Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.1
CVE-2022-49643: Linux kernel overflow could bypass integrity checks
CVE-2022-49643 · published 1 year ago
Summary
The standard Linux kernel and several Ubuntu‑based distributions (including GKE, HWE‑Edge, AWS, and Azure builds) could experience an integer overflow when a specific security module is turned on. This overflow might allow a verification step to be skipped, potentially letting untrusted data go unnoticed. Apply the latest kernel updates from your vendor to resolve the issue.
What to do
- Update canonical linux-aws-5.4 to version 5.4.0-1086.93~18.04.1.
- Update canonical linux-azure-5.4 to version 5.4.0-1094.100~18.04.1.
- Update canonical linux-gcp-5.4 to version 5.4.0-1092.101~18.04.1.
- Update canonical linux-hwe-5.4 to version 5.4.0-128.144~18.04.1.
- Update canonical linux-ibm-5.4 to version 5.4.0-1034.38~18.04.1.
- Update canonical linux-oracle-5.4 to version 5.4.0-1084.92~18.04.1.
- Update canonical linux-raspi-5.4 to version 5.4.0-1071.81~18.04.1.
- Update canonical linux to version 5.4.0-128.144.
- Update linux kernel to version 5.18.13.
- Update canonical linux-aws to version 5.4.0-1086.93.
- Update canonical linux-aws-5.15 to version 5.15.0-1021.25~20.04.1.
- Update canonical linux-azure to version 5.4.0-1094.100.
- Update canonical linux-azure-5.15 to version 5.15.0-1021.26~20.04.1.
- Update canonical linux-bluefield to version 5.4.0-1047.52.
- Update canonical linux-gcp to version 5.4.0-1090.98.
- Update canonical linux-gcp-5.15 to version 5.15.0-1021.28~20.04.1.
- Update canonical linux-hwe-5.15 to version 5.15.0-50.56~20.04.1.
- Update canonical linux-ibm to version 5.4.0-1034.38.
- Update canonical linux-intel-iotg-5.15 to version 5.15.0-1017.22~20.04.1.
- Update canonical linux-iot to version 5.4.0-1005.7.
- Update canonical linux-kvm to version 5.4.0-1076.81.
- Update canonical linux-lowlatency-hwe-5.15 to version 5.15.0-50.56~20.04.1.
- Update canonical linux-oracle to version 5.4.0-1084.92.
- Update canonical linux-oracle-5.15 to version 5.15.0-1019.24~20.04.1.
- Update canonical linux-raspi to version 5.4.0-1071.81.
- Update canonical linux-riscv-5.15 to version 5.15.0-1022.26~20.04.1.
- Update canonical linux-aws-fips to version 5.4.0-1086.93+fips1.
- Update canonical linux-azure-fips to version 5.4.0-1094.100+fips1.
- Update canonical linux-fips to version 5.4.0-1062.70.
- Update canonical linux-gcp-fips to version 5.4.0-1092.101+fips1.
- Update canonical linux to version 5.15.0-50.56.
- Update canonical linux-aws to version 5.15.0-1021.25.
- Update canonical linux-azure to version 5.15.0-1021.26.
- Update canonical linux-gcp to version 5.15.0-1019.25.
- Update canonical linux-gke to version 5.15.0-1017.20.
- Update canonical linux-gkeop to version 5.15.0-1004.6.
- Update canonical linux-ibm to version 5.15.0-1015.17.
- Update canonical linux-intel-iotg to version 5.15.0-1017.22.
- Update canonical linux-kvm to version 5.15.0-1019.23.
- Update canonical linux-lowlatency to version 5.15.0-50.56.
- Update canonical linux-nvidia to version 5.15.0-1015.15.
- Update canonical linux-oracle to version 5.15.0-1019.24.
- Update canonical linux-raspi to version 5.15.0-1016.18.
- Update canonical linux-realtime to version 5.15.0-1022.22.
- Update canonical linux-azure-fde to version 5.15.0-1024.30.1.
- Update debian linux to version 5.18.14-1.
