Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
5.5
CVE-2022-49180: Linux kernel may crash processing mount options
CVE-2022-49180 · published 1 year ago
Summary
The Linux kernel used in several Linux distributions can experience a crash when it handles certain mount settings. This occurs because the security modules give confusing responses, leading the system to stop working. Updating the kernel to the latest version provided by your Linux vendor will fix the issue.
What to do
- Update canonical linux-aws-5.4 to version 5.4.0-1078.84~18.04.1.
- Update canonical linux-azure-5.4 to version 5.4.0-1083.87~18.04.1.
- Update canonical linux-gcp-5.4 to version 5.4.0-1078.84~18.04.1.
- Update canonical linux-hwe-5.4 to version 5.4.0-117.132~18.04.1.
- Update canonical linux-ibm-5.4 to version 5.4.0-1028.32~18.04.1.
- Update canonical linux-oracle-5.4 to version 5.4.0-1076.83~18.04.1.
- Update canonical linux-raspi-5.4 to version 5.4.0-1065.75~18.04.1.
- Update canonical linux to version 5.4.0-117.132.
- Update canonical linux-aws to version 5.4.0-1078.84.
- Update canonical linux-azure to version 5.4.0-1083.87.
- Update canonical linux-azure-5.15 to version 5.15.0-1008.9~20.04.1.
- Update canonical linux-bluefield to version 5.4.0-1040.44.
- Update canonical linux-gcp to version 5.4.0-1078.84.
- Update canonical linux-hwe-5.15 to version 5.15.0-41.44~20.04.1.
- Update canonical linux-ibm to version 5.4.0-1026.29.
- Update canonical linux-intel-iotg-5.15 to version 5.15.0-1008.11~20.04.1.
- Update canonical linux-iot to version 5.4.0-1004.6.
- Update canonical linux-kvm to version 5.4.0-1068.72.
- Update canonical linux-lowlatency-hwe-5.15 to version 5.15.0-42.45~20.04.1.
- Update canonical linux-oracle to version 5.4.0-1076.83.
- Update canonical linux-raspi to version 5.4.0-1065.75.
- Update canonical linux-aws-fips to version 5.4.0-1078.84+fips1.
- Update canonical linux-azure-fips to version 5.4.0-1083.87+fips1.
- Update canonical linux-fips to version 5.4.0-1054.61.
- Update canonical linux-gcp-fips to version 5.4.0-1078.84+fips1.
- Update canonical linux to version 5.15.0-37.39.
- Update canonical linux-aws to version 5.15.0-1011.14.
- Update canonical linux-azure to version 5.15.0-1010.12.
- Update canonical linux-gcp to version 5.15.0-1008.12.
- Update canonical linux-gke to version 5.15.0-1008.10.
- Update canonical linux-ibm to version 5.15.0-1007.8.
- Update canonical linux-intel-iotg to version 5.15.0-1008.11.
- Update canonical linux-kvm to version 5.15.0-1010.11.
- Update canonical linux-lowlatency to version 5.15.0-37.39.
- Update canonical linux-oracle to version 5.15.0-1009.12.
- Update canonical linux-raspi to version 5.15.0-1011.13.
- Update canonical linux-realtime to version 5.15.0-1014.14.
- Update canonical linux-azure-fde-5.15 to version 5.15.0-1114.123~20.04.1.
- Update debian linux to version 5.17.3-1.
