CVE-2022-24959: Medium severity Linux Linux kernel vulnerability

Q: What is the severity of CVE-2022-24959?

CVE-2022-24959 has a moderate severity due to its memory leak vulnerability in the Linux kernel.

Q: How do I fix CVE-2022-24959?

To fix CVE-2022-24959, update the Linux kernel to versions 5.16.5 or later, or apply the latest patches provided by your distribution.

Q: Which versions of the Linux kernel are affected by CVE-2022-24959?

CVE-2022-24959 affects the Linux kernel versions prior to 5.16.5.

Q: Is CVE-2022-24959 present in Debian Linux?

Yes, CVE-2022-24959 is present in Debian Linux versions 9.0, 10.0, and 11.0 before the relevant patches are applied.

Q: What types of systems are susceptible to CVE-2022-24959?

Systems running affected versions of the Linux kernel, especially those using yam_siocdevprivate in yam.c, are susceptible to CVE-2022-24959.

Published Feb 11, 2022

Updated

An issue was discovered in the Linux kernel before 5.16.5. There is a memory leak in yamsiocdevprivate in drivers/net/hamradio/yam.c.

Affected Software

99 affected componentsFixes available

Linux Linux kernel<5.16.5

Debian Debian Linux=9.0

Debian Debian Linux=10.0

Debian Debian Linux=11.0

debian/linux<5.16.7-1

5.16.7-1

debian/linux<5.16.7-1

5.16.7-1

debian/linux<5.16.7-1

5.16.7-1

ubuntu/linux-azure<4.15.0-1137.150~14.04.1

4.15.0-1137.150~14.04.1

ubuntu/linux-aws-hwe<4.15.0-1127.136~16.04.1

4.15.0-1127.136~16.04.1

ubuntu/linux-azure<4.15.0-1137.150~16.04.1

4.15.0-1137.150~16.04.1

ubuntu/linux-gcp<4.15.0-1121.135~16.04.1

4.15.0-1121.135~16.04.1

ubuntu/linux-hwe<4.15.0-176.185~16.04.1

4.15.0-176.185~16.04.1

ubuntu/linux-oracle<4.15.0-1092.101~16.04.1

4.15.0-1092.101~16.04.1

ubuntu/linux-hwe-edge*

ubuntu/linux<4.15.0-176.185

4.15.0-176.185

ubuntu/linux-aws<4.15.0-1127.136

4.15.0-1127.136

ubuntu/linux-aws-5.4<5.4.0-1072.77~18.04.1

5.4.0-1072.77~18.04.1

ubuntu/linux-azure-4.15<4.15.0-1137.150

4.15.0-1137.150

ubuntu/linux-azure-5.4<5.4.0-1077.80~18.04.1

5.4.0-1077.80~18.04.1

ubuntu/linux-dell300x<4.15.0-1041.46

4.15.0-1041.46

ubuntu/linux-gcp-4.15<4.15.0-1121.135

4.15.0-1121.135

ubuntu/linux-gcp-5.4<5.4.0-1072.77~18.04.1

5.4.0-1072.77~18.04.1

ubuntu/linux-gke-5.4<5.4.0-1068.71~18.04.1

5.4.0-1068.71~18.04.1

ubuntu/linux-gkeop-5.4<5.4.0-1039.40~18.04.1

5.4.0-1039.40~18.04.1

ubuntu/linux-hwe-5.4<5.4.0-109.123~18.04.1

5.4.0-109.123~18.04.1

ubuntu/linux-ibm-5.4<5.4.0-1020.22~18.04.1

5.4.0-1020.22~18.04.1

ubuntu/linux-kvm<4.15.0-1113.116

4.15.0-1113.116

ubuntu/linux-oracle<4.15.0-1092.101

4.15.0-1092.101

ubuntu/linux-oracle-5.4<5.4.0-1070.76~18.04.1

5.4.0-1070.76~18.04.1

ubuntu/linux-raspi-5.4<5.4.0-1059.66~18.04.1

5.4.0-1059.66~18.04.1

ubuntu/linux-raspi2<4.15.0-1108.115

4.15.0-1108.115

ubuntu/linux-snapdragon<4.15.0-1126.135

4.15.0-1126.135

ubuntu/linux-aws-5.0*

ubuntu/linux-aws-5.3*

ubuntu/linux-azure*

ubuntu/linux-azure-5.3*

ubuntu/linux-azure-edge*

ubuntu/linux-gcp*

ubuntu/linux-gcp-5.3*

ubuntu/linux-gke-4.15*

ubuntu/linux-hwe*

ubuntu/linux-hwe-edge*

ubuntu/linux-oem*

ubuntu/linux-oracle-5.0*

ubuntu/linux-oracle-5.3*

ubuntu/linux-aws-fips<4.15.0-2066.69

4.15.0-2066.69

ubuntu/linux-azure-fips<4.15.0-2048.52

4.15.0-2048.52

ubuntu/linux-fips<4.15.0-1084.93

4.15.0-1084.93

ubuntu/linux-gcp-fips<4.15.0-2031.34

4.15.0-2031.34

ubuntu/linux-fips*

ubuntu/linux<5.4.0-109.123

5.4.0-109.123

ubuntu/linux-aws<5.4.0-1072.77

5.4.0-1072.77

ubuntu/linux-aws-5.13<5.13.0-1022.24~20.04.1

5.13.0-1022.24~20.04.1

ubuntu/linux-azure<5.4.0-1077.80

5.4.0-1077.80

ubuntu/linux-azure-5.13<5.13.0-1022.26~20.04.1

5.13.0-1022.26~20.04.1

ubuntu/linux-bluefield<5.4.0-1035.38

