Your submission was sent successfully! Close

CVE-2022-28390

Published: 3 April 2022

ems_usb_start_xmit in drivers/net/can/usb/ems_usb.c in the Linux kernel through 5.17.1 has a double free.

From the Ubuntu security team

It was discovered that the EMS CAN/USB interface implementation in the Linux kernel contained a double-free vulnerability when handling certain error conditions. A local attacker could use this to cause a denial of service (memory exhaustion).

Priority

Medium

CVSS 3 base score: 7.8

Status

Package Release Status
linux-hwe
Launchpad, Ubuntu, Debian
trusty Does not exist

bionic Ignored
(replaced by linux-hwe-5.4)
focal Does not exist

impish Does not exist

upstream
Released (5.18~rc1)
jammy Does not exist

xenial
Released (4.15.0-184.194~16.04.1)
linux-hwe-5.4
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

focal Does not exist

impish Does not exist

upstream
Released (5.18~rc1)
jammy Does not exist

bionic
Released (5.4.0-117.132~18.04.1)
linux-hwe-5.8
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

bionic Does not exist

focal Ignored
(superseded by linux-hwe-5.11)
impish Does not exist

upstream
Released (5.18~rc1)
jammy Does not exist

linux-hwe-5.11
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

bionic Does not exist

focal Ignored
(superseded by linux-hwe-5.13)
impish Does not exist

upstream
Released (5.18~rc1)
jammy Does not exist

linux-hwe-5.13
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

bionic Does not exist

impish Does not exist

upstream
Released (5.18~rc1)
jammy Does not exist

focal
Released (5.13.0-48.54~20.04.1)
linux-hwe-edge
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Ignored
(superseded by linux-hwe)
bionic Ignored
(superseded by linux-hwe-5.4)
focal Does not exist

impish Does not exist

upstream
Released (5.18~rc1)
jammy Does not exist

linux-lts-xenial
Launchpad, Ubuntu, Debian
xenial Does not exist

bionic Does not exist

focal Does not exist

impish Does not exist

trusty
Released (4.4.0-224.257~14.04.1)
upstream
Released (5.18~rc1)
jammy Does not exist

linux-kvm
Launchpad, Ubuntu, Debian
trusty Does not exist

upstream
Released (5.18~rc1)
xenial
Released (4.4.0-1105.114)
bionic
Released (4.15.0-1119.123)
focal
Released (5.4.0-1068.72)
impish Ignored
(was pending [5.13.0-1030.33] now end-of-life)
jammy
Released (5.15.0-1008.8)
linux-aws-5.0
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

bionic Ignored
(superseded by linux-aws-5.3)
focal Does not exist

impish Does not exist

upstream
Released (5.18~rc1)
jammy Does not exist

linux-aws-5.3
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

bionic Ignored
(superseded by linux-aws-5.4)
focal Does not exist

impish Does not exist

upstream
Released (5.18~rc1)
jammy Does not exist

linux-aws-5.4
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

bionic
Released (5.4.0-1078.84~18.04.1)
focal Does not exist

impish Does not exist

upstream
Released (5.18~rc1)
jammy Does not exist

linux-aws-5.8
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

bionic Does not exist

focal Ignored
(superseded by linux-aws-5.11)
impish Does not exist

upstream
Released (5.18~rc1)
jammy Does not exist

linux-aws-5.11
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

bionic Does not exist

focal Ignored
(was needs-triage now end-of-life)
impish Does not exist

upstream
Released (5.18~rc1)
jammy Does not exist

linux-aws-5.13
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

bionic Does not exist

focal
Released (5.13.0-1028.31~20.04.1)
impish Does not exist

upstream
Released (5.18~rc1)
jammy Does not exist

linux-aws-hwe
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial
Released (4.15.0-1133.143~16.04.1)
bionic Does not exist

focal Does not exist

impish Does not exist

upstream
Released (5.18~rc1)
jammy Does not exist

linux-azure
Launchpad, Ubuntu, Debian
trusty
Released (4.15.0-1142.156~14.04.1)
xenial
Released (4.15.0-1142.156~16.04.1)
bionic Ignored
(superseded by linux-azure-5.3)
focal
Released (5.4.0-1083.87)
impish Ignored
(was pending [5.13.0-1026.30] now end-of-life)
upstream
Released (5.18~rc1)
jammy
Released (5.15.0-1008.9)
linux-azure-4.15
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

