CVE-2022-0492
Published: 8 February 2022
A vulnerability was found in the Linux kernel’s cgroup_release_agent_write in the kernel/cgroup/cgroup-v1.c function. This flaw, under certain circumstances, allows the use of the cgroups v1 release_agent feature to escalate privileges and bypass the namespace isolation unexpectedly.
From the Ubuntu Security Team
Yiqi Sun and Kevin Wang discovered that the cgroups implementation in the Linux kernel did not properly restrict access to the cgroups v1 release_agent feature. A local attacker could use this to gain administrative privileges.
Priority
Status
| Package | Release | Status |
|---|---|---|
|
linux Launchpad, Ubuntu, Debian |
bionic |
Released
(4.15.0-173.182)
|
| focal |
Released
(5.4.0-105.119)
|
|
| impish |
Released
(5.13.0-37.42)
|
|
| upstream |
Released
(5.17~rc3)
|
|
| jammy |
Not vulnerable
(5.15.0-23.23)
|
|
| kinetic |
Not vulnerable
(5.15.0-25.25)
|
|
| lunar |
Not vulnerable
(5.19.0-21.21)
|
|
|
Patches: Introduced by 81a6a5cdd2c5cd70874b88afe524ab09e9e869af |
||
|
linux-oracle Launchpad, Ubuntu, Debian |
bionic |
Released
(4.15.0-1090.99)
|
| impish |
Released
(5.13.0-1023.28)
|
|
| focal |
Released
(5.4.0-1067.72)
|
|
| trusty |
Does not exist
|
|
| upstream |
Released
(5.17~rc3)
|
|
| xenial |
Released
(4.15.0-1090.99~16.04.1)
|
|
| jammy |
Not vulnerable
(5.15.0-1002.4)
|
|
| kinetic |
Not vulnerable
(5.15.0-1002.4)
|
|
| lunar |
Not vulnerable
(5.19.0-1008.8)
|
|
|
linux-azure-5.13 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| impish |
Does not exist
|
|
| upstream |
Released
(5.17~rc3)
|
|
| focal |
Released
(5.13.0-1021.24~20.04.1)
|
|
| jammy |
Does not exist
|
|
| kinetic |
Does not exist
|
|
| lunar |
Does not exist
|
|
|
linux-aws Launchpad, Ubuntu, Debian |
xenial |
Released
(4.4.0-1138.152)
|
| bionic |
Released
(4.15.0-1124.133)
|
|
| trusty |
Released
(4.4.0-1102.107)
|
|
| focal |
Released
(5.4.0-1069.73)
|
|
| impish |
Released
(5.13.0-1019.21)
|
|
| upstream |
Released
(5.17~rc3)
|
|
| jammy |
Not vulnerable
(5.15.0-1003.5)
|
|
| kinetic |
Not vulnerable
(5.15.0-1004.6)
|
|
| lunar |
Not vulnerable
(5.19.0-1009.9)
|
|
|
linux-gcp Launchpad, Ubuntu, Debian |
focal |
Released
(5.4.0-1068.72)
|
| impish |
Released
(5.13.0-1021.25)
|
|
| trusty |
Does not exist
|
|
| bionic |
Ignored
(superseded by linux-gcp-5.3)
|
|
| xenial |
Released
(4.15.0-1119.133~16.04.1)
|
|
| upstream |
Released
(5.17~rc3)
|
|
| jammy |
Not vulnerable
(5.15.0-1003.6)
|
|
| kinetic |
Not vulnerable
(5.15.0-1003.6)
|
|
| lunar |
Not vulnerable
(5.19.0-1008.8)
|
|
|
linux-gcp-5.13 Launchpad, Ubuntu, Debian |
focal |
Released
(5.13.0-1021.25~20.04.1)
|
| trusty |
Does not exist
|
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| impish |
Does not exist
|
|
| upstream |
Released
(5.17~rc3)
|
|
| jammy |
Does not exist
|
|
| kinetic |
Does not exist
|
|
| lunar |
Does not exist
|
|
|
linux-oracle-5.13 Launchpad, Ubuntu, Debian |
focal |
Released
(5.13.0-1025.30~20.04.1)
|
| trusty |
Does not exist
|
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| impish |
Does not exist
|
|
| upstream |
Released
(5.17~rc3)
|
|
| jammy |
Does not exist
|
|
| kinetic |
Does not exist
|
|
| lunar |
Does not exist
|
|
|
linux-aws-5.13 Launchpad, Ubuntu, Debian |
focal |
Released
(5.13.0-1019.21~20.04.1)
|
| trusty |
Does not exist
|
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| impish |
Does not exist
|
|
| upstream |
Released
(5.17~rc3)
|
|
| jammy |
Does not exist
|
|
| kinetic |
