Use-after-free in Linux kernel rxrpc

1) Use-after-free

EUVDB-ID: #VU104473

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-49087

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the rxrpc_exit_net() function in net/rxrpc/net_ns.c. A local user can escalate privileges on the system.

Mitigation

Install update from vendor's website.

Vulnerable software versions

Linux kernel: All versions

CPE2.3

• cpe:2.3:o:linux_foundation:linux_kernel:*:*:*:*:*:*:*:*

External links

https://git.kernel.org/stable/c/08ff0e74fab517dbc44e11b8bc683dd4ecc65950
https://git.kernel.org/stable/c/1946014ca3b19be9e485e780e862c375c6f98bad
https://git.kernel.org/stable/c/41024a40f6c793abbb916a857f18fb009f07464c
https://git.kernel.org/stable/c/571d8e1d154ca18f08dcb72b69318d36e10010a0
https://git.kernel.org/stable/c/7ee84d29f22de6f6c63fad6c54690517659862f1
https://git.kernel.org/stable/c/864297ee30727ae6233f80296b7fc91442620b05
https://git.kernel.org/stable/c/cd8aef1f30d1215648e4e6686cfb422004851429

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.