USN-8877-1: Linux kernel (GCP) vulnerabilities
Ubuntu's USN-8877-1 patches GCP Linux kernels, including an i.MX clock-driver local denial of service.
Ubuntu Security Notice USN-8877-1 patches Linux kernel packages for GCP. The named issue, CVE-2022-3114, is a null pointer dereference in the i.MX clock driver that a local attacker could use to crash the system. Ubuntu also says several other kernel flaws, spanning multiple CPU architectures and subsystems including UAPI, cryptography, and the block layer, could possibly be used to compromise a system. No active exploitation is reported.
- USN-8877-1 updates a separate set of Ubuntu GCP Linux kernel packages.
- CVE-2022-3114 is a local null-pointer denial of service in the i.MX clock driver.
- The update also fixes unspecified flaws across architectures and kernel subsystems.
- Only CVE-2022-3114 is named, and exploitation is not reported.
Vulnerabilities mentionedAll →
- CVE-2022-31145.5<1%An issue was discovered in the Linux kernel through 5.16-rc6published · linux linux kernel
| CVE | Vulnerability | CVSS | EPSS | Flags | Affected | Exposure | Published |
|---|---|---|---|---|---|---|---|
| CVE-2022-3114 | An issue was discovered in the Linux kernel through 5.16-rc6 An issue was discovered in the Linux kernel through 5.16-rc6. imx_register_uart_clocks in drivers/clk/imx/clk.c lacks check of the return value of kcalloc() and will cause the null pointer dereference. NVD description · AI analysis pending |
It was discovered that the i.MX clock driver in the Linux kernel did not properly handle certain memory allocation failure conditions, leading to a null pointer dereference vulnerability. A local attacker could possibly use this to cause a denial of service (system crash). (CVE-2022-3114) Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - User-space API (UAPI); - ARM32 architecture; - ARM64 architecture; - MIPS architecture; - PowerPC architecture; - RISC-V architecture; - User-Mode Linux (UML); - x86 architecture; - Block layer subsystem; - Cryptographic API; -…
This source does not provide full text. Read it at ubuntu.com.