CVE 2022-4968
netplan leaks the private key of wireguard to local users. A security fix will be released soon.
Related bugs and status
CVE-2022-4968 (Candidate) is related to these bugs:
Bug #1987842: wireguard: netdev file can leak private key
| Summary | In | Importance | Status | |||
|---|---|---|---|---|---|---|
| 1987842 | wireguard: netdev file can leak private key | Netplan | High | Fix Released | ||
| 1987842 | wireguard: netdev file can leak private key | netplan.io (Ubuntu) | Undecided | Fix Released | ||
| 1987842 | wireguard: netdev file can leak private key | netplan.io (Ubuntu Mantic) | Undecided | Fix Released | ||
| 1987842 | wireguard: netdev file can leak private key | netplan.io (Ubuntu Jammy) | Undecided | Fix Released | ||
| 1987842 | wireguard: netdev file can leak private key | netplan.io (Ubuntu Focal) | Undecided | Fix Released | ||
| 1987842 | wireguard: netdev file can leak private key | netplan.io (Ubuntu Oracular) | Undecided | Fix Released | ||
| 1987842 | wireguard: netdev file can leak private key | netplan.io (Ubuntu Noble) | Undecided | Fix Released | ||
Bug #2020409: can't move mellanox interface to switchdev when SR-IOV disable
| Summary | In | Importance | Status | |||
|---|---|---|---|---|---|---|
| 2020409 | can't move mellanox interface to switchdev when SR-IOV disable | Netplan | Medium | Fix Released | ||
| 2020409 | can't move mellanox interface to switchdev when SR-IOV disable | netplan.io (Ubuntu) | Undecided | Fix Released | ||
Bug #2065738: Leaks wireguard keys
| Summary | In | Importance | Status | |||
|---|---|---|---|---|---|---|
| 2065738 | Leaks wireguard keys | netplan.io (Ubuntu) | High | Fix Released | ||
Bug #2071363: netplan apply triggers udev add events for every network interface
| Summary | In | Importance | Status | |||
|---|---|---|---|---|---|---|
| 2071363 | netplan apply triggers udev add events for every network interface | cloud-init (Ubuntu) | Undecided | Invalid | ||
| 2071363 | netplan apply triggers udev add events for every network interface | netplan.io (Ubuntu) | Undecided | Fix Released | ||
| 2071363 | netplan apply triggers udev add events for every network interface | cloud-init (Ubuntu Oracular) | Undecided | Invalid | ||
| 2071363 | netplan apply triggers udev add events for every network interface | netplan.io (Ubuntu Oracular) | Undecided | Fix Released | ||
See the 
CVE page on Mitre.org
for more details.