Does not exist
|
|
| lunar |
Does not exist
|
|
|
linux-azure Launchpad, Ubuntu, Debian |
trusty |
Released
(4.15.0-1134.147~14.04.1)
|
| bionic |
Ignored
(superseded by linux-azure-5.3)
|
|
| impish |
Released
(5.13.0-1021.24)
|
|
| focal |
Released
(5.4.0-1073.76)
|
|
| xenial |
Released
(4.15.0-1134.147~16.04.1)
|
|
| upstream |
Released
(5.17~rc3)
|
|
| jammy |
Not vulnerable
(5.15.0-1002.3)
|
|
| kinetic |
Not vulnerable
(5.15.0-1003.4)
|
|
| lunar |
Not vulnerable
(5.19.0-1008.8)
|
|
|
linux-hwe-5.13 Launchpad, Ubuntu, Debian |
focal |
Released
(5.13.0-37.42~20.04.1)
|
| trusty |
Does not exist
|
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| impish |
Does not exist
|
|
| upstream |
Released
(5.17~rc3)
|
|
| jammy |
Does not exist
|
|
| kinetic |
Does not exist
|
|
| lunar |
Does not exist
|
|
|
linux-ibm-5.4 Launchpad, Ubuntu, Debian |
bionic |
Released
(5.4.0-1018.20~18.04.1)
|
| trusty |
Does not exist
|
|
| xenial |
Does not exist
|
|
| focal |
Does not exist
|
|
| impish |
Does not exist
|
|
| upstream |
Released
(5.17~rc3)
|
|
| jammy |
Does not exist
|
|
| kinetic |
Does not exist
|
|
| lunar |
Does not exist
|
|
|
linux-kvm Launchpad, Ubuntu, Debian |
impish |
Released
(5.13.0-1018.19)
|
| trusty |
Does not exist
|
|
| bionic |
Released
(4.15.0-1110.113)
|
|
| xenial |
Released
(4.4.0-1103.112)
|
|
| focal |
Released
(5.4.0-1059.62)
|
|
| upstream |
Released
(5.17~rc3)
|
|
| jammy |
Not vulnerable
(5.15.0-1004.4)
|
|
| kinetic |
Not vulnerable
(5.15.0-1004.4)
|
|
| lunar |
Not vulnerable
(5.19.0-1008.8)
|
|
|
linux-hwe Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| bionic |
Ignored
(replaced by linux-hwe-5.4)
|
|
| focal |
Does not exist
|
|
| impish |
Does not exist
|
|
| xenial |
Released
(4.15.0-173.182~16.04.1)
|
|
| upstream |
Released
(5.17~rc3)
|
|
| jammy |
Does not exist
|
|
| kinetic |
Does not exist
|
|
| lunar |
Does not exist
|
|
|
linux-hwe-5.4 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| focal |
Does not exist
|
|
| impish |
Does not exist
|
|
| bionic |
Released
(5.4.0-105.119~18.04.1)
|
|
| upstream |
Released
(5.17~rc3)
|
|
| jammy |
Does not exist
|
|
| kinetic |
Does not exist
|
|
| lunar |
Does not exist
|
|
|
linux-hwe-5.8 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| focal |
Ignored
(superseded by linux-hwe-5.11)
|
|
| impish |
Does not exist
|
|
| upstream |
Released
(5.17~rc3)
|
|
| jammy |
Does not exist
|
|
| kinetic |
Does not exist
|
|
| lunar |
Does not exist
|
|
|
linux-hwe-5.11 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| focal |
Ignored
(superseded by linux-hwe-5.13)
|
|
| impish |
Does not exist
|
|
| upstream |
Released
(5.17~rc3)
|
|
| jammy |
Does not exist
|
|
| kinetic |
Does not exist
|
|
| lunar |
Does not exist
|
|
|
linux-hwe-edge Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Ignored
(superseded by linux-hwe)
|
|
| bionic |
Ignored
(superseded by linux-hwe-5.4)
|
|
| focal |
Does not exist
|
|
| impish |
Does not exist
|
|
| upstream |
Released
(5.17~rc3)
|
|
| jammy |
Does not exist
|
|
| kinetic |
Does not exist
|
|
| lunar |
Does not exist
|
|
|
linux-lts-xenial Launchpad, Ubuntu, Debian |
xenial |
Does not exist
|
| bionic |
Does not exist
|
|
| focal |
Does not exist
|
|
| impish |
Does not exist
|
|
| trusty |
Released
(4.4.0-222.255~14.04.1)
|
|
| upstream |
Released
(5.17~rc3)
|
|
| jammy |
Does not exist
|
|
| kinetic |
Does not exist
|
|
| lunar |
Does not exist
|
|
|
linux-aws-5.0 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| bionic |
