First published: Mon Apr 28 2025(Updated: )
Jann Horn discovered that the watch_queue event notification subsystem in the Linux kernel contained an out-of-bounds write vulnerability. A local attacker could use this to cause a denial of service (system crash) or escalate their privileges. (CVE-2022-0995) Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
Affected Software | Affected Version | How to fix |
---|
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of USN-7459-2 is considered high due to the potential for denial of service and privilege escalation.
To fix USN-7459-2, update to the recommended versions of the affected Linux kernel packages as specified by Ubuntu.
The vulnerability in USN-7459-2 was discovered by Jann Horn.
USN-7459-2 describes an out-of-bounds write vulnerability in the watch_queue event notification subsystem of the Linux kernel.
The consequences of the vulnerability in USN-7459-2 include possible denial of service and the potential for local privilege escalation.