Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2022-0886 (GCVE-0-2022-0886)
Vulnerability from cvelistv5 – Published: 2022-03-23 13:55 – Updated: 2022-03-23 13:55
VLAI
EPSS
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2022-27666. Reason: This candidate is a reservation duplicate of CVE-2022-27666. Notes: All CVE users should reference CVE-2022-27666 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
Show details on NVD website{
"containers": {
"cna": {
"providerMetadata": {
"dateUpdated": "2022-03-23T13:55:05.000Z",
"orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
"shortName": "redhat"
},
"rejectedReasons": [
{
"lang": "en",
"value": "DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2022-27666. Reason: This candidate is a reservation duplicate of CVE-2022-27666. Notes: All CVE users should reference CVE-2022-27666 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
"assignerShortName": "redhat",
"cveId": "CVE-2022-0886",
"datePublished": "2022-03-23T13:55:05.000Z",
"dateRejected": "2022-03-23T13:55:05.000Z",
"dateReserved": "2022-03-08T00:00:00.000Z",
"dateUpdated": "2022-03-23T13:55:05.000Z",
"state": "REJECTED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.0",
"vulnerability-lookup:meta": {
"fkie_nvd": {
"descriptions": "[{\"lang\": \"en\", \"value\": \"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2022-27666. Reason: This candidate is a reservation duplicate of CVE-2022-27666. Notes: All CVE users should reference CVE-2022-27666 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage\"}]",
"id": "CVE-2022-0886",
"lastModified": "2023-11-07T03:41:38.247",
"published": "2022-03-23T14:15:07.923",
"sourceIdentifier": "secalert@redhat.com",
"vulnStatus": "Rejected"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2022-0886\",\"sourceIdentifier\":\"secalert@redhat.com\",\"published\":\"2022-03-23T14:15:07.923\",\"lastModified\":\"2023-11-07T03:41:38.247\",\"vulnStatus\":\"Rejected\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2022-27666. Reason: This candidate is a reservation duplicate of CVE-2022-27666. Notes: All CVE users should reference CVE-2022-27666 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage\"}],\"metrics\":{},\"references\":[]}}"
}
}
SUSE-SU-2022:1320-1
Vulnerability from csaf_suse - Published: 2022-04-23 19:04 - Updated: 2022-04-23 19:04Summary
Security update for the Linux Kernel (Live Patch 20 for SLE 12 SP4)
Severity
Important
Notes
Title of the patch: Security update for the Linux Kernel (Live Patch 20 for SLE 12 SP4)
Description of the patch: This update for the Linux Kernel 4.12.14-95_74 fixes several issues.
The following security issues were fixed:
- CVE-2022-1016: Fixed a vulnerability in the nf_tables component of the netfilter subsystem. This vulnerability gives an attacker a powerful primitive that can be used to both read from and write to relative stack data, which can lead to arbitrary code execution. (bsc#1197335)
- CVE-2022-1011: Fixed an use-after-free vulnerability which could allow a local attacker to retireve (partial) /etc/shadow hashes or any other data from filesystem when he can mount a FUSE filesystems. (bsc#1197344)
- CVE-2021-39713: Fixed a race condition in the network scheduling subsystem which could lead to a use-after-free (bsc#1197211).
- CVE-2022-27666: Fixed a buffer overflow vulnerability in IPsec ESP transformation code. This flaw allowed a local attacker with a normal user privilege to overwrite kernel heap objects and may cause a local privilege escalation. (bnc#1197133)
Patchnames: SUSE-2022-1320,SUSE-SLE-Live-Patching-12-SP4-2022-1320
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
7.4 (High)
Affected products
Recommended
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_74-default-15-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_74-default-15-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_74-default-15-2.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.5 (High)
Affected products
Recommended
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_74-default-15-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_74-default-15-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_74-default-15-2.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_74-default-15-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_74-default-15-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_74-default-15-2.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
5.5 (Medium)
Affected products
Recommended
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_74-default-15-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_74-default-15-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_74-default-15-2.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
References
29 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for the Linux Kernel (Live Patch 20 for SLE 12 SP4)",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for the Linux Kernel 4.12.14-95_74 fixes several issues.\n\nThe following security issues were fixed:\n\n- CVE-2022-1016: Fixed a vulnerability in the nf_tables component of the netfilter subsystem. This vulnerability gives an attacker a powerful primitive that can be used to both read from and write to relative stack data, which can lead to arbitrary code execution. (bsc#1197335)\n- CVE-2022-1011: Fixed an use-after-free vulnerability which could allow a local attacker to retireve (partial) /etc/shadow hashes or any other data from filesystem when he can mount a FUSE filesystems. (bsc#1197344)\n- CVE-2021-39713: Fixed a race condition in the network scheduling subsystem which could lead to a use-after-free (bsc#1197211).\n- CVE-2022-27666: Fixed a buffer overflow vulnerability in IPsec ESP transformation code. This flaw allowed a local attacker with a normal user privilege to overwrite kernel heap objects and may cause a local privilege escalation. (bnc#1197133)\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2022-1320,SUSE-SLE-Live-Patching-12-SP4-2022-1320",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2022_1320-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2022:1320-1",
