Risk | Medium |
Patch available | YES |
Number of vulnerabilities | 8 |
CVE-ID | CVE-2021-26401 CVE-2022-20008 CVE-2022-25258 CVE-2022-25375 CVE-2022-26490 CVE-2022-26966 CVE-2022-27223 CVE-2022-29156 |
CWE-ID | CWE-200 CWE-908 CWE-476 CWE-668 CWE-119 CWE-416 CWE-129 CWE-415 |
Exploitation vector | Network |
Public exploit | Public exploit code for vulnerability #4 is available. |
Vulnerable software |
Ubuntu Operating systems & Components / Operating system linux-image-raspi (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-generic-64k-hwe-20.04 (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-generic-lpae-hwe-20.04 (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-virtual-hwe-20.04 (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-generic-hwe-20.04 (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-lowlatency-hwe-20.04 (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-lowlatency (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-generic-lpae (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-5.13.0-1028-oracle (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-kvm (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-5.13.0-1022-kvm (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-oracle (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-gcp (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-5.13.0-41-generic-lpae (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-5.13.0-41-lowlatency (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-gke (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-5.13.0-1023-azure (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-oem-20.04 (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-5.13.0-1023-aws (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-raspi-nolpae (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-azure (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-5.13.0-41-generic-64k (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-5.13.0-1026-raspi-nolpae (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-5.13.0-1026-raspi (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-5.13.0-1025-gcp (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-aws (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-generic (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-generic-64k (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-5.13.0-41-generic (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-virtual (Ubuntu package) Operating systems & Components / Operating system package or component |
Vendor | Canonical Ltd. |
Security Bulletin
This security bulletin contains information about 8 vulnerabilities.
EUVDB-ID: #VU61566
Risk: Low
CVSSv4.0: 1.9 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID: CVE-2021-26401
CWE-ID:
CWE-200 - Information exposure
Exploit availability: No
DescriptionThe vulnerability allows a local user to gain access to potentially sensitive information.
The vulnerability exists due to excessive data output by the application within LFENCE/JMP. A local user can gain unauthorized access to sensitive information on the system.
MitigationUpdate the affected package linux to the latest version.
Vulnerable software versionsUbuntu: 20.04 - 21.10
linux-image-raspi (Ubuntu package): before 5.13.0.1026.31
linux-image-generic-64k-hwe-20.04 (Ubuntu package): before 5.13.0.41.46~20.04.26
linux-image-generic-lpae-hwe-20.04 (Ubuntu package): before 5.13.0.41.46~20.04.26
linux-image-virtual-hwe-20.04 (Ubuntu package): before 5.13.0.41.46~20.04.26
linux-image-generic-hwe-20.04 (Ubuntu package): before 5.13.0.41.46~20.04.26
linux-image-lowlatency-hwe-20.04 (Ubuntu package): before 5.13.0.41.46~20.04.26
linux-image-lowlatency (Ubuntu package): before 5.13.0.41.50
linux-image-generic-lpae (Ubuntu package): before 5.13.0.41.50
linux-image-5.13.0-1028-oracle (Ubuntu package): before 5.13.0-1028.33
linux-image-kvm (Ubuntu package): before 5.13.0.1022.22
linux-image-5.13.0-1022-kvm (Ubuntu package): before 5.13.0-1022.23
linux-image-oracle (Ubuntu package): before 5.13.0.1028.28
linux-image-gcp (Ubuntu package): before 5.13.0.1025.23
linux-image-5.13.0-41-generic-lpae (Ubuntu package): before 5.13.0-41.46~20.04.1
linux-image-5.13.0-41-lowlatency (Ubuntu package): before 5.13.0-41.46~20.04.1
linux-image-gke (Ubuntu package): before 5.13.0.1025.23
linux-image-5.13.0-1023-azure (Ubuntu package): before 5.13.0-1023.27~20.04.1
linux-image-oem-20.04 (Ubuntu package): before 5.13.0.41.50
linux-image-5.13.0-1023-aws (Ubuntu package): before 5.13.0-1023.25~20.04.1
linux-image-raspi-nolpae (Ubuntu package): before 5.13.0.1026.31
linux-image-azure (Ubuntu package): before 5.13.0.1023.23
linux-image-5.13.0-41-generic-64k (Ubuntu package): before 5.13.0-41.46~20.04.1
linux-image-5.13.0-1026-raspi-nolpae (Ubuntu package): before 5.13.0-1026.28
linux-image-5.13.0-1026-raspi (Ubuntu package): before 5.13.0-1026.28
linux-image-5.13.0-1025-gcp (Ubuntu package): before 5.13.0-1025.30~20.04.1
linux-image-aws (Ubuntu package): before 5.13.0.1023.24
linux-image-generic (Ubuntu package): before 5.13.0.41.50
linux-image-generic-64k (Ubuntu package): before 5.13.0.41.50
linux-image-5.13.0-41-generic (Ubuntu package): before 5.13.0-41.46~20.04.1
linux-image-virtual (Ubuntu package): before 5.13.0.41.50
CPE2.3https://ubuntu.com/security/notices/USN-5417-1
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU63352
Risk: Low
CVSSv4.0: 2.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID: CVE-2022-20008
CWE-ID:
CWE-908 - Use of Uninitialized Resource
Exploit availability: No
DescriptionThe vulnerability allows a local application to bypass certain security restrictions.
