[USN-5815-1] Linux kernel (BlueField) vulnerabilities
Several security issues were fixed in the Linux kernel.
It was discovered that a race condition existed in the Android Binder IPC
subsystem in the Linux kernel, leading to a use-after-free vulnerability. A
local attacker could use this to cause a denial of service (system crash)
or possibly execute arbitrary code. (CVE-2022-20421)
David Leadbeater discovered that the netfilter IRC protocol tracking
implementation in the Linux Kernel incorrectly handled certain message
payloads in some situations. A remote attacker could possibly use this to
cause a denial of service or bypass firewall filtering. (CVE-2022-2663)
It was discovered that the Intel 740 frame buffer driver in the Linux
kernel contained a divide by zero vulnerability. A local attacker could use
this to cause a denial of service (system crash). (CVE-2022-3061)
It was discovered that the sound subsystem in the Linux kernel contained a
race condition in some situations. A local attacker could use this to cause
a denial of service (system crash). (CVE-2022-3303)
Gwnaun Jung discovered that the SFB packet scheduling implementation in the
Linux kernel contained a use-after-free vulnerability. A local attacker
could use this to cause a denial of service (system crash) or possibly
execute arbitrary code. (CVE-2022-3586)
It was discovered that the NILFS2 file system implementation in the Linux
kernel did not properly deallocate memory in certain error conditions. An
attacker could use this to cause a denial of service (memory exhaustion).
(CVE-2022-3646)
Hyunwoo Kim discovered that an integer overflow vulnerability existed in
the PXA3xx graphics driver in the Linux kernel. A local attacker could
possibly use this to cause a denial of service (system crash).
(CVE-2022-39842)
It was discovered that a race condition existed in the EFI capsule loader
driver in the Linux kernel, leading to a use-after-free vulnerability. A
local attacker could use this to cause a denial of service (system crash)
or possibly execute arbitrary code. (CVE-2022-40307)
Zheng Wang and Zhuorao Yang discovered that the RealTek RTL8712U wireless
driver in the Linux kernel contained a use-after-free vulnerability. A
local attacker could use this to cause a denial of service (system crash)
or possibly execute arbitrary code. (CVE-2022-4095)
It was discovered that the USB monitoring (usbmon) component in the Linux
kernel did not properly set permissions on memory mapped in to user space
processes. A local attacker could use this to cause a denial of service
(system crash) or possibly execute arbitrary code. (CVE-2022-43750)
Jann Horn discovered a race condition existed in the Linux kernel when
unmapping VMAs in certain situations, resulting in possible use-after-free
vulnerabilities. A local attacker could possibly use this to cause a denial
of service (system crash) or execute arbitrary code. (CVE-2022-39188)
Package | Affected Version |
---|---|
pkg:deb/ubuntu/linux-tools-bluefield?distro=focal | < 5.4.0.1054.50 |
pkg:deb/ubuntu/linux-tools-5.4.0-1054-bluefield?distro=focal | < 5.4.0-1054.60 |
