USN-5804-1: Linux kernel vulnerabilities
First published: Fri Jan 13 2023(Updated: )
It was discovered that the NFSD implementation in the Linux kernel did not properly handle some RPC messages, leading to a buffer overflow. A remote attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2022-43945) Tamás Koczka discovered that the Bluetooth L2CAP handshake implementation in the Linux kernel contained multiple use-after-free vulnerabilities. A physically proximate attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2022-42896) It was discovered that the Xen netback driver in the Linux kernel did not properly handle packets structured in certain ways. An attacker in a guest VM could possibly use this to cause a denial of service (host NIC availability). (CVE-2022-3643) It was discovered that an integer overflow vulnerability existed in the Bluetooth subsystem in the Linux kernel. A physically proximate attacker could use this to cause a denial of service (system crash). (CVE-2022-45934)
| Affected Software | Affected Version | How to fix |
|---|---|---|
| All of | ||
| ubuntu/linux-image-5.4.0-1094-aws | <5.4.0-1094.102 | 5.4.0-1094.102 |
| =20.04 | ||
| All of | ||
| ubuntu/linux-image-virtual | <5.4.0.137.135 | 5.4.0.137.135 |
| =20.04 | ||
| All of | ||
| ubuntu/linux-image-5.4.0-137-generic | <5.4.0-137.154 | 5.4.0-137.154 |
| =20.04 | ||
| All of | ||
| ubuntu/linux-image-generic | <5.4.0.137.135 | 5.4.0.137.135 |
| =20.04 | ||
| All of | ||
| ubuntu/linux-image-oem | <5.4.0.137.135 | 5.4.0.137.135 |
| =20.04 | ||
| All of | ||
| ubuntu/linux-image-5.4.0-137-lowlatency | <5.4.0-137.154 | 5.4.0-137.154 |
| =20.04 | ||
| All of | ||
| ubuntu/linux-image-5.4.0-1098-gcp | <5.4.0-1098.107 | 5.4.0-1098.107 |
| =20.04 | ||
| All of | ||
| ubuntu/linux-image-5.4.0-1042-ibm | <5.4.0-1042.47 | 5.4.0-1042.47 |
| =20.04 | ||
| All of | ||
| ubuntu/linux-image-ibm | <5.4.0.1042.68 | 5.4.0.1042.68 |
| =20.04 | ||
| All of | ||
| ubuntu/linux-image-oem-osp1 | <5.4.0.137.135 | 5.4.0.137.135 |
| =20.04 | ||
| All of | ||
| ubuntu/linux-image-gcp-lts-20.04 | <5.4.0.1098.100 | 5.4.0.1098.100 |
| =20.04 | ||
| All of | ||
| ubuntu/linux-image-ibm-lts-20.04 | <5.4.0.1042.68 | 5.4.0.1042.68 |
| =20.04 | ||
| All of | ||
| ubuntu/linux-image-aws-lts-20.04 | <5.4.0.1094.91 | 5.4.0.1094.91 |
| =20.04 | ||
| All of | ||
| ubuntu/linux-image-generic-lpae | <5.4.0.137.135 | 5.4.0.137.135 |
| =20.04 | ||
| All of | ||
| ubuntu/linux-image-oracle-lts-20.04 | <5.4.0.1092.85 | 5.4.0.1092.85 |
| =20.04 | ||
| All of | ||
| ubuntu/linux-image-5.4.0-137-generic-lpae | <5.4.0-137.154 | 5.4.0-137.154 |
| =20.04 | ||
| All of | ||
| ubuntu/linux-image-5.4.0-1092-oracle | <5.4.0-1092.101 | 5.4.0-1092.101 |
| =20.04 | ||
| All of | ||
| ubuntu/linux-image-kvm | <5.4.0.1084.78 | 5.4.0.1084.78 |
| =20.04 | ||
| All of | ||
| ubuntu/linux-image-5.4.0-1084-kvm | <5.4.0-1084.90 | 5.4.0-1084.90 |
| =20.04 | ||
| All of | ||
| ubuntu/linux-image-lowlatency | <5.4.0.137.135 | 5.4.0.137.135 |
| =20.04 | ||
| All of | ||
| ubuntu/linux-image-virtual | <4.15.0.202.185 | 4.15.0.202.185 |
| =18.04 | ||
| All of | ||
| ubuntu/linux-image-generic | <4.15.0.202.185 | 4.15.0.202.185 |
| =18.04 | ||
| All of | ||
| ubuntu/linux-image-5.4.0-1098-gcp | <5.4.0-1098.107~18.04.1 | 5.4.0-1098.107~18.04.1 |
| =18.04 | ||
| All of | ||
| ubuntu/linux-image-4.15.0-1159-azure | <4.15.0-1159.174 | 4.15.0-1159.174 |
| =18.04 | ||
| All of | ||
| ubuntu/linux-image-4.15.0-202-generic | <4.15.0-202.213 | 4.15.0-202.213 |
| =18.04 | ||
| All of | ||
| ubuntu/linux-image-azure-lts-18.04 | <4.15.0.1159.127 | 4.15.0.1159.127 |