"url": "https://www.suse.com/support/update/announcement/2022/suse-su-20221320-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2022:1320-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2022-April/010815.html"
},
{
"category": "self",
"summary": "SUSE Bug 1197133",
"url": "https://bugzilla.suse.com/1197133"
},
{
"category": "self",
"summary": "SUSE Bug 1197211",
"url": "https://bugzilla.suse.com/1197211"
},
{
"category": "self",
"summary": "SUSE Bug 1197335",
"url": "https://bugzilla.suse.com/1197335"
},
{
"category": "self",
"summary": "SUSE Bug 1197344",
"url": "https://bugzilla.suse.com/1197344"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-39713 page",
"url": "https://www.suse.com/security/cve/CVE-2021-39713/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-0886 page",
"url": "https://www.suse.com/security/cve/CVE-2022-0886/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-1011 page",
"url": "https://www.suse.com/security/cve/CVE-2022-1011/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-1016 page",
"url": "https://www.suse.com/security/cve/CVE-2022-1016/"
}
],
"title": "Security update for the Linux Kernel (Live Patch 20 for SLE 12 SP4)",
"tracking": {
"current_release_date": "2022-04-23T19:04:03Z",
"generator": {
"date": "2022-04-23T19:04:03Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2022:1320-1",
"initial_release_date": "2022-04-23T19:04:03Z",
"revision_history": [
{
"date": "2022-04-23T19:04:03Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "kgraft-patch-4_12_14-95_74-default-15-2.1.ppc64le",
"product": {
"name": "kgraft-patch-4_12_14-95_74-default-15-2.1.ppc64le",
"product_id": "kgraft-patch-4_12_14-95_74-default-15-2.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "kgraft-patch-4_12_14-95_74-default-15-2.1.s390x",
"product": {
"name": "kgraft-patch-4_12_14-95_74-default-15-2.1.s390x",
"product_id": "kgraft-patch-4_12_14-95_74-default-15-2.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "kgraft-patch-4_12_14-95_74-default-15-2.1.x86_64",
"product": {
"name": "kgraft-patch-4_12_14-95_74-default-15-2.1.x86_64",
"product_id": "kgraft-patch-4_12_14-95_74-default-15-2.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Live Patching 12 SP4",
"product": {
"name": "SUSE Linux Enterprise Live Patching 12 SP4",
"product_id": "SUSE Linux Enterprise Live Patching 12 SP4",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-live-patching:12:sp4"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "kgraft-patch-4_12_14-95_74-default-15-2.1.ppc64le as component of SUSE Linux Enterprise Live Patching 12 SP4",
"product_id": "SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_74-default-15-2.1.ppc64le"
},
"product_reference": "kgraft-patch-4_12_14-95_74-default-15-2.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Live Patching 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kgraft-patch-4_12_14-95_74-default-15-2.1.s390x as component of SUSE Linux Enterprise Live Patching 12 SP4",
"product_id": "SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_74-default-15-2.1.s390x"
},
"product_reference": "kgraft-patch-4_12_14-95_74-default-15-2.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Live Patching 12 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kgraft-patch-4_12_14-95_74-default-15-2.1.x86_64 as component of SUSE Linux Enterprise Live Patching 12 SP4",
"product_id": "SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_74-default-15-2.1.x86_64"
},
"product_reference": "kgraft-patch-4_12_14-95_74-default-15-2.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Live Patching 12 SP4"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2021-39713",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-39713"
}
],
"notes": [
{
"category": "general",
"text": "Product: AndroidVersions: Android kernelAndroid ID: A-173788806References: Upstream kernel",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_74-default-15-2.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_74-default-15-2.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_74-default-15-2.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-39713",
"url": "https://www.suse.com/security/cve/CVE-2021-39713"
},
{
"category": "external",
"summary": "SUSE Bug 1196973 for CVE-2021-39713",
"url": "https://bugzilla.suse.com/1196973"
},
{
"category": "external",
"summary": "SUSE Bug 1197211 for CVE-2021-39713",
"url": "https://bugzilla.suse.com/1197211"
},
{
"category": "external",
"summary": "SUSE Bug 1201790 for CVE-2021-39713",
"url": "https://bugzilla.suse.com/1201790"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_74-default-15-2.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_74-default-15-2.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_74-default-15-2.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_74-default-15-2.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_74-default-15-2.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_74-default-15-2.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2022-04-23T19:04:03Z",
