Lucene search

K
ubuntuUbuntuUSN-5266-1
HistoryFeb 03, 2022 - 12:00 a.m.

Linux kernel (GKE) vulnerabilities

2022-02-0300:00:00
ubuntu.com
83

7.9 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

28.9%

Releases

  • Ubuntu 20.04 LTS
  • Ubuntu 18.04 ESM

Packages

  • linux-gke - Linux kernel for Google Container Engine (GKE) systems
  • linux-gke-5.4 - Linux kernel for Google Container Engine (GKE) systems

Details

It was discovered that the Packet network protocol implementation in the
Linux kernel contained a double-free vulnerability. A local attacker could
use this to cause a denial of service (system crash) or possibly execute
arbitrary code. (CVE-2021-22600)

Luo Likang discovered that the FireDTV Firewire driver in the Linux kernel
did not properly perform bounds checking in some situations. A local
attacker could use this to cause a denial of service (system crash) or
possibly execute arbitrary code. (CVE-2021-42739)