Your submission was sent successfully! Close

CVE-2022-28356

Published: 2 April 2022

In the Linux kernel before 5.17.1, a refcount leak bug was found in net/llc/af_llc.c.

From the Ubuntu security team

赵子轩 discovered that the 802.2 LLC type 2 driver in the Linux kernel did not properly perform reference counting in some error conditions. A local attacker could use this to cause a denial of service.

Notes

AuthorNote
cascardo
LLC sockets are not supported on network namespaces and require CAP_NET_RAW
Priority

Low

CVSS 3 base score: 5.5

Status

Package Release Status
linux-hwe
Launchpad, Ubuntu, Debian
trusty Does not exist

bionic Ignored
(replaced by linux-hwe-5.4)
focal Does not exist

impish Does not exist

upstream
Released (5.18~rc1)
xenial
Released (4.15.0-184.194~16.04.1)
jammy Does not exist

linux-hwe-5.4
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

focal Does not exist

impish Does not exist

upstream
Released (5.18~rc1)
jammy Does not exist

bionic
Released (5.4.0-117.132~18.04.1)
linux-hwe-5.8
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

bionic Does not exist

focal Ignored
(superseded by linux-hwe-5.11)
impish Does not exist

upstream
Released (5.18~rc1)
jammy Does not exist

linux-hwe-5.11
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

bionic Does not exist

focal Ignored
(superseded by linux-hwe-5.13)
impish Does not exist

upstream
Released (5.18~rc1)
jammy Does not exist

linux-hwe-5.13
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

bionic Does not exist

impish Does not exist

focal Ignored
(was needed now end-of-life)
upstream
Released (5.18~rc1)
jammy Does not exist

linux-hwe-edge
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Ignored
(superseded by linux-hwe)
bionic Ignored
(superseded by linux-hwe-5.4)
focal Does not exist

impish Does not exist

upstream
Released (5.18~rc1)
jammy Does not exist

linux-lts-xenial
Launchpad, Ubuntu, Debian
xenial Does not exist

bionic Does not exist

focal Does not exist

impish Does not exist

trusty
Released (4.4.0-229.263~14.04.1)
upstream
Released (5.18~rc1)
jammy Does not exist

linux-kvm
Launchpad, Ubuntu, Debian
trusty Does not exist

impish Ignored
(reached end-of-life)
upstream
Released (5.18~rc1)
xenial
Released (4.4.0-1110.120)
jammy
Released (5.15.0-1008.8)
bionic
Released (4.15.0-1119.123)
focal
Released (5.4.0-1068.72)
linux-aws-5.0
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

bionic Ignored
(superseded by linux-aws-5.3)
focal Does not exist

impish Does not exist

upstream
Released (5.18~rc1)
jammy Does not exist

linux-aws-5.3
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

bionic Ignored
(superseded by linux-aws-5.4)
focal Does not exist

impish Does not exist

upstream
Released (5.18~rc1)
jammy Does not exist

linux-aws-5.4
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

focal Does not exist

impish Does not exist

bionic
Released (5.4.0-1078.84~18.04.1)
upstream
Released (5.18~rc1)
jammy Does not exist

linux-aws-5.8
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

bionic Does not exist

focal Ignored
(superseded by linux-aws-5.11)
impish Does not exist

upstream
Released (5.18~rc1)
jammy Does not exist

linux-aws-5.11
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

bionic Does not exist

impish Does not exist

focal Ignored
(was needs-triage now end-of-life)
upstream
Released (5.18~rc1)
jammy Does not exist

linux-aws-5.13
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

bionic Does not exist

impish Does not exist

focal Ignored
(was needed now end-of-life)
upstream
Released (5.18~rc1)
jammy Does not exist

linux-aws-hwe
Launchpad, Ubuntu, Debian
trusty Does not exist

bionic Does not exist

focal Does not exist

impish Does not exist

upstream
Released (5.18~rc1)
xenial
Released (4.15.0-1133.143~16.04.1)
jammy Does not exist

linux-azure
Launchpad, Ubuntu, Debian
bionic Ignored
(superseded by linux-azure-5.3)
focal
Released (5.4.0-1083.87)
impish Ignored
(reached end-of-life)
trusty
Released (4.15.0-1142.156~14.04.1)
upstream
Released (5.18~rc1)
xenial
Released (4.15.0-1142.156~16.04.1)
jammy
Released (5.15.0-1008.9)
linux-azure-4.15
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

