mickmick.net

Ubuntu Linux Kernel Multiple Vulnerabilities

Release Date: 16 May 2022

RISK: Medium Risk

TYPE: Operating Systems - Linux

Multiple vulnerabilities have been identified in Ubuntu Linux Kernal. A remote attacker could exploit some of these vulnerabilities to trigger remote code execution, denial of service, security restriction bypass and information disclosure on the targeted system.

---

Impact

• Denial of Service
• Remote Code Execution
• Security Restriction Bypass
• Information Disclosure

---

System / Technologies affected

• Ubuntu 14.04 ESM
• Ubuntu 16.04 ESM
• Ubuntu 18.04 LTS
• Ubuntu 20.04 LTS
• Ubuntu 21.10

 

Please refer to the links below for detail:

 

• https://ubuntu.com/security/notices/USN-5415-1
• https://ubuntu.com/security/notices/USN-5417-1
• https://ubuntu.com/security/notices/USN-5416-1
• https://ubuntu.com/security/notices/USN-5418-1
• https://ubuntu.com/security/notices/USN-5413-1

---

Solutions

Before installation of the software, please visit the vendor web-site for more details.

 

Apply fixes issued by the vendor:

 

• https://ubuntu.com/security/notices/USN-5415-1
• https://ubuntu.com/security/notices/USN-5417-1
• https://ubuntu.com/security/notices/USN-5416-1
• https://ubuntu.com/security/notices/USN-5418-1
• https://ubuntu.com/security/notices/USN-5413-1

---

Vulnerability Identifier

• CVE-2020-27820
• CVE-2021-4157
• CVE-2021-26401
• CVE-2021-39713
• CVE-2022-1016
• CVE-2022-1158
• CVE-2022-1516
• CVE-2022-20008
• CVE-2022-23036
• CVE-2022-23037
• CVE-2022-23038
• CVE-2022-23039
• CVE-2022-23040
• CVE-2022-23042
• CVE-2022-24958
• CVE-2022-25258
• CVE-2022-25375
• CVE-2022-26490
• CVE-2022-26966
• CVE-2022-27223
• CVE-2022-28388
• CVE-2022-28389
• CVE-2022-28390
• CVE-2022-29156

---

Source

• AusCERT
• Ubuntu

---

Related Link

• https://www.auscert.org.au/bulletins/ESB-2022.2337
• https://ubuntu.com/security/notices/USN-5415-1
• https://www.auscert.org.au/bulletins/ESB-2022.2339
• https://ubuntu.com/security/notices/USN-5417-1
• https://www.auscert.org.au/bulletins/ESB-2022.2338
• https://ubuntu.com/security/notices/USN-5416-1
• https://www.auscert.org.au/bulletins/ESB-2022.2340
• https://ubuntu.com/security/notices/USN-5418-1
• https://www.auscert.org.au/bulletins/ESB-2022.2336
• https://ubuntu.com/security/notices/USN-5413-1