Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
4.7
CVE-2022-49295: Linux kernel NBD module can crash when removed
CVE-2022-49295 · published 1 year ago
Summary
The Network Block Device (NBD) part of the Linux kernel could cause a system crash if the module is unloaded while a netlink command is still being processed. This race condition can lead to a kernel error that stops the system. Updating to a kernel version that fixes the cleanup order will prevent the crash.
What to do
- Update canonical linux-azure to version 4.15.0-1150.165~14.04.1.
- Update canonical linux-aws-hwe to version 4.15.0-1140.151~16.04.1.
- Update canonical linux-azure to version 4.15.0-1150.165~16.04.1.
- Update canonical linux-gcp to version 4.15.0-1135.151~16.04.2.
- Update canonical linux-hwe to version 4.15.0-192.203~16.04.1.
- Update canonical linux-oracle to version 4.15.0-1105.116~16.04.1.
- Update canonical linux to version 4.15.0-192.203.
- Update canonical linux-aws to version 4.15.0-1140.151.
- Update canonical linux-aws-5.4 to version 5.4.0-1085.92~18.04.1.
- Update canonical linux-azure-4.15 to version 4.15.0-1150.165.
- Update canonical linux-azure-5.4 to version 5.4.0-1091.96~18.04.1.
- Update canonical linux-gcp-4.15 to version 4.15.0-1135.151.
- Update canonical linux-gcp-5.4 to version 5.4.0-1089.97~18.04.1.
- Update canonical linux-azure-fde-5.15 to version 5.15.0-1114.123~20.04.1.
- Update canonical linux-hwe-5.4 to version 5.4.0-126.142~18.04.1.
- Update canonical linux-ibm-5.4 to version 5.4.0-1033.37~18.04.1.
- Update canonical linux-kvm to version 4.15.0-1126.131.
- Update canonical linux-oracle to version 4.15.0-1105.116.
- Update canonical linux-oracle-5.4 to version 5.4.0-1083.91~18.04.1.
- Update canonical linux-raspi-5.4 to version 5.4.0-1070.80~18.04.1.
- Update canonical linux-aws-fips to version 4.15.0-2079.84.
- Update canonical linux-azure-fips to version 4.15.0-2060.66.
- Update canonical linux-fips to version 4.15.0-1097.108.
- Update canonical linux-gcp-fips to version 4.15.0-2044.49.
- Update canonical linux to version 5.4.0-126.142.
- Update canonical linux-aws to version 5.4.0-1085.92.
- Update canonical linux-aws-5.15 to version 5.15.0-1020.24~20.04.1.
- Update canonical linux-azure to version 5.4.0-1091.96.
- Update canonical linux-azure-5.15 to version 5.15.0-1020.25~20.04.1.
- Update canonical linux-bluefield to version 5.4.0-1046.51.
- Update canonical linux-gcp to version 5.4.0-1089.97.
- Update canonical linux-gcp-5.15 to version 5.15.0-1018.24~20.04.1.
- Update canonical linux-hwe-5.15 to version 5.15.0-48.54~20.04.1.
- Update canonical linux-ibm to version 5.4.0-1033.37.
- Update canonical linux-intel-iotg-5.15 to version 5.15.0-1016.21~20.04.1.
- Update canonical linux-iot to version 5.4.0-1004.6.
- Update canonical linux-kvm to version 5.4.0-1075.80.
- Update canonical linux-lowlatency-hwe-5.15 to version 5.15.0-48.54~20.04.1.
- Update canonical linux-oracle to version 5.4.0-1083.91.
- Update canonical linux-oracle-5.15 to version 5.15.0-1018.23~20.04.1.
- Update canonical linux-raspi to version 5.4.0-1070.80.
- Update canonical linux-riscv-5.15 to version 5.15.0-1019.22~20.04.1.
- Update canonical linux-aws-fips to version 5.4.0-1085.92+fips1.
- Update canonical linux-azure-fips to version 5.4.0-1091.96+fips1.
- Update canonical linux-fips to version 5.4.0-1061.69.