focal Does not exist

impish Does not exist

bionic
Released (4.15.0-1142.156)
upstream
Released (5.18~rc1)
jammy Does not exist

linux-azure-5.3
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

bionic Ignored
(superseded by linux-azure-5.4)
focal Does not exist

impish Does not exist

upstream
Released (5.18~rc1)
jammy Does not exist

linux-azure-5.4
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

focal Does not exist

impish Does not exist

bionic
Released (5.4.0-1083.87~18.04.1)
upstream
Released (5.18~rc1)
jammy Does not exist

linux-azure-5.8
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

bionic Does not exist

focal Ignored
(superseded by linux-azure-5.11)
impish Does not exist

upstream
Released (5.18~rc1)
jammy Does not exist

linux-azure-5.11
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

bionic Does not exist

impish Does not exist

focal Ignored
(was needs-triage now end-of-life)
upstream
Released (5.18~rc1)
jammy Does not exist

linux-azure-5.13
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

bionic Does not exist

impish Does not exist

focal Ignored
(was needed now end-of-life)
upstream
Released (5.18~rc1)
jammy Does not exist

linux-azure-fde
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

bionic Does not exist

impish Does not exist

focal Not vulnerable
(5.4.0-1063.66+cvm2.2)
upstream
Released (5.18~rc1)
jammy
Released (5.15.0-1008.9)
linux-bluefield
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

bionic Does not exist

impish Does not exist

focal
Released (5.4.0-1040.44)
upstream
Released (5.18~rc1)
jammy Not vulnerable

linux-dell300x
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

focal Does not exist

impish Does not exist

bionic
Released (4.15.0-1047.52)
upstream
Released (5.18~rc1)
jammy Does not exist

linux-azure-edge
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

bionic Ignored
(superseded by linux-azure-5.3)
focal Does not exist

impish Does not exist

upstream
Released (5.18~rc1)
jammy Does not exist

linux-fips
Launchpad, Ubuntu, Debian
trusty Does not exist

bionic Does not exist

focal Does not exist

hirsute Does not exist

impish Does not exist

upstream
Released (5.18~rc1)
xenial Not vulnerable
(4.4.0-1082.89)
jammy Does not exist

linux-gcp
Launchpad, Ubuntu, Debian
trusty Does not exist

bionic Ignored
(superseded by linux-gcp-5.3)
focal
Released (5.4.0-1078.84)
impish Ignored
(reached end-of-life)
upstream
Released (5.18~rc1)
xenial
Released (4.15.0-1127.142~16.04.1)
jammy
Released (5.15.0-1006.9)
linux-gcp-4.15
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

focal Does not exist

impish Does not exist

bionic
Released (4.15.0-1127.142)
upstream
Released (5.18~rc1)
jammy Does not exist

linux-gcp-5.3
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

bionic Ignored
(superseded by linux-gcp-5.4)
focal Does not exist

impish Does not exist

upstream
Released (5.18~rc1)
jammy Does not exist

linux-gcp-5.4
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

focal Does not exist

impish Does not exist

upstream
Released (5.18~rc1)
jammy Does not exist

bionic
Released (5.4.0-1078.84~18.04.1)
linux-gcp-5.8
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

bionic Does not exist

focal Ignored
(superseded by linux-gcp-5.11)
impish Does not exist

upstream
Released (5.18~rc1)
jammy Does not exist

linux-gcp-5.11
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

bionic Does not exist

impish Does not exist

focal Ignored
(was needs-triage now end-of-life)
upstream
Released (5.18~rc1)
jammy Does not exist

linux-gcp-5.13
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

bionic Does not exist

impish Does not exist

focal Ignored
(was needed now end-of-life)
upstream
Released (5.18~rc1)
jammy Does not exist

linux-gke
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Ignored
(reached end of standard support)
bionic Does not exist

impish Does not exist

upstream
Released (5.18~rc1)
jammy
Released (5.15.0-1006.7)
focal
Released (5.4.0-1074.79)
linux-gke-4.15
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

focal Does not exist

impish Does not exist

bionic Ignored
(was needs-triage now end-of-life)
upstream
Released (5.18~rc1)
jammy Does not exist

