VDB
UBUNTU-CVE-2022-3707
UBUNTU-CVE-2022-3707
PUBLISHED
CVSS 9.399999618530273 CRITICAL
A double-free memory flaw was found in the Linux kernel. The Intel GVT-g graphics driver triggers VGA card system resource overload, causing a fail in the intel_gvt_dma_map_guest_page function. This issue could allow a local user to crash the system.
Risk Scores
CVSS 4.0
9.399999618530273
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ubuntu:20.04:LTS | linux-gke-5.15 | 0, 5.15.0-1014.17~20.04.1, 5.15.0-1011.14~20.04.1 |
| Ubuntu:20.04:LTS | linux-ibm | 5.4.0-1037.42, 5.4.0-1036.41, 5.4.0-1034.38 |
| Ubuntu:22.04:LTS | linux-oem-6.0 | 6.0.0-1008.8, 6.0.0-1021.21, 6.0.0-1020.20 |
| Ubuntu:18.04:LTS | linux-oracle-5.0 | 5.0.0-1007.12~18.04.1, 0, 5.0.0-1014.19 |
| Ubuntu:20.04:LTS | linux-gkeop | 5.4.0-1023.24, 5.4.0-1026.27, 5.4.0-1025.26 |
| Ubuntu:20.04:LTS | linux-hwe-5.15 | 0, 5.15.0-71.78~20.04.1, 5.15.0-70.77~20.04.1 |
| Ubuntu:20.04:LTS | linux-azure | 5.4.0-1026.26, 5.4.0-1048.50, 5.4.0-1049.51 |
| Ubuntu:22.04:LTS | linux-oem-5.17 | 5.17.0-1016.17, 5.17.0-1015.16, 5.17.0-1014.15 |
| Ubuntu:18.04:LTS | linux-hwe-edge | 5.3.0-24.26~18.04.2, 5.3.0-23.25~18.04.2, 5.3.0-23.25~18.04.1 |
| Ubuntu:Pro:FIPS-updates:20.04:LTS | linux-gcp-fips | 5.4.0-1097.106+fips1, 5.4.0-1104.113+fips1, 5.4.0-1103.112+fips1 |
| Ubuntu:22.04:LTS | linux-intel-iotg | 5.15.0-1018.23, 5.15.0-1021.26, 5.15.0-1023.28 |
| Ubuntu:20.04:LTS | linux-raspi2 | 0, 5.3.0-1007.8, 5.3.0-1014.16 |
| Ubuntu:Pro:FIPS-updates:20.04:LTS | linux-azure-fips | 5.4.0-1090.95+fips1, 5.4.0-1091.96+fips1, 5.4.0-1094.100+fips1 |
| Ubuntu:20.04:LTS | linux | 5.4.0-107.121, 5.4.0-105.119, 0 |
| Ubuntu:20.04:LTS | linux-oem-5.14 | 5.14.0-1018.19, 5.14.0-1013.13, 5.14.0-1011.11 |
| Ubuntu:20.04:LTS | linux-azure-5.11 | 5.11.0-1028.31~20.04.2, 0, 5.11.0-1007.7~20.04.2 |
| Ubuntu:22.04:LTS | linux-hwe-5.19 | 5.19.0-41.42~22.04.1, 5.19.0-40.41~22.04.1, 5.19.0-38.39~22.04.1 |
| Ubuntu:20.04:LTS | linux-lowlatency-hwe-5.15 | 5.15.0-67.74~20.04.1, 5.15.0-69.76~20.04.1, 5.15.0-70.77~20.04.1 |
| Ubuntu:20.04:LTS | linux-bluefield | 5.4.0-1059.65, 5.4.0-1045.50, 5.4.0-1044.49 |
| Ubuntu:20.04:LTS | linux-intel-5.13 | 5.13.0-1014.15, 5.13.0-1011.11, 5.13.0-1010.10 |
…and 86 more
Timeline
- Oct 31, 2022 CVE Published
- Oct 22, 2026 CVE Updated
- Oct 30, 2026 Distribution Patch
- Oct 30, 2026 Distribution Patch
- Oct 30, 2026 Distribution Patch
- Oct 30, 2026 Distribution Patch
- Oct 30, 2026 Distribution Patch
- Oct 30, 2026 Distribution Patch
- Oct 30, 2026 Distribution Patch
- Oct 30, 2026 Distribution Patch
- Oct 30, 2026 Distribution Patch
- Oct 30, 2026 Distribution Patch
References
- https://ubuntu.com/security/CVE-2022-3707 report
- https://lore.kernel.org/all/20221007013708.1946061-1-zyytlz.wz@163.com/ report
- https://ubuntu.com/security/notices/USN-5915-1 advisory
- https://ubuntu.com/security/notices/USN-6079-1 advisory
- https://ubuntu.com/security/notices/USN-6080-1 advisory
- https://ubuntu.com/security/notices/USN-6085-1 advisory
- https://ubuntu.com/security/notices/USN-6090-1 advisory
- https://ubuntu.com/security/notices/USN-6091-1 advisory
- https://ubuntu.com/security/notices/USN-6094-1 advisory
- https://ubuntu.com/security/notices/USN-6096-1 advisory
- https://ubuntu.com/security/notices/USN-6109-1 advisory
- https://ubuntu.com/security/notices/USN-6118-1 advisory
- https://ubuntu.com/security/notices/USN-6132-1 advisory
- https://ubuntu.com/security/notices/USN-6133-1 advisory
- https://ubuntu.com/security/notices/USN-6134-1 advisory
- https://ubuntu.com/security/notices/USN-6222-1 advisory
- https://ubuntu.com/security/notices/USN-6256-1 advisory
- https://www.cve.org/CVERecord?id=CVE-2022-3707 report