Kyle Zeng discovered that the Network Queuing and Scheduling subsystem of the Linux kernel did not properly perform reference counting in some situations, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or execute arbitrary code. (CVE-2022-29581)
Bing-Jhong Billy Jheng discovered that the io_uring subsystem in the Linux kernel contained in integer overflow. A local attacker could use this to cause a denial of service (system crash) or execute arbitrary code. (CVE-2022-1116)
Jann Horn discovered that the Linux kernel did not properly enforce seccomp restrictions in some situations. A local attacker could use this to bypass intended seccomp sandbox restrictions. (CVE-2022-30594)
{
"availability": "No subscription required",
"binaries": [
{
"binary_version": "5.4.0-1075.80~18.04.1",
"binary_name": "linux-buildinfo-5.4.0-1075-gcp"
},
{
"binary_version": "5.4.0-1075.80~18.04.1",
"binary_name": "linux-gcp-5.4-headers-5.4.0-1075"
},
{
"binary_version": "5.4.0-1075.80~18.04.1",
"binary_name": "linux-gcp-5.4-tools-5.4.0-1075"
},
{
"binary_version": "5.4.0-1075.80~18.04.1",
"binary_name": "linux-headers-5.4.0-1075-gcp"
},
{
"binary_version": "5.4.0-1075.80~18.04.1",
"binary_name": "linux-image-unsigned-5.4.0-1075-gcp"
},
{
"binary_version": "5.4.0-1075.80~18.04.1",
"binary_name": "linux-modules-5.4.0-1075-gcp"
},
{
"binary_version": "5.4.0-1075.80~18.04.1",
"binary_name": "linux-modules-extra-5.4.0-1075-gcp"
},
{
"binary_version": "5.4.0-1075.80~18.04.1",
"binary_name": "linux-tools-5.4.0-1075-gcp"
}
]
}{
"cves": [
{
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "high",
"type": "Ubuntu"
}
],
"id": "CVE-2022-1116"
},
{
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "high",
"type": "Ubuntu"
}
],
"id": "CVE-2022-29581"
},
{
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
],
"id": "CVE-2022-30594"
}
],
"ecosystem": "Ubuntu:18.04:LTS"
}
{
"availability": "No subscription required",
"binaries": [
{
"binary_version": "5.4.0-1043.44~18.04.1",
"binary_name": "linux-buildinfo-5.4.0-1043-gkeop"
},
{
"binary_version": "5.4.0-1043.44~18.04.1",
"binary_name": "linux-cloud-tools-5.4.0-1043-gkeop"
},
{
"binary_version": "5.4.0-1043.44~18.04.1",
"binary_name": "linux-gkeop-5.4-cloud-tools-5.4.0-1043"
},
{
"binary_version": "5.4.0-1043.44~18.04.1",
"binary_name": "linux-gkeop-5.4-headers-5.4.0-1043"
},
{
"binary_version": "5.4.0-1043.44~18.04.1",
"binary_name": "linux-gkeop-5.4-source-5.4.0"
},
{
"binary_version": "5.4.0-1043.44~18.04.1",
"binary_name": "linux-gkeop-5.4-tools-5.4.0-1043"
},
{
"binary_version": "5.4.0-1043.44~18.04.1",
"binary_name": "linux-headers-5.4.0-1043-gkeop"
},
{
"binary_version": "5.4.0-1043.44~18.04.1",
"binary_name": "linux-image-unsigned-5.4.0-1043-gkeop"
},
{
"binary_version": "5.4.0-1043.44~18.04.1",
"binary_name": "linux-modules-5.4.0-1043-gkeop"
},
{
"binary_version": "5.4.0-1043.44~18.04.1",
"binary_name": "linux-modules-extra-5.4.0-1043-gkeop"
},
{
"binary_version": "5.4.0-1043.44~18.04.1",
"binary_name": "linux-tools-5.4.0-1043-gkeop"
}
]
}{
"cves": [
{
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "high",
"type": "Ubuntu"
}
],
"id": "CVE-2022-1116"
},
{
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "high",
"type": "Ubuntu"
}
],
"id": "CVE-2022-29581"
},
{
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
],
"id": "CVE-2022-30594"
}
],
"ecosystem": "Ubuntu:18.04:LTS"
}
{
"availability": "No subscription required",
"binaries": [
{
"binary_version": "5.4.0-1023.25~18.04.1",
"binary_name": "linux-buildinfo-5.4.0-1023-ibm"
},
{
"binary_version": "5.4.0-1023.25~18.04.1",
"binary_name": "linux-headers-5.4.0-1023-ibm"
},
{
"binary_version": "5.4.0-1023.25~18.04.1",
"binary_name": "linux-ibm-5.4-cloud-tools-common"
},
{
"binary_version": "5.4.0-1023.25~18.04.1",
"binary_name": "linux-ibm-5.4-headers-5.4.0-1023"
},
{
"binary_version": "5.4.0-1023.25~18.04.1",
"binary_name": "linux-ibm-5.4-source-5.4.0"
},
{
