USN-5582-1: Linux kernel (Azure CVM) vulnerability advisory

Vulnerability Key Information Overview Vulnerability Name: USN-5582-1: Linux kernel (Azure CVM) vulnerabilities Release Date: August 25, 2022 Affected Scope: Linux kernel (Azure CVM) Vulnerability Details CVE-2022-34918: Arthur Mongodin discovered that the netfilter subsystem in the Linux kernel did not properly validate data. A local attacker could exploit this vulnerability to escalate privileges under specific conditions. CVE-2022-2588: Zhenpeng Lin discovered that the network packet scheduler implementation in the Linux kernel failed to remove all references to route filters in certain cases, potentially leading to denial of service (system crash) or arbitrary code execution. CVE-2022-28893: The netfilter subsystem did not prevent an nft object from referencing an nft set in another nft table, resulting in a use-after-free vulnerability. Update Instructions A system reboot is required after the update. Note: Due to unavoidable ABI changes, all installed third-party kernel modules must be recompiled and reinstalled. References CVE List: CVE-2022-34918, CVE-2022-28893, CVE-2022-2588, CVE-2022-2586, CVE-2022-1975, CVE-2022-1974, CVE-2022-1734, CVE-2022-1679, CVE-2022-1652, CVE-2022-1048. Related Notices USN-6014-1, USN-6013-1, USN-6001-1, USN-5856-1, USN-5588-1, USN-5567-1, USN-5566-1, USN-5565-1, USN-5564-1, USN-5562-1, etc.

Goal Reached Thanks to every supporter — we hit 100%!

USN-5582-1: Linux kernel (Azure CVM) vulnerability advisory