pkg:deb/ubuntu/linux-modules-5.4.0-1054-bluefield?distro=focal | < 5.4.0-1054.60 |
pkg:deb/ubuntu/linux-image-unsigned-5.4.0-1054-bluefield?distro=focal | < 5.4.0-1054.60 |
pkg:deb/ubuntu/linux-image-bluefield?distro=focal | < 5.4.0.1054.50 |
pkg:deb/ubuntu/linux-image-5.4.0-1054-bluefield?distro=focal | < 5.4.0-1054.60 |
pkg:deb/ubuntu/linux-headers-bluefield?distro=focal | < 5.4.0.1054.50 |
pkg:deb/ubuntu/linux-headers-5.4.0-1054-bluefield?distro=focal | < 5.4.0-1054.60 |
pkg:deb/ubuntu/linux-buildinfo-5.4.0-1054-bluefield?distro=focal | < 5.4.0-1054.60 |
pkg:deb/ubuntu/linux-bluefield?distro=focal | < 5.4.0.1054.50 |
pkg:deb/ubuntu/linux-bluefield-tools-5.4.0-1054?distro=focal | < 5.4.0-1054.60 |
pkg:deb/ubuntu/linux-bluefield-headers-5.4.0-1054?distro=focal | < 5.4.0-1054.60 |
- ID
- USN-5815-1
- Severity
- high
- Severity from
- CVE-2022-20421
- URL
- https://ubuntu.com/security/notices/USN-5815-1
- Published
-
2023-01-19T20:07:11
(20 months ago) - Modified
-
2023-01-19T20:07:11
(20 months ago) - Other Advisories
-
- ALAS-2022-1636
- ALAS-2022-1645
- ALAS2-2022-1852
- ALAS2-2022-1876
- ALSA-2023:2458
- ALSA-2023:2951
- DSA-5257-1
- ELSA-2022-10065
- ELSA-2022-10108
- ELSA-2023-12117
- ELSA-2023-12118
- ELSA-2023-12323
- ELSA-2023-1987
- ELSA-2023-2458
- ELSA-2023-2951
- MS:CVE-2022-3303
- MS:CVE-2022-3586
- MS:CVE-2022-39188
- MS:CVE-2022-39842
- MS:CVE-2022-40307
- MS:CVE-2022-43750
- RHSA-2023:1987
- RHSA-2023:1988
- RHSA-2023:2148
- RHSA-2023:2458
- RHSA-2023:2736
- RHSA-2023:2951
- SSA:2022-333-01
- SUSE-SU-2022:3263-1
- SUSE-SU-2022:3264-1
- SUSE-SU-2022:3288-1
- SUSE-SU-2022:3291-1
- SUSE-SU-2022:3293-1
- SUSE-SU-2022:3294-1
- SUSE-SU-2022:3342-1
- SUSE-SU-2022:3346-1
- SUSE-SU-2022:3350-1
- SUSE-SU-2022:3359-1
- SUSE-SU-2022:3360-1
- SUSE-SU-2022:3362-1
- SUSE-SU-2022:3366-1
- SUSE-SU-2022:3368-1
- SUSE-SU-2022:3369-1
- SUSE-SU-2022:3370-1
- SUSE-SU-2022:3372-1
- SUSE-SU-2022:3373-1
- SUSE-SU-2022:3377-1
- SUSE-SU-2022:3379-1
- SUSE-SU-2022:3406-1
- SUSE-SU-2022:3407-1
- SUSE-SU-2022:3408-1
- SUSE-SU-2022:3409-1
- SUSE-SU-2022:3412-1
- SUSE-SU-2022:3415-1
- SUSE-SU-2022:3422-1
- SUSE-SU-2022:3424-1
- SUSE-SU-2022:3432-1
- SUSE-SU-2022:3433-1
- SUSE-SU-2022:3445-1
- SUSE-SU-2022:3450-1
- SUSE-SU-2022:3463-1
- SUSE-SU-2022:3464-1
- SUSE-SU-2022:3465-1
- SUSE-SU-2022:3476-1
- SUSE-SU-2022:3584-1
- SUSE-SU-2022:3585-1
- SUSE-SU-2022:3586-1
- SUSE-SU-2022:3587-1
- SUSE-SU-2022:3599-1
- SUSE-SU-2022:3609-1
- SUSE-SU-2022:3688-1
- SUSE-SU-2022:3693-1
- SUSE-SU-2022:3704-1
- SUSE-SU-2022:3775-1
- SUSE-SU-2022:3779-1
- SUSE-SU-2022:3809-1
- SUSE-SU-2022:3810-1
- SUSE-SU-2022:3844-1
- SUSE-SU-2022:3897-1
- SUSE-SU-2022:3929-1
- SUSE-SU-2022:3930-1
- SUSE-SU-2022:3998-1
- SUSE-SU-2022:4053-1
- SUSE-SU-2022:4072-1
- SUSE-SU-2022:4272-1
- SUSE-SU-2022:4273-1
- SUSE-SU-2022:4503-1
- SUSE-SU-2022:4504-1
- SUSE-SU-2022:4505-1
- SUSE-SU-2022:4506-1
- SUSE-SU-2022:4513-1
- SUSE-SU-2022:4515-1
- SUSE-SU-2022:4516-1
- SUSE-SU-2022:4517-1
- SUSE-SU-2022:4518-1
- SUSE-SU-2022:4520-1
- SUSE-SU-2022:4527-1
- SUSE-SU-2022:4528-1
- SUSE-SU-2022:4533-1
- SUSE-SU-2022:4534-1
- SUSE-SU-2022:4539-1
- SUSE-SU-2022:4543-1
- SUSE-SU-2022:4544-1
- SUSE-SU-2022:4545-1