"details": "important"
}
],
"title": "CVE-2021-39713"
},
{
"cve": "CVE-2022-0886",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-0886"
}
],
"notes": [
{
"category": "general",
"text": "DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2022-27666. Reason: This candidate is a reservation duplicate of CVE-2022-27666. Notes: All CVE users should reference CVE-2022-27666 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_74-default-15-2.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_74-default-15-2.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_74-default-15-2.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-0886",
"url": "https://www.suse.com/security/cve/CVE-2022-0886"
},
{
"category": "external",
"summary": "SUSE Bug 1197131 for CVE-2022-0886",
"url": "https://bugzilla.suse.com/1197131"
},
{
"category": "external",
"summary": "SUSE Bug 1197133 for CVE-2022-0886",
"url": "https://bugzilla.suse.com/1197133"
},
{
"category": "external",
"summary": "SUSE Bug 1197462 for CVE-2022-0886",
"url": "https://bugzilla.suse.com/1197462"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_74-default-15-2.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_74-default-15-2.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_74-default-15-2.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_74-default-15-2.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_74-default-15-2.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_74-default-15-2.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2022-04-23T19:04:03Z",
"details": "important"
}
],
"title": "CVE-2022-0886"
},
{
"cve": "CVE-2022-1011",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-1011"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free flaw was found in the Linux kernel\u0027s FUSE filesystem in the way a user triggers write(). This flaw allows a local user to gain unauthorized access to data from the FUSE filesystem, resulting in privilege escalation.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_74-default-15-2.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_74-default-15-2.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_74-default-15-2.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-1011",
"url": "https://www.suse.com/security/cve/CVE-2022-1011"
},
{
"category": "external",
"summary": "SUSE Bug 1197343 for CVE-2022-1011",
"url": "https://bugzilla.suse.com/1197343"
},
{
"category": "external",
"summary": "SUSE Bug 1197344 for CVE-2022-1011",
"url": "https://bugzilla.suse.com/1197344"
},
{
"category": "external",
"summary": "SUSE Bug 1198687 for CVE-2022-1011",
"url": "https://bugzilla.suse.com/1198687"
},
{
"category": "external",
"summary": "SUSE Bug 1204132 for CVE-2022-1011",
"url": "https://bugzilla.suse.com/1204132"
},
{
"category": "external",
"summary": "SUSE Bug 1212322 for CVE-2022-1011",
"url": "https://bugzilla.suse.com/1212322"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_74-default-15-2.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_74-default-15-2.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_74-default-15-2.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_74-default-15-2.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_74-default-15-2.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_74-default-15-2.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2022-04-23T19:04:03Z",
"details": "important"
}
],
"title": "CVE-2022-1011"
},
{
"cve": "CVE-2022-1016",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-1016"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in the Linux kernel in net/netfilter/nf_tables_core.c:nft_do_chain, which can cause a use-after-free. This issue needs to handle \u0027return\u0027 with proper preconditions, as it can lead to a kernel information leak problem caused by a local, unprivileged attacker.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_74-default-15-2.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_74-default-15-2.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_74-default-15-2.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-1016",
"url": "https://www.suse.com/security/cve/CVE-2022-1016"
},
{
"category": "external",
"summary": "SUSE Bug 1197227 for CVE-2022-1016",
"url": "https://bugzilla.suse.com/1197227"
},
{
"category": "external",
"summary": "SUSE Bug 1197335 for CVE-2022-1016",
"url": "https://bugzilla.suse.com/1197335"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_74-default-15-2.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_74-default-15-2.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_74-default-15-2.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_74-default-15-2.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_74-default-15-2.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_74-default-15-2.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2022-04-23T19:04:03Z",
"details": "moderate"
}
],
"title": "CVE-2022-1016"
}
]
}
WID-SEC-W-2022-0156
Vulnerability from csaf_certbund - Published: 2022-03-20 23:00 - Updated: 2025-05-29 22:00Summary
Linux Kernel: Mehrere Schwachstellen
Severity
Hoch
Notes
Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.
Produktbeschreibung: Der Kernel stellt den Kern des Linux Betriebssystems dar.
Angriff: Ein lokaler Angreifer kann mehrere Schwachstellen im Linux Kernel ausnutzen, um seine Privilegien zu erweitern, einen Denial of Service Zustand auszulösen und mehrere nicht spezifizierte Angriffe durchzuführen.
