mickmick.net

Ubuntu Linux Kernel Multiple Vulnerabilities

Release Date: 10 Jun 2022

RISK: Medium Risk

TYPE: Operating Systems - Linux

Multiple vulnerabilities have been identified in Ubuntu Linux Kernel. A remote attacker could exploit some of these vulnerabilities to trigger denial of service, elevation of privilege, remote code execution, security restriction bypass and information disclosure on the targeted system.

---

Impact

• Denial of Service
• Elevation of Privilege
• Remote Code Execution
• Security Restriction Bypass
• Information Disclosure

---

System / Technologies affected

• Ubuntu 14.04 ESM
• Ubuntu 16.04 ESM
• Ubuntu 18.04 LTS
• Ubuntu 20.04 LTS
• Ubuntu 21.10
• Ubuntu 22.04 LTS

 

Please refer to the links below for detail:

 

• https://ubuntu.com/security/notices/USN-5465-1
• https://ubuntu.com/security/notices/USN-5466-1
• https://ubuntu.com/security/notices/USN-5467-1
• https://ubuntu.com/security/notices/USN-5468-1
• https://ubuntu.com/security/notices/USN-5469-1
• https://ubuntu.com/security/notices/USN-5470-1
• https://ubuntu.com/security/notices/USN-5471-1

---

Solutions

Before installation of the software, please visit the vendor web-site for more details.

 

Apply fixes issued by the vendor:

 

• https://ubuntu.com/security/notices/USN-5465-1
• https://ubuntu.com/security/notices/USN-5466-1
• https://ubuntu.com/security/notices/USN-5467-1
• https://ubuntu.com/security/notices/USN-5468-1
• https://ubuntu.com/security/notices/USN-5469-1
• https://ubuntu.com/security/notices/USN-5470-1
• https://ubuntu.com/security/notices/USN-5471-1

---

Vulnerability Identifier

• CVE-2021-3772
• CVE-2021-4149
• CVE-2021-4197
• CVE-2022-0168
• CVE-2022-1011
• CVE-2022-1012
• CVE-2022-1016
• CVE-2022-1048
• CVE-2022-1158
• CVE-2022-1195
• CVE-2022-1198
• CVE-2022-1199
• CVE-2022-1204
• CVE-2022-1205
• CVE-2022-1263
• CVE-2022-1353
• CVE-2022-1419
• CVE-2022-1516
• CVE-2022-1651
• CVE-2022-1671
• CVE-2022-1734
• CVE-2022-1836
• CVE-2022-1966
• CVE-2022-1972
• CVE-2022-21499
• CVE-2022-23036
• CVE-2022-23037
• CVE-2022-23038
• CVE-2022-23039
• CVE-2022-23040
• CVE-2022-23041
• CVE-2022-23042
• CVE-2022-24958
• CVE-2022-26966
• CVE-2022-28356
• CVE-2022-28388
• CVE-2022-28389
• CVE-2022-28390
• CVE-2022-29968
• CVE-2022-30594

---

Source

• Ubuntu
• AusCERT

---

Related Link

• https://ubuntu.com/security/notices/USN-5465-1
• https://ubuntu.com/security/notices/USN-5466-1
• https://ubuntu.com/security/notices/USN-5467-1
• https://ubuntu.com/security/notices/USN-5468-1
• https://ubuntu.com/security/notices/USN-5469-1
• https://ubuntu.com/security/notices/USN-5470-1
• https://ubuntu.com/security/notices/USN-5471-1
• https://www.auscert.org.au/bulletins/ESB-2022.2839
• https://www.auscert.org.au/bulletins/ESB-2022.2840
• https://www.auscert.org.au/bulletins/ESB-2022.2841
• https://www.auscert.org.au/bulletins/ESB-2022.2842
• https://www.auscert.org.au/bulletins/ESB-2022.2843
• https://www.auscert.org.au/bulletins/ESB-2022.2844
• https://www.auscert.org.au/bulletins/ESB-2022.2845