Skip to content
OpenAdvisories
Medium USN-5484-1 5 CVEs

linux vulnerabilities

Published Jun 16, 2022 · Updated Jun 29, 2026

Summary

It was discovered that the Linux kernel did not properly restrict access to
the kernel debugger when booted in secure boot environments. A privileged
attacker could use this to bypass UEFI Secure Boot restrictions.
(CVE-2022-21499)

It was discovered that a race condition existed in the network scheduling
subsystem of the Linux kernel, leading to a use-after-free vulnerability. A
local attacker could use this to cause a denial of service (system crash)
or possibly execute arbitrary code. (CVE-2021-39713)

It was discovered that some Intel processors did not completely perform
cleanup actions on multi-core shared buffers. A local attacker could
possibly use this to expose sensitive information. (CVE-2022-21123)

It was discovered that some Intel processors did not completely perform
cleanup actions on microarchitectural fill buffers. A local attacker could
possibly use this to expose sensitive information. (CVE-2022-21125)

It was discovered that some Intel processors did not properly perform
cleanup during specific special register write operations. A local attacker
could possibly use this to expose sensitive information. (CVE-2022-21166)

Fixed packages 1

ReleasePackageFixed in
Ubuntu · Pro 14.04 LTS Pro:14.04:LTS linux 3.13.0-190.241

Vulnerabilities 5

References

  • report
    https://ubuntu.com/security/CVE-2021-39713
  • report
    https://ubuntu.com/security/CVE-2022-21123
  • report
    https://ubuntu.com/security/CVE-2022-21125
  • report
    https://ubuntu.com/security/CVE-2022-21166
  • report
    https://ubuntu.com/security/CVE-2022-21499