Kyle Zeng discovered that the Network Queuing and Scheduling subsystem of the Linux kernel did not properly perform reference counting in some situations, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or execute arbitrary code. (CVE-2022-29581)
Bing-Jhong Billy Jheng discovered that the io_uring subsystem in the Linux kernel contained in integer overflow. A local attacker could use this to cause a denial of service (system crash) or execute arbitrary code. (CVE-2022-1116)
Jann Horn discovered that the Linux kernel did not properly enforce seccomp restrictions in some situations. A local attacker could use this to bypass intended seccomp sandbox restrictions. (CVE-2022-30594)
{
"availability": "No subscription required",
"binaries": [
{
"binary_name": "linux-buildinfo-5.4.0-1075-gcp",
"binary_version": "5.4.0-1075.80~18.04.1"
},
{
"binary_name": "linux-gcp-5.4-headers-5.4.0-1075",
"binary_version": "5.4.0-1075.80~18.04.1"
},
{
"binary_name": "linux-gcp-5.4-tools-5.4.0-1075",
"binary_version": "5.4.0-1075.80~18.04.1"
},
{
"binary_name": "linux-headers-5.4.0-1075-gcp",
"binary_version": "5.4.0-1075.80~18.04.1"
},
{
"binary_name": "linux-image-unsigned-5.4.0-1075-gcp",
"binary_version": "5.4.0-1075.80~18.04.1"
},
{
"binary_name": "linux-modules-5.4.0-1075-gcp",
"binary_version": "5.4.0-1075.80~18.04.1"
},
{
"binary_name": "linux-modules-extra-5.4.0-1075-gcp",
"binary_version": "5.4.0-1075.80~18.04.1"
},
{
"binary_name": "linux-tools-5.4.0-1075-gcp",
"binary_version": "5.4.0-1075.80~18.04.1"
}
]
}{
"cves": [
{
"id": "CVE-2022-1116",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "Ubuntu",
"score": "high"
}
]
},
{
"id": "CVE-2022-29581",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "Ubuntu",
"score": "high"
}
]
},
{
"id": "CVE-2022-30594",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
}
],
"ecosystem": "Ubuntu:18.04:LTS"
}
{
"availability": "No subscription required",
"binaries": [
{
"binary_name": "linux-buildinfo-5.4.0-1043-gkeop",
"binary_version": "5.4.0-1043.44~18.04.1"
},
{
"binary_name": "linux-cloud-tools-5.4.0-1043-gkeop",
"binary_version": "5.4.0-1043.44~18.04.1"
},
{
"binary_name": "linux-gkeop-5.4-cloud-tools-5.4.0-1043",
"binary_version": "5.4.0-1043.44~18.04.1"
},
{
"binary_name": "linux-gkeop-5.4-headers-5.4.0-1043",
"binary_version": "5.4.0-1043.44~18.04.1"
},
{
"binary_name": "linux-gkeop-5.4-source-5.4.0",
"binary_version": "5.4.0-1043.44~18.04.1"
},
{
"binary_name": "linux-gkeop-5.4-tools-5.4.0-1043",
"binary_version": "5.4.0-1043.44~18.04.1"
},
{
"binary_name": "linux-headers-5.4.0-1043-gkeop",
"binary_version": "5.4.0-1043.44~18.04.1"
},
{
"binary_name": "linux-image-unsigned-5.4.0-1043-gkeop",
"binary_version": "5.4.0-1043.44~18.04.1"
},
{
"binary_name": "linux-modules-5.4.0-1043-gkeop",
"binary_version": "5.4.0-1043.44~18.04.1"
},
{
"binary_name": "linux-modules-extra-5.4.0-1043-gkeop",
"binary_version": "5.4.0-1043.44~18.04.1"
},
{
"binary_name": "linux-tools-5.4.0-1043-gkeop",
"binary_version": "5.4.0-1043.44~18.04.1"
}
]
}{
"cves": [
{
"id": "CVE-2022-1116",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "Ubuntu",
"score": "high"
}
]
},
{
"id": "CVE-2022-29581",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "Ubuntu",
"score": "high"
}
]
},
{
"id": "CVE-2022-30594",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
}
],
"ecosystem": "Ubuntu:18.04:LTS"
}
{
"availability": "No subscription required",
"binaries": [
{
"binary_name": "linux-buildinfo-5.4.0-1023-ibm",
"binary_version": "5.4.0-1023.25~18.04.1"
},
{
"binary_name": "linux-headers-5.4.0-1023-ibm",
"binary_version": "5.4.0-1023.25~18.04.1"
},
{
"binary_name": "linux-ibm-5.4-cloud-tools-common",
"binary_version": "5.4.0-1023.25~18.04.1"
},
{
"binary_name": "linux-ibm-5.4-headers-5.4.0-1023",
"binary_version": "5.4.0-1023.25~18.04.1"
},
{
"binary_name": "linux-ibm-5.4-source-5.4.0",
"binary_version": "5.4.0-1023.25~18.04.1"
},
{