"binary_version": "5.4.0-1023.25~18.04.1",
"binary_name": "linux-ibm-5.4-tools-5.4.0-1023"
},
{
"binary_version": "5.4.0-1023.25~18.04.1",
"binary_name": "linux-ibm-5.4-tools-common"
},
{
"binary_version": "5.4.0-1023.25~18.04.1",
"binary_name": "linux-image-unsigned-5.4.0-1023-ibm"
},
{
"binary_version": "5.4.0-1023.25~18.04.1",
"binary_name": "linux-modules-5.4.0-1023-ibm"
},
{
"binary_version": "5.4.0-1023.25~18.04.1",
"binary_name": "linux-modules-extra-5.4.0-1023-ibm"
},
{
"binary_version": "5.4.0-1023.25~18.04.1",
"binary_name": "linux-tools-5.4.0-1023-ibm"
}
]
}{
"cves": [
{
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "high",
"type": "Ubuntu"
}
],
"id": "CVE-2022-1116"
},
{
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "high",
"type": "Ubuntu"
}
],
"id": "CVE-2022-29581"
},
{
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
],
"id": "CVE-2022-30594"
}
],
"ecosystem": "Ubuntu:18.04:LTS"
}
{
"availability": "No subscription required",
"binaries": [
{
"binary_version": "5.4.0-1073.79~18.04.1",
"binary_name": "linux-buildinfo-5.4.0-1073-oracle"
},
{
"binary_version": "5.4.0-1073.79~18.04.1",
"binary_name": "linux-headers-5.4.0-1073-oracle"
},
{
"binary_version": "5.4.0-1073.79~18.04.1",
"binary_name": "linux-image-unsigned-5.4.0-1073-oracle"
},
{
"binary_version": "5.4.0-1073.79~18.04.1",
"binary_name": "linux-modules-5.4.0-1073-oracle"
},
{
"binary_version": "5.4.0-1073.79~18.04.1",
"binary_name": "linux-modules-extra-5.4.0-1073-oracle"
},
{
"binary_version": "5.4.0-1073.79~18.04.1",
"binary_name": "linux-oracle-5.4-headers-5.4.0-1073"
},
{
"binary_version": "5.4.0-1073.79~18.04.1",
"binary_name": "linux-oracle-5.4-tools-5.4.0-1073"
},
{
"binary_version": "5.4.0-1073.79~18.04.1",
"binary_name": "linux-tools-5.4.0-1073-oracle"
}
]
}{
"cves": [
{
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "high",
"type": "Ubuntu"
}
],
"id": "CVE-2022-1116"
},
{
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "high",
"type": "Ubuntu"
}
],
"id": "CVE-2022-29581"
},
{
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
],
"id": "CVE-2022-30594"
}
],
"ecosystem": "Ubuntu:18.04:LTS"
}
{
"availability": "No subscription required",
"binaries": [
{
"binary_version": "5.4.0-1062.70~18.04.1",
"binary_name": "linux-buildinfo-5.4.0-1062-raspi"
},
{
"binary_version": "5.4.0-1062.70~18.04.1",
"binary_name": "linux-headers-5.4.0-1062-raspi"
},
{
"binary_version": "5.4.0-1062.70~18.04.1",
"binary_name": "linux-image-5.4.0-1062-raspi"
},
{
"binary_version": "5.4.0-1062.70~18.04.1",
"binary_name": "linux-modules-5.4.0-1062-raspi"
},
{
"binary_version": "5.4.0-1062.70~18.04.1",
"binary_name": "linux-raspi-5.4-headers-5.4.0-1062"
},
{
"binary_version": "5.4.0-1062.70~18.04.1",
"binary_name": "linux-raspi-5.4-tools-5.4.0-1062"
},
{
"binary_version": "5.4.0-1062.70~18.04.1",
"binary_name": "linux-tools-5.4.0-1062-raspi"
}
]
}{
"cves": [
{
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "high",
"type": "Ubuntu"
}
],
"id": "CVE-2022-1116"
},
{
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "high",
"type": "Ubuntu"
}
],
"id": "CVE-2022-29581"
},
{
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
],
"id": "CVE-2022-30594"
}
],
"ecosystem": "Ubuntu:18.04:LTS"
}
{
"availability": "No subscription required",
"binaries": [
{
"binary_version": "5.4.0-1036.39",
"binary_name": "linux-bluefield-headers-5.4.0-1036"
},
{
"binary_version": "5.4.0-1036.39",
"binary_name": "linux-bluefield-tools-5.4.0-1036"
},
{
"binary_version": "5.4.0-1036.39",
"binary_name": "linux-buildinfo-5.4.0-1036-bluefield"
},
{
"binary_version": "5.4.0-1036.39",
"binary_name": "linux-headers-5.4.0-1036-bluefield"
},
{
"binary_version": "5.4.0-1036.39",
"binary_name": "linux-image-unsigned-5.4.0-1036-bluefield"
},
{
"binary_version": "5.4.0-1036.39",
"binary_name": "linux-modules-5.4.0-1036-bluefield"
},
{
"binary_version": "5.4.0-1036.39",
"binary_name": "linux-tools-5.4.0-1036-bluefield"
