USN-8876-1: Linux kernel (Azure CVM) vulnerabilities
Ubuntu patched Azure CVM Linux kernel flaws, including local denial-of-service bug CVE-2022-3114.
Canonical published USN-8876-1 for the Linux kernel used with Azure confidential VMs. CVE-2022-3114 is a null-pointer dereference in the i.MX clock driver that a local attacker could use to crash the system. The notice also says other issues across multiple architectures and kernel subsystems could possibly be used to compromise a system and are corrected by this update. No active exploitation is described.
- Ubuntu notice USN-8876-1 covers the Azure CVM Linux kernel
- CVE-2022-3114 is a local denial of service via null-pointer dereference
- Additional kernel flaws span multiple architectures and subsystems
- The notice does not report exploitation in the wild
Vulnerabilities mentionedAll →
- CVE-2022-31145.5<1%An issue was discovered in the Linux kernel through 5.16-rc6published · linux linux kernel
| CVE | Vulnerability | CVSS | EPSS | Flags | Affected | Exposure | Published |
|---|---|---|---|---|---|---|---|
| CVE-2022-3114 | An issue was discovered in the Linux kernel through 5.16-rc6 An issue was discovered in the Linux kernel through 5.16-rc6. imx_register_uart_clocks in drivers/clk/imx/clk.c lacks check of the return value of kcalloc() and will cause the null pointer dereference. NVD description · AI analysis pending |
It was discovered that the i.MX clock driver in the Linux kernel did not properly handle certain memory allocation failure conditions, leading to a null pointer dereference vulnerability. A local attacker could possibly use this to cause a denial of service (system crash). (CVE-2022-3114) Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - ARM64 architecture; - MIPS architecture; - PowerPC architecture; - RISC-V architecture; - User-Mode Linux (UML); - x86 architecture; - Block layer subsystem; - Cryptographic API; - ACPI drivers; - Android…
This source does not provide full text. Read it at ubuntu.com.