A vulnerability exists in the memory management subsystem of the Linux kernel. The lock handling for accessing and updating virtual memory areas (VMAs) is incorrect, leading to use-after-free problems. This issue can be successfully exploited to execute arbitrary kernel code, escalate containers, and gain root privileges.
{ "priority_reason": "Local privilege escalation to root", "availability": "No subscription required", "binaries": [ { "binary_version": "6.2.0-1008.8~22.04.1", "binary_name": "linux-aws-6.2-cloud-tools-6.2.0-1008" }, { "binary_version": "6.2.0-1008.8~22.04.1", "binary_name": "linux-aws-6.2-headers-6.2.0-1008" }, { "binary_version": "6.2.0-1008.8~22.04.1", "binary_name": "linux-aws-6.2-tools-6.2.0-1008" }, { "binary_version": "6.2.0-1008.8~22.04.1", "binary_name": "linux-buildinfo-6.2.0-1008-aws" }, { "binary_version": "6.2.0-1008.8~22.04.1", "binary_name": "linux-cloud-tools-6.2.0-1008-aws" }, { "binary_version": "6.2.0-1008.8~22.04.1", "binary_name": "linux-headers-6.2.0-1008-aws" }, { "binary_version": "6.2.0-1008.8~22.04.1", "binary_name": "linux-image-unsigned-6.2.0-1008-aws" }, { "binary_version": "6.2.0-1008.8~22.04.1", "binary_name": "linux-image-unsigned-6.2.0-1008-aws-dbgsym" }, { "binary_version": "6.2.0-1008.8~22.04.1", "binary_name": "linux-modules-6.2.0-1008-aws" }, { "binary_version": "6.2.0-1008.8~22.04.1", "binary_name": "linux-modules-extra-6.2.0-1008-aws" }, { "binary_version": "6.2.0-1008.8~22.04.1", "binary_name": "linux-modules-iwlwifi-6.2.0-1008-aws" }, { "binary_version": "6.2.0-1008.8~22.04.1", "binary_name": "linux-tools-6.2.0-1008-aws" } ] }
{ "priority_reason": "Local privilege escalation to root", "availability": "No subscription required", "binaries": [ { "binary_version": "6.2.0-1008.8~22.04.1", "binary_name": "linux-azure-6.2-cloud-tools-6.2.0-1008" }, { "binary_version": "6.2.0-1008.8~22.04.1", "binary_name": "linux-azure-6.2-headers-6.2.0-1008" }, { "binary_version": "6.2.0-1008.8~22.04.1", "binary_name": "linux-azure-6.2-tools-6.2.0-1008" }, { "binary_version": "6.2.0-1008.8~22.04.1", "binary_name": "linux-buildinfo-6.2.0-1008-azure" }, { "binary_version": "6.2.0-1008.8~22.04.1", "binary_name": "linux-cloud-tools-6.2.0-1008-azure" }, { "binary_version": "6.2.0-1008.8~22.04.1", "binary_name": "linux-headers-6.2.0-1008-azure" }, { "binary_version": "6.2.0-1008.8~22.04.1", "binary_name": "linux-image-unsigned-6.2.0-1008-azure" }, { "binary_version": "6.2.0-1008.8~22.04.1", "binary_name": "linux-image-unsigned-6.2.0-1008-azure-dbgsym" }, { "binary_version": "6.2.0-1008.8~22.04.1", "binary_name": "linux-modules-6.2.0-1008-azure" }, { "binary_version": "6.2.0-1008.8~22.04.1", "binary_name": "linux-modules-extra-6.2.0-1008-azure" }, { "binary_version": "6.2.0-1008.8~22.04.1", "binary_name": "linux-modules-ipu6-6.2.0-1008-azure" }, { "binary_version": "6.2.0-1008.8~22.04.1", "binary_name": "linux-modules-ivsc-6.2.0-1008-azure" }, { "binary_version": "6.2.0-1008.8~22.04.1", "binary_name": "linux-modules-iwlwifi-6.2.0-1008-azure" }, { "binary_version": "6.2.0-1008.8~22.04.1", "binary_name": "linux-tools-6.2.0-1008-azure" } ] }
{ "priority_reason": "Local privilege escalation to root", "availability": "No subscription required", "binaries": [ { "binary_version": "6.2.0-1010.10~22.04.1", "binary_name": "linux-buildinfo-6.2.0-1010-gcp" }, { "binary_version": "6.2.0-1010.10~22.04.1", "binary_name": "linux-gcp-6.2-headers-6.2.0-1010" }, { "binary_version": "6.2.0-1010.10~22.04.1", "binary_name": "linux-gcp-6.2-tools-6.2.0-1010" }, { "binary_version": "6.2.0-1010.10~22.04.1", "binary_name": "linux-headers-6.2.0-1010-gcp" }, { "binary_version": "6.2.0-1010.10~22.04.1", "binary_name": "linux-image-unsigned-6.2.0-1010-gcp" }, { "binary_version": "6.2.0-1010.10~22.04.1", "binary_name": "linux-image-unsigned-6.2.0-1010-gcp-dbgsym" }, { "binary_version": "6.2.0-1010.10~22.04.1", "binary_name": "linux-modules-6.2.0-1010-gcp" }, { "binary_version": "6.2.0-1010.10~22.04.1", "binary_name": "linux-modules-extra-6.2.0-1010-gcp" }, { "binary_version": "6.2.0-1010.10~22.04.1", "binary_name": "linux-modules-iwlwifi-6.2.0-1010-gcp" }, { "binary_version": "6.2.0-1010.10~22.04.1", "binary_name": "linux-tools-6.2.0-1010-gcp" } ] }
