Use-after-free in Linux kernel sof intel

1) Use-after-free

EUVDB-ID: #VU104463

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-49268

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the cl_stream_prepare() function in sound/soc/sof/intel/hda-loader.c. A local user can escalate privileges on the system.

Mitigation

Install update from vendor's website.

Vulnerable software versions

Linux kernel: All versions

CPE2.3

• cpe:2.3:o:linux_foundation:linux_kernel:*:*:*:*:*:*:*:*

External links

https://git.kernel.org/stable/c/01df5f7627f1624d6bb0b8c0870a569b32adfbf8
https://git.kernel.org/stable/c/09eca322d4118dc26570ca6100fa34e59e5a5143
https://git.kernel.org/stable/c/0c307349fe060971625b856c92f0361b8ea9a120
https://git.kernel.org/stable/c/67f7bd9ff9079c1ee2de58e024fb582905c74c16
https://git.kernel.org/stable/c/b6094744e261083d3790c3def770ebf5060d383b
https://git.kernel.org/stable/c/b7fb0ae09009d076964afe4c1a2bde1ee2bd88a9

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.