USN-5444-1: Linux kernel vulnerability
First published: Tue May 24 2022(Updated: )
Kyle Zeng discovered that the Network Queuing and Scheduling subsystem of the Linux kernel did not properly perform reference counting in some situations, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or execute arbitrary code.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| All of | ||
| ubuntu/linux-image-oem-22.04 | <5.17.0.1006.6 | 5.17.0.1006.6 |
| Ubuntu Ubuntu | =22.04 | |
| All of | ||
| ubuntu/linux-image-oem-22.04a | <5.17.0.1006.6 | 5.17.0.1006.6 |
| Ubuntu Ubuntu | =22.04 | |
| All of | ||
| ubuntu/linux-image-5.17.0-1006-oem | <5.17.0-1006.6 | 5.17.0-1006.6 |
| Ubuntu Ubuntu | =22.04 | |
| All of | ||
| ubuntu/linux-image-oem-20.04c | <5.14.0.1038.35 | 5.14.0.1038.35 |
| Ubuntu Ubuntu | =20.04 | |
| All of | ||
| ubuntu/linux-image-oem-20.04b | <5.14.0.1038.35 | 5.14.0.1038.35 |
| Ubuntu Ubuntu | =20.04 | |
| All of | ||
| ubuntu/linux-image-oem-20.04 | <5.14.0.1038.35 | 5.14.0.1038.35 |
| Ubuntu Ubuntu | =20.04 | |
| All of | ||
| ubuntu/linux-image-5.14.0-1038-oem | <5.14.0-1038.42 | 5.14.0-1038.42 |
| Ubuntu Ubuntu | =20.04 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://ubuntu.com/security/CVE-2022-29581
- https://ubuntu.com/security/notices/USN-5442-1
- https://ubuntu.com/security/notices/USN-5443-1
- https://ubuntu.com/security/notices/USN-5442-2
- https://ubuntu.com/security/notices/USN-5443-2
- https://ubuntu.com/security/notices/LSN-0086-1
- https://ubuntu.com/security/notices/LSN-0089-1
- https://launchpad.net/ubuntu/+source/linux-meta-oem-5.17/5.17.0.1006.6
- https://launchpad.net/ubuntu/+source/linux-signed-oem-5.17/5.17.0-1006.6
- https://launchpad.net/ubuntu/+source/linux-meta-oem-5.14/5.14.0.1038.35
- https://launchpad.net/ubuntu/+source/linux-signed-oem-5.14/5.14.0-1038.42
- https://ubuntu.com/security/notices/USN-5444-1 (Advisory)
Frequently Asked Questions
What is the vulnerability ID for this Linux kernel vulnerability?
The vulnerability ID is USN-5444-1.
What is the impact of the USN-5444-1 vulnerability?
The vulnerability can be used by a local attacker to cause a denial of service or execute arbitrary code.
Which Linux kernel versions are affected by USN-5444-1?
The affected Linux kernel versions include linux-image-oem-22.04, linux-image-oem-20.04c, linux-image-oem-20.04b, linux-image-oem-20.04d, and linux-image-5.14.0-1038-oem.
How can I fix the USN-5444-1 vulnerability?
To fix the vulnerability, update your Linux kernel to version 5.17.0.1006.6 for linux-image-oem-22.04, version 5.14.0.1038.35 for linux-image-oem-20.04c, linux-image-oem-20.04b, linux-image-oem-20.04d, and version 5.14.0-1038.42 for linux-image-5.14.0-1038-oem.
Where can I find more information about USN-5444-1 vulnerability?
More information about the vulnerability can be found on the Ubuntu Security Notices website.
- agent/description
- agent/event
- agent/first-publish-date
- agent/last-modified-date
- agent/references
- agent/severity
- agent/softwarecombine
- agent/tags
- agent/title
- agent/type
- agent/weakness
- collector/usn
- source/Ubuntu
- anchor-related/USN-5442-1
- anchor-related/USN-5443-1
- anchor-related/USN-5442-2
- anchor-related/USN-5443-2
- agent/software-canonical-lookup
- package-manager/ubuntu
- vendor/ubuntu
- canonical/ubuntu ubuntu
- version/ubuntu ubuntu/22.04
- version/ubuntu ubuntu/20.04