Summary
Kyle Zeng discovered that the sysctl implementation in the Linux kernel
contained a stack-based buffer overflow. A local attacker could use this to
cause a denial of service (system crash) or execute arbitrary code.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 22.04 LTS 22.04:LTS | linux-oem-5.17 | 5.17.0-1026.27 |
| Ubuntu · 22.04 LTS 22.04:LTS | linux-oem-6.0 | 6.0.0-1010.10 |
Vulnerabilities 1
-
High 7.8
A stack overflow flaw was found in the Linux kernel's SYSCTL subsystem in how a user changes certain kernel parameters …
References
-
report
https://ubuntu.com/security/CVE-2022-4378