CVE-2022-3169
Vulnerability Summary
Timeline
Description
A flaw was found in the Linux kernel. A denial of service flaw may occur if there is a consecutive request of the NVME_IOCTL_RESET and the NVME_IOCTL_SUBSYS_RESET through the device file of the driver, resulting in a PCIe link disconnect.
CVSS Metrics
- v3.1•MEDIUM•Score: 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS Trends
Current EPSS score: 0.24%• Percentile: 16%
Techniques & Countermeasures
- CWE-20•Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
Affected Systems
- debian•linux
< 5.10.158-1 | < 6.0.10-1 | < 6.0.10-1 | < 6.0.10-1
- ubuntu•linux
all | < 5.4.0-144.161 | < 5.15.0-67.74
- ubuntu•linux-aws
all | < 5.4.0-1097.105 | < 5.15.0-1031.35
- ubuntu•linux-aws-5.0
all
- ubuntu•linux-aws-5.11
all
- ubuntu•linux-aws-5.13
all
- ubuntu•linux-aws-5.15
< 5.15.0-1031.35~20.04.1
- ubuntu•linux-aws-5.3
all
- ubuntu•linux-aws-5.4
< 5.4.0-1097.105~18.04.1
- ubuntu•linux-aws-5.8
all
- ubuntu•linux-aws-fips
all | < 5.4.0-1099.107+fips1
- ubuntu•linux-aws-hwe
all
- ubuntu•linux-azure
all | all | < 5.4.0-1104.110 | < 5.15.0-1034.41
- ubuntu•linux-azure-4.15
all
- ubuntu•linux-azure-5.11
all
- ubuntu•linux-azure-5.13
all
- ubuntu•linux-azure-5.15
< 5.15.0-1034.41~20.04.1
- ubuntu•linux-azure-5.19
< 5.19.0-1021.22~22.04.1
- ubuntu•linux-azure-5.3
all
- ubuntu•linux-azure-5.4
< 5.4.0-1104.110~18.04.1
- ubuntu•linux-azure-5.8
all
- ubuntu•linux-azure-edge
all
- ubuntu•linux-azure-fde
< 5.15.0-1034.41.1
- ubuntu•linux-azure-fips
all | < 5.4.0-1104.110+fips1
- ubuntu•linux-bluefield
all | < 5.4.0-1059.65 | < 5.15.0-1014.16
- ubuntu•linux-fips
all | < 5.4.0-1073.82
- ubuntu•linux-gcp
all | all | < 5.4.0-1101.110 | < 5.15.0-1030.37
- ubuntu•linux-gcp-4.15
all
- ubuntu•linux-gcp-5.11
all
- ubuntu•linux-gcp-5.13
all
- ubuntu•linux-gcp-5.15
< 5.15.0-1030.37~20.04.1
- ubuntu•linux-gcp-5.3
all
- ubuntu•linux-gcp-5.4
< 5.4.0-1101.110~18.04.1
- ubuntu•linux-gcp-5.8
all
- ubuntu•linux-gcp-fips
all | < 5.4.0-1101.110+fips1
- ubuntu•linux-gke
< 5.4.0-1095.102 | < 5.15.0-1028.33
- ubuntu•linux-gke-4.15
all
- ubuntu•linux-gke-5.15
< 5.15.0-1028.33~20.04.1
- ubuntu•linux-gke-5.4
all
- ubuntu•linux-gkeop
< 5.4.0-1065.69 | < 5.15.0-1016.21
- ubuntu•linux-gkeop-5.15
< 5.15.0-1016.21~20.04.1
- ubuntu•linux-gkeop-5.4
all
- ubuntu•linux-hwe
all | all
- ubuntu•linux-hwe-5.11
all
- ubuntu•linux-hwe-5.13
all
- ubuntu•linux-hwe-5.15
< 5.15.0-67.74~20.04.1
- ubuntu•linux-hwe-5.19
< 5.19.0-35.36~22.04.1
- ubuntu•linux-hwe-5.4
< 5.4.0-144.161~18.04.1
- ubuntu•linux-hwe-5.8
all
- ubuntu•linux-hwe-edge
all | all
Showing first 50 affected entries in server-rendered view.
References (20)
- https://bugzilla.kernel.org/show_bug.cgi?id=214771
- https://lists.debian.org/debian-lts-announce/2022/12/msg00031.html
- https://ubuntu.com/security/CVE-2022-3169
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=1e866afd4bcdd01a70a5eddb4371158d3035ce03
- https://ubuntu.com/security/notices/USN-5911-1
- https://ubuntu.com/security/notices/USN-5912-1
- https://ubuntu.com/security/notices/USN-5917-1
- https://ubuntu.com/security/notices/USN-5929-1
- https://ubuntu.com/security/notices/USN-5934-1
- https://ubuntu.com/security/notices/USN-5935-1
- https://ubuntu.com/security/notices/USN-5938-1
- https://ubuntu.com/security/notices/USN-5939-1
- https://ubuntu.com/security/notices/USN-5940-1
- https://ubuntu.com/security/notices/USN-5941-1
- https://ubuntu.com/security/notices/USN-5950-1
- https://ubuntu.com/security/notices/USN-5951-1
- https://ubuntu.com/security/notices/USN-5962-1
- https://ubuntu.com/security/notices/USN-6000-1
- https://www.cve.org/CVERecord?id=CVE-2022-3169
- https://security-tracker.debian.org/tracker/CVE-2022-3169