linux-gke-5.0
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

bionic Ignored
(superseded by linux-gke-5.3)
focal Does not exist

impish Does not exist

upstream
Released (5.18~rc1)
jammy Does not exist

linux-gke-5.3
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

bionic Ignored
(superseded by linux-gke-5.4)
focal Does not exist

impish Does not exist

upstream
Released (5.18~rc1)
jammy Does not exist

linux-gke-5.4
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

bionic
Released (5.4.0-1074.79~18.04.1)
focal Does not exist

impish Does not exist

upstream
Released (5.18~rc1)
jammy Does not exist

linux-gkeop
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

bionic Does not exist

impish Does not exist

upstream
Released (5.18~rc1)
jammy Not vulnerable
(5.15.0-1001.2)
focal
Released (5.4.0-1046.48)
linux-gkeop-5.4
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

focal Does not exist

impish Does not exist

upstream
Released (5.18~rc1)
jammy Does not exist

bionic
Released (5.4.0-1046.48~18.04.1)
linux-ibm
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

bionic Does not exist

impish Does not exist

upstream
Released (5.18~rc1)
focal
Released (5.4.0-1026.29)
jammy
Released (5.15.0-1005.5)
linux-ibm-5.4
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

focal Does not exist

impish Does not exist

upstream
Released (5.18~rc1)
jammy Does not exist

bionic
Released (5.4.0-1028.32~18.04.1)
linux-intel-5.13
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

bionic Does not exist

impish Does not exist

focal Ignored
(was needs-triage now end-of-life)
upstream
Released (5.18~rc1)
jammy Does not exist

linux-oracle
Launchpad, Ubuntu, Debian
trusty Does not exist

impish Ignored
(reached end-of-life)
upstream
Released (5.18~rc1)
jammy
Released (5.15.0-1007.9)
bionic
Released (4.15.0-1098.108)
focal
Released (5.4.0-1076.83)
xenial
Released (4.15.0-1098.108~16.04.1)
linux-oracle-5.0
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

bionic Ignored
(superseded by linux-oracle-5.3)
focal Does not exist

impish Does not exist

upstream
Released (5.18~rc1)
jammy Does not exist

linux-oracle-5.3
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

bionic Ignored
(superseded by linux-oracle-5.4)
focal Does not exist

impish Does not exist

upstream
Released (5.18~rc1)
jammy Does not exist

linux-oracle-5.4
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

focal Does not exist

impish Does not exist

upstream
Released (5.18~rc1)
jammy Does not exist

bionic
Released (5.4.0-1076.83~18.04.1)
linux-oracle-5.8
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

bionic Does not exist

focal Ignored
(superseded by linux-oracle-5.11)
impish Does not exist

upstream
Released (5.18~rc1)
jammy Does not exist

linux-oracle-5.11
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

bionic Does not exist

impish Does not exist

focal Ignored
(was needs-triage now end-of-life)
upstream
Released (5.18~rc1)
jammy Does not exist

linux-oracle-5.13
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

bionic Does not exist

impish Does not exist

focal Ignored
(was needed now end-of-life)
upstream
Released (5.18~rc1)
jammy Does not exist

linux-oem
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Ignored
(superseded by linux-hwe)
focal Does not exist

impish Does not exist

bionic Ignored
(was needs-triage now end-of-life)
upstream
Released (5.18~rc1)
jammy Does not exist

linux-oem-5.6
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

bionic Does not exist

impish Does not exist

focal Ignored
(was needs-triage now end-of-life)
upstream
Released (5.18~rc1)
jammy Does not exist

linux-oem-5.10
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

bionic Does not exist

impish Does not exist

focal Ignored
(was needs-triage now end-of-life)
upstream
Released (5.18~rc1)
jammy Does not exist

linux-oem-5.13
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

bionic Does not exist

impish Does not exist

focal Ignored
(was needs-triage now end-of-life)
upstream
Released (5.18~rc1)
jammy Does not exist

linux-oem-5.14
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

bionic Does not exist

impish Does not exist

upstream
Released (5.18~rc1)
focal
Released (5.14.0-1033.36)
jammy Does not exist

linux-oem-osp1
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

focal Does not exist

impish Does not exist

bionic Ignored
(was needs-triage now end-of-life)
upstream
Released (5.18~rc1)
jammy Does not exist

linux-raspi
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

bionic Does not exist

impish Ignored
(reached end-of-life)
upstream
Released (5.18~rc1)
focal
Released (5.4.0-1065.75)
jammy
Released (5.15.0-1011.13)
linux-raspi2
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Ignored
(end of standard support)
focal Ignored
(replaced by linux-raspi)
impish Does not exist

