Memory leak in Linux kernel net wireguard driver

1) Memory leak

EUVDB-ID: #VU104384

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-49153

CWE-ID: CWE-401 - Missing release of memory after effective lifetime

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to memory leak within the rcu_read_unlock_bh() function in drivers/net/wireguard/socket.c. A local user can perform a denial of service (DoS) attack.

Mitigation

Install update from vendor's website.

Vulnerable software versions

Linux kernel: All versions

CPE2.3

• cpe:2.3:o:linux_foundation:linux_kernel:*:*:*:*:*:*:*:*

External links

https://git.kernel.org/stable/c/096f9d35cac0a0c95ffafc00db84786b665a4837
https://git.kernel.org/stable/c/0b19bcb753dbfb74710d12bb2761ec5ed706c726
https://git.kernel.org/stable/c/402991a9771587acc2947cf6c4d689c5397f2258
https://git.kernel.org/stable/c/bbbf962d9460194993ee1943a793a0a0af4a7fbf
https://git.kernel.org/stable/c/ebcc492f4ba14bae54b898f1016a37b4282558d1

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.