{"schemaVersion":3,"id":"CVE-2022-23041","aliases":["UBUNTU-CVE-2022-23041","DEBIAN-CVE-2022-23041"],"status":"published","duplicateOf":null,"title":null,"description":"Linux PV device frontends vulnerable to attacks by backends T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Several Linux PV device frontends are using the grant table interfaces for removing access rights of the backends in ways being subject to race conditions, resulting in potential data leaks, data corruption by malicious backends, and denial of service triggered by malicious backends: blkfront, netfront, scsifront and the gntalloc driver are testing whether a grant reference is still in use. If this is not the case, they assume that a following removal of the granted access will always succeed, which is not true in case the backend has mapped the granted page between those two operations. As a result the backend can keep access to the memory page of the guest no matter how the page will be used after the frontend I/O has finished. The xenbus driver has a similar problem, as it doesn't check the success of removing the granted access of a shared ring buffer. blkfront: CVE-2022-23036 netfront: CVE-2022-23037 scsifront: CVE-2022-23038 gntalloc: CVE-2022-23039 xenbus: CVE-2022-23040 blkfront, netfront, scsifront, usbfront, dmabuf, xenbus, 9p, kbdfront, and pvcalls are using a functionality to delay freeing a grant reference until it is no longer in use, but the freeing of the related data page is not synchronized with dropping the granted access. As a result the backend can keep access to the memory page even after it has been freed and then re-used for a different purpose. CVE-2022-23041 netfront will fail a BUG_ON() assertion if it fails to revoke access in the rx path. This will result in a Denial of Service (DoS) situation of the guest which can be triggered by the backend. CVE-2022-23042","dates":{"published":"2022-03-10T19:20:22.000Z","modified":"2024-08-03T03:28:42.964Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":7,"severity":"high","version":"3.1","versionLabel":"v3.1","source":"NVD","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"OSV · Ubuntu","score":7,"severity":"high","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","exploitability":2.6,"impact":9.8,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Debian","score":7,"severity":"high","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","exploitability":2.6,"impact":9.8,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":7,"severity":"high","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false},{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":4.4,"severity":"medium","vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.00365,"percentile":0.28893,"severity":"low","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.00365},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00365,"percentile":0.28893}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00365,"percentile":0.28893}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-362","name":"Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')","description":"The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.","type":"weakness","status":"Draft","abstraction":"Class","likelihoodOfExploit":"Medium","url":"https://cwe.mitre.org/data/definitions/362.html"}],"affected":[{"vendor":"debian","product":"linux","name":"linux","label":"linux","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/linux","purlType":"deb","versions":[{"text":"< 5.16.14-1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.16.14-1","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"linux","name":"linux","label":"linux","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/linux","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 4.4.0-268.302","noFixRecorded":false,"fixedIn":null},{"text":"< 4.15.0-236.248","noFixRecorded":false,"fixedIn":null},{"text":"< 5.4.0-117.132","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 4.4.0-268.302 | < 4.15.0-236.248 | < 5.4.0-117.132","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"linux-aws","name":"linux-aws","label":"linux-aws","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/linux-aws","purlType":"deb","versions":[{"text":"< 4.4.0-1143.149","noFixRecorded":false,"fixedIn":null},{"text":"< 4.4.0-1181.196","noFixRecorded":false,"fixedIn":null},{"text":"< 4.15.0-1179.192","noFixRecorded":false,"fixedIn":null},{"text":"< 5.4.0-1078.84","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.4.0-1143.149 | < 4.4.0-1181.196 | < 4.15.0-1179.192 | < 5.4.0-1078.84","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"linux-aws-5.0","name":"linux-aws-5.0","label":"linux-aws-5.0","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/linux-aws-5.0","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"linux-aws-5.11","name":"linux-aws-5.11","label":"linux-aws-5.11","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/linux-aws-5.11","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"linux-aws-5.13","name":"linux-aws-5.13","label":"linux-aws-5.13","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/linux-aws-5.13","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"linux-aws-5.3","name":"linux-aws-5.3","label":"linux-aws-5.3","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/linux-aws-5.3","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"linux-aws-5.4","name":"linux-aws-5.4","label":"linux-aws-5.4","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/linux-aws-5.4","purlType":"deb","versions":[{"text":"< 5.4.0-1078.84~18.04.