usn-5582-1
Vulnerability from osv_ubuntu
Published
2022-08-25 03:58
Modified
2026-06-03 10:45
Summary
linux-azure-fde vulnerabilities
Details

Arthur Mongodin discovered that the netfilter subsystem in the Linux kernel did not properly perform data validation. A local attacker could use this to escalate privileges in certain situations. (CVE-2022-34918)

Zhenpeng Lin discovered that the network packet scheduler implementation in the Linux kernel did not properly remove all references to a route filter before freeing it in some situations. A local attacker could use this to cause a denial of service (system crash) or execute arbitrary code. (CVE-2022-2588)

It was discovered that the netfilter subsystem of the Linux kernel did not prevent one nft object from referencing an nft set in another nft table, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or execute arbitrary code. (CVE-2022-2586)

It was discovered that the block layer subsystem in the Linux kernel did not properly initialize memory in some situations. A privileged local attacker could use this to expose sensitive information (kernel memory). (CVE-2022-0494)

Hu Jiahui discovered that multiple race conditions existed in the Advanced Linux Sound Architecture (ALSA) framework, leading to use-after-free vulnerabilities. A local attacker could use these to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2022-1048)

Minh Yuan discovered that the floppy disk driver in the Linux kernel contained a race condition, leading to a use-after-free vulnerability. A local attacker could possibly use this to cause a denial of service (system crash) or execute arbitrary code. (CVE-2022-1652)

It was discovered that the Atheros ath9k wireless device driver in the Linux kernel did not properly handle some error conditions, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2022-1679)

It was discovered that the Marvell NFC device driver implementation in the Linux kernel did not properly perform memory cleanup operations in some situations, leading to a use-after-free vulnerability. A local attacker could possibly use this to cause a denial of service (system crash) or execute arbitrary code. (CVE-2022-1734)

Duoming Zhou discovered a race condition in the NFC subsystem in the Linux kernel, leading to a use-after-free vulnerability. A privileged local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2022-1974)

Duoming Zhou discovered that the NFC subsystem in the Linux kernel did not properly prevent context switches from occurring during certain atomic context operations. A privileged local attacker could use this to cause a denial of service (system crash). (CVE-2022-1975)

Felix Fu discovered that the Sun RPC implementation in the Linux kernel did not properly handle socket states, leading to a use-after-free vulnerability. A remote attacker could possibly use this to cause a denial of service (system crash) or execute arbitrary code. (CVE-2022-28893)

