Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
6.3

CVE-2022-1353: Linux kernel lets unprivileged user read kernel memory

CVE-2022-1353 · published 4 years ago
Summary

The Linux kernel versions shipped with Canonical's Linux, Linux AWS, Linux Azure, Linux LTS Xenial, and Linux AWS HWE can be tricked by a regular user into accessing kernel memory. This could cause a crash or expose internal system details. Update to the latest kernel packages from Canonical as soon as they are available to remove the flaw.

What to do
  • Update canonical linux-aws to version 4.4.0-1109.115.
  • Update canonical linux-azure to version 4.15.0-1146.161~14.04.1.
  • Update canonical linux-lts-xenial to version 4.4.0-229.263~14.04.1.
  • Update canonical linux to version 4.4.0-229.263.
  • Update canonical linux-aws to version 4.4.0-1145.160.
  • Update canonical linux-aws-hwe to version 4.15.0-1137.148~16.04.1.
  • Update canonical linux-azure to version 4.15.0-1146.161~16.04.1.
  • Update canonical linux-gcp to version 4.15.0-1131.147~16.04.1.
  • Update canonical linux-hwe to version 4.15.0-189.200~16.04.1.
  • Update canonical linux-kvm to version 4.4.0-1110.120.
  • Update canonical linux-oracle to version 4.15.0-1102.113~16.04.1.
  • Update canonical linux-fips to version 4.4.0-1079.86.
  • Update canonical linux to version 4.15.0-189.200.
  • Update canonical linux-aws to version 4.15.0-1137.148.
  • Update canonical linux-aws-5.4 to version 5.4.0-1078.84~18.04.1.
  • Update canonical linux-azure-4.15 to version 4.15.0-1146.161.
  • Update canonical linux-azure-5.4 to version 5.4.0-1083.87~18.04.1.
  • Update canonical linux-dell300x to version 4.15.0-1049.54.
  • Update canonical linux-gcp-4.15 to version 4.15.0-1131.147.
  • Update canonical linux-gcp-5.4 to version 5.4.0-1078.84~18.04.1.
  • Update canonical linux-gke-5.4 to version 5.4.0-1074.79~18.04.1.
  • Update canonical linux-gkeop-5.4 to version 5.4.0-1046.48~18.04.1.
  • Update canonical linux-hwe-5.4 to version 5.4.0-117.132~18.04.1.
  • Update canonical linux-ibm-5.4 to version 5.4.0-1028.32~18.04.1.
  • Update canonical linux-kvm to version 4.15.0-1123.128.
  • Update canonical linux-oracle to version 4.15.0-1102.113.
  • Update canonical linux-oracle-5.4 to version 5.4.0-1076.83~18.04.1.
  • Update canonical linux-raspi-5.4 to version 5.4.0-1065.75~18.04.1.
  • Update canonical linux-raspi2 to version 4.15.0-1115.123.
  • Update canonical linux-snapdragon to version 4.15.0-1133.143.
  • Update canonical linux-aws-fips to version 4.15.0-2076.81.
  • Update canonical linux-azure-fips to version 4.15.0-2057.63.
  • Update canonical linux-fips to version 4.15.0-1094.105.
  • Update canonical linux-gcp-fips to version 4.15.0-2041.46.
  • Update canonical linux to version 5.4.0-117.132.
  • Update canonical linux-aws to version 5.4.0-1078.84.
  • Update canonical linux-azure to version 5.4.0-1083.87.
  • Update canonical linux-azure-5.15 to version 5.15.0-1008.9~20.04.1.
  • Update canonical linux-bluefield to version 5.4.0-1040.44.
  • Update canonical linux-gcp to version 5.4.0-1078.84.
  • Update canonical linux-gke to version 5.4.0-1074.79.
  • Update canonical linux-gkeop to version 5.4.0-1046.48.
  • Update canonical linux-hwe-5.15 to version 5.15.0-41.44~20.04.1.
