Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.8

CVE-2022-29581: Linux Azure and related images allow local privilege escalation

CVE-2022-29581 · published 4 years ago
Summary

The Linux images for Azure, AWS, GCP, HWE, and Oracle contain a code error that can corrupt memory after it is released. This flaw lets a user on the same system gain higher access rights without needing extra permissions or user interaction. Update the operating system to the latest version provided by Canonical to fix the issue.

What to do
  • Update canonical linux-azure to version 4.15.0-1139.152~14.04.1.
  • Update canonical linux-aws-hwe to version 4.15.0-1130.139~16.04.1.
  • Update canonical linux-azure to version 4.15.0-1139.152~16.04.1.
  • Update canonical linux-gcp to version 4.15.0-1124.138~16.04.1.
  • Update canonical linux-hwe to version 4.15.0-180.189~16.04.1.
  • Update canonical linux-oracle to version 4.15.0-1095.104~16.04.1.
  • Update canonical linux to version 4.15.0-180.189.
  • Update canonical linux-aws to version 4.15.0-1130.139.
  • Update canonical linux-aws-5.4 to version 5.4.0-1075.80~18.04.1.
  • Update canonical linux-azure-4.15 to version 4.15.0-1139.152.
  • Update canonical linux-azure-5.4 to version 5.4.0-1080.83~18.04.2.
  • Update canonical linux-dell300x to version 4.15.0-1047.52.
  • Update canonical linux-gcp-4.15 to version 4.15.0-1124.138.
  • Update canonical linux-gcp-5.4 to version 5.4.0-1075.80~18.04.1.
  • Update canonical linux-gke-5.4 to version 5.4.0-1072.77~18.04.1.
  • Update canonical linux-gkeop-5.4 to version 5.4.0-1043.44~18.04.1.
  • Update canonical linux-hwe-5.4 to version 5.4.0-113.127~18.04.1.
  • Update canonical linux-ibm-5.4 to version 5.4.0-1023.25~18.04.1.
  • Update canonical linux-kvm to version 4.15.0-1116.119.
  • Update canonical linux-oracle to version 4.15.0-1095.104.
  • Update canonical linux-oracle-5.4 to version 5.4.0-1073.79~18.04.1.
  • Update canonical linux-raspi-5.4 to version 5.4.0-1062.70~18.04.1.
  • Update canonical linux-raspi2 to version 4.15.0-1111.118.
  • Update canonical linux-snapdragon to version 4.15.0-1129.138.
  • Update canonical linux-aws-fips to version 4.15.0-2069.72.
  • Update canonical linux-azure-fips to version 4.15.0-2050.54.
  • Update canonical linux-fips to version 4.15.0-1087.96.
  • Update canonical linux-gcp-fips to version 4.15.0-2034.37.
  • Update canonical linux to version 5.4.0-113.127.
  • Update canonical linux-aws to version 5.4.0-1075.80.
  • Update canonical linux-aws-5.13 to version 5.13.0-1025.27~20.04.1.
  • Update canonical linux-azure to version 5.4.0-1080.83.
  • Update canonical linux-azure-5.13 to version 5.13.0-1025.29~20.04.1.
  • Update canonical linux-bluefield to version 5.4.0-1036.39.
  • Update canonical linux-gcp to version 5.4.0-1075.80.
  • Update canonical linux-gcp-5.13 to version 5.13.0-1027.32~20.04.1.
  • Update canonical linux-gke to version 5.4.0-1072.77.
  • Update canonical linux-gkeop to version 5.4.0-1043.44.
  • Update canonical linux-hwe-5.13 to version 5.13.0-44.49~20.04.1.
  • Update canonical linux-ibm to version 5.4.0-1023.25.
  • Update canonical linux-intel-iotg-5.15 to version 5.15.0-1008.11~20.04.1.
  • Update canonical linux-iot to version 5.4.0-1004.6.
  • Update canonical linux-kvm to version 5.4.0-1065.68.
  • Update canonical linux-oem-5.14 to version 5.14.0-1038.42.
  • Update canonical linux-oracle to version 5.4.0-1073.79.
  • Update canonical linux-oracle-5.13 to version 5.13.0-1030.35~20.04.1.
  • Update canonical linux-raspi to version 5.4.0-1062.70.
  • Update canonical linux-aws-fips to version 5.4.0-1078.84+fips1.
  • Update canonical linux-azure-fips to version 5.4.0-1080.83+fips1.
  • Update canonical linux-fips to version 5.4.0-1051.57.