}
]
}{
"cves": [
{
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "high",
"type": "Ubuntu"
}
],
"id": "CVE-2022-1116"
},
{
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "high",
"type": "Ubuntu"
}
],
"id": "CVE-2022-29581"
},
{
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
],
"id": "CVE-2022-30594"
}
],
"ecosystem": "Ubuntu:20.04:LTS"
}
{
"availability": "No subscription required",
"binaries": [
{
"binary_version": "5.4.0-1043.44",
"binary_name": "linux-buildinfo-5.4.0-1043-gkeop"
},
{
"binary_version": "5.4.0-1043.44",
"binary_name": "linux-cloud-tools-5.4.0-1043-gkeop"
},
{
"binary_version": "5.4.0-1043.44",
"binary_name": "linux-gkeop-cloud-tools-5.4.0-1043"
},
{
"binary_version": "5.4.0-1043.44",
"binary_name": "linux-gkeop-headers-5.4.0-1043"
},
{
"binary_version": "5.4.0-1043.44",
"binary_name": "linux-gkeop-source-5.4.0"
},
{
"binary_version": "5.4.0-1043.44",
"binary_name": "linux-gkeop-tools-5.4.0-1043"
},
{
"binary_version": "5.4.0-1043.44",
"binary_name": "linux-headers-5.4.0-1043-gkeop"
},
{
"binary_version": "5.4.0-1043.44",
"binary_name": "linux-image-unsigned-5.4.0-1043-gkeop"
},
{
"binary_version": "5.4.0-1043.44",
"binary_name": "linux-modules-5.4.0-1043-gkeop"
},
{
"binary_version": "5.4.0-1043.44",
"binary_name": "linux-modules-extra-5.4.0-1043-gkeop"
},
{
"binary_version": "5.4.0-1043.44",
"binary_name": "linux-tools-5.4.0-1043-gkeop"
}
]
}{
"cves": [
{
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "high",
"type": "Ubuntu"
}
],
"id": "CVE-2022-1116"
},
{
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "high",
"type": "Ubuntu"
}
],
"id": "CVE-2022-29581"
},
{
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
],
"id": "CVE-2022-30594"
}
],
"ecosystem": "Ubuntu:20.04:LTS"
}
{
"availability": "No subscription required",
"binaries": [
{
"binary_version": "5.4.0-1073.79",
"binary_name": "linux-buildinfo-5.4.0-1073-oracle"
},
{
"binary_version": "5.4.0-1073.79",
"binary_name": "linux-headers-5.4.0-1073-oracle"
},
{
"binary_version": "5.4.0-1073.79",
"binary_name": "linux-image-unsigned-5.4.0-1073-oracle"
},
{
"binary_version": "5.4.0-1073.79",
"binary_name": "linux-modules-5.4.0-1073-oracle"
},
{
"binary_version": "5.4.0-1073.79",
"binary_name": "linux-modules-extra-5.4.0-1073-oracle"
},
{
"binary_version": "5.4.0-1073.79",
"binary_name": "linux-oracle-headers-5.4.0-1073"
},
{
"binary_version": "5.4.0-1073.79",
"binary_name": "linux-oracle-tools-5.4.0-1073"
},
{
"binary_version": "5.4.0-1073.79",
"binary_name": "linux-tools-5.4.0-1073-oracle"
}
]
}{
"cves": [
{
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "high",
"type": "Ubuntu"
}
],
"id": "CVE-2022-1116"
},
{
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "high",
"type": "Ubuntu"
}
],
"id": "CVE-2022-29581"
},
{
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
],
"id": "CVE-2022-30594"
}
],
"ecosystem": "Ubuntu:20.04:LTS"
}
{
"availability": "No subscription required",
"binaries": [
{
"binary_version": "5.4.0-1062.70",
"binary_name": "linux-buildinfo-5.4.0-1062-raspi"
},
{
"binary_version": "5.4.0-1062.70",
"binary_name": "linux-headers-5.4.0-1062-raspi"
},
{
"binary_version": "5.4.0-1062.70",
"binary_name": "linux-image-5.4.0-1062-raspi"
},
{
"binary_version": "5.4.0-1062.70",
"binary_name": "linux-modules-5.4.0-1062-raspi"
},
{
"binary_version": "5.4.0-1062.70",
"binary_name": "linux-raspi-headers-5.4.0-1062"
},
{
"binary_version": "5.4.0-1062.70",
"binary_name": "linux-raspi-tools-5.4.0-1062"
},
{
"binary_version": "5.4.0-1062.70",
"binary_name": "linux-tools-5.4.0-1062-raspi"
}
]
}{
"cves": [
{
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "high",
"type": "Ubuntu"
}
],
"id": "CVE-2022-1116"
},
{
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "high",
"type": "Ubuntu"
}
],
"id": "CVE-2022-29581"
},
{
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
],
"id": "CVE-2022-30594"
}
],
"ecosystem": "Ubuntu:20.04:LTS"
}