  • Update canonical linux-ibm to version 5.4.0-1026.29.
  • Update canonical linux-intel-iotg-5.15 to version 5.15.0-1008.11~20.04.1.
  • Update canonical linux-iot to version 5.4.0-1004.6.
  • Update canonical linux-kvm to version 5.4.0-1068.72.
  • Update canonical linux-lowlatency-hwe-5.15 to version 5.15.0-42.45~20.04.1.
  • Update canonical linux-oem-5.14 to version 5.14.0-1036.40.
  • Update canonical linux-oracle to version 5.4.0-1076.83.
  • Update canonical linux-raspi to version 5.4.0-1065.75.
  • Update canonical linux-azure-fde-5.15 to version 5.15.0-1114.123~20.04.1.
  • Update canonical linux-aws-fips to version 5.4.0-1078.84+fips1.
  • Update canonical linux-azure-fips to version 5.4.0-1083.87+fips1.
  • Update canonical linux-fips to version 5.4.0-1054.61.
  • Update canonical linux-gcp-fips to version 5.4.0-1078.84+fips1.
  • Update canonical linux to version 5.15.0-37.39.
  • Update canonical linux-aws to version 5.15.0-1011.14.
  • Update canonical linux-azure to version 5.15.0-1010.12.
  • Update canonical linux-gcp to version 5.15.0-1008.12.
  • Update canonical linux-gke to version 5.15.0-1008.10.
  • Update canonical linux-ibm to version 5.15.0-1007.8.
  • Update canonical linux-intel-iotg to version 5.15.0-1008.11.
  • Update canonical linux-kvm to version 5.15.0-1010.11.
  • Update canonical linux-lowlatency to version 5.15.0-37.39.
  • Update canonical linux-oracle to version 5.15.0-1009.12.
  • Update canonical linux-raspi to version 5.15.0-1011.13.
  • Update canonical linux-riscv to version 5.15.0-1012.13.
  • Update canonical linux-realtime to version 5.15.0-1014.14.
  • Update debian linux to version 5.17.3-1.
  • Update linux kernel to version 4.9.311 or later.
  • Update linux linux_kernel to version 5.17 or later.
Affected software
Ecosystem VendorProductAffected versions
Ubuntu:Pro:14.04:LTS canonical linux-aws < 4.4.0-1109.115
Fix: upgrade to 4.4.0-1109.115
Ubuntu:Pro:14.04:LTS canonical linux-azure < 4.15.0-1146.161~14.04.1
Fix: upgrade to 4.15.0-1146.161~14.04.1
Ubuntu:Pro:14.04:LTS canonical linux-lts-xenial < 4.4.0-229.263~14.04.1
Fix: upgrade to 4.4.0-229.263~14.04.1
Ubuntu:Pro:14.04:LTS canonical linux All versions
Ubuntu:Pro:16.04:LTS canonical linux < 4.4.0-229.263
Fix: upgrade to 4.4.0-229.263
Ubuntu:Pro:16.04:LTS canonical linux-aws < 4.4.0-1145.160
Fix: upgrade to 4.4.0-1145.160
Ubuntu:Pro:16.04:LTS canonical linux-aws-hwe < 4.15.0-1137.148~16.04.1
Fix: upgrade to 4.15.0-1137.148~16.04.1
Ubuntu:Pro:16.04:LTS canonical linux-azure < 4.15.0-1146.161~16.04.1
Fix: upgrade to 4.15.0-1146.161~16.04.1
Ubuntu:Pro:16.04:LTS canonical linux-gcp < 4.15.0-1131.147~16.04.1
