USN-7428-1: Linux kernel vulnerabilities
Demi Marie Obenour and Simon Gaiser discovered that several Xen para- virtualization device frontends did not properly restrict the access rights of device backends. An attacker could possibly use a malicious Xen backend to gain access to memory pages of a guest VM or cause a denial of service in the guest. (CVE-2022-23041) Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
Affected Software
Event History
Child vulnerabilities
Contains the following vulnerabilities.
Frequently Asked Questions
What is the severity of USN-7428-1?
The severity of USN-7428-1 is considered high due to potential unauthorized access and denial of service risks.
How do I fix USN-7428-1?
To fix USN-7428-1, you should update to the specified secure versions of the respective packages for Ubuntu 18.04 or 16.04.
What are the affected packages in USN-7428-1?
Affected packages in USN-7428-1 include multiple versions of linux-image packages for both Ubuntu 18.04 and 16.04.
Can USN-7428-1 affect virtualized environments?
Yes, USN-7428-1 can affect virtualized environments by allowing attackers to gain access to the memory pages of guest VMs.
Where can I find more information about USN-7428-1?
More information about USN-7428-1 can be found in the Ubuntu security notices or advisories.