vulnerability

Ubuntu: (Multiple Advisories) (CVE-2022-2991): Linux kernel (AWS) vulnerabilities

Severity
7
CVSS
(AV:L/AC:L/Au:M/C:C/I:C/A:C)
Published
Aug 25, 2022
Added
Apr 10, 2023
Modified
Aug 18, 2025

Description

A heap-based buffer overflow was found in the Linux kernel's LightNVM subsystem. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. This vulnerability allows a local attacker to escalate privileges and execute arbitrary code in the context of the kernel. The attacker must first obtain the ability to execute high-privileged code on the target system to exploit this vulnerability.

Solutions

ubuntu-upgrade-linux-image-4-4-0-1117-awsubuntu-upgrade-linux-image-4-4-0-1118-kvmubuntu-upgrade-linux-image-4-4-0-1155-awsubuntu-upgrade-linux-image-4-4-0-239-genericubuntu-upgrade-linux-image-4-4-0-239-lowlatencyubuntu-upgrade-linux-image-awsubuntu-upgrade-linux-image-genericubuntu-upgrade-linux-image-generic-lts-xenialubuntu-upgrade-linux-image-kvmubuntu-upgrade-linux-image-lowlatencyubuntu-upgrade-linux-image-lowlatency-lts-xenialubuntu-upgrade-linux-image-virtualubuntu-upgrade-linux-image-virtual-lts-xenial
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.