Rapid7 Vulnerability & Exploit Database

Ubuntu: USN-5650-1 (CVE-2022-2639): Linux kernel vulnerabilities

Free InsightVM Trial No Credit Card Necessary
Watch Demo See how it all works
Back to Search

Ubuntu: USN-5650-1 (CVE-2022-2639): Linux kernel vulnerabilities

Severity
4
CVSS
(AV:L/AC:M/Au:N/C:P/I:P/A:P)
Published
08/23/2022
Created
10/03/2022
Added
10/01/2022
Modified
03/22/2023

Description

An integer coercion error was found in the openvswitch kernel module. Given a sufficiently large number of actions, while copying and reserving memory for a new action of a new flow, the reserve_sfa_size() function does not return -EMSGSIZE as expected, potentially leading to an out-of-bounds write access. This flaw allows a local user to crash or potentially escalate their privileges on the system.

Solution(s)

  • ubuntu-upgrade-linux-image-4-4-0-1113-aws
  • ubuntu-upgrade-linux-image-4-4-0-1114-kvm
  • ubuntu-upgrade-linux-image-4-4-0-1151-aws
  • ubuntu-upgrade-linux-image-4-4-0-234-generic
  • ubuntu-upgrade-linux-image-4-4-0-234-lowlatency
  • ubuntu-upgrade-linux-image-aws
  • ubuntu-upgrade-linux-image-generic
  • ubuntu-upgrade-linux-image-generic-lts-xenial
  • ubuntu-upgrade-linux-image-kvm
  • ubuntu-upgrade-linux-image-lowlatency
  • ubuntu-upgrade-linux-image-lowlatency-lts-xenial
  • ubuntu-upgrade-linux-image-virtual
  • ubuntu-upgrade-linux-image-virtual-lts-xenial

References

  • https://attackerkb.com/topics/cve-2022-2639
  • CVE - 2022-2639
  • CVE-2022-2639
  • USN-5469-1
  • USN-5514-1
  • USN-5515-1
  • USN-5539-1
  • USN-5541-1
  • USN-5560-1
  • USN-5560-2
  • USN-5577-1
  • USN-5580-1
  • USN-5589-1
  • USN-5590-1
  • USN-5591-1
  • USN-5591-2
  • USN-5591-3
  • USN-5591-4
  • USN-5592-1
  • USN-5594-1
  • USN-5595-1
  • USN-5596-1
  • USN-5597-1
  • USN-5598-1
  • USN-5599-1
  • USN-5600-1
  • USN-5602-1
  • USN-5603-1
  • USN-5605-1
  • USN-5616-1
  • USN-5621-1
  • USN-5622-1
  • USN-5623-1
  • USN-5624-1
  • USN-5630-1
  • USN-5633-1
  • USN-5634-1
  • USN-5635-1
  • USN-5639-1
  • USN-5640-1
  • USN-5644-1
  • USN-5647-1
  • USN-5648-1
  • USN-5650-1
  • USN-5652-1
  • USN-5654-1
  • USN-5655-1
View more

insightVM

Advanced vulnerability management analytics and reporting.
Key Features
Free InsightVM Trial View All Features

With Rapid7 live dashboards, I have a clear view of all the assets on my network, which ones can be exploited, and what I need to do in order to reduce the risk in my environment in real-time. No other tool gives us that kind of value and insight.

– Scott Cheney, Manager of Information Security, Sierra View Medical Center

;