| =18.04 | ||
| All of | ||
| ubuntu/linux-image-gcp | <5.4.0.1098.74 | 5.4.0.1098.74 |
| =18.04 | ||
| All of | ||
| ubuntu/linux-image-4.15.0-202-generic-lpae | <4.15.0-202.213 | 4.15.0-202.213 |
| =18.04 | ||
| All of | ||
| ubuntu/linux-image-oracle | <5.4.0.1092.101~18.04.66 | 5.4.0.1092.101~18.04.66 |
| =18.04 | ||
| All of | ||
| ubuntu/linux-image-5.4.0-1092-oracle | <5.4.0-1092.101~18.04.1 | 5.4.0-1092.101~18.04.1 |
| =18.04 | ||
| All of | ||
| ubuntu/linux-image-4.15.0-1134-kvm | <4.15.0-1134.139 | 4.15.0-1134.139 |
| =18.04 | ||
| All of | ||
| ubuntu/linux-image-kvm | <4.15.0.1134.125 | 4.15.0.1134.125 |
| =18.04 | ||
| All of | ||
| ubuntu/linux-image-generic-lpae | <4.15.0.202.185 | 4.15.0.202.185 |
| =18.04 | ||
| All of | ||
| ubuntu/linux-image-4.15.0-202-lowlatency | <4.15.0-202.213 | 4.15.0-202.213 |
| =18.04 | ||
| All of | ||
| ubuntu/linux-image-lowlatency | <4.15.0.202.185 | 4.15.0.202.185 |
| =18.04 | ||
| All of | ||
| ubuntu/linux-image-lowlatency-hwe-16.04 | <4.15.0.202.187 | 4.15.0.202.187 |
| =16.04 | ||
| All of | ||
| ubuntu/linux-image-4.15.0-1143-gcp | <4.15.0-1143.159~16.04.1 | 4.15.0-1143.159~16.04.1 |
| =16.04 | ||
| All of | ||
| ubuntu/linux-image-oem | <4.15.0.202.187 | 4.15.0.202.187 |
| =16.04 | ||
| All of | ||
| ubuntu/linux-image-4.15.0-1148-aws-hwe | <4.15.0-1148.160~16.04.1 | 4.15.0-1148.160~16.04.1 |
| =16.04 | ||
| All of | ||
| ubuntu/linux-image-4.15.0-202-generic | <4.15.0-202.213~16.04.1 | 4.15.0-202.213~16.04.1 |
| =16.04 | ||
| All of | ||
| ubuntu/linux-image-gke | <4.15.0.1143.135 | 4.15.0.1143.135 |
| =16.04 | ||
| All of | ||
| ubuntu/linux-image-gcp | <4.15.0.1143.135 | 4.15.0.1143.135 |
| =16.04 | ||
| All of | ||
| ubuntu/linux-image-aws-hwe | <4.15.0.1148.133 | 4.15.0.1148.133 |
| =16.04 | ||
| All of | ||
| ubuntu/linux-image-generic-hwe-16.04 | <4.15.0.202.187 | 4.15.0.202.187 |
| =16.04 | ||
| All of | ||
| ubuntu/linux-image-virtual-hwe-16.04 | <4.15.0.202.187 | 4.15.0.202.187 |
| =16.04 | ||
| All of | ||
| ubuntu/linux-image-4.15.0-202-lowlatency | <4.15.0-202.213~16.04.1 | 4.15.0-202.213~16.04.1 |
| =16.04 | ||
| All of | ||
| ubuntu/linux-image-4.15.0-1159-azure | <4.15.0-1159.174~14.04.1 | 4.15.0-1159.174~14.04.1 |
| =14.04 | ||
| All of | ||
| ubuntu/linux-image-azure | <4.15.0.1159.126 | 4.15.0.1159.126 |
| =14.04 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://ubuntu.com/security/CVE-2022-42896
- https://ubuntu.com/security/CVE-2022-43945
- https://ubuntu.com/security/CVE-2022-45934
- https://ubuntu.com/security/CVE-2022-3643
- https://ubuntu.com/security/notices/USN-5780-1
- https://ubuntu.com/security/notices/USN-5783-1
- https://ubuntu.com/security/notices/USN-5794-1
- https://ubuntu.com/security/notices/USN-5802-1
- https://ubuntu.com/security/notices/USN-5803-1
- https://ubuntu.com/security/notices/USN-5804-2
- https://ubuntu.com/security/notices/USN-5808-1
- https://ubuntu.com/security/notices/USN-5809-1
- https://ubuntu.com/security/notices/USN-5813-1
- https://ubuntu.com/security/notices/USN-5814-1
- https://ubuntu.com/security/notices/USN-5829-1
- https://ubuntu.com/security/notices/USN-5830-1
- https://ubuntu.com/security/notices/USN-5831-1
- https://ubuntu.com/security/notices/USN-5832-1
- https://ubuntu.com/security/notices/USN-5860-1
- https://ubuntu.com/security/notices/USN-5861-1
- https://ubuntu.com/security/notices/USN-5863-1
- https://ubuntu.com/security/notices/USN-5875-1
- https://ubuntu.com/security/notices/USN-5877-1
- https://ubuntu.com/security/notices/USN-5879-1
- https://ubuntu.com/security/notices/USN-5914-1
- https://ubuntu.com/security/notices/USN-5918-1
