VDB
UBUNTU-CVE-2022-24959
UBUNTU-CVE-2022-24959
PUBLISHED
CVSS 5.5 MEDIUM
An issue was discovered in the Linux kernel before 5.16.5. There is a memory leak in yam_siocdevprivate in drivers/net/hamradio/yam.c.
Risk Scores
CVSS 3.1
5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ubuntu:18.04:LTS | linux-kvm | 4.15.0-1079.81, 4.15.0-1032.32, 4.15.0-1031.31 |
| Ubuntu:16.04:LTS | linux-hwe-edge | 4.10.0-26.30~16.04.1, 4.11.0-13.19~16.04.1, 4.11.0-14.20~16.04.1 |
| Ubuntu:Pro:FIPS-updates:18.04:LTS | linux-aws-fips | 4.15.0-2035.37, 4.15.0-2034.35, 4.15.0-2056.58 |
| Ubuntu:20.04:LTS | linux-azure-5.8 | 5.8.0-1036.38~20.04.1, 5.8.0-1043.46~20.04.1, 5.8.0-1042.45~20.04.1 |
| Ubuntu:Pro:FIPS:20.04:LTS | linux-gcp-fips | 5.4.0-1021.21+fips1, 0 |
| Ubuntu:20.04:LTS | linux-azure | 5.4.0-1058.60, 5.4.0-1056.58, 5.4.0-1055.57 |
| Ubuntu:22.04:LTS | linux-realtime | 5.15.0-1032.35, 0 |
| Ubuntu:20.04:LTS | linux-gke | 5.4.0-1037.39, 5.4.0-1041.43, 5.4.0-1042.44 |
| Ubuntu:20.04:LTS | linux-kvm | 5.4.0-1058.61, 5.3.0-1003.3, 5.3.0-1008.9 |
| Ubuntu:18.04:LTS | linux-gcp-5.3 | 5.3.0-1032.34~18.04.1, 0, 5.3.0-1008.9~18.04.1 |
| Ubuntu:20.04:LTS | linux-raspi2 | 5.3.0-1014.16, 5.3.0-1007.8, 0 |
| Ubuntu:20.04:LTS | linux-aws | 5.4.0-1005.5, 5.3.0-1010.11, 5.3.0-1009.10 |
| Ubuntu:18.04:LTS | linux-hwe-5.4 | 5.4.0-74.83~18.04.1, 0, 5.4.0-37.41~18.04.1 |
| Ubuntu:18.04:LTS | linux-azure-5.3 | 5.3.0-1010.11~18.04.1, 5.3.0-1009.10~18.04.1, 5.3.0-1008.9~18.04.1 |
| Ubuntu:18.04:LTS | linux-azure-5.4 | 5.4.0-1036.38~18.04.1, 5.4.0-1034.35~18.04.1, 5.4.0-1032.33~18.04.1 |
| Ubuntu:20.04:LTS | linux-oracle-5.11 | 5.11.0-1008.8~20.04.1, 5.11.0-1013.14~20.04.1, 0 |
| Ubuntu:18.04:LTS | linux-gke-5.4 | 5.4.0-1032.34~18.04.1, 5.4.0-1067.70~18.04.1, 5.4.0-1066.69~18.04.1 |
| Ubuntu:20.04:LTS | linux-oracle-5.8 | 5.8.0-1031.32~20.04.2, 5.8.0-1033.34~20.04.1, 5.8.0-1034.35~20.04.2 |
| Ubuntu:20.04:LTS | linux-hwe-5.8 | 5.8.0-33.36~20.04.1, 5.8.0-34.37~20.04.2, 5.8.0-36.40~20.04.1 |
| Ubuntu:Pro:14.04:LTS | linux-azure | 4.15.0-1089.99~14.04.1, 4.15.0-1082.92~14.04.1, 4.15.0-1077.82~14.04.1 |
…and 70 more
Timeline
- Feb 11, 2022 CVE Published
- Sep 9, 2026 CVE Updated
- Oct 30, 2026 Distribution Patch
- Oct 30, 2026 Distribution Patch
- Oct 30, 2026 Distribution Patch
- Oct 30, 2026 Distribution Patch
- Oct 30, 2026 Security Advisory
- Oct 30, 2026 Security Advisory
- Oct 30, 2026 Security Advisory
- Oct 30, 2026 Security Advisory
References
- https://ubuntu.com/security/CVE-2022-24959 report
- https://git.kernel.org/linus/29eb31542787e1019208a2e1047bb7c76c069536 report
- https://github.com/torvalds/linux/commit/29eb31542787e1019208a2e1047bb7c76c069536 report
- https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.16.5 report
- https://ubuntu.com/security/notices/USN-5302-1 advisory
- https://ubuntu.com/security/notices/USN-5383-1 advisory
- https://ubuntu.com/security/notices/USN-5384-1 advisory
- https://ubuntu.com/security/notices/USN-5385-1 advisory
- https://www.cve.org/CVERecord?id=CVE-2022-24959 report