USN-5814-1

See a problem?

Source

https://ubuntu.com/security/notices/USN-5814-1

Import Source

https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-5814-1.json

JSON Data

https://api.osv.dev/v1/vulns/USN-5814-1

Related

Published

2023-01-19T19:27:06.923659Z

Modified

2023-01-19T19:27:06.923659Z

Summary

linux-azure, linux-gkeop, linux-intel-iotg, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-oracle-5.15 vulnerabilities

Details

Kyle Zeng discovered that the sysctl implementation in the Linux kernel contained a stack-based buffer overflow. A local attacker could use this to cause a denial of service (system crash) or execute arbitrary code. (CVE-2022-4378)

Tamás Koczka discovered that the Bluetooth L2CAP handshake implementation in the Linux kernel contained multiple use-after-free vulnerabilities. A physically proximate attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2022-42896)

It was discovered that the Xen netback driver in the Linux kernel did not properly handle packets structured in certain ways. An attacker in a guest VM could possibly use this to cause a denial of service (host NIC availability). (CVE-2022-3643)

It was discovered that an integer overflow vulnerability existed in the Bluetooth subsystem in the Linux kernel. A physically proximate attacker could use this to cause a denial of service (system crash). (CVE-2022-45934)

References

Affected packages

Ubuntu:20.04:LTS / linux-lowlatency-hwe-5.15

Package

Name: linux-lowlatency-hwe-5.15
Purl: pkg:deb/ubuntu/linux-lowlatency-hwe-5.15@5.15.0-58.64~20.04.1?arch=src?distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5.15.0-58.64~20.04.1

Affected versions

5.*

5.15.0-33.34~20.04.1

5.15.0-42.45~20.04.1

5.15.0-43.46~20.04.1

5.15.0-46.49~20.04.1

5.15.0-48.54~20.04.1

5.15.0-50.56~20.04.1

5.15.0-52.58~20.04.1

5.15.0-53.59~20.04.1

5.15.0-56.62~20.04.1

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "linux-lowlatency-hwe-5.15-headers-5.15.0-58": "5.15.0-58.64~20.04.1",
            "linux-cloud-tools-5.15.0-58-lowlatency": "5.15.0-58.64~20.04.1",
            "linux-tools-5.15.0-58-lowlatency": "5.15.0-58.64~20.04.1",
            "linux-image-unsigned-5.15.0-58-lowlatency-64k-dbgsym": "5.15.0-58.64~20.04.1",
            "linux-headers-5.15.0-58-lowlatency-64k": "5.15.0-58.64~20.04.1",
            "linux-lowlatency-hwe-5.15-tools-5.15.0-58": "5.15.0-58.64~20.04.1",
            "linux-lowlatency-hwe-5.15-cloud-tools-5.15.0-58": "5.15.0-58.64~20.04.1",
            "linux-tools-5.15.0-58-lowlatency-64k": "5.15.0-58.64~20.04.1",
            "linux-lowlatency-hwe-5.15-cloud-tools-common": "5.15.0-58.64~20.04.1",
            "linux-headers-5.15.0-58-lowlatency": "5.15.0-58.64~20.04.1",
            "linux-lowlatency-hwe-5.15-tools-common": "5.15.0-58.64~20.04.1",
            "linux-image-unsigned-5.15.0-58-lowlatency-dbgsym": "5.15.0-58.64~20.04.1",
            "linux-buildinfo-5.15.0-58-lowlatency": "5.15.0-58.64~20.04.1",
            "linux-lowlatency-hwe-5.15-tools-host": "5.15.0-58.64~20.04.1",
            "linux-image-unsigned-5.15.0-58-lowlatency": "5.15.0-58.64~20.04.1",
            "linux-modules-5.15.0-58-lowlatency": "5.15.0-58.64~20.04.1",
            "linux-image-unsigned-5.15.0-58-lowlatency-64k": "5.15.0-58.64~20.04.1",
            "linux-modules-iwlwifi-5.15.0-58-lowlatency": "5.15.0-58.64~20.04.1",
            "linux-modules-5.15.0-58-lowlatency-64k": "5.15.0-58.64~20.04.1",
            "linux-buildinfo-5.15.0-58-lowlatency-64k": "5.15.0-58.64~20.04.1"
        }
    ]
}

