Missing initialization of resource in Linux kernel - CVE-2022-0382
Published: May 24, 2022 / Updated: May 24, 2022
Vulnerability identifier: #VU63571
CSH Severity: Low
CVSS v4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2022-0382
CWE-ID: CWE-909
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local user to gain access to sensitive information.
The vulnerability exists due to uninitialized memory in the Linux kernel's TIPC protocol subsystem. A local user can send a TIPC datagram to one or more destinations and read some kernel memory.
The vulnerability exists due to uninitialized memory in the Linux kernel's TIPC protocol subsystem. A local user can send a TIPC datagram to one or more destinations and read some kernel memory.
Affected software
Linux kernel
Ubuntu
linux-image-5.13.0-37-generic (Ubuntu package)
linux-image-5.13.0-37-lowlatency (Ubuntu package)
linux-image-5.13.0-37-generic-lpae (Ubuntu package)
linux-image-5.13.0-37-generic-64k (Ubuntu package)
linux-image-generic-64k-hwe-20.04 (Ubuntu package)
linux-image-virtual-hwe-20.04 (Ubuntu package)
linux-image-lowlatency-hwe-20.04 (Ubuntu package)
linux-image-generic-lpae-hwe-20.04 (Ubuntu package)
linux-image-generic-hwe-20.04 (Ubuntu package)
linux-image-generic-lpae (Ubuntu package)
linux-image-lowlatency (Ubuntu package)
linux-image-generic (Ubuntu package)
linux-image-generic-64k (Ubuntu package)
linux-image-virtual (Ubuntu package)
linux-image-oem-20.04 (Ubuntu package)
linux-image-kvm (Ubuntu package)
linux-image-5.13.0-1018-kvm (Ubuntu package)
linux-image-aws (Ubuntu package)
linux-image-5.13.0-1019-aws (Ubuntu package)
linux-image-gke (Ubuntu package)
linux-image-gcp (Ubuntu package)
linux-image-5.13.0-1021-azure (Ubuntu package)
linux-image-azure (Ubuntu package)
linux-image-5.13.0-1021-gcp (Ubuntu package)
linux-image-5.13.0-1022-raspi (Ubuntu package)
linux-image-5.13.0-1022-raspi-nolpae (Ubuntu package)
linux-image-raspi (Ubuntu package)
linux-image-raspi-nolpae (Ubuntu package)
linux-image-oracle (Ubuntu package)
linux-image-5.13.0-1023-oracle (Ubuntu package)
linux-image-5.13.0-1025-oracle (Ubuntu package)
linux-image-oem-20.04d (Ubuntu package)
linux-image-5.14.0-1022-oem (Ubuntu package)
Ubuntu
linux-image-5.13.0-37-generic (Ubuntu package)
linux-image-5.13.0-37-lowlatency (Ubuntu package)
linux-image-5.13.0-37-generic-lpae (Ubuntu package)
linux-image-5.13.0-37-generic-64k (Ubuntu package)
linux-image-generic-64k-hwe-20.04 (Ubuntu package)
linux-image-virtual-hwe-20.04 (Ubuntu package)
linux-image-lowlatency-hwe-20.04 (Ubuntu package)
linux-image-generic-lpae-hwe-20.04 (Ubuntu package)
linux-image-generic-hwe-20.04 (Ubuntu package)
linux-image-generic-lpae (Ubuntu package)
linux-image-lowlatency (Ubuntu package)
linux-image-generic (Ubuntu package)
linux-image-generic-64k (Ubuntu package)
linux-image-virtual (Ubuntu package)
linux-image-oem-20.04 (Ubuntu package)
linux-image-kvm (Ubuntu package)
linux-image-5.13.0-1018-kvm (Ubuntu package)
linux-image-aws (Ubuntu package)
linux-image-5.13.0-1019-aws (Ubuntu package)
linux-image-gke (Ubuntu package)
linux-image-gcp (Ubuntu package)
linux-image-5.13.0-1021-azure (Ubuntu package)
linux-image-azure (Ubuntu package)
linux-image-5.13.0-1021-gcp (Ubuntu package)
linux-image-5.13.0-1022-raspi (Ubuntu package)
linux-image-5.13.0-1022-raspi-nolpae (Ubuntu package)
linux-image-raspi (Ubuntu package)
linux-image-raspi-nolpae (Ubuntu package)
linux-image-oracle (Ubuntu package)
linux-image-5.13.0-1023-oracle (Ubuntu package)
linux-image-5.13.0-1025-oracle (Ubuntu package)
linux-image-oem-20.04d (Ubuntu package)
linux-image-5.14.0-1022-oem (Ubuntu package)
How to mitigate CVE-2022-0382
Install updates from vendor's website.
