Use-after-free in Linux kernel block

1) Use-after-free

EUVDB-ID: #VU104426

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-49412

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the bfq_setup_merge() function in block/bfq-iosched.c. A local user can escalate privileges on the system.

Mitigation

Install update from vendor's website.

Vulnerable software versions

Linux kernel: All versions

CPE2.3

• cpe:2.3:o:linux_foundation:linux_kernel:*:*:*:*:*:*:*:*

External links

https://git.kernel.org/stable/c/5ee21edaed09e6b25f2c007b3f326752bc89bacf
https://git.kernel.org/stable/c/7d172b9dc913e161d8ff88770eea01701ff553de
https://git.kernel.org/stable/c/8abc8763b11c35e03cc91d59fd0cd28d39f88ca9
https://git.kernel.org/stable/c/97be7d13fbd4001eeab49b1be6399f23a8c66160
https://git.kernel.org/stable/c/a16c65cca7d2c7ff965fdd3adc8df2156529caf1
https://git.kernel.org/stable/c/c1cee4ab36acef271be9101590756ed0c0c374d9

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.