Summary
It was discovered that a memory leak existed in the Unix domain socket
implementation of the Linux kernel. A local attacker could use this to
cause a denial of service (memory exhaustion). (CVE-2022-3543)
It was discovered that the Bluetooth HCI implementation in the Linux kernel
did not properly deallocate memory in some situations. An attacker could
possibly use this cause a denial of service (memory exhaustion).
(CVE-2022-3619)
It was discovered that the hugetlb implementation in the Linux kernel
contained a race condition in some situations. A local attacker could use
this to cause a denial of service (system crash) or expose sensitive
information (kernel memory). (CVE-2022-3623)
It was discovered that the Broadcom FullMAC USB WiFi driver in the Linux
kernel did not properly perform bounds checking in some situations. A
physically proximate attacker could use this to craft a malicious USB
device that when inserted, could cause a denial of service (system crash)
or possibly execute arbitrary code. (CVE-2022-3628)
It was discovered that a use-after-free vulnerability existed in the
Bluetooth stack in the Linux kernel. A local attacker could use this to
cause a denial of service (system crash) or possibly execute arbitrary
code. (CVE-2022-3640)
It was discovered that a race condition existed in the SMSC UFX USB driver
implementation in the Linux kernel, leading to a use-after-free
vulnerability. A physically proximate attacker could use this to cause a
denial of service (system crash) or possibly execute arbitrary code.
(CVE-2022-41849)
It was discovered that a race condition existed in the Roccat HID driver in
the Linux kernel, leading to a use-after-free vulnerability. A local
attacker could use this to cause a denial of service (system crash) or
possibly execute arbitrary code. (CVE-2022-41850)
Tamás Koczka discovered that the Bluetooth L2CAP implementation in the
Linux kernel did not properly initialize memory in some situations. A
physically proximate attacker could possibly use this to expose sensitive
information (kernel memory). (CVE-2022-42895)
Arnaud Gatignol, Quentin Minster, Florent Saudel and Guillaume Teissier
discovered that the KSMBD implementation in the Linux kernel did not
properly validate user-supplied data in some situations. An authenticated
attacker could use this to cause a denial of service (system crash), expose
sensitive information (kernel memory) or possibly execute arbitrary code.
(CVE-2022-47940)
It was discovered that a race condition existed in the qdisc implementation
in the Linux kernel, leading to a use-after-free vulnerability. A local
attacker could use this to cause a denial of service (system crash) or
possibly execute arbitrary code. (CVE-2023-0590)
Fixed packages 12
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 20.04 LTS 20.04:LTS | linux-azure-5.15 | 5.15.0-1033.40~20.04.1 |
| Ubuntu · 20.04 LTS 20.04:LTS | linux-hwe-5.15 | 5.15.0-60.66~20.04.1 |
| Ubuntu · 20.04 LTS 20.04:LTS | linux-lowlatency-hwe-5.15 | 5.15.0-60.66~20.04.1 |
| Ubuntu · 20.04 LTS 20.04:LTS | linux-oracle-5.15 | 5.15.0-1029.35~20.04.1 |
| Ubuntu · 22.04 LTS 22.04:LTS | linux | 5.15.0-60.66 |
| Ubuntu · 22.04 LTS 22.04:LTS | linux-azure | 5.15.0-1033.40 |
| Ubuntu · 22.04 LTS 22.04:LTS | linux-gkeop | 5.15.0-1015.19 |
| Ubuntu · 22.04 LTS 22.04:LTS | linux-ibm | 5.15.0-1025.28 |
| Ubuntu · 22.04 LTS 22.04:LTS | linux-kvm | 5.15.0-1028.33 |
| Ubuntu · 22.04 LTS 22.04:LTS | linux-lowlatency | 5.15.0-60.66 |
| Ubuntu · 22.04 LTS 22.04:LTS | linux-oracle | 5.15.0-1029.35 |
| Ubuntu · 22.04 LTS 22.04:LTS | linux-raspi | 5.15.0-1024.26 |
Vulnerabilities 10
-
High 8.1
An issue was discovered in ksmbd in the Linux kernel 5.15 through 5.18 before 5.18.18. fs/ksmbd/smb2pdu.c lacks length …
-
Medium 6.6
A buffer overflow flaw was found in the Linux kernel Broadcom Full MAC Wi-Fi driver. This issue occurs when a user conn…
-
Medium 5.5
Linux Kernel Bluetooth l2cap_core.c l2cap_conn_del use after free
A vulnerability, which was classified as critical, was found in Linux Kernel. Affected is the function l2cap_conn_del of the file net/bluetooth/l2cap_core.c of the component Bluetooth. The manipulation leads to use after free. It is recommended to apply a pat…
-
Medium 5.1
Info Leak in l2cap_core in the Linux Kernel
There is an infoleak vulnerability in the Linux kernel's net/bluetooth/l2cap_core.c's l2cap_parse_conf_req function which can be used to leak kernel pointers remotely. We recommend upgrading past commit https://github.com/torvalds/linux/commit/b1a2cd50c0357f…
-
Medium 5.0
Linux Kernel BPF gup.c follow_page_pte race condition
A vulnerability was found in Linux Kernel. It has been declared as problematic. Affected by this vulnerability is the function follow_page_pte of the file mm/gup.c of the component BPF. The manipulation leads to race condition. The attack can be launched remo…
-
Low 3.5
Linux Kernel BPF af_unix.c unix_release_sock memory leak
A vulnerability, which was classified as problematic, has been found in Linux Kernel. This issue affects the function unix_sock_destructor/unix_release_sock of the file net/unix/af_unix.c of the component BPF. The manipulation leads to memory leak. It is reco…
-
Low 3.5
Linux Kernel Bluetooth l2cap_core.c l2cap_recv_acldata memory leak
A vulnerability has been found in Linux Kernel and classified as problematic. This vulnerability affects the function l2cap_recv_acldata of the file net/bluetooth/l2cap_core.c of the component Bluetooth. The manipulation leads to memory leak. It is recommende…
-
Unscored —
drivers/video/fbdev/smscufx.c in the Linux kernel through 5.19.12 has a race condition and resultant use-after-free if …
-
Unscored —
roccat_report_event in drivers/hid/hid-roccat.c in the Linux kernel through 5.19.12 has a race condition and resultant …
-
Unscored —
A use-after-free flaw was found in qdisc_graft in net/sched/sch_api.c in the Linux Kernel due to a race problem. This f…
References
-
report
https://ubuntu.com/security/CVE-2022-3543
-
report
https://ubuntu.com/security/CVE-2022-3619
-
report
https://ubuntu.com/security/CVE-2022-3623
-
report
https://ubuntu.com/security/CVE-2022-3628
-
report
https://ubuntu.com/security/CVE-2022-3640
-
report
https://ubuntu.com/security/CVE-2022-41849
-
report
https://ubuntu.com/security/CVE-2022-41850
-
report
https://ubuntu.com/security/CVE-2022-42895
-
report
https://ubuntu.com/security/CVE-2022-47940
-
report
https://ubuntu.com/security/CVE-2023-0590