bionic
Released (4.15.0-1142.156)
focal Does not exist

impish Does not exist

upstream
Released (5.18~rc1)
jammy Does not exist

linux-azure-5.3
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

bionic Ignored
(superseded by linux-azure-5.4)
focal Does not exist

impish Does not exist

upstream
Released (5.18~rc1)
jammy Does not exist

linux-azure-5.4
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

bionic
Released (5.4.0-1083.87~18.04.1)
focal Does not exist

impish Does not exist

upstream
Released (5.18~rc1)
jammy Does not exist

linux-azure-5.8
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

bionic Does not exist

focal Ignored
(superseded by linux-azure-5.11)
impish Does not exist

upstream
Released (5.18~rc1)
jammy Does not exist

linux-azure-5.11
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

bionic Does not exist

focal Ignored
(was needs-triage now end-of-life)
impish Does not exist

upstream
Released (5.18~rc1)
jammy Does not exist

linux-azure-5.13
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

bionic Does not exist

focal
Released (5.13.0-1028.33~20.04.1)
impish Does not exist

upstream
Released (5.18~rc1)
jammy Does not exist

linux-azure-fde
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

bionic Does not exist

impish Does not exist

focal Not vulnerable
(5.4.0-1063.66+cvm2.2)
upstream
Released (5.18~rc1)
jammy
Released (5.15.0-1008.9)
linux-bluefield
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

bionic Does not exist

impish Does not exist

focal
Released (5.4.0-1040.44)
upstream
Released (5.18~rc1)
jammy Not vulnerable

linux-dell300x
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

focal Does not exist

impish Does not exist

upstream
Released (5.18~rc1)
jammy Does not exist

bionic
Released (4.15.0-1047.52)
linux-azure-edge
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

bionic Ignored
(superseded by linux-azure-5.3)
focal Does not exist

impish Does not exist

upstream
Released (5.18~rc1)
jammy Does not exist

linux-fips
Launchpad, Ubuntu, Debian
trusty Does not exist

bionic Does not exist

focal Does not exist

hirsute Does not exist

impish Does not exist

upstream
Released (5.18~rc1)
jammy Does not exist

xenial Not vulnerable
(4.4.0-1082.89)
linux-gcp
Launchpad, Ubuntu, Debian
trusty Does not exist

bionic Ignored
(superseded by linux-gcp-5.3)
upstream
Released (5.18~rc1)
focal
Released (5.4.0-1078.84)
impish Ignored
(was pending [5.13.0-1028.33] now end-of-life)
jammy
Released (5.15.0-1006.9)
xenial
Released (4.15.0-1127.142~16.04.1)
linux-gcp-4.15
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

focal Does not exist

impish Does not exist

upstream
Released (5.18~rc1)
jammy Does not exist

bionic
Released (4.15.0-1127.142)
linux-gcp-5.3
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

bionic Ignored
(superseded by linux-gcp-5.4)
focal Does not exist

impish Does not exist

upstream
Released (5.18~rc1)
jammy Does not exist

linux-gcp-5.4
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

focal Does not exist

impish Does not exist

upstream
Released (5.18~rc1)
jammy Does not exist

bionic
Released (5.4.0-1078.84~18.04.1)
linux-gcp-5.8
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

bionic Does not exist

focal Ignored
(superseded by linux-gcp-5.11)
impish Does not exist

upstream
Released (5.18~rc1)
jammy Does not exist

linux-gcp-5.11
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

bionic Does not exist

impish Does not exist

focal Ignored
(was needs-triage now end-of-life)
upstream
Released (5.18~rc1)
jammy Does not exist

linux-gcp-5.13
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

bionic Does not exist

impish Does not exist

focal
Released (5.13.0-1030.36~20.04.1)
upstream
Released (5.18~rc1)
jammy Does not exist

linux-gke
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Ignored
(reached end of standard support)
bionic Does not exist

impish Does not exist

upstream
Released (5.18~rc1)
jammy
Released (5.15.0-1006.7)
focal
Released (5.4.0-1074.79)
linux-gke-4.15
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

focal Does not exist

impish Does not exist

bionic Ignored
(was needs-triage now end-of-life)
upstream
Released (5.18~rc1)
jammy Does not exist

