A vulnerability exists in the memory management subsystem of the Linux kernel. The lock handling for accessing and updating virtual memory areas (VMAs) is incorrect, leading to use-after-free problems. This issue can be successfully exploited to execute arbitrary kernel code, escalate containers, and gain root privileges.
{ "availability": "No subscription required", "priority_reason": "Local privilege escalation to root", "binaries": [ { "binary_name": "linux-aws-6.2-cloud-tools-6.2.0-1008", "binary_version": "6.2.0-1008.8~22.04.1" }, { "binary_name": "linux-aws-6.2-headers-6.2.0-1008", "binary_version": "6.2.0-1008.8~22.04.1" }, { "binary_name": "linux-aws-6.2-tools-6.2.0-1008", "binary_version": "6.2.0-1008.8~22.04.1" }, { "binary_name": "linux-buildinfo-6.2.0-1008-aws", "binary_version": "6.2.0-1008.8~22.04.1" }, { "binary_name": "linux-cloud-tools-6.2.0-1008-aws", "binary_version": "6.2.0-1008.8~22.04.1" }, { "binary_name": "linux-headers-6.2.0-1008-aws", "binary_version": "6.2.0-1008.8~22.04.1" }, { "binary_name": "linux-image-unsigned-6.2.0-1008-aws", "binary_version": "6.2.0-1008.8~22.04.1" }, { "binary_name": "linux-image-unsigned-6.2.0-1008-aws-dbgsym", "binary_version": "6.2.0-1008.8~22.04.1" }, { "binary_name": "linux-modules-6.2.0-1008-aws", "binary_version": "6.2.0-1008.8~22.04.1" }, { "binary_name": "linux-modules-extra-6.2.0-1008-aws", "binary_version": "6.2.0-1008.8~22.04.1" }, { "binary_name": "linux-modules-iwlwifi-6.2.0-1008-aws", "binary_version": "6.2.0-1008.8~22.04.1" }, { "binary_name": "linux-tools-6.2.0-1008-aws", "binary_version": "6.2.0-1008.8~22.04.1" } ] }
{ "availability": "No subscription required", "priority_reason": "Local privilege escalation to root", "binaries": [ { "binary_name": "linux-azure-6.2-cloud-tools-6.2.0-1008", "binary_version": "6.2.0-1008.8~22.04.1" }, { "binary_name": "linux-azure-6.2-headers-6.2.0-1008", "binary_version": "6.2.0-1008.8~22.04.1" }, { "binary_name": "linux-azure-6.2-tools-6.2.0-1008", "binary_version": "6.2.0-1008.8~22.04.1" }, { "binary_name": "linux-buildinfo-6.2.0-1008-azure", "binary_version": "6.2.0-1008.8~22.04.1" }, { "binary_name": "linux-cloud-tools-6.2.0-1008-azure", "binary_version": "6.2.0-1008.8~22.04.1" }, { "binary_name": "linux-headers-6.2.0-1008-azure", "binary_version": "6.2.0-1008.8~22.04.1" }, { "binary_name": "linux-image-unsigned-6.2.0-1008-azure", "binary_version": "6.2.0-1008.8~22.04.1" }, { "binary_name": "linux-image-unsigned-6.2.0-1008-azure-dbgsym", "binary_version": "6.2.0-1008.8~22.04.1" }, { "binary_name": "linux-modules-6.2.0-1008-azure", "binary_version": "6.2.0-1008.8~22.04.1" }, { "binary_name": "linux-modules-extra-6.2.0-1008-azure", "binary_version": "6.2.0-1008.8~22.04.1" }, { "binary_name": "linux-modules-ipu6-6.2.0-1008-azure", "binary_version": "6.2.0-1008.8~22.04.1" }, { "binary_name": "linux-modules-ivsc-6.2.0-1008-azure", "binary_version": "6.2.0-1008.8~22.04.1" }, { "binary_name": "linux-modules-iwlwifi-6.2.0-1008-azure", "binary_version": "6.2.0-1008.8~22.04.1" }, { "binary_name": "linux-tools-6.2.0-1008-azure", "binary_version": "6.2.0-1008.8~22.04.1" } ] }
{ "availability": "No subscription required", "priority_reason": "Local privilege escalation to root", "binaries": [ { "binary_name": "linux-buildinfo-6.2.0-1010-gcp", "binary_version": "6.2.0-1010.10~22.04.1" }, { "binary_name": "linux-gcp-6.2-headers-6.2.0-1010", "binary_version": "6.2.0-1010.10~22.04.1" }, { "binary_name": "linux-gcp-6.2-tools-6.2.0-1010", "binary_version": "6.2.0-1010.10~22.04.1" }, { "binary_name": "linux-headers-6.2.0-1010-gcp", "binary_version": "6.2.0-1010.10~22.04.1" }, { "binary_name": "linux-image-unsigned-6.2.0-1010-gcp", "binary_version": "6.2.0-1010.10~22.04.1" }, { "binary_name": "linux-image-unsigned-6.2.0-1010-gcp-dbgsym", "binary_version": "6.2.0-1010.10~22.04.1" }, { "binary_name": "linux-modules-6.2.0-1010-gcp", "binary_version": "6.2.0-1010.10~22.04.1" }, { "binary_name": "linux-modules-extra-6.2.0-1010-gcp", "binary_version": "6.2.0-1010.10~22.04.1" }, { "binary_name": "linux-modules-iwlwifi-6.2.0-1010-gcp", "binary_version": "6.2.0-1010.10~22.04.1" }, { "binary_name": "linux-tools-6.2.0-1010-gcp", "binary_version": "6.2.0-1010.10~22.04.1" } ] }