Ubuntu:20.04:LTS / linux-oracle-5.15

Package

Name: linux-oracle-5.15
Purl: pkg:deb/ubuntu/linux-oracle-5.15@5.15.0-1027.33~20.04.1?arch=src?distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5.15.0-1027.33~20.04.1

Affected versions

5.*

5.15.0-1007.9~20.04.1

5.15.0-1013.17~20.04.1

5.15.0-1016.20~20.04.1

5.15.0-1017.22~20.04.1

5.15.0-1018.23~20.04.1

5.15.0-1019.24~20.04.1

5.15.0-1021.27~20.04.1

5.15.0-1022.28~20.04.1

5.15.0-1025.31~20.04.2

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "linux-modules-extra-5.15.0-1027-oracle": "5.15.0-1027.33~20.04.1",
            "linux-image-unsigned-5.15.0-1027-oracle": "5.15.0-1027.33~20.04.1",
            "linux-oracle-5.15-tools-5.15.0-1027": "5.15.0-1027.33~20.04.1",
            "linux-tools-5.15.0-1027-oracle": "5.15.0-1027.33~20.04.1",
            "linux-headers-5.15.0-1027-oracle": "5.15.0-1027.33~20.04.1",
            "linux-image-unsigned-5.15.0-1027-oracle-dbgsym": "5.15.0-1027.33~20.04.1",
            "linux-buildinfo-5.15.0-1027-oracle": "5.15.0-1027.33~20.04.1",
            "linux-oracle-5.15-headers-5.15.0-1027": "5.15.0-1027.33~20.04.1",
            "linux-modules-5.15.0-1027-oracle": "5.15.0-1027.33~20.04.1"
        }
    ]
}

Ubuntu:22.04:LTS / linux-gkeop

Package

Name: linux-gkeop
Purl: pkg:deb/ubuntu/linux-gkeop@5.15.0-1013.17?arch=src?distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5.15.0-1013.17

Affected versions

5.*

5.15.0-1001.2

5.15.0-1002.4

5.15.0-1003.5

5.15.0-1004.6

5.15.0-1005.7

5.15.0-1007.10

5.15.0-1008.12

5.15.0-1011.15

5.15.0-1012.16

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "linux-image-unsigned-5.15.0-1013-gkeop-dbgsym": "5.15.0-1013.17",
            "linux-headers-5.15.0-1013-gkeop": "5.15.0-1013.17",
            "linux-gkeop-tools-5.15.0-1013": "5.15.0-1013.17",
            "linux-gkeop-headers-5.15.0-1013": "5.15.0-1013.17",
            "linux-image-unsigned-5.15.0-1013-gkeop": "5.15.0-1013.17",
            "linux-modules-extra-5.15.0-1013-gkeop": "5.15.0-1013.17",
            "linux-cloud-tools-5.15.0-1013-gkeop": "5.15.0-1013.17",
            "linux-tools-5.15.0-1013-gkeop": "5.15.0-1013.17",
            "linux-modules-5.15.0-1013-gkeop": "5.15.0-1013.17",
            "linux-buildinfo-5.15.0-1013-gkeop": "5.15.0-1013.17",
            "linux-gkeop-cloud-tools-5.15.0-1013": "5.15.0-1013.17"
        }
    ]
}

Ubuntu:22.04:LTS / linux-intel-iotg

Package

Name: linux-intel-iotg
Purl: pkg:deb/ubuntu/linux-intel-iotg@5.15.0-1023.28?arch=src?distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5.15.0-1023.28

