kvm (Ubuntu package): before 4.15.0-1129.134
linux-image-4.15.0-1121-raspi2 (Ubuntu package): before 4.15.0-1121.129
linux-image-4.15.0-1055-dell300x (Ubuntu package): before 4.15.0-1055.60
linux-image-aws-hwe (Ubuntu package): before Ubuntu Pro (Infra-only)
linux-image-generic-hwe-16.04 (Ubuntu package): before Ubuntu Pro (Infra-only)
linux-image-lowlatency-hwe-16.04 (Ubuntu package): before Ubuntu Pro (Infra-only)
linux-image-oem (Ubuntu package): before Ubuntu Pro (Infra-only)
linux-image-virtual-hwe-16.04 (Ubuntu package): before Ubuntu Pro (Infra-only)
linux-image-oracle (Ubuntu package): before Ubuntu Pro (Infra-only)
External linkshttp://ubuntu.com/security/notices/USN-5727-1
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU69398
Risk: Low
CVSSv3.1: 4.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2022-3635
CWE-ID:
CWE-416 - Use After Free
Exploit availability: No
DescriptionThe vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists due to a use-after-free error within the drivers/atm/idt77252.c in IPsec component of Linux kernel. A local user can trigger a use-after-free error and crash the kernel.
Update the affected package linux to the latest version.
Vulnerable software versionsUbuntu: 16.04 - 18.04
linux-image-4.15.0-1143-aws-hwe (Ubuntu package): before Ubuntu Pro (Infra-only)
linux-image-4.15.0-1108-oracle (Ubuntu package): before Ubuntu Pro (Infra-only)
linux-image-4.15.0-197-lowlatency (Ubuntu package): before Ubuntu Pro (Infra-only)
linux-image-4.15.0-197-generic (Ubuntu package): before Ubuntu Pro (Infra-only)
linux-image-virtual (Ubuntu package): before 4.15.0.197.182
linux-image-snapdragon (Ubuntu package): before 4.15.0.1139.140
linux-image-raspi2 (Ubuntu package): before 4.15.0.1121.118
linux-image-oracle-lts-18.04 (Ubuntu package): before 4.15.0.1108.115
linux-image-lowlatency (Ubuntu package): before 4.15.0.197.182
linux-image-kvm (Ubuntu package): before 4.15.0.1129.122
linux-image-generic-lpae (Ubuntu package): before 4.15.0.197.182
linux-image-generic (Ubuntu package): before 4.15.0.197.182
linux-image-dell300x (Ubuntu package): before 4.15.0.1055.55
linux-image-aws-lts-18.04 (Ubuntu package): before 4.15.0.1143.143
linux-image-4.15.0-197-generic-lpae (Ubuntu package): before 4.15.0-197.208
linux-image-4.15.0-1143-aws (Ubuntu package): before 4.15.0-1143.155
linux-image-4.15.0-1139-snapdragon (Ubuntu package): before 4.15.0-1139.149
linux-image-4.15.0-1129-kvm (Ubuntu package): before 4.15.0-1129.134
linux-image-4.15.0-1121-raspi2 (Ubuntu package): before 4.15.0-1121.129
linux-image-4.15.0-1055-dell300x (Ubuntu package): before 4.15.0-1055.60
linux-image-aws-hwe (Ubuntu package): before Ubuntu Pro (Infra-only)
linux-image-generic-hwe-16.04 (Ubuntu package): before Ubuntu Pro (Infra-only)
linux-image-lowlatency-hwe-16.04 (Ubuntu package): before Ubuntu Pro (Infra-only)
linux-image-oem (Ubuntu package): before Ubuntu Pro (Infra-only)
linux-image-virtual-hwe-16.04 (Ubuntu package): before Ubuntu Pro (Infra-only)
linux-image-oracle (Ubuntu package): before Ubuntu Pro (Infra-only)
External linkshttp://ubuntu.com/security/notices/USN-5727-1
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU66550
Risk: Low
CVSSv3.1: 4.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2022-36879
CWE-ID:
CWE-399 - Resource Management Errors
Exploit availability: No
DescriptionThe vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists due to improper management of internal resources within the xfrm_expand_policies() function in net/xfrm/xfrm_policy.c. A local user can cause the refcount to be dropped twice and perform a denial of service (DoS) attack.
MitigationUpdate the affected package linux to the latest version.