- https://ubuntu.com/security/notices/LSN-0092-1
- https://ubuntu.com/security/notices/USN-5754-1
- https://ubuntu.com/security/notices/USN-5755-1
- https://ubuntu.com/security/notices/USN-5755-2
- https://ubuntu.com/security/notices/USN-5754-2
- https://ubuntu.com/security/notices/USN-5773-1
- https://ubuntu.com/security/notices/USN-5779-1
- https://ubuntu.com/security/notices/USN-5789-1
- https://ubuntu.com/security/notices/USN-5858-1
- https://ubuntu.com/security/notices/LSN-0099-1
- https://launchpad.net/ubuntu/+source/linux-signed-aws/5.4.0-1094.102
- https://launchpad.net/ubuntu/+source/linux-meta/5.4.0.137.135
- https://launchpad.net/ubuntu/+source/linux-signed/5.4.0-137.154
- https://launchpad.net/ubuntu/+source/linux-signed-gcp/5.4.0-1098.107
- https://launchpad.net/ubuntu/+source/linux-signed-ibm/5.4.0-1042.47
- https://launchpad.net/ubuntu/+source/linux-meta-ibm/5.4.0.1042.68
- https://launchpad.net/ubuntu/+source/linux-meta-gcp/5.4.0.1098.100
- https://launchpad.net/ubuntu/+source/linux-meta-aws/5.4.0.1094.91
- https://launchpad.net/ubuntu/+source/linux-meta-oracle/5.4.0.1092.85
- https://launchpad.net/ubuntu/+source/linux/5.4.0-137.154
- https://launchpad.net/ubuntu/+source/linux-signed-oracle/5.4.0-1092.101
- https://launchpad.net/ubuntu/+source/linux-meta-kvm/5.4.0.1084.78
- https://launchpad.net/ubuntu/+source/linux-signed-kvm/5.4.0-1084.90
- https://launchpad.net/ubuntu/+source/linux-meta/4.15.0.202.185
- https://launchpad.net/ubuntu/+source/linux-signed-gcp-5.4/5.4.0-1098.107~18.04.1
- https://launchpad.net/ubuntu/+source/linux-signed-azure-4.15/4.15.0-1159.174
- https://launchpad.net/ubuntu/+source/linux-signed/4.15.0-202.213
- https://launchpad.net/ubuntu/+source/linux-meta-azure-4.15/4.15.0.1159.127
- https://launchpad.net/ubuntu/+source/linux-meta-gcp-5.4/5.4.0.1098.74
- https://launchpad.net/ubuntu/+source/linux/4.15.0-202.213
- https://launchpad.net/ubuntu/+source/linux-meta-oracle-5.4/5.4.0.1092.101~18.04.66
- https://launchpad.net/ubuntu/+source/linux-signed-oracle-5.4/5.4.0-1092.101~18.04.1
- https://launchpad.net/ubuntu/+source/linux-kvm/4.15.0-1134.139
- https://launchpad.net/ubuntu/+source/linux-meta-kvm/4.15.0.1134.125
- https://ubuntu.com/security/notices/USN-5804-1 (Advisory)
Child vulnerabilities
(Contains the following vulnerabilities)
- agent/description
- agent/event
- agent/first-publish-date
- agent/last-modified-date
- agent/references
- agent/severity
- agent/softwarecombine
- agent/tags
- agent/title
- agent/type
- agent/weakness
- collector/usn
- source/Ubuntu
- anchor-related/USN-5780-1
- anchor-related/USN-5783-1
- anchor-related/USN-5794-1
- anchor-related/USN-5802-1
- anchor-related/USN-5803-1
- anchor-related/USN-5804-2
- anchor-related/USN-5808-1
- anchor-related/USN-5809-1
- anchor-related/USN-5813-1
- anchor-related/USN-5814-1
- anchor-related/USN-5829-1
- anchor-related/USN-5830-1
- anchor-related/USN-5831-1
- anchor-related/USN-5832-1
- anchor-related/USN-5860-1
- anchor-related/USN-5861-1
- anchor-related/USN-5863-1
- anchor-related/USN-5875-1
- anchor-related/USN-5877-1
- anchor-related/USN-5879-1
- anchor-related/USN-5914-1
- anchor-related/USN-5918-1
- anchor-related/USN-5754-1
- anchor-related/USN-5755-1
- anchor-related/USN-5755-2
- anchor-related/USN-5754-2
- anchor-related/USN-5773-1
- anchor-related/USN-5779-1
- anchor-related/USN-5789-1
- anchor-related/USN-5858-1
- agent/software-canonical-lookup
- package-manager/ubuntu
- vendor/ubuntu
- canonical/ubuntu ubuntu
- version/ubuntu ubuntu/20.04
- version/ubuntu ubuntu/18.04
- version/ubuntu ubuntu/16.04
- version/ubuntu ubuntu/14.04