Risk | Medium |
Patch available | YES |
Number of vulnerabilities | 12 |
CVE-ID | CVE-2022-2590 CVE-2022-3303 CVE-2022-3586 CVE-2022-40307 CVE-2022-4095 CVE-2022-4662 CVE-2023-0386 CVE-2023-0468 CVE-2023-1829 CVE-2023-1859 CVE-2023-23455 CVE-2023-26545 |
CWE-ID | CWE-264 CWE-476 CWE-416 CWE-415 CWE-284 CWE-843 |
Exploitation vector | Network |
Public exploit | Public exploit code for vulnerability #7 is available. |
Vulnerable software Subscribe |
Ubuntu Operating systems & Components / Operating system linux-image-oem-22.04a (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-oem-22.04 (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-5.17.0-1031-oem (Ubuntu package) Operating systems & Components / Operating system package or component |
Vendor | Canonical Ltd. |
Security Bulletin
This security bulletin contains information about 12 vulnerabilities.
EUVDB-ID: #VU66544
Risk: Low
CVSSv3.1: 4.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C]
CVE-ID: CVE-2022-2590
CWE-ID:
CWE-264 - Permissions, Privileges, and Access Controls
Exploit availability: No
DescriptionThe vulnerability allows a local user to escalate privileges on the system.
The vulnerability exists due to improper access restrictions to shared memory (shmem / tmpfs). A local user can write to arbitrary files without having write permissions.
Update the affected package linux-oem-5.17 to the latest version.
Vulnerable software versionsUbuntu: 22.04
linux-image-oem-22.04a (Ubuntu package): before 5.17.0.1031.29
linux-image-oem-22.04 (Ubuntu package): before 5.17.0.1031.29
linux-image-5.17.0-1031-oem (Ubuntu package): before 5.17.0-1031.32
External linkshttp://ubuntu.com/security/notices/USN-6071-1
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU68338
Risk: Low
CVSSv3.1: 3.9 [CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2022-3303
CWE-ID:
CWE-476 - NULL Pointer Dereference
Exploit availability: No
DescriptionThe vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists due to a NULL pointer dereference error in the Linux kernel sound subsystem due to improper locking when handling the SNDCTL_DSP_SYNC ioctl. A privileged local user can trigger a NULL pointer dereference error and perform a denial of service (DoS) attack.
MitigationUpdate the affected package linux-oem-5.17 to the latest version.
Vulnerable software versionsUbuntu: 22.04
linux-image-oem-22.04a (Ubuntu package): before 5.17.0.1031.29
linux-image-oem-22.04 (Ubuntu package): before 5.17.0.1031.29
linux-image-5.17.0-1031-oem (Ubuntu package): before 5.17.0-1031.32
External linkshttp://ubuntu.com/security/notices/USN-6071-1
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU69708
Risk: Low
CVSSv3.1: 2.9 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:U/RL:O/RC:C]
CVE-ID: CVE-2022-3586
CWE-ID:
CWE-416 - Use After Free
Exploit availability: No
DescriptionThe vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists due to a use-after-free error in the way the sch_sfb enqueue function used the socket buffer (SKB) cb
field after the same SKB had been enqueued (and freed) into a child
qdisc. A local user can perform a denial of service (DoS) attack.
Update the affected package linux-oem-5.17 to the latest version.
Vulnerable software versionsUbuntu: 22.04
linux-image-oem-22.04a (Ubuntu package): before 5.17.0.1031.29
linux-image-oem-22.04 (Ubuntu package): before 5.17.0.1031.29
linux-image-5.17.0-1031-oem (Ubuntu package): before 5.17.0-1031.32
External linkshttp://ubuntu.com/security/notices/USN-6071-1
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU67915
Risk: Low
CVSSv3.1: 4.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2022-40307
CWE-ID:
CWE-416 - Use After Free
Exploit availability: No
DescriptionThe vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists due to a use-after-free error within the drivers/firmware/efi/capsule-loader.c in Linux kernel. A local user can trigger a use-after-free error and perform a denial of service (DoS) attack.
Update the affected package linux-oem-5.17 to the latest version.
Vulnerable software versionsUbuntu: 22.04
linux-image-oem-22.04a (Ubuntu package): before 5.17.0.1031.29
linux-image-oem-22.04 (Ubuntu package): before 5.17.0.1031.29
linux-image-5.17.0-1031-oem (Ubuntu package): before 5.17.0-1031.32
External linkshttp://ubuntu.com/security/notices/USN-6071-1
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU69805
Risk: Low
CVSSv3.1: 6.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2022-4095
CWE-ID:
CWE-415 - Double Free
Exploit availability: No
DescriptionThe vulnerability allows a local user to escalate privileges on the system.
The vulnerability exists due to a boundary error within the cmd_hdl_filter() function in drivers/staging/rtl8712/rtl8712_cmd.c. A local user can trigger a double free error and execute arbitrary code with escalated privileges.
Update the affected package linux-oem-5.17 to the latest version.
Vulnerable software versionsUbuntu: 22.04
linux-image-oem-22.04a (Ubuntu package): before 5.17.0.1031.29
linux-image-oem-22.04 (Ubuntu package): before 5.17.0.1031.29
linux-image-5.17.0-1031-oem (Ubuntu package): before 5.17.0-1031.32
External linkshttp://ubuntu.com/security/notices/USN-6071-1
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU71541
Risk: Low
CVSSv3.1: 4.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2022-4662
CWE-ID:
CWE-284 - Improper Access Control
Exploit availability: No
DescriptionThe vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists due to improper access restrictions in the Linux kernel USB core subsystem in the way user attaches usb device. A local user can perform a denial of service (DoS) attack.
Update the affected package linux-oem-5.17 to the latest version.
