Lucene search

K
ubuntuUbuntuUSN-5444-1
HistoryMay 24, 2022 - 12:00 a.m.

Linux kernel vulnerability

2022-05-2400:00:00
ubuntu.com
53

7.8 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.2%

Releases

  • Ubuntu 22.04 LTS
  • Ubuntu 20.04 LTS

Packages

  • linux-oem-5.14 - Linux kernel for OEM systems
  • linux-oem-5.17 - Linux kernel for OEM systems

Details

Kyle Zeng discovered that the Network Queuing and Scheduling subsystem of
the Linux kernel did not properly perform reference counting in some
situations, leading to a use-after-free vulnerability. A local attacker
could use this to cause a denial of service (system crash) or execute
arbitrary code.