- Update linux kernel to version 5.17.2.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| – | linux | linux_kernel |
< 5.4.189 >= 5.5, < 5.10.110 >= 5.11, < 5.15.33 >= 5.16, < 5.16.19 >= 5.17, < 5.17.2 cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Ubuntu:20.04:LTS | canonical | linux-gke | All versions |
| Ubuntu:26.04 | canonical | linux-nvidia | All versions |
| Ubuntu:Pro:14.04:LTS | canonical | linux | All versions |
| Ubuntu:Pro:14.04:LTS | canonical | linux-aws | All versions |
| Ubuntu:Pro:14.04:LTS | canonical | linux-azure | All versions |
| Ubuntu:Pro:14.04:LTS | canonical | linux-lts-xenial | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux-aws | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux-aws-hwe | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux-azure | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux-gcp | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux-hwe | All versions |
| Ubuntu:16.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux-kvm | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux-oracle | All versions |
| Ubuntu:Pro:FIPS:16.04:LTS | canonical | linux-fips | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.4 |
< 5.4.0-1078.84~18.04.1 Fix: upgrade to 5.4.0-1078.84~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-azure-5.4 |
< 5.4.0-1083.87~18.04.1 Fix: upgrade to 5.4.0-1083.87~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-gcp-5.4 |
< 5.4.0-1078.84~18.04.1 Fix: upgrade to 5.4.0-1078.84~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-hwe-5.4 |
< 5.4.0-117.132~18.04.1 Fix: upgrade to 5.4.0-117.132~18.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-azure-5.8 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-ibm-5.4 |
< 5.4.0-1028.32~18.04.1 Fix: upgrade to 5.4.0-1028.32~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.4 |
< 5.4.0-1076.83~18.04.1 Fix: upgrade to 5.4.0-1076.83~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-raspi-5.4 |
< 5.4.0-1065.75~18.04.1 Fix: upgrade to 5.4.0-1065.75~18.04.1
|
| Ubuntu:Pro:18.04:LTS | canonical | linux | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-aws | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-azure-4.15 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-gcp-4.15 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-4.15 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gkeop-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-hwe | All versions |
| Ubuntu:18.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-kvm | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oem | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-oracle | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.3 | All versions |
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-aws-fips | All versions |
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-azure-fips | All versions |
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-fips | All versions |
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-gcp-fips | All versions |
Showing 50 of 152. Show the rest
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:Pro:FIPS:18.04:LTS | canonical | linux-aws-fips | All versions |
| Ubuntu:Pro:FIPS:18.04:LTS | canonical | linux-azure-fips | All versions |
| Ubuntu:Pro:FIPS:18.04:LTS | canonical | linux-fips | All versions |
| Ubuntu:Pro:FIPS:18.04:LTS | canonical | linux-gcp-fips | All versions |
| Ubuntu:20.04:LTS | canonical | linux |
< 5.4.0-117.132 Fix: upgrade to 5.4.0-117.132
|
| Ubuntu:20.04:LTS | canonical | linux-aws |
< 5.4.0-1078.84 Fix: upgrade to 5.4.0-1078.84
|
| Ubuntu:20.04:LTS | canonical | linux-azure |
< 5.4.0-1083.87 Fix: upgrade to 5.4.0-1083.87
|
| Ubuntu:20.04:LTS | canonical | linux-azure-5.15 |
< 5.15.0-1008.9~20.04.1 Fix: upgrade to 5.15.0-1008.9~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-bluefield |
< 5.4.0-1040.44 Fix: upgrade to 5.4.0-1040.44
|
| Ubuntu:20.04:LTS | canonical | linux-gcp |
< 5.4.0-1078.84 Fix: upgrade to 5.4.0-1078.84
|
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.15 |
< 5.15.0-41.44~20.04.1 Fix: upgrade to 5.15.0-41.44~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-ibm |
< 5.4.0-1026.29 Fix: upgrade to 5.4.0-1026.29
|
| Ubuntu:20.04:LTS | canonical | linux-intel-iotg-5.15 |
< 5.15.0-1008.11~20.04.1 Fix: upgrade to 5.15.0-1008.11~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-iot |
< 5.4.0-1004.6 Fix: upgrade to 5.4.0-1004.6
|
| Ubuntu:20.04:LTS | canonical | linux-kvm |
< 5.4.0-1068.72 Fix: upgrade to 5.4.0-1068.72
|
| Ubuntu:20.04:LTS | canonical | linux-lowlatency-hwe-5.15 |
< 5.15.0-42.45~20.04.1 Fix: upgrade to 5.15.0-42.45~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-oracle |
< 5.4.0-1076.83 Fix: upgrade to 5.4.0-1076.83
|
| Ubuntu:20.04:LTS | canonical | linux-raspi |
< 5.4.0-1065.75 Fix: upgrade to 5.4.0-1065.75
|
| Ubuntu:20.04:LTS | canonical | linux-aws-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-fde | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-azure-fde-5.15 |