Ignored
(superseded by linux-aws-5.3)
|
|
| focal |
Does not exist
|
|
| impish |
Does not exist
|
|
| upstream |
Released
(5.17~rc3)
|
|
| jammy |
Does not exist
|
|
| kinetic |
Does not exist
|
|
| lunar |
Does not exist
|
|
|
linux-aws-5.3 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| bionic |
Ignored
(superseded by linux-aws-5.4)
|
|
| focal |
Does not exist
|
|
| impish |
Does not exist
|
|
| upstream |
Released
(5.17~rc3)
|
|
| jammy |
Does not exist
|
|
| kinetic |
Does not exist
|
|
| lunar |
Does not exist
|
|
|
linux-aws-5.4 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| focal |
Does not exist
|
|
| impish |
Does not exist
|
|
| bionic |
Released
(5.4.0-1069.73~18.04.1)
|
|
| upstream |
Released
(5.17~rc3)
|
|
| jammy |
Does not exist
|
|
| kinetic |
Does not exist
|
|
| lunar |
Does not exist
|
|
|
linux-aws-5.8 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| focal |
Ignored
(superseded by linux-aws-5.11)
|
|
| impish |
Does not exist
|
|
| upstream |
Released
(5.17~rc3)
|
|
| jammy |
Does not exist
|
|
| kinetic |
Does not exist
|
|
| lunar |
Does not exist
|
|
|
linux-aws-5.11 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| impish |
Does not exist
|
|
| focal |
Ignored
(was needed now end-of-life)
|
|
| upstream |
Released
(5.17~rc3)
|
|
| jammy |
Does not exist
|
|
| kinetic |
Does not exist
|
|
| lunar |
Does not exist
|
|
|
linux-aws-hwe Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| bionic |
Does not exist
|
|
| focal |
Does not exist
|
|
| impish |
Does not exist
|
|
| xenial |
Released
(4.15.0-1124.133~16.04.1)
|
|
| upstream |
Released
(5.17~rc3)
|
|
| jammy |
Does not exist
|
|
| kinetic |
Does not exist
|
|
| lunar |
Does not exist
|
|
|
linux-azure-4.15 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| focal |
Does not exist
|
|
| impish |
Does not exist
|
|
| bionic |
Released
(4.15.0-1134.147)
|
|
| upstream |
Released
(5.17~rc3)
|
|
| jammy |
Does not exist
|
|
| kinetic |
Does not exist
|
|
| lunar |
Does not exist
|
|
|
linux-azure-5.3 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| bionic |
Ignored
(superseded by linux-azure-5.4)
|
|
| focal |
Does not exist
|
|
| impish |
Does not exist
|
|
| upstream |
Released
(5.17~rc3)
|
|
| jammy |
Does not exist
|
|
| kinetic |
Does not exist
|
|
| lunar |
Does not exist
|
|
|
linux-azure-5.4 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| focal |
Does not exist
|
|
| impish |
Does not exist
|
|
| bionic |
Released
(5.4.0-1073.76~18.04.1)
|
|
| upstream |
Released
(5.17~rc3)
|
|
| jammy |
Does not exist
|
|
| kinetic |
Does not exist
|
|
| lunar |
Does not exist
|
|
|
linux-azure-5.8 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| focal |
Ignored
(superseded by linux-azure-5.11)
|
|
| impish |
Does not exist
|
|
| upstream |
Released
(5.17~rc3)
|
|
| jammy |
Does not exist
|
|
| kinetic |
Does not exist
|
|
| lunar |
Does not exist
|
|
|
linux-azure-5.11 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| impish |
Does not exist
|
|
| focal |
Ignored
(was needed now end-of-life)
|
|
| upstream |
Released
(5.17~rc3)
|
|
| jammy |
Does not exist
|
|
| kinetic |
Does not exist
|
|
| lunar |
Does not exist
|
|
|
linux-bluefield Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| impish |
Does not exist
|
|
| focal |
Released
(5.4.0-1032.35)
|
|
| upstream |
Released
(5.17~rc3)
|
|
| jammy |
Not vulnerable
(5.15.0-1011.13)
|
|
| kinetic |
Does not exist
|
|
| lunar |
Does not exist
