Linux Kernel Multiple Vulnerabilities
Release Date: 5 Oct 2022
RISK: Medium Risk
TYPE: Operating Systems - Linux
Multiple vulnerabilities were identified in Linux Kernel. A remote attacker could exploit some of these vulnerabilities to trigger denial of service condition, elevation of privilege, remote code execution, sensitive information disclosure and data manipulation on the targeted system.
Impact
- Denial of Service
- Elevation of Privilege
- Remote Code Execution
- Information Disclosure
- Data Manipulation
System / Technologies affected
- Debian 10 buster version prior to 4.19.260-1
- SUSE Linux Enterprise High Performance Computing 15-SP2
- SUSE Linux Enterprise High Performance Computing 15-SP3
- SUSE Linux Enterprise Micro 5.1
- SUSE Linux Enterprise Module for Live Patching 15-SP2
- SUSE Linux Enterprise Module for Live Patching 15-SP3
- SUSE Linux Enterprise Server 15-SP2
- SUSE Linux Enterprise Server 15-SP3
- SUSE Linux Enterprise Server for SAP Applications 15-SP2
- SUSE Linux Enterprise Server for SAP Applications 15-SP3
- Ubuntu 14.04 ESM
- Ubuntu 16.04 ESM
- Ubuntu 20.04 LTS
Solutions
Before installation of the software, please visit the vendor web-site for more details.
For Debian
Apply fixes issued by the vendor:
For SUSE
Apply fixes issued by the vendor:
- https://www.suse.com/support/update/announcement/2022/suse-su-20223476-1
- https://www.suse.com/support/update/announcement/2022/suse-su-20223464-1
For Ubuntu
Apply fixes issued by the vendor:
- https://ubuntu.com/security/notices/USN-5648-1
- https://ubuntu.com/security/notices/USN-5650-1
- https://ubuntu.com/security/notices/USN-5652-1
Vulnerability Identifier
- CVE-2021-4037
- CVE-2021-4159
- CVE-2021-33655
- CVE-2021-33656
- CVE-2022-0850
- CVE-2022-1199
- CVE-2022-1204
- CVE-2022-1462
- CVE-2022-1652
- CVE-2022-1679
- CVE-2022-1729
- CVE-2022-2153
- CVE-2022-2318
- CVE-2022-2586
- CVE-2022-2588
- CVE-2022-2639
- CVE-2022-2663
- CVE-2022-2964
- CVE-2022-2978
- CVE-2022-3028
- CVE-2022-3202
- CVE-2022-20368
- CVE-2022-26365
- CVE-2022-26373
- CVE-2022-29581
- CVE-2022-33740
- CVE-2022-33741
- CVE-2022-33742
- CVE-2022-33743
- CVE-2022-33744
- CVE-2022-34494
- CVE-2022-34495
- CVE-2022-36879
- CVE-2022-36946
- CVE-2022-39188
- CVE-2022-39842
- CVE-2022-40307
Source
Related Link
- https://www.auscert.org.au/bulletins/ESB-2022.4912
- https://www.auscert.org.au/bulletins/ESB-2022.4905
- https://www.auscert.org.au/bulletins/ESB-2022.4903
- https://www.auscert.org.au/bulletins/ESB-2022.4902
- https://www.auscert.org.au/bulletins/ESB-2022.4888
- https://www.auscert.org.au/bulletins/ESB-2022.4886
- https://www.debian.org/lts/security/2022/dla-3131
- https://www.suse.com/support/update/announcement/2022/suse-su-20223476-1
- https://www.suse.com/support/update/announcement/2022/suse-su-20223464-1
- https://ubuntu.com/security/notices/USN-5648-1
- https://ubuntu.com/security/notices/USN-5650-1
- https://ubuntu.com/security/notices/USN-5652-1
沒有留言:
發佈留言