USN-5443-1: Linux kernel vulnerabilities
Kyle Zeng discovered that the Network Queuing and Scheduling subsystem of the Linux kernel did not properly perform reference counting in some situations, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or execute arbitrary code. (CVE-2022-29581) Jann Horn discovered that the Linux kernel did not properly enforce seccomp restrictions in some situations. A local attacker could use this to bypass intended seccomp sandbox restrictions. (CVE-2022-30594)
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/linux-image-5.15.0-33-generic-lpaeto a version that resolves this vulnerability.Fixed in 5.15.0-33.34 - Upgrade
Upgrade
ubuntu/linux-image-5.15.0-1008-raspi-nolpaeto a version that resolves this vulnerability.Fixed in 5.15.0-1008.8 - Upgrade
Upgrade
ubuntu/linux-image-5.15.0-1007-azureto a version that resolves this vulnerability.Fixed in 5.15.0-1007.8 - Upgrade
Upgrade
ubuntu/linux-image-5.15.0-33-generic-64kto a version that resolves this vulnerability.Fixed in 5.15.0-33.34 - Upgrade
Upgrade
ubuntu/linux-image-virtualto a version that resolves this vulnerability.Fixed in 5.15.0.33.36 - Upgrade
Upgrade
ubuntu/linux-image-5.15.0-1006-oracleto a version that resolves this vulnerability.Fixed in 5.15.0-1006.8 - Upgrade
Upgrade
ubuntu/linux-image-generic-64kto a version that resolves this vulnerability.Fixed in 5.15.0.33.36 - Upgrade
Upgrade
ubuntu/linux-image-lowlatency-hwe-22.04to a version that resolves this vulnerability.Fixed in 5.15.0.33.35 - Upgrade
Upgrade
ubuntu/linux-image-awsto a version that resolves this vulnerability.Fixed in 5.15.0.1008.10 - Upgrade
Upgrade
ubuntu/linux-image-gke-5.15to a version that resolves this vulnerability.Fixed in 5.15.0.1005.10 - Upgrade
Upgrade
ubuntu/linux-image-5.15.0-1007-kvmto a version that resolves this vulnerability.Fixed in 5.15.0-1007.7 - Upgrade
Upgrade
ubuntu/linux-image-generic-hwe-22.04to a version that resolves this vulnerability.Fixed in 5.15.0.33.36 - Upgrade
Upgrade
ubuntu/linux-image-ibmto a version that resolves this vulnerability.Fixed in 5.15.0.1004.5 - Upgrade
Upgrade
ubuntu/linux-image-5.15.0-1008-raspito a version that resolves this vulnerability.Fixed in 5.15.0-1008.8 - Upgrade
Upgrade
ubuntu/linux-image-virtual-hwe-22.04to a version that resolves this vulnerability.Fixed in 5.15.0.33.36 - Upgrade
Upgrade
ubuntu/linux-image-azureto a version that resolves this vulnerability.Fixed in 5.15.0.1007.8 - Upgrade
Upgrade
ubuntu/linux-image-raspi-nolpaeto a version that resolves this vulnerability.Fixed in 5.15.0.1008.8 - Upgrade
Upgrade
ubuntu/linux-image-gketo a version that resolves this vulnerability.Fixed in 5.15.0.1005.10 - Upgrade
Upgrade
ubuntu/linux-image-gcpto a version that resolves this vulnerability.Fixed in 5.15.0.1005.6 - Upgrade
Upgrade
ubuntu/linux-image-generic-lpaeto a version that resolves this vulnerability.Fixed in 5.15.0.33.36 - Upgrade
Upgrade
ubuntu/linux-image-lowlatency-64kto a version that resolves this vulnerability.Fixed in 5.15.0.33.35 - Upgrade
Upgrade
ubuntu/linux-image-oracleto a version that resolves this vulnerability.Fixed in 5.15.0.1006.6 - Upgrade
Upgrade
ubuntu/linux-image-5.15.0-1005-gcpto a version that resolves this vulnerability.Fixed in 5.15.0-1005.8 - Upgrade
Upgrade
ubuntu/linux-image-5.15.0-33-lowlatency-64kto a version that resolves this vulnerability.Fixed in 5.15.0-33.34 - Upgrade
Upgrade
ubuntu/linux-image-5.15.0-33-lowlatencyto a version that resolves this vulnerability.Fixed in 5.15.0-33.34 - Upgrade
Upgrade