  • Update canonical linux-gcp-fips to version 5.4.0-1075.80+fips1.
  • Update canonical linux to version 5.15.0-33.34.
  • Update canonical linux-aws to version 5.15.0-1008.10.
  • Update canonical linux-azure to version 5.15.0-1007.8.
  • Update canonical linux-gcp to version 5.15.0-1005.8.
  • Update canonical linux-gke to version 5.15.0-1005.6.
  • Update canonical linux-ibm to version 5.15.0-1004.4.
  • Update canonical linux-intel-iotg to version 5.15.0-1008.11.
  • Update canonical linux-kvm to version 5.15.0-1007.7.
  • Update canonical linux-lowlatency to version 5.15.0-33.34.
  • Update canonical linux-oem-5.17 to version 5.17.0-1006.6.
  • Update canonical linux-oracle to version 5.15.0-1006.8.
  • Update canonical linux-raspi to version 5.15.0-1008.8.
  • Update canonical linux-riscv to version 5.15.0-1011.12.
  • Update canonical linux-realtime to version 5.15.0-1011.11.
  • Update google :linux_kernel: to version :2022-08-05.
  • Update debian linux to version 5.17.6-1.
Affected software
Ecosystem VendorProductAffected versions
Ubuntu:Pro:14.04:LTS canonical linux-azure < 4.15.0-1139.152~14.04.1
Fix: upgrade to 4.15.0-1139.152~14.04.1
Ubuntu:Pro:16.04:LTS canonical linux-aws-hwe < 4.15.0-1130.139~16.04.1
Fix: upgrade to 4.15.0-1130.139~16.04.1
Ubuntu:Pro:16.04:LTS canonical linux-azure < 4.15.0-1139.152~16.04.1
Fix: upgrade to 4.15.0-1139.152~16.04.1
Ubuntu:Pro:16.04:LTS canonical linux-gcp < 4.15.0-1124.138~16.04.1
Fix: upgrade to 4.15.0-1124.138~16.04.1
Ubuntu:Pro:16.04:LTS canonical linux-hwe < 4.15.0-180.189~16.04.1
Fix: upgrade to 4.15.0-180.189~16.04.1
Ubuntu:Pro:16.04:LTS canonical linux-oracle < 4.15.0-1095.104~16.04.1
Fix: upgrade to 4.15.0-1095.104~16.04.1
Ubuntu:16.04:LTS canonical linux-hwe-edge All versions
Ubuntu:18.04:LTS canonical linux < 4.15.0-180.189
Fix: upgrade to 4.15.0-180.189
Ubuntu:18.04:LTS canonical linux-aws < 4.15.0-1130.139
Fix: upgrade to 4.15.0-1130.139
Ubuntu:18.04:LTS canonical linux-aws-5.4 < 5.4.0-1075.80~18.04.1
Fix: upgrade to 5.4.0-1075.80~18.04.1
Ubuntu:18.04:LTS canonical linux-azure-4.15 < 4.15.0-1139.152
Fix: upgrade to 4.15.0-1139.152
Ubuntu:18.04:LTS canonical linux-azure-5.4 < 5.4.0-1080.83~18.04.2
Fix: upgrade to 5.4.0-1080.83~18.04.2
Ubuntu:18.04:LTS canonical linux-dell300x < 4.15.0-1047.52
Fix: upgrade to 4.15.0-1047.52
Ubuntu:18.04:LTS canonical linux-gcp-4.15 < 4.15.0-1124.138
Fix: upgrade to 4.15.0-1124.138
Ubuntu:18.04:LTS canonical linux-gcp-5.4 < 5.4.0-1075.80~18.04.1
Fix: upgrade to 5.4.0-1075.80~18.04.1
Ubuntu:18.04:LTS canonical linux-gke-5.4 < 5.4.0-1072.77~18.04.1
Fix: upgrade to 5.4.0-1072.77~18.04.1
Ubuntu:18.04:LTS canonical linux-gkeop-5.4 < 5.4.0-1043.44~18.04.1
Fix: upgrade to 5.4.0-1043.44~18.04.1
Ubuntu:18.04:LTS canonical linux-hwe-5.4 < 5.4.0-113.127~18.04.1
Fix: upgrade to 5.4.0-113.127~18.04.1
Ubuntu:18.04:LTS canonical linux-ibm-5.4 < 5.4.0-1023.25~18.04.1
Fix: upgrade to 5.4.0-1023.25~18.04.1
Ubuntu:18.04:LTS canonical linux-kvm < 4.15.0-1116.119