Vulnerable software versionsUbuntu: 22.04
linux-image-oem-22.04a (Ubuntu package): before 5.17.0.1031.29
linux-image-oem-22.04 (Ubuntu package): before 5.17.0.1031.29
linux-image-5.17.0-1031-oem (Ubuntu package): before 5.17.0-1031.32
External linkshttp://ubuntu.com/security/notices/USN-6071-1
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU74410
Risk: Low
CVSSv3.1: 7.9 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C]
CVE-ID: CVE-2023-0386
CWE-ID:
CWE-264 - Permissions, Privileges, and Access Controls
Exploit availability: Yes
DescriptionThe vulnerability allows a local user to escalate privileges on the system.
The vulnerability exists due to unauthorized access to execution of setuid files in OverlayFS subsystem when copying a capable file from a nosuid mount into another mount. A local user can execute arbitrary code with root privileges.
Update the affected package linux-oem-5.17 to the latest version.
Vulnerable software versionsUbuntu: 22.04
linux-image-oem-22.04a (Ubuntu package): before 5.17.0.1031.29
linux-image-oem-22.04 (Ubuntu package): before 5.17.0.1031.29
linux-image-5.17.0-1031-oem (Ubuntu package): before 5.17.0-1031.32
External linkshttp://ubuntu.com/security/notices/USN-6071-1
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability. However, proof of concept for this vulnerability is available.
EUVDB-ID: #VU72343
Risk: Low
CVSSv3.1: 4.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2023-0468
CWE-ID:
CWE-476 - NULL Pointer Dereference
Exploit availability: No
DescriptionThe vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists due to a NULL pointer dereference error in the io_poll_check_events() function in io_uring/poll.c within the io_uring subcomponent in the Linux Kernel. A local user can perform a denial of service (DoS) attack.
MitigationUpdate the affected package linux-oem-5.17 to the latest version.
Vulnerable software versionsUbuntu: 22.04
linux-image-oem-22.04a (Ubuntu package): before 5.17.0.1031.29
linux-image-oem-22.04 (Ubuntu package): before 5.17.0.1031.29
linux-image-5.17.0-1031-oem (Ubuntu package): before 5.17.0-1031.32
External linkshttp://ubuntu.com/security/notices/USN-6071-1
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU75448
Risk: Low
CVSSv3.1: 7.7 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2023-1829
CWE-ID:
CWE-416 - Use After Free
Exploit availability: No
DescriptionThe vulnerability allows a local user to escalate privileges on the system.
The vulnerability exists due to a use-after-free error within the tcindex_delete() function. A local user can trigger a use-after-free error and execute arbitrary code with root privileges.
Update the affected package linux-oem-5.17 to the latest version.
Vulnerable software versionsUbuntu: 22.04
linux-image-oem-22.04a (Ubuntu package): before 5.17.0.1031.29
linux-image-oem-22.04 (Ubuntu package): before 5.17.0.1031.29
linux-image-5.17.0-1031-oem (Ubuntu package): before 5.17.0-1031.32
External linkshttp://ubuntu.com/security/notices/USN-6071-1
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU75769
Risk: Medium
CVSSv3.1: 6.6 [CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2023-1859
CWE-ID:
CWE-416 - Use After Free
Exploit availability: No
DescriptionThe vulnerability allows a malicious guest to gain access to sensitive information or perform a denial of service (DoS) attack.
The vulnerability exists due to a use-after-free error within the xen_9pfs_front_removet() function in net/9p/trans_xen.c in Xen transport for 9pfs. A malicious guest VM can trigger a use-after-free error and gain access to sensitive information of the hypervisor or crash it.
Update the affected package linux-oem-5.17 to the latest version.
Vulnerable software versionsUbuntu: 22.04
linux-image-oem-22.04a (Ubuntu package): before 5.17.0.1031.29
linux-image-oem-22.04 (Ubuntu package): before 5.17.0.1031.29
linux-image-5.17.0-1031-oem (Ubuntu package): before 5.17.0-1031.32
External linkshttp://ubuntu.com/security/notices/USN-6071-1
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU71477
Risk: Low
CVSSv3.1: 4.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2023-23455
CWE-ID:
CWE-843 - Type confusion
Exploit availability: No
DescriptionThe vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists due to a type confusion error within the atm_tc_enqueue() function in net/sched/sch_atm.c in the Linux kernel. A local user can trigger a type confusion error and perform a denial of service (DoS) attack.
Update the affected package linux-oem-5.17 to the latest version.
Vulnerable software versionsUbuntu: 22.04
linux-image-oem-22.04a (Ubuntu package): before 5.17.0.1031.29
linux-image-oem-22.04 (Ubuntu package): before 5.17.0.1031.29
linux-image-5.17.0-1031-oem (Ubuntu package): before 5.17.0-1031.32
External linkshttp://ubuntu.com/security/notices/USN-6071-1
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU73766
Risk: Low
CVSSv3.1: 6.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2023-26545
CWE-ID:
CWE-415 - Double Free
Exploit availability: No
DescriptionThe vulnerability allows a local user to escalate privileges on the system.
The vulnerability exists due to a double free in net/mpls/af_mpls.c during the renaming of a device. A local user can trigger a double free error and execute arbitrary code with elevated privileges.
Update the affected package linux-oem-5.17 to the latest version.
Vulnerable software versionsUbuntu: 22.04
linux-image-oem-22.04a (Ubuntu package): before 5.17.0.1031.29
linux-image-oem-22.04 (Ubuntu package): before 5.17.0.1031.29
linux-image-5.17.0-1031-oem (Ubuntu package): before 5.17.0-1031.32
External linkshttp://ubuntu.com/security/notices/USN-6071-1
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.