upstream
Released (5.18~rc1)
jammy Does not exist

bionic
Released (4.15.0-1114.122)
linux-raspi2-5.3
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

bionic Ignored
(superseded by linux-raspi-5.4)
focal Does not exist

impish Does not exist

upstream
Released (5.18~rc1)
jammy Does not exist

linux-raspi-5.4
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

focal Does not exist

impish Does not exist

upstream
Released (5.18~rc1)
jammy Does not exist

bionic
Released (5.4.0-1065.75~18.04.1)
linux-riscv
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

bionic Does not exist

focal Ignored
(superseded by linux-riscv-5.8)
impish Ignored
(reached end-of-life)
upstream
Released (5.18~rc1)
jammy
Released (5.15.0-1012.13)
linux-riscv-5.8
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

bionic Does not exist

focal Ignored
(superseded by linux-riscv-5.11)
impish Does not exist

upstream
Released (5.18~rc1)
jammy Does not exist

linux-riscv-5.11
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

bionic Does not exist

impish Does not exist

focal Ignored
(was needs-triage now end-of-life)
upstream
Released (5.18~rc1)
jammy Does not exist

linux-snapdragon
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Ignored
(end of standard support)
focal Does not exist

impish Does not exist

upstream
Released (5.18~rc1)
jammy Does not exist

bionic
Released (4.15.0-1132.142)
linux
Launchpad, Ubuntu, Debian
bionic
Released (4.15.0-184.194)
focal
Released (5.4.0-117.132)
impish Ignored
(reached end-of-life)
trusty Ignored
(was needed ESM criteria)
upstream
Released (5.18~rc1)
xenial
Released (4.4.0-229.263)
jammy
Released (5.15.0-35.36)
Patches:
Introduced by

1da177e4c3f41524e886b7f1b8a0c1fc7321cac2

Fixed by 764f4eb6846f5475f1244767d24d25dd86528a4a
Introduced by

764f4eb6846f5475f1244767d24d25dd86528a4a

Fixed by 2d327a79ee176930dc72c131a970c891d367c1dc
linux-aws
Launchpad, Ubuntu, Debian
bionic
Released (4.15.0-1133.143)
focal
Released (5.4.0-1078.84)
impish Ignored
(reached end-of-life)
trusty
Released (4.4.0-1109.115)
upstream
Released (5.18~rc1)
xenial
Released (4.4.0-1145.160)
jammy
Released (5.15.0-1009.11)
linux-lowlatency
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

bionic Does not exist

focal Does not exist

impish Does not exist

jammy
Released (5.15.0-35.36)
upstream
Released (5.18~rc1)
linux-oem-5.17
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

bionic Does not exist

focal Does not exist

impish Does not exist

jammy
Released (5.17.0-1004.4)
upstream
Released (5.18~rc1)
linux-intel-iotg
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

bionic Does not exist

focal Does not exist

impish Does not exist

jammy
Released (5.15.0-1008.11)
upstream
Released (5.18~rc1)
linux-intel-iotg-5.15
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

bionic Does not exist

impish Does not exist

jammy Does not exist

focal Pending
(5.15.0-1008.11~20.04.1)
upstream
Released (5.18~rc1)
linux-lowlatency-hwe-5.15
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

bionic Does not exist

jammy Does not exist

focal
Released (5.15.0-42.45~20.04.1)
upstream
Released (5.18~rc1)
linux-hwe-5.15
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

bionic Does not exist

jammy Does not exist

focal
Released (5.15.0-41.44~20.04.1)
upstream
Released (5.18~rc1)
linux-aws-5.15
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

bionic Does not exist

jammy Does not exist

upstream
Released (5.18~rc1)
focal Not vulnerable
(5.15.0-1014.18~20.04.1)
linux-gcp-5.15
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

bionic Does not exist

focal Not vulnerable
(5.15.0-1006.9~20.04.1)
jammy Does not exist

upstream
Released (5.18~rc1)
linux-gke-5.15
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

bionic Does not exist

focal Not vulnerable
(5.15.0-1011.14~20.04.1)
jammy Does not exist

upstream
Released (5.18~rc1)
linux-azure-5.15
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

bionic Does not exist

focal Pending
(5.15.0-1008.9~20.04.1)
jammy Does not exist

upstream
Released (5.18~rc1)