Summary
Kyle Zeng discovered that the Network Queuing and Scheduling subsystem of
the Linux kernel did not properly perform reference counting in some
situations, leading to a use-after-free vulnerability. A local attacker
could use this to cause a denial of service (system crash) or execute
arbitrary code. (CVE-2022-29581)
Bing-Jhong Billy Jheng discovered that the io_uring subsystem in the Linux
kernel contained in integer overflow. A local attacker could use this to
cause a denial of service (system crash) or execute arbitrary code.
(CVE-2022-1116)
Jann Horn discovered that the Linux kernel did not properly enforce seccomp
restrictions in some situations. A local attacker could use this to bypass
intended seccomp sandbox restrictions. (CVE-2022-30594)
Fixed packages 9
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 18.04 LTS 18.04:LTS | linux-gcp-5.4 | 5.4.0-1075.80~18.04.1 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-gkeop-5.4 | 5.4.0-1043.44~18.04.1 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-ibm-5.4 | 5.4.0-1023.25~18.04.1 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-oracle-5.4 | 5.4.0-1073.79~18.04.1 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-raspi-5.4 | 5.4.0-1062.70~18.04.1 |
| Ubuntu · 20.04 LTS 20.04:LTS | linux-bluefield | 5.4.0-1036.39 |
| Ubuntu · 20.04 LTS 20.04:LTS | linux-gkeop | 5.4.0-1043.44 |
| Ubuntu · 20.04 LTS 20.04:LTS | linux-oracle | 5.4.0-1073.79 |
| Ubuntu · 20.04 LTS 20.04:LTS | linux-raspi | 5.4.0-1062.70 |
Vulnerabilities 3
-
High 7.8
Integer Overflow or Wraparound vulnerability in io_uring of Linux Kernel allows local attacker to cause memory corrupti…
-
High 7.8CVE-2022-29581 Public exploit
Improper Update of Reference Count vulnerability in net/sched of Linux Kernel allows local attacker to cause privilege …
-
Unscored —CVE-2022-30594 Public exploit
The Linux kernel before 5.17.2 mishandles seccomp permissions. The PTRACE_SEIZE code path allows attackers to bypass in…