Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Linux kernel may crash due to protocol handling errors
published 4 years ago
Summary
Multiple versions of the Linux kernel have flaws in how they handle certain network and device detach events. These bugs could let a local user cause the system to stop working or, in some cases, run unwanted code. Apply the latest kernel updates from your distribution to fix the problem.
What to do
- Update canonical linux-aws-5.4 to version 5.4.0-1081.88~18.04.1.
- Update canonical linux-azure-5.4 to version 5.4.0-1086.91~18.04.1.
- Update canonical linux-gkeop-5.4 to version 5.4.0-1049.52~18.04.1.
- Update canonical linux-hwe-5.4 to version 5.4.0-122.138~18.04.1.
- Update canonical linux-ibm-5.4 to version 5.4.0-1029.33~18.04.1.
- Update canonical linux-oracle-5.4 to version 5.4.0-1079.87~18.04.1.
- Update canonical linux-raspi-5.4 to version 5.4.0-1066.76~18.04.1.
- Update canonical linux to version 5.4.0-122.138.
- Update canonical linux-aws to version 5.4.0-1081.88.
- Update canonical linux-azure to version 5.4.0-1086.91.
- Update canonical linux-azure-fde to version 5.4.0-1086.91+cvm1.1.
- Update canonical linux-gcp to version 5.4.0-1084.92.
- Update canonical linux-gke to version 5.4.0-1078.84.
- Update canonical linux-gkeop to version 5.4.0-1049.52.
- Update canonical linux-ibm to version 5.4.0-1029.33.
- Update canonical linux-kvm to version 5.4.0-1071.76.
- Update canonical linux-oracle to version 5.4.0-1079.87.
- Update canonical linux-raspi to version 5.4.0-1066.76.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:18.04:LTS | canonical | linux-aws-5.4 |
< 5.4.0-1081.88~18.04.1 Fix: upgrade to 5.4.0-1081.88~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-azure-5.4 |
< 5.4.0-1086.91~18.04.1 Fix: upgrade to 5.4.0-1086.91~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-gkeop-5.4 |
< 5.4.0-1049.52~18.04.1 Fix: upgrade to 5.4.0-1049.52~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-hwe-5.4 |
< 5.4.0-122.138~18.04.1 Fix: upgrade to 5.4.0-122.138~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-ibm-5.4 |
< 5.4.0-1029.33~18.04.1 Fix: upgrade to 5.4.0-1029.33~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.4 |
< 5.4.0-1079.87~18.04.1 Fix: upgrade to 5.4.0-1079.87~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-raspi-5.4 |
< 5.4.0-1066.76~18.04.1 Fix: upgrade to 5.4.0-1066.76~18.04.1
|
| Ubuntu:20.04:LTS | canonical | linux |
< 5.4.0-122.138 Fix: upgrade to 5.4.0-122.138
|
| Ubuntu:20.04:LTS | canonical | linux-aws |
< 5.4.0-1081.88 Fix: upgrade to 5.4.0-1081.88
|
| Ubuntu:20.04:LTS | canonical | linux-azure |
< 5.4.0-1086.91 Fix: upgrade to 5.4.0-1086.91
|
| Ubuntu:20.04:LTS | canonical | linux-azure-fde |
< 5.4.0-1086.91+cvm1.1 Fix: upgrade to 5.4.0-1086.91+cvm1.1
|
| Ubuntu:20.04:LTS | canonical | linux-gcp |
< 5.4.0-1084.92 Fix: upgrade to 5.4.0-1084.92
|
| Ubuntu:20.04:LTS | canonical | linux-gke |
< 5.4.0-1078.84 Fix: upgrade to 5.4.0-1078.84
|
| Ubuntu:20.04:LTS | canonical | linux-gkeop |
< 5.4.0-1049.52 Fix: upgrade to 5.4.0-1049.52
|
| Ubuntu:20.04:LTS | canonical | linux-ibm |
< 5.4.0-1029.33 Fix: upgrade to 5.4.0-1029.33
|
| Ubuntu:20.04:LTS | canonical | linux-kvm |
< 5.4.0-1071.76 Fix: upgrade to 5.4.0-1071.76
|
| Ubuntu:20.04:LTS | canonical | linux-oracle |
< 5.4.0-1079.87 Fix: upgrade to 5.4.0-1079.87
|
| Ubuntu:20.04:LTS | canonical | linux-raspi |
< 5.4.0-1066.76 Fix: upgrade to 5.4.0-1066.76
|
Original advisory text
linux, linux-aws, linux-aws-5.4, linux-azure, linux-azure-5.4, linux-azure-fde, linux-gcp, linux-gke, linux-gkeop, linux-gkeop-5.4, linux-hwe-5.4, linux-ibm, linux-ibm-5.4, linux-kvm, linux-oracle, linux-oracle-5.4, linux-raspi, linux-raspi-5.4 vulnerabilities
It was discovered that the implementation of the 6pack and mkiss protocols
in the Linux kernel did not handle detach events properly in some
situations, leading to a use-after-free vulnerability. A local attacker
could possibly use this to cause a denial of service (system crash).
