- Vulnerability/
- USN-5493-2
USN-5493-2: Linux kernel (HWE) vulnerability
First published: Fri Jul 01 2022(Updated: )
It was discovered that the 8 Devices USB2CAN interface implementation in the Linux kernel did not properly handle certain error conditions, leading to a double-free. A local attacker could possibly use this to cause a denial of service (system crash).
| Affected Software | Affected Version | How to fix |
|---|---|---|
| All of | ||
| ubuntu/linux-image-5.13.0-52-generic-64k | <5.13.0-52.59~20.04.1 | 5.13.0-52.59~20.04.1 |
| =20.04 | ||
| All of | ||
| ubuntu/linux-image-generic-hwe-20.04 | <5.13.0.52.59~20.04.31 | 5.13.0.52.59~20.04.31 |
| =20.04 | ||
| All of | ||
| ubuntu/linux-image-generic-lpae-hwe-20.04 | <5.13.0.52.59~20.04.31 | 5.13.0.52.59~20.04.31 |
| =20.04 | ||
| All of | ||
| ubuntu/linux-image-virtual-hwe-20.04 | <5.13.0.52.59~20.04.31 | 5.13.0.52.59~20.04.31 |
| =20.04 | ||
| All of | ||
| ubuntu/linux-image-generic-64k-hwe-20.04 | <5.13.0.52.59~20.04.31 | 5.13.0.52.59~20.04.31 |
| =20.04 | ||
| All of | ||
| ubuntu/linux-image-5.13.0-52-generic-lpae | <5.13.0-52.59~20.04.1 | 5.13.0-52.59~20.04.1 |
| =20.04 | ||
| All of | ||
| ubuntu/linux-image-lowlatency-hwe-20.04 | <5.13.0.52.59~20.04.31 | 5.13.0.52.59~20.04.31 |
| =20.04 | ||
| All of | ||
| ubuntu/linux-image-5.13.0-52-generic | <5.13.0-52.59~20.04.1 | 5.13.0-52.59~20.04.1 |
| =20.04 | ||
| All of | ||
| ubuntu/linux-image-5.13.0-52-lowlatency | <5.13.0-52.59~20.04.1 | 5.13.0-52.59~20.04.1 |
| =20.04 | ||
| All of | ||
| ubuntu/linux-image-oem-osp1 | <5.4.0.121.137~18.04.101 | 5.4.0.121.137~18.04.101 |
| =18.04 | ||
| All of | ||
| ubuntu/linux-image-generic-hwe-18.04-edge | <5.4.0.121.137~18.04.101 | 5.4.0.121.137~18.04.101 |
| =18.04 | ||
| All of | ||
| ubuntu/linux-image-generic-lpae-hwe-18.04 | <5.4.0.121.137~18.04.101 | 5.4.0.121.137~18.04.101 |
| =18.04 | ||
| All of | ||
| ubuntu/linux-image-snapdragon-hwe-18.04 | <5.4.0.121.137~18.04.101 | 5.4.0.121.137~18.04.101 |
| =18.04 | ||
| All of | ||
| ubuntu/linux-image-generic-hwe-18.04 | <5.4.0.121.137~18.04.101 | 5.4.0.121.137~18.04.101 |
| =18.04 | ||
| All of | ||
| ubuntu/linux-image-5.4.0-121-lowlatency | <5.4.0-121.137~18.04.1 | 5.4.0-121.137~18.04.1 |
| =18.04 | ||
| All of | ||
| ubuntu/linux-image-generic-lpae-hwe-18.04-edge | <5.4.0.121.137~18.04.101 | 5.4.0.121.137~18.04.101 |
| =18.04 | ||
| All of | ||
| ubuntu/linux-image-lowlatency-hwe-18.04 | <5.4.0.121.137~18.04.101 | 5.4.0.121.137~18.04.101 |
| =18.04 | ||
| All of | ||
| ubuntu/linux-image-virtual-hwe-18.04 | <5.4.0.121.137~18.04.101 | 5.4.0.121.137~18.04.101 |
| =18.04 | ||
| All of | ||
| ubuntu/linux-image-oem | <5.4.0.121.137~18.04.101 | 5.4.0.121.137~18.04.101 |
| =18.04 | ||
| All of | ||
| ubuntu/linux-image-snapdragon-hwe-18.04-edge | <5.4.0.121.137~18.04.101 | 5.4.0.121.137~18.04.101 |
| =18.04 | ||
| All of | ||
| ubuntu/linux-image-5.4.0-121-generic | <5.4.0-121.137~18.04.1 | 5.4.0-121.137~18.04.1 |