The vulnerability exists due to usage of uninitialized resources within the mmc_blk_read_single() function in block.c. A local application can obtain potentially sensitive information from memory when reading from an SD card that triggers errors.
MitigationUpdate the affected package linux to the latest version.
Vulnerable software versionsUbuntu: 20.04 - 21.10
linux-image-raspi (Ubuntu package): before 5.13.0.1026.31
linux-image-generic-64k-hwe-20.04 (Ubuntu package): before 5.13.0.41.46~20.04.26
linux-image-generic-lpae-hwe-20.04 (Ubuntu package): before 5.13.0.41.46~20.04.26
linux-image-virtual-hwe-20.04 (Ubuntu package): before 5.13.0.41.46~20.04.26
linux-image-generic-hwe-20.04 (Ubuntu package): before 5.13.0.41.46~20.04.26
linux-image-lowlatency-hwe-20.04 (Ubuntu package): before 5.13.0.41.46~20.04.26
linux-image-lowlatency (Ubuntu package): before 5.13.0.41.50
linux-image-generic-lpae (Ubuntu package): before 5.13.0.41.50
linux-image-5.13.0-1028-oracle (Ubuntu package): before 5.13.0-1028.33
linux-image-kvm (Ubuntu package): before 5.13.0.1022.22
linux-image-5.13.0-1022-kvm (Ubuntu package): before 5.13.0-1022.23
linux-image-oracle (Ubuntu package): before 5.13.0.1028.28
linux-image-gcp (Ubuntu package): before 5.13.0.1025.23
linux-image-5.13.0-41-generic-lpae (Ubuntu package): before 5.13.0-41.46~20.04.1
linux-image-5.13.0-41-lowlatency (Ubuntu package): before 5.13.0-41.46~20.04.1
linux-image-gke (Ubuntu package): before 5.13.0.1025.23
linux-image-5.13.0-1023-azure (Ubuntu package): before 5.13.0-1023.27~20.04.1
linux-image-oem-20.04 (Ubuntu package): before 5.13.0.41.50
linux-image-5.13.0-1023-aws (Ubuntu package): before 5.13.0-1023.25~20.04.1
linux-image-raspi-nolpae (Ubuntu package): before 5.13.0.1026.31
linux-image-azure (Ubuntu package): before 5.13.0.1023.23
linux-image-5.13.0-41-generic-64k (Ubuntu package): before 5.13.0-41.46~20.04.1
linux-image-5.13.0-1026-raspi-nolpae (Ubuntu package): before 5.13.0-1026.28
linux-image-5.13.0-1026-raspi (Ubuntu package): before 5.13.0-1026.28
linux-image-5.13.0-1025-gcp (Ubuntu package): before 5.13.0-1025.30~20.04.1
linux-image-aws (Ubuntu package): before 5.13.0.1023.24
linux-image-generic (Ubuntu package): before 5.13.0.41.50
linux-image-generic-64k (Ubuntu package): before 5.13.0.41.50
linux-image-5.13.0-41-generic (Ubuntu package): before 5.13.0-41.46~20.04.1
linux-image-virtual (Ubuntu package): before 5.13.0.41.50
CPE2.3https://ubuntu.com/security/notices/USN-5417-1
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU61270
Risk: Low
CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID: CVE-2022-25258
CWE-ID:
CWE-476 - NULL Pointer Dereference
Exploit availability: No
DescriptionThe vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists due to a NULL pointer dereference error drivers/usb/gadget/composite.c in the Linux kernel. The USB Gadget subsystem lacks certain validation of interface OS descriptor requests (ones with a large array index and ones associated with NULL function pointer retrieval). A local user can run a specially crafted program to trigger memory corruption and perform a denial of service (DoS) attack.