References
To clipboard 

{
  "affected": [
    {
      "database_specific": {
        "cves_map": {
          "cves": [],
          "ecosystem": "Ubuntu:20.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "linux-image-unsigned-5.4.0-1089-azure-fde",
            "binary_version": "5.4.0-1089.94+cvm1.2"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:20.04:LTS",
        "name": "linux-azure-fde",
        "purl": "pkg:deb/ubuntu/linux-azure-fde@5.4.0-1089.94+cvm1.2?arch=source\u0026distro=focal"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "5.4.0-1089.94+cvm1.2"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "5.4.0-1063.66+cvm2.2",
        "5.4.0-1063.66+cvm3.2",
        "5.4.0-1064.67+cvm1.1",
        "5.4.0-1065.68+cvm2.1",
        "5.4.0-1067.70+cvm1.1",
        "5.4.0-1068.71+cvm1.1",
        "5.4.0-1069.72+cvm1.1",
        "5.4.0-1070.73+cvm1.1",
        "5.4.0-1072.75+cvm1.1",
        "5.4.0-1073.76+cvm1.1",
        "5.4.0-1074.77+cvm1.1",
        "5.4.0-1076.79+cvm1.1",
        "5.4.0-1078.81+cvm1.1",
        "5.4.0-1080.83+cvm1.1",
        "5.4.0-1083.87+cvm1.1",
        "5.4.0-1085.90+cvm1.1",
        "5.4.0-1085.90+cvm2.1",
        "5.4.0-1086.91+cvm1.1"
      ]
    }
  ],
  "aliases": [],
  "details": "Arthur Mongodin discovered that the netfilter subsystem in the Linux kernel\ndid not properly perform data validation. A local attacker could use this\nto escalate privileges in certain situations. (CVE-2022-34918)\n\nZhenpeng Lin discovered that the network packet scheduler implementation in\nthe Linux kernel did not properly remove all references to a route filter\nbefore freeing it in some situations. A local attacker could use this to\ncause a denial of service (system crash) or execute arbitrary code.\n(CVE-2022-2588)\n\nIt was discovered that the netfilter subsystem of the Linux kernel did not\nprevent one nft object from referencing an nft set in another nft table,\nleading to a use-after-free vulnerability. A local attacker could use this\nto cause a denial of service (system crash) or execute arbitrary code.\n(CVE-2022-2586)\n\nIt was discovered that the block layer subsystem in the Linux kernel did\nnot properly initialize memory in some situations. A privileged local\nattacker could use this to expose sensitive information (kernel memory).\n(CVE-2022-0494)\n\nHu Jiahui discovered that multiple race conditions existed in the Advanced\nLinux Sound Architecture (ALSA) framework, leading to use-after-free\nvulnerabilities. A local attacker could use these to cause a denial of\nservice (system crash) or possibly execute arbitrary code. (CVE-2022-1048)\n\nMinh Yuan discovered that the floppy disk driver in the Linux kernel\ncontained a race condition, leading to a use-after-free vulnerability. A\nlocal attacker could possibly use this to cause a denial of service (system\ncrash) or execute arbitrary code. (CVE-2022-1652)\n\nIt was discovered that the Atheros ath9k wireless device driver in the\nLinux kernel did not properly handle some error conditions, leading to a\nuse-after-free vulnerability. A local attacker could use this to cause a\ndenial of service (system crash) or possibly execute arbitrary code.\n(CVE-2022-1679)\n\nIt was discovered that the Marvell NFC device driver implementation in the\nLinux kernel did not properly perform memory cleanup operations in some\nsituations, leading to a use-after-free vulnerability. A local attacker\ncould possibly use this to cause a denial of service (system crash) or\nexecute arbitrary code. (CVE-2022-1734)\n\nDuoming Zhou discovered a race condition in the NFC subsystem in the Linux\nkernel, leading to a use-after-free vulnerability. A privileged local\nattacker could use this to cause a denial of service (system crash) or\npossibly execute arbitrary code. (CVE-2022-1974)\n\nDuoming Zhou discovered that the NFC subsystem in the Linux kernel did not\nproperly prevent context switches from occurring during certain atomic\ncontext operations. A privileged local attacker could use this to cause a\ndenial of service (system crash). (CVE-2022-1975)\n\nFelix Fu discovered that the Sun RPC implementation in the Linux kernel did\nnot properly handle socket states, leading to a use-after-free\nvulnerability. A remote attacker could possibly use this to cause a denial\nof service (system crash) or execute arbitrary code. (CVE-2022-28893)\n\n",
  "id": "USN-5582-1",
  "modified": "2026-06-03T10:45:29Z",
  "published": "2022-08-25T03:58:20Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-5582-1"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2022-0494"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2022-1048"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2022-1652"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2022-1679"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2022-1734"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2022-1974"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2022-1975"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2022-2586"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2022-2588"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2022-28893"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2022-34918"
    }
  ],
  "related": [],
  "schema_version": "1.7.0",
  "summary": "linux-azure-fde vulnerabilities",
  "upstream": [
    "UBUNTU-CVE-2022-0494",
    "UBUNTU-CVE-2022-1048",
    "UBUNTU-CVE-2022-1652",
    "UBUNTU-CVE-2022-1679",
    "UBUNTU-CVE-2022-1734",
    "UBUNTU-CVE-2022-1974",
    "UBUNTU-CVE-2022-1975",
    "UBUNTU-CVE-2022-2586",
    "UBUNTU-CVE-2022-2588",
    "UBUNTU-CVE-2022-28893",
    "UBUNTU-CVE-2022-34918"
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.