First published: Fri Feb 18 2022(Updated: )
It was discovered that the Packet network protocol implementation in the Linux kernel contained a double-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2021-22600) Jann Horn discovered a race condition in the Unix domain socket implementation in the Linux kernel that could result in a read-after-free. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2021-4083) Kirill Tkhai discovered that the XFS file system implementation in the Linux kernel did not calculate size correctly when pre-allocating space in some situations. A local attacker could use this to expose sensitive information. (CVE-2021-4155) Sushma Venkatesh Reddy discovered that the Intel i915 graphics driver in the Linux kernel did not perform a GPU TLB flush in some situations. A local attacker could use this to cause a denial of service or possibly execute arbitrary code. (CVE-2022-0330) It was discovered that the VMware Virtual GPU driver in the Linux kernel did not properly handle certain failure conditions, leading to a stale entry in the file descriptor table. A local attacker could use this to expose sensitive information or possibly gain administrative privileges. (CVE-2022-22942)
Affected Software | Affected Version | How to fix |
---|---|---|
All of | ||
ubuntu/linux-image-5.13.0-30-lowlatency | <5.13.0-30.33~20.04.1 | 5.13.0-30.33~20.04.1 |
Ubuntu Ubuntu | =20.04 | |
All of | ||
ubuntu/linux-image-generic-hwe-20.04 | <5.13.0.30.33~20.04.17 | 5.13.0.30.33~20.04.17 |
Ubuntu Ubuntu | =20.04 | |
All of | ||
ubuntu/linux-image-5.13.0-30-generic-lpae | <5.13.0-30.33~20.04.1 | 5.13.0-30.33~20.04.1 |
Ubuntu Ubuntu | =20.04 | |
All of | ||
ubuntu/linux-image-generic-lpae-hwe-20.04 | <5.13.0.30.33~20.04.17 | 5.13.0.30.33~20.04.17 |
Ubuntu Ubuntu | =20.04 | |
All of | ||
ubuntu/linux-image-lowlatency-hwe-20.04 | <5.13.0.30.33~20.04.17 | 5.13.0.30.33~20.04.17 |
Ubuntu Ubuntu | =20.04 | |
All of | ||
ubuntu/linux-image-virtual-hwe-20.04 | <5.13.0.30.33~20.04.17 | 5.13.0.30.33~20.04.17 |
Ubuntu Ubuntu | =20.04 | |
All of | ||
ubuntu/linux-image-5.13.0-30-generic | <5.13.0-30.33~20.04.1 | 5.13.0-30.33~20.04.1 |
Ubuntu Ubuntu | =20.04 | |
All of | ||
ubuntu/linux-image-5.13.0-30-generic-64k | <5.13.0-30.33~20.04.1 | 5.13.0-30.33~20.04.1 |
Ubuntu Ubuntu | =20.04 | |
All of | ||
ubuntu/linux-image-generic-64k-hwe-20.04 | <5.13.0.30.33~20.04.17 | 5.13.0.30.33~20.04.17 |
Ubuntu Ubuntu | =20.04 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
(Contains the following vulnerabilities)
The severity of CVE-2021-22600 is high.
A local attacker can exploit CVE-2021-22600 to cause a denial of service (system crash) or possibly execute arbitrary code.
The remedy for CVE-2021-22600 is to update to version 5.13.0-30.33~20.04.1 of linux-image-5.13.0-30-lowlatency.
The severity of CVE-2021-4155 is unknown.
The remedy for CVE-2021-4155 is unknown.