CVE Vulnerabilities

CVE-2022-21505

This vulnerability is marked as RESERVED by NVD. This means that the CVE-ID is reserved for future use by the CVE Numbering Authority (CNA) or a security researcher, but the details of it are not yet publicly available yet.

This page will reflect the classification results once they are available through NVD.

Any vendor information available is shown as below.

Redhat

kernel: lockdown bypass using IMA

Affected Software List

Name Vendor Version
Red Hat Enterprise Linux 9 RedHat kernel-0:5.14.0-284.11.1.el9_2
Red Hat Enterprise Linux 9 RedHat kernel-rt-0:5.14.0-284.11.1.rt14.296.el9_2
Red Hat Enterprise Linux 9 RedHat kernel-0:5.14.0-284.11.1.el9_2

Ubuntu

Kernel lockdown bypass when UEFI secure boot is disabled / unavailable and IMA appraisal is enabled.

Affected Software List

Name Vendor Version
Linux-azure-5.4 Ubuntu/bionic 5.4.0-1094.100~18.04.1
Linux-azure-5.4 Ubuntu/upstream 5.19~rc8, 5.4.208, 5.15.58
Linux-lowlatency Ubuntu/jammy 5.15.0-50.56
Linux-lowlatency Ubuntu/upstream 5.19~rc8, 5.4.208, 5.15.58
Linux-nvidia-6.2 Ubuntu/upstream superseded by linux-nvidia-6.5, was needs-triage
Linux-oracle-5.3 Ubuntu/esm-infra/bionic superseded by linux-oracle-5.4
Linux-oracle-5.3 Ubuntu/upstream 5.19~rc8, 5.4.208, 5.15.58
Linux-oracle-5.3 Ubuntu/bionic end of standard support
Linux-allwinner Ubuntu/upstream end of life, was needs-triage
Linux-aws-5.3 Ubuntu/esm-infra/bionic superseded by linux-aws-5.4
Linux-aws-5.3 Ubuntu/upstream 5.19~rc8, 5.4.208, 5.15.58
Linux-aws-5.3 Ubuntu/bionic end of standard support
Linux-gke-5.0 Ubuntu/bionic end of standard support
Linux-gke-5.0 Ubuntu/upstream 5.19~rc8, 5.4.208, 5.15.58
Linux-hwe-5.15 Ubuntu/focal 5.15.0-50.56~20.04.1
Linux-hwe-5.15 Ubuntu/upstream 5.19~rc8, 5.4.208, 5.15.58
Linux-hwe-edge Ubuntu/esm-infra/bionic superseded by linux-hwe-5.4
Linux-hwe-edge Ubuntu/upstream 5.19~rc8, 5.4.208, 5.15.58
Linux-hwe-edge Ubuntu/xenial end of standard support
Linux-hwe-edge Ubuntu/bionic end of standard support
Linux-hwe-edge Ubuntu/esm-infra/xenial superseded by linux-hwe
Linux-oem-5.10 Ubuntu/focal superseded by linux-oem-5.13, was needs-triage
Linux-oem-5.10 Ubuntu/upstream 5.19~rc8, 5.4.208, 5.15.58
Linux-oracle-5.0 Ubuntu/esm-infra/bionic superseded by linux-oracle-5.3
Linux-oracle-5.0 Ubuntu/bionic end of standard support
Linux-oracle-5.0 Ubuntu/upstream 5.19~rc8, 5.4.208, 5.15.58
Linux-gkeop Ubuntu/focal 5.4.0-1054.57
Linux-gkeop Ubuntu/jammy 5.15.0-1004.6
Linux-gkeop Ubuntu/upstream 5.19~rc8, 5.4.208, 5.15.58
Linux-intel-iotg Ubuntu/upstream 5.19~rc8, 5.4.208, 5.15.58
Linux-intel-iotg Ubuntu/jammy 5.15.0-1017.22