Betroffene Betriebssysteme: - Linux
- UNIX
Affected products
Known affected
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Avaya Aura Experience Portal
Avaya
|
cpe:/a:avaya:aura_experience_portal:-
|
— | |
|
Avaya Aura System Manager
Avaya
|
cpe:/a:avaya:aura_system_manager:-
|
— | |
|
Debian Linux
Debian
|
cpe:/o:debian:debian_linux:-
|
— | |
|
SUSE Linux
SUSE
|
cpe:/o:suse:suse_linux:-
|
— | |
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Avaya Aura Application Enablement Services
Avaya
|
cpe:/a:avaya:aura_application_enablement_services:-
|
— | |
|
Open Source Linux Kernel
Open Source
|
cpe:/o:linux:linux_kernel:-
|
— | |
|
Ubuntu Linux
Ubuntu
|
cpe:/o:canonical:ubuntu_linux:-
|
— | |
|
Avaya Aura Session Manager
Avaya
|
cpe:/a:avaya:session_manager:-
|
— | |
|
Amazon Linux 2
Amazon
|
cpe:/o:amazon:linux_2:-
|
— | |
|
Avaya Aura Communication Manager
Avaya
|
cpe:/a:avaya:communication_manager:-
|
— | |
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— |
Affected products
Known affected
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Avaya Aura Experience Portal
Avaya
|
cpe:/a:avaya:aura_experience_portal:-
|
— | |
|
Avaya Aura System Manager
Avaya
|
cpe:/a:avaya:aura_system_manager:-
|
— | |
|
Debian Linux
Debian
|
cpe:/o:debian:debian_linux:-
|
— | |
|
SUSE Linux
SUSE
|
cpe:/o:suse:suse_linux:-
|
— | |
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Avaya Aura Application Enablement Services
Avaya
|
cpe:/a:avaya:aura_application_enablement_services:-
|
— | |
|
Open Source Linux Kernel
Open Source
|
cpe:/o:linux:linux_kernel:-
|
— | |
|
Ubuntu Linux
Ubuntu
|
cpe:/o:canonical:ubuntu_linux:-
|
— | |
|
Avaya Aura Session Manager
Avaya
|
cpe:/a:avaya:session_manager:-
|
— | |
|
Amazon Linux 2
Amazon
|
cpe:/o:amazon:linux_2:-
|
— | |
|
Avaya Aura Communication Manager
Avaya
|
cpe:/a:avaya:communication_manager:-
|
— | |
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— |
Affected products
Known affected
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Avaya Aura Experience Portal
Avaya
|
cpe:/a:avaya:aura_experience_portal:-
|
— | |
|
Avaya Aura System Manager
Avaya
|
cpe:/a:avaya:aura_system_manager:-
|
— | |
|
Debian Linux
Debian
|
cpe:/o:debian:debian_linux:-
|
— | |
|
SUSE Linux
SUSE
|
cpe:/o:suse:suse_linux:-
|
— | |
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Avaya Aura Application Enablement Services
Avaya
|
cpe:/a:avaya:aura_application_enablement_services:-
|
— | |
|
Open Source Linux Kernel
Open Source
|
cpe:/o:linux:linux_kernel:-
|
— | |
|
Ubuntu Linux
Ubuntu
|
cpe:/o:canonical:ubuntu_linux:-
|
— | |
|
Avaya Aura Session Manager
Avaya
|
cpe:/a:avaya:session_manager:-
|
— | |
|
Amazon Linux 2
Amazon
|
cpe:/o:amazon:linux_2:-
|
— | |
|
Avaya Aura Communication Manager
Avaya
|
cpe:/a:avaya:communication_manager:-
|
— | |
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— |
Affected products
Known affected
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Avaya Aura Experience Portal
Avaya
|
cpe:/a:avaya:aura_experience_portal:-
|
— | |
|
Avaya Aura System Manager
Avaya
|
cpe:/a:avaya:aura_system_manager:-
|
— | |
|
Debian Linux
Debian
|
cpe:/o:debian:debian_linux:-
|
— | |
|
SUSE Linux
SUSE
|
cpe:/o:suse:suse_linux:-
|
— | |
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Avaya Aura Application Enablement Services
Avaya
|
cpe:/a:avaya:aura_application_enablement_services:-
|
— | |
|
Open Source Linux Kernel
Open Source
|
cpe:/o:linux:linux_kernel:-
|
— | |
|
Ubuntu Linux
Ubuntu
|
cpe:/o:canonical:ubuntu_linux:-
|
— | |
|
Avaya Aura Session Manager
Avaya
|
cpe:/a:avaya:session_manager:-
|
— | |
|
Amazon Linux 2
Amazon
|
cpe:/o:amazon:linux_2:-
|
— | |
|
Avaya Aura Communication Manager
Avaya
|
cpe:/a:avaya:communication_manager:-
|
— | |
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— |
References
82 references
{
"document": {
"aggregate_severity": {
"text": "hoch"
},
"category": "csaf_base",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "de-DE",
"notes": [
{
"category": "legal_disclaimer",
"text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
},
{
"category": "description",
"text": "Der Kernel stellt den Kern des Linux Betriebssystems dar.",
"title": "Produktbeschreibung"
},
{
"category": "summary",
"text": "Ein lokaler Angreifer kann mehrere Schwachstellen im Linux Kernel ausnutzen, um seine Privilegien zu erweitern, einen Denial of Service Zustand auszul\u00f6sen und mehrere nicht spezifizierte Angriffe durchzuf\u00fchren.",
"title": "Angriff"
},
{
"category": "general",
"text": "- Linux\n- UNIX",
"title": "Betroffene Betriebssysteme"
}
],
"publisher": {
"category": "other",
"contact_details": "csaf-provider@cert-bund.de",
"name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
"namespace": "https://www.bsi.bund.de"
},
"references": [
{
"category": "self",
"summary": "WID-SEC-W-2022-0156 - CSAF Version",
"url": "https://wid.cert-bund.de/.well-known/csaf/white/2022/wid-sec-w-2022-0156.json"
},
{
"category": "self",
"summary": "WID-SEC-2022-0156 - Portal Version",
"url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2022-0156"
},
{
"category": "external",
"summary": "Red Hat Security Advisory vom 2022-03-20",
"url": "https://access.redhat.com/security/cve/cve-2022-0886"
},
{
"category": "external",
"summary": "Red Hat Security Advisory vom 2022-03-20",