|
|
|
linux-dell300x Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| focal |
Does not exist
|
|
| impish |
Does not exist
|
|
| bionic |
Released
(4.15.0-1038.43)
|
|
| upstream |
Released
(5.17~rc3)
|
|
| jammy |
Does not exist
|
|
| kinetic |
Does not exist
|
|
| lunar |
Does not exist
|
|
|
linux-azure-edge Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| bionic |
Ignored
(superseded by linux-azure-5.3)
|
|
| focal |
Does not exist
|
|
| impish |
Does not exist
|
|
| upstream |
Released
(5.17~rc3)
|
|
| jammy |
Does not exist
|
|
| kinetic |
Does not exist
|
|
| lunar |
Does not exist
|
|
|
linux-gcp-4.15 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| focal |
Does not exist
|
|
| impish |
Does not exist
|
|
| bionic |
Released
(4.15.0-1119.133)
|
|
| upstream |
Released
(5.17~rc3)
|
|
| jammy |
Does not exist
|
|
| kinetic |
Does not exist
|
|
| lunar |
Does not exist
|
|
|
linux-gcp-5.3 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| bionic |
Ignored
(superseded by linux-gcp-5.4)
|
|
| focal |
Does not exist
|
|
| impish |
Does not exist
|
|
| upstream |
Released
(5.17~rc3)
|
|
| jammy |
Does not exist
|
|
| kinetic |
Does not exist
|
|
| lunar |
Does not exist
|
|
|
linux-gcp-5.4 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| focal |
Does not exist
|
|
| impish |
Does not exist
|
|
| bionic |
Released
(5.4.0-1068.72~18.04.1)
|
|
| upstream |
Released
(5.17~rc3)
|
|
| jammy |
Does not exist
|
|
| kinetic |
Does not exist
|
|
| lunar |
Does not exist
|
|
|
linux-gcp-5.8 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| focal |
Ignored
(superseded by linux-gcp-5.11)
|
|
| impish |
Does not exist
|
|
| upstream |
Released
(5.17~rc3)
|
|
| jammy |
Does not exist
|
|
| kinetic |
Does not exist
|
|
| lunar |
Does not exist
|
|
|
linux-gcp-5.11 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| impish |
Does not exist
|
|
| focal |
Ignored
(was needed now end-of-life)
|
|
| upstream |
Released
(5.17~rc3)
|
|
| jammy |
Does not exist
|
|
| kinetic |
Does not exist
|
|
| lunar |
Does not exist
|
|
|
linux-gke Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| bionic |
Does not exist
|
|
| impish |
Does not exist
|
|
| xenial |
Ignored
(reached end of standard support)
|
|
| focal |
Released
(5.4.0-1066.69)
|
|
| upstream |
Released
(5.17~rc3)
|
|
| jammy |
Not vulnerable
(5.15.0-1002.2)
|
|
| kinetic |
Does not exist
|
|
| lunar |
Does not exist
|
|
|
linux-gke-4.15 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| focal |
Does not exist
|
|
| impish |
Does not exist
|
|
| bionic |
Ignored
(was needed now end-of-life)
|
|
| upstream |
Released
(5.17~rc3)
|
|
| jammy |
Does not exist
|
|
| kinetic |
Does not exist
|
|
| lunar |
Does not exist
|
|
|
linux-gke-5.0 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| bionic |
Ignored
(superseded by linux-gke-5.3)
|
|
| focal |
Does not exist
|
|
| impish |
Does not exist
|
|
| upstream |
Released
(5.17~rc3)
|
|
| jammy |
Does not exist
|
|
| kinetic |
Does not exist
|
|
| lunar |
Does not exist
|
|
|
linux-gke-5.3 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| bionic |
Ignored
(superseded by linux-gke-5.4)
|
|
| focal |
Does not exist
|
|
| impish |
Does not exist
|
|
| upstream |
Released
(5.17~rc3)
|
|
| jammy |
Does not exist
|
|
| kinetic |
Does not exist
|
|
| lunar |
Does not exist
|
|
|
linux-gke-5.4 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| focal |
Does not exist
|
|
| impish |
Does not exist
|
|
| bionic |
