Ubuntu releases security updates for Linux kernel vulnerabilities (USN-8875-2)
Ubuntu has issued security updates to address numerous vulnerabilities across a wide range of Linux kernel subsystems.
Summary
Ubuntu has released security notice USN-8875-2 to address several vulnerabilities within the Linux kernel. The update fixes flaws across various architectures, including ARM64, RISC-V, and x86, as well as numerous drivers and file systems. One identified issue (CVE-2022-3114) involves the i.MX clock driver, where improper memory allocation handling could allow a local attacker to cause a system crash via a null pointer dereference.
Scope of the kernel updates
- Fixes CVE-2022-3114 in the i.MX clock driver to prevent null pointer dereference during memory allocation failures.
- Addresses security flaws in multiple architectures: ARM32, ARM64, MIPS, PowerPC, RISC-V, x86, and UML.
- Patches vulnerabilities in extensive subsystems including Block layer, Cryptographic API, USB, Networking, and IOMMU.
- Includes fixes for various file systems such as BTRFS, Ext4, F2FS, NTFS3, and XFS.
Why it matters
This update is critical for Ubuntu users running diverse hardware, particularly those using ARM or RISC-V architectures, to prevent system instability and potential exploits.
Original reference: ubuntu.com →