VDB
UBUNTU-CVE-2022-1353
UBUNTU-CVE-2022-1353
PUBLISHED
CVSS 4.800000190734863 MEDIUM
A vulnerability was found in the pfkey_register function in net/key/af_key.c in the Linux kernel. This flaw allows a local, unprivileged user to gain access to kernel memory, leading to a system crash or a leak of internal kernel information.
Risk Scores
CVSS 4.0
4.800000190734863
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ubuntu:18.04:LTS | linux-aws-5.4 | 5.4.0-1068.72~18.04.1, 0, 5.4.0-1018.18~18.04.1 |
| Ubuntu:Pro:16.04:LTS | linux-oracle | 4.15.0-1056.61~16.04.1, 4.15.0-1058.64~16.04.1, 4.15.0-1059.65~16.04.1 |
| Ubuntu:Pro:16.04:LTS | linux-aws-hwe | 4.15.0-1126.135~16.04.2, 4.15.0-1124.133~16.04.1, 4.15.0-1123.132~16.04.1 |
| Ubuntu:20.04:LTS | linux-hwe-5.11 | 5.11.0-41.45~20.04.1, 5.11.0-40.44~20.04.2, 5.11.0-38.42~20.04.1 |
| Ubuntu:20.04:LTS | linux-gke | 5.4.0-1072.77, 0, 5.4.0-1033.35 |
| Ubuntu:18.04:LTS | linux-azure | 4.15.0-1018.18, 4.15.0-1022.23, 4.15.0-1023.24 |
| Ubuntu:20.04:LTS | linux-riscv-5.8 | 0, 5.8.0-14.16~20.04.1, 5.8.0-14.16~20.04.3 |
| Ubuntu:20.04:LTS | linux-raspi2 | 5.4.0-1004.4, 0, 5.3.0-1007.8 |
| Ubuntu:Pro:FIPS-updates:18.04:LTS | linux-aws-fips | 4.15.0-2056.58, 4.15.0-2057.59, 4.15.0-2059.61 |
| Ubuntu:20.04:LTS | linux-aws | 5.4.0-1073.78, 0, 5.3.0-1003.3 |
| Ubuntu:20.04:LTS | linux-gcp-5.11 | 5.11.0-1014.16~20.04.1, 5.11.0-1017.19~20.04.1, 5.11.0-1018.20~20.04.2 |
| Ubuntu:Pro:FIPS-updates:16.04:LTS | linux-fips | 4.4.0-1051.57, 4.4.0-1049.55, 4.4.0-1048.53 |
| Ubuntu:22.04:LTS | linux-intel-iot-realtime | 5.15.0-1073.75, 0 |
| Ubuntu:20.04:LTS | linux-azure-5.15 | 5.15.0-1007.8~20.04.1, 0 |
| Ubuntu:18.04:LTS | linux-azure-edge | 4.18.0-1007.7~18.04.1, 4.18.0-1006.6~18.04.1, 0 |
| Ubuntu:18.04:LTS | linux-snapdragon | 4.4.0-1077.82, 4.15.0-1132.142, 4.15.0-1129.138 |
| Ubuntu:20.04:LTS | linux-oracle-5.8 | 5.8.0-1031.32~20.04.2, 0, 5.8.0-1038.39~20.04.1 |
| Ubuntu:22.04:LTS | linux-oracle | 5.15.0-1006.8, 5.15.0-1007.9, 0 |
| Ubuntu:Pro:FIPS:20.04:LTS | linux-aws-fips | 5.4.0-1021.21+fips2, 0 |
| Ubuntu:22.04:LTS | linux-gcp | 5.15.0-1005.8, 5.15.0-1004.7, 5.15.0-1003.6 |
…and 98 more
Timeline
- Apr 29, 2022 CVE Published
- Oct 28, 2026 CVE Updated
- Oct 30, 2026 Distribution Patch
- Oct 30, 2026 Distribution Patch
- Oct 30, 2026 Distribution Patch
- Oct 30, 2026 Distribution Patch
- Oct 30, 2026 Distribution Patch
- Oct 30, 2026 Distribution Patch
- Oct 30, 2026 Distribution Patch
- Oct 30, 2026 Security Advisory
- Oct 30, 2026 Security Advisory
- Oct 30, 2026 Security Advisory
References
- https://ubuntu.com/security/CVE-2022-1353 report
- https://git.kernel.org/linus/9a564bccb78a76740ea9d75a259942df8143d02c report
- https://ubuntu.com/security/notices/USN-5467-1 advisory
- https://ubuntu.com/security/notices/USN-5469-1 advisory
- https://ubuntu.com/security/notices/USN-5500-1 advisory
- https://ubuntu.com/security/notices/USN-5505-1 advisory
- https://ubuntu.com/security/notices/USN-5513-1 advisory
- https://ubuntu.com/security/notices/USN-5515-1 advisory
- https://ubuntu.com/security/notices/USN-5541-1 advisory
- https://www.cve.org/CVERecord?id=CVE-2022-1353 report