[Ksplice][Ubuntu-22.04-Updates] New Ksplice updates for Ubuntu 22.04 Jammy (USN-5792-1)

[Julian Pidancet]

Synopsis: USN-5792-1 can now be patched using Ksplice
CVEs: CVE-2022-0171 CVE-2022-20421 CVE-2022-2308 CVE-2022-2663 CVE-2022-3061 CVE-2022-3303 CVE-2022-3577 CVE-2022-3586 CVE-2022-3646 CVE-2022-3649 CVE-2022-39188 CVE-2022-39842 CVE-2022-40307 CVE-2022-4095 CVE-2022-43750

Systems running Ubuntu 22.04 Jammy can now use Ksplice to patch
against the latest Ubuntu Security Notice, USN-5792-1.

INSTALLING THE UPDATES

We recommend that all users of Ksplice Uptrack running Ubuntu 22.04
Jammy install these updates.

On systems that have "autoinstall = yes" in /etc/uptrack/uptrack.conf,
these updates will be installed automatically and you do not need to
take any action.

Alternatively, you can install these updates by running:

# /usr/sbin/uptrack-upgrade -y


DESCRIPTION

* Improved update to CVE-2022-3061: Denial-of-service in i740fb framebuffer driver.

Improper checking of userspace provided arguments in i740fb when
setting the 'pixclock' hardware property may lead to a divide-by-zero
bug. A local attacker could use this flaw for a denial-of-service.


* CVE-2022-2663: Firewall bypass in IRC connection tracking.

An issue in nf_conntrack_irc in unencrypted IRC protocol message
handling could result in messages being incorrectly matched by the
firewall. A remote user could use this flaw to bypass local firewall
rules.


* CVE-2022-39188: Denial-of-service in MMU-based Paged Memory Management Support.

A flaw in MMU-based Paged Memory Management Support when unmapping
a memory region could result in a system crash. A local user could use
this flaw to cause a denial-of-service.


* CVE-2022-3577: Memory leak when registering pvrusb2 driver.

A missing free of resources when registering pvrusb2 driver could lead
to a memory leak. A local attacker could use this flaw to cause a
denial-of-service.


* CVE-2022-20421: Use-after-free in Android binder.

A race condition in the binder subsystem could lead to a use-after-free
after a failed transaction. An unpriviledged user could use this flaw to
cause a denial-of-service or escalate privileges.


* CVE-2022-40307: Use-after-free in EFI capsule loader.

A race condition in EFI capsule loader when simultaneously performing a
write and a close operation on the device node may lead to a
use-after-free. A local user could use this flaw to cause a
denial-of-service or escalate privileges.


* CVE-2022-3586: Use-after-free in network scheduler.

A race condition in net scheduler when enqueuing a socket buffer into a
queue discipline may lead to a use-after-free. A local user could use
this flaw to cause a denial-of-service or disclose sensitive
information.


* Note: Oracle will not provide a zero-downtime update for CVE-2022-0171.

A flaw was found in the KVM SEV API that allows a guest user to cause a
denial-of-service by creating a confidential guest VM (SEV).
Only systems using encrypted guests using AMD SEV are affected. Oracle
has determined that a rebootless patch for this issue would not be safe
and recommends rebooting the affected systems.


* CVE-2022-2308: Information disclosure in Virtio Data Path Acceleration.

Improperly initialized memory in vDPA when a vDPA Device in Userspace
(VDUSE) application requests configuration data from the driver may lead
to leaking kernel stack memory. This could cause undefined behavior or
data leaks in Virtio drivers.


* CVE-2022-43750: Use-after-free in USB monitor.

Incorrect permission flags set on userspace memory mappings in usbmon
could lead to a use-after-free. A local attacker could use this flaw for
a denial-of-service or escalate privileges.


* CVE-2022-3649: Use-after-free in NILFS2 file system.

A missing sanity check in nilfs2 when handling corrupted on-disk
filesystem data could lead to a use-after-free. An attacker could use
this flaw to cause a denial-of-service or escalate privileges.


* CVE-2022-3646: Memory-leak in NILFS2 file system.

A flaw in NILFS2 when failing to create a log write thread could lead to
a memory leak. A local attacker could use this flaw to exhaust system
memory and cause a denial-of-service.


* CVE-2022-4095: Use-after-free in rtl8712 USB networking driver.

A flaw in the rtl8712 driver may lead to a use-after-free when
processing the command queue. A local attacker could use this flaw to
cause a denial-of-service or escalate privileges.


* Oracle will not provide a zero-downtime update for CVE-2022-3303.

Oracle has determined that the vulnerability does not affect a
running system.


* Oracle will not provide a zero-downtime update for CVE-2022-39842.

Oracle has determined that the vulnerability does not affect a
running system.

SUPPORT

Ksplice support is available at ksplice-support_ww at oracle.com.