Ubuntu update for linux

Published: 2022-10-11

Risk	Low
Patch available	YES
Number of vulnerabilities	11
CVE-ID	CVE-2021-4159 CVE-2022-20369 CVE-2022-2318 CVE-2022-26365 CVE-2022-26373 CVE-2022-3176 CVE-2022-33740 CVE-2022-33741 CVE-2022-33742 CVE-2022-33744 CVE-2022-36879
CWE-ID	CWE-401 CWE-787 CWE-416 CWE-200 CWE-264 CWE-399
Exploitation vector	Local
Public exploit	N/A
Vulnerable software	Ubuntu Operating systems & Components / Operating system linux-image-gkeop (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-ibm-lts-20.04 (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-lowlatency (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-generic-lpae (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-kvm (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-gke-5.4 (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-5.4.0-1076-kvm (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-oracle-lts-20.04 (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-5.4.0-1084-gke (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-aws-lts-20.04 (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-gke (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-virtual (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-bluefield (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-gkeop-5.4 (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-oem-osp1 (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-ibm (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-5.4.0-1086-aws (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-5.4.0-1084-oracle (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-5.4.0-1047-bluefield (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-oem (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-generic (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-5.4.0-1054-gkeop (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-snapdragon-hwe-18.04 (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-generic-lpae-hwe-18.04 (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-5.4.0-128-generic-lpae (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-virtual-hwe-18.04 (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-lowlatency-hwe-18.04 (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-generic-hwe-18.04 (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-5.4.0-128-lowlatency (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-5.4.0-128-generic (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-5.4.0-1034-ibm (Ubuntu package) Operating systems & Components / Operating system package or component
Vendor	Canonical Ltd.

Security Bulletin

This security bulletin contains information about 11 vulnerabilities.

1) Memory leak

EUVDB-ID: #VU67913

Risk: Low

CVSSv4.0: 1.1 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2021-4159

CWE-ID: CWE-401 - Missing release of memory after effective lifetime

Exploit availability: No

Description

The vulnerability allows a local user to gain access to sensitive information.

The vulnerability exists due memory leak in Linux kernel EBPF verifier when handling internal data structures. A local user with permissions to insert eBPF code to the kernel can force the kernel to leak internal kernel memory details and bypass mitigations, related to exploitation protection.

Mitigation

Update the affected package linux to the latest version.

Vulnerable software versions

Ubuntu: 18.04 - 20.04

linux-image-gkeop (Ubuntu package): before 5.4.0.1054.55

linux-image-ibm-lts-20.04 (Ubuntu package): before 5.4.0.1034.63

linux-image-lowlatency (Ubuntu package): before 5.4.0.128.129

linux-image-generic-lpae (Ubuntu package): before 5.4.0.128.129

linux-image-kvm (Ubuntu package): before 5.4.0.1076.73

linux-image-gke-5.4 (Ubuntu package): before 5.4.0.1084.92

linux-image-5.4.0-1076-kvm (Ubuntu package): before 5.4.0-1076.81

linux-image-oracle-lts-20.04 (Ubuntu package): before 5.4.0.1084.81

linux-image-5.4.0-1084-gke (Ubuntu package): before 5.4.0-1084.90

linux-image-aws-lts-20.04 (Ubuntu package): before 5.4.0.1086.86

linux-image-gke (Ubuntu package): before 5.4.0.1084.92

linux-image-virtual (Ubuntu package): before 5.4.0.128.129

linux-image-bluefield (Ubuntu package): before 5.4.0.1047.46

linux-image-gkeop-5.4 (Ubuntu package): before 5.4.0.1054.55

linux-image-oem-osp1 (Ubuntu package): before 5.4.0.128.129

linux-image-ibm (Ubuntu package): before 5.4.0.1034.48

linux-image-5.4.0-1086-aws (Ubuntu package): before 5.4.0-1086.93

linux-image-5.4.0-1084-oracle (Ubuntu package): before 5.4.0-1084.92

linux-image-5.4.0-1047-bluefield (Ubuntu package): before 5.4.0-1047.52

linux-image-oem (Ubuntu package): before 5.4.0.128.129

linux-image-generic (Ubuntu package): before 5.4.0.128.129

linux-image-5.4.0-1054-gkeop (Ubuntu package): before 5.4.0-1054.57

linux-image-snapdragon-hwe-18.04 (Ubuntu package): before 5.4.0.128.144~18.04.107

linux-image-generic-lpae-hwe-18.04 (Ubuntu package): before 5.4.0.128.144~18.04.107

linux-image-5.4.0-128-generic-lpae (Ubuntu package): before 5.4.0-128.144~18.04.1

linux-image-virtual-hwe-18.04 (Ubuntu package): before 5.4.0.128.144~18.04.107

linux-image-lowlatency-hwe-18.04 (Ubuntu package): before 5.4.0.128.144~18.04.107

linux-image-generic-hwe-18.04 (Ubuntu package): before 5.4.0.128.144~18.04.107

linux-image-5.4.0-128-lowlatency (Ubuntu package): before 5.4.0-128.144~18.04.1

linux-image-5.4.0-128-generic (Ubuntu package): before 5.4.0-128.144~18.04.1

linux-image-5.4.0-1034-ibm (Ubuntu package): before 5.4.0-1034.38~18.04.1

CPE2.3

External links

https://ubuntu.com/security/notices/USN-5668-1

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

2) Out-of-bounds write

EUVDB-ID: #VU67474

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-20369

CWE-ID: CWE-787 - Out-of-bounds write

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a boundary error within the v4l2_m2m_querybuf() function in v4l2-mem2mem.c. A local user can trigger ab out-of-bounds write and execute arbitrary code with elevated privileges.