Ubuntu: (CVE-2022-49262): linux vulnerability
Description
In the Linux kernel, the following vulnerability has been resolved: crypto: octeontx2 - remove CONFIG_DM_CRYPT check No issues were found while using the driver with dm-crypt enabled. So CONFIG_DM_CRYPT check in the driver can be removed. This also fixes the NULL pointer dereference in driver release if CONFIG_DM_CRYPT is enabled. ... Unable to handle kernel NULL pointer dereference at virtual address 0000000000000008 ... Call trace: crypto_unregister_alg+0x68/0xfc crypto_unregister_skciphers+0x44/0x60 otx2_cpt_crypto_exit+0x100/0x1a0 otx2_cptvf_remove+0xf8/0x200 pci_device_remove+0x3c/0xd4 __device_release_driver+0x188/0x234 device_release_driver+0x2c/0x4c ...
Solution(s)
- ubuntu-upgrade-linux
- ubuntu-upgrade-linux-aws
- ubuntu-upgrade-linux-azure
- ubuntu-upgrade-linux-azure-5-15
- ubuntu-upgrade-linux-gcp
- ubuntu-upgrade-linux-gke
- ubuntu-upgrade-linux-hwe-5-15
- ubuntu-upgrade-linux-ibm
- ubuntu-upgrade-linux-intel-iotg
- ubuntu-upgrade-linux-intel-iotg-5-15
- ubuntu-upgrade-linux-kvm
- ubuntu-upgrade-linux-lowlatency
- ubuntu-upgrade-linux-lowlatency-hwe-5-15
- ubuntu-upgrade-linux-oracle
- ubuntu-upgrade-linux-raspi
- ubuntu-upgrade-linux-realtime
- Lightweight Endpoint Agent
- Live Dashboards
- Real Risk Prioritization
- IT-Integrated Remediation Projects
- Cloud, Virtual, and Container Assessment
- Integrated Threat Feeds
- Easy-to-Use RESTful API
- Automation-Assisted Patching
- Automated Containment
With Rapid7 live dashboards, I have a clear view of all the assets on my network, which ones can be exploited, and what I need to do in order to reduce the risk in my environment in real-time. No other tool gives us that kind of value and insight.
– Scott Cheney, Manager of Information Security, Sierra View Medical Center