CLSA-2022-1643637294

    Dashboard / Vulnerabilities / CLSA-2022-1643637294

    CLSA-2022-1643637294

    Published: 31 Jan 2022Last Modified: 4 Jun 2026

    Summary: Fix CVE(s): CVE-2021-38198

    Details: * CVE-2021-38198 - ELSCVE-686: KVM: MMU: return page fault error code from permission_fault - ELSCVE-686: kvm: x86: MMU support for EPT accessed/dirty bits - ELSCVE-686: KVM: nVMX: fix EPT permissions as reported in exit qualification - ELSCVE-686: KVM: X86: MMU: Use the correct inherited permissions to get shadow page * CVE-2021-3655 - ELSCVE-715: sctp: add size validation when walking chunks - ELSCVE-715: sctp: add param size validation for SCTP_PARAM_SET_PRIMARY - ELSCVE-715: sctp: validate chunk size in __rcv_asconf_lookup - ELSCVE-715: sctp: validate from_addr_param return - ELSCVE-715: sctp: fix return value check in __sctp_rcv_asconf_lookup * CVE-2021-3428 - ELSCVE-1704: ext4: don't allow overlapping system zones - ELSCVE-1704: ext4: check journal inode extents more carefully * CVE-2021-38205 - ELSCVE-389: net: xilinx_emaclite: Do not print real IOMEM pointer * CVE-2021-28688 - ELSCVE-670: xen-blkback: don't leak persistent grants from xen_blkbk_map() * CVE-2021-34693 - ELSCVE-668: can: bcm: fix infoleak in struct bcm_msg_head * CVE-2020-25673 - ELSCVE-819: nfc: Avoid endless loops caused by repeated llcp_sock_connect() * CVE-2021-23134 - ELSCVE-620: net/nfc: fix use-after-free llcp_sock_bind/connect * CVE-2021-3573 - ELSCVE-846: Bluetooth: use correct lock to prevent UAF of hdev object * CVE-2021-38204 - ELSCVE-457: usb: max-3421: Prevent corruption of freed memory * CVE-2021-42008 - ELSCVE-1730: net: 6pack: fix slab-out-of-bounds in decode_data * CVE-2020-36385 - ELSCVE-1181: RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy

    References: https://errata.cloudlinux.com/ubuntu16_04/CLSA-2022-1643637294

    Affected packages

    Package

    Name: linux-buildinfo-4.4.0-213-generic

    Purl: pkg:deb/tuxcare/linux-buildinfo-4.4.0-213-generic?distro=ubuntu-16.04

    Affected ranges

    Type: ECOSYSTEM

    Events:

    Introduced- 0
    Fixed -4.4.0-213.245

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CLSA-2022-1643637294 | CVE-DB