Fix: upgrade to 4.15.0-1131.147~16.04.1
Ubuntu:Pro:16.04:LTS canonical linux-hwe < 4.15.0-189.200~16.04.1
Fix: upgrade to 4.15.0-189.200~16.04.1
Ubuntu:Pro:16.04:LTS canonical linux-kvm < 4.4.0-1110.120
Fix: upgrade to 4.4.0-1110.120
Ubuntu:Pro:16.04:LTS canonical linux-oracle < 4.15.0-1102.113~16.04.1
Fix: upgrade to 4.15.0-1102.113~16.04.1
Ubuntu:16.04:LTS canonical linux-hwe-edge All versions
Ubuntu:Pro:FIPS:16.04:LTS canonical linux-fips < 4.4.0-1079.86
Fix: upgrade to 4.4.0-1079.86
Ubuntu:18.04:LTS canonical linux < 4.15.0-189.200
Fix: upgrade to 4.15.0-189.200
Ubuntu:18.04:LTS canonical linux-aws < 4.15.0-1137.148
Fix: upgrade to 4.15.0-1137.148
Ubuntu:18.04:LTS canonical linux-aws-5.4 < 5.4.0-1078.84~18.04.1
Fix: upgrade to 5.4.0-1078.84~18.04.1
Ubuntu:18.04:LTS canonical linux-azure-4.15 < 4.15.0-1146.161
Fix: upgrade to 4.15.0-1146.161
Ubuntu:18.04:LTS canonical linux-azure-5.4 < 5.4.0-1083.87~18.04.1
Fix: upgrade to 5.4.0-1083.87~18.04.1
Ubuntu:18.04:LTS canonical linux-dell300x < 4.15.0-1049.54
Fix: upgrade to 4.15.0-1049.54
Ubuntu:18.04:LTS canonical linux-gcp-4.15 < 4.15.0-1131.147
Fix: upgrade to 4.15.0-1131.147
Ubuntu:18.04:LTS canonical linux-gcp-5.4 < 5.4.0-1078.84~18.04.1
Fix: upgrade to 5.4.0-1078.84~18.04.1
Ubuntu:18.04:LTS canonical linux-gke-5.4 < 5.4.0-1074.79~18.04.1
Fix: upgrade to 5.4.0-1074.79~18.04.1
Ubuntu:18.04:LTS canonical linux-gkeop-5.4 < 5.4.0-1046.48~18.04.1
Fix: upgrade to 5.4.0-1046.48~18.04.1
Ubuntu:18.04:LTS canonical linux-hwe-5.4 < 5.4.0-117.132~18.04.1
Fix: upgrade to 5.4.0-117.132~18.04.1
Ubuntu:18.04:LTS canonical linux-ibm-5.4 < 5.4.0-1028.32~18.04.1
Fix: upgrade to 5.4.0-1028.32~18.04.1
Ubuntu:18.04:LTS canonical linux-kvm < 4.15.0-1123.128
Fix: upgrade to 4.15.0-1123.128
Ubuntu:18.04:LTS canonical linux-oracle < 4.15.0-1102.113
Fix: upgrade to 4.15.0-1102.113
Ubuntu:18.04:LTS canonical linux-oracle-5.4 < 5.4.0-1076.83~18.04.1
Fix: upgrade to 5.4.0-1076.83~18.04.1
Ubuntu:18.04:LTS canonical linux-raspi-5.4 < 5.4.0-1065.75~18.04.1
Fix: upgrade to 5.4.0-1065.75~18.04.1
Ubuntu:18.04:LTS canonical linux-raspi2 < 4.15.0-1115.123
Fix: upgrade to 4.15.0-1115.123
Ubuntu:18.04:LTS canonical linux-snapdragon < 4.15.0-1133.143
Fix: upgrade to 4.15.0-1133.143
Ubuntu:18.04:LTS canonical linux-aws-5.0 All versions
Ubuntu:18.04:LTS canonical linux-aws-5.3 All versions
Ubuntu:18.04:LTS canonical linux-azure All versions
Ubuntu:18.04:LTS canonical linux-azure-5.3 All versions
Ubuntu:18.04:LTS canonical linux-azure-edge All versions
Ubuntu:18.04:LTS canonical linux-gcp All versions
Ubuntu:18.04:LTS canonical linux-gcp-5.3 All versions
