USN-5567-1: Linux kernel (OEM) vulnerabilities
Zhenpeng Lin discovered that the network packet scheduler implementation in the Linux kernel did not properly remove all references to a route filter before freeing it in some situations. A local attacker could use this to cause a denial of service (system crash) or execute arbitrary code. (CVE-2022-2588) It was discovered that the netfilter subsystem of the Linux kernel did not prevent one nft object from referencing an nft set in another nft table, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or execute arbitrary code. (CVE-2022-2586) It was discovered that the implementation of POSIX timers in the Linux kernel did not properly clean up timers in some situations. A local attacker could use this to cause a denial of service (system crash) or execute arbitrary code. (CVE-2022-2585)
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/linux-image-oem-22.04to a version that resolves this vulnerability.Fixed in 5.17.0.1015.14 - Upgrade
Upgrade
ubuntu/linux-image-oem-22.04ato a version that resolves this vulnerability.Fixed in 5.17.0.1015.14 - Upgrade
Upgrade
ubuntu/linux-image-5.17.0-1015-oemto a version that resolves this vulnerability.Fixed in 5.17.0-1015.16 - Upgrade
Upgrade
ubuntu/linux-image-oem-20.04cto a version that resolves this vulnerability.Fixed in 5.14.0.1048.44 - Upgrade
Upgrade
ubuntu/linux-image-oem-20.04bto a version that resolves this vulnerability.Fixed in 5.14.0.1048.44 - Upgrade
Upgrade
ubuntu/linux-image-oem-20.04dto a version that resolves this vulnerability.Fixed in 5.14.0.1048.44 - Upgrade
Upgrade
ubuntu/linux-image-oem-20.04to a version that resolves this vulnerability.Fixed in 5.14.0.1048.44 - Upgrade
Upgrade
ubuntu/linux-image-5.14.0-1048-oemto a version that resolves this vulnerability.Fixed in 5.14.0-1048.55 - Upgrade
Upgrade
Linux kernel (OEM)to a version that resolves this vulnerability.Patch USN-5567-1
Event History
Frequently Asked Questions
What is the severity of CVE-2022-2588?
The severity of CVE-2022-2588 is not mentioned in the provided information.
How do I fix the CVE-2022-2588 vulnerability in Ubuntu 22.04 with Linux kernel version 5.17.0.1015.14?
To fix the CVE-2022-2588 vulnerability in Ubuntu 22.04 with Linux kernel version 5.17.0.1015.14, update the package 'linux-image-oem-22.04' to version 5.17.0.1015.14.
How do I fix the CVE-2022-2588 vulnerability in Ubuntu 20.04 with Linux kernel version 5.14.0-1048.55?
To fix the CVE-2022-2588 vulnerability in Ubuntu 20.04 with Linux kernel version 5.14.0-1048.55, update the package 'linux-image-5.14.0-1048-oem' to version 5.14.0-1048.55.
What are the affected software versions for CVE-2022-2588?
The affected software versions for CVE-2022-2588 are 'linux-image-oem-22.04' version up to but not including 5.17.0.1015.14 and 'linux-image-oem-20.04c', 'linux-image-oem-20.04b', 'linux-image-oem-20.04d', 'linux-image-oem-20.04' versions up to but not including 5.14.0.1048.44.
Where can I find more information about CVE-2022-2588?
You can find more information about CVE-2022-2588 on the Ubuntu Security website.