VDB

UBUNTU-CVE-2022-21499

UBUNTU-CVE-2022-21499 PUBLISHED CVSS 6.699999809265137 MEDIUM

KGDB and KDB allow read and write access to kernel memory, and thus should be restricted during lockdown. An attacker with access to a serial port could trigger the debugger so it is important that the debugger respect the lockdown mode when/if it is triggered. CVSS 3.1 Base Score 6.7 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).

Risk Scores

CVSS 3.1
6.699999809265137
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Affected Products

VendorProductVersions
Ubuntu:22.04:LTSlinux-intel-iotg5.15.0-1004.6, 0
Ubuntu:18.04:LTSlinux-azure-edge5.0.0-1012.12~18.04.2, 4.18.0-1006.6~18.04.1, 0
Ubuntu:20.04:LTSlinux-oracle-5.135.13.0-1028.33~20.04.1, 5.13.0-1027.32~20.04.1, 5.13.0-1025.30~20.04.1
Ubuntu:18.04:LTSlinux-snapdragon4.15.0-1097.106, 4.15.0-1094.103, 4.15.0-1095.104
Ubuntu:22.04:LTSlinux-ibm5.15.0-1005.5, 5.15.0-1004.4, 5.15.0-1003.3
Ubuntu:22.04:LTSlinux-realtime0, 5.15.0-1032.35
Ubuntu:18.04:LTSlinux-aws-5.30, 5.3.0-1028.30~18.04.1, 5.3.0-1030.32~18.04.1
Ubuntu:20.04:LTSlinux-riscv0, 5.4.0-24.28, 5.4.0-28.32
Ubuntu:20.04:LTSlinux-raspi25.3.0-1017.19, 0, 5.3.0-1007.8
Ubuntu:18.04:LTSlinux-gkeop-5.45.4.0-1003.3, 5.4.0-1013.14~18.04.1, 5.4.0-1012.13~18.04.1
Ubuntu:22.04:LTSlinux-riscv5.15.0-1008.8, 5.15.0-1007.7, 5.15.0-1005.5
Ubuntu:18.04:LTSlinux-hwe-5.45.4.0-42.46~18.04.1, 0, 5.4.0-37.41~18.04.1
Ubuntu:20.04:LTSlinux-aws-5.135.13.0-1021.23~20.04.2, 5.13.0-1022.24~20.04.1, 5.13.0-1019.21~20.04.1
Ubuntu:20.04:LTSlinux-raspi5.4.0-1058.65, 5.4.0-1056.63, 5.4.0-1055.62
Ubuntu:20.04:LTSlinux-gcp-5.80, 5.8.0-1032.34~20.04.1, 5.8.0-1035.37~20.04.1
Ubuntu:20.04:LTSlinux-oem-5.145.14.0-1005.5, 0, 5.14.0-1004.4
Ubuntu:Pro:FIPS-updates:20.04:LTSlinux-aws-fips5.4.0-1071.76+fips1, 5.4.0-1069.73+fips2, 5.4.0-1021.21+fips2
Ubuntu:20.04:LTSlinux-riscv-5.85.8.0-14.16~20.04.1, 5.8.0-29.31~20.04.1, 5.8.0-14.16~20.04.3
Ubuntu:20.04:LTSlinux-hwe-5.115.11.0-40.44~20.04.2, 5.11.0-43.47~20.04.2, 5.11.0-44.48~20.04.2
Ubuntu:22.04:LTSlinux-oem-5.175.17.0-1006.6, 5.17.0-1004.4, 5.17.0-1003.3

…and 71 more

Timeline

  • May 24, 2022 CVE Published
  • Sep 9, 2026 CVE Updated
  • Oct 30, 2026 Distribution Patch
  • Oct 30, 2026 Distribution Patch
  • Oct 30, 2026 Distribution Patch
  • Oct 30, 2026 Distribution Patch
  • Oct 30, 2026 Distribution Patch
  • Oct 30, 2026 Distribution Patch
  • Oct 30, 2026 Distribution Patch
  • Oct 30, 2026 Distribution Patch
  • Oct 30, 2026 Security Advisory
  • Oct 30, 2026 Security Advisory

References

Open in Interactive Console →
$ Console Community · 50/day Open console ›