{ "availability": "No subscription required", "priority_reason": "Local privilege escalation to root", "binaries": [ { "binary_name": "linux-buildinfo-6.2.0-26-generic", "binary_version": "6.2.0-26.26~22.04.1" }, { "binary_name": "linux-buildinfo-6.2.0-26-generic-64k", "binary_version": "6.2.0-26.26~22.04.1" }, { "binary_name": "linux-buildinfo-6.2.0-26-generic-lpae", "binary_version": "6.2.0-26.26~22.04.1" }, { "binary_name": "linux-cloud-tools-6.2.0-26-generic", "binary_version": "6.2.0-26.26~22.04.1" }, { "binary_name": "linux-headers-6.2.0-26-generic", "binary_version": "6.2.0-26.26~22.04.1" }, { "binary_name": "linux-headers-6.2.0-26-generic-64k", "binary_version": "6.2.0-26.26~22.04.1" }, { "binary_name": "linux-headers-6.2.0-26-generic-lpae", "binary_version": "6.2.0-26.26~22.04.1" }, { "binary_name": "linux-hwe-6.2-cloud-tools-6.2.0-26", "binary_version": "6.2.0-26.26~22.04.1" }, { "binary_name": "linux-hwe-6.2-cloud-tools-common", "binary_version": "6.2.0-26.26~22.04.1" }, { "binary_name": "linux-hwe-6.2-headers-6.2.0-26", "binary_version": "6.2.0-26.26~22.04.1" }, { "binary_name": "linux-hwe-6.2-tools-6.2.0-26", "binary_version": "6.2.0-26.26~22.04.1" }, { "binary_name": "linux-hwe-6.2-tools-common", "binary_version": "6.2.0-26.26~22.04.1" }, { "binary_name": "linux-hwe-6.2-tools-host", "binary_version": "6.2.0-26.26~22.04.1" }, { "binary_name": "linux-image-6.2.0-26-generic", "binary_version": "6.2.0-26.26~22.04.1" }, { "binary_name": "linux-image-6.2.0-26-generic-dbgsym", "binary_version": "6.2.0-26.26~22.04.1" }, { "binary_name": "linux-image-6.2.0-26-generic-lpae", "binary_version": "6.2.0-26.26~22.04.1" }, { "binary_name": "linux-image-6.2.0-26-generic-lpae-dbgsym", "binary_version": "6.2.0-26.26~22.04.1" }, { "binary_name": "linux-image-unsigned-6.2.0-26-generic", "binary_version": "6.2.0-26.26~22.04.1" }, { "binary_name": "linux-image-unsigned-6.2.0-26-generic-64k", "binary_version": "6.2.0-26.26~22.04.1" }, { "binary_name": "linux-image-unsigned-6.2.0-26-generic-64k-dbgsym", "binary_version": "6.2.0-26.26~22.04.1" }, { "binary_name": "linux-image-unsigned-6.2.0-26-generic-dbgsym", "binary_version": "6.2.0-26.26~22.04.1" }, { "binary_name": "linux-modules-6.2.0-26-generic", "binary_version": "6.2.0-26.26~22.04.1" }, { "binary_name": "linux-modules-6.2.0-26-generic-64k", "binary_version": "6.2.0-26.26~22.04.1" }, { "binary_name": "linux-modules-6.2.0-26-generic-lpae", "binary_version": "6.2.0-26.26~22.04.1" }, { "binary_name": "linux-modules-extra-6.2.0-26-generic", "binary_version": "6.2.0-26.26~22.04.1" }, { "binary_name": "linux-modules-ipu6-6.2.0-26-generic", "binary_version": "6.2.0-26.26~22.04.1" }, { "binary_name": "linux-modules-ivsc-6.2.0-26-generic", "binary_version": "6.2.0-26.26~22.04.1" }, { "binary_name": "linux-modules-iwlwifi-6.2.0-26-generic", "binary_version": "6.2.0-26.26~22.04.1" }, { "binary_name": "linux-source-6.2.0", "binary_version": "6.2.0-26.26~22.04.1" }, { "binary_name": "linux-tools-6.2.0-26-generic", "binary_version": "6.2.0-26.26~22.04.1" }, { "binary_name": "linux-tools-6.2.0-26-generic-64k", "binary_version": "6.2.0-26.26~22.04.1" }, { "binary_name": "linux-tools-6.2.0-26-generic-lpae", "binary_version": "6.2.0-26.26~22.04.1" } ] }