MitigationUpdate the affected package linux to the latest version.
Vulnerable software versionsUbuntu: 20.04 - 21.10
linux-image-raspi (Ubuntu package): before 5.13.0.1026.31
linux-image-generic-64k-hwe-20.04 (Ubuntu package): before 5.13.0.41.46~20.04.26
linux-image-generic-lpae-hwe-20.04 (Ubuntu package): before 5.13.0.41.46~20.04.26
linux-image-virtual-hwe-20.04 (Ubuntu package): before 5.13.0.41.46~20.04.26
linux-image-generic-hwe-20.04 (Ubuntu package): before 5.13.0.41.46~20.04.26
linux-image-lowlatency-hwe-20.04 (Ubuntu package): before 5.13.0.41.46~20.04.26
linux-image-lowlatency (Ubuntu package): before 5.13.0.41.50
linux-image-generic-lpae (Ubuntu package): before 5.13.0.41.50
linux-image-5.13.0-1028-oracle (Ubuntu package): before 5.13.0-1028.33
linux-image-kvm (Ubuntu package): before 5.13.0.1022.22
linux-image-5.13.0-1022-kvm (Ubuntu package): before 5.13.0-1022.23
linux-image-oracle (Ubuntu package): before 5.13.0.1028.28
linux-image-gcp (Ubuntu package): before 5.13.0.1025.23
linux-image-5.13.0-41-generic-lpae (Ubuntu package): before 5.13.0-41.46~20.04.1
linux-image-5.13.0-41-lowlatency (Ubuntu package): before 5.13.0-41.46~20.04.1
linux-image-gke (Ubuntu package): before 5.13.0.1025.23
linux-image-5.13.0-1023-azure (Ubuntu package): before 5.13.0-1023.27~20.04.1
linux-image-oem-20.04 (Ubuntu package): before 5.13.0.41.50
linux-image-5.13.0-1023-aws (Ubuntu package): before 5.13.0-1023.25~20.04.1
linux-image-raspi-nolpae (Ubuntu package): before 5.13.0.1026.31
linux-image-azure (Ubuntu package): before 5.13.0.1023.23
linux-image-5.13.0-41-generic-64k (Ubuntu package): before 5.13.0-41.46~20.04.1
linux-image-5.13.0-1026-raspi-nolpae (Ubuntu package): before 5.13.0-1026.28
linux-image-5.13.0-1026-raspi (Ubuntu package): before 5.13.0-1026.28
linux-image-5.13.0-1025-gcp (Ubuntu package): before 5.13.0-1025.30~20.04.1
linux-image-aws (Ubuntu package): before 5.13.0.1023.24
linux-image-generic (Ubuntu package): before 5.13.0.41.50
linux-image-generic-64k (Ubuntu package): before 5.13.0.41.50
linux-image-5.13.0-41-generic (Ubuntu package): before 5.13.0-41.46~20.04.1
linux-image-virtual (Ubuntu package): before 5.13.0.41.50
CPE2.3https://ubuntu.com/security/notices/USN-5417-1
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU61269
Risk: Low
CVSSv4.0: 1.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/U:Clear]
CVE-ID: CVE-2022-25375
CWE-ID:
CWE-668 - Exposure of resource to wrong sphere
Exploit availability: Yes
DescriptionThe vulnerability allows a local user to gain access to sensitive information.
The vulnerability exists due to improper access restrictions in drivers/usb/gadget/function/rndis.c in the Linux kernel. The RNDIS USB gadget lacks validation of the size of the RNDIS_MSG_SET command. A local user can run a specially crafted program to gain access to kernel memory.