Released
(5.4.0-1066.69~18.04.1)
|
|
| upstream |
Released
(5.17~rc3)
|
|
| jammy |
Does not exist
|
|
| kinetic |
Does not exist
|
|
| lunar |
Does not exist
|
|
|
linux-gkeop Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| impish |
Does not exist
|
|
| focal |
Released
(5.4.0-1037.38)
|
|
| upstream |
Released
(5.17~rc3)
|
|
| jammy |
Not vulnerable
(5.15.0-1001.2)
|
|
| kinetic |
Does not exist
|
|
| lunar |
Does not exist
|
|
|
linux-gkeop-5.4 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| focal |
Does not exist
|
|
| impish |
Does not exist
|
|
| bionic |
Released
(5.4.0-1037.38~18.04.1)
|
|
| upstream |
Released
(5.17~rc3)
|
|
| jammy |
Does not exist
|
|
| kinetic |
Does not exist
|
|
| lunar |
Does not exist
|
|
|
linux-ibm Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| impish |
Does not exist
|
|
| focal |
Released
(5.4.0-1018.20)
|
|
| upstream |
Released
(5.17~rc3)
|
|
| jammy |
Not vulnerable
(5.15.0-1002.2)
|
|
| kinetic |
Not vulnerable
(5.15.0-1002.2)
|
|
| lunar |
Not vulnerable
(5.19.0-1008.8)
|
|
|
linux-intel-5.13 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| impish |
Does not exist
|
|
| upstream |
Released
(5.17~rc3)
|
|
| focal |
Released
(5.13.0-1010.10)
|
|
| jammy |
Does not exist
|
|
| kinetic |
Does not exist
|
|
| lunar |
Does not exist
|
|
|
linux-oracle-5.0 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| bionic |
Ignored
(superseded by linux-oracle-5.3)
|
|
| focal |
Does not exist
|
|
| impish |
Does not exist
|
|
| upstream |
Released
(5.17~rc3)
|
|
| jammy |
Does not exist
|
|
| kinetic |
Does not exist
|
|
| lunar |
Does not exist
|
|
|
linux-oracle-5.3 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| bionic |
Ignored
(superseded by linux-oracle-5.4)
|
|
| focal |
Does not exist
|
|
| impish |
Does not exist
|
|
| upstream |
Released
(5.17~rc3)
|
|
| jammy |
Does not exist
|
|
| kinetic |
Does not exist
|
|
| lunar |
Does not exist
|
|
|
linux-oracle-5.4 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| focal |
Does not exist
|
|
| impish |
Does not exist
|
|
| upstream |
Released
(5.17~rc3)
|
|
| bionic |
Released
(5.4.0-1067.72~18.04.1)
|
|
| jammy |
Does not exist
|
|
| kinetic |
Does not exist
|
|
| lunar |
Does not exist
|
|
|
linux-oracle-5.8 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| focal |
Ignored
(superseded by linux-oracle-5.11)
|
|
| impish |
Does not exist
|
|
| upstream |
Released
(5.17~rc3)
|
|
| jammy |
Does not exist
|
|
| kinetic |
Does not exist
|
|
| lunar |
Does not exist
|
|
|
linux-oracle-5.11 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| impish |
Does not exist
|
|
| upstream |
Released
(5.17~rc3)
|
|
| focal |
Ignored
(was needed now end-of-life)
|
|
| jammy |
Does not exist
|
|
| kinetic |
Does not exist
|
|
| lunar |
Does not exist
|
|
|
linux-oem Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| focal |
Does not exist
|
|
| impish |
Does not exist
|
|
| xenial |
Ignored
(superseded by linux-hwe)
|
|
| bionic |
Ignored
(was needed now end-of-life)
|
|
| upstream |
Released
(5.17~rc3)
|
|
| jammy |
Does not exist
|
|
| kinetic |
Does not exist
|
|
| lunar |
Does not exist
|
|
|
linux-oem-5.6 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| impish |
Does not exist
|
|
| focal |
Ignored
(was needed now end-of-life)
|
|
| upstream |
Released
(5.17~rc3)
|
|
| jammy |
Does not exist
|
|
| kinetic |
Does not exist
|
|
| lunar |
Does not exist
|
|
|
linux-oem-5.10 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| impish |
