Skip to content
NewA calmer, faster ZeroHour
StoryAdvisorymedium

Ubuntu Security Notices Cover Linux Kernel Vulnerabilities in Azure CVM and NVIDIA Tegra

1 source · 2 articlesFirst reported Updated ()
What's new

First merged summary.

Merged summary · x-ai/grok-4.7 · rewritten as coverage arrivesSummaries by Vani AI

Ubuntu Security Notices address Linux kernel flaws in Azure CVM and NVIDIA Tegra variants, including use-after-free CVE-2022-1205 and null dereference CVE-2022-3114.

Ubuntu published USN-8962-1 for the Linux kernel in Azure CVM packages and USN-8963-1 for NVIDIA Tegra packages. Both notices detail a race condition in the AX.25 implementation that causes use-after-free flaws, enabling a local attacker to crash the system via CVE-2022-1205. USN-8963-1 additionally identifies a null pointer dereference in the i.MX clock driver (CVE-2022-3114) that can crash the system. The notices state that other kernel issues could compromise the system.

Key facts
  • USN-8962-1 for Linux kernel Azure CVM variant
  • CVE-2022-1205 AX.25 use-after-free, local crash
  • USN-8963-1 for Linux kernel NVIDIA Tegra variant
  • CVE-2022-3114 i.MX clock null dereference, local crash
  • Other kernel issues could compromise the system
  • Notices published 2026-11-03
Analyze CVE-2022-1205 with Vani AIImpact, affected versions, exploitation, mitigations and detection

Timeline

dated events in the reporting · oldest first
  1. Nov 3, 2026Ubuntu publishes USN-8962-1 for Linux kernel Azure CVM vulnerabilities · Ubuntu Security Notices
  2. Nov 3, 2026Ubuntu publishes USN-8963-1 for Linux kernel NVIDIA Tegra vulnerabilities · Ubuntu Security Notices

What each outlet adds

beyond the shared facts
  • Ubuntu Security NoticesUSN-8962-1 details AX.25 and additional subsystems including USB Gadget, ARM64, x86, RISC-V, PowerPC, S390, block layer, Speakup, ACPI; USN-8963-1 adds CVE-2022-3114
CVEs
CVE-2022-1205CVE-2022-3114
Vendors
UbuntuCanonical
Products
Linux kernel (Azure CVM)Linux kernel

Coverage

oldest first · one row per article · UTC
  1. · 22h ago Ubuntu Security NoticesFirst report

    Ubuntu Azure CVM kernel update fixes AX.25 use-after-free

    A local attacker can crash the system via CVE-2022-1205; other listed flaws could compromise the system.

  2. · 22h ago Ubuntu Security Notices

    Ubuntu patches NVIDIA Tegra kernel denial-of-service flaws

    Named issues include AX.25 use-after-free CVE-2022-1205 and i.MX clock null dereference CVE-2022-3114.

Vulnerabilities in this story

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2022-1205
A NULL pointer dereference flaw was found in the Linux kernel’s Amateur Radio AX.25 protocol functionality in the way a user connects with the protocol
4.7<1%PoC
CVE-2022-3114
An issue was discovered in the Linux kernel through 5.16-rc6
5.5<1%