Linux-nvidia Ubuntu/upstream 5.19~rc8, 5.4.208, 5.15.58
Linux-riscv-5.15 Ubuntu/upstream 5.19~rc8, 5.4.208, 5.15.58
Linux-gke Ubuntu/jammy 5.15.0-1017.20
Linux-gke Ubuntu/focal 5.4.0-1084.90
Linux-gke Ubuntu/xenial end of standard support
Linux-gke Ubuntu/upstream 5.19~rc8, 5.4.208, 5.15.58
Linux-gke-5.3 Ubuntu/upstream 5.19~rc8, 5.4.208, 5.15.58
Linux-gke-5.3 Ubuntu/bionic end of standard support
Linux-riscv Ubuntu/focal superseded by linux-riscv-5.8
Linux-riscv Ubuntu/impish end of life
Linux-riscv Ubuntu/jammy end of kernel support, was needs-triage
Linux-riscv Ubuntu/upstream 5.19~rc8, 5.4.208, 5.15.58
Linux-aws-5.11 Ubuntu/focal superseded by linux-aws-5.13, was needs-triage
Linux-aws-5.11 Ubuntu/upstream 5.19~rc8, 5.4.208, 5.15.58
Linux-azure-5.15 Ubuntu/focal 5.15.0-1021.26~20.04.1
Linux-azure-5.15 Ubuntu/upstream 5.19~rc8, 5.4.208, 5.15.58
Linux-oem-6.1 Ubuntu/upstream 5.19~rc8, 5.4.208, 5.15.58
Linux-oracle Ubuntu/jammy 5.15.0-1019.24
Linux-oracle Ubuntu/focal 5.4.0-1084.92
Linux-oracle Ubuntu/impish end of life
Linux-oracle Ubuntu/xenial end of standard support
Linux-oracle Ubuntu/upstream 5.19~rc8, 5.4.208, 5.15.58
Linux-gkeop-5.15 Ubuntu/upstream 5.19~rc8, 5.4.208, 5.15.58
Linux-lowlatency-hwe-6.2 Ubuntu/upstream superseded by linux-lowlatency-hwe-6.5, was needs-triage
Linux-riscv-5.19 Ubuntu/upstream end of life, was needs-triage
Linux-snapdragon Ubuntu/upstream 5.19~rc8, 5.4.208, 5.15.58
Linux-snapdragon Ubuntu/xenial end of standard support
Linux-starfive-5.19 Ubuntu/upstream end of life, was needs-triage
Linux-gcp-5.15 Ubuntu/upstream 5.19~rc8, 5.4.208, 5.15.58
Linux-gcp-5.15 Ubuntu/focal 5.15.0-1021.28~20.04.1
Linux-hwe-5.13 Ubuntu/focal superseded by linux-hwe-5.15, was needs-triage
Linux-hwe-5.13 Ubuntu/upstream 5.19~rc8, 5.4.208, 5.15.58
Linux-gcp-5.4 Ubuntu/upstream 5.19~rc8, 5.4.208, 5.15.58
Linux-gcp-5.4 Ubuntu/bionic 5.4.0-1092.101~18.04.1
Linux-oracle-5.11 Ubuntu/upstream 5.19~rc8, 5.4.208, 5.15.58
Linux-oracle-5.11 Ubuntu/focal superseded by linux-oracle-5.13, was needs-triage
Linux-aws-5.4 Ubuntu/upstream 5.19~rc8, 5.4.208, 5.15.58
Linux-aws-5.4 Ubuntu/bionic 5.4.0-1086.93~18.04.1
Linux-bluefield Ubuntu/focal 5.4.0-1047.52
Linux-bluefield Ubuntu/upstream 5.19~rc8, 5.4.208, 5.15.58
Linux-fips Ubuntu/xenial end of standard support
Linux-fips Ubuntu/upstream 5.19~rc8, 5.4.208, 5.15.58
Linux-fips Ubuntu/trusty end of standard support
Linux-gcp-5.11 Ubuntu/upstream 5.19~rc8, 5.4.208, 5.15.58
Linux-gcp-5.11 Ubuntu/focal superseded by linux-gcp-5.13, was needs-triage
Linux-kvm Ubuntu/upstream 5.19~rc8, 5.4.208, 5.15.58