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.4.0-1078.84~18.04.1","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"linux-aws-5.8","name":"linux-aws-5.8","label":"linux-aws-5.8","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/linux-aws-5.8","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"linux-aws-fips","name":"linux-aws-fips","label":"linux-aws-fips","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/linux-aws-fips","purlType":"deb","versions":[{"text":"< 4.15.0-2117.123","noFixRecorded":false,"fixedIn":null},{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 5.4.0-1078.84+fips1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.15.0-2117.123 | All versions (No fix recorded) | < 5.4.0-1078.84+fips1","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"linux-aws-hwe","name":"linux-aws-hwe","label":"linux-aws-hwe","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/linux-aws-hwe","purlType":"deb","versions":[{"text":"< 4.15.0-1179.192~16.04.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.15.0-1179.192~16.04.1","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"linux-azure","name":"linux-azure","label":"linux-azure","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/linux-azure","purlType":"deb","versions":[{"text":"< 4.15.0-1187.202~14.04.1","noFixRecorded":false,"fixedIn":null},{"text":"< 4.15.0-1187.202~16.04.1","noFixRecorded":false,"fixedIn":null},{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 5.4.0-1083.87","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.15.0-1187.202~14.04.1 | < 4.15.0-1187.202~16.04.1 | All versions (No fix recorded) | < 5.4.0-1083.87","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"linux-azure-4.15","name":"linux-azure-4.15","label":"linux-azure-4.15","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/linux-azure-4.15","purlType":"deb","versions":[{"text":"< 4.15.0-1187.202","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.15.0-1187.202","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"linux-azure-5.11","name":"linux-azure-5.11","label":"linux-azure-5.11","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/linux-azure-5.11","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"linux-azure-5.13","name":"linux-azure-5.13","label":"linux-azure-5.13","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/linux-azure-5.13","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"linux-azure-5.3","name":"linux-azure-5.3","label":"linux-azure-5.3","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/linux-azure-5.3","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"linux-azure-5.4","name":"linux-azure-5.4","label":"linux-azure-5.4","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/linux-azure-5.4","purlType":"deb","versions":[{"text":"< 5.4.0-1083.87~18.04.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.4.0-1083.87~18.04.1","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"linux-azure-5.8","name":"linux-azure-5.8","label":"linux-azure-5.8","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/linux-azure-5.8","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"linux-azure-edge","name":"linux-azure-edge","label":"linux-azure-edge","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/linux-azure-edge","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"linux-azure-fips","name":"linux-azure-fips","label":"linux-azure-fips","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/linux-azure-fips","purlType":"deb","versions":[{"text":"< 4.15.0-2096.102","noFixRecorded":false,"fixedIn":null},{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 5.4.0-1083.87+fips1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.15.0-2096.102 | All versions (No fix recorded) | < 5.4.0-1083.87+fips1","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"linux-bluefield","name":"linux-bluefield","label":"linux-bluefield","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/linux-bluefield","purlType":"deb","versions":[{"text":"< 5.4.0-1040.44","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.4.0-1040.44","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"linux-fips","name":"linux-fips","label":"linux-fips","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/linux-fips","purlType":"deb","versions":[{"text":"< 4.4.0-1113.120","noFixRecorded":false,"fixedIn":null},{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 4.15.0-1134.145","noFixRecorded":false,"fixedIn":null},{"text":"< 5.4.0-1054.61","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.4.0-1113.120 | All versions (No fix recorded) | < 4.15.0-1134.145 | < 5.4.0-1054.61","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"linux-gcp","name":"linux-gcp","label":"linux-gcp","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/linux-gcp","purlType":"deb","versions":[{"text":"< 4.15.0-1172.189~16.04.1","noFixRecorded":false,"fixedIn":null},{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 5.4.0-1078.84","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.15.0-1172.189~16.04.1 | All versions (No fix recorded) | < 5.4.0-1078.84","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"linux-gcp-4.15","name":"linux-gcp-4.15","label":"linux-gcp-4.15","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/linux-gcp-4.15","purlType":"deb","versions":[{"text":"< 4.15.0-1172.189","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.15.0-1172.189","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"linux-gcp-5.11","name":"linux-gcp-5.11","label":"linux-gcp-5.11","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/linux-gcp-5.11","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"linux-gcp-5.13","name":"linux-gcp-5.13","label":"linux-gcp-5.13","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/linux-gcp-5.13","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"linux-gcp-5.3","name":"linux-gcp-5.3","label":"linux-gcp-5.3","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/linux-gcp-5.3","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"linux-gcp-5.4","name":"linux-gcp-5.4","label":"linux-gcp-5.4","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/linux-gcp-5.4","purlType":"deb","versions":[{"text":"< 5.4.0-1078.84~18.04.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.4.0-1078.84~18.04.1","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"linux-gcp-5.8","name":"linux-gcp-5.8","label":"linux-gcp-5.8","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/linux-gcp-5.8","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"linux-gcp-fips","name":"linux-gcp-fips","label":"linux-gcp-fips","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/linux-gcp-fips","purlType":"deb","versions":[{"text":"< 4.15.0-2080.86","noFixRecorded":false,"fixedIn":null},{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 5.4.0-1078.84+fips1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.15.0-2080.86 | All versions (No fix recorded) | < 5.4.0-1078.84+fips1","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"linux-gke","name":"linux-gke","label":"linux-gke","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/linux-gke","purlType":"deb","versions":[{"text":"< 5.4.0-1074.79","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.4.0-1074.79","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"linux-gke-4.15","name":"linux-gke-4.15","label":"linux-gke-4.15","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/linux-gke-4.15","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"linux-gke-5.4","name":"linux-gke-5.4","label":"linux-gke-5.4","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/linux-gke-5.4","purlType":"deb","versions":[{"text":"< 5.4.0-1074.79~18.04.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.4.0-1074.79~18.04.1","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"linux-gkeop","name":"linux-gkeop","label":"linux-gkeop","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/linux-gkeop","purlType":"deb","versions":[{"text":"< 5.4.0-1046.48","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.4.0-1046.48","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"linux-gkeop-5.4","name":"linux-gkeop-5.4","label":"linux-gkeop-5.4","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/linux-gkeop-5.4","purlType":"deb","versions":[{"text":"< 5.4.0-1046.48~18.04.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.4.0-1046.48~18.04.1","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"linux-hwe","name":"linux-hwe","label":"linux-hwe","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/linux-hwe","purlType":"deb","versions":[{"text":"< 4.15.0-236.248~16.04.1","noFixRecorded":false,"fixedIn":null},{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"< 4.15.0-236.248~16.04.1 | All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"linux-hwe-5.11","name":"linux-hwe-5.11","label":"linux-hwe-5.11","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/linux-hwe-5.11","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"linux-hwe-5.13","name":"linux-hwe-5.13","label":"linux-hwe-5.13","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/linux-hwe-5.13","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"linux-hwe-5.4","name":"linux-hwe-5.4","label":"linux-hwe-5.4","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/linux-hwe-5.4","purlType":"deb","versions":[{"text":"< 5.4.0-117.132~18.04.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.4.0-117.132~18.04.1","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"linux-hwe-5.8","name":"linux-hwe-5.8","label":"linux-hwe-5.8","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/linux-hwe-5.8","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"linux-hwe-edge","name":"linux-hwe-edge","label":"linux-hwe-edge","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/linux-hwe-edge","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"linux-ibm","name":"linux-ibm","label":"linux-ibm","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/linux-ibm","purlType":"deb","versions":[{"text":"< 5.4.0-1026.29","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.4.0-1026.29","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"linux-ibm-5.4","name":"linux-ibm-5.4","label":"linux-ibm-5.4","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/linux-ibm-5.4","purlType":"deb","versions":[{"text":"< 5.4.0-1028.32~18.04.