| =18.04 | ||
| All of | ||
| ubuntu/linux-image-lowlatency-hwe-18.04-edge | <5.4.0.121.137~18.04.101 | 5.4.0.121.137~18.04.101 |
| =18.04 | ||
| All of | ||
| ubuntu/linux-image-virtual-hwe-18.04-edge | <5.4.0.121.137~18.04.101 | 5.4.0.121.137~18.04.101 |
| =18.04 | ||
| All of | ||
| ubuntu/linux-image-5.4.0-121-generic-lpae | <5.4.0-121.137~18.04.1 | 5.4.0-121.137~18.04.1 |
| =18.04 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://ubuntu.com/security/CVE-2022-28388
- https://ubuntu.com/security/notices/USN-5416-1
- https://ubuntu.com/security/notices/USN-5469-1
- https://ubuntu.com/security/notices/USN-5493-1
- https://ubuntu.com/security/notices/USN-5505-1
- https://ubuntu.com/security/notices/USN-5513-1
- https://ubuntu.com/security/notices/USN-5539-1
- https://ubuntu.com/security/notices/USN-5541-1
- https://launchpad.net/ubuntu/+source/linux-signed-hwe-5.13/5.13.0-52.59~20.04.1
- https://launchpad.net/ubuntu/+source/linux-meta-hwe-5.13/5.13.0.52.59~20.04.31
- https://launchpad.net/ubuntu/+source/linux-hwe-5.13/5.13.0-52.59~20.04.1
- https://launchpad.net/ubuntu/+source/linux-meta-hwe-5.4/5.4.0.121.137~18.04.101
- https://launchpad.net/ubuntu/+source/linux-signed-hwe-5.4/5.4.0-121.137~18.04.1
- https://launchpad.net/ubuntu/+source/linux-hwe-5.4/5.4.0-121.137~18.04.1
- https://ubuntu.com/security/notices/USN-5493-2 (Advisory)
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is USN-5493-2.
What is the title of the vulnerability?
The title of the vulnerability is Linux kernel (HWE) vulnerability.
What is the description of the vulnerability?
The 8 Devices USB2CAN interface implementation in the Linux kernel did not properly handle certain error conditions, leading to a double-free, which could be exploited by a local attacker to cause a denial of service (system crash).
Which software versions are affected by the vulnerability?
The vulnerability affects Ubuntu Ubuntu 20.04 with Linux kernel versions 5.13.0-52.59~20.04.1, 5.13.0.52.59~20.04.31, and 5.13.0.52.59~20.04.31, and Ubuntu 18.04 with Linux kernel versions 5.4.0.121.137~18.04.101 and 5.4.0-121.137~18.04.1.
How do I fix the vulnerability?
To fix the vulnerability, update the Linux kernel to version 5.13.0-52.59~20.04.1 or later for Ubuntu 20.04, and version 5.4.0.121.137~18.04.101 or later for Ubuntu 18.04.
- agent/description
- agent/event
- agent/first-publish-date
- agent/last-modified-date
- agent/references
- agent/severity
- agent/softwarecombine
- agent/tags
- agent/title
- agent/type
- collector/usn
- source/Ubuntu
- anchor-related/USN-5416-1
- anchor-related/USN-5469-1
- anchor-related/USN-5493-1
- anchor-related/USN-5505-1
- anchor-related/USN-5513-1
- anchor-related/USN-5539-1
- anchor-related/USN-5541-1
- agent/software-canonical-lookup
- package-manager/ubuntu
- vendor/ubuntu
- canonical/ubuntu ubuntu
- version/ubuntu ubuntu/20.04
- version/ubuntu ubuntu/18.04