Linux-kvm Ubuntu/xenial end of standard support
Linux-kvm Ubuntu/focal 5.4.0-1076.81
Linux-kvm Ubuntu/impish end of life
Linux-kvm Ubuntu/jammy 5.15.0-1019.23
Linux-raspi2-5.3 Ubuntu/bionic end of standard support
Linux-raspi2-5.3 Ubuntu/upstream 5.19~rc8, 5.4.208, 5.15.58
Linux-azure-5.19 Ubuntu/upstream 5.19~rc8, 5.4.208, 5.15.58
Linux-azure-5.3 Ubuntu/esm-infra/bionic superseded by linux-azure-5.4
Linux-azure-5.3 Ubuntu/upstream 5.19~rc8, 5.4.208, 5.15.58
Linux-azure-5.3 Ubuntu/bionic end of standard support
Linux-dell300x Ubuntu/upstream 5.19~rc8, 5.4.208, 5.15.58
Linux-intel-iotg-5.15 Ubuntu/focal 5.15.0-1017.22~20.04.1
Linux-intel-iotg-5.15 Ubuntu/upstream 5.19~rc8, 5.4.208, 5.15.58
Linux-oem-5.17 Ubuntu/upstream 5.19~rc8, 5.4.208, 5.15.58
Linux-oem-5.17 Ubuntu/jammy 5.17.0-1030.31
Linux-oem-5.17 Ubuntu/kinetic end of life, was needs-triage
Linux-raspi-5.4 Ubuntu/bionic 5.4.0-1071.81~18.04.1
Linux-raspi-5.4 Ubuntu/upstream 5.19~rc8, 5.4.208, 5.15.58
Linux-riscv-6.5 Ubuntu/upstream 5.19~rc8, 5.4.208, 5.15.58
Linux-azure-fde Ubuntu/focal 5.4.0-1094.100
Linux-azure-fde Ubuntu/upstream 5.19~rc8, 5.4.208, 5.15.58
Linux-azure-fde Ubuntu/jammy 5.15.0-1024.30.1
Linux-oem-5.13 Ubuntu/focal superseded by linux-oem-5.14, was needs-triage
Linux-oem-5.13 Ubuntu/upstream 5.19~rc8, 5.4.208, 5.15.58
Linux-starfive-6.5 Ubuntu/upstream 5.19~rc8, 5.4.208, 5.15.58
Linux-oem-6.8 Ubuntu/upstream 5.19~rc8, 5.4.208, 5.15.58
Linux-raspi2 Ubuntu/upstream 5.19~rc8, 5.4.208, 5.15.58
Linux-raspi2 Ubuntu/xenial end of standard support
Linux-raspi2 Ubuntu/focal replaced by linux-raspi
Linux-aws-6.2 Ubuntu/upstream superseded by linux-aws-6.5, was needs-triage
Linux-azure-fde-6.2 Ubuntu/upstream replaced by linux-azure-6.5, was needs-triage
Linux-hwe-5.19 Ubuntu/upstream 5.19~rc8, 5.4.208, 5.15.58
Linux-ibm Ubuntu/upstream 5.19~rc8, 5.4.208, 5.15.58
Linux-ibm Ubuntu/focal 5.4.0-1034.38
Linux-ibm Ubuntu/jammy 5.15.0-1015.17
Linux-starfive-6.2 Ubuntu/upstream superseded by linux-starfive-6.5, was needs-triage
Linux-aws-6.5 Ubuntu/upstream 5.19~rc8, 5.4.208, 5.15.58
Linux-intel Ubuntu/upstream 5.19~rc8, 5.4.208, 5.15.58
Linux-lowlatency-hwe-5.19 Ubuntu/upstream 5.19~rc8, 5.4.208, 5.15.58
Linux-oem-5.6 Ubuntu/focal superseded by linux-oem-5.10, was needs-triage
Linux-oem-5.6 Ubuntu/upstream 5.19~rc8, 5.4.208, 5.15.58
Linux-azure-fips Ubuntu/upstream 5.19~rc8, 5.4.208, 5.15.58
Linux-azure-fips Ubuntu/xenial end of standard support
Linux-azure-fips Ubuntu/trusty end of standard support
Linux-gke-4.15 Ubuntu/upstream 5.19~rc8, 5.4.208, 5.15.58
Linux-gke-4.15 Ubuntu/bionic end of standard support, was needs-triage
