Risk | Medium |
Patch available | YES |
Number of vulnerabilities | 8 |
CVE-ID | CVE-2022-20566 CVE-2022-3565 CVE-2022-36879 CVE-2022-43750 CVE-2022-4379 CVE-2022-47520 CVE-2023-0045 CVE-2023-0461 |
CWE-ID | CWE-416 CWE-119 CWE-399 CWE-787 CWE-125 CWE-254 |
Exploitation vector | Network |
Public exploit | Public exploit code for vulnerability #7 is available. |
Vulnerable software Subscribe |
Ubuntu Operating systems & Components / Operating system linux-image-5.14.0-1058-oem (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-oem-20.04 (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-oem-20.04d (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-oem-20.04b (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-oem-20.04c (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-5.17.0-1028-oem (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-oem-22.04a (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-oem-22.04 (Ubuntu package) Operating systems & Components / Operating system package or component |
Vendor | Canonical Ltd. |
Security Bulletin
This security bulletin contains information about 8 vulnerabilities.
EUVDB-ID: #VU72526
Risk: Low
CVSSv3.1: 6.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2022-20566
CWE-ID:
CWE-416 - Use After Free
Exploit availability: No
DescriptionThe vulnerability allows a local application to escalate privileges on the system.
The vulnerability exists due to a use-after-free error within the l2cap_chan_put() function in Bluetooth L2CAP implementation. A local application can trigger a use-after-free error and execute arbitrary code with elevated privileges.
Update the affected package linux-oem-5.14 to the latest version.
Vulnerable software versionsUbuntu: 20.04 - 22.04
linux-image-5.14.0-1058-oem (Ubuntu package): before 5.14.0-1058.66
linux-image-oem-20.04 (Ubuntu package): before 5.14.0.1058.56
linux-image-oem-20.04d (Ubuntu package): before 5.14.0.1058.56
linux-image-oem-20.04b (Ubuntu package): before 5.14.0.1058.56
linux-image-oem-20.04c (Ubuntu package): before 5.14.0.1058.56
linux-image-5.17.0-1028-oem (Ubuntu package): before 5.17.0-1028.29
linux-image-oem-22.04a (Ubuntu package): before 5.17.0.1028.26
linux-image-oem-22.04 (Ubuntu package): before 5.17.0.1028.26
External linkshttp://ubuntu.com/security/notices/USN-5913-1
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU69709
Risk: Low
CVSSv3.1: 5.9 [CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2022-3565
CWE-ID:
CWE-119 - Memory corruption
Exploit availability: No
DescriptionThe vulnerability allows an attacker to execute arbitrary code on the target system.
The vulnerability exists due to a boundary error within the del_timer() function in drivers/isdn/mISDN/l1oip_core.c in the Bluetooth component. An attacker with physical proximity to device can trigger memory corruption and execute arbitrary code on the target system.
Update the affected package linux-oem-5.14 to the latest version.
Vulnerable software versionsUbuntu: 20.04 - 22.04
linux-image-5.14.0-1058-oem (Ubuntu package): before 5.14.0-1058.66
linux-image-oem-20.04 (Ubuntu package): before 5.14.0.1058.56
linux-image-oem-20.04d (Ubuntu package): before 5.14.0.1058.56
linux-image-oem-20.04b (Ubuntu package): before 5.14.0.1058.56
linux-image-oem-20.04c (Ubuntu package): before 5.14.0.1058.56
linux-image-5.17.0-1028-oem (Ubuntu package): before 5.17.0-1028.29
linux-image-oem-22.04a (Ubuntu package): before 5.17.0.1028.26
linux-image-oem-22.04 (Ubuntu package): before 5.17.0.1028.26
External linkshttp://ubuntu.com/security/notices/USN-5913-1
Q & A
Can this vulnerability be exploited remotely?
