USN-5727-1: Linux kernel vulnerabilities
First published: Wed Nov 16 2022(Updated: )
It was discovered that a race condition existed in the instruction emulator of the Linux kernel on Arm 64-bit systems. A local attacker could use this to cause a denial of service (system crash). (CVE-2022-20422) It was discovered that the KVM implementation in the Linux kernel did not properly handle virtual CPUs without APICs in certain situations. A local attacker could possibly use this to cause a denial of service (host system crash). (CVE-2022-2153) Hao Sun and Jiacheng Xu discovered that the NILFS file system implementation in the Linux kernel contained a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2022-2978) Abhishek Shah discovered a race condition in the PF_KEYv2 implementation in the Linux kernel. A local attacker could use this to cause a denial of service (system crash) or possibly expose sensitive information (kernel memory). (CVE-2022-3028) It was discovered that the IDT 77252 ATM PCI device driver in the Linux kernel did not properly remove any pending timers during device exit, resulting in a use-after-free vulnerability. A local attacker could possibly use this to cause a denial of service (system crash) or execute arbitrary code. (CVE-2022-3635) It was discovered that the Netlink Transformation (XFRM) subsystem in the Linux kernel contained a reference counting error. A local attacker could use this to cause a denial of service (system crash). (CVE-2022-36879) Xingyuan Mo and Gengjia Chen discovered that the Promise SuperTrak EX storage controller driver in the Linux kernel did not properly handle certain structures. A local attacker could potentially use this to expose sensitive information (kernel memory). (CVE-2022-40768)
| Affected Software | Affected Version | How to fix |
|---|---|---|
| All of | ||
| ubuntu/linux-image-4.15.0-197-generic | <4.15.0-197.208 | 4.15.0-197.208 |
| =18.04 | ||
| All of | ||
| ubuntu/linux-image-4.15.0-197-lowlatency | <4.15.0-197.208 | 4.15.0-197.208 |
| =18.04 | ||
| All of | ||
| ubuntu/linux-image-virtual | <4.15.0.197.182 | 4.15.0.197.182 |
| =18.04 | ||
| All of | ||
| ubuntu/linux-image-aws-lts-18.04 | <4.15.0.1143.143 | 4.15.0.1143.143 |
| =18.04 | ||
| All of | ||
| ubuntu/linux-image-generic | <4.15.0.197.182 | 4.15.0.197.182 |
| =18.04 | ||
| All of | ||
| ubuntu/linux-image-4.15.0-1129-kvm | <4.15.0-1129.134 | 4.15.0-1129.134 |
| =18.04 | ||
| All of | ||
| ubuntu/linux-image-4.15.0-1143-aws | <4.15.0-1143.155 | 4.15.0-1143.155 |
| =18.04 | ||
| All of | ||
| ubuntu/linux-image-oracle-lts-18.04 | <4.15.0.1108.115 | 4.15.0.1108.115 |
| =18.04 | ||
| All of | ||
| ubuntu/linux-image-4.15.0-1121-raspi2 | <4.15.0-1121.129 | 4.15.0-1121.129 |
| =18.04 | ||
| All of | ||
| ubuntu/linux-image-4.15.0-1139-snapdragon | <4.15.0-1139.149 | 4.15.0-1139.149 |
| =18.04 | ||
| All of | ||
| ubuntu/linux-image-4.15.0-197-generic-lpae | <4.15.0-197.208 | 4.15.0-197.208 |
| =18.04 | ||
| All of | ||
| ubuntu/linux-image-snapdragon | <4.15.0.1139.140 | 4.15.0.1139.140 |
| =18.04 | ||
| All of | ||
| ubuntu/linux-image-dell300x | <4.15.0.1055.55 | 4.15.0.1055.55 |
| =18.04 | ||
| All of | ||
| ubuntu/linux-image-raspi2 | <4.15.0.1121.118 | 4.15.0.1121.118 |
| =18.04 | ||
| All of | ||
| ubuntu/linux-image-4.15.0-1055-dell300x | <4.15.0-1055.60 | 4.15.0-1055.60 |
| =18.04 | ||
| All of | ||
| ubuntu/linux-image-4.15.0-1108-oracle | <4.15.0-1108.119 | 4.15.0-1108.119 |
| =18.04 | ||
| All of | ||
| ubuntu/linux-image-kvm | <4.15.0.1129.122 | 4.15.0.1129.122 |
| =18.04 | ||
| All of | ||
| ubuntu/linux-image-generic-lpae | <4.15.0.197.182 | 4.15.0.197.182 |
| =18.04 | ||
| All of | ||
| ubuntu/linux-image-lowlatency | <4.15.0.197.182 | 4.15.0.197.182 |
| =18.04 | ||
| All of | ||
| ubuntu/linux-image-4.15.0-197-generic | <4.15.0-197.208~16.04.1 | 4.15.0-197.208~16.04.1 |
| =16.04 | ||
| All of | ||
| ubuntu/linux-image-4.15.0-197-lowlatency | <4.15.0-197.208~16.04.1 | 4.15.0-197.208~16.04.1 |
| =16.04 | ||
| All of | ||
| ubuntu/linux-image-4.15.0-1143-aws-hwe | <4.15.0-1143.155~16.04.1 | 4.15.0-1143.155~16.04.1 |
| =16.04 | ||
| All of | ||
| ubuntu/linux-image-oem | <4.15.0.197.184 | 4.15.0.197.184 |
| =16.04 | ||
| All of | ||
