Skip to content

kernel CVE-2022-21505

Moderate
arnaldo2792 published GHSA-cg53-fmp7-3g22 Oct 13, 2022

Package

kernel-5.10 (bottlerocket)

Affected versions

< 1.10.0

Patched versions

1.10.0
kernel-5.15 (bottlerocket)
< 1.10.0
1.10.0

Description

A bug in the IMA subsystem was discovered which would incorrectly allow kexec to be used when kernel lockdown was enabled.

Severity

Moderate

CVE ID

CVE-2022-21505

Weaknesses

No CWEs