Skip to content
OpenAdvisories
Unscored USN-5544-1 4 CVEs

linux, linux-hwe-5.15, linux-lowlatency, linux-lowlatency-hwe-5.15 vulnerabilities

Published Aug 2, 2022 · Updated Sep 10, 2026

Summary

It was discovered that the Atheros ath9k wireless device driver in the
Linux kernel did not properly handle some error conditions, leading to a
use-after-free vulnerability. A local attacker could use this to cause a
denial of service (system crash) or possibly execute arbitrary code.
(CVE-2022-1679)

Felix Fu discovered that the Sun RPC implementation in the Linux kernel did
not properly handle socket states, leading to a use-after-free
vulnerability. A remote attacker could possibly use this to cause a denial
of service (system crash) or execute arbitrary code. (CVE-2022-28893)

Arthur Mongodin discovered that the netfilter subsystem in the Linux kernel
did not properly perform data validation. A local attacker could use this
to escalate privileges in certain situations. (CVE-2022-34918)

Minh Yuan discovered that the floppy disk driver in the Linux kernel
contained a race condition, leading to a use-after-free vulnerability. A
local attacker could possibly use this to cause a denial of service (system
crash) or execute arbitrary code. (CVE-2022-1652)

Fixed packages 4

ReleasePackageFixed in
Ubuntu · 20.04 LTS 20.04:LTS linux-hwe-5.15 5.15.0-43.46~20.04.1
Ubuntu · 20.04 LTS 20.04:LTS linux-lowlatency-hwe-5.15 5.15.0-43.46~20.04.1
Ubuntu · 22.04 LTS 22.04:LTS linux 5.15.0-43.46
Ubuntu · 22.04 LTS 22.04:LTS linux-lowlatency 5.15.0-43.46

Vulnerabilities 4

References

  • report
    https://ubuntu.com/security/CVE-2022-1652
  • report
    https://ubuntu.com/security/CVE-2022-1679
  • report
    https://ubuntu.com/security/CVE-2022-28893
  • report
    https://ubuntu.com/security/CVE-2022-34918