UBUNTU-CVE-2022-36123

Advisory lineage Upstream: 1 Downstream: 0

Upstream

CVE-2022-36123

Published: 29 Jul 2022, 14:15

Last modified:24 Oct 2025, 04:53

Vulnerability Summary

Overall Risk (default)

medium

31/100

CVSS Score

7.8 HIGH

3.1 (osv_ubuntu)

EPSS Score

No data

KEV

Not listed

Ransomware

No reports

Public exploits

None found

Dark Web

Not detected

Timeline

29 Jul 2022, 14:15

Published

Vulnerability first disclosed

24 Oct 2025, 04:53

Last Modified

Vulnerability information updated

Description

The Linux kernel before 5.18.13 lacks a certain clear operation for the block starting symbol (.bss). This allows Xen PV guest OS users to cause a denial of service or gain privileges.

CVSS Metrics

v3.1•HIGH•Score: 7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected Systems

ubuntu•linux-aws-5.0
all
ubuntu•linux-aws-5.11
all
ubuntu•linux-aws-5.13
all
ubuntu•linux-aws-5.3
all
ubuntu•linux-aws-5.8
all
ubuntu•linux-azure
all
ubuntu•linux-azure-5.11
all
ubuntu•linux-azure-5.13
all
ubuntu•linux-azure-5.3
all
ubuntu•linux-azure-5.8
all
ubuntu•linux-azure-edge
all
ubuntu•linux-gcp
all
ubuntu•linux-gcp-5.11
all
ubuntu•linux-gcp-5.13
all
ubuntu•linux-gcp-5.3
all
ubuntu•linux-gcp-5.8
all
ubuntu•linux-gke-4.15
all
ubuntu•linux-gke-5.4
all
ubuntu•linux-gkeop-5.4
all
ubuntu•linux-hwe
all
ubuntu•linux-hwe-5.11
all
ubuntu•linux-hwe-5.13
all
ubuntu•linux-hwe-5.8
all
ubuntu•linux-hwe-edge
all | all
ubuntu•linux-intel-5.13
all
ubuntu•linux-oem
all
ubuntu•linux-oem-5.10
all
ubuntu•linux-oem-5.13
all
ubuntu•linux-oem-5.6
all
ubuntu•linux-oracle-5.0
all
ubuntu•linux-oracle-5.11
all
ubuntu•linux-oracle-5.13
all
ubuntu•linux-oracle-5.3
all
ubuntu•linux-oracle-5.8
all
ubuntu•linux-raspi2
all
ubuntu•linux-riscv
all
ubuntu•linux-riscv-5.11
all
ubuntu•linux-riscv-5.8
all