Improper locking in Linux kernel gadget function driver

1) Improper locking

EUVDB-ID: #VU96426

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-48926

CWE-ID: CWE-667 - Improper Locking

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper locking within the rndis_register(), rndis_free_response(), rndis_get_next_response() and rndis_add_response() functions in drivers/usb/gadget/function/rndis.c. A local user can perform a denial of service (DoS) attack.

Mitigation

Install update from vendor's website.

Vulnerable software versions

Linux kernel: All versions

CPE2.3

• cpe:2.3:o:linux_foundation:linux_kernel:*:*:*:*:*:*:*:*

External links

https://git.kernel.org/stable/c/9f5d8ba538ef81cd86ea587ca3f8c77e26bea405
https://git.kernel.org/stable/c/669c2b178956718407af5631ccbc61c24413f038
https://git.kernel.org/stable/c/9f688aadede6b862a0a898792b1a35421c93636f
https://git.kernel.org/stable/c/9ab652d41deab49848673c3dadb57ad338485376
https://git.kernel.org/stable/c/4ce247af3f30078d5b97554f1ae6200a0222c15a
https://git.kernel.org/stable/c/da514063440b53a27309a4528b726f92c3cfe56f
https://git.kernel.org/stable/c/33222d1571d7ce8c1c75f6b488f38968fa93d2d9
https://git.kernel.org/stable/c/aaaba1c86d04dac8e49bf508b492f81506257da3

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.