{ "availability": "No subscription required", "priority_reason": "Local privilege escalation to root", "binaries": [ { "binary_name": "linux-buildinfo-6.2.0-1009-lowlatency", "binary_version": "6.2.0-1009.9~22.04.1" }, { "binary_name": "linux-buildinfo-6.2.0-1009-lowlatency-64k", "binary_version": "6.2.0-1009.9~22.04.1" }, { "binary_name": "linux-cloud-tools-6.2.0-1009-lowlatency", "binary_version": "6.2.0-1009.9~22.04.1" }, { "binary_name": "linux-headers-6.2.0-1009-lowlatency", "binary_version": "6.2.0-1009.9~22.04.1" }, { "binary_name": "linux-headers-6.2.0-1009-lowlatency-64k", "binary_version": "6.2.0-1009.9~22.04.1" }, { "binary_name": "linux-image-unsigned-6.2.0-1009-lowlatency", "binary_version": "6.2.0-1009.9~22.04.1" }, { "binary_name": "linux-image-unsigned-6.2.0-1009-lowlatency-64k", "binary_version": "6.2.0-1009.9~22.04.1" }, { "binary_name": "linux-image-unsigned-6.2.0-1009-lowlatency-64k-dbgsym", "binary_version": "6.2.0-1009.9~22.04.1" }, { "binary_name": "linux-image-unsigned-6.2.0-1009-lowlatency-dbgsym", "binary_version": "6.2.0-1009.9~22.04.1" }, { "binary_name": "linux-lowlatency-hwe-6.2-cloud-tools-6.2.0-1009", "binary_version": "6.2.0-1009.9~22.04.1" }, { "binary_name": "linux-lowlatency-hwe-6.2-cloud-tools-common", "binary_version": "6.2.0-1009.9~22.04.1" }, { "binary_name": "linux-lowlatency-hwe-6.2-headers-6.2.0-1009", "binary_version": "6.2.0-1009.9~22.04.1" }, { "binary_name": "linux-lowlatency-hwe-6.2-tools-6.2.0-1009", "binary_version": "6.2.0-1009.9~22.04.1" }, { "binary_name": "linux-lowlatency-hwe-6.2-tools-common", "binary_version": "6.2.0-1009.9~22.04.1" }, { "binary_name": "linux-lowlatency-hwe-6.2-tools-host", "binary_version": "6.2.0-1009.9~22.04.1" }, { "binary_name": "linux-modules-6.2.0-1009-lowlatency", "binary_version": "6.2.0-1009.9~22.04.1" }, { "binary_name": "linux-modules-6.2.0-1009-lowlatency-64k", "binary_version": "6.2.0-1009.9~22.04.1" }, { "binary_name": "linux-modules-ipu6-6.2.0-1009-lowlatency", "binary_version": "6.2.0-1009.9~22.04.1" }, { "binary_name": "linux-modules-ivsc-6.2.0-1009-lowlatency", "binary_version": "6.2.0-1009.9~22.04.1" }, { "binary_name": "linux-modules-iwlwifi-6.2.0-1009-lowlatency", "binary_version": "6.2.0-1009.9~22.04.1" }, { "binary_name": "linux-tools-6.2.0-1009-lowlatency", "binary_version": "6.2.0-1009.9~22.04.1" }, { "binary_name": "linux-tools-6.2.0-1009-lowlatency-64k", "binary_version": "6.2.0-1009.9~22.04.1" } ] }
{ "availability": "No subscription required", "priority_reason": "Local privilege escalation to root", "binaries": [ { "binary_name": "linux-buildinfo-6.1.0-1017-oem", "binary_version": "6.1.0-1017.17" }, { "binary_name": "linux-headers-6.1.0-1017-oem", "binary_version": "6.1.0-1017.17" }, { "binary_name": "linux-image-unsigned-6.1.0-1017-oem", "binary_version": "6.1.0-1017.17" }, { "binary_name": "linux-image-unsigned-6.1.0-1017-oem-dbgsym", "binary_version": "6.1.0-1017.17" }, { "binary_name": "linux-modules-6.1.0-1017-oem", "binary_version": "6.1.0-1017.17" }, { "binary_name": "linux-modules-ipu6-6.1.0-1017-oem", "binary_version": "6.1.0-1017.17" }, { "binary_name": "linux-modules-ivsc-6.1.0-1017-oem", "binary_version": "6.1.0-1017.17" }, { "binary_name": "linux-modules-iwlwifi-6.1.0-1017-oem", "binary_version": "6.1.0-1017.17" }, { "binary_name": "linux-oem-6.1-headers-6.1.0-1017", "binary_version": "6.1.0-1017.17" }, { "binary_name": "linux-oem-6.1-tools-6.1.0-1017", "binary_version": "6.1.0-1017.17" }, { "binary_name": "linux-oem-6.1-tools-host", "binary_version": "6.1.0-1017.17" }, { "binary_name": "linux-tools-6.1.0-1017-oem", "binary_version": "6.1.0-1017.17" } ] }