- Update linux linux to version 388f3df7c3c8b7f2a32b9ae0a9b2f9f6ad3b1b77 or later.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| – | linux | linux_kernel |
>= 5.4, < 5.4.207 >= 5.5, < 5.10.132 >= 5.11, < 5.15.56 >= 5.16, < 5.18.13 5.19 cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Ubuntu:26.04:LTS | canonical | linux-gke | All versions |
| Ubuntu:16.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.4 |
< 5.4.0-1086.93~18.04.1 Fix: upgrade to 5.4.0-1086.93~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-azure-5.4 |
< 5.4.0-1094.100~18.04.1 Fix: upgrade to 5.4.0-1094.100~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-gcp-5.4 |
< 5.4.0-1092.101~18.04.1 Fix: upgrade to 5.4.0-1092.101~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-hwe-5.4 |
< 5.4.0-128.144~18.04.1 Fix: upgrade to 5.4.0-128.144~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-ibm-5.4 |
< 5.4.0-1034.38~18.04.1 Fix: upgrade to 5.4.0-1034.38~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.4 |
< 5.4.0-1084.92~18.04.1 Fix: upgrade to 5.4.0-1084.92~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-raspi-5.4 |
< 5.4.0-1071.81~18.04.1 Fix: upgrade to 5.4.0-1071.81~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-aws-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-4.15 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gkeop-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-hwe | All versions |
| Ubuntu:18.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oem | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.3 | All versions |
| Ubuntu:20.04:LTS | canonical | linux |
< 5.4.0-128.144 Fix: upgrade to 5.4.0-128.144
|
| Ubuntu:26.04:LTS | canonical | linux-nvidia-bos | All versions |
| – | linux | linux |
< 388f3df7c3c8b7f2a32b9ae0a9b2f9f6ad3b1b77 5.4 |
| Linux | linux | kernel |
>= 5.16.0, < 5.18.13 Fix: upgrade to 5.18.13
|
| Ubuntu:20.04:LTS | canonical | linux-aws |
< 5.4.0-1086.93 Fix: upgrade to 5.4.0-1086.93
|
| Ubuntu:20.04:LTS | canonical | linux-aws-5.15 |
< 5.15.0-1021.25~20.04.1 Fix: upgrade to 5.15.0-1021.25~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-azure |
< 5.4.0-1094.100 Fix: upgrade to 5.4.0-1094.100
|
| Ubuntu:20.04:LTS | canonical | linux-azure-5.15 |
< 5.15.0-1021.26~20.04.1 Fix: upgrade to 5.15.0-1021.26~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-bluefield |
< 5.4.0-1047.52 Fix: upgrade to 5.4.0-1047.52
|
| Ubuntu:20.04:LTS | canonical | linux-gcp |
< 5.4.0-1090.98 Fix: upgrade to 5.4.0-1090.98
|
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.15 |
< 5.15.0-1021.28~20.04.1 Fix: upgrade to 5.15.0-1021.28~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.15 |
< 5.15.0-50.56~20.04.1 Fix: upgrade to 5.15.0-50.56~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-ibm |
< 5.4.0-1034.38 Fix: upgrade to 5.4.0-1034.38
|
| Ubuntu:20.04:LTS | canonical | linux-intel-iotg-5.15 |
< 5.15.0-1017.22~20.04.1 Fix: upgrade to 5.15.0-1017.22~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-iot |
< 5.4.0-1005.7 Fix: upgrade to 5.4.0-1005.7
|
| Ubuntu:20.04:LTS | canonical | linux-kvm |
< 5.4.0-1076.81 Fix: upgrade to 5.4.0-1076.81
|
| Ubuntu:20.04:LTS | canonical | linux-lowlatency-hwe-5.15 |
< 5.15.0-50.56~20.04.1 Fix: upgrade to 5.15.0-50.56~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-oracle |
< 5.4.0-1084.92 Fix: upgrade to 5.4.0-1084.92
|
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.15 |
< 5.15.0-1019.24~20.04.1 Fix: upgrade to 5.15.0-1019.24~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-raspi |
< 5.4.0-1071.81 Fix: upgrade to 5.4.0-1071.81
|
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.15 |
< 5.15.0-1022.26~20.04.1 Fix: upgrade to 5.15.0-1022.26~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-aws-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.11 | All versions |
Showing 50 of 134. Show the rest
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:20.04:LTS | canonical | linux-azure-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-fde | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gkeop | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gkeop-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-intel-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.10 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.14 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.6 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-raspi2 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.8 | All versions |
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-aws-fips |
< 5.4.0-1086.93+fips1 Fix: upgrade to 5.4.0-1086.93+fips1
|
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-azure-fips |
