USN-7459-2: Linux kernel (GCP) vulnerabilities
Jann Horn discovered that the watchqueue event notification subsystem in the Linux kernel contained an out-of-bounds write vulnerability. A local attacker could use this to cause a denial of service (system crash) or escalate their privileges. (CVE-2022-0995) Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
Affected Software
Event History
Frequently Asked Questions
What is the severity of USN-7459-2?
The severity of USN-7459-2 is considered high due to the potential for denial of service and privilege escalation.
How do I fix USN-7459-2?
To fix USN-7459-2, update to the recommended versions of the affected Linux kernel packages as specified by Ubuntu.
Who discovered the vulnerability in USN-7459-2?
The vulnerability in USN-7459-2 was discovered by Jann Horn.
What type of vulnerability is described in USN-7459-2?
USN-7459-2 describes an out-of-bounds write vulnerability in the watch_queue event notification subsystem of the Linux kernel.
What are the consequences of the vulnerability in USN-7459-2?
The consequences of the vulnerability in USN-7459-2 include possible denial of service and the potential for local privilege escalation.