Linux-gke-4.15 Ubuntu/esm-infra/bionic superseded by linux-gke-5.0, was needs-triage
Linux-oem-osp1 Ubuntu/upstream 5.19~rc8, 5.4.208, 5.15.58
Linux-oem-osp1 Ubuntu/bionic end of standard support, was needs-triage
Linux-aws-5.19 Ubuntu/upstream superseded by linux-aws-6.2, was needs-triage
Linux-ibm-5.4 Ubuntu/bionic 5.4.0-1034.38~18.04.1
Linux-ibm-5.4 Ubuntu/upstream 5.19~rc8, 5.4.208, 5.15.58
Linux-hwe-5.11 Ubuntu/focal superseded by linux-hwe-5.13
Linux-hwe-5.11 Ubuntu/upstream 5.19~rc8, 5.4.208, 5.15.58
Linux-ibm-5.15 Ubuntu/upstream 5.19~rc8, 5.4.208, 5.15.58
Linux-oem-6.5 Ubuntu/upstream 5.19~rc8, 5.4.208, 5.15.58
Linux-oracle-5.8 Ubuntu/focal superseded by linux-oracle-5.11
Linux-oracle-5.8 Ubuntu/upstream 5.19~rc8, 5.4.208, 5.15.58
Linux-starfive Ubuntu/upstream 5.19~rc8, 5.4.208, 5.15.58
Linux-gcp-6.5 Ubuntu/upstream 5.19~rc8, 5.4.208, 5.15.58
Linux-lowlatency-hwe-6.5 Ubuntu/upstream 5.19~rc8, 5.4.208, 5.15.58
Linux-oracle-6.5 Ubuntu/upstream 5.19~rc8, 5.4.208, 5.15.58
Linux-gcp-6.2 Ubuntu/upstream superseded by linux-gcp-6.5, was needs-triage
Linux-riscv-5.11 Ubuntu/upstream 5.19~rc8, 5.4.208, 5.15.58
Linux-riscv-5.11 Ubuntu/focal superseded by linux-riscv-5.13, was needs-triage
Linux-aws Ubuntu/xenial end of standard support
Linux-aws Ubuntu/jammy 5.15.0-1021.25
Linux-aws Ubuntu/trusty end of standard support
Linux-aws Ubuntu/impish end of life
Linux-aws Ubuntu/focal 5.4.0-1086.93
Linux-aws Ubuntu/upstream 5.19~rc8, 5.4.208, 5.15.58
Linux-aws-hwe Ubuntu/upstream 5.19~rc8, 5.4.208, 5.15.58
Linux-aws-hwe Ubuntu/xenial end of standard support
Linux-gke-5.4 Ubuntu/esm-infra/bionic end of kernel support, was needs-triage
Linux-gke-5.4 Ubuntu/upstream 5.19~rc8, 5.4.208, 5.15.58
Linux-gke-5.4 Ubuntu/bionic end of standard support, was needs-triage
Linux-hwe-5.4 Ubuntu/bionic 5.4.0-128.144~18.04.1
Linux-hwe-5.4 Ubuntu/upstream 5.19~rc8, 5.4.208, 5.15.58
Linux-oem-6.0 Ubuntu/upstream 5.19~rc8, 5.4.208, 5.15.58
Linux-oracle-5.15 Ubuntu/upstream 5.19~rc8, 5.4.208, 5.15.58
Linux-oracle-5.15 Ubuntu/focal 5.15.0-1019.24~20.04.1
Linux-azure-6.2 Ubuntu/upstream superseded by linux-azure-6.5, was needs-triage
Linux-allwinner-5.19 Ubuntu/upstream end of life, was needs-triage
Linux-azure-5.8 Ubuntu/upstream 5.19~rc8, 5.4.208, 5.15.58
Linux-azure-5.8 Ubuntu/focal superseded by linux-azure-5.11
Linux-azure-6.5 Ubuntu/upstream 5.19~rc8, 5.4.208, 5.15.58
Linux-azure-fde-5.15 Ubuntu/upstream 5.19~rc8, 5.4.208, 5.15.58
Linux-azure-fde-5.15 Ubuntu/focal 5.15.0-1021.26~20.04.1.1
Linux-gcp-4.15 Ubuntu/upstream 5.19~rc8, 5.4.208, 5.15.58
Linux-gcp-5.8 Ubuntu/upstream 5.19~rc8, 5.4.208, 5.15.58