Fix: upgrade to 4.15.0-1116.119
Ubuntu:18.04:LTS canonical linux-oracle < 4.15.0-1095.104
Fix: upgrade to 4.15.0-1095.104
Ubuntu:18.04:LTS canonical linux-oracle-5.4 < 5.4.0-1073.79~18.04.1
Fix: upgrade to 5.4.0-1073.79~18.04.1
Ubuntu:18.04:LTS canonical linux-raspi-5.4 < 5.4.0-1062.70~18.04.1
Fix: upgrade to 5.4.0-1062.70~18.04.1
Ubuntu:18.04:LTS canonical linux-raspi2 < 4.15.0-1111.118
Fix: upgrade to 4.15.0-1111.118
Ubuntu:18.04:LTS canonical linux-snapdragon < 4.15.0-1129.138
Fix: upgrade to 4.15.0-1129.138
Ubuntu:18.04:LTS canonical linux-aws-5.0 All versions
Ubuntu:18.04:LTS canonical linux-aws-5.3 All versions
Ubuntu:18.04:LTS canonical linux-azure All versions
Ubuntu:18.04:LTS canonical linux-azure-5.3 All versions
Ubuntu:18.04:LTS canonical linux-azure-edge All versions
Ubuntu:18.04:LTS canonical linux-gcp All versions
Ubuntu:18.04:LTS canonical linux-gcp-5.3 All versions
Ubuntu:18.04:LTS canonical linux-gke-4.15 All versions
Ubuntu:18.04:LTS canonical linux-hwe All versions
Ubuntu:18.04:LTS canonical linux-hwe-edge All versions
Ubuntu:18.04:LTS canonical linux-oem All versions
Ubuntu:18.04:LTS canonical linux-oracle-5.0 All versions
Ubuntu:18.04:LTS canonical linux-oracle-5.3 All versions
Ubuntu:Pro:FIPS-updates:18.04:LTS canonical linux-aws-fips < 4.15.0-2069.72
Fix: upgrade to 4.15.0-2069.72
Ubuntu:Pro:FIPS-updates:18.04:LTS canonical linux-azure-fips < 4.15.0-2050.54
Fix: upgrade to 4.15.0-2050.54
Ubuntu:Pro:FIPS-updates:18.04:LTS canonical linux-fips < 4.15.0-1087.96
Fix: upgrade to 4.15.0-1087.96
Ubuntu:Pro:FIPS-updates:18.04:LTS canonical linux-gcp-fips < 4.15.0-2034.37
Fix: upgrade to 4.15.0-2034.37
Ubuntu:Pro:FIPS:18.04:LTS canonical linux-aws-fips All versions
Ubuntu:Pro:FIPS:18.04:LTS canonical linux-azure-fips All versions
Ubuntu:Pro:FIPS:18.04:LTS canonical linux-fips All versions
Ubuntu:Pro:FIPS:18.04:LTS canonical linux-gcp-fips All versions
Ubuntu:20.04:LTS canonical linux < 5.4.0-113.127
Fix: upgrade to 5.4.0-113.127
Ubuntu:20.04:LTS canonical linux-aws < 5.4.0-1075.80
Fix: upgrade to 5.4.0-1075.80
Ubuntu:20.04:LTS canonical linux-aws-5.13 < 5.13.0-1025.27~20.04.1
Fix: upgrade to 5.13.0-1025.27~20.04.1
Ubuntu:20.04:LTS canonical linux-azure < 5.4.0-1080.83
Fix: upgrade to 5.4.0-1080.83
Showing 50 of 127. Show the rest
Ecosystem VendorProductAffected versions
Ubuntu:20.04:LTS canonical linux-azure-5.13 < 5.13.0-1025.29~20.04.1
Fix: upgrade to 5.13.0-1025.29~20.04.1
Ubuntu:20.04:LTS canonical linux-bluefield < 5.4.0-1036.39
Fix: upgrade to 5.4.0-1036.39
Ubuntu:20.04:LTS canonical linux-gcp < 5.4.0-1075.80
Fix: upgrade to 5.4.0-1075.80
Ubuntu:20.04:LTS canonical linux-gcp-5.13 < 5.13.0-1027.32~20.04.1
Fix: upgrade to 5.13.0-1027.32~20.04.1
Ubuntu:20.04:LTS canonical linux-gke < 5.4.0-1072.77
Fix: upgrade to 5.4.0-1072.77
Ubuntu:20.04:LTS canonical linux-gkeop < 5.4.0-1043.44
Fix: upgrade to 5.4.0-1043.44
Ubuntu:20.04:LTS canonical linux-hwe-5.13 < 5.13.0-44.49~20.04.1