Update the affected package linux to the latest version.
Vulnerable software versionsUbuntu: 20.04 - 21.10
linux-image-raspi (Ubuntu package): before 5.13.0.1026.31
linux-image-generic-64k-hwe-20.04 (Ubuntu package): before 5.13.0.41.46~20.04.26
linux-image-generic-lpae-hwe-20.04 (Ubuntu package): before 5.13.0.41.46~20.04.26
linux-image-virtual-hwe-20.04 (Ubuntu package): before 5.13.0.41.46~20.04.26
linux-image-generic-hwe-20.04 (Ubuntu package): before 5.13.0.41.46~20.04.26
linux-image-lowlatency-hwe-20.04 (Ubuntu package): before 5.13.0.41.46~20.04.26
linux-image-lowlatency (Ubuntu package): before 5.13.0.41.50
linux-image-generic-lpae (Ubuntu package): before 5.13.0.41.50
linux-image-5.13.0-1028-oracle (Ubuntu package): before 5.13.0-1028.33
linux-image-kvm (Ubuntu package): before 5.13.0.1022.22
linux-image-5.13.0-1022-kvm (Ubuntu package): before 5.13.0-1022.23
linux-image-oracle (Ubuntu package): before 5.13.0.1028.28
linux-image-gcp (Ubuntu package): before 5.13.0.1025.23
linux-image-5.13.0-41-generic-lpae (Ubuntu package): before 5.13.0-41.46~20.04.1
linux-image-5.13.0-41-lowlatency (Ubuntu package): before 5.13.0-41.46~20.04.1
linux-image-gke (Ubuntu package): before 5.13.0.1025.23
linux-image-5.13.0-1023-azure (Ubuntu package): before 5.13.0-1023.27~20.04.1
linux-image-oem-20.04 (Ubuntu package): before 5.13.0.41.50
linux-image-5.13.0-1023-aws (Ubuntu package): before 5.13.0-1023.25~20.04.1
linux-image-raspi-nolpae (Ubuntu package): before 5.13.0.1026.31
linux-image-azure (Ubuntu package): before 5.13.0.1023.23
linux-image-5.13.0-41-generic-64k (Ubuntu package): before 5.13.0-41.46~20.04.1
linux-image-5.13.0-1026-raspi-nolpae (Ubuntu package): before 5.13.0-1026.28
linux-image-5.13.0-1026-raspi (Ubuntu package): before 5.13.0-1026.28
linux-image-5.13.0-1025-gcp (Ubuntu package): before 5.13.0-1025.30~20.04.1
linux-image-aws (Ubuntu package): before 5.13.0.1023.24
linux-image-generic (Ubuntu package): before 5.13.0.41.50
linux-image-generic-64k (Ubuntu package): before 5.13.0.41.50
linux-image-5.13.0-41-generic (Ubuntu package): before 5.13.0-41.46~20.04.1
linux-image-virtual (Ubuntu package): before 5.13.0.41.50
CPE2.3https://ubuntu.com/security/notices/USN-5417-1
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability. However, proof of concept for this vulnerability is available.
EUVDB-ID: #VU62601
Risk: Low
CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID: CVE-2022-26490
CWE-ID:
CWE-119 - Memory corruption
Exploit availability: No
DescriptionThe vulnerability allows a local user to escalate privileges on the system.
The vulnerability exists due to a boundary error within the st21nfca_connectivity_event_received() function in drivers/nfc/st21nfca/se.c in Linux kernel. A local user can run a specially crafted program to trigger buffer overflow and execute arbitrary code with elevated privileges.
Update the affected package linux to the latest version.