No. The attacker should have physical access to the system in order to successfully exploit this vulnerability.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU66550
Risk: Low
CVSSv3.1: 4.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2022-36879
CWE-ID:
CWE-399 - Resource Management Errors
Exploit availability: No
DescriptionThe vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists due to improper management of internal resources within the xfrm_expand_policies() function in net/xfrm/xfrm_policy.c. A local user can cause the refcount to be dropped twice and perform a denial of service (DoS) attack.
MitigationUpdate the affected package linux-oem-5.14 to the latest version.
Vulnerable software versionsUbuntu: 20.04 - 22.04
linux-image-5.14.0-1058-oem (Ubuntu package): before 5.14.0-1058.66
linux-image-oem-20.04 (Ubuntu package): before 5.14.0.1058.56
linux-image-oem-20.04d (Ubuntu package): before 5.14.0.1058.56
linux-image-oem-20.04b (Ubuntu package): before 5.14.0.1058.56
linux-image-oem-20.04c (Ubuntu package): before 5.14.0.1058.56
linux-image-5.17.0-1028-oem (Ubuntu package): before 5.17.0-1028.29
linux-image-oem-22.04a (Ubuntu package): before 5.17.0.1028.26
linux-image-oem-22.04 (Ubuntu package): before 5.17.0.1028.26
External linkshttp://ubuntu.com/security/notices/USN-5913-1
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU69296
Risk: Low
CVSSv3.1: 6.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2022-43750
CWE-ID:
CWE-787 - Out-of-bounds write
Exploit availability: No
Description The vulnerability allows a local user to escalate privileges on the system.
The vulnerability exists due to a boundary error within the drivers/usb/mon/mon_bin.c in usbmon in the Linux kernel. A local user can trigger an out-of-bounds write and execute arbitrary code with elevated privileges.
MitigationUpdate the affected package linux-oem-5.14 to the latest version.
Vulnerable software versionsUbuntu: 20.04 - 22.04
linux-image-5.14.0-1058-oem (Ubuntu package): before 5.14.0-1058.66
linux-image-oem-20.04 (Ubuntu package): before 5.14.0.1058.56
linux-image-oem-20.04d (Ubuntu package): before 5.14.0.1058.56
linux-image-oem-20.04b (Ubuntu package): before 5.14.0.1058.56
linux-image-oem-20.04c (Ubuntu package): before 5.14.0.1058.56
linux-image-5.17.0-1028-oem (Ubuntu package): before 5.17.0-1028.29
linux-image-oem-22.04a (Ubuntu package): before 5.17.0.1028.26
linux-image-oem-22.04 (Ubuntu package): before 5.17.0.1028.26
External linkshttp://ubuntu.com/security/notices/USN-5913-1
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU71583
Risk: Medium
CVSSv3.1: 6.5 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2022-4379
CWE-ID:
CWE-416 - Use After Free
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to a use-after-free error within the __nfs42_ssc_open() function in fs/nfs/nfs4file.c. A remote attacker can perform a denial of service (DoS) attack.
Update the affected package linux-oem-5.14 to the latest version.
Vulnerable software versionsUbuntu: 20.04 - 22.04
linux-image-5.14.0-1058-oem (Ubuntu package): before 5.14.0-1058.66
linux-image-oem-20.04 (Ubuntu package): before 5.14.0.1058.56
linux-image-oem-20.04d (Ubuntu package): before 5.14.0.1058.56
linux-image-oem-20.04b (Ubuntu package): before 5.14.0.1058.56
linux-image-oem-20.04c (Ubuntu package): before 5.14.0.1058.56
linux-image-5.17.0-1028-oem (Ubuntu package): before 5.17.0-1028.29
linux-image-oem-22.04a (Ubuntu package): before 5.17.0.1028.26
linux-image-oem-22.04 (Ubuntu package): before 5.17.0.1028.26
External linkshttp://ubuntu.com/security/notices/USN-5913-1
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU70627
Risk: Low
CVSSv3.1: 4.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2022-47520
CWE-ID:
CWE-125 - Out-of-bounds read
Exploit availability: No
DescriptionThe vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists due to a boundary condition within the drivers/net/wireless/microchip/wilc1000/hif.c in the WILC1000 wireless driver. A local user can trigger an out-of-bounds read when parsing a Robust Security Network (RSN) information element from a Netlink packet and perform a denial of service (DoS) attack.