Vulnerable software versionsUbuntu: 16.04 - 18.04
linux-image-4.15.0-1143-aws-hwe (Ubuntu package): before Ubuntu Pro (Infra-only)
linux-image-4.15.0-1108-oracle (Ubuntu package): before Ubuntu Pro (Infra-only)
linux-image-4.15.0-197-lowlatency (Ubuntu package): before Ubuntu Pro (Infra-only)
linux-image-4.15.0-197-generic (Ubuntu package): before Ubuntu Pro (Infra-only)
linux-image-virtual (Ubuntu package): before 4.15.0.197.182
linux-image-snapdragon (Ubuntu package): before 4.15.0.1139.140
linux-image-raspi2 (Ubuntu package): before 4.15.0.1121.118
linux-image-oracle-lts-18.04 (Ubuntu package): before 4.15.0.1108.115
linux-image-lowlatency (Ubuntu package): before 4.15.0.197.182
linux-image-kvm (Ubuntu package): before 4.15.0.1129.122
linux-image-generic-lpae (Ubuntu package): before 4.15.0.197.182
linux-image-generic (Ubuntu package): before 4.15.0.197.182
linux-image-dell300x (Ubuntu package): before 4.15.0.1055.55
linux-image-aws-lts-18.04 (Ubuntu package): before 4.15.0.1143.143
linux-image-4.15.0-197-generic-lpae (Ubuntu package): before 4.15.0-197.208
linux-image-4.15.0-1143-aws (Ubuntu package): before 4.15.0-1143.155
linux-image-4.15.0-1139-snapdragon (Ubuntu package): before 4.15.0-1139.149
linux-image-4.15.0-1129-kvm (Ubuntu package): before 4.15.0-1129.134
linux-image-4.15.0-1121-raspi2 (Ubuntu package): before 4.15.0-1121.129
linux-image-4.15.0-1055-dell300x (Ubuntu package): before 4.15.0-1055.60
linux-image-aws-hwe (Ubuntu package): before Ubuntu Pro (Infra-only)
linux-image-generic-hwe-16.04 (Ubuntu package): before Ubuntu Pro (Infra-only)
linux-image-lowlatency-hwe-16.04 (Ubuntu package): before Ubuntu Pro (Infra-only)
linux-image-oem (Ubuntu package): before Ubuntu Pro (Infra-only)
linux-image-virtual-hwe-16.04 (Ubuntu package): before Ubuntu Pro (Infra-only)
linux-image-oracle (Ubuntu package): before Ubuntu Pro (Infra-only)
External linkshttp://ubuntu.com/security/notices/USN-5727-1
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU67587
Risk: Low
CVSSv3.1: 4.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C]
CVE-ID: CVE-2022-40768
CWE-ID:
CWE-284 - Improper Access Control
Exploit availability: No
DescriptionThe vulnerability allows a local user to gain access to sensitive information.
The vulnerability exists due to improper access restrictions in the drivers/scsi/stex.c in the Linux kernel. A local user can obtain sensitive information from kernel memory because stex_queuecommand_lck lacks a memset for the PASSTHRU_CMD case.
MitigationUpdate the affected package linux to the latest version.
Vulnerable software versionsUbuntu: 16.04 - 18.04
linux-image-4.15.0-1143-aws-hwe (Ubuntu package): before Ubuntu Pro (Infra-only)
linux-image-4.15.0-1108-oracle (Ubuntu package): before Ubuntu Pro (Infra-only)
linux-image-4.15.0-197-lowlatency (Ubuntu package): before Ubuntu Pro (Infra-only)
linux-image-4.15.0-197-generic (Ubuntu package): before Ubuntu Pro (Infra-only)
linux-image-virtual (Ubuntu package): before 4.15.0.197.182
linux-image-snapdragon (Ubuntu package): before 4.15.0.1139.140
linux-image-raspi2 (Ubuntu package): before 4.15.0.1121.118
linux-image-oracle-lts-18.04 (Ubuntu package): before 4.15.0.1108.115
linux-image-lowlatency (Ubuntu package): before 4.15.0.197.182
linux-image-kvm (Ubuntu package): before 4.15.0.1129.122
linux-image-generic-lpae (Ubuntu package): before 4.15.0.197.182
linux-image-generic (Ubuntu package): before 4.15.0.197.182
linux-image-dell300x (Ubuntu package): before 4.15.0.1055.55
linux-image-aws-lts-18.04 (Ubuntu package): before 4.15.0.1143.143
linux-image-4.15.0-197-generic-lpae (Ubuntu package): before 4.15.0-197.208
linux-image-4.15.0-1143-aws (Ubuntu package): before 4.15.0-1143.155
linux-image-4.15.0-1139-snapdragon (Ubuntu package): before 4.15.0-1139.149
linux-image-4.15.0-1129-kvm (Ubuntu package): before 4.15.0-1129.134
linux-image-4.15.0-1121-raspi2 (Ubuntu package): before 4.15.0-1121.129
linux-image-4.15.0-1055-dell300x (Ubuntu package): before 4.15.0-1055.60
linux-image-aws-hwe (Ubuntu package): before Ubuntu Pro (Infra-only)
linux-image-generic-hwe-16.04 (Ubuntu package): before Ubuntu Pro (Infra-only)
linux-image-lowlatency-hwe-16.04 (Ubuntu package): before Ubuntu Pro (Infra-only)
linux-image-oem (Ubuntu package): before Ubuntu Pro (Infra-only)
linux-image-virtual-hwe-16.04 (Ubuntu package): before Ubuntu Pro (Infra-only)
linux-image-oracle (Ubuntu package): before Ubuntu Pro (Infra-only)
External linkshttp://ubuntu.com/security/notices/USN-5727-1
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.