5.4.0-1035.38

ubuntu/linux-gcp<5.4.0-1072.77

5.4.0-1072.77

ubuntu/linux-gcp-5.13<5.13.0-1024.29~20.04.1

5.13.0-1024.29~20.04.1

ubuntu/linux-gke<5.4.0-1068.71

5.4.0-1068.71

ubuntu/linux-gkeop<5.4.0-1039.40

5.4.0-1039.40

ubuntu/linux-hwe-5.13<5.13.0-40.45~20.04.1

5.13.0-40.45~20.04.1

ubuntu/linux-ibm<5.4.0-1020.22

5.4.0-1020.22

ubuntu/linux-intel-5.13<5.13.0-1011.11

5.13.0-1011.11

ubuntu/linux-iot<5.4.0-1004.6

5.4.0-1004.6

ubuntu/linux-kvm<5.4.0-1062.65

5.4.0-1062.65

ubuntu/linux-oem-5.14<5.14.0-1024.26

5.14.0-1024.26

ubuntu/linux-oracle<5.4.0-1070.76

5.4.0-1070.76

ubuntu/linux-oracle-5.13<5.13.0-1027.32~20.04.1

5.13.0-1027.32~20.04.1

ubuntu/linux-raspi<5.4.0-1059.67

5.4.0-1059.67

ubuntu/linux-aws-5.11*

ubuntu/linux-aws-5.8*

ubuntu/linux-azure-5.11*

ubuntu/linux-azure-5.8*

ubuntu/linux-gcp-5.11*

ubuntu/linux-gcp-5.8*

ubuntu/linux-hwe-5.11*

ubuntu/linux-hwe-5.8*

ubuntu/linux-oem-5.10*

ubuntu/linux-oem-5.13*

ubuntu/linux-oem-5.6*

ubuntu/linux-oracle-5.11*

ubuntu/linux-oracle-5.8*

ubuntu/linux-raspi2*

ubuntu/linux-riscv*

ubuntu/linux-riscv-5.11*

ubuntu/linux-riscv-5.8*

ubuntu/linux-aws-fips<5.4.0-1072.77+fips1

5.4.0-1072.77+fips1

ubuntu/linux-azure-fips<5.4.0-1076.79+fips1

5.4.0-1076.79+fips1

ubuntu/linux-fips<5.4.0-1048.54

5.4.0-1048.54

ubuntu/linux-gcp-fips<5.4.0-1071.75+fips1

5.4.0-1071.75+fips1

ubuntu/linux-aws-fips*

ubuntu/linux-azure-fips*

ubuntu/linux-fips*

ubuntu/linux-gcp-fips*

ubuntu/linux-intel-iot-realtime*

ubuntu/linux-realtime*

ubuntu/linux-raspi-realtime*

ubuntu/linux-vmware*

debian/linux

6.1.176-16.1.190-16.12.107-16.12.116-17.2.15-17.3.4-1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade debian/linux to a version that resolves this vulnerability.
Fixed in 5.16.7-1
Upgrade
Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.
Fixed in 4.15.0-1137.150~14.04.1
Upgrade
Upgrade ubuntu/linux-aws-hwe to a version that resolves this vulnerability.
Fixed in 4.15.0-1127.136~16.04.1
Upgrade
Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.
Fixed in 4.15.0-1137.150~16.04.1
Upgrade
Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.
Fixed in 4.15.0-1121.135~16.04.1
Upgrade
Upgrade ubuntu/linux-hwe to a version that resolves this vulnerability.
Fixed in 4.15.0-176.185~16.04.1
Upgrade
Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.
Fixed in 4.15.0-1092.101~16.04.1
Upgrade
Upgrade ubuntu/linux to a version that resolves this vulnerability.
Fixed in 4.15.0-176.185
Upgrade
Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.
Fixed in 4.15.0-1127.136
Upgrade
Upgrade ubuntu/linux-aws-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1072.77~18.04.1
Upgrade
Upgrade ubuntu/linux-azure-4.15 to a version that resolves this vulnerability.
Fixed in 4.15.0-1137.150
Upgrade
Upgrade ubuntu/linux-azure-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1077.80~18.04.1
Upgrade
Upgrade ubuntu/linux-dell300x to a version that resolves this vulnerability.
Fixed in 4.15.0-1041.46
Upgrade
Upgrade ubuntu/linux-gcp-4.15 to a version that resolves this vulnerability.
Fixed in 4.15.0-1121.135
Upgrade
Upgrade ubuntu/linux-gcp-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1072.77~18.04.1
Upgrade
Upgrade ubuntu/linux-gke-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1068.71~18.04.1
Upgrade
Upgrade ubuntu/linux-gkeop-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1039.40~18.04.1
Upgrade
Upgrade ubuntu/linux-hwe-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-109.123~18.04.1
Upgrade
Upgrade ubuntu/linux-ibm-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1020.22~18.04.1
Upgrade
