It was discovered that the Upper Level Protocol (ULP) subsystem in the Linux kernel did not properly handle sockets entering the LISTEN state in certain protocols, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2023-0461)
Kyle Zeng discovered that the sysctl implementation in the Linux kernel contained a stack-based buffer overflow. A local attacker could use this to cause a denial of service (system crash) or execute arbitrary code. (CVE-2022-4378)
It was discovered that a race condition existed in the Kernel Connection Multiplexor (KCM) socket implementation in the Linux kernel when releasing sockets in certain situations. A local attacker could use this to cause a denial of service (system crash). (CVE-2022-3521)
It was discovered that the Netronome Ethernet driver in the Linux kernel contained a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2022-3545)
It was discovered that the Broadcom FullMAC USB WiFi driver in the Linux kernel did not properly perform bounds checking in some situations. A physically proximate attacker could use this to craft a malicious USB device that when inserted, could cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2022-3628)
It was discovered that a use-after-free vulnerability existed in the Bluetooth stack in the Linux kernel. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2022-3640)
It was discovered that the NILFS2 file system implementation in the Linux kernel did not properly deallocate memory in certain error conditions. An attacker could use this to cause a denial of service (memory exhaustion). (CVE-2022-3646)
Khalid Masum discovered that the NILFS2 file system implementation in the Linux kernel did not properly handle certain error conditions, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service or possibly execute arbitrary code. (CVE-2022-3649)
It was discovered that a race condition existed in the Xen network backend driver in the Linux kernel when handling dropped packets in certain circumstances. An attacker could use this to cause a denial of service (kernel deadlock). (CVE-2022-42328, CVE-2022-42329)
Tamás Koczka discovered that the Bluetooth L2CAP implementation in the Linux kernel did not properly initialize memory in some situations. A physically proximate attacker could possibly use this to expose sensitive information (kernel memory). (CVE-2022-42895)
It was discovered that the USB monitoring (usbmon) component in the Linux kernel did not properly set permissions on memory mapped in to user space processes. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2022-43750)
{ "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro", "binaries": [ { "binary_version": "4.15.0-1151.164~16.04.1", "binary_name": "linux-aws-headers-4.15.0-1151" }, { "binary_version": "4.15.0-1151.164~16.04.1", "binary_name": "linux-aws-hwe-cloud-tools-4.15.0-1151" }, { "binary_version": "4.15.0-1151.164~16.04.1", "binary_name": "linux-aws-hwe-tools-4.15.0-1151" }, { "binary_version": "4.15.0-1151.164~16.04.1", "binary_name": "linux-buildinfo-4.15.0-1151-aws" }, { "binary_version": "4.15.0-1151.164~16.04.1", "binary_name": "linux-cloud-tools-4.15.0-1151-aws" }, { "binary_version": "4.15.0-1151.164~16.04.1", "binary_name": "linux-headers-4.15.0-1151-aws" }, { "binary_version": "4.15.0-1151.164~16.04.1", "binary_name": "linux-image-unsigned-4.15.0-1151-aws" }, { "binary_version": "4.15.0-1151.164~16.04.1", "binary_name": "linux-image-unsigned-4.15.0-1151-aws-dbgsym" }, { "binary_version": "4.15.0-1151.164~16.04.1", "binary_name": "linux-modules-4.15.0-1151-aws" }, { "binary_version": "4.15.0-1151.164~16.04.1", "binary_name": "linux-modules-extra-4.15.0-1151-aws" }, { "binary_version": "4.15.0-1151.164~16.04.1", "binary_name": "linux-tools-4.15.0-1151-aws" } ] }
{ "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro", "binaries": [ { "binary_version": "4.15.0-1115.126~16.04.1", "binary_name": "linux-buildinfo-4.15.0-1115-oracle" }, { "binary_version": "4.15.0-1115.126~16.04.1", "binary_name": "linux-headers-4.15.0-1115-oracle" }, { "binary_version": "4.15.0-1115.126~16.04.1", "binary_name": "linux-image-unsigned-4.15.0-1115-oracle" }, { "binary_version": "4.15.0-1115.126~16.04.1", "binary_name": "linux-image-unsigned-4.15.0-1115-oracle-dbgsym" }, { "binary_version": "4.15.0-1115.126~16.04.1", "binary_name": "linux-modules-4.15.0-1115-oracle" }, { "binary_version": "4.15.0-1115.126~16.04.1", "binary_name": "linux-modules-extra-4.15.0-1115-oracle" }, { "binary_version": "4.15.0-1115.126~16.04.1", "binary_name": "linux-oracle-headers-4.15.0-1115" }, { "binary_version": "4.15.0-1115.126~16.04.1", "binary_name": "linux-oracle-tools-4.15.0-1115" }, { "binary_version": "4.15.0-1115.126~16.04.1", "binary_name": "linux-tools-4.15.0-1115-oracle" } ] }