ubuntu/linux-image-5.15.0-1004-ibmto a version that resolves this vulnerability.Fixed in 5.15.0-1004.4 - Upgrade
Upgrade
ubuntu/linux-image-raspito a version that resolves this vulnerability.Fixed in 5.15.0.1008.8 - Upgrade
Upgrade
ubuntu/linux-image-5.15.0-33-genericto a version that resolves this vulnerability.Fixed in 5.15.0-33.34 - Upgrade
Upgrade
ubuntu/linux-image-kvmto a version that resolves this vulnerability.Fixed in 5.15.0.1007.7 - Upgrade
Upgrade
ubuntu/linux-image-generic-lpae-hwe-22.04to a version that resolves this vulnerability.Fixed in 5.15.0.33.36 - Upgrade
Upgrade
ubuntu/linux-image-5.15.0-1008-awsto a version that resolves this vulnerability.Fixed in 5.15.0-1008.10 - Upgrade
Upgrade
ubuntu/linux-image-genericto a version that resolves this vulnerability.Fixed in 5.15.0.33.36 - Upgrade
Upgrade
ubuntu/linux-image-lowlatency-64k-hwe-22.04to a version that resolves this vulnerability.Fixed in 5.15.0.33.35 - Upgrade
Upgrade
ubuntu/linux-image-lowlatencyto a version that resolves this vulnerability.Fixed in 5.15.0.33.35 - Upgrade
Upgrade
ubuntu/linux-image-5.15.0-1005-gketo a version that resolves this vulnerability.Fixed in 5.15.0-1005.6 - Upgrade
Upgrade
ubuntu/linux-image-5.13.0-1025-awsto a version that resolves this vulnerability.Fixed in 5.13.0-1025.27 - Upgrade
Upgrade
ubuntu/linux-image-generic-64kto a version that resolves this vulnerability.Fixed in 5.13.0.44.53 - Upgrade
Upgrade
ubuntu/linux-image-genericto a version that resolves this vulnerability.Fixed in 5.13.0.44.53 - Upgrade
Upgrade
ubuntu/linux-image-awsto a version that resolves this vulnerability.Fixed in 5.13.0.1025.26 - Upgrade
Upgrade
ubuntu/linux-image-5.13.0-1025-azureto a version that resolves this vulnerability.Fixed in 5.13.0-1025.29 - Upgrade
Upgrade
ubuntu/linux-image-5.13.0-44-genericto a version that resolves this vulnerability.Fixed in 5.13.0-44.49 - Upgrade
Upgrade
ubuntu/linux-image-5.13.0-1028-raspito a version that resolves this vulnerability.Fixed in 5.13.0-1028.30 - Upgrade
Upgrade
ubuntu/linux-image-5.13.0-44-generic-lpaeto a version that resolves this vulnerability.Fixed in 5.13.0-44.49 - Upgrade
Upgrade
ubuntu/linux-image-5.13.0-44-lowlatencyto a version that resolves this vulnerability.Fixed in 5.13.0-44.49 - Upgrade
Upgrade
ubuntu/linux-image-virtualto a version that resolves this vulnerability.Fixed in 5.13.0.44.53 - Upgrade
Upgrade
ubuntu/linux-image-azureto a version that resolves this vulnerability.Fixed in 5.13.0.1025.25 - Upgrade
Upgrade
ubuntu/linux-image-raspi-nolpaeto a version that resolves this vulnerability.Fixed in 5.13.0.1028.33 - Upgrade
Upgrade
ubuntu/linux-image-oem-20.04to a version that resolves this vulnerability.Fixed in 5.13.0.44.53 - Upgrade
Upgrade
ubuntu/linux-image-5.13.0-1028-raspi-nolpaeto a version that resolves this vulnerability.Fixed in 5.13.0-1028.30 - Upgrade
Upgrade
ubuntu/linux-image-5.13.0-44-generic-64kto a version that resolves this vulnerability.Fixed in 5.13.0-44.49 - Upgrade
Upgrade
ubuntu/linux-image-5.13.0-1024-kvmto a version that resolves this vulnerability.Fixed in 5.13.0-1024.25 - Upgrade
Upgrade
ubuntu/linux-image-raspito a version that resolves this vulnerability.Fixed in 5.13.0.1028.33 - Upgrade
Upgrade
ubuntu/linux-image-kvmto a version that resolves this vulnerability.Fixed in 5.13.0.1024.24 - Upgrade
Upgrade
ubuntu/linux-image-generic-lpaeto a version that resolves this vulnerability.Fixed in 5.13.0.44.53 - Upgrade
Upgrade
ubuntu/linux-image-lowlatencyto a version that resolves this vulnerability.Fixed in 5.13.0.44.53 - Upgrade