Fix: upgrade to 5.13.0-44.49~20.04.1
Ubuntu:20.04:LTS canonical linux-ibm < 5.4.0-1023.25
Fix: upgrade to 5.4.0-1023.25
Ubuntu:20.04:LTS canonical linux-intel-iotg-5.15 < 5.15.0-1008.11~20.04.1
Fix: upgrade to 5.15.0-1008.11~20.04.1
Ubuntu:20.04:LTS canonical linux-iot < 5.4.0-1004.6
Fix: upgrade to 5.4.0-1004.6
Ubuntu:20.04:LTS canonical linux-kvm < 5.4.0-1065.68
Fix: upgrade to 5.4.0-1065.68
Ubuntu:20.04:LTS canonical linux-oem-5.14 < 5.14.0-1038.42
Fix: upgrade to 5.14.0-1038.42
Ubuntu:20.04:LTS canonical linux-oracle < 5.4.0-1073.79
Fix: upgrade to 5.4.0-1073.79
Ubuntu:20.04:LTS canonical linux-oracle-5.13 < 5.13.0-1030.35~20.04.1
Fix: upgrade to 5.13.0-1030.35~20.04.1
Ubuntu:20.04:LTS canonical linux-raspi < 5.4.0-1062.70
Fix: upgrade to 5.4.0-1062.70
Ubuntu:20.04:LTS canonical linux-aws-5.11 All versions
Ubuntu:20.04:LTS canonical linux-aws-5.8 All versions
Ubuntu:20.04:LTS canonical linux-azure-5.11 All versions
Ubuntu:20.04:LTS canonical linux-azure-5.8 All versions
Ubuntu:20.04:LTS canonical linux-gcp-5.11 All versions
Ubuntu:20.04:LTS canonical linux-gcp-5.8 All versions
Ubuntu:20.04:LTS canonical linux-hwe-5.11 All versions
Ubuntu:20.04:LTS canonical linux-hwe-5.8 All versions
Ubuntu:20.04:LTS canonical linux-intel-5.13 All versions
Ubuntu:20.04:LTS canonical linux-oem-5.10 All versions
Ubuntu:20.04:LTS canonical linux-oem-5.13 All versions
Ubuntu:20.04:LTS canonical linux-oem-5.6 All versions
Ubuntu:20.04:LTS canonical linux-oracle-5.11 All versions
Ubuntu:20.04:LTS canonical linux-oracle-5.8 All versions
Ubuntu:20.04:LTS canonical linux-raspi2 All versions
Ubuntu:20.04:LTS canonical linux-riscv All versions
Ubuntu:20.04:LTS canonical linux-riscv-5.11 All versions
Ubuntu:20.04:LTS canonical linux-riscv-5.8 All versions
Ubuntu:Pro:FIPS-updates:20.04:LTS canonical linux-aws-fips < 5.4.0-1078.84+fips1
Fix: upgrade to 5.4.0-1078.84+fips1
Ubuntu:Pro:FIPS-updates:20.04:LTS canonical linux-azure-fips < 5.4.0-1080.83+fips1
Fix: upgrade to 5.4.0-1080.83+fips1
Ubuntu:Pro:FIPS-updates:20.04:LTS canonical linux-fips < 5.4.0-1051.57
Fix: upgrade to 5.4.0-1051.57
Ubuntu:Pro:FIPS-updates:20.04:LTS canonical linux-gcp-fips < 5.4.0-1075.80+fips1
Fix: upgrade to 5.4.0-1075.80+fips1
Ubuntu:Pro:FIPS:20.04:LTS canonical linux-aws-fips All versions
Ubuntu:Pro:FIPS:20.04:LTS canonical linux-azure-fips All versions
Ubuntu:Pro:FIPS:20.04:LTS canonical linux-fips All versions
Ubuntu:Pro:FIPS:20.04:LTS canonical linux-gcp-fips All versions
Ubuntu:22.04:LTS canonical linux < 5.15.0-33.34
Fix: upgrade to 5.15.0-33.34
Ubuntu:22.04:LTS canonical linux-aws < 5.15.0-1008.10
Fix: upgrade to 5.15.0-1008.10
Ubuntu:22.04:LTS canonical linux-azure < 5.15.0-1007.8
Fix: upgrade to 5.15.0-1007.8
Ubuntu:22.04:LTS canonical linux-gcp < 5.15.0-1005.8
Fix: upgrade to 5.15.0-1005.8
Ubuntu:22.04:LTS canonical linux-gke < 5.15.0-1005.6
Fix: upgrade to 5.15.0-1005.6
Ubuntu:22.04:LTS canonical linux-ibm < 5.15.0-1004.4
Fix: upgrade to 5.15.0-1004.4
