1. Home
  2. Security Advisories
  3. Ubuntu
  4. USN-5754-2

[USN-5754-2] Linux kernel (Azure) vulnerabilities

Severity High
Affected Packages 17
CVEs 8
Info Packages Vulnerabilities

Several security issues were fixed in the Linux kernel.

It was discovered that the NFSD implementation in the Linux kernel did not
properly handle some RPC messages, leading to a buffer overflow. A remote
attacker could use this to cause a denial of service (system crash) or
possibly execute arbitrary code. (CVE-2022-43945)

It was discovered that a memory leak existed in the IPv6 implementation of
the Linux kernel. A local attacker could use this to cause a denial of
service (memory exhaustion). (CVE-2022-3524)

It was discovered that a race condition existed in the Bluetooth subsystem
in the Linux kernel, leading to a use-after-free vulnerability. A local
attacker could use this to cause a denial of service (system crash) or
possibly execute arbitrary code. (CVE-2022-3564)

It was discovered that the ISDN implementation of the Linux kernel
contained a use-after-free vulnerability. A privileged user could use this
to cause a denial of service (system crash) or possibly execute arbitrary
code. (CVE-2022-3565)

It was discovered that the TCP implementation in the Linux kernel contained
a data race condition. An attacker could possibly use this to cause
undesired behaviors. (CVE-2022-3566)

It was discovered that the IPv6 implementation in the Linux kernel
contained a data race condition. An attacker could possibly use this to
cause undesired behaviors. (CVE-2022-3567)

It was discovered that the Realtek RTL8152 USB Ethernet adapter driver in
the Linux kernel did not properly handle certain error conditions. A local
attacker with physical access could plug in a specially crafted USB device
to cause a denial of service (memory exhaustion). (CVE-2022-3594)

It was discovered that a null pointer dereference existed in the NILFS2
file system implementation in the Linux kernel. A local attacker could use
this to cause a denial of service (system crash). (CVE-2022-3621)

