Linux kernel vulnerabilities

2022-08-0900:00:00

ubuntu.com

ubuntu 16.04

ubuntu 14.04

esm

linux kernel

aws

kvm

xenial

network packet scheduler

denial of service

arbitrary code

cve-2022-2588

netfilter subsystem

use-after-free vulnerability

cve-2022-2586

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.6

Confidence

High

EPSS

0.007

Percentile

80.2%

JSON

Releases

Ubuntu 16.04 ESM
Ubuntu 14.04 ESM

Packages

linux - Linux kernel
linux-aws - Linux kernel for Amazon Web Services (AWS) systems
linux-kvm - Linux kernel for cloud environments
linux-lts-xenial - Linux hardware enablement kernel from Xenial for Trusty

Details

Zhenpeng Lin discovered that the network packet scheduler implementation in
the Linux kernel did not properly remove all references to a route filter
before freeing it in some situations. A local attacker could use this to
cause a denial of service (system crash) or execute arbitrary code.
(CVE-2022-2588)

It was discovered that the netfilter subsystem of the Linux kernel did not
prevent one nft object from referencing an nft set in another nft table,
leading to a use-after-free vulnerability. A local attacker could use this
to cause a denial of service (system crash) or execute arbitrary code.
(CVE-2022-2586)

OSVersionArchitecturePackageVersionFilename
Ubuntu16.04noarchlinux-image-virtual< 4.4.0.231.237UNKNOWN
Ubuntu16.04noarchlinux-cloud-tools-generic< 4.4.0.210.216UNKNOWN
Ubuntu16.04noarchlinux-cloud-tools-generic-lts-utopic< 4.4.0.210.216UNKNOWN
Ubuntu16.04noarchlinux-cloud-tools-generic-lts-vivid< 4.4.0.210.216UNKNOWN
Ubuntu16.04noarchlinux-cloud-tools-generic-lts-wily< 4.4.0.210.216UNKNOWN
Ubuntu16.04noarchlinux-cloud-tools-generic-lts-xenial< 4.4.0.210.216UNKNOWN
Ubuntu16.04noarchlinux-cloud-tools-lowlatency< 4.4.0.210.216UNKNOWN
Ubuntu16.04noarchlinux-cloud-tools-lowlatency-lts-utopic< 4.4.0.210.216UNKNOWN
Ubuntu16.04noarchlinux-cloud-tools-lowlatency-lts-vivid< 4.4.0.210.216UNKNOWN
Ubuntu16.04noarchlinux-cloud-tools-lowlatency-lts-wily< 4.4.0.210.216UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	16.04	noarch	linux-image-virtual	< 4.4.0.231.237	UNKNOWN
Ubuntu	16.04	noarch	linux-cloud-tools-generic	< 4.4.0.210.216	UNKNOWN
Ubuntu	16.04	noarch	linux-cloud-tools-generic-lts-utopic	< 4.4.0.210.216	UNKNOWN
Ubuntu	16.04	noarch	linux-cloud-tools-generic-lts-vivid	< 4.4.0.210.216	UNKNOWN
Ubuntu	16.04	noarch	linux-cloud-tools-generic-lts-wily	< 4.4.0.210.216	UNKNOWN
Ubuntu	16.04	noarch	linux-cloud-tools-generic-lts-xenial	< 4.4.0.210.216	UNKNOWN
Ubuntu	16.04	noarch	linux-cloud-tools-lowlatency	< 4.4.0.210.216	UNKNOWN
Ubuntu	16.04	noarch	linux-cloud-tools-lowlatency-lts-utopic	< 4.4.0.210.216	UNKNOWN
Ubuntu	16.04	noarch	linux-cloud-tools-lowlatency-lts-vivid	< 4.4.0.210.216	UNKNOWN
Ubuntu	16.04	noarch	linux-cloud-tools-lowlatency-lts-wily	< 4.4.0.210.216	UNKNOWN