{ "priority_reason": "Local privilege escalation to root", "availability": "No subscription required", "binaries": [ { "binary_version": "6.2.0-26.26~22.04.1", "binary_name": "linux-buildinfo-6.2.0-26-generic" }, { "binary_version": "6.2.0-26.26~22.04.1", "binary_name": "linux-buildinfo-6.2.0-26-generic-64k" }, { "binary_version": "6.2.0-26.26~22.04.1", "binary_name": "linux-buildinfo-6.2.0-26-generic-lpae" }, { "binary_version": "6.2.0-26.26~22.04.1", "binary_name": "linux-cloud-tools-6.2.0-26-generic" }, { "binary_version": "6.2.0-26.26~22.04.1", "binary_name": "linux-headers-6.2.0-26-generic" }, { "binary_version": "6.2.0-26.26~22.04.1", "binary_name": "linux-headers-6.2.0-26-generic-64k" }, { "binary_version": "6.2.0-26.26~22.04.1", "binary_name": "linux-headers-6.2.0-26-generic-lpae" }, { "binary_version": "6.2.0-26.26~22.04.1", "binary_name": "linux-hwe-6.2-cloud-tools-6.2.0-26" }, { "binary_version": "6.2.0-26.26~22.04.1", "binary_name": "linux-hwe-6.2-cloud-tools-common" }, { "binary_version": "6.2.0-26.26~22.04.1", "binary_name": "linux-hwe-6.2-headers-6.2.0-26" }, { "binary_version": "6.2.0-26.26~22.04.1", "binary_name": "linux-hwe-6.2-tools-6.2.0-26" }, { "binary_version": "6.2.0-26.26~22.04.1", "binary_name": "linux-hwe-6.2-tools-common" }, { "binary_version": "6.2.0-26.26~22.04.1", "binary_name": "linux-hwe-6.2-tools-host" }, { "binary_version": "6.2.0-26.26~22.04.1", "binary_name": "linux-image-6.2.0-26-generic" }, { "binary_version": "6.2.0-26.26~22.04.1", "binary_name": "linux-image-6.2.0-26-generic-dbgsym" }, { "binary_version": "6.2.0-26.26~22.04.1", "binary_name": "linux-image-6.2.0-26-generic-lpae" }, { "binary_version": "6.2.0-26.26~22.04.1", "binary_name": "linux-image-6.2.0-26-generic-lpae-dbgsym" }, { "binary_version": "6.2.0-26.26~22.04.1", "binary_name": "linux-image-unsigned-6.2.0-26-generic" }, { "binary_version": "6.2.0-26.26~22.04.1", "binary_name": "linux-image-unsigned-6.2.0-26-generic-64k" }, { "binary_version": "6.2.0-26.26~22.04.1", "binary_name": "linux-image-unsigned-6.2.0-26-generic-64k-dbgsym" }, { "binary_version": "6.2.0-26.26~22.04.1", "binary_name": "linux-image-unsigned-6.2.0-26-generic-dbgsym" }, { "binary_version": "6.2.0-26.26~22.04.1", "binary_name": "linux-modules-6.2.0-26-generic" }, { "binary_version": "6.2.0-26.26~22.04.1", "binary_name": "linux-modules-6.2.0-26-generic-64k" }, { "binary_version": "6.2.0-26.26~22.04.1", "binary_name": "linux-modules-6.2.0-26-generic-lpae" }, { "binary_version": "6.2.0-26.26~22.04.1", "binary_name": "linux-modules-extra-6.2.0-26-generic" }, { "binary_version": "6.2.0-26.26~22.04.1", "binary_name": "linux-modules-ipu6-6.2.0-26-generic" }, { "binary_version": "6.2.0-26.26~22.04.1", "binary_name": "linux-modules-ivsc-6.2.0-26-generic" }, { "binary_version": "6.2.0-26.26~22.04.1", "binary_name": "linux-modules-iwlwifi-6.2.0-26-generic" }, { "binary_version": "6.2.0-26.26~22.04.1", "binary_name": "linux-source-6.2.0" }, { "binary_version": "6.2.0-26.26~22.04.1", "binary_name": "linux-tools-6.2.0-26-generic" }, { "binary_version": "6.2.0-26.26~22.04.1", "binary_name": "linux-tools-6.2.0-26-generic-64k" }, { "binary_version": "6.2.0-26.26~22.04.1", "binary_name": "linux-tools-6.2.0-26-generic-lpae" } ] }
