linux-ibm vulnerabilities
It was discovered that the framebuffer driver on the Linux kernel did not verify size limits when changing font or screen size, leading to an out-of- bounds write. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2021-33655) Selim Enes Karaduman discovered that a race condition existed in the General notification queue implementation of the Linux kernel, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2022-1882) Duoming Zhou discovered that race conditions existed in the timer handling implementation of the Linux kernel's Rose X.25 protocol layer, resulting in use-after-free vulnerabilities. A local attacker could use this to cause a denial of service (system crash). (CVE-2022-2318) Roger Pau Monné discovered that the Xen virtual block driver in the Linux kernel did not properly initialize memory pages to be used for shared communication with the backend. A local attacker could use this to expose sensitive information (guest kernel memory). (CVE-2022-26365) Pawan Kumar Gupta, Alyssa Milburn, Amit Peled, Shani Rehana, Nir Shildan and Ariel Sabba discovered that some Intel processors with Enhanced Indirect Branch Restricted Speculation (eIBRS) did not properly handle RET instructions after a VM exits. A local attacker could potentially use this to expose sensitive information. (CVE-2022-26373) Eric Bi
- Products
- linux-ibm
- Affected versions
- 5.15.0-1002.2, 5.15.0-1003.3, 5.15.0-1004.4, 5.15.0-1005.5, 5.15.0-1007.8, 5.15.0-1009.11, 5.15.0-1010.12, 5.15.0-1012.14, 5.15.0-1013.15
- Fixed versions
- 5.15.0-1015.17
- CVEs
- CVE-2021-33655, CVE-2022-1882, CVE-2022-2318, CVE-2022-26365, CVE-2022-26373, CVE-2022-3176, CVE-2022-33740, CVE-2022-33741, CVE-2022-33742, CVE-2022-33743, CVE-2022-33744, CVE-2022-34494, CVE-2022-34495, CVE-2022-36879, CVE-2022-36946, CVE-2022-39189
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 31 Oct 2026, 19:26 UTC · Revision 1
Source evidence
It was discovered that the framebuffer driver on the Linux kernel did not verify size limits when changing font or screen size, leading to an out-of- bounds write. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2021-33655) Selim Enes Karaduman discovered that a race condition existed in the General notification queue implementation of the Linux kernel, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2022-1882) Duoming Zhou discovered that race conditions existed in the timer handling implementation of the Linux kernel's Rose X.25 protocol layer, resulting in use-after-free vulnerabilities. A local attacker could use this to cause a denial of service (system crash). (CVE-2022-2318) Roger Pau Monné discovered that the Xen virtual block driver in the Linux kernel did not properly initialize memory pages to be used for shared communication with the backend. A local attacker could use this to expose sensitive information (guest kernel memory). (CVE-2022-26365) Pawan Kumar Gupta, Alyssa Milburn, Amit Peled, Shani Rehana, Nir Shildan and Ariel Sabba discovered that some Intel processors with Enhanced Indirect Branch Restricted Speculation (eIBRS) did not properly handle RET instructions after a VM exits. A local attacker could potentially use this to expose sensitive information. (CVE-2022-26373) Eric Bi
osv:USN-5683-1
linux-ibm
Fixed versions: 5.15.0-1015.17
Complete source record
{
"id": "86ebc95b92d87d4160501952bcc80129cef071d2b5641d962d4c5096ef229b3e",
"url": "https://osv.dev/vulnerability/USN-5683-1",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "linux-ibm vulnerabilities",
"summary": "It was discovered that the framebuffer driver on the Linux kernel did not verify size limits when changing font or screen size, leading to an out-of- bounds write. