Skip to content
OpenAdvisories
High USN-5790-1 7 CVEs

linux, linux-aws, linux-aws-hwe, linux-azure, linux-azure-4.15, linux-dell300x, linux-gcp, linux-gcp-4.15, linux-hwe, linux-kvm, linux-oracle, linux-raspi2, linux-snapdragon vulnerabilities

Published Jan 6, 2023 · Updated Oct 22, 2026

Summary

It was discovered that the BPF verifier in the Linux kernel did not
properly handle internal data structures. A local attacker could use this
to expose sensitive information (kernel memory). (CVE-2021-4159)

It was discovered that a race condition existed in the Android Binder IPC
subsystem in the Linux kernel, leading to a use-after-free vulnerability. A
local attacker could use this to cause a denial of service (system crash)
or possibly execute arbitrary code. (CVE-2022-20421)

It was discovered that the Intel 740 frame buffer driver in the Linux
kernel contained a divide by zero vulnerability. A local attacker could use
this to cause a denial of service (system crash). (CVE-2022-3061)

Gwnaun Jung discovered that the SFB packet scheduling implementation in the
Linux kernel contained a use-after-free vulnerability. A local attacker
could use this to cause a denial of service (system crash) or possibly
execute arbitrary code. (CVE-2022-3586)

Jann Horn discovered a race condition existed in the Linux kernel when
unmapping VMAs in certain situations, resulting in possible use-after-free
vulnerabilities. A local attacker could possibly use this to cause a denial
of service (system crash) or execute arbitrary code. (CVE-2022-39188)

It was discovered that a race condition existed in the EFI capsule loader
driver in the Linux kernel, leading to a use-after-free vulnerability. A
local attacker could use this to cause a denial of service (system crash)
or possibly execute arbitrary code. (CVE-2022-40307)

Zheng Wang and Zhuorao Yang discovered that the RealTek RTL8712U wireless
driver in the Linux kernel contained a use-after-free vulnerability. A
local attacker could use this to cause a denial of service (system crash)
or possibly execute arbitrary code. (CVE-2022-4095)

Fixed packages 14

ReleasePackageFixed in
Ubuntu · 18.04 LTS 18.04:LTS linux 4.15.0-201.212
Ubuntu · 18.04 LTS 18.04:LTS linux-aws 4.15.0-1147.159
Ubuntu · 18.04 LTS 18.04:LTS linux-azure-4.15 4.15.0-1158.173
Ubuntu · 18.04 LTS 18.04:LTS linux-dell300x 4.15.0-1058.63
Ubuntu · 18.04 LTS 18.04:LTS linux-gcp-4.15 4.15.0-1142.158
Ubuntu · 18.04 LTS 18.04:LTS linux-kvm 4.15.0-1133.138
Ubuntu · 18.04 LTS 18.04:LTS linux-oracle 4.15.0-1112.123
Ubuntu · 18.04 LTS 18.04:LTS linux-raspi2 4.15.0-1125.133
Ubuntu · 18.04 LTS 18.04:LTS linux-snapdragon 4.15.0-1143.153
Ubuntu · Pro 14.04 LTS Pro:14.04:LTS linux-azure 4.15.0-1158.173~14.04.1
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS linux-aws-hwe 4.15.0-1147.159~16.04.1
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS linux-gcp 4.15.0-1142.158~16.04.1
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS linux-hwe 4.15.0-201.212~16.04.1
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS linux-oracle 4.15.0-1112.123~16.04.1

Vulnerabilities 7

References

  • report
    https://ubuntu.com/security/CVE-2021-4159
  • report
    https://ubuntu.com/security/CVE-2022-3061
  • report
    https://ubuntu.com/security/CVE-2022-3586
  • report
    https://ubuntu.com/security/CVE-2022-4095
  • report
    https://ubuntu.com/security/CVE-2022-20421
  • report
    https://ubuntu.com/security/CVE-2022-39188
  • report
    https://ubuntu.com/security/CVE-2022-40307