vulnerability
Ubuntu: (Multiple Advisories) (CVE-2022-25636): Linux kernel vulnerabilities
Severity | CVSS | Published | Added | Modified |
---|---|---|---|---|
7 | (AV:L/AC:M/Au:N/C:C/I:C/A:C) | 2022-02-24 | 2022-03-09 | 2023-03-22 |
Severity
7
CVSS
(AV:L/AC:M/Au:N/C:C/I:C/A:C)
Published
2022-02-24
Added
2022-03-09
Modified
2023-03-22
Description
net/netfilter/nf_dup_netdev.c in the Linux kernel 5.4 through 5.6.10 allows local users to gain privileges because of a heap out-of-bounds write. This is related to nf_tables_offload.
Solution(s)
ubuntu-upgrade-linux-image-5-13-0-1010-intelubuntu-upgrade-linux-image-5-13-0-1016-kvmubuntu-upgrade-linux-image-5-13-0-1017-awsubuntu-upgrade-linux-image-5-13-0-1017-azureubuntu-upgrade-linux-image-5-13-0-1019-gcpubuntu-upgrade-linux-image-5-13-0-1020-raspiubuntu-upgrade-linux-image-5-13-0-1020-raspi-nolpaeubuntu-upgrade-linux-image-5-13-0-1021-oracleubuntu-upgrade-linux-image-5-13-0-35-genericubuntu-upgrade-linux-image-5-13-0-35-generic-64kubuntu-upgrade-linux-image-5-13-0-35-generic-lpaeubuntu-upgrade-linux-image-5-13-0-35-lowlatencyubuntu-upgrade-linux-image-5-14-0-1027-oemubuntu-upgrade-linux-image-5-4-0-1017-ibmubuntu-upgrade-linux-image-5-4-0-1030-bluefieldubuntu-upgrade-linux-image-5-4-0-1036-gkeopubuntu-upgrade-linux-image-5-4-0-104-genericubuntu-upgrade-linux-image-5-4-0-104-generic-lpaeubuntu-upgrade-linux-image-5-4-0-104-lowlatencyubuntu-upgrade-linux-image-5-4-0-1055-raspiubuntu-upgrade-linux-image-5-4-0-1058-kvmubuntu-upgrade-linux-image-5-4-0-1065-gkeubuntu-upgrade-linux-image-5-4-0-1066-oracleubuntu-upgrade-linux-image-5-4-0-1067-gcpubuntu-upgrade-linux-image-5-4-0-1068-awsubuntu-upgrade-linux-image-5-4-0-1072-azureubuntu-upgrade-linux-image-5-4-0-1072-azure-fdeubuntu-upgrade-linux-image-awsubuntu-upgrade-linux-image-aws-lts-20-04ubuntu-upgrade-linux-image-azureubuntu-upgrade-linux-image-azure-fdeubuntu-upgrade-linux-image-azure-lts-20-04ubuntu-upgrade-linux-image-bluefieldubuntu-upgrade-linux-image-gcpubuntu-upgrade-linux-image-gcp-lts-20-04ubuntu-upgrade-linux-image-genericubuntu-upgrade-linux-image-generic-64kubuntu-upgrade-linux-image-generic-64k-hwe-20-04ubuntu-upgrade-linux-image-generic-hwe-18-04ubuntu-upgrade-linux-image-generic-hwe-20-04ubuntu-upgrade-linux-image-generic-lpaeubuntu-upgrade-linux-image-generic-lpae-hwe-18-04ubuntu-upgrade-linux-image-generic-lpae-hwe-20-04ubuntu-upgrade-linux-image-gkeubuntu-upgrade-linux-image-gke-5-4ubuntu-upgrade-linux-image-gkeopubuntu-upgrade-linux-image-gkeop-5-4ubuntu-upgrade-linux-image-ibmubuntu-upgrade-linux-image-ibm-lts-20-04ubuntu-upgrade-linux-image-intelubuntu-upgrade-linux-image-kvmubuntu-upgrade-linux-image-lowlatencyubuntu-upgrade-linux-image-lowlatency-hwe-18-04ubuntu-upgrade-linux-image-lowlatency-hwe-20-04ubuntu-upgrade-linux-image-oemubuntu-upgrade-linux-image-oem-20-04ubuntu-upgrade-linux-image-oem-20-04bubuntu-upgrade-linux-image-oem-20-04cubuntu-upgrade-linux-image-oem-20-04dubuntu-upgrade-linux-image-oem-osp1ubuntu-upgrade-linux-image-oracleubuntu-upgrade-linux-image-oracle-lts-20-04ubuntu-upgrade-linux-image-raspiubuntu-upgrade-linux-image-raspi-hwe-18-04ubuntu-upgrade-linux-image-raspi-nolpaeubuntu-upgrade-linux-image-raspi2ubuntu-upgrade-linux-image-snapdragon-hwe-18-04ubuntu-upgrade-linux-image-virtualubuntu-upgrade-linux-image-virtual-hwe-18-04ubuntu-upgrade-linux-image-virtual-hwe-20-04
References
- CVE-2022-25636
- https://attackerkb.com/topics/CVE-2022-25636
- DEBIAN-DSA-5095
- NVD-CVE-2022-25636
- UBUNTU-USN-5165-1
- UBUNTU-USN-5217-1
- UBUNTU-USN-5240-1
- UBUNTU-USN-5265-1
- UBUNTU-USN-5278-1
- UBUNTU-USN-5294-1
- UBUNTU-USN-5294-2
- UBUNTU-USN-5295-1
- UBUNTU-USN-5295-2
- UBUNTU-USN-5297-1
- UBUNTU-USN-5298-1
- UBUNTU-USN-5302-1
- UBUNTU-USN-5317-1
- UBUNTU-USN-5318-1
- UBUNTU-USN-5319-1
- UBUNTU-USN-5337-1
- UBUNTU-USN-5338-1
- UBUNTU-USN-5339-1
- UBUNTU-USN-5343-1
- UBUNTU-USN-5346-1
- UBUNTU-USN-5361-1
- UBUNTU-USN-5362-1
- UBUNTU-USN-5368-1
- UBUNTU-USN-5377-1

NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.