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2021-33655) Selim Enes Karaduman discovered that a race condition existed in the General notification queue implementation of the Linux kernel, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2022-1882) Duoming Zhou discovered that race conditions existed in the timer handling implementation of the Linux kernel's Rose X.25 protocol layer, resulting in use-after-free vulnerabilities. A local attacker could use this to cause a denial of service (system crash). (CVE-2022-2318) Roger Pau Monné discovered that the Xen virtual block driver in the Linux kernel did not properly initialize memory pages to be used for shared communication with the backend. A local attacker could use this to expose sensitive information (guest kernel memory). (CVE-2022-26365) Pawan Kumar Gupta, Alyssa Milburn, Amit Peled, Shani Rehana, Nir Shildan and Ariel Sabba discovered that some Intel processors with Enhanced Indirect Branch Restricted Speculation (eIBRS) did not properly handle RET instructions after a VM exits. A local attacker could potentially use this to expose sensitive information. (CVE-2022-26373) Eric Bi",
"evidence": "osv:USN-5683-1",
"products": [
{
"name": {
"value": "linux-ibm",
"evidence": "/affected/0/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "5.15.0-1015.17",
"evidence": "/affected/0/ranges"
}
],
"affected_versions": [
{
"value": "5.15.0-1002.2",
"evidence": "/affected/0/versions"
},
{
"value": "5.15.0-1003.3",
"evidence": "/affected/0/versions"
},
{
"value": "5.15.0-1004.4",
"evidence": "/affected/0/versions"
},
{
"value": "5.15.0-1005.5",
"evidence": "/affected/0/versions"
},
{
"value": "5.15.0-1007.8",
"evidence": "/affected/0/versions"
},
{
"value": "5.15.0-1009.11",
"evidence": "/affected/0/versions"
},
{
"value": "5.15.0-1010.12",
"evidence": "/affected/0/versions"
},
{
"value": "5.15.0-1012.14",
"evidence": "/affected/0/versions"
},
{
"value": "5.15.0-1013.15",
"evidence": "/affected/0/versions"
}
]
}
],
"severity": "unknown",
"structured": {
"id": "USN-5683-1",
"aliases": [
"USN-5683-1"
],
"affected": [
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "5.15.0-1015.17"
}
]
}
],
"package": {
"name": "linux-ibm",
"purl": "pkg:deb/ubuntu/linux-ibm?arch=source&distro=jammy",
"ecosystem": "Ubuntu:22.04:LTS"
},
"versions": [
"5.15.0-1002.2",
"5.15.0-1003.3",
"5.15.0-1004.4",
"5.15.0-1005.5",
"5.15.0-1007.8",
"5.15.0-1009.11",
"5.15.0-1010.12",
"5.15.0-1012.14",
"5.15.0-1013.15"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-5683-1.json",
"cves_map": {
"cves": [
{
"id": "CVE-2021-33655",
"severity": [
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"
},
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "Ubuntu",
"score": "high"
}
]
},
{
"id": "CVE-2022-1882",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "Ubuntu",
"score": "high"
}
]
},
{
"id": "CVE-2022-2318",
"severity": [
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"
},
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
},
{
"type": "Ubuntu",
"score": "high"
}
]
},
{
"id": "CVE-2022-3176",
"severity": [
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"
},
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "Ubuntu",
"score": "high"
}
]
},
{
"id": "CVE-2022-26365",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H"
},
{
"type": "Ubuntu",
"score": "low"
}
]
},
{
"id": "CVE-2022-26373",
"severity": [
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:L/AC:H/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N"
},
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
},
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2022-33740",
"severity": [
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N"
},
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2022-33741",
"severity": [
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"
},
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2022-33742",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H"
},
{
"type": "Ubuntu",
"score": "low"
}
]
},
{
"id": "CVE-2022-33743",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "Ubuntu",
"score": "low"
}
]
},
{
"id": "CVE-2022-33744",
"severity": [
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:L/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H"
},
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H"
},
{
"type": "Ubuntu",
"score": "high"
}
]
},
{
"id": "CVE-2022-34494",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2022-34495",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2022-36879",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
},
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
},
{
"type": "Ubuntu",