{ "priority_reason": "Local privilege escalation to root", "availability": "No subscription required", "binaries": [ { "binary_version": "6.2.0-1009.9~22.04.1", "binary_name": "linux-buildinfo-6.2.0-1009-lowlatency" }, { "binary_version": "6.2.0-1009.9~22.04.1", "binary_name": "linux-buildinfo-6.2.0-1009-lowlatency-64k" }, { "binary_version": "6.2.0-1009.9~22.04.1", "binary_name": "linux-cloud-tools-6.2.0-1009-lowlatency" }, { "binary_version": "6.2.0-1009.9~22.04.1", "binary_name": "linux-headers-6.2.0-1009-lowlatency" }, { "binary_version": "6.2.0-1009.9~22.04.1", "binary_name": "linux-headers-6.2.0-1009-lowlatency-64k" }, { "binary_version": "6.2.0-1009.9~22.04.1", "binary_name": "linux-image-unsigned-6.2.0-1009-lowlatency" }, { "binary_version": "6.2.0-1009.9~22.04.1", "binary_name": "linux-image-unsigned-6.2.0-1009-lowlatency-64k" }, { "binary_version": "6.2.0-1009.9~22.04.1", "binary_name": "linux-image-unsigned-6.2.0-1009-lowlatency-64k-dbgsym" }, { "binary_version": "6.2.0-1009.9~22.04.1", "binary_name": "linux-image-unsigned-6.2.0-1009-lowlatency-dbgsym" }, { "binary_version": "6.2.0-1009.9~22.04.1", "binary_name": "linux-lowlatency-hwe-6.2-cloud-tools-6.2.0-1009" }, { "binary_version": "6.2.0-1009.9~22.04.1", "binary_name": "linux-lowlatency-hwe-6.2-cloud-tools-common" }, { "binary_version": "6.2.0-1009.9~22.04.1", "binary_name": "linux-lowlatency-hwe-6.2-headers-6.2.0-1009" }, { "binary_version": "6.2.0-1009.9~22.04.1", "binary_name": "linux-lowlatency-hwe-6.2-tools-6.2.0-1009" }, { "binary_version": "6.2.0-1009.9~22.04.1", "binary_name": "linux-lowlatency-hwe-6.2-tools-common" }, { "binary_version": "6.2.0-1009.9~22.04.1", "binary_name": "linux-lowlatency-hwe-6.2-tools-host" }, { "binary_version": "6.2.0-1009.9~22.04.1", "binary_name": "linux-modules-6.2.0-1009-lowlatency" }, { "binary_version": "6.2.0-1009.9~22.04.1", "binary_name": "linux-modules-6.2.0-1009-lowlatency-64k" }, { "binary_version": "6.2.0-1009.9~22.04.1", "binary_name": "linux-modules-ipu6-6.2.0-1009-lowlatency" }, { "binary_version": "6.2.0-1009.9~22.04.1", "binary_name": "linux-modules-ivsc-6.2.0-1009-lowlatency" }, { "binary_version": "6.2.0-1009.9~22.04.1", "binary_name": "linux-modules-iwlwifi-6.2.0-1009-lowlatency" }, { "binary_version": "6.2.0-1009.9~22.04.1", "binary_name": "linux-tools-6.2.0-1009-lowlatency" }, { "binary_version": "6.2.0-1009.9~22.04.1", "binary_name": "linux-tools-6.2.0-1009-lowlatency-64k" } ] }
{ "priority_reason": "Local privilege escalation to root", "availability": "No subscription required", "binaries": [ { "binary_version": "6.1.0-1017.17", "binary_name": "linux-buildinfo-6.1.0-1017-oem" }, { "binary_version": "6.1.0-1017.17", "binary_name": "linux-headers-6.1.0-1017-oem" }, { "binary_version": "6.1.0-1017.17", "binary_name": "linux-image-unsigned-6.1.0-1017-oem" }, { "binary_version": "6.1.0-1017.17", "binary_name": "linux-image-unsigned-6.1.0-1017-oem-dbgsym" }, { "binary_version": "6.1.0-1017.17", "binary_name": "linux-modules-6.1.0-1017-oem" }, { "binary_version": "6.1.0-1017.17", "binary_name": "linux-modules-ipu6-6.1.0-1017-oem" }, { "binary_version": "6.1.0-1017.17", "binary_name": "linux-modules-ivsc-6.1.0-1017-oem" }, { "binary_version": "6.1.0-1017.17", "binary_name": "linux-modules-iwlwifi-6.1.0-1017-oem" }, { "binary_version": "6.1.0-1017.17", "binary_name": "linux-oem-6.1-headers-6.1.0-1017" }, { "binary_version": "6.1.0-1017.17", "binary_name": "linux-oem-6.1-tools-6.1.0-1017" }, { "binary_version": "6.1.0-1017.17", "binary_name": "linux-oem-6.1-tools-host" }, { "binary_version": "6.1.0-1017.17", "binary_name": "linux-tools-6.1.0-1017-oem" } ] }