Summary
Kyle Zeng discovered that the Network Queuing and Scheduling subsystem of
the Linux kernel did not properly perform reference counting in some
situations, leading to a use-after-free vulnerability. A local attacker
could use this to cause a denial of service (system crash) or execute
arbitrary code. (CVE-2022-29581)
Jann Horn discovered that the Linux kernel did not properly enforce seccomp
restrictions in some situations. A local attacker could use this to bypass
intended seccomp sandbox restrictions. (CVE-2022-30594)
Fixed packages 27
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 18.04 LTS 18.04:LTS | linux | 4.15.0-180.189 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-aws | 4.15.0-1130.139 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-azure-4.15 | 4.15.0-1139.152 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-gcp-4.15 | 4.15.0-1124.138 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-kvm | 4.15.0-1116.119 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-oracle | 4.15.0-1095.104 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-raspi2 | 4.15.0-1111.118 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-snapdragon | 4.15.0-1129.138 |
| Ubuntu · 20.04 LTS 20.04:LTS | linux-aws-5.13 | 5.13.0-1025.27~20.04.1 |
| Ubuntu · 20.04 LTS 20.04:LTS | linux-azure-5.13 | 5.13.0-1025.29~20.04.1 |
| Ubuntu · 20.04 LTS 20.04:LTS | linux-hwe-5.13 | 5.13.0-44.49~20.04.1 |
| Ubuntu · 22.04 LTS 22.04:LTS | linux | 5.15.0-33.34 |
| Ubuntu · 22.04 LTS 22.04:LTS | linux-aws | 5.15.0-1008.10 |
| Ubuntu · 22.04 LTS 22.04:LTS | linux-azure | 5.15.0-1007.8 |
| Ubuntu · 22.04 LTS 22.04:LTS | linux-gcp | 5.15.0-1005.8 |
| Ubuntu · 22.04 LTS 22.04:LTS | linux-gke | 5.15.0-1005.6 |
| Ubuntu · 22.04 LTS 22.04:LTS | linux-ibm | 5.15.0-1004.4 |
| Ubuntu · 22.04 LTS 22.04:LTS | linux-kvm | 5.15.0-1007.7 |
| Ubuntu · 22.04 LTS 22.04:LTS | linux-lowlatency | 5.15.0-33.34 |
| Ubuntu · 22.04 LTS 22.04:LTS | linux-oracle | 5.15.0-1006.8 |
| Ubuntu · 22.04 LTS 22.04:LTS | linux-raspi | 5.15.0-1008.8 |
| Ubuntu · Pro 14.04 LTS Pro:14.04:LTS | linux-azure | 4.15.0-1139.152~14.04.1 |
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | linux-aws-hwe | 4.15.0-1130.139~16.04.1 |
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | linux-azure | 4.15.0-1139.152~16.04.1 |
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | linux-gcp | 4.15.0-1124.138~16.04.1 |
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | linux-hwe | 4.15.0-180.189~16.04.1 |
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | linux-oracle | 4.15.0-1095.104~16.04.1 |
Vulnerabilities 2
-
High 7.8CVE-2022-29581 Public exploit
Improper Update of Reference Count vulnerability in net/sched of Linux Kernel allows local attacker to cause privilege …
-
Unscored —CVE-2022-30594 Public exploit
The Linux kernel before 5.17.2 mishandles seccomp permissions. The PTRACE_SEIZE code path allows attackers to bypass in…