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.4.0-1028.32~18.04.1","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"linux-intel-5.13","name":"linux-intel-5.13","label":"linux-intel-5.13","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/linux-intel-5.13","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"linux-intel-iot-realtime","name":"linux-intel-iot-realtime","label":"linux-intel-iot-realtime","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/linux-intel-iot-realtime","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"linux-intel-iotg-5.15","name":"linux-intel-iotg-5.15","label":"linux-intel-iotg-5.15","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/linux-intel-iotg-5.15","purlType":"deb","versions":[{"text":"< 5.15.0-1008.11~20.04.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.15.0-1008.11~20.04.1","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"linux-iot","name":"linux-iot","label":"linux-iot","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/linux-iot","purlType":"deb","versions":[{"text":"< 5.4.0-1004.6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.4.0-1004.6","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"linux-kvm","name":"linux-kvm","label":"linux-kvm","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/linux-kvm","purlType":"deb","versions":[{"text":"< 4.4.0-1144.155","noFixRecorded":false,"fixedIn":null},{"text":"< 4.15.0-1162.167","noFixRecorded":false,"fixedIn":null},{"text":"< 5.4.0-1068.72","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.4.0-1144.155 | < 4.15.0-1162.167 | < 5.4.0-1068.72","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"linux-lts-xenial","name":"linux-lts-xenial","label":"linux-lts-xenial","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/linux-lts-xenial","purlType":"deb","versions":[{"text":"< 4.4.0-268.302~14.04.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.4.0-268.302~14.04.1","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"linux-oem","name":"linux-oem","label":"linux-oem","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/linux-oem","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"linux-oem-5.10","name":"linux-oem-5.10","label":"linux-oem-5.10","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/linux-oem-5.10","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"linux-oem-5.13","name":"linux-oem-5.13","label":"linux-oem-5.13","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/linux-oem-5.13","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"linux-oem-5.14","name":"linux-oem-5.14","label":"linux-oem-5.14","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/linux-oem-5.14","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"linux-oem-5.6","name":"linux-oem-5.6","label":"linux-oem-5.6","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/linux-oem-5.6","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"linux-oracle","name":"linux-oracle","label":"linux-oracle","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/linux-oracle","purlType":"deb","versions":[{"text":"< 4.15.0-1141.152~16.04.1","noFixRecorded":false,"fixedIn":null},{"text":"< 4.15.0-1141.152","noFixRecorded":false,"fixedIn":null},{"text":"< 5.4.0-1076.83","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.15.0-1141.152~16.04.1 | < 4.15.0-1141.152 | < 5.4.0-1076.83","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"linux-oracle-5.0","name":"linux-oracle-5.0","label":"linux-oracle-5.0","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/linux-oracle-5.0","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"linux-oracle-5.11","name":"linux-oracle-5.11","label":"linux-oracle-5.11","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/linux-oracle-5.11","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"linux-oracle-5.13","name":"linux-oracle-5.13","label":"linux-oracle-5.13","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/linux-oracle-5.13","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"linux-oracle-5.3","name":"linux-oracle-5.3","label":"linux-oracle-5.3","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/linux-oracle-5.3","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"linux-oracle-5.4","name":"linux-oracle-5.4","label":"linux-oracle-5.4","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/linux-oracle-5.4","purlType":"deb","versions":[{"text":"< 5.4.0-1076.83~18.04.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.4.0-1076.83~18.04.1","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"linux-oracle-5.8","name":"linux-oracle-5.8","label":"linux-oracle-5.8","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/linux-oracle-5.8","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"linux-raspi","name":"linux-raspi","label":"linux-raspi","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/linux-raspi","purlType":"deb","versions":[{"text":"< 5.4.0-1065.75","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.4.0-1065.75","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"linux-raspi-5.4","name":"linux-raspi-5.4","label":"linux-raspi-5.4","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/linux-raspi-5.4","purlType":"deb","versions":[{"text":"< 5.4.0-1065.75~18.04.