Does not exist
|
|
| focal |
Ignored
(was needed now end-of-life)
|
|
| upstream |
Released
(5.17~rc3)
|
|
| jammy |
Does not exist
|
|
| kinetic |
Does not exist
|
|
| lunar |
Does not exist
|
|
|
linux-oem-5.13 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| impish |
Does not exist
|
|
| focal |
Ignored
(was needed now end-of-life)
|
|
| upstream |
Released
(5.17~rc3)
|
|
| jammy |
Does not exist
|
|
| kinetic |
Does not exist
|
|
| lunar |
Does not exist
|
|
|
linux-oem-5.14 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| impish |
Does not exist
|
|
| focal |
Released
(5.14.0-1024.26)
|
|
| upstream |
Released
(5.17~rc3)
|
|
| jammy |
Does not exist
|
|
| kinetic |
Does not exist
|
|
| lunar |
Does not exist
|
|
|
linux-oem-osp1 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| focal |
Does not exist
|
|
| impish |
Does not exist
|
|
| bionic |
Ignored
(was needed now end-of-life)
|
|
| upstream |
Released
(5.17~rc3)
|
|
| jammy |
Does not exist
|
|
| kinetic |
Does not exist
|
|
| lunar |
Does not exist
|
|
|
linux-raspi Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| impish |
Released
(5.13.0-1022.24)
|
|
| focal |
Released
(5.4.0-1056.63)
|
|
| upstream |
Released
(5.17~rc3)
|
|
| jammy |
Not vulnerable
(5.15.0-1004.4)
|
|
| kinetic |
Not vulnerable
(5.15.0-1005.5)
|
|
| lunar |
Not vulnerable
(5.19.0-1004.10)
|
|
|
linux-raspi2 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| focal |
Ignored
(replaced by linux-raspi)
|
|
| impish |
Does not exist
|
|
| xenial |
Ignored
(was needed now end-of-life)
|
|
| bionic |
Released
(4.15.0-1106.113)
|
|
| upstream |
Released
(5.17~rc3)
|
|
| jammy |
Does not exist
|
|
| kinetic |
Does not exist
|
|
| lunar |
Does not exist
|
|
|
linux-raspi2-5.3 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| bionic |
Ignored
(superseded by linux-raspi-5.4)
|
|
| focal |
Does not exist
|
|
| impish |
Does not exist
|
|
| upstream |
Released
(5.17~rc3)
|
|
| jammy |
Does not exist
|
|
| kinetic |
Does not exist
|
|
| lunar |
Does not exist
|
|
|
linux-raspi-5.4 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| focal |
Does not exist
|
|
| impish |
Does not exist
|
|
| bionic |
Released
(5.4.0-1056.63~18.04.1)
|
|
| upstream |
Released
(5.17~rc3)
|
|
| jammy |
Does not exist
|
|
| kinetic |
Does not exist
|
|
| lunar |
Does not exist
|
|
|
linux-riscv Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| focal |
Ignored
(superseded by linux-riscv-5.8)
|
|
| upstream |
Released
(5.17~rc3)
|
|
| impish |
Released
(5.13.0-1017.19)
|
|
| jammy |
Not vulnerable
(5.15.0-1005.5)
|
|
| kinetic |
Not vulnerable
(5.15.0-1007.7)
|
|
| lunar |
Not vulnerable
(5.19.0-1004.4)
|
|
|
linux-riscv-5.8 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| focal |
Ignored
(superseded by linux-riscv-5.11)
|
|
| impish |
Does not exist
|
|
| upstream |
Released
(5.17~rc3)
|
|
| jammy |
Does not exist
|
|
| kinetic |
Does not exist
|
|
| lunar |
Does not exist
|
|
|
linux-riscv-5.11 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| impish |
Does not exist
|
|
| upstream |
Released
(5.17~rc3)
|
|
| focal |
Ignored
(was needed now end-of-life)
|
|
| jammy |
Does not exist
|
|
| kinetic |
Does not exist
|
|
| lunar |
Does not exist
|
|
|
linux-snapdragon Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| focal |
Does not exist
|
|
| impish |
Does not exist
|
|
| upstream |
Released
(5.17~rc3)
|
|
| xenial |
Ignored
(was needed now end-of-life)
|
|
| bionic |
