CVE 2022-20566
In l2cap_chan_put of l2cap_core, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Related bugs and status
CVE-2022-20566 (Candidate) is related to these bugs:
Bug #1968310: arp_ndisc_evict_nocarrier.sh in net from ubuntu_kernel_selftests failed on J-oem-5.17 / K
Bug #2000110: Keeps rebooting with AMD W6400, W6600, and W6800 graphic cards
Bug #2004346: jammy/linux-oem-5.17: 5.17.0-1028.29 -proposed tracker
| Summary | In | Importance | Status | |||
|---|---|---|---|---|---|---|
| 2004346 | jammy/linux-oem-5.17: 5.17.0-1028.29 -proposed tracker | Kernel SRU Workflow | Medium | Fix Released | ||
| 2004346 | jammy/linux-oem-5.17: 5.17.0-1028.29 -proposed tracker | Kernel SRU Workflow automated-testing | Medium | Fix Released | ||
| 2004346 | jammy/linux-oem-5.17: 5.17.0-1028.29 -proposed tracker | Kernel SRU Workflow boot-testing | Medium | Fix Released | ||
| 2004346 | jammy/linux-oem-5.17: 5.17.0-1028.29 -proposed tracker | Kernel SRU Workflow certification-testing | Medium | Fix Released | ||
| 2004346 | jammy/linux-oem-5.17: 5.17.0-1028.29 -proposed tracker | Kernel SRU Workflow new-review | Medium | Fix Released | ||
| 2004346 | jammy/linux-oem-5.17: 5.17.0-1028.29 -proposed tracker | Kernel SRU Workflow prepare-package | Medium | Fix Released | ||
| 2004346 | jammy/linux-oem-5.17: 5.17.0-1028.29 -proposed tracker | Kernel SRU Workflow prepare-package-generate | Medium | Fix Released | ||
| 2004346 | jammy/linux-oem-5.17: 5.17.0-1028.29 -proposed tracker | Kernel SRU Workflow prepare-package-lrg | Medium | Fix Released | ||
| 2004346 | jammy/linux-oem-5.17: 5.17.0-1028.29 -proposed tracker | Kernel SRU Workflow prepare-package-lrm | Medium | Fix Released | ||
| 2004346 | jammy/linux-oem-5.17: 5.17.0-1028.29 -proposed tracker | Kernel SRU Workflow prepare-package-lrs | Medium | Fix Released | ||
| 2004346 | jammy/linux-oem-5.17: 5.17.0-1028.29 -proposed tracker | Kernel SRU Workflow prepare-package-meta | Medium | Fix Released | ||
| 2004346 | jammy/linux-oem-5.17: 5.17.0-1028.29 -proposed tracker | Kernel SRU Workflow prepare-package-signed | Medium | Fix Released | ||
| 2004346 | jammy/linux-oem-5.17: 5.17.0-1028.29 -proposed tracker | Kernel SRU Workflow promote-signing-to-proposed | Medium | Invalid | ||
| 2004346 | jammy/linux-oem-5.17: 5.17.0-1028.29 -proposed tracker | Kernel SRU Workflow promote-to-proposed | Medium | Fix Released | ||
| 2004346 | jammy/linux-oem-5.17: 5.17.0-1028.29 -proposed tracker | Kernel SRU Workflow promote-to-security | Medium | Fix Released | ||
| 2004346 | jammy/linux-oem-5.17: 5.17.0-1028.29 -proposed tracker | Kernel SRU Workflow promote-to-updates | Medium | Fix Released | ||
| 2004346 | jammy/linux-oem-5.17: 5.17.0-1028.29 -proposed tracker | Kernel SRU Workflow regression-testing | Medium | Fix Released | ||
| 2004346 | jammy/linux-oem-5.17: 5.17.0-1028.29 -proposed tracker | Kernel SRU Workflow security-signoff | Medium | Fix Released | ||
| 2004346 | jammy/linux-oem-5.17: 5.17.0-1028.29 -proposed tracker | Kernel SRU Workflow sru-review | Medium | Fix Released | ||
| 2004346 | jammy/linux-oem-5.17: 5.17.0-1028.29 -proposed tracker | Kernel SRU Workflow verification-testing | Medium | Fix Released | ||
| 2004346 | jammy/linux-oem-5.17: 5.17.0-1028.29 -proposed tracker | linux-oem-5.17 (Ubuntu Jammy) | Medium | Fix Released | ||
| 2004346 | jammy/linux-oem-5.17: 5.17.0-1028.29 -proposed tracker | canonical-signing-jobs task00 | Medium | Fix Released | ||
Bug #2004386: focal/linux-oem-5.14: 5.14.0-1058.66 -proposed tracker
| Summary | In | Importance | Status | |||
|---|---|---|---|---|---|---|
| 2004386 | focal/linux-oem-5.14: 5.14.0-1058.66 -proposed tracker | Kernel SRU Workflow | Medium | Fix Released | ||
| 2004386 | focal/linux-oem-5.14: 5.14.0-1058.66 -proposed tracker | Kernel SRU Workflow automated-testing | Medium | Fix Released | ||
| 2004386 | focal/linux-oem-5.14: 5.14.0-1058.66 -proposed tracker | Kernel SRU Workflow boot-testing | Medium | Fix Released | ||