< 5.4.0-1094.100+fips1 Fix: upgrade to 5.4.0-1094.100+fips1
|
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-fips |
< 5.4.0-1062.70 Fix: upgrade to 5.4.0-1062.70
|
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-gcp-fips |
< 5.4.0-1092.101+fips1 Fix: upgrade to 5.4.0-1092.101+fips1
|
| Ubuntu:Pro:FIPS:20.04:LTS | canonical | linux-aws-fips | All versions |
| Ubuntu:Pro:FIPS:20.04:LTS | canonical | linux-azure-fips | All versions |
| Ubuntu:Pro:FIPS:20.04:LTS | canonical | linux-fips | All versions |
| Ubuntu:Pro:FIPS:20.04:LTS | canonical | linux-gcp-fips | All versions |
| Ubuntu:22.04:LTS | canonical | linux |
< 5.15.0-50.56 Fix: upgrade to 5.15.0-50.56
|
| Ubuntu:22.04:LTS | canonical | linux-allwinner-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws |
< 5.15.0-1021.25 Fix: upgrade to 5.15.0-1021.25
|
| Ubuntu:22.04:LTS | canonical | linux-aws-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure |
< 5.15.0-1021.26 Fix: upgrade to 5.15.0-1021.26
|
| Ubuntu:22.04:LTS | canonical | linux-azure-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde |
< 5.15.0-1024.30.1 Fix: upgrade to 5.15.0-1024.30.1
|
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp |
< 5.15.0-1019.25 Fix: upgrade to 5.15.0-1019.25
|
| Ubuntu:22.04:LTS | canonical | linux-gcp-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gke |
< 5.15.0-1017.20 Fix: upgrade to 5.15.0-1017.20
|
| Ubuntu:22.04:LTS | canonical | linux-gkeop |
< 5.15.0-1004.6 Fix: upgrade to 5.15.0-1004.6
|
| Ubuntu:22.04:LTS | canonical | linux-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-ibm |
< 5.15.0-1015.17 Fix: upgrade to 5.15.0-1015.17
|
| Ubuntu:22.04:LTS | canonical | linux-intel-iot-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-intel-iotg |
< 5.15.0-1017.22 Fix: upgrade to 5.15.0-1017.22
|
| Ubuntu:22.04:LTS | canonical | linux-kvm |
< 5.15.0-1019.23 Fix: upgrade to 5.15.0-1019.23
|
| Ubuntu:22.04:LTS | canonical | linux-lowlatency |
< 5.15.0-50.56 Fix: upgrade to 5.15.0-50.56
|
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia |
< 5.15.0-1015.15 Fix: upgrade to 5.15.0-1015.15
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-5.17 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.0 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.1 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oracle |
< 5.15.0-1019.24 Fix: upgrade to 5.15.0-1019.24
|
| Ubuntu:22.04:LTS | canonical | linux-oracle-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-raspi |
< 5.15.0-1016.18 Fix: upgrade to 5.15.0-1016.18
|
| Ubuntu:22.04:LTS | canonical | linux-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.5 | All versions |
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-realtime |
< 5.15.0-1022.22 Fix: upgrade to 5.15.0-1022.22
|
| Ubuntu:24.04:LTS | canonical | linux-raspi-realtime | All versions |
| Ubuntu:Nvidia-BlueField:24.04:LTS | canonical | linux-bluefield | All versions |
| Debian:12 | debian | linux |
< 5.18.14-1 Fix: upgrade to 5.18.14-1
|
Original advisory text
ima: Fix a potential integer overflow in ima_appraise_measurement
In the Linux kernel, the following vulnerability has been resolved: ima: Fix a potential integer overflow in ima_appraise_measurement When the ima-modsig is enabled, the rc passed to evm_verifyxattr() may be negative, which may cause the integer overflow problem.
References
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git Product
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49643... Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2022-49643 Vendor Advisory
- https://ubuntu.com/security/CVE-2022-49643 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2022-49643 Third Party Advisory
- https://git.kernel.org/linus/d2ee2cfc4aa85ff6a2a3b198a3a524ec54e3d999 Third Party Advisory
- https://security-tracker.debian.org/tracker/CVE-2022-49643 Vendor Advisory
- https://git.kernel.org/stable/c/388f3df7c3c8b7f2a32b9ae0a9b2f9f6ad3b1b77 Third Party Advisory
- https://git.kernel.org/stable/c/640cea4c2839a821adfbb703b590a5928abe9286 Third Party Advisory
- https://git.kernel.org/stable/c/831e190175f10652be93b08436cc7bf2e62e4bb6 Third Party Advisory
- https://git.kernel.org/stable/c/c8d5d81940938b5f6c0f495ca9538e7740416f30 Third Party Advisory
- https://git.kernel.org/stable/c/d2ee2cfc4aa85ff6a2a3b198a3a524ec54e3d999 Third Party Advisory
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker partial control (estimated)
Severity
7.1
High
Type
CWE-190Integer Overflow
Timeline
Published26 Feb 2025
Updated3 Nov 2026
First seen7 Mar 2026
Sources
CVE-2022-49643 · OSV
UBUNTU-CVE-2022-49643 · OSV
CVE-2022-49643 · NVD
CVE-2022-49643 · MITRE
DEBIAN-CVE-2022-49643 · OSV
Track software like this
Free during beta