Alibaba Security Advisories · May 2022 — Alibaba Security Advisories
2 advisories 23 CVEs 1 EXPLOITED

Alibaba Cloud Linux 2 advisories and cross-source Alibaba/Aliyun CVEs for 2022-05. Mirrored into Vulnetix VDB.

Every advisory below is enriched with the Vulnetix VDB exploit-intelligence chip (hover a CVE ID in the interactive page to see CVSS, EPSS, KEV status, and PoC maturity). 1 is already weaponised in the wild — see the Exploited section.

What would you fix first?

The advisories below are ordered by the Vulnetix risk prioritization strategy: exploitation evidence first, scores second. On the interactive page you can switch to three other lenses.

Advisories

ALINUX2-SA-2022:0028

ALINUX 2ExploitedCISA KEV listed2022-05-24

ALINUX2-SA-2022:0028: cloud-kernel bugfix, enhancement and security update (Important)

CVEs:CVE-2019-19057CVE-2019-19067CVE-2019-19073CVE-2019-19074CVE-2019-20636CVE-2020-11608CVE-2020-11609CVE-2020-11668CVE-2020-12465CVE-2021-4157CVE-2021-4202CVE-2021-4203CVE-2021-45868CVE-2022-0330CVE-2022-0435CVE-2022-0617CVE-2022-0847CVE-2022-0886CVE-2022-1353CVE-2022-1419CVE-2022-22942CVE-2022-29581

Affected products

ProductStatusVendorPackageEcosystem
kernel affected Alibaba Cloud kernel —
Upstream advisory

Need live exploit intelligence?

Every CVE above is indexed in the Vulnetix VDB with KEV, EPSS, and PoC maturity. The interactive page surfaces that on hover.