USN-5353-1: Linux kernel (OEM) vulnerability
First published: Mon Mar 28 2022(Updated: )
It was discovered that the IPsec implementation in the Linux kernel did not properly allocate enough memory when performing ESP transformations, leading to a heap-based buffer overflow. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| All of | ||
| ubuntu/linux-image-5.14.0-1031-oem | <5.14.0-1031.34 | 5.14.0-1031.34 |
| Ubuntu Ubuntu | =20.04 | |
| All of | ||
| ubuntu/linux-image-oem-20.04c | <5.14.0.1031.28 | 5.14.0.1031.28 |
| Ubuntu Ubuntu | =20.04 | |
| All of | ||
| ubuntu/linux-image-oem-20.04b | <5.14.0.1031.28 | 5.14.0.1031.28 |
| Ubuntu Ubuntu | =20.04 | |
| All of | ||
| ubuntu/linux-image-oem-20.04 | <5.14.0.1031.28 | 5.14.0.1031.28 |
| Ubuntu Ubuntu | =20.04 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://ubuntu.com/security/CVE-2022-27666
- https://ubuntu.com/security/notices/USN-5357-1
- https://ubuntu.com/security/notices/USN-5358-1
- https://ubuntu.com/security/notices/USN-5357-2
- https://ubuntu.com/security/notices/USN-5358-2
- https://ubuntu.com/security/notices/USN-5368-1
- https://ubuntu.com/security/notices/USN-5377-1
- https://launchpad.net/ubuntu/+source/linux-signed-oem-5.14/5.14.0-1031.34
- https://launchpad.net/ubuntu/+source/linux-meta-oem-5.14/5.14.0.1031.28
- https://ubuntu.com/security/notices/USN-5353-1 (Advisory)
Frequently Asked Questions
What is the vulnerability ID of this Linux kernel vulnerability?
The vulnerability ID is USN-5353-1.
What is the severity of USN-5353-1?
The severity of USN-5353-1 is not mentioned in the description.
How does the vulnerability in the Linux kernel affect the system?
The vulnerability in the Linux kernel can cause a denial of service (system crash) or possibly execute arbitrary code.
Which versions of Ubuntu are affected by USN-5353-1?
The versions affected by USN-5353-1 are Ubuntu 20.04.
How can I fix the USN-5353-1 vulnerability?
To fix the USN-5353-1 vulnerability, update the affected software to version 5.14.0-1031.34 or higher.
- agent/description
- agent/event
- agent/first-publish-date
- agent/last-modified-date
- agent/references
- agent/severity
- agent/softwarecombine
- agent/tags
- agent/title
- agent/type
- agent/weakness
- collector/usn
- source/Ubuntu
- anchor-related/USN-5357-1
- anchor-related/USN-5358-1
- anchor-related/USN-5357-2
- anchor-related/USN-5358-2
- anchor-related/USN-5368-1
- anchor-related/USN-5377-1
- agent/software-canonical-lookup
- package-manager/ubuntu
- vendor/ubuntu
- canonical/ubuntu ubuntu
- version/ubuntu ubuntu/20.04