< 5.15.0-1114.123~20.04.1 Fix: upgrade to 5.15.0-1114.123~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gkeop | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gkeop-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-intel-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.10 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.14 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.6 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-raspi2 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.8 | All versions |
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-aws-fips |
< 5.4.0-1078.84+fips1 Fix: upgrade to 5.4.0-1078.84+fips1
|
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-azure-fips |
< 5.4.0-1083.87+fips1 Fix: upgrade to 5.4.0-1083.87+fips1
|
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-fips |
< 5.4.0-1054.61 Fix: upgrade to 5.4.0-1054.61
|
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-gcp-fips |
< 5.4.0-1078.84+fips1 Fix: upgrade to 5.4.0-1078.84+fips1
|
| Ubuntu:Pro:FIPS:20.04:LTS | canonical | linux-aws-fips | All versions |
| Ubuntu:Pro:FIPS:20.04:LTS | canonical | linux-azure-fips | All versions |
| Ubuntu:Pro:FIPS:20.04:LTS | canonical | linux-fips | All versions |
| Ubuntu:Pro:FIPS:20.04:LTS | canonical | linux-gcp-fips | All versions |
| Ubuntu:22.04:LTS | canonical | linux |
< 5.15.0-37.39 Fix: upgrade to 5.15.0-37.39
|
| Ubuntu:22.04:LTS | canonical | linux-allwinner-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws |
< 5.15.0-1011.14 Fix: upgrade to 5.15.0-1011.14
|
| Ubuntu:22.04:LTS | canonical | linux-aws-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure |
< 5.15.0-1010.12 Fix: upgrade to 5.15.0-1010.12
|
| Ubuntu:22.04:LTS | canonical | linux-azure-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp |
< 5.15.0-1008.12 Fix: upgrade to 5.15.0-1008.12
|
| Ubuntu:22.04:LTS | canonical | linux-gcp-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gke |
< 5.15.0-1008.10 Fix: upgrade to 5.15.0-1008.10
|
| Ubuntu:22.04:LTS | canonical | linux-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-ibm |
< 5.15.0-1007.8 Fix: upgrade to 5.15.0-1007.8
|
| Ubuntu:22.04:LTS | canonical | linux-intel-iot-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-intel-iotg |
< 5.15.0-1008.11 Fix: upgrade to 5.15.0-1008.11
|
| Ubuntu:22.04:LTS | canonical | linux-kvm |
< 5.15.0-1010.11 Fix: upgrade to 5.15.0-1010.11
|
| Ubuntu:22.04:LTS | canonical | linux-lowlatency |
< 5.15.0-37.39 Fix: upgrade to 5.15.0-37.39
|
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-5.17 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.0 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.1 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oracle |
< 5.15.0-1009.12 Fix: upgrade to 5.15.0-1009.12
|
| Ubuntu:22.04:LTS | canonical | linux-oracle-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-raspi |
< 5.15.0-1011.13 Fix: upgrade to 5.15.0-1011.13
|
| Ubuntu:22.04:LTS | canonical | linux-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.5 | All versions |
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-realtime |
< 5.15.0-1014.14 Fix: upgrade to 5.15.0-1014.14
|
| Ubuntu:24.04:LTS | canonical | linux-raspi-realtime | All versions |
| Debian:12 | debian | linux |
< 5.17.3-1 Fix: upgrade to 5.17.3-1
|
| Linux | linux | kernel |
>= 5.17.0, < 5.17.2 Fix: upgrade to 5.17.2
|
Original advisory text
LSM: general protection fault in legacy_parse_param
In the Linux kernel, the following vulnerability has been resolved: LSM: general protection fault in legacy_parse_param The usual LSM hook "bail on fail" scheme doesn't work for cases where a security module may return an error code indicating that it does not recognize an input. In this particular case Smack sees a mount option that it recognizes, and returns 0. A call to a BPF hook follows, which returns -ENOPARAM, which confuses the caller because Smack has processed its data. The SELinux hook incorrectly returns 1 on success. There was a time when this was correct, however the current expectation is that it return 0 on success. This is repaired.
References
- https://www.cve.org/CVERecord?id=CVE-2022-49180 Third Party Advisory
- https://git.kernel.org/linus/ecff30575b5ad0eda149aadad247b7f75411fd47 Third Party Advisory
- https://security-tracker.debian.org/tracker/CVE-2022-49180 Vendor Advisory
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49180... Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2022-49180 Vendor Advisory
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git Product
- https://git.kernel.org/stable/c/00fc07fa0b4a004711b6e1a944f0d2e46f7093b7 Third Party Advisory
- https://git.kernel.org/stable/c/2784604c8c6fc523248f8f80a421c313a9d790b7 Third Party Advisory
- https://git.kernel.org/stable/c/cadae7c5e477aaafcba819b8e4a3d1c1a1503b62 Third Party Advisory
- https://git.kernel.org/stable/c/ddcdda888e14ca451b3ee83d11b65b2a9c8e783b Third Party Advisory
- https://ubuntu.com/security/CVE-2022-49180 Third Party Advisory
- https://git.kernel.org/stable/c/ecff30575b5ad0eda149aadad247b7f75411fd47 Third Party Advisory
- https://git.kernel.org/stable/c/f3f93a1aaafc3032e0a9655fb43deccfb3e953a3 Third Party Advisory
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker partial control (estimated)
Timeline
Published26 Feb 2025
Updated4 Nov 2026
First seen7 Mar 2026
Sources
CVE-2022-49180 · NVD
UBUNTU-CVE-2022-49180 · OSV
DEBIAN-CVE-2022-49180 · OSV
CVE-2022-49180 · OSV
Track software like this
Free during beta