- SUSE-SU-2022:4546-1
- SUSE-SU-2022:4550-1
- SUSE-SU-2022:4551-1
- SUSE-SU-2022:4559-1
- SUSE-SU-2022:4560-1
- SUSE-SU-2022:4561-1
- SUSE-SU-2022:4562-1
- SUSE-SU-2022:4566-1
- SUSE-SU-2022:4569-1
- SUSE-SU-2022:4573-1
- SUSE-SU-2022:4574-1
- SUSE-SU-2022:4577-1
- SUSE-SU-2022:4580-1
- SUSE-SU-2022:4585-1
- SUSE-SU-2022:4587-1
- SUSE-SU-2022:4589-1
- SUSE-SU-2022:4595-1
- SUSE-SU-2022:4611-1
- SUSE-SU-2022:4613-1
- SUSE-SU-2022:4614-1
- SUSE-SU-2022:4615-1
- SUSE-SU-2022:4616-1
- SUSE-SU-2022:4617-1
- SUSE-SU-2023:0416-1
- USN-5758-1
- USN-5790-1
- USN-5791-1
- USN-5791-2
- USN-5791-3
- USN-5792-1
- USN-5792-2
- USN-5793-1
- USN-5793-2
- USN-5793-3
- USN-5793-4
- USN-5854-1
- USN-5861-1
- USN-5862-1
- USN-5865-1
- USN-5877-1
- USN-5883-1
- USN-5913-1
- USN-5919-1
- USN-5924-1
- USN-5975-1
- USN-5976-1
- USN-6001-1
- USN-6007-1
- USN-6013-1
- USN-6014-1
- USN-6045-1
- USN-6071-1
- USN-6124-1
- USN-6247-1
- USN-6252-1
Type | Package URL | Namespace | Name / Product | Version | Distribution / Platform | Arch | Patch / Fix |
---|---|---|---|---|---|---|---|
Affected | pkg:deb/ubuntu/linux-tools-bluefield?distro=focal | ubuntu | linux-tools-bluefield | < 5.4.0.1054.50 | focal | ||
Affected | pkg:deb/ubuntu/linux-tools-5.4.0-1054-bluefield?distro=focal | ubuntu | linux-tools-5.4.0-1054-bluefield | < 5.4.0-1054.60 | focal | ||
Affected | pkg:deb/ubuntu/linux-modules-5.4.0-1054-bluefield?distro=focal | ubuntu | linux-modules-5.4.0-1054-bluefield | < 5.4.0-1054.60 | focal | ||
Affected | pkg:deb/ubuntu/linux-image-unsigned-5.4.0-1054-bluefield?distro=focal | ubuntu | linux-image-unsigned-5.4.0-1054-bluefield | < 5.4.0-1054.60 | focal | ||
Affected | pkg:deb/ubuntu/linux-image-bluefield?distro=focal | ubuntu | linux-image-bluefield | < 5.4.0.1054.50 | focal | ||
Affected | pkg:deb/ubuntu/linux-image-5.4.0-1054-bluefield?distro=focal | ubuntu | linux-image-5.4.0-1054-bluefield | < 5.4.0-1054.60 | focal | ||
Affected | pkg:deb/ubuntu/linux-headers-bluefield?distro=focal | ubuntu | linux-headers-bluefield | < 5.4.0.1054.50 | focal | ||
Affected | pkg:deb/ubuntu/linux-headers-5.4.0-1054-bluefield?distro=focal | ubuntu | linux-headers-5.4.0-1054-bluefield | < 5.4.0-1054.60 | focal | ||
Affected | pkg:deb/ubuntu/linux-buildinfo-5.4.0-1054-bluefield?distro=focal | ubuntu | linux-buildinfo-5.4.0-1054-bluefield | < 5.4.0-1054.60 | focal | ||
Affected | pkg:deb/ubuntu/linux-bluefield?distro=focal | ubuntu | linux-bluefield | < 5.4.0.1054.50 | focal | ||
Affected | pkg:deb/ubuntu/linux-bluefield-tools-5.4.0-1054?distro=focal | ubuntu | linux-bluefield-tools-5.4.0-1054 | < 5.4.0-1054.60 | focal | ||
Affected | pkg:deb/ubuntu/linux-bluefield-headers-5.4.0-1054?distro=focal | ubuntu | linux-bluefield-headers-5.4.0-1054 | < 5.4.0-1054.60 | focal |
# CVE | Description | CVSS | EPSS | EPSS Trend (30 days) | Affected Products | Weaknesses | Security Advisories | Exploits | PoC | Pubblication Date | Modification Date |
---|---|---|---|---|---|---|---|---|---|---|---|
# CVE | Description | CVSS | EPSS | EPSS Trend (30 days) | Affected Products | Weaknesses | Security Advisories | PoC | Pubblication Date | Modification Date |