USN-7428-2: Linux kernel (FIPS) vulnerabilities
Demi Marie Obenour and Simon Gaiser discovered that several Xen para- virtualization device frontends did not properly restrict the access rights of device backends. An attacker could possibly use a malicious Xen backend to gain access to memory pages of a guest VM or cause a denial of service in the guest. (CVE-2022-23041) Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
Affected Software
Event History
Child vulnerabilities
Contains the following vulnerabilities.
Frequently Asked Questions
What is the severity of USN-7428-2?
USN-7428-2 is classified as a high severity vulnerability due to its potential for unauthorized access to memory pages of guest VMs.
How do I fix USN-7428-2?
To mitigate USN-7428-2, you should update to the recommended kernel version 4.15.0-1134.145 or higher on affected Ubuntu 18.04 systems.
What specific systems are affected by USN-7428-2?
USN-7428-2 affects various Ubuntu 18.04 systems running certain Xen para-virtualization device frontends.
What are the possible impacts of USN-7428-2?
An attacker exploiting USN-7428-2 could gain access to sensitive memory of a guest VM or cause a denial of service.
Who discovered USN-7428-2?
USN-7428-2 was discovered by security researchers Demi Marie Obenour and Simon Gaiser.