CVE-2022-48638

2024-04-2800:00:00

ubuntu.com

linux

kernel

cgroup

vulnerability

resolved

AI Score

6.5

Confidence

High

EPSS

Percentile

15.5%

JSON

In the Linux kernel, the following vulnerability has been resolved: cgroup:
cgroup_get_from_id() must check the looked-up kn is a directory cgroup has
to be one kernfs dir, otherwise kernel panic is caused, especially cgroup
id is provide from userspace.

OSVersionArchitecturePackageVersionFilename
ubuntu22.04noarchlinux< anyUNKNOWN
ubuntu22.04noarchlinux-aws< anyUNKNOWN
ubuntu20.04noarchlinux-aws-5.15< anyUNKNOWN
ubuntu22.04noarchlinux-azure< anyUNKNOWN
ubuntu20.04noarchlinux-azure-5.15< anyUNKNOWN
ubuntu22.04noarchlinux-azure-fde< 5.15.0-1030.37.1UNKNOWN
ubuntu20.04noarchlinux-azure-fde-5.15< 5.15.0-1030.37~20.04.1.1UNKNOWN
ubuntu22.04noarchlinux-gcp< anyUNKNOWN
ubuntu20.04noarchlinux-gcp-5.15< anyUNKNOWN
ubuntu22.04noarchlinux-gke< anyUNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	22.04	noarch	linux	< any	UNKNOWN
ubuntu	22.04	noarch	linux-aws	< any	UNKNOWN
ubuntu	20.04	noarch	linux-aws-5.15	< any	UNKNOWN
ubuntu	22.04	noarch	linux-azure	< any	UNKNOWN
ubuntu	20.04	noarch	linux-azure-5.15	< any	UNKNOWN
ubuntu	22.04	noarch	linux-azure-fde	< 5.15.0-1030.37.1	UNKNOWN
ubuntu	20.04	noarch	linux-azure-fde-5.15	< 5.15.0-1030.37~20.04.1.1	UNKNOWN
ubuntu	22.04	noarch	linux-gcp	< any	UNKNOWN
ubuntu	20.04	noarch	linux-gcp-5.15	< any	UNKNOWN
ubuntu	22.04	noarch	linux-gke	< any	UNKNOWN