Ubuntu:22.04:LTS canonical linux-intel-iot-realtime All versions
Ubuntu:22.04:LTS canonical linux-intel-iotg < 5.15.0-1008.11
Fix: upgrade to 5.15.0-1008.11
Ubuntu:22.04:LTS canonical linux-kvm < 5.15.0-1007.7
Fix: upgrade to 5.15.0-1007.7
Ubuntu:22.04:LTS canonical linux-lowlatency < 5.15.0-33.34
Fix: upgrade to 5.15.0-33.34
Ubuntu:22.04:LTS canonical linux-oem-5.17 < 5.17.0-1006.6
Fix: upgrade to 5.17.0-1006.6
Ubuntu:22.04:LTS canonical linux-oem-6.0 All versions
Ubuntu:22.04:LTS canonical linux-oracle < 5.15.0-1006.8
Fix: upgrade to 5.15.0-1006.8
Ubuntu:22.04:LTS canonical linux-raspi < 5.15.0-1008.8
Fix: upgrade to 5.15.0-1008.8
Ubuntu:22.04:LTS canonical linux-realtime All versions
Ubuntu:22.04:LTS canonical linux-riscv < 5.15.0-1011.12
Fix: upgrade to 5.15.0-1011.12
Ubuntu:Pro:Realtime:22.04:LTS canonical linux-realtime < 5.15.0-1011.11
Fix: upgrade to 5.15.0-1011.11
Ubuntu:24.04:LTS canonical linux-raspi-realtime All versions
Ubuntu:Nvidia-BlueField:24.04:LTS canonical linux-bluefield All versions
Ubuntu:26.04:LTS canonical linux-gke All versions
Ubuntu:26.04:LTS canonical linux-nvidia-bos All versions
Android google :linux_kernel: >= :0, < :2022-08-05
Fix: upgrade to :2022-08-05
Debian:12 debian linux < 5.17.6-1
Fix: upgrade to 5.17.6-1
Debian:13 debian linux < 5.17.6-1
Fix: upgrade to 5.17.6-1
Debian:14 debian linux < 5.17.6-1
Fix: upgrade to 5.17.6-1
– linux linux_kernel >= 4.14, < 4.14.278
>= 4.15, < 4.19.241
>= 4.20, < 5.4.191
>= 5.5, < 5.10.113
>= 5.11, < 5.15.36
>= 5.16, < 5.17.5
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
– debian debian_linux 10.0
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
– canonical ubuntu_linux 14.04
16.04
18.04
20.04
22.04
cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*
– netapp h300s_firmware All versions
cpe:2.3:o:netapp:h300s_firmware:-:*:*:*:*:*:*:*
– netapp h500s_firmware All versions
cpe:2.3:o:netapp:h500s_firmware:-:*:*:*:*:*:*:*
– netapp h700s_firmware All versions
cpe:2.3:o:netapp:h700s_firmware:-:*:*:*:*:*:*:*
– netapp h300e_firmware All versions
cpe:2.3:o:netapp:h300e_firmware:-:*:*:*:*:*:*:*
– netapp h500e_firmware All versions
cpe:2.3:o:netapp:h500e_firmware:-:*:*:*:*:*:*:*
– netapp h700e_firmware All versions
cpe:2.3:o:netapp:h700e_firmware:-:*:*:*:*:*:*:*
– netapp h410s_firmware All versions
cpe:2.3:o:netapp:h410s_firmware:-:*:*:*:*:*:*:*
– netapp h410c_firmware All versions
cpe:2.3:o:netapp:h410c_firmware:-:*:*:*:*:*:*:*
Original advisory text
In u32_destroy_key and related functions of cls_u32.c, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with no additional executi...
In u32_destroy_key and related functions of cls_u32.c, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker full control (estimated)
Severity
7.8 High
Exploitation
<1% chance of attack within 30 days
Type
CWE-911Improper Update of Reference Count
Timeline
Published1 Aug 2022
Updated4 Nov 2026
First seen2 Jul 2026
Sources
CVE-2022-29581 · NVD
Track software like this
Free during beta