Upgrade ubuntu/linux-kvm to a version that resolves this vulnerability.
Fixed in 4.15.0-1113.116
Upgrade
Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.
Fixed in 4.15.0-1092.101
Upgrade
Upgrade ubuntu/linux-oracle-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1070.76~18.04.1
Upgrade
Upgrade ubuntu/linux-raspi-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1059.66~18.04.1
Upgrade
Upgrade ubuntu/linux-raspi2 to a version that resolves this vulnerability.
Fixed in 4.15.0-1108.115
Upgrade
Upgrade ubuntu/linux-snapdragon to a version that resolves this vulnerability.
Fixed in 4.15.0-1126.135
Upgrade
Upgrade ubuntu/linux-aws-fips to a version that resolves this vulnerability.
Fixed in 4.15.0-2066.69
Upgrade
Upgrade ubuntu/linux-azure-fips to a version that resolves this vulnerability.
Fixed in 4.15.0-2048.52
Upgrade
Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.
Fixed in 4.15.0-1084.93
Upgrade
Upgrade ubuntu/linux-gcp-fips to a version that resolves this vulnerability.
Fixed in 4.15.0-2031.34
Upgrade
Upgrade ubuntu/linux to a version that resolves this vulnerability.
Fixed in 5.4.0-109.123
Upgrade
Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.
Fixed in 5.4.0-1072.77
Upgrade
Upgrade ubuntu/linux-aws-5.13 to a version that resolves this vulnerability.
Fixed in 5.13.0-1022.24~20.04.1
Upgrade
Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.
Fixed in 5.4.0-1077.80
Upgrade
Upgrade ubuntu/linux-azure-5.13 to a version that resolves this vulnerability.
Fixed in 5.13.0-1022.26~20.04.1
Upgrade
Upgrade ubuntu/linux-bluefield to a version that resolves this vulnerability.
Fixed in 5.4.0-1035.38
Upgrade
Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.
Fixed in 5.4.0-1072.77
Upgrade
Upgrade ubuntu/linux-gcp-5.13 to a version that resolves this vulnerability.
Fixed in 5.13.0-1024.29~20.04.1
Upgrade
Upgrade ubuntu/linux-gke to a version that resolves this vulnerability.
Fixed in 5.4.0-1068.71
Upgrade
Upgrade ubuntu/linux-gkeop to a version that resolves this vulnerability.
Fixed in 5.4.0-1039.40
Upgrade
Upgrade ubuntu/linux-hwe-5.13 to a version that resolves this vulnerability.
Fixed in 5.13.0-40.45~20.04.1
Upgrade
Upgrade ubuntu/linux-ibm to a version that resolves this vulnerability.
Fixed in 5.4.0-1020.22
Upgrade
Upgrade ubuntu/linux-intel-5.13 to a version that resolves this vulnerability.
Fixed in 5.13.0-1011.11
Upgrade
Upgrade ubuntu/linux-iot to a version that resolves this vulnerability.
Fixed in 5.4.0-1004.6
Upgrade
Upgrade ubuntu/linux-kvm to a version that resolves this vulnerability.
Fixed in 5.4.0-1062.65
Upgrade
Upgrade ubuntu/linux-oem-5.14 to a version that resolves this vulnerability.
Fixed in 5.14.0-1024.26
Upgrade
Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.
Fixed in 5.4.0-1070.76
Upgrade
Upgrade ubuntu/linux-oracle-5.13 to a version that resolves this vulnerability.
Fixed in 5.13.0-1027.32~20.04.1
Upgrade
Upgrade ubuntu/linux-raspi to a version that resolves this vulnerability.
Fixed in 5.4.0-1059.67
Upgrade
Upgrade ubuntu/linux-aws-fips to a version that resolves this vulnerability.
Fixed in 5.4.0-1072.77+fips1
Upgrade
Upgrade ubuntu/linux-azure-fips to a version that resolves this vulnerability.
Fixed in 5.4.0-1076.79+fips1
Upgrade
Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.
Fixed in 5.4.0-1048.54
Upgrade
Upgrade ubuntu/linux-gcp-fips to a version that resolves this vulnerability.
Fixed in 5.4.0-1071.75+fips1
Upgrade
Upgrade debian/linux to a version that resolves this vulnerability.
Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.116-1Fixed in 7.2.15-1Fixed in 7.3.4-1
Upgrade
Upgrade Linux kernel to a version that resolves this vulnerability.
Fixed in 5.16.5

