{"id":22104,"date":"2022-03-24T19:30:02","date_gmt":"2022-03-24T15:30:02","guid":{"rendered":"https:\/\/packetstormsecurity.com\/files\/166444\/LSN-0085-1.txt"},"modified":"2022-03-28T09:41:48","modified_gmt":"2022-03-28T05:11:48","slug":"kernel-live-patch-security-notice-lsn-0085-1","status":"publish","type":"post","link":"https:\/\/afaghhosting.net\/blog\/kernel-live-patch-security-notice-lsn-0085-1\/","title":{"rendered":"Kernel Live Patch Security Notice LSN-0085-1"},"content":{"rendered":"<p dir=\"ltr\">Linux kernel vulnerabilities<\/p>\n<p dir=\"ltr\">A security issue affects these releases of Ubuntu and its derivatives:<\/p>\n<p dir=\"ltr\">&#8211; Ubuntu 20.04 LTS<br \/>\n&#8211; Ubuntu 18.04 LTS<br \/>\n&#8211; Ubuntu 16.04 ESM<br \/>\n&#8211; Ubuntu 14.04 ESM<\/p>\n<p dir=\"ltr\">Summary<\/p>\n<p dir=\"ltr\">Several security issues were fixed in the kernel.<\/p>\n<p dir=\"ltr\">Software Description<\/p>\n<p dir=\"ltr\">&#8211; linux &#8211; Linux kernel<br \/>\n&#8211; linux-aws &#8211; Linux kernel for Amazon Web Services (AWS) systems<br \/>\n&#8211; linux-azure &#8211; Linux kernel for Microsoft Azure Cloud systems<br \/>\n&#8211; linux-gcp &#8211; Linux kernel for Google Cloud Platform (GCP) systems<br \/>\n&#8211; linux-gke &#8211; Linux kernel for Google Container Engine (GKE) systems<br \/>\n&#8211; linux-gkeop &#8211; Linux kernel for Google Container Engine (GKE) systems<br \/>\n&#8211; linux-ibm &#8211; Linux kernel for IBM cloud systems<br \/>\n&#8211; linux-oem &#8211; Linux kernel for OEM systems<\/p>\n<p dir=\"ltr\">Details<\/p>\n<p dir=\"ltr\">Yiqi Sun and Kevin Wang discovered that the cgroups implementation in<br \/>\nthe Linux kernel did not properly restrict access to the cgroups v1<br \/>\nrelease_agent feature. A local attacker could use this to gain<br \/>\nadministrative privileges. (CVE-2022-0492)<\/p>\n<p dir=\"ltr\">Nick Gregory discovered that the Linux kernel incorrectly handled<br \/>\nnetwork offload functionality. A local attacker could use this to cause<br \/>\na denial of service or possibly execute arbitrary code. (CVE-2022-25636)<\/p>\n<p dir=\"ltr\">Update instructions<\/p>\n<p dir=\"ltr\">The problem can be corrected by updating your kernel livepatch to the<br \/>\nfollowing versions:<\/p>\n<p dir=\"ltr\">Ubuntu 20.04 LTS<br \/>\naws &#8211; 85.1<br \/>\nazure &#8211; 85.1<br \/>\ngcp &#8211; 85.1<br \/>\ngeneric &#8211; 85.1<br \/>\ngke &#8211; 85.1<br \/>\ngkeop &#8211; 85.1<br \/>\nibm &#8211; 85.1<br \/>\nlowlatency &#8211; 85.1<\/p>\n<p dir=\"ltr\">Ubuntu 18.04 LTS<br \/>\naws &#8211; 85.1<br \/>\nazure &#8211; 85.1<br \/>\ngeneric &#8211; 85.1<br \/>\ngeneric &#8211; 85.2<br \/>\ngke &#8211; 85.1<br \/>\ngkeop &#8211; 85.1<br \/>\nibm &#8211; 85.1<br \/>\nlowlatency &#8211; 85.1<br \/>\nlowlatency &#8211; 85.2<br \/>\noem &#8211; 