Upgrade
ubuntu/linux-image-5.13.0-1025-awsto a version that resolves this vulnerability.Fixed in 5.13.0-1025.27~20.04.1 - Upgrade
Upgrade
ubuntu/linux-image-awsto a version that resolves this vulnerability.Fixed in 5.13.0.1025.27~20.04.20 - Upgrade
Upgrade
ubuntu/linux-image-5.13.0-1025-azureto a version that resolves this vulnerability.Fixed in 5.13.0-1025.29~20.04.1 - Upgrade
Upgrade
ubuntu/linux-image-lowlatency-hwe-20.04to a version that resolves this vulnerability.Fixed in 5.13.0.44.49~20.04.28 - Upgrade
Upgrade
ubuntu/linux-image-5.13.0-44-genericto a version that resolves this vulnerability.Fixed in 5.13.0-44.49~20.04.1 - Upgrade
Upgrade
ubuntu/linux-image-5.13.0-44-generic-lpaeto a version that resolves this vulnerability.Fixed in 5.13.0-44.49~20.04.1 - Upgrade
Upgrade
ubuntu/linux-image-5.13.0-44-lowlatencyto a version that resolves this vulnerability.Fixed in 5.13.0-44.49~20.04.1 - Upgrade
Upgrade
ubuntu/linux-image-azureto a version that resolves this vulnerability.Fixed in 5.13.0.1025.29~20.04.15 - Upgrade
Upgrade
ubuntu/linux-image-5.13.0-44-generic-64kto a version that resolves this vulnerability.Fixed in 5.13.0-44.49~20.04.1 - Upgrade
Upgrade
ubuntu/linux-image-generic-lpae-hwe-20.04to a version that resolves this vulnerability.Fixed in 5.13.0.44.49~20.04.28 - Upgrade
Upgrade
ubuntu/linux-image-generic-hwe-20.04to a version that resolves this vulnerability.Fixed in 5.13.0.44.49~20.04.28 - Upgrade
Upgrade
ubuntu/linux-image-generic-64k-hwe-20.04to a version that resolves this vulnerability.Fixed in 5.13.0.44.49~20.04.28 - Upgrade
Upgrade
ubuntu/linux-image-virtual-hwe-20.04to a version that resolves this vulnerability.Fixed in 5.13.0.44.49~20.04.28 - Upgrade
Upgrade
ubuntu/linux-image-virtualto a version that resolves this vulnerability.Fixed in 4.15.0.180.169 - Upgrade
Upgrade
ubuntu/linux-image-4.15.0-180-lowlatencyto a version that resolves this vulnerability.Fixed in 4.15.0-180.189 - Upgrade
Upgrade
ubuntu/linux-image-aws-lts-18.04to a version that resolves this vulnerability.Fixed in 4.15.0.1130.133 - Upgrade
Upgrade
ubuntu/linux-image-genericto a version that resolves this vulnerability.Fixed in 4.15.0.180.169 - Upgrade
Upgrade
ubuntu/linux-image-4.15.0-1124-gcpto a version that resolves this vulnerability.Fixed in 4.15.0-1124.138 - Upgrade
Upgrade
ubuntu/linux-image-4.15.0-1129-snapdragonto a version that resolves this vulnerability.Fixed in 4.15.0-1129.138 - Upgrade
Upgrade
ubuntu/linux-image-4.15.0-1139-azureto a version that resolves this vulnerability.Fixed in 4.15.0-1139.152 - Upgrade
Upgrade
ubuntu/linux-image-oracle-lts-18.04to a version that resolves this vulnerability.Fixed in 4.15.0.1095.105 - Upgrade
Upgrade
ubuntu/linux-image-4.15.0-1095-oracleto a version that resolves this vulnerability.Fixed in 4.15.0-1095.104 - Upgrade
Upgrade
ubuntu/linux-image-4.15.0-1130-awsto a version that resolves this vulnerability.Fixed in 4.15.0-1130.139 - Upgrade
Upgrade
ubuntu/linux-image-4.15.0-180-genericto a version that resolves this vulnerability.Fixed in 4.15.0-180.189 - Upgrade
Upgrade
ubuntu/linux-image-snapdragonto a version that resolves this vulnerability.Fixed in 4.15.0.1129.131 - Upgrade
Upgrade
ubuntu/linux-image-azure-lts-18.04to a version that resolves this vulnerability.Fixed in 4.15.0.1139.112 - Upgrade
Upgrade
ubuntu/linux-image-4.15.0-1116-kvmto a version that resolves this vulnerability.Fixed in 4.15.0-1116.119 - Upgrade
Upgrade
ubuntu/linux-image-gcp-lts-18.04to a version that resolves this vulnerability.Fixed in 4.15.0.1124.143 - Upgrade