linux-gke-5.0
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

bionic Ignored
(superseded by linux-gke-5.3)
focal Does not exist

impish Does not exist

upstream
Released (5.18~rc1)
jammy Does not exist

linux-gke-5.3
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

bionic Ignored
(superseded by linux-gke-5.4)
focal Does not exist

impish Does not exist

upstream
Released (5.18~rc1)
jammy Does not exist

linux-gke-5.4
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

focal Does not exist

impish Does not exist

upstream
Released (5.18~rc1)
jammy Does not exist

bionic
Released (5.4.0-1074.79~18.04.1)
linux-gkeop
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

bionic Does not exist

impish Does not exist

upstream
Released (5.18~rc1)
jammy Not vulnerable
(5.15.0-1001.2)
focal
Released (5.4.0-1046.48)
linux-gkeop-5.4
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

focal Does not exist

impish Does not exist

upstream
Released (5.18~rc1)
jammy Does not exist

bionic
Released (5.4.0-1046.48~18.04.1)
linux-ibm
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

bionic Does not exist

impish Does not exist

upstream
Released (5.18~rc1)
focal
Released (5.4.0-1026.29)
jammy
Released (5.15.0-1005.5)
linux-ibm-5.4
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

focal Does not exist

impish Does not exist

upstream
Released (5.18~rc1)
jammy Does not exist

bionic
Released (5.4.0-1028.32~18.04.1)
linux-intel-5.13
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

bionic Does not exist

impish Does not exist

focal
Released (5.13.0-1014.15)
upstream
Released (5.18~rc1)
jammy Does not exist

linux-oracle
Launchpad, Ubuntu, Debian
trusty Does not exist

bionic
Released (4.15.0-1098.108)
focal
Released (5.4.0-1076.83)
impish Ignored
(was pending [5.13.0-1031.36] now end-of-life)
upstream
Released (5.18~rc1)
xenial
Released (4.15.0-1098.108~16.04.1)
jammy
Released (5.15.0-1007.9)
linux-oracle-5.0
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

bionic Ignored
(superseded by linux-oracle-5.3)
focal Does not exist

impish Does not exist

upstream
Released (5.18~rc1)
jammy Does not exist

linux-oracle-5.3
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

bionic Ignored
(superseded by linux-oracle-5.4)
focal Does not exist

impish Does not exist

upstream
Released (5.18~rc1)
jammy Does not exist

linux-oracle-5.4
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

focal Does not exist

impish Does not exist

bionic
Released (5.4.0-1076.83~18.04.1)
upstream
Released (5.18~rc1)
jammy Does not exist

linux-oracle-5.8
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

bionic Does not exist

focal Ignored
(superseded by linux-oracle-5.11)
impish Does not exist

upstream
Released (5.18~rc1)
jammy Does not exist

linux-oracle-5.11
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

bionic Does not exist

impish Does not exist

focal Ignored
(was needs-triage now end-of-life)
upstream
Released (5.18~rc1)
jammy Does not exist

linux-oracle-5.13
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

bionic Does not exist

impish Does not exist

focal
Released (5.13.0-1033.39~20.04.1)
upstream
Released (5.18~rc1)
jammy Does not exist

linux-oem
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Ignored
(superseded by linux-hwe)
focal Does not exist

impish Does not exist

bionic Ignored
(was needs-triage now end-of-life)
upstream
Released (5.18~rc1)
jammy Does not exist

linux-oem-5.6
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

bionic Does not exist

impish Does not exist

focal Ignored
(was needs-triage now end-of-life)
upstream
Released (5.18~rc1)
jammy Does not exist

linux-oem-5.10
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

bionic Does not exist

focal Ignored
(was needs-triage now end-of-life)
impish Does not exist

upstream
Released (5.18~rc1)
jammy Does not exist

linux-oem-5.13
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

bionic Does not exist

impish Does not exist

upstream
Released (5.18~rc1)
focal Ignored
(was needs-triage now end-of-life)
jammy Does not exist

linux-oem-5.14
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

bionic Does not exist

focal
Released (5.14.0-1036.40)
impish Does not exist

upstream
Released (5.18~rc1)
jammy Does not exist

linux-oem-osp1
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

focal Does not exist

impish Does not exist

bionic Ignored
(was needs-triage now end-of-life)
upstream
Released (5.18~rc1)
jammy Does not exist

linux-raspi
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

bionic Does not exist

focal
Released (5.4.0-1065.75)
impish Ignored
(was pending [5.13.0-1029.31] now end-of-life)
upstream
Released (5.18~rc1)
jammy
Released (5.15.0-1011.13)
linux-raspi2
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Ignored
(end of standard support)
focal Ignored
(replaced by linux-raspi)
impish Does not exist

