USN-5634-1: Linux kernel (OEM) vulnerability
Domingo Dirutigliano and Nicola Guerrera discovered that the netfilter subsystem in the Linux kernel did not properly handle rules that truncated packets below the packet header size. When such rules are in place, a remote attacker could possibly use this to cause a denial of service (system crash).
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/linux-image-oem-22.04to a version that resolves this vulnerability.Fixed in 5.17.0.1017.16 - Upgrade
Upgrade
ubuntu/linux-image-5.17.0-1017-oemto a version that resolves this vulnerability.Fixed in 5.17.0-1017.18 - Upgrade
Upgrade
ubuntu/linux-image-oem-22.04ato a version that resolves this vulnerability.Fixed in 5.17.0.1017.16
Event History
Frequently Asked Questions
What is the vulnerability ID of this Linux kernel (OEM) vulnerability?
The vulnerability ID is USN-5634-1.
What is the impact of the Linux kernel (OEM) vulnerability?
The vulnerability could be exploited by a remote attacker to cause a denial of service (system crash).
Which Linux kernel versions are affected by this vulnerability?
The Linux kernel versions affected are linux-image-oem-22.04 (5.17.0.1017.16), linux-image-5.17.0-1017-oem (5.17.0-1017.18), and linux-image-oem-22.04a (5.17.0.1017.16).
How can I fix the Linux kernel (OEM) vulnerability?
To fix the vulnerability, update the affected Linux kernel packages to the specified versions: linux-image-oem-22.04 (5.17.0.1017.16), linux-image-5.17.0-1017-oem (5.17.0-1017.18), and linux-image-oem-22.04a (5.17.0.1017.16).
Where can I find more information about this vulnerability?
You can find more information about this vulnerability in the Ubuntu Security Notices: USN-5634-1, CVE-2022-36946.