Upgrade
ubuntu/linux-image-4.15.0-180-generic-lpaeto a version that resolves this vulnerability.Fixed in 4.15.0-180.189 - Upgrade
Upgrade
ubuntu/linux-image-kvmto a version that resolves this vulnerability.Fixed in 4.15.0.1116.112 - Upgrade
Upgrade
ubuntu/linux-image-generic-lpaeto a version that resolves this vulnerability.Fixed in 4.15.0.180.169 - Upgrade
Upgrade
ubuntu/linux-image-lowlatencyto a version that resolves this vulnerability.Fixed in 4.15.0.180.169 - Upgrade
Upgrade
ubuntu/linux-image-lowlatency-hwe-16.04to a version that resolves this vulnerability.Fixed in 4.15.0.180.171 - Upgrade
Upgrade
ubuntu/linux-image-oemto a version that resolves this vulnerability.Fixed in 4.15.0.180.171 - Upgrade
Upgrade
ubuntu/linux-image-4.15.0-1124-gcpto a version that resolves this vulnerability.Fixed in 4.15.0-1124.138~16.04.1 - Upgrade
Upgrade
ubuntu/linux-image-4.15.0-1139-azureto a version that resolves this vulnerability.Fixed in 4.15.0-1139.152~16.04.1 - Upgrade
Upgrade
ubuntu/linux-image-azureto a version that resolves this vulnerability.Fixed in 4.15.0.1139.129 - Upgrade
Upgrade
ubuntu/linux-image-4.15.0-1095-oracleto a version that resolves this vulnerability.Fixed in 4.15.0-1095.104~16.04.1 - Upgrade
Upgrade
ubuntu/linux-image-4.15.0-180-lowlatencyto a version that resolves this vulnerability.Fixed in 4.15.0-180.189~16.04.1 - Upgrade
Upgrade
ubuntu/linux-image-4.15.0-180-genericto a version that resolves this vulnerability.Fixed in 4.15.0-180.189~16.04.1 - Upgrade
Upgrade
ubuntu/linux-image-gketo a version that resolves this vulnerability.Fixed in 4.15.0.1124.124 - Upgrade
Upgrade
ubuntu/linux-image-4.15.0-1130-aws-hweto a version that resolves this vulnerability.Fixed in 4.15.0-1130.139~16.04.1 - Upgrade
Upgrade
ubuntu/linux-image-gcpto a version that resolves this vulnerability.Fixed in 4.15.0.1124.124 - Upgrade
Upgrade
ubuntu/linux-image-aws-hweto a version that resolves this vulnerability.Fixed in 4.15.0.1130.120 - Upgrade
Upgrade
ubuntu/linux-image-generic-hwe-16.04to a version that resolves this vulnerability.Fixed in 4.15.0.180.171 - Upgrade
Upgrade
ubuntu/linux-image-oracleto a version that resolves this vulnerability.Fixed in 4.15.0.1095.83 - Upgrade
Upgrade
ubuntu/linux-image-virtual-hwe-16.04to a version that resolves this vulnerability.Fixed in 4.15.0.180.171 - Upgrade
Upgrade
ubuntu/linux-image-4.15.0-1139-azureto a version that resolves this vulnerability.Fixed in 4.15.0-1139.152~14.04.1 - Upgrade
Upgrade
ubuntu/linux-image-azureto a version that resolves this vulnerability.Fixed in 4.15.0.1139.111 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch USN-5443-1
Event History
Frequently Asked Questions
What is the severity of USN-5443-1?
The USN-5443-1 vulnerability is categorized as a medium severity issue due to its potential for denial of service and possible code execution.
How do I fix USN-5443-1?
To fix USN-5443-1, update your package to the latest version released by Ubuntu, which addresses the vulnerabilities identified.
What systems are affected by USN-5443-1?
USN-5443-1 affects Ubuntu version 22.04 with specific kernel package versions including linux-image-5.15.0-33 and other related packages.
Who discovered the vulnerability in USN-5443-1?
The vulnerability in USN-5443-1 was discovered by researcher Kyle Zeng.
What type of vulnerability is USN-5443-1?
USN-5443-1 is a use-after-free vulnerability related to the Network Queuing and Scheduling subsystem in the Linux kernel.