USN-5515-1

Advisory lineage Upstream: 20 Downstream: 0
Published: 13 Jul 2022, 19:09
Last modified:03 Jun 2026, 13:34

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

13 Jul 2022, 19:09
Published
Vulnerability first disclosed
03 Jun 2026, 13:34
Last Modified
Vulnerability information updated

Description

linux, linux-aws, linux-aws-hwe, linux-azure, linux-azure-4.15, linux-dell300x, linux-gcp, linux-gcp-4.15, linux-hwe, linux-kvm, linux-oracle, linux-raspi2, linux-snapdragon vulnerabilities Eric Biederman discovered that the cgroup process migration implementation in the Linux kernel did not perform permission checks correctly in some situations. A local attacker could possibly use this to gain administrative privileges. (CVE-2021-4197) Jann Horn discovered that the FUSE file system in the Linux kernel contained a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2022-1011) Duoming Zhou discovered that the 6pack protocol implementation in the Linux kernel did not handle detach events properly in some situations, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash). (CVE-2022-1198) Duoming Zhou discovered that the AX.25 amateur radio protocol implementation in the Linux kernel did not handle detach events properly in some situations. A local attacker could possibly use this to cause a denial of service (system crash) or execute arbitrary code. (CVE-2022-1199) Duoming Zhou discovered race conditions in the AX.25 amateur radio protocol implementation in the Linux kernel during device detach operations. A local attacker could possibly use this to cause a denial of service (system crash). (CVE-2022-1204) Duoming Zhou discovered race conditions in the AX.25 amateur radio protocol implementation in the Linux kernel, leading to use-after-free vulnerabilities. A local attacker could possibly use this to cause a denial of service (system crash). (CVE-2022-1205) It was discovered that the PF_KEYv2 implementation in the Linux kernel did not properly initialize kernel memory in some situations. A local attacker could use this to expose sensitive information (kernel memory). (CVE-2022-1353) It was discovered that the implementation of X.25 network protocols in the Linux kernel did not terminate link layer sessions properly. A local attacker could possibly use this to cause a denial of service (system crash). (CVE-2022-1516) Zheyu Ma discovered that the Silicon Motion SM712 framebuffer driver in the Linux kernel did not properly handle very small reads. A local attacker could use this to cause a denial of service (system crash). (CVE-2022-2380) It was discovered that the Microchip CAN BUS Analyzer interface implementation in the Linux kernel did not properly handle certain error conditions, leading to a double-free. A local attacker could possibly use this to cause a denial of service (system crash). (CVE-2022-28389)

Affected Systems

  • ubuntu•linux

    < 4.15.0-189.200

  • ubuntu•linux-aws

    < 4.15.0-1137.148

  • ubuntu•linux-aws-hwe

    < 4.15.0-1137.148~16.04.1

  • ubuntu•linux-azure

    < 4.15.0-1146.161~14.04.1

  • ubuntu•linux-azure-4.15

    < 4.15.0-1146.161

  • ubuntu•linux-dell300x

    < 4.15.0-1049.54

  • ubuntu•linux-gcp

    < 4.15.0-1131.147~16.04.1

  • ubuntu•linux-gcp-4.15

    < 4.15.0-1131.147

  • ubuntu•linux-hwe

    < 4.15.0-189.200~16.04.1

  • ubuntu•linux-kvm

    < 4.15.0-1123.128

  • ubuntu•linux-oracle

    < 4.15.0-1102.113~16.04.1 | < 4.15.0-1102.113

  • ubuntu•linux-raspi2

    < 4.15.0-1115.123

  • ubuntu•linux-snapdragon

    < 4.15.0-1133.143

References (11)