- Update canonical linux-gcp-fips to version 5.4.0-1089.97+fips1.
- Update canonical linux to version 5.15.0-48.54.
- Update canonical linux-aws to version 5.15.0-1020.24.
- Update canonical linux-azure to version 5.15.0-1020.25.
- Update canonical linux-gcp to version 5.15.0-1018.24.
- Update canonical linux-gke to version 5.15.0-1016.19.
- Update canonical linux-gkeop to version 5.15.0-1003.5.
- Update canonical linux-ibm to version 5.15.0-1015.17.
- Update canonical linux-intel-iotg to version 5.15.0-1016.21.
- Update canonical linux-kvm to version 5.15.0-1018.22.
- Update canonical linux-lowlatency to version 5.15.0-48.54.
- Update canonical linux-nvidia to version 5.15.0-1007.7.
- Update canonical linux-oracle to version 5.15.0-1018.23.
- Update canonical linux-raspi to version 5.15.0-1015.17.
- Update canonical linux-realtime to version 5.15.0-1021.21.
- Update canonical linux-azure-fde to version 5.15.0-1024.30.1.
- Update debian linux to version 5.18.5-1.
- Update linux kernel to version 5.18.4.
- Update linux linux to version 8a1435c862ea09b06be7acda325128dc08458e25 or later.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| – | linux | linux_kernel |
< 4.14.283 >= 4.15, < 4.19.247 >= 4.20, < 5.4.198 >= 5.5, < 5.10.122 >= 5.11, < 5.15.47 >= 5.16, < 5.17.15 >= 5.18, < 5.18.4 cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Ubuntu:Pro:14.04:LTS | canonical | linux-azure |
< 4.15.0-1150.165~14.04.1 Fix: upgrade to 4.15.0-1150.165~14.04.1
|
| Ubuntu:Pro:14.04:LTS | canonical | linux | All versions |
| Ubuntu:Pro:14.04:LTS | canonical | linux-aws | All versions |
| Ubuntu:Pro:14.04:LTS | canonical | linux-lts-xenial | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux-aws | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux-aws-hwe |
< 4.15.0-1140.151~16.04.1 Fix: upgrade to 4.15.0-1140.151~16.04.1
|
| Ubuntu:Pro:16.04:LTS | canonical | linux-azure |
< 4.15.0-1150.165~16.04.1 Fix: upgrade to 4.15.0-1150.165~16.04.1
|
| Ubuntu:Pro:16.04:LTS | canonical | linux-gcp |
< 4.15.0-1135.151~16.04.2 Fix: upgrade to 4.15.0-1135.151~16.04.2
|
| Ubuntu:Pro:16.04:LTS | canonical | linux-hwe |
< 4.15.0-192.203~16.04.1 Fix: upgrade to 4.15.0-192.203~16.04.1
|
| Ubuntu:16.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux-kvm | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux-oracle |
< 4.15.0-1105.116~16.04.1 Fix: upgrade to 4.15.0-1105.116~16.04.1
|
| Ubuntu:Pro:FIPS:16.04:LTS | canonical | linux-fips | All versions |
| Ubuntu:18.04:LTS | canonical | linux |
< 4.15.0-192.203 Fix: upgrade to 4.15.0-192.203
|
| Ubuntu:18.04:LTS | canonical | linux-aws |
< 4.15.0-1140.151 Fix: upgrade to 4.15.0-1140.151
|
| Ubuntu:18.04:LTS | canonical | linux-aws-5.4 |
< 5.4.0-1085.92~18.04.1 Fix: upgrade to 5.4.0-1085.92~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-azure-4.15 |
< 4.15.0-1150.165 Fix: upgrade to 4.15.0-1150.165
|
| Ubuntu:18.04:LTS | canonical | linux-azure-5.4 |
< 5.4.0-1091.96~18.04.1 Fix: upgrade to 5.4.0-1091.96~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-gcp-4.15 |
< 4.15.0-1135.151 Fix: upgrade to 4.15.0-1135.151
|
| Ubuntu:18.04:LTS | canonical | linux-gcp-5.4 |
< 5.4.0-1089.97~18.04.1 Fix: upgrade to 5.4.0-1089.97~18.04.1
|
| – | linux | linux |
< 8a1435c862ea09b06be7acda325128dc08458e25 4.12 |
| Ubuntu:Pro:20.04:LTS | canonical | linux-azure-fde-5.15 |
< 5.15.0-1114.123~20.04.1 Fix: upgrade to 5.15.0-1114.123~20.04.1
|