Event History

Feb 11, 2022

CVE Published

via MITRE·04:21 AM

Data Sourced

via MITRE·04:21 AM

Description

Data Sourced

via OSV·06:15 AM

DescriptionSeverityAffected Software

Parent advisories

This vulnerability appears in the following advisories.

Peer vulnerabilities

Found alongside the following vulnerabilities.

DLA-2941-1

Frequently Asked Questions

What is the severity of CVE-2022-24959?

CVE-2022-24959 has a moderate severity due to its memory leak vulnerability in the Linux kernel.

How do I fix CVE-2022-24959?

To fix CVE-2022-24959, update the Linux kernel to versions 5.16.5 or later, or apply the latest patches provided by your distribution.

Which versions of the Linux kernel are affected by CVE-2022-24959?

CVE-2022-24959 affects the Linux kernel versions prior to 5.16.5.

Is CVE-2022-24959 present in Debian Linux?

Yes, CVE-2022-24959 is present in Debian Linux versions 9.0, 10.0, and 11.0 before the relevant patches are applied.

What types of systems are susceptible to CVE-2022-24959?

Systems running affected versions of the Linux kernel, especially those using yam_siocdevprivate in yam.c, are susceptible to CVE-2022-24959.

CVE-2022-24959: Medium severity Linux Linux kernel vulnerability

Affected Software

Remediation

Event History

Parent advisories

Peer vulnerabilities

Frequently Asked Questions

What is the severity of CVE-2022-24959?

How do I fix CVE-2022-24959?

Which versions of the Linux kernel are affected by CVE-2022-24959?

Is CVE-2022-24959 present in Debian Linux?

What types of systems are susceptible to CVE-2022-24959?

Company

Resources

Contact