upstream
Released (5.18~rc1)
bionic
Released (4.15.0-1114.122)
jammy Does not exist

linux-raspi2-5.3
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

bionic Ignored
(superseded by linux-raspi-5.4)
focal Does not exist

impish Does not exist

upstream
Released (5.18~rc1)
jammy Does not exist

linux-raspi-5.4
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

bionic
Released (5.4.0-1065.75~18.04.1)
focal Does not exist

impish Does not exist

upstream
Released (5.18~rc1)
jammy Does not exist

linux-riscv
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

bionic Does not exist

focal Ignored
(superseded by linux-riscv-5.8)
impish Ignored
(was pending [5.13.0-1024.26] now end-of-life)
upstream
Released (5.18~rc1)
jammy
Released (5.15.0-1012.13)
linux-riscv-5.8
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

bionic Does not exist

focal Ignored
(superseded by linux-riscv-5.11)
impish Does not exist

upstream
Released (5.18~rc1)
jammy Does not exist

linux-riscv-5.11
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

bionic Does not exist

impish Does not exist

focal Ignored
(was needs-triage now end-of-life)
upstream
Released (5.18~rc1)
jammy Does not exist

linux-snapdragon
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Ignored
(end of standard support)
bionic
Released (4.15.0-1132.142)
focal Does not exist

impish Does not exist

upstream
Released (5.18~rc1)
jammy Does not exist

linux
Launchpad, Ubuntu, Debian
trusty Ignored
(was needed ESM criteria)
upstream
Released (5.18~rc1)
xenial
Released (4.4.0-224.257)
jammy
Released (5.15.0-35.36)
focal
Released (5.4.0-117.132)
impish Ignored
(was pending [5.13.0-46.51] now end-of-life)
bionic
Released (4.15.0-184.194)
Patches:
Introduced by

702171adeed3607ee9603ec30ce081411e36ae42

Fixed by c70222752228a62135cee3409dccefd494a24646
linux-aws
Launchpad, Ubuntu, Debian
upstream
Released (5.18~rc1)
jammy
Released (5.15.0-1009.11)
xenial
Released (4.4.0-1140.154)
trusty
Released (4.4.0-1104.109)
bionic
Released (4.15.0-1133.143)
focal
Released (5.4.0-1078.84)
impish Ignored
(was pending [5.13.0-1026.28] now end-of-life)
linux-lowlatency
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

bionic Does not exist

focal Does not exist

impish Does not exist

jammy
Released (5.15.0-35.36)
upstream
Released (5.18~rc1)
linux-oem-5.17
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

bionic Does not exist

focal Does not exist

impish Does not exist

jammy
Released (5.17.0-1004.4)
upstream
Released (5.18~rc1)
linux-intel-iotg
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

bionic Does not exist

focal Does not exist

impish Does not exist

jammy
Released (5.15.0-1008.11)
upstream
Released (5.18~rc1)
linux-intel-iotg-5.15
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

bionic Does not exist

impish Does not exist

jammy Does not exist

focal Pending
(5.15.0-1008.11~20.04.1)
upstream
Released (5.18~rc1)
linux-lowlatency-hwe-5.15
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

bionic Does not exist

jammy Does not exist

upstream
Released (5.18~rc1)
focal
Released (5.15.0-42.45~20.04.1)
linux-hwe-5.15
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

bionic Does not exist

jammy Does not exist

upstream
Released (5.18~rc1)
focal
Released (5.15.0-41.44~20.04.1)
linux-aws-5.15
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

bionic Does not exist

jammy Does not exist

focal Not vulnerable
(5.15.0-1014.18~20.04.1)
upstream
Released (5.18~rc1)
linux-gcp-5.15
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

bionic Does not exist

jammy Does not exist

focal Not vulnerable
(5.15.0-1006.9~20.04.1)
upstream
Released (5.18~rc1)
linux-gke-5.15
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

bionic Does not exist

jammy Does not exist

focal Not vulnerable
(5.15.0-1011.14~20.04.1)
upstream
Released (5.18~rc1)
linux-azure-5.15
Launchpad, Ubuntu, Debian
trusty Does not exist

xenial Does not exist

bionic Does not exist

jammy Does not exist

focal Pending
(5.15.0-1008.9~20.04.1)
upstream
Released (5.18~rc1)