Use-after-free in Linux kernel core

1) Use-after-free

EUVDB-ID: #VU92897

Risk: Low

CVSSv3.1: 7.7 [AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-48742

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the rtnl_newlink() function in net/core/rtnetlink.c. A local user can escalate privileges on the system.

Mitigation

Install update from vendor's website.

Vulnerable software versions

Linux kernel: All versions

CPE2.3

External links

http://git.kernel.org/stable/c/2cf180360d66bd657e606c1217e0e668e6faa303
http://git.kernel.org/stable/c/7d9211678c0f0624f74cdff36117ab8316697bb8
http://git.kernel.org/stable/c/a01e60a1ec6bef9be471fb7182a33c6d6f124e93
http://git.kernel.org/stable/c/bd43771ee9759dd9dfae946bff190e2c5a120de5
http://git.kernel.org/stable/c/3bbe2019dd12b8d13671ee6cda055d49637b4c39
http://git.kernel.org/stable/c/def5e7070079b2a214b3b1a2fbec623e6fbfe34a
http://git.kernel.org/stable/c/36a9a0aee881940476b254e0352581401b23f210
http://git.kernel.org/stable/c/c6f6f2444bdbe0079e41914a35081530d0409963

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.