(CVE-2022-1195)
Duoming Zhou discovered that the AX.25 amateur radio protocol
implementation in the Linux kernel did not handle detach events properly in
some situations. A local attacker could possibly use this to cause a denial
of service (system crash) or execute arbitrary code. (CVE-2022-1199)
Duoming Zhou discovered race conditions in the AX.25 amateur radio protocol
implementation in the Linux kernel during device detach operations. A local
attacker could possibly use this to cause a denial of service (system
crash). (CVE-2022-1204)
Duoming Zhou discovered race conditions in the AX.25 amateur radio protocol
implementation in the Linux kernel, leading to use-after-free
vulnerabilities. A local attacker could possibly use this to cause a denial
of service (system crash). (CVE-2022-1205)
Yongkang Jia discovered that the KVM hypervisor implementation in the Linux
kernel did not properly handle guest TLB mapping invalidation requests in
some situations. An attacker in a guest VM could use this to cause a denial
of service (system crash) in the host OS. (CVE-2022-1789)
Minh Yuan discovered that the floppy driver in the Linux kernel contained a
race condition in some situations, leading to a use-after-free
vulnerability. A local attacker could use this to cause a denial of service
(system crash) or possibly execute arbitrary code. (CVE-2022-33981)
in the Linux kernel did not handle detach events properly in some
situations, leading to a use-after-free vulnerability. A local attacker
could possibly use this to cause a denial of service (system crash).
(CVE-2022-1195)
Duoming Zhou discovered that the AX.25 amateur radio protocol
implementation in the Linux kernel did not handle detach events properly in
some situations. A local attacker could possibly use this to cause a denial
of service (system crash) or execute arbitrary code. (CVE-2022-1199)
Duoming Zhou discovered race conditions in the AX.25 amateur radio protocol
implementation in the Linux kernel during device detach operations. A local
attacker could possibly use this to cause a denial of service (system
crash). (CVE-2022-1204)
Duoming Zhou discovered race conditions in the AX.25 amateur radio protocol
implementation in the Linux kernel, leading to use-after-free
vulnerabilities. A local attacker could possibly use this to cause a denial
of service (system crash). (CVE-2022-1205)
Yongkang Jia discovered that the KVM hypervisor implementation in the Linux
kernel did not properly handle guest TLB mapping invalidation requests in
some situations. An attacker in a guest VM could use this to cause a denial
of service (system crash) in the host OS. (CVE-2022-1789)
Minh Yuan discovered that the floppy driver in the Linux kernel contained a
race condition in some situations, leading to a use-after-free
vulnerability. A local attacker could use this to cause a denial of service
(system crash) or possibly execute arbitrary code. (CVE-2022-33981)
References
- https://ubuntu.com/security/notices/USN-5514-1 Vendor Advisory
- https://ubuntu.com/security/CVE-2022-1195 Third Party Advisory
- https://ubuntu.com/security/CVE-2022-1199 Third Party Advisory
- https://ubuntu.com/security/CVE-2022-1204 Third Party Advisory
- https://ubuntu.com/security/CVE-2022-1205 Third Party Advisory
- https://ubuntu.com/security/CVE-2022-1789 Third Party Advisory
- https://ubuntu.com/security/CVE-2022-33981 Third Party Advisory
Timeline
Published13 Jul 2022
Updated10 Sep 2026
First seen10 Sep 2026
Sources
USN-5514-1 · OSV
Track software like this
Free during beta