USN-5799-1: Linux kernel (OEM) vulnerability

Published Jan 11, 2023

Updated

Kyle Zeng discovered that the sysctl implementation in the Linux kernel contained a stack-based buffer overflow. A local attacker could use this to cause a denial of service (system crash) or execute arbitrary code.

Affected Software

1 affected component

Canonical Linux kernel (OEM)

Event History

May 10, 2025

Advisory Published

via Ubuntu·03:55 AM

Data Sourced

via Ubuntu·03:55 AM

DescriptionAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2022-4378

Frequently Asked Questions

What is the vulnerability ID for this Linux kernel (OEM) vulnerability?

The vulnerability ID for this Linux kernel (OEM) vulnerability is USN-5799-1.

What is the impact of the vulnerability?

The vulnerability allows a local attacker to cause a denial of service (system crash) or execute arbitrary code.

What software versions are affected by this vulnerability?

The affected software versions are Ubuntu Linux kernel versions 6.0.0-1010.10, 5.17.0.1026.24, 5.17.0.1026.24, 6.0.0.1010.10, and 5.17.0-1026.27 running on Ubuntu 22.04.

How can I fix the vulnerability?

To fix the vulnerability, update the affected software versions to the specified remedy versions: linux-image-6.0.0-1010-oem (6.0.0-1010.10), linux-image-oem-22.04 (5.17.0.1026.24), linux-image-oem-22.04a (5.17.0.1026.24), linux-image-oem-22.04b (6.0.0.1010.10), and linux-image-5.17.0-1026-oem (5.17.0-1026.27).

Where can I find more information about this vulnerability?

You can find more information about this vulnerability on the official Ubuntu security page: [USN-5803-1](https://ubuntu.com/security/notices/USN-5803-1) and [USN-5809-1](https://ubuntu.com/security/notices/USN-5809-1).