UBUNTU-CVE-2022-4842

Advisory lineage Upstream: 1 Downstream: 9
Published: 12 Jan 2023, 19:15
Last modified:22 Apr 2026, 13:32

Vulnerability Summary

Overall Risk (default)
low
22/100
CVSS Score
5.5 MEDIUM
3.1 (osv_ubuntu)
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

12 Jan 2023, 19:15
Published
Vulnerability first disclosed
22 Apr 2026, 13:32
Last Modified
Vulnerability information updated

Description

A flaw NULL Pointer Dereference in the Linux kernel NTFS3 driver function attr_punch_hole() was found. A local user could use this flaw to crash the system.

CVSS Metrics

  • v3.1MEDIUMScore: 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected Systems

  • ubuntulinux

    < 5.15.0-70.77

  • ubuntulinux-allwinner-5.19

    < 5.19.0-1012.12~22.04.1

  • ubuntulinux-aws

    < 5.15.0-1034.38

  • ubuntulinux-aws-5.0

    all

  • ubuntulinux-aws-5.11

    all

  • ubuntulinux-aws-5.13

    all

  • ubuntulinux-aws-5.15

    < 5.15.0-1034.38~20.04.1

  • ubuntulinux-aws-5.3

    all

  • ubuntulinux-aws-5.8

    all

  • ubuntulinux-azure

    all | < 5.15.0-1036.43

  • ubuntulinux-azure-5.11

    all

  • ubuntulinux-azure-5.13

    all

  • ubuntulinux-azure-5.15

    < 5.15.0-1036.43~20.04.1

  • ubuntulinux-azure-5.19

    < 5.19.0-1026.29~22.04.1

  • ubuntulinux-azure-5.3

    all

  • ubuntulinux-azure-5.8

    all

  • ubuntulinux-azure-edge

    all

  • ubuntulinux-azure-fde

    < 5.15.0-1036.43.1

  • ubuntulinux-azure-fde-5.15

    < 5.15.0-1036.43~20.04.1.1

  • ubuntulinux-bluefield

    < 5.15.0-1015.17 | < 5.15.0-1015.17

  • ubuntulinux-gcp

    all | < 5.15.0-1032.40

  • ubuntulinux-gcp-5.11

    all

  • ubuntulinux-gcp-5.13

    all

  • ubuntulinux-gcp-5.15

    < 5.15.0-1032.40~20.04.1

  • ubuntulinux-gcp-5.19

    < 5.19.0-1024.26~22.04.1

  • ubuntulinux-gcp-5.3

    all

  • ubuntulinux-gcp-5.8

    all

  • ubuntulinux-gke

    < 5.15.0-1031.36

  • ubuntulinux-gke-4.15

    all

  • ubuntulinux-gke-5.15

    < 5.15.0-1031.36~20.04.1

  • ubuntulinux-gke-5.4

    all

  • ubuntulinux-gkeop

    < 5.15.0-1018.23

  • ubuntulinux-gkeop-5.15

    < 5.15.0-1018.23~20.04.1

  • ubuntulinux-gkeop-5.4

    all

  • ubuntulinux-hwe

    all

  • ubuntulinux-hwe-5.11

    all

  • ubuntulinux-hwe-5.13

    all

  • ubuntulinux-hwe-5.15

    < 5.15.0-70.77~20.04.1

  • ubuntulinux-hwe-5.19

    < 5.19.0-42.43~22.04.1

  • ubuntulinux-hwe-5.8

    all

  • ubuntulinux-hwe-edge

    all

  • ubuntulinux-ibm

    < 5.15.0-1028.31

  • ubuntulinux-intel-5.13

    all

  • ubuntulinux-intel-iot-realtime

    < 5.15.0-1024.29 | < 5.15.0-1024.29

  • ubuntulinux-intel-iotg

    < 5.15.0-1028.33

  • ubuntulinux-intel-iotg-5.15

    < 5.15.0-1030.35~20.04.1

  • ubuntulinux-kvm

    < 5.15.0-1031.36

  • ubuntulinux-lowlatency

    < 5.15.0-70.77

  • ubuntulinux-lowlatency-hwe-5.15

    < 5.15.0-70.77~20.04.1

  • ubuntulinux-lowlatency-hwe-5.19

    < 5.19.0-1024.25~22.04.1

Showing first 50 affected entries in server-rendered view.

References (12)