Ubuntu:18.04:LTS canonical linux-gke-4.15 All versions
Ubuntu:18.04:LTS canonical linux-hwe All versions
Ubuntu:18.04:LTS canonical linux-hwe-edge All versions
Ubuntu:18.04:LTS canonical linux-oem All versions
Ubuntu:18.04:LTS canonical linux-oracle-5.0 All versions
Ubuntu:18.04:LTS canonical linux-oracle-5.3 All versions
Ubuntu:Pro:FIPS-updates:18.04:LTS canonical linux-aws-fips < 4.15.0-2076.81
Fix: upgrade to 4.15.0-2076.81
Ubuntu:Pro:FIPS-updates:18.04:LTS canonical linux-azure-fips < 4.15.0-2057.63
Fix: upgrade to 4.15.0-2057.63
Ubuntu:Pro:FIPS-updates:18.04:LTS canonical linux-fips < 4.15.0-1094.105
Fix: upgrade to 4.15.0-1094.105
Ubuntu:Pro:FIPS-updates:18.04:LTS canonical linux-gcp-fips < 4.15.0-2041.46
Fix: upgrade to 4.15.0-2041.46
Ubuntu:Pro:FIPS:18.04:LTS canonical linux-aws-fips All versions
Showing 50 of 132. Show the rest
Ecosystem VendorProductAffected versions
Ubuntu:Pro:FIPS:18.04:LTS canonical linux-azure-fips All versions
Ubuntu:Pro:FIPS:18.04:LTS canonical linux-fips All versions
Ubuntu:Pro:FIPS:18.04:LTS canonical linux-gcp-fips All versions
Ubuntu:20.04:LTS canonical linux < 5.4.0-117.132
Fix: upgrade to 5.4.0-117.132
Ubuntu:20.04:LTS canonical linux-aws < 5.4.0-1078.84
Fix: upgrade to 5.4.0-1078.84
Ubuntu:20.04:LTS canonical linux-azure < 5.4.0-1083.87
Fix: upgrade to 5.4.0-1083.87
Ubuntu:20.04:LTS canonical linux-azure-5.15 < 5.15.0-1008.9~20.04.1
Fix: upgrade to 5.15.0-1008.9~20.04.1
Ubuntu:20.04:LTS canonical linux-bluefield < 5.4.0-1040.44
Fix: upgrade to 5.4.0-1040.44
Ubuntu:20.04:LTS canonical linux-gcp < 5.4.0-1078.84
Fix: upgrade to 5.4.0-1078.84
Ubuntu:20.04:LTS canonical linux-gke < 5.4.0-1074.79
Fix: upgrade to 5.4.0-1074.79
Ubuntu:20.04:LTS canonical linux-gkeop < 5.4.0-1046.48
Fix: upgrade to 5.4.0-1046.48
Ubuntu:20.04:LTS canonical linux-hwe-5.15 < 5.15.0-41.44~20.04.1
Fix: upgrade to 5.15.0-41.44~20.04.1
Ubuntu:20.04:LTS canonical linux-ibm < 5.4.0-1026.29
Fix: upgrade to 5.4.0-1026.29
Ubuntu:20.04:LTS canonical linux-intel-iotg-5.15 < 5.15.0-1008.11~20.04.1
Fix: upgrade to 5.15.0-1008.11~20.04.1
Ubuntu:20.04:LTS canonical linux-iot < 5.4.0-1004.6
Fix: upgrade to 5.4.0-1004.6
Ubuntu:20.04:LTS canonical linux-kvm < 5.4.0-1068.72
Fix: upgrade to 5.4.0-1068.72
Ubuntu:20.04:LTS canonical linux-lowlatency-hwe-5.15 < 5.15.0-42.45~20.04.1
Fix: upgrade to 5.15.0-42.45~20.04.1
Ubuntu:20.04:LTS canonical linux-oem-5.14 < 5.14.0-1036.40
Fix: upgrade to 5.14.0-1036.40
Ubuntu:20.04:LTS canonical linux-oracle < 5.4.0-1076.83
Fix: upgrade to 5.4.0-1076.83
Ubuntu:20.04:LTS canonical linux-raspi < 5.4.0-1065.75
Fix: upgrade to 5.4.0-1065.75
