USN-5357-1

Advisory lineage Upstream: 2 Downstream: 0
Published: 31 Mar 2022, 02:05
Last modified:25 Jun 2026, 13:31

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

31 Mar 2022, 02:05
Published
Vulnerability first disclosed
25 Jun 2026, 13:31
Last Modified
Vulnerability information updated

Description

linux, linux-aws, linux-azure-4.15, linux-dell300x, linux-hwe, linux-kvm, linux-snapdragon vulnerability It was discovered that the IPsec implementation in the Linux kernel did not properly allocate enough memory when performing ESP transformations, leading to a heap-based buffer overflow. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code.

Affected Systems

  • ubuntu•linux

    < 4.15.0-175.184

  • ubuntu•linux-aws

    < 4.15.0-1126.135

  • ubuntu•linux-azure-4.15

    < 4.15.0-1136.149

  • ubuntu•linux-dell300x

    < 4.15.0-1040.45

  • ubuntu•linux-hwe

    < 4.15.0-175.184~16.04.1

  • ubuntu•linux-kvm

    < 4.15.0-1112.115

  • ubuntu•linux-snapdragon

    < 4.15.0-1125.134

References (2)