USN-5514-1

Advisory lineage Upstream: 12 Downstream: 0
Published: 13 Jul 2022, 19:03
Last modified:03 Jun 2026, 13:34

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

13 Jul 2022, 19:03
Published
Vulnerability first disclosed
03 Jun 2026, 13:34
Last Modified
Vulnerability information updated

Description

linux, linux-aws, linux-aws-5.4, linux-azure, linux-azure-5.4, linux-azure-fde, linux-gcp, linux-gke, linux-gkeop, linux-gkeop-5.4, linux-hwe-5.4, linux-ibm, linux-ibm-5.4, linux-kvm, linux-oracle, linux-oracle-5.4, linux-raspi, linux-raspi-5.4 vulnerabilities It was discovered that the implementation of the 6pack and mkiss protocols in the Linux kernel did not handle detach events properly in some situations, leading to a use-after-free vulnerability. A local attacker could possibly use this to cause a denial of service (system crash). (CVE-2022-1195) Duoming Zhou discovered that the AX.25 amateur radio protocol implementation in the Linux kernel did not handle detach events properly in some situations. A local attacker could possibly use this to cause a denial of service (system crash) or execute arbitrary code. (CVE-2022-1199) Duoming Zhou discovered race conditions in the AX.25 amateur radio protocol implementation in the Linux kernel during device detach operations. A local attacker could possibly use this to cause a denial of service (system crash). (CVE-2022-1204) Duoming Zhou discovered race conditions in the AX.25 amateur radio protocol implementation in the Linux kernel, leading to use-after-free vulnerabilities. A local attacker could possibly use this to cause a denial of service (system crash). (CVE-2022-1205) Yongkang Jia discovered that the KVM hypervisor implementation in the Linux kernel did not properly handle guest TLB mapping invalidation requests in some situations. An attacker in a guest VM could use this to cause a denial of service (system crash) in the host OS. (CVE-2022-1789) Minh Yuan discovered that the floppy driver in the Linux kernel contained a race condition in some situations, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2022-33981)

Affected Systems

  • ubuntu•linux

    < 5.4.0-122.138

  • ubuntu•linux-aws

    < 5.4.0-1081.88

  • ubuntu•linux-aws-5.4

    < 5.4.0-1081.88~18.04.1

  • ubuntu•linux-azure

    < 5.4.0-1086.91

  • ubuntu•linux-azure-5.4

    < 5.4.0-1086.91~18.04.1

  • ubuntu•linux-azure-fde

    < 5.4.0-1086.91+cvm1.1

  • ubuntu•linux-gcp

    < 5.4.0-1084.92

  • ubuntu•linux-gke

    < 5.4.0-1078.84

  • ubuntu•linux-gkeop

    < 5.4.0-1049.52

  • ubuntu•linux-gkeop-5.4

    < 5.4.0-1049.52~18.04.1

  • ubuntu•linux-hwe-5.4

    < 5.4.0-122.138~18.04.1

  • ubuntu•linux-ibm

    < 5.4.0-1029.33

  • ubuntu•linux-ibm-5.4

    < 5.4.0-1029.33~18.04.1

  • ubuntu•linux-kvm

    < 5.4.0-1071.76

  • ubuntu•linux-oracle

    < 5.4.0-1079.87

  • ubuntu•linux-oracle-5.4

    < 5.4.0-1079.87~18.04.1

  • ubuntu•linux-raspi

    < 5.4.0-1066.76

  • ubuntu•linux-raspi-5.4

    < 5.4.0-1066.76~18.04.1

References (7)