Package Affected Version
pkg:deb/ubuntu/linux-tools-azure?distro=kinetic < 5.19.0.1013.10
pkg:deb/ubuntu/linux-tools-5.19.0-1013-azure?distro=kinetic < 5.19.0-1013.14
pkg:deb/ubuntu/linux-modules-extra-azure?distro=kinetic < 5.19.0.1013.10
pkg:deb/ubuntu/linux-modules-extra-5.19.0-1013-azure?distro=kinetic < 5.19.0-1013.14
pkg:deb/ubuntu/linux-modules-5.19.0-1013-azure?distro=kinetic < 5.19.0-1013.14
pkg:deb/ubuntu/linux-image-unsigned-5.19.0-1013-azure?distro=kinetic < 5.19.0-1013.14
pkg:deb/ubuntu/linux-image-azure?distro=kinetic < 5.19.0.1013.10
pkg:deb/ubuntu/linux-image-5.19.0-1013-azure?distro=kinetic < 5.19.0-1013.14
pkg:deb/ubuntu/linux-headers-azure?distro=kinetic < 5.19.0.1013.10
pkg:deb/ubuntu/linux-headers-5.19.0-1013-azure?distro=kinetic < 5.19.0-1013.14
pkg:deb/ubuntu/linux-cloud-tools-azure?distro=kinetic < 5.19.0.1013.10
pkg:deb/ubuntu/linux-cloud-tools-5.19.0-1013-azure?distro=kinetic < 5.19.0-1013.14
pkg:deb/ubuntu/linux-buildinfo-5.19.0-1013-azure?distro=kinetic < 5.19.0-1013.14
pkg:deb/ubuntu/linux-azure?distro=kinetic < 5.19.0.1013.10
pkg:deb/ubuntu/linux-azure-tools-5.19.0-1013?distro=kinetic < 5.19.0-1013.14
pkg:deb/ubuntu/linux-azure-headers-5.19.0-1013?distro=kinetic < 5.19.0-1013.14
pkg:deb/ubuntu/linux-azure-cloud-tools-5.19.0-1013?distro=kinetic < 5.19.0-1013.14
ID
USN-5754-2
Severity
high
Severity from
CVE-2022-3565
URL
https://ubuntu.com/security/notices/USN-5754-2
Published
2022-12-12T13:15:35
(21 months ago)
Modified
2022-12-12T13:15:35
(21 months ago)
Other Advisories
Type Package URL Namespace Name / Product Version Distribution / Platform Arch Patch / Fix
Affected pkg:deb/ubuntu/linux-tools-azure?distro=kinetic ubuntu linux-tools-azure < 5.19.0.1013.10 kinetic
Affected pkg:deb/ubuntu/linux-tools-5.19.0-1013-azure?distro=kinetic ubuntu linux-tools-5.19.0-1013-azure < 5.19.0-1013.14 kinetic
Affected pkg:deb/ubuntu/linux-modules-extra-azure?distro=kinetic ubuntu linux-modules-extra-azure < 5.19.0.1013.10 kinetic
Affected pkg:deb/ubuntu/linux-modules-extra-5.19.0-1013-azure?distro=kinetic ubuntu linux-modules-extra-5.19.0-1013-azure < 5.19.0-1013.14 kinetic
Affected pkg:deb/ubuntu/linux-modules-5.19.0-1013-azure?distro=kinetic ubuntu linux-modules-5.19.0-1013-azure < 5.19.0-1013.14 kinetic
Affected pkg:deb/ubuntu/linux-image-unsigned-5.19.0-1013-azure?distro=kinetic ubuntu linux-image-unsigned-5.19.0-1013-azure < 5.19.0-1013.14 kinetic
Affected pkg:deb/ubuntu/linux-image-azure?distro=kinetic ubuntu linux-image-azure < 5.19.0.1013.10 kinetic
Affected pkg:deb/ubuntu/linux-image-5.19.0-1013-azure?distro=kinetic ubuntu linux-image-5.19.0-1013-azure < 5.19.0-1013.14 kinetic
Affected pkg:deb/ubuntu/linux-headers-azure?distro=kinetic ubuntu linux-headers-azure < 5.19.0.1013.10 kinetic
Affected pkg:deb/ubuntu/linux-headers-5.19.0-1013-azure?distro=kinetic ubuntu linux-headers-5.19.0-1013-azure < 5.19.0-1013.14 kinetic
Affected pkg:deb/ubuntu/linux-cloud-tools-azure?distro=kinetic ubuntu linux-cloud-tools-azure < 5.19.0.1013.10 kinetic
Affected pkg:deb/ubuntu/linux-cloud-tools-5.19.0-1013-azure?distro=kinetic ubuntu linux-cloud-tools-5.19.0-1013-azure < 5.19.0-1013.14 kinetic
Affected pkg:deb/ubuntu/linux-buildinfo-5.19.0-1013-azure?distro=kinetic ubuntu linux-buildinfo-5.19.0-1013-azure < 5.19.0-1013.14 kinetic
Affected pkg:deb/ubuntu/linux-azure?distro=kinetic ubuntu linux-azure < 5.19.0.1013.10 kinetic
Affected pkg:deb/ubuntu/linux-azure-tools-5.19.0-1013?distro=kinetic ubuntu linux-azure-tools-5.19.0-1013 < 5.19.0-1013.14 kinetic
Affected pkg:deb/ubuntu/linux-azure-headers-5.19.0-1013?distro=kinetic ubuntu linux-azure-headers-5.19.0-1013 < 5.19.0-1013.14 kinetic
Affected pkg:deb/ubuntu/linux-azure-cloud-tools-5.19.0-1013?distro=kinetic ubuntu linux-azure-cloud-tools-5.19.0-1013 < 5.19.0-1013.14 kinetic
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories Exploits PoC Pubblication Date Modification Date
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories PoC Pubblication Date Modification Date