"score": "low"
}
]
},
{
"id": "CVE-2022-36946",
"severity": [
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"
},
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
},
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2022-39189",
"severity": [
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"
},
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "Ubuntu",
"score": "high"
}
]
}
],
"ecosystem": "Ubuntu:22.04:LTS"
}
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "linux-buildinfo-5.15.0-1015-ibm",
"binary_version": "5.15.0-1015.17"
},
{
"binary_name": "linux-headers-5.15.0-1015-ibm",
"binary_version": "5.15.0-1015.17"
},
{
"binary_name": "linux-ibm-cloud-tools-common",
"binary_version": "5.15.0-1015.17"
},
{
"binary_name": "linux-ibm-headers-5.15.0-1015",
"binary_version": "5.15.0-1015.17"
},
{
"binary_name": "linux-ibm-source-5.15.0",
"binary_version": "5.15.0-1015.17"
},
{
"binary_name": "linux-ibm-tools-5.15.0-1015",
"binary_version": "5.15.0-1015.17"
},
{
"binary_name": "linux-ibm-tools-common",
"binary_version": "5.15.0-1015.17"
},
{
"binary_name": "linux-image-unsigned-5.15.0-1015-ibm",
"binary_version": "5.15.0-1015.17"
},
{
"binary_name": "linux-modules-5.15.0-1015-ibm",
"binary_version": "5.15.0-1015.17"
},
{
"binary_name": "linux-modules-extra-5.15.0-1015-ibm",
"binary_version": "5.15.0-1015.17"
},
{
"binary_name": "linux-modules-iwlwifi-5.15.0-1015-ibm",
"binary_version": "5.15.0-1015.17"
},
{
"binary_name": "linux-tools-5.15.0-1015-ibm",
"binary_version": "5.15.0-1015.17"
}
],
"availability": "No subscription required"
}
}
],
"modified": "2026-10-22T23:16:09.860897091Z",
"provider": "osv",
"upstream": [
"CVE-2021-33655",
"CVE-2022-1882",
"CVE-2022-2318",
"CVE-2022-26365",
"CVE-2022-26373",
"CVE-2022-3176",
"CVE-2022-33740",
"CVE-2022-33741",
"CVE-2022-33742",
"CVE-2022-33743",
"CVE-2022-33744",
"CVE-2022-34494",
"CVE-2022-34495",
"CVE-2022-36879",
"CVE-2022-36946",
"CVE-2022-39189",
"UBUNTU-CVE-2021-33655",
"UBUNTU-CVE-2022-1882",
"UBUNTU-CVE-2022-2318",
"UBUNTU-CVE-2022-26365",
"UBUNTU-CVE-2022-26373",
"UBUNTU-CVE-2022-3176",
"UBUNTU-CVE-2022-33740",
"UBUNTU-CVE-2022-33741",
"UBUNTU-CVE-2022-33742",
"UBUNTU-CVE-2022-33743",
"UBUNTU-CVE-2022-33744",
"UBUNTU-CVE-2022-34494",
"UBUNTU-CVE-2022-34495",
"UBUNTU-CVE-2022-36879",
"UBUNTU-CVE-2022-36946",
"UBUNTU-CVE-2022-39189"
],
"references": [
"https://ubuntu.com/security/notices/USN-5683-1",
"https://ubuntu.com/security/CVE-2021-33655",
"https://ubuntu.com/security/CVE-2022-1882",
"https://ubuntu.com/security/CVE-2022-2318",
"https://ubuntu.com/security/CVE-2022-3176",
"https://ubuntu.com/security/CVE-2022-26365",
"https://ubuntu.com/security/CVE-2022-26373",
"https://ubuntu.com/security/CVE-2022-33740",
"https://ubuntu.com/security/CVE-2022-33741",
"https://ubuntu.com/security/CVE-2022-33742",
"https://ubuntu.com/security/CVE-2022-33743",
"https://ubuntu.com/security/CVE-2022-33744",
"https://ubuntu.com/security/CVE-2022-34494",
"https://ubuntu.com/security/CVE-2022-34495",
"https://ubuntu.com/security/CVE-2022-36879",
"https://ubuntu.com/security/CVE-2022-36946",
"https://ubuntu.com/security/CVE-2022-39189"
]
},
"related_cves": [
{
"value": "CVE-2021-33655",
"evidence": "/upstream"
},
{
"value": "CVE-2022-1882",
"evidence": "/upstream"
},
{
"value": "CVE-2022-2318",
"evidence": "/upstream"
},
{
"value": "CVE-2022-26365",
"evidence": "/upstream"
},
{
"value": "CVE-2022-26373",
"evidence": "/upstream"
},
{
"value": "CVE-2022-3176",
"evidence": "/upstream"
},
{
"value": "CVE-2022-33740",
"evidence": "/upstream"
},
{
"value": "CVE-2022-33741",
"evidence": "/upstream"
},
{
"value": "CVE-2022-33742",
"evidence": "/upstream"
},
{
"value": "CVE-2022-33743",
"evidence": "/upstream"
},
{
"value": "CVE-2022-33744",
"evidence": "/upstream"
},
{
"value": "CVE-2022-34494",
"evidence": "/upstream"
},
{
"value": "CVE-2022-34495",
"evidence": "/upstream"
},
{
"value": "CVE-2022-36879",
"evidence": "/upstream"
},
{
"value": "CVE-2022-36946",
"evidence": "/upstream"
},
{
"value": "CVE-2022-39189",
"evidence": "/upstream"
}
],
"security_relevant": true,
"severity_evidence": null
},
"source_id": "core-osv",
"document_id": 410052,
"published_at": "2022-10-14T20:01:01+00:00"
}