Update the affected package linux-oem-5.14 to the latest version.
Vulnerable software versionsUbuntu: 20.04 - 22.04
linux-image-5.14.0-1058-oem (Ubuntu package): before 5.14.0-1058.66
linux-image-oem-20.04 (Ubuntu package): before 5.14.0.1058.56
linux-image-oem-20.04d (Ubuntu package): before 5.14.0.1058.56
linux-image-oem-20.04b (Ubuntu package): before 5.14.0.1058.56
linux-image-oem-20.04c (Ubuntu package): before 5.14.0.1058.56
linux-image-5.17.0-1028-oem (Ubuntu package): before 5.17.0-1028.29
linux-image-oem-22.04a (Ubuntu package): before 5.17.0.1028.26
linux-image-oem-22.04 (Ubuntu package): before 5.17.0.1028.26
External linkshttp://ubuntu.com/security/notices/USN-5913-1
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU72469
Risk: Low
CVSSv3.1: 2.6 [CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N/E:P/RL:O/RC:C]
CVE-ID: CVE-2023-0045
CWE-ID:
CWE-254 - Security Features
Exploit availability: Yes
DescriptionThe vulnerability allows a local user to bypass implemented security restrictions.
The vulnerability exists due to Linux kernel does not correctly mitigate SMT attacks. A local user can bypass Spectre-BTI user space mitigations and gain access to sensitive information.
Update the affected package linux-oem-5.14 to the latest version.
Vulnerable software versionsUbuntu: 20.04 - 22.04
linux-image-5.14.0-1058-oem (Ubuntu package): before 5.14.0-1058.66
linux-image-oem-20.04 (Ubuntu package): before 5.14.0.1058.56
linux-image-oem-20.04d (Ubuntu package): before 5.14.0.1058.56
linux-image-oem-20.04b (Ubuntu package): before 5.14.0.1058.56
linux-image-oem-20.04c (Ubuntu package): before 5.14.0.1058.56
linux-image-5.17.0-1028-oem (Ubuntu package): before 5.17.0-1028.29
linux-image-oem-22.04a (Ubuntu package): before 5.17.0.1028.26
linux-image-oem-22.04 (Ubuntu package): before 5.17.0.1028.26
External linkshttp://ubuntu.com/security/notices/USN-5913-1
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability. However, proof of concept for this vulnerability is available.
EUVDB-ID: #VU72506
Risk: Low
CVSSv3.1: 6.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2023-0461
CWE-ID:
CWE-416 - Use After Free
Exploit availability: No
DescriptionThe vulnerability allows a local user to escalate privileges on the system.
The vulnerability exists due to a use-after-free error within the Upper Level Protocol (ULP) subsystem in Linux kernel caused by improper handling of sockets entering the LISTEN state in certain protocols. A local user can trigger a use-after-free error and execute arbitrary code with elevated privileges.
Update the affected package linux-oem-5.14 to the latest version.
Vulnerable software versionsUbuntu: 20.04 - 22.04
linux-image-5.14.0-1058-oem (Ubuntu package): before 5.14.0-1058.66
linux-image-oem-20.04 (Ubuntu package): before 5.14.0.1058.56
linux-image-oem-20.04d (Ubuntu package): before 5.14.0.1058.56
linux-image-oem-20.04b (Ubuntu package): before 5.14.0.1058.56
linux-image-oem-20.04c (Ubuntu package): before 5.14.0.1058.56
linux-image-5.17.0-1028-oem (Ubuntu package): before 5.17.0-1028.29
linux-image-oem-22.04a (Ubuntu package): before 5.17.0.1028.26
linux-image-oem-22.04 (Ubuntu package): before 5.17.0.1028.26
External linkshttp://ubuntu.com/security/notices/USN-5913-1
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.