85.1<\/p>\n<p dir=\"ltr\">Ubuntu 16.04 ESM<br \/>\naws &#8211; 85.1<br \/>\nazure &#8211; 85.1<br \/>\ngeneric &#8211; 85.1<br \/>\nlowlatency &#8211; 85.1<\/p>\n<p dir=\"ltr\">Ubuntu 14.04 ESM<br \/>\ngeneric &#8211; 85.1<br \/>\nlowlatency &#8211; 85.1<\/p>\n<p dir=\"ltr\">Support Information<\/p>\n<p dir=\"ltr\">Kernels older than the levels listed below do not receive livepatch<br \/>\nupdates. If you are running a kernel version earlier than the one listed<br \/>\nbelow, please upgrade your kernel as soon as possible.<\/p>\n<p dir=\"ltr\">Ubuntu 20.04 LTS<br \/>\nlinux-aws &#8211; 5.4.0-1009<br \/>\nlinux-azure &#8211; 5.4.0-1010<br \/>\nlinux-gcp &#8211; 5.4.0-1009<br \/>\nlinux-gke &#8211; 5.4.0-1033<br \/>\nlinux-gkeop &#8211; 5.4.0-1009<br \/>\nlinux-ibm &#8211; 5.4.0-1009<br \/>\nlinux-oem &#8211; 5.4.0-26<br \/>\nlinux &#8211; 5.4.0-26<\/p>\n<p dir=\"ltr\">Ubuntu 18.04 LTS<br \/>\nlinux-aws &#8211; 4.15.0-1054<br \/>\nlinux-azure-4.15 &#8211; 4.15.0-1115<br \/>\nlinux-azure-5.4 &#8211; 5.4.0-1069<br \/>\nlinux-gke-4.15 &#8211; 4.15.0-1076<br \/>\nlinux-gke-5.4 &#8211; 5.4.0-1009<br \/>\nlinux-gkeop-5.4 &#8211; 5.4.0-1007<br \/>\nlinux-hwe-5.4 &#8211; 5.4.0-26<br \/>\nlinux-ibm-5.4 &#8211; 5.4.0-1009<br \/>\nlinux-oem &#8211; 4.15.0-1063<br \/>\nlinux &#8211; 4.15.0-69<\/p>\n<p dir=\"ltr\">Ubuntu 16.04 ESM<br \/>\nlinux-aws &#8211; 4.4.0-1098<br \/>\nlinux-azure &#8211; 4.15.0-1063<br \/>\nlinux-hwe &#8211; 4.15.0-69<br \/>\nlinux &#8211; 4.4.0-168<\/p>\n<p dir=\"ltr\">Ubuntu 14.04 ESM<br \/>\nlinux-lts-xenial &#8211; 4.4.0-168<\/p>\n<p dir=\"ltr\">References<\/p>\n<p dir=\"ltr\">&#8211; CVE-2022-0492<br \/>\n&#8211; CVE-2022-25636<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Linux kernel vulnerabilities A security issue affects these releases of Ubuntu and its derivatives: &#8211; Ubuntu 20.04 LTS &#8211; Ubuntu 18.04 LTS &#8211; Ubuntu 16.04 ESM &#8211; Ubuntu 14.04 ESM Summary Several security issues were fixed in the kernel. Software Description &#8211; linux &#8211; Linux kernel &#8211; linux-aws &#8211; Linux kernel for Amazon Web Services &hellip;<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[26],"tags":[],"class_list":["post-22104","post","type-post","status-publish","format-standard","hentry","category-vulnerability"],"_links":{"self":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/22104","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/comments?post=22104"}],"version-history":[{"count":0,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/22104\/revisions"}],"wp:attachment":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/media?parent=22104"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/categories?post=22104"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/tags?post=22104"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}