USN-5588-1: Linux kernel vulnerability
Zhenpeng Lin discovered that the network packet scheduler implementation in the Linux kernel did not properly remove all references to a route filter before freeing it in some situations. A local attacker could use this to cause a denial of service (system crash) or execute arbitrary code.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/linux-image-serverto a version that resolves this vulnerability.Fixed in Ubuntu Pro - Upgrade
Upgrade
ubuntu/linux-image-3.13.0-191-genericto a version that resolves this vulnerability.Fixed in Ubuntu Pro - Upgrade
Upgrade
ubuntu/linux-image-3.13.0-191-lowlatencyto a version that resolves this vulnerability.Fixed in Ubuntu Pro - Upgrade
Upgrade
ubuntu/linux-image-virtualto a version that resolves this vulnerability.Fixed in Ubuntu Pro - Upgrade
Upgrade
ubuntu/linux-image-genericto a version that resolves this vulnerability.Fixed in Ubuntu Pro - Upgrade
Upgrade
ubuntu/linux-image-lowlatencyto a version that resolves this vulnerability.Fixed in Ubuntu Pro
Event History
Frequently Asked Questions
What is the severity of USN-5588-1?
The severity of USN-5588-1 is high.
How does the Linux kernel vulnerability in USN-5588-1 affect Ubuntu 14.04?
The Linux kernel vulnerability in USN-5588-1 affects Ubuntu 14.04.
What is the remedy for USN-5588-1?
The remedy for USN-5588-1 is to update to Linux kernel version 3.13.0.191.201 or higher.
What is the CVE ID for USN-5588-1?
The CVE ID for USN-5588-1 is CVE-2022-2588.
Where can I find more information about USN-5588-1?
You can find more information about USN-5588-1 on the Ubuntu website at the following links: [CVE-2022-2588](https://ubuntu.com/security/CVE-2022-2588), [USN-5557-1](https://ubuntu.com/security/notices/USN-5557-1), [USN-5560-1](https://ubuntu.com/security/notices/USN-5560-1).