Ubuntu:20.04:LTS canonical linux-aws-5.11 All versions
Ubuntu:20.04:LTS canonical linux-aws-5.13 All versions
Ubuntu:20.04:LTS canonical linux-aws-5.8 All versions
Ubuntu:20.04:LTS canonical linux-azure-5.11 All versions
Ubuntu:20.04:LTS canonical linux-azure-5.13 All versions
Ubuntu:20.04:LTS canonical linux-azure-5.8 All versions
Ubuntu:Pro:20.04:LTS canonical linux-azure-fde-5.15 < 5.15.0-1114.123~20.04.1
Fix: upgrade to 5.15.0-1114.123~20.04.1
Ubuntu:20.04:LTS canonical linux-gcp-5.11 All versions
Ubuntu:20.04:LTS canonical linux-gcp-5.13 All versions
Ubuntu:20.04:LTS canonical linux-gcp-5.8 All versions
Ubuntu:20.04:LTS canonical linux-hwe-5.11 All versions
Ubuntu:20.04:LTS canonical linux-hwe-5.13 All versions
Ubuntu:20.04:LTS canonical linux-hwe-5.8 All versions
Ubuntu:20.04:LTS canonical linux-intel-5.13 All versions
Ubuntu:20.04:LTS canonical linux-oem-5.10 All versions
Ubuntu:20.04:LTS canonical linux-oem-5.13 All versions
Ubuntu:20.04:LTS canonical linux-oem-5.6 All versions
Ubuntu:20.04:LTS canonical linux-oracle-5.11 All versions
Ubuntu:20.04:LTS canonical linux-oracle-5.13 All versions
Ubuntu:20.04:LTS canonical linux-oracle-5.8 All versions
Ubuntu:20.04:LTS canonical linux-raspi2 All versions
Ubuntu:20.04:LTS canonical linux-riscv All versions
Ubuntu:20.04:LTS canonical linux-riscv-5.11 All versions
Ubuntu:20.04:LTS canonical linux-riscv-5.8 All versions
Ubuntu:Pro:FIPS-updates:20.04:LTS canonical linux-aws-fips < 5.4.0-1078.84+fips1
Fix: upgrade to 5.4.0-1078.84+fips1
Ubuntu:Pro:FIPS-updates:20.04:LTS canonical linux-azure-fips < 5.4.0-1083.87+fips1
Fix: upgrade to 5.4.0-1083.87+fips1
Ubuntu:Pro:FIPS-updates:20.04:LTS canonical linux-fips < 5.4.0-1054.61
Fix: upgrade to 5.4.0-1054.61
Ubuntu:Pro:FIPS-updates:20.04:LTS canonical linux-gcp-fips < 5.4.0-1078.84+fips1
Fix: upgrade to 5.4.0-1078.84+fips1
Ubuntu:Pro:FIPS:20.04:LTS canonical linux-aws-fips All versions
Ubuntu:Pro:FIPS:20.04:LTS canonical linux-azure-fips All versions
Ubuntu:Pro:FIPS:20.04:LTS canonical linux-fips All versions
Ubuntu:Pro:FIPS:20.04:LTS canonical linux-gcp-fips All versions
Ubuntu:22.04:LTS canonical linux < 5.15.0-37.39
Fix: upgrade to 5.15.0-37.39
Ubuntu:22.04:LTS canonical linux-aws < 5.15.0-1011.14
Fix: upgrade to 5.15.0-1011.14
Ubuntu:22.04:LTS canonical linux-azure < 5.15.0-1010.12
Fix: upgrade to 5.15.0-1010.12
Ubuntu:22.04:LTS canonical linux-gcp < 5.15.0-1008.12
Fix: upgrade to 5.15.0-1008.12
Ubuntu:22.04:LTS canonical linux-gke < 5.15.0-1008.10
Fix: upgrade to 5.15.0-1008.10
Ubuntu:22.04:LTS canonical linux-ibm < 5.15.0-1007.8
Fix: upgrade to 5.15.0-1007.8
Ubuntu:22.04:LTS canonical linux-intel-iot-realtime All versions
