Ubuntu update for linux-aws-hwe

Published: 2022-08-11 | Updated: 2024-06-26

Risk	Low
Patch available	YES
Number of vulnerabilities	13
CVE-ID	CVE-2022-0494 CVE-2022-1048 CVE-2022-1195 CVE-2022-1652 CVE-2022-1679 CVE-2022-1729 CVE-2022-1734 CVE-2022-1974 CVE-2022-1975 CVE-2022-2586 CVE-2022-2588 CVE-2022-33981 CVE-2022-34918
CWE-ID	CWE-200 CWE-416 CWE-362 CWE-248 CWE-415 CWE-843
Exploitation vector	Local network
Public exploit	Vulnerability #10 is being exploited in the wild. Vulnerability #11 is being exploited in the wild. Vulnerability #13 is being exploited in the wild.
Vulnerable software	Ubuntu Operating systems & Components / Operating system linux-image-4.15.0-1104-oracle (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-virtual-hwe-16.04 (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-oracle (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-generic-hwe-16.04 (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-aws-hwe (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-gcp (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-gke (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-azure (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-4.15.0-1139-aws-hwe (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-4.15.0-191-lowlatency (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-4.15.0-191-generic (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-oem (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-4.15.0-1149-azure (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-lowlatency-hwe-16.04 (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-4.15.0-1134-gcp (Ubuntu package) Operating systems & Components / Operating system package or component
Vendor	Canonical Ltd.

Security Bulletin

This security bulletin contains information about 13 vulnerabilities.

1) Information disclosure

EUVDB-ID: #VU64259

Risk: Low

CVSSv4.0: 4 [CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-0494

CWE-ID: CWE-200 - Information exposure

Exploit availability: No

Description

The vulnerability allows a local user to gain access to potentially sensitive information.

The vulnerability exists due to excessive data output in the scsi_ioctl() function in drivers/scsi/scsi_ioctl.c in the Linux kernel. A local user with a special user privilege (CAP_SYS_ADMIN or CAP_SYS_RAWIO) can gain unauthorized access to sensitive information on the system.

Mitigation

Update the affected package linux-aws-hwe to the latest version.

Vulnerable software versions

Ubuntu: 14.04 - 16.04

linux-image-4.15.0-1104-oracle (Ubuntu package): before 4.15.01134.150~16.04.2

linux-image-virtual-hwe-16.04 (Ubuntu package): before 4.15.01134.150~16.04.2

linux-image-oracle (Ubuntu package): before 4.15.01134.150~16.04.2

linux-image-generic-hwe-16.04 (Ubuntu package): before 4.15.01134.150~16.04.2

linux-image-aws-hwe (Ubuntu package): before 4.15.01134.150~16.04.2

linux-image-gcp (Ubuntu package): before 4.15.01134.150~16.04.2

linux-image-gke (Ubuntu package): before 4.15.01134.150~16.04.2

linux-image-azure (Ubuntu package): before 4.15.01134.150~16.04.2

linux-image-4.15.0-1139-aws-hwe (Ubuntu package): before 4.15.01134.150~16.04.2

linux-image-4.15.0-191-lowlatency (Ubuntu package): before 4.15.01134.150~16.04.2

linux-image-4.15.0-191-generic (Ubuntu package): before 4.15.01134.150~16.04.2

linux-image-oem (Ubuntu package): before 4.15.01134.150~16.04.2

linux-image-4.15.0-1149-azure (Ubuntu package): before 4.15.01134.150~16.04.2

linux-image-lowlatency-hwe-16.04 (Ubuntu package): before 4.15.01134.150~16.04.2

linux-image-4.15.0-1134-gcp (Ubuntu package): before 4.15.01134.150~16.04.2

CPE2.3

External links

https://ubuntu.com/security/notices/USN-5560-2

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

2) Use-after-free

EUVDB-ID: #VU63428

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-1048

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

Description

The vulnerability allows a local user to execute arbitrary code with elevated privileges.

The vulnerability exists due to a use-after-free error in the Linux kernel’s sound subsystem in the way a user triggers concurrent calls of PCM hw_params. A local user can execute arbitrary code with elevated privileges and perform a denial-of-service attack.