vulnerability
Ubuntu: (Multiple Advisories) (CVE-2022-24122): Linux kernel (OEM) vulnerabilities
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 7 | (AV:L/AC:M/Au:N/C:C/I:C/A:C) | Jan 29, 2022 | Feb 9, 2022 | Nov 7, 2024 |
Severity
7
CVSS
(AV:L/AC:M/Au:N/C:C/I:C/A:C)
Published
Jan 29, 2022
Added
Feb 9, 2022
Modified
Nov 7, 2024
Description
kernel/ucount.c in the Linux kernel 5.14 through 5.16.4, when unprivileged user namespaces are enabled, allows a use-after-free and privilege escalation because a ucounts object can outlive its namespace.
Solution(s)
ubuntu-upgrade-linux-image-5-14-0-1022-oemubuntu-upgrade-linux-image-oem-20-04d
References
- CVE-2022-24122
- https://attackerkb.com/topics/CVE-2022-24122
- NVD-CVE-2022-24122
- UBUNTU-USN-5207-1
- UBUNTU-USN-5265-1
- UBUNTU-USN-5266-1
- UBUNTU-USN-5278-1
- UBUNTU-USN-5294-1
- UBUNTU-USN-5294-2
- UBUNTU-USN-5295-1
- UBUNTU-USN-5295-2
- UBUNTU-USN-5297-1
- UBUNTU-USN-5298-1
- UBUNTU-USN-5337-1
- UBUNTU-USN-5338-1
- UBUNTU-USN-5339-1
- UBUNTU-USN-5343-1
- UBUNTU-USN-5361-1
- UBUNTU-USN-5362-1
- UBUNTU-USN-5368-1
- UBUNTU-USN-5377-1
- UBUNTU-USN-5385-1
- UBUNTU-USN-5413-1
- UBUNTU-USN-5415-1
- UBUNTU-USN-5467-1
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.