First published: Fri Apr 25 2025(Updated: )
Jann Horn discovered that the watch_queue event notification subsystem in the Linux kernel contained an out-of-bounds write vulnerability. A local attacker could use this to cause a denial of service (system crash) or escalate their privileges. (CVE-2022-0995) Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
Affected Software | Affected Version | How to fix |
---|---|---|
All of | ||
ubuntu/linux-image-5.15.0-1079-oracle | <5.15.0-1079.85~20.04.1 | 5.15.0-1079.85~20.04.1 |
Ubuntu | =20.04 | |
All of | ||
ubuntu/linux-image-oracle | <5.15.0.1079.85~20.04.1 | 5.15.0.1079.85~20.04.1 |
Ubuntu | =20.04 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
(Contains the following vulnerabilities)
USN-7455-4 is classified as a high-severity vulnerability due to its potential for privilege escalation and denial of service.
To address USN-7455-4, update your Ubuntu system to the latest kernel version recommended in the advisory.
USN-7455-4 was discovered by security researcher Jann Horn.
A local attacker can exploit USN-7455-4 to cause a system crash or escalate their privileges.
USN-7455-4 affects Ubuntu 20.04 with specific Linux kernel versions related to the advisory.