Linux kernel - update to 5.17 rc1
linux-image-5.13.0-37-generic (Ubuntu package) - addressed in versions 5.13.0-37.42, 5.13.0-37.42~20.04.1
linux-image-5.13.0-37-lowlatency (Ubuntu package) - addressed in versions 5.13.0-37.42, 5.13.0-37.42~20.04.1
linux-image-5.13.0-37-generic-lpae (Ubuntu package) - addressed in versions 5.13.0-37.42, 5.13.0-37.42~20.04.1
linux-image-5.13.0-37-generic-64k (Ubuntu package) - addressed in versions 5.13.0-37.42, 5.13.0-37.42~20.04.1
linux-image-generic-64k-hwe-20.04 (Ubuntu package) - update to 5.13.0.37.42~20.04.22
linux-image-virtual-hwe-20.04 (Ubuntu package) - update to 5.13.0.37.42~20.04.22
linux-image-lowlatency-hwe-20.04 (Ubuntu package) - update to 5.13.0.37.42~20.04.22
linux-image-generic-lpae-hwe-20.04 (Ubuntu package) - update to 5.13.0.37.42~20.04.22
linux-image-generic-hwe-20.04 (Ubuntu package) - update to 5.13.0.37.42~20.04.22
linux-image-generic-lpae (Ubuntu package) - update to 5.13.0.37.46
linux-image-lowlatency (Ubuntu package) - update to 5.13.0.37.46
linux-image-generic (Ubuntu package) - update to 5.13.0.37.46
linux-image-generic-64k (Ubuntu package) - update to 5.13.0.37.46
linux-image-virtual (Ubuntu package) - update to 5.13.0.37.46
linux-image-oem-20.04 (Ubuntu package) - update to 5.13.0.37.46
linux-image-kvm (Ubuntu package) - update to 5.13.0.1018.18
linux-image-5.13.0-1018-kvm (Ubuntu package) - update to 5.13.0-1018.19
linux-image-aws (Ubuntu package) - addressed in versions 5.13.0.1019.20, 5.13.0.1019.21~20.04.12
linux-image-5.13.0-1019-aws (Ubuntu package) - addressed in versions 5.13.0-1019.21, 5.13.0-1019.21~20.04.1
linux-image-gke (Ubuntu package) - update to 5.13.0.1021.19
linux-image-gcp (Ubuntu package) - addressed in versions 5.13.0.1021.19, 5.13.0.1021.25~20.04.1
linux-image-5.13.0-1021-azure (Ubuntu package) - update to 5.13.0-1021.24~20.04.1
linux-image-azure (Ubuntu package) - update to 5.13.0.1021.24~20.04.10
linux-image-5.13.0-1021-gcp (Ubuntu package) - addressed in versions 5.13.0-1021.25, 5.13.0-1021.25~20.04.1
linux-image-5.13.0-1022-raspi (Ubuntu package) - update to 5.13.0-1022.24
linux-image-5.13.0-1022-raspi-nolpae (Ubuntu package) - update to 5.13.0-1022.24
linux-image-raspi (Ubuntu package) - update to 5.13.0.1022.27
linux-image-raspi-nolpae (Ubuntu package) - update to 5.13.0.1022.27
linux-image-oracle (Ubuntu package) - addressed in versions 5.13.0.1023.23, 5.13.0.1025.30~20.04.1
linux-image-5.13.0-1023-oracle (Ubuntu package) - update to 5.13.0-1023.28
linux-image-5.13.0-1025-oracle (Ubuntu package) - update to 5.13.0-1025.30~20.04.1
linux-image-oem-20.04d (Ubuntu package) - update to 5.14.0.1022.19
linux-image-5.14.0-1022-oem (Ubuntu package) - update to 5.14.0-1022.24