Vulnerable software versionsUbuntu: 20.04 - 21.10
linux-image-raspi (Ubuntu package): before 5.13.0.1026.31
linux-image-generic-64k-hwe-20.04 (Ubuntu package): before 5.13.0.41.46~20.04.26
linux-image-generic-lpae-hwe-20.04 (Ubuntu package): before 5.13.0.41.46~20.04.26
linux-image-virtual-hwe-20.04 (Ubuntu package): before 5.13.0.41.46~20.04.26
linux-image-generic-hwe-20.04 (Ubuntu package): before 5.13.0.41.46~20.04.26
linux-image-lowlatency-hwe-20.04 (Ubuntu package): before 5.13.0.41.46~20.04.26
linux-image-lowlatency (Ubuntu package): before 5.13.0.41.50
linux-image-generic-lpae (Ubuntu package): before 5.13.0.41.50
linux-image-5.13.0-1028-oracle (Ubuntu package): before 5.13.0-1028.33
linux-image-kvm (Ubuntu package): before 5.13.0.1022.22
linux-image-5.13.0-1022-kvm (Ubuntu package): before 5.13.0-1022.23
linux-image-oracle (Ubuntu package): before 5.13.0.1028.28
linux-image-gcp (Ubuntu package): before 5.13.0.1025.23
linux-image-5.13.0-41-generic-lpae (Ubuntu package): before 5.13.0-41.46~20.04.1
linux-image-5.13.0-41-lowlatency (Ubuntu package): before 5.13.0-41.46~20.04.1
linux-image-gke (Ubuntu package): before 5.13.0.1025.23
linux-image-5.13.0-1023-azure (Ubuntu package): before 5.13.0-1023.27~20.04.1
linux-image-oem-20.04 (Ubuntu package): before 5.13.0.41.50
linux-image-5.13.0-1023-aws (Ubuntu package): before 5.13.0-1023.25~20.04.1
linux-image-raspi-nolpae (Ubuntu package): before 5.13.0.1026.31
linux-image-azure (Ubuntu package): before 5.13.0.1023.23
linux-image-5.13.0-41-generic-64k (Ubuntu package): before 5.13.0-41.46~20.04.1
linux-image-5.13.0-1026-raspi-nolpae (Ubuntu package): before 5.13.0-1026.28
linux-image-5.13.0-1026-raspi (Ubuntu package): before 5.13.0-1026.28
linux-image-5.13.0-1025-gcp (Ubuntu package): before 5.13.0-1025.30~20.04.1
linux-image-aws (Ubuntu package): before 5.13.0.1023.24
linux-image-generic (Ubuntu package): before 5.13.0.41.50
linux-image-generic-64k (Ubuntu package): before 5.13.0.41.50
linux-image-5.13.0-41-generic (Ubuntu package): before 5.13.0-41.46~20.04.1
linux-image-virtual (Ubuntu package): before 5.13.0.41.50
CPE2.3https://ubuntu.com/security/notices/USN-5417-1
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU63318
Risk: Low
CVSSv4.0: 4.4 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID: CVE-2022-26966
CWE-ID:
CWE-416 - Use After Free
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to gain access to sensitive information.
The vulnerability exists due to a use-after-free error in drivers/net/usb/sr9700.c in the Linux kernel. A remote attacker can pass specially crafted data and obtain sensitive information from heap memory.
MitigationUpdate the affected package linux to the latest version.
Vulnerable software versionsUbuntu: 20.04 - 21.10
linux-image-raspi (Ubuntu package): before 5.13.0.1026.31
linux-image-generic-64k-hwe-20.04 (Ubuntu package): before 5.13.0.41.46~20.04.26
linux-image-generic-lpae-hwe-20.04 (Ubuntu package): before 5.13.0.41.46~20.04.26
linux-image-virtual-hwe-20.04 (Ubuntu package): before 5.13.0.41.46~20.04.26
linux-image-generic-hwe-20.04 (Ubuntu package): before 5.13.0.41.46~20.04.26
linux-image-lowlatency-hwe-20.04 (Ubuntu package): before 5.13.0.41.46~20.04.26
linux-image-lowlatency (Ubuntu package): before 5.13.0.41.50
linux-image-generic-lpae (Ubuntu package): before 5.13.0.41.50
linux-image-5.13.0-1028-oracle (Ubuntu package): before 5.13.0-1028.33
linux-image-kvm (Ubuntu package): before 5.13.0.1022.22
linux-image-5.13.0-1022-kvm (Ubuntu package): before 5.13.0-1022.23
linux-image-oracle (Ubuntu package): before 5.13.0.1028.28
linux-image-gcp (Ubuntu package): before 5.13.0.1025.23
linux-image-5.13.0-41-generic-lpae (Ubuntu package): before 5.13.0-41.46~20.04.1
linux-image-5.13.0-41-lowlatency (Ubuntu package): before 5.13.0-41.46~20.04.1
linux-image-gke (Ubuntu package): before 5.13.0.1025.23
linux-image-5.13.0-1023-azure (Ubuntu package): before 5.13.0-1023.27~20.04.1
linux-image-oem-20.04 (Ubuntu package): before 5.13.0.41.50