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.4.0-1065.75~18.04.1","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"linux-raspi-realtime","name":"linux-raspi-realtime","label":"linux-raspi-realtime","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/linux-raspi-realtime","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"linux-raspi2","name":"linux-raspi2","label":"linux-raspi2","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/linux-raspi2","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"linux-realtime","name":"linux-realtime","label":"linux-realtime","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/linux-realtime","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 5.15.0-1007.7","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 5.15.0-1007.7","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"linux-riscv","name":"linux-riscv","label":"linux-riscv","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/linux-riscv","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"linux-riscv-5.11","name":"linux-riscv-5.11","label":"linux-riscv-5.11","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/linux-riscv-5.11","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"linux-riscv-5.8","name":"linux-riscv-5.8","label":"linux-riscv-5.8","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/linux-riscv-5.8","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"debian","product":"debian_linux","name":"debian linux","label":"debian_linux","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"9.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"9.0","eol":{"isEol":true,"eolDate":"2022-07-01T00:00:00.000Z","matchMethod":"cpe","cycle":{"name":"9","label":"9 (Stretch)","eolFrom":"2022-07-01T00:00:00.000Z","isLts":false,"isMaintained":true,"latestVersion":"9.13"},"product":{"name":"debian","label":"Debian","category":"os"}},"hubHref":"/vendor/debian/debian_linux"},{"vendor":"xen","product":"xen","name":"xen","label":"xen","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/xen/xen"}],"affectedCount":71,"eol":{"hasEol":true,"count":1},"references":[{"url":"https://xenbits.xenproject.org/xsa/advisory-396.txt","label":"xenbits.xenproject.org/xsa/advisory-396.txt","hostname":"xenbits.xenproject.org","tags":["X Refsource MISC","Third Party Advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2022/07/msg00000.html","label":"lists.debian.org/debian-lts-announce/2022/07/msg00000.html","hostname":"lists.debian.org","tags":["Mailing List","X Refsource MLIST","Third Party Advisory"]},{"url":"https://ubuntu.com/security/CVE-2022-23041","label":"ubuntu.com/security/CVE-2022-23041","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://xenbits.xen.org/xsa/advisory-396.html","label":"xenbits.xen.org/xsa/advisory-396.html","hostname":"xenbits.xen.org","tags":["REPORT"]},{"url":"https://ubuntu.com/security/notices/USN-5467-1","label":"ubuntu.com/security/notices/USN-5467-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-23041","label":"www.cve.org/CVERecord?id=CVE-2022-23041","hostname":"www.cve.org","tags":["REPORT"]},{"url":"https://ubuntu.com/security/notices/USN-7428-1","label":"ubuntu.com/security/notices/USN-7428-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://ubuntu.com/security/notices/USN-7428-2","label":"ubuntu.com/security/notices/USN-7428-2","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://ubuntu.com/security/notices/USN-7506-1","label":"ubuntu.com/security/notices/USN-7506-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://ubuntu.com/security/notices/USN-7506-2","label":"ubuntu.com/security/notices/USN-7506-2","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://ubuntu.com/security/notices/USN-7506-3","label":"ubuntu.com/security/notices/USN-7506-3","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://ubuntu.com/security/notices/USN-7506-4","label":"ubuntu.com/security/notices/USN-7506-4","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2022-23041","label":"security-tracker.debian.org/tracker/CVE-2022-23041","hostname":"security-tracker.debian.org","tags":["Advisory"]}],"lineage":{"upstream":[],"downstream":["DLA-3065-1","MGASA-2022-0100","MGASA-2022-0101","OPENSUSE-SU-2022:1039-1","SUSE-SU-2022:1038-1","SUSE-SU-2022:1039-1","SUSE-SU-2022:1163-1","SUSE-SU-2022:1196-1","SUSE-SU-2022:1197-1","SUSE-SU-2022:1255-1","SUSE-SU-2022:1256-1","SUSE-SU-2022:1257-1","SUSE-SU-2022:1266-1","SUSE-SU-2022:1267-1","SUSE-SU-2022:1270-1","SUSE-SU-2022:1283-1","SUSE-SU-2022:1402-1","USN-5467-1","USN-7428-1","USN-7428-2","USN-7506-1","USN-7506-2","USN-7506-3","USN-7506-4"],"duplicates":[],"related":["OPENSUSE-SU-2022:1039-1","SUSE-SU-2022:1038-1","SUSE-SU-2022:1039-1","SUSE-SU-2022:1163-1","SUSE-SU-2022:1196-1","SUSE-SU-2022:1197-1","SUSE-SU-2022:1255-1","SUSE-SU-2022:1256-1","SUSE-SU-2022:1257-1","SUSE-SU-2022:1266-1","SUSE-SU-2022:1267-1","SUSE-SU-2022:1270-1","SUSE-SU-2022:1283-1","SUSE-SU-2022:1402-1","USN-5467-1","USN-7428-1","USN-7428-2","USN-7506-1","USN-7506-2","USN-7506-3","USN-7506-4"]},"timeline":[{"kind":"published","date":"2022-03-10T19:20:22.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-08-03T03:28:42.964Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":28,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T04:59:11.081Z","stale":false,"partial":false}}