linux-image-5.13.0-37-generic (Ubuntu package) - addressed in versions 5.13.0-37.42, 5.13.0-37.42~20.04.1
linux-image-5.13.0-37-lowlatency (Ubuntu package) - addressed in versions 5.13.0-37.42, 5.13.0-37.42~20.04.1
linux-image-5.13.0-37-generic-lpae (Ubuntu package) - addressed in versions 5.13.0-37.42, 5.13.0-37.42~20.04.1
linux-image-5.13.0-37-generic-64k (Ubuntu package) - addressed in versions 5.13.0-37.42, 5.13.0-37.42~20.04.1
linux-image-generic-64k-hwe-20.04 (Ubuntu package) - update to 5.13.0.37.42~20.04.22
linux-image-virtual-hwe-20.04 (Ubuntu package) - update to 5.13.0.37.42~20.04.22
linux-image-lowlatency-hwe-20.04 (Ubuntu package) - update to 5.13.0.37.42~20.04.22
linux-image-generic-lpae-hwe-20.04 (Ubuntu package) - update to 5.13.0.37.42~20.04.22
linux-image-generic-hwe-20.04 (Ubuntu package) - update to 5.13.0.37.42~20.04.22
linux-image-generic-lpae (Ubuntu package) - update to 5.13.0.37.46
linux-image-lowlatency (Ubuntu package) - update to 5.13.0.37.46
linux-image-generic (Ubuntu package) - update to 5.13.0.37.46
linux-image-generic-64k (Ubuntu package) - update to 5.13.0.37.46
linux-image-virtual (Ubuntu package) - update to 5.13.0.37.46
linux-image-oem-20.04 (Ubuntu package) - update to 5.13.0.37.46
linux-image-kvm (Ubuntu package) - update to 5.13.0.1018.18
linux-image-5.13.0-1018-kvm (Ubuntu package) - update to 5.13.0-1018.19
linux-image-aws (Ubuntu package) - addressed in versions 5.13.0.1019.20, 5.13.0.1019.21~20.04.12
linux-image-5.13.0-1019-aws (Ubuntu package) - addressed in versions 5.13.0-1019.21, 5.13.0-1019.21~20.04.1
linux-image-gke (Ubuntu package) - update to 5.13.0.1021.19
linux-image-gcp (Ubuntu package) - addressed in versions 5.13.0.1021.19, 5.13.0.1021.25~20.04.1
linux-image-5.13.0-1021-azure (Ubuntu package) - update to 5.13.0-1021.24~20.04.1
linux-image-azure (Ubuntu package) - update to 5.13.0.1021.24~20.04.10
linux-image-5.13.0-1021-gcp (Ubuntu package) - addressed in versions 5.13.0-1021.25, 5.13.0-1021.25~20.04.1
linux-image-5.13.0-1022-raspi (Ubuntu package) - update to 5.13.0-1022.24
linux-image-5.13.0-1022-raspi-nolpae (Ubuntu package) - update to 5.13.0-1022.24
linux-image-raspi (Ubuntu package) - update to 5.13.0.1022.27
linux-image-raspi-nolpae (Ubuntu package) - update to 5.13.0.1022.27
linux-image-oracle (Ubuntu package) - addressed in versions 5.13.0.1023.23, 5.13.0.1025.30~20.04.1
linux-image-5.13.0-1023-oracle (Ubuntu package) - update to 5.13.0-1023.28
linux-image-5.13.0-1025-oracle (Ubuntu package) - update to 5.13.0-1025.30~20.04.1
linux-image-oem-20.04d (Ubuntu package) - update to 5.14.0.1022.19
linux-image-5.14.0-1022-oem (Ubuntu package) - update to 5.14.0-1022.24