linux-image-5.13.0-1023-aws (Ubuntu package): before 5.13.0-1023.25~20.04.1
linux-image-raspi-nolpae (Ubuntu package): before 5.13.0.1026.31
linux-image-azure (Ubuntu package): before 5.13.0.1023.23
linux-image-5.13.0-41-generic-64k (Ubuntu package): before 5.13.0-41.46~20.04.1
linux-image-5.13.0-1026-raspi-nolpae (Ubuntu package): before 5.13.0-1026.28
linux-image-5.13.0-1026-raspi (Ubuntu package): before 5.13.0-1026.28
linux-image-5.13.0-1025-gcp (Ubuntu package): before 5.13.0-1025.30~20.04.1
linux-image-aws (Ubuntu package): before 5.13.0.1023.24
linux-image-generic (Ubuntu package): before 5.13.0.41.50
linux-image-generic-64k (Ubuntu package): before 5.13.0.41.50
linux-image-5.13.0-41-generic (Ubuntu package): before 5.13.0-41.46~20.04.1
linux-image-virtual (Ubuntu package): before 5.13.0.41.50
CPE2.3https://ubuntu.com/security/notices/USN-5417-1
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU63316
Risk: Medium
CVSSv4.0: 6.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Green]
CVE-ID: CVE-2022-27223
CWE-ID:
CWE-129 - Improper Validation of Array Index
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to execute arbitrary code with elevated privileges.
The vulnerability exists due to improper validation of array index in drivers/usb/gadget/udc/udc-xilinx.c in the Linux kernel. A remote attacker can send specially crafted data to the system and execute arbitrary code with elevated privileges.
Update the affected package linux to the latest version.
Vulnerable software versionsUbuntu: 20.04 - 21.10
linux-image-raspi (Ubuntu package): before 5.13.0.1026.31
linux-image-generic-64k-hwe-20.04 (Ubuntu package): before 5.13.0.41.46~20.04.26
linux-image-generic-lpae-hwe-20.04 (Ubuntu package): before 5.13.0.41.46~20.04.26
linux-image-virtual-hwe-20.04 (Ubuntu package): before 5.13.0.41.46~20.04.26
linux-image-generic-hwe-20.04 (Ubuntu package): before 5.13.0.41.46~20.04.26
linux-image-lowlatency-hwe-20.04 (Ubuntu package): before 5.13.0.41.46~20.04.26
linux-image-lowlatency (Ubuntu package): before 5.13.0.41.50
linux-image-generic-lpae (Ubuntu package): before 5.13.0.41.50
linux-image-5.13.0-1028-oracle (Ubuntu package): before 5.13.0-1028.33
linux-image-kvm (Ubuntu package): before 5.13.0.1022.22
linux-image-5.13.0-1022-kvm (Ubuntu package): before 5.13.0-1022.23
linux-image-oracle (Ubuntu package): before 5.13.0.1028.28
linux-image-gcp (Ubuntu package): before 5.13.0.1025.23
linux-image-5.13.0-41-generic-lpae (Ubuntu package): before 5.13.0-41.46~20.04.1
linux-image-5.13.0-41-lowlatency (Ubuntu package): before 5.13.0-41.46~20.04.1
linux-image-gke (Ubuntu package): before 5.13.0.1025.23
linux-image-5.13.0-1023-azure (Ubuntu package): before 5.13.0-1023.27~20.04.1
linux-image-oem-20.04 (Ubuntu package): before 5.13.0.41.50
linux-image-5.13.0-1023-aws (Ubuntu package): before 5.13.0-1023.25~20.04.1
linux-image-raspi-nolpae (Ubuntu package): before 5.13.0.1026.31
linux-image-azure (Ubuntu package): before 5.13.0.1023.23
linux-image-5.13.0-41-generic-64k (Ubuntu package): before 5.13.0-41.46~20.04.1
linux-image-5.13.0-1026-raspi-nolpae (Ubuntu package): before 5.13.0-1026.28
linux-image-5.13.0-1026-raspi (Ubuntu package): before 5.13.0-1026.28
linux-image-5.13.0-1025-gcp (Ubuntu package): before 5.13.0-1025.30~20.04.1
linux-image-aws (Ubuntu package): before 5.13.0.1023.24
linux-image-generic (Ubuntu package): before 5.13.0.41.50
linux-image-generic-64k (Ubuntu package): before 5.13.0.41.50
linux-image-5.13.0-41-generic (Ubuntu package): before 5.13.0-41.46~20.04.1
linux-image-virtual (Ubuntu package): before 5.13.0.41.50
CPE2.3https://ubuntu.com/security/notices/USN-5417-1
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote authenticated user via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU63319
Risk: Medium
CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Green]
CVE-ID: CVE-2022-29156
CWE-ID:
CWE-415 - Double Free
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to execute arbitrary code on the target system.