"binary_name": "linux-ibm-5.4-tools-5.4.0-1023",
"binary_version": "5.4.0-1023.25~18.04.1"
},
{
"binary_name": "linux-ibm-5.4-tools-common",
"binary_version": "5.4.0-1023.25~18.04.1"
},
{
"binary_name": "linux-image-unsigned-5.4.0-1023-ibm",
"binary_version": "5.4.0-1023.25~18.04.1"
},
{
"binary_name": "linux-modules-5.4.0-1023-ibm",
"binary_version": "5.4.0-1023.25~18.04.1"
},
{
"binary_name": "linux-modules-extra-5.4.0-1023-ibm",
"binary_version": "5.4.0-1023.25~18.04.1"
},
{
"binary_name": "linux-tools-5.4.0-1023-ibm",
"binary_version": "5.4.0-1023.25~18.04.1"
}
]
}{
"cves": [
{
"id": "CVE-2022-1116",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "Ubuntu",
"score": "high"
}
]
},
{
"id": "CVE-2022-29581",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "Ubuntu",
"score": "high"
}
]
},
{
"id": "CVE-2022-30594",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
}
],
"ecosystem": "Ubuntu:18.04:LTS"
}
{
"availability": "No subscription required",
"binaries": [
{
"binary_name": "linux-buildinfo-5.4.0-1073-oracle",
"binary_version": "5.4.0-1073.79~18.04.1"
},
{
"binary_name": "linux-headers-5.4.0-1073-oracle",
"binary_version": "5.4.0-1073.79~18.04.1"
},
{
"binary_name": "linux-image-unsigned-5.4.0-1073-oracle",
"binary_version": "5.4.0-1073.79~18.04.1"
},
{
"binary_name": "linux-modules-5.4.0-1073-oracle",
"binary_version": "5.4.0-1073.79~18.04.1"
},
{
"binary_name": "linux-modules-extra-5.4.0-1073-oracle",
"binary_version": "5.4.0-1073.79~18.04.1"
},
{
"binary_name": "linux-oracle-5.4-headers-5.4.0-1073",
"binary_version": "5.4.0-1073.79~18.04.1"
},
{
"binary_name": "linux-oracle-5.4-tools-5.4.0-1073",
"binary_version": "5.4.0-1073.79~18.04.1"
},
{
"binary_name": "linux-tools-5.4.0-1073-oracle",
"binary_version": "5.4.0-1073.79~18.04.1"
}
]
}{
"cves": [
{
"id": "CVE-2022-1116",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "Ubuntu",
"score": "high"
}
]
},
{
"id": "CVE-2022-29581",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "Ubuntu",
"score": "high"
}
]
},
{
"id": "CVE-2022-30594",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
}
],
"ecosystem": "Ubuntu:18.04:LTS"
}
{
"availability": "No subscription required",
"binaries": [
{
"binary_name": "linux-buildinfo-5.4.0-1062-raspi",
"binary_version": "5.4.0-1062.70~18.04.1"
},
{
"binary_name": "linux-headers-5.4.0-1062-raspi",
"binary_version": "5.4.0-1062.70~18.04.1"
},
{
"binary_name": "linux-image-5.4.0-1062-raspi",
"binary_version": "5.4.0-1062.70~18.04.1"
},
{
"binary_name": "linux-modules-5.4.0-1062-raspi",
"binary_version": "5.4.0-1062.70~18.04.1"
},
{
"binary_name": "linux-raspi-5.4-headers-5.4.0-1062",
"binary_version": "5.4.0-1062.70~18.04.1"
},
{
"binary_name": "linux-raspi-5.4-tools-5.4.0-1062",
"binary_version": "5.4.0-1062.70~18.04.1"
},
{
"binary_name": "linux-tools-5.4.0-1062-raspi",
"binary_version": "5.4.0-1062.70~18.04.1"
}
]
}{
"cves": [
{
"id": "CVE-2022-1116",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "Ubuntu",
"score": "high"
}
]
},
{
"id": "CVE-2022-29581",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "Ubuntu",
"score": "high"
}
]
},
{
"id": "CVE-2022-30594",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
}
],
"ecosystem": "Ubuntu:18.04:LTS"
}
{
"availability": "No subscription required",
"binaries": [
{
"binary_name": "linux-bluefield-headers-5.4.0-1036",
"binary_version": "5.4.0-1036.39"
},
{
"binary_name": "linux-bluefield-tools-5.4.0-1036",
"binary_version": "5.4.0-1036.39"
},
{
"binary_name": "linux-buildinfo-5.4.0-1036-bluefield",
"binary_version": "5.4.0-1036.39"
},
{
"binary_name": "linux-headers-5.4.0-1036-bluefield",
"binary_version": "5.4.0-1036.39"
},
{
"binary_name": "linux-image-unsigned-5.4.0-1036-bluefield",
"binary_version": "5.4.0-1036.39"
},
{
"binary_name": "linux-modules-5.4.0-1036-bluefield",
"binary_version": "5.4.0-1036.39"
},
{
"binary_name": "linux-tools-5.4.0-1036-bluefield",
"binary_version": "5.4.0-1036.39"
