VULN/vuln-ubuntu
1
0 Fork 0
Code Pull Requests Actions Activity
Files
b11ea68500bc027250f00a6270f6fc7f2eb21e6e
vuln-ubuntu/data/osv/usn/USN-5567-1.json
T

308 lines
9.2 KiB
JSON
Raw Blame History

{
"schema_version": "1.7.0",
"id": "USN-5567-1",
"summary": "linux-oem-5.14, linux-oem-5.17 vulnerabilities",
"details": "\nZhenpeng Lin discovered that the network packet scheduler implementation in\nthe Linux kernel did not properly remove all references to a route filter\nbefore freeing it in some situations. A local attacker could use this to\ncause a denial of service (system crash) or execute arbitrary code.\n(CVE-2022-2588)\n\nIt was discovered that the netfilter subsystem of the Linux kernel did not\nprevent one nft object from referencing an nft set in another nft table,\nleading to a use-after-free vulnerability. A local attacker could use this\nto cause a denial of service (system crash) or execute arbitrary code.\n(CVE-2022-2586)\n\nIt was discovered that the implementation of POSIX timers in the Linux\nkernel did not properly clean up timers in some situations. A local\nattacker could use this to cause a denial of service (system crash) or\nexecute arbitrary code. (CVE-2022-2585)\n\n",
"aliases": [],
"upstream": [
"UBUNTU-CVE-2022-2585",
"UBUNTU-CVE-2022-2586",
"UBUNTU-CVE-2022-2588"
],
"related": [],
"published": "2022-08-10T18:26:10Z",
"modified": "2026-06-03T10:45:29Z",
"affected": [
{
"package": {
"ecosystem": "Ubuntu:20.04:LTS",
"name": "linux-oem-5.14",
"purl": "pkg:deb/ubuntu/linux-oem-5.14@5.14.0-1048.55?arch=source&distro=focal"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "5.14.0-1048.55"
}
]
}
],
"versions": [
"5.14.0-1004.4",
"5.14.0-1005.5",
"5.14.0-1007.7",
"5.14.0-1008.8",
"5.14.0-1010.10",
"5.14.0-1011.11",
"5.14.0-1013.13",
"5.14.0-1018.19",
"5.14.0-1020.22",
"5.14.0-1022.24",
"5.14.0-1024.26",
"5.14.0-1027.30",
"5.14.0-1029.32",
"5.14.0-1031.34",
"5.14.0-1032.35",
"5.14.0-1033.36",
"5.14.0-1034.37",
"5.14.0-1036.40",
"5.14.0-1038.42",
"5.14.0-1042.47",
"5.14.0-1044.49",
"5.14.0-1045.51",
"5.14.0-1046.53",
"5.14.0-1047.54"
],
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-buildinfo-5.14.0-1048-oem",
"binary_version": "5.14.0-1048.55"
},
{
"binary_name": "linux-headers-5.14.0-1048-oem",
"binary_version": "5.14.0-1048.55"
},
{
"binary_name": "linux-image-unsigned-5.14.0-1048-oem",
"binary_version": "5.14.0-1048.55"
},
{
"binary_name": "linux-modules-5.14.0-1048-oem",
"binary_version": "5.14.0-1048.55"
},
{
"binary_name": "linux-modules-iwlwifi-5.14.0-1048-oem",
"binary_version": "5.14.0-1048.55"
},
{
"binary_name": "linux-oem-5.14-headers-5.14.0-1048",
"binary_version": "5.14.0-1048.55"
},
{
"binary_name": "linux-oem-5.14-tools-5.14.0-1048",
"binary_version": "5.14.0-1048.55"
},
{
"binary_name": "linux-oem-5.14-tools-host",
"binary_version": "5.14.0-1048.55"
},
{
"binary_name": "linux-tools-5.14.0-1048-oem",
"binary_version": "5.14.0-1048.55"
}
],
"availability": "No subscription required"
},
"database_specific": {
"cves_map": {
"ecosystem": "Ubuntu:20.04:LTS",
"cves": [
{
"id": "CVE-2022-2585",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H"
},
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "Ubuntu",
"score": "high"
}
]
},
{
"id": "CVE-2022-2586",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H"
},
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "Ubuntu",
"score": "high"
}
]
},
{
"id": "CVE-2022-2588",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H"
},
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "Ubuntu",
"score": "high"
}
]
}
]
}
}
},
{
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "linux-oem-5.17",
"purl": "pkg:deb/ubuntu/linux-oem-5.17@5.17.0-1015.16?arch=source&distro=jammy"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "5.17.0-1015.16"
}
]
}
],
"versions": [
"5.17.0-1003.3",
"5.17.0-1004.4",
"5.17.0-1006.6",
"5.17.0-1011.12",
"5.17.0-1012.13",
"5.17.0-1013.14",
"5.17.0-1014.15"
],
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-buildinfo-5.17.0-1015-oem",
"binary_version": "5.17.0-1015.16"
},
{
"binary_name": "linux-headers-5.17.0-1015-oem",
"binary_version": "5.17.0-1015.16"
},
{
"binary_name": "linux-image-unsigned-5.17.0-1015-oem",
"binary_version": "5.17.0-1015.16"
},
{
"binary_name": "linux-modules-5.17.0-1015-oem",
"binary_version": "5.17.0-1015.16"
},
{
"binary_name": "linux-modules-iwlwifi-5.17.0-1015-oem",
"binary_version": "5.17.0-1015.16"
},
{
"binary_name": "linux-oem-5.17-headers-5.17.0-1015",
"binary_version": "5.17.0-1015.16"
},
{
"binary_name": "linux-oem-5.17-tools-5.17.0-1015",
"binary_version": "5.17.0-1015.16"
},
{
"binary_name": "linux-oem-5.17-tools-host",
"binary_version": "5.17.0-1015.16"
},
{
"binary_name": "linux-tools-5.17.0-1015-oem",
"binary_version": "5.17.0-1015.16"
}
],
"availability": "No subscription required"
},
"database_specific": {
"cves_map": {
"ecosystem": "Ubuntu:22.04:LTS",
"cves": [
{
"id": "CVE-2022-2585",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H"
},
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "Ubuntu",
"score": "high"
}
]
},
{
"id": "CVE-2022-2586",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H"
},
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "Ubuntu",
"score": "high"
}
]
},
{
"id": "CVE-2022-2588",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H"
},
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "Ubuntu",
"score": "high"
}
]
}
]
}
}
}
],
"references": [
{
"type": "ADVISORY",
"url": "https://ubuntu.com/security/notices/USN-5567-1"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2022-2585"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2022-2586"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2022-2588"
}
]
}
View Git Blame Copy Permalink