| 2004386 | focal/linux-oem-5.14: 5.14.0-1058.66 -proposed tracker | Kernel SRU Workflow certification-testing | Medium | Fix Released | ||
| 2004386 | focal/linux-oem-5.14: 5.14.0-1058.66 -proposed tracker | Kernel SRU Workflow kernel-signoff | Medium | Fix Released | ||
| 2004386 | focal/linux-oem-5.14: 5.14.0-1058.66 -proposed tracker | Kernel SRU Workflow new-review | Medium | Fix Released | ||
| 2004386 | focal/linux-oem-5.14: 5.14.0-1058.66 -proposed tracker | Kernel SRU Workflow prepare-package | Medium | Fix Released | ||
| 2004386 | focal/linux-oem-5.14: 5.14.0-1058.66 -proposed tracker | Kernel SRU Workflow prepare-package-generate | Medium | Fix Released | ||
| 2004386 | focal/linux-oem-5.14: 5.14.0-1058.66 -proposed tracker | Kernel SRU Workflow prepare-package-lrg | Medium | Fix Released | ||
| 2004386 | focal/linux-oem-5.14: 5.14.0-1058.66 -proposed tracker | Kernel SRU Workflow prepare-package-lrm | Medium | Fix Released | ||
| 2004386 | focal/linux-oem-5.14: 5.14.0-1058.66 -proposed tracker | Kernel SRU Workflow prepare-package-lrs | Medium | Fix Released | ||
| 2004386 | focal/linux-oem-5.14: 5.14.0-1058.66 -proposed tracker | Kernel SRU Workflow prepare-package-meta | Medium | Fix Released | ||
| 2004386 | focal/linux-oem-5.14: 5.14.0-1058.66 -proposed tracker | Kernel SRU Workflow prepare-package-signed | Medium | Fix Released | ||
| 2004386 | focal/linux-oem-5.14: 5.14.0-1058.66 -proposed tracker | Kernel SRU Workflow promote-signing-to-proposed | Medium | Invalid | ||
| 2004386 | focal/linux-oem-5.14: 5.14.0-1058.66 -proposed tracker | Kernel SRU Workflow promote-to-proposed | Medium | Fix Released | ||
| 2004386 | focal/linux-oem-5.14: 5.14.0-1058.66 -proposed tracker | Kernel SRU Workflow promote-to-security | Medium | Fix Released | ||
| 2004386 | focal/linux-oem-5.14: 5.14.0-1058.66 -proposed tracker | Kernel SRU Workflow promote-to-updates | Medium | Fix Released | ||
| 2004386 | focal/linux-oem-5.14: 5.14.0-1058.66 -proposed tracker | Kernel SRU Workflow regression-testing | Medium | Fix Released | ||
| 2004386 | focal/linux-oem-5.14: 5.14.0-1058.66 -proposed tracker | Kernel SRU Workflow security-signoff | Medium | Fix Released | ||
| 2004386 | focal/linux-oem-5.14: 5.14.0-1058.66 -proposed tracker | Kernel SRU Workflow sru-review | Medium | Fix Released | ||
| 2004386 | focal/linux-oem-5.14: 5.14.0-1058.66 -proposed tracker | Kernel SRU Workflow verification-testing | Medium | Fix Released | ||
| 2004386 | focal/linux-oem-5.14: 5.14.0-1058.66 -proposed tracker | linux-oem-5.14 (Ubuntu Focal) | Medium | Fix Released | ||
| 2004386 | focal/linux-oem-5.14: 5.14.0-1058.66 -proposed tracker | canonical-signing-jobs task00 | Medium | Fix Released | ||
Bug #2006546: Improve arp_ndisc_evict_nocarrier.sh test result processing
| Summary | In | Importance | Status | |||
|---|---|---|---|---|---|---|
| 2006546 | Improve arp_ndisc_evict_nocarrier.sh test result processing | linux (Ubuntu) | Undecided | Fix Released | ||
| 2006546 | Improve arp_ndisc_evict_nocarrier.sh test result processing | linux (Ubuntu Kinetic) | Medium | Fix Released | ||
| 2006546 | Improve arp_ndisc_evict_nocarrier.sh test result processing | linux (Ubuntu Lunar) | Undecided | Fix Released | ||
| 2006546 | Improve arp_ndisc_evict_nocarrier.sh test result processing | linux-oem-5.17 (Ubuntu) | Undecided | Invalid | ||
| 2006546 | Improve arp_ndisc_evict_nocarrier.sh test result processing | linux-oem-5.17 (Ubuntu Kinetic) | Undecided | Invalid | ||
| 2006546 | Improve arp_ndisc_evict_nocarrier.sh test result processing | linux-oem-5.17 (Ubuntu Lunar) | Undecided | Invalid | ||
| 2006546 | Improve arp_ndisc_evict_nocarrier.sh test result processing | linux (Ubuntu Jammy) | Undecided | Invalid | ||
| 2006546 | Improve arp_ndisc_evict_nocarrier.sh test result processing | linux-oem-5.17 (Ubuntu Jammy) | Undecided | Fix Released | ||
See the 
CVE page on Mitre.org
for more details.
