Summary
Kyle Zeng discovered that the Network Queuing and Scheduling subsystem of
the Linux kernel did not properly perform reference counting in some
situations, leading to a use-after-free vulnerability. A local attacker
could use this to cause a denial of service (system crash) or execute
arbitrary code.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 20.04 LTS 20.04:LTS | linux-oem-5.14 | 5.14.0-1038.42 |
| Ubuntu · 22.04 LTS 22.04:LTS | linux-oem-5.17 | 5.17.0-1006.6 |
Vulnerabilities 1
-
High 7.8CVE-2022-29581 Public exploit
Improper Update of Reference Count vulnerability in net/sched of Linux Kernel allows local attacker to cause privilege …
References
-
report
https://ubuntu.com/security/CVE-2022-29581