Linux-gcp-5.8 Ubuntu/focal superseded by linux-gcp-5.11
Linux-lts-xenial Ubuntu/trusty end of standard support
Linux-lts-xenial Ubuntu/upstream 5.19~rc8, 5.4.208, 5.15.58
Linux-oem-5.14 Ubuntu/focal replaced by linux-hwe-5.15, was needed
Linux-oem-5.14 Ubuntu/upstream 5.19~rc8, 5.4.208, 5.15.58
Linux-oracle-5.4 Ubuntu/bionic 5.4.0-1084.92~18.04.1
Linux-oracle-5.4 Ubuntu/upstream 5.19~rc8, 5.4.208, 5.15.58
Linux-xilinx-zynqmp Ubuntu/upstream 5.19~rc8, 5.4.208, 5.15.58
Linux-aws-5.8 Ubuntu/focal superseded by linux-aws-5.11
Linux-aws-5.8 Ubuntu/upstream 5.19~rc8, 5.4.208, 5.15.58
Linux-gke-5.15 Ubuntu/focal 5.15.0-1019.23~20.04.1
Linux-gke-5.15 Ubuntu/upstream 5.19~rc8, 5.4.208, 5.15.58
Linux-gkeop-5.4 Ubuntu/bionic end of standard support, was needs-triage
Linux-gkeop-5.4 Ubuntu/upstream 5.19~rc8, 5.4.208, 5.15.58
Linux-gkeop-5.4 Ubuntu/esm-infra/bionic end of kernel support, was needs-triage
Linux-raspi Ubuntu/jammy 5.15.0-1016.18
Linux-raspi Ubuntu/upstream 5.19~rc8, 5.4.208, 5.15.58
Linux-raspi Ubuntu/focal 5.4.0-1071.81
Linux-raspi Ubuntu/impish end of life
Linux Ubuntu/focal 5.4.0-128.144
Linux Ubuntu/jammy 5.15.0-50.56
Linux Ubuntu/impish end of life
Linux Ubuntu/xenial end of standard support
Linux Ubuntu/upstream 5.19~rc8, 5.4.208, 5.15.58
Linux Ubuntu/trusty end of standard support
Linux-azure-5.13 Ubuntu/focal superseded by linux-azure-5.15, was needs-triage
Linux-azure-5.13 Ubuntu/upstream 5.19~rc8, 5.4.208, 5.15.58
Linux-gcp-5.3 Ubuntu/esm-infra/bionic superseded by linux-gcp-5.4
Linux-gcp-5.3 Ubuntu/bionic end of standard support
Linux-gcp-5.3 Ubuntu/upstream 5.19~rc8, 5.4.208, 5.15.58
Linux-hwe Ubuntu/xenial end of standard support
Linux-hwe Ubuntu/esm-infra/bionic replaced by linux-hwe-5.4
Linux-hwe Ubuntu/upstream 5.19~rc8, 5.4.208, 5.15.58
Linux-hwe Ubuntu/bionic end of standard support
Linux-aws-5.13 Ubuntu/focal superseded by linux-aws-5.15, was needs-triage
Linux-aws-5.13 Ubuntu/upstream 5.19~rc8, 5.4.208, 5.15.58
Linux-azure-fde-5.19 Ubuntu/upstream superseded by linux-azure-fde-6.2, was needs-triage
Linux-oem Ubuntu/xenial end of standard support
Linux-oem Ubuntu/esm-infra/bionic replaced by linux-hwe-5.4, was needs-triage
Linux-oem Ubuntu/upstream 5.19~rc8, 5.4.208, 5.15.58
Linux-oem Ubuntu/bionic end of standard support, was needs-triage
Linux-azure-4.15 Ubuntu/upstream 5.19~rc8, 5.4.208, 5.15.58
Linux-nvidia-6.8 Ubuntu/upstream TBD
Linux-aws-5.0 Ubuntu/upstream 5.19~rc8, 5.4.208, 5.15.58
Linux-aws-5.0 Ubuntu/esm-infra/bionic superseded by linux-aws-5.3
Linux-aws-5.0 Ubuntu/bionic end of standard support
Linux-aws-fips Ubuntu/trusty end of standard support
