Patchwire CVEs, their patch status, and feeds to follow them

CVE-2022-24122

Fixed in a distro release EPSS 1%

kernel/ucount.c in the Linux kernel 5.14 through 5.16.4, when unprivileged user namespaces are enabled, allows a use-after-free and privilege escalation because a ucounts object can outlive its namespace.

Published 2022-01-29 · CVE record · OSV

Products: linux_kernel, netapp h410c_firmware, netapp h300s_firmware, netapp h500s_firmware, netapp h700s_firmware, netapp h300e_firmware, netapp h500e_firmware, netapp h700e_firmware, netapp h410s_firmware, fedoraproject fedora

Distro releases

ReleasePackageFixed in
Debian 12linux5.15.15-2
Debian 13linux5.15.15-2
Debian 14linux5.15.15-2
Ubuntu 16.04 LTSlinux-hwe-edgeno fix
Ubuntu 18.04 LTSlinux-aws-5.0no fix
Ubuntu 18.04 LTSlinux-aws-5.3no fix
Ubuntu 18.04 LTSlinux-azureno fix
Ubuntu 18.04 LTSlinux-azure-5.3no fix
Ubuntu 18.04 LTSlinux-azure-edgeno fix
Ubuntu 18.04 LTSlinux-gcpno fix
Ubuntu 18.04 LTSlinux-gcp-5.3no fix
Ubuntu 18.04 LTSlinux-gke-4.15no fix
Ubuntu 18.04 LTSlinux-hweno fix
Ubuntu 18.04 LTSlinux-hwe-edgeno fix
Ubuntu 18.04 LTSlinux-oemno fix
Ubuntu 18.04 LTSlinux-oracle-5.0no fix
Ubuntu 18.04 LTSlinux-oracle-5.3no fix
Ubuntu 20.04 LTSlinux-aws-5.8no fix
Ubuntu 20.04 LTSlinux-azure-5.8no fix
Ubuntu 20.04 LTSlinux-gcp-5.8no fix
Ubuntu 20.04 LTSlinux-hwe-5.11no fix
Ubuntu 20.04 LTSlinux-hwe-5.8no fix
Ubuntu 20.04 LTSlinux-intel-5.13no fix
Ubuntu 20.04 LTSlinux-oem-5.145.14.0-1022.24
Ubuntu 20.04 LTSlinux-oem-5.6no fix
Ubuntu 20.04 LTSlinux-oracle-5.8no fix
Ubuntu 20.04 LTSlinux-raspi2no fix
Ubuntu 20.04 LTSlinux-riscvno fix
Ubuntu 20.04 LTSlinux-riscv-5.8no fix