}
]
}{
"cves": [
{
"id": "CVE-2022-1116",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "Ubuntu",
"score": "high"
}
]
},
{
"id": "CVE-2022-29581",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "Ubuntu",
"score": "high"
}
]
},
{
"id": "CVE-2022-30594",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
}
],
"ecosystem": "Ubuntu:20.04:LTS"
}
{
"availability": "No subscription required",
"binaries": [
{
"binary_name": "linux-buildinfo-5.4.0-1043-gkeop",
"binary_version": "5.4.0-1043.44"
},
{
"binary_name": "linux-cloud-tools-5.4.0-1043-gkeop",
"binary_version": "5.4.0-1043.44"
},
{
"binary_name": "linux-gkeop-cloud-tools-5.4.0-1043",
"binary_version": "5.4.0-1043.44"
},
{
"binary_name": "linux-gkeop-headers-5.4.0-1043",
"binary_version": "5.4.0-1043.44"
},
{
"binary_name": "linux-gkeop-source-5.4.0",
"binary_version": "5.4.0-1043.44"
},
{
"binary_name": "linux-gkeop-tools-5.4.0-1043",
"binary_version": "5.4.0-1043.44"
},
{
"binary_name": "linux-headers-5.4.0-1043-gkeop",
"binary_version": "5.4.0-1043.44"
},
{
"binary_name": "linux-image-unsigned-5.4.0-1043-gkeop",
"binary_version": "5.4.0-1043.44"
},
{
"binary_name": "linux-modules-5.4.0-1043-gkeop",
"binary_version": "5.4.0-1043.44"
},
{
"binary_name": "linux-modules-extra-5.4.0-1043-gkeop",
"binary_version": "5.4.0-1043.44"
},
{
"binary_name": "linux-tools-5.4.0-1043-gkeop",
"binary_version": "5.4.0-1043.44"
}
]
}{
"cves": [
{
"id": "CVE-2022-1116",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "Ubuntu",
"score": "high"
}
]
},
{
"id": "CVE-2022-29581",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "Ubuntu",
"score": "high"
}
]
},
{
"id": "CVE-2022-30594",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
}
],
"ecosystem": "Ubuntu:20.04:LTS"
}
{
"availability": "No subscription required",
"binaries": [
{
"binary_name": "linux-buildinfo-5.4.0-1073-oracle",
"binary_version": "5.4.0-1073.79"
},
{
"binary_name": "linux-headers-5.4.0-1073-oracle",
"binary_version": "5.4.0-1073.79"
},
{
"binary_name": "linux-image-unsigned-5.4.0-1073-oracle",
"binary_version": "5.4.0-1073.79"
},
{
"binary_name": "linux-modules-5.4.0-1073-oracle",
"binary_version": "5.4.0-1073.79"
},
{
"binary_name": "linux-modules-extra-5.4.0-1073-oracle",
"binary_version": "5.4.0-1073.79"
},
{
"binary_name": "linux-oracle-headers-5.4.0-1073",
"binary_version": "5.4.0-1073.79"
},
{
"binary_name": "linux-oracle-tools-5.4.0-1073",
"binary_version": "5.4.0-1073.79"
},
{
"binary_name": "linux-tools-5.4.0-1073-oracle",
"binary_version": "5.4.0-1073.79"
}
]
}{
"cves": [
{
"id": "CVE-2022-1116",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "Ubuntu",
"score": "high"
}
]
},
{
"id": "CVE-2022-29581",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "Ubuntu",
"score": "high"
}
]
},
{
"id": "CVE-2022-30594",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
}
],
"ecosystem": "Ubuntu:20.04:LTS"
}
{
"availability": "No subscription required",
"binaries": [
{
"binary_name": "linux-buildinfo-5.4.0-1062-raspi",
"binary_version": "5.4.0-1062.70"
},
{
"binary_name": "linux-headers-5.4.0-1062-raspi",
"binary_version": "5.4.0-1062.70"
},
{
"binary_name": "linux-image-5.4.0-1062-raspi",
"binary_version": "5.4.0-1062.70"
},
{
"binary_name": "linux-modules-5.4.0-1062-raspi",
"binary_version": "5.4.0-1062.70"
},
{
"binary_name": "linux-raspi-headers-5.4.0-1062",
"binary_version": "5.4.0-1062.70"
},
{
"binary_name": "linux-raspi-tools-5.4.0-1062",
"binary_version": "5.4.0-1062.70"
},
{
"binary_name": "linux-tools-5.4.0-1062-raspi",
"binary_version": "5.4.0-1062.70"
}
]
}{
"cves": [
{
"id": "CVE-2022-1116",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "Ubuntu",
"score": "high"
}
]
},
{
"id": "CVE-2022-29581",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "Ubuntu",
"score": "high"
}
]
},
{
"id": "CVE-2022-30594",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
}
],
"ecosystem": "Ubuntu:20.04:LTS"
}