"url": "https://access.redhat.com/security/cve/cve-2022-0995"
},
{
"category": "external",
"summary": "Red Hat Security Advisory vom 2022-03-20",
"url": "https://access.redhat.com/security/cve/cve-2022-1011"
},
{
"category": "external",
"summary": "Red Hat Security Advisory vom 2022-03-20",
"url": "https://access.redhat.com/security/cve/CVE-2021-45868"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2022:1163-1 vom 2022-04-12",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2022-April/010687.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2022:1183-1 vom 2022-04-13",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2022-April/010701.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2022:1196-1 vom 2022-04-14",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2022-April/010723.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2022:1197-1 vom 2022-04-14",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2022-April/010731.html"
},
{
"category": "external",
"summary": "Exploit auf CX-Security vom 2022-04-19",
"url": "https://cxsecurity.com/issue/WLB-2022040080"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2022:1255-1 vom 2022-04-19",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2022-April/010749.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2022:1267-1 vom 2022-04-19",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2022-April/010755.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2022:1256-1 vom 2022-04-19",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2022-April/010751.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2022:1266-1 vom 2022-04-19",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2022-April/010754.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2022:1257-1 vom 2022-04-19",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2022-April/010746.html"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-5381-1 vom 2022-04-21",
"url": "https://ubuntu.com/security/notices/USN-5381-1"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2022:1270-1 vom 2022-04-20",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2022-April/010768.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2022:1283-1 vom 2022-04-20",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2022-April/010777.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2022:1320-1 vom 2022-04-24",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2022-April/010815.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2022:1318-1 vom 2022-04-23",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2022-April/010805.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2022:1322-1 vom 2022-04-24",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2022-April/010816.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2022:1326-1 vom 2022-04-24",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2022-April/010817.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2022:1335-1 vom 2022-04-25",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2022-April/010825.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2022:1369-1 vom 2022-04-25",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2022-April/010820.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2022:1329-1 vom 2022-04-25",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2022-April/010824.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2022:1402-1 vom 2022-04-26",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2022-April/010835.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2022:1407-1 vom 2022-04-26",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2022-April/010837.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2022:1440-1 vom 2022-04-27",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2022-April/010856.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2022:1453-1 vom 2022-04-28",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2022-April/010859.html"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2022-9348 vom 2022-05-03",
"url": "https://linux.oracle.com/errata/ELSA-2022-9348.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2022:1486-1 vom 2022-05-03",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2022-May/010913.html"
},
{
"category": "external",
"summary": "ORACLE OVMSA-2022-0014 vom 2022-05-04",
"url": "https://oss.oracle.com/pipermail/oraclevm-errata/2022-May/001052.html"
},
{
"category": "external",
"summary": "Amazon Linux Security Advisory ALAS2-2022-1793 vom 2022-05-05",
"url": "https://alas.aws.amazon.com/AL2/ALAS-2022-1793.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2022:1593-1 vom 2022-05-10",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2022-May/010977.html"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2022:1988 vom 2022-05-10",
"url": "https://access.redhat.com/errata/RHSA-2022:1988"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2022:1598-1 vom 2022-05-10",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2022-May/010978.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2022:1611-1 vom 2022-05-10",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2022-May/010980.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2022:1634-1 vom 2022-05-10",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2022-May/010981.html"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2022:1975 vom 2022-05-10",