Ubuntu:22.04:LTS canonical linux-intel-iotg < 5.15.0-1008.11
Fix: upgrade to 5.15.0-1008.11
Ubuntu:22.04:LTS canonical linux-kvm < 5.15.0-1010.11
Fix: upgrade to 5.15.0-1010.11
Ubuntu:22.04:LTS canonical linux-lowlatency < 5.15.0-37.39
Fix: upgrade to 5.15.0-37.39
Ubuntu:22.04:LTS canonical linux-oracle < 5.15.0-1009.12
Fix: upgrade to 5.15.0-1009.12
Ubuntu:22.04:LTS canonical linux-raspi < 5.15.0-1011.13
Fix: upgrade to 5.15.0-1011.13
Ubuntu:22.04:LTS canonical linux-realtime All versions
Ubuntu:22.04:LTS canonical linux-riscv < 5.15.0-1012.13
Fix: upgrade to 5.15.0-1012.13
Ubuntu:Pro:Realtime:22.04:LTS canonical linux-realtime < 5.15.0-1014.14
Fix: upgrade to 5.15.0-1014.14
Ubuntu:24.04:LTS canonical linux-raspi-realtime All versions
Ubuntu:Nvidia-BlueField:24.04:LTS canonical linux-bluefield All versions
– linux kernel < 4.9.311
– linux linux_kernel < 5.17
5.17
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
– debian debian_linux 9.0
10.0
11.0
cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
– redhat enterprise_linux 8.0
cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
– netapp h300s_firmware All versions
cpe:2.3:o:netapp:h300s_firmware:-:*:*:*:*:*:*:*
– netapp h500s_firmware All versions
cpe:2.3:o:netapp:h500s_firmware:-:*:*:*:*:*:*:*
– netapp h700s_firmware All versions
cpe:2.3:o:netapp:h700s_firmware:-:*:*:*:*:*:*:*
– netapp h410s_firmware All versions
cpe:2.3:o:netapp:h410s_firmware:-:*:*:*:*:*:*:*
– netapp h300e_firmware All versions
cpe:2.3:o:netapp:h300e_firmware:-:*:*:*:*:*:*:*
– netapp h500e_firmware All versions
cpe:2.3:o:netapp:h500e_firmware:-:*:*:*:*:*:*:*
– netapp h700e_firmware All versions
cpe:2.3:o:netapp:h700e_firmware:-:*:*:*:*:*:*:*
– netapp h410c_firmware All versions
cpe:2.3:o:netapp:h410c_firmware:-:*:*:*:*:*:*:*
Debian:12 debian linux < 5.17.3-1
Fix: upgrade to 5.17.3-1
Original advisory text
A vulnerability was found in the pfkey_register function in net/key/af_key.c in the Linux kernel. This flaw allows a local, unprivileged user to gain access to kernel memory, leading to a system cr...
A vulnerability was found in the pfkey_register function in net/key/af_key.c in the Linux kernel. This flaw allows a local, unprivileged user to gain access to kernel memory, leading to a system crash or a leak of internal kernel information.
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker partial control (estimated)
Severity
6.3 Medium
Exploitation
<1% chance of attack within 30 days
Type
CWE-200Information Exposure
Timeline
Published29 Apr 2022
Updated4 Nov 2026
First seen17 Jun 2026
Track software like this
Free during beta