Released
(4.15.0-1123.132)
|
|
| jammy |
Does not exist
|
|
| kinetic |
Does not exist
|
|
| lunar |
Does not exist
|
|
|
linux-fips Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| bionic |
Does not exist
|
|
| focal |
Does not exist
|
|
| hirsute |
Does not exist
|
|
| impish |
Does not exist
|
|
| upstream |
Released
(5.17~rc3)
|
|
| xenial |
Ignored
(out of standard support)
|
|
| jammy |
Does not exist
|
|
| kinetic |
Does not exist
|
|
| lunar |
Does not exist
|
|
|
linux-azure-fde Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| impish |
Does not exist
|
|
| focal |
Released
(5.4.0-1073.76)
|
|
| upstream |
Released
(5.17~rc3)
|
|
| jammy |
Not vulnerable
(5.15.0-1002.3)
|
|
| kinetic |
Does not exist
|
|
| lunar |
Does not exist
|
|
|
linux-lowlatency Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| focal |
Does not exist
|
|
| impish |
Does not exist
|
|
| jammy |
Not vulnerable
(5.15.0-23.23)
|
|
| upstream |
Released
(5.17~rc3)
|
|
| kinetic |
Not vulnerable
(5.15.0-24.24)
|
|
| lunar |
Not vulnerable
(5.19.0-1007.7)
|
|
|
linux-oem-5.17 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| focal |
Does not exist
|
|
| impish |
Does not exist
|
|
| jammy |
Not vulnerable
(5.17.0-1003.3)
|
|
| upstream |
Released
(5.17~rc3)
|
|
| kinetic |
Not vulnerable
(5.17.0-1003.3)
|
|
| lunar |
Does not exist
|
|
|
linux-intel-iotg Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| focal |
Does not exist
|
|
| impish |
Does not exist
|
|
| jammy |
Not vulnerable
(5.15.0-1004.6)
|
|
| upstream |
Released
(5.17~rc3)
|
|
| kinetic |
Does not exist
|
|
| lunar |
Does not exist
|
|
|
linux-intel-iotg-5.15 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| impish |
Does not exist
|
|
| jammy |
Does not exist
|
|
| focal |
Pending
(5.15.0-1008.11~20.04.1)
|
|
| upstream |
Released
(5.17~rc3)
|
|
| kinetic |
Does not exist
|
|
| lunar |
Does not exist
|
|
|
linux-lowlatency-hwe-5.15 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| jammy |
Does not exist
|
|
| focal |
Not vulnerable
(5.15.0-33.34~20.04.1)
|
|
| upstream |
Released
(5.17~rc3)
|
|
| kinetic |
Does not exist
|
|
| lunar |
Does not exist
|
|
|
linux-hwe-5.15 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| jammy |
Does not exist
|
|
| focal |
Not vulnerable
(5.15.0-33.34~20.04.1)
|
|
| upstream |
Released
(5.17~rc3)
|
|
| kinetic |
Does not exist
|
|
| lunar |
Does not exist
|
|
|
linux-aws-5.15 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| jammy |
Does not exist
|
|
| upstream |
Released
(5.17~rc3)
|
|
| focal |
Not vulnerable
(5.15.0-1014.18~20.04.1)
|
|
| kinetic |
Does not exist
|
|
| lunar |
Does not exist
|
|
|
linux-gcp-5.15 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| jammy |
Does not exist
|
|
| focal |
Not vulnerable
(5.15.0-1006.9~20.04.1)
|
|
| upstream |
Released
(5.17~rc3)
|
|
| kinetic |
Does not exist
|
|
| lunar |
Does not exist
|
|
|
linux-gke-5.15 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| jammy |
Does not exist
|
|
| kinetic |
Does not exist
|
|
| focal |
Not vulnerable
(5.15.0-1011.14~20.04.1)
|
|
| upstream |
Released
(5.17~rc3)
|
|
| lunar |
Does not exist
|
|
|
linux-azure-5.15 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| jammy |
Does not exist
|
|
| focal |
Not vulnerable
(5.15.0-1007.8~20.04.1)
|
|
| upstream |
Released
(5.17~rc3)
|
|
| kinetic |
Does not exist
|
|
| lunar |
Does not exist
|
|
|
linux-oracle-5.15 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| jammy |