"url": "https://access.redhat.com/errata/RHSA-2022:1975"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2022:1641-1 vom 2022-05-11",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2022-May/010989.html"
},
{
"category": "external",
"summary": "AVAYA Security Advisory ASA-2022-055 vom 2022-05-11",
"url": "https://downloads.avaya.com/css/P8/documents/101081767"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2022:1651-1 vom 2022-05-12",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2022-May/010994.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2022:1686-1 vom 2022-05-16",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2022-May/011035.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2022:1668-1 vom 2022-05-16",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2022-May/011019.html"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2022-1988 vom 2022-05-17",
"url": "https://linux.oracle.com/errata/ELSA-2022-1988.html"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-5467-1 vom 2022-06-08",
"url": "https://ubuntu.com/security/notices/USN-5467-1"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2022:4956 vom 2022-06-09",
"url": "https://access.redhat.com/errata/RHSA-2022:4956"
},
{
"category": "external",
"summary": "Amazon Linux Security Advisory ALAS-2022-1591 vom 2022-06-10",
"url": "https://alas.aws.amazon.com/ALAS-2022-1591.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2022:2082-1 vom 2022-06-15",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2022-June/011287.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2022:2083-1 vom 2022-06-15",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2022-June/011291.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2022:2077-1 vom 2022-06-15",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2022-June/011285.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2022:2103-1 vom 2022-06-16",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2022-June/011299.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2022:2104-1 vom 2022-06-16",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2022-June/011302.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2022:2111-1 vom 2022-06-17",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2022-June/011310.html"
},
{
"category": "external",
"summary": "Debian Security Advisory DSA-5173 vom 2022-07-03",
"url": "https://lists.debian.org/debian-security-announce/2022/msg00141.html"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2022:5483 vom 2022-07-01",
"url": "https://access.redhat.com/errata/RHSA-2022:5483"
},
{
"category": "external",
"summary": "Debian Security Advisory DLA-3065 vom 2022-07-01",
"url": "https://lists.debian.org/debian-lts-announce/2022/07/msg00000.html"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-5515-1 vom 2022-07-13",
"url": "https://ubuntu.com/security/notices/USN-5515-1"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-5541-1 vom 2022-07-29",
"url": "https://ubuntu.com/security/notices/USN-5541-1"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2022-9761 vom 2022-09-07",
"url": "http://linux.oracle.com/errata/ELSA-2022-9761.html"
},
{
"category": "external",
"summary": "ORACLE OVMSA-2022-0024 vom 2022-09-07",
"url": "https://oss.oracle.com/pipermail/oraclevm-errata/2022-September/001060.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2023:0416-1 vom 2023-02-15",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2023-February/013765.html"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-6001-1 vom 2023-04-06",
"url": "https://ubuntu.com/security/notices/USN-6001-1"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2024:5259 vom 2024-08-13",
"url": "https://access.redhat.com/errata/RHSA-2024:5259"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2024-5259 vom 2024-09-18",
"url": "https://linux.oracle.com/errata/ELSA-2024-5259.html"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2024-12684 vom 2024-09-24",
"url": "https://linux.oracle.com/errata/ELSA-2024-12684.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2025:1027-1 vom 2025-03-26",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2025-March/020612.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2025:1176-1 vom 2025-04-08",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2025-April/020671.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2025:1183-1 vom 2025-04-09",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2025-April/020678.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2025:1241-1 vom 2025-04-14",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2025-April/020694.html"
},
{
"category": "external",
"summary": "Ubuntu Security Notice LSN-0111-1 vom 2025-04-16",
"url": "https://ubuntu.com/security/notices/LSN-0111-1"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-7455-1 vom 2025-04-24",
"url": "https://ubuntu.com/security/notices/USN-7455-1"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-7455-3 vom 2025-04-24",
"url": "https://ubuntu.com/security/notices/USN-7455-3"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-7459-1 vom 2025-04-24",
"url": "https://ubuntu.com/security/notices/USN-7459-1"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-7460-1 vom 2025-04-24",
