UbuntuUSN-5443-2Linux kernel vulnerabilities
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
8 High
AI Score
Confidence
High
7.2 High
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
0.001 Low
EPSS
Percentile
43.5%
Releases
- Ubuntu 21.10
- Ubuntu 20.04 LTS
Packages
- linux-gcp-5.13 - Linux kernel for Google Cloud Platform (GCP) systems
- linux-oracle - Linux kernel for Oracle Cloud systems
- linux-oracle-5.13 - Linux kernel for Oracle Cloud systems
Details
Kyle Zeng discovered that the Network Queuing and Scheduling subsystem of
the Linux kernel did not properly perform reference counting in some
situations, leading to a use-after-free vulnerability. A local attacker
could use this to cause a denial of service (system crash) or execute
arbitrary code. (CVE-2022-29581)
Jann Horn discovered that the Linux kernel did not properly enforce seccomp
restrictions in some situations. A local attacker could use this to bypass
intended seccomp sandbox restrictions. (CVE-2022-30594)
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 21.10 | noarch | linux-image-5.13.0-1030-oracle | < 5.13.0-1030.35 | UNKNOWN |
| Ubuntu | 21.10 | noarch | linux-image-5.13.0-1030-oracle-dbgsym | < 5.13.0-1030.35 | UNKNOWN |
| Ubuntu | 21.10 | noarch | linux-image-oracle | < 5.13.0.1030.30 | UNKNOWN |
| Ubuntu | 21.10 | noarch | linux-headers-oracle | < 5.13.0.1030.30 | UNKNOWN |
| Ubuntu | 21.10 | noarch | linux-oracle | < 5.13.0.1030.30 | UNKNOWN |
| Ubuntu | 21.10 | noarch | linux-tools-oracle | < 5.13.0.1030.30 | UNKNOWN |
| Ubuntu | 20.04 | noarch | linux-image-oracle | < 5.13.0.1030.35~20.04.1 | UNKNOWN |
| Ubuntu | 20.04 | noarch | linux-headers-oracle | < 5.13.0.1030.35~20.04.1 | UNKNOWN |
| Ubuntu | 20.04 | noarch | linux-oracle | < 5.13.0.1030.35~20.04.1 | UNKNOWN |
| Ubuntu | 20.04 | noarch | linux-tools-oracle | < 5.13.0.1030.35~20.04.1 | UNKNOWN |
Related
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
8 High
AI Score
Confidence
High
7.2 High
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
0.001 Low
EPSS
Percentile
43.5%