Ubuntu update for linux

Published: 2023-01-10 | Updated: 2023-05-21

Risk	Low
Patch available	YES
Number of vulnerabilities	7
CVE-ID	CVE-2021-4159 CVE-2022-20421 CVE-2022-3061 CVE-2022-3586 CVE-2022-39188 CVE-2022-40307 CVE-2022-4095
CWE-ID	CWE-401 CWE-362 CWE-369 CWE-416 CWE-415
Exploitation vector	Local
Public exploit	Public exploit code for vulnerability #2 is available.
Vulnerable software	Ubuntu Operating systems & Components / Operating system linux-image-4.15.0-1147-aws-hwe (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-4.15.0-1142-gcp (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-4.15.0-1158-azure (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-4.15.0-201-generic (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-4.15.0-1112-oracle (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-4.15.0-201-lowlatency (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-virtual (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-snapdragon (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-raspi2 (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-oracle-lts-18.04 (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-lowlatency (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-kvm (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-generic-lpae (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-generic (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-gcp-lts-18.04 (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-dell300x (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-azure-lts-18.04 (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-aws-lts-18.04 (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-4.15.0-201-generic-lpae (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-4.15.0-1147-aws (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-4.15.0-1143-snapdragon (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-4.15.0-1133-kvm (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-4.15.0-1125-raspi2 (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-4.15.0-1058-dell300x (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-gcp (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-gke (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-azure (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-aws-hwe (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-generic-hwe-16.04 (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-lowlatency-hwe-16.04 (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-oem (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-virtual-hwe-16.04 (Ubuntu package) Operating systems & Components / Operating system package or component linux-image-oracle (Ubuntu package) Operating systems & Components / Operating system package or component
Vendor	Canonical Ltd.

Security Bulletin

This security bulletin contains information about 7 vulnerabilities.

1) Memory leak

EUVDB-ID: #VU67913

Risk: Low

CVSSv4.0: 1.1 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2021-4159

CWE-ID: CWE-401 - Missing release of memory after effective lifetime

Exploit availability: No

Description

The vulnerability allows a local user to gain access to sensitive information.

The vulnerability exists due memory leak in Linux kernel EBPF verifier when handling internal data structures. A local user with permissions to insert eBPF code to the kernel can force the kernel to leak internal kernel memory details and bypass mitigations, related to exploitation protection.

Mitigation

Update the affected package linux to the latest version.

Vulnerable software versions

Ubuntu: 14.04 - 18.04

linux-image-4.15.0-1147-aws-hwe (Ubuntu package): before Ubuntu Pro (Infra-only)

linux-image-4.15.0-1142-gcp (Ubuntu package): before Ubuntu Pro (Infra-only)

linux-image-4.15.0-1158-azure (Ubuntu package): before Ubuntu Pro (Infra-only)

linux-image-4.15.0-201-generic (Ubuntu package): before Ubuntu Pro (Infra-only)

linux-image-4.15.0-1112-oracle (Ubuntu package): before Ubuntu Pro (Infra-only)

linux-image-4.15.0-201-lowlatency (Ubuntu package): before Ubuntu Pro (Infra-only)

linux-image-virtual (Ubuntu package): before 4.15.0.201.184

linux-image-snapdragon (Ubuntu package): before 4.15.0.1143.142

linux-image-raspi2 (Ubuntu package): before 4.15.0.1125.120

linux-image-oracle-lts-18.04 (Ubuntu package): before 4.15.0.1112.117

linux-image-lowlatency (Ubuntu package): before 4.15.0.201.184

linux-image-kvm (Ubuntu package): before 4.15.0.1133.124

linux-image-generic-lpae (Ubuntu package): before 4.15.0.201.184

linux-image-generic (Ubuntu package): before 4.15.0.201.184

linux-image-gcp-lts-18.04 (Ubuntu package): before 4.15.0.1142.156

linux-image-dell300x (Ubuntu package): before 4.15.0.1058.57

linux-image-azure-lts-18.04 (Ubuntu package): before 4.15.0.1158.126

linux-image-aws-lts-18.04 (Ubuntu package): before 4.15.0.1147.145

linux-image-4.15.0-201-generic-lpae (Ubuntu package): before 4.15.0-201.212

linux-image-4.15.0-1147-aws (Ubuntu package): before 4.15.0-1147.159

linux-image-4.15.0-1143-snapdragon (Ubuntu package): before 4.15.0-1143.153

linux-image-4.15.0-1133-kvm (Ubuntu package): before 4.15.0-1133.138

linux-image-4.15.0-1125-raspi2 (Ubuntu package): before 4.15.0-1125.133

linux-image-4.15.0-1058-dell300x (Ubuntu package): before 4.15.0-1058.63

linux-image-gcp (Ubuntu package): before Ubuntu Pro (Infra-only)

linux-image-gke (Ubuntu package): before Ubuntu Pro (Infra-only)

linux-image-azure (Ubuntu package): before Ubuntu Pro (Infra-only)

linux-image-aws-hwe (Ubuntu package): before Ubuntu Pro (Infra-only)

linux-image-generic-hwe-16.04 (Ubuntu package): before Ubuntu Pro (Infra-only)

linux-image-lowlatency-hwe-16.04 (Ubuntu package): before Ubuntu Pro (Infra-only)

linux-image-oem (Ubuntu package): before Ubuntu Pro (Infra-only)

linux-image-virtual-hwe-16.04 (Ubuntu package): before Ubuntu Pro (Infra-only)

linux-image-oracle (Ubuntu package): before Ubuntu Pro (Infra-only)

CPE2.3

External links

http://ubuntu.com/security/notices/USN-5790-1

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

2) Race condition

EUVDB-ID: #VU67865

Risk: Low

CVSSv4.0: 7.1 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/U:Clear]

CVE-ID: CVE-2022-20421

CWE-ID: CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Exploit availability: Yes

Description

The vulnerability allows a local application to escalate privileges on the system.

The vulnerability exists due to a race condition within the Binder driver in Android kernel in drivers/android/binder.c. A local application can exploit the race to trigger a use-after-free error and execute arbitrary code with elevated privileges.