| Ubuntu:Nvidia-BlueField:24.04:LTS | canonical | linux-bluefield | All versions |
| Ubuntu:18.04:LTS | canonical | linux-hwe-5.4 |
< 5.4.0-126.142~18.04.1 Fix: upgrade to 5.4.0-126.142~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-ibm-5.4 |
< 5.4.0-1033.37~18.04.1 Fix: upgrade to 5.4.0-1033.37~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-kvm |
< 4.15.0-1126.131 Fix: upgrade to 4.15.0-1126.131
|
| Ubuntu:18.04:LTS | canonical | linux-oracle |
< 4.15.0-1105.116 Fix: upgrade to 4.15.0-1105.116
|
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.4 |
< 5.4.0-1083.91~18.04.1 Fix: upgrade to 5.4.0-1083.91~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-raspi-5.4 |
< 5.4.0-1070.80~18.04.1 Fix: upgrade to 5.4.0-1070.80~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-aws-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-4.15 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gkeop-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-hwe | All versions |
| Ubuntu:18.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oem | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.3 | All versions |
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-aws-fips |
< 4.15.0-2079.84 Fix: upgrade to 4.15.0-2079.84
|
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-azure-fips |
< 4.15.0-2060.66 Fix: upgrade to 4.15.0-2060.66
|
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-fips |
< 4.15.0-1097.108 Fix: upgrade to 4.15.0-1097.108
|
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-gcp-fips |
< 4.15.0-2044.49 Fix: upgrade to 4.15.0-2044.49
|
Showing 50 of 160. Show the rest
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:Pro:FIPS:18.04:LTS | canonical | linux-aws-fips | All versions |
| Ubuntu:Pro:FIPS:18.04:LTS | canonical | linux-azure-fips | All versions |
| Ubuntu:Pro:FIPS:18.04:LTS | canonical | linux-fips | All versions |
| Ubuntu:Pro:FIPS:18.04:LTS | canonical | linux-gcp-fips | All versions |
| Ubuntu:20.04:LTS | canonical | linux |
< 5.4.0-126.142 Fix: upgrade to 5.4.0-126.142
|
| Ubuntu:20.04:LTS | canonical | linux-aws |
< 5.4.0-1085.92 Fix: upgrade to 5.4.0-1085.92
|
| Ubuntu:20.04:LTS | canonical | linux-aws-5.15 |
< 5.15.0-1020.24~20.04.1 Fix: upgrade to 5.15.0-1020.24~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-azure |
< 5.4.0-1091.96 Fix: upgrade to 5.4.0-1091.96
|
| Ubuntu:20.04:LTS | canonical | linux-azure-5.15 |
< 5.15.0-1020.25~20.04.1 Fix: upgrade to 5.15.0-1020.25~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-bluefield |
< 5.4.0-1046.51 Fix: upgrade to 5.4.0-1046.51
|
| Ubuntu:20.04:LTS | canonical | linux-gcp |
< 5.4.0-1089.97 Fix: upgrade to 5.4.0-1089.97
|
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.15 |
< 5.15.0-1018.24~20.04.1 Fix: upgrade to 5.15.0-1018.24~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.15 |
< 5.15.0-48.54~20.04.1 Fix: upgrade to 5.15.0-48.54~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-ibm |
< 5.4.0-1033.37 Fix: upgrade to 5.4.0-1033.37
|
| Ubuntu:20.04:LTS | canonical | linux-intel-iotg-5.15 |
< 5.15.0-1016.21~20.04.1 Fix: upgrade to 5.15.0-1016.21~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-iot |
< 5.4.0-1004.6 Fix: upgrade to 5.4.0-1004.6
|
| Ubuntu:20.04:LTS | canonical | linux-kvm |
< 5.4.0-1075.80 Fix: upgrade to 5.4.0-1075.80
|
| Ubuntu:20.04:LTS | canonical | linux-lowlatency-hwe-5.15 |
< 5.15.0-48.54~20.04.1 Fix: upgrade to 5.15.0-48.54~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-oracle |
