Skip to content
OpenAdvisories
Medium USN-5318-1 4 CVEs

linux, linux-aws, linux-aws-5.4, linux-azure, linux-azure-5.4, linux-azure-fde, linux-bluefield, linux-gcp, linux-gcp-5.4, linux-gke, linux-gke-5.4, linux-gkeop, linux-gkeop-5.4, linux-hwe-5.4, linux-ibm, linux-ibm-5.4, linux-kvm, linux-oracle, linux-oracle-5.4, linux-raspi, linux-raspi-5.4 vulnerabilities

Published Mar 9, 2022 · Updated Jun 3, 2026

Ecosystem: Ubuntu

Summary

Nick Gregory discovered that the Linux kernel incorrectly handled network
offload functionality. A local attacker could use this to cause a denial of
service or possibly execute arbitrary code. (CVE-2022-25636)

Enrico Barberis, Pietro Frigo, Marius Muench, Herbert Bos, and Cristiano
Giuffrida discovered that hardware mitigations added by ARM to their
processors to address Spectre-BTI were insufficient. A local attacker could
potentially use this to expose sensitive information. (CVE-2022-23960)

Enrico Barberis, Pietro Frigo, Marius Muench, Herbert Bos, and Cristiano
Giuffrida discovered that hardware mitigations added by Intel to their
processors to address Spectre-BTI were insufficient. A local attacker could
potentially use this to expose sensitive information. (CVE-2022-0001,
CVE-2022-0002)

Fixed packages 21

ReleasePackageFixed in
Ubuntu · 18.04 LTS 18.04:LTS linux-aws-5.4 5.4.0-1068.72~18.04.1
Ubuntu · 18.04 LTS 18.04:LTS linux-azure-5.4 5.4.0-1072.75~18.04.1
Ubuntu · 18.04 LTS 18.04:LTS linux-gcp-5.4 5.4.0-1067.71~18.04.1
Ubuntu · 18.04 LTS 18.04:LTS linux-gke-5.4 5.4.0-1065.68~18.04.1
Ubuntu · 18.04 LTS 18.04:LTS linux-gkeop-5.4 5.4.0-1036.37~18.04.1
Ubuntu · 18.04 LTS 18.04:LTS linux-hwe-5.4 5.4.0-104.118~18.04.1
Ubuntu · 18.04 LTS 18.04:LTS linux-ibm-5.4 5.4.0-1017.19~18.04.1
Ubuntu · 18.04 LTS 18.04:LTS linux-oracle-5.4 5.4.0-1066.71~18.04.1
Ubuntu · 18.04 LTS 18.04:LTS linux-raspi-5.4 5.4.0-1055.62~18.04.1
Ubuntu · 20.04 LTS 20.04:LTS linux 5.4.0-104.118
Ubuntu · 20.04 LTS 20.04:LTS linux-aws 5.4.0-1068.72
Ubuntu · 20.04 LTS 20.04:LTS linux-azure 5.4.0-1072.75
Ubuntu · 20.04 LTS 20.04:LTS linux-azure-fde 5.4.0-1072.75+cvm1.1
Ubuntu · 20.04 LTS 20.04:LTS linux-bluefield 5.4.0-1030.33
Ubuntu · 20.04 LTS 20.04:LTS linux-gcp 5.4.0-1067.71
Ubuntu · 20.04 LTS 20.04:LTS linux-gke 5.4.0-1065.68
Ubuntu · 20.04 LTS 20.04:LTS linux-gkeop 5.4.0-1036.37
Ubuntu · 20.04 LTS 20.04:LTS linux-ibm 5.4.0-1017.19
Ubuntu · 20.04 LTS 20.04:LTS linux-kvm 5.4.0-1058.61
Ubuntu · 20.04 LTS 20.04:LTS linux-oracle 5.4.0-1066.71
Ubuntu · 20.04 LTS 20.04:LTS linux-raspi 5.4.0-1055.62

Vulnerabilities 4

References

  • report
    https://ubuntu.com/security/CVE-2022-0001
  • report
    https://ubuntu.com/security/CVE-2022-0002
  • report
    https://ubuntu.com/security/CVE-2022-23960
  • report
    https://ubuntu.com/security/CVE-2022-25636