| ubuntu/linux-image-lowlatency-hwe-16.04 | <4.15.0.197.184 | 4.15.0.197.184 |
| =16.04 | ||
| All of | ||
| ubuntu/linux-image-aws-hwe | <4.15.0.1143.130 | 4.15.0.1143.130 |
| =16.04 | ||
| All of | ||
| ubuntu/linux-image-generic-hwe-16.04 | <4.15.0.197.184 | 4.15.0.197.184 |
| =16.04 | ||
| All of | ||
| ubuntu/linux-image-oracle | <4.15.0.1108.92 | 4.15.0.1108.92 |
| =16.04 | ||
| All of | ||
| ubuntu/linux-image-virtual-hwe-16.04 | <4.15.0.197.184 | 4.15.0.197.184 |
| =16.04 | ||
| All of | ||
| ubuntu/linux-image-4.15.0-1108-oracle | <4.15.0-1108.119~16.04.1 | 4.15.0-1108.119~16.04.1 |
| =16.04 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://ubuntu.com/security/CVE-2022-3028
- https://ubuntu.com/security/CVE-2022-2153
- https://ubuntu.com/security/CVE-2022-36879
- https://ubuntu.com/security/CVE-2022-3635
- https://ubuntu.com/security/CVE-2022-20422
- https://ubuntu.com/security/CVE-2022-40768
- https://ubuntu.com/security/CVE-2022-2978
- https://ubuntu.com/security/notices/USN-5650-1
- https://ubuntu.com/security/notices/USN-5693-1
- https://ubuntu.com/security/notices/USN-5728-1
- https://ubuntu.com/security/notices/USN-5729-1
- https://ubuntu.com/security/notices/USN-5727-2
- https://ubuntu.com/security/notices/USN-5728-2
- https://ubuntu.com/security/notices/USN-5729-2
- https://ubuntu.com/security/notices/USN-5728-3
- https://ubuntu.com/security/notices/USN-5774-1
- https://ubuntu.com/security/notices/USN-5667-1
- https://ubuntu.com/security/notices/USN-5668-1
- https://ubuntu.com/security/notices/USN-5677-1
- https://ubuntu.com/security/notices/USN-5683-1
- https://ubuntu.com/security/notices/USN-5682-1
- https://ubuntu.com/security/notices/USN-5703-1
- https://ubuntu.com/security/notices/USN-5706-1
- https://ubuntu.com/security/notices/USN-5913-1
- https://ubuntu.com/security/notices/USN-6001-1
- https://ubuntu.com/security/notices/USN-6013-1
- https://ubuntu.com/security/notices/USN-6014-1
- https://ubuntu.com/security/notices/USN-5758-1
- https://ubuntu.com/security/notices/USN-6247-1
- https://ubuntu.com/security/notices/USN-6739-1
- https://launchpad.net/ubuntu/+source/linux-signed/4.15.0-197.208
- https://launchpad.net/ubuntu/+source/linux-meta/4.15.0.197.182
- https://launchpad.net/ubuntu/+source/linux-meta-aws/4.15.0.1143.143
- https://launchpad.net/ubuntu/+source/linux-kvm/4.15.0-1129.134
- https://launchpad.net/ubuntu/+source/linux-signed-aws/4.15.0-1143.155
- https://launchpad.net/ubuntu/+source/linux-meta-oracle/4.15.0.1108.115
- https://launchpad.net/ubuntu/+source/linux-raspi2/4.15.0-1121.129
- https://launchpad.net/ubuntu/+source/linux-snapdragon/4.15.0-1139.149
- https://launchpad.net/ubuntu/+source/linux/4.15.0-197.208
- https://launchpad.net/ubuntu/+source/linux-meta-snapdragon/4.15.0.1139.140
- https://launchpad.net/ubuntu/+source/linux-meta-dell300x/4.15.0.1055.55
- https://launchpad.net/ubuntu/+source/linux-meta-raspi2/4.15.0.1121.118
- https://launchpad.net/ubuntu/+source/linux-signed-dell300x/4.15.0-1055.60
- https://launchpad.net/ubuntu/+source/linux-signed-oracle/4.15.0-1108.119
- https://launchpad.net/ubuntu/+source/linux-meta-kvm/4.15.0.1129.122
- https://ubuntu.com/security/notices/USN-5727-1 (Advisory)
Child vulnerabilities
(Contains the following vulnerabilities)
- agent/weakness
- agent/severity
- agent/type
- agent/last-modified-date
- agent/first-publish-date
- agent/softwarecombine
- agent/title
- agent/event
- agent/references
- agent/tags
- agent/description
- collector/usn
- source/Ubuntu
- anchor-related/USN-5650-1
- anchor-related/USN-5693-1
- anchor-related/USN-5728-1
- anchor-related/USN-5729-1
- anchor-related/USN-5727-2
- anchor-related/USN-5728-2
- anchor-related/USN-5729-2
- anchor-related/USN-5728-3
- anchor-related/USN-5774-1
- anchor-related/USN-5667-1
- anchor-related/USN-5668-1
- anchor-related/USN-5677-1
- anchor-related/USN-5683-1
- anchor-related/USN-5682-1
- anchor-related/USN-5703-1
- anchor-related/USN-5706-1
- anchor-related/USN-5913-1
- anchor-related/USN-6001-1
- anchor-related/USN-6013-1
- anchor-related/USN-6014-1
- anchor-related/USN-5758-1
- anchor-related/USN-6247-1
- anchor-related/USN-6739-1
- agent/software-canonical-lookup
- package-manager/ubuntu
- vendor/ubuntu
- canonical/ubuntu ubuntu
- version/ubuntu ubuntu/18.04
- version/ubuntu ubuntu/16.04