< 5.4.0-1083.91 Fix: upgrade to 5.4.0-1083.91
|
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.15 |
< 5.15.0-1018.23~20.04.1 Fix: upgrade to 5.15.0-1018.23~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-raspi |
< 5.4.0-1070.80 Fix: upgrade to 5.4.0-1070.80
|
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.15 |
< 5.15.0-1019.22~20.04.1 Fix: upgrade to 5.15.0-1019.22~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-aws-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-fde | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gkeop | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gkeop-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-intel-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.10 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.14 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.6 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-raspi2 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.8 | All versions |
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-aws-fips |
< 5.4.0-1085.92+fips1 Fix: upgrade to 5.4.0-1085.92+fips1
|
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-azure-fips |
< 5.4.0-1091.96+fips1 Fix: upgrade to 5.4.0-1091.96+fips1
|
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-fips |
< 5.4.0-1061.69 Fix: upgrade to 5.4.0-1061.69
|
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-gcp-fips |
< 5.4.0-1089.97+fips1 Fix: upgrade to 5.4.0-1089.97+fips1
|
| Ubuntu:Pro:FIPS:20.04:LTS | canonical | linux-aws-fips | All versions |
| Ubuntu:Pro:FIPS:20.04:LTS | canonical | linux-azure-fips | All versions |
| Ubuntu:Pro:FIPS:20.04:LTS | canonical | linux-fips | All versions |
| Ubuntu:Pro:FIPS:20.04:LTS | canonical | linux-gcp-fips | All versions |
| Ubuntu:22.04:LTS | canonical | linux |
< 5.15.0-48.54 Fix: upgrade to 5.15.0-48.54
|
| Ubuntu:22.04:LTS | canonical | linux-allwinner-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws |
< 5.15.0-1020.24 Fix: upgrade to 5.15.0-1020.24
|
| Ubuntu:22.04:LTS | canonical | linux-aws-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure |
< 5.15.0-1020.25 Fix: upgrade to 5.15.0-1020.25
|
| Ubuntu:22.04:LTS | canonical | linux-azure-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde |
< 5.15.0-1024.30.1 Fix: upgrade to 5.15.0-1024.30.1
|
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp |
< 5.15.0-1018.24 Fix: upgrade to 5.15.0-1018.24
|
| Ubuntu:22.04:LTS | canonical | linux-gcp-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gke |
< 5.15.0-1016.19 Fix: upgrade to 5.15.0-1016.19
|
| Ubuntu:22.04:LTS | canonical | linux-gkeop |
< 5.15.0-1003.5 Fix: upgrade to 5.15.0-1003.5
|
| Ubuntu:22.04:LTS | canonical | linux-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-ibm |
< 5.15.0-1015.17 Fix: upgrade to 5.15.0-1015.17
|
| Ubuntu:22.04:LTS | canonical | linux-intel-iot-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-intel-iotg |
< 5.15.0-1016.21 Fix: upgrade to 5.15.0-1016.21
|
| Ubuntu:22.04:LTS | canonical | linux-kvm |
< 5.15.0-1018.22 Fix: upgrade to 5.15.0-1018.22
|
| Ubuntu:22.04:LTS | canonical | linux-lowlatency |
< 5.15.0-48.54 Fix: upgrade to 5.15.0-48.54
|
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia |
< 5.15.0-1007.7 Fix: upgrade to 5.15.0-1007.7
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-5.17 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.0 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.1 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oracle |