Linux-aws-fips Ubuntu/xenial end of standard support
Linux-aws-fips Ubuntu/upstream 5.19~rc8, 5.4.208, 5.15.58
Linux-azure Ubuntu/bionic end of standard support
Linux-azure Ubuntu/trusty end of standard support
Linux-azure Ubuntu/upstream 5.19~rc8, 5.4.208, 5.15.58
Linux-azure Ubuntu/esm-infra/bionic superseded by linux-azure-5.3
Linux-azure Ubuntu/focal 5.4.0-1094.100
Linux-azure Ubuntu/xenial end of standard support
Linux-azure Ubuntu/impish end of life
Linux-azure Ubuntu/jammy 5.15.0-1021.26
Linux-azure-edge Ubuntu/upstream 5.19~rc8, 5.4.208, 5.15.58
Linux-azure-edge Ubuntu/bionic end of standard support
Linux-azure-edge Ubuntu/esm-infra/bionic superseded by linux-azure-5.3
Linux-gcp-5.13 Ubuntu/upstream 5.19~rc8, 5.4.208, 5.15.58
Linux-gcp-5.13 Ubuntu/focal superseded by linux-gcp-5.15, was needs-triage
Linux-gcp-fips Ubuntu/xenial end of standard support
Linux-gcp-fips Ubuntu/upstream 5.19~rc8, 5.4.208, 5.15.58
Linux-gcp-fips Ubuntu/trusty end of standard support
Linux-iot Ubuntu/upstream 5.19~rc8, 5.4.208, 5.15.58
Linux-aws-5.15 Ubuntu/upstream 5.19~rc8, 5.4.208, 5.15.58
Linux-aws-5.15 Ubuntu/focal 5.15.0-1021.25~20.04.1
Linux-hwe-6.2 Ubuntu/upstream superseded by linux-hwe-6.5, was needs-triage
Linux-hwe-6.5 Ubuntu/upstream 5.19~rc8, 5.4.208, 5.15.58
Linux-nvidia-6.5 Ubuntu/upstream 5.19~rc8, 5.4.208, 5.15.58
Linux-nvidia-lowlatency Ubuntu/upstream TBD
Linux-riscv-5.8 Ubuntu/upstream 5.19~rc8, 5.4.208, 5.15.58
Linux-riscv-5.8 Ubuntu/focal superseded by linux-riscv-5.11
Linux-azure-5.11 Ubuntu/focal superseded by linux-azure-5.13, was needs-triage
Linux-azure-5.11 Ubuntu/upstream 5.19~rc8, 5.4.208, 5.15.58
Linux-gcp Ubuntu/focal 5.4.0-1090.98
Linux-gcp Ubuntu/jammy 5.15.0-1019.25
Linux-gcp Ubuntu/upstream 5.19~rc8, 5.4.208, 5.15.58
Linux-gcp Ubuntu/impish end of life
Linux-gcp Ubuntu/xenial end of standard support
Linux-gcp Ubuntu/bionic end of standard support
Linux-gcp Ubuntu/esm-infra/bionic superseded by linux-gcp-5.3
Linux-lowlatency-hwe-5.15 Ubuntu/upstream 5.19~rc8, 5.4.208, 5.15.58
Linux-lowlatency-hwe-5.15 Ubuntu/focal 5.15.0-50.56~20.04.1
Linux-gcp-5.19 Ubuntu/upstream superseded by linux-gcp-6.2, was needs-triage
Linux-hwe-5.8 Ubuntu/focal superseded by linux-hwe-5.11
Linux-hwe-5.8 Ubuntu/upstream 5.19~rc8, 5.4.208, 5.15.58
Linux-intel-5.13 Ubuntu/upstream 5.19~rc8, 5.4.208, 5.15.58
Linux-intel-5.13 Ubuntu/focal end of kernel support, was needs-triage
Linux-laptop Ubuntu/upstream 5.19~rc8, 5.4.208, 5.15.58
Linux-oracle-5.13 Ubuntu/upstream 5.19~rc8, 5.4.208, 5.15.58
Linux-oracle-5.13 Ubuntu/focal superseded by linux-oracle-5.15, was needs-triage