"url": "https://ubuntu.com/security/notices/USN-7460-1"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-7455-2 vom 2025-04-24",
"url": "https://ubuntu.com/security/notices/USN-7455-2"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-7455-4 vom 2025-04-25",
"url": "https://ubuntu.com/security/notices/USN-7455-4"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-7459-2 vom 2025-04-28",
"url": "https://ubuntu.com/security/notices/USN-7459-2"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-7455-5 vom 2025-04-29",
"url": "https://ubuntu.com/security/notices/USN-7455-5"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-7475-1 vom 2025-05-02",
"url": "https://ubuntu.com/security/notices/USN-7475-1"
},
{
"category": "external",
"summary": "Ubuntu Security Notice LSN-0112-1 vom 2025-05-29",
"url": "https://ubuntu.com/security/notices/LSN-0112-1"
}
],
"source_lang": "en-US",
"title": "Linux Kernel: Mehrere Schwachstellen",
"tracking": {
"current_release_date": "2025-05-29T22:00:00.000+00:00",
"generator": {
"date": "2025-05-30T09:12:21.405+00:00",
"engine": {
"name": "BSI-WID",
"version": "1.3.12"
}
},
"id": "WID-SEC-W-2022-0156",
"initial_release_date": "2022-03-20T23:00:00.000+00:00",
"revision_history": [
{
"date": "2022-03-20T23:00:00.000+00:00",
"number": "1",
"summary": "Initiale Fassung"
},
{
"date": "2022-04-12T22:00:00.000+00:00",
"number": "2",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2022-04-13T22:00:00.000+00:00",
"number": "3",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2022-04-18T22:00:00.000+00:00",
"number": "4",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2022-04-19T22:00:00.000+00:00",
"number": "5",
"summary": "Exploit aufgenommen"
},
{
"date": "2022-04-20T22:00:00.000+00:00",
"number": "6",
"summary": "Neue Updates von Ubuntu und SUSE aufgenommen"
},
{
"date": "2022-04-24T22:00:00.000+00:00",
"number": "7",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2022-04-25T22:00:00.000+00:00",
"number": "8",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2022-04-26T22:00:00.000+00:00",
"number": "9",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2022-04-27T22:00:00.000+00:00",
"number": "10",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2022-04-28T22:00:00.000+00:00",
"number": "11",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2022-05-03T22:00:00.000+00:00",
"number": "12",
"summary": "Neue Updates von Oracle Linux und SUSE aufgenommen"
},
{
"date": "2022-05-04T22:00:00.000+00:00",
"number": "13",
"summary": "Neue Updates von ORACLE aufgenommen"
},
{
"date": "2022-05-05T22:00:00.000+00:00",
"number": "14",
"summary": "Neue Updates von Amazon aufgenommen"
},
{
"date": "2022-05-09T22:00:00.000+00:00",
"number": "15",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2022-05-10T22:00:00.000+00:00",
"number": "16",
"summary": "Neue Updates von Red Hat und SUSE aufgenommen"
},
{
"date": "2022-05-11T22:00:00.000+00:00",
"number": "17",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2022-05-12T22:00:00.000+00:00",
"number": "18",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2022-05-16T22:00:00.000+00:00",
"number": "19",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2022-05-17T22:00:00.000+00:00",
"number": "20",
"summary": "Neue Updates von Oracle Linux aufgenommen"
},
{
"date": "2022-05-18T22:00:00.000+00:00",
"number": "21",
"summary": "Referenz(en) aufgenommen: 2063786, FEDORA-2022-9342E59A98, FEDORA-2022-DE4474B89D, 0221163"
},
{
"date": "2022-06-07T22:00:00.000+00:00",
"number": "22",
"summary": "Neue Updates von Ubuntu aufgenommen"
},
{
"date": "2022-06-08T22:00:00.000+00:00",
"number": "23",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2022-06-09T22:00:00.000+00:00",
"number": "24",
"summary": "Neue Updates von Amazon aufgenommen"
},
{
"date": "2022-06-14T22:00:00.000+00:00",
"number": "25",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2022-06-16T22:00:00.000+00:00",
"number": "26",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2022-06-19T22:00:00.000+00:00",
"number": "27",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2022-07-03T22:00:00.000+00:00",
"number": "28",
"summary": "Neue Updates von Debian und Red Hat aufgenommen"
},
{
"date": "2022-07-13T22:00:00.000+00:00",
"number": "29",
"summary": "Neue Updates von Ubuntu aufgenommen"
},
{
"date": "2022-07-28T22:00:00.000+00:00",
"number": "30",
"summary": "Neue Updates von Ubuntu aufgenommen"
},
{
"date": "2022-09-06T22:00:00.000+00:00",
"number": "31",
"summary": "Neue Updates von Oracle Linux aufgenommen"
},
{
"date": "2022-09-07T22:00:00.000+00:00",
"number": "32",
"summary": "Neue Updates von ORACLE aufgenommen"
},
{
"date": "2023-02-15T23:00:00.000+00:00",
"number": "33",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2023-04-05T22:00:00.000+00:00",
"number": "34",
"summary": "Neue Updates von Ubuntu aufgenommen"
},
{
"date": "2024-08-12T22:00:00.000+00:00",
"number": "35",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2024-09-18T22:00:00.000+00:00",
"number": "36",
"summary": "Neue Updates von Oracle Linux aufgenommen"
},
{
"date": "2024-09-23T22:00:00.000+00:00",
"number": "37",
"summary": "Neue Updates von Oracle Linux aufgenommen"
},
{
"date": "2025-03-26T23:00:00.000+00:00",