< 5.15.0-1018.23 Fix: upgrade to 5.15.0-1018.23
|
| Ubuntu:22.04:LTS | canonical | linux-oracle-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-raspi |
< 5.15.0-1015.17 Fix: upgrade to 5.15.0-1015.17
|
| Ubuntu:22.04:LTS | canonical | linux-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.5 | All versions |
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-realtime |
< 5.15.0-1021.21 Fix: upgrade to 5.15.0-1021.21
|
| Ubuntu:24.04:LTS | canonical | linux-raspi-realtime | All versions |
| Debian:12 | debian | linux |
< 5.18.5-1 Fix: upgrade to 5.18.5-1
|
| Linux | linux | kernel |
>= 5.18.0, < 5.18.4 Fix: upgrade to 5.18.4
|
Original advisory text
nbd: call genl_unregister_family() first in nbd_cleanup()
In the Linux kernel, the following vulnerability has been resolved: nbd: call genl_unregister_family() first in nbd_cleanup() Otherwise there may be race between module removal and the handling of netlink command, which can lead to the oops as shown below: BUG: kernel NULL pointer dereference, address: 0000000000000098 Oops: 0002 [#1] SMP PTI CPU: 1 PID: 31299 Comm: nbd-client Tainted: G E 5.14.0-rc4 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996) RIP: 0010:down_write+0x1a/0x50 Call Trace: start_creating+0x89/0x130 debugfs_create_dir+0x1b/0x130 nbd_start_device+0x13d/0x390 [nbd] nbd_genl_connect+0x42f/0x748 [nbd] genl_family_rcv_msg_doit.isra.0+0xec/0x150 genl_rcv_msg+0xe5/0x1e0 netlink_rcv_skb+0x55/0x100 genl_rcv+0x29/0x40 netlink_unicast+0x1a8/0x250 netlink_sendmsg+0x21b/0x430 ____sys_sendmsg+0x2a4/0x2d0 ___sys_sendmsg+0x81/0xc0 __sys_sendmsg+0x62/0xb0 __x64_sys_sendmsg+0x1f/0x30 do_syscall_64+0x3b/0xc0 entry_SYSCALL_64_after_hwframe+0x44/0xae Modules linked in: nbd(E-)
References
- https://ubuntu.com/security/CVE-2022-49295 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2022-49295 Third Party Advisory
- https://git.kernel.org/linus/06c4da89c24e7023ea448cadf8e9daf06a0aae6e Third Party Advisory
- https://git.kernel.org/stable/c/013a79f1b5c89290e2e97f1ebf14b14e0cf5fe5c Third Party Advisory
- https://git.kernel.org/stable/c/06c4da89c24e7023ea448cadf8e9daf06a0aae6e Third Party Advisory
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49295... Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2022-49295 Vendor Advisory
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git Product
- https://git.kernel.org/stable/c/8a1435c862ea09b06be7acda325128dc08458e25 Third Party Advisory
- https://git.kernel.org/stable/c/c0868f6e728c3c28bef0e8bee89d2daf86a8bbca Third Party Advisory
- https://git.kernel.org/stable/c/1be608e1ee1f222464b2856bda9b85ab5184a33e Third Party Advisory
- https://git.kernel.org/stable/c/3d5da1ffba3388c2ae2e6c598855a4d887d3bf79 Third Party Advisory
- https://git.kernel.org/stable/c/6f505bbb8063fd3a238a4239d2d8c165e5279f6f Third Party Advisory
- https://git.kernel.org/stable/c/cbeafa7a79d08ecdb55f8f1d41a11323d0f709db Third Party Advisory
- https://security-tracker.debian.org/tracker/CVE-2022-49295 Vendor Advisory
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker partial control
Type
CWE-476NULL Pointer Dereference
Timeline
Published26 Feb 2025
Updated4 Nov 2026
First seen7 Mar 2026
Sources
CVE-2022-49295 · OSV
UBUNTU-CVE-2022-49295 · OSV
CVE-2022-49295 · NVD
CVE-2022-49295 · MITRE
DEBIAN-CVE-2022-49295 · OSV
Track software like this
Free during beta