Affected versions

5.*

5.15.0-1004.6

5.15.0-1008.11

5.15.0-1010.14

5.15.0-1013.17

5.15.0-1015.20

5.15.0-1016.21

5.15.0-1017.22

5.15.0-1018.23

5.15.0-1021.26

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "linux-modules-5.15.0-1023-intel-iotg": "5.15.0-1023.28",
            "linux-image-unsigned-5.15.0-1023-intel-iotg": "5.15.0-1023.28",
            "linux-modules-iwlwifi-5.15.0-1023-intel-iotg": "5.15.0-1023.28",
            "linux-intel-iotg-headers-5.15.0-1023": "5.15.0-1023.28",
            "linux-buildinfo-5.15.0-1023-intel-iotg": "5.15.0-1023.28",
            "linux-intel-iotg-tools-host": "5.15.0-1023.28",
            "linux-intel-iotg-cloud-tools-5.15.0-1023": "5.15.0-1023.28",
            "linux-cloud-tools-5.15.0-1023-intel-iotg": "5.15.0-1023.28",
            "linux-modules-extra-5.15.0-1023-intel-iotg": "5.15.0-1023.28",
            "linux-intel-iotg-cloud-tools-common": "5.15.0-1023.28",
            "linux-intel-iotg-tools-common": "5.15.0-1023.28",
            "linux-headers-5.15.0-1023-intel-iotg": "5.15.0-1023.28",
            "linux-intel-iotg-tools-5.15.0-1023": "5.15.0-1023.28",
            "linux-image-unsigned-5.15.0-1023-intel-iotg-dbgsym": "5.15.0-1023.28",
            "linux-tools-5.15.0-1023-intel-iotg": "5.15.0-1023.28"
        }
    ]
}

Ubuntu:22.04:LTS / linux-lowlatency

Package

Name: linux-lowlatency
Purl: pkg:deb/ubuntu/linux-lowlatency@5.15.0-58.64?arch=src?distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5.15.0-58.64

Affected versions

5.*

5.15.0-22.22

5.15.0-23.23

5.15.0-24.24

5.15.0-27.28

5.15.0-30.31

5.15.0-33.34

5.15.0-35.36

5.15.0-37.39

5.15.0-39.42

5.15.0-40.43

5.15.0-41.44

5.15.0-43.46

5.15.0-46.49

5.15.0-47.53

5.15.0-48.54

5.15.0-50.56

5.15.0-52.58

5.15.0-53.59

5.15.0-56.62

5.15.0-57.63

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "linux-lowlatency-tools-5.15.0-58": "5.15.0-58.64",
            "linux-cloud-tools-5.15.0-58-lowlatency": "5.15.0-58.64",
            "linux-lowlatency-tools-common": "5.15.0-58.64",
            "linux-tools-5.15.0-58-lowlatency": "5.15.0-58.64",
            "linux-image-unsigned-5.15.0-58-lowlatency-64k-dbgsym": "5.15.0-58.64",
            "linux-lowlatency-tools-host": "5.15.0-58.64",
            "linux-headers-5.15.0-58-lowlatency-64k": "5.15.0-58.64",
            "linux-lowlatency-cloud-tools-common": "5.15.0-58.64",
            "linux-headers-5.15.0-58-lowlatency": "5.15.0-58.64",
            "linux-lowlatency-headers-5.15.0-58": "5.15.0-58.64",
            "linux-tools-5.15.0-58-lowlatency-64k": "5.15.0-58.64",
            "linux-image-unsigned-5.15.0-58-lowlatency-dbgsym": "5.15.0-58.64",
            "linux-buildinfo-5.15.0-58-lowlatency": "5.15.0-58.64",
            "linux-image-unsigned-5.15.0-58-lowlatency": "5.15.0-58.64",
            "linux-lowlatency-cloud-tools-5.15.0-58": "5.15.0-58.64",
            "linux-modules-5.15.0-58-lowlatency": "5.15.0-58.64",
            "linux-image-unsigned-5.15.0-58-lowlatency-64k": "5.15.0-58.64",
            "linux-modules-iwlwifi-5.15.0-58-lowlatency": "5.15.0-58.64",
            "linux-modules-5.15.0-58-lowlatency-64k": "5.15.0-58.64",
            "linux-buildinfo-5.15.0-58-lowlatency-64k": "5.15.0-58.64"
        }
    ]
}