Does not exist
|
|
| focal |
Not vulnerable
(5.15.0-1007.9~20.04.1)
|
|
| kinetic |
Does not exist
|
|
| upstream |
Released
(5.17~rc3)
|
|
| lunar |
Does not exist
|
|
|
linux-azure-fde-5.15 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| jammy |
Does not exist
|
|
| kinetic |
Does not exist
|
|
| upstream |
Released
(5.17~rc3)
|
|
| lunar |
Does not exist
|
|
| focal |
Not vulnerable
(5.15.0-1007.8~20.04.1)
|
|
|
linux-oem-6.0 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| focal |
Does not exist
|
|
| kinetic |
Does not exist
|
|
| jammy |
Not vulnerable
(6.0.0-1006.6)
|
|
| upstream |
Released
(5.17~rc3)
|
|
| lunar |
Does not exist
|
|
|
linux-oem-6.1 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| focal |
Does not exist
|
|
| kinetic |
Does not exist
|
|
| jammy |
Not vulnerable
(6.1.0-1004.4)
|
|
| upstream |
Released
(5.17~rc3)
|
|
| lunar |
Does not exist
|
|
|
linux-hwe-5.19 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| focal |
Does not exist
|
|
| jammy |
Not vulnerable
|
|
| kinetic |
Does not exist
|
|
| upstream |
Needs triage
|
|
| lunar |
Does not exist
|
|
|
linux-lowlatency-hwe-5.19 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| focal |
Does not exist
|
|
| jammy |
Not vulnerable
|
|
| kinetic |
Does not exist
|
|
| upstream |
Needs triage
|
|
| lunar |
Does not exist
|
|
|
linux-azure-5.19 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| focal |
Does not exist
|
|
| jammy |
Not vulnerable
|
|
| kinetic |
Does not exist
|
|
| upstream |
Needs triage
|
|
| lunar |
Does not exist
|
|
|
linux-iot Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| focal |
Not vulnerable
|
|
| jammy |
Does not exist
|
|
| kinetic |
Does not exist
|
|
| lunar |
Does not exist
|
|
| upstream |
Needs triage
|
|
|
linux-riscv-5.15 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| focal |
Not vulnerable
|
|
| jammy |
Does not exist
|
|
| kinetic |
Does not exist
|
|
| lunar |
Does not exist
|
|
| upstream |
Needs triage
|
|
|
linux-azure-fde-5.19 Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| focal |
Does not exist
|
|
| jammy |
Not vulnerable
|
|
| kinetic |
Does not exist
|
|
| lunar |
Does not exist
|
|
| upstream |
Needs triage
|
|
|
linux-xilinx-zynqmp Launchpad, Ubuntu, Debian |
trusty |
Does not exist
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| focal |
Not vulnerable
|
|
| jammy |
Does not exist
|
|
| kinetic |
Does not exist
|
|
| lunar |
Does not exist
|
|
| upstream |
Needs triage
|
|
Severity score breakdown
| Parameter | Value |
|---|---|
| Base score | 7.8 |
| Attack vector | Local |
| Attack complexity | Low |
| Privileges required | Low |
| User interaction | None |
| Scope | Unchanged |
| Confidentiality | High |
| Integrity impact | High |
| Availability impact | High |
| Vector | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
References
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0492
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=24f6008564183aa120d07c03d9289519c2fe02af
- https://www.openwall.com/lists/oss-security/2022/02/04/1
- https://ubuntu.com/security/notices/USN-5302-1
- https://ubuntu.com/security/notices/USN-5337-1
- https://ubuntu.com/security/notices/USN-5338-1
- https://ubuntu.com/security/notices/USN-5339-1
- https://ubuntu.com/security/notices/USN-5343-1
- https://ubuntu.com/security/notices/USN-5362-1
- https://ubuntu.com/security/notices/USN-5368-1
- https://ubuntu.com/security/notices/USN-5377-1
- NVD
- Launchpad
- Debian