"number": "38",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2025-04-08T22:00:00.000+00:00",
"number": "39",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2025-04-09T22:00:00.000+00:00",
"number": "40",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2025-04-14T22:00:00.000+00:00",
"number": "41",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2025-04-16T22:00:00.000+00:00",
"number": "42",
"summary": "Neue Updates von Ubuntu aufgenommen"
},
{
"date": "2025-04-23T22:00:00.000+00:00",
"number": "43",
"summary": "Neue Updates von Ubuntu aufgenommen"
},
{
"date": "2025-04-24T22:00:00.000+00:00",
"number": "44",
"summary": "Neue Updates von Ubuntu aufgenommen"
},
{
"date": "2025-04-28T22:00:00.000+00:00",
"number": "45",
"summary": "Neue Updates von Ubuntu aufgenommen"
},
{
"date": "2025-05-01T22:00:00.000+00:00",
"number": "46",
"summary": "Neue Updates von Ubuntu aufgenommen"
},
{
"date": "2025-05-29T22:00:00.000+00:00",
"number": "47",
"summary": "Neue Updates von Ubuntu aufgenommen"
}
],
"status": "final",
"version": "47"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Amazon Linux 2",
"product": {
"name": "Amazon Linux 2",
"product_id": "398363",
"product_identification_helper": {
"cpe": "cpe:/o:amazon:linux_2:-"
}
}
}
],
"category": "vendor",
"name": "Amazon"
},
{
"branches": [
{
"category": "product_name",
"name": "Avaya Aura Application Enablement Services",
"product": {
"name": "Avaya Aura Application Enablement Services",
"product_id": "T015516",
"product_identification_helper": {
"cpe": "cpe:/a:avaya:aura_application_enablement_services:-"
}
}
},
{
"category": "product_name",
"name": "Avaya Aura Communication Manager",
"product": {
"name": "Avaya Aura Communication Manager",
"product_id": "T015126",
"product_identification_helper": {
"cpe": "cpe:/a:avaya:communication_manager:-"
}
}
},
{
"category": "product_name",
"name": "Avaya Aura Experience Portal",
"product": {
"name": "Avaya Aura Experience Portal",
"product_id": "T015519",
"product_identification_helper": {
"cpe": "cpe:/a:avaya:aura_experience_portal:-"
}
}
},
{
"category": "product_name",
"name": "Avaya Aura Session Manager",
"product": {
"name": "Avaya Aura Session Manager",
"product_id": "T015127",
"product_identification_helper": {
"cpe": "cpe:/a:avaya:session_manager:-"
}
}
},
{
"category": "product_name",
"name": "Avaya Aura System Manager",
"product": {
"name": "Avaya Aura System Manager",
"product_id": "T015518",
"product_identification_helper": {
"cpe": "cpe:/a:avaya:aura_system_manager:-"
}
}
}
],
"category": "vendor",
"name": "Avaya"
},
{
"branches": [
{
"category": "product_name",
"name": "Debian Linux",
"product": {
"name": "Debian Linux",
"product_id": "2951",
"product_identification_helper": {
"cpe": "cpe:/o:debian:debian_linux:-"
}
}
}
],
"category": "vendor",
"name": "Debian"
},
{
"branches": [
{
"category": "product_name",
"name": "Open Source Linux Kernel",
"product": {
"name": "Open Source Linux Kernel",
"product_id": "6368",
"product_identification_helper": {
"cpe": "cpe:/o:linux:linux_kernel:-"
}
}
}
],
"category": "vendor",
"name": "Open Source"
},
{
"branches": [
{
"category": "product_name",
"name": "Oracle Linux",
"product": {
"name": "Oracle Linux",
"product_id": "T004914",
"product_identification_helper": {
"cpe": "cpe:/o:oracle:linux:-"
}
}
}
],
"category": "vendor",
"name": "Oracle"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux",
"product": {
"name": "Red Hat Enterprise Linux",
"product_id": "67646",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:-"
}
}
}
],
"category": "vendor",
"name": "Red Hat"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux",
"product": {
"name": "SUSE Linux",
"product_id": "T002207",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse_linux:-"
}
}
}
],
"category": "vendor",
"name": "SUSE"
},
{
"branches": [
{
"category": "product_name",
"name": "Ubuntu Linux",
"product": {
"name": "Ubuntu Linux",
"product_id": "T000126",
"product_identification_helper": {
"cpe": "cpe:/o:canonical:ubuntu_linux:-"
}
}
}
],
"category": "vendor",
"name": "Ubuntu"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2021-45868",
"product_status": {
"known_affected": [
"T015519",
"T015518",
"2951",
"T002207",
"67646",
"T015516",
"6368",
"T000126",
"T015127",
"398363",
"T015126",
"T004914"
]
},
"release_date": "2022-03-20T23:00:00.000+00:00",
"title": "CVE-2021-45868"
},
{
"cve": "CVE-2022-0886",
"product_status": {
"known_affected": [
"T015519",
"T015518",
"2951",
"T002207",
"67646",
"T015516",
"6368",
"T000126",
"T015127",
"398363",
"T015126",
"T004914"
]
},
"release_date": "2022-03-20T23:00:00.000+00:00",
"title": "CVE-2022-0886"
},
{
"cve": "CVE-2022-0995",
"product_status": {
"known_affected": [
"T015519",
"T015518",
"2951",
"T002207",
"67646",
"T015516",
"6368",
"T000126",
"T015127",
"398363",
"T015126",
"T004914"
]
},
"release_date": "2022-03-20T23:00:00.000+00:00",
"title": "CVE-2022-0995"
},
{
"cve": "CVE-2022-1011",
"product_status": {
"known_affected": [
"T015519",
"T015518",
"2951",
"T002207",
"67646",
"T015516",
"6368",
"T000126",
"T015127",
"398363",
"T015126",
"T004914"
]
},
"release_date": "2022-03-20T23:00:00.000+00:00",
"title": "CVE-2022-1011"
}
]
}
Loading…
Trend slope:
-
(linear fit over daily sighting counts)
Show additional events:
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…