CVE-2022-3424

Note

unfixed upstream as of 2022/11/28
USN-5975-1 first publication included esm/xenial linux-gcp
version 4.15.0-1146.162~16.04.1 by mistake, it got fixed in version
4.15.0-1147.163~16.04.1 as published in USN-6009-1.

Parameter	Value
Base score	7.8
Attack vector	Local
Attack complexity	Low
Privileges required	Low
User interaction	None
Scope	Unchanged
Confidentiality	High
Integrity impact	High
Availability impact	High
Vector	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVE-2022-3424

From the Ubuntu Security Team

Notes

Priority

Cvss 3 Severity Score

Status

Severity score breakdown

References

Bugs

Join the discussion

Canonical is offering Expanded Security Maintenance

Further reading

Package	Release	Status
linux Launchpad, Ubuntu, Debian	bionic	Released (4.15.0-208.220)
	focal	Released (5.4.0-144.161)
	jammy	Released (5.15.0-69.76)
	kinetic	Released (5.19.0-40.41)
	lunar	Not vulnerable (6.1.0-16.16)
	mantic	Not vulnerable (6.2.0-20.20)
	noble	Not vulnerable (6.5.0-9.9)
	trusty	Ignored (ESM criteria, was needed)
	upstream	Released (6.2~rc1, 5.4.229, 5.15.86)
	xenial	Ignored (ESM criteria, was needed)
	Patches: Introduced by 55484c45dbeca2eec7642932ec3f60f8a2d4bdbf Fixed by 643a16a0eb1d6ac23744bb6e90a00fc21148a9dc
linux-allwinner Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Does not exist
	jammy	Does not exist
	kinetic	Not vulnerable
	lunar	Not vulnerable
	mantic	Does not exist
	noble	Does not exist
	trusty	Does not exist
	upstream	Ignored (end of life, was needs-triage)
	xenial	Does not exist
linux-allwinner-5.19 Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Does not exist
	jammy	Not vulnerable
	kinetic	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	noble	Does not exist
	trusty	Does not exist
	upstream	Ignored (end of life, was needs-triage)
	xenial	Does not exist
linux-aws Launchpad, Ubuntu, Debian	bionic	Released (4.15.0-1153.166)
	focal	Released (5.4.0-1097.105)
	jammy	Released (5.15.0-1033.37)
	kinetic	Released (5.19.0-1023.24)
	lunar	Not vulnerable (6.2.0-1002.2)
	mantic	Not vulnerable (6.2.0-1003.3)
	noble	Not vulnerable (6.5.0-1008.8)
	trusty	Ignored (ESM criteria, was needed)
	upstream	Released (6.2~rc1, 5.4.229, 5.15.86)