The vulnerability exists due to a boundary error in drivers/infiniband/ulp/rtrs/rtrs-clt.c in the Linux kernel. A remote attacker can pass specially crafted data to the application, trigger double free error and execute arbitrary code on the target system.
Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.
MitigationUpdate the affected package linux to the latest version.
Vulnerable software versionsUbuntu: 20.04 - 21.10
linux-image-raspi (Ubuntu package): before 5.13.0.1026.31
linux-image-generic-64k-hwe-20.04 (Ubuntu package): before 5.13.0.41.46~20.04.26
linux-image-generic-lpae-hwe-20.04 (Ubuntu package): before 5.13.0.41.46~20.04.26
linux-image-virtual-hwe-20.04 (Ubuntu package): before 5.13.0.41.46~20.04.26
linux-image-generic-hwe-20.04 (Ubuntu package): before 5.13.0.41.46~20.04.26
linux-image-lowlatency-hwe-20.04 (Ubuntu package): before 5.13.0.41.46~20.04.26
linux-image-lowlatency (Ubuntu package): before 5.13.0.41.50
linux-image-generic-lpae (Ubuntu package): before 5.13.0.41.50
linux-image-5.13.0-1028-oracle (Ubuntu package): before 5.13.0-1028.33
linux-image-kvm (Ubuntu package): before 5.13.0.1022.22
linux-image-5.13.0-1022-kvm (Ubuntu package): before 5.13.0-1022.23
linux-image-oracle (Ubuntu package): before 5.13.0.1028.28
linux-image-gcp (Ubuntu package): before 5.13.0.1025.23
linux-image-5.13.0-41-generic-lpae (Ubuntu package): before 5.13.0-41.46~20.04.1
linux-image-5.13.0-41-lowlatency (Ubuntu package): before 5.13.0-41.46~20.04.1
linux-image-gke (Ubuntu package): before 5.13.0.1025.23
linux-image-5.13.0-1023-azure (Ubuntu package): before 5.13.0-1023.27~20.04.1
linux-image-oem-20.04 (Ubuntu package): before 5.13.0.41.50
linux-image-5.13.0-1023-aws (Ubuntu package): before 5.13.0-1023.25~20.04.1
linux-image-raspi-nolpae (Ubuntu package): before 5.13.0.1026.31
linux-image-azure (Ubuntu package): before 5.13.0.1023.23
linux-image-5.13.0-41-generic-64k (Ubuntu package): before 5.13.0-41.46~20.04.1
linux-image-5.13.0-1026-raspi-nolpae (Ubuntu package): before 5.13.0-1026.28
linux-image-5.13.0-1026-raspi (Ubuntu package): before 5.13.0-1026.28
linux-image-5.13.0-1025-gcp (Ubuntu package): before 5.13.0-1025.30~20.04.1
linux-image-aws (Ubuntu package): before 5.13.0.1023.24
linux-image-generic (Ubuntu package): before 5.13.0.41.50
linux-image-generic-64k (Ubuntu package): before 5.13.0.41.50
linux-image-5.13.0-41-generic (Ubuntu package): before 5.13.0-41.46~20.04.1
linux-image-virtual (Ubuntu package): before 5.13.0.41.50
CPE2.3https://ubuntu.com/security/notices/USN-5417-1
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.