Skip to content
OpenAdvisories
High USN-5514-1 6 CVEs

linux, linux-aws, linux-aws-5.4, linux-azure, linux-azure-5.4, linux-azure-fde, linux-gcp, linux-gke, linux-gkeop, linux-gkeop-5.4, linux-hwe-5.4, linux-ibm, linux-ibm-5.4, linux-kvm, linux-oracle, linux-oracle-5.4, linux-raspi, linux-raspi-5.4 vulnerabilities

Published Jul 13, 2022 · Updated Sep 14, 2026

Summary

It was discovered that the implementation of the 6pack and mkiss protocols
in the Linux kernel did not handle detach events properly in some
situations, leading to a use-after-free vulnerability. A local attacker
could possibly use this to cause a denial of service (system crash).
(CVE-2022-1195)

Duoming Zhou discovered that the AX.25 amateur radio protocol
implementation in the Linux kernel did not handle detach events properly in
some situations. A local attacker could possibly use this to cause a denial
of service (system crash) or execute arbitrary code. (CVE-2022-1199)

Duoming Zhou discovered race conditions in the AX.25 amateur radio protocol
implementation in the Linux kernel during device detach operations. A local
attacker could possibly use this to cause a denial of service (system
crash). (CVE-2022-1204)

Duoming Zhou discovered race conditions in the AX.25 amateur radio protocol
implementation in the Linux kernel, leading to use-after-free
vulnerabilities. A local attacker could possibly use this to cause a denial
of service (system crash). (CVE-2022-1205)

Yongkang Jia discovered that the KVM hypervisor implementation in the Linux
kernel did not properly handle guest TLB mapping invalidation requests in
some situations. An attacker in a guest VM could use this to cause a denial
of service (system crash) in the host OS. (CVE-2022-1789)

Minh Yuan discovered that the floppy driver in the Linux kernel contained a
race condition in some situations, leading to a use-after-free
vulnerability. A local attacker could use this to cause a denial of service
(system crash) or possibly execute arbitrary code. (CVE-2022-33981)

Fixed packages 18

ReleasePackageFixed in
Ubuntu · 18.04 LTS 18.04:LTS linux-aws-5.4 5.4.0-1081.88~18.04.1
Ubuntu · 18.04 LTS 18.04:LTS linux-azure-5.4 5.4.0-1086.91~18.04.1
Ubuntu · 18.04 LTS 18.04:LTS linux-gkeop-5.4 5.4.0-1049.52~18.04.1
Ubuntu · 18.04 LTS 18.04:LTS linux-hwe-5.4 5.4.0-122.138~18.04.1
Ubuntu · 18.04 LTS 18.04:LTS linux-ibm-5.4 5.4.0-1029.33~18.04.1
Ubuntu · 18.04 LTS 18.04:LTS linux-oracle-5.4 5.4.0-1079.87~18.04.1
Ubuntu · 18.04 LTS 18.04:LTS linux-raspi-5.4 5.4.0-1066.76~18.04.1
Ubuntu · 20.04 LTS 20.04:LTS linux 5.4.0-122.138
Ubuntu · 20.04 LTS 20.04:LTS linux-aws 5.4.0-1081.88
Ubuntu · 20.04 LTS 20.04:LTS linux-azure 5.4.0-1086.91
Ubuntu · 20.04 LTS 20.04:LTS linux-azure-fde 5.4.0-1086.91+cvm1.1
Ubuntu · 20.04 LTS 20.04:LTS linux-gcp 5.4.0-1084.92
Ubuntu · 20.04 LTS 20.04:LTS linux-gke 5.4.0-1078.84
Ubuntu · 20.04 LTS 20.04:LTS linux-gkeop 5.4.0-1049.52
Ubuntu · 20.04 LTS 20.04:LTS linux-ibm 5.4.0-1029.33
Ubuntu · 20.04 LTS 20.04:LTS linux-kvm 5.4.0-1071.76
Ubuntu · 20.04 LTS 20.04:LTS linux-oracle 5.4.0-1079.87
Ubuntu · 20.04 LTS 20.04:LTS linux-raspi 5.4.0-1066.76

Vulnerabilities 6

References

  • report
    https://ubuntu.com/security/CVE-2022-1195
  • report
    https://ubuntu.com/security/CVE-2022-1199
  • report
    https://ubuntu.com/security/CVE-2022-1204
  • report
    https://ubuntu.com/security/CVE-2022-1205
  • report
    https://ubuntu.com/security/CVE-2022-1789
  • report
    https://ubuntu.com/security/CVE-2022-33981