Ubuntu.comUB:CVE-2022-39188CVE-2022-39188
4.7 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
1 Low
CVSS2
Access Vector
LOCAL
Access Complexity
HIGH
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:L/AC:H/Au:S/C:N/I:N/A:P
0.0004 Low
EPSS
Percentile
13.4%
An issue was discovered in include/asm-generic/tlb.h in the Linux kernel
before 5.19. Because of a race condition (unmap_mapping_range versus
munmap), a device driver can free a page while it still has stale TLB
entries. This only occurs in situations with VM_PFNMAP VMAs.
Notes
| Author | Note |
|---|---|
| sbeattie | for backports, see JannH’s post to the stable list |
| rodrigo-zaiden | for 5.4 kernels, two follow up commits are needed. in upstream they are: b67fbebd4cf9 and b67fbebd4cf98, they were adjusted in ubuntu kernel to match the needs. |
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 18.04 | noarch | linux | <Â 4.15.0-201.212 | UNKNOWN |
| ubuntu | 20.04 | noarch | linux | <Â 5.4.0-136.153 | UNKNOWN |
| ubuntu | 22.04 | noarch | linux | <Â 5.15.0-57.63 | UNKNOWN |
| ubuntu | 16.04 | noarch | linux | <Â 4.4.0-239.273) Available with Ubuntu Pro or Ubuntu Pro (Infra-only | UNKNOWN |
| ubuntu | 18.04 | noarch | linux-aws | <Â 4.15.0-1147.159 | UNKNOWN |
| ubuntu | 20.04 | noarch | linux-aws | <Â 5.4.0-1093.101 | UNKNOWN |
| ubuntu | 22.04 | noarch | linux-aws | <Â 5.15.0-1027.31 | UNKNOWN |
| ubuntu | 14.04 | noarch | linux-aws | <Â 4.4.0-1117.123) Available with Ubuntu Pro or Ubuntu Pro (Infra-only | UNKNOWN |
| ubuntu | 16.04 | noarch | linux-aws | <Â 4.4.0-1155.170) Available with Ubuntu Pro or Ubuntu Pro (Infra-only | UNKNOWN |
| ubuntu | 20.04 | noarch | linux-aws-5.15 | <Â 5.15.0-1027.31~20.04.1 | UNKNOWN |
References
bugs.chromium.org/p/project-zero/issues/detail?id=2329
cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.19
git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b67fbebd4cf980aecbcc750e1462128bffe8ae15
git.kernel.org/linus/b67fbebd4cf980aecbcc750e1462128bffe8ae15
github.com/torvalds/linux/commit/b67fbebd4cf980aecbcc750e1462128bffe8ae15
launchpad.net/bugs/cve/CVE-2022-39188
lore.kernel.org/stable/[email protected]/T/#u
lore.kernel.org/stable/CAG48ez3SEqOPcPCYGHVZv4iqEApujD5VtM3Re-tCKLDEFdEdbg@mail.gmail.com/
nvd.nist.gov/vuln/detail/CVE-2022-39188
security-tracker.debian.org/tracker/CVE-2022-39188
ubuntu.com/security/notices/USN-5790-1
ubuntu.com/security/notices/USN-5791-1
ubuntu.com/security/notices/USN-5791-2
ubuntu.com/security/notices/USN-5791-3
ubuntu.com/security/notices/USN-5792-1
ubuntu.com/security/notices/USN-5792-2
ubuntu.com/security/notices/USN-5815-1
ubuntu.com/security/notices/USN-5877-1
ubuntu.com/security/notices/USN-6001-1
ubuntu.com/security/notices/USN-6013-1
ubuntu.com/security/notices/USN-6014-1
www.cve.org/CVERecord?id=CVE-2022-39188
Related
4.7 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
1 Low
CVSS2
Access Vector
LOCAL
Access Complexity
HIGH
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:L/AC:H/Au:S/C:N/I:N/A:P
0.0004 Low
EPSS
Percentile
13.4%